"""WinRM command builder, bundle push and CLIXML error parsing tests."""

from pathlib import Path
from unittest.mock import patch

from app.services.winrm_connect import (
    RDP_BUNDLE_REQUIRED,
    RDP_REMOTE_STAGING,
    WinRmCmdResult,
    _clixml_to_plain,
    _custom_deploy_body,
    _deploy_from_staging_body,
    _prepare_staging_body,
    _winrm_failure_detail,
    _write_file_chunk_body,
    run_winrm_rdp_monitor_update,
)


def test_prepare_staging_recreates_remote_dir():
    script = _prepare_staging_body(RDP_REMOTE_STAGING)
    assert "Remove-Item" in script
    assert "_sac_staging" in script


def test_deploy_from_staging_runs_local_bundle():
    script = _deploy_from_staging_body(RDP_REMOTE_STAGING)
    assert "-SourceShareRoot" in script
    assert "Deploy-LoginMonitor.ps1" in script


def test_write_file_chunk_body_supports_append():
    first = _write_file_chunk_body(r"C:\temp\a.ps1", "YQ==", append=False)
    second = _write_file_chunk_body(r"C:\temp\a.ps1", "Yg==", append=True)
    assert "WriteAllBytes" in first
    assert "Append" in second


def test_custom_deploy_script_uses_literal_path():
    script = _custom_deploy_body(r"C:\tmp\Deploy-LoginMonitor.ps1")
    assert r"C:\tmp\Deploy-LoginMonitor.ps1" in script
    assert "Test-Path -LiteralPath" in script


def test_custom_deploy_script_escapes_single_quotes():
    script = _custom_deploy_body(r"C:\Users\O'Brien\Deploy-LoginMonitor.ps1")
    assert "O''Brien" in script


def test_run_winrm_rdp_monitor_update_pushes_bundle_from_sac_git(tmp_path: Path):
    repo = tmp_path / "repo"
    repo.mkdir()
    for name in RDP_BUNDLE_REQUIRED:
        (repo / name).write_text(f"content-{name}", encoding="utf-8")
    (repo / "Sac-Client.ps1").write_text("Sac client", encoding="utf-8")

    calls: list[str] = []

    def fake_run_ps(*, script: str, **kwargs) -> WinRmCmdResult:
        calls.append(script)
        if "Remove-Item" in script:
            return WinRmCmdResult(ok=True, message="staging ok", target="pc", stdout="Staging ready")
        if "Deploy-LoginMonitor.ps1 missing" in script or "& $deploy" in script:
            return WinRmCmdResult(
                ok=True,
                message="WinRM OK (pc), exit 0",
                target="pc",
                stdout="deployed 1.2.3",
                exit_code=0,
            )
        return WinRmCmdResult(ok=True, message="chunk ok", target="pc", exit_code=0)

    with (
        patch("app.services.winrm_connect._fetch_rdp_bundle_dir", return_value=repo),
        patch("app.services.winrm_connect.run_winrm_ps", side_effect=fake_run_ps),
    ):
        result = run_winrm_rdp_monitor_update(
            target="pc",
            user="B26\\admin",
            password="pw",
            repo_url="https://git.example.com/RDP-login-monitor.git",
        )

    assert result.ok is True
    assert "SAC pushed" in result.stdout
    assert any("WriteAllBytes" in call or "Append" in call for call in calls)
    assert "git.exe" not in "\n".join(calls)


def test_winrm_failure_detail_extracts_message_from_clixml():
    clixml = (
        "#< CLIXML\n"
        '<Objs><Obj><MS><S N="Message">Preparing modules for first use.</S>'
        '<S N="Message">Deploy-LoginMonitor.ps1 not found on client PC</S></MS></Obj></Objs>'
    )
    detail = _winrm_failure_detail("", clixml, 1)
    assert detail == "Deploy-LoginMonitor.ps1 not found on client PC"


def test_winrm_failure_detail_prefers_plain_stderr():
    detail = _winrm_failure_detail("", "Access is denied", 5)
    assert detail == "Access is denied"


def test_winrm_failure_detail_never_returns_raw_clixml_progress():
    clixml = (
        "#< CLIXML <Objs Version=\"1.1.0.1\">"
        '<Obj S="progress"><MS><PR N="Record"><AV>Preparing modules for first use.</AV></PR></MS></Obj>'
    )
    detail = _winrm_failure_detail("", clixml, 1)
    assert "#< CLIXML" not in detail
    assert "exit code" in detail.lower()


def test_clixml_to_plain_strips_progress_only_blob():
    clixml = "#< CLIXML <Objs><Obj S=\"progress\"><AV>Preparing modules for first use.</AV></Obj></Objs>"
    assert _clixml_to_plain(clixml) == ""