"""Contexto Fiscal (Agent detail, ADMIN only): confirm/alter/clear one of the reduced set of real fiscal decisions
(icms_treatment/pis_cofins_profile/entry_scope). CSRF, RBAC and audit reuse the exact same mechanism already proven for
/agents/{id}/features; persistence reuses FiscalContextEntry, the same table blocker_resolution already writes to."""
from sqlalchemy import select

from central.app.models import AuditEvent, FiscalContextEntry, Installation, ProductEnrichment
from central.tests.test_control_panel_pages import _panel_client
from central.tests.test_rtc_security import _become, _post


def _company_key(client):
    with client._session_factory() as s:
        inst = s.scalars(select(Installation)).one()
        return (inst.company_code or inst.company_name or "").strip(), inst.tenant_id, inst.id


def test_fiscal_context_tab_lists_only_the_three_reduced_decisions_with_evidence():
    client, agent_id, _ = _panel_client()
    _become(client, "ADMIN")
    page = client.get(f"/agents/{agent_id}").text
    assert "Contexto Fiscal" in page
    for title in ("Tratamento padrão de ICMS", "Perfil de PIS/COFINS", "CFOP de entrada padrão"):
        assert title in page
    assert "487 de 521" in page   # real evidence shown, not a raw internal key name
    assert "<h3>Tratamento padrão de ICMS dos produtos comuns</h3>" in page  # human title heads the card; internal key only appears as a hidden form field


def test_fiscal_context_hidden_from_non_admin():
    client, agent_id, _ = _panel_client()
    _become(client, "PADRAO")
    page = client.get(f"/agents/{agent_id}").text
    assert "Contexto Fiscal" not in page


def test_confirming_a_decision_is_csrf_admin_and_audited_and_flags_reevaluation():
    client, agent_id, _ = _panel_client()
    company_key, tenant_id, installation_id = _company_key(client)
    with client._session_factory() as s:
        s.add(ProductEnrichment(tenant_id=tenant_id, installation_id=installation_id, product_code="P1", status="RESOLVED", ui_status="PRONTO_PARA_PREENCHER"))
        s.commit()
    _become(client, "PADRAO")
    assert _post(client, f"/agents/{agent_id}/fiscal-context", key="icms_treatment", value="TAXED", fc_action="confirm").status_code == 403
    _become(client, "ADMIN")
    assert client.post(f"/agents/{agent_id}/fiscal-context", data={"csrf_token": "bad", "key": "icms_treatment", "value": "TAXED", "fc_action": "confirm"}, follow_redirects=False).status_code in (400, 403)
    assert _post(client, f"/agents/{agent_id}/fiscal-context", key="icms_treatment", value="TAXED", fc_action="confirm").status_code == 303
    with client._session_factory() as s:
        entry = s.scalars(select(FiscalContextEntry).where(FiscalContextEntry.key == "icms_treatment")).one()
        assert entry.scope == "COMPANY" and entry.value == "TAXED" and entry.source == "OPERATOR"
        acts = [e.action for e in s.scalars(select(AuditEvent))]
        assert "FISCAL_CONTEXT_DECISION" in acts
        row = s.scalars(select(ProductEnrichment)).one()
        assert row.reevaluate is True   # existing products get a chance to pick up the new policy - never a silent no-op


def test_clearing_a_decision_deletes_the_entry_never_a_default_value():
    client, agent_id, _ = _panel_client()
    company_key, tenant_id, installation_id = _company_key(client)
    _become(client, "ADMIN")
    assert _post(client, f"/agents/{agent_id}/fiscal-context", key="icms_treatment", value="TAXED", fc_action="confirm").status_code == 303
    assert _post(client, f"/agents/{agent_id}/fiscal-context", key="icms_treatment", fc_action="clear").status_code == 303
    with client._session_factory() as s:
        assert s.scalars(select(FiscalContextEntry).where(FiscalContextEntry.key == "icms_treatment")).first() is None


def test_invalid_value_is_rejected_never_silently_stored():
    client, agent_id, _ = _panel_client()
    _become(client, "ADMIN")
    resp = client.post(f"/agents/{agent_id}/fiscal-context", data={"csrf_token": client.cookies.get("gti_csrf"), "key": "icms_treatment", "value": "NOT_A_REAL_TREATMENT", "fc_action": "confirm"}, follow_redirects=False)
    assert resp.status_code == 422
    with client._session_factory() as s:
        assert s.scalars(select(FiscalContextEntry)).first() is None


def test_unknown_key_is_refused():
    client, agent_id, _ = _panel_client()
    _become(client, "ADMIN")
    resp = client.post(f"/agents/{agent_id}/fiscal-context", data={"csrf_token": client.cookies.get("gti_csrf"), "key": "not_a_real_key", "value": "x", "fc_action": "confirm"}, follow_redirects=False)
    assert resp.status_code == 422