"""Exercise environment policy at the mount/perf/external-timer boundaries."""

import json

import os

from pathlib import Path

import subprocess

import sys

import tempfile

import unittest

from unittest.mock import patch

sys.path.insert(0, str(Path(__file__).resolve().parents[1] / "scripts"))

import mount_probe

import crosscheck_hyperfine

from oakbench import perf_loop

from oakbench.environment import ENV_ISOLATION_VERSION

class MeasurementEnvironmentPathsTest(unittest.TestCase):

    def test_real_mount_subprocess_sanitizes_without_claiming_isolated_home(self):

        with tempfile.TemporaryDirectory() as tmp:

            poison = {"HOME": tmp, "GIT_DIR": "/wrong/repo", "GIT_CONFIG_COUNT": "1",

                      "OAK_NO_UPDATE_CHECK": "0", "OAK_BENCH_ENV_ISOLATION_VERSION": ENV_ISOLATION_VERSION}

            with patch.dict(os.environ, poison):

                result = mount_probe.run_process([sys.executable, "-c",

                    "import os,json;print(json.dumps({k:os.environ.get(k) for k in "

                    "['HOME','GIT_DIR','GIT_CONFIG_COUNT','OAK_NO_UPDATE_CHECK','OAK_BENCH_ENV_ISOLATION_VERSION']}))"],

                    Path(tmp), 10, 0)

                meta = mount_probe.metadata("test", Path(tmp) / "spec", {}, None)

            observed = json.loads(result["stdout"])

            self.assertEqual(result["returncode"], 0)

            self.assertEqual(observed["HOME"], tmp)

            self.assertIsNone(observed["GIT_DIR"])

            self.assertIsNone(observed["GIT_CONFIG_COUNT"])

            self.assertEqual(observed["OAK_NO_UPDATE_CHECK"], "1")

            self.assertNotEqual(meta["env_isolation_version"], ENV_ISOLATION_VERSION)

            self.assertEqual(meta["env_isolation_version"], observed["OAK_BENCH_ENV_ISOLATION_VERSION"])

    def test_perf_loop_applies_policy_after_explicit_environment_merge(self):

        observed = []

        def run(command, **kwargs):

            observed.append(kwargs["env"])

            return subprocess.CompletedProcess(command, 0, stderr="")

        with patch("oakbench.perf_loop.subprocess.run", side_effect=run):

            samples = perf_loop.run_interleaved_commands(["oak", "status"], ["oak", "status"],

                cwd=Path.cwd(), pairs=20, env={"GIT_DIR": "/wrong/repo", "OAK_NO_UPDATE_CHECK": "0"})

        self.assertEqual(len(samples), 40)

        for env in observed:

            self.assertFalse("GIT_DIR" in env, "GIT_DIR leaked into measurement environment")

            self.assertEqual(env["OAK_NO_UPDATE_CHECK"], "1")

            self.assertNotEqual(env["OAK_BENCH_ENV_ISOLATION_VERSION"], ENV_ISOLATION_VERSION)

    def test_external_timer_direct_api_enforces_policy(self):

        def runner(command, **kwargs):

            env = kwargs["env"]

            self.assertFalse("GIT_DIR" in env, "GIT_DIR leaked into measurement environment")

            self.assertEqual(env["OAK_NO_UPDATE_CHECK"], "1")

            self.assertNotEqual(env["OAK_BENCH_ENV_ISOLATION_VERSION"], ENV_ISOLATION_VERSION)

            Path(command[command.index("--export-json") + 1]).write_text(json.dumps({"results": [{"median": .001}]}))

            return subprocess.CompletedProcess(command, 0, stdout="", stderr="")

        with patch("crosscheck_hyperfine.hyperfine_path", return_value="hyperfine"):

            crosscheck_hyperfine.run_hyperfine(["oak", "status"], cwd=Path.cwd(), runs=1, warmup=0,

                env={"GIT_DIR": "/wrong/repo", "OAK_NO_UPDATE_CHECK": "0"}, runner=runner)