from __future__ import annotations

import os
import subprocess
from pathlib import Path


LAUNCHER = (
    Path(__file__).parents[1] / "scripts" / "run-mealie-mcp-read-only-for-buzz"
)


def _fake_uv(tmp_path: Path) -> Path:
    executable = tmp_path / "fake-uv"
    executable.write_text(
        "#!/usr/bin/env bash\n"
        "printf '%s\\n' \"${MEALIE_API_TOKEN}|${MEALIE_BASE_URL}|"
        "${MEALIE_USER_AGENT}|${UNRELATED_SECRET-unset}|$*\"\n",
        encoding="utf-8",
    )
    executable.chmod(0o755)
    return executable


def test_launcher_reads_only_mealie_values_and_clears_unrelated_secrets(
    tmp_path: Path,
) -> None:
    env_file = tmp_path / "hermes.env"
    env_file.write_text(
        "OTHER_PROVIDER_TOKEN=must-not-leak\n"
        "MEALIE_API_TOKEN='test-token'\n"
        "MEALIE_BASE_URL=https://mealie.example\n"
        'MEALIE_USER_AGENT="Test-Agent/1.0"\n',
        encoding="utf-8",
    )
    env = {
        **os.environ,
        "MEALIE_ENV_FILE": str(env_file),
        "MEALIE_MCP_REPO_DIR": "/tmp/test-repo",
        "MEALIE_UV_BIN": str(_fake_uv(tmp_path)),
        "UNRELATED_SECRET": "must-not-leak",
    }

    result = subprocess.run(
        [str(LAUNCHER)],
        check=False,
        capture_output=True,
        text=True,
        env=env,
    )

    assert result.returncode == 0
    assert result.stdout.strip() == (
        "test-token|https://mealie.example|Test-Agent/1.0|unset|"
        "--directory /tmp/test-repo run mealie-mcp-read-only"
    )
    assert "must-not-leak" not in result.stdout


def test_launcher_fails_without_mealie_token(tmp_path: Path) -> None:
    env_file = tmp_path / "empty.env"
    env_file.write_text("MEALIE_BASE_URL=https://mealie.example\n", encoding="utf-8")
    env = {
        "HOME": str(tmp_path),
        "PATH": os.environ["PATH"],
        "MEALIE_ENV_FILE": str(env_file),
        "MEALIE_UV_BIN": str(_fake_uv(tmp_path)),
    }

    result = subprocess.run(
        [str(LAUNCHER)],
        check=False,
        capture_output=True,
        text=True,
        env=env,
    )

    assert result.returncode == 1
    assert "MEALIE_API_TOKEN is not set" in result.stderr