"""Tests for the internal no_proxy injection (issue #1160)."""

import os

import pytest

from open_notebook.utils.proxy import (
    INTERNAL_NO_PROXY_HOSTS,
    ensure_internal_no_proxy,
)

_PROXY_VARS = ("no_proxy", "NO_PROXY")
_DB_VARS = ("SURREAL_URL", "SURREAL_ADDRESS")


@pytest.fixture(autouse=True)
def _clean_proxy_env(monkeypatch):
    """Ensure each test starts with the proxy / DB-host vars unset."""
    for var in (*_PROXY_VARS, *_DB_VARS):
        monkeypatch.delenv(var, raising=False)
    yield


def test_injects_internal_hosts_when_unset():
    ensure_internal_no_proxy()
    for var in _PROXY_VARS:
        value = os.environ[var]
        for host in INTERNAL_NO_PROXY_HOSTS:
            assert host in value.split(",")


def test_preserves_user_value(monkeypatch):
    monkeypatch.setenv("NO_PROXY", "example.com,10.0.0.5")
    ensure_internal_no_proxy()
    entries = os.environ["NO_PROXY"].split(",")
    # User entries kept, in their original order and at the front.
    assert entries[:2] == ["example.com", "10.0.0.5"]
    # Internal hosts appended.
    for host in INTERNAL_NO_PROXY_HOSTS:
        assert host in entries


def test_does_not_duplicate_existing_hosts(monkeypatch):
    monkeypatch.setenv("NO_PROXY", "surrealdb,example.com")
    ensure_internal_no_proxy()
    entries = os.environ["NO_PROXY"].split(",")
    assert entries.count("surrealdb") == 1


def test_lowercase_and_uppercase_kept_in_sync(monkeypatch):
    monkeypatch.setenv("no_proxy", "example.com")
    ensure_internal_no_proxy()
    assert os.environ["no_proxy"] == os.environ["NO_PROXY"]


def test_merges_both_case_variants(monkeypatch):
    monkeypatch.setenv("no_proxy", "lower.example.com")
    monkeypatch.setenv("NO_PROXY", "UPPER.example.com")
    ensure_internal_no_proxy()
    combined = os.environ["no_proxy"]
    assert "lower.example.com" in combined
    assert "UPPER.example.com" in combined
    # De-duped case-insensitively, so no crash and both variants match.
    assert os.environ["no_proxy"] == os.environ["NO_PROXY"]


def test_idempotent(monkeypatch):
    monkeypatch.setenv("NO_PROXY", "example.com")
    ensure_internal_no_proxy()
    first = os.environ["NO_PROXY"]
    ensure_internal_no_proxy()
    assert os.environ["NO_PROXY"] == first


def test_wildcard_preserved(monkeypatch):
    """NO_PROXY=* bypasses every host; it must not be narrowed to a list."""
    monkeypatch.setenv("NO_PROXY", "*")
    ensure_internal_no_proxy()
    assert os.environ["NO_PROXY"] == "*"


def test_wildcard_among_entries_preserved(monkeypatch):
    """A bare * among other entries is still terminal - leave config as-is."""
    monkeypatch.setenv("NO_PROXY", "example.com,*")
    ensure_internal_no_proxy()
    assert os.environ["NO_PROXY"] == "example.com,*"


def test_custom_surreal_url_host_included(monkeypatch):
    monkeypatch.setenv("SURREAL_URL", "ws://db.internal.corp:8000/rpc")
    ensure_internal_no_proxy()
    entries = os.environ["NO_PROXY"].split(",")
    assert "db.internal.corp" in entries
    # Defaults still present.
    for host in INTERNAL_NO_PROXY_HOSTS:
        assert host in entries


def test_custom_surreal_address_host_included(monkeypatch):
    # Legacy address form (host:port, no scheme).
    monkeypatch.setenv("SURREAL_ADDRESS", "10.1.2.3:8000")
    ensure_internal_no_proxy()
    assert "10.1.2.3" in os.environ["NO_PROXY"].split(",")


def test_surreal_url_takes_precedence_over_address(monkeypatch):
    monkeypatch.setenv("SURREAL_URL", "ws://from-url:8000/rpc")
    monkeypatch.setenv("SURREAL_ADDRESS", "from-address")
    ensure_internal_no_proxy()
    entries = os.environ["NO_PROXY"].split(",")
    assert "from-url" in entries
    assert "from-address" not in entries


def test_malformed_surreal_url_falls_back_to_defaults(monkeypatch):
    monkeypatch.setenv("SURREAL_URL", "::not a url::")
    ensure_internal_no_proxy()
    entries = os.environ["NO_PROXY"].split(",")
    # No crash; the four defaults are still injected.
    for host in INTERNAL_NO_PROXY_HOSTS:
        assert host in entries


def test_custom_host_not_duplicated_when_default(monkeypatch):
    monkeypatch.setenv("SURREAL_URL", "ws://surrealdb:8000/rpc")
    ensure_internal_no_proxy()
    assert os.environ["NO_PROXY"].split(",").count("surrealdb") == 1


def test_bypass_recognized_by_urllib(monkeypatch):
    """The injected hosts are actually honored by urllib.request.proxy_bypass,
    which is what websockets calls to decide whether to tunnel."""
    import urllib.request

    monkeypatch.setenv("HTTP_PROXY", "http://proxy.corp.com:8080")
    ensure_internal_no_proxy()
    assert urllib.request.proxy_bypass("surrealdb:8000")
    assert urllib.request.proxy_bypass("host.docker.internal:8018")