"""Gateway enroll: secondary-multiplex-profile warning for relay routing stamps.

``hermes gateway enroll --connector-url/--wake-url`` persists GATEWAY_RELAY_URL /
GATEWAY_RELAY_WAKE_URL into the active profile's .env. Those are process-global
deployment stamps (agent/secret_scope.py): a multiplexed gateway reads them from
the process environment only, never from a secondary profile's isolated secret
scope — so an enroll run from a secondary profile must WARN that the written
URLs will not activate from there (sol-reviewer round-4: the first cut read
``multiplex_profiles`` from the SECONDARY profile's config.yaml, where it never
lives, and the warning silently never fired in the real topology).

The topology decision is owned by the DEFAULT root: path relationship to
``<default_root>/profiles/`` plus the default root's config.yaml (or the
GATEWAY_MULTIPLEX_PROFILES env override).
"""

from __future__ import annotations

import io
from contextlib import redirect_stdout

import pytest

import hermes_constants
from hermes_cli.gateway_enroll import _warn_if_secondary_multiplex_profile


@pytest.fixture()
def topology(tmp_path, monkeypatch):
    """Standard multiplex layout: default root + one secondary profile."""
    root = tmp_path / "root"
    (root / "profiles" / "alice").mkdir(parents=True)
    monkeypatch.setattr(hermes_constants, "get_default_hermes_root", lambda: root)
    monkeypatch.delenv("GATEWAY_MULTIPLEX_PROFILES", raising=False)
    return root


def _run() -> tuple[bool, str]:
    buf = io.StringIO()
    with redirect_stdout(buf):
        fired = _warn_if_secondary_multiplex_profile()
    return fired, buf.getvalue()


def test_fires_for_secondary_when_default_root_has_multiplex_on(topology, monkeypatch):
    """The regression case: flag in the DEFAULT root's config.yaml, absent from
    the secondary profile's own config — the warning must still fire."""
    (topology / "config.yaml").write_text(
        "gateway:\n  multiplex_profiles: true\n", encoding="utf-8"
    )
    monkeypatch.setenv("HERMES_HOME", str(topology / "profiles" / "alice"))

    fired, _ = _run()

    assert fired is True


def test_the_retired_opt_out_still_warns_a_secondary(topology, monkeypatch):
    """``gateway.multiplex_profiles: false`` is retired: the gateway multiplexes anyway, so a
    secondary IS served by the default listener and must still be told its relay URLs are
    process-level. Staying silent here made this surface contradict the running gateway."""
    (topology / "config.yaml").write_text(
        "gateway:\n  multiplex_profiles: false\n", encoding="utf-8"
    )
    monkeypatch.setenv("HERMES_HOME", str(topology / "profiles" / "alice"))

    fired, _ = _run()

    assert fired is True


def test_silent_for_default_profile_even_with_multiplex_on(topology, monkeypatch):
    (topology / "config.yaml").write_text(
        "gateway:\n  multiplex_profiles: true\n", encoding="utf-8"
    )
    monkeypatch.setenv("HERMES_HOME", str(topology))

    fired, _ = _run()

    assert fired is False


def test_env_override_forces_multiplex_on_without_config_flag(topology, monkeypatch):
    (topology / "config.yaml").write_text("{}\n", encoding="utf-8")
    monkeypatch.setenv("HERMES_HOME", str(topology / "profiles" / "alice"))
    monkeypatch.setenv("GATEWAY_MULTIPLEX_PROFILES", "true")

    fired, _ = _run()

    assert fired is True


def test_the_env_override_is_retired_too(topology, monkeypatch):
    """``GATEWAY_MULTIPLEX_PROFILES=false`` is the same retired opt-out by another spelling."""
    (topology / "config.yaml").write_text(
        "gateway:\n  multiplex_profiles: true\n", encoding="utf-8"
    )
    monkeypatch.setenv("HERMES_HOME", str(topology / "profiles" / "alice"))
    monkeypatch.setenv("GATEWAY_MULTIPLEX_PROFILES", "false")

    fired, _ = _run()

    assert fired is True


def test_silent_for_unrelated_dir_named_profiles(topology, tmp_path, monkeypatch):
    """A directory whose parent happens to be named 'profiles' but is OUTSIDE
    the default root is not a secondary profile (sol-reviewer round-4 MINOR:
    name-based heuristics false-positive on unrelated layouts)."""
    (topology / "config.yaml").write_text(
        "gateway:\n  multiplex_profiles: true\n", encoding="utf-8"
    )
    other = tmp_path / "elsewhere" / "profiles" / "x"
    other.mkdir(parents=True)
    monkeypatch.setenv("HERMES_HOME", str(other))

    fired, _ = _run()

    assert fired is False