"""Tests unitaires des helpers de logging PII-safe du client Léa (agent_v1).

Assainissement des logs à la source : on ne logge jamais le contenu brut
(titres de fenêtre, noms de workflow, chemins, métadonnées sensibles). On le
remplace par un hash court stable, une longueur, ou un dict filtré.

Branche feat/push-log-dgx — DETTE-020 (assainissement PII des logs, brique 4).
"""

from __future__ import annotations

import re
import sys
from pathlib import Path

_ROOT = str(Path(__file__).resolve().parents[2])
if _ROOT not in sys.path:
    sys.path.insert(0, _ROOT)

_HEX8 = re.compile(r"^[0-9a-f]{8}$")


def test_title_hash_is_short_stable_hex():
    from agent_v0.agent_v1.core.log_safe import _title_hash

    h = _title_hash("Dossier MOREL Catherine")
    assert _HEX8.match(h), f"attendu 8 hex, obtenu {h!r}"
    assert h == _title_hash("Dossier MOREL Catherine")  # déterministe


def test_title_hash_never_reveals_raw_title():
    """Propriété PII centrale : le hash ne contient jamais le contenu brut."""
    from agent_v0.agent_v1.core.log_safe import _title_hash

    title = "Dossier MOREL Catherine"
    h = _title_hash(title)
    assert title not in h
    assert "MOREL" not in h


def test_title_hash_distinguishes_different_titles():
    from agent_v0.agent_v1.core.log_safe import _title_hash

    assert _title_hash("popup A") != _title_hash("popup B")


def test_title_hash_handles_empty_and_non_ascii():
    from agent_v0.agent_v1.core.log_safe import _title_hash

    assert _HEX8.match(_title_hash(""))
    assert _HEX8.match(_title_hash("Éléonore — café ☕"))


def test_sanitize_metadata_drops_pii_keys_keeps_technical():
    from agent_v0.agent_v1.core.log_safe import _sanitize_metadata

    meta = {
        "resolution": "1920x1080", "dpi": 96, "theme": "dark",
        "title": "Dossier Dupont", "active_window": "Medicare", "window_title": "x",
    }
    safe = _sanitize_metadata(meta)

    assert safe == {"resolution": "1920x1080", "dpi": 96, "theme": "dark"}
    assert meta.get("title") == "Dossier Dupont"  # original non muté


def test_path_ext_returns_extension_only():
    from agent_v0.agent_v1.core.log_safe import _path_ext

    assert _path_ext("/home/tim/Dossier Dupont 1980.png") == ".png"
    assert "Dupont" not in _path_ext("/x/Dupont.png")
    assert _path_ext("") == ""
    assert _path_ext("/no/ext/here") == ""