"""A TestTemplate/TemplateSuggestion's mitre_technique_id must correspond
to a real, already-synced MITRE ATT&CK technique — free text or a typo'd
ID would otherwise create an orphaned template invisible to technique
lookups and coverage reporting.
"""

import pytest


@pytest.fixture
def technique(api, auth_headers):
    resp = api(
        "post", "/api/v1/techniques", auth_headers,
        json={"mitre_id": "T1059.500", "name": "Command Line MITRE Validation"},
    )
    assert resp.status_code == 201, resp.text
    return resp.json()["id"]


class TestTemplateCreateValidation:
    def test_create_template_rejects_unknown_mitre_id(self, api, red_lead_headers, technique):
        resp = api(
            "post", "/api/v1/test-templates", red_lead_headers,
            json={"mitre_technique_id": "T9999.999", "name": "Bogus template"},
        )
        assert resp.status_code == 400
        assert "T9999.999" in resp.text

    def test_create_template_accepts_known_mitre_id(self, api, red_lead_headers, technique):
        resp = api(
            "post", "/api/v1/test-templates", red_lead_headers,
            json={"mitre_technique_id": "T1059.500", "name": "Valid template"},
        )
        assert resp.status_code == 201, resp.text

    def test_update_template_rejects_unknown_mitre_id(self, api, red_lead_headers, technique):
        created = api(
            "post", "/api/v1/test-templates", red_lead_headers,
            json={"mitre_technique_id": "T1059.500", "name": "Will be edited"},
        )
        template_id = created.json()["id"]

        resp = api(
            "patch", f"/api/v1/test-templates/{template_id}", red_lead_headers,
            json={"mitre_technique_id": "T0000.000", "name": "Will be edited"},
        )
        assert resp.status_code == 400


class TestTemplateSuggestionValidation:
    def test_propose_template_rejects_unknown_mitre_id(self, api, red_tech_headers, technique):
        resp = api(
            "post", "/api/v1/template-suggestions", red_tech_headers,
            json={"mitre_technique_id": "T8888.888", "name": "Bogus proposal"},
        )
        assert resp.status_code == 400

    def test_propose_template_accepts_known_mitre_id(self, api, red_tech_headers, technique):
        resp = api(
            "post", "/api/v1/template-suggestions", red_tech_headers,
            json={"mitre_technique_id": "T1059.500", "name": "Valid proposal"},
        )
        assert resp.status_code == 201, resp.text

    def test_approve_suggestion_with_edited_unknown_mitre_id_rejected(
        self, api, red_tech_headers, red_lead_headers, technique,
    ):
        created = api(
            "post", "/api/v1/template-suggestions", red_tech_headers,
            json={"mitre_technique_id": "T1059.500", "name": "Valid proposal"},
        )
        suggestion_id = created.json()["id"]

        resp = api(
            "post", f"/api/v1/template-suggestions/{suggestion_id}/approve", red_lead_headers,
            json={"mitre_technique_id": "T7777.777"},
        )
        assert resp.status_code == 400