"""司命决策器测试：风险等级 × 权限策略 × 是否确认 的决策矩阵，以及策略字典加载。"""

from __future__ import annotations

from app.modules.safety.governor import (
    PermissionPolicy,
    SafetyDecision,
    SafetyGovernor,
    ToolPolicy,
)


def test_low_risk_defaults_to_allow() -> None:
    governor = SafetyGovernor()
    result = governor.evaluate(tool="calc", risk_level="L1")
    assert result.decision is SafetyDecision.allow


def test_medium_risk_unconfirmed_asks() -> None:
    governor = SafetyGovernor()
    result = governor.evaluate(tool="x", risk_level="L2")
    assert result.decision is SafetyDecision.ask


def test_confirmed_becomes_allow() -> None:
    governor = SafetyGovernor()
    result = governor.evaluate(tool="x", risk_level="L3", confirmed=True)
    assert result.decision is SafetyDecision.allow


def test_l4_always_denied() -> None:
    governor = SafetyGovernor()
    result = governor.evaluate(tool="x", risk_level="L4")
    assert result.decision is SafetyDecision.deny


def test_forbidden_policy_denied() -> None:
    governor = SafetyGovernor(
        {"pay": ToolPolicy(risk_level="L3", permission_policy=PermissionPolicy.forbidden)}
    )
    result = governor.evaluate(tool="pay", risk_level="L3")
    assert result.decision is SafetyDecision.deny
    assert result.policy is PermissionPolicy.forbidden


def test_explicit_tool_policy_overrides_default() -> None:
    governor = SafetyGovernor(
        {"read": ToolPolicy(risk_level="L2", permission_policy=PermissionPolicy.allow)}
    )
    result = governor.evaluate(tool="read")
    assert result.decision is SafetyDecision.allow


def test_from_policy_dict_loads_policies() -> None:
    governor = SafetyGovernor.from_policy_dict(
        {"tools": {"custom": {"risk_level": "L2", "permission_policy": "allow"}}}
    )
    result = governor.evaluate(tool="custom")
    assert result.decision is SafetyDecision.allow


def test_from_policy_dict_empty_returns_default() -> None:
    governor = SafetyGovernor.from_policy_dict({})
    # 空 dict → 空 Governor，未列工具按 risk 推导：L2 → ask
    result = governor.evaluate(tool="x", risk_level="L2")
    assert result.decision is SafetyDecision.ask