"""Tests for the cua-driver telemetry opt-in policy.

cua-driver ships anonymous PostHog telemetry ENABLED by default upstream.
Hermes disables it unless the user opts in via
``computer_use.cua_telemetry: true``. The policy is applied by injecting
``CUA_DRIVER_RS_TELEMETRY_ENABLED=0`` into every cua-driver child env.

These assert the behavior contract (default disables, opt-in leaves the var
untouched, config failure fails safe toward disabled), not specific config
snapshots.
"""

from unittest.mock import patch

from tools.computer_use import cua_backend


_VAR = "CUA_DRIVER_RS_TELEMETRY_ENABLED"


class TestTelemetryDisabledFlag:
    def test_default_config_disables(self):
        # cua_telemetry absent / False => telemetry disabled.
        with patch("hermes_cli.config.load_config", return_value={}):
            assert cua_backend._cua_telemetry_disabled() is True

    def test_explicit_false_disables(self):
        with patch("hermes_cli.config.load_config",
                   return_value={"computer_use": {"cua_telemetry": False}}):
            assert cua_backend._cua_telemetry_disabled() is True

    def test_opt_in_true_does_not_disable(self):
        with patch("hermes_cli.config.load_config",
                   return_value={"computer_use": {"cua_telemetry": True}}):
            assert cua_backend._cua_telemetry_disabled() is False

    def test_config_load_failure_fails_safe(self):
        # Unreadable config => default to disabling telemetry (privacy-safe).
        with patch("hermes_cli.config.load_config", side_effect=RuntimeError("boom")):
            assert cua_backend._cua_telemetry_disabled() is True

    def test_missing_section_disables(self):
        with patch("hermes_cli.config.load_config", return_value={"other": {}}):
            assert cua_backend._cua_telemetry_disabled() is True


class TestChildEnv:
    def test_disabled_injects_var_zero(self):
        with patch.object(cua_backend, "_cua_telemetry_disabled", return_value=True):
            env = cua_backend.cua_driver_child_env({"PATH": "/usr/bin"})
            assert env[_VAR] == "0"
            # base env is preserved
            assert env["PATH"] == "/usr/bin"

    def test_opt_in_leaves_var_untouched(self):
        # When the user opts in, we must NOT set the var — the driver uses its
        # own default. If the base env already has a value, it is preserved.
        with patch.object(cua_backend, "_cua_telemetry_disabled", return_value=False):
            env = cua_backend.cua_driver_child_env({"PATH": "/usr/bin"})
            assert _VAR not in env

    def test_opt_in_preserves_user_set_var(self):
        with patch.object(cua_backend, "_cua_telemetry_disabled", return_value=False):
            env = cua_backend.cua_driver_child_env({_VAR: "1", "PATH": "/usr/bin"})
            # user opted in and explicitly set it — don't clobber.
            assert env[_VAR] == "1"

    def test_disabled_overrides_inherited_enabled(self):
        # Even if the parent process had telemetry enabled, the default policy
        # forces it off in the child.
        with patch.object(cua_backend, "_cua_telemetry_disabled", return_value=True):
            env = cua_backend.cua_driver_child_env({_VAR: "1"})
            assert env[_VAR] == "0"

    def test_defaults_to_os_environ_when_no_base(self):
        with patch.object(cua_backend, "_cua_telemetry_disabled", return_value=True), \
             patch.dict("os.environ", {"SOME_MARKER": "yes"}, clear=False):
            env = cua_backend.cua_driver_child_env()
            assert env.get("SOME_MARKER") == "yes"
            assert env[_VAR] == "0"