import json

from pathlib import Path

from cti.pipeline import build_bundle, promote, run

def test_build_bundle_dedups_across_feeds(base_config):

    bundle = build_bundle(base_config)

    ips = [i for i in bundle.indicators if i.type == "ip" and i.value == "45.137.21.9"]

    assert len(ips) == 1

    assert set(ips[0].source.split(",")) >= {"threatfox", "feodo"}

def test_low_confidence_dropped(base_config):

    bundle = build_bundle(base_config)

    assert all(i.confidence >= 60 for i in bundle.indicators)

    assert not any(i.value == "20.50.13.7" for i in bundle.indicators)

def test_run_writes_candidate_and_email(base_config):

    result = run(base_config)

    candidate = Path(result["candidate_path"])

    assert (candidate / "manifest.json").exists()

    assert (candidate / "local_cti_rules.xml").exists()

    assert (candidate / "lists" / "cti-malicious-ip").exists()

    emails = list((Path(base_config["output_dir"]) / "emails").glob("*.html"))

    assert emails

    assert result["review_url"].startswith("http://localhost:8080/review/")

def test_promote_moves_to_active(base_config):

    result = run(base_config)

    output_dir = Path(base_config["output_dir"])

    promote(result["bundle_id"], output_dir)

    state = json.loads((output_dir / "active" / "state.json").read_text())

    assert state["bundle_id"] == result["bundle_id"]

    assert (output_dir / "active" / "local_cti_rules.xml").exists()

def test_diff_reflects_promotion(base_config):

    first = run(base_config)

    output_dir = Path(base_config["output_dir"])

    promote(first["bundle_id"], output_dir)

    second = run(base_config)

    assert second["diff"]["added"] == 0

    assert second["diff"]["unchanged"] == second["diff"]["total"]