import { describe, it, expect, beforeEach, afterEach, jest } from '@jest/globals';
import { ConfigManager } from '../../src/config/config';

// Mock logger to avoid console noise during tests
jest.mock('../../src/utils/logger');

describe('ConfigManager - Guardrails Config', () => {
  let originalEnv: NodeJS.ProcessEnv;

  beforeEach(() => {
    originalEnv = { ...process.env };
    // Clear guardrails env vars
    Object.keys(process.env).forEach((key) => {
      if (key.startsWith('GUARDRAILS_')) delete process.env[key];
    });
    // Ensure at least one provider exists
    process.env.OPENAI_API_KEY = 'test-key';
  });

  afterEach(() => {
    process.env = originalEnv;
  });

  describe('basic guardrails config', () => {
    it('should not have guardrails by default', () => {
      const configManager = new ConfigManager();
      expect(configManager.getConfig().guardrails).toBeUndefined();
    });

    it('should enable guardrails when GUARDRAILS_ENABLED=true', () => {
      process.env.GUARDRAILS_ENABLED = 'true';

      const configManager = new ConfigManager();
      expect(configManager.getConfig().guardrails?.enabled).toBe(true);
    });

    it('should disable guardrails when GUARDRAILS_ENABLED=false', () => {
      process.env.GUARDRAILS_ENABLED = 'false';

      const configManager = new ConfigManager();
      expect(configManager.getConfig().guardrails).toBeUndefined();
    });

    it('should set log_violations from environment', () => {
      process.env.GUARDRAILS_ENABLED = 'true';
      process.env.GUARDRAILS_LOG_VIOLATIONS = 'false';

      const configManager = new ConfigManager();
      expect(configManager.getConfig().guardrails?.log_violations).toBe(false);
    });

    it('should set log_modifications from environment', () => {
      process.env.GUARDRAILS_ENABLED = 'true';
      process.env.GUARDRAILS_LOG_MODIFICATIONS = 'true';

      const configManager = new ConfigManager();
      expect(configManager.getConfig().guardrails?.log_modifications).toBe(true);
    });

    it('should set fail_open from environment', () => {
      process.env.GUARDRAILS_ENABLED = 'true';
      process.env.GUARDRAILS_FAIL_OPEN = 'true';

      const configManager = new ConfigManager();
      expect(configManager.getConfig().guardrails?.fail_open).toBe(true);
    });
  });

  describe('rate limiter config', () => {
    it('should configure rate limiter from environment', () => {
      process.env.GUARDRAILS_RATE_LIMITER_ENABLED = 'true';
      process.env.GUARDRAILS_RATE_LIMITER_REQUESTS_PER_MINUTE = '30';
      process.env.GUARDRAILS_RATE_LIMITER_REQUESTS_PER_HOUR = '500';

      const configManager = new ConfigManager();
      const config = configManager.getConfig();

      expect(config.guardrails?.enabled).toBe(true);
      expect(config.guardrails?.plugins?.rate_limiter?.enabled).toBe(true);
      expect(config.guardrails?.plugins?.rate_limiter?.requests_per_minute).toBe(30);
      expect(config.guardrails?.plugins?.rate_limiter?.requests_per_hour).toBe(500);
    });

    it('should configure per_provider setting', () => {
      process.env.GUARDRAILS_RATE_LIMITER_ENABLED = 'true';
      process.env.GUARDRAILS_RATE_LIMITER_PER_PROVIDER = 'true';

      const configManager = new ConfigManager();
      expect(configManager.getConfig().guardrails?.plugins?.rate_limiter?.per_provider).toBe(true);
    });

    it('should configure burst_allowance setting', () => {
      process.env.GUARDRAILS_RATE_LIMITER_ENABLED = 'true';
      process.env.GUARDRAILS_RATE_LIMITER_BURST_ALLOWANCE = '10';

      const configManager = new ConfigManager();
      expect(configManager.getConfig().guardrails?.plugins?.rate_limiter?.burst_allowance).toBe(10);
    });
  });

  describe('token limiter config', () => {
    it('should configure token limiter from environment', () => {
      process.env.GUARDRAILS_TOKEN_LIMITER_ENABLED = 'true';
      process.env.GUARDRAILS_TOKEN_LIMITER_MAX_INPUT_TOKENS = '4096';

      const configManager = new ConfigManager();
      const config = configManager.getConfig();

      expect(config.guardrails?.enabled).toBe(true);
      expect(config.guardrails?.plugins?.token_limiter?.enabled).toBe(true);
      expect(config.guardrails?.plugins?.token_limiter?.max_input_tokens).toBe(4096);
    });

    it('should configure max_output_tokens setting', () => {
      process.env.GUARDRAILS_TOKEN_LIMITER_ENABLED = 'true';
      process.env.GUARDRAILS_TOKEN_LIMITER_MAX_OUTPUT_TOKENS = '2048';

      const configManager = new ConfigManager();
      expect(configManager.getConfig().guardrails?.plugins?.token_limiter?.max_output_tokens).toBe(2048);
    });

    it('should configure warn_at_percentage setting', () => {
      process.env.GUARDRAILS_TOKEN_LIMITER_ENABLED = 'true';
      process.env.GUARDRAILS_TOKEN_LIMITER_WARN_AT_PERCENTAGE = '90';

      const configManager = new ConfigManager();
      expect(configManager.getConfig().guardrails?.plugins?.token_limiter?.warn_at_percentage).toBe(90);
    });
  });

  describe('pattern blocker config', () => {
    it('should configure pattern blocker from environment', () => {
      process.env.GUARDRAILS_PATTERN_BLOCKER_ENABLED = 'true';
      process.env.GUARDRAILS_PATTERN_BLOCKER_PATTERNS = 'password,secret,api_key';

      const configManager = new ConfigManager();
      const config = configManager.getConfig();

      expect(config.guardrails?.enabled).toBe(true);
      expect(config.guardrails?.plugins?.pattern_blocker?.enabled).toBe(true);
      expect(config.guardrails?.plugins?.pattern_blocker?.blocked_patterns).toEqual([
        'password',
        'secret',
        'api_key',
      ]);
    });

    it('should configure regex patterns', () => {
      process.env.GUARDRAILS_PATTERN_BLOCKER_ENABLED = 'true';
      process.env.GUARDRAILS_PATTERN_BLOCKER_PATTERNS_REGEX = 'pass.*word,secret\\d+';

      const configManager = new ConfigManager();
      expect(configManager.getConfig().guardrails?.plugins?.pattern_blocker?.blocked_patterns_regex).toEqual([
        'pass.*word',
        'secret\\d+',
      ]);
    });

    it('should configure case_sensitive setting', () => {
      process.env.GUARDRAILS_PATTERN_BLOCKER_ENABLED = 'true';
      process.env.GUARDRAILS_PATTERN_BLOCKER_CASE_SENSITIVE = 'true';

      const configManager = new ConfigManager();
      expect(configManager.getConfig().guardrails?.plugins?.pattern_blocker?.case_sensitive).toBe(true);
    });

    it('should configure action_on_match setting', () => {
      process.env.GUARDRAILS_PATTERN_BLOCKER_ENABLED = 'true';
      process.env.GUARDRAILS_PATTERN_BLOCKER_ACTION = 'redact';

      const configManager = new ConfigManager();
      expect(configManager.getConfig().guardrails?.plugins?.pattern_blocker?.action_on_match).toBe('redact');
    });
  });

  describe('PII redactor config', () => {
    it('should configure PII redactor from environment', () => {
      process.env.GUARDRAILS_PII_REDACTOR_ENABLED = 'true';

      const configManager = new ConfigManager();
      const config = configManager.getConfig();

      expect(config.guardrails?.enabled).toBe(true);
      expect(config.guardrails?.plugins?.pii_redactor?.enabled).toBe(true);
    });

    it('should configure detection types', () => {
      process.env.GUARDRAILS_PII_REDACTOR_ENABLED = 'true';
      process.env.GUARDRAILS_PII_REDACTOR_DETECT_EMAILS = 'false';
      process.env.GUARDRAILS_PII_REDACTOR_DETECT_PHONES = 'true';
      process.env.GUARDRAILS_PII_REDACTOR_DETECT_SSN = 'false';
      process.env.GUARDRAILS_PII_REDACTOR_DETECT_API_KEYS = 'true';
      process.env.GUARDRAILS_PII_REDACTOR_DETECT_CREDIT_CARDS = 'false';
      process.env.GUARDRAILS_PII_REDACTOR_DETECT_IP_ADDRESSES = 'true';

      const configManager = new ConfigManager();
      const piiConfig = configManager.getConfig().guardrails?.plugins?.pii_redactor;

      expect(piiConfig?.detect_emails).toBe(false);
      expect(piiConfig?.detect_phones).toBe(true);
      expect(piiConfig?.detect_ssn).toBe(false);
      expect(piiConfig?.detect_api_keys).toBe(true);
      expect(piiConfig?.detect_credit_cards).toBe(false);
      expect(piiConfig?.detect_ip_addresses).toBe(true);
    });

    it('should configure allowlist', () => {
      process.env.GUARDRAILS_PII_REDACTOR_ENABLED = 'true';
      process.env.GUARDRAILS_PII_REDACTOR_ALLOWLIST = 'test@example.com,support@company.com';

      const configManager = new ConfigManager();
      expect(configManager.getConfig().guardrails?.plugins?.pii_redactor?.allowlist).toEqual([
        'test@example.com',
        'support@company.com',
      ]);
    });

    it('should configure allowlist_domains', () => {
      process.env.GUARDRAILS_PII_REDACTOR_ENABLED = 'true';
      process.env.GUARDRAILS_PII_REDACTOR_ALLOWLIST_DOMAINS = 'company.com,internal.org';

      const configManager = new ConfigManager();
      expect(configManager.getConfig().guardrails?.plugins?.pii_redactor?.allowlist_domains).toEqual([
        'company.com',
        'internal.org',
      ]);
    });

    it('should configure restore_on_response', () => {
      process.env.GUARDRAILS_PII_REDACTOR_ENABLED = 'true';
      process.env.GUARDRAILS_PII_REDACTOR_RESTORE_ON_RESPONSE = 'true';

      const configManager = new ConfigManager();
      expect(configManager.getConfig().guardrails?.plugins?.pii_redactor?.restore_on_response).toBe(true);
    });

    it('should configure log_detections', () => {
      process.env.GUARDRAILS_PII_REDACTOR_ENABLED = 'true';
      process.env.GUARDRAILS_PII_REDACTOR_LOG_DETECTIONS = 'false';

      const configManager = new ConfigManager();
      expect(configManager.getConfig().guardrails?.plugins?.pii_redactor?.log_detections).toBe(false);
    });
  });

  describe('auto-enable behavior', () => {
    it('should auto-enable guardrails when a plugin is enabled', () => {
      // Don't set GUARDRAILS_ENABLED, but enable a plugin
      process.env.GUARDRAILS_RATE_LIMITER_ENABLED = 'true';

      const configManager = new ConfigManager();
      expect(configManager.getConfig().guardrails?.enabled).toBe(true);
    });

    it('should auto-enable with multiple plugins', () => {
      process.env.GUARDRAILS_RATE_LIMITER_ENABLED = 'true';
      process.env.GUARDRAILS_PII_REDACTOR_ENABLED = 'true';

      const configManager = new ConfigManager();
      const config = configManager.getConfig();

      expect(config.guardrails?.enabled).toBe(true);
      expect(config.guardrails?.plugins?.rate_limiter?.enabled).toBe(true);
      expect(config.guardrails?.plugins?.pii_redactor?.enabled).toBe(true);
    });
  });
});