"""Unit tests for the lenient text-based tool-call parser.

Small models emit tool calls in several shapes that the native Ollama
tool_calls API doesn't recognise. The engine's ``_extract_text_tool_call``
must parse these so the model's compliance succeeds regardless of shape.

The gemma-native ``tool_code`` branch was removed in the evaluator-driven
loop refactor — the model is now responsible for producing a valid tool
call, and the evaluator / toolSearchTool path replaces the safety net.
"""

import pytest


def _extract(content: str, tool_name: str = "webSearch"):
    import jarvis.reply.engine as engine_mod
    assert hasattr(engine_mod, "_extract_text_tool_call"), (
        "Expose _extract_text_tool_call at module level for test coverage."
    )
    return engine_mod._extract_text_tool_call(content, {tool_name})


class TestCanonicalToolCallsArrayLiteral:
    """Form 1: `tool_calls: [...]` JSON array in content."""

    def test_extracts_name_and_string_args(self):
        content = (
            'tool_calls: [{"id": "call_1", "type": "function", '
            '"function": {"name": "webSearch", "arguments": "Possessor movie"}}]'
        )
        name, args, _ = _extract(content)
        assert name == "webSearch"
        assert args and isinstance(args, dict)

    def test_extracts_name_and_dict_args(self):
        content = (
            'tool_calls: [{"id": "call_1", "type": "function", '
            '"function": {"name": "webSearch", '
            '"arguments": {"search_query": "Piranesi book"}}}]'
        )
        name, args, _ = _extract(content)
        assert name == "webSearch"
        assert args.get("search_query") == "Piranesi book"


class TestMalformedCanonicalToolCallsLenientFallback:
    """Form 1b: small models emit almost-valid JSON that drops closing braces.

    Without the lenient fallback the raw line leaks as the reply.
    """

    def test_parses_despite_missing_closing_braces(self):
        content = (
            'tool_calls: [{"id": "call_1", "type": "function", '
            '"function": {"name": "getWeather", '
            '"arguments": "{\\"location\\": \\"Tbilisi, Georgia\\"}}"]'
        )
        name, args, _ = _extract(content, tool_name="getWeather")
        assert name == "getWeather"
        assert args.get("location") == "Tbilisi, Georgia"

    def test_lenient_fallback_rejects_unknown_tool_names(self):
        content = (
            'tool_calls: [{"id": "call_1", "type": "function", '
            '"function": {"name": "fileSystem_write", '
            '"arguments": "{\\"path\\": \\"/tmp/x\\"}}"]'
        )
        name, _args, _ = _extract(content, tool_name="webSearch")
        assert name is None


class TestSimplifiedColonForm:
    """Form 2: `toolName: key: value`."""

    def test_parses_tool_name_and_arg(self):
        content = "webSearch: search_query: Possessor movie"
        name, args, _ = _extract(content)
        assert name == "webSearch"
        assert args.get("search_query") == "Possessor movie"

    def test_rejects_unknown_tool_name(self):
        content = "Note: something: arbitrary prose"
        name, _args, _ = _extract(content)
        assert name is None


class TestColonFormWithJsonObjectValue:
    """Form 2b: `toolName: {json object}`.

    Field-captured from qwen2.5:3b (2026-06-12): the model emits the weather
    call as ``getWeather: {"location": "Seoul"}``. The whole JSON object must
    become the argument dict. Before the fix it was dumped into
    ``{"query": "{...}"}``, so ``location`` never reached the tool, the tool
    fell back to the auto-detected location, and the model looped retrying
    different cities until the turn cap (observed: 8 getWeather calls, then an
    English error fallback).
    """

    def test_json_object_after_colon_becomes_args(self):
        content = 'getWeather: {"location": "Seoul"}'
        name, args, _ = _extract(content, tool_name="getWeather")
        assert name == "getWeather"
        assert args.get("location") == "Seoul"
        assert "query" not in args

    def test_empty_json_object_after_colon(self):
        content = "getWeather: {}"
        name, args, _ = _extract(content, tool_name="getWeather")
        assert name == "getWeather"
        assert args == {}

    def test_non_ascii_location_after_colon(self):
        content = 'getWeather: {"location": "서울"}'
        name, args, _ = _extract(content, tool_name="getWeather")
        assert name == "getWeather"
        assert args.get("location") == "서울"


class TestSingleToolCallObjectForm:
    """Form 2c: a single tool_call object without the `tool_calls: [...]` array.

    Field-captured from qwen2.5:3b (2026-06-12) on "방송 꺼줘": the model picked
    the right tool but emitted it behind a `call_xxx:` label as a bare object.
    The name + arguments must be pulled from the embedded ``function`` object;
    before the fix this leaked the raw JSON to the user and the tool never ran.
    """

    def test_single_object_with_string_arguments(self):
        content = (
            'call_stop: {"id": "call_stop", "type": "function", '
            '"function": {"name": "setBroadcast", '
            '"arguments": "{\\"action\\": \\"stop\\"}"}}'
        )
        name, args, _ = _extract(content, tool_name="setBroadcast")
        assert name == "setBroadcast"
        assert args.get("action") == "stop"

    def test_single_object_with_dict_arguments(self):
        content = (
            '{"id": "c1", "type": "function", '
            '"function": {"name": "getWeather", "arguments": {"location": "Seoul"}}}'
        )
        name, args, _ = _extract(content, tool_name="getWeather")
        assert name == "getWeather"
        assert args.get("location") == "Seoul"

    def test_single_object_rejects_unknown_tool(self):
        content = (
            '{"function": {"name": "fileSystem_write", '
            '"arguments": "{\\"path\\": \\"/tmp/x\\"}"}}'
        )
        name, _args, _ = _extract(content, tool_name="setBroadcast")
        assert name is None


class TestFunctionCallForm:
    """Form 3: `toolName(...)`."""

    def test_parses_json_object_inside_parens(self):
        content = 'webSearch({"search_query": "Possessor"})'
        name, args, _ = _extract(content)
        assert name == "webSearch"
        assert args.get("search_query") == "Possessor"

    def test_parses_bare_string_inside_parens(self):
        content = 'webSearch("Possessor")'
        name, args, _ = _extract(content)
        assert name == "webSearch"
        assert any(v == "Possessor" for v in args.values())


class TestNoFalsePositiveOnProse:
    def test_plain_conversational_reply_is_not_parsed_as_tool_call(self):
        content = "I can help you find information about movies."
        name, _args, _ = _extract(content)
        assert name is None


def _is_malformed(content: str) -> bool:
    import jarvis.reply.engine as engine_mod
    assert hasattr(engine_mod, "_is_malformed_model_output"), (
        "Expose _is_malformed_model_output at module level for test coverage."
    )
    return engine_mod._is_malformed_model_output(content)


class TestMalformedModelOutputGuard:
    """``_is_malformed_model_output`` gates content before it can reach the
    user. Covers the field-captured leak shapes we have observed from
    small models (gemma4:e2b/e4b) after tool results."""

    @pytest.mark.parametrize(
        "content,label",
        [
            ("tool_calls: []", "bare tool_calls literal"),
            ("tool_calls: [{}]", "tool_calls with stub entry"),
            ("tool_code\n  print(google_search.search(query='x'))\n  ", "gemma tool_code block"),
            ("tool_output\n[{'snippet': 'x'}]", "gemma tool_output block"),
            ("Okay, here is your answer <unused88>", "unused sentinel inline"),
            ("Reply ends with <unused10>.", "different unused sentinel"),
            ("{\"forecast\": 14, \"high\": 15", "truncated JSON (no closing brace)"),
            ('{"openapi": "3.0.0", "paths": {}}', "OpenAPI spec dump"),
            ('{"location": "Hackney", "forecast": "cloudy"}', "weather JSON dump"),
        ],
    )
    def test_detects_malformed_shape(self, content, label):
        assert _is_malformed(content), f"Should flag: {label!r} -> {content!r}"

    @pytest.mark.parametrize(
        "content",
        [
            "Sure, the capital of France is Paris.",
            "I found three results: Blinding Lights, Anti-Hero, and Levitating.",
            "I couldn't read the page contents this time. Want me to retry?",
            # Starts with { but closes properly AND has a conversational field.
            '{"response": "Here you go."}',
        ],
    )
    def test_allows_normal_prose(self, content):
        assert not _is_malformed(content), f"Should not flag prose: {content!r}"


class TestTextToolCallGuidancePrompt:
    """The text-based tool-call guidance injected for gemma-class models must
    explicitly name and forbid the shapes we know gemma leaks when confused.

    Gemma is not a natively tool-calling model — we bolt tool calling on via
    a prompt that teaches the `tool_calls: [...]` literal shape. Gemma's
    pre-training includes a different protocol (Google's code-interpreter
    `tool_code` / `tool_output` fenced blocks and `<unusedNN>` sentinel
    tokens), and when confused the model falls back to emitting those
    instead. The engine's deterministic guard catches them downstream, but
    the prompt itself should name them as forbidden so the model is steered
    away from emitting them in the first place — cheaper than catching and
    retrying.

    This test pins the prompt against drift: if someone reshuffles the
    guidance and drops the forbidden-shape clause, this test fails.
    """

    def _guidance(self, allowed_names=("webSearch", "stop", "toolSearchTool")):
        import jarvis.reply.engine as engine_mod
        assert hasattr(engine_mod, "_text_tool_call_guidance"), (
            "Expose _text_tool_call_guidance(allowed_names) at module "
            "level so the tool-call prompt block is unit-testable."
        )
        return engine_mod._text_tool_call_guidance(list(allowed_names))

    def test_guidance_teaches_tool_calls_array_shape(self):
        text = self._guidance()
        assert "tool_calls:" in text, (
            "Guidance must teach the `tool_calls: [...]` literal shape "
            "the parser expects."
        )

    def test_guidance_lists_allowed_tool_names(self):
        text = self._guidance(["webSearch", "stop", "openApp"])
        for name in ("webSearch", "stop", "openApp"):
            assert name in text, f"{name} should appear in the allow-list"

    @pytest.mark.parametrize(
        "forbidden,label",
        [
            ("tool_code", "gemma code-interpreter block"),
            ("tool_output", "gemma tool-output block"),
            ("<unused", "gemma unused-sentinel token"),
        ],
    )
    def test_guidance_names_and_forbids_gemma_native_shapes(
        self, forbidden, label
    ):
        text = self._guidance()
        assert forbidden in text, (
            f"Guidance should explicitly name {forbidden!r} ({label}) as "
            f"a forbidden shape so the model is steered away from "
            f"emitting it. Naming specific tokens beats vague 'do not "
            f"emit raw protocol' instructions for small models."
        )

    def test_guidance_marks_gemma_shapes_as_forbidden_not_examples(self):
        """The forbidden shapes should appear in a forbidding context
        ('do not', 'never', 'will fail', 'forbidden'), not as positive
        examples the model should copy.
        """
        text = self._guidance()
        # Find the paragraph mentioning tool_code and check it sits near
        # a negation.
        idx = text.find("tool_code")
        assert idx >= 0
        window = text[max(0, idx - 200) : idx + 200].lower()
        assert any(
            neg in window
            for neg in ("do not", "don't", "never", "will fail", "forbidden", "not accepted")
        ), (
            "The `tool_code` mention must be in a forbidding context, "
            "not a positive example. Showing gemma's native protocol as "
            "an example would reinforce the exact behaviour we want to "
            "stop."
        )