"""Integration tests for system router"""

import pytest


def test_system_stats_endpoint(test_app, admin_headers):
    """Test system stats endpoint returns expected format"""
    response = test_app.get("/api/system/stats", headers=admin_headers)
    assert response.status_code == 200
    data = response.json()
    assert "cpu_percent" in data
    assert "cpu_count" in data
    assert "load_avg" in data
    assert "memory" in data
    assert "disk" in data
    assert "uptime" in data
    assert "platform" in data
    assert "volumes" in data


def test_audit_log_endpoint(test_app, admin_headers, temp_volume_root):
    """Test audit log endpoint returns expected format"""
    import os

    audit_path = os.path.join(temp_volume_root, "docker/nas-dashboard/audit.log")
    os.makedirs(os.path.dirname(audit_path), exist_ok=True)
    with open(audit_path, "w") as f:
        f.write("2024-01-01T10:00:00 1.2.3.4 admin GET /api/docker/containers 200 50ms\n")

    response = test_app.get("/api/system/audit-log", headers=admin_headers)
    assert response.status_code == 200
    data = response.json()
    assert "entries" in data
    assert isinstance(data["entries"], list)


def test_audit_log_classifies_failed_auth(test_app, admin_headers, temp_volume_root):
    """Test audit log classifies failed auth as high severity"""
    import os

    audit_path = os.path.join(temp_volume_root, "docker/nas-dashboard/audit.log")
    os.makedirs(os.path.dirname(audit_path), exist_ok=True)
    with open(audit_path, "w") as f:
        f.write("2024-01-01T10:00:00 1.2.3.4 - POST /api/auth/login 401 100ms\n")

    response = test_app.get("/api/system/audit-log", headers=admin_headers)
    assert response.status_code == 200
    data = response.json()
    if data["entries"]:
        assert data["entries"][0]["level"] == "high"


def test_send_notification_missing_message(test_app, admin_headers):
    """Test send notification with missing message"""
    response = test_app.post("/api/system/notify", json={}, headers=admin_headers)
    assert response.status_code == 200
    data = response.json()
    assert data["ok"] is False
    assert "error" in data


def test_openclaw_token_lan_only(test_app, admin_headers):
    """Test OpenClaw token endpoint requires LAN IP"""
    response = test_app.get("/api/system/openclaw-token", headers=admin_headers)
    assert response.status_code == 403