"""The MCP finding adapter must accept the compliance-scanner-agent Finding shape.

Their Rust/Mongo Finding uses _id, scan_type, cvss_score, file_path and a 5-level
severity (incl. "info"). Our mapper consumes id, category, cvss, location and a
4-level severity. from_dict bridges that gap.
"""
from compliance.services.cra_finding_mapper import (
    ScannerFinding,
    assess_findings_payload,
)


def _scanner_finding(**over):
    """A finding shaped like compliance-scanner-agent emits it."""
    base = {
        "_id": "507f1f77bcf86cd799439011",
        "repo_id": "r1",
        "fingerprint": "fp-123",
        "scanner": "semgrep",
        "scan_type": "secret_detection",
        "title": "Hardcoded credential in source",
        "description": "A hardcoded password was found.",
        "severity": "high",
        "cwe": "CWE-798",
        "cve": None,
        "cvss_score": 8.2,
        "file_path": "src/config.py",
        "status": "open",
    }
    base.update(over)
    return base


def test_from_dict_maps_scanner_field_names():
    f = ScannerFinding.from_dict(_scanner_finding())
    assert f.id == "507f1f77bcf86cd799439011"   # from _id
    assert f.category == "secret_detection"      # from scan_type
    assert f.cvss == 8.2                          # from cvss_score
    assert f.location == "src/config.py"          # from file_path
    assert f.cwe == "CWE-798"
    assert f.severity == "high"


def test_from_dict_info_severity_becomes_low():
    f = ScannerFinding.from_dict(_scanner_finding(severity="info"))
    assert f.severity == "low"


def test_from_dict_mongo_extended_json_id():
    f = ScannerFinding.from_dict(_scanner_finding(_id={"$oid": "abc123"}))
    assert f.id == "abc123"


def test_scanner_finding_assesses_to_cra_requirement():
    result = assess_findings_payload({"findings": [_scanner_finding()]})
    mapped = result["mapped"]
    assert len(mapped) == 1
    m = mapped[0]
    assert m["finding_id"] == "507f1f77bcf86cd799439011"
    # CWE-798 -> CRA-AI-9/-8 (hardcoded credentials / no default passwords)
    assert m["primary_requirement"].startswith("CRA-AI-")
    assert m["requirement_ids"]
    assert m["risk_level"] in {"LOW", "MEDIUM", "HIGH", "CRITICAL"}