"""Cross-Browser-Befunde (deterministische Matrix-Sicht, Phase 4).

Sichert die Inkonsistenz-Erkennung ZWISCHEN Engines + die Einordnung, dass
Browser-Tracking-Schutz (Safari/ITP, Brave/Shields, Firefox/ETP) Verstöße
clientseitig maskiert (kein Compliance-Beleg)."""

from compliance.services.browser_cross_finding import build_cross_findings


def _row(pid, label, engine, *, before=0, reject_ok=True,
         impressum=True, dse=True, with_summary=True):
    if not with_summary:
        return {"profile_id": pid, "label": label, "engine": engine,
                "summary": None, "error": "launch failed"}
    return {
        "profile_id": pid, "label": label, "engine": engine,
        "summary": {
            "cookies_before_consent": before,
            "cookies_after_reject": 0 if reject_ok else 2,
            "reject_respected": reject_ok,
            "surface": {"has_impressum_link": impressum, "has_dse_link": dse},
        },
    }


def _titles(findings):
    return " | ".join(f["title"] for f in findings)


def test_empty_matrix():
    assert build_cross_findings(None) == []
    assert build_cross_findings({"browser_matrix": []}) == []


def test_pre_consent_in_all_engines_high():
    m = {"browser_matrix": [
        _row("chromium-headed-de", "Chromium", "blink", before=5),
        _row("firefox-headed-de", "Firefox", "gecko", before=3),
    ]}
    f = build_cross_findings(m)
    hit = [x for x in f if "in allen Browsern" in x["title"]]
    assert hit and hit[0]["severity"] == "HIGH"
    assert "TDDDG" in hit[0]["measure"]


def test_pre_consent_inconsistent_flags_browser_protection():
    # Chrome (nachgiebig) setzt vor Consent, Safari/WebKit (ITP) nicht.
    m = {"browser_matrix": [
        _row("chrome-channel-desktop-de", "Chrome", "blink", before=4),
        _row("webkit-headed-de", "Safari/WebKit", "webkit", before=0),
    ]}
    f = build_cross_findings(m)
    hit = [x for x in f if "nur in manchen" in x["title"]]
    assert hit and hit[0]["severity"] == "HIGH"
    # Einordnung: ITP maskiert clientseitig → kein Compliance-Beleg.
    assert "ITP" in hit[0]["detail"]
    assert "Chrome" in hit[0]["affected"]


def test_reject_inconsistent_high():
    m = {"browser_matrix": [
        _row("chrome-channel-desktop-de", "Chrome", "blink", reject_ok=False),
        _row("brave-default-de", "Brave", "blink", reject_ok=True),
    ]}
    f = build_cross_findings(m)
    hit = [x for x in f if "nicht in allen Browsern respektiert" in x["title"]]
    assert hit and hit[0]["severity"] == "HIGH"
    assert "Chrome" in hit[0]["affected"]


def test_missing_engines_coverage_hint():
    m = {"browser_matrix": [
        _row("chromium-headed-de", "Chromium", "blink"),
        _row("brave-default-de", "Brave", "blink", with_summary=False),
    ]}
    f = build_cross_findings(m)
    hit = [x for x in f if "Nicht alle Browser getestet" in x["title"]]
    assert hit and hit[0]["severity"] == "LOW"
    assert "Brave" in hit[0]["affected"]


def test_clean_matrix_no_violations():
    m = {"browser_matrix": [
        _row("chromium-headed-de", "Chromium", "blink"),
        _row("firefox-headed-de", "Firefox", "gecko"),
    ]}
    # Alles sauber → keine Verstoß-Befunde (Impressum/DSE vorhanden).
    assert build_cross_findings(m) == []