"""显式连接文件不应污染应用配置，也不能启用未授权的数据源。"""

import json

import pytest

from app.core.config import Settings
from app.core.tplus_db import resolve_tplus_settings


def test_未开启连接时不读取配置文件(tmp_path):
    settings = Settings(
        _env_file=None,
        app_secret_key="x" * 32,
        t_plus_connection_file=str(tmp_path / "missing.json"),
    )
    with pytest.raises(RuntimeError, match="未启用"):
        resolve_tplus_settings(settings)


def test_文件连接只覆盖源字段且原Settings不变(tmp_path):
    path = tmp_path / "reader.json"
    path.write_text(
        json.dumps(
            {
                "host": "127.0.0.1",
                "port": 1433,
                "database": "UFTData",
                "user": "reader",
                "password": "test-only-value",
                "driver": "SQL Server",
            }
        ),
        encoding="utf-8",
    )
    settings = Settings(
        _env_file=None,
        app_secret_key="x" * 32,
        t_plus_enabled=True,
        t_plus_connection_file=str(path),
    )
    resolved = resolve_tplus_settings(settings)
    assert resolved.t_plus_database == "UFTData"
    assert resolved.mysql_database == settings.mysql_database
    assert settings.t_plus_password == ""
    assert "test-only-value" not in str(resolved.t_plus_database_url)


def test_连接文件不接受sa或应用配置覆盖(tmp_path):
    path = tmp_path / "bad.json"
    path.write_text(
        json.dumps(
            {
                "host": "127.0.0.1",
                "port": 1433,
                "database": "UFTData",
                "user": "sa",
                "password": "test-only-value",
                "driver": "SQL Server",
                "app_secret_key": "bad",
            }
        ),
        encoding="utf-8",
    )
    settings = Settings(
        _env_file=None,
        app_secret_key="x" * 32,
        t_plus_enabled=True,
        t_plus_connection_file=str(path),
    )
    with pytest.raises(RuntimeError):
        resolve_tplus_settings(settings)