from __future__ import annotations

from pathlib import Path

import jwt
import pytest

from agent_platform.config import Settings


@pytest.fixture
def settings(tmp_path: Path) -> Settings:
    return Settings(
        model_api_base_url="https://model.example.test",
        model_api_key="model-secret",
        deepseek_api_base_url="https://api.deepseek.example.test",
        deepseek_api_key="deepseek-secret",
        openwebui_forward_jwt_secret="identity-secret-with-at-least-32-bytes",  # noqa: S106
        internal_provider_key="provider-secret-with-at-least-32-bytes",
        internal_gateway_key="gateway-secret-with-at-least-32-bytes",
        database_url=f"sqlite+aiosqlite:///{tmp_path / 'agent.sqlite3'}",
        redis_url="redis://unused",
        gateway_url="http://gateway.test",
        execution_provider="local-docker",
        workspace_image="k1412-agent-workspace:test",
        workspace_network_enabled=False,
        workspace_memory_limit="512m",
        workspace_cpu_limit=1.0,
        workspace_pids_limit=128,
        workspace_ssh_host="",
        workspace_download_max_bytes=128 * 1024 * 1024,
        model_timeout_seconds=30,
        tool_timeout_seconds=30,
        max_tool_output_chars=24_000,
    )


@pytest.fixture
def identity_jwt(settings: Settings) -> str:
    import time

    now = int(time.time())
    return jwt.encode(
        {
            "sub": "user-123",
            "email": "user@example.test",
            "name": "Test User",
            "role": "user",
            "iss": "open-webui",
            "iat": now,
            "exp": now + 300,
        },
        settings.openwebui_forward_jwt_secret,
        algorithm="HS256",
    )