"""Runtime qualification for SQLite in the published Docker image."""

from __future__ import annotations

import json
import subprocess


_SQLITE_PROBE = r"""
import json
import sqlite3

from hermes_cli.sqlite_runtime import is_sqlite_wal_reset_vulnerable

db = sqlite3.connect(":memory:")
try:
    db.execute("CREATE VIRTUAL TABLE docs USING fts5(content, tokenize='trigram')")
    db.execute("INSERT INTO docs VALUES ('hermes')")
    matches = db.execute(
        "SELECT count(*) FROM docs WHERE docs MATCH 'erm'"
    ).fetchone()[0]
finally:
    db.close()

print(json.dumps({
    "sqlite_version": sqlite3.sqlite_version,
    "wal_reset_vulnerable": is_sqlite_wal_reset_vulnerable(
        sqlite3.sqlite_version_info
    ),
    "trigram_matches": matches,
}))
"""


def test_image_links_fixed_sqlite_with_fts5_trigram(built_image: str) -> None:
    result = subprocess.run(
        [
            "docker",
            "run",
            "--rm",
            "--user",
            "hermes",
            "--entrypoint",
            "/opt/hermes/.venv/bin/python",
            built_image,
            "-c",
            _SQLITE_PROBE,
        ],
        capture_output=True,
        text=True,
        timeout=60,
    )

    assert result.returncode == 0, (
        f"SQLite runtime probe failed: stdout={result.stdout!r} "
        f"stderr={result.stderr!r}"
    )
    payload = json.loads(result.stdout)
    assert payload["wal_reset_vulnerable"] is False, payload
    assert payload["trigram_matches"] == 1, payload