app.bettersight.io/backend/tests/test_api.py

"""
Integration tests for api.py routes, run against mock repositories
(USE_MOCK_REPOSITORIES=true, set in conftest.py before any import).
"""
from repositories.tenant_repository import tenant_repository
from repositories.seat_repository import seat_repository
from repositories.competitor_repository import competitor_repository


def _make_tenant(**overrides):
    data = {
        'name': 'G Adventures', 'email': 'pm@gadventures.com', 'domain': 'gadventures.com',
        'tier': 'analyse', 'status': 'active', 'max_seats': 5,
    }
    data.update(overrides)
    return tenant_repository.create(data)


def test_health_requires_no_auth(client):
    response = client.get('/health')
    assert response.status_code == 200
    assert response.json == {'status': 'ok', 'version': '0.1.0-phase1'}


def test_protected_route_rejects_missing_api_key(client):
    response = client.post('/validate-email', json={'email': 'pm@gadventures.com'})
    assert response.status_code == 401
    assert response.json['error'] is True
    assert response.json['code'] == 'unauthorized'


def test_protected_route_rejects_wrong_api_key(client):
    response = client.post(
        '/validate-email', json={'email': 'pm@gadventures.com'},
        headers={'X-API-Key': 'wrong-key'}
    )
    assert response.status_code == 401


def test_validate_email_happy_path(client, api_headers):
    _make_tenant()
    response = client.post('/validate-email', json={'email': 'pm@gadventures.com'}, headers=api_headers)
    assert response.status_code == 200
    assert response.json == {'valid': True, 'tier': 'analyse'}


def test_validate_email_missing_field_returns_structured_error(client, api_headers):
    response = client.post('/validate-email', json={}, headers=api_headers)
    assert response.status_code == 400
    assert response.json['error'] is True
    assert response.json['code'] == 'missing_field'


def test_add_seat_rejects_when_tenant_at_seat_limit(client, api_headers):
    tenant = _make_tenant(max_seats=1)
    seat_repository.create({'tenant_id': tenant['id'], 'email': 'first@gadventures.com', 'active': True})

    response = client.post(
        '/account/seats', json={'tenant_id': tenant['id'], 'email': 'second@gadventures.com'},
        headers=api_headers
    )

    assert response.status_code == 400
    assert response.json['code'] == 'seat_limit_reached'


def test_add_seat_succeeds_under_limit(client, api_headers):
    tenant = _make_tenant(max_seats=5)

    response = client.post(
        '/account/seats', json={'tenant_id': tenant['id'], 'email': 'newuser@gadventures.com'},
        headers=api_headers
    )

    assert response.status_code == 201
    assert seat_repository.count_active(tenant['id']) == 1


def test_remove_seat(client, api_headers):
    tenant = _make_tenant()
    seat = seat_repository.create({'tenant_id': tenant['id'], 'email': 'x@gadventures.com', 'active': True})

    response = client.delete(f'/account/seats/{seat["id"]}', headers=api_headers)

    assert response.status_code == 200
    assert seat_repository.count_active(tenant['id']) == 0


def test_get_competitors_resolves_tenant_by_email_header(client, api_headers):
    tenant = _make_tenant()
    competitor_repository.create({
        'tenant_id': tenant['id'], 'name': 'Intrepid Travel', 'website': 'https://intrepidtravel.com',
        'catalogue_url': 'https://intrepidtravel.com/adventures', 'primary_market': 'GB', 'active': True,
    })

    response = client.get('/competitors', headers={**api_headers, 'X-User-Email': 'pm@gadventures.com'})

    assert response.status_code == 200
    body = response.json
    assert len(body) == 1
    assert body[0]['name'] == 'Intrepid Travel'
    assert body[0]['status'] == 'stale'  # never scraped → stale


def test_get_competitors_unknown_email_returns_404(client, api_headers):
    response = client.get('/competitors', headers={**api_headers, 'X-User-Email': 'nobody@nowhere.com'})
    assert response.status_code == 404


def test_research_find_urls_requires_fields(client, api_headers):
    response = client.post('/research/find-urls', json={}, headers=api_headers)
    assert response.status_code == 400
    assert response.json['code'] == 'missing_field'


def test_research_enqueues_job_without_touching_real_redis(client, api_headers, monkeypatch):
    import jobs
    tenant = _make_tenant()
    captured = {}

    def _fake_enqueue(job_id, data):
        captured['job_id'] = job_id
        captured['data'] = data
        return job_id

    monkeypatch.setattr(jobs, 'enqueue_research_job', _fake_enqueue)

    response = client.post('/research', json={
        'tenant_id': tenant['id'], 'destination': 'Peru', 'duration': 15,
        'travel_style': 'Classic', 'tab_type': 'Standard', 'competitors': [],
    }, headers=api_headers)

    assert response.status_code == 200
    assert response.json['status'] == 'queued'
    assert captured['job_id'] == response.json['job_id']


def test_bulk_import_rejects_more_than_fifty_rows(client, api_headers):
    tenant = _make_tenant()
    rows = [
        {'name': f'Comp {i}', 'website': f'https://comp{i}.com',
         'catalogue_url': f'https://comp{i}.com/trips', 'primary_market': 'GB'}
        for i in range(51)
    ]
    response = client.post(
        '/account/competitors/bulk', json={'tenant_id': tenant['id'], 'rows': rows}, headers=api_headers
    )
    assert response.status_code == 400
    assert response.json['code'] == 'too_many_rows'


def test_competitors_template_download(client, api_headers):
    response = client.get('/account/competitors/template', headers=api_headers)
    assert response.status_code == 200
    assert response.mimetype == 'text/csv'
    assert b'name,website,catalogue_url,primary_market' in response.data