tests/test_api.py

"""API endpoint tests.

Tests /interactions and /health endpoints directly.
/analyze requires the NER model loaded — tested via Docker or manual run.
"""

import pytest
from unittest.mock import AsyncMock, patch, MagicMock
from fastapi.testclient import TestClient


@pytest.fixture
def mock_drugbank():
    """Mock drugbank_client in every module that imports it."""
    mock = MagicMock()
    mock.get_interactions = AsyncMock()
    mock.health_check = AsyncMock(return_value=True)
    mock.connect = AsyncMock()
    mock.close = AsyncMock()
    mock.DrugBankUnavailableError = Exception
    with patch("app.services.interaction_checker.drugbank_client", mock), \
         patch("app.api.health.drugbank_client", mock), \
         patch("app.main.drugbank_client", mock):
        yield mock


@pytest.fixture
def mock_severity():
    """Mock severity_classifier in every module that imports it."""
    mock = MagicMock()
    mock.classify.return_value = ("moderate", False)
    mock.load_model = MagicMock()
    mock.is_loaded.return_value = True
    with patch("app.services.interaction_checker.severity_classifier", mock), \
         patch("app.main.severity_classifier", mock):
        yield mock


@pytest.fixture
def mock_severity_parser():
    """Mock severity_parser in interaction checker."""
    mock = MagicMock()
    mock.parse_severity.return_value = "moderate"
    with patch("app.services.interaction_checker.severity_parser", mock):
        yield mock


@pytest.fixture
def client(mock_drugbank, mock_severity, mock_severity_parser):
    from app.main import app
    return TestClient(app)


class TestAnalyzeValidation:
    def test_analyze_rejects_oversized_text(self, client):
        """Text over 5000 chars must be rejected with 422."""
        resp = client.post(
            "/analyze",
            json={"text": "Metformin 500mg " * 500},
            headers={"X-API-Key": "test-key"},
        )
        assert resp.status_code == 422

    def test_analyze_strips_html_from_raw_text(self, client):
        """HTML tags must be stripped from raw_text to prevent XSS."""
        with patch("app.services.drug_analyzer.analyze", new=AsyncMock(return_value=[])):
            resp = client.post(
                "/analyze",
                json={"text": '<script>alert(1)</script>Metformin 500mg'},
                headers={"X-API-Key": "test-key"},
            )
        assert resp.status_code == 200
        data = resp.json()
        assert "<script>" not in data["raw_text"]
        assert "alert(1)" in data["raw_text"]

    def test_analyze_non_latin_text_returns_note(self, client):
        """Non-Latin text should return empty drugs with explanatory note."""
        resp = client.post(
            "/analyze",
            json={"text": "阿莫西林胶囊 500mg"},
            headers={"X-API-Key": "test-key"},
        )
        assert resp.status_code == 200
        data = resp.json()
        assert data["drugs"] == []
        assert "note" in data
        assert "Latin" in data["note"]

    def test_analyze_mixed_script_processes_normally(self, client):
        """Text with mostly Latin chars should process normally even with some non-Latin."""
        with patch("app.api.analyze.drug_analyzer.analyze", new=AsyncMock(return_value=[])):
            resp = client.post(
                "/analyze",
                json={"text": "Metformin 500mg (メトホルミン)"},
                headers={"X-API-Key": "test-key"},
            )
        assert resp.status_code == 200
        data = resp.json()
        assert data.get("note") is None or "Non-Latin" not in data.get("note", "")


class TestInteractionsValidation:
    def test_interactions_rejects_empty_string_drug(self, client):
        """Empty strings in drugs list must be rejected with 422."""
        resp = client.post(
            "/interactions",
            json={"drugs": ["metformin", "", "lisinopril"]},
            headers={"X-API-Key": "test-key"},
        )
        assert resp.status_code == 422

    def test_interactions_rejects_whitespace_only_drug(self, client):
        """Whitespace-only strings must be rejected after stripping."""
        resp = client.post(
            "/interactions",
            json={"drugs": ["  ", "metformin"]},
            headers={"X-API-Key": "test-key"},
        )
        assert resp.status_code == 422

    def test_interactions_rejects_long_drug_name(self, client):
        """Drug names over 200 chars must be rejected."""
        resp = client.post(
            "/interactions",
            json={"drugs": ["a" * 201, "metformin"]},
            headers={"X-API-Key": "test-key"},
        )
        assert resp.status_code == 422


class TestInteractionsEndpoint:
    def test_known_interaction(self, client, mock_drugbank):
        mock_drugbank.get_interactions.side_effect = [
            [{"drug": "Warfarin", "description": "Increases bleeding risk."}],
            [{"drug": "Ibuprofen", "description": "Increases bleeding risk."}],
        ]
        resp = client.post("/interactions", json={"drugs": ["ibuprofen", "warfarin"]})
        assert resp.status_code == 200
        data = resp.json()
        assert data["safe"] is False
        assert len(data["interactions"]) >= 1
        assert data["interactions"][0]["severity"] in ["major", "moderate"]
        assert "data_sources" in data
        assert "severity_classifier" in data["data_sources"]

    def test_no_interaction(self, client, mock_drugbank):
        mock_drugbank.get_interactions.side_effect = [
            [], [],
        ]
        resp = client.post("/interactions", json={"drugs": ["ibuprofen", "amoxicillin"]})
        assert resp.status_code == 200
        data = resp.json()
        assert data["safe"] is True

    def test_three_drugs(self, client, mock_drugbank):
        mock_drugbank.get_interactions.side_effect = [
            [{"drug": "Warfarin", "description": "x"}, {"drug": "Aspirin", "description": "x"}],
            [{"drug": "Ibuprofen", "description": "x"}, {"drug": "Aspirin", "description": "x"}],
            [{"drug": "Ibuprofen", "description": "x"}, {"drug": "Warfarin", "description": "x"}],
        ]
        resp = client.post("/interactions", json={"drugs": ["ibuprofen", "warfarin", "aspirin"]})
        assert resp.status_code == 200
        data = resp.json()
        assert len(data["interactions"]) >= 2

    def test_validation_requires_two_drugs(self, client):
        resp = client.post("/interactions", json={"drugs": ["ibuprofen"]})
        assert resp.status_code == 422

    def test_validation_requires_drugs_field(self, client):
        resp = client.post("/interactions", json={})
        assert resp.status_code == 422


class TestHealthEndpoint:
    def test_health_returns_ok(self, client):
        resp = client.get("/health")
        assert resp.status_code == 200
        data = resp.json()
        assert data["status"] == "ok"
        assert data["version"] == "0.1.0"

    def test_data_health_connected(self, client, mock_drugbank):
        mock_drugbank.health_check.return_value = True
        resp = client.get("/health/data")
        assert resp.status_code == 200
        data = resp.json()
        assert data["status"] == "ready"
        assert data["drugbank"] == "connected"

    def test_data_health_degraded(self, client, mock_drugbank):
        mock_drugbank.health_check.return_value = False
        resp = client.get("/health/data")
        assert resp.status_code == 200
        data = resp.json()
        assert data["status"] == "degraded"
        assert data["drugbank"] == "unreachable"