import pytest
from fastapi.testclient import TestClient

from app.core.exceptions import NotFoundError
from main import create_app


def test_errors_use_safe_standard_envelope(settings) -> None:
    with TestClient(create_app(settings), raise_server_exceptions=False) as client:
        response = client.post(
            "/v1/probe",
            json={"base64": "not-valid-base64!", "filename": "sample.mp3"},
        )
    assert response.status_code == 422
    payload = response.json()
    assert payload["success"] is False
    assert payload["request_id"]
    assert payload["error"]["code"] == "INVALID_INPUT"
    assert "traceback" not in response.text.lower()


def test_download_path_traversal_is_rejected(settings) -> None:
    app = create_app(settings)
    with pytest.raises(NotFoundError):
        app.state.container.cleanup.resolve_download(
            "00000000-0000-0000-0000-000000000000", "../secret.mp4"
        )