"""mailu — recipe-specific functional test #2 (Phase 2 P3, the characteristic end-to-end mail flow).

Provision a mailbox, INJECT a uniquely-marked message to it via the postfix container's local
`sendmail` (locally-originated → not greylisted, no auth/TLS needed), then VERIFY it was DELIVERED
and STORED by polling dovecot's `doveadm search` in the imap container. This is mailu's defining
behaviour (it is a mail server): a real postfix → rspamd → dovecot deliver→store→fetch round-trip,
not an API/health stand-in.

We use the in-container mail tools (sendmail/doveadm) rather than the host network ports because the
TLS_FLAVOR=notls deploy makes dovecot refuse plaintext auth over the network (143) — the in-container
path exercises the same delivery/storage stack without that constraint, and avoids rspamd greylisting
of network senders.
"""

from __future__ import annotations

import os
import sys
import time
import uuid

sys.path.insert(0, os.path.dirname(__file__))
sys.path.insert(0, os.path.join(os.path.dirname(__file__), "..", "..", "..", "runner"))
import _mailu  # noqa: E402
from harness import lifecycle  # noqa: E402


def test_send_and_receive_mail(live_app):
    mail_domain = live_app
    local = "ccci-flow-" + uuid.uuid4().hex[:8]
    password = "CcCi-" + uuid.uuid4().hex[:16] + "-Aa1!"
    _mailu.ensure_domain(live_app, mail_domain)
    email_addr = _mailu.create_user(live_app, local, mail_domain, password)

    marker = "ccci-mailflow-" + uuid.uuid4().hex
    sender = f"admin@{mail_domain}"
    # Inject via the postfix container's local sendmail (locally-originated; no greylist/auth/TLS).
    msg = f"From: {sender}\\nTo: {email_addr}\\nSubject: {marker}\\n\\nbody {marker}\\n"
    inject = f"printf '{msg}' | sendmail -f {sender} {email_addr}"
    lifecycle.exec_in_app(live_app, ["sh", "-c", inject], service="smtp")

    # Poll dovecot for the stored message (INBOX, then Junk in case rspamd files it).
    deadline = time.time() + 150
    while time.time() < deadline:
        for box in ("INBOX", "Junk"):
            query = (
                f"doveadm search -u '{email_addr}' mailbox {box} "
                f"header subject '{marker}'"
            )
            out = lifecycle.exec_in_app(live_app, ["sh", "-c", query], service="imap")
            if out.strip():  # a non-empty result = "<mailbox-guid> <uid>" → message stored
                return
        time.sleep(5)
    raise AssertionError(
        f"mail with subject {marker!r} injected to {email_addr} was not delivered/stored "
        f"(doveadm search found nothing in INBOX/Junk within the postfix→rspamd→dovecot window)"
    )