from pathlib import Path
import unittest


REPOSITORY_ROOT = Path(__file__).resolve().parents[3]
UNIT_DIR = REPOSITORY_ROOT / "systemd/user"


class SystemdUnitTests(unittest.TestCase):
    def test_socket_unit_owns_the_exact_private_runtime_path(self) -> None:
        socket_unit = (UNIT_DIR / "pi-dictate.socket").read_text(encoding="utf-8")
        self.assertIn("ListenStream=%t/pi-dictate.sock", socket_unit)
        self.assertIn("SocketMode=0600", socket_unit)
        self.assertIn("Accept=no", socket_unit)
        self.assertIn("RemoveOnStop=yes", socket_unit)

    def test_service_is_offline_hardened_and_uses_private_native_caches(self) -> None:
        service_unit = (UNIT_DIR / "pi-dictate.service").read_text(encoding="utf-8")
        for expected in (
            "PI_DICTATE_MODEL_PATH=%h/.local/share/pi-dictate/models/",
            "PI_DICTATE_TERMS_PATH=%h/.local/share/pi-dictate/config/coding-terms.txt",
            "PI_DICTATE_BOOST_ALPHA=1.0",
            "HF_HUB_OFFLINE=1",
            "TRANSFORMERS_OFFLINE=1",
            "TRITON_CACHE_DIR=/tmp/pi-dictate-triton",
            "NUMBA_CACHE_DIR=/tmp/pi-dictate-numba",
            "LimitCORE=0",
            "MemorySwapMax=0",
            "ProtectSystem=strict",
            "ProtectHome=read-only",
            "RestrictAddressFamilies=AF_UNIX",
            "IPAddressDeny=any",
        ):
            self.assertIn(expected, service_unit)


if __name__ == "__main__":
    unittest.main()