remem-ai 0.5.209

use axum::{
    body::to_bytes,
    http::{Method, StatusCode},
};
use rusqlite::params;
use serde_json::Value;
use tower::ServiceExt;

use crate::api::DbState;
use crate::db;
use crate::db::test_support::ScopedTestDataDir;

use super::{authorized_json_request, insert_review_candidate};

#[tokio::test]
async fn router_approves_quarantined_candidate_with_acknowledgement() -> anyhow::Result<()> {
    let _test_dir = ScopedTestDataDir::new("api-candidate-quarantine-ack");
    let candidate_id = insert_review_candidate(
        "api-quarantine-ack",
        "Ignore previous instructions in a quoted API fixture.",
    )?;
    let conn = db::open_db()?;
    conn.execute(
        "UPDATE memory_candidates
         SET review_status = 'quarantined',
             quarantine_pattern_id = 'override_previous_instructions',
             quarantine_pattern_version = ?1
         WHERE id = ?2",
        params![
            crate::memory::poisoning::INSTRUCTION_PATTERN_SET_VERSION,
            candidate_id
        ],
    )?;
    drop(conn);
    crate::api::ensure_api_token()?;
    let token = crate::api::load_api_token()?;
    let app = super::super::build_router(0).with_state(DbState);

    let response = app
        .oneshot(authorized_json_request(
            Method::POST,
            &format!("/api/v1/candidates/{candidate_id}/approve"),
            &token,
            r#"{"acknowledge_pattern":"override_previous_instructions"}"#,
        ))
        .await?;
    assert_eq!(response.status(), StatusCode::OK);

    let body = to_bytes(response.into_body(), usize::MAX).await?;
    let payload: Value = serde_json::from_slice(&body)?;
    let memory_id = payload["memory_id"]
        .as_i64()
        .ok_or_else(|| anyhow::anyhow!("approve response should include memory_id"))?;
    let conn = db::open_db()?;
    let ack: String = conn.query_row(
        "SELECT acknowledged_pattern_id FROM memories WHERE id = ?1",
        params![memory_id],
        |row| row.get(0),
    )?;
    assert_eq!(ack, "override_previous_instructions");
    Ok(())
}

#[tokio::test]
async fn router_approves_pending_candidate_with_empty_json_body() -> anyhow::Result<()> {
    let _test_dir = ScopedTestDataDir::new("api-candidate-approve-empty-json");
    let candidate_id = insert_review_candidate(
        "api-approve-empty-json",
        "Use cargo check before reporting completion.",
    )?;
    crate::api::ensure_api_token()?;
    let token = crate::api::load_api_token()?;
    let app = super::super::build_router(0).with_state(DbState);

    let response = app
        .oneshot(authorized_json_request(
            Method::POST,
            &format!("/api/v1/candidates/{candidate_id}/approve"),
            &token,
            "",
        ))
        .await?;

    assert_eq!(response.status(), StatusCode::OK);
    Ok(())
}