"""Packaging contract: a PEP 561 typed package with exactly one dependency.

Consumers run mypy --strict against the inline annotations; without the
py.typed marker mypy degrades every imported symbol to Any.
"""

from __future__ import annotations

from pathlib import Path

import pytest

import llm_ingestion_okf

PROJECT_ROOT = Path(__file__).resolve().parents[1]


def test_package_ships_py_typed_marker() -> None:
    package_dir = Path(llm_ingestion_okf.__file__).parent
    assert (package_dir / "py.typed").is_file()


def test_the_only_runtime_dependency_is_the_security_boundary() -> None:
    """The stdlib-only rule, enforced rather than asserted in prose.

    One dependency is permitted — the guard — because security is the one
    thing this library must not implement. Everything else stays stdlib, so
    a consumer vendoring this package takes on no transitive surface. The
    version RANGE is the pin: it resolves against a package index, and is
    satisfied by the git+https tag install until that index exists.
    """
    tomllib = pytest.importorskip("tomllib")  # stdlib from 3.11; the pin holds on 3.10 too
    pyproject = tomllib.loads((PROJECT_ROOT / "pyproject.toml").read_text(encoding="utf-8"))
    assert pyproject["project"]["dependencies"] == ["llm-ingestion-guard>=0.2,<0.3"]