"""Fase 1b, last step — GATED live run over the WHOLE ``run_project`` path (måleprotokoll §4.4).

NOT default CI, and NOT gated like its two siblings. This is the expensive arm: it drives the
complete vertical slice — bundle navigation, the maker/checker debate, generation under
``response_format``, and the deterministic validator — against a real Foundry deployment.

**Why a THIRD environment variable, and why it is load-bearing.** ``test_foundry_profile_live.py``
(client-level probe) and ``test_portfolio_live.py`` (``run_portfolio`` fan-out) both skip on exactly
``PORTFOLIO_FOUNDRY_PROJECT_ENDPOINT`` + ``PORTFOLIO_FOUNDRY_DEPLOYMENT``. Reusing that pair here
would mean the moment an operator exports the two variables to run the CHEAP one-word probe, this
full run fires too — collapsing the måleprotokoll's whole point (§1: *"bevis så mye som mulig før
det dyre trinnet, så en feil er attribuerbar"*) into a single step, and spending money on a rung
whose predecessors have not been shown green. ``PORTFOLIO_LIVE_FULL_RUN`` is therefore a separate,
deliberate opt-in, read on **truthiness, not presence** (the Fase 4b invariant: an exported-but-empty
value is a shell accident, not a decision).

``PORTFOLIO_MODEL_MAP`` is part of the skip condition for a different reason — attribution. ``run.py``
stamps provenance with the deployment NAME before any client is built (målt 4e), so without the map
the run fails for a CONFIGURATION reason while looking exactly like a model failure. Skipping is
honest; failing there would misattribute.

**What this asserts is narrow on purpose** — see ``conftest.assert_full_run_contract``. The claim
being felled is *"the emitted structured schema is accepted by the live endpoint"* (økt 37's stated
honesty limit), NOT "the model proposes well". A validator REJECTION passes this test: the run
reached the deterministic gate with a parsed candidate, which is the whole question. The contract's
ability to discriminate is proven offline and for free by
``tests/test_live_full_run_contract.py`` — the paid call here is the measurement, not the proof that
the instrument works.

Outcomes are pre-registered in ``docs/2026-08-14-fase1b-forste-levende-kjoring.md`` §5, written
BEFORE the run, so the write-up cannot be negotiated after the fact.

The round/token caps are the SAME ones the first live run died on. They are deliberately not
raised: if the ledger fires again that is information, and raising it spends more on a path that may
still be broken.
"""

from __future__ import annotations

import os
from pathlib import Path

import pytest
from conftest import assert_full_run_contract

from portfolio_optimiser.run import RunResult, run_project
from portfolio_optimiser.verdicts import VerdictStore

BUNDLE_DIR = Path(__file__).resolve().parents[1] / "shared" / "examples" / "bygg-energi-mikro"
_PROJECT_ID = "BYGG-KONTOR-NORD"

_ENDPOINT = os.environ.get("PORTFOLIO_FOUNDRY_PROJECT_ENDPOINT")
_DEPLOYMENT = os.environ.get("PORTFOLIO_FOUNDRY_DEPLOYMENT")
_MODEL_MAP = os.environ.get("PORTFOLIO_MODEL_MAP")
#: Truthiness, not presence (Fase 4b): ``PORTFOLIO_LIVE_FULL_RUN=`` must NOT arm a paid run.
_OPTED_IN = bool(os.environ.get("PORTFOLIO_LIVE_FULL_RUN"))

_SKIP = not (_ENDPOINT and _DEPLOYMENT and _MODEL_MAP and _OPTED_IN)


@pytest.mark.skipif(
    _SKIP,
    reason=(
        "paid full run not armed (set PORTFOLIO_LIVE_FULL_RUN=1 alongside "
        "PORTFOLIO_FOUNDRY_PROJECT_ENDPOINT + PORTFOLIO_FOUNDRY_DEPLOYMENT + PORTFOLIO_MODEL_MAP)"
    ),
)
async def test_full_run_reaches_the_validator_on_a_live_model(tmp_path: Path) -> None:
    """The whole slice against a real deployment: every generation reply must come back in the
    requested shape, and the deterministic validator must decide on it."""
    outbox_dir = tmp_path / "outbox"
    run_id = "live-full-001"

    result = await run_project(
        _PROJECT_ID,
        "azure",
        docs_dir=str(BUNDLE_DIR),
        bundle_dir=str(BUNDLE_DIR),
        verdict_input={"decision": "approved", "rationale": "expert reviewed (live 1b)"},
        store=VerdictStore(verdicts=[]),
        outbox_dir=str(outbox_dir),
        run_id=run_id,
    )

    assert isinstance(result, RunResult)
    assert_full_run_contract(result, outbox_dir, run_id)