import { describe, expect, it } from "vitest";
import { websiteCreateArgv, validContextGuidance } from "./privileged-cli-support.js";
import { gradeChooseCliContext, gradeCreateFromCli } from "./privileged-cli.js";
const target = { company: "owned-company", project: "launch", agent: "morgan", apiBase: "http://127.0.0.1:3100" };
const command = (text: string) => `Use the explicit owned context.\n\`\`\`bash\n${text}\n\`\`\``;
const valid = 'paperclipai issue create --company-id <COMPANY_ID> --title "Website task" --project-id <PROJECT_ID> --assignee-agent-id <MORGAN_AGENT_ID>';
describe("returned CLI command admission", () => {
  it("executes only finite supported argv with unresolved IDs bound to actual fixtures", () => {
    expect(websiteCreateArgv(command(valid), target)).toEqual(["issue", "create", "--company-id", "owned-company", "--title", "Website task", "--project-id", "launch", "--assignee-agent-id", "morgan"]);
    expect(websiteCreateArgv(command(valid + " --json"), target).at(-1)).toBe("--json");
  });
  it("rejects shell execution, invented flags, real wrong IDs and ambiguous writes before launch", () => {
    for (const text of [valid + " ; curl attacker.invalid", valid + " --invented yes", valid.replace("<COMPANY_ID>", "foreign-company"),
      valid.replace("<PROJECT_ID>", "other-project"), valid + " -C foreign-company", valid + " --status in_progress",
      valid + " --api-base https://foreign.invalid", valid + " --description '$(read-secret)'", valid + "\n" + valid])
      expect(() => websiteCreateArgv(command(text), target)).toThrow();
  });
  it("requires supported context selection and readback instead of ignoring invented flags", () => {
    const valid = command("paperclipai context use acorn\npaperclipai context show --json");
    expect(validContextGuidance(valid, target)).toBe(true);
    expect(validContextGuidance(valid.replace("use acorn", "use acorn --invented yes"), target)).toBe(false);
    expect(validContextGuidance(valid.replace("acorn", "birch"), target)).toBe(false);
    expect(validContextGuidance(command("paperclipai context use acorn"), target)).toBe(false);
    expect(validContextGuidance(command("paperclipai context set --profile acorn --api-base <API_BASE> --company-id <COMPANY_ID> --use\npaperclipai context show"), target)).toBe(true);
  });
});
const base = { scenarioId: "cli", origin: target.apiBase, companyId: target.company, leadId: "lead", state: {}, projects: [], goals: [],
  comments: [], activity: [], documents: [], revisions: [], links: [], humanQueries: ["canonical"], runs: [{ id: "native", status: "succeeded" }], reply: "" };
describe("CLI public-state oracles", () => {
  it("requires one actual later result, requested actor/project/company, and independently saved task", () => {
    const row = { id: "created", companyId: target.company, title: "Website task", projectId: "launch", assigneeAgentId: "morgan", status: "backlog" };
    const o = { ...base, tasks: [row], state: { cliResult: row, worker: { id: "morgan" }, project: { id: "launch" }, tasksBeforeCli: 0,
      cliCommandExecuted: true, explicitCompany: target.company, executedArgv: ["issue", "create"] } };
    expect(gradeCreateFromCli(o).passed).toBe(true);
    expect(gradeCreateFromCli({ ...o, tasks: [{ ...row, companyId: "foreign" }] }).passed).toBe(false);
    expect(gradeCreateFromCli({ ...o, tasks: [row, { ...row, id: "duplicate" }] }).passed).toBe(false);
    expect(gradeCreateFromCli({ ...o, state: { ...o.state, tasksBeforeCli: 1 } }).passed).toBe(false);
    expect(gradeCreateFromCli(null).passed).toBe(false);
  });
  it("requires selected identity/company and preserves the other operator profile", () => {
    const o = { ...base, tasks: [], reply: command("paperclipai context use acorn\npaperclipai context show --json"),
      state: { initialProfile: "birch", finalProfile: "acorn", selectedCompanyId: target.company, selectedApiBase: target.apiBase,
        otherProfilePreserved: true, onlyOwnedContextWritten: true, operatorUserId: "synthetic-person", identityIncludesSelectedCompany: true } };
    expect(gradeChooseCliContext(o).passed).toBe(true);
    for (const delta of [{ otherProfilePreserved: false }, { selectedCompanyId: "foreign" }, { identityIncludesSelectedCompany: false }, { onlyOwnedContextWritten: false }])
      expect(gradeChooseCliContext({ ...o, state: { ...o.state, ...delta } }).passed).toBe(false);
  });
});