import { ATTRIBUTION_PATTERNS, NAME_PATTERN, WATCHED_NAMES } from './forbidden-names.mjs';

/** A real integration must identify its client and configuration protocol.
 * This exemption is limited to four operational source/test files, the
 * configuration reference's name of the client's own environment variable, and
 * the README's exact installation instructions. Two named local verification JSON
 * files permit only configuration-path/setup-command fields. Authorship claims
 * remain forbidden.
 * Names use the guard's existing codepoint source, avoiding self-matches here.
 */
const FILES = new Set([
    'src/agents/AgentSetup.tsx',
    'src/agents/AgentSetup.test.tsx',
    'agents/hooks/atlas-trace.py',
    'agents/hooks/test_atlas_trace.py',
]);
const client = WATCHED_NAMES[0];
const JSON_ARTIFACTS = new Set([
    'verification/pr-2068/final-agent-boundary-initial-unavailable.json',
    'verification/pr-2068/final-agent-diagnosis-restart.json',
]);
const README_LINES = new Set([
    `\`.${client}/settings.local.json\` and \`.${client}/hooks/\`.`,
    `python3 ~/Downloads/cbm-atlas-trace.py --install-${client} --root /absolute/repository --project INDEXED_NAME --daemon-url http://127.0.0.1:9749`,
    `Installation is explicit and local: it preserves unrelated ${client[0].toUpperCase() + client.slice(1)} settings,`,
    `adds a PostToolUse entry to \`.${client}/settings.local.json\`, and copies the hook`,
    `into \`.${client}/hooks/\`. It refuses conflicting hooks, symlinks and malformed`,
]);
/** The installer reads this variable, so the configuration reference must name it exactly. */
const ENVIRONMENT_REFERENCES = new Map([
    ['src/settings/ConfigReference.tsx', new RegExp(`\\b${client.toUpperCase()}_CONFIG_DIR\\b`, 'g')],
]);
const REFERENCES = [
    new RegExp(`\\b${client} Code\\b`, 'gi'),
    new RegExp(`--install-${client}\\b`, 'gi'),
    new RegExp(`\\binstall_${client}\\b`, 'g'),
    new RegExp(`\\.${client}(?=[/'"\\s)]|$)`, 'g'),
];

function setupEvidenceField(path, line) {
    if (!JSON_ARTIFACTS.has(path)) return false;
    const field = line.match(/^\s*"(path|command)"\s*:\s*("(?:[^"\\]|\\.)*")\s*,?\s*$/);
    if (!field) return false;
    let value;
    try { value = JSON.parse(field[2]); } catch { return false; }
    return field[1] === 'path'
        ? new RegExp(`(?:^|/)\\.${client}/settings(?:\\.local)?\\.json$`).test(value)
        : value.startsWith(`python3 ~/Downloads/cbm-atlas-trace.py --install-${client} --root `)
            && value.includes(' --project ') && value.includes(" --daemon-url 'http://127.0.0.1:");
}

export function operationalClientReference(path, line) {
    const setupInstruction = path === 'README.md' && README_LINES.has(line.trim());
    const environment = ENVIRONMENT_REFERENCES.get(path);
    if ((!FILES.has(path) && !environment && !setupInstruction && !setupEvidenceField(path, line)) || !NAME_PATTERN.test(line)
        || ATTRIBUTION_PATTERNS.some(({ pattern }) => pattern.test(line))) return false;
    if (setupInstruction) return true;
    if (environment) return !NAME_PATTERN.test(line.replace(environment, ''));
    let remaining = line;
    for (const pattern of REFERENCES) remaining = remaining.replace(pattern, '');
    return !NAME_PATTERN.test(remaining);
}

export const OPERATIONAL_CLIENT_REASON =
    'explicit client setup protocol/configuration reference in scoped source/test, exact README instructions, '
    + 'named local evidence fields; authorship claims remain forbidden';