active-core 1.4.0

//! Complete lexer for the Active alpha.
//!
//! Handles:
//! - Identifiers, keywords (let, true, false, null, env, secret)
//! - Strings (double & single quoted) with escape sequences
//! - Integers (with underscores) and floats
//! - Unit suffixes immediately after numbers (5s, 512MiB, 100/req/s …)
//! - Operators: =  .  ,  ?:  + - * /  == != < <= > >=  && ||  !
//! - Delimiters: [ ] { } ( )
//! - Newlines and full-line comments (# …)
//! - Exact source spans on every token
//!
//! Healing: the lexer detects unterminated strings and records a repair
//! diagnostic (H001) rather than rejecting the input. All other healing
//! phases live in the parser (comma and bracket repairs) and in
//! `crate::heal` (semantic and type healing).

use crate::diag::{thresholds, Diagnostic, Repair, RepairKind, Severity, Span};

/// Internal sentinel for an escaped dollar (`\$`) in a double-quoted string.
///
/// The lexer decodes escapes, which would otherwise erase the difference
/// between `\$` (a literal dollar) and `\\` followed by `$` (a backslash and
/// an interpolation opener). The sentinel preserves that distinction to the
/// parser. It is rendered back as `$` in every string value, and the formatter
/// re-emits it as `\$`, so it never reaches user data.
pub const ESCAPED_DOLLAR: char = '\u{E000}';

/// Position-map mark for a character that came from a `\$` escape.
///
/// The mark rides in the per-character position vector alongside
/// `ESCAPED_DOLLAR`. A genuine U+E000 in source keeps its real position,
/// so the parser can tell `\$` (marked) from user data (unmarked) and a
/// literal U+E000 is never rewritten to `$` (spec/grammar.md §1.4: string
/// content is preserved; only listed escapes decode). Real positions always
/// have small components, so this value can never collide with one.
/// Consumers that do position arithmetic must substitute marked entries
/// (see `pos_entry` in the parser) instead of adding them.
pub const SENTINEL_POS: (u32, u32) = (u32::MAX, u32::MAX);

/// Result of tokenizing: the token stream, hard lexical errors, healing
/// diagnostics, and the comments found along the way (trivia for the
/// formatter).
pub struct Lexed {
    pub tokens: Vec<Token>,
    pub repairs: Vec<Diagnostic>,
    pub errors: Vec<Diagnostic>,
    pub comments: Vec<(String, Span)>,
}

/// Build the H001 repair for a string that reached EOF without its closing
/// delimiter: insert the missing delimiter. Safe repair (confidence ≥ 0.95).
fn unclosed_string_repair(line: u32, col: u32, delimiter: &str) -> Diagnostic {
    Diagnostic {
        severity: Severity::Info, // safe repair: ≥ AUTO_APPLY
        code: "H001".into(),
        message: format!(
            "string literal reached end of input without its closing {}; inserted",
            delimiter
        ),
        path: None,
        span: Some(Span {
            line,
            column: col,
            end_line: line,
            end_column: col + 1,
        }),
        repair: Some(Repair {
            original: String::new(),
            suggested: delimiter.to_string(),
            kind: RepairKind::InsertQuote,
            safe: true,
        }),
        confidence: thresholds::AUTO_APPLY + 0.03,
        // The parser stamps the session file (includes get their own).
        file: None,
    }
}

#[derive(Debug, Clone, PartialEq, Eq)]
pub enum TokenKind {
    Eof,
    Newline,
    /// Opened an indented block (spec/dual-syntax.md §4).
    Indent,
    /// Closed an indented block.
    Dedent,

    // Literals & identifiers
    Ident,
    /// Double-quoted string: escapes processed, `${…}` interpolated.
    /// Carries the source position (line offset, column) of every decoded
    /// character, exactly like MlString: nested interpolation inside
    /// sub-lexed expression text needs the same position fidelity.
    String(Vec<(u32, u32)>),
    /// Single-quoted string: escapes processed, `${…}` literal (spec §2.5).
    SingleString,
    /// Triple-double-quoted multi-line string: escapes processed, `${…}`
    /// interpolated, common-indent stripping at parse time (spec §1.4.1).
    /// Carries the source position (line offset, column) of every decoded
    /// character: escapes decode to characters of different source width
    /// (`\n` is two source columns becoming one decoded newline on the
    /// same physical line), so only a per-character map keeps diagnostics
    /// on their true positions.
    MlString(Vec<(u32, u32)>),
    /// Triple-single-quoted multi-line string: fully literal — backslashes
    /// kept verbatim, `${…}` never interpolated (spec §1.4.1).
    MlSingleString,
    Integer,
    Float,
    True,
    False,
    Null,

    // Keywords
    Let,
    Env,
    Secret,

    // Operators
    Assign,        // =
    Dot,           // .
    Comma,         // ,
    QuestionColon, // ?:
    Plus,          // +
    Minus,         // -
    Star,          // *
    Slash,         // /
    EqEq,          // ==
    NotEq,         // !=
    Lt,            // <
    LtEq,          // <=
    Gt,            // >
    GtEq,          // >=
    AndAnd,        // &&
    OrOr,          // ||
    Bang,          // !

    // Delimiters
    LBracket, // [
    RBracket, // ]
    LBrace,   // {
    RBrace,   // }
    LParen,   // (
    RParen,   // )
    Colon,    // :
    At,       // @ (semantic-block tags, spec §1.4.1)

    // Unit suffix emitted right after a number when a known unit is present
    Unit(String),
}

#[derive(Debug, Clone)]
pub struct Token {
    pub kind: TokenKind,
    pub text: String,
    pub line: u32,
    pub col: u32,
    pub end_line: u32,
    pub end_col: u32,
}

#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub enum LineClass {
    /// Blank line, or a line whose first content is a comment: no tokens,
    /// no indentation-stack change.
    Blank,
    /// A line carrying real content.
    Content,
}

pub struct Lexer {
    chars: Vec<char>,
    pos: usize,
    line: u32,
    col: u32,
    /// Stack of open `(`/`[`/`{` delimiters. Indentation is measured only
    /// when this is empty (spec/dual-syntax.md §3): inside brackets, layout
    /// is cosmetic. Only a *matching* closer pops, so malformed input cannot
    /// change layout state.
    open_delims: Vec<char>,
    /// Indentation columns of the open blocks, initialised to `[0]`.
    indent_stack: Vec<usize>,
    /// True at the start of a physical line that still needs measurement.
    at_line_start: bool,
}

impl Lexer {
    pub fn new(src: &str) -> Self {
        // A leading byte-order mark is not content (research HIST-YAML-021;
        // JSON RFC policy: parsers may ignore it). Strip one U+FEFF so it
        // never becomes an E005 token or shifts the first column.
        let src = src.strip_prefix('\u{FEFF}').unwrap_or(src);
        Self {
            chars: src.chars().collect(),
            pos: 0,
            line: 1,
            col: 1,
            open_delims: Vec::new(),
            indent_stack: vec![0],
            at_line_start: true,
        }
    }

    fn peek(&self) -> Option<char> {
        self.chars.get(self.pos).copied()
    }

    fn peek_ahead(&self, n: usize) -> Option<char> {
        self.chars.get(self.pos + n).copied()
    }

    fn bump(&mut self) -> Option<char> {
        let c = self.peek()?;
        self.pos += 1;
        if c == '\n' {
            self.line += 1;
            self.col = 1;
        } else {
            self.col += 1;
        }
        Some(c)
    }

    fn make_token(&self, kind: TokenKind, text: String, start_line: u32, start_col: u32) -> Token {
        Token {
            kind,
            text,
            line: start_line,
            col: start_col,
            end_line: self.line,
            end_col: self.col,
        }
    }

    /// Lex a triple-double-quoted body after the opening `"""`. Processes
    /// escapes exactly like `"…"` (including the `\$` sentinel) and leaves
    /// `${…}` intact for the parser. Returns the decoded text, whether the
    /// closing `"""` was found, and the source position (physical line
    /// offset, column) of every decoded character for diagnostic mapping.
    /// Newlines, brackets, braces, and `#` inside
    /// the body are content — they never affect layout, delimiter, or
    /// comment state, because the loop below consumes them directly.
    fn lex_ml_string(&mut self, quote: char) -> (String, bool, Vec<(u32, u32)>) {
        let mut s = String::new();
        // Source position (physical line offset, column) of every decoded
        // character, recorded *before* consuming: self.col is the column
        // of the current peek character and advances with each bump().
        let mut pos: Vec<(u32, u32)> = Vec::new();
        let mut real_off: u32 = 0;
        let mut escaped = false;
        while let Some(ch) = self.peek() {
            if escaped {
                // The decoded character takes the backslash's position;
                // bump() then advances past both source characters.
                let at = (real_off, self.col);
                match ch {
                    'n' => {
                        s.push('\n');
                        pos.push(at);
                    }
                    '\n' => {
                        // Backslash followed by a physical newline: an
                        // unknown escape, so both characters are kept — and
                        // the physical line still advances for mapping.
                        s.push('\\');
                        pos.push(at);
                        s.push('\n');
                        pos.push((real_off, self.col + 1));
                        real_off += 1;
                    }
                    't' => {
                        s.push('\t');
                        pos.push(at);
                    }
                    'r' => {
                        s.push('\r');
                        pos.push(at);
                    }
                    '\\' => {
                        s.push('\\');
                        pos.push(at);
                    }
                    '"' => {
                        s.push('"');
                        pos.push(at);
                    }
                    '0' => {
                        s.push('\0');
                        pos.push(at);
                    }
                    '$' => {
                        s.push(ESCAPED_DOLLAR);
                        pos.push(SENTINEL_POS);
                    }
                    other => {
                        s.push('\\');
                        pos.push(at);
                        s.push(other);
                        pos.push((real_off, self.col + 1));
                    }
                }
                escaped = false;
                self.bump();
            } else if ch == '\\' {
                escaped = true;
                self.bump();
            } else if ch == quote
                && self.peek_ahead(1) == Some(quote)
                && self.peek_ahead(2) == Some(quote)
            {
                self.bump();
                self.bump();
                self.bump();
                return (s, true, pos);
            } else if ch == '\r' {
                // Same CRLF normalization as single-line strings.
                if self.peek_ahead(1) == Some('\n') {
                    self.bump();
                    continue;
                }
                pos.push((real_off, self.col));
                s.push('\n');
                self.bump();
            } else {
                if ch == '\n' {
                    pos.push((real_off, self.col));
                    real_off += 1;
                } else {
                    pos.push((real_off, self.col));
                }
                s.push(ch);
                self.bump();
            }
        }
        if escaped {
            s.push('\\');
            pos.push((real_off, self.col));
        }
        (s, false, pos)
    }

    /// Lex a triple-single-quoted body after the opening `'''`. Fully
    /// literal: no escapes, no interpolation. Returns the raw text and
    /// whether the closing `'''` was found.
    fn lex_ml_literal(&mut self, quote: char) -> (String, bool) {
        let mut s = String::new();
        while let Some(ch) = self.peek() {
            if ch == quote && self.peek_ahead(1) == Some(quote) && self.peek_ahead(2) == Some(quote)
            {
                self.bump();
                self.bump();
                self.bump();
                return (s, true);
            }
            // Same CRLF normalization; fully literal otherwise.
            if ch == '\r' {
                if self.peek_ahead(1) == Some('\n') {
                    self.bump();
                    continue;
                }
                s.push('\n');
                self.bump();
                continue;
            }
            s.push(ch);
            self.bump();
        }
        (s, false)
    }

    /// Measure one line's indentation and update the stack, emitting Indent
    /// and Dedent tokens (spec/dual-syntax.md §4). Returns whether the line
    /// carries content.
    fn measure_indentation(
        &mut self,
        tokens: &mut Vec<Token>,
        errors: &mut Vec<Diagnostic>,
        repairs: &mut Vec<Diagnostic>,
    ) -> LineClass {
        let line = self.line;
        let start_col = self.col;
        let mut column: usize = 0;
        let mut had_tab = false;
        let mut tab_span: Option<(u32, u32)> = None;

        while let Some(ch) = self.peek() {
            match ch {
                ' ' => {
                    column += 1;
                    self.bump();
                }
                '\t' => {
                    // Each tab counts as one column; the first one is E006.
                    if !had_tab {
                        had_tab = true;
                        tab_span = Some((self.line, self.col));
                    }
                    column += 1;
                    self.bump();
                }
                _ => break,
            }
        }

        if let Some((l, col)) = tab_span {
            errors.push(Diagnostic {
                severity: Severity::Error,
                code: "E006".into(),
                message: "tab character in leading whitespace; use spaces".into(),
                path: None,
                span: Some(Span {
                    line: l,
                    column: col,
                    end_line: l,
                    end_column: col + 1,
                }),
                repair: None,
                confidence: 0.0,
                // The parser stamps the session file (includes get theirs).
                file: None,
            });
        }

        // Blank line, or a line whose first content is a comment: no tokens
        // and no stack change. (A comment-only line's comment is skipped by
        // the main loop, which then sees the newline.)
        match self.peek() {
            None | Some('\n') | Some('#') => return LineClass::Blank,
            _ => {}
        }

        let top = *self.indent_stack.last().unwrap_or(&0);
        if column > top {
            self.indent_stack.push(column);
            tokens.push(self.make_token(TokenKind::Indent, column.to_string(), line, start_col));
        } else if column < top {
            while let Some(&level) = self.indent_stack.last() {
                if level <= column {
                    break;
                }
                self.indent_stack.pop();
                let target = self.indent_stack.last().copied().unwrap_or(0);
                tokens.push(self.make_token(
                    TokenKind::Dedent,
                    target.to_string(),
                    line,
                    start_col,
                ));
            }
            if self.indent_stack.last().copied() != Some(column) {
                // Unmatched dedentation: the stack has already popped to the
                // nearest level below, and the column is not pushed.
                errors.push(Diagnostic {
                    severity: Severity::Error,
                    code: "E007".into(),
                    message: format!("inconsistent dedentation to column {column}"),
                    path: None,
                    span: Some(Span {
                        line,
                        column: start_col,
                        end_line: line,
                        end_column: start_col + column as u32,
                    }),
                    repair: None,
                    confidence: 0.0,
                    // The parser stamps the session file.
                    file: None,
                });
            }
        }

        let _ = repairs; // lexical repairs are recorded elsewhere in the loop
        LineClass::Content
    }

    pub fn tokenize(&mut self) -> Lexed {
        let mut tokens = Vec::new();
        let mut repairs: Vec<Diagnostic> = Vec::new();
        let mut errors: Vec<Diagnostic> = Vec::new();
        let mut comments: Vec<(String, Span)> = Vec::new();

        loop {
            // Indentation is measured at the start of each physical line, and
            // only at bracket depth 0 (spec/dual-syntax.md §3).
            if self.at_line_start {
                self.at_line_start = false;
                if self.open_delims.is_empty() {
                    let class = self.measure_indentation(&mut tokens, &mut errors, &mut repairs);
                    if class == LineClass::Blank {
                        // Blank or comment-only line: the stack must not
                        // change, and the next physical line is measured.
                        self.at_line_start = true;
                    }
                }
            }

            let c = match self.peek() {
                Some(c) => c,
                None => break,
            };

            match c {
                // Horizontal whitespace
                ' ' | '\t' | '\r' => {
                    self.bump();
                }

                // Newline
                '\n' => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    tokens.push(self.make_token(TokenKind::Newline, "\n".into(), l, col));
                    self.at_line_start = true;
                }

                // Full-line or trailing comment: retained as trivia with its
                // span so the formatter can re-emit it (§7-§8). A
                // trailing carriage return (CRLF documents) is not
                // content: keeping it would poison annotation payloads
                // (`true\r` is not `true`) and formatter output.
                '#' => {
                    let (l, col) = (self.line, self.col);
                    let mut text = String::new();
                    while let Some(ch) = self.peek() {
                        if ch == '\n' {
                            break;
                        }
                        text.push(ch);
                        self.bump();
                    }
                    // Span end tracks the text: a stripped terminator
                    // is one character column, ASCII by definition.
                    let stripped = text.ends_with('\r');
                    if stripped {
                        text.pop();
                    }
                    comments.push((
                        text,
                        Span {
                            line: l,
                            column: col,
                            end_line: self.line,
                            end_column: if stripped {
                                self.col.saturating_sub(1)
                            } else {
                                self.col
                            },
                        },
                    ));
                }

                // Multi-character operators
                '?' if self.peek_ahead(1) == Some(':') => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    self.bump();
                    tokens.push(self.make_token(TokenKind::QuestionColon, "?:".into(), l, col));
                }
                '=' if self.peek_ahead(1) == Some('=') => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    self.bump();
                    tokens.push(self.make_token(TokenKind::EqEq, "==".into(), l, col));
                }
                '!' if self.peek_ahead(1) == Some('=') => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    self.bump();
                    tokens.push(self.make_token(TokenKind::NotEq, "!=".into(), l, col));
                }
                '<' if self.peek_ahead(1) == Some('=') => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    self.bump();
                    tokens.push(self.make_token(TokenKind::LtEq, "<=".into(), l, col));
                }
                '>' if self.peek_ahead(1) == Some('=') => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    self.bump();
                    tokens.push(self.make_token(TokenKind::GtEq, ">=".into(), l, col));
                }
                '&' if self.peek_ahead(1) == Some('&') => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    self.bump();
                    tokens.push(self.make_token(TokenKind::AndAnd, "&&".into(), l, col));
                }
                '|' if self.peek_ahead(1) == Some('|') => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    self.bump();
                    tokens.push(self.make_token(TokenKind::OrOr, "||".into(), l, col));
                }

                // Single-character operators & delimiters
                '=' => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    tokens.push(self.make_token(TokenKind::Assign, "=".into(), l, col));
                }
                '.' => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    tokens.push(self.make_token(TokenKind::Dot, ".".into(), l, col));
                }
                ',' => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    tokens.push(self.make_token(TokenKind::Comma, ",".into(), l, col));
                }
                '+' => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    tokens.push(self.make_token(TokenKind::Plus, "+".into(), l, col));
                }
                '-' => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    tokens.push(self.make_token(TokenKind::Minus, "-".into(), l, col));
                }
                '*' => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    tokens.push(self.make_token(TokenKind::Star, "*".into(), l, col));
                }
                '/' => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    tokens.push(self.make_token(TokenKind::Slash, "/".into(), l, col));
                }
                '<' => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    tokens.push(self.make_token(TokenKind::Lt, "<".into(), l, col));
                }
                '>' => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    tokens.push(self.make_token(TokenKind::Gt, ">".into(), l, col));
                }
                '!' => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    tokens.push(self.make_token(TokenKind::Bang, "!".into(), l, col));
                }
                '[' => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    self.open_delims.push('[');
                    tokens.push(self.make_token(TokenKind::LBracket, "[".into(), l, col));
                }
                ']' => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    if self.open_delims.last() == Some(&'[') {
                        self.open_delims.pop();
                    }
                    tokens.push(self.make_token(TokenKind::RBracket, "]".into(), l, col));
                }
                '{' => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    self.open_delims.push('{');
                    tokens.push(self.make_token(TokenKind::LBrace, "{".into(), l, col));
                }
                '}' => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    if self.open_delims.last() == Some(&'{') {
                        self.open_delims.pop();
                    }
                    tokens.push(self.make_token(TokenKind::RBrace, "}".into(), l, col));
                }
                '(' => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    self.open_delims.push('(');
                    tokens.push(self.make_token(TokenKind::LParen, "(".into(), l, col));
                }
                ')' => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    if self.open_delims.last() == Some(&'(') {
                        self.open_delims.pop();
                    }
                    tokens.push(self.make_token(TokenKind::RParen, ")".into(), l, col));
                }
                ':' => {
                    // A bare colon (block headers, `key: value`). The `?:`
                    // combination is matched earlier as QuestionColon.
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    tokens.push(self.make_token(TokenKind::Colon, ":".into(), l, col));
                }
                '@' => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    tokens.push(self.make_token(TokenKind::At, "@".into(), l, col));
                }

                // Triple-quoted multi-line strings (spec §1.4.1). The
                // triple-quote check must come before the single-quote
                // arms: `"""` and `'''` open a multi-line string.
                '"' if self.peek_ahead(1) == Some('"') && self.peek_ahead(2) == Some('"') => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    self.bump();
                    self.bump(); // opening """
                    let (raw, terminated, src_pos) = self.lex_ml_string('"');
                    if !terminated {
                        repairs.push(unclosed_string_repair(l, col, "\"\"\""));
                    }
                    tokens.push(self.make_token(TokenKind::MlString(src_pos), raw, l, col));
                }
                '\'' if self.peek_ahead(1) == Some('\'') && self.peek_ahead(2) == Some('\'') => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    self.bump();
                    self.bump(); // opening '''
                    let (raw, terminated) = self.lex_ml_literal('\'');
                    if !terminated {
                        repairs.push(unclosed_string_repair(l, col, "'''"));
                    }
                    tokens.push(self.make_token(TokenKind::MlSingleString, raw, l, col));
                }

                // Double-quoted strings (escapes + ${…} left intact for the parser)
                '"' => {
                    let (l, col) = (self.line, self.col);
                    self.bump(); // opening "
                    let mut s = String::new();
                    // Per-character source positions (physical line offset,
                    // column), recorded before consuming: self.col is the
                    // column of the current peek character.
                    let mut pos: Vec<(u32, u32)> = Vec::new();
                    let mut real_off: u32 = 0;
                    let mut escaped = false;
                    let mut terminated = false;
                    while let Some(ch) = self.peek() {
                        if escaped {
                            let at = (real_off, self.col);
                            match ch {
                                'n' => {
                                    s.push('\n');
                                    pos.push(at);
                                }
                                '\n' => {
                                    // Backslash followed by a physical
                                    // newline: an unknown escape, so both
                                    // characters are kept — and the
                                    // physical line still advances.
                                    s.push('\\');
                                    pos.push(at);
                                    s.push('\n');
                                    pos.push((real_off, self.col + 1));
                                    real_off += 1;
                                }
                                't' => {
                                    s.push('\t');
                                    pos.push(at);
                                }
                                'r' => {
                                    s.push('\r');
                                    pos.push(at);
                                }
                                '\\' => {
                                    s.push('\\');
                                    pos.push(at);
                                }
                                '"' => {
                                    s.push('"');
                                    pos.push(at);
                                }
                                '0' => {
                                    s.push('\0');
                                    pos.push(at);
                                }
                                // `\$` keeps its own identity through the
                                // escape table so the parser can tell it
                                // apart from a real backslash before `${`.
                                '$' => {
                                    s.push(ESCAPED_DOLLAR);
                                    pos.push(SENTINEL_POS);
                                }
                                other => {
                                    s.push('\\');
                                    pos.push(at);
                                    s.push(other);
                                    pos.push((real_off, self.col + 1));
                                }
                            }
                            escaped = false;
                            self.bump();
                        } else if ch == '\\' {
                            escaped = true;
                            self.bump();
                        } else if ch == '"' {
                            self.bump();
                            terminated = true;
                            break;
                        } else if ch == '\r' {
                            // CRLF normalization (research HIST-YAML-014):
                            // `\r\n` contributes one newline; a lone CR
                            // becomes LF. Explicit `\r` escapes decode
                            // elsewhere and never reach this branch.
                            if self.peek_ahead(1) == Some('\n') {
                                self.bump();
                                continue;
                            }
                            pos.push((real_off, self.col));
                            s.push('\n');
                            self.bump();
                        } else {
                            if ch == '\n' {
                                pos.push((real_off, self.col));
                                real_off += 1;
                            } else {
                                pos.push((real_off, self.col));
                            }
                            s.push(ch);
                            self.bump();
                        }
                    }
                    if !terminated {
                        // A dangling escape (string ended inside `\`) has
                        // nothing to escape: preserve the backslash so the
                        // content is not silently altered.
                        if escaped {
                            s.push('\\');
                            pos.push((real_off, self.col));
                        }
                        // Healing phase 1: insert the missing closing quote.
                        repairs.push(unclosed_string_repair(l, col, "\""));
                    }
                    tokens.push(self.make_token(TokenKind::String(pos), s, l, col));
                }

                // Single-quoted strings (no interpolation semantics)
                '\'' => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    let mut s = String::new();
                    let mut escaped = false;
                    let mut terminated = false;
                    while let Some(ch) = self.peek() {
                        if escaped {
                            match ch {
                                '\\' => s.push('\\'),
                                '\'' => s.push('\''),
                                other => {
                                    s.push('\\');
                                    s.push(other);
                                }
                            }
                            escaped = false;
                            self.bump();
                        } else if ch == '\\' {
                            escaped = true;
                            self.bump();
                        } else if ch == '\'' {
                            self.bump();
                            terminated = true;
                            break;
                        } else if ch == '\r' {
                            // Same CRLF normalization as double-quoted.
                            if self.peek_ahead(1) == Some('\n') {
                                self.bump();
                                continue;
                            }
                            s.push('\n');
                            self.bump();
                        } else {
                            s.push(ch);
                            self.bump();
                        }
                    }
                    if !terminated {
                        // A dangling escape has nothing to escape; preserve
                        // the backslash so the content is not altered.
                        if escaped {
                            s.push('\\');
                        }
                        // Healing phase 1: insert the missing closing quote.
                        repairs.push(unclosed_string_repair(l, col, "'"));
                    }
                    tokens.push(self.make_token(TokenKind::SingleString, s, l, col));
                }

                // Numbers + optional unit
                c if c.is_ascii_digit() => {
                    let (l, col) = (self.line, self.col);
                    let mut s = String::new();
                    let mut is_float = false;

                    while let Some(ch) = self.peek() {
                        if ch.is_ascii_digit() || ch == '_' {
                            s.push(ch);
                            self.bump();
                        } else if ch == '.' && !is_float {
                            if let Some(next) = self.peek_ahead(1) {
                                if next.is_ascii_digit() {
                                    is_float = true;
                                    s.push(ch);
                                    self.bump();
                                    continue;
                                }
                            }
                            break;
                        } else {
                            break;
                        }
                    }

                    let cleaned: String = s.chars().filter(|c| *c != '_').collect();
                    let kind = if is_float {
                        TokenKind::Float
                    } else {
                        TokenKind::Integer
                    };
                    tokens.push(self.make_token(kind, cleaned, l, col));

                    // Unit must be attached with no intervening space
                    if let Some(u) = self.try_consume_unit() {
                        let (ul, uc) = (self.line, self.col);
                        tokens.push(self.make_token(TokenKind::Unit(u.clone()), u, ul, uc));
                    }
                }

                // Identifiers & keywords
                c if c.is_ascii_alphabetic() || c == '_' => {
                    let (l, col) = (self.line, self.col);
                    let mut s = String::new();
                    while let Some(ch) = self.peek() {
                        if ch.is_ascii_alphanumeric() || ch == '_' {
                            s.push(ch);
                            self.bump();
                        } else {
                            break;
                        }
                    }
                    let kind = match s.as_str() {
                        "let" => TokenKind::Let,
                        "true" => TokenKind::True,
                        "false" => TokenKind::False,
                        "null" => TokenKind::Null,
                        "env" => TokenKind::Env,
                        "secret" => TokenKind::Secret,
                        _ => TokenKind::Ident,
                    };
                    tokens.push(self.make_token(kind, s, l, col));
                }

                // Unknown character — a hard error in every mode: no rule
                // accepts it, and skipping it would silently change the
                // configuration. Reported with a precise span.
                _ => {
                    let (l, col) = (self.line, self.col);
                    self.bump();
                    errors.push(Diagnostic {
                        severity: Severity::Error,
                        code: "E005".into(),
                        message: format!("unexpected character {:?}", c),
                        path: None,
                        span: Some(Span {
                            line: l,
                            column: col,
                            end_line: l,
                            end_column: col + 1,
                        }),
                        repair: None,
                        confidence: 0.0,
                        // The parser stamps the session file.
                        file: None,
                    });
                }
            }
        }

        // End of input closes every open indentation block
        // (spec/dual-syntax.md §4.2).
        while self.indent_stack.len() > 1 {
            self.indent_stack.pop();
            let target = self.indent_stack.last().copied().unwrap_or(0);
            tokens.push(self.make_token(
                TokenKind::Dedent,
                target.to_string(),
                self.line,
                self.col,
            ));
        }

        tokens.push(self.make_token(TokenKind::Eof, String::new(), self.line, self.col));
        Lexed {
            tokens,
            repairs,
            errors,
            comments,
        }
    }

    /// Consume a known unit suffix if present.
    fn try_consume_unit(&mut self) -> Option<String> {
        let start_pos = self.pos;
        let start_line = self.line;
        let start_col = self.col;

        let mut s = String::new();
        while let Some(ch) = self.peek() {
            // Unicode-aware so the documented `µs` microsecond suffix is
            // collectable (the whitelist carries it).
            if ch.is_alphanumeric() || ch == '/' || ch == '_' || ch == '%' {
                s.push(ch);
                self.bump();
            } else {
                break;
            }
        }

        if s.is_empty() {
            return None;
        }

        const KNOWN: &[&str] = &[
            "ns", "us", "µs", "ms", "s", "m", "h", "d", "B", "KiB", "MiB", "GiB", "TiB", "KB",
            "MB", "GB", "TB", "/s", "/m", "/h", "per_s", "per_m", "per_h", "req/s", "req_s",
            "/req/s", "/req/m", "/req/h", "req/m", "req_m", "req/h", "req_h", "%", "Hz", "kHz",
            "MHz", "GHz", "THz", "b", "Kb", "Mb", "Gb", "bps", "Kbps", "Mbps", "Gbps", "MB/s",
            "week", "sec", "min", "tokens", "ktokens", "Mtokens", "tok/s", "FLOPS", "TFLOPS",
            "PFLOPS", "Pa", "bar", "psi", "V", "A", "W", "J", "kWh", "N", "deg", "rad", "rpm",
            "meter", "km", "kg", "g", "PiB", "EiB", "K", "Cel", "Fahr", "dB",
        ];

        if KNOWN.contains(&s.as_str()) {
            Some(s)
        } else {
            // rollback
            self.pos = start_pos;
            self.line = start_line;
            self.col = start_col;
            None
        }
    }
}