agentstategraph_ffi/

lib.rs

//! C ABI for AgentStateGraph — opaque handle-based API.
//!
//! All functions use opaque pointers and C strings.
//! The caller is responsible for freeing returned strings with agentstategraph_free_string.
//!
//! This crate produces a shared library (.so/.dylib/.dll) and static library (.a)
//! that any language with C FFI can call.
//!
//! Every `extern "C"` function in this crate takes raw pointers by design —
//! they form the C ABI contract. Marking them `unsafe fn` would change that
//! ABI and make every bindgen-generated header noisier. We validate pointer
//! inputs inside each function instead (`is_null` checks, bounded `CStr`
//! reads). The blanket allow below silences clippy on this pattern
//! crate-wide.

#![allow(clippy::not_unsafe_ptr_arg_deref)]
#![allow(clippy::missing_safety_doc)]

use std::ffi::{CStr, CString};
use std::os::raw::c_char;
use std::ptr;
use std::sync::Arc;

use agentstategraph::{
    CommitOptions, CreateSessionParams, Repository, RetentionPolicy, SpecHandle, SCHEMA_VERSION,
};
use agentstategraph_core::{
    IntentCategory, Namespace, ObjectId, QueryFilters, SessionStatus, ToolCall,
};
use agentstategraph_migrate::{CheckResult, Registry, RunMode, StepStatus};
use agentstategraph_policy::{ChangeProposal, Policy, PolicyStore, Situation};
use agentstategraph_storage::SqliteStorage;
use agentstategraph_taint::{
    QuarantineParams, TaintEffect, TaintKind, TaintMetadata, TaintParams, TaintSeverity,
    UntaintParams, UnwatchParams, WatchDirection, WatchParams,
};
use agentstategraph_tasks::{AddTaskOptions, Priority, Proof, ProofKind, TaskId, TaskStore};
use semver::Version;
use serde::Serialize;

/// Opaque handle to a Repository.
pub struct SgRepo {
    inner: Arc<Repository>,
}

/// Opaque handle to a TaskStore.
pub struct SgTaskStore {
    inner: TaskStore,
}

/// Opaque handle to a PolicyStore.
pub struct SgPolicyStore {
    inner: PolicyStore,
}

/// Create a new in-memory AgentStateGraph repository.
#[no_mangle]
pub extern "C" fn agentstategraph_new_memory() -> *mut SgRepo {
    let storage = match SqliteStorage::in_memory() {
        Ok(s) => s,
        Err(_) => return ptr::null_mut(),
    };
    let repo = Repository::new(Box::new(storage));
    if repo.init().is_err() {
        return ptr::null_mut();
    }
    Box::into_raw(Box::new(SgRepo {
        inner: Arc::new(repo),
    }))
}

/// Create a new SQLite-backed AgentStateGraph repository.
#[no_mangle]
pub extern "C" fn agentstategraph_new_sqlite(path: *const c_char) -> *mut SgRepo {
    let path = unsafe {
        if path.is_null() {
            return ptr::null_mut();
        }
        match CStr::from_ptr(path).to_str() {
            Ok(s) => s.to_string(),
            Err(_) => return ptr::null_mut(),
        }
    };
    let storage = match SqliteStorage::open(&path) {
        Ok(s) => s,
        Err(_) => return ptr::null_mut(),
    };
    let repo = Repository::new(Box::new(storage));
    if repo.init().is_err() {
        return ptr::null_mut();
    }
    Box::into_raw(Box::new(SgRepo {
        inner: Arc::new(repo),
    }))
}

/// Create a new Postgres-backed AgentStateGraph repository.
///
/// Feature-gated: only exported when the `postgres` feature is
/// enabled at build time. Pass a libpq-style connection URL
/// (e.g. `postgresql://user@host/dbname`) and a tenant id for
/// multi-tenant isolation — every row written by this handle is
/// scoped to `tenant_id`. Returns NULL on connection / init
/// failure.
#[cfg(feature = "postgres")]
#[no_mangle]
pub extern "C" fn agentstategraph_new_postgres(
    url: *const c_char,
    tenant_id: *const c_char,
) -> *mut SgRepo {
    use agentstategraph_storage::PostgresStorage;
    if url.is_null() || tenant_id.is_null() {
        return ptr::null_mut();
    }
    let url = match unsafe { CStr::from_ptr(url) }.to_str() {
        Ok(s) => s.to_string(),
        Err(_) => return ptr::null_mut(),
    };
    let tenant = match unsafe { CStr::from_ptr(tenant_id) }.to_str() {
        Ok(s) => s.to_string(),
        Err(_) => return ptr::null_mut(),
    };
    // PostgresStorage::connect_tenant is async. We need a runtime
    // to drive it, and we need the runtime to persist so later
    // block_on calls inside the Storage impls can dispatch on it.
    // The pattern used by SqliteStorage is
    // fully-sync, so for Postgres we run an owned multi-thread
    // runtime and enter() its handle on construction so the repo
    // inherits it.
    let rt = match tokio::runtime::Builder::new_multi_thread()
        .enable_all()
        .build()
    {
        Ok(r) => r,
        Err(_) => return ptr::null_mut(),
    };
    let storage = match rt.block_on(PostgresStorage::connect_tenant(&url, &tenant)) {
        Ok(s) => s,
        Err(_) => return ptr::null_mut(),
    };
    // Leak the runtime: its Handle::current is needed by every
    // subsequent Storage call on this handle. Dropping the runtime
    // would break in-flight queries; the runtime is freed alongside
    // the SgRepo on agentstategraph_free via the leaker going out
    // of scope is NOT done — we deliberately keep it alive for the
    // process lifetime. For consumers that care about clean
    // shutdown, shut the process down gracefully (same pattern as
    // tokio::main).
    let _guard = rt.enter();
    std::mem::forget(rt);
    let repo = Repository::new(Box::new(storage));
    if repo.init().is_err() {
        return ptr::null_mut();
    }
    Box::into_raw(Box::new(SgRepo {
        inner: Arc::new(repo),
    }))
}

/// Free a repository handle.
#[no_mangle]
pub extern "C" fn agentstategraph_free(repo: *mut SgRepo) {
    if !repo.is_null() {
        unsafe {
            drop(Box::from_raw(repo));
        }
    }
}

/// Free a string returned by AgentStateGraph functions.
#[no_mangle]
pub extern "C" fn agentstategraph_free_string(s: *mut c_char) {
    if !s.is_null() {
        unsafe {
            drop(CString::from_raw(s));
        }
    }
}

/// Get a JSON value at a path. Returns a JSON string (caller must free).
#[no_mangle]
pub extern "C" fn agentstategraph_get(
    repo: *const SgRepo,
    ref_name: *const c_char,
    path: *const c_char,
) -> *mut c_char {
    let (repo, ref_name, path) = match unsafe { parse_repo_ref_path(repo, ref_name, path) } {
        Some(v) => v,
        None => return ptr::null_mut(),
    };
    match repo.inner.get_json(&ref_name, &path) {
        Ok(val) => to_c_string(&serde_json::to_string(&val).unwrap_or_default()),
        Err(_) => ptr::null_mut(),
    }
}

/// Set a JSON value at a path. Returns commit ID string (caller must free).
#[no_mangle]
pub extern "C" fn agentstategraph_set(
    repo: *const SgRepo,
    ref_name: *const c_char,
    path: *const c_char,
    json_value: *const c_char,
    intent_category: *const c_char,
    intent_description: *const c_char,
) -> *mut c_char {
    let (repo, ref_name, path) = match unsafe { parse_repo_ref_path(repo, ref_name, path) } {
        Some(v) => v,
        None => return ptr::null_mut(),
    };
    let json_str = unsafe { c_to_str(json_value) };
    let category_str = unsafe { c_to_str(intent_category) };
    let desc_str = unsafe { c_to_str(intent_description) };

    let value: serde_json::Value = match serde_json::from_str(&json_str) {
        Ok(v) => v,
        Err(_) => return ptr::null_mut(),
    };

    let category = parse_category(&category_str);
    let opts = CommitOptions::new("ffi", category, &desc_str);

    match repo.inner.set_json(&ref_name, &path, &value, opts) {
        Ok(id) => to_c_string(&id.to_string()),
        Err(_) => ptr::null_mut(),
    }
}

/// Delete a value at a path. Returns commit ID string.
#[no_mangle]
pub extern "C" fn agentstategraph_delete(
    repo: *const SgRepo,
    ref_name: *const c_char,
    path: *const c_char,
    intent_category: *const c_char,
    intent_description: *const c_char,
) -> *mut c_char {
    let (repo, ref_name, path) = match unsafe { parse_repo_ref_path(repo, ref_name, path) } {
        Some(v) => v,
        None => return ptr::null_mut(),
    };
    let category_str = unsafe { c_to_str(intent_category) };
    let desc_str = unsafe { c_to_str(intent_description) };
    let category = parse_category(&category_str);
    let opts = CommitOptions::new("ffi", category, &desc_str);

    match repo.inner.delete(&ref_name, &path, opts) {
        Ok(id) => to_c_string(&id.to_string()),
        Err(_) => ptr::null_mut(),
    }
}

/// Create a branch. Returns commit ID string.
#[no_mangle]
pub extern "C" fn agentstategraph_branch(
    repo: *const SgRepo,
    name: *const c_char,
    from: *const c_char,
) -> *mut c_char {
    let repo = unsafe { repo.as_ref() };
    let repo = match repo {
        Some(r) => r,
        None => return ptr::null_mut(),
    };
    let name = unsafe { c_to_str(name) };
    let from = unsafe { c_to_str(from) };

    match repo.inner.branch(&name, &from) {
        Ok(id) => to_c_string(&id.to_string()),
        Err(_) => ptr::null_mut(),
    }
}

/// List branches, optionally filtered by prefix. `prefix` may be NULL or
/// an empty string for no filter. Returns a JSON array of
/// `{"name": String, "target": String}` objects (target = commit id hex),
/// or `{"error": "..."}` on failure.
#[no_mangle]
pub extern "C" fn agentstategraph_list_branches(
    repo: *const SgRepo,
    prefix: *const c_char,
) -> *mut c_char {
    let repo = match unsafe { repo.as_ref() } {
        Some(r) => r,
        None => return ptr::null_mut(),
    };
    let prefix_filter: Option<String> = if prefix.is_null() {
        None
    } else {
        let s = unsafe { c_to_str(prefix) };
        if s.is_empty() {
            None
        } else {
            Some(s)
        }
    };
    match repo.inner.list_branches(prefix_filter.as_deref()) {
        Ok(entries) => {
            let payload: Vec<serde_json::Value> = entries
                .into_iter()
                .map(|(name, id)| {
                    serde_json::json!({
                        "name": name,
                        "target": id.to_string(),
                    })
                })
                .collect();
            json_ok(&payload)
        }
        Err(e) => json_err(&e.to_string()),
    }
}

/// Delete a branch by name. Returns `{"deleted": true|false}` or
/// `{"error": "..."}`. `deleted=false` means the ref didn't exist.
#[no_mangle]
pub extern "C" fn agentstategraph_delete_branch(
    repo: *const SgRepo,
    name: *const c_char,
) -> *mut c_char {
    let repo = match unsafe { repo.as_ref() } {
        Some(r) => r,
        None => return ptr::null_mut(),
    };
    let name = unsafe { c_to_str(name) };
    match repo.inner.delete_branch(&name) {
        Ok(deleted) => to_c_string(&format!("{{\"deleted\":{}}}", deleted)),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Diff two refs. Returns JSON string of DiffOps.
#[no_mangle]
pub extern "C" fn agentstategraph_diff(
    repo: *const SgRepo,
    ref_a: *const c_char,
    ref_b: *const c_char,
) -> *mut c_char {
    let repo = unsafe { repo.as_ref() };
    let repo = match repo {
        Some(r) => r,
        None => return ptr::null_mut(),
    };
    let ref_a = unsafe { c_to_str(ref_a) };
    let ref_b = unsafe { c_to_str(ref_b) };

    match repo.inner.diff(&ref_a, &ref_b) {
        Ok(ops) => to_c_string(&serde_json::to_string(&ops).unwrap_or_default()),
        Err(_) => ptr::null_mut(),
    }
}

/// Merge source into target. Returns commit ID or error JSON.
#[no_mangle]
pub extern "C" fn agentstategraph_merge(
    repo: *const SgRepo,
    source: *const c_char,
    target: *const c_char,
    description: *const c_char,
) -> *mut c_char {
    let repo = unsafe { repo.as_ref() };
    let repo = match repo {
        Some(r) => r,
        None => return ptr::null_mut(),
    };
    let source = unsafe { c_to_str(source) };
    let target = unsafe { c_to_str(target) };
    let desc = unsafe { c_to_str(description) };

    let opts = CommitOptions::new("ffi", IntentCategory::Merge, &desc);
    match repo.inner.merge(&source, &target, opts) {
        Ok(id) => to_c_string(&id.to_string()),
        Err(e) => to_c_string(&format!("error:{}", e)),
    }
}

/// Get commit log as JSON. Returns JSON array string.
#[no_mangle]
pub extern "C" fn agentstategraph_log(
    repo: *const SgRepo,
    ref_name: *const c_char,
    limit: u32,
) -> *mut c_char {
    let repo = unsafe { repo.as_ref() };
    let repo = match repo {
        Some(r) => r,
        None => return ptr::null_mut(),
    };
    let ref_name = unsafe { c_to_str(ref_name) };

    match repo.inner.log(&ref_name, limit as usize) {
        Ok(commits) => {
            let entries: Vec<serde_json::Value> = commits
                .iter()
                .map(|c| {
                    serde_json::json!({
                        "id": c.id.short(),
                        "agent": c.agent_id,
                        "intent_category": format!("{:?}", c.intent.category),
                        "intent_description": c.intent.description,
                        "reasoning": c.reasoning,
                        "confidence": c.confidence,
                    })
                })
                .collect();
            to_c_string(&serde_json::to_string(&entries).unwrap_or_default())
        }
        Err(_) => ptr::null_mut(),
    }
}

/// Blame — returns JSON string with blame entry.
#[no_mangle]
pub extern "C" fn agentstategraph_blame(
    repo: *const SgRepo,
    ref_name: *const c_char,
    path: *const c_char,
) -> *mut c_char {
    let (repo, ref_name, path) = match unsafe { parse_repo_ref_path(repo, ref_name, path) } {
        Some(v) => v,
        None => return ptr::null_mut(),
    };
    match repo.inner.blame(&ref_name, &path) {
        Ok(entry) => to_c_string(&serde_json::to_string(&entry).unwrap_or_default()),
        Err(_) => ptr::null_mut(),
    }
}

/// Return the advanced repository API contract implemented by
/// [`agentstategraph_repository_call`]. Keeping this contract data-driven gives
/// native bindings one stable ABI entry point while still allowing their
/// public APIs to remain strongly typed and idiomatic.
#[no_mangle]
pub extern "C" fn agentstategraph_repository_capabilities() -> *mut c_char {
    json_ok(&serde_json::json!({
        "contract_version": 1,
        "operations": [
            "head", "set_cas", "query.commits",
            "namespace.current", "namespace.create", "namespace.list", "namespace.delete",
            "merge.base", "merge.preview", "merge.checked",
            "explore.list_paths", "explore.get_tree", "explore.search_values",
            "explore.stats", "explore.commit_graph", "explore.intent_tree",
            "explore.history", "gc.dry_run", "gc.sweep", "gc.vacuum",
            "spec.create", "spec.set", "spec.delete", "spec.compare", "spec.commit",
            "spec.discard", "spec.list",
            "session.create", "session.get", "session.list", "session.children",
            "session.update_head", "session.end", "session.active.get", "session.active.set",
            "epoch.create", "epoch.get", "epoch.list", "epoch.seal", "epoch.archive",
            "epoch.export", "epoch.active.get", "epoch.active.set"
        ]
    }))
}

/// Create another repository handle over the same storage, scoped to
/// `namespace`. The returned handle has independent active session/epoch state
/// and must be released with [`agentstategraph_free`].
#[no_mangle]
pub extern "C" fn agentstategraph_fork_namespace(
    repo: *const SgRepo,
    namespace: *const c_char,
) -> *mut SgRepo {
    let Some(repo) = (unsafe { repo.as_ref() }) else {
        return ptr::null_mut();
    };
    let namespace = match Namespace::new(unsafe { c_to_str(namespace) }) {
        Ok(ns) => ns,
        Err(_) => return ptr::null_mut(),
    };
    let fork = repo.inner.fork_namespace(namespace);
    if fork.init().is_err() {
        return ptr::null_mut();
    }
    Box::into_raw(Box::new(SgRepo {
        inner: Arc::new(fork),
    }))
}

/// Invoke an advanced repository operation through the stable JSON ABI.
///
/// `request_json` must be a JSON object. Successful results and failures are
/// JSON values; failures use the existing `{"error":"..."}` convention.
/// Bindings should query [`agentstategraph_repository_capabilities`] instead of
/// assuming that a newer operation exists in an older native artifact.
#[no_mangle]
pub extern "C" fn agentstategraph_repository_call(
    repo: *const SgRepo,
    operation: *const c_char,
    request_json: *const c_char,
) -> *mut c_char {
    let Some(repo) = (unsafe { repo.as_ref() }) else {
        return ptr::null_mut();
    };
    let operation = unsafe { c_to_str(operation) };
    let request: serde_json::Value = if request_json.is_null() {
        serde_json::json!({})
    } else {
        match serde_json::from_str(&unsafe { c_to_str(request_json) }) {
            Ok(serde_json::Value::Object(map)) => serde_json::Value::Object(map),
            Ok(_) => return json_err("request_json must be a JSON object"),
            Err(e) => return json_err(&format!("invalid request_json: {e}")),
        }
    };

    match repository_call(&repo.inner, &operation, &request) {
        Ok(value) => json_ok(&value),
        Err(error) => json_err(&error),
    }
}

fn repository_call(
    repo: &Repository,
    operation: &str,
    request: &serde_json::Value,
) -> Result<serde_json::Value, String> {
    let s = |key: &str| request_string(request, key);
    let optional = |key: &str| request_optional_string(request, key);
    let ref_name = || optional("ref").unwrap_or_else(|| "main".to_string());
    let commit_options = || -> Result<CommitOptions, String> {
        let mut options = CommitOptions::new(
            optional("agent_id").unwrap_or_else(|| "ffi".to_string()),
            parse_category(&optional("category").unwrap_or_else(|| "checkpoint".to_string())),
            s("description")?,
        );
        if let Some(reasoning) = optional("reasoning") {
            options = options.with_reasoning(reasoning);
        }
        if let Some(confidence) = request.get("confidence").and_then(|v| v.as_f64()) {
            options = options.with_confidence(confidence);
        }
        if request.get("tags").is_some() {
            options = options.with_tags(request_string_array(request, "tags")?);
        }
        let tool_calls = request_tool_calls(request)?;
        if !tool_calls.is_empty() {
            options = options.with_tool_calls(tool_calls);
        }
        Ok(options)
    };

    match operation {
        "head" => Ok(
            serde_json::json!({ "head": repo.head(&ref_name()).map_err(err_string)?.to_string() }),
        ),
        "set_cas" => {
            let expected = parse_object_id(&s("expected_head")?)?;
            let value = request
                .get("value")
                .cloned()
                .ok_or_else(|| "missing field: value".to_string())?;
            let id = repo
                .set_json_cas(
                    &ref_name(),
                    expected,
                    &s("path")?,
                    &value,
                    commit_options()?,
                )
                .map_err(err_string)?;
            Ok(serde_json::json!({ "commit": id.to_string() }))
        }
        "query.commits" => {
            let confidence_range = request
                .get("confidence_min")
                .and_then(|v| v.as_f64())
                .zip(request.get("confidence_max").and_then(|v| v.as_f64()));
            let filters = QueryFilters {
                agent_id: optional("agent_id"),
                intent_category: optional("intent_category"),
                tags: request
                    .get("tags")
                    .map(|_| request_string_array(request, "tags"))
                    .transpose()?,
                reasoning_contains: optional("reasoning_contains"),
                confidence_range,
                has_deviations: request.get("has_deviations").and_then(|v| v.as_bool()),
                ..Default::default()
            };
            let commits = repo
                .query_commits(
                    &ref_name(),
                    &filters,
                    request_usize(request, "limit").unwrap_or(50),
                )
                .map_err(err_string)?;
            Ok(serde_json::Value::Array(commits.iter().map(|commit| serde_json::json!({
                "id": commit.id.to_string(), "agent_id": commit.agent_id,
                "intent_category": format!("{:?}", commit.intent.category),
                "intent_description": commit.intent.description, "tags": commit.intent.tags,
                "reasoning": commit.reasoning, "confidence": commit.confidence,
                "parents": commit.parents.iter().map(ToString::to_string).collect::<Vec<_>>(),
                "timestamp": commit.timestamp.to_rfc3339()
            })).collect()))
        }
        "namespace.current" => Ok(serde_json::json!({ "namespace": repo.namespace().as_str() })),
        "namespace.create" => {
            let namespace = Namespace::new(s("name")?).map_err(err_string)?;
            repo.create_namespace(namespace.as_str())
                .map_err(err_string)?;
            repo.fork_namespace(namespace).init().map_err(err_string)?;
            Ok(serde_json::json!({ "created": true }))
        }
        "namespace.list" => Ok(
            serde_json::to_value(repo.list_namespaces().map_err(err_string)?)
                .map_err(err_string)?,
        ),
        "namespace.delete" => Ok(serde_json::json!({
            "deleted": repo.delete_namespace(&s("name")?).map_err(err_string)?
        })),
        "merge.base" => Ok(serde_json::json!({
            "commit": repo.merge_base(&s("source")?, &s("target")?).map_err(err_string)?.to_string()
        })),
        "merge.preview" => {
            let p = repo
                .preview_merge(&s("source")?, &s("target")?)
                .map_err(err_string)?;
            Ok(serde_json::json!({
                "fast_forward": p.fast_forward, "added": p.added, "changed": p.changed,
                "removed": p.removed, "conflicts": p.conflicts
            }))
        }
        "merge.checked" => {
            let id = repo
                .merge_checked(
                    &s("source")?,
                    &s("target")?,
                    commit_options()?,
                    request
                        .get("allow_deletions")
                        .and_then(|v| v.as_bool())
                        .unwrap_or(false),
                )
                .map_err(err_string)?;
            Ok(serde_json::json!({ "commit": id.to_string() }))
        }
        "explore.list_paths" => Ok(serde_json::to_value(
            repo.list_paths(
                &ref_name(),
                &optional("prefix").unwrap_or_else(|| "/".to_string()),
                request_usize(request, "max_depth"),
            )
            .map_err(err_string)?,
        )
        .map_err(err_string)?),
        "explore.get_tree" => repo
            .get_tree(
                &ref_name(),
                &optional("prefix").unwrap_or_else(|| "/".to_string()),
            )
            .map_err(err_string),
        "explore.search_values" => {
            let rows = repo
                .search_values(
                    &ref_name(),
                    &s("query")?,
                    request_usize(request, "max_results"),
                )
                .map_err(err_string)?;
            Ok(serde_json::Value::Array(
                rows.into_iter()
                    .map(|(path, value)| serde_json::json!({ "path": path, "value": value }))
                    .collect(),
            ))
        }
        "explore.stats" => repo.stats(&ref_name()).map_err(err_string),
        "explore.commit_graph" => Ok(serde_json::Value::Array(
            repo.commit_graph(&ref_name(), request_usize(request, "depth").unwrap_or(100))
                .map_err(err_string)?,
        )),
        "explore.intent_tree" => repo
            .intent_tree(&ref_name(), optional("root_commit_id").as_deref())
            .map_err(err_string),
        "explore.history" => repo
            .history_report(
                optional("namespace").as_deref(),
                &optional("by").unwrap_or_else(|| "day".to_string()),
                request_usize(request, "milestones").unwrap_or(50),
                request
                    .get("refresh")
                    .and_then(|v| v.as_bool())
                    .unwrap_or(true),
                request
                    .get("store")
                    .and_then(|v| v.as_bool())
                    .unwrap_or(false),
            )
            .map_err(err_string),
        "gc.dry_run" => repo.gc_dry_run().map_err(err_string),
        "gc.sweep" => {
            let default = RetentionPolicy::default();
            let policy = RetentionPolicy {
                keep_recent: request_usize(request, "keep_recent").unwrap_or(default.keep_recent),
                checkpoint_every: request_usize(request, "checkpoint_every")
                    .unwrap_or(default.checkpoint_every),
                keep_milestones: request
                    .get("keep_milestones")
                    .and_then(|v| v.as_bool())
                    .unwrap_or(default.keep_milestones),
            };
            let mutate = request
                .get("mutate")
                .and_then(|v| v.as_bool())
                .unwrap_or(false);
            let vacuum = request
                .get("vacuum")
                .and_then(|v| v.as_bool())
                .unwrap_or(false);
            repo.gc_sweep(policy, mutate, vacuum).map_err(err_string)
        }
        "gc.vacuum" => repo.gc_vacuum().map_err(err_string),
        "spec.create" => Ok(serde_json::json!({
            "handle": repo.speculate(&ref_name(), optional("label")).map_err(err_string)?.id()
        })),
        "spec.set" => {
            let value = request
                .get("value")
                .cloned()
                .ok_or_else(|| "missing field: value".to_string())?;
            repo.spec_set_json(spec_handle(request)?, &s("path")?, &value)
                .map_err(err_string)?;
            Ok(serde_json::json!({ "updated": true }))
        }
        "spec.delete" => {
            repo.spec_delete(spec_handle(request)?, &s("path")?)
                .map_err(err_string)?;
            Ok(serde_json::json!({ "deleted": true }))
        }
        "spec.compare" => {
            let ids = request
                .get("handles")
                .and_then(|v| v.as_array())
                .ok_or_else(|| "missing field: handles".to_string())?;
            let handles: Result<Vec<_>, _> = ids
                .iter()
                .map(|v| {
                    v.as_u64()
                        .map(SpecHandle::from_id)
                        .ok_or_else(|| "handles must contain integers".to_string())
                })
                .collect();
            let comparison = repo.compare_speculations(&handles?).map_err(err_string)?;
            Ok(serde_json::json!({
                "base_ref": comparison.base_ref,
                "entries": comparison.entries.into_iter().map(|entry| serde_json::json!({
                    "handle": entry.handle.id(), "label": entry.label, "diff": entry.diff_from_base
                })).collect::<Vec<_>>()
            }))
        }
        "spec.commit" => Ok(serde_json::json!({
            "commit": repo.commit_speculation(spec_handle(request)?, commit_options()?)
                .map_err(err_string)?.to_string()
        })),
        "spec.discard" => {
            repo.discard_speculation(spec_handle(request)?)
                .map_err(err_string)?;
            Ok(serde_json::json!({ "discarded": true }))
        }
        "spec.list" => Ok(serde_json::Value::Array(
            repo.list_speculations()
                .into_iter()
                .map(|(handle, label)| serde_json::json!({ "handle": handle.id(), "label": label }))
                .collect(),
        )),
        "session.create" => {
            let branch = optional("working_branch").unwrap_or_else(|| "main".to_string());
            let namespace = match optional("scope_namespace") {
                Some(name) => Some(Namespace::new(name).map_err(err_string)?),
                None => None,
            };
            let session = repo
                .sessions()
                .create(
                    &s("agent_id")?,
                    &branch,
                    repo.head(&branch).map_err(err_string)?,
                    CreateSessionParams {
                        parent_session: optional("parent_session"),
                        delegated_intent: optional("delegated_intent"),
                        report_to: optional("report_to"),
                        path_scope: optional("path_scope"),
                        scope_namespace: namespace,
                    },
                )
                .map_err(err_string)?;
            Ok(session_json(&session))
        }
        "session.get" => Ok(repo
            .sessions()
            .get(&s("id")?)
            .map_err(err_string)?
            .as_ref()
            .map(session_json)
            .unwrap_or(serde_json::Value::Null)),
        "session.list" => Ok(serde_json::Value::Array(
            repo.sessions()
                .list(optional("agent_id").as_deref())
                .map_err(err_string)?
                .iter()
                .map(session_json)
                .collect(),
        )),
        "session.children" => Ok(serde_json::Value::Array(
            repo.sessions()
                .children(&s("parent_id")?)
                .map_err(err_string)?
                .iter()
                .map(session_json)
                .collect(),
        )),
        "session.update_head" => {
            repo.sessions()
                .update_head(&s("id")?, parse_object_id(&s("head")?)?)
                .map_err(err_string)?;
            Ok(serde_json::json!({ "updated": true }))
        }
        "session.end" => {
            let status = match s("status")?.to_ascii_lowercase().as_str() {
                "completed" => SessionStatus::Completed,
                "abandoned" => SessionStatus::Abandoned,
                _ => return Err("status must be completed or abandoned".to_string()),
            };
            repo.sessions().end(&s("id")?, status).map_err(err_string)?;
            Ok(serde_json::json!({ "ended": true }))
        }
        "session.active.get" => {
            Ok(serde_json::json!({ "session": repo.active_session().map_err(err_string)? }))
        }
        "session.active.set" => {
            repo.set_active_session(optional("id"))
                .map_err(err_string)?;
            Ok(serde_json::json!({ "updated": true }))
        }
        "epoch.create" => Ok(epoch_json(
            &repo
                .create_epoch(
                    &s("id")?,
                    &s("description")?,
                    request_string_array(request, "root_intents")?,
                )
                .map_err(err_string)?,
        )),
        "epoch.get" => Ok(epoch_json(&repo.get_epoch(&s("id")?).map_err(err_string)?)),
        "epoch.list" => Ok(serde_json::Value::Array(
            repo.list_epochs()
                .map_err(err_string)?
                .iter()
                .map(|entry| {
                    serde_json::json!({
                        "id": entry.id, "description": entry.description,
                        "status": format!("{:?}", entry.status),
                        "created_at": entry.created_at.to_rfc3339(),
                        "sealed_at": entry.sealed_at.map(|v| v.to_rfc3339()),
                        "root_intents": entry.root_intents, "agents": entry.agents,
                        "commit_count": entry.commit_count,
                        "seal_hash": entry.seal_hash.map(|v| v.to_string()), "tags": entry.tags
                    })
                })
                .collect(),
        )),
        "epoch.seal" => {
            repo.seal_epoch(&s("id")?, &s("summary")?)
                .map_err(err_string)?;
            Ok(serde_json::json!({ "sealed": true }))
        }
        "epoch.archive" => {
            repo.archive_epoch(&s("id")?).map_err(err_string)?;
            Ok(serde_json::json!({ "archived": true }))
        }
        "epoch.export" => repo.export_epoch(&s("id")?).map_err(err_string),
        "epoch.active.get" => {
            Ok(serde_json::json!({ "epoch": repo.active_epoch().map_err(err_string)? }))
        }
        "epoch.active.set" => {
            repo.set_active_epoch(optional("id")).map_err(err_string)?;
            Ok(serde_json::json!({ "updated": true }))
        }
        _ => Err(format!("unsupported repository operation: {operation}")),
    }
}

fn request_string(request: &serde_json::Value, key: &str) -> Result<String, String> {
    request
        .get(key)
        .and_then(|v| v.as_str())
        .map(str::to_owned)
        .ok_or_else(|| format!("missing field: {key}"))
}

fn request_optional_string(request: &serde_json::Value, key: &str) -> Option<String> {
    request.get(key).and_then(|v| v.as_str()).map(str::to_owned)
}

fn request_usize(request: &serde_json::Value, key: &str) -> Option<usize> {
    request
        .get(key)
        .and_then(|v| v.as_u64())
        .and_then(|v| usize::try_from(v).ok())
}

fn request_string_array(request: &serde_json::Value, key: &str) -> Result<Vec<String>, String> {
    request
        .get(key)
        .and_then(|v| v.as_array())
        .ok_or_else(|| format!("missing field: {key}"))?
        .iter()
        .map(|v| {
            v.as_str()
                .map(str::to_owned)
                .ok_or_else(|| format!("{key} must contain strings"))
        })
        .collect()
}

/// Parse the optional `tool_calls` array from a request. Each entry needs a
/// `tool_name`; `arguments` (any JSON) and `result` (string) are optional, and
/// `timestamp` (RFC3339) defaults to now when omitted — agents needn't supply
/// one. Absent `tool_calls` yields an empty vec.
fn request_tool_calls(request: &serde_json::Value) -> Result<Vec<ToolCall>, String> {
    let Some(array) = request.get("tool_calls") else {
        return Ok(Vec::new());
    };
    let array = array
        .as_array()
        .ok_or_else(|| "tool_calls must be an array".to_string())?;
    array
        .iter()
        .map(|entry| {
            let tool_name = entry
                .get("tool_name")
                .and_then(|v| v.as_str())
                .ok_or_else(|| "each tool_call needs a tool_name".to_string())?
                .to_owned();
            let timestamp = match entry.get("timestamp").and_then(|v| v.as_str()) {
                Some(s) => chrono::DateTime::parse_from_rfc3339(s)
                    .map_err(|e| format!("invalid tool_call timestamp: {e}"))?
                    .with_timezone(&chrono::Utc),
                None => chrono::Utc::now(),
            };
            Ok(ToolCall {
                tool_name,
                arguments: entry
                    .get("arguments")
                    .cloned()
                    .unwrap_or(serde_json::Value::Null),
                result: entry
                    .get("result")
                    .and_then(|v| v.as_str())
                    .map(str::to_owned),
                timestamp,
            })
        })
        .collect()
}

fn parse_object_id(value: &str) -> Result<ObjectId, String> {
    ObjectId::from_hex(value).ok_or_else(|| format!("invalid object id: {value}"))
}

fn spec_handle(request: &serde_json::Value) -> Result<SpecHandle, String> {
    request
        .get("handle")
        .and_then(|v| v.as_u64())
        .map(SpecHandle::from_id)
        .ok_or_else(|| "missing field: handle".to_string())
}

fn err_string(error: impl std::fmt::Display) -> String {
    error.to_string()
}

fn session_json(session: &agentstategraph::Session) -> serde_json::Value {
    serde_json::json!({
        "id": session.id, "agent_id": session.agent_id,
        "working_branch": session.working_branch, "head": session.head.to_string(),
        "parent_session": session.parent_session,
        "delegated_intent": session.delegated_intent, "report_to": session.report_to,
        "path_scope": session.path_scope, "scope_tenant": session.scope_tenant,
        "scope_namespace": session.scope_namespace.as_ref().map(|v| v.as_str()),
        "status": format!("{:?}", session.status),
        "created_at": session.created_at.to_rfc3339(),
        "ended_at": session.ended_at.map(|v| v.to_rfc3339())
    })
}

fn epoch_json(epoch: &agentstategraph_core::Epoch) -> serde_json::Value {
    serde_json::json!({
        "id": epoch.id, "description": epoch.description,
        "root_intents": epoch.root_intents, "status": format!("{:?}", epoch.status),
        "created_at": epoch.created_at.to_rfc3339(),
        "sealed_at": epoch.sealed_at.map(|v| v.to_rfc3339()),
        "seal_summary": epoch.seal_summary,
        "seal_hash": epoch.seal_hash.map(|v| v.to_string()),
        "commits": epoch.commits.iter().map(ToString::to_string).collect::<Vec<_>>(),
        "agents": epoch.agents, "branches": epoch.branches, "tags": epoch.tags,
        "sealed_commits": epoch.sealed_commits.iter().map(ToString::to_string).collect::<Vec<_>>()
    })
}

// ===========================================================================
// TaskStore FFI
// ===========================================================================

/// Create a new TaskStore handle bound to the given repository, path
/// prefix, and agent id. The returned pointer must be freed with
/// `agentstategraph_taskstore_free`. The underlying repository is shared
/// (refcounted); freeing the TaskStore does NOT free the repository.
#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_new(
    repo: *const SgRepo,
    prefix: *const c_char,
    agent_id: *const c_char,
) -> *mut SgTaskStore {
    let repo = unsafe { repo.as_ref() };
    let repo = match repo {
        Some(r) => r,
        None => return ptr::null_mut(),
    };
    let prefix = unsafe { c_to_str(prefix) };
    let agent_id = unsafe { c_to_str(agent_id) };
    if prefix.is_empty() || agent_id.is_empty() {
        return ptr::null_mut();
    }
    let store = TaskStore::new(repo.inner.clone(), prefix, agent_id);
    Box::into_raw(Box::new(SgTaskStore { inner: store }))
}

/// Free a TaskStore handle.
#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_free(store: *mut SgTaskStore) {
    if !store.is_null() {
        unsafe {
            drop(Box::from_raw(store));
        }
    }
}

fn taskstore_ref<'a>(store: *const SgTaskStore) -> Option<&'a SgTaskStore> {
    unsafe { store.as_ref() }
}

fn json_ok<T: Serialize>(v: &T) -> *mut c_char {
    match serde_json::to_string(v) {
        Ok(s) => to_c_string(&s),
        Err(_) => ptr::null_mut(),
    }
}

fn json_err(msg: &str) -> *mut c_char {
    to_c_string(&format!(
        "{{\"error\":{}}}",
        serde_json::to_string(msg).unwrap_or_else(|_| "\"error\"".into())
    ))
}

// Plan ops ------------------------------------------------------------------

/// Create a plan. Returns the Plan as JSON, or `{"error": ...}` on failure.
#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_create_plan(
    store: *const SgTaskStore,
    ref_name: *const c_char,
    name: *const c_char,
    description: *const c_char,
) -> *mut c_char {
    let Some(store) = taskstore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let name = unsafe { c_to_str(name) };
    let description = if description.is_null() {
        None
    } else {
        let s = unsafe { c_to_str(description) };
        if s.is_empty() {
            None
        } else {
            Some(s)
        }
    };
    match store.inner.create_plan(&ref_name, &name, description) {
        Ok(plan) => json_ok(&plan),
        Err(e) => json_err(&e.to_string()),
    }
}

/// List plans. Returns JSON array.
#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_list_plans(
    store: *const SgTaskStore,
    ref_name: *const c_char,
) -> *mut c_char {
    let Some(store) = taskstore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    match store.inner.list_plans(&ref_name) {
        Ok(p) => json_ok(&p),
        Err(e) => json_err(&e.to_string()),
    }
}

/// List plans filtered by status. `status` is "active", "completed",
/// "archived", or null/empty for all. Returns JSON array.
#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_list_plans_by_status(
    store: *const SgTaskStore,
    ref_name: *const c_char,
    status: *const c_char,
) -> *mut c_char {
    let Some(store) = taskstore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let status_str = unsafe { c_to_str(status) };
    let parsed = parse_plan_status(&status_str);
    match store.inner.list_plans_by_status(&ref_name, parsed) {
        Ok(p) => json_ok(&p),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Get a plan by name.
#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_get_plan(
    store: *const SgTaskStore,
    ref_name: *const c_char,
    name: *const c_char,
) -> *mut c_char {
    let Some(store) = taskstore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let name = unsafe { c_to_str(name) };
    match store.inner.get_plan(&ref_name, &name) {
        Ok(p) => json_ok(&p),
        Err(e) => json_err(&e.to_string()),
    }
}

#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_archive_plan(
    store: *const SgTaskStore,
    ref_name: *const c_char,
    name: *const c_char,
) -> *mut c_char {
    let Some(store) = taskstore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let name = unsafe { c_to_str(name) };
    match store.inner.archive_plan(&ref_name, &name) {
        Ok(p) => json_ok(&p),
        Err(e) => json_err(&e.to_string()),
    }
}

#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_delete_plan(
    store: *const SgTaskStore,
    ref_name: *const c_char,
    name: *const c_char,
) -> *mut c_char {
    let Some(store) = taskstore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let name = unsafe { c_to_str(name) };
    match store.inner.delete_plan(&ref_name, &name) {
        Ok(()) => to_c_string("{\"ok\":true}"),
        Err(e) => json_err(&e.to_string()),
    }
}

// Task ops ------------------------------------------------------------------

/// Add a task. Arguments:
///   - priority: "low" | "medium" | "high" | "critical"
///   - parent_id: nullable, e.g. "t-001"
///   - blockers_json: JSON array of task ids (may be null or "[]")
///   - assigned_to: nullable agent id
#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_add_task(
    store: *const SgTaskStore,
    ref_name: *const c_char,
    plan: *const c_char,
    title: *const c_char,
    priority: *const c_char,
    parent_id: *const c_char,
    blockers_json: *const c_char,
    assigned_to: *const c_char,
) -> *mut c_char {
    let Some(store) = taskstore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let plan = unsafe { c_to_str(plan) };
    let title = unsafe { c_to_str(title) };
    let priority_str = unsafe { c_to_str(priority) };
    let prio = parse_priority(&priority_str);

    let parent = if parent_id.is_null() {
        None
    } else {
        let s = unsafe { c_to_str(parent_id) };
        if s.is_empty() {
            None
        } else {
            Some(TaskId(s))
        }
    };

    let blockers: Vec<TaskId> = if blockers_json.is_null() {
        Vec::new()
    } else {
        let s = unsafe { c_to_str(blockers_json) };
        if s.is_empty() {
            Vec::new()
        } else {
            match serde_json::from_str::<Vec<String>>(&s) {
                Ok(v) => v.into_iter().map(TaskId).collect(),
                Err(e) => return json_err(&format!("invalid blockers_json: {e}")),
            }
        }
    };

    let assigned = if assigned_to.is_null() {
        None
    } else {
        let s = unsafe { c_to_str(assigned_to) };
        if s.is_empty() {
            None
        } else {
            Some(s)
        }
    };

    match store
        .inner
        .add_task(&ref_name, &plan, &title, prio, parent, blockers, assigned)
    {
        Ok(t) => json_ok(&t),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Extended add_task that also threads the 0.6.0 Task extension fields
/// through the FFI: `payload_json` (an arbitrary JSON value or NULL),
/// `parent_change` (opaque string or NULL), `on_complete_json` (a JSON
/// OnCompleteHook value or NULL — see agentstategraph-tasks::OnCompleteHook
/// for the variant tags). Returns the Task as JSON or `{"error": "..."}`.
#[no_mangle]
#[allow(clippy::too_many_arguments)]
pub extern "C" fn agentstategraph_taskstore_add_task_ex(
    store: *const SgTaskStore,
    ref_name: *const c_char,
    plan: *const c_char,
    title: *const c_char,
    priority: *const c_char,
    parent_id: *const c_char,
    blockers_json: *const c_char,
    assigned_to: *const c_char,
    payload_json: *const c_char,
    parent_change: *const c_char,
    on_complete_json: *const c_char,
) -> *mut c_char {
    let Some(store) = taskstore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let plan = unsafe { c_to_str(plan) };
    let title = unsafe { c_to_str(title) };
    let priority_str = unsafe { c_to_str(priority) };
    let prio = parse_priority(&priority_str);

    let parent = if parent_id.is_null() {
        None
    } else {
        let s = unsafe { c_to_str(parent_id) };
        if s.is_empty() {
            None
        } else {
            Some(TaskId(s))
        }
    };

    let blockers: Vec<TaskId> = if blockers_json.is_null() {
        Vec::new()
    } else {
        let s = unsafe { c_to_str(blockers_json) };
        if s.is_empty() {
            Vec::new()
        } else {
            match serde_json::from_str::<Vec<String>>(&s) {
                Ok(v) => v.into_iter().map(TaskId).collect(),
                Err(e) => return json_err(&format!("invalid blockers_json: {e}")),
            }
        }
    };

    let assigned = if assigned_to.is_null() {
        None
    } else {
        let s = unsafe { c_to_str(assigned_to) };
        if s.is_empty() {
            None
        } else {
            Some(s)
        }
    };

    let payload: Option<serde_json::Value> = if payload_json.is_null() {
        None
    } else {
        let s = unsafe { c_to_str(payload_json) };
        if s.is_empty() {
            None
        } else {
            match serde_json::from_str(&s) {
                Ok(v) => Some(v),
                Err(e) => return json_err(&format!("invalid payload_json: {e}")),
            }
        }
    };

    let parent_change_opt: Option<String> = if parent_change.is_null() {
        None
    } else {
        let s = unsafe { c_to_str(parent_change) };
        if s.is_empty() {
            None
        } else {
            Some(s)
        }
    };

    let on_complete_opt: Option<agentstategraph_tasks::OnCompleteHook> =
        if on_complete_json.is_null() {
            None
        } else {
            let s = unsafe { c_to_str(on_complete_json) };
            if s.is_empty() {
                None
            } else {
                match serde_json::from_str(&s) {
                    Ok(v) => Some(v),
                    Err(e) => return json_err(&format!("invalid on_complete_json: {e}")),
                }
            }
        };

    match store.inner.add_task_with_extensions(
        &ref_name,
        &plan,
        &title,
        prio,
        parent,
        blockers,
        assigned,
        AddTaskOptions {
            payload,
            parent_change: parent_change_opt,
            on_complete: on_complete_opt,
        },
    ) {
        Ok(t) => json_ok(&t),
        Err(e) => json_err(&e.to_string()),
    }
}

#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_list_tasks(
    store: *const SgTaskStore,
    ref_name: *const c_char,
    plan: *const c_char,
) -> *mut c_char {
    let Some(store) = taskstore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let plan = unsafe { c_to_str(plan) };
    match store.inner.list_tasks(&ref_name, &plan) {
        Ok(t) => json_ok(&t),
        Err(e) => json_err(&e.to_string()),
    }
}

#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_task_ids(
    store: *const SgTaskStore,
    ref_name: *const c_char,
    plan: *const c_char,
) -> *mut c_char {
    let Some(store) = taskstore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let plan = unsafe { c_to_str(plan) };
    match store.inner.task_ids(&ref_name, &plan) {
        Ok(ids) => {
            let strs: Vec<String> = ids.into_iter().map(|i| i.0).collect();
            json_ok(&strs)
        }
        Err(e) => json_err(&e.to_string()),
    }
}

#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_get_task(
    store: *const SgTaskStore,
    ref_name: *const c_char,
    plan: *const c_char,
    task_id: *const c_char,
) -> *mut c_char {
    let Some(store) = taskstore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let plan = unsafe { c_to_str(plan) };
    let id = TaskId(unsafe { c_to_str(task_id) });
    match store.inner.get_task(&ref_name, &plan, &id) {
        Ok(t) => json_ok(&t),
        Err(e) => json_err(&e.to_string()),
    }
}

#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_start_task(
    store: *const SgTaskStore,
    ref_name: *const c_char,
    plan: *const c_char,
    task_id: *const c_char,
) -> *mut c_char {
    let Some(store) = taskstore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let plan = unsafe { c_to_str(plan) };
    let id = TaskId(unsafe { c_to_str(task_id) });
    match store.inner.start_task(&ref_name, &plan, &id) {
        Ok(t) => json_ok(&t),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Complete a task. `proof_kind` is "commit" | "file" | "test" | "text".
#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_complete_task(
    store: *const SgTaskStore,
    ref_name: *const c_char,
    plan: *const c_char,
    task_id: *const c_char,
    proof_kind: *const c_char,
    proof_value: *const c_char,
    proof_note: *const c_char,
) -> *mut c_char {
    let Some(store) = taskstore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let plan = unsafe { c_to_str(plan) };
    let id = TaskId(unsafe { c_to_str(task_id) });
    let kind_str = unsafe { c_to_str(proof_kind) };
    let value = unsafe { c_to_str(proof_value) };
    let kind = match parse_proof_kind(&kind_str) {
        Some(k) => k,
        None => return json_err(&format!("invalid proof kind: {kind_str}")),
    };
    let note = if proof_note.is_null() {
        None
    } else {
        let s = unsafe { c_to_str(proof_note) };
        if s.is_empty() {
            None
        } else {
            Some(s)
        }
    };
    let proof = Proof { kind, value, note };
    match store.inner.complete_task(&ref_name, &plan, &id, proof) {
        Ok(t) => json_ok(&t),
        Err(e) => json_err(&e.to_string()),
    }
}

#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_abandon_task(
    store: *const SgTaskStore,
    ref_name: *const c_char,
    plan: *const c_char,
    task_id: *const c_char,
    reason: *const c_char,
) -> *mut c_char {
    let Some(store) = taskstore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let plan = unsafe { c_to_str(plan) };
    let id = TaskId(unsafe { c_to_str(task_id) });
    let reason = unsafe { c_to_str(reason) };
    match store.inner.abandon_task(&ref_name, &plan, &id, &reason) {
        Ok(t) => json_ok(&t),
        Err(e) => json_err(&e.to_string()),
    }
}

#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_set_priority(
    store: *const SgTaskStore,
    ref_name: *const c_char,
    plan: *const c_char,
    task_id: *const c_char,
    priority: *const c_char,
) -> *mut c_char {
    let Some(store) = taskstore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let plan = unsafe { c_to_str(plan) };
    let id = TaskId(unsafe { c_to_str(task_id) });
    let prio = parse_priority(&unsafe { c_to_str(priority) });
    match store.inner.set_priority(&ref_name, &plan, &id, prio) {
        Ok(t) => json_ok(&t),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Replace a task's title; a blank title is refused.
#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_set_title(
    store: *const SgTaskStore,
    ref_name: *const c_char,
    plan: *const c_char,
    task_id: *const c_char,
    title: *const c_char,
) -> *mut c_char {
    let Some(store) = taskstore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let plan = unsafe { c_to_str(plan) };
    let id = TaskId(unsafe { c_to_str(task_id) });
    let title = unsafe { c_to_str(title) };
    match store.inner.set_title(&ref_name, &plan, &id, &title) {
        Ok(t) => json_ok(&t),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Set blockers. `blockers_json` is a JSON string array (may be null or "[]").
#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_set_blockers(
    store: *const SgTaskStore,
    ref_name: *const c_char,
    plan: *const c_char,
    task_id: *const c_char,
    blockers_json: *const c_char,
) -> *mut c_char {
    let Some(store) = taskstore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let plan = unsafe { c_to_str(plan) };
    let id = TaskId(unsafe { c_to_str(task_id) });
    let blockers: Vec<TaskId> = if blockers_json.is_null() {
        Vec::new()
    } else {
        let s = unsafe { c_to_str(blockers_json) };
        if s.is_empty() {
            Vec::new()
        } else {
            match serde_json::from_str::<Vec<String>>(&s) {
                Ok(v) => v.into_iter().map(TaskId).collect(),
                Err(e) => return json_err(&format!("invalid blockers_json: {e}")),
            }
        }
    };
    match store.inner.set_blockers(&ref_name, &plan, &id, blockers) {
        Ok(t) => json_ok(&t),
        Err(e) => json_err(&e.to_string()),
    }
}

#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_assign_task(
    store: *const SgTaskStore,
    ref_name: *const c_char,
    plan: *const c_char,
    task_id: *const c_char,
    agent: *const c_char,
) -> *mut c_char {
    let Some(store) = taskstore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let plan = unsafe { c_to_str(plan) };
    let id = TaskId(unsafe { c_to_str(task_id) });
    let agent = unsafe { c_to_str(agent) };
    match store.inner.assign_task(&ref_name, &plan, &id, &agent) {
        Ok(t) => json_ok(&t),
        Err(e) => json_err(&e.to_string()),
    }
}

#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_unassign_task(
    store: *const SgTaskStore,
    ref_name: *const c_char,
    plan: *const c_char,
    task_id: *const c_char,
) -> *mut c_char {
    let Some(store) = taskstore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let plan = unsafe { c_to_str(plan) };
    let id = TaskId(unsafe { c_to_str(task_id) });
    match store.inner.unassign_task(&ref_name, &plan, &id) {
        Ok(t) => json_ok(&t),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Returns the next unblocked task as JSON, `null` if none, or error JSON.
#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_next_task(
    store: *const SgTaskStore,
    ref_name: *const c_char,
    plan: *const c_char,
) -> *mut c_char {
    let Some(store) = taskstore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let plan = unsafe { c_to_str(plan) };
    match store.inner.next_task(&ref_name, &plan) {
        Ok(opt) => json_ok(&opt),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Next task filtered by assignment. `agent` null for any; `include_unassigned`
/// controls fallback to unassigned when an agent is specified.
#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_next_task_for(
    store: *const SgTaskStore,
    ref_name: *const c_char,
    plan: *const c_char,
    agent: *const c_char,
    include_unassigned: u8,
) -> *mut c_char {
    let Some(store) = taskstore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let plan = unsafe { c_to_str(plan) };
    let agent_str = if agent.is_null() {
        None
    } else {
        let s = unsafe { c_to_str(agent) };
        if s.is_empty() {
            None
        } else {
            Some(s)
        }
    };
    match store.inner.next_task_for(
        &ref_name,
        &plan,
        agent_str.as_deref(),
        include_unassigned != 0,
    ) {
        Ok(opt) => json_ok(&opt),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Compute the derived (rollup) status of a parent task. Returns
/// `"pending"` | `"in_progress"` | `"done"` | `"abandoned"` JSON-wrapped.
#[no_mangle]
pub extern "C" fn agentstategraph_taskstore_derived_status(
    store: *const SgTaskStore,
    ref_name: *const c_char,
    plan: *const c_char,
    parent_id: *const c_char,
) -> *mut c_char {
    let Some(store) = taskstore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let plan = unsafe { c_to_str(plan) };
    let id = TaskId(unsafe { c_to_str(parent_id) });
    match store.inner.derived_status(&ref_name, &plan, &id) {
        Ok(s) => json_ok(&s),
        Err(e) => json_err(&e.to_string()),
    }
}

// ===========================================================================
// PolicyStore FFI
// ===========================================================================

/// Create a new PolicyStore handle bound to the given repository, path
/// prefix, and agent id. The returned pointer must be freed with
/// `agentstategraph_policy_store_free`. The underlying repository is
/// shared (refcounted); freeing the PolicyStore does NOT free the
/// repository.
#[no_mangle]
pub extern "C" fn agentstategraph_policy_store_new(
    repo: *const SgRepo,
    prefix: *const c_char,
    agent_id: *const c_char,
) -> *mut SgPolicyStore {
    let repo = unsafe { repo.as_ref() };
    let repo = match repo {
        Some(r) => r,
        None => return ptr::null_mut(),
    };
    let prefix = unsafe { c_to_str(prefix) };
    let agent_id = unsafe { c_to_str(agent_id) };
    if prefix.is_empty() || agent_id.is_empty() {
        return ptr::null_mut();
    }
    let store = PolicyStore::new(repo.inner.clone(), prefix, agent_id);
    Box::into_raw(Box::new(SgPolicyStore { inner: store }))
}

/// Free a PolicyStore handle.
#[no_mangle]
pub extern "C" fn agentstategraph_policy_store_free(store: *mut SgPolicyStore) {
    if !store.is_null() {
        unsafe {
            drop(Box::from_raw(store));
        }
    }
}

fn policystore_ref<'a>(store: *const SgPolicyStore) -> Option<&'a SgPolicyStore> {
    unsafe { store.as_ref() }
}

fn opt_c_to_str(ptr: *const c_char) -> Option<String> {
    if ptr.is_null() {
        None
    } else {
        let s = unsafe { c_to_str(ptr) };
        if s.is_empty() {
            None
        } else {
            Some(s)
        }
    }
}

/// Propose a new (unratified) policy. `policy_json` is a JSON object
/// matching the `Policy` schema. Returns a JSON string `"path@version"`
/// handle on success, or `{"error": ...}` JSON on failure.
#[no_mangle]
pub extern "C" fn agentstategraph_policy_propose(
    store: *const SgPolicyStore,
    ref_name: *const c_char,
    policy_json: *const c_char,
) -> *mut c_char {
    let Some(store) = policystore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let policy_str = unsafe { c_to_str(policy_json) };
    let policy: Policy = match serde_json::from_str(&policy_str) {
        Ok(p) => p,
        Err(e) => return json_err(&format!("invalid policy: {e}")),
    };
    match store.inner.propose(&ref_name, policy) {
        Ok(handle) => json_ok(&handle),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Ratify an unratified proposal at `path`. Returns `{"ok":true}` on
/// success, `{"error": ...}` on failure.
#[no_mangle]
pub extern "C" fn agentstategraph_policy_ratify(
    store: *const SgPolicyStore,
    ref_name: *const c_char,
    path: *const c_char,
    ratifier: *const c_char,
    reasoning: *const c_char,
) -> *mut c_char {
    let Some(store) = policystore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let path = unsafe { c_to_str(path) };
    let ratifier = unsafe { c_to_str(ratifier) };
    let reasoning = unsafe { c_to_str(reasoning) };
    match store.inner.ratify(&ref_name, &path, &ratifier, &reasoning) {
        Ok(()) => to_c_string("{\"ok\":true}"),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Replace the active policy at `path` with `new_policy_json`. Returns
/// JSON `"path@new_version"` handle on success.
#[no_mangle]
pub extern "C" fn agentstategraph_policy_supersede(
    store: *const SgPolicyStore,
    ref_name: *const c_char,
    path: *const c_char,
    new_policy_json: *const c_char,
) -> *mut c_char {
    let Some(store) = policystore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let path = unsafe { c_to_str(path) };
    let policy_str = unsafe { c_to_str(new_policy_json) };
    let policy: Policy = match serde_json::from_str(&policy_str) {
        Ok(p) => p,
        Err(e) => return json_err(&format!("invalid policy: {e}")),
    };
    match store.inner.supersede(&ref_name, &path, policy) {
        Ok(handle) => json_ok(&handle),
        Err(e) => json_err(&e.to_string()),
    }
}

/// List policies whose path starts with `prefix_or_null` (NULL or empty
/// = no filter). Returns JSON array of policies.
#[no_mangle]
pub extern "C" fn agentstategraph_policy_list(
    store: *const SgPolicyStore,
    ref_name: *const c_char,
    prefix_or_null: *const c_char,
) -> *mut c_char {
    let Some(store) = policystore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let filter = opt_c_to_str(prefix_or_null);
    match store.inner.list(&ref_name, filter.as_deref()) {
        Ok(ps) => json_ok(&ps),
        Err(e) => json_err(&e.to_string()),
    }
}

/// List currently-active (ratified and `active_from <= now`) policies.
/// `prefix_or_null` filters by path prefix (NULL/empty = all). Returns
/// JSON array.
#[no_mangle]
pub extern "C" fn agentstategraph_policy_active(
    store: *const SgPolicyStore,
    ref_name: *const c_char,
    prefix_or_null: *const c_char,
) -> *mut c_char {
    let Some(store) = policystore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let filter = opt_c_to_str(prefix_or_null);
    match store.inner.active(&ref_name, filter.as_deref()) {
        Ok(ps) => json_ok(&ps),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Fetch the active policy at `path`. Returns JSON policy object.
#[no_mangle]
pub extern "C" fn agentstategraph_policy_get(
    store: *const SgPolicyStore,
    ref_name: *const c_char,
    path: *const c_char,
) -> *mut c_char {
    let Some(store) = policystore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let path = unsafe { c_to_str(path) };
    match store.inner.get(&ref_name, &path, None) {
        Ok(p) => json_ok(&p),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Walk the supersedes chain for `path`. Returns JSON array, oldest
/// first through the current active version.
#[no_mangle]
pub extern "C" fn agentstategraph_policy_history(
    store: *const SgPolicyStore,
    ref_name: *const c_char,
    path: *const c_char,
) -> *mut c_char {
    let Some(store) = policystore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let path = unsafe { c_to_str(path) };
    match store.inner.history(&ref_name, &path) {
        Ok(ps) => json_ok(&ps),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Authorization evaluation (POLICY_V1.md §5). `situation_json` is a
/// flat `{string: string}` JSON object, or `{"facts": {...}}` wrapper.
/// Returns JSON `Decision`.
#[no_mangle]
pub extern "C" fn agentstategraph_policy_evaluate(
    store: *const SgPolicyStore,
    ref_name: *const c_char,
    situation_json: *const c_char,
    action: *const c_char,
    agent_id: *const c_char,
) -> *mut c_char {
    let Some(store) = policystore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let situation_str = unsafe { c_to_str(situation_json) };
    let action = unsafe { c_to_str(action) };
    let agent_id = unsafe { c_to_str(agent_id) };
    let situation = match parse_situation(&situation_str) {
        Ok(s) => s,
        Err(e) => return json_err(&format!("invalid situation: {e}")),
    };
    match store
        .inner
        .evaluate(&ref_name, &situation, &action, &agent_id)
    {
        Ok(d) => json_ok(&d),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Change-proposal evaluation (POLICY_V1.md §22.2). `proposal_json` is
/// a JSON `ChangeProposal`. Returns JSON `Decision`.
#[no_mangle]
pub extern "C" fn agentstategraph_policy_evaluate_change(
    store: *const SgPolicyStore,
    ref_name: *const c_char,
    proposal_json: *const c_char,
) -> *mut c_char {
    let Some(store) = policystore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let proposal_str = unsafe { c_to_str(proposal_json) };
    let proposal: ChangeProposal = match serde_json::from_str(&proposal_str) {
        Ok(p) => p,
        Err(e) => return json_err(&format!("invalid proposal: {e}")),
    };
    match store.inner.evaluate_change(&ref_name, &proposal) {
        Ok(d) => json_ok(&d),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Scoped evaluator (0.7.5 §3b). Variant of
/// `agentstategraph_policy_evaluate` that accepts an optional
/// `tenant_filter`. Pass `NULL` for no filter (equivalent to the
/// non-scoped variant). Returns JSON `Decision`.
#[no_mangle]
pub extern "C" fn agentstategraph_policy_evaluate_scoped(
    store: *const SgPolicyStore,
    ref_name: *const c_char,
    situation_json: *const c_char,
    action: *const c_char,
    agent_id: *const c_char,
    tenant_filter: *const c_char,
) -> *mut c_char {
    let Some(store) = policystore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let situation_str = unsafe { c_to_str(situation_json) };
    let action = unsafe { c_to_str(action) };
    let agent_id = unsafe { c_to_str(agent_id) };
    let tenant = if tenant_filter.is_null() {
        None
    } else {
        Some(unsafe { c_to_str(tenant_filter) })
    };
    let situation = match parse_situation(&situation_str) {
        Ok(s) => s,
        Err(e) => return json_err(&format!("invalid situation: {e}")),
    };
    match store
        .inner
        .evaluate_scoped(&ref_name, &situation, &action, &agent_id, tenant.as_deref())
    {
        Ok(d) => json_ok(&d),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Scoped change-proposal evaluator (0.7.5 §3b). See
/// `agentstategraph_policy_evaluate_scoped` for `tenant_filter`
/// semantics.
#[no_mangle]
pub extern "C" fn agentstategraph_policy_evaluate_change_scoped(
    store: *const SgPolicyStore,
    ref_name: *const c_char,
    proposal_json: *const c_char,
    tenant_filter: *const c_char,
) -> *mut c_char {
    let Some(store) = policystore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let proposal_str = unsafe { c_to_str(proposal_json) };
    let tenant = if tenant_filter.is_null() {
        None
    } else {
        Some(unsafe { c_to_str(tenant_filter) })
    };
    let proposal: ChangeProposal = match serde_json::from_str(&proposal_str) {
        Ok(p) => p,
        Err(e) => return json_err(&format!("invalid proposal: {e}")),
    };
    match store
        .inner
        .evaluate_change_scoped(&ref_name, &proposal, tenant.as_deref())
    {
        Ok(d) => json_ok(&d),
        Err(e) => json_err(&e.to_string()),
    }
}

/// List active policies whose `triggers` intersect `tokens_json` (a JSON
/// array of strings). Binding-level helper mirroring the internal filter
/// used by `evaluate_change`. Returns JSON array of policies.
#[no_mangle]
pub extern "C" fn agentstategraph_policy_check_tokens(
    store: *const SgPolicyStore,
    ref_name: *const c_char,
    tokens_json: *const c_char,
) -> *mut c_char {
    let Some(store) = policystore_ref(store) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let tokens_str = unsafe { c_to_str(tokens_json) };
    let tokens: Vec<String> = if tokens_str.is_empty() {
        Vec::new()
    } else {
        match serde_json::from_str(&tokens_str) {
            Ok(v) => v,
            Err(e) => return json_err(&format!("invalid tokens_json: {e}")),
        }
    };
    let actives = match store.inner.active(&ref_name, None) {
        Ok(v) => v,
        Err(e) => return json_err(&e.to_string()),
    };
    let token_set: std::collections::HashSet<&str> = tokens.iter().map(|s| s.as_str()).collect();
    let matched: Vec<&Policy> = actives
        .iter()
        .filter(|p| p.triggers.iter().any(|t| token_set.contains(t.as_str())))
        .collect();
    json_ok(&matched)
}

/// Sign the active policy at `path`. §2c of the 0.7.5-beta.1 plan.
///
/// Configuring a `PolicySigner` through the C ABI is deferred to a
/// later milestone (§4c surfaces runner/signer configuration); until
/// then this extern unconditionally returns
/// `{"error": "no signer registered"}`. The symbol is exported so
/// bindings can wire it up in §5 without another header bump.
#[no_mangle]
pub extern "C" fn agentstategraph_policy_sign(
    store: *const SgPolicyStore,
    ref_name: *const c_char,
    path: *const c_char,
    signer_key_id: *const c_char,
) -> *mut c_char {
    let Some(_store) = policystore_ref(store) else {
        return ptr::null_mut();
    };
    let _ref_name = unsafe { c_to_str(ref_name) };
    let _path = unsafe { c_to_str(path) };
    let _signer_key_id = opt_c_to_str(signer_key_id);
    // TODO(§4c): expose signer registration on SgPolicyStore.
    to_c_string("{\"error\":\"no signer registered\"}")
}

/// Verify the signature on the active policy at `path`. §2c of the
/// 0.7.5-beta.1 plan.
///
/// Configuring a `SignatureVerifier` through the C ABI is deferred —
/// see `agentstategraph_policy_sign` above. Returns
/// `{"valid": null, "reason": "no verifier registered"}` until
/// configuration support lands.
#[no_mangle]
pub extern "C" fn agentstategraph_policy_verify(
    store: *const SgPolicyStore,
    ref_name: *const c_char,
    path: *const c_char,
) -> *mut c_char {
    let Some(_store) = policystore_ref(store) else {
        return ptr::null_mut();
    };
    let _ref_name = unsafe { c_to_str(ref_name) };
    let _path = unsafe { c_to_str(path) };
    // TODO(§4c): expose verifier registration on SgPolicyStore.
    to_c_string("{\"valid\":null,\"reason\":\"no verifier registered\"}")
}

/// Configure an external policy evaluator on the store (0.7.5 §4c).
///
/// `config_json` accepts the opaque shape
/// `{ "kind": "wasm" | "rego" | "cedar", "options": { ... } }`; the
/// concrete options are runner-specific (e.g. `{"opa_path": "..."}` for
/// Rego). This keeps the C ABI surface small — the full runner wiring
/// happens through `AgentStateGraphServer::with_external_evaluator` on
/// the Rust side.
///
/// This extern is currently a stub: it validates the pointers and
/// unconditionally returns the envelope
/// `{"error": "external evaluators not configured via FFI; use the server builder"}`.
/// The symbol is declared so §5 language bindings can reference it
/// without another header bump; real FFI runner configuration is a
/// follow-up milestone.
#[no_mangle]
pub extern "C" fn agentstategraph_policy_set_external_evaluator(
    store: *const SgPolicyStore,
    config_json: *const c_char,
) -> *mut c_char {
    let Some(_store) = policystore_ref(store) else {
        return ptr::null_mut();
    };
    let _config = unsafe { c_to_str(config_json) };
    // TODO(post-§4c): materialize the runner from `config_json` and
    // attach it to a mutable handle. Today `SgPolicyStore` wraps a
    // `PolicyStore` by value (not `Arc<Mutex<>>`), so installing a
    // registry would require a handle redesign. The Rust-side builder
    // `AgentStateGraphServer::with_external_evaluator` is the supported
    // path in the meantime.
    to_c_string(
        "{\"error\":\"external evaluators not configured via FFI; use the server builder\"}",
    )
}

// ===========================================================================
// Taint / Quarantine / Watch FFI (0.7.75 §7)
// ===========================================================================

fn parse_taint_effect_ffi(s: &str) -> Option<TaintEffect> {
    match s.to_lowercase().as_str() {
        "warn" => Some(TaintEffect::Warn),
        "block" => Some(TaintEffect::Block),
        "review" => Some(TaintEffect::Review),
        "isolate" => Some(TaintEffect::Isolate),
        "advisory" => Some(TaintEffect::Advisory),
        _ => None,
    }
}

fn parse_taint_severity_ffi(s: Option<&str>) -> TaintSeverity {
    match s.unwrap_or("medium").to_lowercase().as_str() {
        "low" => TaintSeverity::Low,
        "high" => TaintSeverity::High,
        "critical" => TaintSeverity::Critical,
        _ => TaintSeverity::Medium,
    }
}

fn parse_taint_kind_ffi(s: &str) -> Option<TaintKind> {
    match s.to_lowercase().as_str() {
        "taint" => Some(TaintKind::Taint),
        "quarantine" => Some(TaintKind::Quarantine),
        "watch" => Some(TaintKind::Watch),
        _ => None,
    }
}

/// Apply a taint. `params_json` shape:
/// `{"name":"...","effect":"warn|block|review|isolate","reason":"...",
/// "severity":"medium","expires":null,"propagate":true,"agent_id":"..."}`.
/// Returns JSON `{"ok":true,"id":"<uuid>"}` or `{"error":"..."}`.
#[no_mangle]
pub extern "C" fn agentstategraph_taint_apply(
    repo: *const SgRepo,
    ref_name: *const c_char,
    path: *const c_char,
    params_json: *const c_char,
) -> *mut c_char {
    let Some(repo) = (unsafe { repo.as_ref() }) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let path = unsafe { c_to_str(path) };
    let params_str = unsafe { c_to_str(params_json) };
    let v: serde_json::Value = match serde_json::from_str(&params_str) {
        Ok(v) => v,
        Err(e) => return json_err(&format!("invalid params: {e}")),
    };
    let Some(name) = v.get("name").and_then(|x| x.as_str()).map(str::to_string) else {
        return json_err("missing 'name'");
    };
    let Some(effect) = v
        .get("effect")
        .and_then(|x| x.as_str())
        .and_then(parse_taint_effect_ffi)
    else {
        return json_err("missing or invalid 'effect'");
    };
    let reason = v
        .get("reason")
        .and_then(|x| x.as_str())
        .unwrap_or("")
        .to_string();
    let severity = parse_taint_severity_ffi(v.get("severity").and_then(|x| x.as_str()));
    let expires_at = v
        .get("expires")
        .and_then(|x| x.as_str())
        .and_then(|s| chrono::DateTime::parse_from_rfc3339(s).ok())
        .map(|d| d.with_timezone(&chrono::Utc));
    let propagate = v.get("propagate").and_then(|x| x.as_bool()).unwrap_or(true);
    let agent_id = v
        .get("agent_id")
        .and_then(|x| x.as_str())
        .unwrap_or("")
        .to_string();
    let params = TaintParams {
        name,
        effect,
        reason,
        severity,
        expires_at,
        propagate,
        metadata: TaintMetadata::new(),
        agent_id,
    };
    match repo.inner.taint(&ref_name, &path, params) {
        Ok(id) => json_ok(&serde_json::json!({ "ok": true, "id": id })),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Remove a taint. `params_json`: `{"name":"...","reason":"...","proof":null,"agent_id":"..."}`.
#[no_mangle]
pub extern "C" fn agentstategraph_taint_remove(
    repo: *const SgRepo,
    ref_name: *const c_char,
    path: *const c_char,
    params_json: *const c_char,
) -> *mut c_char {
    let Some(repo) = (unsafe { repo.as_ref() }) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let path = unsafe { c_to_str(path) };
    let v: serde_json::Value = match serde_json::from_str(&unsafe { c_to_str(params_json) }) {
        Ok(v) => v,
        Err(e) => return json_err(&format!("invalid params: {e}")),
    };
    let Some(name) = v.get("name").and_then(|x| x.as_str()).map(str::to_string) else {
        return json_err("missing 'name'");
    };
    let params = UntaintParams {
        reason: v
            .get("reason")
            .and_then(|x| x.as_str())
            .unwrap_or("")
            .to_string(),
        proof: v.get("proof").and_then(|x| x.as_str()).map(str::to_string),
        agent_id: v
            .get("agent_id")
            .and_then(|x| x.as_str())
            .unwrap_or("")
            .to_string(),
    };
    match repo.inner.untaint(&ref_name, &path, &name, params) {
        Ok(()) => json_ok(&serde_json::json!({ "ok": true })),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Apply a quarantine. `params_json`:
/// `{"name","reason","severity","authorized_agents":[...],"expires","propagate","agent_id"}`.
#[no_mangle]
pub extern "C" fn agentstategraph_quarantine_apply(
    repo: *const SgRepo,
    ref_name: *const c_char,
    path: *const c_char,
    params_json: *const c_char,
) -> *mut c_char {
    let Some(repo) = (unsafe { repo.as_ref() }) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let path = unsafe { c_to_str(path) };
    let v: serde_json::Value = match serde_json::from_str(&unsafe { c_to_str(params_json) }) {
        Ok(v) => v,
        Err(e) => return json_err(&format!("invalid params: {e}")),
    };
    let Some(name) = v.get("name").and_then(|x| x.as_str()).map(str::to_string) else {
        return json_err("missing 'name'");
    };
    let authorized: Vec<String> = v
        .get("authorized_agents")
        .and_then(|x| x.as_array())
        .map(|arr| {
            arr.iter()
                .filter_map(|x| x.as_str().map(str::to_string))
                .collect()
        })
        .unwrap_or_default();
    let params = QuarantineParams {
        name,
        reason: v
            .get("reason")
            .and_then(|x| x.as_str())
            .unwrap_or("")
            .to_string(),
        severity: parse_taint_severity_ffi(v.get("severity").and_then(|x| x.as_str())),
        authorized_agents: authorized,
        expires_at: v
            .get("expires")
            .and_then(|x| x.as_str())
            .and_then(|s| chrono::DateTime::parse_from_rfc3339(s).ok())
            .map(|d| d.with_timezone(&chrono::Utc)),
        propagate: v.get("propagate").and_then(|x| x.as_bool()).unwrap_or(true),
        agent_id: v
            .get("agent_id")
            .and_then(|x| x.as_str())
            .unwrap_or("")
            .to_string(),
    };
    match repo.inner.quarantine(&ref_name, &path, params) {
        Ok(id) => json_ok(&serde_json::json!({ "ok": true, "id": id })),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Release a quarantine. `params_json` shape matches taint_remove.
#[no_mangle]
pub extern "C" fn agentstategraph_quarantine_release(
    repo: *const SgRepo,
    ref_name: *const c_char,
    path: *const c_char,
    params_json: *const c_char,
) -> *mut c_char {
    let Some(repo) = (unsafe { repo.as_ref() }) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let path = unsafe { c_to_str(path) };
    let v: serde_json::Value = match serde_json::from_str(&unsafe { c_to_str(params_json) }) {
        Ok(v) => v,
        Err(e) => return json_err(&format!("invalid params: {e}")),
    };
    let Some(name) = v.get("name").and_then(|x| x.as_str()).map(str::to_string) else {
        return json_err("missing 'name'");
    };
    let params = UntaintParams {
        reason: v
            .get("reason")
            .and_then(|x| x.as_str())
            .unwrap_or("")
            .to_string(),
        proof: v.get("proof").and_then(|x| x.as_str()).map(str::to_string),
        agent_id: v
            .get("agent_id")
            .and_then(|x| x.as_str())
            .unwrap_or("")
            .to_string(),
    };
    match repo.inner.unquarantine(&ref_name, &path, &name, params) {
        Ok(()) => json_ok(&serde_json::json!({ "ok": true })),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Apply a watch. `params_json`:
/// `{"name","reason","metric","threshold","direction":"above|below",
///   "check_interval_secs","expires","severity","propagate","agent_id"}`.
#[no_mangle]
pub extern "C" fn agentstategraph_watch_apply(
    repo: *const SgRepo,
    ref_name: *const c_char,
    path: *const c_char,
    params_json: *const c_char,
) -> *mut c_char {
    let Some(repo) = (unsafe { repo.as_ref() }) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let path = unsafe { c_to_str(path) };
    let v: serde_json::Value = match serde_json::from_str(&unsafe { c_to_str(params_json) }) {
        Ok(v) => v,
        Err(e) => return json_err(&format!("invalid params: {e}")),
    };
    let Some(name) = v.get("name").and_then(|x| x.as_str()).map(str::to_string) else {
        return json_err("missing 'name'");
    };
    let direction = match v
        .get("direction")
        .and_then(|x| x.as_str())
        .unwrap_or("above")
    {
        "below" => WatchDirection::Below,
        _ => WatchDirection::Above,
    };
    let params = WatchParams {
        name,
        reason: v
            .get("reason")
            .and_then(|x| x.as_str())
            .unwrap_or("")
            .to_string(),
        metric: v.get("metric").and_then(|x| x.as_str()).map(str::to_string),
        threshold: v.get("threshold").and_then(|x| x.as_f64()),
        direction,
        check_interval_secs: v.get("check_interval_secs").and_then(|x| x.as_u64()),
        expires_at: v
            .get("expires")
            .and_then(|x| x.as_str())
            .and_then(|s| chrono::DateTime::parse_from_rfc3339(s).ok())
            .map(|d| d.with_timezone(&chrono::Utc)),
        severity: parse_taint_severity_ffi(v.get("severity").and_then(|x| x.as_str())),
        propagate: v.get("propagate").and_then(|x| x.as_bool()).unwrap_or(true),
        agent_id: v
            .get("agent_id")
            .and_then(|x| x.as_str())
            .unwrap_or("")
            .to_string(),
    };
    match repo.inner.watch_path(&ref_name, &path, params) {
        Ok(id) => json_ok(&serde_json::json!({ "ok": true, "id": id })),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Remove a watch.
#[no_mangle]
pub extern "C" fn agentstategraph_watch_remove(
    repo: *const SgRepo,
    ref_name: *const c_char,
    path: *const c_char,
    params_json: *const c_char,
) -> *mut c_char {
    let Some(repo) = (unsafe { repo.as_ref() }) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let path = unsafe { c_to_str(path) };
    let v: serde_json::Value = match serde_json::from_str(&unsafe { c_to_str(params_json) }) {
        Ok(v) => v,
        Err(e) => return json_err(&format!("invalid params: {e}")),
    };
    let Some(name) = v.get("name").and_then(|x| x.as_str()).map(str::to_string) else {
        return json_err("missing 'name'");
    };
    let params = UnwatchParams {
        reason: v.get("reason").and_then(|x| x.as_str()).map(str::to_string),
        agent_id: v
            .get("agent_id")
            .and_then(|x| x.as_str())
            .unwrap_or("")
            .to_string(),
    };
    match repo.inner.unwatch(&ref_name, &path, &name, params) {
        Ok(()) => json_ok(&serde_json::json!({ "ok": true })),
        Err(e) => json_err(&e.to_string()),
    }
}

/// List active taints / quarantines / watches. `kind_or_null` accepts
/// "taint" | "quarantine" | "watch" or NULL to list all.
#[no_mangle]
pub extern "C" fn agentstategraph_list_taints(
    repo: *const SgRepo,
    path_prefix_or_null: *const c_char,
    kind_or_null: *const c_char,
    include_resolved: bool,
) -> *mut c_char {
    let Some(repo) = (unsafe { repo.as_ref() }) else {
        return ptr::null_mut();
    };
    let prefix = if path_prefix_or_null.is_null() {
        None
    } else {
        Some(unsafe { c_to_str(path_prefix_or_null) })
    };
    let kind = if kind_or_null.is_null() {
        None
    } else {
        let s = unsafe { c_to_str(kind_or_null) };
        match parse_taint_kind_ffi(&s) {
            Some(k) => Some(k),
            None => return json_err(&format!("unknown kind: {s}")),
        }
    };
    match repo
        .inner
        .list_taints(prefix.as_deref(), kind, include_resolved)
    {
        Ok(list) => json_ok(&serde_json::json!({ "ok": true, "taints": list })),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Check the taint status for `path` given `agent_id` + `confidence`.
#[no_mangle]
pub extern "C" fn agentstategraph_check_taint(
    repo: *const SgRepo,
    path: *const c_char,
    agent_id: *const c_char,
    confidence: f64,
) -> *mut c_char {
    let Some(repo) = (unsafe { repo.as_ref() }) else {
        return ptr::null_mut();
    };
    let path = unsafe { c_to_str(path) };
    let agent_id = unsafe { c_to_str(agent_id) };
    match repo.inner.check_taint(&path, &agent_id, confidence) {
        Ok(c) => json_ok(&serde_json::json!({ "ok": true, "check": c })),
        Err(e) => json_err(&e.to_string()),
    }
}

fn parse_situation(s: &str) -> Result<Situation, serde_json::Error> {
    if s.is_empty() {
        return Ok(Situation::default());
    }
    // Situation is `#[serde(transparent)]` over HashMap<String, String>,
    // so a flat {"k": "v"} JSON object deserializes directly.
    serde_json::from_str(s)
}

// ===========================================================================
// Migration FFI
// ===========================================================================

/// Check the migration status of a repository. Returns a JSON report:
/// `{"status":"up_to_date","version":"0.4.0"}`, `"upgrade_available"`,
/// `"downgrade"`, `"unversioned"`, `"corrupt"`. `target` may be null to
/// use the binary's current `SCHEMA_VERSION`.
#[no_mangle]
pub extern "C" fn agentstategraph_migrate_check(
    repo: *const SgRepo,
    ref_name: *const c_char,
    target: *const c_char,
) -> *mut c_char {
    let Some(repo) = (unsafe { repo.as_ref() }) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let target_str = if target.is_null() {
        SCHEMA_VERSION.to_string()
    } else {
        let s = unsafe { c_to_str(target) };
        if s.is_empty() {
            SCHEMA_VERSION.to_string()
        } else {
            s
        }
    };
    let target_version = match Version::parse(&target_str) {
        Ok(v) => v,
        Err(e) => return json_err(&format!("invalid target: {e}")),
    };
    let registry = Registry::builtin();
    match agentstategraph_migrate::check(&repo.inner, &ref_name, &target_version, &registry) {
        Ok(r) => to_c_string(&check_result_json(&r)),
        Err(e) => json_err(&e.to_string()),
    }
}

/// Run migrations. `mode` is `"apply"` or `"dry-run"`. Returns a JSON
/// report describing each step.
#[no_mangle]
pub extern "C" fn agentstategraph_migrate_run(
    repo: *const SgRepo,
    ref_name: *const c_char,
    target: *const c_char,
    mode: *const c_char,
) -> *mut c_char {
    let Some(repo) = (unsafe { repo.as_ref() }) else {
        return ptr::null_mut();
    };
    let ref_name = unsafe { c_to_str(ref_name) };
    let target_str = if target.is_null() {
        SCHEMA_VERSION.to_string()
    } else {
        let s = unsafe { c_to_str(target) };
        if s.is_empty() {
            SCHEMA_VERSION.to_string()
        } else {
            s
        }
    };
    let target_version = match Version::parse(&target_str) {
        Ok(v) => v,
        Err(e) => return json_err(&format!("invalid target: {e}")),
    };
    let mode_str = unsafe { c_to_str(mode) };
    let run_mode = match mode_str.to_lowercase().as_str() {
        "apply" => RunMode::Apply,
        "dry-run" | "dryrun" | "dry_run" => RunMode::DryRun,
        other => return json_err(&format!("invalid mode: {other}")),
    };
    let registry = Registry::builtin();
    match registry.run(&repo.inner, &ref_name, &target_version, run_mode) {
        Ok(r) => to_c_string(&report_json(&r)),
        Err(e) => json_err(&e.to_string()),
    }
}

fn check_result_json(r: &CheckResult) -> String {
    let v = match r {
        CheckResult::UpToDate { version } => serde_json::json!({
            "status": "up_to_date",
            "version": version.to_string(),
        }),
        CheckResult::UpgradeAvailable {
            from,
            to,
            migrations,
        } => serde_json::json!({
            "status": "upgrade_available",
            "from": from.to_string(),
            "to": to.to_string(),
            "migrations": migrations,
        }),
        CheckResult::Downgrade { db, binary } => serde_json::json!({
            "status": "downgrade",
            "db": db.to_string(),
            "binary": binary.to_string(),
        }),
        CheckResult::Unversioned { implicit } => serde_json::json!({
            "status": "unversioned",
            "implicit": implicit.to_string(),
        }),
        CheckResult::Corrupt(msg) => serde_json::json!({
            "status": "corrupt",
            "message": msg,
        }),
    };
    serde_json::to_string(&v).unwrap_or_default()
}

fn report_json(r: &agentstategraph_migrate::Report) -> String {
    let mode = match r.mode {
        RunMode::DryRun => "dry-run",
        RunMode::Apply => "apply",
    };
    let steps: Vec<serde_json::Value> = r
        .steps
        .iter()
        .map(|s| {
            serde_json::json!({
                "name": s.name,
                "describe": s.describe,
                "from": s.from.to_string(),
                "to": s.to.to_string(),
                "status": step_status_str(s.status),
                "commit_id": s.commit_id.as_ref().map(|c| c.to_string()),
                "notes": s.notes,
            })
        })
        .collect();
    let v = serde_json::json!({
        "from": r.from.to_string(),
        "target": r.target.to_string(),
        "final_version": r.final_version.to_string(),
        "mode": mode,
        "steps": steps,
    });
    serde_json::to_string(&v).unwrap_or_default()
}

fn step_status_str(s: StepStatus) -> &'static str {
    match s {
        StepStatus::WouldApply => "would-apply",
        StepStatus::WouldSkip => "would-skip",
        StepStatus::Applied => "applied",
        StepStatus::Skipped => "skipped",
        StepStatus::Failed => "failed",
    }
}

// ---------------------------------------------------------------------------
// Helpers
// ---------------------------------------------------------------------------

unsafe fn c_to_str(ptr: *const c_char) -> String {
    if ptr.is_null() {
        String::new()
    } else {
        unsafe { CStr::from_ptr(ptr).to_string_lossy().into_owned() }
    }
}

unsafe fn parse_repo_ref_path<'a>(
    repo: *const SgRepo,
    ref_name: *const c_char,
    path: *const c_char,
) -> Option<(&'a SgRepo, String, String)> {
    let repo = unsafe { repo.as_ref()? };
    let ref_name = unsafe { c_to_str(ref_name) };
    let path = unsafe { c_to_str(path) };
    Some((repo, ref_name, path))
}

fn parse_category(s: &str) -> IntentCategory {
    match s.to_lowercase().as_str() {
        "explore" | "exploration" => IntentCategory::Explore,
        "refine" | "refinement" => IntentCategory::Refine,
        "fix" | "correction" => IntentCategory::Fix,
        "rollback" => IntentCategory::Rollback,
        "checkpoint" => IntentCategory::Checkpoint,
        "merge" => IntentCategory::Merge,
        // SECURITY (threat model v2, finding C3): the FFI boundary has no
        // capability check — a host embedding ASG via C ABI can pass any
        // string. Map "migrate" to a Custom category so `/_meta/*` writes
        // are rejected by the substrate's reserved-path guard. Hosts that
        // genuinely need migrations should construct `IntentCategory::Migrate`
        // directly in Rust (not via this parser).
        "migrate" => IntentCategory::Custom("Migrate-requested".into()),
        "plan" => IntentCategory::Plan,
        other => IntentCategory::Custom(other.to_string()),
    }
}

fn parse_priority(s: &str) -> Priority {
    match s.to_lowercase().as_str() {
        "low" => Priority::Low,
        "high" => Priority::High,
        "critical" => Priority::Critical,
        _ => Priority::Medium,
    }
}

fn parse_plan_status(s: &str) -> Option<agentstategraph_tasks::PlanStatus> {
    match s.to_lowercase().as_str() {
        "" => None,
        "active" => Some(agentstategraph_tasks::PlanStatus::Active),
        "completed" => Some(agentstategraph_tasks::PlanStatus::Completed),
        "archived" => Some(agentstategraph_tasks::PlanStatus::Archived),
        _ => None,
    }
}

fn parse_proof_kind(s: &str) -> Option<ProofKind> {
    match s.to_lowercase().as_str() {
        "commit" => Some(ProofKind::Commit),
        "file" => Some(ProofKind::File),
        "test" => Some(ProofKind::Test),
        "text" => Some(ProofKind::Text),
        _ => None,
    }
}

fn to_c_string(s: &str) -> *mut c_char {
    match CString::new(s) {
        Ok(cs) => cs.into_raw(),
        Err(_) => ptr::null_mut(),
    }
}