inkhaven 1.3.9

use std::path::{Path, PathBuf};

use serde::{Deserialize, Serialize};

pub const DEFAULT_PROJECT_CONFIG: &str = include_str!("../assets/default_project.hjson");
pub const DEFAULT_PROMPTS: &str = include_str!("../assets/default_prompts.hjson");

#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct Config {
    #[serde(default)]
    pub embeddings: EmbeddingsConfig,
    #[serde(default)]
    pub llm: LlmConfig,
    #[serde(default)]
    pub editor: EditorConfig,
    #[serde(default)]
    pub facts: FactsConfig,
    #[serde(default)]
    pub keys: KeyBindings,
    #[serde(default)]
    pub hierarchy: HierarchyConfig,
    #[serde(default)]
    pub theme: ThemeConfig,
    #[serde(default)]
    pub backup: BackupConfig,
    #[serde(default)]
    pub sound: SoundConfig,
    #[serde(default)]
    pub typst_templates: TypstTemplatesConfig,
    #[serde(default)]
    pub typst_compile: TypstCompileConfig,
    #[serde(default)]
    pub typst_page: TypstPageConfig,
    #[serde(default)]
    pub typst_fonts: TypstFontsConfig,
    #[serde(default)]
    pub typst_layout: TypstLayoutConfig,
    #[serde(default)]
    pub images: ImagesConfig,
    /// Multi-format export configuration — drives the Ctrl+B O
    /// extra-format pipeline. CLI `inkhaven export <fmt>` uses
    /// the same converters but ignores this list (it picks one
    /// format explicitly).
    #[serde(default)]
    pub output: OutputConfig,
    /// Writing-progress goals. Feeds the status-bar widget and
    /// the Ctrl+V G progress modal. Empty defaults disable goals
    /// + targets but still record events so the modal has data
    /// to show.
    #[serde(default)]
    pub goals: GoalsConfig,
    /// 1.2.6+ — AI-pane behaviour knobs that aren't tied to a
    /// specific provider (per-paragraph memory, future
    /// turn-history overrides, etc).
    #[serde(default)]
    pub ai: AiConfig,
    /// 1.2.6+ — story timeline configuration. Disabled by
    /// default; set `timeline.enabled: true` plus a calendar
    /// preset to turn on event tracking. See
    /// `crate::timeline::calendar::CalendarConfig`.
    #[serde(default)]
    pub timeline: TimelineConfig,
    /// 1.2.8+ — Scrivener-importer behaviour. Currently
    /// scopes the CustomMeta date-field detection — which
    /// field names in a Scrivener project's
    /// `<CustomMetaDataSettings>` map to events on import.
    #[serde(default)]
    pub scrivener: ScrivenerConfig,
    /// 1.2.8+ — embedded nushell pane (`Ctrl+Z o`). Enabled
    /// by default; disable via `shell.enabled: false` to
    /// strip the chord entirely (the modal action becomes
    /// a no-op with a status hint).
    #[serde(default)]
    pub shell: ShellConfig,
    /// Bund scripting sandbox policy. Defaults deny destructive
    /// categories (fs_write, net, shell, code_eval); writers opt
    /// in by listing the categories or words they want to allow.
    /// See `src/scripting/policy.rs`.
    #[serde(default)]
    pub scripting: crate::scripting::policy::Policy,
    /// 1.3.0 PDF-1 — imposition profiles for `inkhaven pdf impose`
    /// (binding style, sheet size, creep, marks).  Named profiles merge
    /// through the config cascade like everything else.
    #[serde(default)]
    pub imposition: crate::pdf::impose::config::ImpositionConfig,
    /// 1.3.0 PDF-1 P2 — cover/spine defaults for `inkhaven pdf cover`
    /// (trim size, bleed, paper stocks for the computed spine).
    #[serde(default)]
    pub cover: crate::pdf::cover::CoverConfig,
    /// 1.3.0 PDF-1 P2 — preflight DPI targets for `inkhaven pdf preflight`.
    #[serde(default)]
    pub preflight: crate::pdf::preflight::PreflightConfig,
    /// Primary writing language of the project. Drives:
    /// * Snowball stemmers for the editor's Places/Characters highlight
    ///   overlay (overrides `editor.stemming.languages` when non-empty).
    /// * The default F7 grammar-check prompt's grammar rules.
    ///
    /// Accepts any name handled by `parse_stemmer_language` (`english`,
    /// `russian`, `french`, …). Empty string falls back to
    /// `editor.stemming.languages`.
    #[serde(default = "default_language")]
    pub language: String,
    /// 1.2.14+ Phase Q.4 — project-level word-
    /// count goal + pacing settings.  Feeds the
    /// `Ctrl+V Shift+G` projection modal.  Empty
    /// defaults disable the modal contents but
    /// still let the chord open the modal with
    /// a "no goal set" message.
    #[serde(default)]
    pub project: ProjectConfig,
    /// 1.2.15+ Phase H.1 — background health
    /// monitor.  See `crate::health` and
    /// `Documentation/PROPOSALS/1.2.15_PLAN.md`
    /// §3.
    #[serde(default)]
    pub health: HealthConfig,
    #[serde(default = "default_prompts_path")]
    pub prompts_file: PathBuf,
    /// Where per-book artefacts (rendered PDFs, build intermediates, …)
    /// land. Each new book gets its own subdirectory under here. Created
    /// on project open if missing. Relative paths resolve against the
    /// project root; absolute paths are used verbatim.
    #[serde(default = "default_artefacts_directory")]
    pub artefacts_directory: String,
    /// Seconds between background calls to `Store::sync()`, which
    /// flushes the HNSW vector index to disk. Acts as a safety net —
    /// every explicit mutation in `src/store/` already calls
    /// `sync()` on its own. The tick is cheap when the index is
    /// clean (dirty-flag short-circuit), so the default cadence is
    /// generous. `0` disables the background task entirely.
    #[serde(default = "default_sync_interval")]
    pub sync_interval_seconds: u64,
}

fn default_view_prefix() -> String {
    "Ctrl+v".into()
}

fn default_sync_interval() -> u64 {
    600
}

fn default_prompts_path() -> PathBuf {
    PathBuf::from("prompts.hjson")
}

fn default_language() -> String {
    "english".into()
}

fn default_artefacts_directory() -> String {
    // Empty string → resolved at runtime to the OS per-user cache
    // directory (`<cache_dir>/inkhaven/artefacts/<project-basename>/`).
    // Build artefacts are ephemeral; keeping them outside the project
    // tree means `git status` / backups / shell tab completion don't
    // see them.
    String::new()
}

impl Default for Config {
    fn default() -> Self {
        Self {
            embeddings: EmbeddingsConfig::default(),
            llm: LlmConfig::default(),
            editor: EditorConfig::default(),
            facts: FactsConfig::default(),
            keys: KeyBindings::default(),
            hierarchy: HierarchyConfig::default(),
            theme: ThemeConfig::default(),
            backup: BackupConfig::default(),
            sound: SoundConfig::default(),
            typst_templates: TypstTemplatesConfig::default(),
            typst_compile: TypstCompileConfig::default(),
            typst_page: TypstPageConfig::default(),
            typst_fonts: TypstFontsConfig::default(),
            typst_layout: TypstLayoutConfig::default(),
            images: ImagesConfig::default(),
            output: OutputConfig::default(),
            goals: GoalsConfig::default(),
            ai: AiConfig::default(),
            timeline: TimelineConfig::default(),
            scrivener: ScrivenerConfig::default(),
            shell: ShellConfig::default(),
            scripting: crate::scripting::policy::Policy::default(),
            imposition: crate::pdf::impose::config::ImpositionConfig::default(),
            cover: crate::pdf::cover::CoverConfig::default(),
            preflight: crate::pdf::preflight::PreflightConfig::default(),
            language: default_language(),
            project: ProjectConfig::default(),
            health: HealthConfig::default(),
            prompts_file: default_prompts_path(),
            artefacts_directory: default_artefacts_directory(),
            sync_interval_seconds: default_sync_interval(),
        }
    }
}

/// Where backups land and how often the TUI should make one on exit. Empty
/// `out_dir` disables auto-backup (manual `inkhaven backup` still works);
/// `max_age = "0s"` (or unset) means "never auto-trigger".
#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct BackupConfig {
    /// Directory where `.zip` snapshots are written. May be a relative path
    /// (resolved against the project root) or absolute. Created if missing.
    pub out_dir: String,
    /// Maximum age of the last backup before the TUI's exit hook creates a
    /// fresh one. Parsed via the `humantime` crate, so values like `"7d"`,
    /// `"24h"`, `"30m"` are all accepted. Empty string or `"0s"` disables.
    #[serde(with = "humantime_serde")]
    pub max_age: std::time::Duration,
    /// 1.2.6+: when a backup finishes — either the manual Ctrl+B B
    /// chord or the exit-hook auto-backup — hold the splash on
    /// screen with a "Press any key to continue…" prompt so the
    /// user can read the result before the TUI dismisses it.
    /// Default true. Set false to keep the auto-dismiss behaviour
    /// from 1.2.5 and earlier.
    #[serde(default = "default_backup_wait_for_key")]
    pub wait_for_key_after_backup: bool,

    /// 1.2.16+ Phase P.1 — amber chip threshold
    /// for the backup-freshness health check.
    /// Fraction of `max_age` at which the status-
    /// bar chip flips from `✓` clean to `ℹ` amber
    /// ("backup is getting old, plan a refresh
    /// soon").  Above `max_age` the chip flips to
    /// the existing `⚠` yellow warning.  Default
    /// 0.5 — gives the user a midpoint heads-up
    /// before the hard warning fires.  Set 0.0
    /// to disable (chip never amber; only the
    /// hard warning surfaces).
    #[serde(default = "default_amber_threshold")]
    pub amber_threshold: f32,
}

fn default_backup_wait_for_key() -> bool {
    true
}

fn default_amber_threshold() -> f32 {
    0.5
}

impl Default for BackupConfig {
    fn default() -> Self {
        Self {
            // Empty string → use the OS per-user data directory
            // (`<data_dir>/inkhaven/backups/<project-basename>/`). Set
            // to an explicit path to override — see
            // `Store::resolve_backup_dir`. Keeping backups out of the
            // project tree by default avoids "snapshot contains itself"
            // recursion.
            out_dir: String::new(),
            // Roughly a week. Vladimir's books move fast enough that a
            // weekly snapshot pairs sensibly with the per-paragraph
            // snapshots the editor already supports.
            max_age: std::time::Duration::from_secs(7 * 24 * 3600),
            wait_for_key_after_backup: default_backup_wait_for_key(),
            amber_threshold: default_amber_threshold(),
        }
    }
}

/// Typewriter sound effects (Enter key, focus-out). Synthesised at
/// runtime — no audio assets needed. `enabled` is toggled live with
/// Ctrl+B E; the chord rewrites this stanza in place so the choice
/// survives the next launch.
#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct SoundConfig {
    pub enabled: bool,
    /// Master volume 0.0–1.0 applied uniformly to every synthesised
    /// sample. Clamped at load time.
    pub volume: f32,
}

impl Default for SoundConfig {
    fn default() -> Self {
        Self {
            // Default off so new users aren't surprised by audio at
            // launch. Ctrl+B E opts in once they're settled.
            enabled: false,
            volume: 0.6,
        }
    }
}

/// 1.2.8+ — Scrivener-importer behaviour.
///
/// `date_fields`: which Scrivener CustomMeta field names (case-
/// insensitive) should be interpreted as event dates during
/// `inkhaven import-scrivener`. When a matching field's value
/// parses against the project's HJSON calendar, the imported
/// paragraph gets `EventData` attached automatically (anchored
/// at the parsed start tick, no end, the project's
/// `timeline.default_track`). When `timeline.enabled = false`
/// the whole pass is a no-op.
/// 1.2.14+ Phase Q.4 — `project: { … }` HJSON
/// stanza.  Word-count goal + target date drive
/// the `Ctrl+V Shift+G` projection modal.
#[derive(Debug, Clone, Serialize, Deserialize, Default)]
pub struct ProjectConfig {
    /// Total manuscript word-count goal.  `0`
    /// disables the goal display in the modal
    /// (counts still show).
    #[serde(default)]
    pub word_count_goal: u64,
    /// Target completion date in ISO 8601
    /// (`YYYY-MM-DD`).  Empty disables the days-
    /// remaining + projection-date display.
    #[serde(default)]
    pub target_date: String,
    /// Which user books contribute to the project
    /// total.  Empty = every user book.  Useful
    /// when a project has a primary manuscript
    /// book + reference / notes books that
    /// shouldn't count toward the goal.  Match
    /// is against book TITLE, case-insensitive.
    #[serde(default)]
    pub counted_books: Vec<String>,
}

/// 1.2.15+ Phase H.1 + H.2 + H.3 — background
/// health-monitor configuration.  Disabled by
/// default so existing projects don't inherit a
/// new background task without opting in.
///
/// Per-check cadences live in `crate::health`
/// (90 s project, 300 s backup, 3600 s rescue
/// orphans) — they're tuned to the cost of each
/// check, not exposed as HJSON yet.
#[derive(Debug, Clone, Default, Serialize, Deserialize)]
#[serde(default)]
pub struct HealthConfig {
    /// Master switch.  False = no monitor task,
    /// status-bar chip stays hidden.
    pub enabled: bool,
    /// 1.2.15+ Phase H.3 — per-class opt-in for
    /// the auto-repair flow.  All defaults are
    /// false: a user who turns on the monitor
    /// doesn't automatically grant it permission
    /// to mutate project state; each individual
    /// fix has to be enabled explicitly.
    pub auto_repair: AutoRepairConfig,
}

/// HJSON shape for [`crate::health::RepairPolicy`].
#[derive(Debug, Clone, Default, Serialize, Deserialize)]
#[serde(default)]
pub struct AutoRepairConfig {
    /// Delete `*.inkhaven-rescue` orphan files
    /// older than `RESCUE_REPAIR_DAYS` (30 d) from
    /// the project tree.  Default false.
    pub rescue_orphans: bool,
}

#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct ScrivenerConfig {
    pub date_fields: Vec<String>,
}

impl Default for ScrivenerConfig {
    fn default() -> Self {
        Self {
            // Common English-language Scrivener templates: "Date"
            // (default text field on the Novel template), "Story Date"
            // (Novel-with-Parts), "Event Date" (custom but widely
            // recommended in the Scrivener forum threads on timeline
            // workflows). Users with non-English templates extend or
            // replace this list in HJSON.
            date_fields: vec![
                "Date".into(),
                "Story Date".into(),
                "Event Date".into(),
            ],
        }
    }
}

/// 1.2.8+ — embedded nushell pane.
///
/// `enabled`: ship the `Ctrl+Z o` chord at all. `false`
/// makes the action a status-hint no-op, useful for users
/// who prefer to keep their writing app shell-free.
///
/// `max_buffered_turns`: how many command/output pairs the
/// pane retains. Older turns roll off the bottom. Picked to
/// fit the working-memory needs of a writing session
/// without growing unbounded across long-lived sessions.
///
/// `insert_template`: the typst markup `Ctrl+Z h` → `i`
/// wraps a selected output in when inserting into the
/// editor. The placeholder `{output}` is replaced with the
/// raw command output verbatim. Default uses a typst `raw`
/// block with `lang: "shell"` for monospace, no markdown
/// reinterpretation. Customise for a framed or themed
/// presentation.
///
/// `max_output_lines`: per-turn cap on stdout (and stderr).
/// A single command (`git log`, `cat very_big_file`, …) can
/// emit thousands of lines and bloat the in-memory turn
/// buffer + slow ratatui rendering.  When a turn's stdout
/// exceeds this many lines, the head is kept and the tail
/// is replaced with `… (N more lines truncated)`.  Same
/// rule applies to stderr.  Independent of
/// `max_buffered_turns` (which caps the number of *turns*).
#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct ShellConfig {
    pub enabled: bool,
    pub max_buffered_turns: usize,
    pub max_output_lines: usize,
    pub insert_template: String,
    /// 1.2.8+ — basenames of external programs that are
    /// **refused before spawn**.  Full-screen TUI apps
    /// (vim, less, top, tmux, …) cannot run inside the
    /// embedded pane: they open `/dev/tty` directly and
    /// write escape sequences past our piped stdio,
    /// corrupting ratatui's alt-screen surface.  Match is
    /// case-insensitive against the program basename, so
    /// `^/usr/bin/vim` and `^vim` both hit.  Override per
    /// project to add internal tools.
    pub blocked_externals: Vec<String>,
    /// 1.2.8+ — wall-clock budget for a single command's
    /// evaluation.  After this many seconds the engine
    /// triggers its interrupt signal, waits a short grace
    /// period, and (if the command is still wedged) spins
    /// up a fresh engine and abandons the worker — losing
    /// any env-var / def state the user accumulated but
    /// keeping the TUI responsive.  Catches TUI apps that
    /// slip past `blocked_externals`.  Set high (e.g.
    /// 600) if you legitimately run long-baked pipelines.
    pub external_timeout_secs: u64,
}

impl Default for ShellConfig {
    fn default() -> Self {
        Self {
            enabled: true,
            max_buffered_turns: 50,
            max_output_lines: 1000,
            insert_template:
                "#raw(block: true, lang: \"shell\", `{output}`)".into(),
            blocked_externals: default_blocked_externals(),
            external_timeout_secs: 30,
        }
    }
}

/// 1.2.8+ — default list of basenames refused before
/// spawn.  See `ShellConfig::blocked_externals` for the
/// rationale.  Grouped by category for editability:
///
///   editors        — vim/nvim/vi/view/emacs/nano/pico/joe
///   file managers  — mc/mcedit/ranger/nnn/lf/yazi
///   pagers         — less/more/most/pg
///   monitors       — top/htop/btop/atop/iotop/iftop
///   multiplexers   — tmux/screen/byobu/dtach
///   remote shells  — ssh/telnet/mosh
///   debuggers      — gdb/lldb
///   fuzzy finders  — fzf/peco/sk
///   REPLs (TTY)    — ipython/irb/pry
///   db clients     — psql/mysql/sqlite3
///   privileged     — sudo/su/passwd
pub fn default_blocked_externals() -> Vec<String> {
    [
        "vim", "nvim", "vi", "view", "ex",
        "emacs", "emacsclient",
        "nano", "pico", "joe", "jed",
        "mc", "mcedit", "ranger", "nnn", "lf", "yazi",
        "less", "more", "most", "pg",
        "top", "htop", "btop", "atop", "iotop", "iftop", "nethogs", "glances",
        "tmux", "screen", "byobu", "dtach", "abduco",
        "ssh", "telnet", "mosh", "rlogin",
        "gdb", "lldb",
        "fzf", "peco", "sk", "skim",
        "ipython", "irb", "pry",
        "psql", "mysql", "sqlite3", "redis-cli",
        "sudo", "su", "passwd",
    ]
    .into_iter()
    .map(String::from)
    .collect()
}

/// Typst function templates used during Book assembly (Ctrl+B A).
/// Each field is the raw Typst source code for a wrap function — they
/// get inlined verbatim into the per-book `globals.typ` paragraph the
/// first time a user book is created. Customise them to taste; the
/// shipped defaults are minimal "show content as-is with a heading"
/// wrappers.
#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct TypstTemplatesConfig {
    pub wrap_book: String,
    pub wrap_chapter: String,
    pub wrap_subchapter: String,
    pub wrap_paragraph: String,
    /// Frontispiece-style: page break + full-page centered image,
    /// optional caption. Called for Image nodes whose parent is a
    /// Book.
    pub wrap_image_book: String,
    /// Chapter-art: page break + 80%-width image + caption. Called
    /// for Image nodes whose parent is a Chapter.
    pub wrap_image_chapter: String,
    /// Smaller centered image + caption. Called for Image nodes
    /// whose parent is a Subchapter.
    pub wrap_image_subchapter: String,
    /// `figure(image(...), caption: ...)`. Not called by the
    /// assembler (Image nodes never sit under a Paragraph) but
    /// available as a regular function for users to call by hand
    /// from paragraph text.
    pub wrap_image_inline: String,
}

impl Default for TypstTemplatesConfig {
    fn default() -> Self {
        Self {
            wrap_book: default_wrap_book().into(),
            wrap_chapter: default_wrap_chapter().into(),
            wrap_subchapter: default_wrap_subchapter().into(),
            wrap_paragraph: default_wrap_paragraph().into(),
            wrap_image_book: default_wrap_image_book().into(),
            wrap_image_chapter: default_wrap_image_chapter().into(),
            wrap_image_subchapter: default_wrap_image_subchapter().into(),
            wrap_image_inline: default_wrap_image_inline().into(),
        }
    }
}

/// Baked-in defaults for the four wrap functions. Used both for
/// `TypstTemplatesConfig::default()` and as a fallback in the Book
/// assembly procedure when the HJSON entry is empty / missing.
pub fn default_wrap_book() -> &'static str {
    "#let wrap_book(body) = {\n  body\n}\n"
}
pub fn default_wrap_chapter() -> &'static str {
    "#let wrap_chapter(title, body) = {\n  heading(level: 1, title)\n  body\n}\n"
}
pub fn default_wrap_subchapter() -> &'static str {
    "#let wrap_subchapter(title, body) = {\n  heading(level: 2, title)\n  body\n}\n"
}
pub fn default_wrap_paragraph() -> &'static str {
    "#let wrap_paragraph(body) = {\n  body\n  parbreak()\n}\n"
}

pub fn default_wrap_image_book() -> &'static str {
    "// Frontispiece — Image directly under a Book.\n\
     #let wrap_image_book(path, title, caption, alt: none) = {\n\
     \u{20}\u{20}pagebreak(weak: true)\n\
     \u{20}\u{20}align(center + horizon, image(path, alt: alt, width: 90%))\n\
     \u{20}\u{20}if caption != none [#align(center)[#emph(caption)]]\n\
     \u{20}\u{20}pagebreak(weak: true)\n\
     }\n"
}

pub fn default_wrap_image_chapter() -> &'static str {
    "// Chapter-art — Image directly under a Chapter.\n\
     #let wrap_image_chapter(path, title, caption, alt: none) = {\n\
     \u{20}\u{20}pagebreak(weak: true)\n\
     \u{20}\u{20}align(center, image(path, alt: alt, width: 80%))\n\
     \u{20}\u{20}if caption != none [#align(center)[#emph(caption)]]\n\
     }\n"
}

pub fn default_wrap_image_subchapter() -> &'static str {
    "// Section image — Image directly under a Subchapter.\n\
     #let wrap_image_subchapter(path, title, caption, alt: none) = {\n\
     \u{20}\u{20}align(center, image(path, alt: alt, width: 60%))\n\
     \u{20}\u{20}if caption != none [#align(center)[#emph(caption)]]\n\
     }\n"
}

pub fn default_wrap_image_inline() -> &'static str {
    "// Inline figure — call from paragraph text with #wrap_image_inline(...).\n\
     #let wrap_image_inline(path, title, caption, alt: none) = figure(\n\
     \u{20}\u{20}image(path, alt: alt, width: 80%),\n\
     \u{20}\u{20}caption: caption,\n\
     )\n"
}

impl TypstTemplatesConfig {
    /// Per-template fallback to the shipped default when the user has
    /// emptied the HJSON entry. Returns owned strings so callers can
    /// stitch them into a `globals.typ` file without worrying about
    /// lifetimes.
    pub fn resolved_wrap_book(&self) -> String {
        if self.wrap_book.trim().is_empty() {
            default_wrap_book().into()
        } else {
            self.wrap_book.clone()
        }
    }
    pub fn resolved_wrap_chapter(&self) -> String {
        if self.wrap_chapter.trim().is_empty() {
            default_wrap_chapter().into()
        } else {
            self.wrap_chapter.clone()
        }
    }
    pub fn resolved_wrap_subchapter(&self) -> String {
        if self.wrap_subchapter.trim().is_empty() {
            default_wrap_subchapter().into()
        } else {
            self.wrap_subchapter.clone()
        }
    }
    pub fn resolved_wrap_paragraph(&self) -> String {
        if self.wrap_paragraph.trim().is_empty() {
            default_wrap_paragraph().into()
        } else {
            self.wrap_paragraph.clone()
        }
    }
    pub fn resolved_wrap_image_book(&self) -> String {
        if self.wrap_image_book.trim().is_empty() {
            default_wrap_image_book().into()
        } else {
            self.wrap_image_book.clone()
        }
    }
    pub fn resolved_wrap_image_chapter(&self) -> String {
        if self.wrap_image_chapter.trim().is_empty() {
            default_wrap_image_chapter().into()
        } else {
            self.wrap_image_chapter.clone()
        }
    }
    pub fn resolved_wrap_image_subchapter(&self) -> String {
        if self.wrap_image_subchapter.trim().is_empty() {
            default_wrap_image_subchapter().into()
        } else {
            self.wrap_image_subchapter.clone()
        }
    }
    pub fn resolved_wrap_image_inline(&self) -> String {
        if self.wrap_image_inline.trim().is_empty() {
            default_wrap_image_inline().into()
        } else {
            self.wrap_image_inline.clone()
        }
    }

    /// Concatenated body for the per-book `globals.typ` paragraph:
    /// the editor-chrome heading line, a brief comment header, then
    /// the eight wrap_* functions (four for prose-level wrappers,
    /// four for image-level wrappers).
    pub fn globals_typ_body(&self) -> String {
        let mut out = String::new();
        out.push_str("= globals.typ\n\n");
        out.push_str(
            "// Wrap functions used by inkhaven's `Book assembly` (Ctrl+B A).\n\
             // Each node in the manuscript tree is fed through the matching\n\
             // wrap_* call when the assembler synthesises index.typ files.\n\
             // Customise to taste — page breaks, headings, fonts, layout.\n\n",
        );
        out.push_str("// ---- Prose wrappers ----\n");
        out.push_str(&self.resolved_wrap_book());
        out.push('\n');
        out.push_str(&self.resolved_wrap_chapter());
        out.push('\n');
        out.push_str(&self.resolved_wrap_subchapter());
        out.push('\n');
        out.push_str(&self.resolved_wrap_paragraph());
        out.push_str("\n// ---- Image wrappers ----\n");
        out.push_str(&self.resolved_wrap_image_book());
        out.push('\n');
        out.push_str(&self.resolved_wrap_image_chapter());
        out.push('\n');
        out.push_str(&self.resolved_wrap_image_subchapter());
        out.push('\n');
        out.push_str(&self.resolved_wrap_image_inline());
        out
    }
}

/// Behaviour of the `typst compile` step driven by Ctrl+B B / Ctrl+B O,
/// plus the typst-as-library knobs added in 1.2.5. The stanza is its
/// own struct so new knobs (timeouts, custom typst path, extra args)
/// can land without breaking serde compatibility.
#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct TypstCompileConfig {
    /// System prompt fed to the AI when `typst compile` returns
    /// non-zero. Empty → falls back to the baked-in default.
    pub error_system_prompt: String,
    /// Which engine drives Ctrl+B B / Ctrl+B O (the user-visible
    /// "Take the book → PDF" path).
    ///
    /// * `"external"` (default) — spawn the host's `typst` binary as
    ///   a child process. Pure shell-out, smallest binary footprint,
    ///   output exactly matches what the user gets typing
    ///   `typst compile` themselves.
    /// * `"inprocess"` — run the in-process typst compiler. Not yet
    ///   wired up in 1.2.5; the value is accepted today so HJSON
    ///   configs written now survive when the engine lands. Falls
    ///   back to `external` at runtime when the in-process engine
    ///   isn't compiled in.
    ///
    /// See the typst-as-library Phase plan in `Documentation/`.
    pub engine: String,
    /// Run `typst-syntax` against the open buffer on idle / save
    /// and surface parse errors in the status bar (1.2.5+). Pure
    /// parser — no eval, layout, render, fonts, or package
    /// resolution. Adds no shell-out and is independent of which
    /// `engine` is selected for PDF builds.
    pub diagnostics: bool,
    /// Minimum seconds of editor idle time before a diagnostics
    /// re-check runs. Same units as `editor.autosave_seconds` and
    /// piggy-backs on the same idle clock — set to `0` to check
    /// on every keystroke (cheap on small buffers; can stutter on
    /// chapter-sized pastes).
    pub diagnostics_idle_seconds: u64,
    /// 1.2.5+: when `engine = "inprocess"`, upgrade the idle /
    /// save diagnostic check from `typst-syntax` (parse only) to
    /// a full `typst::compile` against the open paragraph in
    /// isolation. Surfaces semantic errors (undefined functions,
    /// type errors, missing fonts) the parser can't catch. Costs
    /// 10–200 ms per check. **False positives are expected** when
    /// the paragraph references book-level definitions from the
    /// assembled preamble — turn off if your manuscript uses
    /// custom `#show` rules. Has no effect when
    /// `engine = "external"`.
    pub semantic_diagnostics: bool,
    /// 1.2.5+: ship Computer Modern and Linux Libertine inside
    /// the inkhaven binary so the in-process engine can lay out
    /// even on hosts without system fonts. Adds ~10 MB; turn off
    /// if you're confident every host inkhaven runs on has the
    /// fonts your manuscript needs. No effect when
    /// `engine = "external"`.
    pub bundle_fonts: bool,
    /// 1.2.5+: also search the host's system fonts via fontdb.
    /// On by default — most users want both their installed
    /// fonts AND the embedded fallback set. Turn off for
    /// reproducible builds where the only allowed fonts are the
    /// embedded ones. No effect when `engine = "external"`.
    pub use_system_fonts: bool,
    /// 1.2.5+: when the in-process engine sees `@preview/<pkg>`
    /// (or any non-local package id), use `typst-kit`'s
    /// `PackageStorage` to fetch and unpack it from
    /// packages.typst.org. Cached on disk in the platform's
    /// standard cache directory (`~/Library/Caches/typst/packages`
    /// on macOS, `~/.cache/typst/packages` on Linux,
    /// `%LOCALAPPDATA%\typst\packages` on Windows). Turn off to
    /// fail-fast on package imports — useful for hermetic
    /// builds. No effect when `engine = "external"`.
    pub packages_enabled: bool,
    /// 1.2.6+: when the typst compile splash (Ctrl+B B / Ctrl+B O)
    /// finishes, hold the splash on screen with a
    /// "Press any key to continue…" prompt instead of jumping
    /// straight back to the editor. Lets the user read the
    /// "Build OK / failed" line before the splash disappears.
    /// Cancelled compiles (Esc) skip the wait. Default true.
    #[serde(default = "default_wait_for_key_after_compile")]
    pub wait_for_key_after_compile: bool,
}

fn default_wait_for_key_after_compile() -> bool {
    true
}

impl Default for TypstCompileConfig {
    fn default() -> Self {
        Self {
            error_system_prompt: String::new(),
            engine: "external".to_owned(),
            diagnostics: true,
            diagnostics_idle_seconds: 2,
            semantic_diagnostics: false,
            bundle_fonts: true,
            use_system_fonts: true,
            packages_enabled: true,
            wait_for_key_after_compile: default_wait_for_key_after_compile(),
        }
    }
}

impl TypstCompileConfig {
    pub fn resolved_error_system_prompt(&self) -> String {
        if self.error_system_prompt.trim().is_empty() {
            default_typst_error_system_prompt().into()
        } else {
            self.error_system_prompt.clone()
        }
    }

    /// True when the user has asked for the in-process engine. The
    /// in-process compiler stack (typst + typst-pdf + typst-kit
    /// fonts) is always linked in 1.2.5+; the user opts in by
    /// setting `typst_compile.engine = "inprocess"` in
    /// `inkhaven.hjson`. Anything else falls back to the external
    /// `typst` binary on PATH.
    pub fn use_inprocess_engine(&self) -> bool {
        self.engine.eq_ignore_ascii_case("inprocess")
    }
}

/// Settings for Image nodes (book art / chapter art / inline figures).
/// `preview_enabled` toggles the ratatui-image preview that pops on
/// Enter — flip it off on slow ssh sessions or terminals where the
/// half-block fallback is too noisy. The two size knobs guard against
/// accidental imports of huge files.
#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct ImagesConfig {
    pub preview_enabled: bool,
    pub allowed_extensions: Vec<String>,
    pub max_size_bytes: u64,
}

impl Default for ImagesConfig {
    fn default() -> Self {
        Self {
            preview_enabled: true,
            allowed_extensions: vec![
                "png".into(),
                "jpg".into(),
                "jpeg".into(),
                "gif".into(),
                "webp".into(),
                "svg".into(),
            ],
            // 32 MiB cap — generous for literary cover art, small
            // enough that a misclicked drag of a 200-MB raw scan
            // gets rejected with a clear status message.
            max_size_bytes: 32 * 1024 * 1024,
        }
    }
}

/// Page geometry — fed into `#set page(...)` in the synthesised
/// `settings.typ`. Empty / zero / `"default"` values fall through to
/// typst's own defaults so a user who doesn't touch HJSON still gets
/// a working compile.
#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct TypstPageConfig {
    /// `"us-letter"`, `"a4"`, `"a5"`, etc. — anything typst's `paper:`
    /// argument accepts. Empty = typst default.
    pub paper: String,
    pub margin_top: String,
    pub margin_bottom: String,
    /// Inside / outside replace left / right when typesetting two-
    /// sided books. Typst handles the binding-edge swap automatically
    /// when `inside` / `outside` are used.
    pub margin_inside: String,
    pub margin_outside: String,
    /// Page-number format — `"1"`, `"i"`, `"1 of 1"`. Empty = no
    /// page numbers (typst default).
    pub page_numbering: String,
    /// Single-column documents: 1. Multi-column: 2+. 0 / 1 both fall
    /// through to typst's single-column default.
    pub columns: u32,
}

impl Default for TypstPageConfig {
    fn default() -> Self {
        Self {
            paper: "us-letter".into(),
            margin_top: "2.5cm".into(),
            margin_bottom: "2.5cm".into(),
            margin_inside: "3cm".into(),
            margin_outside: "2cm".into(),
            page_numbering: "1".into(),
            columns: 1,
        }
    }
}

/// `#set text(...)` and language. Empty body / monospace strings let
/// typst pick its bundled defaults.
#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct TypstFontsConfig {
    pub body: String,
    pub body_size: String,
    pub monospace: String,
    /// Two-letter language tag fed to `#set text(lang: ...)`. Drives
    /// typst's hyphenation / smart-quote behaviour.
    pub language: String,
}

impl Default for TypstFontsConfig {
    fn default() -> Self {
        // 1.2.6: defaults are typst's own bundled fonts so the
        // shipped HJSON compiles cleanly on a vanilla host with
        // no extra font installs. Override in HJSON to taste —
        // see `synthesised_settings_typ_header` which always
        // emits a fallback list ending in the bundled font, so
        // a custom name that isn't installed still compiles.
        Self {
            body: "Linux Libertine".into(),
            body_size: "11pt".into(),
            monospace: "DejaVu Sans Mono".into(),
            language: "en".into(),
        }
    }
}

/// Names that ship with typst's own embedded font set — used as
/// the trailing fallback in `#set text(font: ...)` /
/// `#set raw(font: ...)`. Listed bare so the unit tests can match
/// them; consider these the "sure-way" fonts that are present
/// even when the host has no system fonts at all.
const BUNDLED_BODY_FONT: &str = "Linux Libertine";
const BUNDLED_MONO_FONT: &str = "DejaVu Sans Mono";

/// Build the Typst literal for a `font:` argument. When `primary`
/// already matches the bundled fallback, emit the plain string
/// form `"X"`; otherwise emit the array form `("X", "Y")` so a
/// missing primary font falls back to the bundled one instead of
/// erroring.
fn font_literal(primary: &str, fallback: &str) -> String {
    let primary = primary.trim();
    if primary.eq_ignore_ascii_case(fallback) {
        format!("\"{}\"", typst_escape(primary))
    } else {
        format!(
            "(\"{}\", \"{}\")",
            typst_escape(primary),
            typst_escape(fallback)
        )
    }
}

/// Paragraph + heading layout. Empty strings = typst default.
#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct TypstLayoutConfig {
    pub justify: bool,
    pub leading: String,
    /// First-line indent for paragraphs. Empty = no indent.
    pub paragraph_indent: String,
    /// `#set heading(numbering: ...)` argument. `"1."` / `"1.1"` /
    /// `"I."`. Empty = unnumbered (typst default).
    pub heading_numbering: String,
}

impl Default for TypstLayoutConfig {
    fn default() -> Self {
        Self {
            justify: true,
            leading: "0.7em".into(),
            paragraph_indent: String::new(),
            heading_numbering: String::new(),
        }
    }
}

impl Config {
    /// Render the auto-generated header that `Book assembly` prepends
    /// to the synthesised `settings.typ`. Reflects the live values of
    /// `typst_page` / `typst_fonts` / `typst_layout`; the user's
    /// `Typst → <book> → settings.typ` paragraph content is appended
    /// below this header so free-form additions survive every
    /// regeneration.
    pub fn synthesised_settings_typ_header(&self) -> String {
        let mut out = String::new();
        out.push_str(
            "// ── inkhaven auto-generated · do not edit ────────────────\n\
             // Source: typst_page / typst_fonts / typst_layout in\n\
             // inkhaven.hjson. Change values there and re-run Ctrl+B A.\n\
             // Anything below the `User overrides` line below is your\n\
             // free-form paragraph content; preserved across rebuilds.\n\n",
        );

        // #set page(...)
        let p = &self.typst_page;
        if !p.paper.trim().is_empty() {
            let mut args: Vec<String> = Vec::new();
            args.push(format!("paper: \"{}\"", typst_escape(&p.paper)));
            let any_margin = !(p.margin_top.is_empty()
                && p.margin_bottom.is_empty()
                && p.margin_inside.is_empty()
                && p.margin_outside.is_empty());
            if any_margin {
                args.push(format!(
                    "margin: (top: {}, bottom: {}, inside: {}, outside: {})",
                    pad_or(&p.margin_top, "2.5cm"),
                    pad_or(&p.margin_bottom, "2.5cm"),
                    pad_or(&p.margin_inside, "3cm"),
                    pad_or(&p.margin_outside, "2cm"),
                ));
            }
            if !p.page_numbering.trim().is_empty() {
                args.push(format!(
                    "numbering: \"{}\"",
                    typst_escape(&p.page_numbering)
                ));
            }
            if p.columns > 1 {
                args.push(format!("columns: {}", p.columns));
            }
            out.push_str(&format!("#set page({})\n\n", args.join(", ")));
        }

        // #set text(...)
        // Body + monospace font args are emitted as a fallback list
        // (user pick, bundled font) so a missing primary survives.
        let f = &self.typst_fonts;
        let mut text_args: Vec<String> = Vec::new();
        if !f.body.trim().is_empty() {
            text_args.push(format!(
                "font: {}",
                font_literal(&f.body, BUNDLED_BODY_FONT)
            ));
        }
        if !f.body_size.trim().is_empty() {
            text_args.push(format!("size: {}", f.body_size));
        }
        if !f.language.trim().is_empty() {
            text_args.push(format!("lang: \"{}\"", typst_escape(&f.language)));
        }
        if !text_args.is_empty() {
            out.push_str(&format!("#set text({})\n\n", text_args.join(", ")));
        }
        // Raw / code typeface. Typst 0.11+ removed `font:` from the
        // `raw` element, so the only correct way to retarget the
        // monospace face is a `show raw: set text(font: …)` rule.
        // We also style inline raw spans so backticks pick up the
        // same font — `set text` inside a show-rule applies to both
        // block and inline raw.
        if !f.monospace.trim().is_empty() {
            out.push_str(&format!(
                "#show raw: set text(font: {})\n\n",
                font_literal(&f.monospace, BUNDLED_MONO_FONT)
            ));
        }

        // #set par(...) — justify, leading, first-line-indent
        let l = &self.typst_layout;
        let mut par_args: Vec<String> = Vec::new();
        par_args.push(format!("justify: {}", l.justify));
        if !l.leading.trim().is_empty() {
            par_args.push(format!("leading: {}", l.leading));
        }
        if !l.paragraph_indent.trim().is_empty() {
            par_args.push(format!("first-line-indent: {}", l.paragraph_indent));
        }
        out.push_str(&format!("#set par({})\n\n", par_args.join(", ")));

        // #set heading(numbering: ...)
        if !l.heading_numbering.trim().is_empty() {
            out.push_str(&format!(
                "#set heading(numbering: \"{}\")\n\n",
                typst_escape(&l.heading_numbering)
            ));
        }

        out.push_str(
            "// ── User overrides (your settings.typ paragraph below) ─────\n",
        );
        out
    }
}

/// Backslash-escape `\` and `"` so a user-supplied value can be
/// inlined into a Typst string literal without breaking the parser.
/// Strips newlines defensively — HJSON should never produce them in
/// these fields but the user might paste one in.
fn typst_escape(s: &str) -> String {
    let mut out = String::with_capacity(s.len());
    for c in s.chars() {
        match c {
            '\\' => out.push_str("\\\\"),
            '"' => out.push_str("\\\""),
            '\n' | '\r' => out.push(' '),
            other => out.push(other),
        }
    }
    out
}

fn pad_or<'a>(v: &'a str, fallback: &'a str) -> &'a str {
    if v.trim().is_empty() { fallback } else { v }
}

pub fn default_typst_error_system_prompt() -> &'static str {
    "You are an expert Typst typesetter helping debug `typst compile` failures \
     for books assembled by inkhaven. Inkhaven generates a tree of `.typ` files:\n\
     - `<slug>.typ` — root, imports globals.typ + settings.typ, calls wrap_book(include \"book/index.typ\").\n\
     - `globals.typ` — defines wrap_book / wrap_chapter / wrap_subchapter / wrap_paragraph functions.\n\
     - `settings.typ` — document-wide #set / #show rules.\n\
     - `book/index.typ` — sequence of `#include` for chapters at markup scope.\n\
     - `book/<NN-chapter>/index.typ` — calls `#wrap_chapter(\"title\", { include … })` in code mode.\n\
     - `book/<NN-chapter>/<NN-paragraph>.typ` — the user's prose (leading `= title` stripped).\n\n\
     When you receive an error, walk through:\n\
     1. What the error means in plain language.\n\
     2. Which of the file categories above most likely caused it.\n\
     3. The smallest concrete fix the user can apply — either in their inkhaven \
        paragraph (via the editor) or in HJSON config (`typst_templates.wrap_*`).\n\n\
     Be concise. The user wants to ship a PDF, not a tutorial."
}

/// Visual theme for the TUI. Every field is a hex colour string (`#RRGGBB`),
/// or the empty string for "fall back to terminal default" (only meaningful
/// for background fields). Defaults form a Catppuccin Mocha-style dark theme;
/// see `assets/default_project.hjson` for a complete annotated example.
#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct ThemeConfig {
    // Pane backgrounds and foregrounds.
    pub pane_bg: String,
    pub pane_fg: String,
    pub line_number_fg: String,
    pub current_line_bg: String,

    // Pane borders (focused / unfocused / saved / dirty / read-only).
    pub border_focused: String,
    pub border_unfocused: String,
    pub border_dirty: String,
    pub border_saved: String,
    pub border_readonly: String,

    // Modal / floating windows.
    pub modal_bg: String,
    pub modal_border: String,
    pub modal_fg: String,

    // Lexicon highlights overlay.
    pub places_fg: String,
    pub characters_fg: String,
    pub artefacts_fg: String,
    pub notes_underline_fg: String,
    /// 1.2.9+ — colour for inline filter-word warnings.
    #[serde(default)]
    pub style_warning_filter_word_fg: String,
    /// 1.2.9+ — colour for repeated-phrase warnings.
    #[serde(default)]
    pub style_warning_repeated_phrase_fg: String,
    /// 1.2.9+ — colour for show-don't-tell warnings.
    #[serde(default)]
    pub style_warning_show_dont_tell_fg: String,
    /// 1.3.9+ — colour for live anachronism warnings (a term that postdates
    /// the configured setting `year`).  Empty falls back to an amber that
    /// reads as "wrong era" caution, distinct from the show-don't-tell teal.
    #[serde(default)]
    pub style_warning_anachronism_fg: String,
    /// 1.2.20+ — colour for the live echo overlay
    /// (`Ctrl+B Shift+K`).  Distinct from the
    /// repeated-phrase magenta so a within-paragraph
    /// repeat and a cross-paragraph echo read as
    /// different findings.  Empty falls back to a
    /// muted purple at runtime.
    #[serde(default)]
    pub style_warning_echo_fg: String,
    /// 1.2.13+ — colour for invented-language
    /// dictionary-entry overlays.  Empty falls back to
    /// a soft mauve-teal mix distinct from the four
    /// existing entity-overlay colours (places /
    /// characters / artefacts / notes).  Phase D
    /// extends with per-Language-sub-book overrides.
    #[serde(default)]
    pub language_word_fg: String,
    /// 1.2.12+ — per-detector style modifier for the
    /// three style-warning overlays.  Accepts
    /// `"underline"` (default), `"bold"`, `"dim"`,
    /// `"reversed"`, `"italic"`, `"none"`, or
    /// `+`-combined like `"underline+bold"`.  The
    /// previous hard-coded `UNDERLINED` worked great
    /// for most terminals but read faint on some
    /// palettes — these knobs let users dial it up
    /// (or off, with `"none"`) without touching the
    /// detector colours.
    #[serde(default)]
    pub style_warning_filter_word_modifier: String,
    #[serde(default)]
    pub style_warning_repeated_phrase_modifier: String,
    #[serde(default)]
    pub style_warning_show_dont_tell_modifier: String,
    /// 1.2.20+ — modifier for the live echo overlay.
    /// Same grammar as the other style-warning
    /// modifiers; empty maps to `underline`.
    #[serde(default)]
    pub style_warning_echo_modifier: String,
    /// 1.2.14+ Phase C.1 — modifier applied to the
    /// character span of every inline comment.
    /// Empty string keeps the baked-in default
    /// `underline+italic`.  Accepts `+`-combined
    /// tokens like the existing style-warning
    /// fields: `bold`, `dim`, `italic`, `underline`,
    /// `reversed`, `none`.
    #[serde(default)]
    pub comment_span_modifier: String,
    /// 1.2.10+ — POV / character chip background +
    /// foreground.  Explicit RGB so the chip stays
    /// readable across terminal palettes (the named
    /// `Color::Magenta` rendered as a pale pink on
    /// Catppuccin and killed contrast against white).
    #[serde(default)]
    pub pov_chip_bg: String,
    #[serde(default)]
    pub pov_chip_fg: String,

    // Search-match overlay in the editor.
    pub search_match_bg: String,
    pub search_current_bg: String,

    // Tree pane chrome.
    pub tree_open_marker: String,
    // Per-kind row colour in the Tree pane. The row title (book /
    // chapter / etc.) renders in the matching colour; the open-paragraph
    // marker and cursor REVERSED still take precedence on the active row.
    pub tree_book_fg: String,
    pub tree_chapter_fg: String,
    pub tree_subchapter_fg: String,
    pub tree_paragraph_fg: String,
    pub tree_image_fg: String,
    pub tree_script_fg: String,

    // Editor pane header — the trailing `L{row} C{col}` cursor read-out
    // gets this colour so it's distinguishable from the title.
    pub editor_position_fg: String,

    // AI pane header — the `scope=…` and `infer=…` chips light up in
    // these colours so the active modes are visible at a glance.
    pub ai_scope_fg: String,
    pub ai_infer_fg: String,

    // Foreground colour applied to characters that differ from the
    // pre-grammar-check baseline after `T` overwrites the buffer with the
    // model's corrected paragraph. Stays visible until the user saves
    // (the user implicitly accepts the changes) or switches paragraphs.
    pub grammar_change_fg: String,

    // Typst syntax colours.
    pub syntax_heading: String,
    pub syntax_bold: String,
    pub syntax_italic: String,
    pub syntax_string: String,
    pub syntax_number: String,
    pub syntax_comment: String,
    pub syntax_keyword: String,
    pub syntax_function: String,
    pub syntax_operator: String,
    pub syntax_list_marker: String,
    pub syntax_raw: String,
    pub syntax_tag: String,
    pub syntax_quote: String,
}

impl Default for ThemeConfig {
    fn default() -> Self {
        // Catppuccin Mocha — chosen for low eye-strain on a dark background
        // and broad community familiarity. All values are RGB hex strings so
        // they re-serialise cleanly into HJSON.
        Self {
            pane_bg: "#1e1e2e".into(),
            pane_fg: "#cdd6f4".into(),
            line_number_fg: "#6c7086".into(),
            current_line_bg: "#313244".into(),

            border_focused: "#cba6f7".into(),
            border_unfocused: "#45475a".into(),
            border_dirty: "#f9e2af".into(),
            border_saved: "#a6e3a1".into(),
            border_readonly: "#94e2d5".into(),

            modal_bg: "#181825".into(),
            modal_border: "#cba6f7".into(),
            modal_fg: "#cdd6f4".into(),

            places_fg: "#89dceb".into(),
            characters_fg: "#f9e2af".into(),
            artefacts_fg: "#fab387".into(),
            notes_underline_fg: "#cdd6f4".into(),
            style_warning_filter_word_fg: "#f9c44e".into(),
            style_warning_repeated_phrase_fg: "#eb6f92".into(),
            style_warning_show_dont_tell_fg: "#94e2d5".into(),
            // 1.3.9+ — warm amber-orange "wrong era" caution,
            // distinct from the filter-word gold and the
            // show-don't-tell teal.
            style_warning_anachronism_fg: "#eba672".into(),
            // 1.2.20+ — muted purple, distinct from the
            // repeated-phrase magenta so the two
            // repetition overlays don't read as one.
            style_warning_echo_fg: "#b48ead".into(),
            // 1.2.13+ — invented-language overlay; empty
            // falls back to a soft mauve-teal at runtime.
            language_word_fg: String::new(),
            // 1.2.12+ — empty defaults map to UNDERLINED
            // (the historical hardcoded modifier).  Users
            // override to "bold", "dim", "reversed",
            // "italic", "none", or "+"-combined chords.
            style_warning_filter_word_modifier: String::new(),
            style_warning_repeated_phrase_modifier: String::new(),
            style_warning_show_dont_tell_modifier: String::new(),
            style_warning_echo_modifier: String::new(),
            comment_span_modifier: String::new(),
            pov_chip_bg: "#8b1d88".into(),
            pov_chip_fg: "#ffffff".into(),

            search_match_bg: "#f38ba8".into(),
            search_current_bg: "#f5c2e7".into(),

            tree_open_marker: "#a6e3a1".into(),
            tree_book_fg: "#f5c2e7".into(),       // pink — books pop at the top
            tree_chapter_fg: "#89b4fa".into(),    // blue — chapter rhythm
            tree_subchapter_fg: "#94e2d5".into(), // teal — subchapter
            tree_paragraph_fg: "#cdd6f4".into(),  // base text — keep prose calm
            tree_image_fg: "#fab387".into(),       // peach — media accent
            tree_script_fg: "#cba6f7".into(),      // mauve — code accent

            editor_position_fg: "#89dceb".into(), // sky — cursor read-out
            ai_scope_fg: "#fab387".into(),        // peach — F9 scope chip
            ai_infer_fg: "#94e2d5".into(),        // teal — F10 inference chip

            grammar_change_fg: "#f38ba8".into(),

            syntax_heading: "#cba6f7".into(),
            syntax_bold: "#f9e2af".into(),
            syntax_italic: "#94e2d5".into(),
            syntax_string: "#a6e3a1".into(),
            syntax_number: "#fab387".into(),
            syntax_comment: "#6c7086".into(),
            syntax_keyword: "#cba6f7".into(),
            syntax_function: "#89dceb".into(),
            syntax_operator: "#94e2d5".into(),
            syntax_list_marker: "#cba6f7".into(),
            syntax_raw: "#fab387".into(),
            syntax_tag: "#89b4fa".into(),
            syntax_quote: "#9399b2".into(),
        }
    }
}

/// Parse a colour spec into a ratatui `Color`. Accepts `#RRGGBB` /
/// `#RGB` / `RRGGBB`. Empty string returns `None` (caller decides what to
/// use as a fallback — typically `Color::Reset`). On parse failure returns
/// `None` and the caller falls back; we never panic on a malformed theme.
pub fn parse_color(s: &str) -> Option<ratatui::style::Color> {
    use ratatui::style::Color;
    let t = s.trim();
    if t.is_empty() {
        return None;
    }
    let hex = t.strip_prefix('#').unwrap_or(t);
    // Guard the byte-slicing below: a non-ASCII char makes `hex.len()`
    // (bytes) disagree with char positions, so `hex[0..1]` could split a
    // multibyte char and panic (e.g. `"#aé"` → `len()==3`).  Non-ASCII
    // can't be hex anyway, so reject it up front — keeping the module's
    // "never panic on a malformed theme" guarantee.
    if !hex.is_ascii() {
        return None;
    }
    let parse_byte = |h: &str| u8::from_str_radix(h, 16).ok();
    match hex.len() {
        3 => {
            let r = parse_byte(&hex[0..1])? * 17;
            let g = parse_byte(&hex[1..2])? * 17;
            let b = parse_byte(&hex[2..3])? * 17;
            Some(Color::Rgb(r, g, b))
        }
        6 => {
            let r = parse_byte(&hex[0..2])?;
            let g = parse_byte(&hex[2..4])?;
            let b = parse_byte(&hex[4..6])?;
            Some(Color::Rgb(r, g, b))
        }
        _ => None,
    }
}

/// Convenience: parse the field, fall back to `default` when empty/invalid.
/// Used everywhere a theme colour gets applied so the renderer never panics
/// because the user typed `pane_fg: ""`.
pub fn color_or(s: &str, default: ratatui::style::Color) -> ratatui::style::Color {
    parse_color(s).unwrap_or(default)
}

#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct EmbeddingsConfig {
    /// fastembed model name; default is multilingual with strong Russian support
    pub model: String,
    pub chunk_size: usize,
    pub chunk_overlap: f32,
}

impl Default for EmbeddingsConfig {
    fn default() -> Self {
        Self {
            model: "MultilingualE5Small".into(),
            chunk_size: 800,
            chunk_overlap: 0.15,
        }
    }
}

#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct LlmConfig {
    pub default: String,
    pub providers: std::collections::BTreeMap<String, LlmProvider>,
}

impl Default for LlmConfig {
    fn default() -> Self {
        let mut providers = std::collections::BTreeMap::new();
        // Gemini — Google.
        providers.insert(
            "gemini".into(),
            LlmProvider {
                model: "gemini-2.5-pro".into(),
                api_key_env: Some("GEMINI_API_KEY".into()),
            },
        );
        // Claude — Anthropic. genai routes any `claude-*` model to
        // the Anthropic adapter.
        providers.insert(
            "claude".into(),
            LlmProvider {
                model: "claude-sonnet-4-5".into(),
                api_key_env: Some("ANTHROPIC_API_KEY".into()),
            },
        );
        // OpenAI — `gpt-4o` is the multi-modal workhorse. The user
        // can switch to `gpt-4o-mini` for cheaper / faster runs or
        // `gpt-5-pro` once available; genai picks the right adapter
        // (Responses vs Chat Completions) automatically.
        providers.insert(
            "openai".into(),
            LlmProvider {
                model: "gpt-4o".into(),
                api_key_env: Some("OPENAI_API_KEY".into()),
            },
        );
        // DeepSeek.
        providers.insert(
            "deepseek".into(),
            LlmProvider {
                model: "deepseek-chat".into(),
                api_key_env: Some("DEEPSEEK_API_KEY".into()),
            },
        );
        // Grok — xAI. genai dispatches `grok-*` model names to its
        // Xai adapter, which talks to https://api.x.ai/v1 with the
        // OpenAI-compatible protocol.
        providers.insert(
            "grok".into(),
            LlmProvider {
                model: "grok-2-latest".into(),
                api_key_env: Some("XAI_API_KEY".into()),
            },
        );
        Self {
            default: "gemini".into(),
            providers,
        }
    }
}

#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct LlmProvider {
    pub model: String,
    /// Environment variable that holds the provider's API key. Omit for
    /// local providers like Ollama that don't need authentication — when
    /// absent, the auth check is skipped.
    #[serde(default)]
    pub api_key_env: Option<String>,
}

#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct EditorConfig {
    pub theme: String,
    pub tab_width: usize,
    pub wrap: bool,
    /// Number of seconds of editor inactivity after which the current
    /// paragraph is automatically saved. 0 disables idle autosave (the
    /// quit-time and paragraph-switch autosaves still fire).
    pub autosave_seconds: u64,
    /// Insert the matching close-bracket / quote when the user types
    /// `(`, `[`, `{`, `"` or `'`. Enter inside a bracket pair expands
    /// to a 3-line indented block. Backspace at the inside of a freshly
    /// typed pair removes both halves. Disabled = nothing inserts.
    pub auto_close_pairs: bool,
    /// Snowball stemmer languages used to expand the Places/Characters
    /// highlight overlay so morphological variants light up too — e.g.
    /// "Москва" also matches "Москве", "Москвою". Each entry is one of the
    /// names accepted by `rust-stemmers::Algorithm` (lowercased), see
    /// `parse_stemmer_language` for the supported set.
    pub stemming: StemmingConfig,
    /// Show the project-pulse splash on startup (1.2.4+).
    /// 7-second timed overlay with today/streak/active +
    /// status-ladder counts. Any key press dismisses early.
    /// Set false to skip directly into the editor.
    #[serde(default = "default_startup_splash")]
    pub startup_splash: bool,
    /// 1.2.8+ — initial mouse-capture state on launch.
    /// `true` (the default) hands every mouse event to the
    /// TUI: click-to-focus, scroll-wheel scrolling per pane,
    /// in-TUI drag-select. `false` releases capture at
    /// startup so the terminal's native drag-select +
    /// system-clipboard copy (Cmd/Ctrl+Shift+C) work without
    /// pressing `Ctrl+Shift+M` first. The toggle still
    /// flips state at runtime regardless of this knob.
    #[serde(default = "default_mouse_captured")]
    pub mouse_captured: bool,
    /// 1.2.8+ — pop a confirmation modal on Ctrl+Q before
    /// quitting.  Default `false` — Ctrl+Q quits
    /// immediately (auto-saving any dirty buffer first, as
    /// always).  Set `true` to require a Y / Enter
    /// confirmation; N / Esc cancels and returns to the
    /// editor.  Useful for users who hit Ctrl+Q by accident
    /// (terminals with Ctrl+Q as a software-flow-control
    /// chord especially).
    #[serde(default = "default_confirm_quit")]
    pub confirm_quit: bool,
    /// 1.2.9+ — text-to-speech read-aloud (`Ctrl+B S`).
    /// See `TtsConfig` below for per-knob detail.
    #[serde(default)]
    pub tts: TtsConfig,
    /// 1.2.9+ — inline style-warning overlays.  See
    /// `StyleWarningsConfig` for per-detector knobs.
    #[serde(default)]
    pub style_warnings: StyleWarningsConfig,
    /// 1.2.9+ — status-bar POV / character chip.
    /// When enabled, the status bar gains a small chip
    /// showing the most-mentioned character in the
    /// currently-open paragraph (the heuristic POV
    /// character) plus up to three additional named
    /// characters present.  Driven by the project's
    /// existing `characters` lexicon — no separate
    /// tagging required.  Toggle at runtime with
    /// `Ctrl+B Shift+P`.
    #[serde(default = "default_pov_chip_enabled")]
    pub pov_chip_enabled: bool,
    /// 1.2.12+ — prompt-language resolution mode.
    /// `"book_defined"` (default) uses the top-level
    /// `language` field — every AI call resolves prompts
    /// against the project's language.
    /// `"paragraph_detected"` runs whatlang on the live
    /// paragraph body and falls back to `book_defined`
    /// when the paragraph is shorter than
    /// `prompt_language_detection_min_chars` of non-
    /// whitespace text (whatlang is unreliable below ~50
    /// chars).  Session-local override via the runtime
    /// chord (Phase C); HJSON is the persistent default.
    /// See `Documentation/PROPOSALS/MULTILINGUAL_PROMPTS.md`.
    #[serde(default = "default_prompt_language_mode")]
    pub prompt_language_mode: String,
    /// 1.2.12+ — minimum non-whitespace character count
    /// the live paragraph must have before
    /// `prompt_language_mode = "paragraph_detected"`
    /// will even attempt whatlang detection.  Below this,
    /// the resolver silently uses the book language.
    #[serde(default = "default_prompt_language_detection_min_chars")]
    pub prompt_language_detection_min_chars: usize,
    /// 1.2.14+ Phase C.1 — author name stamped onto
    /// every inline comment created via `Ctrl+V c`.
    /// When unset (the default), the comment author
    /// resolver falls through to `$USER` →
    /// `$LOGNAME` → `$HOSTNAME` → `"anonymous"`.
    /// Set this when the inferred author is wrong
    /// (shared workstation, system account) or
    /// when the project shares a manuscript across
    /// authors and per-author attribution matters.
    #[serde(default)]
    pub comment_author: Option<String>,
    /// 1.2.14+ Phase Q.2 — HJSON-driven snippet
    /// expansion table.  When `enabled`, the editor
    /// watches for non-word characters typed after a
    /// trigger string and replaces the trigger
    /// inline with the resolved expansion body.
    /// Empty `triggers` map → no expansion fires.
    /// See `Documentation/PROPOSALS/1.2.14_PLAN.md`
    /// §6.
    #[serde(default)]
    pub snippets: SnippetsConfig,
    /// 1.2.14+ Phase Q.3 — number of previous
    /// paragraphs (in canonical hierarchy order)
    /// sent as voice anchors in the AI continuation
    /// drafting prompt envelope (`Ctrl+V d`).
    /// Default 3.  Larger values give the model
    /// more voice context at the cost of prompt
    /// envelope size.
    #[serde(default = "default_continuation_anchor_count")]
    pub continuation_anchor_count: usize,
    /// 1.2.14+ Phase Q.3 — output style for
    /// `Ctrl+V f` inline footnote insertion.
    /// `"typst"` (the default) inserts
    /// `#footnote[<body>]` at the cursor;
    /// `"markdown"` inserts `[^id]` at the cursor
    /// plus a `[^id]: <body>` trailing reference.
    #[serde(default = "default_footnote_style")]
    pub footnote_style: String,

    /// 1.2.16+ Phase A.5 — worldbuilding glossary
    /// chip in the status bar.  When true (the
    /// default), shows `<N>C·<N>P·<N>A` —
    /// cumulative Characters / Places / Artefacts
    /// entry counts.  Auto-hides when all three
    /// are zero (fresh project).  Set false to
    /// reclaim the screen real estate.
    #[serde(default = "default_show_glossary_chip")]
    pub show_glossary_chip: bool,
    /// 1.2.21+ FF.6 — Facts chip in the status bar.
    /// When true, shows `⚑<N>` — the number of entries
    /// in the Facts book — so the world's invariants are
    /// visible at a glance.  Auto-hides when the Facts
    /// book is empty.  Off by default (opt-in).
    #[serde(default)]
    pub show_facts_chip: bool,

    /// 1.2.18+ R.3 — show a status-bar reading-time
    /// chip for the current book: total audiobook /
    /// read-aloud length + the time remaining from the
    /// open paragraph to the book's end, at
    /// `reading_wpm`.  Default off (the status bar is
    /// already busy; opt in when the metric is useful —
    /// e.g. when targeting an audiobook length).
    #[serde(default)]
    pub reading_time_chip: bool,

    /// 1.2.18+ R.3 — words-per-minute used by the
    /// reading-time chip (and the R.4 reader-pace
    /// preview).  200 wpm is the common silent-reading
    /// average; ~150 is a typical narration pace for
    /// audiobooks.
    #[serde(default = "default_reading_wpm")]
    pub reading_wpm: u32,

    /// 1.2.19+ C.1 — window (in consecutive paragraphs)
    /// for the `echo-repetition` doctor scan.  A
    /// distinctive word reused `echo_min_repeats` times
    /// within this many paragraphs is flagged as an echo.
    #[serde(default = "default_echo_window")]
    pub echo_window: usize,

    /// 1.2.19+ C.1 — occurrences within `echo_window`
    /// required to flag an echo.  Lower = more sensitive
    /// (more findings).
    #[serde(default = "default_echo_min_repeats")]
    pub echo_min_repeats: usize,

    /// 1.2.19+ C.1 — distinctiveness ceiling for the echo
    /// scan: words used more than this many times across a
    /// chapter are treated as common vocabulary (which an
    /// author legitimately reuses) and skipped, even when
    /// clustered.  Tune up for longer works, down for
    /// short stories.
    #[serde(default = "default_echo_max_global")]
    pub echo_max_global: usize,

    /// 1.2.20+ R.3.b — read-time threshold (seconds) for
    /// the `paragraph-too-long` doctor scan.  A paragraph
    /// whose estimated read time at `reading_wpm` exceeds
    /// this is flagged (Info, author-judgment).  Default
    /// 180s (~600 words at 200 wpm) — a genuine wall of
    /// text, not a merely dense paragraph.
    #[serde(default = "default_paragraph_long_secs")]
    pub paragraph_long_secs: u32,

    /// 1.2.20+ Phase G — low-disk pre-flight threshold in
    /// MiB.  When the volume holding the project has less
    /// than this much free space, the editor shows a
    /// one-time warning at startup (atomic writes still
    /// fail safely, but this gives a heads-up before a
    /// long export).  `0` disables the check.  Default
    /// 100 MiB.
    #[serde(default = "default_disk_warn_mb")]
    pub disk_warn_mb: u64,

    /// 1.2.20+ Phase G — when quitting, if the project is
    /// a git repo with uncommitted changes (modified,
    /// staged, or untracked), confirm before exiting.
    /// Best-effort: silently skipped when the project
    /// isn't a git repo or `git` isn't installed.  Default
    /// `true`.
    #[serde(default = "default_warn_uncommitted_on_exit")]
    pub warn_uncommitted_on_exit: bool,

    /// 1.2.20+ C.1.b — default state of the live echo
    /// overlay (Ctrl+B Shift+K): underline, in the open
    /// paragraph, words echoing across nearby paragraphs.
    /// The session toggle overrides this.  Default `false`
    /// (opt in per session, or set `true` to always start
    /// on).  Uses the `echo_window` / `echo_min_repeats` /
    /// `echo_max_global` tunables shared with the
    /// `echo-repetition` doctor scan.
    #[serde(default)]
    pub echo_overlay: bool,
}

fn default_warn_uncommitted_on_exit() -> bool {
    true
}

fn default_paragraph_long_secs() -> u32 {
    180
}

fn default_disk_warn_mb() -> u64 {
    100
}

fn default_echo_window() -> usize {
    5
}

fn default_echo_min_repeats() -> usize {
    3
}

fn default_echo_max_global() -> usize {
    40
}

fn default_continuation_anchor_count() -> usize {
    3
}

fn default_footnote_style() -> String {
    "typst".into()
}

fn default_show_glossary_chip() -> bool {
    true
}

fn default_reading_wpm() -> u32 {
    200
}

/// 1.2.14+ Phase Q.2 — `editor.snippets` HJSON
/// stanza.
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct SnippetsConfig {
    /// Master switch.  When false, no snippet
    /// expansion fires regardless of the `triggers`
    /// map.  Defaults to true so the templates
    /// inkhaven ships with (project-level HJSON
    /// gets `\dt` / `\time` / `\sig` etc.) work
    /// without a flag flip.
    #[serde(default = "default_snippets_enabled")]
    pub enabled: bool,
    /// Map of trigger string → expansion body.
    /// Triggers are matched as substrings at the
    /// END of the buffer up to the cursor — when
    /// the user types a non-word char (space,
    /// punctuation, newline) immediately after a
    /// trigger string, the trigger gets replaced
    /// by the expansion body and the non-word
    /// char stays.  Placeholder syntax inside the
    /// body: `{today}`, `{today:%Y-%m-%d}`,
    /// `{now}`, `{paragraph_title}`,
    /// `{paragraph_slug}`, `{selection}`,
    /// `{author}`.  Unknown placeholders pass
    /// through verbatim so the author can spot
    /// typos.
    #[serde(default)]
    pub triggers: std::collections::HashMap<String, String>,
}

impl Default for SnippetsConfig {
    fn default() -> Self {
        Self {
            enabled: default_snippets_enabled(),
            triggers: std::collections::HashMap::new(),
        }
    }
}

fn default_snippets_enabled() -> bool {
    true
}

fn default_pov_chip_enabled() -> bool {
    true
}

fn default_prompt_language_mode() -> String {
    "book_defined".into()
}

fn default_prompt_language_detection_min_chars() -> usize {
    50
}

/// 1.2.9+ — `editor.style_warnings.*` HJSON stanza.
/// Enables inline highlighting of stylistically weak
/// prose constructs: filter words first (this release),
/// repeated phrases / show-don't-tell / sentence-rhythm
/// next.  All detectors are off by default and toggled
/// individually so a user who only wants filter-word
/// flagging doesn't get adverb noise.
#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct StyleWarningsConfig {
    /// Master enable for the in-editor style warning
    /// overlays.  `false` disables every detector
    /// regardless of the per-detector flags.  Runtime
    /// `Ctrl+V w` toggle flips a session-only override
    /// without rewriting HJSON.
    pub enabled: bool,
    /// Filter-word detector: flag intensifier crutches
    /// + hedges (`just`, `really`, `very`, `просто`,
    /// `очень`, …).  Built-in lists ship for English,
    /// Russian, French, German, Spanish; the active list
    /// is keyed by the project's top-level `language`
    /// field.  `extra_words` is a user union added on
    /// top of the language default — empty by default.
    pub filter_words: FilterWordsConfig,
    /// 1.2.9+ — repeated-phrase detector.  Slides an
    /// `n`-word window across the open paragraph,
    /// stems each window with the project's Snowball
    /// algorithm, and flags every occurrence of any
    /// n-gram that repeats `threshold` or more times.
    /// `lifted her shoulders` matches `lifting her
    /// shoulders` (stems align), so a writer's
    /// favourite gesture surfaces immediately.
    /// Multilingual via the same Snowball setup as
    /// filter-words — no language-specific tuning
    /// needed beyond setting the top-level `language`.
    pub repeated_phrases: RepeatedPhrasesConfig,
    /// 1.2.9+ — show-don't-tell detector.  Flags
    /// "telling" prose patterns: copula + emotion-
    /// adjective (`she was angry`, `Il était triste`),
    /// manner-of-emotion adverbs (`angrily`,
    /// `sadly`), and direct cognition verbs that label
    /// internal state for the reader (`realised`,
    /// `understood`, `knew`).  Inline overlay shares
    /// the master toggle.  See `ShowDontTellConfig`
    /// for per-language knobs.
    pub show_dont_tell: ShowDontTellConfig,
    /// 1.3.8 — anachronism detector. Set `anachronism.year` to the
    /// manuscript's setting; terms in the built-in lexicon (plus your
    /// `terms` additions) whose earliest plausible year is *after* the
    /// setting are flagged ("wristwatch" in an 1840 novel). Off until a
    /// year is set.
    #[serde(default)]
    pub anachronism: AnachronismConfig,
}

/// 1.3.8 `facts:` block — series-shared canon. `shared_path` points at a
/// directory of plain-text fact files (one fact per file: the file stem is
/// the title, its contents the body), shared by every book of a series so
/// the canon lives in one place. Layered into `facts check` (local wins on
/// a title clash); copied in with `inkhaven facts import`.
#[derive(Debug, Clone, Default, serde::Serialize, serde::Deserialize)]
#[serde(default)]
pub struct FactsConfig {
    pub shared_path: Option<String>,
}

/// `editor.style_warnings.anachronism.*` — the setting year + any
/// project-specific period-bound terms (each with its earliest plausible
/// year). Empty / no year → the detector is off.
#[derive(Debug, Clone, Default, serde::Serialize, serde::Deserialize)]
#[serde(default)]
pub struct AnachronismConfig {
    /// The manuscript's setting year (e.g. `1840`). `None` disables the
    /// detector.
    pub year: Option<i32>,
    /// Project additions / overrides to the built-in lexicon.
    pub terms: Vec<AnachronismTerm>,
}

#[derive(Debug, Clone, serde::Serialize, serde::Deserialize)]
pub struct AnachronismTerm {
    pub term: String,
    /// The earliest year the term/concept plausibly appears.
    pub earliest: i32,
}

/// 1.2.9+ — `editor.style_warnings.show_dont_tell.*`
/// HJSON stanza.  Three lists per language:
///   * `*_linking_verbs` — `be`, `seem`, `feel`,
///     `look`, `appear`, `become`.  Used as
///     pattern-anchor in the 2-gram `(verb)(adj)`
///     detector.  Snowball-stemmed at init time so
///     `was` / `is` / `were` all key on `be`.
///   * `*_emotion_adjectives` — `angry`, `sad`,
///     `happy`, `afraid`, …  Triggered as the
///     second token of the 2-gram pattern.
///   * `*_manner_adverbs` — `angrily`, `sadly`,
///     `nervously`, …  Flagged on their own — these
///     adverbs almost always label emotion outright.
///   * `*_cognition_verbs` — `realised`, `knew`,
///     `understood`, `wondered`, `decided`, …
///     Flagged on their own.
///
/// Empty configured list = use built-in default for
/// that language; non-empty = REPLACE the default.
/// Same rule as `filter_words`.  English ships with
/// curated lists; the other languages start empty so
/// users can fill them in for their corpus.
#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct ShowDontTellConfig {
    pub enabled: bool,
    /// Apply Snowball stemming before matching so
    /// inflections collapse (e.g. `was` / `is` /
    /// `were` all match a single `be` entry).
    /// Disable for exact-form matching.
    pub use_stemming: bool,
    // English defaults populated via `built_in_*` —
    // configured lists override.
    pub english_linking_verbs: Vec<String>,
    pub english_emotion_adjectives: Vec<String>,
    pub english_manner_adverbs: Vec<String>,
    pub english_cognition_verbs: Vec<String>,
    pub russian_linking_verbs: Vec<String>,
    pub russian_emotion_adjectives: Vec<String>,
    pub russian_manner_adverbs: Vec<String>,
    pub russian_cognition_verbs: Vec<String>,
    pub french_linking_verbs: Vec<String>,
    pub french_emotion_adjectives: Vec<String>,
    pub french_manner_adverbs: Vec<String>,
    pub french_cognition_verbs: Vec<String>,
    pub german_linking_verbs: Vec<String>,
    pub german_emotion_adjectives: Vec<String>,
    pub german_manner_adverbs: Vec<String>,
    pub german_cognition_verbs: Vec<String>,
    pub spanish_linking_verbs: Vec<String>,
    pub spanish_emotion_adjectives: Vec<String>,
    pub spanish_manner_adverbs: Vec<String>,
    pub spanish_cognition_verbs: Vec<String>,
}

impl Default for ShowDontTellConfig {
    fn default() -> Self {
        Self {
            enabled: true,
            use_stemming: true,
            english_linking_verbs: Vec::new(),
            english_emotion_adjectives: Vec::new(),
            english_manner_adverbs: Vec::new(),
            english_cognition_verbs: Vec::new(),
            russian_linking_verbs: Vec::new(),
            russian_emotion_adjectives: Vec::new(),
            russian_manner_adverbs: Vec::new(),
            russian_cognition_verbs: Vec::new(),
            french_linking_verbs: Vec::new(),
            french_emotion_adjectives: Vec::new(),
            french_manner_adverbs: Vec::new(),
            french_cognition_verbs: Vec::new(),
            german_linking_verbs: Vec::new(),
            german_emotion_adjectives: Vec::new(),
            german_manner_adverbs: Vec::new(),
            german_cognition_verbs: Vec::new(),
            spanish_linking_verbs: Vec::new(),
            spanish_emotion_adjectives: Vec::new(),
            spanish_manner_adverbs: Vec::new(),
            spanish_cognition_verbs: Vec::new(),
        }
    }
}

/// 1.2.9+ — built-in show-don't-tell lists per
/// language.  English ships with curated lists drawn
/// from common writing-craft references; other
/// languages return empty slices so the user can fill
/// them in for their corpus (Russian / French /
/// German / Spanish emotion vocabulary varies enough
/// per genre that defaults would mislead more than
/// help).
pub fn built_in_linking_verbs(language: &str) -> &'static [&'static str] {
    // 1.2.11+ — built-ins now ship for all five
    // supported languages.  Conservative, dictionary-
    // shape lemmas; per-genre tuning belongs in
    // `inkhaven show-dont-tell bootstrap <lang>`,
    // which emits a richer HJSON snippet a user can
    // paste over these defaults.  Snowball stemming is
    // applied at match time so a handful of common
    // inflections cover the rest.
    match language.to_lowercase().as_str() {
        "english" | "" => &[
            "be", "is", "am", "are", "was", "were", "been", "being",
            "seem", "seems", "seemed", "seeming",
            "feel", "feels", "felt", "feeling",
            "appear", "appears", "appeared", "appearing",
            "look", "looks", "looked", "looking",
            "become", "becomes", "became", "becoming",
            "remain", "remains", "remained", "remaining",
            "grow", "grows", "grew", "growing",
            "sound", "sounds", "sounded",
        ],
        "russian" => &[
            // быть — copula in past + present-zero +
            // future forms.  Russian drops the present-
            // tense copula in prose, so the detector
            // mostly fires on past + future.
            "быть", "был", "была", "было", "были",
            "буду", "будешь", "будет", "будем", "будете", "будут",
            "есть",
            // казаться — "to seem"
            "казаться", "кажется", "казался", "казалась", "казалось", "казались",
            // выглядеть — "to look (like)"
            "выглядеть", "выглядит", "выглядел", "выглядела", "выглядело",
            // становиться / стать — "to become"
            "становиться", "становится", "становился", "становилась",
            "стать", "стал", "стала", "стало", "стали",
            // оставаться — "to remain"
            "оставаться", "остаётся", "оставался", "оставалась",
            // чувствовать (себя) — "to feel"
            "чувствовать", "чувствует", "чувствовал", "чувствовала",
            // оказаться — "to turn out / appear to be"
            "оказаться", "оказался", "оказалась", "оказалось",
        ],
        "french" => &[
            // être
            "être", "est", "sont", "étais", "était", "étions", "étiez", "étaient",
            "fus", "fut", "fûmes", "furent",
            "sera", "seront", "serait", "seraient",
            // paraître / sembler
            "paraître", "paraît", "paraissait", "paraissent",
            "sembler", "semble", "semblait", "semblent",
            // devenir / rester / demeurer
            "devenir", "devient", "devenait", "deviennent",
            "rester", "reste", "restait", "restent",
            "demeurer", "demeure", "demeurait",
            // se sentir / avoir l'air
            "sentir", "sent", "sentait",
            "avoir", "a", "avait", "ont",
        ],
        "german" => &[
            // sein
            "sein", "ist", "sind", "war", "waren", "bin", "bist", "seid",
            "gewesen",
            // scheinen / wirken
            "scheinen", "scheint", "schien", "schienen",
            "wirken", "wirkt", "wirkte", "wirkten",
            // werden / bleiben / aussehen
            "werden", "wird", "wurde", "wurden", "geworden",
            "bleiben", "bleibt", "blieb", "blieben",
            "aussehen", "sieht", "sah",
            // fühlen (sich)
            "fühlen", "fühlt", "fühlte", "fühlten",
        ],
        "spanish" => &[
            // ser
            "ser", "es", "son", "era", "eran", "fue", "fueron",
            "será", "serán", "sería", "serían",
            // estar
            "estar", "está", "están", "estaba", "estaban", "estuvo", "estuvieron",
            // parecer / sentirse / quedar(se)
            "parecer", "parece", "parecía", "parecen",
            "sentir", "sentirse", "siente", "sentía",
            "quedar", "quedarse", "queda", "quedaba",
            // volverse / ponerse / hallarse / encontrarse
            "volverse", "vuelve", "volvía",
            "ponerse", "pone", "puso", "ponía",
            "encontrarse", "encuentra", "encontraba",
        ],
        _ => &[],
    }
}

pub fn built_in_emotion_adjectives(language: &str) -> &'static [&'static str] {
    // 1.2.11+ — defaults for RU/FR/DE/ES.  Cover the
    // major emotion families (anger / sadness / fear /
    // joy / fatigue / surprise / shame); per-genre
    // additions belong in
    // `inkhaven show-dont-tell bootstrap`.
    match language.to_lowercase().as_str() {
        "english" | "" => &[
            // Anger family
            "angry", "mad", "furious", "livid", "irate", "enraged",
            "annoyed", "irritated", "agitated",
            // Sadness family
            "sad", "depressed", "melancholy", "gloomy", "miserable",
            "unhappy", "dejected", "downcast", "forlorn",
            // Fear family
            "afraid", "scared", "frightened", "terrified", "anxious",
            "nervous", "worried", "uneasy", "panicked", "apprehensive",
            // Joy family
            "happy", "joyful", "glad", "content", "pleased", "delighted",
            "thrilled", "elated", "ecstatic", "cheerful",
            // Fatigue family
            "tired", "exhausted", "weary", "drained", "spent",
            // Confusion family
            "confused", "puzzled", "perplexed", "baffled",
            // Surprise family
            "surprised", "shocked", "stunned", "astonished", "amazed",
            // Shame family
            "embarrassed", "ashamed", "humiliated", "mortified",
            // Pride / envy / loneliness
            "proud", "smug",
            "jealous", "envious",
            "lonely", "isolated",
            // Boredom
            "bored", "listless", "restless",
            // Excitement (low intensity)
            "excited", "eager", "enthusiastic",
            // Determination / despair
            "determined", "resolute",
            "hopeless", "helpless", "defeated",
        ],
        "russian" => &[
            // Anger
            "сердитый", "злой", "разгневанный", "раздражённый",
            // Sadness
            "грустный", "печальный", "несчастный", "унылый", "тоскливый",
            // Fear
            "испуганный", "напуганный", "тревожный", "встревоженный", "испугавшийся",
            // Joy
            "счастливый", "радостный", "довольный", "весёлый", "восторженный",
            // Fatigue
            "усталый", "измождённый", "утомлённый", "обессиленный",
            // Surprise
            "удивлённый", "поражённый", "ошеломлённый", "изумлённый",
            // Confusion
            "растерянный", "смущённый", "озадаченный",
            // Shame
            "пристыженный", "сконфуженный",
            // Pride / envy / loneliness / boredom
            "гордый", "ревнивый", "завистливый", "одинокий", "скучающий",
            // Excitement / determination / despair
            "взволнованный", "возбуждённый",
            "решительный",
            "безнадёжный", "беспомощный",
        ],
        "french" => &[
            // Anger
            "furieux", "furieuse", "en colère", "fâché", "fâchée",
            "irrité", "irritée", "agacé", "agacée",
            // Sadness
            "triste", "malheureux", "malheureuse", "mélancolique", "abattu", "abattue",
            // Fear
            "effrayé", "effrayée", "apeuré", "apeurée",
            "anxieux", "anxieuse", "inquiet", "inquiète", "nerveux", "nerveuse",
            // Joy
            "heureux", "heureuse", "joyeux", "joyeuse",
            "ravi", "ravie", "content", "contente",
            // Fatigue
            "fatigué", "fatiguée", "épuisé", "épuisée", "las", "lasse",
            // Surprise
            "surpris", "surprise", "étonné", "étonnée", "stupéfait", "stupéfaite",
            // Confusion / shame
            "confus", "confuse", "perplexe",
            "honteux", "honteuse", "gêné", "gênée",
            // Pride / envy / loneliness / boredom / excitement
            "fier", "fière", "jaloux", "jalouse", "envieux", "envieuse",
            "seul", "seule", "ennuyé", "ennuyée",
            "excité", "excitée", "enthousiaste",
            // Despair
            "désespéré", "désespérée", "impuissant", "impuissante",
        ],
        "german" => &[
            // Anger
            "wütend", "zornig", "verärgert", "gereizt",
            // Sadness
            "traurig", "betrübt", "niedergeschlagen", "trübselig", "unglücklich",
            // Fear
            "ängstlich", "verängstigt", "besorgt", "nervös", "panisch",
            // Joy
            "glücklich", "fröhlich", "erfreut", "zufrieden", "begeistert",
            // Fatigue
            "müde", "erschöpft", "ermattet",
            // Surprise
            "überrascht", "erstaunt", "verblüfft", "schockiert",
            // Confusion / shame
            "verwirrt", "verlegen", "beschämt",
            // Pride / envy / loneliness / boredom / excitement / despair
            "stolz", "eifersüchtig", "neidisch",
            "einsam", "gelangweilt",
            "aufgeregt", "entschlossen",
            "hoffnungslos", "hilflos",
        ],
        "spanish" => &[
            // Anger
            "enfadado", "enfadada", "enojado", "enojada", "furioso", "furiosa",
            "irritado", "irritada",
            // Sadness
            "triste", "afligido", "afligida", "deprimido", "deprimida",
            "melancólico", "melancólica", "desdichado", "desdichada",
            // Fear
            "asustado", "asustada", "aterrado", "aterrada",
            "ansioso", "ansiosa", "nervioso", "nerviosa", "preocupado", "preocupada",
            // Joy
            "feliz", "alegre", "contento", "contenta", "encantado", "encantada",
            // Fatigue
            "cansado", "cansada", "agotado", "agotada", "exhausto", "exhausta",
            // Surprise
            "sorprendido", "sorprendida", "asombrado", "asombrada", "atónito", "atónita",
            // Confusion / shame
            "confundido", "confundida", "perplejo", "perpleja",
            "avergonzado", "avergonzada",
            // Pride / envy / loneliness / boredom / excitement / despair
            "orgulloso", "orgullosa", "celoso", "celosa", "envidioso", "envidiosa",
            "solo", "sola", "aburrido", "aburrida",
            "emocionado", "emocionada", "decidido", "decidida",
            "desesperado", "desesperada", "impotente",
        ],
        _ => &[],
    }
}

pub fn built_in_manner_adverbs(language: &str) -> &'static [&'static str] {
    // 1.2.11+ — defaults for RU/FR/DE/ES.  Emotion-
    // labelling adverbs (the `-ly` family in English,
    // `-о/-е` in Russian, `-ment` in French, `-mente`
    // in Spanish, plain adjective-form in German for
    // adverbial use).
    match language.to_lowercase().as_str() {
        "english" | "" => &[
            "angrily", "sadly", "happily", "fearfully", "nervously",
            "anxiously", "calmly", "frantically", "wearily", "tiredly",
            "excitedly", "gleefully", "miserably", "joyfully",
            "furiously", "irritably", "annoyedly", "bitterly",
            "proudly", "smugly", "jealously", "enviously",
            "lovingly", "tenderly", "coldly", "warmly",
            "desperately", "hopelessly", "helplessly",
            "embarrassedly", "shamefully", "guiltily",
            "bored", "boredly", "listlessly",
            "confusedly",
        ],
        "russian" => &[
            "сердито", "злобно", "раздражённо",
            "грустно", "печально", "уныло", "тоскливо",
            "испуганно", "тревожно", "нервно",
            "счастливо", "радостно", "весело",
            "устало", "измождённо",
            "удивлённо", "поражённо",
            "растерянно", "смущённо",
            "гордо", "ревниво", "одиноко",
            "взволнованно", "решительно",
            "безнадёжно", "беспомощно",
            "холодно", "тепло",
            "горько", "нежно",
        ],
        "french" => &[
            "furieusement", "rageusement", "tristement", "mélancoliquement",
            "peureusement", "nerveusement", "anxieusement",
            "joyeusement", "heureusement", "gaiement",
            "fatiguement",
            "tendrement", "amoureusement", "froidement", "chaleureusement",
            "fièrement", "jalousement", "envieusement",
            "désespérément", "honteusement", "calmement",
            "amèrement", "douloureusement",
        ],
        "german" => &[
            "wütend", "zornig", "ärgerlich",
            "traurig", "betrübt", "unglücklich",
            "ängstlich", "nervös", "besorgt",
            "fröhlich", "glücklich", "freudig",
            "müde", "erschöpft",
            "überrascht", "verwirrt",
            "stolz", "eifersüchtig",
            "einsam", "gelangweilt",
            "aufgeregt", "verzweifelt", "hilflos",
            "kalt", "warm", "liebevoll", "bitter",
        ],
        "spanish" => &[
            "furiosamente", "rabiosamente", "enojadamente",
            "tristemente", "melancólicamente",
            "miedosamente", "nerviosamente", "ansiosamente",
            "felizmente", "alegremente", "gozosamente",
            "cansadamente",
            "sorprendidamente",
            "orgullosamente", "celosamente", "envidiosamente",
            "solamente", "aburridamente",
            "desesperadamente", "vergonzosamente",
            "fríamente", "cálidamente", "amorosamente", "amargamente",
        ],
        _ => &[],
    }
}

pub fn built_in_cognition_verbs(language: &str) -> &'static [&'static str] {
    // 1.2.11+ — defaults for RU/FR/DE/ES.  Verbs that
    // narrate thought instead of showing it.  Past-
    // tense forms dominate because that's where the
    // "she realised" / "elle comprit" telling pattern
    // typically lands in fiction.
    match language.to_lowercase().as_str() {
        "english" | "" => &[
            "realised", "realized",
            "understood", "knew", "thought",
            "wondered", "wished", "hoped",
            "believed", "supposed", "decided",
            "concluded", "discovered", "recognised", "recognized",
            "remembered", "considered",
            "assumed", "expected",
        ],
        "russian" => &[
            "понял", "поняла", "понять", "понимал", "понимала",
            "знал", "знала", "знать",
            "подумал", "подумала", "думать",
            "осознал", "осознала", "осознать",
            "решил", "решила", "решить",
            "вспомнил", "вспомнила", "вспомнить",
            "заметил", "заметила",
            "почувствовал", "почувствовала",
            "поверил", "поверила", "верить",
            "догадался", "догадалась",
        ],
        "french" => &[
            "réalisa", "réalisé", "réaliser",
            "comprit", "compris", "comprendre",
            "sut", "su", "savoir",
            "pensa", "pensé", "penser",
            "songea", "songer",
            "décida", "décidé", "décider",
            "se souvint", "se rappela",
            "crut", "cru", "croire",
            "supposa", "supposer",
            "remarqua", "aperçut",
        ],
        "german" => &[
            "erkannte", "erkannt", "erkennen",
            "verstand", "verstanden", "verstehen",
            "wusste", "gewusst", "wissen",
            "dachte", "gedacht", "denken",
            "überlegte", "überlegt",
            "beschloss", "entschied", "entschieden",
            "erinnerte", "erinnert",
            "bemerkte", "bemerkt",
            "glaubte", "geglaubt",
            "vermutete",
        ],
        "spanish" => &[
            "se dio cuenta", "comprendió", "comprender",
            "entendió", "entender",
            "supo", "sabía", "saber",
            "pensó", "pensar",
            "creyó", "creer", "creía",
            "decidió", "decidir",
            "recordó", "recordar",
            "notó", "advirtió",
            "supuso", "esperaba",
            "concluyó",
        ],
        _ => &[],
    }
}

#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct RepeatedPhrasesConfig {
    pub enabled: bool,
    /// Number of consecutive words to compare.  4 is
    /// the sweet spot — 3 catches too many incidental
    /// "she said the X" patterns, 5+ misses most
    /// writer-crutches.
    pub n: u8,
    /// Flag when an n-gram appears at least this many
    /// times in the paragraph.  3 is the default — a
    /// phrase has to occur 3 times before it's worth
    /// flagging; twice is often a deliberate echo.
    pub threshold: u8,
    /// Apply Snowball stemming to align inflections
    /// before n-gram comparison.  Default `true`.
    pub use_stemming: bool,
    /// 1.2.9+ — stop-word list per language: words
    /// excluded from n-gram comparison so common
    /// connectives (`the`, `and`, `и`, `в`) don't
    /// inflate the count.  Empty list = use built-in
    /// default for the active language.  Same lookup
    /// rule as filter-words.  Built-in lists are
    /// conservative (closed-class words only); users
    /// extend via this field.
    pub english_stop_words: Vec<String>,
    pub russian_stop_words: Vec<String>,
    pub french_stop_words: Vec<String>,
    pub german_stop_words: Vec<String>,
    pub spanish_stop_words: Vec<String>,
}

impl Default for RepeatedPhrasesConfig {
    fn default() -> Self {
        Self {
            enabled: true,
            n: 4,
            threshold: 3,
            use_stemming: true,
            english_stop_words: Vec::new(),
            russian_stop_words: Vec::new(),
            french_stop_words: Vec::new(),
            german_stop_words: Vec::new(),
            spanish_stop_words: Vec::new(),
        }
    }
}

/// 1.2.9+ — built-in stop-word list per language.
/// Conservative: only function words that almost never
/// carry meaning.  Users extend via the per-language
/// `*_stop_words` fields when an n-gram with a domain
/// word feels noisy in their writing.
pub fn built_in_stop_words(language: &str) -> &'static [&'static str] {
    match language.to_lowercase().as_str() {
        "russian" => &[
            "и", "в", "на", "не", "с", "что", "это", "как",
            "а", "по", "из", "у", "от", "к", "за", "о",
            "но", "же", "так", "то", "бы", "ли", "вот",
            "только", "ещё", "также", "был", "была",
            "было", "были", "есть",
        ],
        "french" => &[
            "le", "la", "les", "un", "une", "des", "de",
            "du", "et", "à", "au", "aux", "en", "dans",
            "pour", "par", "sur", "avec", "sans", "que",
            "qui", "ce", "se", "il", "elle", "ils",
            "elles", "ne", "pas",
        ],
        "german" => &[
            "der", "die", "das", "den", "dem", "des",
            "ein", "eine", "und", "in", "zu", "von", "mit",
            "auf", "ist", "war", "sind", "waren", "es",
            "er", "sie", "wir", "du", "ich", "nicht",
        ],
        "spanish" => &[
            "el", "la", "los", "las", "un", "una", "y",
            "de", "del", "en", "a", "con", "por", "para",
            "que", "no", "es", "son", "se", "su", "lo",
        ],
        _ => &[
            "the", "a", "an", "and", "or", "but", "of",
            "to", "in", "on", "at", "by", "for", "with",
            "as", "is", "was", "were", "are", "be",
            "been", "being", "have", "has", "had", "do",
            "does", "did", "it", "he", "she", "they",
            "we", "you", "his", "her", "their", "its",
            "this", "that", "these", "those", "not", "no",
        ],
    }
}

impl Default for StyleWarningsConfig {
    fn default() -> Self {
        Self {
            enabled: false,
            filter_words: FilterWordsConfig::default(),
            repeated_phrases: RepeatedPhrasesConfig::default(),
            show_dont_tell: ShowDontTellConfig::default(),
            anachronism: AnachronismConfig::default(),
        }
    }
}

#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct FilterWordsConfig {
    pub enabled: bool,
    /// 1.2.9+ — match via Snowball stemming so `seemed`
    /// catches `seems` / `seeming`, `казалось` catches
    /// `казался` / `казалась` / `казались`, and the
    /// per-language list stays compact (one entry per
    /// lemma, not per inflection).  Default `true`.
    /// Disable to fall back to exact-lowercased match
    /// (faster, but you'd need to list every form
    /// manually).
    pub use_stemming: bool,
    /// User-supplied words added on top of the language
    /// default.  Case-insensitive; one entry per word.
    /// Stems with the language stemmer when
    /// `use_stemming` is on, so `["lift"]` flags
    /// `lifted` / `lifts` / `lifting`.
    pub extra_words: Vec<String>,
    /// Per-language curated lists.  Empty list means
    /// "use the built-in default for this language";
    /// any non-empty list **replaces** the default
    /// (use `extra_words` for additive overrides).  The
    /// active list is keyed by the project's top-level
    /// `language` field; unknown languages fall back
    /// to `english`.  Default values shipped by
    /// `built_in_filter_words()` — run
    /// `inkhaven doctor --filter-words-snippet` to get
    /// a copy-paste-ready HJSON dump.
    pub english: Vec<String>,
    pub russian: Vec<String>,
    pub french: Vec<String>,
    pub german: Vec<String>,
    pub spanish: Vec<String>,
}

impl Default for FilterWordsConfig {
    fn default() -> Self {
        // Defaults left empty so an HJSON dumped from a
        // bare Config doesn't carry 100+ lines of
        // language-specific lists.  Empty list at the
        // detector means "use the built-in default" —
        // see `built_in_filter_words()`.  Users who
        // want the defaults visible in their HJSON can
        // populate the arrays from
        // `inkhaven doctor --filter-words-snippet`.
        Self {
            enabled: true,
            use_stemming: true,
            extra_words: Vec::new(),
            english: Vec::new(),
            russian: Vec::new(),
            french: Vec::new(),
            german: Vec::new(),
            spanish: Vec::new(),
        }
    }
}

/// 1.2.9+ — accessor for the user's per-language list.
/// Returns the configured list when non-empty;
/// otherwise the built-in default.  Caller passes
/// `language` from `cfg.language`.  Currently only
/// referenced from tests + future detectors that don't
/// want to duplicate the lookup logic; kept under
/// `#[allow(dead_code)]` so it survives the unused-
/// helper lint while remaining a documented surface.
#[allow(dead_code)]
pub fn effective_filter_words<'a>(
    cfg: &'a FilterWordsConfig,
    language: &str,
) -> &'a [String] {
    let configured: &Vec<String> = match language.to_lowercase().as_str() {
        "russian" => &cfg.russian,
        "french" => &cfg.french,
        "german" => &cfg.german,
        "spanish" => &cfg.spanish,
        _ => &cfg.english,
    };
    if !configured.is_empty() {
        return configured.as_slice();
    }
    // Fall back to the built-in default for that
    // language.  `built_in_filter_words` returns a
    // `&'static [&'static str]` which we can't return
    // as `&[String]` directly without allocating; the
    // detector calls `built_in_filter_words` separately
    // when this returns an empty slice.
    &[]
}

/// 1.2.9+ — built-in per-language filter-word lists.
/// Public so `inkhaven doctor --filter-words-snippet`
/// can emit them for paste-into-HJSON.
pub fn built_in_filter_words(language: &str) -> &'static [&'static str] {
    match language.to_lowercase().as_str() {
        "russian" => BUILT_IN_RUSSIAN,
        "french" => BUILT_IN_FRENCH,
        "german" => BUILT_IN_GERMAN,
        "spanish" => BUILT_IN_SPANISH,
        _ => BUILT_IN_ENGLISH,
    }
}

const BUILT_IN_ENGLISH: &[&str] = &[
    // Hedges / intensifier crutches.  Use stems where
    // it matters — `seem` covers `seemed` / `seems` /
    // `seeming` via Snowball.
    "just", "really", "very", "pretty", "quite",
    "rather", "fairly", "somewhat", "slightly",
    "that", "actually", "basically", "literally",
    "essentially", "simply", "definitely", "certainly",
    "absolutely", "totally", "completely",
    // Sensory / hedging verbs — listed as base form;
    // stemmer catches the inflections.
    "seem", "feel", "look", "appear", "sound", "notice",
    "begin", "start",
    "suddenly", "perhaps", "maybe",
];

const BUILT_IN_RUSSIAN: &[&str] = &[
    // Intensifier crutches + hedges
    "очень", "просто", "именно", "довольно", "слишком",
    "весьма", "крайне", "вполне", "достаточно",
    // Generic placeholders
    "собственно", "буквально", "практически",
    "фактически", "действительно", "реально",
    "конечно", "разумеется", "безусловно",
    // Sensory / hedging verbs as lemmas — Snowball
    // stems both list entry and editor text, so
    // `казаться` catches `казался / казалась /
    // казалось / казались`.
    "казаться", "почувствовать", "выглядеть",
    "заметить",
    "вдруг", "внезапно", "наверное", "возможно",
];

const BUILT_IN_FRENCH: &[&str] = &[
    "vraiment", "très", "assez", "plutôt",
    "juste", "simplement", "actuellement", "littéralement",
    "essentiellement", "absolument", "totalement", "complètement",
    "sembler", "paraître", "sentir",
    "soudainement", "peut-être",
];

const BUILT_IN_GERMAN: &[&str] = &[
    "sehr", "wirklich", "ziemlich", "eher", "etwas",
    "einfach", "tatsächlich", "buchstäblich",
    "absolut", "völlig", "komplett",
    "scheinen", "fühlen", "sehen",
    "plötzlich", "vielleicht",
];

const BUILT_IN_SPANISH: &[&str] = &[
    "muy", "realmente", "bastante", "algo",
    "solo", "simplemente", "actualmente", "literalmente",
    "esencialmente", "absolutamente", "totalmente", "completamente",
    "parecer", "sentir", "ver",
    "repentinamente", "quizás",
];

/// 1.2.9+ — `editor.tts.*` HJSON stanza.  `Ctrl+B S` in
/// the editor pane reads the open paragraph aloud via
/// the host OS's TTS engine.  Default voice is `Milena`
/// (Russian female, ships free with macOS + Windows
/// after a one-time language download).  The match is a
/// case-insensitive substring search against installed
/// voice names — "Milena" picks the standard or the
/// "Milena (Enhanced)" / "Milena (Premium)" variant
/// when available.  `speed` is a multiplier over the
/// engine's "normal" rate (0.8 = 80%, 1.2 = 120%).
/// Clamped to the engine's `[min_rate, max_rate]` at
/// playback time.
#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct TtsConfig {
    pub enabled: bool,
    pub voice: String,
    pub speed: f32,
    /// 1.2.9+ — text spoken at TUI startup, just after the
    /// daily-progress splash finishes.  Empty string (the
    /// default) skips the greeting entirely.  Use this for
    /// a personal welcome — "Welcome back, captain", "Доброе
    /// утро, Владимир", etc.  Honoured only when
    /// `enabled = true`.  Non-blocking: speech starts and
    /// the editor lands on the cursor while audio plays
    /// in parallel.
    pub greeting: String,
    /// 1.2.9+ — text spoken at TUI shutdown, just before
    /// the terminal tears down.  Empty string (the default)
    /// skips it.  Blocking: inkhaven waits up to 5 seconds
    /// for the speech to complete before returning, so the
    /// shell doesn't truncate the audio mid-word.  Keep it
    /// short (a few words).
    pub goodbye: String,

    // ── 1.2.17+ — Piper transition fields ─────────────────

    /// 1.2.17+ — selects the TTS backend.  Three values:
    ///   * `"auto"` (default) — prefer Piper if the binary
    ///     resolves; fall back to the 1.2.9 `system`
    ///     backend (macOS `/usr/bin/say`).  The status-bar
    ///     diagnostic chip reports which is active.
    ///   * `"piper"` — force Piper; error if unresolvable
    ///     instead of falling back.
    ///   * `"system"` — force the 1.2.9 macOS backend;
    ///     errors on non-macOS hosts.
    ///
    /// T.1 (1.2.17): the Piper backend is a stub that
    /// always errors on construction, so `"auto"` falls
    /// through to `"system"` on every host.  Real
    /// dispatch lands in T.2+.
    pub engine: String,

    /// 1.2.17+ — directory for Piper voice models +
    /// catalog cache.  Resolved via
    /// `crate::path_safety::resolve_within(project_root,
    /// voices_dir)` so a malicious project can't escape
    /// into `~/.ssh/`.  Relative paths join the project
    /// root (default `.inkhaven/voices` lives there);
    /// absolute paths are rejected.
    pub voices_dir: String,

    /// 1.2.17+ — when `true`, missing voice models are
    /// streamed from the Hugging Face catalog on first
    /// use.  When `false`, missing voices produce a clear
    /// "voice X is not downloaded; run `inkhaven tts
    /// voice download X`" error.
    pub auto_download: bool,

    /// 1.2.17+ — Piper voice catalog URL.  Defaults to
    /// the upstream Hugging Face manifest.  Override only
    /// if you maintain a private / mirrored catalog with
    /// the same JSON shape.
    pub catalog_url: String,

    /// 1.2.17+ — how long the local catalog cache is
    /// fresh, in hours.  After expiry the next voice
    /// operation re-fetches.  Network failures during
    /// refresh fall back to the stale cache + log a
    /// warning rather than blocking synthesis.
    pub catalog_ttl_hours: u32,

    /// 1.2.17+ — explicit path to a `piper` binary.
    /// When `None` (default), inkhaven autoresolves:
    /// PATH first, then `~/.cache/inkhaven/piper-<plat>/`.
    /// When the resolver finds nothing and
    /// `auto_download_binary` is true, the platform's
    /// piper release is downloaded into the user cache
    /// (NOT the project tree — the binary is identical
    /// across projects).
    pub binary_path: Option<String>,

    /// 1.2.17+ — when `true`, a missing Piper binary
    /// triggers a one-time download from GitHub
    /// Releases.  When `false`, the resolver reports
    /// "Piper not found" and falls back to System under
    /// `engine: "auto"` or errors under `engine:
    /// "piper"`.
    pub auto_download_binary: bool,

    /// 1.2.17+ — LRU cache cap on the project's voices
    /// directory.  When the count exceeds this number,
    /// the least-recently-used voice is evicted (its
    /// `.onnx` + `.onnx.json` removed).  Voice models
    /// are 25–100 MB each; the default `5` caps the
    /// directory at ~125–500 MB per project.
    pub cache_max_voices: usize,

    /// 1.2.17+ — override the platform default playback
    /// command.  `None` (default) uses `afplay` on macOS,
    /// `paplay` / `aplay` on Linux, PowerShell
    /// `Media.SoundPlayer` on Windows.  Set to a string
    /// containing `{path}` (replaced with the synthesised
    /// WAV path) to use a custom player (`mpv`, `ffplay`,
    /// `sox play`, etc.).
    pub play_command: Option<String>,

    /// 1.2.17+ — sample rate for Piper synthesis output
    /// in Hz.  Piper's native rate is 22050 Hz; changing
    /// this triggers a resample inside the playback
    /// pipeline.  Most users should leave the default.
    pub sample_rate_hz: u32,

    /// 1.2.17+ — when `true`, the first auto-downloaded
    /// voice appends `.inkhaven/voices/` to the project's
    /// `.gitignore` (creating the file if absent).
    /// Voices are large opaque blobs; committing them
    /// pollutes git history and the working tree.  Set
    /// `false` if you manage `.gitignore` strictly by
    /// hand.  One-time, idempotent, atomic via
    /// `crate::io_atomic`.
    pub auto_gitignore: bool,
}

impl Default for TtsConfig {
    fn default() -> Self {
        Self {
            enabled: false,
            voice: "Milena".into(),
            speed: 1.0,
            greeting: String::new(),
            goodbye: String::new(),
            engine: "auto".into(),
            voices_dir: ".inkhaven/voices".into(),
            auto_download: true,
            catalog_url:
                "https://huggingface.co/rhasspy/piper-voices/raw/main/voices.json"
                    .into(),
            catalog_ttl_hours: 24,
            binary_path: None,
            auto_download_binary: true,
            cache_max_voices: 5,
            play_command: None,
            sample_rate_hz: 22_050,
            auto_gitignore: true,
        }
    }
}

fn default_startup_splash() -> bool {
    true
}

fn default_mouse_captured() -> bool {
    true
}

fn default_confirm_quit() -> bool {
    false
}

impl Default for EditorConfig {
    fn default() -> Self {
        Self {
            theme: "default".into(),
            tab_width: 2,
            wrap: true,
            autosave_seconds: 5,
            auto_close_pairs: true,
            stemming: StemmingConfig::default(),
            startup_splash: default_startup_splash(),
            mouse_captured: default_mouse_captured(),
            confirm_quit: default_confirm_quit(),
            tts: TtsConfig::default(),
            style_warnings: StyleWarningsConfig::default(),
            pov_chip_enabled: default_pov_chip_enabled(),
            prompt_language_mode: default_prompt_language_mode(),
            prompt_language_detection_min_chars:
                default_prompt_language_detection_min_chars(),
            comment_author: None,
            snippets: SnippetsConfig::default(),
            continuation_anchor_count: default_continuation_anchor_count(),
            footnote_style: default_footnote_style(),
            show_glossary_chip: default_show_glossary_chip(),
            show_facts_chip: false,
            reading_time_chip: false,
            reading_wpm: default_reading_wpm(),
            echo_window: default_echo_window(),
            echo_min_repeats: default_echo_min_repeats(),
            echo_max_global: default_echo_max_global(),
            paragraph_long_secs: default_paragraph_long_secs(),
            disk_warn_mb: default_disk_warn_mb(),
            warn_uncommitted_on_exit: default_warn_uncommitted_on_exit(),
            echo_overlay: false,
        }
    }
}

#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct StemmingConfig {
    /// Languages whose Snowball stemmer is used for the highlight overlay.
    /// The default covers Vladimir's writing languages (English + Russian).
    /// Empty disables stemming and falls back to exact-phrase matching.
    pub languages: Vec<String>,
}

impl Default for StemmingConfig {
    fn default() -> Self {
        Self {
            languages: vec!["english".into(), "russian".into()],
        }
    }
}

/// Map an HJSON-friendly language name onto a `rust_stemmers::Algorithm`.
/// Unknown names return `None`; callers surface a config error to the user.
pub fn parse_stemmer_language(name: &str) -> Option<rust_stemmers::Algorithm> {
    use rust_stemmers::Algorithm;
    let lower = name.trim().to_ascii_lowercase();
    Some(match lower.as_str() {
        "arabic" => Algorithm::Arabic,
        "danish" => Algorithm::Danish,
        "dutch" => Algorithm::Dutch,
        "english" | "en" => Algorithm::English,
        "finnish" => Algorithm::Finnish,
        "french" => Algorithm::French,
        "german" => Algorithm::German,
        "greek" => Algorithm::Greek,
        "hungarian" => Algorithm::Hungarian,
        "italian" => Algorithm::Italian,
        "norwegian" => Algorithm::Norwegian,
        "portuguese" => Algorithm::Portuguese,
        "romanian" => Algorithm::Romanian,
        "russian" | "ru" => Algorithm::Russian,
        "spanish" => Algorithm::Spanish,
        "swedish" => Algorithm::Swedish,
        "tamil" => Algorithm::Tamil,
        "turkish" => Algorithm::Turkish,
        _ => return None,
    })
}

#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct KeyBindings {
    pub save: String,
    pub search: String,
    pub ai_prompt: String,
    pub next_pane: String,
    pub prev_pane: String,
    pub page_up: String,
    pub page_down: String,
    /// Meta-prefix chord. When pressed, the next keystroke is interpreted as
    /// an action selector (B add book, C chapter, S subchapter, P paragraph,
    /// D delete, ↑/↓ reorder, Esc cancel). Replaces the old `Ctrl+Shift+*`
    /// chords which many terminals and multiplexers re-encode unhelpfully.
    pub meta_prefix: String,
    /// Bund meta-prefix chord. Parallel to `meta_prefix` but for
    /// scripting actions (R run buffer, E eval, N new script).
    /// Defaults to Ctrl+Z since tui-textarea's undo is bound to
    /// Ctrl+U in this codebase. Set to an empty string to disable
    /// the Bund chord entirely.
    pub bund_prefix: String,
    /// View meta-prefix chord (1.2.4+). Parallel to meta_prefix +
    /// bund_prefix but for markdown export / similar mode /
    /// progress / paragraph target. Defaults to Ctrl+V. Empty
    /// string disables the layer (a terminal that wants Ctrl+V
    /// for "verbatim next" can opt out).
    #[serde(default = "default_view_prefix")]
    pub view_prefix: String,
    /// User overlay for chord-action bindings under the meta- and
    /// bund-prefixes. Each entry is `{ chord, action, scope? }`.
    /// The `chord` string uses shorthand `"<prefix> <suffix>"`
    /// (e.g. `"Ctrl+b y"` rebinds Ctrl+B Y). `action` is the
    /// dotted form (`"tree.morph_type"`, `"bund.run_buffer"`,
    /// `"none"` to disable). `scope` is one of
    /// `"any"` / `"editor"` / `"tree"` / `"ai"` and defaults to
    /// `"any"`. Hard-blocked chords (Ctrl+Q, meta_prefix,
    /// bund_prefix) are rejected with a clear error.
    #[serde(default)]
    pub bindings: Vec<BindingOverride>,
}

/// Single entry inside `keys.bindings`. Parsed at startup into a
/// `keybind::BindingEntry` and applied on top of
/// `KeyBindings::defaults()`.
#[derive(Debug, Clone, Default, Serialize, Deserialize)]
pub struct BindingOverride {
    pub chord: String,
    pub action: String,
    #[serde(default)]
    pub scope: Option<String>,
}

impl Default for KeyBindings {
    fn default() -> Self {
        Self {
            save: "Ctrl+s".into(),
            search: "Ctrl+/".into(),
            ai_prompt: "Ctrl+i".into(),
            next_pane: "Tab".into(),
            prev_pane: "Shift+Tab".into(),
            page_up: "PageUp".into(),
            page_down: "PageDown".into(),
            meta_prefix: "Ctrl+b".into(),
            bund_prefix: "Ctrl+z".into(),
            view_prefix: default_view_prefix(),
            bindings: Vec::new(),
        }
    }
}

#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct HierarchyConfig {
    /// If false, only Book → Chapter → Subchapter → Paragraph is allowed.
    /// If true, Subchapter may nest arbitrarily before terminating in Paragraph.
    pub unbounded_subchapters: bool,
}

impl Default for HierarchyConfig {
    fn default() -> Self {
        Self {
            unbounded_subchapters: false,
        }
    }
}

impl Config {
    pub fn load(path: &Path) -> crate::error::Result<Self> {
        let raw = std::fs::read_to_string(path).map_err(crate::error::Error::Io)?;
        serde_hjson::from_str(&raw).map_err(|e| crate::error::Error::Config(e.to_string()))
    }

    /// 1.2.20+ — load the project config, then layer any
    /// user-global override files on top.  Precedence, low
    /// → high: built-in defaults → project `inkhaven.hjson`
    /// → `~/.config/inkhaven/config.hjson` →
    /// `~/.config/inkhaven/conf/*.hjson` (sorted lexically).
    ///
    /// The global files are **partial** — only the keys
    /// they contain override; everything else falls through
    /// to the project.  This lets a user keep one personal
    /// theme / keybind set that applies to every project
    /// without editing each project's HJSON.
    ///
    /// Global overrides win over the project **deliberately**:
    /// `inkhaven init` writes a *full* config, so a
    /// project-wins cascade would mask the user's global
    /// preferences entirely.  A malformed *global* file is
    /// skipped with a WARN (a typo there must never brick
    /// every project + command); a malformed *project* file
    /// stays fatal, exactly like [`Config::load`].
    pub fn load_layered(project_path: &Path) -> crate::error::Result<Self> {
        Self::load_layered_from(project_path, global_config_dir().as_deref())
    }

    /// [`Config::load_layered`] with the global config
    /// directory injected — the seam the tests drive without
    /// touching the process-wide `$XDG_CONFIG_HOME`.
    fn load_layered_from(
        project_path: &Path,
        global_dir: Option<&Path>,
    ) -> crate::error::Result<Self> {
        // Base = the built-in defaults as a JSON value, so
        // the final typed `from_value` always sees a
        // complete object no matter which keys the layers
        // carry.
        let mut merged = serde_json::to_value(Config::default())
            .map_err(|e| crate::error::Error::Config(e.to_string()))?;

        // Project layer — required + fatal on parse error,
        // matching `load`.
        let project = read_hjson_value(project_path)?;
        merge_value(&mut merged, project);

        // Global override layer(s) — best-effort: a broken
        // file degrades to "skipped", never to a hard error.
        if let Some(dir) = global_dir {
            for path in global_config_files_in(dir) {
                match read_hjson_value(&path) {
                    Ok(v) => merge_value(&mut merged, v),
                    Err(e) => tracing::warn!(
                        target: "inkhaven::config",
                        "skipping malformed global config `{}`: {e}",
                        path.display(),
                    ),
                }
            }
        }

        serde_json::from_value(merged)
            .map_err(|e| crate::error::Error::Config(e.to_string()))
    }

    #[allow(dead_code)]
    pub fn save(&self, path: &Path) -> crate::error::Result<()> {
        let s = serde_hjson::to_string(self)
            .map_err(|e| crate::error::Error::Config(e.to_string()))?;
        std::fs::write(path, s).map_err(crate::error::Error::Io)
    }
}

// ── config layering (1.2.20+) ────────────────────────────

/// Parse an HJSON file into a generic JSON value for
/// layering.  Going through `serde_json::Value` (rather
/// than straight to `Config`) is what makes *partial*
/// override files work: keys absent from the file simply
/// aren't in the value, so the deep-merge leaves the lower
/// layer's value in place.
fn read_hjson_value(path: &Path) -> crate::error::Result<serde_json::Value> {
    let raw = std::fs::read_to_string(path).map_err(crate::error::Error::Io)?;
    serde_hjson::from_str::<serde_json::Value>(&raw)
        .map_err(|e| crate::error::Error::Config(e.to_string()))
}

/// Deep-merge `overlay` onto `base`: two objects merge
/// key-by-key (recursively); every other shape (scalar,
/// array, or a type change) replaces wholesale.  The
/// overlay always wins on a conflict.
fn merge_value(base: &mut serde_json::Value, overlay: serde_json::Value) {
    match (base, overlay) {
        (serde_json::Value::Object(b), serde_json::Value::Object(o)) => {
            for (k, v) in o {
                merge_value(b.entry(k).or_insert(serde_json::Value::Null), v);
            }
        }
        (b, o) => *b = o,
    }
}

/// The user-global inkhaven config directory:
/// `$XDG_CONFIG_HOME/inkhaven` when that env var is set +
/// non-empty, else `$HOME/.config/inkhaven`.  `None` when
/// neither is set (layering is then simply skipped).  This
/// matches the `~/.config/inkhaven/inkhaven.hjson`
/// convention already documented for provider API keys.
fn global_config_dir() -> Option<PathBuf> {
    if let Some(xdg) = std::env::var_os("XDG_CONFIG_HOME") {
        if !xdg.is_empty() {
            return Some(PathBuf::from(xdg).join("inkhaven"));
        }
    }
    std::env::var_os("HOME").map(|h| PathBuf::from(h).join(".config").join("inkhaven"))
}

/// The override files under the global dir, in ascending
/// precedence: `config.hjson` first, then every
/// `conf/*.hjson` in sorted (lexical) order — so a user can
/// split overrides into `conf/10-theme.hjson`,
/// `conf/20-keys.hjson`, … and reason about who wins.  A
/// missing dir / `conf` subdir yields an empty list.
fn global_config_files_in(dir: &Path) -> Vec<PathBuf> {
    let mut files = Vec::new();
    let top = dir.join("config.hjson");
    if top.is_file() {
        files.push(top);
    }
    if let Ok(entries) = std::fs::read_dir(dir.join("conf")) {
        let mut confs: Vec<PathBuf> = entries
            .filter_map(|e| e.ok().map(|e| e.path()))
            .filter(|p| {
                p.is_file() && p.extension().and_then(|s| s.to_str()) == Some("hjson")
            })
            .collect();
        confs.sort();
        files.extend(confs);
    }
    files
}

/// Writing-progress goals — fuels the status-bar widget +
/// Ctrl+V G modal.
///
/// All numeric fields are inclusive; absent / zero means
/// "no target set" rather than "must be zero". Per-book entries
/// live under `goals.books.<book-slug>` so the slug is the
/// natural lookup key (case-insensitive in the
/// hierarchy → snapshot mapping).
#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct GoalsConfig {
    /// Project-wide daily word-count target. Status-bar shows
    /// `today X/daily_words`. `0` (default) hides the slash.
    pub daily_words: i64,
    /// Project-wide daily active-time target, in minutes (1.2.4+).
    /// Status-bar shows `Nm/Mm` against this when set; the
    /// `hook.on_active_goal_hit` fires the first time today's
    /// active-time crosses the line. `0` (default) disables.
    pub active_minutes_daily: i64,
    /// Missed days forgiven per rolling 7-day window before the
    /// streak breaks. `0` = strict; `1` = one rest day per week.
    pub streak_grace_per_week: i64,
    /// Per-book targets. Key is the book slug (matches
    /// `Node.slug` case-insensitively).
    pub books: std::collections::HashMap<String, BookGoal>,
    /// Trailing-week status-promotion targets. Key is the
    /// status string ("ready", "final", "third", …) lowercased.
    pub status_ladder: std::collections::HashMap<String, i64>,
    /// Auto-promote a paragraph's status to the next ladder rung
    /// (Napkin → First → Second → Third → Final → Ready) on the
    /// first save where `word_count` crosses the paragraph's
    /// `target_words`. Idempotent per `(paragraph, status)` —
    /// won't re-fire until the user manually cycles status.
    /// Default `true`; set `false` to keep promotions manual.
    #[serde(default = "default_auto_promote_on_target")]
    pub auto_promote_on_target: bool,
}

fn default_auto_promote_on_target() -> bool {
    true
}

impl Default for GoalsConfig {
    fn default() -> Self {
        Self {
            daily_words: 0,
            active_minutes_daily: 0,
            streak_grace_per_week: 0,
            books: std::collections::HashMap::new(),
            status_ladder: std::collections::HashMap::new(),
            auto_promote_on_target: default_auto_promote_on_target(),
        }
    }
}

/// Per-book writing target.
#[derive(Debug, Clone, Serialize, Deserialize, Default)]
#[serde(default)]
pub struct BookGoal {
    /// Total words the book should reach. `0` hides the
    /// per-book pace line.
    pub target_words: i64,
    /// ISO date (`YYYY-MM-DD`) by which `target_words` should
    /// be hit. Empty string disables deadline pacing.
    pub deadline: String,
}

/// Multi-format export hookup for Ctrl+B O.
///
/// When the user "takes" the book, inkhaven first builds the
/// PDF (the existing flow). If `extra_formats` is non-empty, the
/// same combined `.typ` source feeds the in-process converters
/// in `src/export/` and the resulting files land next to the
/// PDF with matching stem. Each entry is a case-insensitive
/// format name — supported today: `markdown`, `tex`, `epub`.
/// Two 1.3.0 PDF-1 entries operate on the just-built PDF rather
/// than the `.typ` source: `imposed_pdf` (impose into signatures,
/// see `imposed_pdf_config`) and `cover_pdf` (generate a
/// cover-and-spine from the page count + `cover:` config).
/// `docx` (1.3.1) builds a Shunn-format Word document from the
/// book's chapters (the same model as `inkhaven docx`).
/// Unknown entries log a WARN and are skipped. Per-format
/// errors are reported in the status bar but never abort the
/// take.
#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct OutputConfig {
    pub extra_formats: Vec<String>,
    /// 1.2.6+ — milliseconds the Ctrl+B O extras splash holds
    /// each format on screen so the user can actually see the
    /// transitions (markdown → tex → epub …). Each value is the
    /// sleep applied right after the format is drawn as the
    /// in-flight `▶` step, plus the same delay after the final
    /// `✓` frame. Set to `0` to disable the artificial pause.
    /// Default `400` (≈ 1.2s for a 3-format build).
    pub extras_step_pause_ms: u64,
    /// 1.2.6+ — when true, the final all-✓ frame of the extras
    /// splash holds until the user presses any key (same shape
    /// as `typst_compile.wait_for_key_after_compile`). Useful
    /// for screenshots / demos; off in normal use so a batch
    /// `Ctrl+B O` doesn't trap the user behind a key prompt.
    /// Default `false`.
    pub extras_wait_for_key: bool,
    /// 1.3.0 PDF-1 — the imposition profile used when `imposed_pdf` is in
    /// `extra_formats`.  Names a profile from `imposition.profiles`
    /// (default `default`).
    #[serde(default = "default_imposed_pdf_config")]
    pub imposed_pdf_config: String,
}

fn default_imposed_pdf_config() -> String {
    "default".to_string()
}

impl Default for OutputConfig {
    fn default() -> Self {
        Self {
            extra_formats: Vec::new(),
            extras_step_pause_ms: 400,
            extras_wait_for_key: false,
            imposed_pdf_config: default_imposed_pdf_config(),
        }
    }
}

/// 1.2.6+ — story timeline feature config. `enabled: false`
/// (the default) hides every timeline chord, CLI subcommand,
/// and Bund word. Once enabled, events become a first-class
/// metadata layer over the existing paragraph tree (see
/// `crate::timeline`).
#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct TimelineConfig {
    pub enabled: bool,
    pub default_track: String,
    pub calendar: crate::timeline::calendar::CalendarConfig,
    pub display: TimelineDisplayConfig,
}

impl Default for TimelineConfig {
    fn default() -> Self {
        Self {
            enabled: false,
            default_track: "main".into(),
            calendar: crate::timeline::calendar::CalendarConfig::default(),
            display: TimelineDisplayConfig::default(),
        }
    }
}

#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct TimelineDisplayConfig {
    pub show_orphans: bool,
    pub swim_lane_max_rows: u32,
    pub default_zoom: f32,
    /// 1.2.7+ — paint a faint vertical bar every N days across
    /// the swim-lane view (axis row + each track row, in cells
    /// that aren't already covered by an event marker or by the
    /// time cursor). Set to `0` to disable the grid entirely.
    /// Default `7` — one stripe per week, useful for sols /
    /// gregorian calendars. Custom calendars: assumes
    /// `base_unit = "day"` (the typical case); 1 day == 1 tick.
    pub grid_every_days: u32,
}

impl Default for TimelineDisplayConfig {
    fn default() -> Self {
        Self {
            show_orphans: true,
            swim_lane_max_rows: 12,
            default_zoom: 1.0,
            grid_every_days: 7,
        }
    }
}

/// 1.2.6+ — AI-pane behaviour. Currently per-paragraph memory
/// + the `.example` prompt-seeding switch; future knobs (e.g.
/// ai-pane default scope, max chat history depth) will land
/// here.
#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct AiConfig {
    /// When true, AI prompts sent with scope=Paragraph stamp
    /// both turns onto the open paragraph's `ai_memory`
    /// metadata, and subsequent paragraph-scoped prompts
    /// pre-pend that memory to the chat-history payload. The
    /// project-wide visible chat history is untouched.
    pub per_paragraph_memory: bool,
    /// Maximum total turns (user + assistant) kept per
    /// paragraph. Oldest turns evict first. `0` is treated as
    /// "disabled" regardless of `per_paragraph_memory`.
    pub per_paragraph_memory_max_turns: usize,
    /// 1.2.6+ — auto-populate the `Prompts` system book with
    /// `<name>.example` paragraphs carrying inkhaven's
    /// embedded default prompts (F7 grammar-check, F11
    /// explain-diagnostic, F12 critique-edit + critique-
    /// changes). Runs both at `inkhaven init` and on every
    /// TUI open. Idempotent — existing paragraphs with the
    /// same title are never touched, so only gaps get filled.
    /// Set `false` to disable the seeding entirely (you'll
    /// keep the F-keys but the Prompts book stays as you left
    /// it).
    pub reseed_prompt_examples: bool,
    /// 1.2.6+ — when true, applying an AI rewrite that
    /// replaces the buffer (`r` and `g` chords in the AI
    /// pane) first opens a side-by-side diff modal so the
    /// user can accept / reject / accept-and-edit before any
    /// bytes are written. Additive applies (`i` insert, `t`
    /// prepend, `b` append) skip the review — they don't
    /// destroy existing text. Default true.
    pub diff_review_on_apply: bool,
}

impl Default for AiConfig {
    fn default() -> Self {
        Self {
            per_paragraph_memory: false,
            per_paragraph_memory_max_turns: 10,
            reseed_prompt_examples: true,
            diff_review_on_apply: true,
        }
    }
}

#[cfg(test)]
mod settings_synth_tests {
    use super::*;

    #[test]
    fn synthesised_header_with_defaults_compiles_typst_shape() {
        let cfg = Config::default();
        let s = cfg.synthesised_settings_typ_header();
        // Mandatory headers and the user-override marker.
        assert!(s.contains("auto-generated"));
        assert!(s.contains("User overrides"));
        // Default page / text / par.
        assert!(s.contains("#set page("));
        assert!(s.contains("paper: \"us-letter\""));
        assert!(s.contains("margin: (top: 2.5cm"));
        assert!(s.contains("#set text("));
        assert!(s.contains("lang: \"en\""));
        assert!(s.contains("#set par(justify: true"));
        // No heading numbering by default.
        assert!(!s.contains("#set heading(numbering"));
    }

    #[test]
    fn synthesised_header_emits_numbering_when_set() {
        let mut cfg = Config::default();
        cfg.typst_layout.heading_numbering = "1.1".into();
        let s = cfg.synthesised_settings_typ_header();
        assert!(s.contains("#set heading(numbering: \"1.1\")"));
    }

    #[test]
    fn synthesised_header_omits_text_set_when_all_empty() {
        let mut cfg = Config::default();
        cfg.typst_fonts.body = String::new();
        cfg.typst_fonts.body_size = String::new();
        cfg.typst_fonts.language = String::new();
        let s = cfg.synthesised_settings_typ_header();
        // No #set text(...) but the monospace show-rule is
        // independent — typst 0.11+ uses `show raw: set text(...)`.
        assert!(!s.contains("#set text("));
        assert!(s.contains("#show raw: set text(font:"));
    }

    #[test]
    fn synthesised_header_escapes_double_quotes_in_values() {
        let mut cfg = Config::default();
        cfg.typst_fonts.body = "Bad\"Font".into();
        let s = cfg.synthesised_settings_typ_header();
        // 1.2.6: fonts are emitted as a fallback array, so the
        // user-supplied value sits inside `font: ("…", "Linux
        // Libertine")`. We only assert the escape itself landed.
        assert!(s.contains("\"Bad\\\"Font\""), "got:\n{s}");
    }

    #[test]
    fn synthesised_header_uses_font_fallback_array_for_custom_body() {
        let mut cfg = Config::default();
        cfg.typst_fonts.body = "EB Garamond".into();
        let s = cfg.synthesised_settings_typ_header();
        // Custom body font is paired with the bundled fallback so a
        // missing host font won't fail the compile.
        assert!(
            s.contains("font: (\"EB Garamond\", \"Linux Libertine\")"),
            "got:\n{s}"
        );
    }

    #[test]
    fn synthesised_header_uses_font_fallback_array_for_custom_mono() {
        let mut cfg = Config::default();
        cfg.typst_fonts.monospace = "JetBrains Mono".into();
        let s = cfg.synthesised_settings_typ_header();
        assert!(
            s.contains(
                "#show raw: set text(font: (\"JetBrains Mono\", \"DejaVu Sans Mono\"))"
            ),
            "got:\n{s}"
        );
    }

    #[test]
    fn synthesised_header_never_emits_invalid_set_raw_font() {
        // Typst 0.11+ removed the `font:` parameter from `raw`.
        // Guard against accidentally regressing to `#set raw(font: …)`.
        let cfg = Config::default();
        let s = cfg.synthesised_settings_typ_header();
        assert!(!s.contains("#set raw(font:"), "got:\n{s}");
    }

    #[test]
    fn synthesised_header_dedupes_when_body_matches_bundled() {
        let cfg = Config::default();
        let s = cfg.synthesised_settings_typ_header();
        // Default body IS the bundled fallback → bare string form,
        // no duplicate entry.
        assert!(s.contains("font: \"Linux Libertine\""), "got:\n{s}");
        assert!(
            !s.contains("(\"Linux Libertine\", \"Linux Libertine\")"),
            "got:\n{s}"
        );
    }

    #[test]
    fn synthesised_header_multi_column_emits_columns_arg() {
        let mut cfg = Config::default();
        cfg.typst_page.columns = 2;
        let s = cfg.synthesised_settings_typ_header();
        assert!(s.contains("columns: 2"));
    }
}

// ── config layering (1.2.20+) ────────────────────────────
#[cfg(test)]
mod layering_tests {
    use super::*;
    use std::path::Path;

    fn write(path: &Path, body: &str) {
        if let Some(p) = path.parent() {
            std::fs::create_dir_all(p).unwrap();
        }
        std::fs::write(path, body).unwrap();
    }

    // ── merge_value ───────────────────────────────────

    #[test]
    fn merge_objects_recursively_overlay_wins() {
        let mut base = serde_json::json!({
            "theme": { "pane_fg": "#aaa", "modal_fg": "#bbb" },
            "editor": { "reading_wpm": 200 }
        });
        let overlay = serde_json::json!({
            "theme": { "pane_fg": "#ccc" }
        });
        merge_value(&mut base, overlay);
        // Overridden key wins…
        assert_eq!(base["theme"]["pane_fg"], "#ccc");
        // …siblings untouched…
        assert_eq!(base["theme"]["modal_fg"], "#bbb");
        // …unrelated subtrees untouched.
        assert_eq!(base["editor"]["reading_wpm"], 200);
    }

    #[test]
    fn merge_scalar_replaces_object_wholesale() {
        // A type change (object → scalar) replaces, never
        // tries to merge into the scalar.
        let mut base = serde_json::json!({ "x": { "a": 1 } });
        merge_value(&mut base, serde_json::json!({ "x": 7 }));
        assert_eq!(base["x"], 7);
    }

    // ── global_config_files_in ────────────────────────

    #[test]
    fn global_files_config_first_then_sorted_conf() {
        let tmp = tempfile::tempdir().unwrap();
        let dir = tmp.path();
        write(&dir.join("config.hjson"), "{}");
        write(&dir.join("conf/20-b.hjson"), "{}");
        write(&dir.join("conf/10-a.hjson"), "{}");
        write(&dir.join("conf/ignore.txt"), "not hjson");
        let files = global_config_files_in(dir);
        let names: Vec<String> = files
            .iter()
            .map(|p| p.file_name().unwrap().to_string_lossy().into_owned())
            .collect();
        assert_eq!(names, vec!["config.hjson", "10-a.hjson", "20-b.hjson"]);
    }

    #[test]
    fn global_files_empty_when_dir_absent() {
        let tmp = tempfile::tempdir().unwrap();
        assert!(global_config_files_in(&tmp.path().join("nope")).is_empty());
    }

    // ── load_layered_from ─────────────────────────────

    fn project_with(tmp: &Path, body: &str) -> std::path::PathBuf {
        let p = tmp.join("inkhaven.hjson");
        write(&p, body);
        p
    }

    #[test]
    fn global_overrides_project_value() {
        let tmp = tempfile::tempdir().unwrap();
        let proj = project_with(tmp.path(), r##"{ theme: { pane_fg: "#111111" } }"##);
        let gdir = tmp.path().join("global");
        write(&gdir.join("config.hjson"), r##"{ theme: { pane_fg: "#222222" } }"##);

        let cfg = Config::load_layered_from(&proj, Some(&gdir)).unwrap();
        // The whole point: global wins over the project's
        // own (full) config so one personal override applies
        // everywhere without editing each project.
        assert_eq!(cfg.theme.pane_fg, "#222222");
    }

    #[test]
    fn unset_global_key_falls_through_to_project() {
        let tmp = tempfile::tempdir().unwrap();
        let proj = project_with(
            tmp.path(),
            r##"{ theme: { pane_fg: "#111111", modal_fg: "#999999" } }"##,
        );
        let gdir = tmp.path().join("global");
        // Partial override — only pane_fg.
        write(&gdir.join("config.hjson"), r##"{ theme: { pane_fg: "#222222" } }"##);

        let cfg = Config::load_layered_from(&proj, Some(&gdir)).unwrap();
        assert_eq!(cfg.theme.pane_fg, "#222222"); // overridden
        assert_eq!(cfg.theme.modal_fg, "#999999"); // fell through
    }

    #[test]
    fn conf_dir_later_file_wins_over_config_hjson() {
        let tmp = tempfile::tempdir().unwrap();
        let proj = project_with(tmp.path(), r##"{ theme: { pane_fg: "#000000" } }"##);
        let gdir = tmp.path().join("global");
        write(&gdir.join("config.hjson"), r##"{ theme: { pane_fg: "#111111" } }"##);
        write(&gdir.join("conf/50-late.hjson"), r##"{ theme: { pane_fg: "#222222" } }"##);

        let cfg = Config::load_layered_from(&proj, Some(&gdir)).unwrap();
        // config.hjson < conf/*.hjson in precedence.
        assert_eq!(cfg.theme.pane_fg, "#222222");
    }

    #[test]
    fn no_global_dir_is_plain_project_load() {
        let tmp = tempfile::tempdir().unwrap();
        let proj = project_with(tmp.path(), r##"{ theme: { pane_fg: "#abcabc" } }"##);
        let cfg = Config::load_layered_from(&proj, None).unwrap();
        assert_eq!(cfg.theme.pane_fg, "#abcabc");
    }

    #[test]
    fn malformed_global_is_skipped_not_fatal() {
        let tmp = tempfile::tempdir().unwrap();
        let proj = project_with(tmp.path(), r##"{ theme: { pane_fg: "#314159" } }"##);
        let gdir = tmp.path().join("global");
        // Not valid HJSON — a dangling brace.
        write(&gdir.join("config.hjson"), "{ theme: { pane_fg: ");

        // Must still succeed, keeping the project value.
        let cfg = Config::load_layered_from(&proj, Some(&gdir)).unwrap();
        assert_eq!(cfg.theme.pane_fg, "#314159");
    }

    #[test]
    fn malformed_project_is_fatal() {
        let tmp = tempfile::tempdir().unwrap();
        let proj = project_with(tmp.path(), "{ broken ");
        assert!(Config::load_layered_from(&proj, None).is_err());
    }

    #[test]
    fn partial_project_fills_from_defaults() {
        // A minimal (non-init) project config must still
        // produce a complete Config — the defaults base
        // guarantees it.
        let tmp = tempfile::tempdir().unwrap();
        let proj = project_with(tmp.path(), r#"{ language: "russian" }"#);
        let cfg = Config::load_layered_from(&proj, None).unwrap();
        assert_eq!(cfg.language, "russian");
        // A field absent from the project comes from default.
        assert_eq!(cfg.theme.pane_fg, ThemeConfig::default().pane_fg);
    }

    // The shipped `color_styles/*.hjson` presets must each
    // be valid HJSON, contain only real `theme` colour keys
    #[test]
    fn parse_color_handles_non_ascii_without_panic() {
        // 1.2.23 stability fix: a multibyte char in a 3- or 6-byte hex
        // string used to split a UTF-8 char and panic; now → None.
        assert_eq!(parse_color("#aé"), None); // "aé" = 3 bytes
        assert_eq!(parse_color("aébcd"), None); // 5 chars / 6 bytes
        assert_eq!(parse_color("#ñ"), None);
        assert_eq!(parse_color("日本語"), None);
        // The valid cases still work.
        assert!(parse_color("#fff").is_some());
        assert!(parse_color("#89b4fa").is_some());
        assert!(parse_color("89b4fa").is_some());
        assert_eq!(parse_color(""), None);
        assert_eq!(parse_color("#xyz"), None); // ASCII but not hex
    }

    // that parse, and layer cleanly into a complete Config —
    // guards the presets against bit-rot when fields change.
    #[test]
    fn color_style_presets_all_parse() {
        let dir = Path::new(env!("CARGO_MANIFEST_DIR")).join("color_styles");
        let mut count = 0;
        for entry in std::fs::read_dir(&dir).expect("color_styles dir exists") {
            let path = entry.unwrap().path();
            if path.extension().and_then(|s| s.to_str()) != Some("hjson") {
                continue;
            }
            let raw = std::fs::read_to_string(&path).unwrap();
            let v: serde_json::Value = serde_hjson::from_str(&raw)
                .unwrap_or_else(|e| panic!("{}: invalid HJSON: {e}", path.display()));
            let theme = v
                .get("theme")
                .and_then(|t| t.as_object())
                .unwrap_or_else(|| panic!("{}: no theme object", path.display()));
            // Every value must be a parseable colour string.
            for (k, val) in theme {
                let hex = val.as_str().unwrap_or_else(|| {
                    panic!("{}: theme.{k} is not a string", path.display())
                });
                assert!(
                    parse_color(hex).is_some(),
                    "{}: theme.{k} = `{hex}` is not a valid colour",
                    path.display(),
                );
            }
            // And the file must layer into a complete Config
            // (the cascade the presets are meant for).
            let mut merged = serde_json::to_value(Config::default()).unwrap();
            merge_value(&mut merged, v);
            let _: Config = serde_json::from_value(merged)
                .unwrap_or_else(|e| panic!("{}: not a valid Config: {e}", path.display()));
            count += 1;
        }
        assert!(count >= 15, "expected >= 15 presets, found {count}");
    }
}