j-agent 12.10.64

use super::*;

#[test]
fn test_wildcard_rule() {
    assert!(matches_rule("*", "Shell", "{}"));
    assert!(matches_rule("*", "Read", "{}"));
}

#[test]
fn test_tool_name_rule() {
    assert!(matches_rule("Read", "Read", "{}"));
    assert!(matches_rule("Grep", "Grep", "{}"));
    assert!(!matches_rule("Read", "Write", "{}"));
}

#[test]
fn test_bash_command_prefix() {
    let args = r#"{"command": "cargo build --release"}"#;
    assert!(matches_rule("Shell(cargo build:*)", "Shell", args));
    assert!(!matches_rule("Shell(cargo test:*)", "Shell", args));

    let args2 = r#"{"command": "ls -la"}"#;
    assert!(matches_rule("Shell(ls:*)", "Shell", args2));

    // 精确匹配（无参数）
    let args3 = r#"{"command": "cargo fmt"}"#;
    assert!(matches_rule("Shell(cargo fmt:*)", "Shell", args3));
}

#[test]
fn test_path_rule() {
    let args = r#"{"file_path": "/Users/jack/projects/foo/bar.rs"}"#;
    assert!(matches_rule(
        "Write(path:/Users/jack/projects/*)",
        "Write",
        args
    ));
    assert!(!matches_rule("Write(path:/Users/other/*)", "Write", args));
}

#[test]
fn test_domain_rule() {
    let args = r#"{"url": "https://docs.rs/serde/latest"}"#;
    assert!(matches_rule("WebFetch(domain:docs.rs)", "WebFetch", args));
    assert!(!matches_rule(
        "WebFetch(domain:github.com)",
        "WebFetch",
        args
    ));
}

#[test]
fn test_deny_priority() {
    let config = JcliConfig {
        permissions: PermissionConfig {
            allow_all: false,
            allow: vec!["Shell(cargo:*)".to_string()],
            deny: vec!["Shell(cargo build:*)".to_string()],
        },
    };
    // cargo test 被 allow 的 cargo:* 覆盖
    let args_test = r#"{"command": "cargo test"}"#;
    assert!(config.is_allowed("Shell", args_test));

    // cargo build 被 deny 拦截
    let args_build = r#"{"command": "cargo build"}"#;
    assert!(!config.is_allowed("Shell", args_build));
    assert!(config.is_denied("Shell", args_build));
}

#[test]
fn test_allow_all() {
    let config = JcliConfig {
        permissions: PermissionConfig {
            allow_all: true,
            allow: vec![],
            deny: vec![],
        },
    };
    assert!(config.is_allowed("Shell", r#"{"command": "rm -rf /"}"#));

    // deny 仍然优先
    let config2 = JcliConfig {
        permissions: PermissionConfig {
            allow_all: true,
            allow: vec![],
            deny: vec!["Shell(rm -rf:*)".to_string()],
        },
    };
    assert!(!config2.is_allowed("Shell", r#"{"command": "rm -rf /"}"#));
}

#[test]
fn test_url_domain_matching() {
    assert!(url_matches_domain("https://docs.rs/foo", "docs.rs"));
    assert!(url_matches_domain(
        "https://api.github.com/repos",
        "github.com"
    ));
    assert!(!url_matches_domain("https://evil.com/docs.rs", "docs.rs"));
}

#[test]
fn test_generate_allow_rule_bash() {
    let args = r#"{"command": "cargo build --release"}"#;
    assert_eq!(generate_allow_rule("Shell", args), "Shell(cargo build:*)");

    let args2 = r#"{"command": "ls -la"}"#;
    assert_eq!(generate_allow_rule("Shell", args2), "Shell(ls -la:*)");

    let args3 = r#"{"command": "ls"}"#;
    assert_eq!(generate_allow_rule("Shell", args3), "Shell(ls:*)");
}

#[test]
fn test_generate_allow_rule_write() {
    let args = r#"{"file_path": "/Users/jack/projects/foo/bar.rs"}"#;
    assert_eq!(
        generate_allow_rule("Write", args),
        "Write(path:/Users/jack/projects/foo/*)"
    );

    let args2 = r#"{"file_path": "/Users/jack/projects/foo/src/main.rs"}"#;
    assert_eq!(
        generate_allow_rule("Edit", args2),
        "Edit(path:/Users/jack/projects/foo/src/*)"
    );
}

#[test]
fn test_generate_allow_rule_webfetch() {
    let args = r#"{"url": "https://docs.rs/serde/latest"}"#;
    assert_eq!(
        generate_allow_rule("WebFetch", args),
        "WebFetch(domain:docs.rs)"
    );
}

#[test]
fn test_generate_allow_rule_other() {
    assert_eq!(generate_allow_rule("Read", "{}"), "Read");
    assert_eq!(generate_allow_rule("Grep", "{}"), "Grep");
    assert_eq!(generate_allow_rule("Glob", "{}"), "Glob");
}

// ========== Regex 匹配测试 ==========

#[test]
fn test_regex_bash_command() {
    // Shell(/^cargo (build|test)/) 匹配 cargo build 和 cargo test
    let args_build = r#"{"command": "cargo build --release"}"#;
    let args_test = r#"{"command": "cargo test --lib"}"#;
    let args_run = r#"{"command": "cargo run"}"#;
    assert!(matches_rule(
        "Shell(/^cargo (build|test)/)",
        "Shell",
        args_build
    ));
    assert!(matches_rule(
        "Shell(/^cargo (build|test)/)",
        "Shell",
        args_test
    ));
    assert!(!matches_rule(
        "Shell(/^cargo (build|test)/)",
        "Shell",
        args_run
    ));
}

#[test]
fn test_regex_path_pattern() {
    // Write(path:/\.rs$/) 匹配所有 .rs 文件
    let args_rs = r#"{"file_path": "/Users/jack/projects/foo/bar.rs"}"#;
    let args_ts = r#"{"file_path": "/Users/jack/projects/foo/bar.ts"}"#;
    assert!(matches_rule("Write(path:/\\.rs$/)", "Write", args_rs));
    assert!(!matches_rule("Write(path:/\\.rs$/)", "Write", args_ts));
}

#[test]
fn test_regex_domain_pattern() {
    // WebFetch(domain:/.*\.google\.com$/) 匹配所有 google.com 子域名
    let args_google = r#"{"url": "https://maps.google.com/api"}"#;
    let args_docs = r#"{"url": "https://docs.google.com/document"}"#;
    let args_other = r#"{"url": "https://evil.com/google.com"}"#;
    assert!(matches_rule(
        "WebFetch(domain:/.*\\.google\\.com$/)",
        "WebFetch",
        args_google
    ));
    assert!(matches_rule(
        "WebFetch(domain:/.*\\.google\\.com$/)",
        "WebFetch",
        args_docs
    ));
    assert!(!matches_rule(
        "WebFetch(domain:/.*\\.google\\.com$/)",
        "WebFetch",
        args_other
    ));
}

#[test]
fn test_regex_invalid_pattern() {
    // 无效的 regex 不匹配
    let args = r#"{"command": "anything"}"#;
    assert!(!matches_rule("Shell(/[invalid/)", "Shell", args));
    // 空 regex 不匹配
    assert!(!matches_rule("Shell(//)", "Shell", args));
}