lean-ctx-engine 3.12.4

use serde::{Deserialize, Serialize};
use std::collections::HashMap;
use std::path::{Path, PathBuf};
use std::sync::Mutex;
use std::sync::atomic::{AtomicUsize, Ordering};
use std::time::{Duration, Instant};

const HEATMAP_FLUSH_EVERY: usize = 25;
const HEATMAP_MAX_ENTRIES: usize = 10_000;
/// The heat map is rewritten whole on every save; a long-lived process saves
/// it at most this often (and once more when it exits, [`flush_now`]).
const HEATMAP_SAVE_EVERY: Duration = Duration::from_secs(30);

static HEATMAP_BUFFER: Mutex<Option<HeatMap>> = Mutex::new(None);
static HEATMAP_CALLS: AtomicUsize = AtomicUsize::new(0);

#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct HeatEntry {
    pub path: String,
    pub access_count: u32,
    pub last_access: String,
    pub total_tokens_saved: u64,
    pub total_original_tokens: u64,
    pub avg_compression_ratio: f32,
    /// Per-agent access counts — the stigmergic pheromone field.  When multiple
    /// agents access the same file, downstream consumers can identify shared
    /// context (co-access patterns) and compute credit for useful preloads.
    #[serde(default, skip_serializing_if = "HashMap::is_empty")]
    pub agent_accesses: HashMap<String, u32>,
}

#[derive(Debug, Clone, Serialize, Deserialize, Default)]
pub struct HeatMap {
    pub entries: HashMap<String, HeatEntry>,
    #[serde(skip)]
    dirty: bool,
    /// When and where this process last saved the map: a save to another
    /// file (another data dir) is never put off.
    #[serde(skip)]
    last_save: Option<(Instant, PathBuf)>,
}

impl HeatMap {
    pub fn load() -> Self {
        let mut guard = HEATMAP_BUFFER
            .lock()
            .unwrap_or_else(std::sync::PoisonError::into_inner);
        if let Some(ref hm) = *guard {
            return hm.clone();
        }
        let hm = load_from_disk();
        *guard = Some(hm.clone());
        hm
    }

    pub fn record_access(&mut self, file_path: &str, original_tokens: usize, saved_tokens: usize) {
        self.record_access_with_agent(file_path, original_tokens, saved_tokens, None);
    }

    /// Record a file access with an optional agent identifier (stigmergic trace).
    pub fn record_access_with_agent(
        &mut self,
        file_path: &str,
        original_tokens: usize,
        saved_tokens: usize,
        agent_id: Option<&str>,
    ) {
        let now = chrono::Utc::now().to_rfc3339();
        let entry = self
            .entries
            .entry(file_path.to_string())
            .or_insert_with(|| HeatEntry {
                path: file_path.to_string(),
                access_count: 0,
                last_access: now.clone(),
                total_tokens_saved: 0,
                total_original_tokens: 0,
                avg_compression_ratio: 0.0,
                agent_accesses: HashMap::new(),
            });
        entry.access_count += 1;
        entry.last_access = now;
        entry.total_tokens_saved += saved_tokens as u64;
        entry.total_original_tokens += original_tokens as u64;
        if entry.total_original_tokens > 0 {
            entry.avg_compression_ratio = 1.0
                - (entry.total_original_tokens - entry.total_tokens_saved) as f32
                    / entry.total_original_tokens as f32;
        }
        if let Some(aid) = agent_id
            && !aid.is_empty()
        {
            *entry.agent_accesses.entry(aid.to_string()).or_insert(0) += 1;
        }
        self.dirty = true;
    }

    pub fn save(&self) -> std::io::Result<()> {
        if !self.dirty && !self.entries.is_empty() {
            return Ok(());
        }
        save_to_disk(self)?;
        let mut saved = self.clone();
        saved.dirty = false;
        saved.last_save = Some((Instant::now(), Self::storage_path()));
        let mut guard = HEATMAP_BUFFER
            .lock()
            .unwrap_or_else(std::sync::PoisonError::into_inner);
        *guard = Some(saved);
        Ok(())
    }

    pub fn top_files(&self, limit: usize) -> Vec<&HeatEntry> {
        let mut sorted: Vec<&HeatEntry> = self.entries.values().collect();
        sorted.sort_by_key(|x| std::cmp::Reverse(x.access_count));
        sorted.truncate(limit);
        sorted
    }

    /// Mean original (pre-compression) token size of a recorded file access.
    /// `None` when nothing has been recorded yet — callers must NOT substitute a
    /// guessed constant (this backs the ghost report's redundant-read estimate).
    pub fn avg_original_tokens_per_access(&self) -> Option<u64> {
        let mut total_original: u64 = 0;
        let mut total_accesses: u64 = 0;
        for e in self.entries.values() {
            total_original = total_original.saturating_add(e.total_original_tokens);
            total_accesses = total_accesses.saturating_add(u64::from(e.access_count));
        }
        (total_accesses > 0).then(|| total_original / total_accesses)
    }

    /// Compute stigmergic context credit: which agents' file-access traces
    /// benefited other agents? An agent A gets credit for a file F when A
    /// accessed F before (or alongside) agent B, because A's trace effectively
    /// pointed B to useful context. The credit for each (agent_A, file) pair is
    /// proportional to how many *other* agents also accessed that file.
    /// Returns `Vec<(agent_id, total_credit)>` sorted descending.
    pub fn context_credit(&self) -> Vec<(String, f64)> {
        let mut credit: HashMap<String, f64> = HashMap::new();
        for entry in self.entries.values() {
            let n_agents = entry.agent_accesses.len();
            if n_agents < 2 {
                continue;
            }
            // Shapley-inspired: each agent that accessed a shared file gets
            // credit = (n_other_agents) / n_agents. The more agents a file
            // served, the more each contributor is credited.
            let share = (n_agents - 1) as f64 / n_agents as f64;
            for agent in entry.agent_accesses.keys() {
                *credit.entry(agent.clone()).or_insert(0.0) += share;
            }
        }
        let mut sorted: Vec<(String, f64)> = credit.into_iter().collect();
        sorted.sort_by(|a, b| b.1.partial_cmp(&a.1).unwrap_or(std::cmp::Ordering::Equal));
        sorted
    }

    pub fn directory_summary(&self) -> Vec<(String, u32, u64)> {
        let mut dirs: HashMap<String, (u32, u64)> = HashMap::new();
        for entry in self.entries.values() {
            let dir = std::path::Path::new(&entry.path)
                .parent()
                .map_or_else(|| ".".to_string(), |p| p.to_string_lossy().to_string());
            let stat = dirs.entry(dir).or_insert((0, 0));
            stat.0 += entry.access_count;
            stat.1 += entry.total_tokens_saved;
        }
        let mut result: Vec<(String, u32, u64)> = dirs
            .into_iter()
            .map(|(dir, (count, saved))| (dir, count, saved))
            .collect();
        result.sort_by_key(|x| std::cmp::Reverse(x.1));
        result
    }

    pub fn cold_files(&self, all_files: &[String], limit: usize) -> Vec<String> {
        let hot: std::collections::HashSet<&str> = self
            .entries
            .keys()
            .map(std::string::String::as_str)
            .collect();
        let mut cold: Vec<String> = all_files
            .iter()
            .filter(|f| !hot.contains(f.as_str()))
            .cloned()
            .collect();
        cold.truncate(limit);
        cold
    }

    fn storage_path() -> PathBuf {
        crate::core::paths::state_dir()
            .unwrap_or_else(|_| PathBuf::from("."))
            .join("heatmap.json")
    }
}

fn load_from_disk() -> HeatMap {
    let path = HeatMap::storage_path();
    match std::fs::read_to_string(&path) {
        Ok(content) => serde_json::from_str(&content).unwrap_or_default(),
        Err(_) => HeatMap::default(),
    }
}

fn save_to_disk(hm: &HeatMap) -> std::io::Result<()> {
    save_to_path(hm, &HeatMap::storage_path())
}

/// Write the map to `path` atomically (temp file + rename), as compact JSON:
/// the file is rewritten whole, so every byte of indentation is written
/// again on every save.
fn save_to_path(hm: &HeatMap, path: &Path) -> std::io::Result<()> {
    if let Some(parent) = path.parent() {
        std::fs::create_dir_all(parent)?;
    }
    let json = serde_json::to_vec(hm)?;
    let tmp = path.with_extension("json.tmp");
    std::fs::write(&tmp, &json)?;
    std::fs::rename(&tmp, path)
}

/// Save `hm` to `path` when it changed since its last save and, unless
/// `force`, that save to the same file lies [`HEATMAP_SAVE_EVERY`] back.
/// Returns whether it wrote. A failed write leaves the map dirty.
fn persist(hm: &mut HeatMap, path: &Path, force: bool, now: Instant) -> bool {
    if !hm.dirty {
        return false;
    }
    let recent = hm.last_save.as_ref().is_some_and(|(at, saved_to)| {
        saved_to == path && now.saturating_duration_since(*at) < HEATMAP_SAVE_EVERY
    });
    if recent && !force {
        return false;
    }
    if save_to_path(hm, path).is_err() {
        return false;
    }
    hm.dirty = false;
    hm.last_save = Some((now, path.to_path_buf()));
    true
}

pub fn record_file_access(file_path: &str, original_tokens: usize, saved_tokens: usize) {
    // Attribute every read to the current agent identity so the per-agent
    // pheromone field (stigmergic trace) is populated in production, not just
    // when callers explicitly pass an id.
    let agent = crate::core::agent_identity::current_agent_id();
    record_file_access_with_agent(file_path, original_tokens, saved_tokens, Some(agent));
}

/// Like [`record_file_access`] but attaches an agent identifier so the heatmap
/// builds a per-agent pheromone field (stigmergic trace for multi-agent routing).
pub fn record_file_access_with_agent(
    file_path: &str,
    original_tokens: usize,
    saved_tokens: usize,
    agent_id: Option<&str>,
) {
    // NOTE (#685): the verified savings ledger is recorded by the *callers*
    // (ctx_read / ctx_multi_read / tool_lifecycle), NOT here. The heatmap counts
    // in o200k for its file-pressure view, but the ledger must denominate in the
    // active model's tokenizer family — and only the callers hold the source text
    // needed to re-tokenize. Recording here would force one shared (o200k) count
    // onto both, defeating model-correct savings.
    let file_path = std::fs::canonicalize(file_path).map_or_else(
        |_| file_path.to_string(),
        |p| p.to_string_lossy().into_owned(),
    );
    let file_path = file_path.as_str();

    let mut guard = HEATMAP_BUFFER
        .lock()
        .unwrap_or_else(std::sync::PoisonError::into_inner);
    let hm = guard.get_or_insert_with(load_from_disk);
    hm.record_access_with_agent(file_path, original_tokens, saved_tokens, agent_id);

    // Enforce bounded retention.
    if hm.entries.len() > HEATMAP_MAX_ENTRIES {
        let mut items: Vec<(String, u32)> = hm
            .entries
            .values()
            .map(|e| (e.path.clone(), e.access_count))
            .collect();
        items.sort_by_key(|x| x.1);
        let drop_n = hm.entries.len().saturating_sub(HEATMAP_MAX_ENTRIES);
        for (path, _) in items.into_iter().take(drop_n) {
            hm.entries.remove(&path);
        }
    }

    let n = HEATMAP_CALLS.fetch_add(1, Ordering::Relaxed) + 1;
    if n.is_multiple_of(HEATMAP_FLUSH_EVERY) {
        persist(hm, &HeatMap::storage_path(), false, Instant::now());
    }
}

/// Save the buffered map when it changed and its last save lies
/// `HEATMAP_SAVE_EVERY` back. Runs after every tool call
/// (`tool_lifecycle::flush_all`): before, it rewrote the whole file on every
/// call once anything had changed, because it never cleared `dirty`.
pub fn flush() {
    flush_with(false);
}

/// Save the buffered map now when it changed: for a process about to exit.
pub fn flush_now() {
    flush_with(true);
}

fn flush_with(force: bool) {
    let mut guard = HEATMAP_BUFFER
        .lock()
        .unwrap_or_else(std::sync::PoisonError::into_inner);
    if let Some(hm) = guard.as_mut() {
        persist(hm, &HeatMap::storage_path(), force, Instant::now());
    }
}

pub fn reset() {
    let mut guard = HEATMAP_BUFFER
        .lock()
        .unwrap_or_else(std::sync::PoisonError::into_inner);
    let hm = guard.insert(HeatMap {
        dirty: true,
        ..HeatMap::default()
    });
    persist(hm, &HeatMap::storage_path(), true, Instant::now());
}

pub fn format_heatmap_status(heatmap: &HeatMap, limit: usize) -> String {
    let top = heatmap.top_files(limit);
    if top.is_empty() {
        return "No file access data recorded yet.".to_string();
    }
    let mut lines = vec![format!(
        "File Access Heat Map ({} tracked files):",
        heatmap.entries.len()
    )];
    lines.push(String::new());
    for (i, entry) in top.iter().enumerate() {
        let short = short_path(&entry.path);
        let heat = heat_indicator(entry.access_count);
        lines.push(format!(
            "  {heat} #{} {} — {} accesses, {:.0}% compression, {} tok saved",
            i + 1,
            short,
            entry.access_count,
            entry.avg_compression_ratio * 100.0,
            entry.total_tokens_saved
        ));
    }
    lines.join("\n")
}

pub fn format_directory_summary(heatmap: &HeatMap) -> String {
    let dirs = heatmap.directory_summary();
    if dirs.is_empty() {
        return "No directory data.".to_string();
    }
    let mut lines = vec!["Directory Heat Map:".to_string(), String::new()];
    for (dir, count, saved) in dirs.iter().take(15) {
        let heat = heat_indicator(*count);
        lines.push(format!(
            "  {heat} {dir}/ — {count} accesses, {saved} tok saved"
        ));
    }
    lines.join("\n")
}

fn heat_indicator(count: u32) -> &'static str {
    match count {
        0 => "  ",
        1..=3 => "▁▁",
        4..=8 => "▃▃",
        9..=15 => "▅▅",
        16..=30 => "▇▇",
        _ => "██",
    }
}

fn short_path(path: &str) -> &str {
    let parts: Vec<&str> = path.rsplitn(3, '/').collect();
    if parts.len() >= 2 {
        let start = path.len() - parts[0].len() - parts[1].len() - 1;
        &path[start..]
    } else {
        path
    }
}

#[cfg(test)]
pub mod tests {
    use super::*;

    #[test]
    fn record_and_query() {
        let mut hm = HeatMap::default();
        hm.record_access("src/main.rs", 100, 80);
        hm.record_access("src/main.rs", 100, 90);
        hm.record_access("src/lib.rs", 200, 50);

        assert_eq!(hm.entries.len(), 2);
        assert_eq!(hm.entries["src/main.rs"].access_count, 2);
        assert_eq!(hm.entries["src/lib.rs"].total_tokens_saved, 50);
    }

    #[test]
    fn avg_original_tokens_per_access_is_measured_not_guessed() {
        let mut hm = HeatMap::default();
        assert_eq!(
            hm.avg_original_tokens_per_access(),
            None,
            "no data must yield None, never a fallback constant"
        );
        hm.record_access("a.rs", 100, 40);
        hm.record_access("a.rs", 100, 40);
        hm.record_access("b.rs", 400, 100);
        // total original = 600 over 3 accesses => mean 200.
        assert_eq!(hm.avg_original_tokens_per_access(), Some(200));
    }

    #[test]
    fn top_files_sorted() {
        let mut hm = HeatMap::default();
        hm.record_access("a.rs", 100, 50);
        hm.record_access("b.rs", 100, 50);
        hm.record_access("b.rs", 100, 50);
        hm.record_access("c.rs", 100, 50);
        hm.record_access("c.rs", 100, 50);
        hm.record_access("c.rs", 100, 50);

        let top = hm.top_files(2);
        assert_eq!(top.len(), 2);
        assert_eq!(top[0].path, "c.rs");
        assert_eq!(top[1].path, "b.rs");
    }

    #[test]
    fn directory_summary_works() {
        let mut hm = HeatMap::default();
        hm.record_access("src/a.rs", 100, 50);
        hm.record_access("src/b.rs", 100, 50);
        hm.record_access("tests/t.rs", 200, 100);

        let dirs = hm.directory_summary();
        assert!(dirs.len() >= 2);
    }

    #[test]
    fn cold_files_detection() {
        let mut hm = HeatMap::default();
        hm.record_access("src/a.rs", 100, 50);

        let all = vec![
            "src/a.rs".to_string(),
            "src/b.rs".to_string(),
            "src/c.rs".to_string(),
        ];
        let cold = hm.cold_files(&all, 10);
        assert_eq!(cold.len(), 2);
        assert!(cold.contains(&"src/b.rs".to_string()));
    }

    #[test]
    fn heat_indicators() {
        assert_eq!(heat_indicator(0), "  ");
        assert_eq!(heat_indicator(1), "▁▁");
        assert_eq!(heat_indicator(10), "▅▅");
        assert_eq!(heat_indicator(50), "██");
    }

    #[test]
    fn compression_ratio() {
        let mut hm = HeatMap::default();
        hm.record_access("a.rs", 1000, 800);
        let entry = &hm.entries["a.rs"];
        assert!((entry.avg_compression_ratio - 0.8).abs() < 0.01);
    }

    #[test]
    fn agent_scoped_access_and_context_credit() {
        let mut hm = HeatMap::default();
        hm.record_access_with_agent("shared.rs", 100, 50, Some("agent-a"));
        hm.record_access_with_agent("shared.rs", 100, 60, Some("agent-b"));
        hm.record_access_with_agent("only-a.rs", 100, 70, Some("agent-a"));

        let entry = &hm.entries["shared.rs"];
        assert_eq!(entry.agent_accesses.len(), 2);
        assert_eq!(entry.agent_accesses["agent-a"], 1);
        assert_eq!(entry.agent_accesses["agent-b"], 1);

        let credit = hm.context_credit();
        assert!(!credit.is_empty(), "`credit` is empty");
        // Both agents get credit for the shared file; only-a.rs contributes
        // no credit (single-agent access).
        let a_credit = credit.iter().find(|(id, _)| id == "agent-a").unwrap().1;
        let b_credit = credit.iter().find(|(id, _)| id == "agent-b").unwrap().1;
        assert!(a_credit > 0.0);
        assert!((a_credit - b_credit).abs() < 1e-9);
    }

    /// The identity of the file at `path`: an atomic rewrite (temp file +
    /// rename) gives it a new inode.
    fn file_identity(path: &Path) -> (u64, std::time::SystemTime) {
        let meta = std::fs::metadata(path).expect("heatmap.json written");
        #[cfg(unix)]
        let ino = {
            use std::os::unix::fs::MetadataExt;
            meta.ino()
        };
        #[cfg(not(unix))]
        let ino = 0;
        (ino, meta.modified().unwrap())
    }

    /// Write amplification (Mac, 11.11.): `flush` runs after every tool call
    /// and never cleared `dirty`, so after the first access each flush
    /// rewrote the whole (pretty-printed, ~2 MB) file. A flush with nothing
    /// new must not write.
    #[test]
    fn a_second_flush_without_changes_does_not_rewrite_the_heatmap() {
        let dir = crate::core::data_dir::isolated_data_dir();
        let file = dir.path().join("hot.rs");
        std::fs::write(&file, "fn hot() {}\n").unwrap();
        record_file_access_with_agent(&file.to_string_lossy(), 100, 40, None);
        flush();
        let heatmap = crate::core::paths::state_dir()
            .unwrap()
            .join("heatmap.json");
        let first = file_identity(&heatmap);
        std::thread::sleep(Duration::from_millis(20));
        flush();
        flush();
        assert_eq!(
            file_identity(&heatmap),
            first,
            "a flush without changes rewrote heatmap.json"
        );
        let text = std::fs::read_to_string(&heatmap).unwrap();
        assert!(!text.contains('\n'), "heatmap.json is not compact");
    }

    #[test]
    fn persist_writes_only_changes_at_most_every_interval_unless_forced() {
        let dir = tempfile::tempdir().unwrap();
        let path = dir.path().join("heatmap.json");
        let mut hm = HeatMap::default();
        let t0 = Instant::now();
        assert!(!persist(&mut hm, &path, false, t0), "nothing to save");

        hm.record_access("a.rs", 100, 50);
        assert!(persist(&mut hm, &path, false, t0), "first save");
        assert!(!persist(&mut hm, &path, false, t0), "unchanged: no write");
        assert!(
            !persist(&mut hm, &path, true, t0),
            "unchanged: not even forced"
        );

        hm.record_access("a.rs", 100, 50);
        let soon = t0 + Duration::from_secs(5);
        assert!(!persist(&mut hm, &path, false, soon), "within the interval");
        assert!(hm.dirty, "a put-off save stays pending");
        assert!(persist(&mut hm, &path, false, t0 + HEATMAP_SAVE_EVERY));

        hm.record_access("b.rs", 100, 50);
        let later = t0 + HEATMAP_SAVE_EVERY + Duration::from_secs(1);
        assert!(persist(&mut hm, &path, true, later), "forced at exit");

        // Another file (data dir switched) is never put off.
        hm.record_access("c.rs", 100, 50);
        let other = dir.path().join("other").join("heatmap.json");
        assert!(persist(&mut hm, &other, false, later));

        let loaded: HeatMap =
            serde_json::from_str(&std::fs::read_to_string(&other).unwrap()).unwrap();
        assert_eq!(loaded.entries.len(), 3);
        assert!(!dir.path().join("heatmap.json.tmp").exists());
    }

    /// Writes for a burst of tool calls: one per [`HEATMAP_SAVE_EVERY`],
    /// not one per call.
    #[test]
    fn a_burst_of_tool_calls_writes_once_per_interval() {
        let dir = tempfile::tempdir().unwrap();
        let path = dir.path().join("heatmap.json");
        let mut hm = HeatMap::default();
        let t0 = Instant::now();
        let mut writes = 0;
        // 100 tool calls, one read each, over 50 seconds.
        for call in 0..100u64 {
            hm.record_access(&format!("f{}.rs", call % 7), 100, 50);
            let at = t0 + Duration::from_millis(call * 500);
            writes += usize::from(persist(&mut hm, &path, false, at));
        }
        assert_eq!(writes, 2, "{writes} writes for 100 calls in 50 s");
        assert!(persist(&mut hm, &path, true, t0 + Duration::from_secs(50)));
    }
}