rho-coding-agent 1.19.2

use std::{borrow::Cow, collections::BTreeSet, fmt, str::FromStr};

use sha2::{Digest, Sha256};
use thiserror::Error;

use rho_providers::reasoning::ReasoningLevel;

macro_rules! define_tool_capabilities {
    ($($variant:ident => $name:literal),+ $(,)?) => {
        /// A parsed tool capability in an agent definition.
        ///
        /// Built-ins have stable variants so policy code does not parse names again.
        /// Extension names are reserved for capabilities supplied by the host.
        #[derive(Clone, Debug, Hash, PartialEq, Eq, PartialOrd, Ord)]
        pub enum ToolCapability {
            $($variant,)+
            Extension(String),
        }

        /// Every built-in tool capability understood by the Rho host.
        pub const BUILTIN_TOOL_CAPABILITIES: &[ToolCapability] = &[
            $(ToolCapability::$variant,)+
        ];

        impl ToolCapability {
            pub fn parse(name: String) -> Self {
                match name.as_str() {
                    $($name => Self::$variant,)+
                    _ => Self::Extension(name),
                }
            }

            pub fn as_str(&self) -> &str {
                match self {
                    $(Self::$variant => $name,)+
                    Self::Extension(name) => name,
                }
            }
        }
    };
}

define_tool_capabilities! {
    Agent => "agent",
    Agents => "agents",
    Bash => "bash",
    EditFile => "edit_file",
    FetchContent => "fetch_content",
    GetSearchContent => "get_search_content",
    Glob => "glob",
    Grep => "grep",
    ListDir => "list_dir",
    Powershell => "powershell",
    Process => "process",
    Questionnaire => "questionnaire",
    ReadFile => "read_file",
    Rho => "rho",
    Shell => "shell",
    Skill => "skill",
    WebSearch => "web_search",
    WriteFile => "write_file",
}

impl fmt::Display for ToolCapability {
    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
        formatter.write_str(self.as_str())
    }
}

pub type ToolCapabilitySet = BTreeSet<ToolCapability>;

/// Tool capabilities resolved against the current host and invocation role.
#[derive(Clone, Debug, Default, PartialEq, Eq)]
pub struct AgentCapabilities {
    tools: ToolCapabilitySet,
}

impl AgentCapabilities {
    pub fn new(tools: ToolCapabilitySet) -> Self {
        Self { tools }
    }

    pub fn all_host_tools() -> Self {
        Self::new(BUILTIN_TOOL_CAPABILITIES.iter().cloned().collect())
    }

    pub fn contains(&self, capability: &ToolCapability) -> bool {
        self.tools.contains(capability)
    }

    pub fn insert(&mut self, capability: ToolCapability) {
        self.tools.insert(capability);
    }

    pub fn remove(&mut self, capability: &ToolCapability) {
        self.tools.remove(capability);
    }
}

impl From<ToolCapabilitySet> for AgentCapabilities {
    fn from(tools: ToolCapabilitySet) -> Self {
        Self::new(tools)
    }
}

/// Stable identifier used to select an agent across invocations.
#[derive(Clone, Debug, Hash, PartialEq, Eq, PartialOrd, Ord)]
pub struct AgentId(String);

impl AgentId {
    pub fn new(value: impl Into<String>) -> Result<Self, AgentIdError> {
        let value = value.into();
        validate_agent_id(&value)?;
        Ok(Self(value))
    }

    pub fn as_str(&self) -> &str {
        &self.0
    }
}

impl fmt::Display for AgentId {
    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
        formatter.write_str(&self.0)
    }
}

impl FromStr for AgentId {
    type Err = AgentIdError;

    fn from_str(value: &str) -> Result<Self, Self::Err> {
        Self::new(value)
    }
}

#[derive(Clone, Debug, Error, PartialEq, Eq)]
#[error("invalid agent ID '{value}': {reason}")]
pub struct AgentIdError {
    value: String,
    reason: &'static str,
}

fn validate_agent_id(value: &str) -> Result<(), AgentIdError> {
    let invalid = |reason| AgentIdError {
        value: value.to_string(),
        reason,
    };
    if value.is_empty() || value.len() > 64 {
        return Err(invalid("must contain 1-64 characters"));
    }
    if value.starts_with('-') || value.ends_with('-') || value.contains("--") {
        return Err(invalid("must use single hyphens only between segments"));
    }
    if !value
        .bytes()
        .all(|byte| byte.is_ascii_lowercase() || byte.is_ascii_digit() || byte == b'-')
    {
        return Err(invalid(
            "must contain only lowercase ASCII letters, digits, and hyphens",
        ));
    }
    Ok(())
}

#[derive(Clone, Debug, PartialEq, Eq)]
pub enum PromptPolicy {
    Extend(String),
    Replace(String),
}

#[derive(Clone, Debug, PartialEq, Eq)]
pub struct ModelSelection {
    pub provider: Option<String>,
    pub model: String,
}

#[derive(Clone, Debug, PartialEq, Eq)]
pub enum ModelPolicy {
    Inherit,
    Prefer(ModelSelection),
    Require(ModelSelection),
    Select(ModelSelection),
}

#[derive(Clone, Debug, PartialEq, Eq)]
pub enum ToolPolicy {
    All,
    Allow(ToolCapabilitySet),
}

/// Which harness executes an agent definition.
///
/// Runtime is independent of model selection. `Rho` uses Rho's own loop and
/// tool vocabulary. `ClaudeCli` delegates the loop to the `claude` binary and
/// uses Claude Code tool names.
#[derive(Clone, Copy, Debug, Default, Hash, PartialEq, Eq, PartialOrd, Ord)]
pub enum AgentRuntime {
    #[default]
    Rho,
    ClaudeCli,
}

impl AgentRuntime {
    pub fn as_str(self) -> &'static str {
        match self {
            Self::Rho => "rho",
            Self::ClaudeCli => "claude-cli",
        }
    }
}

impl fmt::Display for AgentRuntime {
    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
        formatter.write_str(self.as_str())
    }
}

impl FromStr for AgentRuntime {
    type Err = AgentRuntimeError;

    fn from_str(value: &str) -> Result<Self, Self::Err> {
        match value {
            "rho" => Ok(Self::Rho),
            "claude-cli" => Ok(Self::ClaudeCli),
            _ => Err(AgentRuntimeError {
                value: value.to_string(),
            }),
        }
    }
}

#[derive(Clone, Debug, Error, PartialEq, Eq)]
#[error("unknown runtime '{value}'; expected rho or claude-cli")]
pub struct AgentRuntimeError {
    value: String,
}

/// Validated Claude Code tool policy.
///
/// Distinct from a bare `Vec` so "no tools" cannot be confused with an unset
/// default. Spawn always passes `--tools`; [`Self::None`] becomes the empty
/// string argument.
#[derive(Clone, Debug, PartialEq, Eq)]
pub enum ClaudeToolPolicy {
    /// Explicit empty tool set (`--tools ""`).
    None,
    /// Named Claude tools / patterns (`Read`, `Bash(git *)`, …).
    Allow(Vec<String>),
}

impl ClaudeToolPolicy {
    pub fn as_slice(&self) -> &[String] {
        match self {
            Self::None => &[],
            Self::Allow(tools) => tools.as_slice(),
        }
    }

    pub fn into_vec(self) -> Vec<String> {
        match self {
            Self::None => Vec::new(),
            Self::Allow(tools) => tools,
        }
    }
}

/// Settings that only the Claude CLI runtime understands.
///
/// Built at parse time with validated model/reasoning/tools. Bind derives
/// Claude `--effort` from reasoning and re-checks hard gates.
#[derive(Clone, Debug, PartialEq, Eq)]
pub struct ClaudeAgentConfig {
    pub tools: ClaudeToolPolicy,
    /// When true, widen Claude setting sources to the user's full Claude
    /// config. Default is closed.
    pub inherit_claude_config: bool,
    /// Pass-through `--model` value. `None` omits the flag.
    pub model: Option<String>,
    /// Original reasoning for fingerprint stability. Effort is derived at
    /// bind/spawn via [`Self::effort`].
    pub reasoning: Option<ReasoningLevel>,
}

impl ClaudeAgentConfig {
    /// Claude `--effort` token derived from reasoning. `None` omits the flag.
    pub fn effort(&self) -> Option<&'static str> {
        self.reasoning
            .and_then(crate::claude_runtime::spawn::claude_effort_flag)
    }
}

/// The runtime together with the settings only that runtime understands.
///
/// One value carries the whole runtime axis, so a definition cannot pair one
/// harness with another harness's tool vocabulary or settings.
#[derive(Clone, Debug, PartialEq, Eq)]
pub enum AgentRuntimeSpec {
    Rho {
        tools: ToolPolicy,
        model: ModelPolicy,
        reasoning: Option<ReasoningLevel>,
    },
    ClaudeCli(ClaudeAgentConfig),
}

impl Default for AgentRuntimeSpec {
    fn default() -> Self {
        Self::Rho {
            tools: ToolPolicy::All,
            model: ModelPolicy::Inherit,
            reasoning: None,
        }
    }
}

impl AgentRuntimeSpec {
    pub fn runtime(&self) -> AgentRuntime {
        match self {
            Self::Rho { .. } => AgentRuntime::Rho,
            Self::ClaudeCli(_) => AgentRuntime::ClaudeCli,
        }
    }
}

#[derive(Clone, Debug, PartialEq, Eq)]
pub struct AgentDefinition {
    pub id: AgentId,
    pub description: String,
    pub prompt: PromptPolicy,
    pub runtime: AgentRuntimeSpec,
}

impl AgentDefinition {
    /// Model policy for display and fingerprinting.
    ///
    /// Taken from the Rho arm, or reconstructed from Claude's pass-through
    /// model string (`None` → inherit, `Some` → select).
    pub fn model_policy(&self) -> Cow<'_, ModelPolicy> {
        match &self.runtime {
            AgentRuntimeSpec::Rho { model, .. } => Cow::Borrowed(model),
            AgentRuntimeSpec::ClaudeCli(config) => Cow::Owned(match &config.model {
                None => ModelPolicy::Inherit,
                Some(model) => ModelPolicy::Select(ModelSelection {
                    provider: None,
                    model: model.clone(),
                }),
            }),
        }
    }

    /// Reasoning level for display and fingerprinting.
    pub fn reasoning(&self) -> Option<ReasoningLevel> {
        match &self.runtime {
            AgentRuntimeSpec::Rho { reasoning, .. } => *reasoning,
            AgentRuntimeSpec::ClaudeCli(config) => config.reasoning,
        }
    }

    /// Current semantic fingerprint (v2). New sessions store this value.
    pub fn fingerprint(&self) -> AgentFingerprint {
        self.hash_semantic(FingerprintEncoding::V2)
    }

    /// Pre-runtime-axis v1 fingerprint for Rho definitions that still mean the
    /// same thing under default runtime encoding.
    ///
    /// Present only when behavior maps to the historical shape: `runtime: rho`,
    /// `inherit_claude_config: false`, and Rho tool policy. Used so sessions
    /// created before the runtime axis can resume without treating unchanged
    /// builtins as definition changes. Absent for Claude agents and any
    /// definition that cannot be expressed in the old encoding.
    pub fn legacy_v1_fingerprint(&self) -> Option<AgentFingerprint> {
        match &self.runtime {
            AgentRuntimeSpec::Rho { tools, .. } => {
                Some(self.hash_semantic(FingerprintEncoding::LegacyV1 { tools }))
            }
            AgentRuntimeSpec::ClaudeCli(_) => None,
        }
    }

    /// True when `stored` is the current fingerprint or an exact accepted
    /// legacy v1 fingerprint for this definition.
    pub fn accepts_stored_fingerprint(&self, stored: &str) -> bool {
        if self.fingerprint().to_string() == stored {
            return true;
        }
        self.legacy_v1_fingerprint()
            .is_some_and(|fingerprint| fingerprint.to_string() == stored)
    }

    fn hash_semantic(&self, encoding: FingerprintEncoding<'_>) -> AgentFingerprint {
        let mut hash = Sha256::new();
        match encoding {
            FingerprintEncoding::V2 => hash_field(&mut hash, b"rho-agent-definition-v2"),
            FingerprintEncoding::LegacyV1 { .. } => {
                hash_field(&mut hash, b"rho-agent-definition-v1")
            }
        }
        hash_field(&mut hash, self.id.as_str().as_bytes());
        hash_field(&mut hash, self.description.as_bytes());
        match &self.prompt {
            PromptPolicy::Extend(text) => {
                hash_field(&mut hash, b"prompt:extend");
                hash_field(&mut hash, text.as_bytes());
            }
            PromptPolicy::Replace(text) => {
                hash_field(&mut hash, b"prompt:replace");
                hash_field(&mut hash, text.as_bytes());
            }
        }
        match self.model_policy().as_ref() {
            ModelPolicy::Inherit => hash_field(&mut hash, b"model:inherit"),
            ModelPolicy::Prefer(selection) => hash_selection(&mut hash, b"model:prefer", selection),
            ModelPolicy::Require(selection) => {
                hash_selection(&mut hash, b"model:require", selection)
            }
            ModelPolicy::Select(selection) => hash_selection(&mut hash, b"model:select", selection),
        }
        match encoding {
            FingerprintEncoding::V2 => {
                hash_field(&mut hash, b"runtime");
                hash_field(&mut hash, self.runtime.runtime().as_str().as_bytes());
                match &self.runtime {
                    AgentRuntimeSpec::Rho {
                        tools: ToolPolicy::All,
                        ..
                    } => hash_field(&mut hash, b"tools:rho:all"),
                    AgentRuntimeSpec::Rho {
                        tools: ToolPolicy::Allow(tools),
                        ..
                    } => {
                        hash_field(&mut hash, b"tools:rho:allow");
                        for tool in tools {
                            hash_field(&mut hash, tool.as_str().as_bytes());
                        }
                    }
                    AgentRuntimeSpec::ClaudeCli(config) => {
                        hash_field(&mut hash, b"tools:claude");
                        for tool in config.tools.as_slice() {
                            hash_field(&mut hash, tool.as_bytes());
                        }
                    }
                }
            }
            FingerprintEncoding::LegacyV1 { tools } => match tools {
                ToolPolicy::All => hash_field(&mut hash, b"tools:all"),
                ToolPolicy::Allow(tools) => {
                    hash_field(&mut hash, b"tools:allow");
                    for tool in tools {
                        hash_field(&mut hash, tool.as_str().as_bytes());
                    }
                }
            },
        }
        if let Some(reasoning) = self.reasoning() {
            hash_field(&mut hash, b"reasoning:some");
            hash_field(&mut hash, reasoning.to_string().as_bytes());
        } else {
            hash_field(&mut hash, b"reasoning:none");
        }
        if matches!(encoding, FingerprintEncoding::V2) {
            if matches!(
                self.runtime,
                AgentRuntimeSpec::ClaudeCli(ClaudeAgentConfig {
                    inherit_claude_config: true,
                    ..
                })
            ) {
                hash_field(&mut hash, b"inherit_claude_config:true");
            } else {
                hash_field(&mut hash, b"inherit_claude_config:false");
            }
        }
        AgentFingerprint(hash.finalize().into())
    }
}

#[derive(Clone, Copy, Debug, PartialEq, Eq)]
enum FingerprintEncoding<'a> {
    V2,
    /// Pre-runtime-axis encoding. Only Rho definitions can express it, so the
    /// tool policy arrives as data and no Claude case can occur here.
    LegacyV1 {
        tools: &'a ToolPolicy,
    },
}

fn hash_selection(hash: &mut Sha256, policy: &[u8], selection: &ModelSelection) {
    hash_field(hash, policy);
    hash_field(hash, selection.provider.as_deref().unwrap_or("").as_bytes());
    hash_field(hash, selection.model.as_bytes());
}

fn hash_field(hash: &mut Sha256, value: &[u8]) {
    hash.update((value.len() as u64).to_be_bytes());
    hash.update(value);
}

#[derive(Clone, Copy, Debug, Hash, PartialEq, Eq)]
pub struct AgentFingerprint([u8; 32]);

impl fmt::Display for AgentFingerprint {
    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
        for byte in self.0 {
            write!(formatter, "{byte:02x}")?;
        }
        Ok(())
    }
}