zagens-cli 0.8.2

//! Approval policy helpers — aligned with desktop `web-ui/src/lib/approvalPolicy.ts`.

use anyhow::Result;

use crate::config::save_approval_policy;

/// Config values for `approval_policy` (Settings → 审批策略).
pub const POLICIES: &[&str] = &["on-request", "untrusted", "never", "auto"];

pub fn normalize_policy(value: &str) -> &'static str {
    match value.trim().to_ascii_lowercase().as_str() {
        "auto" => "auto",
        "never" | "deny" | "denied" => "never",
        "untrusted" => "untrusted",
        "suggest" | "suggested" | "on-request" => "on-request",
        _ => "on-request",
    }
}

pub fn policy_display_label(policy: &str) -> &'static str {
    match normalize_policy(policy) {
        "auto" => "Auto",
        "never" => "Never",
        "untrusted" => "Untrusted",
        _ => "OnRequest",
    }
}

pub fn next_policy(current: &str) -> &'static str {
    let current = normalize_policy(current);
    let idx = POLICIES.iter().position(|p| *p == current).unwrap_or(0);
    POLICIES[(idx + 1) % POLICIES.len()]
}

/// Mirror `autoApproveFromPolicy` — only explicit `auto` policy auto-approves tools.
pub fn auto_approve_for_turn(policy: &str, yolo: bool) -> bool {
    yolo || normalize_policy(policy) == "auto"
}

pub fn policy_cyclable(yolo: bool) -> bool {
    !yolo
}

pub fn persist_to_config(policy: &str) -> Result<()> {
    let policy = normalize_policy(policy);
    save_approval_policy(policy)?;
    Ok(())
}

/// Parse a `/approve` argument into a canonical config value.
#[must_use]
pub fn parse_approval_arg(arg: &str) -> Option<&'static str> {
    match arg.trim().to_ascii_lowercase().as_str() {
        "auto" => Some("auto"),
        "never" | "deny" | "denied" => Some("never"),
        "untrusted" => Some("untrusted"),
        "on-request" | "onrequest" | "on_request" | "request" | "suggest" | "suggested" => {
            Some("on-request")
        }
        _ => None,
    }
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn cycles_four_policies_in_order() {
        assert_eq!(next_policy("on-request"), "untrusted");
        assert_eq!(next_policy("untrusted"), "never");
        assert_eq!(next_policy("never"), "auto");
        assert_eq!(next_policy("auto"), "on-request");
    }

    #[test]
    fn only_auto_implies_auto_approve() {
        assert!(!auto_approve_for_turn("on-request", false));
        assert!(!auto_approve_for_turn("untrusted", false));
        assert!(!auto_approve_for_turn("never", false));
        assert!(auto_approve_for_turn("auto", false));
        assert!(auto_approve_for_turn("on-request", true));
    }

    #[test]
    fn labels_match_desktop_settings_keys() {
        assert_eq!(policy_display_label("on-request"), "OnRequest");
        assert_eq!(policy_display_label("untrusted"), "Untrusted");
        assert_eq!(policy_display_label("never"), "Never");
        assert_eq!(policy_display_label("auto"), "Auto");
    }

    #[test]
    fn parse_approval_arg_accepts_aliases() {
        assert_eq!(parse_approval_arg("on-request"), Some("on-request"));
        assert_eq!(parse_approval_arg("OnRequest"), Some("on-request"));
        assert_eq!(parse_approval_arg("deny"), Some("never"));
        assert_eq!(parse_approval_arg("auto"), Some("auto"));
        assert!(parse_approval_arg("bogus").is_none());
    }
}