leviath_core/blueprint/

mod.rs

//! Agent blueprints and stage definitions.
//!
//! A blueprint is the complete definition of an agent type, including its
//! execution stages, model selection, tool access, and context layout.
//! Blueprints are typically defined in `leviath.toml` files and can be
//! shared, installed, and versioned.

use crate::error::ValidationError;
use crate::layout::{ContextLayout, RegionSeed};
use crate::lifecycle::CompactionConfig;
use serde::{Deserialize, Serialize};
use std::collections::{BTreeMap, HashMap};

/// Regions every stage can see, whatever its own `[context.regions]` says.
///
/// The runtime adds the first three when a blueprint declares none, and carries
/// all four visible through a stage's layout swap: the first two hold the typed
/// tool_use/tool_result turns, an answer submitted early has to survive to the
/// end, and the last holds the instructions of the stage being entered. Mirrors
/// `context_setup::apply_layout`, which is where the rule is enforced.
pub const ALWAYS_VISIBLE_REGIONS: [&str; 4] = [
    "conversation",
    "tool_results",
    "final_output",
    crate::layout::STAGE_INSTRUCTIONS_REGION,
];

/// When a run looks for tools again after it started.
///
/// Discovery happens either way: what this decides is whether it happens more
/// than once, and how eagerly. Each value is strictly more eager than the one
/// before it, so a later value does everything an earlier one does.
#[derive(Debug, Clone, Copy, PartialEq, Eq, Default, Serialize, Deserialize)]
#[serde(rename_all = "snake_case")]
pub enum ToolRescan {
    /// The set is fixed when the run starts. The default, and the only value
    /// where an agent cannot grow its own toolchain.
    #[default]
    AtSpawn,
    /// A `.rhai` written into a scanned directory makes the run look again
    /// before its next turn, so the tool is advertised to the model.
    AfterWrites,
    /// As `AfterWrites`, and the run also looks at the scanned directories
    /// themselves before each batch of tool calls it dispatches.
    ///
    /// The difference is *what* it notices. `AfterWrites` is told about a tool
    /// only when this agent writes one with `write_file`, `edit_file` or
    /// `install_tool`. A tool that appears any other way - written by a shell
    /// command, by a script tool, by a sub-agent or fan-out worker sharing this
    /// workdir, or by a person - is invisible to it for the rest of the run.
    /// This value looks at the directories instead of waiting to be told, so it
    /// sees all of those, and sees a tool that was edited or removed too.
    ///
    /// The cost is a `stat` per scanned directory per batch, and a re-scan only
    /// when one of them changed.
    BeforeDispatch,
}

impl ToolRescan {
    /// Whether a run on this setting looks for tools again at all.
    ///
    /// What decides whether the workdir's `tools/` joins the scan set, and
    /// whether the runtime watches the agent for a pending re-scan.
    pub fn rescans(self) -> bool {
        !matches!(self, Self::AtSpawn)
    }

    /// Whether a run on this setting looks again before dispatching a batch.
    pub fn before_dispatch(self) -> bool {
        matches!(self, Self::BeforeDispatch)
    }

    /// The word a manifest writes for this value.
    pub fn wire(self) -> &'static str {
        match self {
            Self::AtSpawn => "at_spawn",
            Self::AfterWrites => "after_writes",
            Self::BeforeDispatch => "before_dispatch",
        }
    }

    /// Read a manifest's word, or `None` for one nothing here names.
    pub fn parse(word: &str) -> Option<Self> {
        Some(match word {
            "at_spawn" => Self::AtSpawn,
            "after_writes" => Self::AfterWrites,
            "before_dispatch" => Self::BeforeDispatch,
            _ => return None,
        })
    }

    /// Every value, in order of eagerness, for a refusal that lists them.
    pub const ALL: [Self; 3] = [Self::AtSpawn, Self::AfterWrites, Self::BeforeDispatch];
}

/// An agent blueprint - the complete definition of an agent type.
///
/// Includes stages, model selection, tools, AND context layout. A blueprint
/// defines everything needed to instantiate and run an agent with specific
/// capabilities and memory structure.
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct Blueprint {
    /// Unique name for this agent type
    pub name: String,

    /// Human-readable description
    pub description: String,

    /// Execution stages (e.g., analyze → implement → review)
    pub stages: Vec<Stage>,

    /// Context window layout defining memory regions
    pub context_layout: ContextLayout,

    /// Context transforms for inter-agent communication
    pub transforms: Vec<ContextTransform>,

    /// Version of this blueprint
    pub version: String,

    /// Configuration for LLM-based compaction
    pub compaction_config: Option<CompactionConfig>,

    /// Maximum depth of the sub-agent tree (default: 3)
    pub max_child_depth: Option<usize>,

    /// Which stage to start from (default: first defined)
    pub entry_stage: Option<String>,

    /// Additional metadata
    pub metadata: HashMap<String, serde_json::Value>,

    /// Security configuration for taint tracking.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub security: Option<crate::taint::SecurityConfig>,

    /// Agent-level override for the batch-tool-calls system-prompt hint. `None`
    /// inherits the global config toggle; a per-stage `batch_tool_hint` overrides
    /// this. See [`crate::taint::resolve_batch_tool_hint`] for the cascade.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub batch_tool_hint: Option<bool>,

    /// Agent-level override for the platform shell hint. `None` inherits the
    /// global config toggle; a per-stage `shell_hint` overrides this. See
    /// [`crate::taint::resolve_shell_hint`] for the cascade.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub shell_hint: Option<bool>,

    /// Agent-level default for the empty-response nudge. `None` inherits the
    /// global config's `[nudge]` section; a per-stage `[stages.<name>.nudge]`
    /// overrides this. See [`resolve_nudge`] for the cascade.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub nudge: Option<NudgeConfig>,

    /// Repetition detection configuration.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub repetition_detection: Option<RepetitionDetectionConfig>,

    /// File tracking configuration.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub file_tracking: Option<FileTrackingConfig>,

    /// Agent-level sandbox configuration for tool execution. Per-stage
    /// `[stages.<name>.sandbox]` overrides this; both cascade through
    /// [`crate::resolve_sandbox`].
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub sandbox: Option<crate::sandbox::ToolSandboxConfig>,

    /// When a run looks for tools again after it started.
    ///
    /// Anything but [`ToolRescan::AtSpawn`] puts the run workdir's `tools/`
    /// directory in the scan set, so a script the agent writes there mid-run
    /// can be found. The directory is the *workdir's*, not the blueprint's:
    /// anything else running in that workdir sees the same tools, and a
    /// sub-agent inherits the workdir verbatim.
    ///
    /// Defaults to [`ToolRescan::AtSpawn`], where the set is fixed when the run
    /// starts and an agent cannot grow its own toolchain.
    #[serde(default)]
    pub tool_rescan: ToolRescan,

    /// Read paths this agent *declares* beyond its workdir - directories a
    /// planner-style agent needs to see, like run archives or design docs.
    /// Declaring is not granting: entries only take effect when the user's
    /// config also grants them (`[security] read_paths`,
    /// `[agent_read_paths.<name>]`, or `allow_blueprint_read_paths = true`),
    /// so an installed manifest cannot widen its own sandbox. Read-only in
    /// every case; `write_file` and `edit_file` stay confined to the workdir.
    /// Semantics live in [`crate::read_paths`].
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub read_paths: Option<ReadPathsConfig>,

    /// The `[safe_commands]` section: tools and shell command prefixes this
    /// agent would like to run without an approval prompt.
    ///
    /// Declaring is not granting, exactly as for [`Self::read_paths`]: entries
    /// take effect only when the user opts in, per agent via
    /// `[agent_safe_commands.<name>] allow_blueprint = true` or globally via
    /// `[security] allow_blueprint_safe_commands`. Otherwise any agent package
    /// could pre-approve its own shell with one TOML line.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub safe_commands: Option<SafeCommandsConfig>,

    /// Agent-level default shape for the run's final output. A per-stage
    /// `[stages.<name>.output]` narrows it, and whoever starts the run can
    /// override it again. See [`crate::output::resolve_output_spec`].
    ///
    /// `None` means this agent declares no shape, which is not the same as
    /// producing no output: a stage may still ask for one.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub output: Option<crate::output::OutputSpec>,

    /// Rows this agent adds to the mime registry, `[mime_types]` in the
    /// manifest: the types its tools produce and take, layered over the
    /// operator's rows for this agent's runs only. Validated at parse; an
    /// empty table is the common case and is not written back.
    #[serde(default, skip_serializing_if = "toml::Table::is_empty")]
    pub mime_types: toml::Table,

    /// Things that must be in place before this agent can run, declared as
    /// `[[dependencies]]` in the manifest: an MCP server, an environment
    /// variable, a program on `PATH`, or a condition a Rhai script checks.
    /// Declared, never granted. The operator is shown what is missing and how
    /// to fix it, and an unmet required dependency fails the spawn before the
    /// first billed inference. See [`Dependency`].
    #[serde(default, skip_serializing_if = "Vec::is_empty")]
    pub dependencies: Vec<Dependency>,
}

/// The `[safe_commands]` section of a manifest.
///
/// Entry syntax is not checked here. What counts as a usable shell prefix is
/// defined by the key parser in the CLI (a program, optionally with the
/// subcommand that narrows it), which this crate does not depend on. A bad
/// entry is a lint finding and is skipped with a warning at spawn, rather than
/// a parse error - the same place the check can be written once instead of
/// twice.
#[derive(Debug, Clone, Default, PartialEq, Eq, Serialize, Deserialize)]
pub struct SafeCommandsConfig {
    /// Tools that need no prompt whatever their arguments.
    #[serde(default)]
    pub tools: Vec<String>,
    /// Shell command prefixes that need no prompt: `"cargo test"`, not
    /// `"cargo test --lib"` and never `"cargo"`.
    #[serde(default)]
    pub shell: Vec<String>,
}

/// The `[read_paths]` section of a manifest: raw declared entries, compiled
/// against the run's workdir and home at spawn.
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct ReadPathsConfig {
    /// Declared entries. Each may be:
    /// - an exact path, granting its subtree: `"~/.leviath/runs"` or
    ///   `"../shared-docs"` (relative to the run's workdir)
    /// - a glob: `"glob:~/.leviath/runs/**"`
    /// - a regex, auto-anchored: `"regex:/data/design-docs/.*"`
    ///
    /// Patterns are written with `/` separators on every OS and match the
    /// symlink-resolved real path.
    #[serde(default)]
    pub allow: Vec<String>,
}

/// One `[[dependencies]]` entry: something that must be in place before an
/// agent can run. Declared in the manifest, never granted - every surface that
/// reports it (`lev validate`, `lev deps`, the spawn gate, the API) shows what
/// is missing and the `remedy` for fixing it.
///
/// The `kind` field selects what must be present and carries its own fields
/// (see [`DependencyKind`]); the optional [`install`](Self::install) block says
/// how `lev deps install` can put it in place, and is never run automatically.
#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
pub struct Dependency {
    /// A short identifier, unique within the blueprint.
    pub name: String,

    /// What must be present, and the fields describing it.
    #[serde(flatten)]
    pub kind: DependencyKind,

    /// Whether an unmet dependency blocks the run. `true` (the default) fails
    /// the spawn; `false` downgrades a miss to a warning the run proceeds past.
    #[serde(default = "default_dependency_required")]
    pub required: bool,

    /// A human sentence telling the user how to satisfy the dependency, shown
    /// wherever a miss is reported.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub remedy: Option<String>,

    /// A one-line note on why the agent needs it.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub description: Option<String>,

    /// How `lev deps install` can put this dependency in place. Optional and
    /// never run automatically: installing runs commands or writes config on
    /// the user's machine and always asks first. See [`DependencyInstall`].
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub install: Option<DependencyInstall>,
}

/// The default for [`Dependency::required`]: a declared dependency blocks the
/// run unless the manifest says otherwise.
fn default_dependency_required() -> bool {
    true
}

/// What a [`Dependency`] requires, selected by the manifest's `kind` field.
#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
#[serde(tag = "kind", rename_all = "snake_case")]
pub enum DependencyKind {
    /// An MCP server that must be configured in the user's config, plus any
    /// environment variables or secrets it needs. The check confirms the named
    /// server exists and every `env` var is set and non-empty.
    McpServer {
        /// The server name that must appear in the user's `[[mcp_servers]]`.
        server: String,
        /// Environment variables / secrets the server needs. Values are
        /// prompted for at install, never stored in the blueprint.
        #[serde(default, skip_serializing_if = "Vec::is_empty")]
        env: Vec<String>,
    },
    /// An environment variable that must be set and non-empty.
    Env {
        /// The variable name.
        var: String,
    },
    /// A program that must resolve on `PATH`.
    Binary {
        /// The program name, e.g. `blender`.
        command: String,
    },
    /// A condition a Rhai script decides. The `check` script returns
    /// `#{ ok: bool, remedy: string }`; the optional installer lives in
    /// [`DependencyInstall::script`].
    Script {
        /// Path to the Rhai check script, relative to the blueprint directory.
        check: String,
    },
}

impl DependencyKind {
    /// The manifest `kind` string for this variant (`"mcp_server"`, `"env"`,
    /// `"binary"`, `"script"`), matching the serialized tag.
    pub fn tag(&self) -> &'static str {
        match self {
            DependencyKind::McpServer { .. } => "mcp_server",
            DependencyKind::Env { .. } => "env",
            DependencyKind::Binary { .. } => "binary",
            DependencyKind::Script { .. } => "script",
        }
    }
}

/// How a [`Dependency`] can be installed by `lev deps install`.
///
/// Every field is optional; a dependency may declare any combination. Nothing
/// here runs without an explicit `lev deps install` and a confirmation, because
/// each option changes the user's machine: running a command, executing a
/// script, or writing an MCP server into their config.
#[derive(Debug, Clone, Default, PartialEq, Eq, Serialize, Deserialize)]
pub struct DependencyInstall {
    /// A shell command that installs the dependency on any platform, e.g.
    /// `"pip install trimesh"`. Run only after the user confirms.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub command: Option<String>,

    /// Per-OS shell commands, keyed by `"macos"`, `"linux"` or `"windows"`,
    /// preferred over [`command`](Self::command) on a matching host.
    #[serde(default, skip_serializing_if = "BTreeMap::is_empty")]
    pub commands: BTreeMap<String, String>,

    /// A Rhai install script (relative to the blueprint), run with the script
    /// I/O surface and gated exactly like a script tool. For a `script`
    /// dependency this is its installer.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub script: Option<String>,

    /// For an `mcp_server` dependency: the non-user-specific server settings the
    /// installer writes into the user's config. Secrets are never placed here -
    /// they are named in the dependency's `env` and prompted for securely.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub server: Option<McpServerTemplate>,
}

/// The non-secret settings for an MCP server that a blueprint can ship so
/// `lev deps install` can write it into the user's config. Mirrors the
/// installable half of the CLI's MCP server config; the user-specific secrets
/// (header and env values) are prompted for and stored separately.
#[derive(Debug, Clone, Default, PartialEq, Eq, Serialize, Deserialize)]
pub struct McpServerTemplate {
    /// `"stdio"` or `"http"`. Inferred from `command`/`url` when omitted.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub transport: Option<String>,
    /// The program to launch for a stdio server.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub command: Option<String>,
    /// The endpoint for an http server.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub url: Option<String>,
    /// Arguments passed to `command`.
    #[serde(default, skip_serializing_if = "Vec::is_empty")]
    pub args: Vec<String>,
    /// Non-secret headers, for an http server. A value may reference a secret
    /// with `${VAR}`, where `VAR` is named in the dependency's `env`.
    #[serde(default, skip_serializing_if = "BTreeMap::is_empty")]
    pub headers: BTreeMap<String, String>,
    /// Environment for a stdio server's child process. A value may reference a
    /// secret with `${VAR}` (expanded from the environment at connect time, so
    /// the secret stays out of the config file), where `VAR` is named in the
    /// dependency's `env`.
    #[serde(default, skip_serializing_if = "BTreeMap::is_empty")]
    pub env: BTreeMap<String, String>,
}

impl Blueprint {
    /// Create a new blueprint with the specified configuration.
    pub fn new(
        name: String,
        description: String,
        stages: Vec<Stage>,
        context_layout: ContextLayout,
    ) -> Self {
        Self {
            name,
            description,
            stages,
            context_layout,
            transforms: Vec::new(),
            version: "0.1.0".to_string(),
            compaction_config: None,
            max_child_depth: None,
            entry_stage: None,
            metadata: HashMap::new(),
            security: None,
            batch_tool_hint: None,
            shell_hint: None,
            nudge: None,
            repetition_detection: None,
            file_tracking: None,
            sandbox: None,
            tool_rescan: ToolRescan::AtSpawn,
            read_paths: None,
            safe_commands: None,
            output: None,
            mime_types: toml::Table::new(),
            dependencies: Vec::new(),
        }
    }

    /// Whether any region is seeded from the caller's `task`.
    ///
    /// The blueprint's answer to "do you take a task?", which is a different
    /// question from whether one was supplied. An agent driven by named regions
    /// (`reviewer` takes `--diff` and `--criteria`) answers no, and handing it a
    /// task would put that text nowhere at all - so both the CLI, before it asks
    /// for one, and the daemon, before it spawns, ask this first.
    pub fn accepts_task(&self) -> bool {
        self.context_layout
            .regions
            .iter()
            .any(|r| matches!(&r.seed, Some(RegionSeed::CallerInput { name }) if name == "task"))
    }

    /// Whether a run cannot start without a task: the region seeded from it is
    /// `required`. An optional task region is what lets a blueprint driven by
    /// its other inputs (`--diff`, an attachment) run with no task at all, and
    /// still take one from a fan-out that spawns it as its own worker.
    pub fn requires_task(&self) -> bool {
        self.context_layout.regions.iter().any(|r| {
            r.required
                && matches!(&r.seed, Some(RegionSeed::CallerInput { name }) if name == "task")
        })
    }

    /// The caller input keys this blueprint does read, in declaration order.
    ///
    /// The mime type patterns `stage` takes as parts: its own
    /// `[input] accepts` when it declares one, else the union of `accepts`
    /// across the regions it sees. Text is always taken and never listed, so
    /// an empty answer means "text only, unless a region takes anything".
    /// A visible region with no `accepts` takes anything, and is reported as
    /// `*/*`.
    pub fn stage_inputs(&self, stage: &Stage) -> Vec<String> {
        if !stage.input_accepts.is_empty() {
            return stage.input_accepts.clone();
        }
        let layout = stage
            .context_layout
            .as_ref()
            .unwrap_or(&self.context_layout);
        let mut out: Vec<String> = Vec::new();
        for region in &layout.regions {
            if stage.context_hide.contains(&region.name) {
                continue;
            }
            let patterns: Vec<String> = match region.accepts.is_empty() {
                true => vec!["*/*".to_string()],
                false => region.accepts.clone(),
            };
            for p in patterns {
                if !p.starts_with("text/") && !out.contains(&p) {
                    out.push(p);
                }
            }
        }
        out
    }

    /// Used to turn "that agent takes no task" into a message naming what it
    /// takes instead, which is the difference between a dead end and a fix.
    pub fn caller_inputs(&self) -> Vec<&str> {
        self.context_layout
            .regions
            .iter()
            .filter_map(|r| match &r.seed {
                Some(RegionSeed::CallerInput { name }) => Some(name.as_str()),
                _ => None,
            })
            .collect()
    }

    /// Why a task cannot be given to this blueprint, phrased for the user.
    ///
    /// One message rather than two, because the CLI refuses before it asks for a
    /// task and the daemon refuses before it spawns, and a user who hit one and
    /// then the other should not be told two different things.
    pub fn task_refusal(&self) -> String {
        let inputs = self.caller_inputs();
        let takes = match inputs.is_empty() {
            true => "it takes no caller input at all".to_string(),
            false => format!("it takes: {}", inputs.join(", ")),
        };
        format!(
            "agent '{}' was given a task but declares no region to put it in, so the task \
             would be ignored - {takes}. Add a region seeded from the task, for example:\n\
             [context.regions]\ntask = {{ kind = \"pinned\", max_tokens = 2000, \
             required = true, seed = \"task\" }}",
            self.name,
        )
    }

    /// Agent-level tool permissions, keyed by tool name.
    ///
    /// The manifest parser records a top-level `[tool_permissions]` block as
    /// `tool_perm:<tool>` → policy-string entries in [`Self::metadata`]. This
    /// projects them back into a tool-keyed map for the runtime's agent-level
    /// permission layer. Non-`tool_perm:` keys and non-string values are ignored.
    pub fn agent_tool_permissions(&self) -> HashMap<String, String> {
        self.metadata
            .iter()
            .filter_map(|(k, v)| {
                Some((
                    k.strip_prefix("tool_perm:")?.to_string(),
                    v.as_str()?.to_string(),
                ))
            })
            .collect()
    }

    /// Add context transforms to this blueprint.
    pub fn with_transforms(mut self, transforms: Vec<ContextTransform>) -> Self {
        self.transforms = transforms;
        self
    }

    /// Set the version of this blueprint.
    pub fn with_version(mut self, version: String) -> Self {
        self.version = version;
        self
    }

    /// Validate that the blueprint is well-formed.
    pub fn validate(&self) -> std::result::Result<(), ValidationError> {
        // Validate context layout
        self.context_layout.validate()?;

        // Check that all stages have valid configurations
        for stage in &self.stages {
            stage.validate()?;
        }

        // Validate transforms reference real regions
        for transform in &self.transforms {
            transform.validate(&self.context_layout)?;
        }

        // Graph validation
        self.validate_graph()?;

        self.validate_region_references()?;

        self.validate_dependencies()?;

        Ok(())
    }

    /// Check every `[[dependencies]]` entry is well-formed. This validates the
    /// declaration only - names are unique and non-empty, each kind's fields are
    /// present, and an `install` block is shaped for its kind. Whether the
    /// dependency is actually satisfied (the server exists, the var is set, the
    /// binary is on `PATH`) is checked at spawn and by `lev deps check`, which
    /// see the machine this crate does not touch.
    fn validate_dependencies(&self) -> std::result::Result<(), ValidationError> {
        let mut seen = std::collections::HashSet::new();
        for dep in &self.dependencies {
            let name = dep.name.trim();
            if name.is_empty() {
                return Err(ValidationError::Dependency {
                    name: dep.name.clone(),
                    message: "a dependency needs a non-empty name".to_string(),
                });
            }
            if !seen.insert(name) {
                return Err(ValidationError::Dependency {
                    name: name.to_string(),
                    message: "two dependencies share this name".to_string(),
                });
            }
            let require = |field: &str, value: &str| -> std::result::Result<(), ValidationError> {
                if value.trim().is_empty() {
                    return Err(ValidationError::Dependency {
                        name: name.to_string(),
                        message: format!(
                            "a '{}' dependency needs a non-empty '{field}'",
                            dep.kind.tag()
                        ),
                    });
                }
                Ok(())
            };
            match &dep.kind {
                DependencyKind::McpServer { server, .. } => require("server", server)?,
                DependencyKind::Env { var } => require("var", var)?,
                DependencyKind::Binary { command } => require("command", command)?,
                DependencyKind::Script { check } => require("check", check)?,
            }
            if let Some(install) = &dep.install {
                if install.server.is_some() && !matches!(dep.kind, DependencyKind::McpServer { .. })
                {
                    return Err(ValidationError::Dependency {
                        name: name.to_string(),
                        message: "install.server is only valid for a 'mcp_server' dependency"
                            .to_string(),
                    });
                }
                if let Some(transport) =
                    install.server.as_ref().and_then(|s| s.transport.as_deref())
                    && !matches!(transport, "stdio" | "http")
                {
                    return Err(ValidationError::Dependency {
                        name: name.to_string(),
                        message: format!(
                            "install.server.transport must be \"stdio\" or \"http\", got \"{transport}\""
                        ),
                    });
                }
                for os in install.commands.keys() {
                    if !matches!(os.as_str(), "macos" | "linux" | "windows") {
                        return Err(ValidationError::Dependency {
                            name: name.to_string(),
                            message: format!(
                                "install.commands key '{os}' must be \"macos\", \"linux\" or \"windows\""
                            ),
                        });
                    }
                }
            }
        }
        Ok(())
    }

    /// Every region a stage can name, anywhere in this blueprint.
    ///
    /// The union of the global layout, every stage's own layout, and the three
    /// the runtime adds if nobody declared them. It is a union rather than the
    /// per-stage set on purpose: a stage that omits a region from its
    /// `[context.regions]` hides it, it does not destroy it, so naming a region
    /// another stage declared is legitimate. Only a name that exists nowhere is
    /// a typo.
    fn known_region_names(&self) -> std::collections::HashSet<&str> {
        let mut names: std::collections::HashSet<&str> = self
            .context_layout
            .regions
            .iter()
            .map(|r| r.name.as_str())
            .collect();
        for stage in &self.stages {
            if let Some(layout) = &stage.context_layout {
                names.extend(layout.regions.iter().map(|r| r.name.as_str()));
            }
        }
        // Added by `setup_context_window` when a blueprint does not declare
        // them, so they are always addressable.
        names.extend(ALWAYS_VISIBLE_REGIONS);
        names
    }

    /// The regions `stage` can actually see while it runs.
    ///
    /// Its own `[context.regions]` when it declares one, the blueprint's
    /// otherwise, plus the regions the runtime carries visible whatever a stage
    /// says. Narrower than `known_region_names`, which asks only whether a name
    /// exists somewhere - the difference being
    /// that a region another stage declares exists, and is still not readable
    /// from here.
    ///
    /// Public so the runtime can size each region's percentage budget against
    /// the smallest window among the stages that actually see it - a region a
    /// narrow-window stage never reads must not be shrunk to fit that stage.
    pub fn regions_visible_to<'a>(
        &'a self,
        stage: &'a Stage,
    ) -> std::collections::HashSet<&'a str> {
        let layout = stage
            .context_layout
            .as_ref()
            .unwrap_or(&self.context_layout);
        let mut names: std::collections::HashSet<&str> =
            layout.regions.iter().map(|r| r.name.as_str()).collect();
        names.extend(ALWAYS_VISIBLE_REGIONS);
        // `validate_region_references` has already refused a hide list that
        // names an always-visible region, so nothing here can remove one.
        for hidden in &stage.context_hide {
            names.remove(hidden.as_str());
        }
        names
    }

    /// Refuse a region name that exists nowhere in the blueprint.
    ///
    /// Routing and gates are addressed by name, and a name that matches
    /// nothing, accepted in silence, sends the routed tool result to the
    /// default region and leaves the gate holding nothing back - both looking
    /// exactly like a working config. A gate that silently never fires is the
    /// expensive case: it reads as the model behaving well.
    fn validate_region_references(&self) -> std::result::Result<(), ValidationError> {
        let known = self.known_region_names();
        let checklists: std::collections::HashSet<&str> = self
            .context_layout
            .regions
            .iter()
            .chain(
                self.stages
                    .iter()
                    .filter_map(|s| s.context_layout.as_ref())
                    .flat_map(|l| l.regions.iter()),
            )
            .filter(|r| matches!(r.kind, crate::RegionKind::Checklist))
            .map(|r| r.name.as_str())
            .collect();

        for stage in &self.stages {
            let bad = |message: String| ValidationError::Stage {
                stage: stage.name.clone(),
                message,
            };

            // A hidden region has to be one the stage would otherwise carry:
            // a name that matches nothing is a typo, and a typo here is the
            // silent kind (the large region stays in every prompt and the
            // bill says so a month later). The always-visible four cannot be
            // hidden at all - the model's own turns live there.
            for hidden in &stage.context_hide {
                if ALWAYS_VISIBLE_REGIONS.contains(&hidden.as_str()) {
                    return Err(bad(format!(
                        "context.hide names '{hidden}', which every stage carries and cannot hide"
                    )));
                }
                if !known.contains(hidden.as_str()) {
                    return Err(bad(format!(
                        "context.hide names region '{hidden}', which no layout in this \
                         blueprint declares"
                    )));
                }
            }

            // `reset` empties a region on entry. `conversation` and the other
            // always-visible regions can be reset (that is the point - a stage
            // starting on a clean conversation), but a name no layout declares
            // is the same silent typo `hide` guards against.
            for name in &stage.context_reset {
                if !known.contains(name.as_str()) {
                    return Err(bad(format!(
                        "context.reset names region '{name}', which no layout in this \
                         blueprint declares"
                    )));
                }
            }

            if let Some(routing) = &stage.tool_result_routing {
                // Routing is checked against what *this* stage can see, not
                // against every name in the blueprint. A stage that omits a
                // region from its own `[context.regions]` hides it, so a result
                // routed there is written somewhere the stage cannot read - and
                // the pointer left in `conversation` tells the model to go read
                // it. There is no reading of a blueprint where that is
                // intended.
                let visible = self.regions_visible_to(stage);
                let dead_drop = |key: &str, region: &str| ValidationError::Stage {
                    stage: stage.name.clone(),
                    message: format!(
                        "tool_routing.{key} sends results to region '{region}', \
                             which this stage's context does not include, so it \
                             could not read them back. Add '{region}' to \
                             [stages.{}.context.regions], or route somewhere the \
                             stage can see.",
                        stage.name
                    ),
                };
                if !visible.contains(routing.default_region.as_str()) {
                    return Err(dead_drop("default_region", &routing.default_region));
                }
                for (tool, region) in &routing.tool_overrides {
                    if !visible.contains(region.as_str()) {
                        return Err(dead_drop(&format!("overrides.{tool}"), region));
                    }
                }
            }

            // `output_routing` sends the model's produced parts to a region a
            // *later* stage usually reads, so unlike `tool_routing` above it is
            // checked against every region the blueprint declares, not only the
            // ones this stage can see. A target no layout declares is still a
            // dead drop - the part would land nowhere - so it is refused.
            for (pattern, region) in &stage.output_routing {
                if !known.contains(region.as_str()) {
                    return Err(ValidationError::Stage {
                        stage: stage.name.clone(),
                        message: format!(
                            "output_routing.\"{pattern}\" sends produced parts to region \
                             '{region}', which no layout in this blueprint declares. Add it to a \
                             [context.regions] table, or route to a region that exists."
                        ),
                    });
                }
            }

            for edge in stage.transitions.iter().flat_map(|t| t.values()) {
                let Some(gate) = &edge.gate else { continue };
                for (key, region) in [
                    ("region", gate.region.as_ref()),
                    (
                        "require_region_updated",
                        gate.require_region_updated.as_ref(),
                    ),
                    ("require_no_open_items", gate.require_no_open_items.as_ref()),
                    (
                        "require_region_entries",
                        gate.require_region_entries.as_ref().map(|c| &c.region),
                    ),
                ] {
                    let Some(region) = region else { continue };
                    if !known.contains(region.as_str()) {
                        return Err(bad(format!(
                            "transition to '{}': gate.{key} names region \
                             '{region}', which no stage declares",
                            edge.target
                        )));
                    }
                }
                // A checklist gate counts open items, which only a checklist
                // region has. Pointed at any other kind it can only ever read
                // zero, so it would pass on the first attempt every time.
                if let Some(region) = &gate.require_no_open_items
                    && !checklists.contains(region.as_str())
                {
                    return Err(bad(format!(
                        "transition to '{}': gate.require_no_open_items names \
                         region '{region}', which is not a checklist region \
                         (set kind = \"checklist\" on it)",
                        edge.target
                    )));
                }
            }
        }
        Ok(())
    }

    /// Validate stage graph constraints.
    fn validate_graph(&self) -> std::result::Result<(), ValidationError> {
        let stage_names: std::collections::HashSet<&str> =
            self.stages.iter().map(|s| s.name.as_str()).collect();

        // Entry stage must exist if set
        if let Some(entry) = &self.entry_stage
            && !stage_names.contains(entry.as_str())
        {
            return Err(ValidationError::Graph(format!(
                "entry_stage '{}' does not match any defined stage",
                entry
            )));
        }

        // Fan-out stages reference a worker source + optional merge stage. These
        // are checked even for otherwise-linear blueprints (before the early
        // return below), since `worker_stage`/`merge_stage` name local stages.
        // `worker_agent`/`worker_query` are environment-dependent (resolved
        // against installed agents at run time), so they are not checked here.
        for stage in &self.stages {
            if let StageMode::FanOut { config } = &stage.mode {
                let sources = [
                    config.worker_agent.is_some(),
                    config.worker_stage.is_some(),
                    config.worker_query.is_some(),
                ]
                .iter()
                .filter(|&&set| set)
                .count();
                if sources != 1 {
                    return Err(ValidationError::Stage {
                        stage: stage.name.clone(),
                        message: "fan_out stage must set exactly one of worker_agent, \
                                  worker_stage, or worker_query"
                            .to_string(),
                    });
                }
                if let Some(ws) = &config.worker_stage {
                    match self.stages.iter().find(|s| &s.name == ws) {
                        None => {
                            return Err(ValidationError::Stage {
                                stage: stage.name.clone(),
                                message: format!("fan_out worker_stage '{}' does not exist", ws),
                            });
                        }
                        Some(target) if !target.allow_as_worker => {
                            return Err(ValidationError::Stage {
                                stage: stage.name.clone(),
                                message: format!(
                                    "fan_out worker_stage '{}' must set allow_as_worker = true",
                                    ws
                                ),
                            });
                        }
                        Some(_) => {}
                    }
                }
                if let Some(ms) = &config.merge_stage
                    && !stage_names.contains(ms.as_str())
                {
                    return Err(ValidationError::Stage {
                        stage: stage.name.clone(),
                        message: format!("fan_out merge_stage '{}' does not exist", ms),
                    });
                }
            }
        }

        let has_any_transitions = self.stages.iter().any(|s| s.transitions.is_some());
        if !has_any_transitions {
            // Pure linear mode - no graph validation needed
            return Ok(());
        }

        // All transition targets must exist
        for stage in &self.stages {
            if let Some(ref transitions) = stage.transitions {
                for (target_name, edge) in transitions {
                    if !stage_names.contains(target_name.as_str()) {
                        return Err(ValidationError::Transition {
                            from: stage.name.clone(),
                            to: target_name.clone(),
                            message: "target stage does not exist".to_string(),
                        });
                    }
                    // A `stuck` edge with no threshold could never fire. Caught
                    // here as well as in the manifest parser, so blueprints built
                    // programmatically (API / `lev validate`) are held to it too.
                    if edge.condition == TransitionCondition::Stuck
                        && !edge.stuck.is_some_and(|c| c.is_armed())
                    {
                        return Err(ValidationError::Transition {
                            from: stage.name.clone(),
                            to: target_name.clone(),
                            message: "condition = \"stuck\" requires at least one \
                                      stuck_after_* threshold (the edge could never fire)"
                                .to_string(),
                        });
                    }
                }

                // A `require_modifications` gate on a stage that advertises no
                // file-modifying tool can never be satisfied - it would just
                // burn the stage's re-run budget every time.
                for (target_name, edge) in transitions {
                    let Some(gate) = &edge.gate else { continue };
                    if !gate.require_modifications {
                        continue;
                    }
                    let can_modify = stage.grants_all_builtins()
                        || stage.available_tools.iter().any(|t| {
                            MODIFYING_TOOLS.contains(&t.as_str())
                                || gate.tools.iter().any(|extra| extra == t)
                        });
                    if !can_modify {
                        return Err(ValidationError::Transition {
                            from: stage.name.clone(),
                            to: target_name.clone(),
                            message: "gate requires modifications, but the stage has no \
                                      file-modifying tool in available_tools"
                                .to_string(),
                        });
                    }
                }

                // Self-loop safety: stages that transition to themselves need max_revisits
                if transitions.contains_key(&stage.name) && stage.max_revisits.is_none() {
                    return Err(ValidationError::Stage {
                        stage: stage.name.clone(),
                        message: "self-loop transition requires max_revisits".to_string(),
                    });
                }
            }
        }

        // At least one terminal path must exist (a stage with no outgoing transitions,
        // or with only conditional transitions that may not fire)
        let entry = self.resolve_entry_stage_name();
        let has_terminal = self.has_terminal_path(&entry, &mut std::collections::HashSet::new());
        if !has_terminal {
            return Err(ValidationError::Graph(
                "no terminal path exists from entry stage - agent would never complete".to_string(),
            ));
        }

        Ok(())
    }

    /// Resolve the entry stage name.
    pub fn resolve_entry_stage_name(&self) -> String {
        self.entry_stage.clone().unwrap_or_else(|| {
            self.stages
                .first()
                .map(|s| s.name.clone())
                .unwrap_or_default()
        })
    }

    /// Check if there is a terminal path reachable from `stage_name`.
    fn has_terminal_path(
        &self,
        stage_name: &str,
        visited: &mut std::collections::HashSet<String>,
    ) -> bool {
        if visited.contains(stage_name) {
            return false;
        }
        visited.insert(stage_name.to_string());

        let stage = self.stages.iter().find(|s| s.name == stage_name);
        let stage = match stage {
            Some(s) => s,
            // Unreachable via this function's only call site (`validate_graph`,
            // below): it rejects any transition target that doesn't match a
            // real stage name *before* ever calling `has_terminal_path`, and
            // `has_terminal_path` is private, so no other caller can pass in
            // an unvalidated stage name.
            None => return false,
        };

        // A fan-out stage with a merge stage hands off to it after workers
        // complete, so its terminal path runs through the merge stage.
        if let StageMode::FanOut {
            config:
                FanOutConfig {
                    merge_stage: Some(ms),
                    ..
                },
        } = &stage.mode
        {
            return self.has_terminal_path(ms, visited);
        }

        match &stage.transitions {
            None => {
                // Linear mode: check if there's a next stage by index
                let idx = self
                    .stages
                    .iter()
                    .position(|s| s.name == stage_name)
                    .unwrap_or(0);
                if idx + 1 >= self.stages.len() {
                    return true; // terminal
                }
                self.has_terminal_path(&self.stages[idx + 1].name, visited)
            }
            Some(transitions) => {
                if transitions.is_empty() {
                    return true; // terminal stage
                }
                // Check if any transition leads to a terminal
                for target in transitions.keys() {
                    if self.has_terminal_path(target, visited) {
                        return true;
                    }
                }
                // No target reaches a terminal stage. Exhausting a stage's
                // edges is not a terminal path: running out of edges mid-graph
                // is a run *error* (StageResolution::DeadEnd in the runtime),
                // not a completion, so certifying it here would validate
                // blueprints that can never finish successfully.
                false
            }
        }
    }

    /// Find a stage by name.
    pub fn find_stage(&self, name: &str) -> Option<&Stage> {
        self.stages.iter().find(|s| s.name == name)
    }
}

// Sections of the former single-file blueprint, one per concept. Glob
// re-exported so every existing `blueprint::Stage` path keeps working and the
// split stays a pure move.
mod model;
pub use model::*;
mod stage;
pub use stage::*;
mod transition;
pub use transition::*;
mod tool_groups;
pub use tool_groups::*;

#[cfg(test)]
mod tests {
    use super::*;
    use crate::layout::ContextLayout;
    use crate::layout::RegionDefinition;
    use crate::region::RegionKind;

    /// Build a blueprint from a manifest, so these read as the TOML an author
    /// would actually write rather than as hand-assembled structs.
    fn bp_with_regions(regions_toml: &str) -> Blueprint {
        crate::manifest::parse_manifest(&format!(
            r#"
[agent]
name = "asked"

[stages.main]
mode = "autonomous"
model = {{ provider = "anthropic", model = "m" }}

[context.regions]
{regions_toml}
"#
        ))
        .expect("fixture parses")
    }

    #[test]
    fn a_blueprint_accepts_a_task_when_some_region_seeds_from_it() {
        // Both spellings: the explicit seed and the region named `task`, which
        // gets the same seed implicitly.
        assert!(
            bp_with_regions(r#"brief = { kind = "pinned", max_tokens = 10, seed = "task" }"#)
                .accepts_task()
        );
        assert!(bp_with_regions(r#"task = { kind = "pinned", max_tokens = 10 }"#).accepts_task());
    }

    /// `requires_task` is the `required` flag on the task region, and nothing
    /// else: an optional task region takes one without insisting.
    #[test]
    fn a_blueprint_requires_a_task_only_when_its_task_region_is_required() {
        assert!(
            bp_with_regions(r#"task = { kind = "pinned", max_tokens = 10, required = true }"#)
                .requires_task()
        );
        let optional = bp_with_regions(
            r#"task = { kind = "pinned", max_tokens = 10 }
diff = { kind = "pinned", max_tokens = 10, seed = "diff", required = true }"#,
        );
        assert!(optional.accepts_task());
        assert!(!optional.requires_task());
    }

    #[test]
    fn a_blueprint_taking_other_caller_input_does_not_accept_a_task() {
        let bp = bp_with_regions(r#"diff = { kind = "pinned", max_tokens = 10, seed = "diff" }"#);
        assert!(!bp.accepts_task());
        assert_eq!(bp.caller_inputs(), ["diff"]);
        assert!(!bp.requires_task());
    }

    #[test]
    fn the_refusal_names_what_the_agent_takes_instead() {
        let bp = bp_with_regions(
            r#"diff = { kind = "pinned", max_tokens = 10, seed = "diff" }
criteria = { kind = "pinned", max_tokens = 10, seed = "criteria" }"#,
        );
        let msg = bp.task_refusal();
        assert!(msg.contains("agent 'asked'"), "{msg}");
        assert!(msg.contains("it takes: diff, criteria"), "{msg}");
    }

    #[test]
    fn the_refusal_says_so_when_the_agent_takes_nothing() {
        let bp = bp_with_regions(r#"notes = { kind = "pinned", max_tokens = 10 }"#);
        assert!(bp.caller_inputs().is_empty());
        // Bound rather than called inside the assert message: a message
        // expression only runs when the assert fails, so it would be an
        // uncovered region on every green run.
        let msg = bp.task_refusal();
        assert!(msg.contains("it takes no caller input at all"), "{msg}");
    }

    #[test]
    fn resolve_nudge_defaults_when_nothing_is_configured() {
        // No config anywhere: on for a normal stage, off for a reviewed one,
        // with the built-in cap and text.
        let normal = resolve_nudge(None, None, None, false);
        assert!(normal.enabled);
        assert_eq!(normal.max, DEFAULT_MAX_NUDGES);
        assert_eq!(normal.text, DEFAULT_NUDGE_TEXT);
        let reviewed = resolve_nudge(None, None, None, true);
        assert!(!reviewed.enabled);
        // The other fields don't depend on review status.
        assert_eq!(reviewed.max, DEFAULT_MAX_NUDGES);
        assert_eq!(reviewed.text, DEFAULT_NUDGE_TEXT);
    }

    #[test]
    fn resolve_nudge_cascades_each_field_independently() {
        let global = NudgeConfig {
            enabled: Some(true),
            max: Some(10),
            text: Some("global".to_string()),
        };
        let agent = NudgeConfig {
            max: Some(2),
            ..Default::default()
        };
        let stage = NudgeConfig {
            text: Some("stage".to_string()),
            ..Default::default()
        };
        let resolved = resolve_nudge(Some(&global), Some(&agent), Some(&stage), false);
        // enabled from global, max from agent, text from stage.
        assert!(resolved.enabled);
        assert_eq!(resolved.max, 2);
        assert_eq!(resolved.text, "stage");
        // The stage level wins over both when it sets a field.
        let stage_all = NudgeConfig {
            enabled: Some(false),
            max: Some(0),
            text: Some("s".to_string()),
        };
        let resolved = resolve_nudge(Some(&global), Some(&agent), Some(&stage_all), false);
        assert_eq!(
            resolved,
            ResolvedNudge {
                enabled: false,
                max: 0,
                text: "s".to_string()
            }
        );
    }

    #[test]
    fn resolve_nudge_explicit_enabled_overrides_review_suppression() {
        // A reviewed stage is only *implicitly* exempt: any level that sets
        // `enabled` speaks for itself, in either direction.
        let on = NudgeConfig {
            enabled: Some(true),
            ..Default::default()
        };
        assert!(resolve_nudge(None, None, Some(&on), true).enabled);
        assert!(resolve_nudge(None, Some(&on), None, true).enabled);
        assert!(resolve_nudge(Some(&on), None, None, true).enabled);
        let off = NudgeConfig {
            enabled: Some(false),
            ..Default::default()
        };
        assert!(!resolve_nudge(None, None, Some(&off), false).enabled);
    }

    #[test]
    fn test_blueprint_creation() {
        let regions = vec![RegionDefinition::new(
            "test".to_string(),
            RegionKind::Pinned,
            5000,
        )];
        let layout = ContextLayout::new(regions, 10000);

        let stages = vec![Stage::new(
            "analyze".to_string(),
            ModelConfig::new("anthropic".to_string(), "claude-sonnet-4-6".to_string()),
        )];

        let blueprint = Blueprint::new(
            "test-agent".to_string(),
            "A test agent".to_string(),
            stages,
            layout,
        );

        assert_eq!(blueprint.name, "test-agent");
        assert_eq!(blueprint.stages.len(), 1);
    }

    #[test]
    fn test_blueprint_with_transforms_version() {
        let stages = vec![Stage::new("plan".to_string(), make_model())];
        let bp = Blueprint::new("t".into(), "d".into(), stages, make_layout())
            .with_transforms(vec![ContextTransform {
                from_blueprint: "a".to_string(),
                to_blueprint: "b".to_string(),
                mappings: vec![],
            }])
            .with_version("2.0.0".to_string());

        assert_eq!(bp.transforms.len(), 1);
        assert_eq!(bp.version, "2.0.0");
    }

    #[test]
    fn agent_tool_permissions_projects_only_string_tool_perm_entries() {
        let stages = vec![Stage::new("plan".to_string(), make_model())];
        let mut bp = Blueprint::new("t".into(), "d".into(), stages, make_layout());
        // A well-formed tool_perm string entry - included.
        bp.metadata.insert(
            "tool_perm:bash".to_string(),
            serde_json::Value::String("deny".to_string()),
        );
        // A non-`tool_perm:` key - skipped (strip_prefix returns None).
        bp.metadata
            .insert("title".to_string(), serde_json::Value::String("x".into()));
        // A tool_perm key whose value isn't a string - skipped (as_str is None).
        bp.metadata
            .insert("tool_perm:weird".to_string(), serde_json::Value::Bool(true));

        let perms = bp.agent_tool_permissions();
        assert_eq!(perms.get("bash").map(String::as_str), Some("deny"));
        assert!(!perms.contains_key("title"));
        assert!(!perms.contains_key("weird"));
        assert_eq!(perms.len(), 1);
    }

    #[test]
    fn test_blueprint_validate_runs_transform_validation() {
        // A transform whose mapping targets a real region - validate() must
        // reach ContextTransform::validate() and succeed.
        let stages = vec![Stage::new("plan".to_string(), make_model())];
        let mut bp = Blueprint::new("t".into(), "d".into(), stages, make_layout());
        bp.transforms.push(ContextTransform {
            from_blueprint: "a".to_string(),
            to_blueprint: "b".to_string(),
            mappings: vec![RegionMapping {
                from_region: "test".to_string(),
                to_region: "test".to_string(),
                transform: None,
            }],
        });
        assert!(bp.validate().is_ok());
    }

    #[test]
    fn test_blueprint_validate_fails_on_transform_targeting_unknown_region() {
        let stages = vec![Stage::new("plan".to_string(), make_model())];
        let mut bp = Blueprint::new("t".into(), "d".into(), stages, make_layout());
        bp.transforms.push(ContextTransform {
            from_blueprint: "a".to_string(),
            to_blueprint: "b".to_string(),
            mappings: vec![RegionMapping {
                from_region: "test".to_string(),
                to_region: "nonexistent".to_string(),
                transform: None,
            }],
        });
        let err = bp.validate().unwrap_err();
        assert_eq!(
            err,
            ValidationError::Region {
                region: "nonexistent".to_string(),
                message: "transform target region not found in layout".to_string(),
            }
        );
    }

    #[test]
    fn test_mixed_linear_and_graph_mode_terminal_path() {
        // "plan" has explicit transitions (triggers graph-mode validation),
        // but "impl" and "review" have none - they must fall back to
        // linear (next-by-index) terminal-path resolution.
        let mut plan = Stage::new("plan".to_string(), make_model());
        let impl_stage = Stage::new("impl".to_string(), make_model());
        let review = Stage::new("review".to_string(), make_model());

        let mut transitions = HashMap::new();
        transitions.insert(
            "impl".to_string(),
            TransitionEdge {
                target: "impl".to_string(),
                condition: TransitionCondition::Always,
                hint: None,
                transform: EdgeTransform::Direct,
                gate: None,
                stuck: None,
            },
        );
        plan.transitions = Some(transitions);

        let bp = Blueprint::new(
            "t".into(),
            "".into(),
            vec![plan, impl_stage, review],
            make_layout(),
        );
        assert!(bp.validate().is_ok());
    }

    #[test]
    fn test_stage_validation() {
        let stage = Stage::new(
            "test".to_string(),
            ModelConfig::new("anthropic".to_string(), "claude-sonnet-4-6".to_string()),
        );
        assert!(stage.validate().is_ok());

        let empty_stage = Stage::new(
            "".to_string(),
            ModelConfig::new("anthropic".to_string(), "claude-sonnet-4-6".to_string()),
        );
        assert!(empty_stage.validate().is_err());
    }

    #[test]
    fn test_stage_validate_with_valid_context_layout_is_ok() {
        let mut stage = Stage::new("test".to_string(), make_model());
        stage.context_layout = Some(make_layout());
        assert!(stage.validate().is_ok());
    }

    #[test]
    fn test_stage_validate_with_invalid_context_layout_is_err() {
        // Duplicate region names make the layout itself invalid.
        let regions = vec![
            RegionDefinition::new("dup".to_string(), RegionKind::Pinned, 100),
            RegionDefinition::new("dup".to_string(), RegionKind::Temporary, 100),
        ];
        let mut stage = Stage::new("test".to_string(), make_model());
        stage.context_layout = Some(ContextLayout::new(regions, 200));
        assert!(stage.validate().is_err());
    }

    #[test]
    fn test_stage_with_tools_context_layout_description() {
        let stage = Stage::new("test".to_string(), make_model())
            .with_tools(vec!["read_file".to_string(), "bash".to_string()])
            .with_context_layout(make_layout())
            .with_description("does things".to_string());

        assert_eq!(stage.available_tools, vec!["read_file", "bash"]);
        assert!(stage.context_layout.is_some());
        assert_eq!(stage.description.as_deref(), Some("does things"));
    }

    #[test]
    fn test_stage_with_mode() {
        let stage = Stage::new("test".to_string(), make_model())
            .with_mode(StageMode::InteractivePoints { points: vec![] });
        assert_eq!(stage.mode, StageMode::InteractivePoints { points: vec![] });
    }

    #[test]
    fn test_stage_allow_complete_defaults_false() {
        let stage = Stage::new("review".to_string(), make_model());
        assert!(!stage.allow_complete);
    }

    #[test]
    fn test_stage_allow_complete_serde_default_when_missing() {
        // A serialized stage from before allow_complete existed must still
        // deserialize, defaulting to false.
        let json = r#"{
            "name": "review",
            "description": null,
            "model": {"provider": "anthropic", "model": "claude-sonnet-4-6", "parameters": {}},
            "available_tools": [],
            "max_iterations": null,
            "context_layout": null,
            "config": {},
            "transitions": null,
            "max_revisits": null,
            "transition_prompt": null
        }"#;
        let stage: Stage = serde_json::from_str(json).unwrap();
        assert!(!stage.allow_complete);
        assert!(stage.accepts_messages);
    }

    #[test]
    fn test_stage_allow_complete_roundtrip() {
        let mut stage = Stage::new("review".to_string(), make_model());
        stage.allow_complete = true;
        let json = serde_json::to_string(&stage).unwrap();
        let back: Stage = serde_json::from_str(&json).unwrap();
        assert!(back.allow_complete);
    }

    #[test]
    fn test_interaction_point_directives_default_empty() {
        let point = InteractionPoint {
            name: "plan_approval".to_string(),
            prompt: "Approve?".to_string(),
            required: true,
            unattended: UnattendedPolicy::AutoApprove,
            style: InteractionStyle::MultipleChoice,
            options: vec!["Approve".to_string(), "Revise".to_string()],
            directives: HashMap::new(),
            abort_options: Vec::new(),
            edit_options: Vec::new(),
            document_region: None,
        };
        assert!(point.directives.is_empty());
        assert!(point.abort_options.is_empty());
        assert!(point.edit_options.is_empty());
    }

    #[test]
    fn test_interaction_point_directives_roundtrip() {
        let mut directives = HashMap::new();
        directives.insert(
            "Revise".to_string(),
            "Ask what to change, then re-plan.".to_string(),
        );
        let point = InteractionPoint {
            name: "plan_approval".to_string(),
            prompt: "Approve?".to_string(),
            required: true,
            unattended: UnattendedPolicy::Ask,
            style: InteractionStyle::MultipleChoice,
            options: vec!["Approve".to_string(), "Revise".to_string()],
            directives,
            abort_options: vec!["Abort".to_string()],
            edit_options: vec!["Add detail".to_string()],
            document_region: Some("plan".to_string()),
        };
        let json = serde_json::to_string(&point).unwrap();
        let back: InteractionPoint = serde_json::from_str(&json).unwrap();
        assert_eq!(
            back.directives.get("Revise").map(|s| s.as_str()),
            Some("Ask what to change, then re-plan.")
        );
        assert_eq!(back.abort_options, vec!["Abort".to_string()]);
        assert_eq!(back.edit_options, vec!["Add detail".to_string()]);
        // A point that holds for a person under `--yolo` has to survive the
        // round trip: this is what a restored run re-arms from.
        assert_eq!(back.unattended, UnattendedPolicy::Ask);
    }

    #[test]
    fn test_interaction_point_directives_serde_default_when_missing() {
        let json = r#"{
            "name": "plan_approval",
            "prompt": "Approve?",
            "required": true,
            "style": "multiple_choice",
            "options": ["Approve", "Revise"]
        }"#;
        let point: InteractionPoint = serde_json::from_str(json).unwrap();
        assert!(point.directives.is_empty());
        assert!(point.abort_options.is_empty());
    }

    #[test]
    fn test_interaction_point_followups_alias_still_deserializes() {
        // Backward compat: old serialized blueprints used "followups".
        let json = r#"{
            "name": "plan_approval",
            "prompt": "Approve?",
            "required": true,
            "style": "multiple_choice",
            "options": ["Approve", "Revise"],
            "followups": { "Revise": "What to change?" }
        }"#;
        let point: InteractionPoint = serde_json::from_str(json).unwrap();
        assert_eq!(
            point.directives.get("Revise").map(|s| s.as_str()),
            Some("What to change?")
        );
    }

    #[test]
    fn test_model_config_new_creates_single_entry() {
        let mc = ModelConfig::new("anthropic".to_string(), "claude-sonnet-4-6".to_string());
        assert_eq!(mc.models.len(), 1);
        assert_eq!(mc.models[0].provider, "anthropic");
        assert_eq!(mc.models[0].model, "claude-sonnet-4-6");
        assert!(mc.allow_user_default);
    }

    #[test]
    fn test_model_config_with_multiple_models() {
        let mc = ModelConfig {
            models: vec![
                ModelEntry::new("anthropic".to_string(), "claude-sonnet-4-6".to_string()),
                ModelEntry::new("openai".to_string(), "gpt-4o".to_string()),
                ModelEntry::new("ollama".to_string(), "llama3".to_string()),
            ],
            allow_user_default: true,
            parameters: HashMap::new(),
            request_timeout_secs: None,
        };
        assert_eq!(mc.models.len(), 3);
        assert_eq!(mc.models[0].provider, "anthropic");
        assert_eq!(mc.models[1].provider, "openai");
        assert_eq!(mc.models[2].provider, "ollama");
    }

    #[test]
    fn test_model_config_serde_roundtrip() {
        let mc = ModelConfig {
            models: vec![
                ModelEntry::new("anthropic".to_string(), "claude-sonnet-4-6".to_string()),
                ModelEntry::new("openai".to_string(), "gpt-4o".to_string()),
            ],
            allow_user_default: false,
            parameters: HashMap::new(),
            request_timeout_secs: None,
        };
        let json = serde_json::to_string(&mc).unwrap();
        let back: ModelConfig = serde_json::from_str(&json).unwrap();
        assert_eq!(back.models.len(), 2);
        assert_eq!(back.models[0].provider, "anthropic");
        assert_eq!(back.models[1].provider, "openai");
        assert!(!back.allow_user_default);
    }

    #[test]
    fn test_model_config_serde_defaults_when_fields_missing() {
        // Minimal JSON - models defaults to empty, allow_user_default defaults to true
        let json = r#"{"parameters": {}}"#;
        let mc: ModelConfig = serde_json::from_str(json).unwrap();
        assert!(mc.models.is_empty());
        assert!(mc.allow_user_default);
    }

    #[test]
    fn test_model_config_convenience_accessors() {
        let mc = ModelConfig::new("anthropic".to_string(), "claude-sonnet-4-6".to_string());
        assert_eq!(mc.provider(), "anthropic");
        assert_eq!(mc.model(), "claude-sonnet-4-6");
    }

    #[test]
    fn test_model_config_convenience_accessors_empty_models() {
        let mc = ModelConfig {
            models: vec![],
            allow_user_default: true,
            parameters: HashMap::new(),
            request_timeout_secs: None,
        };
        assert_eq!(mc.provider(), "anthropic");
        assert_eq!(mc.model(), "claude-sonnet-4-6");
    }

    fn make_model() -> ModelConfig {
        ModelConfig::new("anthropic".to_string(), "claude-sonnet-4-6".to_string())
    }

    fn make_layout() -> ContextLayout {
        let regions = vec![RegionDefinition::new(
            "test".to_string(),
            RegionKind::Pinned,
            5000,
        )];
        ContextLayout::new(regions, 10000)
    }

    #[test]
    fn test_graph_validation_entry_stage_exists() {
        let stages = vec![Stage::new("plan".to_string(), make_model())];
        let mut bp = Blueprint::new("t".into(), "".into(), stages, make_layout());
        bp.entry_stage = Some("nonexistent".to_string());
        assert!(bp.validate().is_err());
    }

    #[test]
    fn test_graph_validation_entry_stage_valid() {
        let stages = vec![Stage::new("plan".to_string(), make_model())];
        let mut bp = Blueprint::new("t".into(), "".into(), stages, make_layout());
        bp.entry_stage = Some("plan".to_string());
        assert!(bp.validate().is_ok());
    }

    #[test]
    fn test_graph_validation_transition_target_missing() {
        let mut stage = Stage::new("plan".to_string(), make_model());
        let mut transitions = HashMap::new();
        transitions.insert(
            "nonexistent".to_string(),
            TransitionEdge {
                target: "nonexistent".to_string(),
                condition: TransitionCondition::Always,
                hint: None,
                transform: EdgeTransform::Direct,
                gate: None,
                stuck: None,
            },
        );
        stage.transitions = Some(transitions);
        let bp = Blueprint::new("t".into(), "".into(), vec![stage], make_layout());
        assert!(bp.validate().is_err());
    }

    /// A `require_modifications` gate on a stage that can't modify anything
    /// could never be satisfied - it would just burn the stage's re-run budget
    /// on every pass. Reject it at load time instead.
    #[test]
    fn test_graph_validation_modification_gate_needs_a_writing_stage() {
        let gated = |tools: &[&str], extra: &[&str]| {
            let mut stage = Stage::new("impl".to_string(), make_model());
            stage.available_tools = tools.iter().map(|t| t.to_string()).collect();
            let mut transitions = HashMap::new();
            transitions.insert(
                "review".to_string(),
                TransitionEdge {
                    target: "review".to_string(),
                    condition: TransitionCondition::Always,
                    hint: None,
                    transform: EdgeTransform::Direct,
                    stuck: None,
                    gate: Some(TransitionGate {
                        require_modifications: true,
                        tools: extra.iter().map(|t| t.to_string()).collect(),
                        ..Default::default()
                    }),
                },
            );
            stage.transitions = Some(transitions);
            Blueprint::new(
                "t".into(),
                "".into(),
                vec![stage, Stage::new("review".to_string(), make_model())],
                make_layout(),
            )
        };
        let err = gated(&["read_file"], &[]).validate().unwrap_err();
        assert!(err.to_string().contains("no file-modifying tool"));
        // A built-in write tool satisfies it...
        assert!(gated(&["read_file", "edit_file"], &[]).validate().is_ok());
        // ...so does a group that carries one, with neither name written...
        assert!(gated(&["@builtin"], &[]).validate().is_ok());
        assert!(gated(&["@all"], &[]).validate().is_ok());
        // ...but not a group that carries none.
        assert!(gated(&["@scripts"], &[]).validate().is_err());
        // ...as does one the gate itself declares (MCP / script toolchains).
        assert!(
            gated(&["read_file", "patch_file"], &["patch_file"])
                .validate()
                .is_ok()
        );
        // A gate that doesn't require modifications is never checked.
        let mut off = gated(&["read_file"], &[]);
        off.stages[0]
            .transitions
            .as_mut()
            .unwrap()
            .get_mut("review")
            .unwrap()
            .gate = Some(TransitionGate::default());
        assert!(off.validate().is_ok());
        // Neither is an edge with no gate at all.
        off.stages[0]
            .transitions
            .as_mut()
            .unwrap()
            .get_mut("review")
            .unwrap()
            .gate = None;
        assert!(off.validate().is_ok());
    }

    #[test]
    fn test_graph_validation_self_loop_requires_max_revisits() {
        let mut stage = Stage::new("impl".to_string(), make_model());
        let mut transitions = HashMap::new();
        transitions.insert(
            "impl".to_string(),
            TransitionEdge {
                target: "impl".to_string(),
                condition: TransitionCondition::Always,
                hint: None,
                transform: EdgeTransform::Direct,
                gate: None,
                stuck: None,
            },
        );
        stage.transitions = Some(transitions);
        let bp = Blueprint::new("t".into(), "".into(), vec![stage], make_layout());
        assert!(bp.validate().is_err());
    }

    #[test]
    fn test_graph_validation_self_loop_with_max_revisits_ok() {
        let mut stage = Stage::new("impl".to_string(), make_model());
        stage.max_revisits = Some(3);
        let mut transitions = HashMap::new();
        transitions.insert(
            "impl".to_string(),
            TransitionEdge {
                target: "impl".to_string(),
                condition: TransitionCondition::Always,
                hint: None,
                transform: EdgeTransform::Direct,
                gate: None,
                stuck: None,
            },
        );
        stage.transitions = Some(transitions);
        let bp = Blueprint::new("t".into(), "".into(), vec![stage], make_layout());
        // Must fail: a self-loop exhausting its max_revisits leaves zero
        // edges, which is a run error (StageResolution::DeadEnd) and not a
        // terminal path, so a blueprint whose only ending is exhaustion can
        // never finish successfully.
        let err = bp
            .validate()
            .expect_err("an exhaustion-only graph is invalid");
        assert!(err.to_string().contains("no terminal path"), "{err}");
    }

    #[test]
    fn test_graph_validation_terminal_path_exists() {
        let mut plan = Stage::new("plan".to_string(), make_model());
        let mut review = Stage::new("review".to_string(), make_model());
        review.transitions = Some(HashMap::new()); // terminal: no outgoing

        let mut transitions = HashMap::new();
        transitions.insert(
            "review".to_string(),
            TransitionEdge {
                target: "review".to_string(),
                condition: TransitionCondition::Always,
                hint: None,
                transform: EdgeTransform::Direct,
                gate: None,
                stuck: None,
            },
        );
        plan.transitions = Some(transitions);

        let bp = Blueprint::new("t".into(), "".into(), vec![plan, review], make_layout());
        assert!(bp.validate().is_ok());
    }

    #[test]
    fn test_graph_no_terminal_path() {
        // Two stages that only transition to each other with no terminal
        let mut a = Stage::new("a".to_string(), make_model());
        let mut b = Stage::new("b".to_string(), make_model());

        let mut a_transitions = HashMap::new();
        a_transitions.insert(
            "b".to_string(),
            TransitionEdge {
                target: "b".to_string(),
                condition: TransitionCondition::Always,
                hint: None,
                transform: EdgeTransform::Direct,
                gate: None,
                stuck: None,
            },
        );
        a.transitions = Some(a_transitions);

        let mut b_transitions = HashMap::new();
        b_transitions.insert(
            "a".to_string(),
            TransitionEdge {
                target: "a".to_string(),
                condition: TransitionCondition::Always,
                hint: None,
                transform: EdgeTransform::Direct,
                gate: None,
                stuck: None,
            },
        );
        b.transitions = Some(b_transitions);

        let bp = Blueprint::new("t".into(), "".into(), vec![a, b], make_layout());
        assert!(bp.validate().is_err());
    }

    #[test]
    fn test_linear_stages_still_validate() {
        // No transitions set at all - pure linear mode
        let stages = vec![
            Stage::new("plan".to_string(), make_model()),
            Stage::new("impl".to_string(), make_model()),
            Stage::new("review".to_string(), make_model()),
        ];
        let bp = Blueprint::new("t".into(), "".into(), stages, make_layout());
        assert!(bp.validate().is_ok());
    }

    #[test]
    fn test_resolve_entry_stage_name() {
        let stages = vec![
            Stage::new("plan".to_string(), make_model()),
            Stage::new("impl".to_string(), make_model()),
        ];
        let mut bp = Blueprint::new("t".into(), "".into(), stages, make_layout());
        assert_eq!(bp.resolve_entry_stage_name(), "plan");

        bp.entry_stage = Some("impl".to_string());
        assert_eq!(bp.resolve_entry_stage_name(), "impl");
    }

    #[test]
    fn test_find_stage() {
        let stages = vec![
            Stage::new("plan".to_string(), make_model()),
            Stage::new("impl".to_string(), make_model()),
        ];
        let bp = Blueprint::new("t".into(), "".into(), stages, make_layout());
        assert!(bp.find_stage("plan").is_some());
        assert!(bp.find_stage("impl").is_some());
        assert!(bp.find_stage("nonexistent").is_none());
    }

    #[test]
    fn test_transition_condition_default() {
        let cond = TransitionCondition::default();
        assert_eq!(cond, TransitionCondition::Always);
    }

    #[test]
    fn test_edge_transform_default() {
        let t = EdgeTransform::default();
        assert_eq!(t, EdgeTransform::Direct);
    }

    #[test]
    fn test_stage_mode_equality() {
        assert_eq!(StageMode::Autonomous, StageMode::Autonomous);
        assert_eq!(StageMode::Interactive, StageMode::Interactive);
        assert_ne!(StageMode::Autonomous, StageMode::Interactive);
    }

    #[test]
    fn test_interaction_style_equality() {
        assert_eq!(InteractionStyle::FreeText, InteractionStyle::FreeText);
        assert_ne!(InteractionStyle::FreeText, InteractionStyle::MultipleChoice);
    }

    // ─── stuck detection ────────────────────────────────────────────────────

    #[test]
    fn stuck_config_is_armed_only_when_a_threshold_is_set() {
        assert!(!StuckConfig::default().is_armed());
        for cfg in [
            StuckConfig {
                after_iterations: Some(1),
                ..Default::default()
            },
            StuckConfig {
                after_minutes: Some(1),
                ..Default::default()
            },
            StuckConfig {
                after_same_file_edits: Some(1),
                ..Default::default()
            },
            StuckConfig {
                after_tool_calls: Some(1),
                ..Default::default()
            },
        ] {
            assert!(cfg.is_armed(), "{cfg:?} should be armed");
        }
    }

    #[test]
    fn transition_condition_stuck_round_trips_as_snake_case() {
        let json = serde_json::to_string(&TransitionCondition::Stuck).unwrap();
        assert_eq!(json, "\"stuck\"");
        let back: TransitionCondition = serde_json::from_str(&json).unwrap();
        assert_eq!(back, TransitionCondition::Stuck);
        assert_ne!(TransitionCondition::Stuck, TransitionCondition::Always);
    }

    #[test]
    fn transition_edge_stuck_round_trips_and_is_omitted_when_absent() {
        let plain = TransitionEdge {
            target: "b".to_string(),
            condition: TransitionCondition::Always,
            hint: None,
            transform: EdgeTransform::Direct,
            gate: None,
            stuck: None,
        };
        let json = serde_json::to_string(&plain).unwrap();
        assert!(
            !json.contains("stuck"),
            "absent config must be skipped: {json}"
        );

        let armed = TransitionEdge {
            condition: TransitionCondition::Stuck,
            stuck: Some(StuckConfig {
                after_iterations: Some(20),
                after_minutes: Some(10),
                after_same_file_edits: Some(3),
                after_tool_calls: Some(60),
            }),
            ..plain
        };
        let back: TransitionEdge = serde_json::from_str(&serde_json::to_string(&armed).unwrap())
            .expect("armed edge round-trips");
        assert_eq!(back.condition, TransitionCondition::Stuck);
        assert_eq!(back.stuck, armed.stuck);
    }

    /// A blueprint built programmatically (API / `lev validate`) bypasses the
    /// manifest parser, so `validate` has to catch the dead-edge shape too.
    #[test]
    fn validate_rejects_a_stuck_edge_with_no_threshold() {
        let build = |stuck| {
            let mut a = Stage::new("a".to_string(), make_model());
            let b = Stage::new("b".to_string(), make_model());
            let mut transitions = std::collections::HashMap::new();
            transitions.insert(
                "b".to_string(),
                TransitionEdge {
                    target: "b".to_string(),
                    condition: TransitionCondition::Stuck,
                    hint: None,
                    transform: EdgeTransform::Direct,
                    gate: None,
                    stuck,
                },
            );
            a.transitions = Some(transitions);
            Blueprint::new("t".into(), "".into(), vec![a, b], make_layout())
        };

        for dead in [None, Some(StuckConfig::default())] {
            let err = build(dead)
                .validate()
                .expect_err("dead stuck edge rejected");
            assert!(
                format!("{err:?}").contains("stuck_after_"),
                "unexpected error: {err:?}"
            );
        }

        // The same graph with a real threshold is fine.
        assert!(
            build(Some(StuckConfig {
                after_iterations: Some(5),
                ..Default::default()
            }))
            .validate()
            .is_ok()
        );
    }

    /// `required_tools` keeps a blocking human tool through an unattended run.
    /// Naming one the stage can't call keeps nothing, so it is rejected rather
    /// than quietly ignored - the author meant something by writing it.
    #[test]
    fn validate_rejects_a_required_tool_the_stage_cannot_call() {
        let mut stage = Stage::new("plan".to_string(), make_model());
        stage.available_tools = vec!["read_file".to_string()];
        stage.required_tools = vec!["ask_user_text".to_string()];
        let bp = Blueprint::new("t".into(), "".into(), vec![stage], make_layout());

        let err = bp.validate().expect_err("a tool it cannot call");
        let text = format!("{err:?}");
        assert!(text.contains("ask_user_text"), "names the tool: {text}");
        assert!(text.contains("available_tools"), "says why: {text}");
    }

    #[test]
    fn validate_accepts_a_required_tool_the_stage_offers() {
        let mut stage = Stage::new("plan".to_string(), make_model());
        stage.available_tools = vec!["read_file".to_string(), "ask_user_text".to_string()];
        stage.required_tools = vec!["ask_user_text".to_string()];
        let bp = Blueprint::new("t".into(), "".into(), vec![stage], make_layout());

        bp.validate().expect("the tool is on offer");
    }

    /// With a group in the list the membership question belongs to the
    /// install, so validation takes the author's word and the lint checks.
    #[test]
    fn validate_accepts_a_required_tool_a_group_could_cover() {
        let mut stage = Stage::new("plan".to_string(), make_model());
        stage.available_tools = vec!["@builtin".to_string()];
        stage.required_tools = vec!["ask_user_text".to_string()];
        let bp = Blueprint::new("t".into(), "".into(), vec![stage], make_layout());

        bp.validate().expect("the group may cover it");
    }

    #[test]
    fn validate_rejects_a_group_shaped_entry_that_names_no_group() {
        let mut stage = Stage::new("plan".to_string(), make_model());
        stage.available_tools = vec!["read_file".to_string(), "@builtins".to_string()];
        let bp = Blueprint::new("t".into(), "".into(), vec![stage], make_layout());

        let err = bp.validate().expect_err("not a group");
        let text = format!("{err:?}");
        assert!(text.contains("@builtins"), "names the entry: {text}");
        assert!(text.contains("@builtin,"), "lists the groups: {text}");
    }

    #[test]
    fn stage_reports_its_groups_and_named_tools_separately() {
        let mut stage = Stage::new("plan".to_string(), make_model());
        stage.available_tools = vec![
            "read_file".to_string(),
            "@scripts".to_string(),
            "github__create_issue".to_string(),
        ];
        assert_eq!(stage.tool_groups(), vec![ToolGroup::Scripts]);
        assert!(stage.grants_group(ToolGroup::Scripts));
        assert!(!stage.grants_group(ToolGroup::Mcp));
        assert!(!stage.grants_all_builtins());
        let named: Vec<&String> = stage.named_tools().collect();
        assert_eq!(named, vec!["read_file", "github__create_issue"]);

        stage.available_tools = vec!["@all".to_string()];
        assert!(stage.grants_all_builtins());
        assert!(stage.grants_group(ToolGroup::Mcp));
        assert_eq!(stage.named_tools().count(), 0);
    }

    /// A stage required to produce an output, without the tool that produces
    /// one, would spend its whole re-entry budget being nudged toward a tool it
    /// was never offered and then give up. Caught at load instead.
    #[test]
    fn validate_rejects_require_output_without_the_submit_tool() {
        let mut stage = Stage::new("summary".to_string(), make_model());
        stage.available_tools = vec!["read_file".to_string()];
        stage.require_output = true;
        let bp = Blueprint::new("t".into(), "".into(), vec![stage], make_layout());

        let err = bp.validate().expect_err("no way to submit");
        let text = format!("{err:?}");
        assert!(text.contains(SUBMIT_OUTPUT_TOOL), "names the tool: {text}");
        assert!(text.contains("require_output"), "says why: {text}");
    }

    #[test]
    fn validate_accepts_require_output_when_the_stage_can_submit() {
        let mut stage = Stage::new("summary".to_string(), make_model());
        stage.available_tools = vec![SUBMIT_OUTPUT_TOOL.to_string()];
        stage.require_output = true;
        let bp = Blueprint::new("t".into(), "".into(), vec![stage], make_layout());

        bp.validate().expect("the stage can submit");
    }

    /// Declaring a shape is not the same as demanding one, so a stage carrying
    /// only an `output` block needs no tool grant.
    #[test]
    fn validate_accepts_a_declared_shape_without_require_output() {
        let mut stage = Stage::new("summary".to_string(), make_model());
        stage.available_tools = vec!["read_file".to_string()];
        stage.output = Some(crate::output::OutputSpec {
            format: Some("a2ui".to_string()),
            ..Default::default()
        });
        let bp = Blueprint::new("t".into(), "".into(), vec![stage], make_layout());

        bp.validate().expect("declaring a shape demands nothing");
    }

    #[test]
    fn output_mode_compares_equal_only_to_itself() {
        assert_eq!(StageMode::Output, StageMode::Output);
        assert_ne!(StageMode::Output, StageMode::Autonomous);
        assert_ne!(StageMode::Autonomous, StageMode::Output);
    }

    #[test]
    fn test_transition_condition_equality() {
        assert_eq!(
            TransitionCondition::LlmChoice,
            TransitionCondition::LlmChoice
        );
        assert_ne!(TransitionCondition::Always, TransitionCondition::Error);
    }

    #[test]
    fn test_edge_transform_compact_and_custom_equality() {
        let a = EdgeTransform::Compact {
            prompt: Some("p".to_string()),
        };
        let b = EdgeTransform::Compact {
            prompt: Some("p".to_string()),
        };
        assert_eq!(a, b);

        let c1 = EdgeTransform::Custom {
            carry: vec!["a".to_string()],
            compact: vec!["b".to_string()],
            clear: vec!["c".to_string()],
            compact_prompt: Some("p".to_string()),
        };
        let c2 = c1.clone();
        assert_eq!(c1, c2);

        assert_ne!(EdgeTransform::Direct, EdgeTransform::Clear);
    }

    #[test]
    fn test_stage_accepts_messages_default_true() {
        let stage = Stage::new(
            "test".to_string(),
            ModelConfig::new("anthropic".to_string(), "claude-sonnet-4-6".to_string()),
        );
        assert!(stage.accepts_messages);
    }

    #[test]
    fn test_stage_accepts_messages_serde_roundtrip() {
        // Serialize a stage with accepts_messages = false, then deserialize
        let mut stage = Stage::new(
            "report".to_string(),
            ModelConfig::new("anthropic".to_string(), "claude-opus-4-6".to_string()),
        );
        stage.accepts_messages = false;

        let json = serde_json::to_string(&stage).expect("should serialize");
        let deserialized: Stage = serde_json::from_str(&json).expect("should deserialize");
        assert!(!deserialized.accepts_messages);
    }

    #[test]
    fn test_stage_accepts_messages_json_default() {
        // When accepts_messages is missing from JSON, it should default to true
        let json = r#"{
            "name": "analyze",
            "model": { "provider": "anthropic", "model": "claude-sonnet-4-6", "parameters": {} },
            "available_tools": [],
            "mode": "Autonomous",
            "config": {},
            "tool_permissions": {},
            "requires_children": false
        }"#;
        let stage: Stage = serde_json::from_str(json).expect("should parse");
        assert!(stage.accepts_messages);
    }

    #[test]
    fn test_has_terminal_path_unknown_stage_returns_false() {
        // `has_terminal_path` is private; this test is in the same module.
        // Calling it with a stage name that doesn't exist in the Blueprint
        // exercises the `None => return false` arm (blueprint.rs line 203).
        let stages = vec![Stage::new("start".to_string(), make_model())];
        let bp = Blueprint::new("t".into(), "d".into(), stages, make_layout());
        let mut visited = std::collections::HashSet::new();
        assert!(!bp.has_terminal_path("nonexistent_stage", &mut visited));
    }

    #[test]
    fn test_blueprint_validate_fails_when_layout_has_duplicate_region() {
        let regions = vec![
            RegionDefinition::new("dup".to_string(), RegionKind::Pinned, 100),
            RegionDefinition::new("dup".to_string(), RegionKind::Temporary, 100),
        ];
        let layout = ContextLayout::new(regions, 200);
        let stages = vec![Stage::new("start".to_string(), make_model())];
        let bp = Blueprint::new("t".into(), "d".into(), stages, layout);
        assert_eq!(
            bp.validate().unwrap_err(),
            ValidationError::Region {
                region: "dup".to_string(),
                message: "duplicate region name".to_string(),
            }
        );
    }

    #[test]
    fn test_blueprint_validate_fails_when_stage_has_empty_name() {
        let stages = vec![Stage::new("".to_string(), make_model())];
        let bp = Blueprint::new("t".into(), "d".into(), stages, make_layout());
        assert_eq!(
            bp.validate().unwrap_err(),
            ValidationError::Stage {
                stage: "(empty)".to_string(),
                message: "stage name cannot be empty".to_string(),
            }
        );
    }

    #[test]
    fn test_file_tracking_config_defaults() {
        let json = r#"{"region": "files"}"#;
        let config: FileTrackingConfig = serde_json::from_str(json).unwrap();
        assert_eq!(config.region, "files");
        assert!(config.track_reads);
        assert!(config.track_writes);
        assert!(config.max_file_tokens.is_none());
    }

    #[test]
    fn test_file_tracking_config_serde_roundtrip() {
        let config = FileTrackingConfig {
            region: "files".to_string(),
            track_reads: true,
            track_writes: false,
            max_file_tokens: Some(5000),
        };
        let json = serde_json::to_string(&config).unwrap();
        let back: FileTrackingConfig = serde_json::from_str(&json).unwrap();
        assert_eq!(back.region, "files");
        assert!(back.track_reads);
        assert!(!back.track_writes);
        assert_eq!(back.max_file_tokens, Some(5000));
    }

    #[test]
    fn test_blueprint_file_tracking_default_none() {
        let stages = vec![Stage::new("plan".to_string(), make_model())];
        let bp = Blueprint::new("t".into(), "d".into(), stages, make_layout());
        assert!(bp.file_tracking.is_none());
    }

    #[test]
    fn test_blueprint_file_tracking_serde_roundtrip() {
        let stages = vec![Stage::new("plan".to_string(), make_model())];
        let mut bp = Blueprint::new("t".into(), "d".into(), stages, make_layout());
        bp.file_tracking = Some(FileTrackingConfig {
            region: "files".to_string(),
            track_reads: true,
            track_writes: true,
            max_file_tokens: Some(3000),
        });
        let json = serde_json::to_string(&bp).unwrap();
        let back: Blueprint = serde_json::from_str(&json).unwrap();
        let ft = back.file_tracking.unwrap();
        assert_eq!(ft.region, "files");
        assert_eq!(ft.max_file_tokens, Some(3000));
    }

    #[test]
    fn test_tool_result_routing_default() {
        let routing = ToolResultRouting::default();
        assert_eq!(routing.default_region, "tool_results");
        assert!(routing.keep_results);
        assert!(routing.tool_overrides.is_empty());
        assert!(routing.max_result_tokens.is_none());
    }

    #[test]
    fn test_stage_new_has_no_tool_result_routing() {
        let stage = Stage::new("plan".to_string(), make_model());
        assert!(stage.tool_result_routing.is_none());
    }

    #[test]
    fn test_tool_result_routing_serde_roundtrip() {
        let mut routing = ToolResultRouting {
            default_region: "custom_region".to_string(),
            keep_results: false,
            max_result_tokens: Some(4096),
            ..Default::default()
        };
        routing
            .tool_overrides
            .insert("read_file".to_string(), "file_reads".to_string());

        let json = serde_json::to_string(&routing).unwrap();
        let back: ToolResultRouting = serde_json::from_str(&json).unwrap();

        assert_eq!(back.default_region, "custom_region");
        assert!(!back.keep_results);
        assert_eq!(back.max_result_tokens, Some(4096));
        assert_eq!(
            back.tool_overrides.get("read_file").map(String::as_str),
            Some("file_reads")
        );
    }

    #[test]
    fn test_stage_with_tool_result_routing_serde_roundtrip() {
        let stages = vec![{
            let mut s = Stage::new("plan".to_string(), make_model());
            s.tool_result_routing = Some(ToolResultRouting {
                default_region: "results".to_string(),
                tool_overrides: HashMap::new(),
                keep_results: true,
                max_result_tokens: Some(2048),
                tool_max_result_tokens: HashMap::new(),
            });
            s
        }];
        let bp = Blueprint::new("t".into(), "d".into(), stages, make_layout());
        let json = serde_json::to_string(&bp).unwrap();
        let back: Blueprint = serde_json::from_str(&json).unwrap();

        let routing = back.stages[0]
            .tool_result_routing
            .as_ref()
            .expect("tool_result_routing should be Some");
        assert_eq!(routing.default_region, "results");
        assert!(routing.keep_results);
        assert_eq!(routing.max_result_tokens, Some(2048));
        assert!(routing.tool_overrides.is_empty());
    }

    // ─── fan_out (StageMode::FanOut) ─────────────────────────────────────────

    fn fanout_config() -> FanOutConfig {
        FanOutConfig {
            worker_agent: None,
            worker_stage: Some("fix_worker".to_string()),
            worker_query: None,
            merge_stage: Some("merge".to_string()),
            max_workers: 3,
            on_worker_failure: WorkerFailurePolicy::Continue,
            split_prompt: "split".to_string(),
            results_region: None,
            max_items: None,
            max_attempts: None,
        }
    }

    /// Blueprint: fan_out stage (worker_stage=fix_worker) → merge → terminal.
    /// The merge stage carries an (empty) transitions table so the blueprint is
    /// in graph mode - this makes `validate_graph` run `has_terminal_path`,
    /// which walks the fan-out stage's merge hand-off.
    fn fanout_blueprint(worker_allowed: bool, config: FanOutConfig) -> Blueprint {
        let mut fan = Stage::new("parallel".to_string(), make_model());
        fan.mode = StageMode::FanOut { config };
        let mut worker = Stage::new("fix_worker".to_string(), make_model());
        worker.allow_as_worker = worker_allowed;
        let mut merge = Stage::new("merge".to_string(), make_model());
        merge.transitions = Some(HashMap::new()); // terminal, graph mode
        Blueprint::new(
            "t".into(),
            "d".into(),
            vec![fan, worker, merge],
            make_layout(),
        )
    }

    #[test]
    fn fanout_stagemode_partial_eq_and_default_policy() {
        let a = StageMode::FanOut {
            config: fanout_config(),
        };
        let b = StageMode::FanOut {
            config: fanout_config(),
        };
        assert_eq!(a, b);
        let mut other = fanout_config();
        other.max_workers = 99;
        assert_ne!(a, StageMode::FanOut { config: other });
        assert_ne!(a, StageMode::Autonomous);
        assert_eq!(
            WorkerFailurePolicy::default(),
            WorkerFailurePolicy::Continue
        );
    }

    #[test]
    fn fanout_config_serde_roundtrip_and_max_workers_default() {
        let toml = r#"
worker_agent = "fixer"
split_prompt = "go"
on_worker_failure = "fail_all"
"#;
        let cfg: FanOutConfig = toml::from_str(toml).unwrap();
        assert_eq!(cfg.worker_agent.as_deref(), Some("fixer"));
        assert_eq!(cfg.max_workers, DEFAULT_MAX_WORKERS);
        assert_eq!(cfg.worker_cap(), Some(DEFAULT_MAX_WORKERS));
        assert_eq!(
            FanOutConfig {
                max_workers: 0,
                ..fanout_config()
            }
            .worker_cap(),
            None
        );
        assert_eq!(cfg.on_worker_failure, WorkerFailurePolicy::FailAll);
        // JSON round-trip preserves everything.
        let json = serde_json::to_string(&fanout_config()).unwrap();
        let back: FanOutConfig = serde_json::from_str(&json).unwrap();
        assert_eq!(back, fanout_config());
    }

    #[test]
    fn fanout_validate_ok_with_allowed_worker_stage() {
        assert!(fanout_blueprint(true, fanout_config()).validate().is_ok());
    }

    #[test]
    fn fanout_validate_rejects_worker_stage_not_opted_in() {
        let err = fanout_blueprint(false, fanout_config())
            .validate()
            .unwrap_err();
        assert!(err.to_string().contains("allow_as_worker"));
    }

    #[test]
    fn fanout_validate_rejects_missing_worker_stage() {
        let mut cfg = fanout_config();
        cfg.worker_stage = Some("nope".to_string());
        let err = fanout_blueprint(true, cfg).validate().unwrap_err();
        assert!(err.to_string().contains("does not exist"));
    }

    #[test]
    fn fanout_validate_rejects_missing_merge_stage() {
        let mut cfg = fanout_config();
        cfg.merge_stage = Some("nomerge".to_string());
        let err = fanout_blueprint(true, cfg).validate().unwrap_err();
        assert!(err.to_string().contains("merge_stage"));
    }

    #[test]
    fn fanout_validate_rejects_wrong_worker_source_count() {
        // zero sources
        let mut cfg = fanout_config();
        cfg.worker_stage = None;
        assert!(fanout_blueprint(true, cfg).validate().is_err());
        // two sources
        let mut cfg2 = fanout_config();
        cfg2.worker_agent = Some("x".to_string()); // plus worker_stage
        assert!(fanout_blueprint(true, cfg2).validate().is_err());
    }

    #[test]
    fn fanout_terminal_path_runs_through_merge_stage() {
        // worker_agent form (no local worker_stage), merge → terminal.
        let mut cfg = fanout_config();
        cfg.worker_stage = None;
        cfg.worker_agent = Some("external".to_string());
        assert!(fanout_blueprint(false, cfg).validate().is_ok());
    }

    #[test]
    fn fanout_validate_ok_without_merge_stage() {
        // No merge stage: valid, and the fan-out stage falls through to the
        // linear next stage for its terminal path.
        let mut cfg = fanout_config();
        cfg.merge_stage = None;
        assert!(fanout_blueprint(true, cfg).validate().is_ok());
    }
}