scope_cli/cli/

compliance.rs

//! CLI commands for compliance and risk analysis

use crate::cli::output::Output;
use crate::{note, outln};
use clap::{Args, Subcommand};
use scope::compliance::datasource::{BlockchainDataClient, analyze_patterns};
use scope::compliance::etherscan::ETHERSCAN_KEY_ENV;
use scope::compliance::risk::RiskEngine;
use scope::display::{OutputFormat, format_risk_report};
use scope::http::HttpClient;
use std::sync::Arc;

#[derive(Debug, Subcommand)]
pub enum ComplianceCommands {
    /// Assess risk for a blockchain address
    #[command(name = "risk")]
    Risk(RiskArgs),

    /// Trace transaction taint through multiple hops
    #[command(name = "trace")]
    Trace(TraceArgs),

    /// Detect suspicious transaction patterns
    #[command(name = "analyze")]
    Analyze(AnalyzeArgs),

    /// Generate compliance report
    #[command(name = "compliance-report")]
    ComplianceReport(ComplianceReportArgs),
}

#[derive(Debug, Args)]
#[command(after_help = "\x1b[1mExamples:\x1b[0m
  scope compliance risk 0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2
  scope compliance risk @main-wallet                      \x1b[2m# address book shortcut\x1b[0m
  scope compliance risk 0x742d... --detailed --format json
  scope compliance risk 0x742d... --output risk_report.json")]
pub struct RiskArgs {
    /// Address to assess. Use @label for address book shortcut.
    #[arg(value_name = "ADDRESS")]
    pub address: String,

    /// Blockchain (auto-detected if not specified)
    #[arg(short, long)]
    pub chain: Option<String>,

    /// Output format
    #[arg(short, long, value_enum, default_value = "table")]
    pub format: OutputFormat,

    /// Include detailed factor breakdown
    #[arg(long)]
    pub detailed: bool,

    /// Export to file
    #[arg(short, long)]
    pub output: Option<String>,
}

#[derive(Debug, Args)]
#[command(after_help = "\x1b[1mExamples:\x1b[0m
  scope compliance trace 0xabc123def456...
  scope compliance trace 0xabc123... --depth 5 --flag-suspicious
  scope compliance trace 0xabc123... --format json")]
pub struct TraceArgs {
    /// Transaction hash to trace
    #[arg(value_name = "TX_HASH")]
    pub tx_hash: String,

    /// Trace depth (hops to follow)
    #[arg(short, long, default_value = "3")]
    pub depth: u32,

    /// Flag suspicious addresses
    #[arg(long)]
    pub flag_suspicious: bool,

    /// Output format
    #[arg(short, long, value_enum, default_value = "table")]
    pub format: OutputFormat,
}

#[derive(Debug, Args)]
#[command(after_help = "\x1b[1mExamples:\x1b[0m
  scope compliance analyze 0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2
  scope compliance analyze 0x742d... --patterns structuring,layering --range 90d
  scope compliance analyze 0x742d... --format json")]
pub struct AnalyzeArgs {
    /// Address to analyze
    #[arg(value_name = "ADDRESS")]
    pub address: String,

    /// Pattern types to detect
    #[arg(long, value_enum, default_values = &["structuring", "layering", "integration"])]
    pub patterns: Vec<PatternType>,

    /// Time range (e.g., "30d", "6m", "1y")
    #[arg(short, long, default_value = "30d")]
    pub range: String,

    /// Output format
    #[arg(short, long, value_enum, default_value = "table")]
    pub format: OutputFormat,
}

#[derive(Debug, Args)]
#[command(after_help = "\x1b[1mExamples:\x1b[0m
  scope compliance compliance-report 0x742d... -j us -o report.json
  scope compliance compliance-report addresses.txt -j eu --report-type detailed -o report.json")]
pub struct ComplianceReportArgs {
    /// Address or addresses file
    #[arg(value_name = "TARGET")]
    pub target: String,

    /// Jurisdiction for compliance
    #[arg(short, long, value_enum)]
    pub jurisdiction: Jurisdiction,

    /// Report type
    #[arg(short, long, value_enum, default_value = "summary")]
    pub report_type: ReportType,

    /// Output file
    #[arg(short, long, required = true)]
    pub output: String,
}

#[derive(Clone, Copy, Debug, clap::ValueEnum)]
pub enum PatternType {
    Structuring,
    Layering,
    Integration,
    Velocity,
    RoundNumbers,
}

#[derive(Clone, Copy, Debug, clap::ValueEnum)]
pub enum Jurisdiction {
    US,
    EU,
    UK,
    Switzerland,
    Singapore,
}

#[derive(Clone, Copy, Debug, clap::ValueEnum)]
pub enum ReportType {
    Summary,
    Detailed,
    SAR, // Suspicious Activity Report
    TravelRule,
}

/// Handle risk assessment command
pub async fn handle_risk(
    args: RiskArgs,
    http: Arc<dyn HttpClient>,
    out: &Output,
) -> anyhow::Result<()> {
    handle_risk_with_client(args, etherscan_client(http), out).await
}

/// A client for the Etherscan key when it is set, sending through `http`.
fn etherscan_client(http: Arc<dyn HttpClient>) -> Option<BlockchainDataClient> {
    BlockchainDataClient::from_env_opt_with_http(http)
}

/// The risk engine, with Etherscan data when there is a client. Tells the
/// user which (above the spinner when one draws).
fn risk_engine(
    client: Option<&BlockchainDataClient>,
    spinner: Option<&crate::cli::progress::Spinner>,
    out: &Output,
) -> RiskEngine {
    let line = match client {
        Some(_) => "Using Etherscan API for enhanced analysis".to_string(),
        None => format!(
            "Note: no Etherscan API key, so most risk factors are not assessed. \
             Add one with `scope setup --key etherscan` or {ETHERSCAN_KEY_ENV}."
        ),
    };
    crate::cli::progress::notice(spinner, out, &line);
    RiskEngine::with_optional_client(client.cloned())
}

/// Handle risk assessment with an optional pre-built client (for testability).
pub async fn handle_risk_with_client(
    args: RiskArgs,
    client: Option<BlockchainDataClient>,
    out: &Output,
) -> anyhow::Result<()> {
    // Auto-detect chain if not specified
    let chain = match args.chain {
        Some(c) => c,
        None => detect_chain(&args.address)?,
    };

    let sp = crate::cli::progress::Spinner::new(
        &format!("Assessing risk for {} on {}...", args.address, chain),
        out,
    );

    let engine = risk_engine(client.as_ref(), Some(&sp), out);

    let assessment = engine.assess_address(&args.address, &chain).await?;
    sp.finish("Risk assessment complete.");

    // Format and display output
    let output = format_risk_report(&assessment, args.format, args.detailed);
    outln!(out, "{}", output)?;

    // Export to file if requested (respects format: json, yaml, markdown from path extension)
    if let Some(path) = args.output {
        let content = match std::path::Path::new(&path)
            .extension()
            .and_then(|e| e.to_str())
        {
            Some("md") | Some("markdown") => {
                format_risk_report(&assessment, OutputFormat::Markdown, args.detailed)
            }
            Some("yaml") | Some("yml") => {
                format_risk_report(&assessment, OutputFormat::Yaml, args.detailed)
            }
            _ => format_risk_report(&assessment, OutputFormat::Json, args.detailed),
        };
        std::fs::write(&path, content)?;
        out.note_saved("Report", &path);
    }

    Ok(())
}

/// Handle transaction tracing command
pub async fn handle_trace(
    args: TraceArgs,
    http: Arc<dyn HttpClient>,
    out: &Output,
) -> anyhow::Result<()> {
    handle_trace_with_client(args, etherscan_client(http), out).await
}

/// Handle transaction tracing with an optional pre-built client (for testability).
pub async fn handle_trace_with_client(
    args: TraceArgs,
    client: Option<BlockchainDataClient>,
    out: &Output,
) -> anyhow::Result<()> {
    note!(out, "Tracing transaction {}...", args.tx_hash);
    note!(out, "Depth: {} hops", args.depth);

    if args.flag_suspicious {
        note!(out, "Flagging suspicious addresses enabled");
    }

    let resolved_client = client;

    if let Some(client) = resolved_client {
        match client.trace_transaction(&args.tx_hash, args.depth).await {
            Ok(trace) => {
                outln!(out, "\nTransaction Trace")?;
                outln!(out, "=================")?;
                outln!(out, "Root: {}", trace.root_hash)?;
                outln!(out, "Hops: {}", trace.hops.len())?;

                for hop in &trace.hops {
                    outln!(
                        out,
                        "  Depth {}: {} ({} ETH)",
                        hop.depth,
                        hop.address,
                        hop.amount
                    )?;
                }
            }
            Err(e) => return Err(e.context(format!("cannot trace transaction {}", args.tx_hash))),
        }
    } else {
        note!(out, "Set {ETHERSCAN_KEY_ENV} to enable transaction tracing");
    }

    Ok(())
}

/// Handle pattern analysis command
pub async fn handle_analyze(
    args: AnalyzeArgs,
    http: Arc<dyn HttpClient>,
    out: &Output,
) -> anyhow::Result<()> {
    handle_analyze_with_client(args, etherscan_client(http), out).await
}

/// Handle pattern analysis with an optional pre-built client (for testability).
pub async fn handle_analyze_with_client(
    args: AnalyzeArgs,
    client: Option<BlockchainDataClient>,
    out: &Output,
) -> anyhow::Result<()> {
    note!(out, "Analyzing patterns for {}...", args.address);
    note!(out, "Patterns: {:?}", args.patterns);
    note!(out, "Time range: {}", args.range);

    let resolved_client = client;

    if let Some(client) = resolved_client {
        // Auto-detect chain
        let chain = match detect_chain(&args.address) {
            Ok(c) => c,
            Err(_) => "ethereum".to_string(),
        };

        match client.get_transactions(&args.address, &chain).await {
            Ok(txs) => {
                let analysis = analyze_patterns(&txs);

                outln!(out, "\nPattern Analysis Results")?;
                outln!(out, "========================")?;
                outln!(out, "Total transactions: {}", analysis.total_transactions)?;
                outln!(out, "Velocity: {:.2} tx/day", analysis.velocity_score)?;
                outln!(
                    out,
                    "Structuring detected: {}",
                    analysis.structuring_detected
                )?;
                outln!(
                    out,
                    "Round number pattern: {}",
                    analysis.round_number_pattern
                )?;
                outln!(out, "Unusual hour transactions: {}", analysis.unusual_hours)?;
            }
            Err(e) => {
                return Err(e.context(format!("cannot fetch transactions for {}", args.address)));
            }
        }
    } else {
        note!(out, "Set {ETHERSCAN_KEY_ENV} to enable pattern analysis");
    }

    Ok(())
}

/// Handle compliance report generation
pub async fn handle_compliance_report(
    args: ComplianceReportArgs,
    http: Arc<dyn HttpClient>,
    out: &Output,
) -> anyhow::Result<()> {
    let addresses = resolve_compliance_targets(&args.target)?;
    if addresses.is_empty() {
        anyhow::bail!("No addresses to analyze");
    }

    note!(
        out,
        "Generating {:?} compliance report for {} address(es) ({:?} jurisdiction)...",
        args.report_type,
        addresses.len(),
        args.jurisdiction
    );

    let client = etherscan_client(http);
    let engine = risk_engine(client.as_ref(), None, out);

    let mut risk_assessments = Vec::new();
    let mut pattern_results: Vec<(
        String,
        String,
        Option<scope::compliance::datasource::PatternAnalysis>,
    )> = Vec::new();

    for (addr, chain) in &addresses {
        let assessment = engine.assess_address(addr, chain).await?;
        risk_assessments.push(assessment.clone());

        let pat = if let Some(ref c) = client {
            c.get_transactions(addr, chain)
                .await
                .ok()
                .map(|txs| scope::compliance::datasource::analyze_patterns(&txs))
        } else {
            None
        };
        pattern_results.push((addr.clone(), chain.clone(), pat));
    }

    let content = format_compliance_report(
        &risk_assessments,
        &pattern_results,
        &args.jurisdiction,
        &args.report_type,
    );

    std::fs::write(&args.output, &content)?;
    out.note_saved("Compliance report", &args.output);

    Ok(())
}

/// Resolve target to (address, chain) pairs. Target can be a single address or path to file.
fn resolve_compliance_targets(target: &str) -> anyhow::Result<Vec<(String, String)>> {
    let path = std::path::Path::new(target);
    if path.exists() && path.is_file() {
        let content = std::fs::read_to_string(path)?;
        let mut out = Vec::new();
        for line in content.lines() {
            let line = line.trim();
            if line.is_empty() || line.starts_with('#') {
                continue;
            }
            let (addr, chain) = parse_address_line(line);
            out.push((addr.to_string(), chain.to_string()));
        }
        Ok(out)
    } else {
        let chain = detect_chain(target).unwrap_or_else(|_| "ethereum".to_string());
        Ok(vec![(target.to_string(), chain)])
    }
}

fn parse_address_line(line: &str) -> (&str, &str) {
    if let Some((addr, rest)) = line.split_once(',') {
        (addr.trim(), rest.trim())
    } else {
        (line, "ethereum")
    }
}

fn format_compliance_report(
    assessments: &[scope::compliance::risk::RiskAssessment],
    patterns: &[(
        String,
        String,
        Option<scope::compliance::datasource::PatternAnalysis>,
    )],
    jurisdiction: &Jurisdiction,
    report_type: &ReportType,
) -> String {
    let mut md = format!(
        "# Compliance Report\n\n\
        **Jurisdiction:** {:?}  \n\
        **Report Type:** {:?}  \n\
        **Generated:** {}  \n\
        **Addresses:** {}  \n\n",
        jurisdiction,
        report_type,
        chrono::Utc::now().format("%Y-%m-%d %H:%M:%S UTC"),
        assessments.len()
    );

    for (i, assessment) in assessments.iter().enumerate() {
        md.push_str(&format!(
            "---\n\n## Address {}: `{}`\n\n",
            i + 1,
            assessment.address
        ));
        md.push_str(&format!(
            "**Chain:** {}  \n**Risk Score:** {:.1}/10  \n**Risk Level:** {} {:?}  \n\n",
            assessment.chain,
            assessment.overall_score,
            assessment.risk_level.emoji(),
            assessment.risk_level
        ));

        if matches!(report_type, ReportType::Detailed | ReportType::SAR) {
            md.push_str("### Risk Factor Breakdown\n\n");
            for f in &assessment.factors {
                md.push_str(&format!(
                    "- **{}**: {:.1}/10 - {}\n",
                    f.name, f.score, f.description
                ));
            }
            if !assessment.recommendations.is_empty() {
                md.push_str("\n### Recommendations\n\n");
                for r in &assessment.recommendations {
                    md.push_str(&format!("- {}\n", r));
                }
            }
        }

        if let Some((_, _, Some(pat))) = patterns
            .iter()
            .find(|(a, c, _)| a == &assessment.address && c == &assessment.chain)
        {
            md.push_str("\n### Pattern Analysis\n\n");
            md.push_str(&format!(
                "- Total transactions: {}\n",
                pat.total_transactions
            ));
            md.push_str(&format!("- Velocity: {:.2} tx/day\n", pat.velocity_score));
            md.push_str(&format!(
                "- Structuring detected: {}\n",
                pat.structuring_detected
            ));
            md.push_str(&format!(
                "- Round number pattern: {}\n",
                pat.round_number_pattern
            ));
            md.push_str(&format!(
                "- Unusual hour transactions: {}\n",
                pat.unusual_hours
            ));
        }
    }

    md.push_str(&scope::display::report::report_footer());
    md
}

/// Auto-detect blockchain from address format
fn detect_chain(address: &str) -> anyhow::Result<String> {
    if address.starts_with("0x") && address.len() == 42 {
        // Could be any EVM chain, default to Ethereum
        Ok("ethereum".to_string())
    } else if address.len() == 32 || address.len() == 44 {
        // Solana base58
        Ok("solana".to_string())
    } else if address.starts_with("T") && address.len() == 34 {
        // Tron
        Ok("tron".to_string())
    } else if address.starts_with("bc1") || address.starts_with("1") || address.starts_with("3") {
        // Bitcoin
        Ok("bitcoin".to_string())
    } else {
        anyhow::bail!("Could not auto-detect chain from address: {}", address)
    }
}

// ============================================================================
// Unit Tests
// ============================================================================

#[cfg(test)]
mod tests {
    use super::*;

    fn quiet() -> crate::cli::output::Output {
        crate::cli::output::Output::capture().0
    }

    #[test]
    fn test_detect_chain_ethereum() {
        let result = detect_chain("0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2");
        assert!(result.is_ok());
        assert_eq!(result.unwrap(), "ethereum");
    }

    #[test]
    fn test_detect_chain_solana_short() {
        // Solana 32-char address
        let result = detect_chain("DRpbCBMxVnDK7maPM5tGv6MvB3v1sRMC");
        assert!(result.is_ok());
        assert_eq!(result.unwrap(), "solana");
    }

    #[test]
    fn test_detect_chain_solana_long() {
        // Solana 44-char address
        let result = detect_chain("DRpbCBMxVnDK7maPM5tGv6MvB3v1sRMC86PZ8okm21hy");
        assert!(result.is_ok());
        assert_eq!(result.unwrap(), "solana");
    }

    #[test]
    fn test_detect_chain_tron() {
        let result = detect_chain("TDqSquXBgUCLYvYC4XZgrprLK589dkhSCf");
        assert!(result.is_ok());
        assert_eq!(result.unwrap(), "tron");
    }

    #[test]
    fn test_detect_chain_bitcoin_bech32() {
        let result = detect_chain("bc1qw508d6qejxtdg4y5r3zarvary0c5xw7kv8f3t4");
        assert!(result.is_ok());
        assert_eq!(result.unwrap(), "bitcoin");
    }

    #[test]
    fn test_detect_chain_bitcoin_p2pkh() {
        let result = detect_chain("1BvBMSEYstWetqTFn5Au4m4GFg7xJaNVN2");
        assert!(result.is_ok());
        assert_eq!(result.unwrap(), "bitcoin");
    }

    #[test]
    fn test_detect_chain_bitcoin_p2sh() {
        let result = detect_chain("3J98t1WpEZ73CNmQviecrnyiWrnqRhWNLy");
        assert!(result.is_ok());
        assert_eq!(result.unwrap(), "bitcoin");
    }

    #[test]
    fn test_parse_address_line_with_chain() {
        let (addr, chain) = parse_address_line("0xabc, polygon");
        assert_eq!(addr, "0xabc");
        assert_eq!(chain, "polygon");
    }

    #[test]
    fn test_parse_address_line_no_chain() {
        let (addr, chain) = parse_address_line("0xabc");
        assert_eq!(addr, "0xabc");
        assert_eq!(chain, "ethereum");
    }

    #[test]
    fn test_resolve_compliance_targets_single_address() {
        let result =
            resolve_compliance_targets("0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2").unwrap();
        assert_eq!(result.len(), 1);
        assert_eq!(result[0].0, "0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2");
        assert_eq!(result[0].1, "ethereum");
    }

    #[test]
    fn test_resolve_compliance_targets_from_file() {
        let dir = tempfile::tempdir().unwrap();
        let path = dir.path().join("addresses.txt");
        std::fs::write(
            &path,
            "0xabc123, ethereum\n0xdef456, polygon\n# comment\n\n0x789,solana",
        )
        .unwrap();
        let result = resolve_compliance_targets(path.to_str().unwrap()).unwrap();
        assert_eq!(result.len(), 3);
        assert_eq!(result[0].0, "0xabc123");
        assert_eq!(result[0].1, "ethereum");
        assert_eq!(result[1].0, "0xdef456");
        assert_eq!(result[1].1, "polygon");
        assert_eq!(result[2].0, "0x789");
        assert_eq!(result[2].1, "solana");
    }

    #[test]
    fn test_detect_chain_unknown() {
        let result = detect_chain("unknown_address_format_xyz");
        assert!(result.is_err());
    }

    #[tokio::test]
    async fn test_handle_risk_no_api_key() {
        // Should work without API key (basic scoring)
        unsafe { std::env::remove_var("ETHERSCAN_API_KEY") };
        let args = RiskArgs {
            address: "0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2".to_string(),
            chain: Some("ethereum".to_string()),
            format: OutputFormat::Table,
            detailed: false,
            output: None,
        };
        let result = handle_risk(args, scope::http::test_transport(), &quiet()).await;
        assert!(result.is_ok());
    }

    #[tokio::test]
    async fn test_handle_risk_json_format() {
        unsafe { std::env::remove_var("ETHERSCAN_API_KEY") };
        let args = RiskArgs {
            address: "0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2".to_string(),
            chain: Some("ethereum".to_string()),
            format: OutputFormat::Json,
            detailed: true,
            output: None,
        };
        let result = handle_risk(args, scope::http::test_transport(), &quiet()).await;
        assert!(result.is_ok());
    }

    #[tokio::test]
    async fn test_handle_risk_with_export() {
        unsafe { std::env::remove_var("ETHERSCAN_API_KEY") };
        let temp = tempfile::NamedTempFile::new().unwrap();
        let path = temp.path().to_string_lossy().to_string();
        let args = RiskArgs {
            address: "0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2".to_string(),
            chain: Some("ethereum".to_string()),
            format: OutputFormat::Table,
            detailed: false,
            output: Some(path.clone()),
        };
        let result = handle_risk(args, scope::http::test_transport(), &quiet()).await;
        assert!(result.is_ok());
        assert!(std::path::Path::new(&path).exists());
    }

    #[tokio::test]
    async fn test_handle_risk_export_markdown_extension() {
        unsafe { std::env::remove_var("ETHERSCAN_API_KEY") };
        let dir = tempfile::tempdir().unwrap();
        let path = dir.path().join("report.md");
        let path_str = path.to_string_lossy().to_string();
        let args = RiskArgs {
            address: "0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2".to_string(),
            chain: Some("ethereum".to_string()),
            format: OutputFormat::Table,
            detailed: false,
            output: Some(path_str.clone()),
        };
        let result = handle_risk(args, scope::http::test_transport(), &quiet()).await;
        assert!(result.is_ok());
        let content = std::fs::read_to_string(&path).unwrap();
        assert!(content.contains("Risk") || content.contains("risk"));
    }

    #[tokio::test]
    async fn test_handle_risk_export_yaml_extension() {
        unsafe { std::env::remove_var("ETHERSCAN_API_KEY") };
        let dir = tempfile::tempdir().unwrap();
        let path = dir.path().join("report.yaml");
        let path_str = path.to_string_lossy().to_string();
        let args = RiskArgs {
            address: "0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2".to_string(),
            chain: Some("ethereum".to_string()),
            format: OutputFormat::Table,
            detailed: false,
            output: Some(path_str.clone()),
        };
        let result = handle_risk(args, scope::http::test_transport(), &quiet()).await;
        assert!(result.is_ok());
        let content = std::fs::read_to_string(&path).unwrap();
        assert!(content.contains("address") || content.contains("chain"));
    }

    #[tokio::test]
    async fn test_handle_risk_auto_detect_chain() {
        unsafe { std::env::remove_var("ETHERSCAN_API_KEY") };
        let args = RiskArgs {
            address: "0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2".to_string(),
            chain: None, // auto-detect
            format: OutputFormat::Table,
            detailed: false,
            output: None,
        };
        let result = handle_risk(args, scope::http::test_transport(), &quiet()).await;
        assert!(result.is_ok());
    }

    #[tokio::test]
    async fn test_handle_trace_no_api_key() {
        unsafe { std::env::remove_var("ETHERSCAN_API_KEY") };
        let args = TraceArgs {
            tx_hash: "0xabc123".to_string(),
            depth: 3,
            flag_suspicious: true,
            format: OutputFormat::Table,
        };
        let result = handle_trace(args, scope::http::test_transport(), &quiet()).await;
        assert!(result.is_ok()); // No API key → prints message, doesn't error
    }

    #[tokio::test]
    async fn test_handle_analyze_no_api_key() {
        unsafe { std::env::remove_var("ETHERSCAN_API_KEY") };
        let args = AnalyzeArgs {
            address: "0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2".to_string(),
            patterns: vec![PatternType::Structuring, PatternType::Layering],
            range: "30d".to_string(),
            format: OutputFormat::Table,
        };
        let result = handle_analyze(args, scope::http::test_transport(), &quiet()).await;
        assert!(result.is_ok());
    }

    #[tokio::test]
    async fn test_handle_compliance_report() {
        // A temp dir: `/tmp` is not a folder on every platform.
        let dir = tempfile::tempdir().unwrap();
        let args = ComplianceReportArgs {
            target: "0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2".to_string(),
            jurisdiction: Jurisdiction::US,
            report_type: ReportType::Summary,
            output: dir
                .path()
                .join("test_compliance.json")
                .display()
                .to_string(),
        };
        let result = handle_compliance_report(args, scope::http::test_transport(), &quiet()).await;
        assert!(result.is_ok()); // Not yet implemented → prints message
    }

    #[tokio::test]
    async fn test_handle_compliance_report_eu_detailed() {
        // A temp dir: `/tmp` is not a folder on every platform.
        let dir = tempfile::tempdir().unwrap();
        let args = ComplianceReportArgs {
            target: "0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2".to_string(),
            jurisdiction: Jurisdiction::EU,
            report_type: ReportType::Detailed,
            output: dir
                .path()
                .join("test_compliance_eu.json")
                .display()
                .to_string(),
        };
        let result = handle_compliance_report(args, scope::http::test_transport(), &quiet()).await;
        assert!(result.is_ok());
    }

    #[tokio::test]
    async fn test_handle_compliance_report_uk_sar() {
        // A temp dir: `/tmp` is not a folder on every platform.
        let dir = tempfile::tempdir().unwrap();
        let args = ComplianceReportArgs {
            target: "0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2".to_string(),
            jurisdiction: Jurisdiction::UK,
            report_type: ReportType::SAR,
            output: dir
                .path()
                .join("test_compliance_uk.json")
                .display()
                .to_string(),
        };
        let result = handle_compliance_report(args, scope::http::test_transport(), &quiet()).await;
        assert!(result.is_ok());
    }

    #[tokio::test]
    async fn test_handle_compliance_report_singapore_travel_rule() {
        // A temp dir: `/tmp` is not a folder on every platform.
        let dir = tempfile::tempdir().unwrap();
        let args = ComplianceReportArgs {
            target: "0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2".to_string(),
            jurisdiction: Jurisdiction::Singapore,
            report_type: ReportType::TravelRule,
            output: dir
                .path()
                .join("test_compliance_sg.json")
                .display()
                .to_string(),
        };
        let result = handle_compliance_report(args, scope::http::test_transport(), &quiet()).await;
        assert!(result.is_ok());
    }

    #[tokio::test]
    async fn test_handle_compliance_report_switzerland() {
        // A temp dir: `/tmp` is not a folder on every platform.
        let dir = tempfile::tempdir().unwrap();
        let args = ComplianceReportArgs {
            target: "0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2".to_string(),
            jurisdiction: Jurisdiction::Switzerland,
            report_type: ReportType::Summary,
            output: dir
                .path()
                .join("test_compliance_ch.json")
                .display()
                .to_string(),
        };
        let result = handle_compliance_report(args, scope::http::test_transport(), &quiet()).await;
        assert!(result.is_ok());
    }

    #[tokio::test]
    async fn test_handle_risk_yaml_format() {
        unsafe { std::env::remove_var("ETHERSCAN_API_KEY") };
        let args = RiskArgs {
            address: "0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2".to_string(),
            chain: Some("ethereum".to_string()),
            format: OutputFormat::Yaml,
            detailed: false,
            output: None,
        };
        let result = handle_risk(args, scope::http::test_transport(), &quiet()).await;
        assert!(result.is_ok());
    }

    // ========================================================================
    // Tests with injected mockito client (covers API-present paths)
    // ========================================================================

    fn mock_etherscan_response(txs: &[serde_json::Value]) -> String {
        serde_json::json!({
            "status": "1",
            "message": "OK",
            "result": txs
        })
        .to_string()
    }

    fn make_mock_client(base_url: &str) -> BlockchainDataClient {
        let sources = scope::compliance::datasource::DataSources::new("test_api_key".to_string());
        BlockchainDataClient::with_base_url(sources, base_url)
    }

    #[tokio::test]
    async fn test_handle_risk_with_api_client() {
        let mut server = mockito::Server::new_async().await;
        let _mock = server
            .mock("GET", mockito::Matcher::Any)
            .with_status(200)
            .with_body(mock_etherscan_response(&[]))
            .create_async()
            .await;

        let client = make_mock_client(&server.url());
        let args = RiskArgs {
            address: "0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2".to_string(),
            chain: Some("ethereum".to_string()),
            format: OutputFormat::Table,
            detailed: true,
            output: None,
        };
        let result = handle_risk_with_client(args, Some(client), &quiet()).await;
        assert!(result.is_ok());
    }

    #[tokio::test]
    async fn test_handle_risk_with_api_client_json_export() {
        let mut server = mockito::Server::new_async().await;
        let _mock = server
            .mock("GET", mockito::Matcher::Any)
            .with_status(200)
            .with_body(mock_etherscan_response(&[]))
            .create_async()
            .await;

        let client = make_mock_client(&server.url());
        let tmp = tempfile::NamedTempFile::new().unwrap();
        let path = tmp.path().to_string_lossy().to_string();

        let args = RiskArgs {
            address: "0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2".to_string(),
            chain: Some("ethereum".to_string()),
            format: OutputFormat::Table,
            detailed: false,
            output: Some(path.clone()),
        };
        let result = handle_risk_with_client(args, Some(client), &quiet()).await;
        assert!(result.is_ok());
        assert!(std::path::Path::new(&path).exists());
    }

    #[tokio::test]
    async fn test_handle_trace_with_api_client() {
        let mut server = mockito::Server::new_async().await;
        let _mock = server
            .mock("GET", mockito::Matcher::Any)
            .with_status(200)
            .with_body(mock_etherscan_response(&[serde_json::json!({
                "hash": "0xabc",
                "from": "0x111",
                "to": "0x222",
                "value": "1000000000000000000",
                "timeStamp": "1700000000",
                "blockNumber": "18000000",
                "gasUsed": "21000",
                "gasPrice": "50000000000",
                "isError": "0",
                "input": "0x"
            })]))
            .create_async()
            .await;

        let client = make_mock_client(&server.url());
        let args = TraceArgs {
            tx_hash: "0xabc123def456".to_string(),
            depth: 2,
            flag_suspicious: true,
            format: OutputFormat::Table,
        };
        let result = handle_trace_with_client(args, Some(client), &quiet()).await;
        assert!(result.is_ok());
    }

    #[tokio::test]
    async fn test_handle_trace_with_api_client_connection_refused() {
        // Use invalid URL to trigger connection error so trace_transaction returns Err
        let client = make_mock_client("http://127.0.0.1:1");
        let args = TraceArgs {
            tx_hash: "0xabc123".to_string(),
            depth: 2,
            flag_suspicious: false,
            format: OutputFormat::Table,
        };
        // A failed trace is the command's error, not a note: the exit
        // code must say it failed.
        let err = handle_trace_with_client(args, Some(client), &quiet())
            .await
            .unwrap_err();
        assert!(
            err.to_string()
                .contains("cannot trace transaction 0xabc123"),
            "{err:#}"
        );
    }

    #[tokio::test]
    async fn test_handle_trace_with_api_client_error() {
        let mut server = mockito::Server::new_async().await;
        let _mock = server
            .mock("GET", mockito::Matcher::Any)
            .with_status(200)
            .with_body(r#"{"status":"0","message":"NOTOK","result":"Error"}"#)
            .create_async()
            .await;

        let client = make_mock_client(&server.url());
        let args = TraceArgs {
            tx_hash: "0xabc123def456".to_string(),
            depth: 3,
            flag_suspicious: false,
            format: OutputFormat::Table,
        };
        // Error path: should print error but return Ok
        let result = handle_trace_with_client(args, Some(client), &quiet()).await;
        assert!(result.is_ok());
    }

    #[tokio::test]
    async fn test_handle_analyze_with_api_client() {
        let mut server = mockito::Server::new_async().await;
        let _mock = server
            .mock("GET", mockito::Matcher::Any)
            .with_status(200)
            .with_body(mock_etherscan_response(&[serde_json::json!({
                "hash": "0xabc",
                "from": "0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2",
                "to": "0x222",
                "value": "1000000000000000000",
                "timeStamp": "1700000000",
                "blockNumber": "18000000",
                "gasUsed": "21000",
                "gasPrice": "50000000000",
                "isError": "0",
                "input": "0x"
            })]))
            .create_async()
            .await;

        let client = make_mock_client(&server.url());
        let args = AnalyzeArgs {
            address: "0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2".to_string(),
            patterns: vec![PatternType::Structuring, PatternType::Velocity],
            range: "30d".to_string(),
            format: OutputFormat::Table,
        };
        let result = handle_analyze_with_client(args, Some(client), &quiet()).await;
        assert!(result.is_ok(), "{result:?}");
    }

    #[tokio::test]
    async fn test_handle_analyze_with_api_client_error() {
        let mut server = mockito::Server::new_async().await;
        let _mock = server
            .mock("GET", mockito::Matcher::Any)
            .with_status(200)
            .with_body(r#"{"status":"0","message":"NOTOK","result":"Error"}"#)
            .create_async()
            .await;

        let client = make_mock_client(&server.url());
        let args = AnalyzeArgs {
            address: "0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2".to_string(),
            patterns: vec![PatternType::Layering],
            range: "7d".to_string(),
            format: OutputFormat::Table,
        };
        // A failed fetch is the command's error, not a note.
        let err = handle_analyze_with_client(args, Some(client), &quiet())
            .await
            .unwrap_err();
        assert!(
            err.to_string()
                .contains("cannot fetch transactions for 0x742d"),
            "{err:#}"
        );
    }

    #[tokio::test]
    async fn test_handle_analyze_with_detect_chain_failure() {
        let mut server = mockito::Server::new_async().await;
        let _mock = server
            .mock("GET", mockito::Matcher::Any)
            .with_status(200)
            .with_body(mock_etherscan_response(&[]))
            .create_async()
            .await;

        let client = make_mock_client(&server.url());
        // Address that won't auto-detect → falls back to "ethereum"
        let args = AnalyzeArgs {
            address: "unknown_format_addr".to_string(),
            patterns: vec![PatternType::Integration],
            range: "1y".to_string(),
            format: OutputFormat::Json,
        };
        let result = handle_analyze_with_client(args, Some(client), &quiet()).await;
        assert!(result.is_ok());
    }

    #[tokio::test]
    async fn test_handle_risk_markdown_detailed() {
        unsafe { std::env::remove_var("ETHERSCAN_API_KEY") };
        let args = RiskArgs {
            address: "0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2".to_string(),
            chain: Some("ethereum".to_string()),
            format: OutputFormat::Markdown,
            detailed: true,
            output: None,
        };
        let result = handle_risk(args, scope::http::test_transport(), &quiet()).await;
        assert!(result.is_ok());
    }

    #[tokio::test]
    async fn test_handle_trace_no_flag_suspicious() {
        unsafe { std::env::remove_var("ETHERSCAN_API_KEY") };
        let args = TraceArgs {
            tx_hash: "0xdef456".to_string(),
            depth: 5,
            flag_suspicious: false,
            format: OutputFormat::Json,
        };
        let result = handle_trace(args, scope::http::test_transport(), &quiet()).await;
        assert!(result.is_ok());
    }

    #[tokio::test]
    async fn test_handle_analyze_all_patterns() {
        unsafe { std::env::remove_var("ETHERSCAN_API_KEY") };
        let args = AnalyzeArgs {
            address: "0x742d35Cc6634C0532925a3b844Bc9e7595f1b3c2".to_string(),
            patterns: vec![
                PatternType::Structuring,
                PatternType::Layering,
                PatternType::Integration,
                PatternType::Velocity,
                PatternType::RoundNumbers,
            ],
            range: "6m".to_string(),
            format: OutputFormat::Json,
        };
        let result = handle_analyze(args, scope::http::test_transport(), &quiet()).await;
        assert!(result.is_ok());
    }

    #[test]
    fn test_pattern_type_debug() {
        let patterns = [
            PatternType::Structuring,
            PatternType::Layering,
            PatternType::Integration,
            PatternType::Velocity,
            PatternType::RoundNumbers,
        ];
        for p in &patterns {
            let debug = format!("{:?}", p);
            assert!(!debug.is_empty());
        }
    }

    #[test]
    fn test_jurisdiction_debug() {
        let jurisdictions = [
            Jurisdiction::US,
            Jurisdiction::EU,
            Jurisdiction::UK,
            Jurisdiction::Switzerland,
            Jurisdiction::Singapore,
        ];
        for j in &jurisdictions {
            let debug = format!("{:?}", j);
            assert!(!debug.is_empty());
        }
    }

    #[test]
    fn test_report_type_debug() {
        let types = [
            ReportType::Summary,
            ReportType::Detailed,
            ReportType::SAR,
            ReportType::TravelRule,
        ];
        for t in &types {
            let debug = format!("{:?}", t);
            assert!(!debug.is_empty());
        }
    }

    #[test]
    fn test_format_compliance_report_summary() {
        use scope::compliance::risk::{RiskAssessment, RiskCategory, RiskFactor, RiskLevel};
        let assessment = RiskAssessment {
            address: "0xabc".to_string(),
            chain: "ethereum".to_string(),
            overall_score: 3.5,
            risk_level: RiskLevel::Low,
            factors: vec![RiskFactor {
                name: "Address Age".to_string(),
                category: RiskCategory::Behavioral,
                score: 2.0,
                weight: 1.0,
                description: "Address is well-established".to_string(),
                evidence: vec![],
            }],
            recommendations: vec!["Continue monitoring".to_string()],
            not_assessed: Vec::new(),
            assessed_at: chrono::Utc::now(),
        };
        let patterns: Vec<(
            String,
            String,
            Option<scope::compliance::datasource::PatternAnalysis>,
        )> = vec![];
        let report = format_compliance_report(
            &[assessment],
            &patterns,
            &Jurisdiction::US,
            &ReportType::Summary,
        );
        assert!(report.contains("Compliance Report"));
        assert!(report.contains("0xabc"));
        assert!(report.contains("ethereum"));
        assert!(report.contains("3.5"));
        assert!(report.contains("Low"));
        // Summary report should not include risk factor breakdown
        assert!(!report.contains("Risk Factor Breakdown"));
    }

    #[test]
    fn test_format_compliance_report_detailed() {
        use scope::compliance::risk::{RiskAssessment, RiskCategory, RiskFactor, RiskLevel};
        let assessment = RiskAssessment {
            address: "0xdef".to_string(),
            chain: "ethereum".to_string(),
            overall_score: 5.5,
            risk_level: RiskLevel::Medium,
            factors: vec![
                RiskFactor {
                    name: "Address Age".to_string(),
                    category: RiskCategory::Behavioral,
                    score: 2.0,
                    weight: 1.0,
                    description: "Address is well-established".to_string(),
                    evidence: vec![],
                },
                RiskFactor {
                    name: "Transaction Velocity".to_string(),
                    category: RiskCategory::Behavioral,
                    score: 7.0,
                    weight: 0.8,
                    description: "High transaction frequency detected".to_string(),
                    evidence: vec![],
                },
            ],
            recommendations: vec![
                "Continue monitoring".to_string(),
                "Review transaction patterns".to_string(),
            ],
            not_assessed: Vec::new(),
            assessed_at: chrono::Utc::now(),
        };
        let patterns: Vec<(
            String,
            String,
            Option<scope::compliance::datasource::PatternAnalysis>,
        )> = vec![];
        let report = format_compliance_report(
            &[assessment],
            &patterns,
            &Jurisdiction::EU,
            &ReportType::Detailed,
        );
        assert!(report.contains("Compliance Report"));
        assert!(report.contains("0xdef"));
        assert!(report.contains("5.5"));
        assert!(report.contains("Medium"));
        // Detailed report should include risk factor breakdown
        assert!(report.contains("Risk Factor Breakdown"));
        assert!(report.contains("Address Age"));
        assert!(report.contains("Transaction Velocity"));
        assert!(report.contains("Recommendations"));
        assert!(report.contains("Continue monitoring"));
        assert!(report.contains("Review transaction patterns"));
    }

    #[test]
    fn test_format_compliance_report_with_pattern_analysis() {
        use scope::compliance::datasource::PatternAnalysis;
        use scope::compliance::risk::{RiskAssessment, RiskCategory, RiskFactor, RiskLevel};
        let assessment = RiskAssessment {
            address: "0x123".to_string(),
            chain: "ethereum".to_string(),
            overall_score: 3.5,
            risk_level: RiskLevel::Low,
            factors: vec![RiskFactor {
                name: "Address Age".to_string(),
                category: RiskCategory::Behavioral,
                score: 2.0,
                weight: 1.0,
                description: "Address is well-established".to_string(),
                evidence: vec![],
            }],
            recommendations: vec!["Continue monitoring".to_string()],
            not_assessed: Vec::new(),
            assessed_at: chrono::Utc::now(),
        };
        let patterns: Vec<(String, String, Option<PatternAnalysis>)> = vec![(
            "0x123".to_string(),
            "ethereum".to_string(),
            Some(PatternAnalysis {
                total_transactions: 100,
                velocity_score: 2.5,
                structuring_detected: false,
                round_number_pattern: false,
                time_clustering: false,
                unusual_hours: 3,
            }),
        )];
        let report = format_compliance_report(
            &[assessment],
            &patterns,
            &Jurisdiction::UK,
            &ReportType::Detailed,
        );
        assert!(report.contains("Compliance Report"));
        assert!(report.contains("0x123"));
        // Check for pattern analysis section
        assert!(report.contains("Pattern Analysis"));
        assert!(report.contains("Total transactions: 100"));
        assert!(report.contains("Velocity: 2.50 tx/day"));
        assert!(report.contains("Structuring detected: false"));
        assert!(report.contains("Round number pattern: false"));
        assert!(report.contains("Unusual hour transactions: 3"));
    }

    #[test]
    fn test_format_compliance_report_sar_type() {
        use scope::compliance::risk::{RiskAssessment, RiskCategory, RiskFactor, RiskLevel};
        let assessment = RiskAssessment {
            address: "0xsar".to_string(),
            chain: "ethereum".to_string(),
            overall_score: 7.5,
            risk_level: RiskLevel::High,
            factors: vec![RiskFactor {
                name: "Tx Velocity".to_string(),
                category: RiskCategory::Behavioral,
                score: 8.0,
                weight: 1.0,
                description: "High velocity".to_string(),
                evidence: vec![],
            }],
            recommendations: vec!["File SAR".to_string()],
            not_assessed: Vec::new(),
            assessed_at: chrono::Utc::now(),
        };
        let patterns: Vec<(
            String,
            String,
            Option<scope::compliance::datasource::PatternAnalysis>,
        )> = vec![];
        let report = format_compliance_report(
            &[assessment],
            &patterns,
            &Jurisdiction::US,
            &ReportType::SAR,
        );
        assert!(report.contains("Compliance Report"));
        assert!(report.contains("Risk Factor Breakdown"));
        assert!(report.contains("Tx Velocity"));
        assert!(report.contains("File SAR"));
    }

    #[test]
    fn test_format_compliance_report_travel_rule_type() {
        use scope::compliance::risk::{RiskAssessment, RiskCategory, RiskFactor, RiskLevel};
        let assessment = RiskAssessment {
            address: "0xtravel".to_string(),
            chain: "ethereum".to_string(),
            overall_score: 4.0,
            risk_level: RiskLevel::Medium,
            factors: vec![RiskFactor {
                name: "Travel Rule".to_string(),
                category: RiskCategory::Behavioral,
                score: 4.0,
                weight: 1.0,
                description: "Threshold check".to_string(),
                evidence: vec![],
            }],
            recommendations: vec![],
            not_assessed: Vec::new(),
            assessed_at: chrono::Utc::now(),
        };
        let patterns: Vec<(
            String,
            String,
            Option<scope::compliance::datasource::PatternAnalysis>,
        )> = vec![];
        let report = format_compliance_report(
            &[assessment],
            &patterns,
            &Jurisdiction::Singapore,
            &ReportType::TravelRule,
        );
        assert!(report.contains("Compliance Report"));
        assert!(report.contains("0xtravel"));
        assert!(report.contains("4.0"));
    }

    #[test]
    fn test_resolve_compliance_targets_file_empty_and_comments_only() {
        let dir = tempfile::tempdir().unwrap();
        let path = dir.path().join("empty.txt");
        std::fs::write(&path, "\n\n# comment only\n  \n").unwrap();
        let result = resolve_compliance_targets(path.to_str().unwrap()).unwrap();
        assert!(result.is_empty());
    }

    #[test]
    fn test_parse_address_line_with_chain_trimmed() {
        let (addr, chain) = parse_address_line("0xabc , polygon ");
        assert_eq!(addr, "0xabc");
        assert_eq!(chain, "polygon");
    }
}