import { describe, expect, it } from "@effect/vitest";
import { Data, Effect, Schema } from "effect";

import { ElicitationResponse, createExecutor, definePlugin } from "@executor-js/sdk";
import { makeTestConfig } from "@executor-js/sdk/testing";
import { ExecutionToolError } from "./errors";
import { makeExecutorToolInvoker } from "./tool-invoker";

const EmptyInputSchema = Schema.toStandardSchemaV1(
  Schema.toStandardJSONSchemaV1(Schema.Struct({})),
);

const acceptAll = () => Effect.succeed(ElicitationResponse.make({ action: "accept" }));

// Plugin-internal tagged error whose `cause` carries internal diagnostics.
// The dispatcher must route this through the opaque-generic path so none of
// that context reaches the sandbox via Error.message.
class FakePluginInvocationError extends Data.TaggedError("PluginInvocationError")<{
  readonly message: string;
  readonly cause: unknown;
}> {}

const leakyPlugin = definePlugin(() => ({
  id: "leaky-test" as const,
  storage: () => ({}),
  staticSources: () => [
    {
      id: "leaky",
      kind: "in-memory",
      name: "Leaky",
      tools: [
        {
          name: "failsWithCause",
          description: "",
          inputSchema: EmptyInputSchema,
          handler: () =>
            Effect.fail(
              new FakePluginInvocationError({
                message: "Upstream request failed",
                cause: {
                  _tag: "InternalTransportError",
                  request: {
                    method: "GET",
                    url: "https://internal.service.local/v1/resources?trace=trace-123",
                    headers: { "x-internal-routing": "private-cluster" },
                  },
                  stack: "Error: connect failed\n    at plugin-transport.ts:42:11",
                  note: "internal diagnostic detail",
                },
              }),
            ),
        },
        {
          name: "throwsRawError",
          description: "",
          inputSchema: EmptyInputSchema,
          handler: () =>
            Effect.fail(
              Object.assign(
                // oxlint-disable-next-line executor/no-error-constructor -- boundary: leak test deliberately fails with a raw Error + crafted stack to assert the dispatcher's opaque-generic redaction
                new Error("Internal: secret 'sk_live_abcd' rotation failed"),
                {
                  stack:
                    "Error: Internal: secret 'sk_live_abcd' rotation failed\n    at /home/svc/.../secret-store.ts:88",
                },
              ),
            ),
        },
      ],
    },
  ],
}));

describe("internal-error leak audit (opaque defects)", () => {
  it.effect("plugin tagged error: defect surfaces only as opaque generic + correlation id", () =>
    Effect.gen(function* () {
      const executor = yield* createExecutor(makeTestConfig({ plugins: [leakyPlugin()] as const }));
      const invoker = makeExecutorToolInvoker(executor, {
        invokeOptions: { onElicitation: acceptAll },
      });

      const err = yield* Effect.flip(invoker.invoke({ path: "leaky.failsWithCause", args: {} }));
      expect(err).toBeInstanceOf(ExecutionToolError);
      // oxlint-disable-next-line executor/no-unknown-error-message -- boundary: leak test inspects the rendered message to assert it is the opaque generic
      const msg = (err as { message: string }).message;
      // Must be the canonical opaque shape: "Internal tool error [<hex>]"
      expect(msg).toMatch(/^Internal tool error \[[0-9a-f]{8}\]$/);
      // Crucially, no internal context leaks
      expect(msg).not.toContain("trace-123");
      expect(msg).not.toContain("private-cluster");
      expect(msg).not.toContain("internal.service.local");
      expect(msg).not.toContain("InternalTransportError");
      expect(msg).not.toContain("Upstream request failed");
    }),
  );

  it.effect("plain Error with stack: stack and message do NOT escape", () =>
    Effect.gen(function* () {
      const executor = yield* createExecutor(makeTestConfig({ plugins: [leakyPlugin()] as const }));
      const invoker = makeExecutorToolInvoker(executor, {
        invokeOptions: { onElicitation: acceptAll },
      });

      const err = yield* Effect.flip(invoker.invoke({ path: "leaky.throwsRawError", args: {} }));
      // oxlint-disable-next-line executor/no-unknown-error-message -- boundary: leak test inspects the rendered message to assert it is the opaque generic
      const msg = (err as { message: string }).message;
      expect(msg).toMatch(/^Internal tool error \[[0-9a-f]{8}\]$/);
      expect(msg).not.toContain("secret-store.ts");
      expect(msg).not.toContain("at /home/");
      expect(msg).not.toContain("sk_live_abcd");
    }),
  );
});