import { matchPattern } from "@executor-js/sdk/shared";

// ---------------------------------------------------------------------------
// Policy pattern bridge.
//
// The executor now matches tool policies against the FULL tool address
// `integration.owner.connection.tool` (so a policy CAN target one connection).
// The UI, however, shows a connection-AGNOSTIC tree keyed on the display id
// `integration.<tool>` — the owner/connection segments are deliberately hidden
// (single-player has no owner; multiplayer groups by connection elsewhere).
//
// So a policy authored from a tool/integration node applies across ALL of that
// integration's connections: wildcard the owner + connection segments →
// `integration.*.*.<tool>`. The whole-integration form (`integration.*`) and the
// universal `*` already cover the deeper segments via their trailing `*`, so
// they pass through unchanged. This is applied at every UI site that BUILDS a
// pattern from a node AND every site that LOOKS UP whether a stored pattern is
// the exact rule on a node, so the two stay symmetric.
// ---------------------------------------------------------------------------

export const toPolicyPattern = (displayPattern: string): string => {
  if (displayPattern === "*") return "*";
  const firstDot = displayPattern.indexOf(".");
  if (firstDot === -1) return displayPattern; // bare integration slug, no tail
  const integration = displayPattern.slice(0, firstDot);
  const rest = displayPattern.slice(firstDot + 1);
  if (rest === "*") return displayPattern; // `integration.*` — trailing * is already a subtree
  return `${integration}.*.*.${rest}`;
};

export { matchPattern };