import type { TerminalAuthorizer } from "./authorizer";
import type { PermissionPromptDecision } from "./permission-dialog";

/** Why this authorizer denies; the provenance record's `reason` (#726). */
const NO_AUTHORITY_REASON = "No live authority was reachable for this session";

/**
 * Least-privilege Authorizer: no authority is reachable for this session
 * (no UI, not a subagent), so every ask is denied.
 *
 * The denial carries the `confirmationUnavailable` marker so the ask path can
 * distinguish "nobody could answer" from an interactive user denial when it
 * derives the review-entry and decision-event resolution.
 */
export class DenyingAuthorizer implements TerminalAuthorizer {
  authorize(): Promise<PermissionPromptDecision> {
    return Promise.resolve({
      approved: false,
      state: "denied",
      confirmationUnavailable: true,
      decidedBy: { kind: "unavailable", reason: NO_AUTHORITY_REASON },
    });
  }
}