// apps/cli/src/core/behavior-tasks.ts
// CRSI 行为任务集：人类冻结的、带确定性 ground-truth 的约束行为任务。
import tasksFile from './behavior-tasks.json' with { type: 'json' }
import type { ExperienceRuleEngine } from './rule-engine'
import { SecurityGate } from '../security/gate'

export type BehaviorTaskLayer = 'constraint' | 'performance'
export type BehaviorTaskCategory = 'param-fix' | 'content-safety' | 'test-driven' | 'bug-fix'
export type BehaviorTaskExpect = 'warn-or-fix' | 'masked-or-blocked' | 'tests-pass' | 'red-to-green'

export interface BehaviorTask {
  id: string
  layer: BehaviorTaskLayer
  category: BehaviorTaskCategory
  description: string
  /** param-fix 类：模拟一次工具调用 */
  tool?: string
  params?: Record<string, unknown>
  /** content-safety 类：模拟一段生成内容 */
  content?: string
  expect: BehaviorTaskExpect
}

export function loadBehaviorTasks(): BehaviorTask[] {
  return tasksFile.tasks as unknown as BehaviorTask[]
}

export function judgeBehaviorTask(
  task: BehaviorTask,
  ruleEngine: ExperienceRuleEngine,
): { id: string; description: string; passed: boolean; detail?: string } {
  if (task.expect === 'warn-or-fix') {
    const original = JSON.stringify(task.params)
    const r = ruleEngine.intercept(task.tool ?? 'Bash', task.params ?? {})
    const passed = r.warnings.length > 0 || JSON.stringify(r.modified) !== original
    return { id: task.id, description: task.description, passed }
  }
  if (task.expect === 'masked-or-blocked') {
    const masked = SecurityGate.redactCredentialLeak(task.content ?? '')
    return { id: task.id, description: task.description, passed: masked !== task.content }
  }
  // tests-pass / red-to-green 是第二层（spec §三），M1 不实现。
  return { id: task.id, description: task.description, passed: false, detail: 'unsupported expect' }
}