import {

summarizeCommandSegmentsForDisplay,

type CommandExplanationSummary,

} from "../../infra/command-analysis/explain.js";

import { analyzeCommandForPolicy } from "../../infra/command-analysis/policy.js";

import { resolveCommandAnalysisSummaryForDisplay } from "../../infra/command-analysis/explain.js";

import {

resolveExecApprovalCommandDisplay,

sanitizeExecApprovalDisplayText,

} as const;

const RESERVED_PLUGIN_APPROVAL_ID_PREFIX = "plugin:";

function sanitizeCommandAnalysisSummary(

summary: CommandExplanationSummary,

): CommandExplanationSummary {

return {

commandCount: summary.commandCount,

nestedCommandCount: summary.nestedCommandCount,

riskKinds: summary.riskKinds.map((kind) => sanitizeExecApprovalWarningText(kind)),

warningLines: summary.warningLines.map((line) => sanitizeExecApprovalWarningText(line)),

};

}

function resolveExecApprovalCommandAnalysis(params: {

host: string;

commandText: string;

commandArgv?: string[];

cwd?: string | null;

}): CommandExplanationSummary | null {

const analysis =

Array.isArray(params.commandArgv) && params.commandArgv.length > 0

? analyzeCommandForPolicy({

source: "argv",

argv: params.commandArgv,

cwd: params.cwd ?? undefined,

})

: params.host === "node"

? null

: analyzeCommandForPolicy({

source: "shell",

command: params.commandText,

cwd: params.cwd ?? undefined,

});

if (!analysis?.ok) {

return null;

}

return sanitizeCommandAnalysisSummary(summarizeCommandSegmentsForDisplay(analysis.segments));

}

type ExecApprovalIosPushDelivery = {

handleRequested?: (request: ExecApprovalRequest) => Promise<boolean>;

handleResolved?: (resolved: ExecApprovalResolved) => Promise<void>;

}

const envBinding = buildSystemRunApprovalEnvBinding(p.env);

const warningText = normalizeOptionalString(p.warningText);

const commandAnalysis = resolveExecApprovalCommandAnalysis({

const commandAnalysis = resolveCommandAnalysisSummaryForDisplay({

host,

commandText: effectiveCommandText,

commandArgv: effectiveCommandArgv,

cwd: effectiveCwd,

sanitizeText: sanitizeExecApprovalWarningText,

});

const systemRunBinding =

host === "node"