import { definePlugin } from "@fusion/plugin-sdk";
import type { FusionPlugin, PluginRuntimeFactory, PluginRuntimeManifestMetadata } from "@fusion/plugin-sdk";
import { resolveCliSettings, resolveBundledClaudeBridgeBinary } from "./cli-spawn.js";
import { AcpRuntimeAdapter } from "./runtime-adapter.js";
import { killAllProcesses } from "./process-manager.js";
import { setupHooks, setupManifest } from "./setup.js";

// Reap any live agent subprocesses on hard process exit so none are orphaned
// (KTD4 — the registry SIGKILL is the authoritative no-orphan guarantee). Scoped
// to tracked agent subprocesses only; never touches other processes/ports.
process.on("exit", killAllProcesses);

export const ACP_RUNTIME_ID = "acp";
const ACP_RUNTIME_VERSION = "0.1.0";

export const acpRuntimeMetadata: PluginRuntimeManifestMetadata = {
  runtimeId: ACP_RUNTIME_ID,
  name: "ACP Runtime",
  description: "Drives any external ACP-compatible agent over JSON-RPC/stdio",
  version: ACP_RUNTIME_VERSION,
};

export const acpRuntimeFactory: PluginRuntimeFactory = async (ctx) =>
  new AcpRuntimeAdapter(ctx.settings as Record<string, unknown> | undefined);

const plugin: FusionPlugin = definePlugin({
  manifest: {
    id: "fusion-plugin-acp-runtime",
    name: "ACP Runtime Plugin",
    version: ACP_RUNTIME_VERSION,
    description: "Drives any external ACP-compatible agent over JSON-RPC/stdio",
    runtime: acpRuntimeMetadata,
  },
  state: "installed",
  hooks: {
    onLoad: (ctx) => {
      const settings = resolveCliSettings(ctx.settings as Record<string, unknown>);
      ctx.logger.info(
        // Log the arg COUNT, not values — args can carry inline tokens/secrets.
        `ACP Runtime Plugin loaded — binary=${settings.binaryPath} argCount=${settings.args.length} ` +
          `fsRead=${settings.fsRead} fsWrite=${settings.fsWrite}`,
      );
      // Risk S1: the ACP agent is an untrusted subprocess. Acknowledging the
      // unrestricted policy disables the per-call approval escalation — warn so
      // it is a deliberate, visible choice.
      if (settings.allowUnrestricted) {
        ctx.logger.warn(
          "ACP Runtime: acpAllowUnrestricted is set — sensitive tool calls from the untrusted agent " +
            "will be auto-approved under an allow-all policy. Prefer an approval-required policy.",
        );
      }
      // FNXC:ClaudeAcp 2026-06-15-11:40:
      // KTD10 (Route A): publish the bundled `claude-code-cli-acp` bridge path
      // process-wide so the pi-claude-cli provider's kill-switch can resolve it
      // WITHOUT a manual FUSION_CLAUDE_ACP_BRIDGE env var. This only PUBLISHES the
      // path — the ACP transport stays OFF until an operator sets
      // FUSION_CLAUDE_ACP=1 (the rollout gate). An explicit env override wins, and
      // the resolver is identity-pinned to the plugin-owned node_modules/.bin shim
      // so a same-named global binary cannot replace the reviewed bridge.
      if (!process.env.FUSION_CLAUDE_ACP_BRIDGE) {
        const resolved = resolveBundledClaudeBridgeBinary();
        if (resolved.kind === "resolved") {
          process.env.FUSION_CLAUDE_ACP_BRIDGE = resolved.path;
          ctx.logger.info(
            "ACP Runtime: published bundled Claude bridge path for Route A " +
              "(transport stays off until FUSION_CLAUDE_ACP=1).",
          );
        } else {
          ctx.logger.info(`ACP Runtime: bundled Claude bridge not resolved (${resolved.reason}); Route A unavailable.`);
        }
      }
    },
  },
  runtime: {
    metadata: acpRuntimeMetadata,
    factory: acpRuntimeFactory,
  },
  setup: {
    manifest: setupManifest,
    hooks: setupHooks,
  },
});

export default plugin;
export { AcpRuntimeAdapter };
export { checkSetup, setupHooks, setupManifest, validateBundledBridgeIdentity } from "./setup.js";
export {
  CLAUDE_CODE_CLI_ACP_BINARY,
  bundledClaudeBridgeBinPath,
  resolveBundledClaudeBridgeBinary,
  resolveClaudeBridgeAskSettings,
  resolveCliSettings,
} from "./cli-spawn.js";
export type { AcpBinaryResolution, AcpCliSettings } from "./cli-spawn.js";