/** Security clearance L0–L4 (mirrors server/internal/clearance). */

export const CLEARANCE_MIN = 0;
export const CLEARANCE_MAX = 4;

export interface ClearanceEventRecord {
  id: number;
  agent_id: string;
  from_level: number;
  to_level: number;
  reason: string;
  source: string;
  ts: string;
}

export function clearanceLabel(level: number): string {
  const n = Math.max(CLEARANCE_MIN, Math.min(CLEARANCE_MAX, level));
  return `L${n}`;
}

export function clearancePermissions(level: number): string {
  switch (Math.max(CLEARANCE_MIN, Math.min(CLEARANCE_MAX, level))) {
    case 0:
      return 'Stats and read-only probes';
    case 1:
      return 'Mining: pause, resume, restart';
    case 2:
      return 'Spread: discover_and_join, spread_now, stage_fetch';
    case 3:
      return 'Shell: exec_shell, agent_command';
    case 4:
      return 'Forge: set_agent_version, reorder_tiers fleet-wide';
    default:
      return 'Unknown clearance';
  }
}

export function formatClearanceElevation(event: {
  to_level: number;
  source?: string;
  reason?: string;
}): string {
  const level = clearanceLabel(event.to_level);
  if (event.source === 'ai_scheduler') {
    return `AI requested ${level} — approved`;
  }
  if (event.reason?.trim()) {
    return `${level} — ${event.reason.trim()}`;
  }
  return `Elevated to ${level}`;
}

export function clearanceTimelineSummary(event: ClearanceEventRecord): string {
  const from = clearanceLabel(event.from_level);
  const to = clearanceLabel(event.to_level);
  const who = event.source === 'ai_scheduler' ? 'AI' : event.source || 'system';
  return `${who}: ${from} → ${to}${event.reason ? ` (${event.reason})` : ''}`;
}