/**
 * CyberLux tools catalog.
 * Tools are unlocked permanently per handle by spending VOID credits server-side.
 */

export type ToolCategory = "opsec" | "crypto" | "network" | "intel" | "comms" | "identity";

export type Tool = {
  id: string;
  name: string;
  tagline: string;
  description: string;
  cost: number; // VOID credits
  icon: string;
  category: ToolCategory;
  comingSoon?: boolean;
  features: string[];
};

export const TOOLS_CATALOG: Tool[] = [
  {
    id: "metadata-exorcist",
    name: "Metadata Exorcist",
    tagline: "Strip every trace from your files",
    description: "Analyse and surgically remove EXIF, XMP, and document metadata from images, PDFs, and Office files. Paste base64 or upload directly.",
    cost: 5,
    icon: "🧹",
    category: "opsec",
    features: ["EXIF / XMP removal", "PDF metadata wipe", "Batch processing", "Before/after diff view"],
  },
  {
    id: "pgp-forge",
    name: "PGP Forge",
    tagline: "Generate, sign, encrypt — all in-browser",
    description: "Full PGP key management suite: generate Ed25519 or RSA-4096 keypairs, sign messages, verify signatures, and encrypt / decrypt payloads.",
    cost: 6,
    icon: "🔐",
    category: "crypto",
    features: ["Ed25519 & RSA-4096", "Sign / verify", "Encrypt / decrypt", "Key import & export", "Keyring manager"],
  },
  {
    id: "shadow-trace",
    name: "Shadow Trace",
    tagline: "Analyse your OPSEC exposure score",
    description: "Enter a handle, domain, or BTC address. Shadow Trace correlates public darknet indexing to give you an operational security score and surface visible leaks.",
    cost: 8,
    icon: "👁",
    category: "opsec",
    features: ["Handle exposure scan", "Domain footprint", "BTC address graph", "OPSEC score + remediation"],
  },
  {
    id: "vpn-leak-tester",
    name: "Leak Oracle",
    tagline: "Verify what your circuit actually exposes",
    description: "Multi-vector leak tester: DNS, WebRTC, IPv6, HTTP headers, and TLS fingerprint — run inside Tor Browser to verify your circuit leaks nothing.",
    cost: 10,
    icon: "🕳️",
    category: "network",
    features: ["DNS leak check", "WebRTC detection", "IPv6 probe", "Header fingerprint", "TLS JA3 hash"],
  },
  {
    id: "tor-circuit-inspector",
    name: "Circuit Inspector",
    tagline: "Visualise and audit your Tor path",
    description: "Real-time Tor circuit visualisation with relay details, exit geolocation, bandwidth stats, and circuit switching controls.",
    cost: 12,
    icon: "🌐",
    category: "network",
    features: ["Live circuit map", "Relay GeoIP lookup", "Exit node audit", "Circuit rebuild trigger", "Guard node history"],
  },
  {
    id: "breach-oracle",
    name: "Breach Oracle",
    tagline: "Check credentials against known dumps",
    description: "Query anonymised breach indices for email addresses, usernames, and password hashes (SHA-1 k-anonymity prefix). Nothing is logged.",
    cost: 15,
    icon: "🗄️",
    category: "intel",
    features: ["Email / handle check", "HIBP-compatible API", "Password hash prefix probe", "Zero-log architecture", "Bulk CSV mode"],
  },
  {
    id: "deep-crawler",
    name: "Void Crawler Pro",
    tagline: "Deep darknet site discovery engine",
    description: "Expanded crawl index with link graph, freshness scores, and category clustering. Goes beyond what the public Void Crawl surface exposes.",
    cost: 20,
    icon: "🕷️",
    category: "intel",
    features: ["Extended onion index", "Link graph visualiser", "Freshness tracker", "Category filter", "Export JSON / CSV"],
  },
  {
    id: "signal-ghost",
    name: "Signal Ghost",
    tagline: "Ephemeral encrypted channel generator",
    description: "Create a one-shot end-to-end encrypted channel. Share the link; both parties exchange messages; channel self-destructs after timeout or after close.",
    cost: 25,
    icon: "👻",
    category: "comms",
    features: ["X25519 + AES-GCM in-browser", "Zero-server-storage", "Configurable TTL", "Screenshot-proof mode", "File attachment (≤ 5 MB)"],
  },
  {
    id: "onion-architect",
    name: "Onion Architect",
    tagline: "Guided hidden service provisioning wizard",
    description: "Step-by-step wizard for setting up Tor v3 hidden services: generates torrc stubs, nginx configs, systemd units, and security hardening checklists.",
    cost: 35,
    icon: "🧅",
    category: "network",
    features: ["torrc generator", "nginx vhost builder", "systemd unit wizard", "UFW hardening script", "Vanity prefix guide"],
    comingSoon: false,
  },
  {
    id: "identity-auditor",
    name: "Identity Auditor",
    tagline: "Full digital identity surface review",
    description: "Comprehensive review of a handle or identity across known darknet forums, paste sites, and public indices. Produces a redacted report with a risk rating.",
    cost: 40,
    icon: "🪪",
    category: "identity",
    features: ["Forum cross-reference", "Paste site scan", "Writing-style consistency flag", "Risk score", "Downloadable report"],
    comingSoon: true,
  },
];

export function getToolById(id: string): Tool | undefined {
  return TOOLS_CATALOG.find((t) => t.id === id);
}

export const CATEGORY_LABELS: Record<ToolCategory, string> = {
  opsec: "OPSEC",
  crypto: "Crypto",
  network: "Network",
  intel: "Intelligence",
  comms: "Comms",
  identity: "Identity",
};