/**
 * Agent Forum v4 - Static Analysis Payloads PoC
 *
 * Verifies the ability of triage agents (like the Adversary) to ingest
 * standardized JSON/XML outputs from industry static analysis tools
 * (e.g., Semgrep, SonarQube) instead of relying on LLM guesswork.
 */

// Mock representation of a Semgrep JSON output payload
const mockSemgrepPayload = {
  "results": [
    {
      "check_id": "javascript.express.security.audit.xss.express-xss",
      "path": "server/routes/api.ts",
      "start": { "line": 45, "col": 5 },
      "end": { "line": 45, "col": 40 },
      "extra": {
        "message":
          "Potential XSS vulnerability: user input is reflected without sanitization.",
        "severity": "ERROR",
      },
    },
    {
      "check_id": "typescript.react.best-practice.react-props-no-spreading",
      "path": "ui/components/Button.tsx",
      "start": { "line": 12, "col": 10 },
      "end": { "line": 12, "col": 25 },
      "extra": {
        "message":
          "Prop spreading is discouraged as it obscures the component API.",
        "severity": "WARNING",
      },
    },
  ],
  "errors": [],
};

function runPoC() {
  console.log("Running Static Analysis Payloads PoC tests...");
  console.log("Ingesting mock Semgrep JSON payload...");

  // Simulate an agent processing the structured payload
  const criticalIssues = mockSemgrepPayload.results.filter(
    (issue) => issue.extra.severity === "ERROR",
  );

  const warnings = mockSemgrepPayload.results.filter(
    (issue) => issue.extra.severity === "WARNING",
  );

  console.log(`\nAdversary Agent Analysis:`);
  console.log(`- Found ${criticalIssues.length} CRITICAL vulnerability.`);

  if (criticalIssues.length > 0) {
    console.log(
      `  -> Action required on ${criticalIssues[0].path} line ${
        criticalIssues[0].start.line
      }: ${criticalIssues[0].extra.message}`,
    );
  }

  console.log(`- Found ${warnings.length} code smell/warning.`);

  if (
    criticalIssues.length === 1 && criticalIssues[0].check_id.includes("xss")
  ) {
    console.log(
      "\n✅ Static Analysis Payloads PoC successful: Structured compiler-grade metrics successfully ingested and triaged.",
    );
  } else {
    console.error("\n❌ Failed to process static analysis payload.");
    Deno.exit(1);
  }
}

if (import.meta.main) {
  runPoC();
}