import { CFC_CONCEPT_KIND } from "@commonfabric/api/cfc";

/**
 * The prompt-caveat kinds of the §10.1 standard profile, in a leaf module with
 * no other dependencies so a main-thread host can import them without the
 * `@commonfabric/runner/cfc` barrel. The profile's exchange rules
 * (`standard-profile.ts`) discharge the material-risk kinds below; a host's
 * default display ceiling (lib-shell) admits `PROMPT_CAVEAT_FAMILY_KINDS`,
 * which is those kinds plus prompt influence.
 */

/** The canonical material-risk tier kinds (the screening gradient). */
export const MATERIAL_RISK_KINDS: readonly string[] = [
  CFC_CONCEPT_KIND.PromptInjectionRiskUnscreened,
  CFC_CONCEPT_KIND.PromptInjectionRiskIngressScreened,
  CFC_CONCEPT_KIND.PromptInjectionRiskValueScreened,
];

// Short aliases are accepted for discharge, and the display admits them (see
// `PROMPT_CAVEAT_FAMILY_KINDS`). Only the tier gradient is canonical-only: it
// is defined over the canonical URIs, into which a deployment normalizes
// aliases before tier evaluation (§10.1 SHOULD-normalize).
const MATERIAL_RISK_ALIAS_KINDS: readonly string[] = [
  "prompt-injection-risk-unscreened",
  "prompt-injection-risk-ingress-screened",
  "prompt-injection-risk-value-screened",
];

/** Every caveat kind a positive `InjectionSafe` discharges. */
export const MATERIAL_RISK_DISCHARGE_KINDS: readonly string[] = [
  ...MATERIAL_RISK_KINDS,
  ...MATERIAL_RISK_ALIAS_KINDS,
];

/**
 * The §10.1 prompt-caveat family: the three screening-gradient tiers and
 * prompt influence, each in its canonical spelling and its short one. The
 * renderer compares kinds as written and does not normalize, so both
 * spellings are listed: shipped patterns mint `prompt-influence`, and the
 * profile already accepts the tiers' short spellings for discharge. The
 * unsuffixed `prompt-injection-risk` form, which §10.1 still lists as legacy,
 * is not a member: labs retired it (#5661) and keeps it inert.
 *
 * Every member says the same thing: do not trust this content as instructions
 * to a model. The default display ceiling admits the family (SC-54, proposed
 * §8.10.6), because a display shows content to the acting user. Admitting a
 * caveat at a display is not discharging it: the caveat stays on the value.
 * That alone does not make a model sink refuse it; labs' llm sinks are
 * ungated today (docs/plans/cfc-llm-sink-admission.md).
 */
export const PROMPT_CAVEAT_FAMILY_KINDS: readonly string[] = [
  ...MATERIAL_RISK_KINDS,
  CFC_CONCEPT_KIND.PromptInfluence,
  ...MATERIAL_RISK_ALIAS_KINDS,
  "prompt-influence",
];