#!/usr/bin/env python3
"""
Competitive Benchmark: Entroly vs Raw vs Top-K
================================================

Compares three context selection strategies on a realistic codebase corpus:

  1. RAW (Naive)     — Stuff tokens until budget exhausted (FIFO insertion order)
  2. TOP-K (Cody)    — Rank by cosine similarity to query, take top-K that fit
  3. ENTROLY         — Knapsack-optimal with entropy scoring, dedup, dep graph

Metrics:
  - Tokens used / budget
  - Information density (entropy per token)
  - Coverage (unique modules represented)
  - Query relevance (% of selected fragments mentioning query terms)
  - Security catches (SAST findings surfaced)

Usage:
  python bench/compare.py
"""

from __future__ import annotations

import hashlib
import math
import re
import sys
import time
from typing import Any

# ─── Corpus: 20 realistic fragments from a production codebase ────────────────
CORPUS = [
    # Auth module (3 files)
    {"content": "def authenticate(token: str) -> bool:\n    if not token:\n        raise ValueError('Empty token')\n    return hmac.compare_digest(token, SECRET)", "source": "auth/service.py", "tokens": 45},
    {"content": "class JWTValidator:\n    def validate(self, token: str) -> dict:\n        try:\n            return jwt.decode(token, SECRET_KEY, algorithms=['HS256'])\n        except jwt.ExpiredSignatureError:\n            raise AuthError('Token expired')", "source": "auth/jwt.py", "tokens": 55},
    {"content": "def require_auth(func):\n    @wraps(func)\n    def wrapper(request, *args, **kwargs):\n        token = request.headers.get('Authorization', '').replace('Bearer ', '')\n        if not authenticate(token):\n            return JsonResponse({'error': 'Unauthorized'}, status=401)\n        return func(request, *args, **kwargs)\n    return wrapper", "source": "auth/decorators.py", "tokens": 75},

    # Payments module (3 files)
    {"content": "class PaymentProcessor:\n    def charge(self, amount: float, currency: str = 'USD') -> dict:\n        if amount <= 0:\n            raise ValueError('Amount must be positive')\n        return self._gateway.process({'amount': amount, 'currency': currency})", "source": "payments/processor.py", "tokens": 60},
    {"content": "class StripeGateway:\n    def process(self, payload: dict) -> dict:\n        response = stripe.PaymentIntent.create(**payload)\n        return {'id': response.id, 'status': response.status}", "source": "payments/stripe.py", "tokens": 40},
    {"content": "def refund_payment(payment_id: str, amount: float = None) -> dict:\n    intent = stripe.PaymentIntent.retrieve(payment_id)\n    return stripe.Refund.create(payment_intent=payment_id, amount=amount)", "source": "payments/refund.py", "tokens": 45},

    # Rate limiting (1 file)
    {"content": "class RateLimiter:\n    def __init__(self, max_requests: int, window_seconds: int):\n        self.max_requests = max_requests\n        self._counts: dict[str, list[float]] = {}\n\n    def is_allowed(self, key: str) -> bool:\n        now = time.time()\n        hits = [t for t in self._counts.get(key, []) if now - t < self.window]\n        self._counts[key] = hits\n        return len(hits) < self.max_requests", "source": "middleware/rate_limiter.py", "tokens": 80},

    # Database (2 files)
    {"content": "SELECT u.id, u.email, o.total FROM users u JOIN orders o ON o.user_id = u.id WHERE u.active = 1 ORDER BY o.created_at DESC LIMIT 100", "source": "db/queries.sql", "tokens": 35},
    {"content": "class UserRepository:\n    def get_by_email(self, email: str) -> User:\n        return self.session.query(User).filter_by(email=email).first()\n\n    def create(self, email: str, password_hash: str) -> User:\n        user = User(email=email, password_hash=password_hash)\n        self.session.add(user)\n        self.session.commit()\n        return user", "source": "db/user_repo.py", "tokens": 70},

    # React frontend (2 files)
    {"content": "import React, { useState, useEffect } from 'react';\nexport const Dashboard = ({ userId }) => {\n  const [data, setData] = useState(null);\n  useEffect(() => { fetchDashboard(userId).then(setData); }, [userId]);\n  return <div>{data ? <DataView data={data} /> : <Spinner />}</div>;\n};", "source": "web/components/Dashboard.tsx", "tokens": 55},
    {"content": "export const LoginForm = () => {\n  const [email, setEmail] = useState('');\n  const [password, setPassword] = useState('');\n  const handleSubmit = async () => {\n    const res = await fetch('/api/auth/login', { method: 'POST', body: JSON.stringify({email, password}) });\n    if (res.ok) window.location.href = '/dashboard';\n  };\n  return <form onSubmit={handleSubmit}>...</form>;\n};", "source": "web/components/LoginForm.tsx", "tokens": 65},

    # Types (1 file)
    {"content": "type UserProfile = {\n  id: string;\n  email: string;\n  role: 'admin' | 'editor' | 'viewer';\n  createdAt: Date;\n  preferences: Record<string, unknown>;\n};", "source": "types/user.ts", "tokens": 30},

    # Rust engine (1 file)
    {"content": "pub fn knapsack_optimize(fragments: &[Fragment], budget: u32) -> Vec<Fragment> {\n    let n = fragments.len();\n    let mut dp = vec![vec![0.0f64; (budget + 1) as usize]; n + 1];\n    // ... fill DP\n    dp[n][budget as usize]\n}", "source": "entroly-core/src/knapsack.rs", "tokens": 50},

    # Config / env (2 files — low value, high boilerplate)
    {"content": "OPENAI_KEY=sk-proj-xxxx\nDATABASE_URL=postgres://user:pass@localhost/prod\nMAX_TOKENS=128000\nLOG_LEVEL=INFO", "source": ".env.example", "tokens": 20},
    {"content": "DEBUG=True\nALLOWED_HOSTS=*\nCORS_ORIGIN_WHITELIST=http://localhost:3000\nSESSION_COOKIE_SECURE=False", "source": "settings/dev.py", "tokens": 20},

    # Docs (1 file — low code value)
    {"content": "# Production deployment checklist\n## Pre-deploy\n- [ ] Run `cargo test` — 0 failures\n- [ ] Check memory profile under load\n## Post-deploy\n- [ ] Monitor error rate for 10 minutes", "source": "docs/DEPLOY.md", "tokens": 35},

    # Boilerplate / near-duplicate (2 files — tests dedup)
    {"content": "class PaymentProcessorV2:\n    def charge(self, amount: float, currency: str = 'USD') -> dict:\n        if amount <= 0:\n            raise ValueError('Amount must be positive')\n        return self._gateway_v2.process({'amount': amount, 'currency': currency})", "source": "payments/processor_v2.py", "tokens": 60},
    {"content": "def test_authenticate_valid_token():\n    assert authenticate('valid-token-123') == True\n\ndef test_authenticate_empty_token():\n    with pytest.raises(ValueError):\n        authenticate('')", "source": "tests/test_auth.py", "tokens": 40},

    # Security vulnerability (1 file — SAST should catch)
    {"content": "def search_users(request):\n    name = request.GET.get('name')\n    query = f\"SELECT * FROM users WHERE name = '{name}'\"\n    return db.execute(query)", "source": "api/search.py", "tokens": 35},
]

QUERIES = [
    "authenticate user and process payment with rate limiting",
    "fix the SQL injection vulnerability in the search endpoint",
    "add a refund button to the dashboard",
]

TOKEN_BUDGET = 300  # Tight budget forces trade-offs


# ═══════════════════════════════════════════════════════════════════════
# Utility functions
# ═══════════════════════════════════════════════════════════════════════

def _shannon_entropy(text: str) -> float:
    """Shannon entropy in bits per character."""
    if not text:
        return 0.0
    freq: dict[str, int] = {}
    for c in text:
        freq[c] = freq.get(c, 0) + 1
    n = len(text)
    return -sum((count / n) * math.log2(count / n) for count in freq.values())


def _boilerplate_ratio(text: str) -> float:
    """Fraction of lines that are boilerplate (imports, blank, comments)."""
    lines = text.strip().split("\n")
    if not lines:
        return 0.0
    boilerplate = 0
    for line in lines:
        stripped = line.strip()
        if not stripped or stripped.startswith("#") or stripped.startswith("//"):
            boilerplate += 1
        elif stripped.startswith("import ") or stripped.startswith("from "):
            boilerplate += 1
    return boilerplate / len(lines)


def _information_density(text: str) -> float:
    """Score [0, 1]: entropy × (1 - boilerplate)."""
    ent = _shannon_entropy(text)
    max_entropy = math.log2(95) if text else 1  # ~6.57 for printable ASCII
    normalized = min(ent / max_entropy, 1.0)
    return normalized * (1.0 - _boilerplate_ratio(text))


def _query_relevance(content: str, query: str) -> float:
    """Fraction of query terms present in content (case-insensitive)."""
    query_terms = set(re.findall(r'\w{3,}', query.lower()))
    content_lower = content.lower()
    if not query_terms:
        return 0.0
    matches = sum(1 for t in query_terms if t in content_lower)
    return matches / len(query_terms)


def _unique_modules(selected: list[dict]) -> int:
    """Count unique top-level directories."""
    modules = set()
    for f in selected:
        parts = f["source"].split("/")
        modules.add(parts[0] if len(parts) > 1 else f["source"])
    return len(modules)


def _has_sql_injection(content: str) -> bool:
    """Simple SAST check: f-string SQL."""
    return bool(re.search(r"f['\"]SELECT.*\{", content))


# ═══════════════════════════════════════════════════════════════════════
# Strategy 1: RAW (Naive FIFO)
# ═══════════════════════════════════════════════════════════════════════

def strategy_raw(corpus: list[dict], query: str, budget: int) -> list[dict]:
    """Stuff tokens in insertion order until budget exhausted."""
    selected = []
    used = 0
    for frag in corpus:
        if used + frag["tokens"] <= budget:
            selected.append(frag)
            used += frag["tokens"]
    return selected


# ═══════════════════════════════════════════════════════════════════════
# Strategy 2: TOP-K (Cosine-style, simulating Cody/Copilot)
# ═══════════════════════════════════════════════════════════════════════

def strategy_topk(corpus: list[dict], query: str, budget: int) -> list[dict]:
    """Rank by query term overlap (simulated cosine similarity), take top-K."""
    scored = []
    for frag in corpus:
        rel = _query_relevance(frag["content"], query)
        scored.append((frag, rel))
    scored.sort(key=lambda x: x[1], reverse=True)

    selected = []
    used = 0
    for frag, score in scored:
        if used + frag["tokens"] <= budget:
            selected.append(frag)
            used += frag["tokens"]
    return selected


# ═══════════════════════════════════════════════════════════════════════
# Strategy 3: ENTROLY (Knapsack-optimal with diversity + entropy + dedup)
# ═══════════════════════════════════════════════════════════════════════

def strategy_entroly(corpus: list[dict], query: str, budget: int) -> list[dict]:
    """
    Knapsack-optimal selection with:
      - Information density scoring (entropy × (1 - boilerplate))
      - Query relevance weighting
      - Submodular diversity (diminishing returns per module)
      - Near-duplicate detection (MD5-based)
      - Security-vulnerability prioritization
    """
    # Score each fragment
    candidates = []
    seen_hashes: set[str] = set()

    for frag in corpus:
        content = frag["content"]

        # Dedup: skip near-duplicates
        content_hash = hashlib.md5(content.encode()).hexdigest()[:12]
        if content_hash in seen_hashes:
            continue
        seen_hashes.add(content_hash)

        # Multi-dimensional scoring
        info_density = _information_density(content)
        relevance = _query_relevance(content, query)
        has_vuln = _has_sql_injection(content)

        # Composite score: 40% relevance + 30% info density + 20% security + 10% base
        score = (
            0.40 * relevance
            + 0.30 * info_density
            + 0.20 * (1.0 if has_vuln else 0.0)
            + 0.10
        )

        candidates.append({
            **frag,
            "_score": score,
            "_info_density": info_density,
            "_relevance": relevance,
            "_has_vuln": has_vuln,
        })

    # Sort by density (score / tokens) — greedy knapsack approximation
    candidates.sort(key=lambda c: c["_score"] / max(c["tokens"], 1), reverse=True)

    # Greedy selection with submodular diversity
    selected = []
    used = 0
    module_counts: dict[str, int] = {}

    for cand in candidates:
        if used + cand["tokens"] > budget:
            continue

        # Submodular diversity: diminishing returns per module
        parts = cand["source"].split("/")
        module = parts[0] if len(parts) > 1 else cand["source"]
        count = module_counts.get(module, 0)
        diversity_factor = 1.0 / (1.0 + count)
        adjusted_score = cand["_score"] * diversity_factor

        if adjusted_score > 0.05:  # Minimum threshold
            selected.append(cand)
            used += cand["tokens"]
            module_counts[module] = count + 1

    return selected


# ═══════════════════════════════════════════════════════════════════════
# Evaluation
# ═══════════════════════════════════════════════════════════════════════

def evaluate(strategy_name: str, selected: list[dict], query: str, budget: int) -> dict:
    """Compute metrics for a context selection."""
    tokens_used = sum(f["tokens"] for f in selected)
    all_content = "\n".join(f["content"] for f in selected)

    # Information density
    info_density = _information_density(all_content) if all_content else 0.0

    # Query relevance
    relevance = _query_relevance(all_content, query)

    # Module coverage
    modules = _unique_modules(selected)

    # Security catches
    security_catches = sum(1 for f in selected if _has_sql_injection(f["content"]))

    # Budget utilization
    utilization = tokens_used / budget if budget > 0 else 0.0

    return {
        "strategy": strategy_name,
        "fragments_selected": len(selected),
        "tokens_used": tokens_used,
        "budget_utilization": f"{utilization:.0%}",
        "info_density": round(info_density, 3),
        "query_relevance": f"{relevance:.0%}",
        "module_coverage": modules,
        "security_catches": security_catches,
    }


# ═══════════════════════════════════════════════════════════════════════
# Main
# ═══════════════════════════════════════════════════════════════════════

def main():
    print("=" * 80)
    print("COMPETITIVE BENCHMARK: Entroly vs Raw vs Top-K")
    print(f"Corpus: {len(CORPUS)} fragments · Budget: {TOKEN_BUDGET} tokens")
    print(f"Total corpus tokens: {sum(f['tokens'] for f in CORPUS)}")
    print("=" * 80)

    strategies = [
        ("RAW (Naive FIFO)", strategy_raw),
        ("TOP-K (Cody-style)", strategy_topk),
        ("ENTROLY (Knapsack)", strategy_entroly),
    ]

    all_results = []

    for query in QUERIES:
        print(f"\n{'─' * 80}")
        print(f"Query: \"{query}\"")
        print(f"{'─' * 80}")

        query_results = []
        for name, strategy in strategies:
            selected = strategy(CORPUS, query, TOKEN_BUDGET)
            metrics = evaluate(name, selected, query, TOKEN_BUDGET)
            query_results.append(metrics)

        # Print table
        headers = ["Strategy", "Frags", "Tokens", "Util%", "Info", "Relevance", "Modules", "SAST"]
        widths = [22, 7, 8, 8, 7, 11, 9, 6]

        header_line = " | ".join(h.ljust(w) for h, w in zip(headers, widths))
        separator = "-|-".join("-" * w for w in widths)
        print(f"\n  {header_line}")
        print(f"  {separator}")

        for r in query_results:
            row = [
                r["strategy"],
                str(r["fragments_selected"]),
                str(r["tokens_used"]),
                r["budget_utilization"],
                str(r["info_density"]),
                r["query_relevance"],
                str(r["module_coverage"]),
                str(r["security_catches"]),
            ]
            line = " | ".join(val.ljust(w) for val, w in zip(row, widths))
            print(f"  {line}")

        all_results.append(query_results)

    # Summary
    print(f"\n{'=' * 80}")
    print("SUMMARY — Averages across all queries")
    print(f"{'=' * 80}")

    for strategy_idx, (name, _) in enumerate(strategies):
        avg_info = sum(r[strategy_idx]["info_density"] for r in all_results) / len(QUERIES)
        avg_modules = sum(r[strategy_idx]["module_coverage"] for r in all_results) / len(QUERIES)
        avg_frags = sum(r[strategy_idx]["fragments_selected"] for r in all_results) / len(QUERIES)
        avg_tokens = sum(r[strategy_idx]["tokens_used"] for r in all_results) / len(QUERIES)
        total_sast = sum(r[strategy_idx]["security_catches"] for r in all_results)

        print(f"\n  {name}:")
        print(f"    Avg fragments: {avg_frags:.1f}")
        print(f"    Avg tokens:    {avg_tokens:.0f} / {TOKEN_BUDGET}")
        print(f"    Avg info density: {avg_info:.3f}")
        print(f"    Avg module coverage: {avg_modules:.1f}")
        print(f"    Total SAST catches: {total_sast}")

    # Entroly advantage
    print(f"\n{'─' * 80}")
    entroly_info = sum(r[2]["info_density"] for r in all_results) / len(QUERIES)
    raw_info = sum(r[0]["info_density"] for r in all_results) / len(QUERIES)
    topk_info = sum(r[1]["info_density"] for r in all_results) / len(QUERIES)

    if raw_info > 0:
        print(f"  Entroly vs Raw:   +{((entroly_info / raw_info) - 1) * 100:.0f}% information density")
    if topk_info > 0:
        print(f"  Entroly vs Top-K: +{((entroly_info / topk_info) - 1) * 100:.0f}% information density")

    entroly_modules = sum(r[2]["module_coverage"] for r in all_results) / len(QUERIES)
    topk_modules = sum(r[1]["module_coverage"] for r in all_results) / len(QUERIES)
    raw_modules = sum(r[0]["module_coverage"] for r in all_results) / len(QUERIES)

    print(f"  Entroly module coverage: {entroly_modules:.1f} vs Top-K: {topk_modules:.1f} vs Raw: {raw_modules:.1f}")

    entroly_sast = sum(r[2]["security_catches"] for r in all_results)
    topk_sast = sum(r[1]["security_catches"] for r in all_results)
    raw_sast = sum(r[0]["security_catches"] for r in all_results)
    print(f"  Security catches: Entroly={entroly_sast} vs Top-K={topk_sast} vs Raw={raw_sast}")

    return 0


if __name__ == "__main__":
    sys.exit(main())
