"""Shared helpers for the live matrix demos.

Every script here talks to a REAL model configured entirely from the
environment — no secret is hardcoded:

    export OPENAI_API_KEY="sk-..."
    export OPENAI_BASE_URL="https://dashscope.aliyuncs.com/compatible-mode/v1"
    export PIKIT_MODEL="qwen3.6-flash-2026-04-16"   # optional; has a default

These are smoke tests: each runs ONE real example per method to confirm it
works end to end against a live model. They double as copy-paste recipes.
"""

import os
import sys

# Make `pikit` importable from a checkout without installing it.
sys.path.insert(0, os.path.abspath(os.path.join(os.path.dirname(__file__), "..", "..")))

from pikit import get_target  # noqa: E402

MODEL = os.environ.get("PIKIT_MODEL", "gpt-4o-mini")


def require_env() -> None:
    """Exit early with a clear message if credentials are missing."""
    if not os.environ.get("OPENAI_API_KEY"):
        sys.exit(
            "Set OPENAI_API_KEY (and usually OPENAI_BASE_URL) first. "
"See demos/live_matrix/README.md."
        )


def make_target():
    """A real OpenAI-compatible target built from environment variables."""
    require_env()
    return get_target(f"openai:{MODEL}")


def rule(title: str) -> None:
    print("\n" + "=" * 70)
    print(title)
    print("=" * 70)


def short(text: str, limit: int = 300) -> str:
    text = (text or "").strip().replace("\n", " ")
    return text if len(text) <= limit else text[:limit] + " …"


def looks_obeyed(reply: str, canary: str = "HACKED") -> bool:
    """Rough eyeball hint for whether the model complied with the injection.

    NOT a scorer — pikit has optional judges, but a keyword check cannot tell
    "obeyed" from "quoted the canary while refusing or analyzing it". We only
    flag when the reply is *dominated* by the canary (short reply that is
    essentially just the canary), which is the clearest compliance signal.
    Always read the printed reply yourself — the label is only a hint.
    """
    low = reply.lower().strip()
    if canary.lower() not in low:
        return False
    # Compliance looks like a terse reply that is basically just the canary,
    # not a paragraph that mentions it (refusal / security analysis).
    return len(low) <= len(canary) + 15