use crw_core::Deadline;
use crw_core::config::{BUILTIN_UA_POOL, ExtractionConfig, LlmConfig};
use crw_core::error::CrwResult;
use crw_core::types::{
    FetchResult, OutputFormat, ScrapeData, ScrapeRequest, resolve_pinned_renderer,
    resolve_render_js,
};
use crw_renderer::FallbackRenderer;
use crw_renderer::http_only::HttpFetcher;
use crw_renderer::traits::PageFetcher;
use std::sync::{Arc, Mutex};

/// Scrape a single URL: fetch → extract → (optional) LLM structured extraction.
///
/// - `user_agent`: base user-agent string from global config.
/// - `default_stealth`: whether stealth headers are active by global config.
/// - `render_js_default`: global `[renderer] render_js_default` config; used only
///   for the `needs_temp_fetcher` HTTP-only gating. The shared renderer applies
///   the same default internally, so we don't forward it to the renderer call.
#[allow(clippy::too_many_arguments)]
pub async fn scrape_url(
    req: &ScrapeRequest,
    renderer: &Arc<FallbackRenderer>,
    llm_config: Option<&LlmConfig>,
    extraction_cfg: &ExtractionConfig,
    user_agent: &str,
    default_stealth: bool,
    render_js_default: Option<bool>,
    deadline: Deadline,
) -> CrwResult<ScrapeData> {
    // Propagate per-request country into the renderer stack via task-local.
    // Read by `crw-renderer::cdp` when composing DataImpulse credentials for
    // the chrome_proxy tier. None = use `proxy_default_country` fallback.
    crw_renderer::REQUEST_COUNTRY
        .scope(req.country.clone(), async move {
            scrape_url_inner(
                req,
                renderer,
                llm_config,
                extraction_cfg,
                user_agent,
                default_stealth,
                render_js_default,
                deadline,
            )
            .await
        })
        .await
}

#[allow(clippy::too_many_arguments)]
async fn scrape_url_inner(
    req: &ScrapeRequest,
    renderer: &Arc<FallbackRenderer>,
    llm_config: Option<&LlmConfig>,
    extraction_cfg: &ExtractionConfig,
    user_agent: &str,
    default_stealth: bool,
    render_js_default: Option<bool>,
    deadline: Deadline,
) -> CrwResult<ScrapeData> {
    // Reject unsupported `actions` parameter early with a clear error.
    if req.actions.is_some() {
        return Err(crw_core::error::CrwError::InvalidRequest(
            "The 'actions' parameter is not yet supported. Use cssSelector or xpath for element targeting.".into()
        ));
    }

    // Determine whether stealth headers should be injected for this request.
    let inject_stealth = req.stealth.unwrap_or(default_stealth);

    let pinned = resolve_pinned_renderer(req.renderer);

    // "Pinned implies JS" — if user named a non-auto renderer but didn't set
    // renderJs, force JS so auto-gating doesn't silently bypass the pin.
    let effective_render_js_request = if pinned.is_some() && req.render_js.is_none() {
        Some(true)
    } else {
        req.render_js
    };

    // Resolve the effective render_js decision (per-request overrides global default).
    // Used for the temp-fetcher HTTP-only gate below so a user with
    // render_js_default=true and a per-request proxy still reaches the JS renderer.
    let effective_render_js = resolve_render_js(effective_render_js_request, render_js_default);

    // Validate pinned renderer is available — fail fast with a 400 instead of
    // letting the request reach the dispatcher with a hard-pin to a missing pool.
    // Skip validation when renderJs:false is honored (HTTP-only ignores the pin).
    if let Some(name) = pinned
        && effective_render_js != Some(false)
    {
        let available = renderer.js_renderer_names();
        if !available.contains(&name) {
            return Err(crw_core::error::CrwError::InvalidRequest(format!(
                "renderer '{}' not available; configured renderers: [{}]. \
                 Update server config or omit the 'renderer' field.",
                name,
                available.join(", ")
            )));
        }
    }

    // Use a temporary HttpFetcher when:
    // (a) per-request proxy overrides global proxy, OR
    // (b) per-request stealth differs from what the shared renderer was built with.
    let needs_temp_fetcher =
        req.proxy.is_some() || req.stealth.is_some_and(|s| s != default_stealth);

    let fetch_result = if needs_temp_fetcher {
        let proxy = req.proxy.as_deref();
        // Rotate UA from built-in pool when stealth is active, so the request
        // looks like a real browser even for per-request stealth overrides.
        let effective_ua = if inject_stealth {
            BUILTIN_UA_POOL[rand::random_range(0..BUILTIN_UA_POOL.len())].to_string()
        } else {
            user_agent.to_string()
        };

        if effective_render_js == Some(false) {
            // HTTP-only: safe to use a temp HttpFetcher with custom proxy/stealth.
            let temp_http = HttpFetcher::new(&effective_ua, proxy, inject_stealth);
            temp_http
                .fetch(&req.url, &req.headers, req.wait_for, deadline)
                .await?
        } else {
            // JS rendering needed (or auto-detect): use the shared renderer which
            // has CDP backends configured. Inject stealth headers via custom headers
            // so the shared renderer's CDP connections are still used.
            let mut merged_headers = req.headers.clone();
            if inject_stealth {
                merged_headers
                    .entry("User-Agent".to_string())
                    .or_insert(effective_ua);
            }
            renderer
                .fetch(
                    &req.url,
                    &merged_headers,
                    effective_render_js_request,
                    req.wait_for,
                    pinned,
                    deadline,
                )
                .await?
        }
    } else {
        renderer
            .fetch(
                &req.url,
                &req.headers,
                effective_render_js_request,
                req.wait_for,
                pinned,
                deadline,
            )
            .await?
    };

    let warning = derive_target_warning(&fetch_result);
    // Per-request debug collector — shared across the multi-attempt JS
    // escalation so all candidate ladders land in one trace.
    let debug_enabled = req.debug.unwrap_or(false);
    let debug_sink: Option<Arc<Mutex<crw_extract::DebugCollector>>> = if debug_enabled {
        Some(Arc::new(Mutex::new(crw_extract::DebugCollector::new())))
    } else {
        None
    };
    fn build_extract_opts<'a>(
        fr: &'a FetchResult,
        req: &'a ScrapeRequest,
        extraction_cfg: &'a ExtractionConfig,
        debug: bool,
        sink: Option<Arc<Mutex<crw_extract::DebugCollector>>>,
    ) -> crw_extract::ExtractOptions<'a> {
        crw_extract::ExtractOptions {
            raw_html: &fr.html,
            source_url: &fr.url,
            status_code: fr.status_code,
            rendered_with: fr.rendered_with.clone(),
            elapsed_ms: fr.elapsed_ms,
            render_decision: fr.render_decision.clone(),
            credit_cost: fr.credit_cost,
            warnings: fr.warnings.clone(),
            formats: &req.formats,
            only_main_content: req.only_main_content,
            include_tags: &req.include_tags,
            exclude_tags: &req.exclude_tags,
            css_selector: req.css_selector.as_deref(),
            xpath: req.xpath.as_deref(),
            chunk_strategy: req.chunk_strategy.as_ref(),
            query: req.query.as_deref(),
            filter_mode: req.filter_mode.as_ref(),
            top_k: req.top_k,
            domain_selectors: Some(&extraction_cfg.domain_selectors),
            captured_responses: &fr.captured_responses,
            llm_fallback: None,
            debug,
            debug_sink: sink,
        }
    }
    let mut data = crw_extract::extract(build_extract_opts(
        &fetch_result,
        req,
        extraction_cfg,
        debug_enabled,
        debug_sink.clone(),
    ))?;
    // LLM-assisted re-extraction when DOM result is low-quality and the
    // operator opted in via [extraction.llm_fallback]. Failure paths inside
    // the helper preserve the original markdown.
    if extraction_cfg.llm_fallback.enable
        && let Some(llm_cfg) = llm_config.or(extraction_cfg.llm.as_ref())
    {
        let params = crw_extract::LlmFallbackParams {
            api_key: &llm_cfg.api_key,
            model: &llm_cfg.model,
            provider: &llm_cfg.provider,
            base_url: llm_cfg.base_url.as_deref(),
            quality_threshold: extraction_cfg.llm_fallback.quality_threshold,
            max_html_bytes: extraction_cfg.llm_fallback.max_html_bytes,
            max_tokens: llm_cfg.max_tokens,
            azure_api_version: llm_cfg.azure_api_version.as_deref(),
            always_run: extraction_cfg.llm_fallback.always_run,
        };
        let _ = crw_extract::maybe_run_llm_fallback(&mut data, &fetch_result.html, &params).await;
    }

    // Post-extract escalation: HTTP-only fetch returned 2xx but extraction
    // produced no markdown. Re-fetch with JS rendering forced. Catches sites
    // whose HTML is substantive (so `looks_like_thin_html` doesn't trigger at
    // the renderer layer) but whose content lives entirely in client-side
    // hydration or post-load shadow DOM. Bench analysis: ~13/147 failures.
    // Threshold for "empty enough to trigger an escalation".
    //   - HTTP tier: 100 bytes is enough — even a basic shell exceeds that.
    //   - LightPanda tier: 500 bytes. LightPanda routinely returns 90–200 byte
    //     SPA husks (just <head> + a hydration sentinel) that pass the 100-byte
    //     bar but contain nothing the user wants. Bench analysis showed 6 URLs
    //     where chrome retrieves the full page after lightpanda gave us a 90B
    //     stub (bandbhdwr, cascadehomecenter, laportehardware, apploi,
    //     indiamart, zujuan.xkw) — bumping the lightpanda-only threshold to
    //     500 captures all of them without changing http-tier behavior.
    // Tier of renderer that produced fetch_result. We always escalate from
    // "below" — http and lightpanda → try chrome — but never re-call chrome
    // when chrome already produced the empty markdown (that would just churn).
    // Thresholds default to 100B (http) and 2000B (lightpanda); both are
    // overridable via [extraction] in server config so operators can tune
    // per-deployment without recompiling.
    let prior_renderer = fetch_result.rendered_with.as_deref();
    let retry_threshold = if prior_renderer == Some("lightpanda") {
        extraction_cfg.lightpanda_retry_threshold_bytes
    } else {
        extraction_cfg.http_retry_threshold_bytes
    };
    let md_bytes = data
        .markdown
        .as_deref()
        .map(|s| s.trim().len())
        .unwrap_or(0);
    let md_is_byte_thin = md_bytes < retry_threshold;
    let md_quality = data
        .markdown
        .as_deref()
        .map(crw_extract::quality::analyze_md_only);
    let md_is_low_quality = md_quality
        .as_ref()
        .is_some_and(crw_extract::quality::is_low_quality);
    let used_low_tier = matches!(
        prior_renderer,
        Some("http") | Some("http_only_fallback") | Some("lightpanda")
    );
    // Only escalate on 2xx here. Renderer-level (lib.rs) already handles
    // soft-block status codes (401/403/405/406/410/412/429/451/503) via its
    // own `is_auth_blocked` path; running another escalation from this layer
    // would just hit the same circuit breakers a second time and waste a
    // request budget. Our job here is the 2xx-with-empty-markdown gap that
    // the renderer's HTML-shape thinness heuristic doesn't catch.
    let should_escalate_status = (200..300).contains(&fetch_result.status_code);
    let escalation_eligible = effective_render_js != Some(false)
        && !needs_temp_fetcher
        && !renderer.js_renderer_names().is_empty()
        && req.formats.contains(&OutputFormat::Markdown);

    let mut effective_warning = warning;
    let escalate_for_quality =
        !md_is_byte_thin && md_is_low_quality && fetch_result.html.len() > 5000;
    let should_escalate = (md_is_byte_thin || escalate_for_quality)
        && used_low_tier
        && should_escalate_status
        && escalation_eligible;
    if should_escalate {
        // If the prior tier was lightpanda (returned 200 with thin/no content
        // that fooled the renderer-level thinness check), force chrome on the
        // escalation. Falling back to "auto" would just hit lightpanda again.
        // Otherwise (http tier), let the chain decide so chrome can be reached
        // through the existing failover path.
        let escalation_target: Option<&str> = if prior_renderer == Some("lightpanda") {
            Some("chrome")
        } else {
            pinned
        };
        let quality_score_before = md_quality.as_ref().map(|q| q.score);
        tracing::info!(
            url = %req.url,
            status = fetch_result.status_code,
            html_len = fetch_result.html.len(),
            prior = prior_renderer,
            target = escalation_target,
            md_bytes,
            quality_score_before = ?quality_score_before,
            escalate_for_quality,
            "empty markdown after fetch, escalating to JS renderer"
        );
        match renderer
            .fetch(
                &req.url,
                &req.headers,
                Some(true),
                req.wait_for,
                escalation_target,
                deadline,
            )
            .await
        {
            Ok(js_fetch) => {
                // Accept JS result even if status >= 400, as long as it produced
                // real content. Anti-bot/UA-detection sites frequently return a
                // 4xx code while still serving the actual page body — the status
                // is a soft signal, not a content gate.
                let js_status = js_fetch.status_code;
                let js_warning = derive_target_warning(&js_fetch);
                if let Ok(js_data) = crw_extract::extract(build_extract_opts(
                    &js_fetch,
                    req,
                    extraction_cfg,
                    debug_enabled,
                    debug_sink.clone(),
                )) {
                    let js_md_len = js_data
                        .markdown
                        .as_deref()
                        .map(|s| s.trim().len())
                        .unwrap_or(0);
                    let js_md_quality = js_data
                        .markdown
                        .as_deref()
                        .map(crw_extract::quality::analyze_md_only);
                    let js_score = js_md_quality.as_ref().map(|q| q.score).unwrap_or(0.0);
                    let before_score = md_quality.as_ref().map(|q| q.score).unwrap_or(0.0);
                    let http_was_thin = md_is_byte_thin;
                    let quality_improved = js_score > before_score + 0.05;
                    let accept =
                        js_md_len >= retry_threshold && (http_was_thin || quality_improved);
                    if accept {
                        data = js_data;
                        // Replace the original "Target returned 4xx" with the JS
                        // fetch's warning (which is None for a clean 2xx render),
                        // so a successful escalation doesn't leak the original
                        // soft-block status into the response top-level warning.
                        effective_warning = js_warning;
                        tracing::info!(
                            url = %req.url,
                            from_status = fetch_result.status_code,
                            to_status = js_status,
                            md_len = js_md_len,
                            quality_score_before = before_score,
                            quality_score_after = js_score,
                            "JS escalation recovered content"
                        );
                    } else if js_md_len >= retry_threshold && !http_was_thin {
                        tracing::info!(
                            url = %req.url,
                            before = before_score,
                            after = js_score,
                            "JS retry returned worse-quality markdown ({before_score} -> {js_score}), keeping HTTP",
                        );
                    }
                }
            }
            Err(e) => {
                tracing::warn!(url = %req.url, "JS escalation after empty markdown failed: {e}");
            }
        }
    }
    // Surface redirect mismatch as warning. Helps detect cases like
    // northernair.ca/history.htm silently 302'ing to the homepage — extraction
    // looks "successful" but the user got the wrong page.
    if let Some(final_url) = fetch_result.final_url.as_deref()
        && redirect_is_material(&fetch_result.url, final_url)
    {
        let warning = format!("redirected_to: {final_url}");
        if !data.warnings.iter().any(|w| w == &warning) {
            data.warnings.push(warning);
        }
    }

    // Merge target warning with any extraction warning (e.g. orphan chunk params).
    data.warning = match (effective_warning, data.warning) {
        (Some(w1), Some(w2)) => Some(format!("{w1}; {w2}")),
        (Some(w), None) | (None, Some(w)) => Some(w),
        (None, None) => None,
    };

    // Phase 4: LLM structured extraction
    // Merge Firecrawl-compatible extract.schema into json_schema if not already set.
    let effective_schema = req
        .json_schema
        .as_ref()
        .or_else(|| req.extract.as_ref().and_then(|e| e.schema.as_ref()));

    // Build BYOK LlmConfig once; reused by structured JSON + summary paths.
    let byok_config = build_byok_llm_config(req, llm_config);
    let effective_llm = byok_config.as_ref().or(llm_config);

    if formats_include_json(&req.formats) {
        if let (Some(schema), Some(llm)) = (effective_schema, effective_llm) {
            let md = data.markdown.as_deref().unwrap_or("");
            match crw_extract::structured::extract_structured(md, schema, llm).await {
                Ok(json) => data.json = Some(json),
                Err(e) => {
                    tracing::error!("Structured extraction failed: {e}");
                    return Err(e);
                }
            }
        } else if effective_schema.is_some() && effective_llm.is_none() {
            return Err(crw_core::error::CrwError::ExtractionError(
                "JSON extraction requested but no LLM configured. Either set [extraction.llm] in server config, or pass 'llmApiKey' in the request body.".into()
            ));
        } else if effective_schema.is_none() {
            return Err(crw_core::error::CrwError::InvalidRequest(
                "Structured extraction (formats: json/extract) requires a 'jsonSchema' field. Provide a JSON Schema object.".into()
            ));
        }
    }

    if formats_include_summary(&req.formats) {
        let Some(llm) = effective_llm else {
            return Err(crw_core::error::CrwError::ExtractionError(
                "Summary format requires an LLM config. Either set [extraction.llm] in server config, or pass 'llmApiKey' in the request body.".into()
            ));
        };
        // Markdown is computed internally even if not in `formats`; if the
        // caller asked only for `summary`, the markdown is the input to the
        // LLM but is not surfaced in the response (see strip below).
        let md_owned = data.markdown.clone().unwrap_or_default();
        match crw_extract::summary::summarize(
            &md_owned,
            llm,
            req.summary_prompt.as_deref(),
            req.max_content_chars,
        )
        .await
        {
            Ok(result) => {
                data.summary = Some(result.content);
                if data.llm_usage.is_none() {
                    data.llm_usage = result.usage;
                }
                if let Some(w) = result.warning {
                    data.warnings.push(w);
                }
            }
            Err(e) => {
                tracing::warn!("Summary generation failed: {e}");
                data.warnings.push(format!("summary failed: {e}"));
            }
        }
        // If the caller didn't explicitly ask for markdown, strip the
        // internally-computed markdown from the response.
        if !req.formats.contains(&OutputFormat::Markdown) {
            data.markdown = None;
        }
    }

    // Drain the per-request debug sink into ScrapeData. The sink is the
    // last shared owner at this point — extract() returned, dropping its
    // clone — so try_unwrap should succeed; if a stray clone is alive we
    // fall back to a clone of the inner Vec.
    if let Some(sink) = debug_sink {
        // Each extract() call dropped its clone of the Arc, so by this
        // point we hold the only reference and can unwrap cheaply.
        let extraction = match Arc::try_unwrap(sink) {
            Ok(mu) => mu.into_inner().unwrap_or_default().into_extraction(),
            Err(_) => crw_core::types::DebugExtraction::default(),
        };
        data.debug_extraction = Some(extraction);
    }

    Ok(data)
}

/// Decide whether `final_url` represents a material redirect from `requested`.
/// Returns true when the host changed, or when the requested path was a
/// non-root resource (e.g. `/history.htm`) but the final URL collapsed to the
/// site root (`/` or empty). Pure same-origin path tweaks (trailing slash,
/// query string changes) are ignored.
fn redirect_is_material(requested: &str, final_url: &str) -> bool {
    let Ok(req) = url::Url::parse(requested) else {
        return false;
    };
    let Ok(fin) = url::Url::parse(final_url) else {
        return false;
    };
    if req.host_str() != fin.host_str() {
        return true;
    }
    let req_path = req.path().trim_end_matches('/');
    let fin_path = fin.path().trim_end_matches('/');
    !req_path.is_empty() && fin_path.is_empty()
}

pub(crate) fn derive_target_warning(fetch_result: &FetchResult) -> Option<String> {
    // Anti-bot detection wins over any other warning. The renderer chain
    // annotates thin results with "X returned a loading placeholder", but the
    // underlying HTML may be a CAPTCHA shell — surfacing the placeholder
    // misattributes the failure to our renderer instead of the site block.
    if let Some(block) = detect_block_interstitial(&fetch_result.html) {
        return Some(block);
    }

    if fetch_result.warning.is_some() {
        return fetch_result.warning.clone();
    }

    if fetch_result.status_code >= 400 {
        return Some(format!(
            "Target returned {} {}",
            fetch_result.status_code,
            canonical_status_text(fetch_result.status_code)
        ));
    }

    None
}

fn canonical_status_text(status_code: u16) -> &'static str {
    match status_code {
        400 => "Bad Request",
        401 => "Unauthorized",
        403 => "Forbidden",
        404 => "Not Found",
        405 => "Method Not Allowed",
        408 => "Request Timeout",
        410 => "Gone",
        429 => "Too Many Requests",
        451 => "Unavailable For Legal Reasons",
        500 => "Internal Server Error",
        502 => "Bad Gateway",
        503 => "Service Unavailable",
        504 => "Gateway Timeout",
        _ => "Error",
    }
}

fn detect_block_interstitial(html: &str) -> Option<String> {
    // If page has substantial content (>50KB), it's not a block/interstitial page
    if html.len() > 50_000 {
        return None;
    }

    const SCAN_LIMIT: usize = 128 * 1024;
    let end = if html.len() <= SCAN_LIMIT {
        html.len()
    } else {
        let mut e = SCAN_LIMIT;
        while e > 0 && !html.is_char_boundary(e) {
            e -= 1;
        }
        e
    };
    let lower = html[..end].to_lowercase();
    // Keep markers SPECIFIC to interstitial pages — bare "captcha"/"access
    // denied" false-positive on legit content (e.g. an HN headline mentioning
    // "reCAPTCHA" matches "captcha" anywhere in the document).
    let markers = [
        "just a moment",
        "attention required",
        "cf-browser-verification",
        "cf-challenge",
        // DataDome — captcha-delivery host + "datadome" string only appear on
        // actively-challenged pages.
        "captcha-delivery.com",
        "datadome captcha",
        // PerimeterX / HUMAN — _px3 cookie + px-captcha widget
        "px-captcha",
        "_px3=",
        // Akamai Bot Manager
        "_abck=",
        "ak-challenge",
    ];

    if markers.iter().any(|marker| lower.contains(marker)) {
        Some("Blocked by anti-bot protection".to_string())
    } else {
        None
    }
}

fn formats_include_json(formats: &[OutputFormat]) -> bool {
    formats.contains(&OutputFormat::Json)
}

fn formats_include_summary(formats: &[OutputFormat]) -> bool {
    formats.contains(&OutputFormat::Summary)
}

/// Build an `LlmConfig` from per-request BYOK fields, falling back to the
/// server-config values for non-credential fields (concurrency, header
/// guard) so a single request can't escape global limits.
fn build_byok_llm_config(req: &ScrapeRequest, server_cfg: Option<&LlmConfig>) -> Option<LlmConfig> {
    let api_key = req.llm_api_key.as_ref()?.clone();
    let mut cfg = match server_cfg {
        Some(s) => s.clone(),
        None => LlmConfig::default(),
    };
    cfg.api_key = api_key;
    if let Some(p) = &req.llm_provider {
        cfg.provider = p.clone();
    }
    if let Some(m) = &req.llm_model {
        cfg.model = m.clone();
    }
    if let Some(b) = &req.base_url {
        cfg.base_url = Some(b.clone());
    }
    Some(cfg)
}

#[cfg(test)]
mod tests {
    use super::*;

    fn sample_fetch(status_code: u16, html: &str) -> FetchResult {
        FetchResult {
            url: "https://example.com".into(),
            final_url: None,
            status_code,
            html: html.into(),
            content_type: None,
            raw_bytes: None,
            rendered_with: None,
            elapsed_ms: 10,
            warning: None,
            render_decision: None,
            credit_cost: 0,
            warnings: Vec::new(),
            truncated: false,
            deadline_exceeded: false,
            captured_responses: Vec::new(),
        }
    }

    #[test]
    fn redirect_material_detects_path_to_root_collapse() {
        assert!(redirect_is_material(
            "https://northernair.ca/history.htm",
            "https://northernair.ca/"
        ));
    }

    #[test]
    fn redirect_material_detects_host_change() {
        assert!(redirect_is_material(
            "https://example.com/path",
            "https://other.com/path"
        ));
    }

    #[test]
    fn redirect_material_ignores_trailing_slash() {
        assert!(!redirect_is_material(
            "https://example.com/path",
            "https://example.com/path/"
        ));
    }

    #[test]
    fn redirect_material_ignores_query_only_change() {
        assert!(!redirect_is_material(
            "https://example.com/page",
            "https://example.com/page?utm=x"
        ));
    }

    #[test]
    fn warning_detects_target_status_codes() {
        let warning = derive_target_warning(&sample_fetch(403, "<html></html>"));
        assert_eq!(warning.as_deref(), Some("Target returned 403 Forbidden"));
    }

    #[test]
    fn warning_detects_block_markers() {
        let warning = derive_target_warning(&sample_fetch(
            200,
            "<html><title>Just a moment</title><body>cf-browser-verification</body></html>",
        ));
        assert_eq!(warning.as_deref(), Some("Blocked by anti-bot protection"));
    }

    #[test]
    fn warning_skips_legit_pages_mentioning_captcha() {
        // Regression: HN front page used to false-positive because the headline
        // "Google broke reCAPTCHA…" matched a bare "captcha" substring marker.
        let warning = derive_target_warning(&sample_fetch(
            200,
            "<html><body>Google broke reCAPTCHA for de-googled Android users</body></html>",
        ));
        assert!(warning.is_none(), "got false-positive: {warning:?}");
    }
}
