#!/usr/bin/env bash
set -euo pipefail

root="$(cd "$(dirname "$0")/.." && pwd)"
tmp="$(mktemp -d)"
trap 'rm -rf "$tmp"' EXIT
mkdir -p "$tmp/bin" "$tmp/home" "$tmp/project"
touch "$tmp/cgroup"
printf '#!/usr/bin/env bash\nexit 0\n' >"$tmp/bin/pnpm"
chmod +x "$tmp/bin/pnpm"
cat >"$tmp/project/package.json" <<'EOF'
{"scripts":{"golive:check":"node scripts/golive-probes.mjs --check && node scripts/golive-sweep.mjs --check"}}
EOF

output="$(
  cd "$tmp/project"
  env -i \
    HOME="$tmp/home" \
    PATH="$tmp/bin:/usr/bin:/bin" \
    CPU_GUARD_CGROUP_FILE="$tmp/cgroup" \
    bash "$root/lib/cpu-guard.sh" pnpm golive:check 2>&1
)"
if [[ -n "$output" ]]; then
  printf 'unexpected output:\n%s\n' "$output" >&2
  exit 1
fi
printf 'PASS cpu-guard package-script inspection is clean\n'