/// <reference types="node" />
import { existsSync, readdirSync, readFileSync } from 'node:fs'
import { join } from 'node:path'
import { describe, expect, it } from 'vitest'

const SRC = join(__dirname)
const PKG_ROOT = join(__dirname, '..')
const FORBIDDEN = [
  '@platform-modules/db',                              // no db handle in the browser
  'marketplaceDbSchema',                               // server-only drizzle schema export (real core barrel name)
  'marketplaceSchema',                                 // server-only schema alias
  'requireVendorForActor',                             // server-only auth op
  'assertVendorOwnership',                             // server-only auth op
  'assertVendorCanSell',                               // server-only auth op
  'approveVendor',                                     // server state op
  'suspendVendor',                                     // server state op
  'resolveCommissionRate',                             // server compute op
  'setVendorCommissionRate',                           // server compute op
  'computeVendorSplits',                               // server compute op
  'pushSchema',                                        // server-only migration op
  'drizzle-orm',                                       // no ORM in the browser
  'node:',                                             // no Node builtins in the browser bundle (tests excluded by scanner)
]

function srcFiles(dir: string): string[] {
  return readdirSync(dir, { withFileTypes: true }).flatMap((e) => {
    const p = join(dir, e.name)
    if (e.isDirectory()) return srcFiles(p)
    return /\.(ts|tsx)$/.test(e.name) && !/\.test\.(ts|tsx)$/.test(e.name) ? [p] : []
  })
}

function distOffenders(text: string, label: string): string[] {
  const offenders: string[] = []
  for (const token of FORBIDDEN) {
    if (text.includes(token)) offenders.push(`${label} → ${token}`)
  }
  return offenders
}

function scanForForbidden(files: string[]): string[] {
  const offenders: string[] = []
  for (const f of files) {
    const text = readFileSync(f, 'utf8')
    for (const line of text.split('\n')) {
      const trimmed = line.trim()
      if (!trimmed.startsWith('import') && !/\bfrom\s+['"]/.test(trimmed)) continue
      for (const token of FORBIDDEN) {
        if (line.includes(token)) offenders.push(`${f} → ${token}`)
      }
    }
  }
  return offenders
}

describe('no server-only imports leak into the browser sibling (§0.5 bundle guard)', () => {
  it('no src file imports db / server-only marketplace ops / ORM / node builtins', () => {
    const offenders = scanForForbidden(srcFiles(SRC))
    expect(offenders, offenders.join('\n')).toEqual([])
  })

  it('built dist bundle carries no server-only token when dist is present', () => {
    const distJs = join(PKG_ROOT, 'dist', 'index.js')
    if (!existsSync(distJs)) return
    const js = readFileSync(distJs, 'utf8')
    const offenders = distOffenders(js, 'dist/index.js')
    expect(offenders, offenders.join('\n')).toEqual([])
  })
})