#!/usr/bin/env node

const { execFileSync } = require('child_process');
const { readFileSync } = require('fs');
const { join } = require('path');

const root = join(__dirname, '..');
const npmDir = join(root, 'npm');
const pkg = require(join(npmDir, 'package.json'));
const releaseWorkflow = readFileSync(join(root, '.github/workflows/release.yml'), 'utf8');
const expectedFiles = [
  'bin/agent-desktop.js',
  'package.json',
  'scripts/postinstall.js',
];

if (pkg.bin?.['agent-desktop'] !== 'bin/agent-desktop.js') {
  throw new Error('npm bin path must be bin/agent-desktop.js');
}

if (pkg.repository?.url !== 'git+https://github.com/lahfir/agent-desktop.git') {
  throw new Error('npm repository URL must be normalized for npm publish');
}

if (releaseWorkflow.includes('secrets.NPM_TOKEN') || releaseWorkflow.includes('NODE_AUTH_TOKEN')) {
  throw new Error('release workflow must use npm trusted publishing, not long-lived npm tokens');
}

if (!releaseWorkflow.includes('id-token: write')) {
  throw new Error('release workflow must grant id-token: write for npm trusted publishing');
}

if (!releaseWorkflow.includes('package-manager-cache: false')) {
  throw new Error('release workflow must disable package manager caching for npm publishing');
}

if (!releaseWorkflow.includes('npm publish --access public')) {
  throw new Error('release workflow must publish npm through the trusted-publishing command');
}

const output = execFileSync('npm', ['pack', '--dry-run', '--json'], {
  cwd: npmDir,
  encoding: 'utf8',
  env: {
    ...process.env,
    npm_config_cache: process.env.npm_config_cache || '/tmp/agent-desktop-npm-cache',
  },
});

const pack = JSON.parse(output)[0];
const actualFiles = pack.files.map((file) => file.path).sort();
const expected = [...expectedFiles].sort();

if (JSON.stringify(actualFiles) !== JSON.stringify(expected)) {
  throw new Error(`Unexpected npm package contents: ${actualFiles.join(', ')}`);
}

if (pack.bundled && pack.bundled.length > 0) {
  throw new Error(`npm package unexpectedly bundles dependencies: ${pack.bundled.join(', ')}`);
}

if (pack.unpackedSize > 25_000) {
  throw new Error(`npm package is unexpectedly large: ${pack.unpackedSize} bytes`);
}

console.log(`OK: npm package contains ${actualFiles.length} files, ${pack.unpackedSize} bytes unpacked`);