import test from 'node:test';
import assert from 'node:assert/strict';
import { readFile } from 'node:fs/promises';

import { DEFAULT_ALERT_RULES } from '../src/release-observability.js';

const runbookPath = new URL('../docs/RELEASE-OBSERVABILITY.md', import.meta.url);
const packagePath = new URL('../package.json', import.meta.url);

test('every default alert rule is inventoried in the runbook with owner, threshold, and severity', async () => {
  const runbook = await readFile(runbookPath, 'utf8');
  const headingSlugs = [...runbook.matchAll(/^#{2,4} (.+)$/gm)]
    .map(match => match[1].toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-|-$/g, ''));
  for (const rule of DEFAULT_ALERT_RULES) {
    const pattern = new RegExp(
      `\\| \`${rule.id}\`\\s*\\| ${rule.severity}\\s*\\| ${rule.owner}\\s*\\|`,
    );
    assert.match(runbook, pattern, `runbook table lacks a conforming row for ${rule.id}`);
    const anchor = rule.runbook.split('#')[1];
    assert.ok(anchor && headingSlugs.includes(anchor), `runbook link for ${rule.id} does not resolve to a heading (${anchor})`);
  }
});

test('runbook documents the outage drill anchor, manual fallback, and privacy boundary', async () => {
  const runbook = await readFile(runbookPath, 'utf8');
  assert.match(runbook, /^## Simulate a worker outage$/m);
  assert.match(runbook, /^## Alert inventory$/m);
  assert.match(runbook, /manual fallback/i);
  for (const forbidden of ['photos or medical imagery', 'stool records', 'session identifiers', 'environment dumps']) {
    assert.match(runbook, new RegExp(forbidden.replace(/[-/\\^$*+?.()|[\]{}]/g, '\\$&'), 'i'));
  }
  const externalUrls = [...runbook.matchAll(/https?:\/\/(?!127\.0\.0\.1)[^\s)`\]]+/g)].map(match => match[0]);
  assert.deepEqual(externalUrls, [], 'runbook must not reference non-loopback hosts');
});

test('package scripts wire observability tests into the suite and syntax gate', async () => {
  const packageJson = JSON.parse(await readFile(packagePath, 'utf8'));
  assert.match(packageJson.scripts.test, /tests\/release-observability\.test\.js/);
  assert.match(packageJson.scripts.test, /tests\/release-dashboard\.test\.js/);
  assert.match(packageJson.scripts.test, /tests\/release-dashboard-cli\.test\.js/);
  assert.match(packageJson.scripts['check:syntax'], /node --check scripts\/release_dashboard\.mjs/);
});