// in-process fixture runner used by `play.ts` (and any future host-side
// runner). does NOT know about Docker — that's `gha.ts`'s job. when run
// inside the GHA container, this is what executes after the entrypoint.
import { execSync } from "node:child_process";
import { mkdtemp } from "node:fs/promises";
import { devNull, tmpdir } from "node:os";
import { join } from "node:path";
import type { AgentResult } from "../agents/shared.ts";
import { type Inputs, main } from "../main.ts";
import { log } from "./cli.ts";
import { ensureGitHubToken } from "./github.ts";
import { setupTestRepo } from "./setup.ts";

export async function run(inputsOrPrompt: Inputs | string): Promise<AgentResult> {
  await ensureGitHubToken();

  // play.ts is a CI-emulator — isolate it from the developer's user- and
  // system-scope gitconfig so checks like `validatePushDestination` see the
  // raw stored remote URL instead of values mutated by `url.*.insteadOf`
  // rewrites (a common SSH-auth convenience on dev boxes). CI runners have
  // empty gitconfigs so this is a no-op there; locally it makes `pnpm play`
  // and real runs produce identical git state. `os.devNull` canonicalizes
  // the null device across Unix (`/dev/null`) and Windows (`\\.\nul`).
  process.env.GIT_CONFIG_GLOBAL = devNull;
  process.env.GIT_CONFIG_SYSTEM = devNull;

  const tempParent = await mkdtemp(join(tmpdir(), "pullfrog-play-"));
  const tempDir = join(tempParent, "repo");
  const originalCwd = process.cwd();

  try {
    setupTestRepo({ tempDir });
    process.chdir(tempDir);

    // optional pre-agent setup (e.g. seed symlinks for adversarial fixtures).
    if (process.env.PULLFROG_TEST_REPO_SETUP) {
      log.info("» running repo setup commands...");
      execSync(process.env.PULLFROG_TEST_REPO_SETUP, { cwd: tempDir, stdio: "pipe" });
    }

    // tell main() to use the cloned tempDir instead of the GHA workspace path.
    process.env.GITHUB_WORKSPACE = tempDir;

    const inputs: Inputs =
      typeof inputsOrPrompt === "string" ? { prompt: inputsOrPrompt } : inputsOrPrompt;

    for (const [key, value] of Object.entries(inputs)) {
      if (value !== undefined && value !== null) {
        process.env[`INPUT_${key.toUpperCase()}`] = String(value);
      }
    }

    const result: AgentResult = await main();
    process.chdir(originalCwd);

    if (result.success) {
      log.success("Action completed successfully");
      return { success: true, output: result.output || undefined, error: undefined };
    }
    log.error(`Action failed: ${result.error || "Unknown error"}`);
    return { success: false, error: result.error || undefined, output: undefined };
  } catch (err) {
    const errorMessage = (err as Error).message;
    log.error(`Error: ${errorMessage}`);
    return { success: false, error: errorMessage, output: undefined };
  } finally {
    process.chdir(originalCwd);
    // sandbox isolation may create files with non-host ownership; rmSync
    // can't always delete those, so escalate.
    try {
      execSync(`sudo rm -rf "${tempParent}"`, { stdio: "ignore" });
    } catch {
      // best-effort cleanup.
    }
  }
}