// 验证 bundle 的 "</script" 内联守卫**真的会拦**。
// 一个从不失败的检查等于没有检查——所以临时把源码弄坏，确认构建报错，再还原。
//
// **收尾必须全量重建**：这里用 `--single kv37` 触发构建，而构建默认会删掉"本次未构建"的
// 分发目录。测完只留 single-hsr-kv37，其它三档就没了，后续的基线比对会直接 ENOENT。
// 所以 finally 里跑一次全量 `sim` 构建把 dist 恢复成完整状态。
import { readFileSync, writeFileSync, copyFileSync } from "node:fs";
import { execFileSync } from "node:child_process";

const target = "src/vendor/spine-player.js";
const backup = `${target}.bak`;
const original = readFileSync(target, "utf8");

function run(args: string[]) {
  try {
    return { ok: true, out: execFileSync("node", ["tools/build.ts", ...args], { encoding: "utf8" }) };
  } catch (error) {
    const e = error as { stdout?: string; stderr?: string };
    return { ok: false, out: String(e.stdout ?? "") + String(e.stderr ?? "") };
  }
}

let failed = 0;
copyFileSync(target, backup);
try {
  console.log("=== 干净源码应当构建成功 ===");
  const clean = run(["sim", "--single", "kv37"]);
  console.log(`  ${clean.ok ? "✓" : "✗"} 构建成功`);
  if (!clean.ok) failed++;

  // 追加一个含 </script 的字面量：不破坏语法，只触发守卫。
  writeFileSync(target, original + '\nvar __guardProbe = "</script>";\n');
  console.log("\n=== 注入 </script 后应当构建失败 ===");
  const broken = run(["sim", "--single", "kv37"]);
  const caught = !broken.ok && broken.out.includes("截断页面");
  console.log(`  ${caught ? "✓" : "✗"} 守卫拦住了`);
  if (!caught) {
    failed++;
    console.log(`      输出：${broken.out.split("\n").slice(0, 4).join(" | ")}`);
  }
} finally {
  writeFileSync(target, original);
}

console.log("\n=== 还原后全量重建 ===");
const restored = run(["sim"]);
console.log(`  ${restored.ok ? "✓" : "✗"} 构建恢复成功（四档都在）`);
if (!restored.ok) failed++;

console.log(failed === 0 ? "\n内联守卫：有效" : `\n内联守卫：${failed} 处不符合预期`);
process.exit(failed === 0 ? 0 : 1);