import { spawnSync } from 'node:child_process'

const rawExtraArgs = process.argv.slice(2)
const extraArgs = rawExtraArgs[0] === '--' ? rawExtraArgs.slice(1) : rawExtraArgs
const pnpm = process.platform === 'win32' ? 'pnpm.cmd' : 'pnpm'
const env = {
  ...process.env,
  ORCA_E2E_SSH_DOCKER: '1',
  ORCA_E2E_LOCAL_SSH_BROWSER: '1',
  ORCA_E2E_SSH_CLIENT_HOSTED_BROWSER: '1',
  ORCA_E2E_WEB_CLIENT: '1'
}

// Why: Node's CVE-2024-27980 hardening rejects .cmd spawns without shell on Windows.
const spawnOptions = {
  stdio: 'inherit',
  env,
  shell: process.platform === 'win32'
}

const runtime = spawnSync(pnpm, ['run', 'ensure:electron-runtime'], spawnOptions)

if (runtime.status !== 0) {
  process.exit(runtime.status ?? 1)
}

// Why one explicit list: these specs self-skip without ORCA_E2E_SSH_DOCKER and no sharded lane
// sets it, so a spec in no runner runs nowhere. The gate contract proves every flag-reading
// spec is claimed here, by the watcher-isolation or parking runner, or by a listed exclusion.
//
// Deliberately absent, and therefore still covered by no CI trigger:
//   ssh-docker-relay-perf.spec.ts — wall-clock latency thresholds; flaky budgets here would
//     cost the lane its credibility. NOTE: a runner script test:e2e:ssh-docker-perf exists in
//     package.json but NO workflow invokes it, so this spec currently runs in no CI lane at
//     all. Recorded as a real gap, not as coverage living somewhere else.
// The bulk-open frame probe runs headed: headless Linux compositing schedules idle RAFs
// roughly 1s apart, so it cannot measure foreground interaction against the same budget.
//
// Why both projects: ssh-port-forward-lifecycle is @headful, which the headless project
// grep-inverts away.
//
// Known gaps in SSH e2e coverage, recorded here because nothing else names them:
//   - The job that runs this is still called `ssh-docker-watcher-isolation`, though watcher
//     isolation is now one spec of many. Renaming it changes the GitHub check name and can
//     break required-check config, so the name understates the job on purpose.
//   - E2E does not gate merges: `verify.needs` in pr.yml omits `e2e` while the suite is red on
//     main. Nothing in this lane blocks a PR yet. pr.yml's Require-successful-checks comment
//     has the exact wiring to flip it, and the gate contract asserts the current state.
//   - Two specs are gated on env vars no workflow sets, so they run nowhere
//     and are not Docker-gated, which puts them outside this file's contract:
//       nested-runtime-ssh-lifecycle, nested-runtime-ssh-routing (ORCA_E2E_NESTED_RUNTIME_SSH)
//     The nested-runtime runner remains unused by CI.
const result = spawnSync(
  pnpm,
  [
    'exec',
    'playwright',
    'test',
    'tests/e2e/local-ssh-browser-routing.spec.ts',
    'tests/e2e/ssh-client-hosted-browser-drop-reconnect.spec.ts',
    'tests/e2e/pty-input-write-queue-ssh.spec.ts',
    'tests/e2e/ssh-ai-vault-session-history.spec.ts',
    'tests/e2e/ssh-codex-display-artifacts-repro.spec.ts',
    'tests/e2e/ssh-cold-activation-restore.spec.ts',
    'tests/e2e/ssh-cold-hydration-gap-tab-seeding.spec.ts',
    'tests/e2e/ssh-docker-five-pane-input-under-flood.spec.ts',
    'tests/e2e/ssh-docker-bulk-open-freeze-repro.spec.ts',
    'tests/e2e/ssh-docker-half-open-link.spec.ts',
    'tests/e2e/ssh-docker-quick-open-large-listing.spec.ts',
    'tests/e2e/ssh-docker-reconnect-pane-restore.spec.ts',
    'tests/e2e/ssh-docker-relay-stall-credential.spec.ts',
    'tests/e2e/ssh-docker-resource-accumulation.spec.ts',
    'tests/e2e/ssh-docker-transport-drop-recovery.spec.ts',
    'tests/e2e/ssh-external-image-preview.spec.ts',
    'tests/e2e/ssh-lost-kill-tab-resurrection.spec.ts',
    'tests/e2e/ssh-pi-compatible-agent-title.spec.ts',
    'tests/e2e/ssh-port-forward-lifecycle.spec.ts',
    'tests/e2e/ssh-reconnect-tab-destruction.spec.ts',
    'tests/e2e/ssh-restart-tab-accumulation.spec.ts',
    'tests/e2e/ssh-skill-installation.spec.ts',
    'tests/e2e/ssh-stale-resume-execution-host-scope.spec.ts',
    'tests/e2e/ssh-terminal-window-wake-stale-grid-repro.spec.ts',
    'tests/e2e/terminal-inline-images-ssh.spec.ts',
    '--config',
    'tests/playwright.config.ts',
    '--project',
    'electron-headless',
    '--project',
    'electron-headful',
    '--workers=1',
    ...extraArgs
  ],
  spawnOptions
)

process.exit(result.status ?? 1)