import assert from 'node:assert/strict'
import { readFileSync } from 'node:fs'
import test from 'node:test'

const contract = JSON.parse(readFileSync(new URL('../contracts/module-package-runtime.json', import.meta.url), 'utf8'))
const registry = JSON.parse(readFileSync(new URL('../contracts/numbered-ipc-registry.json', import.meta.url), 'utf8'))
const rust = readFileSync(new URL('../src-tauri/src/module_package_runtime.rs', import.meta.url), 'utf8')

test('module packages are signed declarative artifacts rather than executable repositories', () => {
  assert.equal(contract.schema, 'hololake.module-package-runtime/v1')
  assert.equal(contract.signature.source_repository_is_executable, false)
  assert.equal(contract.signature.package_bytes_are_signed_exactly, true)
  assert.equal(contract.host.arbitrary_native_code, false)
  assert.equal(contract.host.arbitrary_webview_javascript, false)
  assert.equal(contract.host.declarative_payload_only, true)
  assert.equal(contract.rules.self_test_before_active, true)
  assert.equal(contract.rules.failed_self_test_rolls_back, true)
  assert.equal(contract.rules.unmount_preserves_user_data, true)
})

test('module lifecycle is reachable only through numbered verified-human routes', () => {
  const routes = registry.operations.filter((route) => route.module_number === 'HLP-NIPC-MOD-0020')
  assert.equal(routes.length, 9)
  assert.deepEqual(routes.map((route) => route.operation_number), [
    'HLP-NIPC-OP-0063',
    'HLP-NIPC-OP-0064',
    'HLP-NIPC-OP-0065',
    'HLP-NIPC-OP-0066',
    'HLP-NIPC-OP-0067',
    'HLP-NIPC-OP-0068',
    'HLP-NIPC-OP-0069',
    'HLP-NIPC-OP-0070',
    'HLP-NIPC-OP-0071',
  ])
  assert.ok(routes.every((route) => route.admission === 'VERIFIED_HUMAN_ROUTE'))
  assert.match(rust, /MINISIGN_ED25519|PublicKey::decode/)
  assert.match(rust, /module_receipts/)
  assert.match(rust, /ROLLBACK_PENDING_SELF_TEST/)
})