#!/usr/bin/env node

import { spawnSync } from "node:child_process";

// Use PCRE2 lookbehind to avoid:
// 1. Matches preceded by a word character (e.g. `Issue#123`)
// 2. Matches preceded by `&` (e.g. HTML entities `'`)
const SEARCH_PATTERN = '(?<!&|[\\w])#[0-9a-fA-F]{3,8}\\b';

// Allow-list tokens and vector logos so brand assets can keep their baked colors.
// These are translated to git pathspec exclusions.
const IGNORED_GLOBS = [
  'css/tokens.css',
  '**/*.svg',
  '**/node_modules/**',
  '.git/**',
  '**/*.min.js',
  '**/*.map',
  'css/tailwind.generated.css',
  'dist/**',
  'build/**',
  'vendor/**',
  'js/utils/qrcode.js',
  '**/dist/**',
  'REMEDIATION_REPORT.md',
  'CHANGELOG.md',
  'scripts/daily-design-system-audit.mjs',
  'config/instance-config.js',
  'config/validate-config.js',
  'js/embed.js',
  'tests/unit/embed-accent.test.mjs',
  'tests/visual/embed-layout.spec.ts',
  'ai/**',
  '**/*.ai',
  'releases/**',
  'bitvid-working-webtorrent/**',
  'scripts/agent/**',
  'docs/capacitor-native-app-plan.md',
  'js/webtorrent.min.js',
  'perf/*.json'
];

const gitArgs = [
  'grep',
  '-n',
  '-I', // Ignore binary files
  '-P', // Enable PCRE2 for lookbehind support
  SEARCH_PATTERN,
  '--',
  '.'
];

// Add exclusions
for (const glob of IGNORED_GLOBS) {
  gitArgs.push(`:(exclude)${glob}`);
}

// We rely on 'git' being available and 'git grep' supporting -P.
// Typically available in most CI/dev environments.
// Increase maxBuffer to 10MB to avoid ENOBUFS on large outputs.
console.log("Running git with args:", gitArgs.join(" "));
const result = spawnSync('git', gitArgs, { encoding: 'utf8', maxBuffer: 1024 * 1024 * 10 });

if (result.error) {
  console.error('Failed to execute git grep:', result.error.message);
  process.exit(2);
}

// git grep exits with:
//   0 when matches are found (failure for us),
//   1 when no matches are found (success for us),
//   2+ on errors.

if (result.status === 0 && result.stdout.trim()) {
  const lines = result.stdout.trim().split('\n');

  // Robust filtering: If git grep exclusion fails (e.g. in some CI environments),
  // we filter out known ignored files here.
  const filteredLines = lines.filter(line => {
    // Output format is filename:line:content...
    // We just check if the line starts with a known ignored file.
    if (line.startsWith('js/webtorrent.min.js')) return false;
    if (line.startsWith('perf/hits-')) return false;
    return true;
  });

  if (filteredLines.length > 0) {
    console.error('Hex colors detected outside tokens or SVG assets:');
    console.error(filteredLines.join('\n'));
    console.error('\nAllowed exceptions: tokens (css/tokens.css) and vector logos (*.svg).');
    process.exit(1);
  }
}

if (result.status && result.status !== 1) {
  console.error('git grep reported an error while scanning for hex values.');
  if (result.stderr) {
    console.error(result.stderr.trimEnd());
  }
  process.exit(result.status);
}

process.exit(0);