#!/usr/bin/env node
/**
 * Sweep per-run smoke-test resources off the shared mcpd.
 *
 * The suites clean up in `afterAll`, which covers assertion failures but not a
 * killed process (CI timeout, Ctrl-C, OOM). Over time that leaked hundreds of
 * `smoke-*` projects and never-expiring `smoke-*` mcptokens onto the shared
 * server, to the point where the project picker was unusable.
 *
 * Run after a smoke run, or any time the server looks cluttered:
 *   pnpm smoke:clean            # show what would go
 *   pnpm smoke:clean --yes      # actually delete
 *
 * Only names matching SMOKE_PREFIX are ever considered, and the shared fixture
 * (`smoke-data` / `smoke-aws-docs`, provisioned from
 * tests/smoke/fixtures/smoke-data.yaml and depended on by five suites) is
 * protected — deleting it mid-run would break a concurrent suite.
 */
import { execFileSync } from 'node:child_process';

const SMOKE_PREFIX = /^smoke-/;

/** Shared, intentionally long-lived fixture — never swept. */
const PROTECTED = new Set(['smoke-data', 'smoke-aws-docs']);

const APPLY = process.argv.includes('--yes') || process.argv.includes('-y');

interface Named { id?: string; name?: string; projectName?: string; status?: string }

function mcpctl(args: string[]): string {
  return execFileSync('mcpctl', args, { encoding: 'utf-8', maxBuffer: 32 * 1024 * 1024 });
}

function list(resource: string, extra: string[] = []): Named[] {
  try {
    const out = mcpctl(['get', resource, '-o', 'json', ...extra]);
    const parsed: unknown = JSON.parse(out || '[]');
    return Array.isArray(parsed) ? (parsed as Named[]) : [];
  } catch {
    return [];
  }
}

function sweepable(rows: Named[]): Named[] {
  return rows.filter((r) => typeof r.name === 'string' && SMOKE_PREFIX.test(r.name) && !PROTECTED.has(r.name));
}

function remove(resource: string, row: Named, extra: string[] = []): boolean {
  const name = row.name ?? row.id ?? '';
  if (!SMOKE_PREFIX.test(name) || PROTECTED.has(name)) return false; // belt and braces
  try {
    mcpctl(['delete', resource, name, ...extra]);
    return true;
  } catch (err) {
    process.stderr.write(`  ! ${resource} ${name}: ${err instanceof Error ? err.message.split('\n')[0] : String(err)}\n`);
    return false;
  }
}

const projects = sweepable(list('projects'));
// Tokens live on real projects too (the suites mint smoke-* tokens against
// mcpctl-development and sre), so they need sweeping independently of projects.
const tokens = sweepable(list('mcptoken'));
const servers = sweepable(list('servers'));
const llms = sweepable(list('llms'));
const agents = sweepable(list('agents'));

const groups: Array<[string, Named[], string[]]> = [
  ['project', projects, []],
  ['mcptoken', tokens, []],
  ['server', servers, []],
  ['llm', llms, []],
  ['agent', agents, []],
];

let total = 0;
for (const [, rows] of groups) total += rows.length;

if (total === 0) {
  process.stdout.write('smoke:clean — nothing to sweep\n');
  process.exit(0);
}

for (const [kind, rows] of groups) {
  if (rows.length === 0) continue;
  process.stdout.write(`${kind}: ${String(rows.length)}\n`);
  for (const r of rows.slice(0, 5)) process.stdout.write(`  ${r.name ?? ''}${r.projectName ? ` (in ${r.projectName})` : ''}\n`);
  if (rows.length > 5) process.stdout.write(`  … and ${String(rows.length - 5)} more\n`);
}

if (!APPLY) {
  process.stdout.write(`\n${String(total)} resource(s) would be deleted. Re-run with --yes to apply.\n`);
  process.exit(0);
}

let deleted = 0;
for (const [kind, rows, extra] of groups) {
  for (const r of rows) if (remove(kind, r, extra)) deleted++;
}
process.stdout.write(`\nsmoke:clean — deleted ${String(deleted)}/${String(total)}\n`);
process.exit(deleted === total ? 0 : 1);