anodizer-core 0.25.2

use std::collections::{BTreeMap, HashMap};

use schemars::JsonSchema;
use serde::{Deserialize, Serialize};

use super::{Amd64Variant, StringOrBool, deserialize_string_or_bool_opt};

/// Binary-distribution strategy for an [`NpmConfig`] entry.
///
/// `optional-deps` (the default for a Rust release) emits npm's native
/// platform-resolution layout: one thin per-platform package whose
/// `os`/`cpu`/`libc` selectors are derived from the built target triples,
/// plus a metapackage that lists every platform package under
/// `optionalDependencies` and ships a `bin` shim resolving the installed
/// one via `require.resolve`. npm installs only the matching platform
/// package; there is no download and no postinstall script. This is the
/// pattern leading Rust CLIs ship binaries through npm with (biome,
/// git-cliff).
///
/// `postinstall` emits a single package carrying a `postinstall.js` shim that
/// downloads + sha256-verifies the OS/arch-matching release archive at
/// `npm install` time — for registries or policies that disallow per-platform
/// packages.
#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, Default, JsonSchema)]
#[serde(rename_all = "kebab-case")]
pub enum NpmMode {
    /// Emit per-platform packages + a metapackage with `optionalDependencies`
    /// and a `require.resolve` bin shim. npm's native `os`/`cpu`/`libc`
    /// resolution selects the right prebuilt package — no download, no
    /// postinstall. Default.
    #[default]
    OptionalDeps,
    /// Emit a single package with a `postinstall.js` shim that downloads and
    /// sha256-verifies the matching archive at install time.
    Postinstall,
}

/// Credential-selection strategy for an [`NpmConfig`] entry.
///
/// Controls whether the publisher authenticates with a long-lived registry
/// token (`NPM_TOKEN` / `cfg.token`) or with GitHub Actions OIDC (npm Trusted
/// Publishing), evaluated **per published package** — in `optional-deps` mode
/// that means the metapackage and every per-platform sub-package are decided
/// independently, so a metapackage with a configured Trusted Publisher can use
/// OIDC while brand-new sub-packages (which Trusted Publishing cannot create)
/// fall back to the token.
#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, Default, JsonSchema)]
#[serde(rename_all = "kebab-case")]
pub enum NpmAuthMode {
    /// Decide per package at publish time (default). The registry is probed for
    /// each package's existence: a package that already exists prefers OIDC
    /// (Trusted Publishing) when an OIDC context is present, otherwise the
    /// token; a brand-new package always uses the token (Trusted Publishing
    /// cannot create a package that does not yet exist) and hard-errors if no
    /// token is set. When OIDC is chosen for an existing package and the
    /// publish fails, `auto` retries that package with the token (if available)
    /// and emits a loud warning that Trusted Publishing was not exercised.
    #[default]
    Auto,
    /// Always authenticate with the token (`NPM_TOKEN` / `cfg.token`); never
    /// attempt OIDC. Errors if no token is available. This is anodizer's
    /// historical behaviour.
    Token,
    /// Always authenticate with OIDC (Trusted Publishing); never fall back to
    /// the token. Errors if the OIDC request env is absent. Use when every
    /// package in this entry has a configured Trusted Publisher and you want a
    /// failed exchange to fail the release loudly rather than silently fall
    /// back to a token.
    Oidc,
}

/// NPM package registry publisher configuration.
///
/// In the default `optional-deps` mode anodizer emits one thin npm package
/// per built platform (with `os`/`cpu`/`libc` selectors derived from the
/// target triple) plus a metapackage whose `optionalDependencies` lists
/// every platform package; npm's native resolution installs only the one
/// matching the host. In `postinstall` mode a single package carries a
/// `postinstall` script that downloads the matching release archive at
/// `npm install` time. Each `npms[]` entry produces one publish.
#[derive(Debug, Clone, Serialize, Deserialize, JsonSchema)]
#[serde(default, deny_unknown_fields)]
pub struct NpmConfig {
    /// Unique identifier for selecting this entry from the CLI (`--id=...`).
    pub id: Option<String>,

    /// Crate-name filter: only include artifacts whose owning `crate_name` is
    /// in this list. Orthogonal to `targets:` (both filters apply).
    pub ids: Option<Vec<String>>,

    /// Target-triple allowlist: restrict the per-platform packages to a subset
    /// of the built targets. When unset (the default), every built target that
    /// maps to an npm triple becomes a package. When set, only artifacts whose
    /// target triple appears in this list are turned into packages; the rest
    /// are silently skipped (deliberately out of scope — unlike a target with
    /// no npm os/cpu mapping, which is warned about). Orthogonal to `ids:`:
    /// both filters apply (an artifact must pass the `ids` filter AND, when
    /// this is set, be listed here). A listed triple that no selected build
    /// produces is a config error, and an explicit empty list (`targets: []`)
    /// is rejected — omit the field to publish every built target. Example:
    /// `targets: [x86_64-unknown-linux-gnu, aarch64-apple-darwin]`.
    pub targets: Option<Vec<String>>,

    /// Binary-distribution strategy. `optional-deps` (default) emits npm's
    /// native per-platform packages; `postinstall` emits a download shim.
    #[serde(default)]
    pub mode: NpmMode,

    /// npm scope for the per-platform packages emitted in `optional-deps`
    /// mode (e.g. `@biomejs`). The per-platform packages are named
    /// `<scope>/<bin>-<os>-<cpu>[-<libc>]`. Required for `optional-deps`
    /// mode unless `platform_name_template` is set (a template can produce
    /// unscoped names); ignored in `postinstall` mode.
    pub scope: Option<String>,

    /// Override the per-platform package naming in `optional-deps` mode.
    ///
    /// The rendered template is the FULL package name for each platform,
    /// replacing the default `<scope>/<bin>-<os>-<cpu>[-<libc>]`. Beyond the
    /// standard release context, four platform vars are available per package:
    /// `NpmOs` (npm's os selector: `linux`/`darwin`/`win32`), `NpmCpu`
    /// (`x64`/`arm64`/`ia32`/...), `NpmLibc` (`glibc`/`musl`, empty off-linux),
    /// plus anodizer's own `Os`/`Arch` target mapping (os `windows`, not
    /// `win32`). Example: `"git-cliff-{{ Os }}-{{ NpmCpu }}"` yields
    /// `git-cliff-linux-x64`, `git-cliff-darwin-arm64`, `git-cliff-windows-x64`.
    /// A rendered name without a leading `@` is prefixed with `scope` when one
    /// is set; with this template set, `scope` is optional and unscoped names
    /// are allowed. If the template renders the same name for two platforms
    /// (e.g. it omits `NpmLibc` while `libc_aware` is `true`), the publisher
    /// fails with a config error naming the colliding packages. The npm
    /// `os`/`cpu`/`libc` selector fields inside each `package.json` always use
    /// the npm tokens regardless of this template. Ignored (hard error) in
    /// `postinstall` mode.
    pub platform_name_template: Option<String>,

    /// In `optional-deps` mode, emit and publish ONLY the per-platform
    /// packages — no metapackage (no `optionalDependencies` aggregate, no
    /// `bin` shim). Accepts bool or template string, like `skip`. For
    /// projects whose base npm package is hand-written (e.g. a TypeScript
    /// library owning the name) while anodizer owns the per-platform binary
    /// packages it lists under its own `optionalDependencies`. Hard error in
    /// `postinstall` mode (there is no metapackage to skip) — but only when
    /// it evaluates truthy: `skip_metapackage: false` (or a template
    /// rendering falsey/empty) is inert. Example bool form:
    /// `skip_metapackage: true`. Example templated form:
    /// `skip_metapackage: "{{ if .Env.EXTERNAL_METAPACKAGE }}true{{ end }}"`
    /// — skip only when the base package is published elsewhere.
    #[serde(default, deserialize_with = "deserialize_string_or_bool_opt")]
    pub skip_metapackage: Option<StringOrBool>,

    /// Metapackage name for `optional-deps` mode (e.g. `biome`). This is the
    /// package users `npm install`; it lists every per-platform package under
    /// `optionalDependencies` and ships the `bin` shim. Falls back to `name`
    /// (or the crate name) when unset.
    pub metapackage: Option<String>,

    /// Command name installed by the metapackage's `bin` map (`optional-deps`
    /// mode). Falls back to the metapackage basename when unset. Shorthand for a
    /// single-command package; superseded by `bins` when both are set.
    pub bin: Option<String>,

    /// Multiple commands installed by one package, as a map of `command name →
    /// binary filename` to resolve inside the selected per-platform package
    /// (`optional-deps`) or the extracted `bin/` directory (`postinstall`). The
    /// package that ships `hurl` + `hurlfmt`, for example, sets
    /// `bins: { hurl: hurl, hurlfmt: hurlfmt }` to emit both commands. Each
    /// command gets its own launcher shim (`<command>.js`) and its own entry in
    /// the package's `bin` map. When set, this supersedes the single-command
    /// `bin:` shorthand; when unset, a single command is emitted from `bin:`.
    pub bins: Option<BTreeMap<String, String>>,

    /// Per-platform binary subdirectory inside each `optional-deps` package
    /// (e.g. `bin`). When set, the platform binary lands at
    /// `<platform_bin_dir>/<binary>` rather than the package root, the metapackage
    /// shim resolves it at that path, and the package's `files` allowlist covers
    /// it. Required by external shims that hard-code a nested resolve path — for
    /// example git-cliff's own wrapper resolves
    /// `git-cliff-<os>-<arch>/bin/git-cliff`, so a `skip_metapackage` layout must
    /// place the binary under `bin/`. When unset (the default), the binary lands
    /// at the package root (`<binary>`). Ignored in `postinstall` mode.
    pub platform_bin_dir: Option<String>,

    /// Environment variables injected into the child process the generated
    /// launcher shim spawns (both the `optional-deps` metapackage shim and the
    /// `postinstall` launcher). Each entry is merged over the inherited
    /// `process.env` before the native binary is exec'd, so a wrapper can set a
    /// runtime variable its binary expects (e.g. `{ BIOME_BINARY_SOURCE: npm }`).
    /// When unset, the shim spawns with the inherited environment unchanged.
    pub shim_env: Option<BTreeMap<String, String>>,

    /// In `optional-deps` mode, emit separate per-platform packages for linux
    /// `musl` vs `glibc` (distinguished by the npm `libc` selector). When
    /// `false`, a single linux package per cpu is emitted with no `libc`
    /// selector. Default `true` — musl and glibc binaries are not
    /// interchangeable, so collapsing them risks installing the wrong one.
    #[serde(default = "default_libc_aware")]
    pub libc_aware: bool,

    /// NPM package name (the metapackage / postinstall package). May be scoped
    /// (`@org/foo`) or unscoped (`foo`). Falls back to the crate name when unset.
    pub name: Option<String>,

    /// Templated package description. Falls back to the project-level
    /// `metadata.description` when unset.
    pub description: Option<String>,

    /// Templated homepage URL. Falls back to `metadata.homepage` when unset.
    pub homepage: Option<String>,

    /// NPM `keywords` list.
    pub keywords: Option<Vec<String>>,

    /// Templated SPDX license identifier (e.g. `MIT`, `Apache-2.0`).
    /// Falls back to `metadata.license` when unset.
    pub license: Option<String>,

    /// Templated `author` field for `package.json`. Falls back to the
    /// project's `metadata.maintainers[0]`, and then to the crate's
    /// `Cargo.toml [package].authors[0]`, when unset.
    pub author: Option<String>,

    /// npm `engines` constraint map written verbatim into `package.json`
    /// (e.g. `{ node: ">=18" }`). When unset, anodizer emits a sensible
    /// default of `{ node: ">=18" }` — the floor every leading native-CLI
    /// wrapper (esbuild, biome, swc) declares. Set to an empty map to
    /// suppress the field entirely.
    pub engines: Option<std::collections::BTreeMap<String, String>>,

    /// Explicit npm `files` allowlist written into `package.json`. When
    /// unset, anodizer derives it from what each package actually ships
    /// (the per-platform binary, the metapackage `shim.js`, or the
    /// postinstall launcher/script) plus any `extra_files` basenames. Set
    /// to an empty list to suppress the field (npm then falls back to its
    /// implicit inclusion rules).
    pub files: Option<Vec<String>>,

    /// npm `publishConfig.provenance` flag. When unset, anodizer emits
    /// `true` — the npm supply-chain norm that biome and swc both set,
    /// pairing with anodizer's signing story. Set to `false` to disable.
    pub provenance: Option<bool>,

    /// Templated repository URL. Emitted as `repository.url` in
    /// `package.json` with `type: git`. Falls back to the crate's
    /// `Cargo.toml [package].repository` when unset. Named `repository_url` to
    /// avoid colliding with the `{owner, name, token, ...}` `repository:` block
    /// every git-based publisher uses; the legacy `repository:` spelling is
    /// accepted via serde alias for back-compat.
    #[serde(alias = "repository")]
    pub repository_url: Option<String>,

    /// Templated bug tracker URL. Emitted as `bugs.url` in `package.json`.
    pub bugs: Option<String>,

    /// npm `man` page list, emitted verbatim into `package.json` as `man` (a
    /// path or array of paths to troff-formatted man pages npm installs).
    pub man: Option<Vec<String>>,

    /// npm `contributors` list, emitted verbatim into `package.json` as
    /// `contributors` (each entry a name or `Name <email> (url)` string).
    pub contributors: Option<Vec<String>>,

    /// NPM access level for scoped packages. Accepts `"public"` /
    /// `"restricted"`. Scoped packages on npmjs.org default to
    /// `restricted` unless this is set to `public`.
    pub access: Option<String>,

    /// NPM dist-tag for the publish (default `latest`). Templated.
    pub tag: Option<String>,

    /// Archive format the `postinstall` script downloads
    /// (`tgz`, `tar.gz`, `tar`, `zip`, `binary`). Default `tgz`. Only consulted
    /// in `postinstall` mode.
    pub format: Option<String>,

    /// Override the download URL emitted into the postinstall script
    /// (templated). When unset, anodizer derives the URL from the
    /// release context. Only consulted in `postinstall` mode.
    pub url_template: Option<String>,

    /// Version of the native binary the `postinstall` script downloads, when it
    /// differs from the published npm package version. Feeds the `{{ Version }}`
    /// var of the derived (or `url_template`) download URL, so the npm package
    /// can be re-published at a new version while still fetching a pinned binary
    /// release. Falls back to the release version when unset. Only consulted in
    /// `postinstall` mode.
    pub binary_version: Option<String>,

    /// amd64 microarchitecture variant filter (`v1` / `v2` / `v3` / `v4`).
    /// When set, an amd64 artifact is included only when its `amd64_variant`
    /// metadata matches (artifacts without the metadata always pass). Steers
    /// which tuned build lands in each platform package. Typed as
    /// [`Amd64Variant`], so any value outside `v1`..`v4` is rejected at parse
    /// time. Default `v1`, mirroring the homebrew/winget/krew/nix/aur peers.
    pub amd64_variant: Option<Amd64Variant>,

    /// ARM version filter (e.g. `6`, `7`). When set, a 32-bit ARM artifact is
    /// included only when its `arm_variant` metadata matches (artifacts without
    /// the metadata always pass). Mirrors the homebrew/winget/krew/nix/aur
    /// peers; defaults to `6` when unset.
    pub arm_variant: Option<String>,

    /// Additional files to include in the published package alongside the
    /// generated metadata. Default `["README*", "LICENSE*"]` (applied at the
    /// `Default` pass).
    pub extra_files: Option<Vec<String>>,

    /// Template-rendered file mappings (`src` may be a glob; rendered
    /// contents written to `dst`).
    pub templated_extra_files: Option<Vec<NpmTemplatedExtraFile>>,

    /// Free-form root-level `package.json` fields. Shallow-merged into
    /// the generated `package.json` (config keys win over generated ones).
    /// Useful for `mcpName`, `funding`, or other npm metadata fields
    /// anodizer does not surface as first-class options.
    pub extra: Option<HashMap<String, serde_json::Value>>,

    /// Override the registry endpoint (default `https://registry.npmjs.org`).
    pub registry: Option<String>,

    /// Auth token for the registry. Falls back to the `NPM_TOKEN` env var
    /// when unset. Stored in `.npmrc` as `//<registry>/:_authToken=...`
    /// at publish time and never passed via argv.
    pub token: Option<String>,

    /// Credential-selection strategy: `auto` (default) decides per package by
    /// probing the registry for the package's existence; `token` always uses
    /// the token; `oidc` always uses Trusted Publishing with no token fallback.
    /// See [`NpmAuthMode`]. Absent in existing configs resolves to `auto`.
    #[serde(default)]
    pub auth: NpmAuthMode,

    /// Skip this publisher. Accepts bool or template string.
    /// Accepts the legacy `disable:` spelling via serde alias for back-compat.
    #[serde(
        default,
        alias = "disable",
        deserialize_with = "deserialize_string_or_bool_opt"
    )]
    pub skip: Option<StringOrBool>,

    /// Override whether this publisher failing should fail the overall release.
    ///
    /// Default: `true` — NPM is a Manager-group publisher (one-way
    /// 72-hour unpublish window), so a failed publish aborts by default
    /// to avoid surprising the operator with a half-released version.
    /// Set to `false` to log failures but continue.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub required: Option<bool>,

    /// Template-conditional gate: when the rendered result is falsy
    /// (`"false"` / `"0"` / `"no"` / empty), the NPM publisher entry is
    /// skipped. Render failure hard-errors.
    #[serde(rename = "if")]
    pub if_condition: Option<String>,
    /// When `true`, a triggered rollback leaves this publisher's work in
    /// place rather than attempting to undo it. Default `false`.
    pub retain_on_rollback: Option<bool>,
}

/// Default for [`NpmConfig::libc_aware`] — emit musl and glibc linux
/// packages separately.
fn default_libc_aware() -> bool {
    true
}

impl Default for NpmConfig {
    fn default() -> Self {
        Self {
            id: None,
            ids: None,
            targets: None,
            mode: NpmMode::default(),
            scope: None,
            platform_name_template: None,
            skip_metapackage: None,
            metapackage: None,
            bin: None,
            bins: None,
            platform_bin_dir: None,
            shim_env: None,
            libc_aware: default_libc_aware(),
            name: None,
            description: None,
            homepage: None,
            keywords: None,
            license: None,
            author: None,
            engines: None,
            files: None,
            provenance: None,
            repository_url: None,
            bugs: None,
            man: None,
            contributors: None,
            access: None,
            tag: None,
            format: None,
            url_template: None,
            binary_version: None,
            amd64_variant: None,
            arm_variant: None,
            extra_files: None,
            templated_extra_files: None,
            extra: None,
            registry: None,
            token: None,
            auth: NpmAuthMode::default(),
            skip: None,
            required: None,
            if_condition: None,
            retain_on_rollback: None,
        }
    }
}

/// Template-rendered file mapping for [`NpmConfig::templated_extra_files`].
#[derive(Debug, Clone, Serialize, Deserialize, Default, JsonSchema)]
#[serde(default, deny_unknown_fields)]
pub struct NpmTemplatedExtraFile {
    /// Source path (may be a glob; relative to the project root).
    pub src: String,
    /// Destination path inside the published package.
    pub dst: String,
}