// Release check tests cover release validation script behavior.

import { chmodSync, mkdtempSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";

import { tmpdir } from "node:os";

import { dirname, join, win32 } from "node:path";

import { dirname, join, resolve as resolvePath, win32 } from "node:path";

import { bundledDistPluginFile, bundledPluginFile } from "openclaw/plugin-sdk/test-fixtures";

import { describe, expect, it } from "vitest";

import { listBundledPluginPackArtifacts } from "../scripts/lib/bundled-plugin-build-entries.mjs";

PACKED_CLI_SMOKE_COMMANDS,

PACKED_COMPLETION_SMOKE_ARGS,

packageNameFromSpecifier,

resolvePackedTarballPath,

resolveReleaseNpmCommand,

resolveMissingPackBuildHint,

runReleaseCheckCommand,

});

});

describe("resolvePackedTarballPath", () => {

it("resolves one local npm pack tarball filename inside the pack destination", () => {

expect(

resolvePackedTarballPath("/tmp/openclaw-pack", [{ filename: "openclaw-2026.6.17.tgz" }]),

).toBe(resolvePath("/tmp/openclaw-pack", "openclaw-2026.6.17.tgz"));

});

it("rejects path-like npm pack tarball filenames", () => {

const unsafeFilenames = [

"../openclaw.tgz",

"nested/openclaw.tgz",

"nested\\openclaw.tgz",

"/tmp/openclaw.tgz",

"C:\\temp\\openclaw.tgz",

"openclaw\u0000.tgz",

"openclaw.tar.gz",

];

for (const filename of unsafeFilenames) {

expect(() => resolvePackedTarballPath("/tmp/openclaw-pack", [{ filename }])).toThrow(

"release-check: npm pack reported unsafe tarball filename",

);

}

});

});

describe("collectCriticalPluginSdkEntrypointSizeErrors", () => {

it("flags oversized public plugin SDK entrypoints before publish", () => {

const root = mkdtempSync(join(tmpdir(), "release-check-critical-sdk-"));