/**
 * #1928 — Gemini CLI runtime removal + Antigravity redirect.
 *
 * Google sunset Gemini CLI on 2026-06-18; Antigravity CLI is the official
 * successor. MSD removes the `gemini` runtime and turns `--gemini` into an
 * explicit deprecation redirect (NOT a silent alias — Hyrum's Law, per the
 * issue's rejected alternative #2).
 *
 * Coverage:
 *   A. CLI redirect contract (spawned installer): the sunset notice, the
 *      no-silent-install failure path, clean UX (no stack trace), and that a
 *      co-selected valid runtime still installs.
 *   B. The `gemini` runtime is gone from every runtime-name-policy surface.
 *   C. Antigravity is PRESERVED everywhere it shared surface with gemini
 *      (GEMINI.md instruction file + the shared convertAntigravityToolName
 *      tool vocabulary) — the shared-infra regression this change had to avoid.
 */

'use strict';

const { describe, test, before } = require('node:test');
const assert = require('node:assert/strict');
const path = require('node:path');
const fs = require('node:fs');
const { spawnSync } = require('node:child_process');
const { runNode } = require('./helpers/process-seam.cjs');
const { throwIfFailed } = require('./helpers/git-fixture.cjs');

const { createTempDir, cleanup } = require('./helpers.cjs');
const { runMinimalInstall, BUILD_SCRIPT } = require('./helpers/install-shared.cjs');

const ROOT = path.join(__dirname, '..');
const INSTALL_JS = path.join(ROOT, 'bin', 'install.js');

// #3145: class-norm timeout, not a per-suite value — see helpers/timeouts.cjs.
const { BUILD_TIMEOUT_MS: BUILD_HOOKS_TIMEOUT_MS, INSTALL_TIMEOUT_MS } = require('./helpers/timeouts.cjs');

// hooks/dist is gitignored + built; build it idempotently so a real install
// emits hooks (mirrors golden-install-parity / install-minimal-hooks).
before(() => {
  throwIfFailed(runNode([BUILD_SCRIPT], { timeoutMs: BUILD_HOOKS_TIMEOUT_MS }), `node ${BUILD_SCRIPT}`);
});

const {
  canonicalizeRuntimeName,
  getRuntimeLabel,
  getGlobalConfigHomeFragment,
  getRuntimeNewProjectCommand,
  runtimeFlags,
  getProjectInstructionFile,
} = require(path.join(ROOT, 'msd-core', 'bin', 'lib', 'runtime-name-policy.cjs'));

const registry = require(path.join(ROOT, 'msd-core', 'bin', 'lib', 'capability-registry.cjs'));
const catalog = require(path.join(ROOT, 'msd-core', 'bin', 'shared', 'model-catalog.json'));

const { convertClaudeAgentToAntigravityAgent } = require('../bin/install.js');

// Run the installer as a subprocess with an isolated HOME so no install can
// touch the real machine. Runtime-config env overrides are stripped so the
// child resolves config dirs strictly under the temp HOME.
function runInstaller(args, homeDir) {
  const env = { ...process.env, HOME: homeDir, USERPROFILE: homeDir, MSD_TEST_MODE: '1' };
  for (const k of [
    'CLAUDE_CONFIG_DIR', 'GEMINI_CONFIG_DIR', 'ANTIGRAVITY_CONFIG_DIR',
    'XDG_CONFIG_HOME', 'CODEX_CONFIG_DIR', 'OPENCODE_CONFIG_DIR', 'KILO_CONFIG_DIR',
  ]) delete env[k];
  return spawnSync(process.execPath, [INSTALL_JS, ...args], {
    cwd: homeDir, env, encoding: 'utf8', timeout: INSTALL_TIMEOUT_MS,
  });
}

describe('#1928 --gemini CLI deprecation redirect', () => {
  test('--gemini alone prints the sunset notice and exits non-zero without installing', (t) => {
    const home = createTempDir('msd-1928-gemini-only-');
    t.after(() => cleanup(home));

    const r = runInstaller(['--gemini'], home);
    const out = `${r.stdout || ''}${r.stderr || ''}`;

    assert.strictEqual(r.status, 1, 'a bare --gemini must exit 1, not silently fall through to a Claude install');
    assert.match(out, /sunset by Google on 2026-06-18/, 'must cite the 2026-06-18 sunset date');
    assert.match(out, /--antigravity/, 'must redirect the user to --antigravity');
    assert.match(out, /Antigravity CLI \(the official successor\)/);
    // No silent install: nothing was written under the isolated HOME.
    assert.ok(!fs.existsSync(path.join(home, '.gemini')), 'must not create a .gemini runtime dir');
    assert.ok(!fs.existsSync(path.join(home, '.claude')), 'bare --gemini must not silently install Claude');
  });

  test('--gemini --global still exits 1 (removed flag regardless of scope)', (t) => {
    const home = createTempDir('msd-1928-gemini-global-');
    t.after(() => cleanup(home));

    const r = runInstaller(['--gemini', '--global'], home);
    assert.strictEqual(r.status, 1);
    assert.match(`${r.stdout || ''}${r.stderr || ''}`, /sunset by Google on 2026-06-18/);
  });

  test('the redirect is a clean message — no stack trace leaks to the user', (t) => {
    const home = createTempDir('msd-1928-gemini-clean-');
    t.after(() => cleanup(home));

    const r = runInstaller(['--gemini'], home);
    const err = r.stderr || '';
    assert.doesNotMatch(err, /^\s+at .+:\d+:\d+/m, 'no V8 stack frame in redirect output');
    assert.doesNotMatch(err, /\bError:|\bTypeError:|\bthrow\b/, 'no thrown-error prose in redirect output');
  });

  test('--gemini --help still prints usage (the redirect must not suppress help)', (t) => {
    const home = createTempDir('msd-1928-gemini-help-');
    t.after(() => cleanup(home));

    const r = runInstaller(['--gemini', '--help'], home);
    assert.strictEqual(r.status, 0, '--help must exit 0, not the redirect error code');
    assert.match(`${r.stdout || ''}`, /Usage:/, 'the usage/help block must still print to stdout');
    assert.match(`${r.stderr || ''}`, /sunset by Google on 2026-06-18/, 'the notice also prints');
  });

  test('--gemini --uninstall guides manual cleanup and does NOT uninstall Claude', (t) => {
    const home = createTempDir('msd-1928-gemini-uninstall-');
    t.after(() => cleanup(home));

    // Sentinel: a pre-existing Claude install that must survive. Run WITHOUT
    // MSD_TEST_MODE so the real uninstall dispatch is active — the redirect must
    // exit before it (the dispatch defaults an empty selection to 'claude').
    fs.mkdirSync(path.join(home, '.claude'), { recursive: true });
    fs.writeFileSync(path.join(home, '.claude', 'sentinel.txt'), 'keep me');
    const env = { ...process.env, HOME: home, USERPROFILE: home };
    delete env.MSD_TEST_MODE;
    delete env.CLAUDE_CONFIG_DIR;
    const r = spawnSync(process.execPath, [INSTALL_JS, '--gemini', '--uninstall', '--global'], {
      cwd: home, env, encoding: 'utf8', timeout: INSTALL_TIMEOUT_MS,
    });

    assert.strictEqual(r.status, 1, 'must exit 1, not fall through to the uninstall dispatch');
    assert.match(`${r.stderr || ''}`, /`--gemini --uninstall` is no longer available/, 'must guide manual cleanup');
    assert.ok(fs.existsSync(path.join(home, '.claude', 'sentinel.txt')),
      'the Claude install must NOT be uninstalled (the dispatch defaults empty selection to claude)');
  });

  test('--gemini co-selected with a valid runtime prints the notice AND still installs the other runtime', (t) => {
    // Hermetic install via the repo harness (explicit --config-dir + isolated
    // HOME). `--gemini` is added alongside a valid runtime (codex): the installer
    // prints the notice but does NOT exit 1 (runMinimalInstall asserts status 0
    // internally) and installs codex.
    const { manifest, root, stderr } = runMinimalInstall({ runtime: 'codex', scope: 'global', extraArgs: ['--gemini'] });
    t.after(() => cleanup(root));

    assert.match(stderr, /sunset by Google on 2026-06-18/, 'the redirect notice still prints alongside the valid install');
    assert.match(stderr, /--antigravity/);
    assert.ok(manifest, 'the co-selected codex runtime must be installed (manifest written)');
  });

  test('control: an install WITHOUT --gemini does not print the sunset notice', (t) => {
    const { root, stderr } = runMinimalInstall({ runtime: 'codex', scope: 'global' });
    t.after(() => cleanup(root));
    assert.doesNotMatch(stderr, /sunset by Google/, 'the notice must be conditional on --gemini');
  });
});

describe('#1928 gemini removed from every runtime-name-policy surface', () => {
  test('gemini aliases no longer canonicalize', () => {
    for (const alias of ['gemini', 'gemini-cli', 'gemini-code']) {
      assert.strictEqual(canonicalizeRuntimeName(alias), null, `${alias} must not resolve to a known runtime`);
    }
  });

  // #4709 AC#1 inverted this assertion: gemini used to silently fall back to
  // Claude Code's label/config-fragment defaults (the defect this test used to
  // pin); it now REFUSES on those two surfaces with RetiredRuntimeError
  // instead. getRuntimeNewProjectCommand is NOT one of the functions #4709
  // changed, so it still falls back — kept un-inverted and asserted as before.
  test('gemini refuses on label / config-fragment surfaces; new-project still falls back (unchanged by #4709)', () => {
    assert.throws(
      () => getRuntimeLabel('gemini'),
      /retired by #1928/,
      'label table entry removed → must now refuse, not fail-closed-default',
    );
    assert.throws(
      () => getGlobalConfigHomeFragment('gemini'),
      /retired by #1928/,
      'config-home fragment removed → must now refuse, not fail-closed-default',
    );
    assert.strictEqual(getRuntimeNewProjectCommand('gemini'), '/msd-new-project', 'new-project override removed → default (unchanged by #4709)');
  });

  test('runtimeFlags has no isGemini and covers exactly the non-claude, CLI-installable registry runtimes (count-agnostic)', () => {
    const flags = runtimeFlags('claude');
    assert.ok(!('isGemini' in flags), 'isGemini flag must be gone');
    // The flag set tracks the non-claude registry runtimes (one is<Runtime> per
    // id), so adding a runtime updates the count automatically — no hand-pinned
    // number that would break on the next runtime addition.
    // #2103: registry runtimes with installSurface === 'none' (e.g. vscode —
    // Marketplace/VSIX-distributed, never CLI-installed) have no --<rt> flag
    // by design (see tests/runtime-flags.test.cjs's NON_INSTALLABLE_RUNTIMES)
    // and are excluded from this count too.
    const expectedNonClaudeCount = Object.keys(registry.runtimes)
      .filter((id) => id !== 'claude' && registry.runtimes[id].runtime.installSurface !== 'none')
      .length;
    assert.strictEqual(Object.keys(flags).length, expectedNonClaudeCount,
      'flag count must equal the non-claude, CLI-installable registry runtime count');
  });

  // #4709 AC#1 inverted this assertion: gemini used to silently default to
  // AGENTS.md (the defect this test used to pin); getProjectInstructionFile
  // now refuses it outright with RetiredRuntimeError instead.
  test('gemini no longer maps to GEMINI.md — and no longer falls back to AGENTS.md either; it refuses', () => {
    assert.throws(() => getProjectInstructionFile('gemini'), /retired by #1928/);
  });
});

describe('#1928 Antigravity preserved (shared surface with the removed gemini runtime)', () => {
  test('antigravity still resolves and keeps its GEMINI.md instruction file', () => {
    assert.strictEqual(canonicalizeRuntimeName('antigravity'), 'antigravity');
    assert.strictEqual(canonicalizeRuntimeName('antigravity-cli'), 'antigravity');
    assert.strictEqual(getProjectInstructionFile('antigravity'), 'GEMINI.md',
      'Antigravity CLI reads GEMINI.md as its contextFileName — this mapping must survive gemini removal');
    assert.strictEqual(getRuntimeLabel('antigravity'), 'Antigravity');
  });

  test('the Antigravity-native tool vocabulary powers Antigravity agent conversion (#4705)', () => {
    const input = ['---', 'name: msd-x', 'description: d', 'tools: Read, Write, WebFetch, Skill', '---', '', 'body'].join('\n');
    const result = convertClaudeAgentToAntigravityAgent(input);
    const toolsBlock = result.slice(result.indexOf('tools:')).split('\n').filter((l) => l.startsWith('- '));
    assert.ok(toolsBlock.includes('- view_file'), 'Read → view_file (native name, #4705)');
    assert.ok(toolsBlock.includes('- write_file'), 'Write → write_file');
    assert.ok(toolsBlock.includes('- web_fetch'), 'WebFetch → web_fetch');
    assert.ok(!toolsBlock.some((l) => /\bskill\b/.test(l)), 'Skill is still excluded (would be an invalid backend tool name)');
  });

  test('#4727 the rename is complete: no gemini-named alias survives alongside the antigravity-named exports', () => {
    // Exports-shape check against the compiled module, not a text scan of source — #4727 renamed
    // claudeToGeminiTools/convertGeminiToolName to claudeToAntigravityTools/convertAntigravityToolName
    // in place; a partial rename would leave BOTH names live as two aliases for one concept, which
    // is exactly the drift this epic exists to end.
    const mod = require(path.join(ROOT, 'msd-core', 'bin', 'lib', 'runtime-artifact-conversion.cjs'));

    assert.ok(
      Object.prototype.hasOwnProperty.call(mod, 'claudeToAntigravityTools'),
      'the renamed tool map must be exported under its new name',
    );
    assert.ok(
      Object.prototype.hasOwnProperty.call(mod, 'convertAntigravityToolName'),
      'the renamed conversion function must be exported under its new name',
    );
    assert.ok(
      !Object.prototype.hasOwnProperty.call(mod, 'claudeToGeminiTools'),
      'the retired gemini-named map must not still be exported — a surviving alias means the rename never finished',
    );
    assert.ok(
      !Object.prototype.hasOwnProperty.call(mod, 'convertGeminiToolName'),
      'the retired gemini-named function must not still be exported — a surviving alias means the rename never finished',
    );

    // The #4727 rename remains a pure identifier change: same KEYS, same shape
    // (an added OR removed key still fails). The VALUES moved from the Gemini
    // CLI dialect to Antigravity-native names in #4705 — Antigravity's own
    // documented subagent contract (antigravity.google/docs/subagents) names
    // view_file / replace_file_content / grep_search / run_command as native,
    // and its tool-validation warning says wrong names can hang the subagent.
    // The old "Antigravity speaks the Gemini dialect" rationale was the belief
    // at #4727 time; the confirmed bug #4705 supersedes it.
    assert.deepStrictEqual(mod.claudeToAntigravityTools, {
      Read: 'view_file',
      Write: 'write_file',
      Edit: 'replace_file_content',
      Bash: 'run_command',
      Glob: 'glob',
      Grep: 'grep_search',
      WebSearch: 'google_web_search',
      WebFetch: 'web_fetch',
      TodoWrite: 'write_todos',
    }, 'the tool map keys are the #4727 rename surface (add/remove still fails); the VALUES are the #4705 Antigravity-native vocabulary');

    // In-set / out-of-set boundary pair: the excluded ids still return null individually...
    for (const excluded of ['mcp__anything', 'Task', 'Agent', 'AskUserQuestion', 'ask_user', 'Skill', 'SlashCommand']) {
      assert.strictEqual(
        mod.convertAntigravityToolName(excluded),
        null,
        `${excluded} must still be excluded from the Antigravity tool dialect after the rename`,
      );
    }
    // ...and an unmapped name still falls through to the lowercase default.
    assert.strictEqual(
      mod.convertAntigravityToolName('SomeOtherTool'),
      'someothertool',
      'an unmapped tool name must still lowercase-fallback after the rename',
    );
  });
});

/**
 * #4709 — the #1928 removal reached the installer and the runtime enum, but runtime-loaded
 * workflow text kept MINTING the retired id: `RUNTIME="gemini"` from `$GEMINI_CONFIG_DIR`, a
 * runtime selection menu offering "Gemini CLI.", a runtime->model-tier table row keyed `gemini`,
 * and `config-set runtime gemini` examples.
 *
 * The name policy's unknown-id fallbacks are DELIBERATE and stay unchanged — see the
 * 'gemini no longer maps to GEMINI.md (defaults to AGENTS.md)' test above, and
 * src/runtime-name-policy.cts:220-222, which calls the label default "the always-safe default,
 * fail-closed". This block removes the REACHABILITY instead: nothing shipped may mint an id the
 * policy does not recognize.
 *
 * Every assertion is STRUCTURAL (the literal must be canonical / the runtime must exist as a
 * catalog key), never "the string gemini is absent" — that string is load-bearing across
 * Antigravity's real on-disk contract, which the final test pins.
 */
describe('#4709 no shipped surface mints a retired runtime id', () => {
  /** Recursively collect every `.md` file under `dir` (missing dir -> []). */
  function markdownFilesUnder(dir) {
    if (!fs.existsSync(dir)) return [];
    const out = [];
    for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
      const full = path.join(dir, entry.name);
      if (entry.isDirectory()) out.push(...markdownFilesUnder(full));
      else if (entry.isFile() && entry.name.endsWith('.md')) out.push(full);
    }
    return out;
  }

  /**
   * The shipped, runtime-loaded markdown corpus this block governs. `agents/` is included
   * deliberately: it ships runtime-loaded markdown too, including `.compact.md` variants, and
   * leaving it out was a coverage gap an adversarial review caught.
   */
  function shippedMarkdown() {
    return [
      ...markdownFilesUnder(path.join(ROOT, 'msd-core', 'workflows')),
      ...markdownFilesUnder(path.join(ROOT, 'commands')),
      ...markdownFilesUnder(path.join(ROOT, 'skills')),
      ...markdownFilesUnder(path.join(ROOT, 'agents')),
    ];
  }

  const relPath = (p) => path.relative(ROOT, p).split(path.sep).join('/');
  const linesOf = (file) => fs.readFileSync(file, 'utf8').split(/\r?\n/);

  const SETTINGS_ADVANCED = path.join(ROOT, 'msd-core', 'workflows', 'settings-advanced.md');

  test('every RUNTIME= assignment in workflow text names a canonical runtime', () => {
    // Bare-literal assignments only: RUNTIME=codex / RUNTIME="codex". A `$VAR`, `$(cmd)` or
    // `<placeholder>` assignment is resolved at runtime and carries no id to validate here.
    const ASSIGN = /\bRUNTIME=("?)([a-z][a-z0-9-]*)\1(?![\w-])/g;
    const offenders = [];

    for (const file of shippedMarkdown()) {
      linesOf(file).forEach((line, i) => {
        for (const m of line.matchAll(ASSIGN)) {
          if (canonicalizeRuntimeName(m[2]) === null) {
            offenders.push(`${relPath(file)}:${i + 1} mints RUNTIME=${m[2]}`);
          }
        }
      });
    }

    assert.deepStrictEqual(offenders, [],
      'shipped workflow text assigns a runtime id the name policy does not recognize. A '
        + 'non-canonical id does not fail loudly — it resolves to Claude Code defaults, so the '
        + `wrong config dir and instruction file are used silently. Offenders:\n  ${offenders.join('\n  ')}`);
  });

  test('the runtime tier table names only runtimes the model catalog defines', () => {
    const known = new Set(Object.keys(catalog.runtimeTierDefaults));
    const offenders = [];

    // Rows of the runtime -> model-tier table: | `<id>` | `<opus>` | `<sonnet>` | `<haiku>` |
    const ROW = /^\|\s*`([a-z][a-z0-9-]*)`\s*\|/;
    linesOf(SETTINGS_ADVANCED).forEach((line, i) => {
      const m = ROW.exec(line);
      if (m && !known.has(m[1])) {
        offenders.push(`${relPath(SETTINGS_ADVANCED)}:${i + 1} tables runtime \`${m[1]}\``);
      }
    });

    assert.deepStrictEqual(offenders, [],
      'the runtime->model-tier table documents built-in defaults for a runtime the model catalog '
        + 'has no entry for, so `config-set runtime <id>` would be ignored. The retired `gemini` '
        + 'row carried the three model IDs of the `google` PROVIDER preset — a provider axis '
        + `rendered as a runtime axis. Offenders:\n  ${offenders.join('\n  ')}`);
  });

  test('the runtime selection menu offers only canonical runtimes', () => {
    const offenders = [];

    // Scoped to RUNTIME menus by tracking the nearest preceding `question:`. The same file also
    // carries a provider menu (anthropic / openai) and a budget menu (high / medium / low) whose
    // labels are single lowercase tokens too; neither names a runtime, so validating those
    // against the runtime policy would be a false positive, not extra rigor.
    const QUESTION = /^\s*question:\s*"(.*)"\s*,?\s*$/;
    const OPTION = /\{\s*label:\s*"([a-z][a-z0-9-]*)"\s*,\s*description:/;
    let inRuntimeMenu = false;

    linesOf(SETTINGS_ADVANCED).forEach((line, i) => {
      const q = QUESTION.exec(line);
      if (q) {
        inRuntimeMenu = /runtime/i.test(q[1]);
        return;
      }
      if (!inRuntimeMenu) return;
      const m = OPTION.exec(line);
      if (m && canonicalizeRuntimeName(m[1]) === null) {
        offenders.push(`${relPath(SETTINGS_ADVANCED)}:${i + 1} offers \`${m[1]}\``);
      }
    });

    assert.deepStrictEqual(offenders, [],
      'a runtime selection menu offers a runtime MSD does not support — selecting it writes a '
        + `config value that silently resolves to Claude Code. Offenders:\n  ${offenders.join('\n  ')}`);
  });

  test('documented config examples name only canonical runtimes', () => {
    const offenders = [];
    const SET_RUNTIME = /config-set\s+runtime\s+([a-z][a-z0-9-]*)/g;
    const OVERRIDE = /model_profile_overrides\.([a-z][a-z0-9-]*)\./g;

    for (const file of shippedMarkdown()) {
      linesOf(file).forEach((line, i) => {
        for (const m of line.matchAll(SET_RUNTIME)) {
          if (canonicalizeRuntimeName(m[1]) === null) {
            offenders.push(`${relPath(file)}:${i + 1} \`config-set runtime ${m[1]}\``);
          }
        }
        for (const m of line.matchAll(OVERRIDE)) {
          if (canonicalizeRuntimeName(m[1]) === null) {
            offenders.push(`${relPath(file)}:${i + 1} \`model_profile_overrides.${m[1]}\``);
          }
        }
      });
    }

    assert.deepStrictEqual(offenders, [],
      'a documented example sets a runtime id the name policy does not recognize; a user who '
        + `copies it lands on Claude Code defaults. Offenders:\n  ${offenders.join('\n  ')}`);
  });

  test("Antigravity's Gemini-family descriptor contract is preserved", () => {
    // Negative space for every test above: Antigravity's real on-disk contract IS Google's
    // Gemini surface, so an over-broad gemini -> antigravity replacement must fail HERE rather
    // than ship. Asserted against the DESCRIPTOR, never a resolved path — getGlobalConfigDir()
    // reads $ANTIGRAVITY_CONFIG_DIR and the real $HOME, which is the #4312 defect class.
    const agy = JSON.parse(
      fs.readFileSync(path.join(ROOT, 'capabilities', 'antigravity', 'capability.json'), 'utf8'),
    );
    assert.strictEqual(agy.runtime.configHome.parent, '.gemini',
      "Antigravity's config home is nested under ~/.gemini");
    assert.strictEqual(agy.runtime.configHome.name, 'antigravity');
    assert.strictEqual(agy.runtime.hookEvents, 'gemini',
      'Antigravity speaks the Gemini hook-event dialect');
    assert.strictEqual(agy.runtime.hostBehaviors.projectInstructionFile, 'GEMINI.md');
    for (const kind of agy.runtime.artifactLayout.global) {
      assert.strictEqual(kind.home, '.gemini/config',
        'global skills/agents install to ~/.gemini/config, the dir agy scans (#3738)');
    }

    assert.ok(Object.prototype.hasOwnProperty.call(catalog.runtimeTierDefaults, 'antigravity'),
      'antigravity must remain a model-catalog runtime');

    // The three model IDs the stale `gemini` table row carried belong to the google PROVIDER
    // preset and must survive — they name real Google models, not a MSD runtime.
    const google = JSON.stringify(catalog.providerPresets.google);
    for (const model of ['gemini-3.1-pro-preview', 'gemini-3-flash', 'gemini-2.5-flash-lite']) {
      assert.ok(google.includes(model), `google provider preset must still offer ${model}`);
    }
  });

/**
 * #4709 Phase 3 — the Gemini CLI reviewer lane is retired.
 *
 * #1928 removed the gemini RUNTIME in 1.8.0 after Google sunset Gemini CLI on 2026-06-18. The
 * reviewer lane was re-created afterwards by the reviewer-lane-as-manifest-data work (6a9babda69,
 * #2798/#2837) — per the maintainer that re-creation was an error in that buildout, not a
 * decision, so retiring it corrects a mistake and needs no ADR-2782 amendment.
 *
 * The lane spawned `gemini {{model}} -p -`, a binary Google no longer serves for the
 * free/Pro/Ultra tiers that ARE MSD's audience.
 *
 * Every assertion below is STRUCTURAL — a declared lane, an owned config key, a capability count.
 * None asserts that the string "gemini" is absent, because that string is load-bearing across
 * Antigravity's real on-disk contract (~/.gemini/antigravity, ~/.gemini/config, hookEvents
 * "gemini", GEMINI.md) and across Google's own model IDs. The Antigravity block below is the
 * negative space that keeps this removal from overreaching.
 */
describe('#4709 the Gemini CLI reviewer lane is retired', () => {
  const reviewerIds = () => Object.keys(registry.capabilities)
    .filter((id) => registry.capabilities[id] && registry.capabilities[id].reviewer);

  test('capabilities/gemini/ no longer exists', () => {
    assert.strictEqual(
      fs.existsSync(path.join(ROOT, 'capabilities', 'gemini')),
      false,
      'the gemini capability directory must be deleted, not emptied',
    );
  });

  test('no capability declares a gemini reviewer lane', () => {
    const offenders = reviewerIds().filter((id) => {
      const rev = registry.capabilities[id].reviewer;
      return id === 'gemini' || rev.slug === 'gemini' || (rev.flags || []).includes('--gemini');
    });
    assert.deepStrictEqual(
      offenders,
      [],
      'a reviewer lane still resolves for the retired Gemini CLI; --gemini would spawn a binary '
        + `Google stopped serving on 2026-06-18. Offenders: ${offenders.join(', ')}`,
    );
  });

  test('no config key is owned for the retired lane', () => {
    const offenders = Object.keys(registry.configKeys).filter((k) => /\.gemini$/.test(k));
    assert.deepStrictEqual(
      offenders,
      [],
      'the retired lane still owns config keys, so `msd config-set` would accept settings for a '
        + `lane that cannot run. Offenders:\n  ${offenders.join('\n  ')}`,
    );
  });

  test('exactly 9 reviewer lanes remain', () => {
    // Counted from the registry, not hardcoded per-name, so adding a 10th lane later cannot
    // silently re-admit gemini under cover of the count still "looking right".
    const ids = reviewerIds().sort();
    assert.strictEqual(
      ids.length,
      9,
      `expected 9 reviewer lanes after retiring gemini, got ${ids.length}: ${ids.join(', ')}`,
    );
    assert.ok(!ids.includes('gemini'), 'gemini must not be among them');
  });

  test("Antigravity's reviewer lane is untouched (negative space)", () => {
    const agy = registry.capabilities.antigravity;
    assert.ok(agy && agy.reviewer, 'antigravity must still declare a reviewer lane');
    assert.strictEqual(agy.reviewer.slug, 'antigravity');
    for (const flag of ['--antigravity', '--agy']) {
      assert.ok(
        (agy.reviewer.flags || []).includes(flag),
        `antigravity must keep its ${flag} flag`,
      );
    }
    // Its own keys survive, including the deliberately `agy`-suffixed model key.
    for (const key of [
      'review.models.agy',
      'review.timeouts.antigravity',
      'review.max_prompt_tokens_per_reviewer.antigravity',
    ]) {
      assert.ok(
        Object.prototype.hasOwnProperty.call(registry.configKeys, key),
        `antigravity must still own ${key}`,
      );
    }
  });

  test('the other eight lanes are untouched (negative space)', () => {
    const expected = [
      'antigravity', 'claude', 'coderabbit', 'codex', 'cursor',
      'llama-cpp', 'lm-studio', 'ollama', 'opencode',
    ];
    assert.deepStrictEqual(
      reviewerIds().sort(),
      expected,
      'retiring gemini must remove exactly one lane and disturb no other',
    );
  });
});
});

/**
 * #4728 — localized docs and runtime-loaded workflow prose still surface the retired Gemini CLI
 * runtime as a selectable option, outside the English `how-to`/`ARCHITECTURE.md` surfaces #4709
 * already covers.
 *
 * As with #4709, every assertion here is STRUCTURAL: a heading position, a table's first cell, or
 * a captured runtime-example parenthetical — never "the string gemini is absent". `gemini` is
 * load-bearing across Antigravity's real on-disk contract (~/.gemini/antigravity, ~/.gemini/config,
 * GEMINI.md, hookEvents "gemini", GEMINI_API_KEY, every gemini-* model id), so a bare-string
 * assertion would be wrong and would fail on correct code. The PRESERVE block below is the
 * over-reach guard: it is what fails first if a "helpful" blanket gemini->antigravity sweep lands
 * instead of the scoped removal this issue asks for.
 */
describe('#4728 Gemini CLI prose retired from localized docs and runtime-loaded workflows', () => {
  const LOCALES = ['ja-JP', 'ko-KR', 'pt-BR', 'zh-CN'];
  const linesOf = (file) => fs.readFileSync(file, 'utf8').split(/\r?\n/);
  const relPath = (p) => path.relative(ROOT, p).split(path.sep).join('/');

  test('no locale install-on-your-runtime.md has a Gemini CLI ### heading', () => {
    // Heading-scoped (### only) so Antigravity's own ~/.gemini/... paths documented in the same
    // file cannot trip this — a bare substring match on "Gemini CLI" would be too broad here.
    const HEADING = /^###\s+Gemini CLI\s*$/m;
    const offenders = LOCALES
      .map((locale) => path.join(ROOT, 'docs', locale, 'how-to', 'install-on-your-runtime.md'))
      .filter((file) => HEADING.test(fs.readFileSync(file, 'utf8')))
      .map(relPath);

    assert.deepStrictEqual(offenders, [],
      'a localized how-to still documents Gemini CLI as an installable runtime under its own '
        + `heading, after #1928 retired the runtime. Offenders:\n  ${offenders.join('\n  ')}`);
  });

  test('no locale ARCHITECTURE.md tables a Gemini CLI row', () => {
    // First-cell-scoped so the Antigravity row's ~/.gemini/antigravity cells are untouched.
    const ROW = /^\|\s*Gemini CLI\s*\|/m;
    const offenders = LOCALES
      .map((locale) => path.join(ROOT, 'docs', locale, 'ARCHITECTURE.md'))
      .filter((file) => ROW.test(fs.readFileSync(file, 'utf8')))
      .map(relPath);

    assert.deepStrictEqual(offenders, [],
      'a localized ARCHITECTURE.md still tables Gemini CLI as a runtime row, after #1928 retired '
        + `the runtime. Offenders:\n  ${offenders.join('\n  ')}`);
  });

  test('no locale USER-GUIDE.md tables a Gemini CLI row', () => {
    const ROW = /^\|\s*Gemini CLI\s*\|/m;
    const offenders = LOCALES
      .map((locale) => path.join(ROOT, 'docs', locale, 'USER-GUIDE.md'))
      .filter((file) => ROW.test(fs.readFileSync(file, 'utf8')))
      .map(relPath);

    assert.deepStrictEqual(offenders, [],
      'a localized USER-GUIDE.md still tables Gemini CLI as a runtime row, after #1928 retired the '
        + `runtime. Offenders:\n  ${offenders.join('\n  ')}`);
  });

  test('no runtime-loaded workflow file names the retired Gemini runtime', () => {
    // Walk msd-core/workflows/ recursively (this MUST cover nested dirs like
    // new-project/steps/, where #4728's auto-mode-config.md defect lived) and assert no `.md`
    // file contains a case-sensitive standalone `Gemini` token, i.e. no match for /\bGemini\b/.
    //
    // Why a bare `/\bGemini\b/` is the right predicate, and not a narrower parenthetical/heading
    // scoped one: every LEGITIMATE gemini reference in this directory is spelled differently and
    // therefore cannot collide with this assertion —
    //   - Antigravity's config paths are lowercase with a slash: ~/.gemini/antigravity,
    //     ~/.gemini/config, .gemini/antigravity-ide
    //   - Google model ids are lowercase and hyphenated: gemini-3.1-pro-preview,
    //     gemini-2.5-flash-lite
    //   - env vars are uppercase: GEMINI_CONFIG_DIR, GEMINI_SESSION_ID, GEMINI_API_KEY
    //   - the generated runtime-launcher preamble only ever uses GEMINI_CONFIG_DIR / $HOME/.gemini
    // So a bare capitalised `Gemini` anywhere under msd-core/workflows/ can only mean the retired
    // RUNTIME is being named — which is exactly the defect this test exists to catch. These files
    // are runtime-loaded (read by the agent at execution time), so a stale "Gemini" mention here
    // actively steers execution toward a retired runtime, not merely misinforms a reader.
    const WORKFLOWS_ROOT = path.join(ROOT, 'msd-core', 'workflows');
    const GEMINI_TOKEN = /\bGemini\b/;
    // Two allowlisted exceptions, both matched by line CONTENT (never line number, so neither can
    // silently drift if the file is edited above the matched line):
    //   1. reapply-patches.md's historical note about where a pre-#1928 Gemini CLI install used
    //      to place patches.
    //   2. settings-advanced.md's Section 8 "Known provider" menu option. This predicate forbids
    //      `Gemini` naming the retired RUNTIME axis; it does NOT forbid `Gemini` naming the
    //      PROVIDER / MODEL-FAMILY axis. Section 8 ("Model Policy") is explicitly scoped to model
    //      selection, independent of which runtime is installed, and its own intro says so. The
    //      "Known provider" option lists Gemini alongside Claude/OpenAI/Qwen as a model provider —
    //      the same axis as the lowercase `gemini-*` model ids used elsewhere in this file — and
    //      Antigravity runs on that provider's models. That is the same runtime-vs-provider
    //      taxonomy the whole #4709 epic rests on, so this line is correct as written and must
    //      keep working, not get rewritten to dodge the predicate.
    const isAllowlistedLegacyLine = (file, line) =>
      (relPath(file) === 'msd-core/workflows/reapply-patches.md'
        && line.includes('Legacy:')
        && line.includes('pre-#1928'))
      || (relPath(file) === 'msd-core/workflows/settings-advanced.md'
        && line.includes('Known provider'));

    /** Recursively collect every `.md` file under `dir`. */
    function markdownFilesUnder(dir) {
      const out = [];
      for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
        const full = path.join(dir, entry.name);
        if (entry.isDirectory()) {
          out.push(...markdownFilesUnder(full));
        } else if (entry.isFile() && entry.name.endsWith('.md')) {
          out.push(full);
        }
      }
      return out;
    }

    const files = markdownFilesUnder(WORKFLOWS_ROOT);
    // Guard against an empty or failed walk making this test pass vacuously.
    assert.ok(files.length >= 50,
      `expected at least 50 .md files under msd-core/workflows/, found ${files.length} — the `
        + 'recursive walk may be broken');

    const offenders = [];
    for (const file of files) {
      linesOf(file).forEach((line, i) => {
        if (isAllowlistedLegacyLine(file, line)) return;
        if (GEMINI_TOKEN.test(line)) {
          offenders.push(`${relPath(file)}:${i + 1} names Gemini: "${line.trim()}"`);
        }
      });
    }

    assert.deepStrictEqual(offenders, [],
      'a runtime-loaded workflow file under msd-core/workflows/ still names the retired Gemini '
        + 'runtime, steering the agent (these files are read at execution time, not just by a '
        + `reader) toward a retired runtime. Offenders:\n  ${offenders.join('\n  ')}`);
  });

  test('PRESERVE: Antigravity survives in every surface the removal above touches (over-reach guard)', () => {
    // These four assertions are what fails first if someone "fixes" #4728 with a blanket
    // gemini->antigravity string sweep instead of the scoped, structural removal above.
    for (const locale of LOCALES) {
      const installGuide = fs.readFileSync(
        path.join(ROOT, 'docs', locale, 'how-to', 'install-on-your-runtime.md'), 'utf8',
      );
      assert.match(installGuide, /^###\s+Antigravity\s*$/m,
        `docs/${locale}/how-to/install-on-your-runtime.md must still document Antigravity under its own heading`);

      const architecture = fs.readFileSync(path.join(ROOT, 'docs', locale, 'ARCHITECTURE.md'), 'utf8');
      assert.ok(architecture.includes('~/.gemini/antigravity'),
        `docs/${locale}/ARCHITECTURE.md must still document Antigravity's ~/.gemini/antigravity config home`);

      const configuration = fs.readFileSync(path.join(ROOT, 'docs', locale, 'CONFIGURATION.md'), 'utf8');
      assert.ok(configuration.includes('GEMINI_API_KEY'),
        `docs/${locale}/CONFIGURATION.md must still document GEMINI_API_KEY`);

      const contextMonitor = fs.readFileSync(path.join(ROOT, 'docs', locale, 'context-monitor.md'), 'utf8');
      assert.ok(contextMonitor.includes('AfterTool'),
        `docs/${locale}/context-monitor.md must still document AfterTool, the hook dialect Antigravity `
          + 'inherits — re-attributed on gemini removal, never deleted');
    }
  });

  test('MODEL AXIS: Gemini 2.5 Pro asymmetry across locale ARCHITECTURE.md is a measured fact, not an assumption', () => {
    // Measured on 2026-09-14: ko-KR/pt-BR/zh-CN mention Gemini 2.5 Pro on the model axis (distinct
    // from the retired RUNTIME axis covered above); ja-JP genuinely does not. Both sides are
    // asserted so a later "helpful" uniform patch that adds the mention to ja-JP — treating the
    // asymmetry as an oversight rather than a measured divergence — fails here.
    for (const locale of ['ko-KR', 'pt-BR', 'zh-CN']) {
      const text = fs.readFileSync(path.join(ROOT, 'docs', locale, 'ARCHITECTURE.md'), 'utf8');
      assert.ok(text.includes('Gemini 2.5 Pro'),
        `docs/${locale}/ARCHITECTURE.md must still mention Gemini 2.5 Pro on the model axis`);
    }

    const jaText = fs.readFileSync(path.join(ROOT, 'docs', 'ja-JP', 'ARCHITECTURE.md'), 'utf8');
    assert.ok(!jaText.includes('Gemini 2.5 Pro'),
      'docs/ja-JP/ARCHITECTURE.md does not mention Gemini 2.5 Pro — this locale genuinely diverged '
        + 'from the other three and must not be uniformly patched to match them');
  });
});