import { defineConfig } from 'vite'
import react from '@vitejs/plugin-react'
import { cpSync, mkdirSync } from 'node:fs'
import { dirname, join } from 'node:path'
import { fileURLToPath } from 'node:url'

const siteRoot = dirname(fileURLToPath(import.meta.url))
const safePublicFiles = [
  '404.html',
  '.well-known/assetlinks.json',
  'accept-invite.css',
  'accept-invite.js',
  'accept-invite/index.html',
  'download.html',
  'favicon.svg',
  'legal.css',
  'privacy/index.html',
  'terms/index.html',
  'delete-account/index.html',
]

export default defineConfig({
  // Installers ship only through the Forgejo feed, never from this site. Only this
  // non-binary allowlist can reach dist, so a stray local `public/releases` copy
  // (git-ignored) can never be deployed.
  publicDir: false,
  plugins: [
    react(),
    {
      name: 'copy-safe-public-files',
      closeBundle() {
        for (const relativePath of safePublicFiles) {
          const destination = join(siteRoot, 'dist', relativePath)
          mkdirSync(dirname(destination), { recursive: true })
          cpSync(join(siteRoot, 'public', relativePath), destination, { errorOnExist: true })
        }
      },
    },
  ],
  base: './',
})