Pre-push Validation Hook

set -e

# ── Branch-name enforcement ───────────────────────────────────
# Reject pushes from branches that don't match the prefix convention.
# Runs first so a misnamed branch fails fast, before the slower checks.
branch=$(git symbolic-ref --short HEAD 2>/dev/null || echo "")

# Detached HEAD pushes — let them through (rare, but
# `git push origin <sha>:refs/...` is valid).
if [ -n "$branch" ]; then
  # grep -qE against anchored regexes — equivalent to a case-glob, but the
  # patterns live in single-quoted strings that survive any formatter pass.
  protected_regex='^(main|master|develop|staging|production)$'
  prefix_regex='^(feat|fix|chore|docs|refactor|test|perf|build|ci|revert|gsd)/.+'

  if ! printf '%s' "$branch" | grep -qE "$protected_regex" &&
     ! printf '%s' "$branch" | grep -qE "$prefix_regex"; then
    echo "" >&2
    echo "✘ pre-push: branch '$branch' violates the naming convention" >&2
    echo "" >&2
    echo "  Allowed prefixes: feat/, fix/, chore/, docs/, refactor/," >&2
    echo "                    test/, perf/, build/, ci/, revert/, gsd/" >&2
    echo "  Protected:        main, master, develop, staging, production" >&2
    echo "" >&2
    echo "  Rename with:  git branch -m $branch <new-name>" >&2
    echo "  Then re-push: git push -u origin <new-name>" >&2
    echo "" >&2
    exit 1
  fi
fi

# ── Validation: typecheck + lint + related tests ──────────────
# Resolve the comparison base — prefer upstream, fall back to origin/main,
# then to the repo's root commit for fresh clones without a remote.
upstream=$(git rev-parse --abbrev-ref --symbolic-full-name @{u} 2>/dev/null || echo "")
if [ -z "$upstream" ]; then
  base=$(git merge-base HEAD origin/main 2>/dev/null || git rev-list --max-parents=0 HEAD | tail -1)
else
  base="$upstream"
fi

changed=$(git diff --name-only "$base"...HEAD)

if [ -z "$changed" ]; then
  echo "pre-push: no changed files vs $base — skipping checks"
  exit 0
fi

fail() {
  echo "" >&2
  echo "✘ pre-push: $1 failed" >&2
  echo "  Fix the errors above, or push with --no-verify if you" >&2
  echo "  have a reason (the hook is here to help, not block)." >&2
  exit 1
}

ts_files=$(echo "$changed" | grep -E '\.(ts|tsx)$' || true)
src_files=$(echo "$changed" | grep -E '\.(ts|tsx|js|jsx)$' || true)

# Typecheck: per-package, not per-file (TS needs the package context).
# pnpm --filter "...[origin/main]" picks packages that contain a changed
# file plus their dependents.
if [ -n "$ts_files" ]; then
  echo "→ typecheck (affected packages)"
  pnpm -r --filter "...[origin/main]" typecheck || fail "typecheck"
fi

# Lint: file-scoped via ESLint's positional file list.
if [ -n "$src_files" ]; then
  echo "→ lint"
  pnpm exec eslint $src_files --max-warnings=0 || fail "lint"
fi

# Tests: related-tests mode walks Jest's import graph and runs only the
# tests whose code-under-test transitively touches a changed file.
if [ -n "$src_files" ]; then
  echo "→ tests (related)"
  pnpm exec jest --findRelatedTests $src_files --passWithNoTests || fail "tests"
fi

echo "✓ pre-push: all checks passed"