#!/usr/bin/env bash

# ============================================================================
# Copyright (C) 2025 Moko Consulting <hello@mokoconsulting.tech>
#
# This file is part of a Moko Consulting project.
#
# SPDX-License-Identifier: GPL-3.0-or-later
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program (./LICENSE.md).
# ============================================================================

# ============================================================================
# FILE INFORMATION
# ============================================================================
# DEFGROUP: Script.Validate
# INGROUP: Licensing
# REPO: https://github.com/mokoconsulting-tech/moko-cassiopeia
# PATH: /scripts/validate/license_headers.sh
# VERSION: 01.00.00
# BRIEF: Checks that source files contain SPDX license identifiers
# NOTE: Ensures licensing compliance across codebase
# ============================================================================

set -euo pipefail

SRC_DIR="${SRC_DIR:-src}"

json_escape() {
	python3 -c 'import json,sys; print(json.dumps(sys.argv[1]))' "$1"
}

[ -d "${SRC_DIR}" ] || {
	printf '{"status":"fail","error":%s}\n' "$(json_escape "src directory missing")"
	exit 1
}

python3 - <<'PY' "${SRC_DIR}"
import json
import sys
from pathlib import Path

src = Path(sys.argv[1])

exts = {'.php','.js','.css','.sh','.yml','.yaml','.xml'}
exclude_dirs = {'vendor','node_modules','dist','.git','build','tmp'}

missing = []
scanned = 0

for p in src.rglob('*'):
	if not p.is_file():
		continue
	if any(part in exclude_dirs for part in p.parts):
		continue
	if p.suffix.lower() not in exts:
		continue

	try:
		data = p.read_bytes()[:2048]
	except Exception:
		continue

	if b'\x00' in data:
		continue

	scanned += 1
	head = data.decode('utf-8', errors='replace')
	if 'SPDX-License-Identifier:' not in head:
		missing.append(str(p))

if missing:
	print(json.dumps({
		"status":"fail",
		"error":"missing_spdx_identifier",
		"scanned":scanned,
		"missing_count":len(missing),
		"missing":missing[:200]
	}, ensure_ascii=False))
	sys.exit(1)

print(json.dumps({"status":"ok","scanned":scanned,"missing_count":0}, ensure_ascii=False))
PY

echo "license_headers