check

#!/bin/bash
# ACR policy checks. Run from the repo root: ./check
# Validates every pkgs/<name>/PKGBUILD against the repository rules.
#   1. tracked-upstream source, by suffix (an optional trailing -sys is allowed):
#        *-git[-sys] -> source must be a git+ VCS source
#        *-rel[-sys] -> source must be a releases/download/ URL (a published git tag)
#      any other pkgname suffix is rejected.
#   2. no .install pre/post scriptlets (no install= line, no *.install file)
#      UNLESS the pkgname ends in -sys, which opts in to allowing them.
#   3. at least one '# Maintainer:' line
set -u
shopt -s nullglob

source "$(dirname "$0")/acrlib"

fail=0
checked=0

for pkgbuild in pkgs/*/PKGBUILD; do
	dir=$(dirname "$pkgbuild")
	name=$(basename "$dir")
	[[ "$name" == "template" ]] && continue
	checked=$((checked + 1))

	# Rule 1: tracked-upstream source, validated against the pkgname suffix
	pkgname=$(sed -n "s/^pkgname=//p" "$pkgbuild" | tr -d "'\"" | head -1)
	case "$(acr_tier "$pkgname")" in
		git)
			if ! grep -qE '^[[:space:]]*source.*=.*git\+' "$pkgbuild"; then
				echo "FAIL [$name]: -git package has no git+ VCS source"
				fail=1
			fi
			;;
		rel)
			if ! grep -qE '^[[:space:]]*source.*=.*releases/download/' "$pkgbuild"; then
				echo "FAIL [$name]: -rel package has no releases/download/ source"
				fail=1
			fi
			;;
		*)
			echo "FAIL [$name]: pkgname '$pkgname' must end in -git or -rel (optionally + -sys)"
			fail=1
			;;
	esac

	# Rule 2: no install scriptlets, unless the pkgname opts in with a -sys suffix
	if ! acr_is_sys "$pkgname"; then
		if grep -qE '^[[:space:]]*install=' "$pkgbuild"; then
			echo "FAIL [$name]: install= scriptlet declared in PKGBUILD (use a -sys suffix to allow)"
			fail=1
		fi
		installs=("$dir"/*.install)
		if (( ${#installs[@]} > 0 )); then
			echo "FAIL [$name]: .install file present in recipe dir (use a -sys suffix to allow)"
			fail=1
		fi
	fi

	# Rule 3: at least one Maintainer line
	if ! grep -qE '^#[[:space:]]*Maintainer:' "$pkgbuild"; then
		echo "FAIL [$name]: missing '# Maintainer:' line"
		fail=1
	fi
done

if [[ $fail -eq 0 ]]; then
	echo "ok: $checked package(s) pass ACR policy"
fi
exit $fail