#!/bin/sh

# Every package in Spectra's Cargo.lock must be in one of the lockfiles the

# OxygenFlow build image vendors (oxygen, oxygenhub, oxygenflow), at the same

# version, or Flow jobs, which have no network, fail with "no matching

# package" (spectra#2). The other projects are found beside this one, or

# under DEV (default: ..).

#

#   scripts/deps-check.sh

set -eu

cd "$(dirname "$0")/.."

dev=${DEV:-..}

pkgs() { awk '/^\[\[package\]\]/{n="";v="";s=0} /^name = /{n=$3} /^version = /{v=$3} /^source = /{s=1; print n" "v}' "$@" | tr -d '"' | sort -u; }

have=$(pkgs "$dev/oxygen/Cargo.lock" "$dev/oxygenhub/Cargo.lock" "$dev/oxygenflow/Cargo.lock")

need=$(pkgs Cargo.lock)

missing=$(printf '%s\n' "$need" | grep -vxF "$have" || true)

if [ -n "$missing" ]; then

    echo "deps-check: these crates are not in the OxygenFlow image's vendored set:" >&2

    printf '%s\n' "$missing" | sed 's/^/  /' >&2

    echo "pin a version the image has (cargo update -p NAME --precise V), or rebuild the image with Spectra's workspace" >&2

    exit 1

fi

echo "deps-check: all $(printf '%s\n' "$need" | wc -l) crates are vendored in the image"