#!/usr/bin/env bash
set -euo pipefail

META_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
ROOT="${GOVOPLAN_CORE_ROOT:-$META_ROOT/../govoplan-core}"
ROOT="$(cd "$ROOT" && pwd)"
VENV_ROOT="${GOVOPLAN_VENV_ROOT:-$META_ROOT/.venv}"
PYTHON="${PYTHON:-$VENV_ROOT/bin/python}"
NPM="${NPM:-/home/zemion/.nvm/versions/node/v22.22.3/bin/npm}"
NODE_BIN="$(dirname "$NPM")"

if [[ ! -x "$PYTHON" ]]; then
  PYTHON=python
fi
if [[ ! -x "$NPM" ]]; then
  NPM=npm
  NODE_BIN="$(dirname "$(command -v "$NPM")")"
fi

cd "$ROOT"
CHECK_TESTCLIENT_DEPRECATIONS=auto bash "$META_ROOT/tools/checks/check-dependency-hygiene.sh"

if ! "$PYTHON" -m pip_audit --version >/dev/null 2>&1; then
  echo "pip-audit is not installed. Install dev requirements first:" >&2
  echo "  $PYTHON -m pip install -r $META_ROOT/requirements-dev.txt" >&2
  exit 127
fi

python_status=0
npm_status=0

"$PYTHON" -m pip_audit --progress-spinner off || python_status=$?

cd "$ROOT/webui"
PATH="$ROOT/webui/node_modules/.bin:$NODE_BIN:$PATH" "$NPM" audit --omit=dev || npm_status=$?

if [[ "$python_status" -ne 0 || "$npm_status" -ne 0 ]]; then
  echo "Dependency audit failed: python=$python_status npm=$npm_status" >&2
  exit 1
fi