Verify Operational Value Contract Change

1#!/usr/bin/env bash
2
3set -euo pipefail
4
5fail() {
6    printf 'error: %s\n' "$*" >&2
7    exit 1
8}
9
10allow_correction=false
11if [[ ${1:-} == --correction ]]; then
12    allow_correction=true
13    shift
14fi
15
16(( $# <= 1 )) || fail "usage: verify-operational-value-contract-change.sh [--correction] [base-ref]"
17
18base_ref=${1:-origin/${GITHUB_BASE_REF:-main}}
19repo_root=$(git rev-parse --show-toplevel 2>/dev/null) || fail "not inside a Git repository"
20git -C "$repo_root" cat-file -e "$base_ref^{commit}" 2>/dev/null \
21    || fail "base ref is not a commit: $base_ref"
22
23changed_evaluators=$(git -C "$repo_root" diff --name-only --diff-filter=AMD "$base_ref" -- \
24    '.github/graders/*-operational-value.sh')
25
26while IFS= read -r evaluator; do
27    [[ -n $evaluator ]] || continue
28    workflow_name=${evaluator##*/}
29    workflow_name=${workflow_name%-operational-value.sh}
30    workflow_path=.github/workflows/$workflow_name.md
31
32    if git -C "$repo_root" diff --quiet "$base_ref" -- "$workflow_path"; then
33        if [[ $allow_correction == true ]]; then
34            printf 'prospective evaluator-only correction: %s\n' "$evaluator" >&2
35            continue
36        fi
37        fail "$evaluator changed without $workflow_path; change the contract pair together or use --correction for a prospective evaluator-only defect fix"
38    fi
39done <<< "$changed_evaluators"
40
41printf 'verified operational-value contract changes against %s\n' "$base_ref"