#!/usr/bin/env bash
# Gate: two version-pin pairs are each two logically-linked native dependencies that aren't
# published in lockstep — an untested combination can compile and still break at runtime, or
# (iOS) just ship wrong metadata since CocoaPods resolves the framework transitively regardless of
# what package.json claims. Fails closed: an untested pair is a hard failure, not a warning.
#
# Also asserts android-tests/ and ios-tests/ pin the same versions the release declares, so shim
# unit tests cannot stay green against stale SDKs.
#
# Usage: ./scripts/check-native-version-pairs.sh <ios_sdk_version> <ios_framework_version> \
#                                                 <android_sdk_version> <android_plugin_bridge_version>

set -euo pipefail

ROOT="$(cd "$(dirname "$0")/.." && pwd)"

ios_sdk="${1:?usage: $0 <ios_sdk_version> <ios_framework_version> <android_sdk_version> <android_plugin_bridge_version>}"
ios_framework="${2:?usage: $0 <ios_sdk_version> <ios_framework_version> <android_sdk_version> <android_plugin_bridge_version>}"
android_sdk="${3:?usage: $0 <ios_sdk_version> <ios_framework_version> <android_sdk_version> <android_plugin_bridge_version>}"
plugin_bridge="${4:?usage: $0 <ios_sdk_version> <ios_framework_version> <android_sdk_version> <android_plugin_bridge_version>}"

IOS_KNOWN_GOOD_PAIRS=(
  "7.0.13:7.0.2"
  "7.0.41:7.0.4"
)
ANDROID_KNOWN_GOOD_PAIRS=(
  "7.0.1:7.0.13"
  "7.0.4:7.0.13"
)

check_pair() {
  local label="$1" a="$2" b="$3"
  shift 3
  local pair
  for pair in "$@"; do
    if [[ "$pair" == "${a}:${b}" ]]; then
      echo "[check-native-version-pairs] OK — ${label} ${a} + ${b} is a known-good pair"
      return 0
    fi
  done
  echo "::error::${label} ${a} + ${b} is not a known-good pair. Add it to check-native-version-pairs.sh only after verifying it against a real build/test run."
  return 1
}

require_file_contains() {
  local file="$1" needle="$2" label="$3"
  if [[ ! -f "$file" ]]; then
    echo "::error::${label}: missing file ${file}"
    return 1
  fi
  if ! grep -F -q "$needle" "$file"; then
    echo "::error::${label}: expected to find '${needle}' in ${file}"
    return 1
  fi
  echo "[check-native-version-pairs] OK — ${label} pin present in $(basename "$file")"
  return 0
}

status=0
check_pair "AppsFlyerRPC + AppsFlyerFramework" "$ios_sdk" "$ios_framework" "${IOS_KNOWN_GOOD_PAIRS[@]}" || status=1
check_pair "af-android-sdk-bom + af-android-plugin-bridge" "$android_sdk" "$plugin_bridge" "${ANDROID_KNOWN_GOOD_PAIRS[@]}" || status=1

if [[ "${SKIP_HARNESS_PIN_CHECK:-0}" != "1" ]]; then
  android_tests="${ROOT}/android-tests/build.gradle.kts"
  ios_tests="${ROOT}/ios-tests/Package.swift"
  require_file_contains "$android_tests" "af-android-sdk-bom:${android_sdk}" "android-tests af-android-sdk-bom" || status=1
  require_file_contains "$android_tests" "af-android-plugin-bridge:${plugin_bridge}" "android-tests af-android-plugin-bridge" || status=1
  require_file_contains "$ios_tests" "appsflyer-apple-rpc.git\", exact: \"${ios_sdk}\"" "ios-tests appsflyer-apple-rpc" || status=1
  require_file_contains "$ios_tests" "AppsFlyerFramework-Static.git\", exact: \"${ios_framework}\"" "ios-tests AppsFlyerFramework-Static" || status=1
fi

exit $status