# Quality Rails Verification Script (Windows)

Write-Host "═══════════════════════════════════════════"
Write-Host "Quality Rails Enforcement Verification"
Write-Host "═══════════════════════════════════════════"
Write-Host ""

$Passed = 0
$Failed = 0

# Test 1: Type error blocked
Write-Host "Test 1: Type errors should be blocked..."
"const x: string = 123;" | Out-File -FilePath test-file.ts -Encoding utf8
git add test-file.ts 2>$null
$output = git commit -m "Test commit" 2>&1 | Out-String
if ($output -match "error") {
    Write-Host "✅ PASS: Type errors blocked" -ForegroundColor Green
    $Passed++
} else {
    Write-Host "❌ FAIL: Type errors NOT blocked" -ForegroundColor Red
    $Failed++
}
git reset HEAD test-file.ts 2>$null
Remove-Item test-file.ts -ErrorAction SilentlyContinue

# Test 2: any type blocked
Write-Host ""
Write-Host "Test 2: 'any' types should be blocked..."
"const x: any = 123;" | Out-File -FilePath test-file.ts -Encoding utf8
git add test-file.ts 2>$null
$output = git commit -m "Test commit" 2>&1 | Out-String
if ($output -match "no-explicit-any") {
    Write-Host "✅ PASS: 'any' types blocked" -ForegroundColor Green
    $Passed++
} else {
    Write-Host "❌ FAIL: 'any' types NOT blocked" -ForegroundColor Red
    $Failed++
}
git reset HEAD test-file.ts 2>$null
Remove-Item test-file.ts -ErrorAction SilentlyContinue

# Test 3a: gitleaks binary must be present
Write-Host ""
Write-Host "Test 3a: gitleaks must be installed..."
$gitleaksPath = Get-Command gitleaks -ErrorAction SilentlyContinue
if ($gitleaksPath) {
    $gitleaksVer = & gitleaks version 2>&1 | Out-String
    Write-Host "✅ PASS: gitleaks found ($($gitleaksVer.Trim()))" -ForegroundColor Green
    $Passed++
} else {
    Write-Host "❌ FAIL: gitleaks is NOT installed — secret scanning will not work" -ForegroundColor Red
    Write-Host "  Install: winget install gitleaks"
    $Failed++
}

# Test 3b: gitleaks detects a planted AWS key
Write-Host ""
Write-Host "Test 3b: gitleaks should detect planted AWS key..."
if ($gitleaksPath) {
    "aws_access_key_id = AKIAIOSFODNN7REALKEY" | Out-File -FilePath gitleaks-test-secret.txt -Encoding utf8
    git add gitleaks-test-secret.txt 2>$null
    $output = & gitleaks git --pre-commit --staged --redact 2>&1 | Out-String
    if ($output -match "leak|finding") {
        Write-Host "✅ PASS: gitleaks detected planted secret" -ForegroundColor Green
        $Passed++
    } else {
        Write-Host "❌ FAIL: gitleaks did NOT detect planted secret" -ForegroundColor Red
        $Failed++
    }
    git reset HEAD gitleaks-test-secret.txt 2>$null
    Remove-Item gitleaks-test-secret.txt -ErrorAction SilentlyContinue
} else {
    Write-Host "⚠ SKIP: gitleaks not installed (Test 3a already failed)"
}

# Summary
Write-Host ""
Write-Host "═══════════════════════════════════════════"
Write-Host "Verification Summary"
Write-Host "═══════════════════════════════════════════"
Write-Host "✅ Passed: $Passed"
Write-Host "❌ Failed: $Failed"
Write-Host ""

if ($Failed -eq 0) {
    Write-Host "🎉 All tests passed! Quality enforcement is working." -ForegroundColor Green
    exit 0
} else {
    Write-Host "⚠ Some tests failed. Review configuration." -ForegroundColor Yellow
    exit 1
}