pre-commit

#!/usr/bin/env bash
# labgit pre-commit hook
# Blocks commits unless the user has identified via 'git identify'.
#
# Install globally:  git config --global core.hooksPath /opt/labgit/hooks
# Install per-repo:  cp this file .git/hooks/pre-commit && chmod +x .git/hooks/pre-commit

SESSION_FILE="${HOME}/.labgit-session"
LABGIT_TIMEOUT="${LABGIT_TIMEOUT:-28800}"

# --- Helper: check session file age ---
_labgit_session_valid() {
    if [[ ! -f "$SESSION_FILE" ]]; then
        return 1
    fi
    local now file_mod age
    now=$(date +%s)
    if stat --version &>/dev/null 2>&1; then
        file_mod=$(stat -c %Y "$SESSION_FILE" 2>/dev/null) || return 1
    else
        file_mod=$(stat -f %m "$SESSION_FILE" 2>/dev/null) || return 1
    fi
    age=$(( now - file_mod ))
    (( age <= LABGIT_TIMEOUT ))
}

# --- Check identity: env vars OR session file, but always check timeout ---
if _labgit_session_valid; then
    # Session file exists and is within timeout
    if [[ -n "${LABGIT_USER:-}" ]]; then
        # Env vars set (terminal) -- good to go
        exit 0
    fi
    # No env vars (IDE) -- source the session file
    if [[ -O "$SESSION_FILE" ]]; then
        source "$SESSION_FILE"
        if [[ -n "${LABGIT_USER:-}" ]]; then
            exit 0
        fi
    fi
else
    # Session expired or missing -- clean up
    rm -f "$SESSION_FILE" 2>/dev/null
fi

# --- No valid identity ---
echo ""
echo "BLOCKED: You must identify yourself before committing."
echo ""
echo "  Run:  git identify <username>"
echo ""
if [[ -f "${LABGIT_CONF:-/opt/labgit/labgit-users.conf}" ]]; then
    echo "Registered users:"
    while IFS='|' read -r uname fullname email sshkey; do
        [[ "$uname" =~ ^#.*$ || -z "$uname" ]] && continue
        printf "  %-12s %s <%s>\n" "$uname" "$fullname" "$email"
    done < "${LABGIT_CONF:-/opt/labgit/labgit-users.conf}"
    echo ""
fi
exit 1