#!/usr/bin/env zsh

source $HOME/dotfiles/bin/helpers/functions.sh

# Check for unencrypted files in .ssh/config.d/
unencrypted_files=$(find config/ssh/config.d/ -type f ! -name "*.gpg")

if [ -n "$unencrypted_files" ]; then
    staged_files=$(git diff --cached --name-only)
    unencrypted_staged_files=""
    for file in $unencrypted_files; do
        if [[ $staged_files == *"$file"* ]]; then
            unencrypted_staged_files="$unencrypted_staged_files $file"
        fi
    done

    # If any unencrypted files are staged, exit with a non-zero status
    if [ -n "$unencrypted_staged_files" ]; then
        echo ""
        printfe "%s\n" "red" "Error: Unencrypted files are staged for commit!"
        printfe "%s\n" "blue" "Use 'dotf secrets encrypt' to encrypt them before committing."
        exit 1
    fi
fi