# ttf-hunkyfonts-verify.awk -- turn one find, one sha256sum and one fc-query
# sweep into the payload, inventory and fontconfig-derivation cases.
#
# WHY ONE AWK AND NOT A SHELL LOOP. On this arm a process's memory is not
# returned when it exits and /bin/sh is a 16 MB wasm module, so a suite's cost is
# dominated by how many programs it starts. Everything below is derived from
# files the .test already produced with a handful of execs.
#
# INPUTS:
#   REF    the reference manifest, "<size> <sha256> <path>"
#   SUMS   `sha256sum` over the six payload files, "<sha256>  <path>"
#   INV    `find ... -printf '%p %y %s %m %l\n'` over /usr/share/fonts/truetype
#          AND /usr/share/fonts/ttf, the other font directory on this image
#   FACES  the fontconfig 2.15.0 fc-query control, "<basename>|<family>|<style>|
#          <slant>|<weight>|<spacing>|<fontformat>"
#   SCAN   this image's own fc-query over the six installed faces, same format
#
# THERE IS NO DOC DIRECTORY IN THIS SUITE, AND THAT IS THE RECIPE RATHER THAN AN
# OMISSION. `PACKAGES` is an ASSIGNMENT naming exactly the two font packages, so
# ${PN} and ${PN}-doc do not exist; and ttf.inc's do_install copies `*.tt[cf]`
# out of ${S}, which is the tarball's TTF/ subdirectory, so COPYRIGHT.TXT --
# which sits in ${S}/.. and is where LIC_FILES_CHKSUM points -- is never a
# candidate. pkg-no-bare-package / pkg-no-doc-package in the .test assert those
# absences rather than leaving them to look like a forgotten IMAGE_INSTALL line.
#
# THE DIRECTORY IS SHARED, SO EVERY CENSUS HERE IS SCOPED BY BASENAME.
# /usr/share/fonts/truetype was created by ttf-inconsolata and already holds 26
# files from four packages; this port is the fifth tenant and adds six. A
# whole-directory count would have to be revisited by every future font port,
# which is rot rather than coverage -- so ttf-count counts OUR six by name, and
# cotenant-truetype-others counts what was there before as one number so a port
# that DISPLACED a neighbour is a red here and not merely in that neighbour's
# own suite.

function emit(id, ok, detail) {
    if (ok) printf "BST ok %s/%s\n", S, id
    else    printf "BST not ok %s/%s : %s\n", S, id, substr(detail, 1, 100)
}
function base(p) { sub(/^.*\//, "", p); return p }

BEGIN {
    S = "ttf-hunkyfonts"
    PROCINFO["sorted_in"] = "@ind_str_asc"
    TTFDIR = "/usr/share/fonts/truetype"
    COTDIR = "/usr/share/fonts/ttf"
    # The 22 files liberation-fonts (12) and ttf-bitstream-vera (10) install into
    # COTDIR. This port never writes there; see cotenant-ttfdir below.
    WANT_COT = 22
    # The 72 files seven earlier packages install into TTFDIR before this port:
    # 1 Inconsolata + 4 Gentium + 7 Droid + 14 Source Code Pro + 12 ttf-liberation
    # + 20 Roboto + 14 Ubuntu. cantarell-fonts-verify.awk's cotenant-truetype
    # moves 72 -> 78 in the same change, for the same reason and from the same
    # sweep.
    #
    # THIS NUMBER WAS 26 UNTIL THE MERGE, AND THE MOVE IS THE MERGE WORKING.
    # The port was built and verified at this Epic's pin, where four packages
    # owned the directory and a live count of the staged rootfs read 32 with this
    # port's six in it. ttf-liberation, ttf-roboto and the Ubuntu Font Family
    # landed on main in between. The new figure is NOT a live count -- nmap and
    # python3 still fail do_compile on this base, so the merged image cannot
    # reach do_rootfs -- it is the union of the eight truetype manifests in this
    # tree, swept by basename: 78 distinct names, the per-manifest contributions
    # summing to 78, and no collision between any two sets. That is the method
    # cantarell-fonts-verify.awk's own note prescribes. Prefer a live count the
    # moment the image builds again.
    WANT_OTHERS = 72
    NFIELD = 7    # fields on an fcfaces/fc-query line
    NFACE  = 6
    TOTBYTES = 299012
    # This package's own six basenames, and the PACKAGE each one belongs to.
    # The package half is what the ticket calls its stated risk -- "the package
    # names do not match the recipe name" -- and it is asserted from the dpkg
    # file lists in the .test, not from this table; the table is here so the
    # family census below can be stated per package as well as per family.
    split("HunkySans-Bold.ttf HunkySans-BoldOblique.ttf HunkySans-Oblique.ttf " \
          "HunkySans-Roman.ttf HunkySerif-Bold.ttf HunkySerif-Roman.ttf", _o, " ")
    for (i in _o) OURS[_o[i]] = 1
    # The two families and how many faces each really has. NOT 4 and 4:
    # upstream draws no serif oblique, in the tarball's SFD/ sources as well as
    # in its TTF/ output. See the manifest header.
    WANT_FAM["Hunky Sans"]  = 4
    WANT_FAM["Hunky Serif"] = 2
    NFAM = 2
}

FILENAME == REF && /^#/ { next }
FILENAME == REF && NF == 3 { WSIZE[$3] = $1; WSUM[$3] = $2; NREF++; next }

FILENAME == SUMS && NF >= 2 { p = $2; sub(/^\*/, "", p); GSUM[p] = $1; next }

FILENAME == INV && NF >= 4 { ITYPE[$1] = $2; ISIZE[$1] = $3; IMODE[$1] = $4; next }

FILENAME == FACES && /^#/ { next }
FILENAME == FACES && NF >= 1 { split($0, a, "|"); WFC[a[1]] = $0; NFC++; next }

FILENAME == SCAN && NF >= 1 { split($0, a, "|"); GFC[a[1]] = $0; NSCAN++; next }

END {
    # THE INPUTS WERE REALLY READ. Every case below is a comparison, and a
    # comparison over two empty tables is vacuously true -- the failure that
    # reports a whole suite green on an image carrying none of these files.
    # These three cases are the only ones here that assert about the SUITE
    # rather than about the port, and they are what make the rest falsifiable.
    emit("ref-count",   NREF  == NFACE, "the manifest carried " NREF " entries, want " NFACE)
    emit("faces-count", NFC   == NFACE, "the fcfaces control carried " NFC " lines, want " NFACE)
    emit("fcq-ran",     NSCAN == NFACE, "fc-query produced " NSCAN " lines, want " NFACE)

    # ------------------------------------------------------- per-file identity
    # Size, type, mode and digest for each of the six, keyed by FULL PATH.
    # %y catches a symlink where a regular file is meant and %m the mode --
    # neither of which `test -f` can see.
    for (p in WSIZE) {
        id = "file-" base(p)
        if (!(p in ITYPE))        { emit(id, 0, p " is absent"); continue }
        if (ITYPE[p] != "f")      { emit(id, 0, p " is type '" ITYPE[p] "', want a regular file"); continue }
        if (ISIZE[p] != WSIZE[p]) { emit(id, 0, p " is " ISIZE[p] " bytes, want " WSIZE[p]); continue }
        if (IMODE[p] != "644")    { emit(id, 0, p " is mode " IMODE[p] ", want 644"); continue }
        if (!(p in GSUM))         { emit(id, 0, p " was not digested"); continue }
        if (GSUM[p] != WSUM[p])   { emit(id, 0, p " sha256 " substr(GSUM[p],1,16) "..., want " substr(WSUM[p],1,16) "..."); continue }
        emit(id, 1)
    }

    # ------------------------------------------------------------- the census
    # THE FILE LIST IS PINNED EXACTLY, which is what the ticket asks for by name
    # ("with the file list pinned exactly, so a partial payload fails"). Counted
    # from the INVENTORY rather than from the manifest, so a SEVENTH Hunky file
    # appearing in the directory is a red rather than something the
    # manifest-driven loop above would never look at.
    nttf = 0; extra = ""; bytes = 0
    for (p in ITYPE) {
        if (ITYPE[p] != "f") continue
        d = p; sub(/\/[^\/]*$/, "", d)
        if (d != TTFDIR) continue
        if (base(p) !~ /^Hunky/) continue
        nttf++
        bytes += ISIZE[p]
        if (!(base(p) in OURS)) extra = extra " " base(p)
    }
    emit("ttf-count",       nttf == NFACE, TTFDIR " holds " nttf " Hunky files, want " NFACE)
    emit("ttf-no-extras",   extra == "",   TTFDIR " also holds Hunky-shaped file(s) this package does not own:" extra)
    emit("ttf-total-bytes", bytes == TOTBYTES, "TTF payload is " bytes " bytes, want " TOTBYTES)

    # ------------------------------------------------ the neighbours are intact
    # THIS PORT ADDED, IT DID NOT REPLACE. ttf.inc's do_install is a bare
    # `install -d` followed by `find -exec install` into a directory four other
    # packages already own -- so the failure this guards is a do_install or a
    # packaging change that cleaned the directory first, which would leave every
    # file-* case above green while four neighbours vanished. Counted as ONE
    # number rather than named per package: each neighbour asserts its own
    # payload from its own suite, and what this port owes is the statement that
    # the count it inherited did not move.
    others = 0
    for (p in ITYPE) {
        if (ITYPE[p] != "f") continue
        d = p; sub(/\/[^\/]*$/, "", d)
        if (d != TTFDIR) continue
        if (base(p) ~ /^Hunky/) continue
        others++
    }
        # ASSERTED AS A FLOOR (>=), NOT AN EQUALITY, SINCE BRINTOS-1729. Every one of
    # these three suites already SAID floor in prose -- the property owed is that
    # this port DISPLACED no neighbour, and displacement makes the count DROP --
    # but all three emitted `==`, which also fires when a neighbouring port ADDS
    # a face. That is the "rot rather than coverage" this file's own note above
    # rejects, and it is why ttf-abyssinica (want 26, saw 136) and ttf-hunkyfonts
    # (want 72, saw 131) were BOTH already red on main before this port existed:
    # each pinned an exact whole-directory count at its own Epic pin and no later
    # ticket recomposed it. `>=` is what the two sibling cases in this same file
    # (cotenant-ttf, cotenant-confd-others) already use, and it needs no future
    # font port to revisit the constant. Live count of the merged image, measured
    # 2026-08-31 on the staged rootfs: TTFDIR holds 137 files.
    emit("cotenant-truetype-others", others >= WANT_OTHERS,
         TTFDIR " holds " others " non-Hunky files, want at least " WANT_OTHERS " (1 Inconsolata + 4 Gentium + 7 Droid + 14 Source Code Pro + 12 ttf-liberation + 20 Roboto + 14 Ubuntu)")

    # AND THE OTHER FONT DIRECTORY IS UNTOUCHED. The 22 files liberation-fonts
    # and ttf-bitstream-vera own live in a directory this port never writes to,
    # so this is the case that says a packaging change did not move the fonts
    # that were already here into, or out of, the Debian layout.
    cot = 0
    for (p in ITYPE) if (p ~ ("^" COTDIR "/") && ITYPE[p] == "f") cot++
    emit("cotenant-ttfdir", cot == WANT_COT,
         COTDIR " holds " cot " files, want " WANT_COT " (12 Liberation + 10 Vera)")

    # --------------------------------------- fontconfig's own reading (fc-query)
    # THE TICKET ASKS FOR fc-query BY NAME, AND THIS IS THAT CASE. It is a
    # second, independent parse: fontconfig opens each face through FreeType and
    # derives fields the file layer cannot see -- the family and style from the
    # name table, and the slant / weight / spacing it computes. Compared
    # field-by-field against the committed 2.15.0 control, so a target-side parse
    # that quietly disagreed with a native one is a red here while every file-*
    # case stays green -- which is the split that says where to look.
    for (b in OURS) {
        if (!(b in WFC)) { emit("fcq-" b, 0, "the control has no row for " b); continue }
        if (!(b in GFC)) { emit("fcq-" b, 0, "fc-query produced no line for " b); continue }
        ng = split(GFC[b], g, "|"); nw = split(WFC[b], w, "|")
        if (ng != NFIELD || nw != NFIELD) {
            emit("fcq-" b, 0, "field count " ng ", control " nw ", want " NFIELD); continue
        }
        bad = ""
        for (i = 2; i <= NFIELD; i++)
            if (g[i] != w[i]) bad = bad " f" i "='" g[i] "' want '" w[i] "'"
        emit("fcq-" b, bad == "", b ":" bad)
    }

    # THE STYLE SET, PER FAMILY. The ticket's stated risk is a face landing in
    # the wrong package, "so a partial payload fails" -- and the file-* cases
    # cannot see that, because they are keyed on the path and both packages
    # install to the same directory. Counting the styles WITHIN each family is
    # the half of that this parse can answer; the package half is answered from
    # the dpkg file lists in the .test.
    #
    # THE TWO NUMBERS ARE 4 AND 2, NOT 4 AND 4. Upstream draws no serif oblique
    # -- there is no HunkySerif-Oblique in the tarball's TTF/ output or in its
    # SFD/ sources. Pinning 2 here is what makes a genuinely lost serif face a
    # red instead of being absorbed as "the asymmetry we already know about".
    for (b in OURS) {
        if (!(b in GFC)) continue
        split(GFC[b], g, "|")
        FAMSTYLE[g[2] "|" g[3]]++
        FAMN[g[2]]++
    }
    nfam = 0
    for (f in WANT_FAM) {
        nfam++
        id = "fcq-family-" f; gsub(/ /, "-", id)
        emit(id, FAMN[f] == WANT_FAM[f],
             "fc-query reports " FAMN[f] "+0 faces for '" f "', want " WANT_FAM[f])
    }
    unknown = ""
    for (f in FAMN) if (!(f in WANT_FAM)) unknown = unknown " '" f "'"
    emit("fcq-no-unknown-family", unknown == "" && nfam == NFAM,
         "fc-query reports " nfam " known families and unexpected one(s):" unknown)

    nstyle = 0; dup = ""
    for (k in FAMSTYLE) { if (FAMSTYLE[k] != 1) dup = dup " " k; nstyle++ }
    emit("fcq-styles-unique", nstyle == NFACE && dup == "",
         "the six faces cover " nstyle " distinct family/style pairs, want " NFACE ";" dup)

    # NEITHER FAMILY IS MONOSPACED, derived by fontconfig from the advance widths
    # rather than taken from the name. fontconfig leaves FC_SPACING UNSET for a
    # proportional face -- it does not write 0 -- so the expectation is an EMPTY
    # cell, and that is why this is a case of its own rather than one column of
    # the fcq-* comparison above. It is the parse-side half of
    # fc-match-generic-monospace-unchanged: this port cannot take the monospace
    # generic the way ttf-inconsolata took it from Liberation Mono.
    spaced = ""
    for (b in OURS) {
        if (!(b in GFC)) continue
        split(GFC[b], g, "|")
        if (g[6] != "") spaced = spaced " " b "(spacing=" g[6] ")"
    }
    emit("fcq-no-monospace", spaced == "",
         "fontconfig set a spacing on:" spaced " -- these are proportional faces and must leave FC_SPACING unset")

    # THE OBLIQUE FACES REPORT FC_SLANT_OBLIQUE (110), NOT FC_SLANT_ITALIC (100).
    # Every other font suite on this image pins 100 for its sloped faces, so a
    # reader coming from one of those would take 110 for a defect. It is not:
    # fontconfig reads the distinction out of the name table and this family
    # names its sloped faces Oblique. Asserted here so that a future upstream
    # re-release renaming them to Italic -- which would move the value to 100 and
    # change what `fc-match Hunky Sans:italic` returns -- is a named red.
    slant = ""
    for (b in OURS) {
        if (!(b in GFC)) continue
        split(GFC[b], g, "|")
        want = (b ~ /Oblique/) ? "110" : "0"
        if (g[4] != want) slant = slant " " b "(slant=" g[4] " want " want ")"
    }
    emit("fcq-oblique-slant", slant == "",
         "unexpected slant on:" slant " -- 0 is roman, 110 is FC_SLANT_OBLIQUE (not 100, FC_SLANT_ITALIC)")
}