Add git hooks for version check and installation script

Author: Denis Jelovina

.githooks/README.md

@@ -0,0 +1,23 @@
+Git hooks for ALP repository
+=============================
+
+This directory contains local git hook scripts used by maintainers to catch
+common mistakes before pushing. They are not automatically installed by git.
+
+Recommended installation (one-time per clone):
+
+  ./scripts/install-git-hooks.sh
+
+This sets `git config core.hooksPath .githooks` for the repository and
+makes the hook scripts executable.
+
+pre-push hook
+-------------
+`.githooks/pre-push` prevents pushing tags of the form `pyalp.v*` when the
+`pyalp/pyproject.toml` version does not match the tag version. This avoids
+accidentally uploading mismatched packages to TestPyPI/PyPI.
+
+Bypass
+------
+To bypass the check for automation or deliberate overrides, set the
+environment variable `GIT_ALLOW_VERSION_MISMATCH=1` before pushing.

.githooks/pre-push

@@ -0,0 +1,52 @@
+#!/usr/bin/env bash
+# Git pre-push hook to prevent pushing tags of the form pyalp.v* when
+# pyalp/pyproject.toml version hasn't been updated accordingly.
+set -euo pipefail
+
+# Allow bypass via environment variable (useful for automation or deliberate overrides)
+if [ "${GIT_ALLOW_VERSION_MISMATCH:-}" = "1" ] || [ "${SKIP_PYALP_VERSION_CHECK:-}" = "1" ]; then
+    exit 0
+fi
+
+REPO_ROOT=$(git rev-parse --show-toplevel 2>/dev/null || echo "")
+if [ -n "$REPO_ROOT" ]; then
+    cd "$REPO_ROOT"
+fi
+
+readarray -t LINES || true
+if [ ${#LINES[@]} -eq 0 ]; then
+    # No refs being pushed
+    exit 0
+fi
+
+py_version=""
+if [ -f pyalp/pyproject.toml ]; then
+    py_version=$(grep -E '^version\s*=\s*"' pyalp/pyproject.toml | head -n1 | sed -E 's/^version\s*=\s*"([^\"]+)".*/\1/' || true)
+fi
+
+err=0
+for line in "${LINES[@]}"; do
+    # input format: <local_ref> <local_sha> <remote_ref> <remote_sha>
+    read -r local_ref local_sha remote_ref remote_sha <<<"$line"
+    if [[ "$remote_ref" =~ ^refs/tags/pyalp\.v(.+)$ ]]; then
+        tag_ver="${BASH_REMATCH[1]}"
+        if [ -z "$py_version" ]; then
+            echo "ERROR: pushing tag 'pyalp.v${tag_ver}' but could not determine pyalp/pyproject.toml version." >&2
+            echo "Please update pyalp/pyproject.toml (version = \"${tag_ver}\") or set GIT_ALLOW_VERSION_MISMATCH=1 to bypass." >&2
+            err=1
+        elif [ "$tag_ver" != "$py_version" ]; then
+            echo "ERROR: Tag version mismatch: pushing 'pyalp.v${tag_ver}' but pyalp/pyproject.toml contains version '${py_version}'." >&2
+            echo "Update pyalp/pyproject.toml to match the tag, or set GIT_ALLOW_VERSION_MISMATCH=1 to bypass." >&2
+            err=1
+        else
+            echo "OK: tag pyalp.v${tag_ver} matches pyalp/pyproject.toml"
+        fi
+    fi
+done
+
+if [ "$err" -ne 0 ]; then
+    echo "Push aborted due to version mismatch." >&2
+    exit 1
+fi
+
+exit 0

scripts/install-git-hooks.sh

@@ -0,0 +1,19 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR=$(git rev-parse --show-toplevel 2>/dev/null || pwd)
+HOOK_DIR="$ROOT_DIR/.githooks"
+
+if [ ! -d "$HOOK_DIR" ]; then
+    echo "Hook directory $HOOK_DIR not found."
+    exit 1
+fi
+
+echo "Installing git hooks by setting core.hooksPath to '$HOOK_DIR'"
+git config core.hooksPath "$HOOK_DIR"
+
+echo "Making hook scripts executable"
+chmod +x "$HOOK_DIR"/* || true
+
+echo "Installed. To bypass the version check temporarily, set:"
+echo "  export GIT_ALLOW_VERSION_MISMATCH=1"