# ci/Makefile — portable, single-command local equivalent of the Gitea Actions
# merge gate (R-TEST-02: the gates are runnable TODAY, without Gitea).
#
# The LIVE Gitea Actions workflow (.gitea/workflows/gate.yml) invokes `make -C ci gate`
# directly, so `make -C ci gate` locally IS the CI merge gate — byte-for-byte. Run from
# anywhere:
#   make -C ci gate
#
# Every stage is a thin wrapper over a ci/*.sh script; see ci/README.md.
SHELL := /usr/bin/env bash
CI_DIR := $(dir $(abspath $(lastword $(MAKEFILE_LIST))))

.DEFAULT_GOAL := help

.PHONY: help spec-immutability lint schema l0 render-golden l1 conformance gate all touched versions tools test

help: ## Show this help
	@awk 'BEGIN{FS=":.*##"} /^[a-zA-Z0-9_-]+:.*##/{printf "  \033[36m%-14s\033[0m %s\n",$$1,$$2}' $(MAKEFILE_LIST)

spec-immutability: ## R-TEST-06: fail if the spec repo is modified or drifted from ci/SPEC_PIN
	@"$(CI_DIR)spec-immutability.sh"

lint: ## yaml/lint (no cluster; live now)
	@"$(CI_DIR)lint.sh"

schema l0: ## ServiceDefinition schema validation + Kyverno L0 policy gate (no cluster; live now)
	@"$(CI_DIR)l0.sh"

render-golden: ## render==golden: canonical render reproduces committed apps/ (no cluster; live now)
	@"$(CI_DIR)render-golden.sh"

l1: ## L1 rendering checks (no cluster; live now)
	@"$(CI_DIR)l1.sh"

conformance: ## L2/L3 in-cluster Chainsaw Job (SKIPS w/o CLUSTER_AVAILABLE=true)
	@"$(CI_DIR)conformance.sh"

gate: ## Full merge gate: all stages + R-TEST-03 decision (the single command)
	@"$(CI_DIR)gate.sh"

all: gate ## Alias for `gate`

touched: ## Print the touched-requirement subset for the current branch vs main
	@"$(CI_DIR)touched-requirements.sh"

test: ## Run ci/ script unit tests (no cluster; e.g. touched-requirements content scan)
	@for t in "$(CI_DIR)"tests/*.test.sh; do echo "== $$t"; bash "$$t"; done

versions: ## Print pinned tool versions (R-TEST-02)
	@cat "$(CI_DIR)versions.env"

tools: ## Report which required tools are installed locally
	@source "$(CI_DIR)versions.env"; \
	for t in yamllint kyverno chainsaw kubectl yq git; do \
	  if command -v $$t >/dev/null 2>&1; then printf "  \033[32mok\033[0m   %s\n" "$$t"; \
	  else printf "  \033[33mmiss\033[0m %s\n" "$$t"; fi; done