#!/usr/bin/env bash
set -euo pipefail

grep -q 'runAsNonRoot: true' deploy/helm/ai-spel-static/templates/deployment.yaml
grep -q 'readOnlyRootFilesystem: true' deploy/helm/ai-spel-static/templates/deployment.yaml
grep -q 'maxUnavailable: 0' deploy/helm/ai-spel-static/values.yaml
grep -q 'maxSurge: 1' deploy/helm/ai-spel-static/values.yaml
grep -q 'path: /static' deploy/helm/ai-spel-static/templates/ingress.yaml
grep -q 'max-age=31536000, immutable' nginx/default.conf
grep -q 'application/javascript js mjs;' nginx/default.conf
grep -q 'application/wasm wasm;' nginx/default.conf
grep -Fq 'try_files $uri =404;' nginx/default.conf
grep -q 'version.json' Dockerfile
grep -q 'location = /static/version.json' nginx/default.conf
grep -q 'location = /static/wllama-gemma3-v1/manifest.json' nginx/default.conf
grep -q 'location = /static/wllama-gemma3-v1/local-ai.js' nginx/default.conf
grep -q 'Cache-Control "no-cache"' nginx/default.conf
grep -q 'text/html html;' nginx/default.conf
grep -q 'application/octet-stream onnx data gguf;' nginx/default.conf
grep -q "client', 'local-ai.js" scripts/build-assets.mjs
grep -q 'wllama-gemma3-v1' scripts/build-assets.mjs
grep -q 'test -s public/static/wllama-gemma3-v1/local-ai.js' .gitea/workflows/publish.yaml
grep -q 'lokal ai godkänn villkor' client/local-ai.js
grep -q 'acceptance_id' scripts/build-assets.mjs
grep -q 'GEMMA_TERMS.html' .gitea/workflows/publish.yaml
grep -q 'GEMMA_USER_TERMS.html' .gitea/workflows/publish.yaml
node --test tests/*.test.cjs
echo 'Static asset source checks passed.'