#!/usr/bin/env bash
set -euo pipefail

grep -q 'runAsNonRoot: true' deploy/helm/ai-spel-static/templates/deployment.yaml
grep -q 'readOnlyRootFilesystem: true' deploy/helm/ai-spel-static/templates/deployment.yaml
grep -q 'maxUnavailable: 0' deploy/helm/ai-spel-static/values.yaml
grep -q 'maxSurge: 1' deploy/helm/ai-spel-static/values.yaml
grep -q 'path: /static' deploy/helm/ai-spel-static/templates/ingress.yaml
grep -q 'max-age=31536000, immutable' nginx/default.conf
grep -q 'application/javascript js mjs;' nginx/default.conf
grep -q 'application/wasm wasm;' nginx/default.conf
grep -Fq 'try_files $uri =404;' nginx/default.conf
grep -q 'version.json' Dockerfile
grep -q 'location = /static/version.json' nginx/default.conf
node --test tests/*.test.cjs
echo 'Static asset source checks passed.'