BUN_IMAGE ?= oven/bun:1.4.4
DOCKER_RUN := docker run --rm -v $(PWD):/app -w /app
RENOVATE_IMAGE ?= renovate/renovate:latest
RENOVATE_LOG_LEVEL ?= info
BASE ?= origin/main
.PHONY: test ci renovate-config-test renovate-test renovate-debug check-tipi-version readme bun-shell

test:
	$(DOCKER_RUN) $(BUN_IMAGE) sh -lc "bun install --ignore-scripts && bun run lint && bun run typecheck && bun test"

ci:
	$(DOCKER_RUN) $(BUN_IMAGE) sh -lc "bun install --ignore-scripts && bun run lint:ci && bun run typecheck && bun test"

readme:
	$(DOCKER_RUN) $(BUN_IMAGE) sh -lc "bun install --ignore-scripts && bun .github/scripts/readme-generator.ts"

renovate-config-test:
	docker run --rm \
	  -v "$(PWD)/renovate.json:/tmp/renovate.json:ro" \
	  --entrypoint renovate-config-validator \
	  $(RENOVATE_IMAGE) /tmp/renovate.json

# Pass DOCKERHUB_USERNAME/DOCKERHUB_TOKEN so config.js authenticates Docker Hub
# lookups (otherwise the dry-run aborts on 429 rate limits before the update
# phase) and GITHUB_COM_TOKEN for github-tags/release-notes lookups.
# extends is kept: config:recommended and :dependencyDashboard are internal
# presets, resolved offline — local run matches production config.
# In a git worktree .git is a file pointing outside the mount: re-init the copy.
renovate-test:
	docker run --rm \
	  -u "0:0" \
	  -e LOG_LEVEL=$(RENOVATE_LOG_LEVEL) \
	  -e DOCKERHUB_USERNAME \
	  -e DOCKERHUB_TOKEN \
	  -e GITHUB_COM_TOKEN \
	  -v "$(PWD)":/tmp/app \
	  --entrypoint bash \
	  $(RENOVATE_IMAGE) -lc "set -eo pipefail; cp -a /tmp/app /usr/src; cd /usr/src/app; if [ -f .git ]; then rm .git; git init -q; fi; git config --global --add safe.directory \"\$$PWD\"; git add -A; renovate --platform=local --dry-run=full"

# Runs on the host (git + jq): a container would hit the worktree .git gitfile issue.
check-tipi-version:
	scripts/check-tipi-version.sh $(BASE)

renovate-debug:
	$(MAKE) RENOVATE_LOG_LEVEL=debug renovate-test

bun-shell:
	docker run --rm -it -v $(PWD):/app -w /app $(BUN_IMAGE) bash