#!/usr/bin/env bash
# Local/CI quality gate. Usage: scripts/ci.sh [--with-server]   (server-dependent audits need E2E_BASE_URL or a running `pnpm dev`)
set -euo pipefail
cd "$(dirname "$0")/.."
echo "== typecheck";        pnpm typecheck
echo "== content validate"; pnpm content:validate
echo "== unit + integration"; pnpm test
echo "== ranking eval";     pnpm eval:ranking
echo "== dependency audit"; pnpm audit --prod --audit-level high || echo "  (advisories above need review)"
if [[ "${1:-}" == "--with-server" ]]; then
  echo "== e2e";      pnpm test:e2e
  echo "== a11y";     pnpm test:a11y
  echo "== security"; pnpm test:security
fi
echo "CI OK"