#!/usr/bin/env bash
set -euo pipefail
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
SKILL_ROOT="$(dirname "$SCRIPT_DIR")"
source "$SCRIPT_DIR/_common.sh"

: "${NODE_NAME:=node-b}"
: "${MODE:=docker}"
: "${HTTP_PORT:=3000}"
: "${SSH_PORT:=2222}"
: "${DOMAIN:=}"
: "${DATA_DIR:=$HOME/gitea}"
: "${ADMIN_USER:=}"
: "${ADMIN_EMAIL:=}"

main() {
  mkdir -p "$SKILL_ROOT/outputs"
  local report="$SKILL_ROOT/outputs/audit_report.md"
  local status="$SKILL_ROOT/outputs/status_matrix.json"

  cat > "$report" <<EOF
# Gitea Bootstrap Audit Report

**Generated:** $(date -Iseconds)  
**Node:** $(json_escape "$NODE_NAME")  
**Mode:** $(json_escape "$MODE")  
**Web Port:** $HTTP_PORT  
**SSH Port:** $SSH_PORT  
**Domain:** $(json_escape "$DOMAIN")  
**Data Dir:** $(json_escape "$DATA_DIR")  
**Admin (planned):** $(json_escape "${ADMIN_USER:-}") / $(json_escape "${ADMIN_EMAIL:-}")  
**Skill Version:** 1.0.0

---

## Artifacts

| Item | Path |
|---|---|
| Compose | \`$SKILL_ROOT/outputs/compose.yml\` |
| app.ini | \`$SKILL_ROOT/outputs/gitea_app.ini\` |
| Status Matrix | \`$SKILL_ROOT/outputs/status_matrix.json\` |
| Backups | \`$SKILL_ROOT/outputs/backups/\` |

---

## Status Matrix

$(if [[ -f "$status" ]]; then
  echo '```json'
  cat "$status"
  echo '```'
else
  echo "_Missing status_matrix.json — run 90_verify.sh first._"
fi)

---

## EU Compliance Declaration

| Aspect | Value |
|---|---|
| Data Residency | EU (Ireland - Dublin) |
| Jurisdiction | Irish Law |
| Git Authority | Self-hosted on Node B |
| Backups | Local outputs; optional offsite via backup-sovereign |

---

## Rollback

- Docker/native undo: \`./scripts/rollback/undo.sh\`

EOF

  log_info "Wrote $report"
  cat "$report"
}
main "$@"