CTXGUARD := python3 plugins/ctxguard/scripts/ctxguard.py

.PHONY: help test verify leaks scan status lint all

help:
	@echo "test    - engine unit tests"
	@echo "verify  - canary corpus through the real hook entry points"
	@echo "leaks   - scan transcripts for values that actually reached the model"
	@echo "scan    - report sensitive values in this repo (counts only)"
	@echo "status  - show what ctxguard has active"
	@echo "lint    - byte-compile every script"
	@echo "all     - lint + test + verify"

test:
	python3 plugins/ctxguard/tests/unit/test_engine.py

verify:
	$(CTXGUARD) verify

leaks:
	$(CTXGUARD) scan-transcript

scan:
	$(CTXGUARD) scan .

status:
	$(CTXGUARD) status

lint:
	python3 -m compileall -q plugins/ctxguard/scripts
	python3 -c "import json,glob,sys; [json.load(open(f)) for f in glob.glob('**/*.json', recursive=True)]; print('json ok')"

all: lint test verify