Makefile

.PHONY: help install dev test test-cov lint format build clean registry up down status examples check-pypi-deps publish-pypi bump-patch bump-minor bump-major publish sync-pactown-com security security-sast security-deps security-secrets security-all artifacts artifacts-clean artifacts-quick artifacts-docker

PYTHON ?= $(shell if [ -x ./venv/bin/python3 ]; then echo ./venv/bin/python3; elif [ -x ./.venv/bin/python3 ]; then echo ./.venv/bin/python3; else echo python3; fi)
CONFIG ?= saas.pactown.yaml
README ?= README.md
SANDBOX ?= ./sandbox

BUMP2VERSION_PY := $(shell $(PYTHON) -c 'import os,sys; print(os.path.join(os.path.dirname(sys.executable),"bump2version"))')
ifneq (,$(wildcard $(BUMP2VERSION_PY)))
BUMP2VERSION := $(BUMP2VERSION_PY)
else
BUMP2VERSION := bump2version
endif

help: ## Show this help
	@grep -E '^[a-zA-Z_-]+:.*?## .*$$' $(MAKEFILE_LIST) | sort | awk 'BEGIN {FS = ":.*?## "}; {printf "\033[36m%-18s\033[0m %s\n", $$1, $$2}'

install: ## Install pactown package
	$(PYTHON) -m pip install -e .

dev: ## Install dev dependencies
	$(PYTHON) -m pip install -e ".[dev]"

test: ## Run tests
	PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src $(PYTHON) -m pytest -p pytest_asyncio.plugin tests/ -v

test-cov: ## Run tests with coverage
	PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src $(PYTHON) -m pytest -p pytest_asyncio.plugin tests/ -v --cov=src/pactown --cov-report=term-missing

lint: ## Run linter
	@if $(PYTHON) -c "import ruff" >/dev/null 2>&1; then \
		$(PYTHON) -m ruff check src/ tests/; \
	elif command -v ruff >/dev/null 2>&1; then \
		ruff check src/ tests/; \
	elif command -v pipx >/dev/null 2>&1; then \
		pipx run ruff check src/ tests/; \
	else \
		echo "Missing dependency: ruff. Run: make dev (or install via pipx)."; \
		exit 1; \
	fi

format: ## Format code
	@if $(PYTHON) -c "import ruff" >/dev/null 2>&1; then \
		$(PYTHON) -m ruff format src/ tests/; \
	elif command -v ruff >/dev/null 2>&1; then \
		ruff format src/ tests/; \
	elif command -v pipx >/dev/null 2>&1; then \
		pipx run ruff format src/ tests/; \
	else \
		echo "Missing dependency: ruff. Run: make dev (or install via pipx)."; \
		exit 1; \
	fi

build: clean ## Build package
	@$(PYTHON) -c "import build" >/dev/null 2>&1 || (echo "Missing dependency: build. Run: $(PYTHON) -m pip install -e \".[dev]\" (or: $(PYTHON) -m pip install build)" && exit 1)
	$(PYTHON) -m build

clean: ## Remove build artifacts
	rm -rf dist/ build/ *.egg-info src/*.egg-info
	find . -type d -name __pycache__ -exec rm -rf {} + 2>/dev/null || true
	find . -type d -name .pytest_cache -exec rm -rf {} + 2>/dev/null || true
	@echo "Cleaned all generated files"

# Registry commands
registry: ## Start local pactown registry
	pactown-registry --host 0.0.0.0 --port 8800

registry-bg: ## Start registry in background
	pactown-registry --host 0.0.0.0 --port 8800 &

# Ecosystem commands
up: ## Start all services from config (usage: make up CONFIG=path/to/config.yaml)
	pactown up $(CONFIG)

down: ## Stop all services
	pactown down $(CONFIG)

status: ## Show status of all services
	pactown status $(CONFIG)

validate: ## Validate ecosystem configuration
	pactown validate $(CONFIG)

graph: ## Show dependency graph
	pactown graph $(CONFIG)

# Development helpers
examples: ## Run example ecosystem
	pactown up examples/saas.pactown.yaml --dry-run

init: ## Initialize new pactown ecosystem
	pactown init

publish-registry: ## Publish all modules to registry
	pactown publish $(CONFIG) --registry http://localhost:8800

pull: ## Pull dependencies from registry
	pactown pull $(CONFIG) --registry http://localhost:8800

check-pypi-deps: ## Check dependencies for building/publishing
	@$(PYTHON) -c "import build" >/dev/null 2>&1 || (echo "Missing dependency: build. Run: $(PYTHON) -m pip install -e \".[dev]\" (or: $(PYTHON) -m pip install build)" && exit 1)
	@$(PYTHON) -c "import twine" >/dev/null 2>&1 || (echo "Missing dependency: twine. Run: $(PYTHON) -m pip install -e \".[dev]\" (or: $(PYTHON) -m pip install twine)" && exit 1)
	@$(BUMP2VERSION) --help >/dev/null 2>&1 || (echo "Missing dependency: bump2version. Run: $(PYTHON) -m pip install -e \".[dev]\" (or: $(PYTHON) -m pip install bump2version)" && exit 1)

publish-pypi: ## Publish to PyPI production (uses ~/.pypirc credentials)
	@$(MAKE) check-pypi-deps
	@$(MAKE) bump-patch
	@$(MAKE) sync-pactown-com
	@$(MAKE) build
	$(PYTHON) -m twine upload dist/*

# Version management
version: ## Show current version
	@grep -m1 'version = ' pyproject.toml | cut -d'"' -f2

bump-patch: ## Bump patch version (0.1.0 → 0.1.1)
	$(BUMP2VERSION) patch --config-file .bumpversion.cfg --allow-dirty
	@echo "Bumped to $$(grep -m1 'version = ' pyproject.toml | cut -d'"' -f2)"

bump-minor: ## Bump minor version (0.1.0 → 0.2.0)
	$(BUMP2VERSION) minor --config-file .bumpversion.cfg --allow-dirty
	@echo "Bumped to $$(grep -m1 'version = ' pyproject.toml | cut -d'"' -f2)"

bump-major: ## Bump major version (0.1.0 → 1.0.0)
	$(BUMP2VERSION) major --config-file .bumpversion.cfg --allow-dirty
	@echo "Bumped to $$(grep -m1 'version = ' pyproject.toml | cut -d'"' -f2)"

publish: publish-pypi ## Bump patch and publish


sync-pactown-com:
	$(PYTHON) tools/sync_pactown_com_dependency.py

# Security targets
security: security-sast security-deps ## Run all security checks (SAST + deps)

security-sast: ## Run SAST (bandit + semgrep)
	@echo "Running SAST analysis..."
	@if $(PYTHON) -c "import bandit" >/dev/null 2>&1; then \
		$(PYTHON) -m bandit -r src/ -ll -ii --skip B101 || true; \
	elif command -v bandit >/dev/null 2>&1; then \
		bandit -r src/ -ll -ii --skip B101 || true; \
	else \
		echo "[SKIP] bandit not installed. Run: $(PYTHON) -m pip install bandit"; \
	fi
	@if command -v semgrep >/dev/null 2>&1; then \
		semgrep scan --config=p/python --config=p/owasp-top-ten src/ --error 2>/dev/null || \
		semgrep scan --config=auto src/ --error 2>/dev/null || \
		echo "[WARN] semgrep scan completed with findings"; \
	else \
		echo "[SKIP] semgrep not installed. Run: pip install semgrep (or pipx install semgrep)"; \
	fi

security-deps: ## Scan dependencies for vulnerabilities (pip-audit)
	@echo "Scanning dependencies for vulnerabilities..."
	@if $(PYTHON) -c "import pip_audit" >/dev/null 2>&1; then \
		$(PYTHON) -m pip_audit --desc on || true; \
	elif command -v pip-audit >/dev/null 2>&1; then \
		pip-audit --desc on || true; \
	else \
		echo "[SKIP] pip-audit not installed. Run: $(PYTHON) -m pip install pip-audit"; \
	fi

security-secrets: ## Scan for secrets in codebase (gitleaks)
	@echo "Scanning for secrets..."
	@if command -v gitleaks >/dev/null 2>&1; then \
		gitleaks detect --source . --verbose 2>/dev/null || echo "[WARN] Potential secrets found"; \
	else \
		echo "[SKIP] gitleaks not installed. Install: https://github.com/gitleaks/gitleaks#installing"; \
	fi

security-all: security security-secrets ## Run all security checks including secrets scan

# Artifact generation & validation
ARTIFACT_ROOT := .pactown
ARTIFACT_TESTS := tests/test_ansible.py

artifacts-docker: ## Validate all existing artifacts in native Docker containers
	@if command -v docker >/dev/null 2>&1 && docker info >/dev/null 2>&1; then \
		$(PYTHON) tools/validate_artifacts_docker.py \
			--root $(ARTIFACT_ROOT) --strict -v; \
	else \
		echo "ERROR: Docker not available"; exit 1; \
	fi

artifacts-clean: ## Remove all generated scaffold artifacts
	@echo "Cleaning $(ARTIFACT_ROOT)/ and bytecode caches..."
	@if [ -d "$(ARTIFACT_ROOT)" ] && command -v docker >/dev/null 2>&1 && docker info >/dev/null 2>&1; then \
		docker run --rm -v "$$(cd $(ARTIFACT_ROOT) && pwd):/clean" ubuntu:22.04 \
			sh -c 'chmod -R 777 /clean/test-* 2>/dev/null; rm -rf /clean/test-*' 2>/dev/null; \
	fi
	rm -rf $(ARTIFACT_ROOT)/test-* 2>/dev/null || true
	find . -type d -name __pycache__ -exec rm -rf {} + 2>/dev/null || true
	@echo "Done – artifact directory cleaned."

CROSS_PLATFORM_TESTS := tests/test_cross_platform.py

artifacts-quick: artifacts-clean ## Generate artifacts + validate (no Docker, fast)
	@echo ""
	@echo "============================================================"
	@echo " STEP 1/3: Generating scaffold artifacts (18 frameworks)"
	@echo "============================================================"
	PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src \
		$(PYTHON) -m pytest -p pytest_asyncio.plugin \
		$(ARTIFACT_TESTS)::TestRealScaffoldInPactown -v --tb=short
	@echo ""
	@echo "============================================================"
	@echo " STEP 2/3: Validating artifact sizes (strict, no stubs)"
	@echo "============================================================"
	PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src \
		$(PYTHON) -m pytest -p pytest_asyncio.plugin \
		$(ARTIFACT_TESTS)::TestArtifactSizeValidation -v --tb=short -s
	@echo ""
	@echo "============================================================"
	@echo " STEP 3/3: Validating file correctness"
	@echo "============================================================"
	PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src \
		$(PYTHON) -m pytest -p pytest_asyncio.plugin \
		$(ARTIFACT_TESTS)::TestGeneratedFileCorrectness -v --tb=short -s
	@echo ""
	@echo "============================================================"
	@echo " DONE – quick validation passed"
	@echo "============================================================"

artifacts: artifacts-clean ## Generate all artifacts and run full validation pipeline
	@echo ""
	@echo "============================================================"
	@echo " STEP 1/9: Generating scaffold artifacts (18 frameworks)"
	@echo "============================================================"
	PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src \
		$(PYTHON) -m pytest -p pytest_asyncio.plugin \
		$(ARTIFACT_TESTS)::TestRealScaffoldInPactown -v --tb=short
	@echo ""
	@echo "============================================================"
	@echo " STEP 2/9: Generating IaC artifacts (Docker)"
	@echo "============================================================"
	@if command -v docker >/dev/null 2>&1 && docker info >/dev/null 2>&1; then \
		PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src \
		$(PYTHON) -m pytest -p pytest_asyncio.plugin \
		$(ARTIFACT_TESTS)::TestDockerIaCValidation::test_docker_iac_all_files_present_and_consistent \
		-v --tb=short; \
	else \
		echo "[SKIP] Docker not available – IaC scaffolds not generated"; \
	fi
	@echo ""
	@echo "============================================================"
	@echo " STEP 3/9: Validating artifact sizes (strict, no stubs)"
	@echo "============================================================"
	PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src \
		$(PYTHON) -m pytest -p pytest_asyncio.plugin \
		$(ARTIFACT_TESTS)::TestArtifactSizeValidation -v --tb=short -s
	@echo ""
	@echo "============================================================"
	@echo " STEP 4/9: Validating file correctness (magic bytes,"
	@echo "           configs, syntax, schemas)"
	@echo "============================================================"
	PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src \
		$(PYTHON) -m pytest -p pytest_asyncio.plugin \
		$(ARTIFACT_TESTS)::TestGeneratedFileCorrectness -v --tb=short -s
	@echo ""
	@echo "============================================================"
	@echo " STEP 5/9: Docker native validation (every artifact in"
	@echo "           its native Docker container)"
	@echo "============================================================"
	@if command -v docker >/dev/null 2>&1 && docker info >/dev/null 2>&1; then \
		$(PYTHON) tools/validate_artifacts_docker.py \
			--root $(ARTIFACT_ROOT) --strict -v; \
	else \
		echo "[SKIP] Docker not available – native validation skipped"; \
	fi
	@echo ""
	@echo "============================================================"
	@echo " STEP 6/9: Docker platform tests (binary format,"
	@echo "           artifact execution, syntax checks)"
	@echo "============================================================"
	@if command -v docker >/dev/null 2>&1 && docker info >/dev/null 2>&1; then \
		PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src \
		$(PYTHON) -m pytest -p pytest_asyncio.plugin \
		$(ARTIFACT_TESTS)::TestDockerArtifactSizeValidation \
		$(ARTIFACT_TESTS)::TestDockerBinaryFormatVerification \
		$(ARTIFACT_TESTS)::TestDockerArtifactExecution \
		$(ARTIFACT_TESTS)::TestDockerAutomatedExecution \
		$(ARTIFACT_TESTS)::TestDockerDockerfileValidation \
		-v --tb=short; \
	else \
		echo "[SKIP] Docker not available – platform validation skipped"; \
	fi
	@echo ""
	@echo "============================================================"
	@echo " STEP 7/9: E2E build → deploy via Ansible"
	@echo "============================================================"
	PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src \
		$(PYTHON) -m pytest -p pytest_asyncio.plugin \
		$(ARTIFACT_TESTS)::TestE2EBuildAndAnsibleDeploy \
		$(ARTIFACT_TESTS)::TestMultiPlatformArtifactsWithAnsible \
		-v --tb=short
	@echo ""
	@echo "============================================================"
	@echo " STEP 8/9: Desktop + mobile artifact generation per OS"
	@echo "============================================================"
	PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src \
		$(PYTHON) -m pytest -p pytest_asyncio.plugin \
		$(ARTIFACT_TESTS)::TestDesktopArtifactGeneration \
		$(ARTIFACT_TESTS)::TestMobileArtifactGeneration \
		$(ARTIFACT_TESTS)::TestAnsibleArtifactDistribution \
		-v --tb=short
	@echo ""
	@echo "============================================================"
	@echo " STEP 9/9: Cross-platform matrix (framework × OS)"
	@echo "============================================================"
	PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src \
		$(PYTHON) -m pytest -p pytest_asyncio.plugin \
		$(CROSS_PLATFORM_TESTS) -v --tb=short
	@echo ""
	@echo "============================================================"
	@echo " ALL DONE – full artifact pipeline completed (9 steps)"
	@echo "============================================================"