Makefile

# Panvex control-plane + agent — developer Makefile.
# Mirrors CI checks so pre-push and local runs match GitHub Actions.

.PHONY: help test test-fast test-pkg lint vuln check build build-embed \
        sqlc tidy fmt clean install-tools bench gen-settings all \
        gen-openapi-go gen-openapi-ts gen-openapi verify-openapi \
        gen-install-script

# Default target: list available commands.
help:
	@echo "Panvex Makefile targets:"
	@echo ""
	@echo "  make test          Run full go test -race suite (same as CI)"
	@echo "  make test-fast     Run go test without race detector (faster)"
	@echo "  make test-pkg PKG=./internal/controlplane/auth"
	@echo "                     Run tests for a single package"
	@echo "  make lint          Run golangci-lint"
	@echo "  make vuln          Run govulncheck against all packages"
	@echo "  make check         lint + test + vuln (full local CI equivalent)"
	@echo "  make build         Build control-plane and agent binaries"
	@echo "  make build-embed   Build frontend into cmd/control-plane/.embedded-ui"
	@echo "                     then build control-plane with embeddedui tag"
	@echo "  make sqlc          Regenerate internal/dbsqlc from db/queries"
	@echo "  make tidy          go mod tidy"
	@echo "  make fmt           gofmt -w ."
	@echo "  make clean         Remove build artifacts"
	@echo "  make install-tools Install govulncheck, golangci-lint, sqlc"
	@echo "  make bench         Run P2-PERF-05 microbenchmarks"
	@echo "                     (batch writer + event hub + jobs; 3s per bench)"
	@echo "  make gen-install-script  Mirror deploy/install-agent.sh into the"
	@echo "                     server package for //go:embed"

# Canonical install-agent.sh lives in deploy/. //go:embed cannot reference
# paths outside the package, so we mirror it into internal/controlplane/server/
# before any build/test. The mirror is .gitignored; a drift test asserts
# the embedded bytes match deploy/ so this step is mandatory.
gen-install-script:
	go generate ./internal/controlplane/server/...

test: gen-install-script
	# Mirror CI: race-suite excludes loadtest, then loadtest runs without -race.
	# loadtest scenarios (100 concurrent Argon2id, 200-agent enroll) tip past
	# 22 GB RSS under -race and OOM-kill on memory-constrained dev hosts.
	# H7: also filter out web/node_modules — some npm packages (e.g.
	# flatted's vendored Go port) ship a nested go.mod/package that `go
	# list ./...` happily discovers when web/node_modules exists locally.
	# CI never runs `npm ci` before the Go steps, so this only bites local
	# dev/pre-push runs; filtering here keeps both paths identical.
	go test -race -count=1 $$(go list ./... | grep -vE 'node_modules|^github.com/lost-coder/panvex/internal/loadtest$$')
	go test -count=1 ./internal/loadtest/...

test-fast: gen-install-script
	go test -count=1 $$(go list ./... | grep -vE 'node_modules')

test-pkg: gen-install-script
	@if [ -z "$(PKG)" ]; then echo "usage: make test-pkg PKG=./path/to/pkg"; exit 1; fi
	go test -race -count=1 -v $(PKG)

# H7: golangci-lint and govulncheck both resolve `./...` (and their own
# module/gitignore-aware directory walk) themselves; feeding them a `go
# list`-expanded argument list breaks their path resolution (they expect
# relative patterns, not fully-qualified import paths passed as CLI
# args). They already skip web/node_modules on their own (verified: it's
# gitignored and neither tool descends into it), so no filtering is
# needed here — unlike the `go test $(go list ...)` invocations above,
# which truly do take go-list output as their package set.
lint:
	golangci-lint run ./...

vuln:
	govulncheck ./...

check: lint test vuln

build: gen-install-script
	go build -o bin/panvex-control-plane ./cmd/control-plane
	go build -o bin/panvex-agent ./cmd/agent

build-embed: gen-install-script
	cd web && npm ci && npm run build:embed
	go build -tags embeddedui -o bin/panvex-control-plane ./cmd/control-plane

sqlc:
	sqlc generate

tidy:
	go mod tidy

fmt:
	gofmt -w .

clean:
	rm -rf bin/ cmd/control-plane/.embedded-ui

install-tools:
	go install golang.org/x/vuln/cmd/govulncheck@latest
	go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@latest
	go install github.com/sqlc-dev/sqlc/cmd/sqlc@latest
	go install github.com/oapi-codegen/oapi-codegen/v2/cmd/oapi-codegen@latest
	@echo "openapi-typescript is invoked via npx — no install required"

# gen-settings runs the registry codegen.
gen-settings:
	go generate ./internal/controlplane/settings/...
	@echo "wrote internal/controlplane/settings/gen/schema.json"
	@echo "wrote docs/settings/reference.md"
	@echo "wrote docs/settings/example.config.toml"

# OpenAPI codegen pipeline (Wave 3.3 — see
# docs/superpowers/plans/2026-05-08-api-codegen.md). The spec at
# openapi/panvex.yaml is the single source of truth; both Go server
# stubs and TypeScript types are regenerated from it.
#
# Generated outputs are committed (matches sqlc / gen-settings) so CI
# does not need the codegen tools on the hot path; verify-openapi
# regenerates and asserts no diff.
gen-openapi-go:
	@command -v oapi-codegen >/dev/null || { echo "oapi-codegen not installed (make install-tools)"; exit 1; }
	oapi-codegen -config openapi/config.yaml openapi/panvex.yaml

gen-openapi-ts:
	@command -v npx >/dev/null || { echo "npx not installed"; exit 1; }
	# openapi-typescript needs `typescript` as a peer in its runtime env.
	# `npx --yes openapi-typescript` alone installs it into an ephemeral
	# cache that does NOT include typescript, so the import resolution
	# fails in CI ("Cannot find package 'typescript' imported from ...").
	# Install both into the same ephemeral env via `-p` so the peer is
	# resolvable. Locally this is a no-op the second time because npx
	# caches the env, so the dev-loop cost is negligible.
	cd web && npx --yes -p typescript@5 -p openapi-typescript -- openapi-typescript ../openapi/panvex.yaml -o src/shared/api/openapi.gen.ts

gen-openapi: gen-openapi-go gen-openapi-ts

verify-openapi: gen-openapi
	@git diff --exit-code -- openapi/ web/src/shared/api/openapi.gen.ts \
	    || { echo ""; echo "OpenAPI generated files are out of date — run 'make gen-openapi'."; exit 1; }

# Control-plane microbenchmarks (batch writer, event bus, bulk insert).
bench:
	go test -bench=. -benchtime=3s -run=^$$ -count=1 -timeout=10m \
	    ./internal/controlplane/server \
	    ./internal/controlplane/jobs