GO_TOOLCHAIN := go1.26.10
GO := GOTOOLCHAIN=$(GO_TOOLCHAIN) go
GO_PACKAGES := ./cmd/... ./internal/...
STATICCHECK_VERSION := v0.7.0
GOVULNCHECK_VERSION := v1.7.0

.PHONY: bootstrap check privacy-check hooks-install go-check go-format-check go-race-check go-static-check web-check deployment-check security-check dependency-security-check go-security-check web-security-check agent-binaries center-install-bundle image-center image-agent

bootstrap:
	$(GO) mod download
	cd web && npm ci --ignore-scripts

check: privacy-check go-check web-check deployment-check

privacy-check:
	node --test scripts/check-public-fixtures.test.mjs
	node scripts/check-public-fixtures.mjs --worktree

hooks-install:
	git config core.hooksPath .githooks

go-check: go-format-check go-race-check go-static-check

go-format-check:
	@VASTORA_FORMATTED_FILES="$$(gofmt -l cmd internal)"; \
	/bin/test -z "$$VASTORA_FORMATTED_FILES" || { printf 'Run gofmt on:\n%s\n' "$$VASTORA_FORMATTED_FILES"; exit 1; }
	node scripts/generate-openapi.mjs --check

go-race-check:
	$(GO) test -race -timeout=20m $(GO_PACKAGES)

go-static-check:
	$(GO) vet $(GO_PACKAGES)
	$(GO) run honnef.co/go/tools/cmd/staticcheck@$(STATICCHECK_VERSION) $(GO_PACKAGES)

web-check:
	cd web && npm run lint
	cd web && npm test
	cd web && npm run build

deployment-check:
	sh -n install.sh
	sh -n deploy/center/setup.sh
	sh -n deploy/center/upgrade.sh
	sh -n deploy/center/uninstall.sh
	sh -n scripts/package-center-install.sh
	sh -n scripts/create-installer-release-manifest.sh
	sh -n scripts/github-installer-release-assets.sh
	sh -n scripts/publish-installer-r2.sh
	sh -n scripts/reconcile-installer-r2.sh
	sh -n scripts/verify-installer-release.sh
	sh -n scripts/validate-release-metadata.sh
	sh -n scripts/assert-image-platforms.sh
	sh -n scripts/check-runtime-image-platforms.sh
	sh -n scripts/test-center-install.sh
	sh -n scripts/test-runtime-network.sh
	sh -n scripts/test-center-uninstall.sh
	sh -n scripts/test-center-update.sh
	sh -n scripts/test-release-metadata.sh
	sh -n scripts/test-release-workflow.sh
	sh -n scripts/ensure-version-pr-checks.sh
	sh -n scripts/test-ci-workflows.sh
	sh -n scripts/test-publish-installer-r2.sh
	sh -n scripts/test-github-installer-release-assets.sh
	node scripts/test-installer-worker.mjs
	./install.sh --help >/dev/null
	deploy/center/setup.sh --help >/dev/null
	deploy/center/upgrade.sh --help >/dev/null
	deploy/center/uninstall.sh --help >/dev/null
	scripts/package-center-install.sh --help >/dev/null
	scripts/create-installer-release-manifest.sh --help >/dev/null
	scripts/github-installer-release-assets.sh --help >/dev/null
	scripts/publish-installer-r2.sh --help >/dev/null
	scripts/reconcile-installer-r2.sh --help >/dev/null
	scripts/verify-installer-release.sh --help >/dev/null
	scripts/test-center-install.sh
	scripts/test-runtime-network.sh
	scripts/test-center-uninstall.sh
	scripts/test-center-update.sh
	scripts/test-release-metadata.sh
	scripts/test-release-workflow.sh
	scripts/test-ci-workflows.sh
	scripts/test-publish-installer-r2.sh
	scripts/test-github-installer-release-assets.sh

security-check:
	gitleaks detect --no-git --redact --source .
	$(MAKE) dependency-security-check

dependency-security-check:
	$(MAKE) go-security-check
	$(MAKE) web-security-check

go-security-check:
	$(GO) run golang.org/x/vuln/cmd/govulncheck@$(GOVULNCHECK_VERSION) $(GO_PACKAGES)

web-security-check:
	cd web && npm audit --audit-level=high

agent-binaries:
	mkdir -p bin/agent-binaries
	CGO_ENABLED=0 GOOS=linux GOARCH=amd64 $(GO) build -trimpath -ldflags="-s -w" -o bin/agent-binaries/linux-amd64 ./cmd/vastora
	CGO_ENABLED=0 GOOS=linux GOARCH=arm64 $(GO) build -trimpath -ldflags="-s -w" -o bin/agent-binaries/linux-arm64 ./cmd/vastora

center-install-bundle:
	scripts/package-center-install.sh --version "$${VASTORA_VERSION:?set VASTORA_VERSION}" --image "$${VASTORA_CENTER_IMAGE:?set VASTORA_CENTER_IMAGE}" --output-dir dist

image-center:
	docker build --file Dockerfile.center --tag vastora-center:dev .

image-agent:
	docker build --file Dockerfile.agent --tag vastora-agent:dev .