Makefile

.PHONY: help
help: ## Display this help.
	@awk 'BEGIN {FS = ":.*##"; printf "\nUsage:\n  make \033[36m<target>\033[0m\n"} /^[a-zA-Z_0-9-]+:.*?##/ { printf "  \033[36m%-15s\033[0m %s\n", $$1, $$2 } /^##@/ { printf "\n\033[1m%s\033[0m\n", substr($$0, 5) } ' $(MAKEFILE_LIST)


.PHONY: install-go
install-go: ## Install Go dependencies
	go mod download

.PHONY: install-brew-tools
install-brew-tools: ## Install Homebrew tools if they don't exist
	@command -v tilt >/dev/null 2>&1 || { echo "Installing tilt..."; brew install tilt; }
	@command -v ctlptl >/dev/null 2>&1 || { echo "Installing ctlptl..."; brew install ctlptl; }
	@command -v minikube >/dev/null 2>&1 || { echo "Installing minikube..."; brew install minikube; }
	@command -v bazel >/dev/null 2>&1 || { echo "Installing bazel..."; brew install bazelisk; }
	@command -v dprint >/dev/null 2>&1 || { echo "Installing dprint..."; brew install dprint; }

.PHONY: install
install: install-go ## Install all dependencies
	pnpm --dir=web install --frozen-lockfile



.PHONY: generate-sql
generate-sql:
	@rm -rf ./web/internal/db/out
	@rm -f ./pkg/mysql/schema/*.sql
	@mkdir -p ./pkg/mysql/schema
	@cd web/internal/db && pnpm drizzle-kit generate --schema=src/schema/index.ts --dialect=mysql --out=out --name=init --breakpoints=true
	@awk -v dir=./pkg/mysql/schema 'BEGIN{RS="--> statement-breakpoint"} \
		/^[[:space:]]*$$/{next} \
		{ gsub(/^[[:space:]]+|[[:space:]]+$$/, ""); \
		  table=""; \
		  if ($$0 ~ /^CREATE TABLE/) { s=$$0; gsub(/^CREATE TABLE `/, "", s); gsub(/`.*/, "", s); table=s } \
		  else if ($$0 ~ /ON `/) { s=$$0; gsub(/.*ON `/, "", s); gsub(/`.*/, "", s); table=s } \
		  if (table != "") { f=dir "/" table ".sql"; print $$0 "\n" >> f } }' \
		./web/internal/db/out/0000_init.sql
	@rm -rf ./web/internal/db/out


.PHONY: nuke-docker
nuke-docker: ## Stop all containers and clean up Docker system
	docker stop $$(docker ps -aq)
	docker system prune -af
	docker volume prune --all -f



.PHONY: fmt-yaml
fmt-yaml: ## Format YAML files
	dprint fmt --config dev/dprint.json

.PHONY: fmt
fmt: fmt-yaml ## Format code
	go fmt ./...
	go tool buf format -w

	pnpm --dir=web fmt

.PHONY: pull
pull: ## Pull latest Docker images for services
	@docker compose -f ./dev/docker-compose.yaml pull

.PHONY: up
up: pull ## Start all infrastructure services
	@docker compose -f ./dev/docker-compose.yaml up -d planetscale mysql redis clickhouse s3 otel restate ctrl-api --wait

.PHONY: clean
clean: ## Stop and remove all services with volumes
	@docker compose -f ./dev/docker-compose.yaml down --volumes

.PHONY: build-web
build-web: ## Build web services
	pnpm --dir=web build

.PHONY: build
build:  ## Build all artifacts
	bazel build //...

.PHONY: bazel
bazel: ## Sync BUILD.bazel
	bazel mod tidy
	bazel run //:gazelle

.PHONY: generate
generate: generate-sql ## Generate code from protobuf and other sources
	rm -rf ./gen || true
	rm ./pkg/db/*_generated.go || true
	go generate ./...
	go run ./tools/exportoneof ./gen/proto
	bazel run //:gazelle
	go fmt ./...
	pnpm --dir=web fmt

.PHONY: test
test: oci-load ## Run tests with bazel
	docker compose -f ./dev/docker-compose.yaml up -d mysql clickhouse s3 vault --wait
	bazel test //...
	make clean-docker-test

.PHONY: clean-docker-test
clean-docker-test: ## Clean up dangling test containers
	@docker rm -vf $$(docker ps -q -f label="owner=dockertest") > /dev/null 2>&1 || true

.PHONY: tunnel
tunnel: ## Forward ports 80/443 to frontline for *.unkey.local (run in separate terminal)
	@sudo -v && ( while sudo -n true 2>/dev/null; do sleep 50; done & ) && while true; do sudo kubectl port-forward -n unkey svc/frontline 443:443 80:80 2>/dev/null; echo "port-forward exited, reconnecting..."; sleep 1; done

.PHONY: dev
dev: ## Start dev environment
	@# Make sure you have ./dev/.env.depot populated, or you will get some funny errors
	@# we're working on making this optional soon

	@ctlptl apply -f ./dev/cluster.yaml
	@minikube addons enable metrics-server
	@tilt up -f ./dev/Tiltfile

.PHONY: down
down: ## Stop tilt (keeps cluster)
	@tilt down -f ./dev/Tiltfile

.PHONY: nuke
nuke: ## Delete minikube cluster entirely
	@minikube delete

.PHONY: oci-load
oci-load: build ## Build and load OCI images into Docker
	bazel run //:oci_load_unkey

.PHONY: local-dashboard
local-dashboard: install oci-load ## Run local development setup for dashboard
	pnpm --dir=web/apps/dashboard local

.PHONY: build-local-image
build-local-image: ## Build and push image to local registry (usage: make build-local-image DOCKERFILE=./path/to/Dockerfile NAME=myapp TAG=latest)
	@if [ -z "$(DOCKERFILE)" ]; then echo "Error: DOCKERFILE is required (e.g., DOCKERFILE=./examples/demo_api/Dockerfile)"; exit 1; fi
	@if [ -z "$(NAME)" ]; then echo "Error: NAME is required (e.g., NAME=demo_api)"; exit 1; fi
	$(eval TAG ?= latest)
	$(eval CONTEXT ?= $(dir $(DOCKERFILE)))
	$(eval REGISTRY := $(shell kubectl get configmap local-registry-hosting -n kube-public -o jsonpath='{.data.localRegistryHosting\.v1}' 2>/dev/null | grep '^host:' | awk '{print $$2}'))
	@if [ -z "$(REGISTRY)" ]; then echo "Error: Could not find local registry. Is minikube running with ctlptl?"; exit 1; fi
	@echo "Building $(NAME):$(TAG) from $(DOCKERFILE) (context: $(CONTEXT))"
	@echo "Pushing to $(REGISTRY)/$(NAME):$(TAG)"
	docker build -t $(REGISTRY)/$(NAME):$(TAG) -f $(DOCKERFILE) $(CONTEXT)
	docker push $(REGISTRY)/$(NAME):$(TAG)
	@echo ""
	@echo "Image pushed successfully!"
	@echo "Use in pod spec: ctlptl-registry:5000/$(NAME):$(TAG)"

.PHONY: fuzz
fuzz: ## Run fuzz tests
	@files=$$(grep -r --include='*_test.go' -l 'func Fuzz' .); \
	for file in $$files; do \
		funcs=$$(grep -oE 'func (Fuzz[a-zA-Z0-9_]*)' $$file | sed 's/func //'); \
		for func in $$funcs; do \
			echo "Fuzzing $$func in $$file"; \
			parentDir=$$(dirname $$file); \
			go test $$parentDir -run=^$$func$$ -fuzz=^$$func$$ -fuzztime=1m; \
		done; \
	done
.PHONY: unkey
unkey: ## Run unkey CLI (usage: make unkey dev seed local, make unkey run api ARGS="--http-port=7070")
	@set -a; [ -f .env ] && . ./.env; set +a; bazel run --ui_event_filters=-info --noshow_progress //:unkey -- $(filter-out unkey,$(MAKECMDGOALS)) $(ARGS)

# Catch-all to swallow extra args passed to unkey target (only when unkey is called)
ifneq ($(filter unkey,$(MAKECMDGOALS)),)
%:
	@:
endif