Makefile

# =============================================================================
# Sockudo Docker Management Makefile
# =============================================================================

# Default environment
ENV ?= dev
COMPOSE_FILE ?= docker-compose.yml
COMPOSE_DASHBOARD ?= docker-compose.dashboard.yml
PROJECT_NAME ?= sockudo

# Deterministic simulator defaults. Override on the command line, e.g.
# `make simulator SIM_SEED=42 SIM_TICKS=10000`.
SIM_SEED ?= 12648430
SIM_TICKS ?= 5000
SIM_ARGS ?=

# Manual outside-in binary chaos defaults. Override on the command line, e.g.
# `make binary-chaos CHAOS_SEED=42 CHAOS_DURATION_MS=15000`.
CHAOS_SEED ?= 12648430
CHAOS_DURATION_MS ?= 12000
CHAOS_FEATURES ?= v2
CHAOS_SERVER_BIN ?= target/debug/sockudo
CHAOS_ARGS ?=
CHAOS_PUSH_FEATURES ?= v2,monolith,push-fcm
CHAOS_PUSH_ARGS ?= --push-provider-profile flaky --exercise-push true --require-push-provider-hit true

# Outside-in distributed correctness defaults. The old and new paths must be
# separately built packages; the harness rejects identical binary hashes.
DISTRIBUTED_CHAOS_SEED ?= 12648430
DISTRIBUTED_CHAOS_DURATION_MS ?= 120000
DISTRIBUTED_CHAOS_OLD_BIN ?= sockudo-compatibility/.cache/sockudo/target/debug/sockudo
DISTRIBUTED_CHAOS_NEW_BIN ?= target/debug/sockudo
DISTRIBUTED_CHAOS_ARGS ?=

# Compose file set per environment (dashboard included for dev/prod)
ifeq ($(ENV),dev)
COMPOSE_ARGS := -f $(COMPOSE_FILE) -f docker-compose.dev.yml -f $(COMPOSE_DASHBOARD)
else ifeq ($(ENV),prod)
COMPOSE_ARGS := -f $(COMPOSE_FILE) -f docker-compose.prod.yml -f $(COMPOSE_DASHBOARD)
else
COMPOSE_ARGS := -f $(COMPOSE_FILE)
endif

# Color codes for output
RED    := \033[31m
GREEN  := \033[32m
YELLOW := \033[33m
BLUE   := \033[34m
RESET  := \033[0m

# Default target
.DEFAULT_GOAL := help

# =============================================================================
# Help
# =============================================================================

.PHONY: help
help: ## Show this help message
	@echo "$(BLUE)Sockudo Docker Management$(RESET)"
	@echo ""
	@echo "$(YELLOW)Usage:$(RESET)"
	@echo "  make [target] [ENV=dev|prod]"
	@echo ""
	@echo "$(YELLOW)Targets:$(RESET)"
	@awk 'BEGIN {FS = ":.*?## "} /^[a-zA-Z_-]+:.*?## / {printf "  $(GREEN)%-20s$(RESET) %s\n", $$1, $$2}' $(MAKEFILE_LIST)

# =============================================================================
# Environment Setup
# =============================================================================

.PHONY: setup
setup: ## Initial setup (create .env, directories)
	@echo "$(BLUE)Setting up Sockudo development environment...$(RESET)"
	@if [ ! -f .env ]; then \
		echo "$(YELLOW)Creating .env file from template...$(RESET)"; \
		cp .env.example .env; \
	fi
	@mkdir -p config logs ssl scripts/backup
	@chmod +x setup.sh
	@echo "$(GREEN)Setup complete!$(RESET)"
	@echo "$(YELLOW)Please edit .env file with your configuration$(RESET)"

.PHONY: check-env
check-env: ## Check if required environment files exist
	@if [ ! -f .env ]; then \
		echo "$(RED)Error: .env file not found. Run 'make setup' first.$(RESET)"; \
		exit 1; \
	fi
	@if [ ! -f config/config.json ]; then \
		echo "$(YELLOW)Warning: config/config.json not found. Using defaults.$(RESET)"; \
	fi

# =============================================================================
# Build and Development
# =============================================================================

.PHONY: build
build: check-env ## Build all Docker images (includes dashboard for dev/prod)
	@echo "$(BLUE)Building Sockudo Docker images...$(RESET)"
	@docker-compose $(COMPOSE_ARGS) build
	@echo "$(GREEN)Build complete!$(RESET)"

.PHONY: dev
dev: ## Start development environment
	@echo "$(BLUE)Starting Sockudo development environment...$(RESET)"
	@make ENV=dev up
	@echo "$(GREEN)Development environment started!$(RESET)"
	@echo "$(YELLOW)WebSocket Server: http://localhost:6001$(RESET)"
	@echo "$(YELLOW)Metrics: http://localhost:9601/metrics$(RESET)"
	@echo "$(YELLOW)Dashboard UI: http://localhost:5174$(RESET)"
	@echo "$(YELLOW)Dashboard API: http://localhost:3460$(RESET)"
	@echo "$(YELLOW)Redis Commander: http://localhost:8081$(RESET)"
	@echo "$(YELLOW)PHPMyAdmin: http://localhost:8080$(RESET)"

.PHONY: prod
prod: ## Start production environment
	@echo "$(BLUE)Starting Sockudo production environment...$(RESET)"
	@make ENV=prod up
	@echo "$(GREEN)Production environment started!$(RESET)"
	@echo "$(YELLOW)WebSocket Server: https://localhost:443$(RESET)"
	@echo "$(YELLOW)Metrics: http://localhost:9601/metrics$(RESET)"
	@echo "$(YELLOW)Prometheus: http://localhost:9090$(RESET)"
	@echo "$(YELLOW)Grafana: http://localhost:3000$(RESET)"
	@echo "$(YELLOW)Dashboard UI: http://localhost:5174$(RESET)"
	@echo "$(YELLOW)Dashboard API: http://localhost:3460$(RESET)"

# =============================================================================
# Container Management
# =============================================================================

.PHONY: up
up: check-env ## Start services (includes dashboard for dev/prod)
	@echo "$(BLUE)Starting services ($(ENV) environment)...$(RESET)"
	@docker-compose $(COMPOSE_ARGS) up -d

.PHONY: down
down: ## Stop and remove services
	@echo "$(BLUE)Stopping services...$(RESET)"
	@docker-compose $(COMPOSE_ARGS) down

.PHONY: restart
restart: down up ## Restart all services

.PHONY: stop
stop: ## Stop services without removing
	@echo "$(BLUE)Stopping services...$(RESET)"
	@docker-compose $(COMPOSE_ARGS) stop

.PHONY: start
start: ## Start stopped services
	@echo "$(BLUE)Starting services...$(RESET)"
	@docker-compose $(COMPOSE_ARGS) start

# =============================================================================
# Monitoring and Logs
# =============================================================================

.PHONY: status
status: ## Show service status
	@echo "$(BLUE)Service Status:$(RESET)"
	@docker-compose $(COMPOSE_ARGS) ps

.PHONY: logs
logs: ## Show logs for all services
	@docker-compose $(COMPOSE_ARGS) logs -f

.PHONY: logs-sockudo
logs-sockudo: ## Show Sockudo service logs
	@docker-compose $(COMPOSE_ARGS) logs -f sockudo

.PHONY: logs-redis
logs-redis: ## Show Redis logs
	@docker-compose $(COMPOSE_ARGS) logs -f redis

.PHONY: logs-dashboard
logs-dashboard: ## Show dashboard API and web logs
	@docker-compose $(COMPOSE_ARGS) logs -f dashboard-api dashboard-web

.PHONY: health
health: ## Check health of all services
	@echo "$(BLUE)Health Check Results:$(RESET)"
	@docker-compose $(COMPOSE_ARGS) ps --format "table {{.Name}}\t{{.Status}}\t{{.Ports}}"

# =============================================================================
# Testing and Debugging
# =============================================================================

.PHONY: test
test: ## Run basic connectivity tests
	@echo "$(BLUE)Running connectivity tests...$(RESET)"
	@echo "$(YELLOW)Testing WebSocket endpoint...$(RESET)"
	@curl -f http://localhost:6001/up/demo-app || echo "$(RED)WebSocket test failed$(RESET)"
	@echo "$(YELLOW)Testing metrics endpoint...$(RESET)"
	@curl -f http://localhost:9601/metrics || echo "$(RED)Metrics test failed$(RESET)"
	@echo "$(YELLOW)Testing Redis connection...$(RESET)"
	@docker-compose $(COMPOSE_ARGS) exec -T redis redis-cli ping || echo "$(RED)Redis test failed$(RESET)"
	@echo "$(YELLOW)Testing dashboard API...$(RESET)"
	@curl -f http://localhost:3460/health || echo "$(RED)Dashboard API test failed$(RESET)"
	@echo "$(YELLOW)Testing dashboard UI...$(RESET)"
	@curl -f http://localhost:5174/ || echo "$(RED)Dashboard UI test failed$(RESET)"

.PHONY: presence-bench-guard
presence-bench-guard: ## Require authoritative presence to beat legacy single/parallel cycles
	@scripts/presence-bench-guard.sh

.PHONY: ably-compat-bench
ably-compat-bench: ## Run production-path Ably codec, projection, replay, and fanout Criterion groups
	@cargo bench -p sockudo-ably-compat --features bench --bench compatibility_hot_paths -- --noplot $(ARGS)

.PHONY: ably-compat-capacity-smoke
ably-compat-capacity-smoke: ## Start real one/two-node Sockudo topologies and run the representative Ably capacity smoke
	@node tests/load/ably-compat/capacity-runner.mjs \
		--profile tests/load/ably-compat/profiles/smoke.json \
		--binary target/debug/sockudo --execute $(ARGS)

.PHONY: ably-compat-capacity-plan
ably-compat-capacity-plan: ## Print the one/two-node release capacity plan without treating it as evidence
	@node tests/load/ably-compat/capacity-runner.mjs \
		--profile tests/load/ably-compat/profiles/release.json $(ARGS)

.PHONY: simulator
simulator: ## Run deterministic indestructibility simulator (override SIM_SEED/SIM_TICKS/SIM_ARGS)
	@echo "$(BLUE)Running Sockudo deterministic simulator seed=$(SIM_SEED) ticks=$(SIM_TICKS)...$(RESET)"
	@cargo run -p sockudo-simulator --bin sockudo-sim -- --seed $(SIM_SEED) --ticks $(SIM_TICKS) $(SIM_ARGS)

.PHONY: simulator-upgrade
simulator-upgrade: ## Run deterministic rolling-upgrade risk simulator (manual local replay)
	@echo "$(BLUE)Running Sockudo upgrade-risk simulator seed=$(SIM_SEED) ticks=$(SIM_TICKS)...$(RESET)"
	@cargo run -p sockudo-simulator --bin sockudo-sim -- \
		--seed $(SIM_SEED) \
		--ticks $(SIM_TICKS) \
		--upgrade-risk-profile \
		--upgrade-require-coverage \
		$(SIM_ARGS)

.PHONY: simulator-disaster
simulator-disaster: ## Run disaster-heavy deterministic simulator profile with JSON output
	@echo "$(BLUE)Running Sockudo disaster simulator seed=$(SIM_SEED) ticks=$(SIM_TICKS)...$(RESET)"
	@cargo run -p sockudo-simulator --bin sockudo-sim -- \
		--seed $(SIM_SEED) \
		--ticks $(SIM_TICKS) \
		--nodes 9 \
		--drop-prob 0.14 \
		--duplicate-prob 0.08 \
		--crash-prob 0.006 \
		--pause-prob 0.006 \
		--partition-prob 0.008 \
		--slow-prob 0.010 \
		--stale-prob 0.006 \
		--queue-produce-lost-prob 0.050 \
		--queue-ack-lost-prob 0.030 \
		--queue-lease-timeout-prob 0.025 \
		--write-fail-before-commit-prob 0.020 \
		--write-fail-after-commit-prob 0.015 \
		--response-lost-prob 0.020 \
		--storage-drop-write-prob 0.020 \
		--storage-torn-write-prob 0.014 \
		--storage-stale-read-prob 0.030 \
		--storage-corrupt-read-prob 0.010 \
		--storage-delayed-commit-prob 0.025 \
		--storage-max-commit-delay-ticks 18 \
		--provider-retryable-prob 0.180 \
		--provider-reject-prob 0.070 \
		--provider-invalid-token-prob 0.050 \
		--provider-lost-response-prob 0.040 \
		--json \
		$(SIM_ARGS)

.PHONY: simulator-swarm
simulator-swarm: ## Run deterministic swarm profile derived from SIM_SEED
	@echo "$(BLUE)Running Sockudo simulator swarm seed=$(SIM_SEED) ticks=$(SIM_TICKS)...$(RESET)"
	@cargo run -p sockudo-simulator --bin sockudo-sim -- \
		--seed $(SIM_SEED) \
		--ticks $(SIM_TICKS) \
		--swarm \
		$(SIM_ARGS)

.PHONY: simulator-liveness
simulator-liveness: ## Run simulator liveness mode with deterministic swarm faults
	@echo "$(BLUE)Running Sockudo simulator liveness seed=$(SIM_SEED) ticks=$(SIM_TICKS)...$(RESET)"
	@cargo run -p sockudo-simulator --bin sockudo-sim -- \
		--seed $(SIM_SEED) \
		--ticks $(SIM_TICKS) \
		--mode liveness \
		--swarm \
		$(SIM_ARGS)

.PHONY: binary-chaos
binary-chaos: ## Run manual outside-in binary chaos harness (local only; override CHAOS_ARGS)
	@echo "$(BLUE)Building Sockudo for manual outside-in binary chaos...$(RESET)"
	@cargo build -p sockudo --features "$(CHAOS_FEATURES)"
	@echo "$(BLUE)Running outside-in binary chaos seed=$(CHAOS_SEED) durationMs=$(CHAOS_DURATION_MS)...$(RESET)"
	@node tools/chaos/sockudo-binary-chaos.mjs \
		--seed $(CHAOS_SEED) \
		--duration-ms $(CHAOS_DURATION_MS) \
		--server-bin $(CHAOS_SERVER_BIN) \
		$(CHAOS_ARGS)

.PHONY: binary-chaos-push
binary-chaos-push: ## Run manual outside-in binary chaos with fake FCM provider outcomes (local only)
	@$(MAKE) binary-chaos CHAOS_FEATURES="$(CHAOS_PUSH_FEATURES)" CHAOS_ARGS="$(CHAOS_PUSH_ARGS) $(CHAOS_ARGS)"

.PHONY: distributed-correctness-chaos
distributed-correctness-chaos: ## Roll two real binaries under load, partition Redis, kill a presence owner, and audit durable state
	@test -x "$(DISTRIBUTED_CHAOS_OLD_BIN)" || { echo "Missing executable old binary: $(DISTRIBUTED_CHAOS_OLD_BIN)" >&2; exit 1; }
	@docker compose -f docker-compose.test.yml up -d redis-test postgres-test
	@cargo build -p sockudo --features "v2,redis,postgres"
	@node tools/chaos/distributed-correctness.mjs \
		--seed $(DISTRIBUTED_CHAOS_SEED) \
		--duration-ms $(DISTRIBUTED_CHAOS_DURATION_MS) \
		--old-bin "$(DISTRIBUTED_CHAOS_OLD_BIN)" \
		--new-bin "$(DISTRIBUTED_CHAOS_NEW_BIN)" $(DISTRIBUTED_CHAOS_ARGS)

.PHONY: sentinel-tls-up
sentinel-tls-up: ## Start the opt-in Redis Sentinel + TLS test fixture
	@echo "$(BLUE)Generating Sentinel TLS test certificates...$(RESET)"
	@tests/sentinel-tls/generate-certs.sh
	@echo "$(BLUE)Starting Redis Sentinel + TLS fixture...$(RESET)"
	@docker-compose -f docker-compose.test.yml --profile sentinel-tls up -d
	@echo "$(GREEN)Sentinel fixture up. Sentinels (TLS): localhost:26379-26381$(RESET)"
	@echo "$(YELLOW)If the master hop cannot be resolved from the host, add$(RESET)"
	@echo "$(YELLOW)  127.0.0.1 host.docker.internal$(RESET)"
	@echo "$(YELLOW)to /etc/hosts. See tests/sentinel-tls/README.md.$(RESET)"

.PHONY: sentinel-tls-down
sentinel-tls-down: ## Stop the Redis Sentinel + TLS test fixture
	@echo "$(BLUE)Stopping Redis Sentinel + TLS fixture...$(RESET)"
	@docker-compose -f docker-compose.test.yml --profile sentinel-tls down -v

.PHONY: sentinel-tls-test
sentinel-tls-test: ## Run the gated live Sentinel TLS integration tests against the fixture
	@# Absolute cert paths: `cargo test -p` runs the binary with CWD set to the
	@# crate directory, not the workspace root, so relative paths would not resolve.
	@SOCKUDO_SENTINEL_TLS=1 SOCKUDO_MASTER_TLS=1 \
		SOCKUDO_REDIS_PASSWORD=masterpass \
		SOCKUDO_TLS_CA_PATH=$(CURDIR)/tests/sentinel-tls/certs/ca.crt \
		SOCKUDO_TLS_CLIENT_CERT_PATH=$(CURDIR)/tests/sentinel-tls/certs/client.crt \
		SOCKUDO_TLS_CLIENT_KEY_PATH=$(CURDIR)/tests/sentinel-tls/certs/client.key \
		cargo test -p sockudo-adapter --features redis --test redis_sentinel_live -- --ignored --nocapture

.PHONY: unix-socket-up
unix-socket-up: ## Start Unix socket test environment with Nginx proxy
	@echo "$(BLUE)Starting Unix socket test environment...$(RESET)"
	@docker-compose -f docker-compose.unix-socket.yml up -d --build
	@echo "$(GREEN)Unix socket test environment started!$(RESET)"
	@echo "$(YELLOW)Nginx HTTP proxy: http://localhost:82$(RESET)"
	@echo "$(YELLOW)Nginx HTTPS proxy: https://localhost:444$(RESET)"
	@echo "$(YELLOW)Client interface: http://localhost:82/client$(RESET)"
	@echo "$(YELLOW)Direct metrics: http://localhost:9601/metrics$(RESET)"

.PHONY: unix-socket-down
unix-socket-down: ## Stop Unix socket test environment
	@echo "$(BLUE)Stopping Unix socket test environment...$(RESET)"
	@docker-compose -f docker-compose.unix-socket.yml down -v

.PHONY: unix-socket-logs
unix-socket-logs: ## Show logs from Unix socket test environment
	@docker-compose -f docker-compose.unix-socket.yml logs -f

.PHONY: unix-socket-test
unix-socket-test: ## Test Unix socket connectivity through Nginx
	@echo "$(BLUE)Testing Unix socket connectivity...$(RESET)"
	@echo "$(YELLOW)Testing HTTP proxy health endpoint...$(RESET)"
	@curl -f http://localhost:82/health || echo "$(RED)Nginx health check failed$(RESET)"
	@echo "$(YELLOW)Testing Sockudo through Unix socket (HTTP)...$(RESET)"
	@curl -f http://localhost:82/up/test-app || echo "$(RED)Unix socket HTTP test failed$(RESET)"
	@echo "$(YELLOW)Testing Sockudo through Unix socket (HTTPS)...$(RESET)"
	@curl -kf https://localhost:444/up/test-app || echo "$(RED)Unix socket HTTPS test failed$(RESET)"
	@echo "$(YELLOW)Testing direct metrics endpoint...$(RESET)"
	@curl -f http://localhost:9601/metrics || echo "$(RED)Direct metrics test failed$(RESET)"

.PHONY: unix-socket-shell
unix-socket-shell: ## Access Unix socket container shell
	@docker-compose -f docker-compose.unix-socket.yml exec sockudo-unix-socket bash

.PHONY: unix-socket-supervisorctl
unix-socket-supervisorctl: ## Access supervisor control in Unix socket container
	@docker-compose -f docker-compose.unix-socket.yml exec sockudo-unix-socket supervisorctl

.PHONY: shell-sockudo
shell-sockudo: ## Access Sockudo container shell
	@docker-compose $(COMPOSE_ARGS) exec sockudo sh

.PHONY: shell-redis
shell-redis: ## Access Redis CLI
	@docker-compose $(COMPOSE_ARGS) exec redis redis-cli

.PHONY: debug
debug: ## Show debug information
	@echo "$(BLUE)Debug Information:$(RESET)"
	@echo "$(YELLOW)Docker version:$(RESET)"
	@docker --version
	@echo "$(YELLOW)Docker Compose version:$(RESET)"
	@docker-compose --version
	@echo "$(YELLOW)Environment: $(ENV)$(RESET)"
	@echo "$(YELLOW)Running containers:$(RESET)"
	@docker ps --format "table {{.Names}}\t{{.Status}}\t{{.Ports}}"

# =============================================================================
# Maintenance
# =============================================================================

.PHONY: clean
clean: ## Clean up containers, networks, and volumes
	@echo "$(BLUE)Cleaning up Docker resources...$(RESET)"
	@docker-compose $(COMPOSE_ARGS) down -v
	@docker system prune -f
	@echo "$(GREEN)Cleanup complete!$(RESET)"

.PHONY: clean-all
clean-all: ## Clean everything including images
	@echo "$(RED)Warning: This will remove all containers, networks, volumes, and images!$(RESET)"
	@read -p "Are you sure? (y/N): " confirm; \
	if [ "$$confirm" = "y" ] || [ "$$confirm" = "Y" ]; then \
		docker-compose $(COMPOSE_ARGS) down -v --rmi all; \
		docker system prune -af; \
		echo "$(GREEN)Complete cleanup finished!$(RESET)"; \
	else \
		echo "$(YELLOW)Cleanup cancelled.$(RESET)"; \
	fi

.PHONY: update
update: ## Update all Docker images
	@echo "$(BLUE)Updating Docker images...$(RESET)"
	@docker-compose $(COMPOSE_ARGS) pull
	@make build
	@echo "$(GREEN)Update complete!$(RESET)"

.PHONY: backup
backup: ## Backup data volumes
	@echo "$(BLUE)Creating backup...$(RESET)"
	@mkdir -p backups
	@docker run --rm -v sockudo_redis-data:/data -v $(PWD)/backups:/backup alpine tar czf /backup/redis-backup-$(shell date +%Y%m%d-%H%M%S).tar.gz -C /data .
	@if docker-compose $(COMPOSE_ARGS) ps | grep -q mysql; then \
		docker-compose $(COMPOSE_ARGS) exec -T mysql mysqldump -u sockudo -psockudo123 sockudo > backups/mysql-backup-$(shell date +%Y%m%d-%H%M%S).sql; \
	fi
	@echo "$(GREEN)Backup complete! Files saved to backups/$(RESET)"

.PHONY: restore
restore: ## Restore from backup (requires BACKUP_FILE variable)
	@if [ -z "$(BACKUP_FILE)" ]; then \
		echo "$(RED)Error: Please specify BACKUP_FILE variable$(RESET)"; \
		echo "$(YELLOW)Usage: make restore BACKUP_FILE=backups/redis-backup-20231201-120000.tar.gz$(RESET)"; \
		exit 1; \
	fi
	@echo "$(BLUE)Restoring from $(BACKUP_FILE)...$(RESET)"
	@docker run --rm -v sockudo_redis-data:/data -v $(PWD)/backups:/backup alpine tar xzf /backup/$(notdir $(BACKUP_FILE)) -C /data
	@echo "$(GREEN)Restore complete!$(RESET)"

# =============================================================================
# Scaling and Performance
# =============================================================================

.PHONY: scale
scale: ## Scale Sockudo instances (requires REPLICAS variable)
	@if [ -z "$(REPLICAS)" ]; then \
		echo "$(RED)Error: Please specify REPLICAS variable$(RESET)"; \
		echo "$(YELLOW)Usage: make scale REPLICAS=3$(RESET)"; \
		exit 1; \
	fi
	@echo "$(BLUE)Scaling Sockudo to $(REPLICAS) instances...$(RESET)"
	@docker-compose $(COMPOSE_ARGS) up -d --scale sockudo=$(REPLICAS)
	@echo "$(GREEN)Scaling complete!$(RESET)"

.PHONY: stats
stats: ## Show container resource usage
	@echo "$(BLUE)Container Resource Usage:$(RESET)"
	@docker stats --no-stream --format "table {{.Container}}\t{{.CPUPerc}}\t{{.MemUsage}}\t{{.NetIO}}\t{{.BlockIO}}"

.PHONY: benchmark
benchmark: ## Run basic performance benchmark
	@echo "$(BLUE)Running performance benchmark...$(RESET)"
	@echo "$(YELLOW)WebSocket connection test...$(RESET)"
	@for i in $(seq 1 10); do \
		curl -w "Time: %{time_total}s\n" -s -o /dev/null http://localhost:6001/up/demo-app; \
	done
	@echo "$(GREEN)Benchmark complete!$(RESET)"

.PHONY: ai-scale-up
ai-scale-up: ## Start the five-node AI Transport scale rig
	@docker compose -f docker-compose.ai-transport.yml -f test/load/docker-compose.ai-transport-scale.yml up -d --build

.PHONY: ai-scale-down
ai-scale-down: ## Stop the AI Transport scale rig
	@docker compose -f docker-compose.ai-transport.yml -f test/load/docker-compose.ai-transport-scale.yml down

.PHONY: ai-scale-smoke
ai-scale-smoke: ## Run executable AI Transport scale smoke (override ARGS="--durationSeconds 30")
	@node test/load/ai-scale-runner.mjs --profile test/load/profiles/smoke.json $(ARGS)

.PHONY: ai-scale-headline-plan
ai-scale-headline-plan: ## Print the 1M-connection AI Transport fleet plan
	@node test/load/ai-scale-runner.mjs --profile test/load/profiles/headline-1m.json --plan $(ARGS)

.PHONY: ai-scale-soak-plan
ai-scale-soak-plan: ## Print the 24h 20 percent AI Transport soak plan
	@node test/load/ai-scale-runner.mjs --profile test/load/profiles/soak-20pct.json --plan $(ARGS)

.PHONY: ai-chaos
ai-chaos: ## Run AI Transport local chaos scenarios (override ARGS="node-kill")
	@tools/chaos/ai-chaos-runner.sh $(ARGS)

.PHONY: ai-ga-evidence
ai-ga-evidence: ## Check deterministic AI Transport GA readiness evidence
	@scripts/ai-transport-ga-gate.sh ci-evidence

.PHONY: ai-ga-release-evidence
ai-ga-release-evidence: ## Check final AI Transport GA evidence manifests
	@scripts/ai-transport-ga-gate.sh release-evidence

.PHONY: ai-s14-release-evidence
ai-s14-release-evidence: ## Run external-fleet S14 AI Transport release evidence profiles
	@scripts/ai-transport-s14-release-evidence.sh

.PHONY: ai-rolling-upgrade-evidence
ai-rolling-upgrade-evidence: ## Record shared-Redis rolling-upgrade evidence (pass ARGS for hooks)
	@node scripts/ai-transport-rolling-upgrade-redis.mjs $(ARGS)

.PHONY: sdk-compat-full-matrix
sdk-compat-full-matrix: ## Record full SDK compatibility matrix (pass ARGS="--execute" to run)
	@node scripts/sdk-compat-full-matrix.mjs $(ARGS)

.PHONY: ai-ga-matrix
ai-ga-matrix: ## Run AI Transport release feature matrix locally
	@scripts/ai-transport-ga-gate.sh matrix

.PHONY: ai-docker-builds
ai-docker-builds: ## Build Docker images with and without AI Transport
	@docker build --target runtime --build-arg SOCKUDO_FEATURES="v2,redis,postgres" -t sockudo:without-ai .
	@docker build --target runtime --build-arg SOCKUDO_FEATURES="v2,ai-transport,redis,postgres" -t sockudo:with-ai .

.PHONY: ably-compat-test
ably-compat-test: ## Run Ably Pub/Sub subset smoke tests against Sockudo built with ably-compat
	@cd tests/ably-compat && npm ci --silent && npm run test

.PHONY: ably-protocol-discovery
ably-protocol-discovery: ## Probe broader stock ably-js protocol compatibility and report current gaps
	@cd tests/ably-compat && npm ci --silent && npx playwright install chromium >/dev/null && npm run protocol:discovery

.PHONY: ably-ai-transport-test
ably-ai-transport-test: ## Run stock @ably/ai-transport smoke test against Sockudo built with ably-compat
	@cd tests/ably-compat && npm ci --silent && npm run ait:chat

.PHONY: ably-ai-demo
ably-ai-demo: ## Run headless Ably AI Transport demos against Sockudo built with ably-compat
	@cd tests/ably-compat && npm ci --silent && npm run demo:chat && npm run demo:recovery-history

.PHONY: push-benchmark
push-benchmark: ## Run push notification admission benchmark (override ARGS="--mode all --devices 10000")
	@node scripts/push-benchmark.mjs $(ARGS)

.PHONY: push-benchmark-scenarios
push-benchmark-scenarios: ## Print or execute push benchmark scenario suite (default dry-run; pass ARGS="--execute")
	@node scripts/push-benchmark-scenarios.mjs $(ARGS)

.PHONY: push-benchmark-internal
push-benchmark-internal: ## Run internal Criterion push pipeline benchmarks
	@cargo bench -p sockudo-push --bench push_pipeline_bench --features testing

.PHONY: push-mock-provider
push-mock-provider: ## Start mock push provider for throttling/failure simulations
	@node scripts/push-mock-provider.mjs $(ARGS)

.PHONY: push-provider-canary
push-provider-canary: ## Run bounded real-provider push canary (dry-run unless ARGS includes --execute)
	@node scripts/push-provider-canary.mjs $(ARGS)

# =============================================================================
# SSL and Security
# =============================================================================

.PHONY: generate-ssl
generate-ssl: ## Generate self-signed SSL certificates for development
	@echo "$(BLUE)Generating self-signed SSL certificates...$(RESET)"
	@mkdir -p ssl
	@openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
		-keyout ssl/key.pem \
		-out ssl/cert.pem \
		-subj "/C=US/ST=State/L=City/O=Organization/CN=localhost"
	@echo "$(GREEN)SSL certificates generated in ssl/ directory$(RESET)"

.PHONY: security-scan
security-scan: ## Run security scan on Docker images
	@echo "$(BLUE)Running security scan...$(RESET)"
	@if command -v trivy >/dev/null 2>&1; then \
		trivy image sockudo:latest; \
	else \
		echo "$(YELLOW)Trivy not installed. Install with: curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin$(RESET)"; \
	fi

# =============================================================================
# Monitoring and Alerts
# =============================================================================

.PHONY: metrics
metrics: ## Show current metrics
	@echo "$(BLUE)Current Metrics:$(RESET)"
	@curl -s http://localhost:9601/metrics | head -20

.PHONY: alerts
alerts: ## Check for common issues
	@echo "$(BLUE)System Health Check:$(RESET)"
	@echo "$(YELLOW)Checking disk space...$(RESET)"
	@df -h | grep -E "(/$|/var/lib/docker)"
	@echo "$(YELLOW)Checking memory usage...$(RESET)"
	@free -h
	@echo "$(YELLOW)Checking container health...$(RESET)"
	@docker-compose $(COMPOSE_ARGS) ps --format "table {{.Name}}\t{{.Status}}"

# =============================================================================
# Development Tools
# =============================================================================

.PHONY: format
format: ## Format configuration files
	@echo "$(BLUE)Formatting configuration files...$(RESET)"
	@if command -v jq >/dev/null 2>&1; then \
		jq '.' config/config.json > config/config.json.tmp && mv config/config.json.tmp config/config.json; \
		echo "$(GREEN)JSON files formatted$(RESET)"; \
	else \
		echo "$(YELLOW)jq not installed, skipping JSON formatting$(RESET)"; \
	fi

.PHONY: validate
validate: ## Validate configuration files
	@echo "$(BLUE)Validating configuration...$(RESET)"
	@docker-compose $(COMPOSE_ARGS) config >/dev/null && echo "$(GREEN)Compose stack is valid$(RESET)" || echo "$(RED)Compose stack has errors$(RESET)"
	@if [ -f config/config.json ]; then \
		if command -v jq >/dev/null 2>&1; then \
			jq empty config/config.json && echo "$(GREEN)config.json is valid$(RESET)" || echo "$(RED)config.json has errors$(RESET)"; \
		else \
			echo "$(YELLOW)jq not installed, skipping JSON validation$(RESET)"; \
		fi \
	fi

.PHONY: install-tools
install-tools: ## Install development tools
	@echo "$(BLUE)Installing development tools...$(RESET)"
	@if command -v apt-get >/dev/null 2>&1; then \
		sudo apt-get update && sudo apt-get install -y jq curl wget; \
	elif command -v yum >/dev/null 2>&1; then \
		sudo yum install -y jq curl wget; \
	elif command -v brew >/dev/null 2>&1; then \
		brew install jq curl wget; \
	else \
		echo "$(YELLOW)Package manager not detected. Please install jq, curl, and wget manually.$(RESET)"; \
	fi
	@echo "$(GREEN)Tools installation complete!$(RESET)"

# =============================================================================
# Quick Actions
# =============================================================================

.PHONY: quick-start
quick-start: setup build dev ## Complete quick start (setup + build + dev)

.PHONY: quick-prod
quick-prod: setup build prod ## Quick production deployment

.PHONY: reset
reset: down clean setup ## Reset everything and start fresh

# =============================================================================
# Information
# =============================================================================

.PHONY: info
info: ## Show project information
	@echo "$(BLUE)Sockudo Docker Setup Information$(RESET)"
	@echo "$(YELLOW)Project:$(RESET) Sockudo WebSocket Server"
	@echo "$(YELLOW)Environment:$(RESET) $(ENV)"
	@echo "$(YELLOW)Compose File:$(RESET) $(COMPOSE_FILE)"
	@echo "$(YELLOW)Project Name:$(RESET) $(PROJECT_NAME)"
	@echo ""
	@echo "$(YELLOW)Available Environments:$(RESET)"
	@echo "  - dev: Development with debug tools"
	@echo "  - prod: Production with monitoring"
	@echo ""
	@echo "$(YELLOW)Key URLs (when running):$(RESET)"
	@echo "  - WebSocket Server: http://localhost:6001"
	@echo "  - Metrics: http://localhost:9601/metrics"
	@echo "  - Redis Commander (dev): http://localhost:8081"
	@echo "  - PHPMyAdmin (dev): http://localhost:8080"
	@echo "  - Prometheus (prod): http://localhost:9090"
	@echo "  - Grafana (prod): http://localhost:3000"

# =============================================================================
# CI/CD Helpers
# =============================================================================

.PHONY: ci-test
ci-test: ## Run CI tests
	@echo "$(BLUE)Running CI tests...$(RESET)"
	@make validate
	@make build
	@make ENV=dev up
	@sleep 30
	@make test
	@make down

.PHONY: deploy
deploy: ## Deploy to production (requires confirmation)
	@echo "$(RED)Warning: This will deploy to production!$(RESET)"
	@read -p "Are you sure? (y/N): " confirm; \
	if [ "$confirm" = "y" ] || [ "$confirm" = "Y" ]; then \
		make ENV=prod build; \
		make ENV=prod down; \
		make ENV=prod up; \
		echo "$(GREEN)Production deployment complete!$(RESET)"; \
	else \
		echo "$(YELLOW)Deployment cancelled.$(RESET)"; \
	fi