09f8527a90
ci-arm64-advisory / fast-checks (pull_request) Waiting to run
Lint shellcheck (arm64 pilot) / shellcheck-arm64 (pilot) (pull_request) Successful in 1s
Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 5s
CI / Python Lint & Test (pull_request) Successful in 4s
CI / Detect changes (pull_request) Successful in 11s
E2E API Smoke Test / detect-changes (pull_request) Successful in 9s
E2E Chat / detect-changes (pull_request) Successful in 6s
Handlers Postgres Integration / detect-changes (pull_request) Successful in 4s
E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 5s
Lint curl status-code capture / Scan workflows for curl status-capture pollution (pull_request) Successful in 3s
Lint forbidden tenant-env keys / Scan workspace_secrets writers for forbidden env keys (pull_request) Successful in 4s
Lint forbidden tenant-env keys / Scan for repo-host token write into tenant workspace surface (pull_request) Successful in 3s
lint-required-workflows-docker-host-pinned / Lint docker-host pin on docker-touching workflows (pull_request) Successful in 4s
Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 8s
sop-checklist / review-refire (pull_request_target) Has been skipped
gate-check-v3 / gate-check (pull_request_target) Successful in 5s
verify-providers-gen / Regenerate providers artifact and fail on drift (pull_request) Successful in 20s
sop-checklist / all-items-acked (pull_request) acked: 0/7 — missing: comprehensive-testing, local-postgres-e2e, staging-smoke, +4 — body-unfilled: comprehensive-testing, local-postgres-e2
sop-checklist / na-declarations (pull_request) N/A: (none)
security-review / approved (pull_request_target) Failing after 31s
qa-review / approved (pull_request_target) Failing after 31s
sop-checklist / all-items-acked (pull_request_target) Successful in 30s
sop-tier-check / tier-check (pull_request_target) Failing after 29s
lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 59s
lint-required-context-exists-in-bp / lint-required-context-exists-in-bp (pull_request) Successful in 1m6s
lint-continue-on-error-tracking / lint-continue-on-error-tracking (pull_request) Successful in 1m20s
Lint pre-flip continue-on-error / Verify continue-on-error flips have run-log proof (pull_request) Successful in 1m29s
Lint workflow YAML (Gitea-1.22.6-hostile shapes) / Lint workflow YAML for Gitea-1.22.6-hostile shapes (pull_request) Successful in 1m49s
CI / Platform (Go) (pull_request) Successful in 2s
CI / Shellcheck (E2E scripts) (pull_request) Successful in 2s
CI / Canvas (Next.js) (pull_request) Successful in 2s
E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 2s
E2E Chat / E2E Chat (pull_request) Successful in 2s
E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 3s
Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 2s
CI / all-required (pull_request) Successful in 13s
CI / Canvas Deploy Status (pull_request) Has been skipped
qa-review / approved (pull_request_review) Has been skipped
security-review / approved (pull_request_review) Has been skipped
sop-tier-check / tier-check (pull_request_review) Failing after 5s
audit-force-merge / audit (pull_request_target) Has been cancelled
Sibling of the molecule-controlplane change. core mirrors the provider
registry (workspace-server/internal/providers/gen/registry_gen.go) and
drift-gates it via verify-providers-gen, so the same toolchain-less gap
exists here (an agent without Go can't regenerate; blocked cp#568).
Extend the existing root Makefile with gen targets that cd into the
workspace-server module:
make gen / gen-check native (go generate ./...)
make gen-docker / gen-check-docker same generator inside pinned
golang:1.25 — Docker only
gen-docker pins golang:1.25 to match workspace-server/go.mod; verified
byte-identical to the checked-in artifact (ran both, diff clean;
registry_gen.go unchanged). verify-providers-gen.yml failure messages
now point at 'make gen' / 'make gen-docker'.
NOTE: core's verify workflow pins setup-go go-version: 'stable' (not
'1.25'); a future Go minor could reformat the artifact in CI vs a 1.25
local — flagged in the Makefile to pin CI to '1.25' in a follow-up.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
92 lines
4.8 KiB
Makefile
92 lines
4.8 KiB
Makefile
# Top-level Makefile — convenience wrappers around docker compose.
|
|
#
|
|
# Most molecule-core dev work happens via these shortcuts. CI doesn't
|
|
# use this Makefile; CI calls docker compose / go test directly so the
|
|
# Makefile can evolve without breaking the build.
|
|
|
|
.PHONY: help dev up down logs build test e2e-peer-visibility openapi-spec openapi-spec-check gen gen-docker gen-check gen-check-docker
|
|
|
|
# ─── Provider-registry SSOT codegen (internal#718) ─────────────────────
|
|
# The Go module lives in workspace-server/. The checked-in artifact
|
|
# workspace-server/internal/providers/gen/registry_gen.go is a gofmt'd
|
|
# projection of providers.yaml, drift-gated by
|
|
# .gitea/workflows/verify-providers-gen.yml. `make gen-docker` runs the SAME
|
|
# generator inside the pinned golang image so a toolchain-less env (an agent
|
|
# without Go) can regenerate without a local Go install (core#2332 follow-up).
|
|
#
|
|
# BYTE-EQUIVALENCE: gen-docker is byte-identical to native only while
|
|
# GO_VERSION below matches the `go` directive in workspace-server/go.mod.
|
|
# NOTE: the CI verify workflow pins setup-go go-version: 'stable' (not '1.25');
|
|
# that is a latent hazard — a future Go minor could reformat the artifact in CI
|
|
# vs a 1.25 local. Pin CI to '1.25' to close it (tracked alongside this change).
|
|
GO_VERSION ?= 1.25
|
|
GO_IMAGE ?= golang:$(GO_VERSION)
|
|
DOCKER ?= docker
|
|
# Mount the Go module (workspace-server) read-write; Go's default -mod=readonly
|
|
# keeps go.mod/go.sum untouched — only the artifact is written in-place.
|
|
DOCKER_RUN_WS = $(DOCKER) run --rm -v "$(CURDIR)/workspace-server":/src -w /src $(GO_IMAGE)
|
|
|
|
help: ## Show this help.
|
|
@grep -E '^[a-zA-Z0-9_-]+:.*?## ' $(MAKEFILE_LIST) | awk 'BEGIN {FS = ":.*?## "}; {printf "\033[36m%-22s\033[0m %s\n", $$1, $$2}'
|
|
|
|
dev: ## Start the full stack with air hot-reload for the platform service.
|
|
docker compose -f docker-compose.yml -f docker-compose.dev.yml up
|
|
|
|
up: ## Start the full stack in production-shape mode (no air, normal Dockerfile).
|
|
docker compose up
|
|
|
|
down: ## Stop the stack and remove containers (volumes preserved).
|
|
docker compose down
|
|
|
|
logs: ## Tail logs from all services (Ctrl-C to detach).
|
|
docker compose logs -f
|
|
|
|
build: ## Force a fresh build of the platform image (no cache).
|
|
docker compose build --no-cache platform
|
|
|
|
test: ## Run Go unit tests in workspace-server/.
|
|
cd workspace-server && go test -race ./...
|
|
|
|
# ─── Local prod-mimic E2E gates ────────────────────────────────────────
|
|
# Run the LITERAL peer-visibility MCP list_peers gate against the
|
|
# already-running local stack (`make up` or `make dev`). Same byte-
|
|
# identical assertion as the staging gate — only provisioning differs.
|
|
# Skips any runtime whose provider key is absent (partially-keyed env
|
|
# is fine). See tests/e2e/test_peer_visibility_mcp_local.sh for the
|
|
# env contract (CLAUDE_CODE_OAUTH_TOKEN / E2E_MINIMAX_API_KEY / etc).
|
|
e2e-peer-visibility: ## Run the LOCAL peer-visibility MCP gate vs the running stack (needs `make up` first).
|
|
bash tests/e2e/test_peer_visibility_mcp_local.sh
|
|
|
|
# ─── OpenAPI spec generation (RFC #1706, Phase 1) ─────────────────────
|
|
# Regenerate workspace-server/docs/openapi/swagger.{yaml,json} from
|
|
# swaggo annotations on the gin handlers. Commit the output. CI runs
|
|
# `make openapi-spec-check` to assert no drift between annotations and
|
|
# the committed file — if a PR changes a handler but forgets to
|
|
# regenerate, CI fails with a diff.
|
|
openapi-spec: ## Regenerate OpenAPI spec from workspace-server handler annotations.
|
|
@command -v swag >/dev/null 2>&1 || go install github.com/swaggo/swag/cmd/swag@v1.16.4
|
|
cd workspace-server && swag init \
|
|
--generalInfo cmd/server/main.go \
|
|
--output docs/openapi \
|
|
--outputTypes yaml,json \
|
|
--dir . \
|
|
--parseDependency=false \
|
|
--parseInternal=true
|
|
|
|
openapi-spec-check: openapi-spec ## CI gate — fail if openapi-spec produces a diff vs the committed file.
|
|
@git diff --exit-code -- workspace-server/docs/openapi/ \
|
|
|| (echo "openapi-spec is stale — run 'make openapi-spec' and commit the result" && exit 1)
|
|
|
|
# ─── Provider-registry codegen targets ────────────────────────────────
|
|
gen: ## Regenerate the providers registry artifact natively (needs local Go).
|
|
cd workspace-server && go generate ./...
|
|
|
|
gen-docker: ## Same, inside the pinned $(GO_IMAGE) — Docker only, no local Go.
|
|
$(DOCKER_RUN_WS) go generate ./...
|
|
|
|
gen-check: ## Drift gate (native): exit 1 if the artifact is stale.
|
|
cd workspace-server && go run ./cmd/gen-providers -check
|
|
|
|
gen-check-docker: ## Drift gate inside the pinned $(GO_IMAGE) — Docker only.
|
|
$(DOCKER_RUN_WS) go run ./cmd/gen-providers -check
|