Makefile

# SourceOS Continuum — lifecycle entry points.
# Control-plane targets delegate to Makefile.porter (the rehomed Porter control plane).
.PHONY: validate onboard dev-up dev-down shim-test test tools-test rollout promotion-gate portal compute mesh-demo grant commons reuse mcp spine run loop verify lease sphere push push-webhook rollback edge login sso provision deploy inference availability

validate: ## repo hygiene + CapD validity
	python3 tools/validate.py

tools-test: ## unit-test the governed tools (portal router, compute plane, promotion gate, MCP surface)
	cd tools && python3 -m pytest -q

portal: ## developer portal: read-only web console over the governed surface (scale-to-zero, stdlib only)
	python3 tools/portal_server.py $(PORT)

compute: ## compute plane: route one workload across the mesh under per-project policy + availability
	python3 tools/compute_plane.py

mesh-demo: ## seed a live demo mesh (heartbeats) so the portal shows live telemetry
	@python3 tools/mesh_telemetry.py heartbeat artifacts/mesh-heartbeats k8s-a k8s 8 >/dev/null
	@python3 tools/mesh_telemetry.py heartbeat artifacts/mesh-heartbeats slurm-login hpc-slurm 120 >/dev/null
	@python3 tools/mesh_telemetry.py heartbeat artifacts/mesh-heartbeats edge-1 wasm-edge 20 >/dev/null
	@python3 tools/mesh_telemetry.py heartbeat artifacts/mesh-heartbeats boinc-grid volunteer-boinc 400 >/dev/null
	@python3 tools/mesh_telemetry.py view artifacts/mesh-heartbeats

grant: ## demo the zero-trust attach flow: Attest -> Decide -> Grant -> verify-at-node
	python3 tools/mcp_a2a_grant.py

commons: ## reproducible knowledge commons: ingest the estate's CapDs + workloads as citable records
	python3 tools/commons.py

reuse: ## resolution reuse (ARM): deposit an RCA Resolution asset + Next-Best-Action lookup + feedback
	cd tools && python3 resolution_registry.py

spine: ## run the full execution spine demo: place -> grant -> verify -> dispatch -> sealed receipt
	cd tools && python3 executor.py

run: ## sourceosctl: run a workload governed across the mesh (e.g. make run ARGS="run --gpu --command 'python train.py'")
	python3 tools/sourceosctl.py $(ARGS)

loop: ## autonomous control loop demo: sense -> governed spine -> act, once per cooldown
	cd tools && python3 control_loop.py

verify: ## volunteer-mesh verification demo: redundant quorum over untrusted worker results
	cd tools && python3 work_unit.py

lease: ## pull/lease scheduler demo: workers pull WUs, crash-stop re-lending, ordered re-merge
	cd tools && python3 lease_scheduler.py

sphere: ## data-sphere demo: immutable dm-verity sphere, construction-tenancy, intent x link x durability
	cd tools && python3 data_sphere.py

push: ## git-push deploy flow demo: build -> deploy -> per-branch preview
	cd tools && python3 deploy_flow.py

push-webhook: ## git-push webhook demo: signed push -> deploy; forged push -> rejected (fail-closed door). Run a receiver with ARGS="serve 8099"
	cd tools && python3 push_webhook.py $(ARGS)

rollback: ## instant rollback: re-point an app to a prior release's immutable image (no rebuild, fail-closed). Demo with no ARGS, or ARGS="rollback <tenant> <app> [--to-digest D|--steps N]"
	cd tools && python3 release_ledger.py $(ARGS)

edge: ## edge-worker demo: register the agent-machine into a cloud pool + evolve topology (reversed Giant Swarm)
	cd tools && python3 edge_worker.py

login: ## login/session demo: authenticate the front door (fail-closed)
	cd tools && python3 login.py

sso: ## SSO front door demo: OIDC + PKCE + WebAuthn/FIDO2 verification (fail-closed, stdlib-only)
	cd tools && python3 sso.py

provision: ## provisioning demo: tenant broker + entitlement tier + BSS meter + /me
	cd tools && python3 provisioning.py

deploy: ## git-push-deploy demo: buildpack detect -> reproducible OCI image -> workload (no Dockerfile)
	cd tools && python3 buildpack.py

inference: ## sovereign inference demo: models as data spheres, fail-closed sovereign routing
	cd tools && python3 inference.py

availability: ## report the estate's availability-maturity grades (the Zero-Downtime legend)
	cd tools && python3 availability.py

onboard: ## bring up a workstation: local sovereign forge + local cluster + sourceosctl
	@echo "[continuum] onboard — scaffold: wires Gitea bring-up + kind/k3s + sourceos-devtools/sourceosctl"

dev-up: ## start the local PaaS control plane (porter-shim over kind/k3s)
	$(MAKE) -f Makefile.porter dev-up

dev-down: ## tear down the local PaaS control plane
	$(MAKE) -f Makefile.porter dev-down

shim-test: ## test the porter-shim control plane
	$(MAKE) -f Makefile.porter shim-test

test: ## cloud-native test: ephemeral preview env + GitOps PR checks + evidence bundle
	@echo "[continuum] test — scaffold: PR-driven preview environments + evidence"

promotion-gate: ## rollout gate: require an APPROVE review verdict (fail-closed, evidence-emitting)
	@test -n "$(VERDICT)" || (echo "[continuum] promotion-gate BLOCKED: set VERDICT=<review-receipt.json>" && exit 1)
	python3 tools/promotion_gate.py --verdict $(VERDICT)

rollout: promotion-gate ## promote local → scale-up cluster (hyperswarm), gated on an APPROVE review verdict
	@echo "[continuum] rollout — promote via caps.infra.cluster-scaleup.hyperswarm (promotion gate passed)"

mcp: ## run the governed MCP ops surface (stdio; add ADD an agent client, e.g. Claude Code). Guarded tools fail-closed unless CONTINUUM_MCP_ALLOW_GUARDED=1
	python3 tools/mcp_ops_server.py