Taskfile.yml

version: '1'
name: nfo
description: Minimal Taskfile
variables:
  APP_NAME: nfo
environments:
  local:
    container_runtime: docker
    compose_command: docker compose
pipeline:
  python_version: "3.12"
  runner_image: ubuntu-latest
  branches: [main]
  cache: [~/.cache/pip]
  artifacts: [dist/]

  stages:
    - name: lint
      tasks: [lint]

    - name: test
      tasks: [test]

    - name: build
      tasks: [build]
      when: "branch:main"

tasks:
  install:
    desc: Install Python dependencies (editable)
    cmds:
    - pip install -e .[dev]
  test:
    desc: Run pytest suite
    cmds:
    - pytest -q
  build:
    desc: Build wheel + sdist
    cmds:
    - python -m build
  clean:
    desc: Remove build artefacts
    cmds:
    - rm -rf build/ dist/ *.egg-info
  up:
    desc: Start services via docker compose
    cmds:
    - docker compose up -d
  down:
    desc: Stop services
    cmds:
    - docker compose down
  logs:
    desc: Tail compose logs
    cmds:
    - docker compose logs -f
  ps:
    desc: Show running compose services
    cmds:
    - docker compose ps
  docker-build:
    desc: Build docker image
    cmds:
    - docker build -t nfo:latest .
  help:
    desc: Show available tasks
    cmds:
    - echo "nfo — available tasks:"
    - echo ""
    - taskfile list
  dev:
    desc: '[imported from Makefile] dev'
    cmds:
    - $(PYTHON) -m pip install -e ".[dev]"
  test-cov:
    desc: '[imported from Makefile] test-cov'
    cmds:
    - PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src $(PYTHON) -m pytest -p pytest_asyncio.plugin
      tests/ -v --cov=src/pactown --cov-report=term-missing
  lint:
    desc: '[imported from Makefile] lint'
    cmds:
    - if $(PYTHON) -c "import ruff" >/dev/null 2>&1; then \
    - $(PYTHON) -m ruff check src/ tests/; \
    - elif command -v ruff >/dev/null 2>&1; then \
    - ruff check src/ tests/; \
    - elif command -v pipx >/dev/null 2>&1; then \
    - pipx run ruff check src/ tests/; \
    - else \
    - 'echo "Missing dependency: ruff. Run: make dev (or install via pipx)."; \'
    - exit 1; \
    - fi
  format:
    desc: '[imported from Makefile] format'
    cmds:
    - if $(PYTHON) -c "import ruff" >/dev/null 2>&1; then \
    - $(PYTHON) -m ruff format src/ tests/; \
    - elif command -v ruff >/dev/null 2>&1; then \
    - ruff format src/ tests/; \
    - elif command -v pipx >/dev/null 2>&1; then \
    - pipx run ruff format src/ tests/; \
    - else \
    - 'echo "Missing dependency: ruff. Run: make dev (or install via pipx)."; \'
    - exit 1; \
    - fi
  registry:
    desc: '[imported from Makefile] registry'
    cmds:
    - pactown-registry --host 0.0.0.0 --port 8800
  registry-bg:
    desc: '[imported from Makefile] registry-bg'
    cmds:
    - pactown-registry --host 0.0.0.0 --port 8800 &
  status:
    desc: '[imported from Makefile] status'
    cmds:
    - pactown status $(CONFIG)
  validate:
    desc: '[imported from Makefile] validate'
    cmds:
    - pactown validate $(CONFIG)
  graph:
    desc: '[imported from Makefile] graph'
    cmds:
    - pactown graph $(CONFIG)
  examples:
    desc: '[imported from Makefile] examples'
    cmds:
    - pactown up examples/saas.pactown.yaml --dry-run
  init:
    desc: '[imported from Makefile] init'
    cmds:
    - pactown init
  publish-registry:
    desc: '[imported from Makefile] publish-registry'
    cmds:
    - pactown publish $(CONFIG) --registry http://localhost:8800
  pull:
    desc: '[imported from Makefile] pull'
    cmds:
    - pactown pull $(CONFIG) --registry http://localhost:8800
  check-pypi-deps:
    desc: '[imported from Makefile] check-pypi-deps'
    cmds:
    - '$(PYTHON) -c "import build" >/dev/null 2>&1 || (echo "Missing dependency: build.
      Run: $(PYTHON) -m pip install -e \".[dev]\" (or: $(PYTHON) -m pip install build)"
      && exit 1)'
    - '$(PYTHON) -c "import twine" >/dev/null 2>&1 || (echo "Missing dependency: twine.
      Run: $(PYTHON) -m pip install -e \".[dev]\" (or: $(PYTHON) -m pip install twine)"
      && exit 1)'
    - '$(BUMP2VERSION) --help >/dev/null 2>&1 || (echo "Missing dependency: bump2version.
      Run: $(PYTHON) -m pip install -e \".[dev]\" (or: $(PYTHON) -m pip install bump2version)"
      && exit 1)'
  publish-pypi:
    desc: '[imported from Makefile] publish-pypi'
    cmds:
    - $(MAKE) check-pypi-deps
    - $(MAKE) bump-patch
    - $(MAKE) sync-pactown-com
    - $(MAKE) build
    - $(PYTHON) -m twine upload dist/*
  version:
    desc: '[imported from Makefile] version'
    cmds:
    - grep -m1 'version = ' pyproject.toml | cut -d'"' -f2
  bump-patch:
    desc: '[imported from Makefile] bump-patch'
    cmds:
    - $(BUMP2VERSION) patch --config-file .bumpversion.cfg --allow-dirty
    - echo "Bumped to $$(grep -m1 'version = ' pyproject.toml | cut -d'"' -f2)"
  bump-minor:
    desc: '[imported from Makefile] bump-minor'
    cmds:
    - $(BUMP2VERSION) minor --config-file .bumpversion.cfg --allow-dirty
    - echo "Bumped to $$(grep -m1 'version = ' pyproject.toml | cut -d'"' -f2)"
  bump-major:
    desc: '[imported from Makefile] bump-major'
    cmds:
    - $(BUMP2VERSION) major --config-file .bumpversion.cfg --allow-dirty
    - echo "Bumped to $$(grep -m1 'version = ' pyproject.toml | cut -d'"' -f2)"
  publish:
    desc: '[imported from Makefile] publish'
  sync-pactown-com:
    desc: '[imported from Makefile] sync-pactown-com'
    cmds:
    - $(PYTHON) tools/sync_pactown_com_dependency.py
  security:
    desc: '[imported from Makefile] security'
  security-sast:
    desc: '[imported from Makefile] security-sast'
    cmds:
    - echo "Running SAST analysis..."
    - if $(PYTHON) -c "import bandit" >/dev/null 2>&1; then \
    - $(PYTHON) -m bandit -r src/ -ll -ii --skip B101 || true; \
    - elif command -v bandit >/dev/null 2>&1; then \
    - bandit -r src/ -ll -ii --skip B101 || true; \
    - else \
    - 'echo "[SKIP] bandit not installed. Run: $(PYTHON) -m pip install bandit"; \'
    - fi
    - if command -v semgrep >/dev/null 2>&1; then \
    - semgrep scan --config=p/python --config=p/owasp-top-ten src/ --error 2>/dev/null
      || \
    - semgrep scan --config=auto src/ --error 2>/dev/null || \
    - echo "[WARN] semgrep scan completed with findings"; \
    - else \
    - 'echo "[SKIP] semgrep not installed. Run: pip install semgrep (or pipx install
      semgrep)"; \'
    - fi
  security-deps:
    desc: '[imported from Makefile] security-deps'
    cmds:
    - echo "Scanning dependencies for vulnerabilities..."
    - if $(PYTHON) -c "import pip_audit" >/dev/null 2>&1; then \
    - $(PYTHON) -m pip_audit --desc on || true; \
    - elif command -v pip-audit >/dev/null 2>&1; then \
    - pip-audit --desc on || true; \
    - else \
    - 'echo "[SKIP] pip-audit not installed. Run: $(PYTHON) -m pip install pip-audit";
      \'
    - fi
  security-secrets:
    desc: '[imported from Makefile] security-secrets'
    cmds:
    - echo "Scanning for secrets..."
    - if command -v gitleaks >/dev/null 2>&1; then \
    - gitleaks detect --source . --verbose 2>/dev/null || echo "[WARN] Potential secrets
      found"; \
    - else \
    - 'echo "[SKIP] gitleaks not installed. Install: https://github.com/gitleaks/gitleaks#installing";
      \'
    - fi
  security-all:
    desc: '[imported from Makefile] security-all'
  artifacts-docker:
    desc: '[imported from Makefile] artifacts-docker'
    cmds:
    - if command -v docker >/dev/null 2>&1 && docker info >/dev/null 2>&1; then \
    - $(PYTHON) tools/validate_artifacts_docker.py \
    - --root $(ARTIFACT_ROOT) --strict -v; \
    - else \
    - 'echo "ERROR: Docker not available"; exit 1; \'
    - fi
  artifacts-clean:
    desc: '[imported from Makefile] artifacts-clean'
    cmds:
    - echo "Cleaning $(ARTIFACT_ROOT)/ and bytecode caches..."
    - if [ -d "$(ARTIFACT_ROOT)" ] && command -v docker >/dev/null 2>&1 && docker
      info >/dev/null 2>&1; then \
    - docker run --rm -v "$$(cd $(ARTIFACT_ROOT) && pwd):/clean" ubuntu:22.04 \
    - sh -c 'chmod -R 777 /clean/test-* 2>/dev/null; rm -rf /clean/test-*' 2>/dev/null;
      \
    - fi
    - rm -rf $(ARTIFACT_ROOT)/test-* 2>/dev/null || true
    - find . -type d -name __pycache__ -exec rm -rf {} + 2>/dev/null || true
    - "echo \"Done \u2013 artifact directory cleaned.\""
  artifacts-quick:
    desc: '[imported from Makefile] artifacts-quick'
    cmds:
    - echo ""
    - echo "============================================================"
    - 'echo " STEP 1/3: Generating scaffold artifacts (18 frameworks)"'
    - echo "============================================================"
    - PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src \
    - $(PYTHON) -m pytest -p pytest_asyncio.plugin \
    - $(ARTIFACT_TESTS)::TestRealScaffoldInPactown -v --tb=short
    - echo ""
    - echo "============================================================"
    - 'echo " STEP 2/3: Validating artifact sizes (strict, no stubs)"'
    - echo "============================================================"
    - PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src \
    - $(PYTHON) -m pytest -p pytest_asyncio.plugin \
    - $(ARTIFACT_TESTS)::TestArtifactSizeValidation -v --tb=short -s
    - echo ""
    - echo "============================================================"
    - 'echo " STEP 3/3: Validating file correctness"'
    - echo "============================================================"
    - PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src \
    - $(PYTHON) -m pytest -p pytest_asyncio.plugin \
    - $(ARTIFACT_TESTS)::TestGeneratedFileCorrectness -v --tb=short -s
    - echo ""
    - echo "============================================================"
    - "echo \" DONE \u2013 quick validation passed\""
    - echo "============================================================"
  artifacts:
    desc: '[imported from Makefile] artifacts'
    cmds:
    - echo ""
    - echo "============================================================"
    - 'echo " STEP 1/9: Generating scaffold artifacts (18 frameworks)"'
    - echo "============================================================"
    - PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src \
    - $(PYTHON) -m pytest -p pytest_asyncio.plugin \
    - $(ARTIFACT_TESTS)::TestRealScaffoldInPactown -v --tb=short
    - echo ""
    - echo "============================================================"
    - 'echo " STEP 2/9: Generating IaC artifacts (Docker)"'
    - echo "============================================================"
    - if command -v docker >/dev/null 2>&1 && docker info >/dev/null 2>&1; then \
    - PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src \
    - $(PYTHON) -m pytest -p pytest_asyncio.plugin \
    - $(ARTIFACT_TESTS)::TestDockerIaCValidation::test_docker_iac_all_files_present_and_consistent
      \
    - -v --tb=short; \
    - else \
    - "echo \"[SKIP] Docker not available \u2013 IaC scaffolds not generated\"; \\"
    - fi
    - echo ""
    - echo "============================================================"
    - 'echo " STEP 3/9: Validating artifact sizes (strict, no stubs)"'
    - echo "============================================================"
    - PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src \
    - $(PYTHON) -m pytest -p pytest_asyncio.plugin \
    - $(ARTIFACT_TESTS)::TestArtifactSizeValidation -v --tb=short -s
    - echo ""
    - echo "============================================================"
    - 'echo " STEP 4/9: Validating file correctness (magic bytes,"'
    - echo "           configs, syntax, schemas)"
    - echo "============================================================"
    - PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src \
    - $(PYTHON) -m pytest -p pytest_asyncio.plugin \
    - $(ARTIFACT_TESTS)::TestGeneratedFileCorrectness -v --tb=short -s
    - echo ""
    - echo "============================================================"
    - 'echo " STEP 5/9: Docker native validation (every artifact in"'
    - echo "           its native Docker container)"
    - echo "============================================================"
    - if command -v docker >/dev/null 2>&1 && docker info >/dev/null 2>&1; then \
    - $(PYTHON) tools/validate_artifacts_docker.py \
    - --root $(ARTIFACT_ROOT) --strict -v; \
    - else \
    - "echo \"[SKIP] Docker not available \u2013 native validation skipped\"; \\"
    - fi
    - echo ""
    - echo "============================================================"
    - 'echo " STEP 6/9: Docker platform tests (binary format,"'
    - echo "           artifact execution, syntax checks)"
    - echo "============================================================"
    - if command -v docker >/dev/null 2>&1 && docker info >/dev/null 2>&1; then \
    - PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src \
    - $(PYTHON) -m pytest -p pytest_asyncio.plugin \
    - $(ARTIFACT_TESTS)::TestDockerArtifactSizeValidation \
    - $(ARTIFACT_TESTS)::TestDockerBinaryFormatVerification \
    - $(ARTIFACT_TESTS)::TestDockerArtifactExecution \
    - $(ARTIFACT_TESTS)::TestDockerAutomatedExecution \
    - $(ARTIFACT_TESTS)::TestDockerDockerfileValidation \
    - -v --tb=short; \
    - else \
    - "echo \"[SKIP] Docker not available \u2013 platform validation skipped\"; \\"
    - fi
    - echo ""
    - echo "============================================================"
    - "echo \" STEP 7/9: E2E build \u2192 deploy via Ansible\""
    - echo "============================================================"
    - PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src \
    - $(PYTHON) -m pytest -p pytest_asyncio.plugin \
    - $(ARTIFACT_TESTS)::TestE2EBuildAndAnsibleDeploy \
    - $(ARTIFACT_TESTS)::TestMultiPlatformArtifactsWithAnsible \
    - -v --tb=short
    - echo ""
    - echo "============================================================"
    - 'echo " STEP 8/9: Desktop + mobile artifact generation per OS"'
    - echo "============================================================"
    - PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src \
    - $(PYTHON) -m pytest -p pytest_asyncio.plugin \
    - $(ARTIFACT_TESTS)::TestDesktopArtifactGeneration \
    - $(ARTIFACT_TESTS)::TestMobileArtifactGeneration \
    - $(ARTIFACT_TESTS)::TestAnsibleArtifactDistribution \
    - -v --tb=short
    - echo ""
    - echo "============================================================"
    - "echo \" STEP 9/9: Cross-platform matrix (framework \xD7 OS)\""
    - echo "============================================================"
    - PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 PYTHONPATH=src \
    - $(PYTHON) -m pytest -p pytest_asyncio.plugin \
    - $(CROSS_PLATFORM_TESTS) -v --tb=short
    - echo ""
    - echo "============================================================"
    - "echo \" ALL DONE \u2013 full artifact pipeline completed (9 steps)\""
    - echo "============================================================"
  health:
    desc: '[from doql] workflow: health'
    cmds:
    - docker compose ps
    - docker compose exec app echo "Health check passed"
  import-makefile-hint:
    desc: '[from doql] workflow: import-makefile-hint'
    cmds:
    - 'echo ''Run: taskfile import Makefile to import existing targets.'''
  all:
    desc: Run install, lint, test
    cmds:
    - taskfile run install
    - taskfile run lint
    - taskfile run test
  fmt:
    desc: Auto-format with ruff
    cmds:
    - ruff format .