Makefile

SHELL := /bin/bash

# `make` should build the binary by default.
.DEFAULT_GOAL := build

.PHONY: build build-gog wk workit gog wk-help workit-help help fmt fmt-check lint lint-full test ci tools
.PHONY: worker-ci build-internal build-automagik build-auth-server docker-auth-server deadcode race coverage

BIN_DIR := $(CURDIR)/bin
BIN := $(BIN_DIR)/wk
BIN_GOG := $(BIN_DIR)/gog
CMD := ./cmd/wk
CMD_GOG := ./cmd/gog

VERSION := $(shell git describe --tags --always --dirty 2>/dev/null || echo dev)
BRANCH := $(shell git rev-parse --abbrev-ref HEAD 2>/dev/null || echo "")
COMMIT := $(shell git rev-parse --short=12 HEAD 2>/dev/null || echo "")
DATE := $(shell date -u +%Y-%m-%dT%H:%M:%SZ)
COVERAGE_MIN ?= 70
CALLBACK_SERVER ?= https://auth.automagik.dev
LDFLAGS := -X github.com/automagik-dev/workit/internal/cmd.version=$(VERSION) -X github.com/automagik-dev/workit/internal/cmd.branch=$(BRANCH) -X github.com/automagik-dev/workit/internal/cmd.commit=$(COMMIT) -X github.com/automagik-dev/workit/internal/cmd.date=$(DATE)
LDFLAGS += -X github.com/automagik-dev/workit/internal/config.DefaultCallbackServer=$(CALLBACK_SERVER)

TOOLS_DIR := $(CURDIR)/.tools
GOFUMPT := $(TOOLS_DIR)/gofumpt
GOIMPORTS := $(TOOLS_DIR)/goimports
DEADCODE := $(TOOLS_DIR)/deadcode
DEADCODE_BASELINE := .deadcode-baseline.txt
GOLANGCI_LINT := $(TOOLS_DIR)/golangci-lint
LINT_NEW_FROM ?= origin/main

# Canonical build-time env contract uses WK_*.
# Legacy fallback: honor GOG_* only when WK_* is unset.
WK_CLIENT_ID ?= $(GOG_CLIENT_ID)
WK_CLIENT_SECRET ?= $(GOG_CLIENT_SECRET)
WK_CALLBACK_SERVER ?= $(GOG_CALLBACK_SERVER)
WK_M365_CLIENT_ID ?= $(GOG_M365_CLIENT_ID)
WK_M365_TENANT_ID ?= $(GOG_M365_TENANT_ID)

# Allow passing CLI args as extra "targets":
#   make workit -- --help
#   make workit -- gmail --help
ifneq ($(filter workit wk gog,$(MAKECMDGOALS)),)
RUN_ARGS := $(wordlist 2,$(words $(MAKECMDGOALS)),$(MAKECMDGOALS))
$(eval $(RUN_ARGS):;@:)
endif

build:
	@mkdir -p $(BIN_DIR)
	@go build -ldflags "$(LDFLAGS)" -o $(BIN) $(CMD)

build-auth-server:
	@mkdir -p $(BIN_DIR)
	@cd auth-server && go build -o $(BIN_DIR)/workit-auth-server .

docker-auth-server:
	@docker build -t workit-auth-server:local auth-server

# Build the deprecated "gog" backward-compat alias binary.
build-gog:
	@mkdir -p $(BIN_DIR)
	@go build -ldflags "$(LDFLAGS)" -o $(BIN_GOG) $(CMD_GOG)

# Build with internal defaults for headless OAuth (credentials baked in).
# Usage: make build-internal WK_CLIENT_ID=... WK_CLIENT_SECRET=... WK_CALLBACK_SERVER=...
# Legacy fallback: GOG_* is still honored when WK_* is not set.
build-internal:
	@mkdir -p $(BIN_DIR)
	@go build -ldflags "$(LDFLAGS) \
		-X 'github.com/automagik-dev/workit/internal/config.DefaultClientID=$(WK_CLIENT_ID)' \
		-X 'github.com/automagik-dev/workit/internal/config.DefaultClientSecret=$(WK_CLIENT_SECRET)' \
		-X 'github.com/automagik-dev/workit/internal/config.DefaultCallbackServer=$(WK_CALLBACK_SERVER)' \
		-X 'github.com/automagik-dev/workit/internal/config.DefaultM365ClientID=$(WK_M365_CLIENT_ID)' \
		-X 'github.com/automagik-dev/workit/internal/config.DefaultM365TenantID=$(WK_M365_TENANT_ID)'" \
		-o $(BIN) $(CMD)

# Build with credentials from ~/.config/workit/credentials.env (WK_* primary contract).
# Legacy fallback: accepts GOG_* keys and ~/.config/gog/credentials.env.
# Usage: make build-automagik
build-automagik:
	@mkdir -p $(BIN_DIR)
	@if [ -f "$(HOME)/.config/workit/credentials.env" ]; then \
		. $(HOME)/.config/workit/credentials.env && \
		wk_client_id="$${WK_CLIENT_ID:-$${GOG_CLIENT_ID}}" && \
		wk_client_secret="$${WK_CLIENT_SECRET:-$${GOG_CLIENT_SECRET}}" && \
		wk_callback_server="$${WK_CALLBACK_SERVER:-$${GOG_CALLBACK_SERVER}}" && \
		wk_m365_client_id="$${WK_M365_CLIENT_ID:-$${GOG_M365_CLIENT_ID}}" && \
		wk_m365_tenant_id="$${WK_M365_TENANT_ID:-$${GOG_M365_TENANT_ID}}" && \
		go build -ldflags "$(LDFLAGS) \
			-X 'github.com/automagik-dev/workit/internal/config.DefaultClientID=$$wk_client_id' \
			-X 'github.com/automagik-dev/workit/internal/config.DefaultClientSecret=$$wk_client_secret' \
			-X 'github.com/automagik-dev/workit/internal/config.DefaultCallbackServer=$$wk_callback_server' \
			-X 'github.com/automagik-dev/workit/internal/config.DefaultM365ClientID=$$wk_m365_client_id' \
			-X 'github.com/automagik-dev/workit/internal/config.DefaultM365TenantID=$$wk_m365_tenant_id'" \
			-o $(BIN) $(CMD); \
	elif [ -f "$(HOME)/.config/gog/credentials.env" ]; then \
		. $(HOME)/.config/gog/credentials.env && \
		wk_client_id="$${WK_CLIENT_ID:-$${GOG_CLIENT_ID}}" && \
		wk_client_secret="$${WK_CLIENT_SECRET:-$${GOG_CLIENT_SECRET}}" && \
		wk_callback_server="$${WK_CALLBACK_SERVER:-$${GOG_CALLBACK_SERVER}}" && \
		wk_m365_client_id="$${WK_M365_CLIENT_ID:-$${GOG_M365_CLIENT_ID}}" && \
		wk_m365_tenant_id="$${WK_M365_TENANT_ID:-$${GOG_M365_TENANT_ID}}" && \
		go build -ldflags "$(LDFLAGS) \
			-X 'github.com/automagik-dev/workit/internal/config.DefaultClientID=$$wk_client_id' \
			-X 'github.com/automagik-dev/workit/internal/config.DefaultClientSecret=$$wk_client_secret' \
			-X 'github.com/automagik-dev/workit/internal/config.DefaultCallbackServer=$$wk_callback_server' \
			-X 'github.com/automagik-dev/workit/internal/config.DefaultM365ClientID=$$wk_m365_client_id' \
			-X 'github.com/automagik-dev/workit/internal/config.DefaultM365TenantID=$$wk_m365_tenant_id'" \
			-o $(BIN) $(CMD); \
	else \
		echo "Missing credentials file: $(HOME)/.config/workit/credentials.env"; \
		echo "   Run: ./scripts/setup-credentials.sh"; \
		exit 1; \
	fi

wk: build
	@if [ -n "$(RUN_ARGS)" ]; then \
		$(BIN) $(RUN_ARGS); \
	elif [ -z "$(ARGS)" ]; then \
		$(BIN) --help; \
	else \
		$(BIN) $(ARGS); \
	fi

workit: build
	@if [ -n "$(RUN_ARGS)" ]; then \
		$(BIN) $(RUN_ARGS); \
	elif [ -z "$(ARGS)" ]; then \
		$(BIN) --help; \
	else \
		$(BIN) $(ARGS); \
	fi

gog: build-gog
	@if [ -n "$(RUN_ARGS)" ]; then \
		$(BIN_GOG) $(RUN_ARGS); \
	elif [ -z "$(ARGS)" ]; then \
		$(BIN_GOG) --help; \
	else \
		$(BIN_GOG) $(ARGS); \
	fi

wk-help: build
	@$(BIN) --help

workit-help: build
	@$(BIN) --help

help: wk-help

tools:
	@mkdir -p $(TOOLS_DIR)
	@GOBIN=$(TOOLS_DIR) go install mvdan.cc/gofumpt@v0.9.2
	@GOBIN=$(TOOLS_DIR) go install golang.org/x/tools/cmd/goimports@v0.41.0
	@GOBIN=$(TOOLS_DIR) go install golang.org/x/tools/cmd/deadcode@v0.41.0
	@GOBIN=$(TOOLS_DIR) go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.8.0

fmt: tools
	@$(GOIMPORTS) -local github.com/automagik-dev/workit -w .
	@$(GOFUMPT) -w .

fmt-check: tools
	@$(GOIMPORTS) -local github.com/automagik-dev/workit -w .
	@$(GOFUMPT) -w .
	@git diff --exit-code -- '*.go' go.mod go.sum

lint: tools
	@$(GOLANGCI_LINT) run --new-from-rev=$(LINT_NEW_FROM)

lint-full: tools
	@$(GOLANGCI_LINT) run

pnpm-gate:
	@if [ -f package.json ] || [ -f package.json5 ] || [ -f package.yaml ]; then \
		pnpm lint && pnpm build && pnpm test; \
	else \
		echo "pnpm gate skipped (no package.json)"; \
	fi

test:
	@go test ./...

deadcode: tools
	@tmp_dead=$$(mktemp); \
	$(DEADCODE) ./... > "$$tmp_dead"; \
	if [ ! -f "$(DEADCODE_BASELINE)" ]; then \
		echo "missing $(DEADCODE_BASELINE); generate baseline before running deadcode gate" >&2; \
		rm -f "$$tmp_dead"; \
		exit 1; \
	fi; \
	if ! diff -u "$(DEADCODE_BASELINE)" "$$tmp_dead"; then \
		echo "deadcode gate failed: output changed from baseline" >&2; \
		rm -f "$$tmp_dead"; \
		exit 1; \
	fi; \
	rm -f "$$tmp_dead"; \
	echo "deadcode baseline check: OK"

race:
	@go test -race ./...

coverage:
	@tmp_cov=$$(mktemp); \
	go test -coverprofile="$$tmp_cov" ./... >/dev/null; \
	total=$$(go tool cover -func="$$tmp_cov" | awk '/^total:/ {gsub("%","",$$3); print $$3}'); \
	rm -f "$$tmp_cov"; \
	awk -v total="$$total" -v min="$(COVERAGE_MIN)" 'BEGIN { \
		printf("coverage total: %.1f%% (min %.1f%%)\n", total, min); \
		if (total+0 < min+0) exit 1; \
	}'

ci: pnpm-gate fmt-check lint test deadcode race coverage

worker-ci:
	@pnpm -C internal/tracking/worker lint
	@pnpm -C internal/tracking/worker build
	@pnpm -C internal/tracking/worker test