Makefile

include common.mk

TEST_COUNT = 1
GO_TEST_FLAGS =
TEST_OUTPUT = ${PWD}/.test-output
PROTO_OUT := "${PWD}/ak-platform/src/generated"

TARGETS := ak-pam ak-nss ak-browser-support ak-cli ak-agent-desktop ak-agent browser-ext ee/psso ee/wcp vpkg/macos vpkg/windows vpkg/linux containers/selenium containers/test containers/e2e containers/ssh ak-platform ak-sysd

.PHONY: all
all: clean gen

.PHONY: clean
clean:
	rm -rf ${PWD}/bin/*

.PHONY: gen
gen: rs-gen-proto ee/psso/gen

rs-gen-proto:
	cargo install protoc-gen-prost
	cargo install protoc-gen-tonic
	cargo install protoc-gen-prost-crate
	cargo install protoc-gen-prost-serde
	mkdir -p $(PROTO_OUT)
	protoc \
		--prost_out=$(PROTO_OUT) \
		--prost_opt=compile_well_known_types \
		--prost_opt=extern_path=.google.protobuf=::pbjson_types \
		--prost-crate_out=$(PROTO_OUT) \
		--prost-crate_opt=no_features \
		--tonic_out=$(PROTO_OUT) \
		--prost-serde_out=$(PROTO_OUT) \
		-I $(PROTO_DIR) \
		${PROTO_DIR}/*
	cargo fmt --all
	cargo clippy --fix --allow-dirty -p ak-platform

ci-install-deps:
ifeq ($(PLATFORM),gnu/linux)
ifeq ($(CI),true)
	sudo apt-get update
	sudo apt-get install -y \
		build-essential pkg-config libpam0g-dev libudev-dev libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf
endif
endif

# credprovider and browser-host are Windows-only workspace members: the first
# is written against Win32 APIs that don't exist off Windows, the second
# renders through WebView2. e2e drives both. They stay workspace members so one
# lockfile and one cargo invocation cover the repo, but clippy can only build
# them on Windows -- `make ee/wcp/lint` covers them there.
ifneq ($(OS),Windows_NT)
RS_LINT_EXCLUDE := --exclude ak-ee-wcp --exclude ak-ee-wcp-browser-host --exclude ak-ee-wcp-e2e
else
# nss and pam are unix-only.
RS_LINT_EXCLUDE := --exclude ak-nss --exclude ak-pam
endif

format:
	cargo fmt
	cargo clippy \
		--fix \
		--allow-dirty \
		--workspace \
		$(RS_LINT_EXCLUDE)

lint-rs:
	cargo fmt --all
	cargo clippy --workspace \
		${RS_LINT_EXCLUDE} \
		${RS_TEST_FLAGS}
	cargo clippy --fix \
		--allow-dirty \
		--workspace \
		${RS_LINT_EXCLUDE} \
		${RS_TEST_FLAGS}

lint-rs-ci:
	cargo fmt --all --check
	cargo clippy --workspace \
		${RS_LINT_EXCLUDE} \
		${RS_TEST_FLAGS} \
		-- -D warnings

lint-spellcheck:
	pnpm install
	pnpm run lint:spellcheck

.PHONY: lint
lint:$(foreach target,$(TARGETS),${target}/lint)
	"$(MAKE)" lint-rs

test-integration:
	"$(MAKE)" test GO_TEST_FLAGS=-tags=integration

test-e2e: containers/e2e/local-build
	$(call cargo_test,ak-platform-e2e)

test-e2e-ci:
	$(call cargo_test,ak-platform-e2e)

test-e2e-convert:
	$(call rs_e2e_coverage_convert)

test-setup:
	cargo run -p ak-cli -- -v config setup --authentik-url http://authentik:9000

test-ssh:
	ssh -i akadmin@ak-platform-test-machine

test-shell:
	docker exec -it authentik-platform_devcontainer-test-machine-1 bash

test-join:
	docker exec \
		-it \
		--env AK_SYS_INSECURE_ENV_TOKEN=test-enroll-key \
		authentik-platform_devcontainer-test-machine-1 \
		ak-sysd domains join ak -a http://authentik:9000

test-full: clean ak-agent/test-deploy ak-sysd/test-deploy ak-cli/test-deploy ak-nss/test-deploy ak-pam/test-deploy test-ssh

dev--initialize: containers/test/local-build

bump:
	$(SED_INPLACE) 's/VERSION = .*/VERSION = ${version}/g' common.mk
	$(SED_INPLACE) 's/^version = "${VERSION}"/version = "${version}"/g' ${TOP}/Cargo.toml ${TOP}/Cargo.lock
	"$(MAKE)" browser-ext/bump
	"$(MAKE)" vpkg/macos/bump
	"$(MAKE)" ee/psso/bump || true

print-version:
	@echo ${VERSION}

# Must match the release the apps report (`ak_meta::sentry_options`, browser-ext `sentry.ts`).
SENTRY_RELEASE := ak-platform@${VERSION}
SENTRY_RELEASES_CLI := npx @sentry/cli releases --org authentik-security-inc --project platform

# Associates commits with the release so `Fixes PLATFORM-123` resolves issues on release.
sentry-release:
	${SENTRY_RELEASES_CLI} new ${SENTRY_RELEASE}
	${SENTRY_RELEASES_CLI} set-commits --auto --ignore-missing ${SENTRY_RELEASE}
	${SENTRY_RELEASES_CLI} finalize ${SENTRY_RELEASE}

ak-pam/%:
	"$(MAKE)" -C "${TOP}/ak-pam" $*

ak-nss/%:
	"$(MAKE)" -C "${TOP}/ak-nss" $*

ak-browser-support/%:
	"$(MAKE)" -C "${TOP}/ak-browser-support" $*

ak-cli/%:
	"$(MAKE)" -C "${TOP}/ak-cli" $*

ak-platform/%:
	"$(MAKE)" -C "${TOP}/ak-platform" $*

ak-sysd/%:
	"$(MAKE)" -C "${TOP}/ak-sysd" $*

ak-agent/%:
	"$(MAKE)" -C "${TOP}/ak-agent" $*

ak-agent-desktop/%:
	"$(MAKE)" -C "${TOP}/ak-agent-desktop" $*

ak-api-cli-gen/%:
	"$(MAKE)" -C "${TOP}/ak-api-cli-gen" $*

ak-platform-facts/%:
	"$(MAKE)" -C "${TOP}/ak-platform-facts" $*

ak-platform-keyring/%:
	"$(MAKE)" -C "${TOP}/ak-platform-keyring" $*

ak-platform-authz/%:
	"$(MAKE)" -C "${TOP}/ak-platform-authz" $*

ak-api-cli/%:
	"$(MAKE)" -C "${TOP}/ak-api-cli" $*

ak-flow-executor/%:
	"$(MAKE)" -C "${TOP}/ak-flow-executor" $*

ak-meta/%:
	"$(MAKE)" -C "${TOP}/ak-meta" $*

ak-meta-macros/%:
	"$(MAKE)" -C "${TOP}/ak-meta-macros" $*

browser-ext/%:
	"$(MAKE)" -C "${TOP}/browser-ext/" $*

ee/psso/%:
	"$(MAKE)" -C "${TOP}/ee/psso/" $*

ee/wcp/%:
	"$(MAKE)" -C "${TOP}/ee/wcp/" $*

vpkg/macos/%:
	"$(MAKE)" -C "${TOP}/vpkg/macos" $*

vpkg/windows/%:
	"$(MAKE)" -C "${TOP}/vpkg/windows" $*

vpkg/linux/%:
	"$(MAKE)" -C "${TOP}/vpkg/linux" $*

containers/builder/%:
	"$(MAKE)" -C "${TOP}/containers/builder" $*

containers/selenium/%:
	"$(MAKE)" -C "${TOP}/containers/selenium" $*

containers/test/%:
	"$(MAKE)" -C "${TOP}/containers/test" $*

containers/e2e/%:
	"$(MAKE)" -C "${TOP}/containers/e2e" $*

containers/ssh/%:
	"$(MAKE)" -C "${TOP}/containers/ssh" $*