mise.toml

[env]
GOPRIVATE = "github.com/neongreen/mono"
GONOSUMDB = "github.com/neongreen/mono"
# Prevent Go from auto-upgrading to newer versions (fixes version mismatch errors)
GOTOOLCHAIN = "local"
# Add bin/ directory to PATH for dev build scripts
_.path = ["./bin"]

[tools]
go = "1.24.7"
dagger = "0.19.7"
"go:github.com/rhysd/actionlint/cmd/actionlint" = "latest"
"go:github.com/suzuki-shunsuke/pinact/v3/cmd/pinact" = "latest"
zizmor = "latest"
act = "latest"
"pipx:vermin" = "latest"
python = "3.13.5"
mdbook = "latest"
rust = "1.90"
"npm:json-server" = "latest"
pnpm = "latest"
node = "20"
"go:golang.org/x/tools/gopls" = "latest"
gotestsum = "latest"
golangci-lint = "latest"
fnox = "latest"
opentofu = "latest"
spacectl = "latest"
kubectl = "latest"
helm = "latest"

# ============================================================================
# Top-level tasks
# ============================================================================

[tasks.cloc]
description = "Count lines of Go code by file"
run = "cloc --by-file --include-lang=Go --vcs=git ."

[tasks.format]
description = "Format all Go code"
run = "goimports -w ."

[tasks.format-all]
description = "Format everything (Go and Rust)"
depends = ["format", "format-rust"]

[tasks.format-rust]
description = "Format Rust code"
dir = "mdbook-comments"
run = "cargo fmt"

[tasks.deprecations]
description = "List all scheduled deprecations across codebase"
run = '''
echo "=== Scheduled Deprecations ==="
echo ""
echo "Format: deprecated:VERSION [track:BOOL] [remove-after:CONDITION] [reason:TEXT]"
echo ""
rg --color=never --no-heading --line-number "deprecated:v\d+" -g "*.go" -g "*.rs" -g "*.ts" | \
  sed 's|^\([^:]*\):\([^:]*\):\(.*\)|\1:\2: \3|' | \
  sort
echo ""
echo "To scan event logs for usage: tk migrate scan-deprecated"
'''

# NOTE: Project run tasks (tk, conf, printpdf, etc.) are intentionally flat names
# without the :run suffix for convenience, since running is the most common operation.
# All other tasks remain namespaced (project:test, project:build, etc.).

[tasks."jj:track"]
description = "Track all remote bookmarks"
run = """
jj git fetch && jj b t "glob:*@origin"
"""

[tasks."lint:go:golangci"]
description = "Lint all Go code with golangci-lint"
# Use --new-from-rev to grandfather existing violations (see tk-330)
run = "golangci-lint run --new-from-rev=0c23a5a5"

[tasks."lint:go:uselesswrapper"]
description = "Detect useless function wrappers"
run = "go run ./linters/uselesswrapper/cmd/uselesswrapper ./..."

[tasks."lint:go:cobra"]
description = "Lint tk Cobra commands for conventions"
run = "go run ./linters/cobralint/cmd/cobralint ./tk/..."

[tasks."lint:go:dircheck"]
description = "Detect file writes without directory existence checks"
run = "go run ./linters/dircheck/cmd/dircheck ./..."

[tasks."lint:go"]
description = "Lint all Go code"
depends = ["lint:go:golangci", "lint:go:uselesswrapper", "lint:go:cobra", "lint:go:dircheck"]

[tasks."test:go"]
description = "Test all Go code"
run = "go test -run=^$ ./..."

[tasks."fuzz:pathlang"]
description = "Run fuzz tests on pathlang parser (30s smoke test)"
dir = "lib/pathlang"
run = """
echo "Fuzzing Parse..."
go test -fuzz=FuzzParse -fuzztime=15s
echo "Fuzzing RoundTrip..."
go test -fuzz=FuzzParseRoundTrip -fuzztime=15s
echo "Fuzz testing complete. To run longer: go test -fuzz=FuzzParse -fuzztime=1h"
"""

[tasks."fuzz:pathlang:long"]
description = "Run extended fuzz tests on pathlang parser (5 minutes)"
dir = "lib/pathlang"
run = """
echo "Running extended fuzzing (5 minutes)..."
go test -fuzz=FuzzParse -fuzztime=2m30s
go test -fuzz=FuzzParseRoundTrip -fuzztime=2m30s
"""

[tasks."lint:actions:actionlint"]
description = "Lint GitHub Actions workflows with actionlint"
run = "actionlint"

[tasks."lint:actions:pinact"]
description = "Check that GitHub Actions are pinned to specific SHAs"
run = "GITHUB_TOKEN=$(gh auth token) pinact run --check --diff --verify"

[tasks."lint:actions"]
description = "Lint GitHub Actions workflows"
depends = ["lint:actions:actionlint", "lint:actions:pinact"]

[tasks."go:tidy"]
description = "Synchronize Go dependencies"
run = "go mod tidy"

[tasks."lint:go-module"]
description = "Ensure go.mod and go.sum are tidy"
run = """
go mod tidy
git diff --exit-code go.mod go.sum
"""

[tasks."lint:go-vet"]
description = "Run go vet on all packages"
run = "go vet ./..."

# ============================================================================
# Schema management
# ============================================================================

[tasks."schemas:update"]
description = "Update configuration schemas (jj, mise, starship, claude)"
run = "./lib/configschema/scripts/update-schemas.sh"

# ============================================================================
# Dagger
# ============================================================================

# Very important that this doesn't have a "dir" set!
# I spent half a day figuring out why "mise run dagger:lint" was reporting errors.

[tasks."dagger:test"]
description = "Run tests for all Go projects using Dagger"
run = "dagger call test"

[tasks."dagger:lint"]
description = "Lint all Go projects using Dagger"
run = "dagger call lint"

[tasks."dagger:build"]
description = "Build all Go projects using Dagger"
run = "dagger call build"

# ============================================================================
# jj-run-py
# ============================================================================

[tasks."jj-run-py:test"]
description = "Run all tests for jj-run-py"
dir = "jj-run-py"
run = "for f in tests/*.py; do mise x -- python \"$f\" || exit 1; done"

[tasks."jj-run-py:vermin"]
description = "Determine minimum supported Python version for jj-run-py"
dir = "jj-run-py"
run = "vermin --backport argparse --backport dataclasses --backport typing -vv src/"

# ============================================================================
# mdbook-comments
# ============================================================================

[tasks."mdbook-comments:build"]
description = "Build the mdbook-comments preprocessor"
dir = "mdbook-comments"
run = "cargo build --release"

[tasks."mdbook-comments:test"]
description = "Run tests for mdbook-comments"
dir = "mdbook-comments"
run = "cargo test && mise run mdbook-comments:test_render ::: mdbook-comments:test:e2e"

[tasks."mdbook-comments:build:all"]
description = "Build everything: TypeScript, preprocessor, and example book"
dir = "mdbook-comments"
run = """
set -e

echo "🔨 Building mdbook-comments (full build)..."
echo ""

# 1. Build TypeScript/JS assets
echo "📦 Building TypeScript/JS assets..."
pnpm install
pnpm build
echo "✅ JS/TS assets built"
echo ""

# 2. Build Rust preprocessor
echo "🦀 Building mdbook-comments preprocessor..."
cargo build --release
echo "✅ Preprocessor built"
echo ""

# 3. Verify preprocessor binary exists
if [ ! -f "target/release/mdbook-comments" ]; then
    echo "❌ ERROR: Preprocessor binary not found at target/release/mdbook-comments"
    exit 1
fi
echo "✅ Preprocessor binary verified"
echo ""

# 4. Build example book with preprocessor in PATH
echo "📚 Building example book..."
cd example-book
rm -rf book
PATH="../target/release:$PATH" mdbook build
cd ..
echo "✅ Example book built"
echo ""

# 5. Verify the book has embedded assets from preprocessor
echo "🔍 Verifying embedded assets in book..."
if ! grep -q "mdbook-comments assets" example-book/book/index.html; then
    echo "❌ ERROR: Embedded assets marker not found - preprocessor may not have run"
    exit 1
fi
echo "✅ Embedded assets verified"
echo ""

echo "✨ Full build complete!"
"""

[tasks."mdbook-comments:test:unit"]
description = "Run unit tests with Vitest"
dir = "mdbook-comments"
run = "pnpm run test:unit"

[tasks."mdbook-comments:test:e2e"]
description = "Run end-to-end tests with Playwright"
dir = "mdbook-comments"
run = """
set -e

echo "🧹 Cleaning up test environment..."

# Kill any existing servers on the ports we use
pkill -f "json-server.*55432" || true
pkill -f "mdbook serve.*3300" || true

# Also kill any other json-server or mdbook processes that might interfere
pkill -f "json-server" || true
pkill -f "mdbook serve" || true

# Clean up test database
rm -f /tmp/test-db.json

# Wait a moment for processes to fully terminate
sleep 1

echo "✅ Cleanup complete"
echo ""

# Build everything fresh
mise run mdbook-comments:build:all

# Run tests
pnpm playwright test
"""

[tasks."mdbook-comments:test_render"]
description = "Test that the sample book renders correctly with embedded assets"
dir = "mdbook-comments"
run = """
set -e

echo "Testing sample book rendering with embedded assets..."
echo ""

# Build the preprocessor
echo "Building mdbook-comments preprocessor..."
cargo build --release
echo ""

# Clean and build the example book
echo "Building example book..."
cd example-book
rm -rf book
PATH="../target/release:$PATH" mdbook build
echo ""

# Verify embedded assets are present
echo "Verifying embedded assets..."
if ! grep -q "mdbook-comments assets" book/index.html; then
    echo "❌ Embedded assets marker not found"
    exit 1
fi

if ! grep -q "<style>" book/index.html; then
    echo "❌ Embedded CSS not found"
    exit 1
fi

if [ $(grep -c "<script>" book/index.html) -lt 2 ]; then
    echo "❌ Expected multiple script tags (embedded JS) not found"
    exit 1
fi

if ! grep -q "comment-link" book/index.html; then
    echo "❌ Comment links not found"
    exit 1
fi

echo "✅ Sample book renders correctly with embedded assets"
"""

[tasks."mdbook-comments:fmt"]
description = "Format Rust code"
dir = "mdbook-comments"
run = "cargo fmt"

[tasks."mdbook-comments:check"]
description = "Check that code compiles and passes clippy"
dir = "mdbook-comments"
run = "cargo clippy -- -D warnings"

[tasks."mdbook-comments:dev:setup"]
description = "Set up local JSON Server for development (one-time setup)"
dir = "mdbook-comments"
run = """
echo "Setting up local development environment..."
echo ""

# Check for Node.js and npm
if ! command -v node &> /dev/null; then
echo "❌ Node.js not found."
echo ""
echo "Please install Node.js from: https://nodejs.org/"
exit 1
fi

echo "✓ Node.js found"

  # Check if json-server is available (should be installed via mise)
if ! command -v json-server &> /dev/null; then
    echo "❌ json-server not found."
  echo ""
  echo "It should be installed automatically via mise. Try running 'mise install' first."
exit 1
fi

echo "✓ JSON Server found"

  echo ""
echo "✅ Setup complete!"
echo ""
echo "Next steps:"
echo "  1. Run 'mise run mdbook-comments:dev' to start local development"
echo "  2. Open http://localhost:3300 in your browser"
echo "  3. Open http://localhost:55432 for JSON Server API"
"""

[tasks."mdbook-comments:dev"]
description = "Start local development environment"
dir = "mdbook-comments"
run = """
set -e

echo "Starting local development environment..."
echo ""

# Check if json-server is available
if ! command -v json-server &> /dev/null; then
echo "❌ JSON Server not found. Run 'mise run mdbook-comments:dev:setup' first."
exit 1
fi

# Build the preprocessor if needed
if [ ! -f "target/release/mdbook-comments" ]; then
echo "Building mdbook-comments preprocessor..."
cargo build --release
echo ""
fi

# Add preprocessor to PATH for this session
export PATH="$PWD/target/release:$PATH"

# Function to cleanup on exit
cleanup() {
  echo ""
  echo "Stopping servers..."
  # Kill json-server if it's running
  pkill -f "json-server.*55432" || true
  # Kill mdbook serve if it's running
  pkill -f "mdbook serve.*3300" || true
}

# Set up cleanup on exit and interrupts
trap cleanup EXIT INT TERM

# Start JSON Server in background
echo "Starting JSON Server..."
json-server db.json --port 55432 --middlewares json-server-middleware.js --routes routes.json &
JSON_SERVER_PID=$!

# Wait a moment for JSON Server to start
sleep 2

# Check if JSON Server started successfully
if ! kill -0 $JSON_SERVER_PID 2>/dev/null; then
  echo "❌ Failed to start JSON Server"
  exit 1
fi

echo "✅ JSON Server running on port 55432"

# Configure the book with JSON Server config
echo ""
echo "Configuring book for JSON Server..."
./scripts/configure-json-server.sh

# Start mdbook serve
echo ""
echo "Starting mdbook..."
echo ""
echo "📚 Book will be available at: http://localhost:3300"
echo "🔧 JSON Server API at: http://localhost:55432"
echo ""
echo "Press Ctrl+C to stop both servers"
echo ""

cd example-book && PATH="$PWD/../target/release:$PATH" mdbook serve --port 3300

# Cleanup will be called automatically via trap
"""

[tasks."mdbook-comments:dev:stop"]
description = "Stop local JSON Server"
dir = "mdbook-comments"
run = "pkill -f json-server || echo 'JSON Server not running'"

[tasks."mdbook-comments:dev:reset"]
description = "Reset local comments data (deletes all comments)"
dir = "mdbook-comments"
run = """
echo "⚠️  This will delete all local comments data."
read -p "Are you sure? (y/N) " -n 1 -r
echo
if [[ $REPLY =~ ^[Yy]$ ]]; then
# Reset to initial state with just the sample comment
cat > db.json << 'EOF'
{
"comments": [
  {
      "id": "sample-comment-1",
      "paragraph-id": "chapter-1-block-0-sample",
      "metadata": {
        "id": "chapter-1-block-0-sample",
        "position": {
          "file": "chapter1.md",
          "block-index": 0
        },
        "content": "This is a sample paragraph for testing the commenting system.",
        "context": {
          "prev": null,
          "next": "This is the next paragraph that follows.",
          "heading-path": ["Chapter 1", "Getting Started"]
        },
        "commit": "abc123def"
      },
      "author": "Test User",
      "text": "This is a sample comment to test the commenting functionality!",
      "created": "2024-01-01T12:00:00Z",
      "parent-id": null,
      "replies": []
    }
  ]
}
EOF
    echo "✅ Comments data reset complete"
  else
    echo "Cancelled"
  fi
"""

[tasks."mdbook-comments:dev:api"]
description = "Open JSON Server API in browser"
dir = "mdbook-comments"
run = "open http://localhost:55432 || xdg-open http://localhost:55432 || echo 'Open http://localhost:55432 in your browser'"

[tasks."mdbook-comments:dev:logs"]
description = "View JSON Server status (check if running)"
dir = "mdbook-comments"
run = "ps aux | grep json-server | grep -v grep || echo 'JSON Server not running'"

[tasks."mdbook-comments:dev:status"]
description = "Show JSON Server status"
dir = "mdbook-comments"
run = "curl -s http://localhost:55432/comments | head -c 200 || echo 'JSON Server not responding'"

[tasks."mdbook-comments:docker:build"]
description = "Build Docker image locally"
dir = "mdbook-comments"
run = "docker build -t mdbook-comments-demo ."

[tasks."mdbook-comments:docker:run"]
description = "Run Docker image locally (requires NEON_API_URL and NEON_API_KEY env vars)"
dir = "mdbook-comments"
run = """
  if [ -z "$NEON_API_URL" ] || [ -z "$NEON_API_KEY" ]; then
    echo "Error: NEON_API_URL and NEON_API_KEY environment variables are required"
    echo "Set them before running this task:"
    echo '  export NEON_API_URL="https://ep-xxx-xxx.us-east-2.aws.neon.tech/v2/query"'
    echo '  export NEON_API_KEY="neon_api_key_xxxxxxxxxxxxxxxxxxxxx"'
    exit 1
  fi
  docker run -p 3000:3000 \
    -e NEON_API_URL="$NEON_API_URL" \
    -e NEON_API_KEY="$NEON_API_KEY" \
    mdbook-comments-demo
"""

# ============================================================================
# tk-vscode
# NOTE: These tasks are also used by want/vscode.go for building tk-vscode
# from PRs/branches. If you rename or change these tasks, update want/vscode.go.
# See: want/vscode.go (search for "tk-vscode")
# ============================================================================

[tasks."tk-vscode:install-deps"]
description = "Install dependencies for tk-vscode"
run = "cd tk-vscode && npm install"

[tasks."tk-vscode:build"]
description = "Compile & package the VS Code extension"
run = """
cd tk-vscode
npm run compile
npm run package
"""

[tasks."tk-vscode:install"]
description = "Install the VS Code extension"
run = """
cd tk-vscode
code --install-extension tk-0.0.1.vsix --force
"""

[tasks."tk-vscode:watch"]
description = "Recompile on source changes"
run = "cd tk-vscode && npm run watch"

# ============================================================================
# conf
# ============================================================================

[tasks.conf]
description = "Build and run conf"
dir = "conf"
run = "go run ."

[tasks."conf:test"]
description = "Run all tests for conf"
dir = "conf"
run = "go test -v ./..."

[tasks."conf:build"]
description = "Build conf binary"
dir = "conf"
run = """
set -euo pipefail
go build -trimpath -o {{cwd}}/_build/conf .
{{cwd}}/_build/conf version
echo "{{cwd}}/_build/conf"
"""

# ============================================================================
# aihook
# ============================================================================

[tasks.aihook]
description = "Build and run aihook"
dir = "aihook"
run = "go run ."

[tasks."aihook:test"]
description = "Run tests for aihook"
dir = "aihook"
run = "go test ./..."

[tasks."aihook:build"]
description = "Build aihook binary"
dir = "aihook"
run = """
set -euo pipefail
go build -trimpath -o {{cwd}}/_build/aihook .
{{cwd}}/_build/aihook version
echo "{{cwd}}/_build/aihook"
"""

[tasks."aihook:check"]
description = "Check that Go code and tests compile and type check"
dir = "aihook"
run = "go test -run=^$ ./..."

# ============================================================================
# dissect
# ============================================================================

[tasks."dissect:test"]
description = "Run tests for dissect"
dir = "dissect"
run = "gotestsum"

[tasks."dissect:build"]
description = "Build the project into _build/dissect"
dir = "dissect"
run = """
set -euo pipefail
go build -trimpath -o {{cwd}}/_build/dissect .
{{cwd}}/_build/dissect version
echo "{{cwd}}/_build/dissect"
"""

[tasks."dissect:fetch-gotools"]
description = "Fetch Go tools (including gopls) for AI to inspect"
dir = "dissect"
run = "git clone https://github.com/golang/tools.git _gotools"

# Not using "go run" because we want it to be fast
[tasks.dissect]
description = "Run the dissect project"
depends = ["dissect:build"]
dir = "dissect"
run = """
DIR="$(pwd)"
cd {{cwd}}
"$DIR/_build/dissect"
"""

[tasks."dissect:check"]
description = "Check that Go code and tests compile and type check"
dir = "dissect"
run = "go test -run=^$ ./..."

# ============================================================================
# jj-run
# ============================================================================

[tasks.jj-run]
description = "Build and run jj-run"
dir = "jj-run"
run = "go run ."

[tasks."jj-run:test"]
description = "Run all tests for jj-run"
dir = "jj-run"
run = "go test -v ./..."

[tasks."jj-run:build"]
description = "Build jj-run binary"
dir = "jj-run"
# Only use Go for this task - avoids installing gopls which requires Go 1.25+
tools = { go = "1.24.7" }
run = """
set -euo pipefail
go build -trimpath -o {{cwd}}/_build/jj-run .
{{cwd}}/_build/jj-run --version
echo "{{cwd}}/_build/jj-run"
"""


# ============================================================================
# ingest
# ============================================================================

[tasks.ingest]
description = "Build and run the ingest CLI"
dir = "ingest"
run = "go run ."

[tasks."ingest:test"]
description = "Run all ingest tests"
dir = "ingest"
run = "go test ./..."

[tasks."ingest:test:integration"]
description = "Run ingest CLI and integration suites"
dir = "ingest"
run = "go test . ./pkg/integration"

[tasks."ingest:build"]
description = "Build ingest binary"
dir = "ingest"
run = """
set -euo pipefail
go build -trimpath -o {{cwd}}/_build/ingest .
{{cwd}}/_build/ingest version
echo "{{cwd}}/_build/ingest"
"""


# ============================================================================
# lib/ghclient
# ============================================================================


[tasks."lib-ghclient:test"]
description = "Run tests for lib/ghclient"
dir = "lib/ghclient"
run = "go test ./..."

# ============================================================================
# markdown-format
# ============================================================================

[tasks.markdown-format]
description = "Build and run markdown-format"
dir = "markdown-format"
run = "go run ."

[tasks."markdown-format:test"]
description = "Run tests for markdown-format"
dir = "markdown-format"
run = "go test ./..."

[tasks."markdown-format:build"]
description = "Build markdown-format binary"
dir = "markdown-format"
run = """
go build -trimpath -o {{cwd}}/_build/markdown-format .
{{cwd}}/_build/markdown-format -help
echo "{{cwd}}/_build/markdown-format"
"""

[tasks."markdown-format:check"]
description = "Check that Go code and tests compile and type check"
dir = "markdown-format"
run = "go test -run=^$ ./..."

# ============================================================================
# printpdf
# ============================================================================

[tasks.printpdf]
description = "Build and run printpdf"
dir = "printpdf"
run = "go run ."


[tasks."printpdf:check"]
description = "Check that Go code and tests compile and type check"
dir = "printpdf"
run = "go test -run=^$ ./..."

[tasks."printpdf:test"]
description = "Run tests for printpdf"
dir = "printpdf"
run = "go test ./..."

[tasks."printpdf:test-golden"]
description = "Run golden tests (requires pdftoppm and imagemagick)"
dir = "printpdf"
run = "go test ./pkg/golden -v -timeout=10m"

[tasks."printpdf:update-goldens"]
description = "Update golden reference images (review before committing!)"
dir = "printpdf"
run = "UPDATE_GOLDENS=1 go test ./pkg/golden -v -timeout=10m"

[tasks."printpdf:build"]
description = "Build the project into _build/printpdf"
dir = "printpdf"
run = """
set -euo pipefail
go build -trimpath -o {{cwd}}/_build/printpdf .
{{cwd}}/_build/printpdf version
echo "{{cwd}}/_build/printpdf"
"""

# ============================================================================
# prrun
# ============================================================================

[tasks.prrun]
description = "Build and run prrun"
dir = "prrun"
run = "go run ."

[tasks."prrun:check"]
description = "Check that Go code and tests compile and type check"
dir = "prrun"
run = "go test -run=^$ ./..."

[tasks."prrun:test"]
description = "Run tests for prrun"
dir = "prrun"
run = "go test ./..."

[tasks."prrun:test:integration"]
description = "Run integration tests (requires access to private repo)"
dir = "prrun"
run = "PRRUN_INTEGRATION_TEST=1 go test ./..."

[tasks."prrun:build"]
description = "Build prrun binary"
dir = "prrun"
run = """
go build -trimpath -o {{cwd}}/_build/prrun .
{{cwd}}/_build/prrun --version
echo "{{cwd}}/_build/prrun"
"""

# ============================================================================
# tk
# ============================================================================

[tasks.tk]
description = "Build and run tk"
dir = "tk"
run = "go run ."


[tasks."tk:check"]
description = "Check that Go code and tests compile and type check"
dir = "tk"
run = "go test -run=^$ ./..."

[tasks."tk:test"]
description = "Run tests for tk"
dir = "tk"
run = "go test ./..."

[tasks."tk:build"]
description = "Build tk binary"
dir = "tk"
run = """
go build -trimpath -o {{cwd}}/_build/tk .
{{cwd}}/_build/tk version
echo "{{cwd}}/_build/tk"
"""

[tasks."tk:log:errors"]
description = "Show recent tk command errors from the invocation log"
tools.glow = "latest"
tools.jq = "latest"
run = '''
  tail -10000 ~/.tk/log.jsonl |
    jq -r 'select(.exit_code != 0) | 
      (.stderr | split("\n")) as $lines |
      "## \($lines[0])\n\n`\(.command) \(.args | join(" "))` exited with \(.exit_code)\n\n```\n\($lines[:10] | join("\n"))\n```\n\n"' | 
    glow -
''' 

# ============================================================================
# want
# ============================================================================

[tasks.want]
description = "Build and run want"
dir = "want"
run = "go run ."


[tasks."want:check"]
description = "Check that Go code and tests compile and type check"
dir = "want"
run = "go test -run=^$ ./..."

[tasks."want:test"]
description = "Run tests for want"
dir = "want"
run = "go test ./..."

[tasks."want:build"]
description = "Build want binary"
dir = "want"
run = """
go build -trimpath -o {{cwd}}/_build/want .
{{cwd}}/_build/want version
echo "{{cwd}}/_build/want"
"""

# ============================================================================
# cloud (OpenTofu)
# ============================================================================

[tasks."cloud:validate"]
description = "Validate all OpenTofu modules under cloud/terraform"
run = '''
set -euo pipefail

# Find unique directories containing .tf files under cloud/terraform and validate each
for dir in $(find cloud/terraform -type f -name '*.tf' -exec dirname {} \; | sort -u); do
  echo "==> $dir"
  (
    cd "$dir"
    # Init without touching any remote backend; download providers only
    tofu init -backend=false -input=false >/dev/null
    tofu validate
  )
done
'''

[tasks."cloud:watch"]
description = "Watch/tail logs of the latest Spacelift run for 01-hcloud stack"
dir = "cloud"
quiet = true
run = '''
set -euo pipefail
fnox exec -- spacectl stack logs --id mono-cloud-01 --run-latest --tail
'''

[tasks."cloud:outputs:hcloud"]
description = "Show current outputs for 01-hcloud stack"
dir = "cloud"
quiet = true
run = '''
set -euo pipefail
fnox exec -- spacectl stack outputs --id mono-cloud-01
'''

[tasks."cloud:ip"]
description = "Print server IPv4 from 01-hcloud outputs"
tools.jq = "latest"
quiet = true
dir = "cloud"
run = '''
set -euo pipefail
fnox exec -- spacectl stack outputs --id mono-cloud-01 -o json \
  | jq -r '.[] | select(.id=="server_ipv4") | .value | fromjson'
'''

[tasks."cloud:kubeconfig"]
description = "Fetch k3s kubeconfig from server and patch server IP"
dir = "cloud"
tools.jq = "latest"
quiet = true
run = '''
set -euo pipefail
# Get IP directly (avoid nested mise calls)
IP=$(fnox exec -- spacectl stack outputs --id mono-cloud-01 -o json \
  | jq -r '.[] | select(.id=="server_ipv4") | .value | fromjson' | tr -d '\n\r')
# Check if k3s is ready (kubeconfig exists on server)
if ! ssh -o StrictHostKeyChecking=no -o ConnectTimeout=5 "root@${IP}" 'test -f /etc/rancher/k3s/k3s.yaml' 2>/dev/null; then
  echo "Error: k3s not ready yet on server. Wait a minute for cloud-init to finish." >&2
  exit 1
fi
ssh -o StrictHostKeyChecking=no "root@${IP}" 'cat /etc/rancher/k3s/k3s.yaml' > kubeconfig
# Replace default localhost server with public IP
perl -pi -e "s#https://127\\.0\\.0\\.1:6443#https://${IP}:6443#g" kubeconfig
chmod 600 kubeconfig
echo "KUBECONFIG=$(pwd)/kubeconfig"
'''

[tasks."cloud:kubectl"]
description = "Run kubectl with kubeconfig automatically set (ensures kubeconfig exists and is valid first)"
dir = "cloud"
quiet = true
run = '''
set -euo pipefail
# Ensure kubeconfig exists and is not empty
if [ ! -s kubeconfig ]; then
  echo "Fetching kubeconfig..." >&2
  mise run cloud:kubeconfig >/dev/null 2>&1
fi
# Verify kubeconfig is valid (has server URL)
if ! grep -q "server:" kubeconfig 2>/dev/null; then
  echo "Error: kubeconfig appears invalid, re-fetching..." >&2
  mise run cloud:kubeconfig >/dev/null 2>&1
fi
KUBECONFIG="$(pwd)/kubeconfig" kubectl "$@"
'''

[tasks."cloud:helm:repo:add"]
description = "Add Dagger Helm repository"
dir = "cloud"
quiet = true
run = '''
set -euo pipefail
helm repo add dagger https://dagger.io/helm-charts || true
helm repo update dagger
'''

[tasks."cloud:gvisor:deploy"]
description = "Deploy gVisor RuntimeClass"
dir = "cloud"
quiet = true
run = '''
set -euo pipefail
mise run cloud:kubectl apply -f k8s/system/gvisor/runtimeclass.yaml
'''

[tasks."cloud:dagger:deploy"]
description = "Deploy Dagger Engine to k3s cluster (with gVisor)"
dir = "cloud"
quiet = true
run = '''
set -euo pipefail
# Ensure gVisor RuntimeClass exists
mise run cloud:gvisor:deploy
# Deploy Dagger Engine
mise run cloud:kubectl apply -f k8s/apps/dagger/deployment.yaml
mise run cloud:kubectl wait --for=condition=available --timeout=300s deployment/dagger-engine -n dagger
'''

[tasks."cloud:dagger:status"]
description = "Check Dagger Engine deployment status"
dir = "cloud"
quiet = true
run = '''
set -euo pipefail
mise run cloud:kubectl get pods -n dagger
mise run cloud:kubectl get svc -n dagger
'''

[tasks."cloud:dagger:logs"]
description = "Show Dagger Engine logs"
dir = "cloud"
quiet = true
run = '''
set -euo pipefail
POD=$(mise run cloud:kubectl get pods -n dagger -l app=dagger-engine -o jsonpath='{.items[0].metadata.name}')
mise run cloud:kubectl logs -n dagger "$POD" "$@"
'''

[tasks."cloud:n8n:deploy"]
description = "Deploy n8n workflow automation platform to k3s cluster"
dir = "cloud"
quiet = true
run = '''
set -euo pipefail
# Ensure gVisor RuntimeClass exists
mise run cloud:gvisor:deploy
# Deploy n8n (applies all manifests in order)
mise run cloud:kubectl apply -f k8s/apps/n8n/namespace.yaml

# Create secret from fnox-managed passwords
fnox exec -- bash -c "cat <<EOF | kubectl apply -f -
apiVersion: v1
kind: Secret
metadata:
  namespace: n8n
  name: postgres-secret
type: Opaque
stringData:
  POSTGRES_USER: postgres
  POSTGRES_PASSWORD: \$N8N_POSTGRES_ADMIN_PASSWORD
  POSTGRES_DB: n8n
  POSTGRES_NON_ROOT_USER: n8n
  POSTGRES_NON_ROOT_PASSWORD: \$N8N_POSTGRES_N8N_PASSWORD
EOF
"

mise run cloud:kubectl apply -f k8s/apps/n8n/postgres-configmap.yaml
mise run cloud:kubectl apply -f k8s/apps/n8n/postgres-pvc.yaml
mise run cloud:kubectl apply -f k8s/apps/n8n/n8n-pvc.yaml
mise run cloud:kubectl apply -f k8s/apps/n8n/postgres-deployment.yaml
mise run cloud:kubectl apply -f k8s/apps/n8n/postgres-service.yaml
echo "Waiting for PostgreSQL to be ready..."
mise run cloud:kubectl wait --for=condition=ready pod -l service=postgres-n8n -n n8n --timeout=120s
mise run cloud:kubectl apply -f k8s/apps/n8n/n8n-deployment.yaml
mise run cloud:kubectl apply -f k8s/apps/n8n/n8n-service.yaml
mise run cloud:kubectl apply -f k8s/apps/n8n/network-policy.yaml
echo "Waiting for n8n to be ready..."
mise run cloud:kubectl wait --for=condition=ready pod -l service=n8n -n n8n --timeout=120s
echo ""
echo "n8n deployed successfully!"
echo "To access n8n, run: mise run cloud:n8n:port-forward"
'''

[tasks."cloud:n8n:status"]
description = "Check n8n deployment status"
dir = "cloud"
quiet = true
run = '''
set -euo pipefail
echo "=== n8n Pods ==="
mise run cloud:kubectl get pods -n n8n
echo ""
echo "=== n8n Services ==="
mise run cloud:kubectl get svc -n n8n
echo ""
echo "=== n8n PVCs ==="
mise run cloud:kubectl get pvc -n n8n
'''

[tasks."cloud:n8n:logs"]
description = "Show n8n logs (use -- -f to follow)"
dir = "cloud"
quiet = true
run = '''
set -euo pipefail
POD=$(mise run cloud:kubectl get pods -n n8n -l service=n8n -o jsonpath='{.items[0].metadata.name}')
mise run cloud:kubectl logs -n n8n "$POD" "$@"
'''

[tasks."cloud:n8n:logs:postgres"]
description = "Show PostgreSQL logs (use -- -f to follow)"
dir = "cloud"
quiet = true
run = '''
set -euo pipefail
POD=$(mise run cloud:kubectl get pods -n n8n -l service=postgres-n8n -o jsonpath='{.items[0].metadata.name}')
mise run cloud:kubectl logs -n n8n "$POD" "$@"
'''

[tasks."cloud:n8n:port-forward"]
description = "Port-forward n8n to localhost:5678"
dir = "cloud"
run = '''
set -euo pipefail
echo "Port-forwarding n8n to http://localhost:5678"
echo "Press Ctrl+C to stop"
mise run cloud:kubectl port-forward -n n8n svc/n8n 5678:5678
'''

[tasks."cloud:n8n:delete"]
description = "Delete n8n deployment (WARNING: destroys data)"
dir = "cloud"
run = '''
set -euo pipefail
echo "WARNING: This will delete all n8n data!"
read -p "Are you sure? (yes/no): " confirm
if [ "$confirm" = "yes" ]; then
  mise run cloud:kubectl delete namespace n8n
  echo "n8n deleted"
else
  echo "Aborted"
fi
'''

# ============================================================================
# lion tasks
# ============================================================================

[tasks."lion:test"]
description = "Run tests for lion"
dir = "lion"
run = "go test ./..."

[tasks."lion:build"]
description = "Build the project into _build/lion"
dir = "lion"
run = '''
set -euo pipefail
mkdir -p ../_build
go build -o ../_build/lion .
'''

[tasks."lion"]
description = "Run lion"
run = "go run ./lion"