maintainer="Hoang Nguyen <folliekazetani@protonmail.com>"
pkgname=opa
pkgver=1.4.2
pkgrel=1
pkgdesc="Open source, general-purpose policy engine"
url="https://www.openpolicyagent.org/"
arch="x86_64 aarch64" # blocked by wasmtime
license="Apache-2.0"
makedepends="go wasmtime-dev"
checkdepends="tzdata"
subpackages="
	$pkgname-doc
	$pkgname-bash-completion
	$pkgname-fish-completion
	$pkgname-zsh-completion
	"
source="
	$pkgname-$pkgver.tar.gz::https://github.com/open-policy-agent/opa/archive/refs/tags/v$pkgver.tar.gz
	update-wasmtime-go.patch
	"
options="net" # go mod vendor

# secfixes:
#   1.4.2-r0:
#     - CVE-2025-46569

export GOCACHE="${GOCACHE:-"$srcdir/go-cache"}"
export GOTMPDIR="${GOTMPDIR:-"$srcdir"}"
export GOMODCACHE="${GOMODCACHE:-"$srcdir/go"}"

prepare() {
	default_prepare

	# Do this to keep our wasmtime patch small, until upstream resolves the issue
	go mod vendor
}

build() {
	# report.ExternalServiceURL is left blank to disable telemetry
	# - "opa version -c" errors out
	# - "opa run" fails the version check process silently in the background
	# this is intended :)
	local goldflags="
	-X github.com/open-policy-agent/opa/version.Version=$pkgver
	-X github.com/open-policy-agent/opa/version.Hostname=AlpineLinux
	-X github.com/open-policy-agent/opa/version.Vcs=0000000000000000000000000000000000000000
	-X github.com/open-policy-agent/opa/version.Timestamp=$(date -u "+%Y-%m-%dT%H:%M:%SZ" ${SOURCE_DATE_EPOCH:+-d @$SOURCE_DATE_EPOCH})
	-X github.com/open-policy-agent/opa/internal/report.ExternalServiceURL=
	"

	export CGO_CFLAGS="$CFLAGS"
	export CGO_LDFLAGS="$LDFLAGS -L/usr/lib -lwasmtime"

	go build -v -ldflags "$goldflags" -tags opa_wasm

	mkdir -p man/
	go run build/generate-man/generate.go man/

	for shell in bash fish zsh; do
		./opa completion $shell > opa.$shell
	done
}

check() {
	go test ./...
}

package() {
	install -Dm755 opa -t "$pkgdir"/usr/bin/

	install -Dm644 man/*.1 -t "$pkgdir"/usr/share/man/man1/

	install -Dm644 opa.bash \
		"$pkgdir"/usr/share/bash-completion/completions/opa
	install -Dm644 opa.fish \
		"$pkgdir"/usr/share/fish/vendor_completions.d/opa.fish
	install -Dm644 opa.zsh \
		"$pkgdir"/usr/share/zsh/site-functions/_opa
}

sha512sums="
e6b9857fe8892f296d8b93290b052e7ebf2c40fb7e2fc3d84779d72afada9be06ceb9f33167b05a67217990cb0ebd705df0f32b00c1ffd963920ca9789098a8c  opa-1.4.2.tar.gz
25d1faa62636109beb3e15eb97c39e580ba188147a2f3632791476ee638f82a0f6e3098ef82088dd8d52e505437b63a6e30775b01adf8c08ea04f3ca57e2755e  update-wasmtime-go.patch
"
