# Copyright 1999-2026 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2

EAPI=8

inherit cmake desktop go-env go-module systemd xdg-utils

MY_PN="${PN/-mail/}"
MY_P="${MY_PN}-${PV}"

DESCRIPTION="Serves Proton Mail to IMAP/SMTP clients"
HOMEPAGE="https://proton.me/mail/bridge https://github.com/ProtonMail/proton-bridge/"
SRC_URI="https://github.com/ProtonMail/${MY_PN}/archive/refs/tags/v${PV}.tar.gz -> ${P}.tar.gz
	https://distfiles.obentoo.org/${P}-vendor.tar.xz"
S="${WORKDIR}"/${MY_P}

LICENSE="GPL-3+ Apache-2.0 BSD BSD-2 ISC LGPL-3+ MIT MPL-2.0 Unlicense"
SLOT="0"
KEYWORDS="~amd64"
# `systemd` gates the user unit ONLY. The OpenRC user script is installed
# unconditionally -- see src_install.
# BENTOO-DIVERGENCE: IUSE - systemd gates the user unit. Per project policy
# the OpenRC user service is installed unconditionally and only the unit is
# gated, so a non-systemd system can still run the daemon.
IUSE="gui systemd"

# Tests still require Internet access; the build no longer does.
PROPERTIES="test_network"
# The vendored dependencies come from SRC_URI, not from the network. Until
# 2026-09-05 src_prepare ran `go mod download` against the live module proxy,
# which is why RESTRICT carried network-sandbox: the build was not
# reproducible and its inputs were not in the Manifest. The vendor tarball
# above replaces that, the same way ::gentoo does it.
RESTRICT="test strip"

BDEPEND="
	>=dev-lang/go-1.21
"

# BENTOO-DIVERGENCE: RDEPEND - libcbor, libfido2 and openssl are named
# explicitly here. ::gentoo does not name them because its vendored tree
# resolves them at link time; ours names them because they are cgo
# libraries, which Go vendoring does not supply.
# BENTOO-DIVERGENCE: DEPEND - same three, through RDEPEND.
RDEPEND="
	app-crypt/libsecret
	dev-libs/libcbor
	dev-libs/libfido2
	dev-libs/openssl:=
	gui? (
		>=dev-libs/protobuf-21.12:=
		dev-libs/re2:=
		>=dev-libs/sentry-native-0.6.5-r1
		dev-qt/qtbase:6=[gui,icu,widgets]
		dev-qt/qtdeclarative:6=[widgets]
		dev-qt/qtsvg:6=
		media-libs/mesa
		net-libs/grpc:=
	)
"
DEPEND="${RDEPEND}"

PATCHES=(
	"${FILESDIR}"/${PN}-3.15.1-gui_gentoo.patch
)

# $S is there for bug 957684
DOCS=( "${S}"/{README,Changelog}.md )

src_unpack() {
	default

	# The vendor tarball unpacks to ${WORKDIR}/vendor; the build wants it inside
	# the source tree. Same shape ::gentoo uses.
	if [[ -d "${WORKDIR}"/vendor ]]; then
		mv "${WORKDIR}"/vendor "${S}"/vendor || die
	fi

	go-env_set_compile_environment
}

src_prepare() {
	xdg_environment_reset
	default
	
	if use gui; then
		# prepare desktop file
		local desktopFilePath="${S}"/dist/${MY_PN}.desktop
		sed -i 's/protonmail/proton-mail/g' ${desktopFilePath} || die
		sed -i 's/Exec=proton-mail-bridge/Exec=proton-mail-bridge-gui/g' ${desktopFilePath} || die

		# build GUI
		local PATCHES=()
		BUILD_DIR="${WORKDIR}"/gui_build \
			CMAKE_USE_DIR="${S}"/internal/frontend/bridge-gui/bridge-gui \
			cmake_src_prepare
	fi
}

src_configure() {
	# Set Go build environment
	export CGO_ENABLED=1
	export CGO_CFLAGS="${CFLAGS}"
	export CGO_CPPFLAGS="${CPPFLAGS}"
	export CGO_CXXFLAGS="${CXXFLAGS}"
	export CGO_LDFLAGS="${LDFLAGS} -lfido2 -lcbor -lssl -lcrypto"
	
	# Use vendored modules for build reproducibility
	export GOFLAGS="${GOFLAGS} -mod=vendor"
	
	if use gui; then
		local mycmakeargs=(
			-DBRIDGE_APP_FULL_NAME="Proton Mail Bridge"
			-DBRIDGE_APP_VERSION="${PV}+git"
			-DBRIDGE_REPO_ROOT="${S}"
			-DBRIDGE_TAG="NOTAG"
			-DBRIDGE_VENDOR="Gentoo Linux"
			-DCMAKE_DISABLE_PRECOMPILE_HEADERS=OFF
			-Dsentry_DIR="${S}/internal/sentry"
		)
		BUILD_DIR="${WORKDIR}"/gui_build \
			CMAKE_USE_DIR="${S}"/internal/frontend/bridge-gui/bridge-gui \
			cmake_src_configure
	fi
}

src_compile() {
	# Ensure Go modules are available during compilation
	export GOFLAGS="${GOFLAGS} -mod=vendor"
	
	# Build with proper Go flags for Gentoo
	emake -Onone \
		GOFLAGS="-buildmode=pie -mod=vendor ${GOFLAGS}" \
		build-nogui

	if use gui; then
		BUILD_DIR="${WORKDIR}"/gui_build \
			CMAKE_USE_DIR="${S}"/internal/frontend/bridge-gui/bridge-gui \
			cmake_src_compile
	fi
}

src_test() {
	# Use vendored modules for testing
	export GOFLAGS="${GOFLAGS} -mod=vendor"
	emake -Onone test
}

src_install() {
	exeinto /usr/bin
	newexe bridge ${PN}

	if use gui; then
		BUILD_DIR="${WORKDIR}"/gui_build \
			CMAKE_USE_DIR="${S}"/internal/frontend/bridge-gui/bridge-gui \
			cmake_src_install
		mv "${ED}"/usr/bin/bridge-gui "${ED}"/usr/bin/${PN}-gui || die
		newicon {"${S}"/dist/bridge,${PN}}.svg
		newmenu {dist/${MY_PN},${PN}}.desktop
	fi

	# The only service this package ships is user-scope, so both files below
	# are user-scope too. The OpenRC script is installed unconditionally: it
	# costs a systemd user nothing, while gating it would leave an OpenRC user
	# with no supervised way to run the bridge at all.
	#
	# newinitd has no user-scope variant, so the script goes in as a plain
	# executable, following sys-apps/xdg-desktop-portal. Note that the OpenRC
	# script cannot reproduce the unit's sandboxing directives -- see the
	# comment at the top of the file.
	exeinto /etc/user/init.d
	newexe "${FILESDIR}"/${PN}.initd ${PN}

	if use systemd; then
		systemd_newuserunit "${FILESDIR}"/${PN}.service-r1 ${PN}.service
	fi

	einstalldocs
}

# BENTOO-DIVERGENCE: DEFINED_PHASES - postinst and postrm, which install and
# tear down the service integration described under IUSE above.
pkg_postinst() {
	xdg_desktop_database_update
	xdg_icon_cache_update
	
	elog "Proton Mail Bridge has been installed."
	elog "Go dependencies were fetched during build process."
	elog ""
	elog "To start the service:"
	elog "  systemctl --user enable --now proton-mail-bridge.service"
	elog ""
	if use gui; then
		elog "GUI version is available as: proton-mail-bridge-gui"
	fi
	elog "Command-line version is available as: proton-mail-bridge"
}

pkg_postrm() {
	xdg_desktop_database_update
	xdg_icon_cache_update
}