dev

#!/usr/bin/env bash
set -e

DEV_TAG_GREEN="\033[48;5;2m\033[38;5;16m dev \033[0m"
DEV_TAG_RED="\033[48;5;1m\033[38;5;16m dev \033[0m"
DEV_TAG_BLUE="\033[48;5;4m\033[38;5;16m dev \033[0m"

PROJECT_ROOT="$PWD"
PROJECT_NAME=$(basename "$PROJECT_ROOT")

REPO_DIR="$PROJECT_ROOT/repo"
CONTAINER_DIR="$PROJECT_ROOT/container"

COMPOSE_FILE="$CONTAINER_DIR/compose.yml"
DOCKERFILE="$CONTAINER_DIR/Dockerfile"

SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
TEMPLATES_DIR="$SCRIPT_DIR/templates"

dev_help() {
  echo
  echo -e "${DEV_TAG_BLUE} Available commands:"
  echo -e "${DEV_TAG_BLUE}   dev          Start container (builds if no image)"
  echo -e "${DEV_TAG_BLUE}   dev build    Build container image"
  echo -e "${DEV_TAG_BLUE}   dev rebuild  Rebuild container image (--no-cache)"
  echo -e "${DEV_TAG_BLUE}   dev run      Run container (no build)"
  echo -e "${DEV_TAG_BLUE}   dev cli      Open shell in running container"
  echo -e "${DEV_TAG_BLUE}   dev init     Initialize container environment"
  echo -e "${DEV_TAG_BLUE}   dev clean    Remove container image and environment"
  echo
}

ensure_project_root() {
  if [ ! -d "$REPO_DIR" ]; then
    echo -e "${DEV_TAG_RED} Error: repo/ folder not found."
    echo -e "${DEV_TAG_RED} Run this command from the project root."
    exit 1
  fi
}

ensure_initialized() {
  if [ ! -d "$CONTAINER_DIR" ]; then
    echo -e "${DEV_TAG_RED} Error: container/ not found. Run 'dev init' first."
    exit 1
  fi
}

export_host_ids() {
  export HOST_UID=$(id -u)
  export HOST_GID=$(id -g)
}

dev_dev() {

  ensure_project_root
  ensure_initialized

  export_host_ids

  if ! docker images "${PROJECT_NAME}-dev-app" -q 2>/dev/null | grep -q .; then
    echo -e "${DEV_TAG_BLUE} No image found. Building…"
    docker compose --progress plain -f "$COMPOSE_FILE" build
  fi

  echo -e "${DEV_TAG_BLUE} Starting…"

  docker compose -f "$COMPOSE_FILE" run --rm --service-ports app
}

dev_build() {

  ensure_project_root
  ensure_initialized

  export_host_ids

  docker compose --progress plain -f "$COMPOSE_FILE" build
}

dev_rebuild() {

  ensure_project_root
  ensure_initialized

  export_host_ids

  docker compose --progress plain -f "$COMPOSE_FILE" build --no-cache
}

dev_run() {

  ensure_project_root
  ensure_initialized

  export_host_ids

  docker compose -f "$COMPOSE_FILE" run --rm --service-ports app
}

dev_cli() {

  ensure_project_root
  ensure_initialized

  export_host_ids

  docker compose -f "$COMPOSE_FILE" exec app sh
}

dev_init() {

  ensure_project_root

  if [ -d "$CONTAINER_DIR" ]; then
    echo -e "${DEV_TAG_RED} Environment already exists."
    echo -e "${DEV_TAG_RED} Run: dev"
    exit 1
  fi

  mkdir -p "$CONTAINER_DIR"

  RUNTIME=$(printf "%s\n" node ubuntu | fzf --prompt="Select runtime > ")

  if [ -z "$RUNTIME" ]; then
    echo -e "${DEV_TAG_RED} No runtime selected."
    exit 1
  fi

  IMAGE_TAG=$(curl -s "https://registry.hub.docker.com/v2/repositories/library/${RUNTIME}/tags?page_size=100" |
    jq -r '.results[].name' |
    grep -E '^[0-9]+(\.[0-9]+)?' |
    sort -Vr |
    fzf --prompt="Select ${RUNTIME} version > ")

  if [ -z "$IMAGE_TAG" ]; then
    echo -e "${DEV_TAG_RED} No version selected."
    exit 1
  fi

  IMAGE="${RUNTIME}:${IMAGE_TAG}"

  # Render Dockerfile
  sed -e "s|{{IMAGE}}|$IMAGE|g" "$TEMPLATES_DIR/Dockerfile" > "$DOCKERFILE"
  if [ "$RUNTIME" = "node" ]; then
    local tmpf=$(mktemp)
    cat > "$tmpf" <<'HARDENING'
# Harden npm config - blocks postinstall hooks and fast-burst worms
RUN echo "ignore-scripts=true" >> /root/.npmrc && \
    echo "min-release-age=7" >> /root/.npmrc && \
    echo "ignore-scripts=true" >> /etc/npmrc && \
    echo "min-release-age=7" >> /etc/npmrc
HARDENING
    sed -i "/{{NPM_HARDENING}}/r $tmpf" "$DOCKERFILE"
    sed -i "/{{NPM_HARDENING}}/d" "$DOCKERFILE"
    rm "$tmpf"
  else
    sed -i "/{{NPM_HARDENING}}/d" "$DOCKERFILE"
  fi

  # Render compose.yml
  sed -e "s|{{PROJECT_NAME}}|$PROJECT_NAME|g" "$TEMPLATES_DIR/compose.yml" > "$COMPOSE_FILE"

  # Inject sinkhosts
  local shf=$(mktemp)
  while IFS= read -r host; do
    [[ -z "$host" || "$host" == \#* ]] && continue
    echo "      - \"$host:0.0.0.0\""
  done < "$TEMPLATES_DIR/sinkhosts" > "$shf"
  sed -i "/{{SINKHOSTS}}/r $shf" "$COMPOSE_FILE"
  sed -i "/{{SINKHOSTS}}/d" "$COMPOSE_FILE"
  rm "$shf"

  # Render .env
  cp "$TEMPLATES_DIR/.env" "$CONTAINER_DIR/.env"

  echo
  echo -e "${DEV_TAG_GREEN} Environment initialized."
  echo -e "${DEV_TAG_GREEN} Run: dev"
}

dev_clean() {

  ensure_project_root

  if [ ! -d "$CONTAINER_DIR" ]; then
    dev_help
    exit 1
  fi

  echo -e "${DEV_TAG_BLUE} Cleaning…"

  docker compose -f "$COMPOSE_FILE" down --rmi all --volumes --remove-orphans || true
  rm -rf "$CONTAINER_DIR" || true

  echo
  echo -e "${DEV_TAG_GREEN} Environment cleaned."
}

CMD="$1"

case "$CMD" in
  init)
    dev_init
    ;;
  clean)
    dev_clean
    ;;
  build)
    dev_build
    ;;
  rebuild)
    dev_rebuild
    ;;
  run)
    dev_run
    ;;
  cli)
    dev_cli
    ;;
  "")
    dev_dev
    ;;
  *)
    dev_help
    ;;
esac