reach

#!/bin/sh

if [ ! "$REACH_ALLOW_SU" = '1' ] && [ "$(id -u)" -eq 0 ]; then
  echo "Reach isn't intended to be run with superuser privileges."
  echo
  echo "Please try again while logged into a normal, non-root account, and without using \
\`sudo\`, \`su\`, or \`doas\` to grant elevated permissions."
  echo
  case "$(uname -s)" in
    Linux)
      if ! (groups "$(logname)" 2>&1 | grep -q docker 2>/dev/null); then
        echo "Adding your account to the \`docker\` group should make this possible:"
        echo "https://docs.docker.com/engine/install/linux-postinstall/#manage-docker-as-a-non-root-user"
        echo
        echo "Once you've done this, make sure to log out and back in before retrying."
        echo
      else
        echo "Try logging out and back in if you've recently made yourself a member of the \`docker\` group but are unable to run Reach without \`sudo\`."
        echo
      fi
      ;;
    *) : ;; # Docker Desktop for macOS doesn't use the `docker` group
  esac
  exit 1
fi

if [ -n "$DOCKER_HOST" ] && ! (echo "$DOCKER_HOST" | grep -q '^unix:'); then
  echo "Reach only supports connecting to Docker via a local UNIX socket."
  echo
  echo "Please follow the directions from the link below to \`unset DOCKER_HOST\` or explicitly override it, e.g.:"
  echo " $ DOCKER_HOST= $0 $*"
  echo
  echo "https://docs.docker.com/engine/install/linux-postinstall/#cannot-connect-to-the-docker-daemon"
  echo
  exit 1
fi

IMG='reachsh/reach-cli:latest'
TMP=$(mkdir -p /tmp/reach/cli; mktemp -d "/tmp/reach/cli/$(date -u '+%Y-%m-%dT%H-%M-%SZ')-XXXX")
CNF="${XDG_CONFIG_HOME:-$HOME/.config}/reach"; CNF="$(mkdir -p "$CNF" && cd "$CNF" && pwd)"
export TMP

if [ -z "$REACH_ENV_PRS" ] && [ -f "$CNF/env" ]; then
  e="$(env |grep '^REACH')"
  # shellcheck disable=SC1090,SC1091
  . "$CNF/env"
  for l in $e; do export "${l?}"; done
  export REACH_ENV_PRS=1 # Prevent recursive sourcing
fi

run_d () {
  REACH_HS="$(cd "$(dirname "$0")" && pwd)/hs"
  export REACH_DIR_EMBED="${REACH_DIR_EMBED:-"$(cd "$(dirname "$0")" && pwd)/hs/app/reach/embed"}"
  export REACH_STACK_YAML="${REACH_STACK_YAML:-"$(cd "$(dirname "$0")" && pwd)/hs/stack.yaml"}"

  if  [ "$REACH_DOCKER" = "0"  ] \
   && [ -d "$REACH_DIR_EMBED"  ] \
   && [ -f "$REACH_STACK_YAML" ] \
   && which stack >/dev/null 2>&1; then
    (cd "$REACH_HS" && make -s hs-build 1>&2) \
      && REACH_EX="$0" "$(stack --stack-yaml "$REACH_STACK_YAML" exec -- which reach 2>/dev/null)" \
        --dir-embed="$REACH_DIR_EMBED" \
        --dir-project-container="$(pwd)" \
        --dir-project-host="$(pwd)" \
        --dir-tmp-container="$TMP" \
        --dir-tmp-host="$TMP" \
        --dir-config-container="$CNF" \
        --dir-config-host="$CNF" \
        "$@"
  else
    cid="$(docker ps -q \
      -f "ancestor=$IMG" \
      -f "label=sh.reach.dir-project=$(pwd)" \
      | head -n1)"

    if [ -z "$cid" ]; then
      cid="$(docker run -d --rm \
        -v "$(pwd):/app/src" \
        -v "$(dirname "$(dirname "$TMP")"):/app/tmp" \
        -v "$CNF:/app/config" \
        -l "sh.reach.dir-project=$(pwd)" \
        -u "$(id -ru):$(id -rg)" \
        --name "reach-cli-$$" \
        --entrypoint tail \
        $IMG -f /dev/null)"
    fi

    docker exec -i \
      -e "REACH_EX=$0" \
      -e "REACH_CONNECTOR_MODE" \
      -e "REACH_DEBUG" \
      -e "REACH_IDE" \
      -e "REACH_RPC_KEY" \
      -e "REACH_RPC_PORT"  \
      -e "REACH_RPC_SERVER" \
      -e "REACH_RPC_TLS_CRT" \
      -e "REACH_RPC_TLS_KEY" \
      -e "REACH_RPC_TLS_PASSPHRASE" \
      -e "REACH_RPC_TLS_REJECT_UNVERIFIED" \
      -e "REACH_VERSION" \
      -e "CI" \
      -e "SHELL" \
      -u "$(id -ru):$(id -rg)" \
      "$cid" reach \
        --dir-project-host="$(pwd)" \
        --dir-tmp-container="/app/tmp$(echo "$TMP" | sed "s|$(dirname "$(dirname "$TMP")")||")" \
        --dir-tmp-host="$TMP" \
        --dir-config-host="$CNF" \
        "$@"
  fi
}

run_s () {
  chmod 700 "$TMP/out.sh"
  sh -ac "$TMP/out.sh" "$0"
}

for DEP in make curl docker docker-compose; do
  if ! (which "${DEP}" >/dev/null 2>&1); then
    echo "Reach relies on an installation of ${DEP}"
    exit 1
  fi
done

if [ ! "$CIRCLECI" = "true" ] && [ "$(docker image ls -q $IMG)" = '' ]; then
  if ! docker pull "$IMG"; then exit 1; fi
fi

run_d "$@"
case "$?" in
  42) run_s; case "$?" in
    60) rm -r "$TMP" && exit 60 ;; # Updates available
     0) [ -d "$TMP" ] && rm -r "$TMP"; exit 0 ;;
     *) [ -z "$(ls -A "$TMP")" ] && rm -r "$TMP"; exit 1 ;;
    esac
    ;;
  50) docker pull "$IMG" && curl https://docs.reach.sh/reach -o "$0" && chmod +x "$0" && rm -r "$TMP" && exit 0 ;;
  60) rm -r "$TMP" && exit 60 ;; # Updates available
   0) rm -r "$TMP" ;;
   *) [ -z "$(ls -A "$TMP")" ] && rm -r "$TMP"; exit 1 ;;
esac