setup.sh

#!/bin/bash
#
# Trusted Setup
#
# Bootstraps a developer machine with the baseline tools required to clone
# and run any Trusted project's bin/setup script.
#
# Usage:
#   # First-time setup or update
#   /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/trusted/setup/main/setup.sh)"
#
#   # Re-run a specific migration
#   ./setup.sh --rerun <timestamp>

set -euo pipefail

# ---------------------------------------------------------------------------
# Resolve script directory (works for both local execution and curl pipe)
# ---------------------------------------------------------------------------

if [ -n "${BASH_SOURCE[0]:-}" ] && [ -f "${BASH_SOURCE[0]}" ]; then
  SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
else
  # Running via curl | bash — clone (or update) the repo at ~/Work/setup
  SETUP_CLONE_DIR="$HOME/Work/setup"
  SETUP_REPO="${SETUP_REPO:-trusted/setup}"
  SETUP_REF="${SETUP_REF:-main}"

  if [ -d "$SETUP_CLONE_DIR/.git" ]; then
    # Abort if there are uncommitted changes
    if ! git -C "$SETUP_CLONE_DIR" diff --quiet HEAD 2>/dev/null; then
      echo "ERROR: $SETUP_CLONE_DIR has uncommitted changes."
      echo "Commit or stash them, then re-run setup."
      exit 1
    fi

    # Abort if on the wrong branch
    local_branch="$(git -C "$SETUP_CLONE_DIR" branch --show-current)"
    if [ "$local_branch" != "$SETUP_REF" ]; then
      echo "ERROR: $SETUP_CLONE_DIR is on branch '$local_branch', expected '$SETUP_REF'."
      echo "Switch to $SETUP_REF, then re-run setup."
      exit 1
    fi

    echo "Updating setup from github.com/$SETUP_REPO ($SETUP_REF)..."
    git -C "$SETUP_CLONE_DIR" pull --ff-only --quiet
  else
    echo "Cloning setup from github.com/$SETUP_REPO ($SETUP_REF)..."
    mkdir -p "$HOME/Work"
    git clone "https://github.com/$SETUP_REPO.git" "$SETUP_CLONE_DIR" --quiet
    git -C "$SETUP_CLONE_DIR" checkout "$SETUP_REF" --quiet
  fi

  SCRIPT_DIR="$SETUP_CLONE_DIR"
fi

# ---------------------------------------------------------------------------
# Load shared helpers and OS detection
# ---------------------------------------------------------------------------

# shellcheck source=lib/common.sh
source "$SCRIPT_DIR/lib/common.sh"

# shellcheck source=lib/migrate.sh
source "$SCRIPT_DIR/lib/migrate.sh"

# COLOR_RED, COLOR_GREEN, COLOR_YELLOW, and COLOR_RESET are provided by common.sh.

# Show a red notice if setup exits unexpectedly
trap 'echo ""; echo "${COLOR_RED}Setup failed.${COLOR_RESET} Check the output above for details."; echo ""' ERR

# ---------------------------------------------------------------------------
# Parse arguments
# ---------------------------------------------------------------------------

ACTION="setup"
RERUN_TIMESTAMP=""

while [[ $# -gt 0 ]]; do
  case "$1" in
    --rerun)
      ACTION="rerun"
      RERUN_TIMESTAMP="${2:-}"
      if [ -z "$RERUN_TIMESTAMP" ]; then
        echo "ERROR: --rerun requires a migration timestamp."
        echo "Usage: setup.sh --rerun <timestamp>"
        exit 1
      fi
      shift 2
      ;;
    --help|-h)
      echo "Trusted Setup"
      echo ""
      echo "Usage: setup.sh [OPTIONS]"
      echo ""
      echo "Options:"
      echo "  --rerun <timestamp>    Re-run a specific migration"
      echo "  --help                 Show this help message"
      exit 0
      ;;
    *)
      echo "Unknown option: $1"
      echo "Run setup.sh --help for usage."
      exit 1
      ;;
  esac
done

# Handle --rerun before anything else
if [ "$ACTION" = "rerun" ]; then
  rerun_migration "$SCRIPT_DIR" "$RERUN_TIMESTAMP"
  exit $?
fi

# ---------------------------------------------------------------------------
# Run setup
# ---------------------------------------------------------------------------

echo ""
echo "= Trusted Setup ="
echo ""
echo "  Platform: $OS"
echo ""

# shellcheck source=lib/packages_setup.sh
source "$SCRIPT_DIR/lib/packages_setup.sh"

# shellcheck source=lib/git_setup.sh
source "$SCRIPT_DIR/lib/git_setup.sh"

# shellcheck source=lib/build_setup.sh
source "$SCRIPT_DIR/lib/build_setup.sh"

# shellcheck source=lib/mise_setup.sh
source "$SCRIPT_DIR/lib/mise_setup.sh"

# shellcheck source=lib/1password_setup.sh
source "$SCRIPT_DIR/lib/1password_setup.sh"

# shellcheck source=lib/circleci_setup.sh
source "$SCRIPT_DIR/lib/circleci_setup.sh"

# shellcheck source=lib/docker_setup.sh
source "$SCRIPT_DIR/lib/docker_setup.sh"

# shellcheck source=lib/aws_setup.sh
source "$SCRIPT_DIR/lib/aws_setup.sh"

# shellcheck source=lib/registries_setup.sh
source "$SCRIPT_DIR/lib/registries_setup.sh"

# ---------------------------------------------------------------------------
# Migrations
# ---------------------------------------------------------------------------

fmt_header "Migrations"

run_migrations "$SCRIPT_DIR"

# ---------------------------------------------------------------------------
# Repositories
# ---------------------------------------------------------------------------

# shellcheck source=lib/repos_setup.sh
source "$SCRIPT_DIR/lib/repos_setup.sh"

# ---------------------------------------------------------------------------
# Done
# ---------------------------------------------------------------------------

echo ""
echo "= Trusted Setup Complete ="
echo ""
echo "${COLOR_GREEN}Setup finished successfully.${COLOR_RESET}"
echo ""
echo "${COLOR_YELLOW}Next steps:${COLOR_RESET}"
echo "  1. Open a new terminal (or run: source ~/.zshrc)"
echo "  2. Clone a project:  cd ~/Work && gh repo clone trusted/<repo-name>"
echo "  3. Run project setup: cd <repo-name> && bin/setup"
echo ""