#!/bin/sh
# mopac-glpi-go dev wrapper. EVERY compile/vet/test path routes through
# the digest-pinned Docker builder (same image as mopac-redmine-go and
# mopac-keyproxy; the host runs containers, never toolchains).
#
# Usage: ./dev.sh {build|vet|test|check|smoke|mglpi|mcp|shell} [args...]
#
#   build    compile ./cmd/mglpi and ./cmd/mglpi-mcp into bin/
#   vet      go vet ./...
#   test     go test ./... (all tests run against the in-process fake
#            GLPI server; the real CMDB is NEVER contacted)
#   check    build + vet + test (the pre-push gate)
#   smoke    end-to-end smoke: builds, boots the fake GLPI in a
#            container on 127.0.0.1:8602, drives the real CLI from the
#            host through 0600 env files (change create/list/show/
#            transition/followup round-trips, ci search, agent-profile
#            switch, -o json, MCP handshake, redaction check on stderr),
#            tears everything down
#   mglpi    run the real CLI: rebuilds bin/mglpi (static) if any source
#            is newer, then runs it inside the digest-pinned builder with
#            MGLPI_URL/MGLPI_APP_TOKEN/MGLPI_USER_TOKEN/MGLPI_PROFILE_ID
#            passed through from the caller's env (the harness loop
#            exports them from loop.env; humans export their own).
#            HARNESS_DOCKER_NETWORK (optional) joins the run to a named
#            network (e2e fakes).
#   mcp      same as mglpi but runs the stdio MCP server (bin/mglpi-mcp)
#   shell    interactive sh inside the builder
set -e

IMAGE="golang@sha256:e8c859f5632dcfde7b32d2012b4351728f6437930887c2f6a91ea242459e5514" # = golang:1.26-bookworm (bash present; alpine lacks it)

run() {
    docker run --rm -v "$PWD:/h" -w /h \
        -u "$(id -u):$(id -g)" -e HOME=/tmp -e GOFLAGS=-buildvcs=false \
        "$IMAGE" "$@"
}

cmd=${1:-check}
shift || true

case "$cmd" in
build)
    run sh -c 'go build -o bin/mglpi ./cmd/mglpi && go build -o bin/mglpi-mcp ./cmd/mglpi-mcp'
    ;;
vet)
    run go vet ./...
    ;;
test)
    run go test "$@" ./...
    ;;
check)
    run sh -c 'go build -o bin/mglpi ./cmd/mglpi && go build -o bin/mglpi-mcp ./cmd/mglpi-mcp && go vet ./... && go test ./...'
    ;;
smoke)
    ./smoke/smoke.sh
    ;;
mglpi|mcp)
    # Rebuild-if-stale (static: the loop container is musl), then run the
    # binary in the builder. Its own docker run: -e passthrough must come
    # before the image, which run() cannot do.
    bin=bin/mglpi
    pkg=./cmd/mglpi
    [ "$cmd" = "mcp" ] && bin=bin/mglpi-mcp && pkg=./cmd/mglpi-mcp
    if [ ! -x "$bin" ] || [ -n "$(find cmd internal glpi glpi_test.go go.mod -newer "$bin" -print -quit 2>/dev/null)" ]; then
        echo "dev.sh: $bin missing or stale -> static rebuild" >&2
        run env CGO_ENABLED=0 go build -o "$bin" "$pkg"
    fi
    NET=""
    if [ -n "$HARNESS_DOCKER_NETWORK" ]; then NET="--network $HARNESS_DOCKER_NETWORK"; fi
    docker run --rm -i ${NET:+"$NET"} -v "$PWD:/h" -w /h \
        -u "$(id -u):$(id -g)" -e HOME=/tmp \
        -e MGLPI_URL -e MGLPI_APP_TOKEN -e MGLPI_USER_TOKEN -e MGLPI_PROFILE_ID \
        "$IMAGE" "./$bin" "$@"
    ;;
shell)
    run sh
    ;;
*)
    echo "dev.sh: unknown command $cmd (build|vet|test|check|smoke|mglpi|mcp|shell)" >&2
    exit 1
    ;;
esac