src/lib/00-core.sh - main - AlexandrNarbaev/opencode_initializer

src/lib/00-core.sh
427 строк19 KB
Alexandr Narbaev
fix(v3.1.1): add --new mode handler + non-interactive DNS guards
10 авг 2026, 13:43
10 авг 2026, 13:43c5d5709
#!/usr/bin/env bash
# src/lib/00-core.sh — core infrastructure shared across all lib modules
# Sources: src/lib/helpers.sh must be sourced before this file
# shellcheck disable=SC2034  # variables used by sourced modules
set -euo pipefail

# ── Version ──────────────────────────────────────────────────────────────────
SCRIPT_VERSION="${SCRIPT_VERSION:-v3.0.0}"

# ── Bash version compatibility check ──────────────────────────────────────────
_BASH_CHECK_DONE="${_BASH_CHECK_DONE:-}"
_check_bash_version() {
  [ -n "$_BASH_CHECK_DONE" ] && return 0
  _BASH_CHECK_DONE=1
  local major="${BASH_VERSINFO[0]:-0}"
  if [ "$major" -lt 4 ]; then
    warn "bash ${BASH_VERSION:-unknown}: limited support (stock macOS 3.2)"
    info "Recommended: brew install bash"
  fi
}
_check_bash_version

# ── OS validation ────────────────────────────────────────────────────────────
if [ -f /etc/os-release ]; then
  . /etc/os-release 2>/dev/null || true
  case "${ID:-}" in
    ubuntu|debian|linuxmint|pop|elementary|zorin) ;;
    *) warn "Untested OS: ${ID:-unknown} ${VERSION_ID:-} — continuing (Ubuntu/Debian expected)" ;;
  esac
  info "OS: ${PRETTY_NAME:-$ID} ($(uname -m))"
fi

# ── Architecture detection ──────────────────────────────────────────────────
ARCH=$(uname -m)
case "$ARCH" in
  x86_64|amd64) ARCH="amd64"; GO_ARCH="${GO_ARCH:-linux-amd64}"; ARCH_TYPE="x64";;
  aarch64|arm64) ARCH="arm64"; GO_ARCH="${GO_ARCH:-linux-arm64}"; ARCH_TYPE="aarch64";;
  *) warn "Unknown architecture: $ARCH — using amd64 as fallback"; ARCH="amd64"; GO_ARCH="${GO_ARCH:-linux-amd64}"; ARCH_TYPE="x64";;
esac
info "Architecture: $ARCH ($ARCH_TYPE)"

# ── Package manager detection ────────────────────────────────────────────────
PKG_MANAGER=""
if command -v apt-get &>/dev/null; then PKG_MANAGER="apt"
elif command -v dnf &>/dev/null; then PKG_MANAGER="dnf"
elif command -v pacman &>/dev/null; then PKG_MANAGER="pacman"
elif command -v apk &>/dev/null; then PKG_MANAGER="apk"
elif command -v zypper &>/dev/null; then PKG_MANAGER="zypper"
elif command -v brew &>/dev/null; then PKG_MANAGER="brew"
fi
info "Package manager: ${PKG_MANAGER:-unknown}"

_pkg_install() {
  case "$PKG_MANAGER" in
    apt)    sudo apt-get install -y -qq "$@" 2>/dev/null ;;
    dnf)    sudo dnf install -y "$@" 2>/dev/null ;;
    pacman) sudo pacman -S --noconfirm "$@" 2>/dev/null ;;
    apk)    sudo apk add "$@" 2>/dev/null ;;
    zypper) sudo zypper install -y "$@" 2>/dev/null ;;
    brew)   brew install "$@" 2>/dev/null ;;
    *)      warn "No package manager found — install tools manually" ;;
  esac
}

_pkg_update() {
  case "$PKG_MANAGER" in
    apt) sudo apt-get update -qq 2>/dev/null ;;
    dnf) sudo dnf check-update 2>/dev/null || true ;;
    pacman) sudo pacman -Sy 2>/dev/null ;;
    apk) sudo apk update 2>/dev/null ;;
    zypper) sudo zypper refresh 2>/dev/null ;;
    brew) brew update 2>/dev/null ;;
  esac
}

_pkg_list() {
  case "$PKG_MANAGER" in
    apt)    echo "build-essential curl wget git software-properties-common apt-transport-https ca-certificates gnupg lsb-release unzip zip jq htop tree zsh fzf fd-find eza lazygit zoxide bat fonts-inter fonts-paratype netcat-openbsd bind9-dnsutils libcairo2-dev libpango1.0-dev libgdk-pixbuf-xlib-2.0-dev libffi-dev shared-mime-info ripgrep chromium-chromedriver postgresql-client redis-tools" ;;
    dnf)    echo "@development-tools curl wget git dnf-plugins-core ca-certificates gnupg2 unzip zip jq htop tree zsh fzf fd-find eza lazygit zoxide bat ripgrep" ;;
    pacman) echo "base-devel curl wget git ca-certificates gnupg unzip zip jq htop tree zsh fzf fd eza lazygit zoxide bat ripgrep" ;;
    apk)    echo "build-base curl wget git ca-certificates gnupg unzip zip jq htop tree zsh fzf fd eza lazygit zoxide bat ripgrep" ;;
    zypper) echo "-t pattern devel_basis curl wget git ca-certificates gnupg unzip zip jq htop tree zsh fzf fd eza lazygit zoxide bat ripgrep" ;;
    brew)   echo "curl wget git gnupg unzip jq htop tree zsh fzf fd eza lazygit zoxide bat ripgrep" ;;
  esac
}

# ── Mirror system — try primary, then RU-friendly fallbacks ─────────────────
_set_dns() {
  [ "${DRY_RUN:-false}" = "true" ] && { info "[DRY] skip DNS"; return 0; }
  # Non-interactive guard: skip sudo tee if no passwordless sudo
  if [ ! -t 1 ] && ! sudo -n true 2>/dev/null; then
    info "[NON-INTERACTIVE] skipping DNS write (no sudo password available)"
    return 0
  fi
  if [ -f /etc/resolv.conf ] && ! grep -q '77.88.8.8' /etc/resolv.conf 2>/dev/null; then
    echo "nameserver 77.88.8.8" | sudo tee -a /etc/resolv.conf >/dev/null 2>&1 || true
    echo "nameserver 77.88.8.1" | sudo tee -a /etc/resolv.conf >/dev/null 2>&1 || true
  fi
}

_install_ca_certs() {
  local ca_dir="/usr/local/share/ca-certificates/extra"
  _sudo mkdir -p "$ca_dir" 2>/dev/null || true
  local RUTUBE_CA="https://gu-st.ru/content/158/2020-12-30/2020-12-30-certificate.cer"
  local CF_CA="https://developers.cloudflare.com/ssl/static/origin_ca_rsa_root.pem"
  local installed=0
  if [ ! -f "$ca_dir/ru_digital.crt" ]; then
    curl -fsSL --connect-timeout 10 --max-time 30 "$RUTUBE_CA" 2>/dev/null | _sudo tee "$ca_dir/ru_digital.crt" >/dev/null 2>&1 && installed=1 || true
  fi
  if [ ! -f "$ca_dir/cloudflare_origin.crt" ]; then
    curl -fsSL --connect-timeout 10 --max-time 30 "$CF_CA" 2>/dev/null | _sudo tee "$ca_dir/cloudflare_origin.crt" >/dev/null 2>&1 && installed=1 || true
  fi
  if command -v update-ca-certificates &>/dev/null && [ "$installed" = "1" ]; then
    _sudo update-ca-certificates --fresh 2>/dev/null || true
  fi
}

_mirror_url() {
  local url
  for url in "$@"; do
    curl -fsSL --connect-timeout 5 --max-time 10 --resolve "$(echo "$url" | sed 's|https://||;s|/.*||'):443:77.88.8.8" "$url" -o /dev/null 2>/dev/null && { echo "$url"; return 0; }
    curl -fsSL --connect-timeout 5 --max-time 10 --resolve "$(echo "$url" | sed 's|https://||;s|/.*||'):443:1.1.1.1" "$url" -o /dev/null 2>/dev/null && { echo "$url"; return 0; }
    curl -fsSL --connect-timeout 5 --max-time 10 "$url" -o /dev/null 2>/dev/null && { echo "$url"; return 0; }
  done
  echo "$1"; return 1
}

# Comprehensive mirror list: primary → RU mirror → Chinese mirror → global fallback
GITHUB_MIRROR=$(_mirror_url \
  "https://github.com" \
  "https://ghproxy.com/https://github.com" \
  "https://github.com" 2>/dev/null || echo "https://github.com")

NPM_REGISTRY=$(_mirror_url \
  "https://registry.npmjs.org" \
  "https://registry.npmmirror.com" \
  "https://registry.yarnpkg.com" 2>/dev/null || echo "https://registry.npmjs.org")

PYPI_MIRROR=$(_mirror_url \
  "https://pypi.org/simple" \
  "https://mirror.yandex.ru/mirrors/pypi/simple" \
  "https://pypi.tuna.tsinghua.edu.cn/simple" 2>/dev/null || echo "https://pypi.org/simple")

DOCKER_MIRROR=$(_mirror_url \
  "https://hub.docker.com" \
  "https://mirror.yandex.ru/mirrors/docker" \
  "https://docker.mirrors.ustc.edu.cn" 2>/dev/null || echo "https://hub.docker.com")

GO_MIRROR=$(_mirror_url \
  "https://go.dev" \
  "https://goproxy.cn" \
  "https://goproxy.io" 2>/dev/null || echo "https://go.dev")

RUSTUP_MIRROR=$(_mirror_url \
  "https://static.rust-lang.org/rustup" \
  "https://mirrors.ustc.edu.cn/rust-static/rustup" \
  "https://rsproxy.cn/rustup" 2>/dev/null || echo "https://static.rust-lang.org/rustup")

ZIG_MIRROR=$(_mirror_url \
  "https://ziglang.org/download" \
  "https://mirrors.ustc.edu.cn/ziglang.org/download" 2>/dev/null || echo "https://ziglang.org/download")

JAVA_MIRROR=$(_mirror_url \
  "https://api.adoptium.net" \
  "https://mirror.yandex.ru/adoptium" 2>/dev/null || echo "https://api.adoptium.net")

export NPM_CONFIG_REGISTRY="$NPM_REGISTRY"
export PIP_INDEX_URL="$PYPI_MIRROR"
export GOPROXY="${GO_PROXY:-https://goproxy.cn,direct}"
export RUSTUP_DIST_SERVER="$RUSTUP_MIRROR"

# ── Progress tracking — resume after failure ────────────────────────────────
PROGRESS="$DL_CACHE/progress"
_step_skip() { grep -qxF "$1" "$PROGRESS" 2>/dev/null && { log "Skip: ${2:-$1} (completed earlier)"; return 0; }; return 1; }
_step_done() { [ "${DRY_RUN:-false}" = "true" ] && return 0; echo "$1" >> "$PROGRESS"; }

# ── WAL (Write-Ahead Log) checkpoint system ──────────────────────────────────
WAL_FILE="${HOME}/.cache/opencode-setup/wal.md"
WAL_MODULE_COUNT=0  # NOTE: not atomic — parallel subshells lose increments (cosmetic only, F2.3)
_WAL_TOTAL="${WAL_TOTAL:-41}"

_wal_checkpoint() {
  local step_name="${1:-}"
  local module_key="${2:-}"
  [ "${DRY_RUN:-false}" = "true" ] && return 0
  WAL_MODULE_COUNT=$((WAL_MODULE_COUNT + 1))
  if [ -f "$WAL_FILE" ]; then
    local now
    now=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
    sed -i "s|_Updated:.*|_Updated: ${now}|" "$WAL_FILE" 2>/dev/null || true
    sed -i "s|DONE: [0-9]\+/${_WAL_TOTAL}|DONE: ${WAL_MODULE_COUNT}/${_WAL_TOTAL}|" "$WAL_FILE" 2>/dev/null || true
    if [ -n "$step_name" ]; then
      sed -i "/^## Next Step/,/^$/{s|^- .*|- ${step_name}|}" "$WAL_FILE" 2>/dev/null || true
    fi
    # Mirror legacy progress for resume compatibility
    echo "$module_key" >> "$PROGRESS" 2>/dev/null || true
  fi
}

_wal_decide() {
  local decision="$1" rationale="${2:-}"
  [ "${DRY_RUN:-false}" = "true" ] && return 0
  if [ -f "$WAL_FILE" ]; then
    local entry
    if [ -n "$rationale" ]; then
      entry="- ${decision} — ${rationale}"
    else
      entry="- ${decision}"
    fi
    sed -i "/^## Recent Decisions/a ${entry}" "$WAL_FILE" 2>/dev/null || true
  fi
  log "Decision: $decision"
}

# ── Progress spinner for long operations ────────────────────────────────────
_spin() {
  local pid=$1 msg="${2:-Working}" i=0
  local spin='⠋⠙⠹⠸⠼⠴⠦⠧⠇⠏'
  while kill -0 "$pid" 2>/dev/null; do
    printf "\r  ${CYAN}%s${NC} %s" "${spin:$((i++ % 10)):1}" "$msg"
    sleep 0.1
  done
  printf "\r\033[K"
}

# ── MCP registry (bash 3.2 indexed arrays) ──────────────────────────────────
MCP_NAMES=()
MCP_PKGS=()
_mcp_add() { local i=${#MCP_NAMES[@]}; MCP_NAMES[$i]="$1"; MCP_PKGS[$i]="$2"; }
_mcp_lookup() {
  local i
  for ((i=0; i<${#MCP_NAMES[@]}; i++)); do
    [ "${MCP_NAMES[$i]}" = "$1" ] && { echo "${MCP_PKGS[$i]}"; return 0; }
  done
  return 1
}
_mcp_add "context7"              "c7-mcp-server"
_mcp_add "context7-official"     "@upstash/context7-mcp"
_mcp_add "filesystem"            "@modelcontextprotocol/server-filesystem"
_mcp_add "agentic-tools"         "@pimzino/agentic-tools-mcp"
_mcp_add "codegraph"             "@colbymchenry/codegraph"
_mcp_add "playwright"            "@playwright/mcp"
_mcp_add "agent-browser"         "agent-browser-mcp-server"
_mcp_add "loopsense"             "@loopsense/mcp"
_mcp_add "github"                "@modelcontextprotocol/server-github"
_mcp_add "postgres"              "@modelcontextprotocol/server-postgres"
_mcp_add "gitlab"                "mcp-server-gitlab"
_mcp_add "google-maps"           "mcp-server-google-maps"
_mcp_add "sequential-thinking"   "@modelcontextprotocol/server-sequential-thinking"
_mcp_add "memorylayer"           "@scitrera/memorylayer-mcp-server"
_mcp_add "chrome-devtools"       "chrome-devtools-mcp"
_mcp_add "memory"                "@modelcontextprotocol/server-memory"
_mcp_add "redis"                 "@modelcontextprotocol/server-redis"
_mcp_add "brave-search"          "brave-search-mcp"
_mcp_add "sqlite"                "mcp-server-sqlite"
_mcp_add "excalidraw"            "excalidraw-architect-mcp"
_mcp_add "notion"                "@notionhq/notion-mcp-server"
_mcp_add "websearch"             "mcp-searxng"
_mcp_add "open-orchestra"        "open-orchestra"
# NOTE: git, fetch, time MCPs are Python packages — installed via uvx/pip (not npm)
#       mcp-server-git, mcp-server-fetch, mcp-server-time on npm are security canaries!

# ── Interactive gate helper ─────────────────────────────────────────────────
_gate() {
  local flag_var="$1"
  if [ "${MODE:-}" = "full" ] && [ -n "${INTERACTIVE_DO_SYSTEM:-}" ]; then
    local flag_val="${!flag_var}"
    [ "$flag_val" = "y" ] && return 0 || return 1
  fi
  return 0
}

# ── Dry-run mode ────────────────────────────────────────────────────────────
if [ "${DRY_RUN:-false}" = "true" ]; then
  _dry() { info "[DRY] $*"; return 0; }
else
  _dry() { "$@"; }
fi

# ── PATH exports ────────────────────────────────────────────────────────────
NPM_GLOBAL="$HOME/.npm-global"
N_PREFIX="$HOME/.n"
CORE_PATH="$NPM_GLOBAL/bin:$HOME/.local/bin:$HOME/.n/bin:$HOME/.bun/bin:$HOME/.cargo/bin:$HOME/.jbang/bin:$HOME/.dotnet:$HOME/go/bin:/usr/local/go/bin"
export PATH="$CORE_PATH:$PATH"
export N_PREFIX="$N_PREFIX"
npm config set prefix "$NPM_GLOBAL" 2>/dev/null || true
OPENCODE_VER="${OPENCODE_VER:-latest}"

# ── Version pinning (R13: Reproducibility) ──────────────────────────────────
# All tool versions are pinned here for reproducible installs.
# Override via env vars or setup.conf if needed.
NODE_VER="${NODE_VER:-24}"
PYTHON_VER="${PYTHON_VER:-3.14}"
GO_VER="${GO_VER:-1.26}"
RUST_VER="${RUST_VER:-1.97.1}"
JAVA_VER="${JAVA_VER:-25}"
DOTNET_VER="${DOTNET_VER:-10}"
ZIG_VER="${ZIG_VER:-0.15.2}"
BUN_VER="${BUN_VER:-1.3.14}"
OPENCODE_CLI_VER="${OPENCODE_CLI_VER:-1.17}"
export NODE_VER PYTHON_VER GO_VER RUST_VER JAVA_VER DOTNET_VER ZIG_VER BUN_VER OPENCODE_CLI_VER

# ── Isolated Circuit Mode ────────────────────────────────────────────────────
# When enabled, all LLM providers use local OpenAI-compatible servers.
# Set via: --isolated flag, ISOLATED_CIRCUIT=true in setup.conf, or env var.
ISOLATED_CIRCUIT="${ISOLATED_CIRCUIT:-}"
[ -z "$ISOLATED_CIRCUIT" ] && [ -f "$HOME/.config/opencode-setup/setup.conf" ] && \
  . "$HOME/.config/opencode-setup/setup.conf" 2>/dev/null && \
  ISOLATED_CIRCUIT="${ISOLATED_CIRCUIT:-}"
[ -z "$ISOLATED_CIRCUIT" ] && ISOLATED_CIRCUIT="${OPENCODE_ISOLATED_CIRCUIT:-${OPencode_ISOLATED_CIRCUIT:-}}"
[ -z "$ISOLATED_CIRCUIT" ] && ISOLATED_CIRCUIT="false"
case "$(printf '%s' "${ISOLATED_CIRCUIT:-}" | tr '[:upper:]' '[:lower:]')" in true|1|yes|on|enabled) ISOLATED_CIRCUIT="true";; *) ISOLATED_CIRCUIT="false";; esac
export ISOLATED_CIRCUIT

# ── i18n: Russian CLI output if LANG=ru* (R18: Accessibility) ───────────────
CLI_LANG="${CLI_LANG:-${LANG:-}}"
case "$CLI_LANG" in ru*) CLI_LANG="ru";; *) CLI_LANG="en";; esac
export CLI_LANG


# ── Port resolution — detect free ports, apply shifts, avoid collisions ─────
_port_is_free() {
  local port="$1"
  if command -v ss &>/dev/null; then
    ! ss -tlnp 2>/dev/null | grep -q ":${port} "
  elif command -v netstat &>/dev/null; then
    ! netstat -tlnp 2>/dev/null | grep -q ":${port} "
  else
    (echo >/dev/tcp/127.0.0.1/"$port") 2>/dev/null && return 1 || return 0
  fi
}

_find_free_port() {
  local base="$1" max="${2:-50}"
  local port="$base"
  while (( port < base + max )); do
    if _port_is_free "$port"; then echo "$port"; return 0; fi
    ((port++))
  done
  echo "$base"
  warn "Port range $base-$((base + max - 1)) exhausted — falling back to $base"
  return 1
}

_resolve_service_port() {
  local svc="$1" default="$2"
  local port=""
  local env_name="$(printf '%s' "$svc" | tr '[:lower:]' '[:upper:]')_PORT"
  port="${!env_name:-}"
  if [ -z "$port" ] || [ "$port" = "0" ]; then
    # shellcheck disable=SC1090
    [ -f "$SETUP_CONF" ] && . "$SETUP_CONF" 2>/dev/null && port="${!env_name:-}"
  fi
  if [ -z "$port" ] || [ "$port" = "0" ]; then
    port="$(_find_free_port "$default")"
    _set_config "$(printf '%s' "$svc" | tr '[:lower:]' '[:upper:]')_PORT" "$port"
  fi
  echo "$port"
}

_service_mode() {
  local svc="$1"
  local mode_var="$(printf '%s' "$svc" | tr '[:lower:]' '[:upper:]')_MODE"
  local mode="${!mode_var:-}"
  if [ -z "$mode" ] && [ -f "$SETUP_CONF" ]; then
    # shellcheck disable=SC1090
    . "$SETUP_CONF" 2>/dev/null
    mode="${!mode_var:-}"
  fi
  mode="${mode:-local}"
  local mode_lower="$(printf '%s' "$mode" | tr '[:upper:]' '[:lower:]')"
  case "$mode_lower" in
    local|external|disabled) echo "$mode_lower" ;;
    *) echo "local" ;;
  esac
}

_set_config() {
  local key="$1" value="$2"
  mkdir -p "$(dirname "$SETUP_CONF")"
  if [ -f "$SETUP_CONF" ] && grep -q "^${key}=" "$SETUP_CONF" 2>/dev/null; then
    sed -i "s|^${key}=.*|${key}=${value}|" "$SETUP_CONF"
  else
    echo "${key}=${value}" >> "$SETUP_CONF"
  fi
}

SETUP_CONF="${SETUP_CONF:-$HOME/.config/opencode-setup/setup.conf}"
export SETUP_CONF

DEPLOYMENT_PROFILE="${DEPLOYMENT_PROFILE:-}"
# shellcheck disable=SC1090
[ -z "$DEPLOYMENT_PROFILE" ] && [ -f "$SETUP_CONF" ] &&   . "$SETUP_CONF" 2>/dev/null && DEPLOYMENT_PROFILE="${DEPLOYMENT_PROFILE:-}"
DEPLOYMENT_PROFILE="${DEPLOYMENT_PROFILE:-personal}"
case "$(printf '%s' "${DEPLOYMENT_PROFILE:-}" | tr '[:upper:]' '[:lower:]')" in
  personal|corporate|airgapped|hybrid) ;;
  *) DEPLOYMENT_PROFILE="personal" ;;
esac
export DEPLOYMENT_PROFILE

# ── Service port lookup (bash 3.2 case-dispatch) ────────────────────────────
_get_service_port() {
  case "${1:-}" in
    postgres)         echo "5432" ;;
    qdrant)           echo "6333" ;;
    redis)            echo "6379" ;;
    prometheus)       echo "9090" ;;
    grafana)          echo "3001" ;;
    node_exporter)    echo "9100" ;;
    metrics_exporter) echo "9464" ;;
    gui)              echo "4200" ;;
    ollama)           echo "11434" ;;
    vllm)             echo "8000" ;;
    sglang)           echo "30000" ;;
    chromadb)         echo "8000" ;;
    memorylayer)      echo "61001" ;;
    kafka)            echo "9092" ;;
    neo4j)            echo "7474" ;;
    minio)            echo "9000" ;;
    searxng)          echo "8888" ;;
    open_webui)       echo "3300" ;;
    *)                echo "" ;;
  esac
}

OPENCODE_LOCAL_ENDPOINT="${OPENCODE_LOCAL_ENDPOINT:-${OPencode_LOCAL_ENDPOINT:-http://localhost:11434/v1}}"
export OPENCODE_LOCAL_ENDPOINT