#!/bin/bash
# Copyright 2025 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

set -euo pipefail

# exit with warning if container-based sandboxing is disabled
# note this includes the case where sandbox-exec (seatbelt) is used
# this happens most commonly when user runs `npm run build:all` without enabling sandboxing
if ! scripts/sandbox_command.sh -q || [ "$(scripts/sandbox_command.sh)" == "sandbox-exec" ]; then
    echo "WARNING: container-based sandboxing is disabled (see CONTRIBUTING.md#enabling-sandboxing)"
    exit 0
fi

CMD=$(scripts/sandbox_command.sh)
echo "using $CMD for sandboxing"

BASE_IMAGE=gemini-cli-sandbox
CUSTOM_IMAGE=''
BASE_DOCKERFILE=Dockerfile
CUSTOM_DOCKERFILE=''

SKIP_NPM_INSTALL_BUILD=false
while getopts "sf:i:" opt; do
    case ${opt} in
    s) SKIP_NPM_INSTALL_BUILD=true ;;
    f)
        CUSTOM_DOCKERFILE=$OPTARG
        ;;
    i)
        CUSTOM_IMAGE=$OPTARG
        ;;
    \?)
        echo "usage: $(basename "$0") [-s] [-f <dockerfile>]"
        echo "  -s: skip npm install + npm run build"
        echo "  -f <dockerfile>: use <dockerfile> for custom image"
        echo "  -i <image>: use <image> name for custom image"
        exit 1
        ;;
    esac
done
shift $((OPTIND - 1))

# npm install + npm run build unless skipping via -s option
if [ "$SKIP_NPM_INSTALL_BUILD" = false ]; then
    npm install
    npm run build --workspaces
fi

# prepare global installation files for prod builds
# pack cli
echo "packing @gemini-cli/cli ..."
rm -f packages/cli/dist/gemini-cli-cli-*.tgz
npm pack -w @gemini-cli/cli --pack-destination ./packages/cli/dist &>/dev/null
# pack core
echo "packing @gemini-cli/core ..."
rm -f packages/core/dist/gemini-cli-core-*.tgz
npm pack -w @gemini-cli/core --pack-destination ./packages/core/dist &>/dev/null
# give node user (used during installation, see Dockerfile) access to these files
chmod 755 packages/*/dist/gemini-cli-*.tgz

# redirect build output to /dev/null unless VERBOSE is set
BUILD_STDOUT="/dev/null"
if [ -n "${VERBOSE:-}" ]; then
    BUILD_STDOUT="/dev/stdout"
fi

build_image() {
    if [[ "$CMD" == "podman" ]]; then
        # use empty --authfile to skip unnecessary auth refresh overhead
        $CMD build --authfile=<(echo '{}') "$@" >$BUILD_STDOUT
    elif [[ "$CMD" == "docker" ]]; then
        $CMD --config=".docker" buildx build "$@" >$BUILD_STDOUT
    else
        $CMD build "$@" >$BUILD_STDOUT
    fi
}

echo "building $BASE_IMAGE ... (can be slow first time)"
# shellcheck disable=SC2086 # allow globbing and word splitting for BUILD_SANDBOX_FLAGS
build_image ${BUILD_SANDBOX_FLAGS:-} -f "$BASE_DOCKERFILE" -t "$BASE_IMAGE" .
echo "built $BASE_IMAGE"

if [[ -n "$CUSTOM_DOCKERFILE" && -n "$CUSTOM_IMAGE" ]]; then
    echo "building $CUSTOM_IMAGE ... (can be slow first time)"
    # shellcheck disable=SC2086 # allow globbing and word splitting for BUILD_SANDBOX_FLAGS
    build_image ${BUILD_SANDBOX_FLAGS:-} -f "$CUSTOM_DOCKERFILE" -t "$CUSTOM_IMAGE" .
    echo "built $CUSTOM_IMAGE"
fi

$CMD image prune -f >/dev/null