install.sh

#!/bin/bash

cur_dir="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
platform=$(uname)

install_xcode_command_line_tools() {
    output=$(xcode-select --install 2>&1)
    status=$?
    if [ $status != 0 ]; then
        echo "${output}"
        case "${output}" in
            *"already installed"*)
                ;;
            *)
                exit 1
                ;;
        esac
    fi
}

HOMEBREW_PREFIX=/opt/homebrew

ensure_sshd_config_option() {
    local file="$1"
    local key="$2"
    local value="$3"

    local desired="${key} ${value}"
    local tmp
    tmp="$(mktemp)"

    local root_cmd=""
    if [ ! -w "$file" ]; then
        root_cmd="sudo"
    fi

    # Global section only (before first Match):
    # - Replace first occurrence of (possibly commented) key with desired
    # - Remove any other duplicate occurrences of key in global section
    # - If not found globally, insert desired right before first Match (or EOF)
    $root_cmd awk -v key="$key" -v desired="$desired" '
        BEGIN {
            found = 0
            in_match = 0
            keyre = "^[[:space:]]*#?[[:space:]]*" key "([[:space:]]+|$)"
        }

        /^[[:space:]]*Match([[:space:]]+|$)/ {
            if (!found) {
                print desired
                found = 1
            }
            in_match = 1
            print $0
            next
        }

        {
            if (!in_match && $0 ~ keyre) {
                if (!found) {
                    print desired
                    found = 1
                }
                next
            }
            print $0
        }

        END {
            if (!found) {
                print desired
            }
        }
    ' "$file" > "$tmp" || { rm -f "$tmp"; return 1; }

    $root_cmd dd if="$tmp" of="$file" bs=4096 conv=fsync status=none || { rm -f "$tmp"; return 1; }
    rm -f "$tmp"
}

ensure_sshd_google_auth_settings() {
    local file="$1"

    ensure_sshd_config_option "$file" "UsePAM" "yes" || return 1
    ensure_sshd_config_option "$file" "ChallengeResponseAuthentication" "yes" || return 1
    ensure_sshd_config_option "$file" "PasswordAuthentication" "no" || return 1
}

ensure_pam_google_authenticator() {
    local file="$1"
    local module="/opt/homebrew/opt/google-authenticator-libpam/lib/security/pam_google_authenticator.so"
    local line="auth required ${module}"

    if [ ! -f "$module" ]; then
        return 1
    fi

    if [ ! -f "$file" ]; then
        return 1
    fi

    local root_cmd=""
    if [ ! -w "$file" ]; then
        root_cmd="sudo"
    fi

    if $root_cmd grep -Fq "pam_google_authenticator.so" "$file"; then
        return 0
    fi

    local tmp
    tmp="$(mktemp)"

    $root_cmd awk -v newline="$line" '
        NR == 1 {
            if ($0 ~ /^#%PAM/) {
                print $0
                print newline
            } else {
                print newline
                print $0
            }
            next
        }
        { print $0 }
    ' "$file" > "$tmp" || { rm -f "$tmp"; return 1; }

    $root_cmd dd if="$tmp" of="$file" bs=4096 conv=fsync status=none || { rm -f "$tmp"; return 1; }
    rm -f "$tmp"
}

change_mac_settings() {
    defaults write -g KeyRepeat -int 2
    defaults write -g InitialKeyRepeat -int 9
    defaults write -g ApplePressAndHoldEnabled -bool false
    # defaults -currentHost delete -globalDomain NSStatusItemSpacing
    # defaults -currentHost write -globalDomain NSStatusItemSpacing -int 8
    # defaults -currentHost delete -globalDomain NSStatusItemSelectionPadding
    # defaults -currentHost write -globalDomain NSStatusItemSelectionPadding -int 8
}

install_command_line_tools() {
    # TODO: brew bundle --file=Brewfile
    brew install wget
    brew install llvm
    brew install readline xz
    brew install gnupg pinentry-mac
    # brew install ctags
    brew install fzf
    $HOMEBREW_PREFIX/opt/fzf/install
    brew install pyenv pyenv-virtualenv # pyenv-virtualenvwrapper
    brew install tmux reattach-to-user-namespace
    brew install coreutils findutils gnu-getopt
    brew ln gnu-getopt --force
    brew install node yarn  # Nodejs and..
    brew install watch
    brew install go  # Golang
    brew install --cask swiftformat-for-xcode
    brew install roswell # Common Lisp(sbcl) version manager
    brew install rlwrap
    brew install difftastic
    brew install git git-lfs
    brew install ripgrep fd bat jq
    brew install tree
    brew install htop iftop
    brew install fortune
    brew install direnv
    brew install zoxide
    brew install wireguard-tools
    # /etc/ssh/sshd_config (managed by ensure_sshd_google_auth_settings)
    brew install google-authenticator-libpam
    ensure_sshd_google_auth_settings "/etc/ssh/sshd_config" || return 1
    ensure_pam_google_authenticator "/etc/pam.d/sshd" || return 1
    brew install colima docker docker-credential-helper # colima start --cpu 4 --memory 8
    brew install docker-buildx
    mkdir -p ~/.docker/cli-plugins && ln -sfn $(which docker-buildx) ~/.docker/cli-plugins/docker-buildx
    docker buildx install

    go install golang.org/x/perf/cmd/benchstat@latest

    GLOBAL_PYTHON=3.11.0
    # https://github.com/pyenv/pyenv/issues/1219
    pyenv install --skip-existing -v $GLOBAL_PYTHON
    pyenv global $GLOBAL_PYTHON
    pyenv rehash
    $(pyenv which pip) install ipython httpie

    if ! command -v rustup &> /dev/null; then
        curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
        rustup toolchain add nightly
        rustup component add rust-src
    fi

    # Tmux
    # git clone https://github.com/tmux-plugins/tpm ~/.tmux/plugins/tpm
}


link_configuration_files() {
    echo "-> link configuration files .."

    files=(\
        bin \
        gitconfig \
        tmux.conf \
        zshrc \
        config \
    )
    for f in "${files[@]}"
    do
        target="$HOME/.$f"
        if [[ -e "$target" && ! -L "$target" ]]; then
            echo "backup: $target -> $target-backup"
            mv "$target" "${target}-backup-$(date '+%Y%m%d%H%M%S')"
        fi
        ln -vsfn "$cur_dir/$f" "$target"
    done

    mkdir -vp "$HOME/.gnupg"
    cp -rfv "$cur_dir/gnupg/" "$HOME/.gnupg"

    # shellcheck source=/dev/null
    source "$cur_dir/third_configs/install.sh"
}


link_llm_agent_rules() {
    echo "-> link LLM agent rules .."

    local src="$cur_dir/config/agents/AGENTS.md"
    if [[ ! -f "$src" ]]; then
        echo "missing: $src" >&2
        return 1
    fi

    mkdir -vp "$HOME/.claude" "$HOME/.codex"
    ln -vsfn "$src" "$HOME/.claude/CLAUDE.md"
    ln -vsfn "$src" "$HOME/.codex/AGENTS.md"
}


setup_vim() {
    echo "-> setup vim .."
    brew install luajit
    # brew install neovim
    cargo install bob-nvim
    bob install v0.11.5
    bob install nightly
    bob use nightly

    # lint for bash_ls
    brew install shellcheck
    # Swift
    brew install swiftformat
    # https://github.com/wojciech-kulik/xcodebuild.nvim
    brew install xcode-build-server
    brew install xcbeautify
    brew install ruby
    gem install xcodeproj
    # Python
    pip install pynvim black
    # Lua
    cargo install stylua
    # Go
    go install golang.org/x/tools/cmd/goimports@latest

    nvim --headless "+Lazy! sync" +qa
}

install_nerd_font() {
  local name="$1"
  local url="https://github.com/ryanoasis/nerd-fonts/releases/latest/download/${name}.zip"
  local tmpdir
  tmpdir=$(mktemp -d)
  local zip="$tmpdir/${name}.zip"
  local fontdir="$HOME/Library/Fonts"

  curl -L -o "$zip" "$url"
  unzip -q "$zip" -d "$tmpdir"
  cp -f "${tmpdir}"/"${name}"NerdFont-*.ttf "${fontdir}/"
  cp -f "${tmpdir}"/"${name}"NerdFontMono-*.ttf "${fontdir}/"
}

install_fonts() {
    echo "-> install fonts .."
    unzip config/_asserts/fonts.zip -d /tmp/dotfiles-fonts
    mv "/tmp/dotfiles-fonts/fonts/Monaco Nerd Font Complete.ttf" "$HOME/Library/Fonts/"
    rm -rf /tmp/dotfiles-fonts

    install_nerd_font "JetBrainsMono"
}



init_mac(){
    if [[ "$platform" != "Darwin" ]]; then  # Mac
        echo "unsupported platform $platform"
        exit 1
    fi

    echo "-> initialize mac .."
    install_xcode_command_line_tools

    set -e
    change_settings_for_mac
    install_fonts
    link_configuration_files

    # https://docs.brew.sh/Installation
    if ! command -v brew &> /dev/null; then
        /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
        brewzprofile="eval $($HOMEBREW_PREFIX/bin/brew shellenv)"
        grep -qxF "$brewzprofile" ~/.zprofile || echo "$brewzprofile" >> ~/.zprofile
        eval "$($HOMEBREW_PREFIX/bin/brew shellenv)"
    fi

    brew install zsh  # Default on macOS
    if [ "$SHELL" != "$(which zsh)" ]; then
        grep -qxF "$(which zsh)" /etc/shells || echo "$(which zsh)" | sudo tee -a /etc/shells
        chsh -s "$(which zsh)"
        sudo chsh -s "$(which zsh)" # Install for root as well.
        echo "PLEASE RESTART THE TERMINAL SESSION"
        echo "  .. and run this command again"
        exit 0
    else
        antidote-update-and-force-compinit
    fi

    install_command_line_tools
    setup_vim
}


usage() {
    echo "Usage: $0 [-i] [-t] [-l] [-v] [-f] [-a]" >&2
    echo "       -i initialize a new mac" >&2
    echo "       -t install command line tools" >&2
    echo "       -l link configuration files" >&2
    echo "       -v setup vim" >&2
    echo "       -f install patched https://www.nerdfonts.com/" >&2
    echo "       -a link agent rules for Claude/Codex" >&2
    exit 1
}

if [[ "${BASH_SOURCE[0]}" == "${0}" ]]; then
    while getopts ":itlvfa" opt; do
        case "${opt}" in
            i )
                noargs=1
                init_mac
                ;;
            t )
                noargs=1
                install_command_line_tools
                ;;
            l )
                noargs=1
                link_configuration_files
                ;;
            v )
                noargs=1
                setup_vim
                ;;
            f )
                noargs=1
                install_fonts
                ;;
            a )
                noargs=1
                link_llm_agent_rules
                ;;
            * )
                echo "invalid option -${opt}"
                usage
                ;;
        esac
    done

    if [ -z "${noargs}" ]; then
        usage
    else
        exec "$SHELL"
    fi
fi