LibrePortal/scripts/cli/commands/artifact/cli_artifact_commands.sh

#!/bin/bash

# Artifact command handler — `libreportal artifact <sub>`
# ---------------------------------------------------------------------------
# Dispatched automatically by cli_initialize.sh (category -> cliHandleArtifactCommands).
#
# The unified distribution primitive. The READ side (`index`/`applied`) fetches +
# verifies the team-signed artifact index (hotfixes today; apps/themes/components
# later — all one envelope) and lists what's available/applied; it changes nothing,
# so — like `updater check` — it runs directly. The state-changing `apply`/`revert`
# verbs route through the TASK system (snapshot → bounded declarative ops →
# auto-rollback → History), never a mutating API. See docs/roadmap/updates-and-
# distribution.md and cli_artifact_apply.sh.

cliHandleArtifactCommands()
{
    local sub="$initial_command2"
    local id="$initial_command3"

    # Lazy-loader gap: ensure the read primitives are defined. These are new
    # files; the array/manifest regen self-heals them on deploy, but this covers
    # the window before that (mirrors cli_updater_commands.sh sourcing its
    # generator). artifacts.sh leans on fetch.sh helpers, so load both.
    if ! declare -F lpFetchIndex >/dev/null 2>&1; then
        source "$install_scripts_dir/source/fetch.sh" 2>/dev/null
        source "$install_scripts_dir/source/artifacts.sh" 2>/dev/null
    fi
    # The apply pipeline lives in a sibling file — source it on demand too.
    if ! declare -F artifactApply >/dev/null 2>&1; then
        source "$install_scripts_dir/cli/commands/artifact/cli_artifact_apply.sh" 2>/dev/null
    fi

    case "$sub" in
        ""|"index"|"list")
            artifactListIndex
            ;;
        "applied")
            artifactListApplied
            ;;
        "apply")
            if [[ -z "$id" ]]; then isError "Usage: libreportal artifact apply <id>"; return 1; fi
            if [[ "$LIBREPORTAL_TASK_EXEC" == "1" ]]; then
                artifactApply "$id"
            else
                cliTaskRun "libreportal artifact apply $id" "artifact_apply" "$id" ""
            fi
            ;;
        "revert"|"rollback")
            if [[ -z "$id" ]]; then isError "Usage: libreportal artifact revert <id>"; return 1; fi
            if [[ "$LIBREPORTAL_TASK_EXEC" == "1" ]]; then
                artifactRevert "$id"
            else
                cliTaskRun "libreportal artifact revert $id" "artifact_revert" "$id" ""
            fi
            ;;
        *)
            cliShowArtifactHelp
            ;;
    esac
}

# List the applied hotfixes (read-only) from the per-id applied records.
artifactListApplied()
{
    isHeader "Applied hotfixes"
    local dir; dir="${containers_dir%/}/libreportal/frontend/data/updater/generated/applied"
    if ! compgen -G "$dir/*.json" >/dev/null 2>&1; then
        isSuccessful "0 hotfixes applied."
        return 0
    fi
    local n=0 f id title app
    for f in "$dir"/*.json; do
        n=$((n+1))
        if command -v jq >/dev/null 2>&1; then
            id="$(jq -r '.id' "$f" 2>/dev/null)"; title="$(jq -r '.title // ""' "$f" 2>/dev/null)"; app="$(jq -r '.app // ""' "$f" 2>/dev/null)"
            echo "  • $id${app:+ [$app]} — $title"
        else
            echo "  • $(basename "$f" .json)"
        fi
    done
    isSuccessful "$n hotfix(es) applied. Revert with: libreportal artifact revert <id>"
}

# Fetch + verify the signed index and print a human summary. Read-only.
artifactListIndex()
{
    isHeader "Artifact index ($(lpReleaseChannel))"

    local json
    if ! json="$(lpFetchIndex)"; then
        isError "Could not fetch or verify the artifact index from $(lpArtifactIndexUrl)."
        isNotice "Nothing is published yet, or the channel is unreachable. (This is expected before the first index ships.)"
        return 1
    fi

    local serial generated_at
    serial="$(_lpJsonNum "$json" index_serial)"
    generated_at="$(lpIndexTop generated_at "$json")"
    isNotice "Signed + verified.  serial=${serial:-?}  generated=${generated_at:-?}"

    local ids; ids="$(lpIndexArtifactIds "$json")"
    if [[ -z "$ids" ]]; then
        isSuccessful "0 artifacts available — the index is empty (nothing to apply)."
        return 0
    fi

    local n=0 id obj title type sev
    while IFS= read -r id; do
        [[ -z "$id" ]] && continue
        n=$((n + 1))
        obj="$(lpArtifactById "$json" "$id")"
        if [[ -n "$obj" ]]; then
            title="$(_lpJsonStr "$obj" title)"
            type="$(_lpJsonStr "$obj" type)"
            sev="$(_lpJsonStr "$obj" severity)"
            echo "  • [${type:-?}/${sev:-info}] $id — ${title:-}"
        else
            echo "  • $id"
        fi
    done <<< "$ids"

    isSuccessful "$n artifact(s) available."
}