Goit

// Copyright (C) 2025, Jakob Wakeling
// All rights reserved.

package main

import (
	"database/sql"
	"fmt"
	"os"
	"path/filepath"
	"regexp"
	"strings"

	"github.com/Jamozed/Goit/src/goit"
	"github.com/Jamozed/Goit/src/util"
	_ "github.com/mattn/go-sqlite3"
)

func main() {
	if len(os.Args) < 2 || os.Getenv("SSH_ORIGINAL_COMMAND") == "" {
		fmt.Fprint(os.Stderr, "Interactive Goit shell is not enabled.\n")
		os.Exit(-1)
	}

	username := os.Args[1]
	soc := os.Getenv("SSH_ORIGINAL_COMMAND")

	/* Parse the SSH_ORIGINAL_COMMAND value for the direction and repository name. */
	re := regexp.MustCompile(`^(git-upload-pack|git-receive-pack|git-upload-archive) '?/?(.*?)'?$`)
	matches := re.FindStringSubmatch(soc)
	if len(matches) != 3 || matches[1] == "" {
		fmt.Fprintln(os.Stderr, "Unknown command:", soc)
		os.Exit(-1)
	}

	command := matches[1]
	action := util.If(strings.Contains(command, "upload"), "r", "w")
	reponame := strings.TrimSuffix(strings.TrimSuffix(matches[2], "/"), ".git")

	if !goit.IsLegal(reponame) {
		fmt.Fprintln(os.Stderr, "Repository not found.")
		os.Exit(-1)
	}

	/* Load the config. */
	conf, err := goit.LoadConfig()
	if err != nil {
		fmt.Fprintln(os.Stderr, "Failed to load config:", err.Error())
		os.Exit(-1)
	}

	/* Open the database. */
	db, err := sql.Open("sqlite3", filepath.Join(conf.DataPath, "goit.db?_timeout=5000"))
	if err != nil {
		fmt.Fprintln(os.Stderr, "Failed to open database:", err.Error())
		os.Exit(-1)
	}
	defer db.Close()

	/* Set global config and database variables correctly. */
	goit.Conf = conf
	goit.ShellSetDB(db)

	/* Confirm that the database is the expected version. */
	var version int
	if err := db.QueryRow("PRAGMA user_version").Scan(&version); err != nil {
		fmt.Fprintln(os.Stderr, "Failed to get database version:", err.Error())
		os.Exit(-1)
	}
	if version != goit.LATEST_VERSION {
		fmt.Fprintln(os.Stderr, "Unexpected database version.")
		os.Exit(-1)
	}

	/* Confirm that the user exists and is enabled. */
	user, err := goit.GetUserByName(username)
	if err != nil {
		fmt.Fprintln(os.Stderr, "Failed to get user:", err.Error())
		os.Exit(-1)
	}
	if user == nil {
		fmt.Fprintln(os.Stderr, "User not found.")
		os.Exit(-1)
	}

	/* Confirm that the repository exists. */
	repo, err := goit.GetRepoByName(reponame)
	if err != nil {
		fmt.Fprintln(os.Stderr, "Failed to get repository:", err.Error())
		os.Exit(-1)
	}

	/* Check user authorization against repository. */
	if repo == nil || (repo.Visibility == goit.Private && user.Id != repo.OwnerId) {
		fmt.Fprintln(os.Stderr, "Repository not found.")
		os.Exit(-1)
	}

	/* Check if user has write permissions for the repository, if required. */
	if action == "w" && repo.OwnerId != user.Id {
		fmt.Fprintln(os.Stderr, "Write access denied.")
		os.Exit(-1)
	}

	/* Run git-shell command. */
	if _, _, err := goit.NewGitCommand(
		"shell", "-c", command+" '"+goit.RepoPath(reponame, true)+"'",
	).Run(os.Stdin, os.Stdout); err != nil {
		os.Exit(-1)
	}
}