OSVauco/scripts/opax.sh

130 lines
5.2 KiB
Bash

#!/usr/bin/env bash
# =============================================================================
# OPAX.SH — Authoritative OSVauco OPAX Environment Bootstrapper
#
# Usage: source ~/OSVauco/scripts/opax.sh
# Alias: opax
# =============================================================================
# --- Pre-computation and Environment ---
OSVAUCO_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
export GOOGLE_CLOUD_PROJECT="propane-will-491900-m5"
export GOOGLE_CLOUD_LOCATION="us-central1"
export GEMINI_MODEL="gemini-2.5-pro"
# --- UI Colors ---
GREEN="$(tput setaf 2 2>/dev/null || printf '\033[0;32m')"
RED="$(tput setaf 1 2>/dev/null || printf '\033[0;31m')"
YELLOW="$(tput setaf 3 2>/dev/null || printf '\033[1;33m')"
CYAN="$(tput setaf 6 2>/dev/null || printf '\033[0;36m')"
WHITE="$(tput setaf 7 2>/dev/null || printf '\033[1;37m')"
DIM="$(tput dim 2>/dev/null || printf '\033[2m')"
BOLD="$(tput bold 2>/dev/null || printf '\033[1m')"
NC="$(tput sgr0 2>/dev/null || printf '\033[0m')"
OK="✅"
FAIL="❌"
if [[ -z "${OPAX_LOADED-}" ]]; then
clear
printf "${CYAN}"
echo " ___ _____ _ _ ___ _ _ ___ _____ "
echo " / _ \| ___| | | | |/ _ \| | | |/ __|| _ | "
echo " | | | | |___ | | | / /_\ \ | | | | | | | | "
echo " | | | |___ | | | | | _ | | | | | | | | | "
echo " | |_| |___| | \ \_/ / | | | |_| | |__ \ \_/ / "
echo " \___/\____/ \___/\_| |_/\___/ \___| \___/ "
printf "${NC}"
printf "${DIM} -------------------------------------------------${NC}\n"
printf " ${CYAN}OPAX${NC} ${DIM}Operator Platform // ${GOOGLE_CLOUD_PROJECT}${NC}\n"
printf "${DIM} -------------------------------------------------${NC}\n\n"
printf "${BOLD}${WHITE} Preflight Checks...${NC}\n"
run_check() {
local description="$1"
local command_to_run="$2"
local error_message="$3"
local is_critical="${4:-false}"
printf " %-40s" "$description"
if eval "$command_to_run" &>/dev/null; then
printf "${GREEN}${OK}${NC}\n"
else
printf "${RED}${FAIL}${NC}\n"
if [[ "$is_critical" == "true" ]]; then
printf "\n ${RED}${BOLD}CRITICAL:${NC} ${error_message}\n"
printf " ${YELLOW}Aborting OPAX startup.${NC}\n\n"
return 1
else
printf " ${YELLOW}${NC} ${error_message}\n"
fi
fi
}
run_check "gcloud user authenticated" \
"gcloud auth list --filter=status:ACTIVE --format='value(account)' | grep -q @" \
"Run: gcloud auth login" \
true
run_check "Application Default Credentials (ADC)" \
"curl -sf -H 'Metadata-Flavor: Google' 'http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/token' | grep -q access_token || gcloud auth application-default print-access-token --quiet" \
"Run: gcloud auth application-default login" \
true
run_check "gcloud project = $GOOGLE_CLOUD_PROJECT" \
"[[ \$(gcloud config get-value project 2>/dev/null) == '$GOOGLE_CLOUD_PROJECT' ]]" \
"Run: gcloud config set project $GOOGLE_CLOUD_PROJECT" \
true
run_check "GitHub remote reachable" \
"git -C '$OSVAUCO_DIR' ls-remote --exit-code origin" \
"Cannot reach git remote origin" \
true
run_check "Secret Manager tilgjengelig" \
"gcloud secrets versions access latest --secret=GEMINI_API_KEY --project=$GOOGLE_CLOUD_PROJECT" \
"Sjekk IAM-tillatelser for Secret Manager"
run_check "Git working tree clean" \
"git -C '$OSVAUCO_DIR' diff --quiet && git -C '$OSVAUCO_DIR' diff --cached --quiet" \
"Uncommitted changes present"
# Cloud Run health
SERVICE_URL=$(gcloud run services describe osvauco-agent \
--region "$GOOGLE_CLOUD_LOCATION" \
--project "$GOOGLE_CLOUD_PROJECT" \
--format="value(status.url)" 2>/dev/null || echo "")
if [[ -n "$SERVICE_URL" ]]; then
TOKEN=$(gcloud auth print-identity-token 2>/dev/null || echo "")
run_check "Cloud Run osvauco-agent healthy" \
"curl -sf -H 'Authorization: Bearer ${TOKEN}' '${SERVICE_URL}/health'" \
"Service ikke tilgjengelig — sjekk Cloud Run"
else
printf " %-40s${YELLOW}SKIP${NC}\n" "Cloud Run osvauco-agent healthy"
printf " ${DIM}Service ikke funnet i $GOOGLE_CLOUD_LOCATION${NC}\n"
fi
printf "\n${GREEN}${BOLD}✅ OPAX klar.${NC}\n\n"
fi
# --- Miljø og prompt ---
cd "$OSVAUCO_DIR" 2>/dev/null || true
export PS1="\[${GREEN}\]┌──(\[${CYAN}\]OPAX:\[${BOLD}\]\w\[${NC}\])\[${NC}\]\n\[${GREEN}\]└─▪\[${NC}\] "
export OPAX_LOADED=true
if [[ -z "${OPAX_COMMANDS_SHOWN-}" ]]; then
printf "${BOLD}${WHITE}QUICK COMMANDS${NC}\n"
printf " ${GREEN}%-8s${NC} %s\n" "ca" "cost-audit"
printf " ${GREEN}%-8s${NC} %s\n" "cl" "cost-lens"
printf " ${GREEN}%-8s${NC} %s\n" "st" "smoke-test"
printf " ${GREEN}%-8s${NC} %s\n" "hc" "health-check"
printf " ${GREEN}%-8s${NC} %s\n" "g" "gemini"
printf " ${GREEN}%-8s${NC} %s\n" "sol" "avslutt"
printf "\n"
export OPAX_COMMANDS_SHOWN=true
fi