dotenvx-rs 0.4.31

use crate::clap_app::build_dotenvx_app;
use crate::commands::cloud::cloud_command;
use crate::commands::completion::completion_command;
use crate::commands::crypt_util::{decrypt_file, encrypt_file};
use crate::commands::decrypt::decrypt_command;
use crate::commands::diff::diff_command;
use crate::commands::doctor::doctor_command;
use crate::commands::encrypt::encrypt_command;
use crate::commands::get_cmd::get_command;
use crate::commands::init::init_command;
use crate::commands::keypair::keypair_command;
use crate::commands::link::link_command;
use crate::commands::linter::linter_command;
use crate::commands::list::ls_command;
use crate::commands::rotate::rotate_command;
use crate::commands::run::{run_command, run_command_line};
use crate::commands::set_cmd::set_command;
use crate::commands::sync::sync_command;
use crate::commands::verify::verify_command;
use crate::shims::{is_shim_command, run_shim};
use clap::ArgMatches;
use dotenvx_rs::common::get_profile_name_from_env;
use std::env;
use std::ffi::OsString;

mod clap_app;
pub mod commands;
pub mod shims;

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let app = build_dotenvx_app();
    let mut raw_args: Vec<OsString> = env::args_os().collect();
    // get the command name
    let mut command_name = raw_args[0].clone().to_str().unwrap().to_owned();
    if command_name.contains('/') || command_name.contains('\\') {
        if let Some(pos) = command_name.rfind(['/', '\\']) {
            command_name = command_name[pos + 1..].to_string();
        }
    }
    // check if the command is a shim command
    if is_shim_command(command_name.as_str()) {
        let command_args = raw_args[1..]
            .iter()
            .map(|s| s.to_str().unwrap().to_string())
            .collect::<Vec<String>>();
        let exist_code = run_shim(&command_name, &command_args);
        std::process::exit(exist_code);
    }
    let delegate_command_index = raw_args.iter().position(|arg| arg == "--").unwrap_or(0);
    // check if the run sub-command is present
    if delegate_command_index > 0 {
        let dotenvx_args = raw_args[0..delegate_command_index]
            .iter()
            .map(|s| s.to_str().unwrap())
            .collect::<Vec<&str>>();
        if dotenvx_args.contains(&"run") {
            let matches = app.try_get_matches_from(dotenvx_args).unwrap();
            let command_matches = matches.subcommand_matches("run").unwrap();
            let profile = get_profile(&matches);
            let command_args = raw_args[delegate_command_index + 1..]
                .iter()
                .map(|s| s.to_str().unwrap().to_string())
                .collect::<Vec<String>>();
            let exit_code = run_command(&command_args, command_matches, &profile);
            std::process::exit(exit_code);
        }
    }
    // check "-pp" for decryption to be compatible with python-dotenvx
    if let Some(value) = raw_args.iter_mut().find(|x| *x == "-pp") {
        *value = "--pretty-print".into();
    }
    let matches = app.get_matches_from(raw_args);
    // check no-color flag
    if matches.get_flag("no-color") {
        unsafe {
            env::set_var("NO_COLOR", "1");
        }
    }
    // seal/unseal $HOME/.env.keys file
    if matches.get_flag("seal") {
        encrypt_env_keys_file();
        return Ok(());
    } else if matches.get_flag("unseal") {
        decrypt_env_keys_file();
        return Ok(());
    }
    // check if the --profile flag is set
    let profile = get_profile(&matches);
    // check -c and run the command
    if matches.get_one::<String>("command").is_some() {
        let exit_code = run_command_line(&matches, &profile);
        std::process::exit(exit_code);
    }
    // run the sub-commands
    if let Some((command, command_matches)) = matches.subcommand() {
        match command {
            "init" => init_command(command_matches, &profile),
            "encrypt" => encrypt_command(command_matches, &profile),
            "decrypt" => decrypt_command(command_matches, &profile),
            "verify" => verify_command(command_matches, &profile),
            "keypair" | "kp" => keypair_command(command_matches, &profile),
            "ls" => ls_command(command_matches, &profile),
            "link" => link_command(command_matches, &command_name),
            "get" => get_command(command_matches, &profile),
            "set" => set_command(command_matches, &profile),
            "sync" => sync_command(command_matches),
            "diff" => diff_command(command_matches),
            "rotate" => rotate_command(command_matches, &profile),
            "lint" => linter_command(command_matches),
            "doctor" => doctor_command(command_matches),
            "cloud" => cloud_command(command_matches),
            "completion" => completion_command(command_matches),
            &_ => println!("Unknown command"),
        }
    }
    Ok(())
}

fn encrypt_env_keys_file() {
    let password = rpassword::prompt_password("Your password: ").unwrap();
    let password_confirm = rpassword::prompt_password("Password again: ").unwrap();
    if password != password_confirm {
        eprintln!("Passwords do not match. Please try again.");
        return;
    }
    // let store_in_keychain = rprompt::prompt_reply("Save to keychain(Yes/No)?: ").unwrap();
    // if store_in_keychain.to_lowercase().starts_with("y") {
    //     if let Ok(entry) = Entry::new("dotenvx-keys-password", "dotenvx") {
    //         entry.set_password(&password).unwrap();
    //         entry.get_password().unwrap();
    //     }
    // }
    let home_dir = dirs::home_dir().unwrap();
    // encrypt the $HOME/.env.keys file to $HOME/.env.keys.aes
    if home_dir.join(".env.keys").exists() {
        let keys_file_path = home_dir.join(".env.keys");
        let encrypted_file_path = home_dir.join(".env.keys.aes");
        if encrypt_file(&keys_file_path, &encrypted_file_path, &password).is_ok() {
            std::fs::remove_file(&keys_file_path).unwrap();
            println!("✔ Successfully encrypted the $HOME/.env.keys file to .env.keys.aes",);
        } else {
            eprintln!(
                "Failed to encrypt the .env.keys file. Please check your password and try again."
            );
        }
    }
    // encrypt the $HOME/.dotenvx/.env.keys.json
    let dotenvx_home = home_dir.join(".dotenvx");
    if dotenvx_home.join(".env.keys.json").exists() {
        let keys_file_path = dotenvx_home.join(".env.keys.json");
        let encrypted_file_path = dotenvx_home.join(".env.keys.json.aes");
        if encrypt_file(&keys_file_path, &encrypted_file_path, &password).is_ok() {
            std::fs::remove_file(&keys_file_path).unwrap();
            println!(
                "✔ Successfully encrypted the $HOME/.dotenvx/.env.keys.json file to .env.keys.json.aes",
            );
        } else {
            eprintln!(
                "Failed to encrypt the .env.keys.json file. Please check your password and try again."
            );
        }
    }
}

fn decrypt_env_keys_file() {
    // check if the password is stored in the keychain
    let mut password = "".to_owned();
    // if let Ok(entry) = Entry::new("dotenvx-keys-password", "dotenvx") {
    //     if let Ok(password_from_store) = entry.get_password() {
    //         password = password_from_store;
    //     }
    // }
    if password.is_empty() {
        password = rpassword::prompt_password("Your password: ").unwrap();
    }
    let home_dir = dirs::home_dir().unwrap();
    if home_dir.join(".env.keys.aes").exists() {
        let keys_file_path = home_dir.join(".env.keys");
        let encrypted_file_path = home_dir.join(".env.keys.aes");
        if decrypt_file(&encrypted_file_path, &keys_file_path, &password).is_ok() {
            println!("✔ Successfully decrypted the .env.keys.aes file to $HOME/.env.keys",);
        } else {
            eprintln!(
                "Failed to decrypt the $HOME/.env.keys.aes file. Please check your password and try again."
            );
        }
    }
    let dotenvx_home = home_dir.join(".dotenvx");
    if dotenvx_home.join(".env.keys.json.aes").exists() {
        let keys_file_path = dotenvx_home.join(".env.keys.json");
        let encrypted_file_path = dotenvx_home.join(".env.keys.json.aes");
        if decrypt_file(&encrypted_file_path, &keys_file_path, &password).is_ok() {
            println!(
                "✔ Successfully decrypted the env.keys.json.aes file to $HOME/.dotenvx/.env.keys.json",
            );
        } else {
            eprintln!(
                "Failed to decrypt the $HOME/env.keys.json.aes file. Please check your password and try again."
            );
        }
    }
}

fn get_profile(global_matches: &ArgMatches) -> Option<String> {
    let profile = global_matches
        .get_one::<String>("profile")
        .map(|s| s.to_owned());
    // If profile is not set, try to read from environment variables
    if profile.is_none() {
        return get_profile_name_from_env();
    }
    profile
}