helm/bin/hey

#!/usr/bin/env cached-nix-shell
#! nix-shell -p ruby -i "ruby -S" --quiet

DESC = <<~DESC
  Nix's CLI has a poor user story, in my opinion. It could be better; Guix is a
  good role model here. I wrote this script to abstract the more common
  workflows, like rebuilding (nixos-rebuild), cleaning up (nix-collect-garbage),
  package/env management (nix-env), updating, rolling back, etc. As well as some
  utility operations (like managing generations, building remotely, or swapping
  themes on the fly).

  Because I can go months without shaving yaks in NixOS, exact flags or details
  are often and easily forgotten. This spares me that fumbling phase and also
  serves as a reference.

  Note: `hey` can also be used as a shortcut for nix-env:

    hey -q
    hey -iA nixos.htop
    hey -e htop
DESC

require 'shellwords'
require 'optparse'

module Hey
  extend self
  Command = Struct.new(:name, :desc, :args, :opts, :fn)

  @@opts = { flake: File.expand_path('../', File.dirname(__FILE__)) }
  @@alias = {}
  @@commands = {}
  @@cli = nil
  def self.defcmd names, &block
    names = (names.kind_of?(Array) ? names : [names]).map(&:to_s)
    names.drop(1).each { |n| @@alias[n] = names.first }
    cli = Command.new names.first, [], []
    cli.opts = OptionParser.new do |opt|
      opt.banner = "Usage: #{opt.program_name} #{cli.name} [options]"
      opt.separator "\nOptions:"
      opt.on_tail('-h', '--help', 'Prints this help') { puts opt; exit }
    end
    @@cli = cli
    fn = block.call cli
    cli.fn = lambda do |args|
      begin
        cli.opts.banner +=
          (cli.args ? " #{cli.args.join ' '}" : "") +
          (cli.desc ? "\n\n#{cli.desc[0]}\n\n#{cli.desc[1..].join "\n"}" : "")
        cli.opts.order!(args, into: @@opts)
        fn.call args
      ensure @@cli = nil end
    end
    @@commands[cli.name] = @@cli
  end
  def self.opts(*args) @@cli.opts.on(*args) end
  def self.args(*args) @@cli.args = args end
  def self.desc(*args) @@cli.desc = args end
  def self.sh(args, sudo: false, noerror: false)
    raise ArgumentError unless args.kind_of?(Array)
    args.unshift('sudo') if sudo
    if @@opts[:dryrun]
      print args.compact
      return true
    else
      result = system "#{args.compact.shelljoin} 2>&1"
      noerror ? result : exit($?.exitstatus)
    end
  end
  def self.rebuild(*args, sudo: false, host: nil)
    host ||= ENV['HOST'] || `hostname`.rstrip
    sh ["nixos-rebuild",
        "--flake", "#{@@opts[:flake]}##{host}",
        "--option", "pure-eval", "no",
        *args], sudo: sudo
  end

  #
  defcmd [:shell, :sh] do
    desc "Open a nix-shell with the dotfiles loaded"
    lambda do |args|
      sh ["nix", "develop", args.first || @@opts[:flake]]
    end
  end

  defcmd :repl do
    desc "Open a nix-repl with nixpkgs and dotfiles preloaded"
    lambda do |args|
      sh ["nix", "repl", @@opts[:flake], "<nixpkgs>", *args]
    end
  end

  defcmd [:check, :ch] do
    desc "Run 'nix flake check' on your dotfiles"
    lambda do |args|
      sh ["nix", "flake", "check", @@opts[:flake]]
    end
  end

  defcmd :show do
    desc "[ARGS...]", "Run 'nix flake show' on your dotfiles"
    lambda do |args|
      sh ["nix", "flake", "show", @@opts[:flake]]
    end
  end

  defcmd :theme do
    desc 'Quickly swap to another theme module'
    args "THEME_NAME"
    lambda do |args|
      ENV["THEME"] = args.shift
      rebuild "--fast", "test"
    end
  end

  defcmd [:test, :t] do
    desc "Quickly rebuild, for quick iteration"
    lambda do |args|
      rebuild "--fast", "test", *args
    end
  end

  defcmd [:rebuild, :re] do
    desc "Rebuild the current system's flake"
    opts       '--build-host HOST',  "Where to build the flake"
    opts       '--target-host HOST', "Where to deploy the built derivations"
    opts       '--host HOST',        "The target nixosConfiguration to build"
    opts       '--user',             "Rebuild as user, rather than root"
    opts       '--fast',             "Equivalent to --no-build-nix --show-trace for quick rebuilding"
    lambda do |args|
      Dir.chdir(@@opts[:flake]) do
        args = ["switch"] unless args.length > 0
        rebuild(*(@@opts[:"build-host"]  ? ["--build-host",  @@opts[:"build-host"]]  : []),
                *(@@opts[:"target-host"] ? ["--target-host", @@opts[:"target-host"]] : []),
                @@opts[:fast]  ? "--fast"       : nil,
                @@opts[:debug] ? "--show-trace" : nil,
                *args,
                sudo: !@@opts[:user],
                host: @@opts[:host])
      end
    end
  end

  defcmd :rollback do
    desc "Roll back to last generation"
    lambda do |_args|
      rebuild "--rollback", "switch"
    end
  end

  defcmd [:update, :u] do
    desc "Update specific flakes or all of them"
    args "[INPUT...]"
    lambda do |args|
      args.each do |flake|
        puts "Trying to update #{flake}..."
        sh ["nix", "flake", "update", "--update-input", flake, @@opts[:flake]]
      end.empty? and begin
        puts "Updating all flakes.."
        sh ["nix", "flake", "update", "--recreate-lock-file", @@opts[:flake]]
      end
    end
  end

  defcmd [:upgrade, :up] do
    desc "Update all flakes and rebuild system"
    lambda do |_args|
      update
      rebuild :switch
    end
  end

  defcmd [:search, :s] do
    desc "Search nixpkgs for a package"
    lambda do |args|
      sh ["nix", "search", "nixpkgs", *args]
    end
  end

  defcmd :swap do
    desc "Recursively swap nix-store links (or folders thereof) with copies.",
         "The purpose is so you can have copies of your dotfiles that can be modified in",
         "place (so you can iterate on them quickly instead of 'hey re'ing between",
         "changes). Run again to restore the old link(s).\n",
         "Warning: backup your copies, or they will be destroyed when restored!"
    args "PATH", "[PATHS...]"
    lambda do |args|
      for target in args
        if File.directory? target
          files = Dir.glob("#{target}/**/*.nix-store-backup")
          if files.length > 0
            puts "There are swapped files here. Unswapping!"
            call :swap, *files
          else
            puts "Swapping files in #{target}"
            call :swap, *(Dir.glob("#{target}/**/*")
                            .select { |f| File.symlink? f }
                            .select { |l| File.readlink(l).match '^/nix/store/' })
          end
        elsif File.file? "#{target}.nix-store-backup"
          puts "Unswapping #{target}"
          sh [:mv, '-i', "#{target}.nix-store-backup", target]
        elsif File.file? target
          puts "Swapping #{target}"
          sh [:mv, target, "#{target}.nix-store-backup"]
          sh [:cp, "#{target}.nix-store-backup", target]
        else
          puts "Not a valid target: #{target}"
          exit 1
        end
      end
    end
  end

  defcmd :gc do
    desc "Garbage collect & optimize nix store"
    opts "-a", "--all",         "GC both the user and system profiles"
    opts "-s", "--system",      "Only GC the system profile"
    lambda do |_args|
      if @@opts[:all] or not @@opts[:root]
        puts "Cleaning up your user profile..."
        sh %w{nix-collect-garbage -d}
      end
      if @@opts[:all] or @@opts[:system]
        puts "Cleaning up your system..."
        sh %w{nix-collect-garbage -d}, sudo: true
        sh %w{nix-store --optimise}, sudo: true
        # Clear out left-over secrets. The switch-to-configuration call below will
        # regenerate them.
        if File.exists?("/run/secrets/*")
          sh %w{rm -rf /run/secrets/*}, sudo: true
        end
        # nix-collect-garbage is a Nix tool, not a NixOS tool. It won't delete old
        # boot entries until you do a nixos-rebuild (which means we'll always have
        # 2 boot entries at any time). Instead, we properly delete them by
        # reloading the current environment.
        sh %w{nix-env --delete-generations old --profile /nix/var/nix/profiles/system}, sudo: true
        sh %w{/nix/var/nix/profiles/system/bin/switch-to-configuration switch}, sudo: true
      end
    end
  end

  defcmd :ssh do
    desc "Run a bin/hey command on a remote NixOS system",
         "If COMMAND is one of switch, test, or boot (if omitted, 'test' is assumed),",
         "that host's config is built locally and then copied to the remote over ssh.",
         "This will prompt you for your root password, as it temporarily opens root ssh",
         "access (via your existing ssh key) to the remote -- which is immediately removed",
         "upon completion.",
         "",
         "If COMMAND is anything else, it merely runs 'nix run github:hlissner/dotfiles",
         "-- COMMAND' on the rmeote."
    args "HOST", "[COMMAND]"
    opts '--host HOST', "The nixos config to build and deploy to HOST"
    lambda do |args|
      target, command = args.take(2)
      command ||= "test"
      if command.match(/switch|test|boot/)
        puts "Enabling root ssh access on #{target}. Enter root password for remote system:"
        if sh ["ssh", "-t", target,
               "sudo mkdir -p /root/.ssh && sudo cp -f ~/.ssh/authorized_keys /root/.ssh/"],
              noerror: true
          begin
            puts "Building #{@@opts[:flake]}##{@@opts[:host] || target} for #{target}"
            call "rebuild", ["--user",
                             "--host", @@opts[:host] || target,
                             "--build-host",  "localhost",
                             "--target-host", "root@#{target}",
                             command]
          ensure
            puts "Undoing root ssh access on #{target}"
            sh ["ssh", "-t", "root@#{target}", "rm -f /root/.ssh/authorized_keys"]
          end
        end
      else
        command = "nix run github:hlissner/dotfiles -- #{command}"
        puts "Running '#{command}' on #{target}"
        sh ["ssh", "-t", target, command]
      end
    end
  end

  # TODO Generalize this to nix profiles
  defcmd [:generations, :gen] do
    desc "Explore, manage, diff across generations"
    opts       '--diff FROM TO',   "Diff profiles FROM with TO (numbers)"
    opts '-r', '--remove PROFILE', "Delete PROFILE from history"
    lambda do |args|
      profile = "/nix/var/nix/profiles/system"
      case args.shift
      when "diff"
        from, to = *args
        if from == to
          puts "Comparing the same profile! Aborting..."
          exit 1
        elsif [from, to].compact.select do |gen|
                File.exists? "#{profile}-#{gen}-link" or
                  puts "Generation #{gen} does not exist!"
              end.length != [from, to].compact.length
          exit 2
        end
        from = from ? "#{profile}-#{from}-link" : profile
        to   = to   ? "#{profile}-#{to}-link"   : profile
        fromDevs = `nix-store -q --references #{from}`.split
        toDevs   = `nix-store -q --references #{to}`.split
        puts (fromDevs - toDevs).map { |d| "\e[31m-#{d}\e[0m" }
        puts (toDevs - fromDevs).map { |d| "\e[32m+#{d}\e[0m" }
      when /ls|list/
        sh ["nix-env", "--list-generations", "--profile", profile], sudo: true
      when "remove"
        sh ["nix-env", "--delete-generations", "--profile", profile, *args], sudo: true
      when "switch"
        puts "Targeted rollback not supported yet"  # TODO Is this true?
        exit 1
      end
    end
  end

  class UsageError < StandardError; end
  defcmd [:help, :h] do
    desc "Show usage information for this script or a subcommand"
    args "[SUBCOMMAND]"
    lambda do |args|
      raise UsageError unless args.first
      call args.first, ["-h", *args.drop(1)]
    end
  end

  #
  def self.call command, args
    cmd = command.to_s
    cmd = @@alias[cmd] while cmd and not @@commands.key?(cmd)
    if cmd
      @@commands[cmd].fn.call args
    elsif command
      puts "Couldn't recognize command '#{command}'"
      exit 1
    else
      raise UsageError
    end
  end

  def self.run args=[]
    opts = OptionParser.new do |opt|
      opt.banner = "Usage: hey [global-options] [command] [sub-options]\n\n" + DESC
      opt.separator "\n\nAvailable Commands:"
      opt.separator (@@commands.values
                       .reject { |c| c.desc.empty? }
                       .sort { |a,b| a.name <=> b.name }
                       .map { |c| "  %-18s %s\n" % ["#{c.name} #{@@alias.key(c.name)}",
                                                   c.desc[0]]})
      opt.separator "\nOptions:"
      opt.on('-d', '--dryrun',    "Don't change anything; preform dry run")
      opt.on('-D', '--debug',     "Show trace on nix errors")
      opt.on('-f', '--flake URI', "Change target flake to URI")
      opt.on('-h', '--help',      "Display this help, or help for a specific command")
      opt.on(*%w{-i -A -q -e -p}, "Forward to nix-env") { sh ["nix-env", *ARGV]; exit }
    end
    opts.order!(args, into: @@opts)

    begin
      args.unshift("help") if @@opts[:help]
      if args.length == 0
        puts "Error: No command specified!"
        puts
        raise UsageError
      else
        call args.first, args.drop(1)
      end
    rescue UsageError
      puts opts
    end
  end
end

Hey.run ARGV.dup