max-sixty__worktrunk/scripts/codex-cloud/Taskfile.yaml

version: "3"

vars:
  CODEX_REPO_ROOT: "{{.TASKFILE_DIR}}/../.."
  TASK_VERSION: "3.52.0"
  PRE_COMMIT_VERSION: "4.6.2"
  INSTA_VERSION: "1.48.0"
  NEXTEST_VERSION: "0.9.143"
  NU_VERSION: "0.115.0"
  PWSH_VERSION: "7.6.5"

tasks:
  setup-codex:
    desc: Setup Codex Cloud universal image (root only)
    platforms: [linux]
    dir: "{{.CODEX_REPO_ROOT}}"
    preconditions:
      - sh: test "$(id -u)" = 0
        msg: Codex Cloud setup requires root
    env:
      DEBIAN_FRONTEND: noninteractive
      MISE_HTTP_RETRIES: 6
      MISE_NO_CONFIG: "1"
    cmds:
      - |
        set -euo pipefail

        apt-get update -qq
        apt-get install -y -qq --no-install-recommends software-properties-common
        add-apt-repository -y ppa:git-core/ppa
        apt-get update -qq
        apt-get install -y -qq --no-install-recommends git zsh fish xz-utils lsof

        mise use --global task@{{.TASK_VERSION}}
        uv tool install pre-commit=={{.PRE_COMMIT_VERSION}}
        install -d /root/.local/bin

        tools_tmp="$(mktemp -d)"
        download() {
          curl -fsSL --retry 6 --retry-all-errors --retry-delay 2 \
            "$1" -o "$tools_tmp/$3"
          printf '%s  %s\n' "$2" "$tools_tmp/$3" | sha256sum -c -
        }
        install_binary() {
          download "$1" "$2" "$3"
          case "$3" in
            *.tar.xz) tar -xJf "$tools_tmp/$3" -C "$tools_tmp" ;;
            *.tar.gz) tar -xzf "$tools_tmp/$3" -C "$tools_tmp" ;;
          esac
          install -m 0755 "$tools_tmp/$4" "$5"
        }

        install_binary \
          https://github.com/mitsuhiko/insta/releases/download/{{.INSTA_VERSION}}/cargo-insta-x86_64-unknown-linux-gnu.tar.xz \
          1c05a480a5a7f755f0ea15b2d8e2f71ad51b9c3a270d38ac72005c57ac0a1487 \
          cargo-insta.tar.xz cargo-insta-x86_64-unknown-linux-gnu/cargo-insta \
          /root/.local/bin/cargo-insta
        install_binary \
          https://github.com/nextest-rs/nextest/releases/download/cargo-nextest-{{.NEXTEST_VERSION}}/cargo-nextest-{{.NEXTEST_VERSION}}-x86_64-unknown-linux-gnu.tar.gz \
          66786b9abe23920d022a182d1416b1bbc8130dd4872a9553d76985a1708dcd1e \
          cargo-nextest.tar.gz cargo-nextest /root/.local/bin/cargo-nextest
        install_binary \
          https://github.com/nushell/nushell/releases/download/{{.NU_VERSION}}/nu-{{.NU_VERSION}}-x86_64-unknown-linux-gnu.tar.gz \
          da83cfe482060d2c34b6b9af829975a313bce6b92e0398c3b2a59cb38630c7b2 \
          nu.tar.gz nu-{{.NU_VERSION}}-x86_64-unknown-linux-gnu/nu /root/.local/bin/nu

        pwsh_archive=powershell.tar.gz
        # The universal image supplies libicu; the version probe below fails if that changes.
        download \
          https://github.com/PowerShell/PowerShell/releases/download/v{{.PWSH_VERSION}}/powershell-{{.PWSH_VERSION}}-linux-x64.tar.gz \
          b34ab3b19acac1d3d4d0d3cfdb02acf62f457b0b6a962ff008132033f7566844 \
          "$pwsh_archive"
        install -d /opt/microsoft/powershell/7
        tar -xzf "$tools_tmp/$pwsh_archive" -C /opt/microsoft/powershell/7
        chmod 0755 /opt/microsoft/powershell/7/pwsh
        ln -sf /opt/microsoft/powershell/7/pwsh /usr/local/bin/pwsh
        rm -r -- "$tools_tmp"

        git_version="$(git version | awk '{print $3}')"
        dpkg --compare-versions "$git_version" ge 2.54.0
        git config --system --add safe.directory "$PWD"

        for executable in task pre-commit cargo cargo-insta cargo-nextest git lsof pwsh zsh fish nu; do
          command -v "$executable" >/dev/null
        done
        test -x /root/.local/share/mise/installs/task/{{.TASK_VERSION}}/task
        pwsh -NoLogo -NoProfile -Command '$PSVersionTable.PSVersion.ToString()'
      - task: prepare-codex

  maintain-codex:
    desc: Maintain Codex Cloud universal image (root only)
    platforms: [linux]
    preconditions:
      - sh: test "$(id -u)" = 0
        msg: Codex Cloud maintenance requires root
    cmds:
      - task: prepare-codex

  prepare-codex:
    internal: true
    dir: "{{.CODEX_REPO_ROOT}}"
    cmds:
      - |
        set -euo pipefail

        install -d target /root/.cargo/registry /root/.cargo/git /root/.cache/pre-commit
        rustup component add rust-docs
        pre-commit install-hooks
        cargo --version
        cargo fetch --locked