network/pkg/environments/production/checks.go

package production

import (
	"fmt"
	"os"
	"os/exec"
	"runtime"
	"strconv"
	"strings"
	"syscall"
)

// OSInfo contains detected operating system information
type OSInfo struct {
	ID      string // ubuntu, debian, etc.
	Version string // 22.04, 24.04, 12, etc.
	Name    string // Full name: "ubuntu 24.04"
}

// PrivilegeChecker validates root access and user context
type PrivilegeChecker struct{}

// CheckRoot verifies the process is running as root
func (pc *PrivilegeChecker) CheckRoot() error {
	if os.Geteuid() != 0 {
		return fmt.Errorf("this command must be run as root (use sudo)")
	}
	return nil
}

// CheckLinuxOS verifies the process is running on Linux
func (pc *PrivilegeChecker) CheckLinuxOS() error {
	if runtime.GOOS != "linux" {
		return fmt.Errorf("production setup is only supported on Linux (detected: %s)", runtime.GOOS)
	}
	return nil
}

// OSDetector detects the Linux distribution
type OSDetector struct{}

// Detect returns information about the detected OS
func (od *OSDetector) Detect() (*OSInfo, error) {
	data, err := os.ReadFile("/etc/os-release")
	if err != nil {
		return nil, fmt.Errorf("cannot detect operating system: %w", err)
	}

	lines := strings.Split(string(data), "\n")
	var id, version string

	for _, line := range lines {
		line = strings.TrimSpace(line)
		if strings.HasPrefix(line, "ID=") {
			id = strings.Trim(strings.TrimPrefix(line, "ID="), "\"")
		}
		if strings.HasPrefix(line, "VERSION_ID=") {
			version = strings.Trim(strings.TrimPrefix(line, "VERSION_ID="), "\"")
		}
	}

	if id == "" {
		return nil, fmt.Errorf("could not detect OS ID from /etc/os-release")
	}

	name := id
	if version != "" {
		name = fmt.Sprintf("%s %s", id, version)
	}

	return &OSInfo{
		ID:      id,
		Version: version,
		Name:    name,
	}, nil
}

// IsSupportedOS checks if the OS is supported for production deployment
func (od *OSDetector) IsSupportedOS(info *OSInfo) bool {
	supported := map[string][]string{
		"ubuntu": {"22.04", "24.04", "25.04"},
		"debian": {"12"},
	}

	versions, ok := supported[info.ID]
	if !ok {
		return false
	}

	for _, v := range versions {
		if info.Version == v {
			return true
		}
	}

	return false
}

// ArchitectureDetector detects the system architecture
type ArchitectureDetector struct{}

// Detect returns the detected architecture as a string usable for downloads
func (ad *ArchitectureDetector) Detect() (string, error) {
	arch := runtime.GOARCH
	switch arch {
	case "amd64":
		return "amd64", nil
	case "arm64":
		return "arm64", nil
	case "arm":
		return "arm", nil
	default:
		return "", fmt.Errorf("unsupported architecture: %s", arch)
	}
}

// DependencyChecker validates external tool availability
type DependencyChecker struct {
	skipOptional bool
}

// NewDependencyChecker creates a new checker
func NewDependencyChecker(skipOptional bool) *DependencyChecker {
	return &DependencyChecker{
		skipOptional: skipOptional,
	}
}

// Dependency represents an external binary dependency
type Dependency struct {
	Name        string
	Command     string
	Optional    bool
	InstallHint string
}

// CheckAll validates all required dependencies
func (dc *DependencyChecker) CheckAll() ([]Dependency, error) {
	dependencies := []Dependency{
		{
			Name:        "curl",
			Command:     "curl",
			Optional:    false,
			InstallHint: "Usually pre-installed; if missing: apt-get install curl",
		},
		{
			Name:        "git",
			Command:     "git",
			Optional:    false,
			InstallHint: "Install with: apt-get install git",
		},
		{
			Name:        "make",
			Command:     "make",
			Optional:    false,
			InstallHint: "Install with: apt-get install make",
		},
	}

	var missing []Dependency
	for _, dep := range dependencies {
		if _, err := exec.LookPath(dep.Command); err != nil {
			if !dep.Optional || !dc.skipOptional {
				missing = append(missing, dep)
			}
		}
	}

	if len(missing) > 0 {
		errMsg := "missing required dependencies:\n"
		for _, dep := range missing {
			errMsg += fmt.Sprintf("  - %s (%s): %s\n", dep.Name, dep.Command, dep.InstallHint)
		}
		return missing, fmt.Errorf("%s", errMsg)
	}

	return nil, nil
}

// ExternalToolChecker validates external tool versions and availability
type ExternalToolChecker struct{}

// CheckIPFSAvailable checks if IPFS is available in PATH
func (etc *ExternalToolChecker) CheckIPFSAvailable() bool {
	_, err := exec.LookPath("ipfs")
	return err == nil
}

// CheckIPFSClusterAvailable checks if IPFS Cluster Service is available
func (etc *ExternalToolChecker) CheckIPFSClusterAvailable() bool {
	_, err := exec.LookPath("ipfs-cluster-service")
	return err == nil
}

// CheckRQLiteAvailable checks if RQLite is available
func (etc *ExternalToolChecker) CheckRQLiteAvailable() bool {
	_, err := exec.LookPath("rqlited")
	return err == nil
}

// CheckOlricAvailable checks if Olric Server is available
func (etc *ExternalToolChecker) CheckOlricAvailable() bool {
	_, err := exec.LookPath("olric-server")
	return err == nil
}

// CheckAnonAvailable checks if Anon is available (optional)
func (etc *ExternalToolChecker) CheckAnonAvailable() bool {
	_, err := exec.LookPath("anon")
	return err == nil
}

// CheckGoAvailable checks if Go is installed
func (etc *ExternalToolChecker) CheckGoAvailable() bool {
	_, err := exec.LookPath("go")
	return err == nil
}

// ResourceChecker validates system resources for production deployment
type ResourceChecker struct{}

// NewResourceChecker creates a new resource checker
func NewResourceChecker() *ResourceChecker {
	return &ResourceChecker{}
}

// CheckDiskSpace validates sufficient disk space (minimum 10GB free)
func (rc *ResourceChecker) CheckDiskSpace(path string) error {
	var stat syscall.Statfs_t
	if err := syscall.Statfs(path, &stat); err != nil {
		return fmt.Errorf("failed to check disk space: %w", err)
	}

	// Available space in bytes
	availableBytes := stat.Bavail * uint64(stat.Bsize)
	minRequiredBytes := uint64(10 * 1024 * 1024 * 1024) // 10GB

	if availableBytes < minRequiredBytes {
		availableGB := float64(availableBytes) / (1024 * 1024 * 1024)
		return fmt.Errorf("insufficient disk space: %.1fGB available, minimum 10GB required", availableGB)
	}

	return nil
}

// CheckRAM validates sufficient RAM (minimum 2GB total)
func (rc *ResourceChecker) CheckRAM() error {
	data, err := os.ReadFile("/proc/meminfo")
	if err != nil {
		return fmt.Errorf("failed to read memory info: %w", err)
	}

	lines := strings.Split(string(data), "\n")
	totalKB := uint64(0)

	for _, line := range lines {
		if strings.HasPrefix(line, "MemTotal:") {
			parts := strings.Fields(line)
			if len(parts) >= 2 {
				if kb, err := strconv.ParseUint(parts[1], 10, 64); err == nil {
					totalKB = kb
					break
				}
			}
		}
	}

	if totalKB == 0 {
		return fmt.Errorf("could not determine total RAM")
	}

	minRequiredKB := uint64(2 * 1024 * 1024) // 2GB in KB
	if totalKB < minRequiredKB {
		totalGB := float64(totalKB) / (1024 * 1024)
		return fmt.Errorf("insufficient RAM: %.1fGB total, minimum 2GB required", totalGB)
	}

	return nil
}

// CheckCPU validates sufficient CPU cores (minimum 2 cores)
func (rc *ResourceChecker) CheckCPU() error {
	cores := runtime.NumCPU()
	if cores < 2 {
		return fmt.Errorf("insufficient CPU cores: %d available, minimum 2 required", cores)
	}
	return nil
}