#!/usr/bin/env bash

set -euo pipefail

ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
readonly ROOT
readonly IMAGE="hugo-chiri-ai-03"
readonly RESULTS="${ROOT}/results"

cd "${ROOT}"
docker build --tag "${IMAGE}" .
if [[ "${RESULTS}" != "${ROOT}/results" ]]; then
  echo "refusing to clear an unexpected results directory" >&2
  exit 65
fi
rm -rf "${RESULTS}"
mkdir -p "${RESULTS}"

run_isolated() {
  docker run --rm \
    --cpus=2 \
    --memory=512m \
    --network=none \
    --volume "${RESULTS}:/experiment/results" \
    --entrypoint node \
    "${IMAGE}" "$@"
}

run_isolated experiment.mjs

docker run --rm \
  --cpus=2 \
  --memory=512m \
  --volume "${RESULTS}:/experiment/results" \
  --entrypoint node \
  "${IMAGE}" source-evidence.mjs

run_isolated assemble-evidence.mjs
run_isolated mutate.mjs
run_isolated profile.mjs
run_isolated source-manifest.mjs

docker run --rm \
  --cpus=2 \
  --memory=512m \
  --volume "${RESULTS}:/experiment/results" \
  --entrypoint sh \
  "${IMAGE}" -lc \
  'npm audit --json > results/environment/npm-audit.json'

run_isolated verify-results.mjs