bazelw

#!/usr/bin/env bash
# Unless explicitly stated otherwise all files in this repository are licensed under
# the Apache 2.0 License.
#
# This product includes software developed at Datadog
# (https://www.datadoghq.com/) Copyright 2025-Present Datadog, Inc.

set -euo pipefail

# Compute a salt value so the repository rule re-executes when it changes.
# If FETCH_SALT_TTL is set to a positive integer, the salt will change
# every TTL seconds (time-bucketed). Otherwise it will change every run.

now_ts="$(date +%s)"
ttl_seconds="${FETCH_SALT_TTL:-0}"
script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
bazelversion_file="${script_dir}/.bazelversion"
wanted_version=""
if [[ -f "${bazelversion_file}" ]]; then
  wanted_version="$(tr -d '[:space:]' < "${bazelversion_file}")"
fi
if [[ -z "${wanted_version}" ]]; then
  echo "error: unable to read expected Bazel version from ${bazelversion_file}" >&2
  exit 127
fi

extract_semver() {
  local raw="${1:-}"
  if [[ "${raw}" =~ ([0-9]+\.[0-9]+\.[0-9]+) ]]; then
    printf '%s' "${BASH_REMATCH[1]}"
    return 0
  fi
  return 1
}

detect_system_bazel_version() {
  local raw=""
  local parsed=""
  raw="$(bazel --version 2>/dev/null || true)"
  parsed="$(extract_semver "${raw}" || true)"
  if [[ -z "${parsed}" ]]; then
    raw="$(bazel version 2>/dev/null | awk -F': ' '/Build label:/ { print $2; exit }')"
    parsed="$(extract_semver "${raw}" || true)"
  fi
  printf '%s' "${parsed}"
}

if [[ "${ttl_seconds}" =~ ^[0-9]+$ ]] && [[ "${ttl_seconds}" -gt 0 ]]; then
  salt=$(( now_ts / ttl_seconds ))
else
  salt="${now_ts}"
fi

if command -v bazelisk >/dev/null 2>&1; then
  bazel_cmd="bazelisk"
elif command -v bazel >/dev/null 2>&1; then
  system_bazel_version="$(detect_system_bazel_version)"
  if [[ "${BAZELW_ALLOW_SYSTEM_BAZEL:-0}" == "1" ]]; then
    echo "warning: bazelisk not found; using system bazel due to BAZELW_ALLOW_SYSTEM_BAZEL=1" >&2
    bazel_cmd="bazel"
  elif [[ -z "${system_bazel_version}" ]]; then
    echo "error: bazelisk is required to enforce .bazelversion (unable to detect system bazel version)." >&2
    exit 127
  elif [[ "$system_bazel_version" == "$wanted_version" ]]; then
    echo "warning: bazelisk not found; using system bazel version $system_bazel_version (matches .bazelversion)" >&2
    bazel_cmd="bazel"
  else
    echo "error: bazelisk is required to enforce .bazelversion (wanted $wanted_version, found system bazel $system_bazel_version)." >&2
    exit 127
  fi
else
  echo "error: bazelisk is required to enforce .bazelversion (set BAZELW_ALLOW_SYSTEM_BAZEL=1 to override)." >&2
  exit 127
fi

sanitize_repository_url() {
  local raw="${1:-}"
  if [[ -z "${raw}" ]]; then
    printf '%s' ""
    return 0
  fi
  # Strip URL userinfo when present (for example: https://token@host/repo.git).
  if [[ "${raw}" =~ ^([A-Za-z][A-Za-z0-9+.-]*://)[^/@]+@(.*)$ ]]; then
    printf '%s%s' "${BASH_REMATCH[1]}" "${BASH_REMATCH[2]}"
    return 0
  fi
  printf '%s' "${raw}"
}

# Return success when a supported CI provider is already exposing metadata.
# In that mode the wrapper only fills gaps that provider env does not cover well.
has_supported_ci_provider() {
  [[ -n "${APPVEYOR:-}" ]] || \
  [[ -n "${TF_BUILD:-}" ]] || \
  [[ -n "${BITBUCKET_COMMIT:-}" ]] || \
  [[ -n "${BUDDY:-}" ]] || \
  [[ -n "${BUILDKITE:-}" ]] || \
  [[ -n "${CIRCLECI:-}" ]] || \
  [[ -n "${GITHUB_SHA:-}" ]] || \
  [[ -n "${GITLAB_CI:-}" ]] || \
  [[ -n "${JENKINS_URL:-}" ]] || \
  [[ -n "${TEAMCITY_VERSION:-}" ]] || \
  [[ -n "${TRAVIS:-}" ]] || \
  [[ -n "${BITRISE_BUILD_SLUG:-}" ]] || \
  [[ -n "${CF_BUILD_ID:-}" ]] || \
  [[ -n "${CODEBUILD_INITIATOR:-}" ]] || \
  [[ -n "${DRONE:-}" ]]
}

# Read a single git pretty-format field and keep it on one line for --repo_env.
git_pretty_value() {
  local format="${1:-}"
  git log -1 --date=iso-strict --pretty="${format}" 2>/dev/null | tr -d '\r\n' || true
}

# Return the first exact tag pointing at HEAD, or empty when HEAD is untagged.
git_head_tag() {
  git tag --points-at HEAD 2>/dev/null | sed -n '1p' | tr -d '\r\n' || true
}

# Split args into startup args (leading dashes) and the command
startup_args=()
cmd=""
rest_args=()

for arg in "$@"; do
  if [[ -z "${cmd}" ]]; then
    if [[ "${arg}" == --* ]]; then
      startup_args+=("${arg}")
      continue
    else
      cmd="${arg}"
      continue
    fi
  else
    rest_args+=("${arg}")
  fi
done

# Default to help if no command provided
if [[ -z "${cmd}" ]]; then
  cmd="help"
fi

# Build final command line safely without expanding empty arrays
cmdline=("${bazel_cmd}")
if (( ${#startup_args[@]} )); then
  for a in "${startup_args[@]}"; do cmdline+=("${a}"); done
fi
cmdline+=("${cmd}")

if [[ "${cmd}" =~ ^(build|test|run|sync|fetch|query|cquery|aquery|coverage|info)$ ]]; then
  # The wrapper has two modes:
  # - CI-provider mode preserves richer provider-derived branch/PR metadata.
  # - Local-git mode preserves the existing local branch/SHA autodetection behavior.
  provider_mode=0
  if has_supported_ci_provider; then
    provider_mode=1
  fi

  # Compute git metadata best-effort; wrapper execution must not fail on git issues.
  git_dirty=""
  local_git_repo_url=""
  local_git_branch=""
  local_git_tag=""
  local_git_commit=""
  local_git_commit_message=""
  local_git_commit_author_name=""
  local_git_commit_author_email=""
  local_git_commit_author_date=""
  local_git_commit_committer_name=""
  local_git_commit_committer_email=""
  local_git_commit_committer_date=""
  if command -v git >/dev/null 2>&1; then
    if git rev-parse --git-dir >/dev/null 2>&1; then
      local_git_commit=$(git rev-parse HEAD 2>/dev/null || true)
      local_git_commit_message="$(git_pretty_value '%s')"
      local_git_commit_author_name="$(git_pretty_value '%an')"
      local_git_commit_author_email="$(git_pretty_value '%ae')"
      local_git_commit_author_date="$(git_pretty_value '%aI')"
      local_git_commit_committer_name="$(git_pretty_value '%cn')"
      local_git_commit_committer_email="$(git_pretty_value '%ce')"
      local_git_commit_committer_date="$(git_pretty_value '%cI')"
      local_git_tag="$(git_head_tag)"
      if git diff-index --quiet HEAD -- 2>/dev/null; then
        git_dirty="clean"
      else
        git_dirty="dirty"
      fi
      local_git_repo_url=$(git config --get remote.origin.url 2>/dev/null || true)
      local_git_repo_url="$(sanitize_repository_url "${local_git_repo_url}")"
      local_git_branch=$(git symbolic-ref --short -q HEAD 2>/dev/null || git rev-parse --abbrev-ref HEAD 2>/dev/null || true)
      if [[ -z "${local_git_branch}" || "${local_git_branch}" == "HEAD" ]]; then
        local_git_branch="auto:git-detached-head"
      fi
    fi
  fi

  cmdline+=("--repo_env=FETCH_SALT=${salt}")
  # Explicit DD_GIT_* values always win over wrapper synthesis.
  dd_git_repo_url="${DD_GIT_REPOSITORY_URL:-}"
  dd_git_branch="${DD_GIT_BRANCH:-}"
  dd_git_tag="${DD_GIT_TAG:-}"
  dd_git_commit="${DD_GIT_COMMIT_SHA:-}"
  dd_git_head_commit="${DD_GIT_HEAD_COMMIT:-}"
  dd_git_commit_message="${DD_GIT_COMMIT_MESSAGE:-}"
  dd_git_head_message="${DD_GIT_HEAD_MESSAGE:-}"
  dd_git_commit_author_name="${DD_GIT_COMMIT_AUTHOR_NAME:-}"
  dd_git_commit_author_email="${DD_GIT_COMMIT_AUTHOR_EMAIL:-}"
  dd_git_commit_author_date="${DD_GIT_COMMIT_AUTHOR_DATE:-}"
  dd_git_commit_committer_name="${DD_GIT_COMMIT_COMMITTER_NAME:-}"
  dd_git_commit_committer_email="${DD_GIT_COMMIT_COMMITTER_EMAIL:-}"
  dd_git_commit_committer_date="${DD_GIT_COMMIT_COMMITTER_DATE:-}"
  dd_git_head_author_name="${DD_GIT_HEAD_AUTHOR_NAME:-}"
  dd_git_head_author_email="${DD_GIT_HEAD_AUTHOR_EMAIL:-}"
  dd_git_head_author_date="${DD_GIT_HEAD_AUTHOR_DATE:-}"
  dd_git_head_committer_name="${DD_GIT_HEAD_COMMITTER_NAME:-}"
  dd_git_head_committer_email="${DD_GIT_HEAD_COMMITTER_EMAIL:-}"
  dd_git_head_committer_date="${DD_GIT_HEAD_COMMITTER_DATE:-}"
  dd_git_pr_base_branch="${DD_GIT_PR_BASE_BRANCH:-}"
  dd_git_pr_base_branch_sha="${DD_GIT_PR_BASE_BRANCH_SHA:-}"
  dd_git_pr_base_branch_head_sha="${DD_GIT_PR_BASE_BRANCH_HEAD_SHA:-}"
  dd_pr_number="${DD_PR_NUMBER:-}"

  if [[ "${provider_mode}" -eq 1 ]]; then
    if [[ -z "${dd_git_commit_message}" ]]; then dd_git_commit_message="${local_git_commit_message}"; fi
    if [[ -z "${dd_git_commit_author_name}" ]]; then dd_git_commit_author_name="${local_git_commit_author_name}"; fi
    if [[ -z "${dd_git_commit_author_email}" ]]; then dd_git_commit_author_email="${local_git_commit_author_email}"; fi
    if [[ -z "${dd_git_commit_author_date}" ]]; then dd_git_commit_author_date="${local_git_commit_author_date}"; fi
    if [[ -z "${dd_git_commit_committer_name}" ]]; then dd_git_commit_committer_name="${local_git_commit_committer_name}"; fi
    if [[ -z "${dd_git_commit_committer_email}" ]]; then dd_git_commit_committer_email="${local_git_commit_committer_email}"; fi
    if [[ -z "${dd_git_commit_committer_date}" ]]; then dd_git_commit_committer_date="${local_git_commit_committer_date}"; fi
  else
    if [[ -z "${dd_git_repo_url}" ]]; then dd_git_repo_url="${local_git_repo_url}"; fi
    if [[ -z "${dd_git_branch}" ]]; then dd_git_branch="${local_git_branch}"; fi
    if [[ -z "${dd_git_tag}" ]]; then dd_git_tag="${local_git_tag}"; fi
    if [[ -z "${dd_git_commit}" ]]; then dd_git_commit="${local_git_commit}"; fi
    if [[ -z "${dd_git_head_commit}" ]]; then dd_git_head_commit="${local_git_commit}"; fi
    if [[ -z "${dd_git_commit_message}" ]]; then dd_git_commit_message="${local_git_commit_message}"; fi
    if [[ -z "${dd_git_head_message}" ]]; then dd_git_head_message="${local_git_commit_message}"; fi
    if [[ -z "${dd_git_commit_author_name}" ]]; then dd_git_commit_author_name="${local_git_commit_author_name}"; fi
    if [[ -z "${dd_git_commit_author_email}" ]]; then dd_git_commit_author_email="${local_git_commit_author_email}"; fi
    if [[ -z "${dd_git_commit_author_date}" ]]; then dd_git_commit_author_date="${local_git_commit_author_date}"; fi
    if [[ -z "${dd_git_commit_committer_name}" ]]; then dd_git_commit_committer_name="${local_git_commit_committer_name}"; fi
    if [[ -z "${dd_git_commit_committer_email}" ]]; then dd_git_commit_committer_email="${local_git_commit_committer_email}"; fi
    if [[ -z "${dd_git_commit_committer_date}" ]]; then dd_git_commit_committer_date="${local_git_commit_committer_date}"; fi
  fi

  dd_git_repo_url="$(sanitize_repository_url "${dd_git_repo_url}")"

  if [[ -n "${dd_git_commit}" ]]; then
    cmdline+=("--repo_env=DD_GIT_COMMIT_SHA=${dd_git_commit}")
  fi
  if [[ -n "${git_dirty}" ]]; then
    cmdline+=("--repo_env=GIT_DIRTY=${git_dirty}")
  fi
  if [[ -n "${dd_git_repo_url}" ]]; then
    cmdline+=("--repo_env=DD_GIT_REPOSITORY_URL=${dd_git_repo_url}")
  fi
  if [[ -n "${dd_git_branch}" ]]; then
    cmdline+=("--repo_env=DD_GIT_BRANCH=${dd_git_branch}")
  fi
  if [[ -n "${dd_git_tag}" ]]; then
    cmdline+=("--repo_env=DD_GIT_TAG=${dd_git_tag}")
  fi
  if [[ -n "${dd_git_head_commit}" ]]; then
    cmdline+=("--repo_env=DD_GIT_HEAD_COMMIT=${dd_git_head_commit}")
  fi
  if [[ -n "${dd_git_commit_message}" ]]; then
    cmdline+=("--repo_env=DD_GIT_COMMIT_MESSAGE=${dd_git_commit_message}")
  fi
  if [[ -n "${dd_git_head_message}" ]]; then
    cmdline+=("--repo_env=DD_GIT_HEAD_MESSAGE=${dd_git_head_message}")
  fi
  if [[ -n "${dd_git_commit_author_name}" ]]; then
    cmdline+=("--repo_env=DD_GIT_COMMIT_AUTHOR_NAME=${dd_git_commit_author_name}")
  fi
  if [[ -n "${dd_git_commit_author_email}" ]]; then
    cmdline+=("--repo_env=DD_GIT_COMMIT_AUTHOR_EMAIL=${dd_git_commit_author_email}")
  fi
  if [[ -n "${dd_git_commit_author_date}" ]]; then
    cmdline+=("--repo_env=DD_GIT_COMMIT_AUTHOR_DATE=${dd_git_commit_author_date}")
  fi
  if [[ -n "${dd_git_commit_committer_name}" ]]; then
    cmdline+=("--repo_env=DD_GIT_COMMIT_COMMITTER_NAME=${dd_git_commit_committer_name}")
  fi
  if [[ -n "${dd_git_commit_committer_email}" ]]; then
    cmdline+=("--repo_env=DD_GIT_COMMIT_COMMITTER_EMAIL=${dd_git_commit_committer_email}")
  fi
  if [[ -n "${dd_git_commit_committer_date}" ]]; then
    cmdline+=("--repo_env=DD_GIT_COMMIT_COMMITTER_DATE=${dd_git_commit_committer_date}")
  fi
  if [[ -n "${dd_git_head_author_name}" ]]; then
    cmdline+=("--repo_env=DD_GIT_HEAD_AUTHOR_NAME=${dd_git_head_author_name}")
  fi
  if [[ -n "${dd_git_head_author_email}" ]]; then
    cmdline+=("--repo_env=DD_GIT_HEAD_AUTHOR_EMAIL=${dd_git_head_author_email}")
  fi
  if [[ -n "${dd_git_head_author_date}" ]]; then
    cmdline+=("--repo_env=DD_GIT_HEAD_AUTHOR_DATE=${dd_git_head_author_date}")
  fi
  if [[ -n "${dd_git_head_committer_name}" ]]; then
    cmdline+=("--repo_env=DD_GIT_HEAD_COMMITTER_NAME=${dd_git_head_committer_name}")
  fi
  if [[ -n "${dd_git_head_committer_email}" ]]; then
    cmdline+=("--repo_env=DD_GIT_HEAD_COMMITTER_EMAIL=${dd_git_head_committer_email}")
  fi
  if [[ -n "${dd_git_head_committer_date}" ]]; then
    cmdline+=("--repo_env=DD_GIT_HEAD_COMMITTER_DATE=${dd_git_head_committer_date}")
  fi
  if [[ -n "${dd_git_pr_base_branch}" ]]; then
    cmdline+=("--repo_env=DD_GIT_PR_BASE_BRANCH=${dd_git_pr_base_branch}")
  fi
  if [[ -n "${dd_git_pr_base_branch_sha}" ]]; then
    cmdline+=("--repo_env=DD_GIT_PR_BASE_BRANCH_SHA=${dd_git_pr_base_branch_sha}")
  fi
  if [[ -n "${dd_git_pr_base_branch_head_sha}" ]]; then
    cmdline+=("--repo_env=DD_GIT_PR_BASE_BRANCH_HEAD_SHA=${dd_git_pr_base_branch_head_sha}")
  fi
  if [[ -n "${dd_pr_number}" ]]; then
    cmdline+=("--repo_env=DD_PR_NUMBER=${dd_pr_number}")
  fi
fi

if (( ${#rest_args[@]} )); then
  for a in "${rest_args[@]}"; do cmdline+=("${a}"); done
fi

exec "${cmdline[@]}"