set -euo pipefail

EDDI_BRANCH_EXPLICIT="${EDDI_BRANCH:-}"

EDDI_BRANCH="${EDDI_BRANCH:-main}"

EDDI_VERSION="${EDDI_VERSION:-latest}"

EDDI_PORT="${EDDI_PORT:-7070}"

EDDI_HTTPS_PORT="${EDDI_HTTPS_PORT:-7443}"

MONGO_PORT_REQUESTED="${MONGO_PORT:-}"

MONGO_PORT=""

KEYCLOAK_PORT_REQUESTED="${KEYCLOAK_PORT:-}"

KEYCLOAK_PORT="${KEYCLOAK_PORT:-8180}"

GRAFANA_PORT_REQUESTED="${GRAFANA_PORT:-}"

GRAFANA_PORT="${GRAFANA_PORT:-3000}"

PROMETHEUS_PORT_REQUESTED="${PROMETHEUS_PORT:-}"

PROMETHEUS_PORT="${PROMETHEUS_PORT:-9090}"

JAEGER_PORT_REQUESTED="${JAEGER_PORT:-}"

JAEGER_PORT="${JAEGER_PORT:-16686}"

OTLP_GRPC_PORT_REQUESTED="${OTLP_GRPC_PORT:-}"

OTLP_GRPC_PORT="${OTLP_GRPC_PORT:-4317}"

OTLP_HTTP_PORT_REQUESTED="${OTLP_HTTP_PORT:-}"

OTLP_HTTP_PORT="${OTLP_HTTP_PORT:-4318}"

RESERVED_PORTS=()

EDDI_DIR="${EDDI_DIR:-$HOME/.eddi}"

EDDI_DIR="${EDDI_DIR%/}"

if [[ ! "$EDDI_BRANCH" =~ ^[a-zA-Z0-9._/-]+$ ]]; then

echo "Invalid EDDI_BRANCH: $EDDI_BRANCH" >&2; exit 1

COMPOSE_BASE_URL="https://raw.githubusercontent.com/labsai/EDDI/${EDDI_BRANCH}"

EDDI_ALREADY_RUNNING=false

KC_BOOTSTRAP_ADMIN_USERNAME="${KC_BOOTSTRAP_ADMIN_USERNAME:-}"

KC_BOOTSTRAP_ADMIN_PASSWORD="${KC_BOOTSTRAP_ADMIN_PASSWORD:-}"

GRAFANA_ADMIN_USER="${GRAFANA_ADMIN_USER:-}"

GRAFANA_ADMIN_PASSWORD="${GRAFANA_ADMIN_PASSWORD:-}"

KC_ADMIN_TOKEN=""

FIRST_LOGIN_PASSWORDS=()

LEGACY_FIXTURE_LOGINS=()

REALM_ACCOUNTS_CHECKED=false

KC_ADMIN_ROTATED=false

KC_ADMIN_PASSWORD_GENERATED=false

GRAFANA_PASSWORD_GENERATED=false

CONTAINERS_STARTED=false

HEALTHY=false

COMPOSE_FILES=()

if [[ -t 1 ]]; then

BOLD='\033[1m'

GREEN='\033[0;32m'

YELLOW='\033[0;33m'

RED='\033[0;31m'

CYAN='\033[0;36m'

DIM='\033[2m'

RESET='\033[0m'

BOLD='' GREEN='' YELLOW='' RED='' CYAN='' DIM='' RESET=''

cleanup() {

}

trap cleanup EXIT INT TERM

info() { echo -e " ${GREEN}✅${RESET} $1"; }

warn() { echo -e " ${YELLOW}⚠️ $1${RESET}"; }

fail() { echo -e " ${RED}❌ $1${RESET}"; exit 1; }

step() { echo -e "\n${BOLD}─── Step $1 of $TOTAL_STEPS: $2 ${RESET}───────────────────────"; echo ""; }

section() { echo -e "\n${BOLD}─── $1 ${RESET}───────────────────────────────"; echo ""; }

ask() {

}

port_in_use() {

}

reserve_port() { RESERVED_PORTS+=("$1"); }

port_reserved() {

}

port_taken() { port_reserved "$1" || port_in_use "$1"; }

find_next_free_port() {

}

compose_project_name() {

}

port_owned_by_project() {

}

resolve_published_port() {

}

resolve_port_into() {

}

read_port() {

}

banner() {

}

NON_INTERACTIVE=false

DB_CHOICE=""

WITH_AUTH=false

WITH_MONITORING=false

DEMO_USERS=false

LOCAL_IMAGE=false

VAULT_KEY_ARG=""

if [[ ! -t 0 ]]; then

NON_INTERACTIVE=true

for arg in "$@"; do

case "$arg" in

--defaults) NON_INTERACTIVE=true; DB_CHOICE="${DB_CHOICE:-1}" ;;

--db=mongo*) DB_CHOICE="1" ;;

--db=postgres*) DB_CHOICE="2" ;;

--with-auth) WITH_AUTH=true ;;

--with-monitoring) WITH_MONITORING=true ;;

--demo-users) DEMO_USERS=true ;;

--vault-key=*) VAULT_KEY_ARG="${arg#*=}" ;;

--eddi-version=*) EDDI_VERSION="${arg#*=}" ;;

--mongo-port=*) MONGO_PORT_REQUESTED="${arg#*=}" ;;

--full) DB_CHOICE="2"; WITH_AUTH=true; WITH_MONITORING=true ;;

--local) LOCAL_IMAGE=true ;;

--help|-h)

echo "EDDI Install Script"

echo ""

echo "Usage: curl -fsSL .../install.sh | bash"

echo " bash install.sh [OPTIONS]"

echo ""

echo "Options:"

echo " --defaults Accept all defaults (non-interactive)"

echo " --db=mongodb Use MongoDB (default)"

echo " --db=postgres Use PostgreSQL"

echo " --vault-key=<key> Set vault master key (min 16 chars)"

echo " --with-auth Include Keycloak authentication"

echo " --with-monitoring Include Grafana + Prometheus"

echo " --demo-users With --with-auth: also give the realm's unprivileged"

echo " viewer and user accounts a one-time password"

echo " --eddi-version=<tag> Pin EDDI image tag (default: latest)"

echo " --mongo-port=<port> Host port for MongoDB (default: 27017)"

echo " --full All options enabled"

echo " --local Use locally built Docker image (skip pull)"

echo ""

echo "Environment variables:"

echo " EDDI_PORT HTTP port (default: 7070)"

echo " EDDI_HTTPS_PORT HTTPS port (default: 7443)"

echo " MONGO_PORT Host port for MongoDB (default: 27017)"

echo " KEYCLOAK_PORT Host port for Keycloak (default: 8180)"

echo " KC_BOOTSTRAP_ADMIN_PASSWORD Keycloak bootstrap admin password (default: generated,"

echo " kept in .env across re-runs)"

echo " GRAFANA_ADMIN_USER Grafana admin user (default: admin)"

echo " GRAFANA_ADMIN_PASSWORD Grafana admin password (default: generated, kept in .env)"

echo " GRAFANA_PORT Host port for Grafana (default: 3000)"

echo " PROMETHEUS_PORT Host port for Prometheus (default: 9090)"

echo " JAEGER_PORT Host port for the Jaeger UI (default: 16686)"

echo " OTLP_GRPC_PORT Host port for Jaeger OTLP gRPC (default: 4317)"

echo " OTLP_HTTP_PORT Host port for Jaeger OTLP HTTP (default: 4318)"

echo " EDDI_DIR Install directory (default: ~/.eddi)"

echo " EDDI_VERSION Image tag to pull (default: latest)"

echo ""

echo " Every port is resolved before the containers start. A port left"

echo " at its default is kept when free and moved to the next free port"

echo " when something holds it. A port you pin here -- or with"

echo " --mongo-port= -- is never moved: if it is busy the install stops"

echo " and says so, rather than starting somewhere you did not ask for."

exit 0

;;

esac

resolve_eddi_branch() {

}

resolve_eddi_branch

detect_platform() {

}

install_docker_linux() {

}

check_prerequisites() {

}

TOTAL_STEPS=5

EDDI_VAULT_MASTER_KEY=""

wizard_database() {

}

generate_vault_key() {

}

generate_password() {

}

env_file_value() {

}

resolve_stack_passwords() {

}

wizard_security() {

}

wizard_auth() {

}

wizard_monitoring() {

}

wizard_ports() {

}

if [[ -n "${BASH_SOURCE[0]:-}" && -f "${BASH_SOURCE[0]}" ]]; then

SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)" || SCRIPT_DIR=""

SCRIPT_DIR=""

resolve_compose_files() {