#!/bin/sh
# OxidePM Installer
# Usage: curl -fsSL https://oxidepm.com/install.sh | sh

set -e

REPO="oxidekit/oxidepm"
INSTALL_DIR="${INSTALL_DIR:-/usr/local/bin}"

# Colors
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[0;33m'
BLUE='\033[0;34m'
NC='\033[0m' # No Color

info() { printf "${BLUE}[INFO]${NC} %s\n" "$1"; }
success() { printf "${GREEN}[OK]${NC} %s\n" "$1"; }
warn() { printf "${YELLOW}[WARN]${NC} %s\n" "$1"; }
error() { printf "${RED}[ERROR]${NC} %s\n" "$1"; exit 1; }

# Detect OS and architecture
detect_platform() {
    OS="$(uname -s)"
    ARCH="$(uname -m)"

    case "$OS" in
        Linux)
            case "$ARCH" in
                x86_64)  TARGET="x86_64-unknown-linux-gnu" ;;
                aarch64) TARGET="aarch64-unknown-linux-gnu" ;;
                *)       error "Unsupported architecture: $ARCH" ;;
            esac
            ;;
        Darwin)
            case "$ARCH" in
                x86_64)  error "No build is published for Intel Macs (x86_64 Darwin). Builds exist for Linux (x86_64, aarch64) and macOS on Apple Silicon (arm64)" ;;
                arm64)   TARGET="aarch64-apple-darwin" ;;
                *)       error "Unsupported architecture: $ARCH" ;;
            esac
            ;;
        *)
            error "Unsupported OS: $OS"
            ;;
    esac

    info "Detected platform: $TARGET"
}

# Get latest version from GitHub
get_latest_version() {
    VERSION=$(curl -fsSL "https://api.github.com/repos/$REPO/releases/latest" | grep '"tag_name"' | sed -E 's/.*"([^"]+)".*/\1/')
    if [ -z "$VERSION" ]; then
        error "Could not determine latest version"
    fi
    info "Latest version: $VERSION"
}

# Print the sha256 of a file (sha256sum on Linux, shasum on macOS)
sha256_of() {
    if command -v sha256sum >/dev/null 2>&1; then
        sha256sum "$1" | cut -d' ' -f1
    elif command -v shasum >/dev/null 2>&1; then
        shasum -a 256 "$1" | cut -d' ' -f1
    else
        error "Neither sha256sum nor shasum is available, so the download cannot be checked"
    fi
}

# Check the archive against checksums.txt of the same release. This checks that the file
# arrived whole and is the one the release lists; it is not a signature check.
verify_checksum() {
    ARCHIVE="$1"
    NAME="oxidepm-$TARGET.tar.gz"
    CHECKSUMS_URL="https://github.com/$REPO/releases/download/$VERSION/checksums.txt"

    curl -fsSL "$CHECKSUMS_URL" -o "$TEMP_DIR/checksums.txt" || error "Could not download $CHECKSUMS_URL"

    # the line for exactly this file name (sha256sum output: "<hash>  <name>")
    EXPECTED=$(awk -v n="$NAME" '{ f = $2; sub(/^\*/, "", f); if (f == n) print $1 }' "$TEMP_DIR/checksums.txt")
    case "$EXPECTED" in
        "") error "checksums.txt does not list $NAME" ;;
        *[!0-9a-fA-F]*) error "checksums.txt has an invalid entry for $NAME" ;;
    esac
    if [ "${#EXPECTED}" -ne 64 ]; then
        error "checksums.txt has an invalid entry for $NAME"
    fi

    ACTUAL=$(sha256_of "$ARCHIVE")
    if [ "$ACTUAL" != "$EXPECTED" ]; then
        error "Checksum mismatch for $NAME (expected $EXPECTED, got $ACTUAL). Nothing was installed."
    fi
    success "Checksum verified (sha256 $ACTUAL)"
}

# Download and install
install() {
    DOWNLOAD_URL="https://github.com/$REPO/releases/download/$VERSION/oxidepm-$TARGET.tar.gz"

    info "Downloading from $DOWNLOAD_URL"

    TEMP_DIR=$(mktemp -d)
    trap "rm -rf $TEMP_DIR" EXIT

    curl -fsSL "$DOWNLOAD_URL" -o "$TEMP_DIR/oxidepm.tar.gz"

    verify_checksum "$TEMP_DIR/oxidepm.tar.gz"

    info "Extracting..."
    tar -xzf "$TEMP_DIR/oxidepm.tar.gz" -C "$TEMP_DIR"

    info "Installing to $INSTALL_DIR"

    # Check if we need sudo
    if [ -w "$INSTALL_DIR" ]; then
        mv "$TEMP_DIR/oxidepm" "$INSTALL_DIR/"
        mv "$TEMP_DIR/oxidepmd" "$INSTALL_DIR/"
        # releases before the sandbox launcher do not have it
        if [ -f "$TEMP_DIR/oxidepm-sandbox" ]; then mv "$TEMP_DIR/oxidepm-sandbox" "$INSTALL_DIR/"; fi
    else
        warn "Need sudo to install to $INSTALL_DIR"
        sudo mv "$TEMP_DIR/oxidepm" "$INSTALL_DIR/"
        sudo mv "$TEMP_DIR/oxidepmd" "$INSTALL_DIR/"
        if [ -f "$TEMP_DIR/oxidepm-sandbox" ]; then sudo mv "$TEMP_DIR/oxidepm-sandbox" "$INSTALL_DIR/"; fi
    fi

    chmod +x "$INSTALL_DIR/oxidepm"
    chmod +x "$INSTALL_DIR/oxidepmd"
    if [ -f "$INSTALL_DIR/oxidepm-sandbox" ]; then chmod +x "$INSTALL_DIR/oxidepm-sandbox"; fi
}

# Verify installation
verify() {
    if command -v oxidepm >/dev/null 2>&1; then
        success "OxidePM installed successfully!"
        echo ""
        oxidepm --version
        echo ""
        info "Get started with: oxidepm start ./your-app"
    else
        warn "Installation complete but oxidepm not in PATH"
        info "Add $INSTALL_DIR to your PATH or run: $INSTALL_DIR/oxidepm"
    fi
}

main() {
    echo ""
    echo "  ╔═══════════════════════════════════╗"
    echo "  ║       OxidePM Installer           ║"
    echo "  ║    Keeps your apps running        ║"
    echo "  ╚═══════════════════════════════════╝"
    echo ""

    detect_platform
    get_latest_version
    install
    verify
}

main