#!/bin/sh
# pactify installer. Usage: curl -fsSL https://pactify.dev/install.sh | sh
# Overrides (for testing / pinning):
#   PACTIFY_VERSION       tag to install (default: latest release)
#   PACTIFY_DOWNLOAD_BASE base URL/dir holding the archives + checksums.txt (default: GitHub release)
#   PACTIFY_BINDIR        install dir (default: first writable of /usr/local/bin, ~/.local/bin)
set -eu

REPO="agentjoey/pactify"

detect_os() { uname -s | tr '[:upper:]' '[:lower:]'; }
detect_arch() {
  a="${1:-$(uname -m)}"
  case "$a" in
    x86_64|amd64) echo amd64 ;;
    aarch64|arm64) echo arm64 ;;
    *) echo "unsupported arch: $a" >&2; return 1 ;;
  esac
}

# PACTIFY_SOURCE_ONLY=1 (or executing with --source-only) lets tests load the
# functions without running main. The env form is required for sourcing: POSIX
# `.` does not portably pass arguments to the sourced file (bash does, dash
# ignores them). When sourced, `return 0` ends sourcing early; when executed,
# `return` fails (outside a function) so `exit 0` runs; 2>/dev/null hides the
# shell's return complaint. shellcheck can't model that runtime-dependent
# reachability of exit 0.
# shellcheck disable=SC2317
case "${PACTIFY_SOURCE_ONLY:-}${1:-}" in 1|--source-only) return 0 2>/dev/null || exit 0 ;; esac

main() {
  os="$(detect_os)"; arch="$(detect_arch)"
  case "$os" in darwin|linux) ;; *) echo "unsupported OS: $os" >&2; exit 1 ;; esac

  version="${PACTIFY_VERSION:-}"
  if [ -z "${PACTIFY_DOWNLOAD_BASE:-}" ]; then
    if [ -z "$version" ]; then
      base="https://github.com/$REPO/releases/latest/download"
    else
      base="https://github.com/$REPO/releases/download/$version"
    fi
  else
    base="$PACTIFY_DOWNLOAD_BASE"
  fi

  archive="pactify_${os}_${arch}.tar.gz"
  tmp="$(mktemp -d)"; trap 'rm -rf "$tmp"' EXIT
  echo "Downloading $archive ${version:+($version) }..."
  fetch() { case "$1" in file://*) cp "${1#file://}" "$2" ;; *) curl -fsSL "$1" -o "$2" ;; esac; }
  fetch "$base/$archive" "$tmp/$archive"
  fetch "$base/checksums.txt" "$tmp/checksums.txt"

  echo "Verifying checksum ..."
  # sha256sum on minimal Linux images; shasum (perl) on macOS and most distros.
  if command -v sha256sum >/dev/null 2>&1; then
    ( cd "$tmp" && grep " $archive\$" checksums.txt | sha256sum -c - ) >/dev/null
  else
    ( cd "$tmp" && grep " $archive\$" checksums.txt | shasum -a 256 -c - ) >/dev/null
  fi

  tar xzf "$tmp/$archive" -C "$tmp"

  bindir="${PACTIFY_BINDIR:-}"
  if [ -z "$bindir" ]; then
    if [ -w /usr/local/bin ]; then bindir=/usr/local/bin; else bindir="$HOME/.local/bin"; fi
  fi
  mkdir -p "$bindir"
  install -m 0755 "$tmp/pactify" "$bindir/pactify"

  # macOS: goreleaser builds the darwin binary on a Linux runner, so it ships with
  # an invalid ad-hoc signature that Gatekeeper SIGKILLs on first run (arm64). Re-sign
  # ad-hoc and strip any quarantine flag so it runs. No-op / best-effort on linux.
  if [ "$os" = "darwin" ]; then
    codesign -s - --force "$bindir/pactify" >/dev/null 2>&1 || true
    xattr -c "$bindir/pactify" >/dev/null 2>&1 || true
  fi

  echo "✅ pactify installed to $bindir/pactify"
  case ":$PATH:" in *":$bindir:"*) ;; *) echo "⚠️  $bindir is not on your PATH — add it, e.g.: export PATH=\"$bindir:\$PATH\"" ;; esac
  echo "Next: run \`pactify sub --help\` in your repo to get started."
}

main