#!/usr/bin/env bash
#
# hrdx installer.
#
# Usage:
#   curl -fsSL https://www.hrdx.dev/install.sh | bash
#   curl -fsSL https://www.hrdx.dev/install.sh | bash -s -- v0.0.1 ~/bin
#
# Positional arguments:
#   $1  version    - release tag (e.g. v0.0.1). Defaults to "latest".
#   $2  prefix     - install directory. Defaults to the first writable
#                    directory in: /usr/local/bin, $HOME/.local/bin,
#                    $HOME/bin. Created if missing. Add it to your PATH
#                    if it isn't already.
#
# Environment overrides:
#   HRDX_VERSION   same as $1
#   HRDX_PREFIX    same as $2
#
# The script detects your OS and architecture, downloads the matching
# archive from the GitHub release, verifies the sha256 against the
# release's checksums.txt, extracts the binary, and moves it into the
# prefix directory. No sudo unless you explicitly pick a prefix that
# needs it.

set -euo pipefail

OWNER="patriceckhart"
REPO="hrdx"
BINARY="hrdx"

VERSION="${1:-${HRDX_VERSION:-latest}}"
PREFIX="${2:-${HRDX_PREFIX:-}}"

msg()  { printf "\033[1m==>\033[0m %s\n" "$*"; }
warn() { printf "\033[33mwarn:\033[0m %s\n" "$*" >&2; }
die()  { printf "\033[31merror:\033[0m %s\n" "$*" >&2; exit 1; }

command -v curl >/dev/null 2>&1 || die "curl is required"
command -v tar  >/dev/null 2>&1 || die "tar is required"

# ---- detect OS + arch ----

uname_s=$(uname -s)
uname_m=$(uname -m)

case "$uname_s" in
  Linux)   OS=linux ;;
  Darwin)  OS=darwin ;;
  *) die "unsupported os: $uname_s (hrdx needs a unix pty)" ;;
esac

case "$uname_m" in
  x86_64|amd64)         ARCH=amd64 ;;
  arm64|aarch64)        ARCH=arm64 ;;
  *) die "unsupported arch: $uname_m" ;;
esac

# ---- resolve version ----

if [ "$VERSION" = "latest" ]; then
  VERSION=$(curl -fsSLI -o /dev/null -w '%{url_effective}' \
    "https://github.com/${OWNER}/${REPO}/releases/latest" \
    | sed -E 's|.*/tag/([^/]+).*|\1|')
  [ -n "$VERSION" ] || die "could not resolve latest version"
fi

case "$VERSION" in v*) ;; *) VERSION="v$VERSION" ;; esac
VER_NUM="${VERSION#v}"

# ---- pick an install prefix ----

pick_prefix() {
  local candidates=()
  [ -n "$PREFIX" ] && { echo "$PREFIX"; return; }
  candidates+=("/usr/local/bin")
  [ -n "${HOME:-}" ] && candidates+=("$HOME/.local/bin" "$HOME/bin")
  for d in "${candidates[@]}"; do
    if [ -d "$d" ] && [ -w "$d" ]; then
      echo "$d"
      return
    fi
  done
  # Nothing writable yet - create ~/.local/bin and use that.
  if [ -n "${HOME:-}" ]; then
    mkdir -p "$HOME/.local/bin"
    echo "$HOME/.local/bin"
    return
  fi
  die "no writable install prefix found; pass one as the second argument"
}

PREFIX=$(pick_prefix)
mkdir -p "$PREFIX"

# ---- download + verify + extract ----

ARCHIVE="${BINARY}_${VER_NUM}_${OS}_${ARCH}.tar.gz"
BASE_URL="https://github.com/${OWNER}/${REPO}/releases/download/${VERSION}"
ARCHIVE_URL="${BASE_URL}/${ARCHIVE}"
CHECKSUMS_URL="${BASE_URL}/checksums.txt"

TMP=$(mktemp -d)
trap 'rm -rf "$TMP"' EXIT

msg "downloading ${ARCHIVE}"
curl -fsSL -o "$TMP/$ARCHIVE" "$ARCHIVE_URL" \
  || die "download failed: $ARCHIVE_URL"

msg "verifying checksum"
curl -fsSL -o "$TMP/checksums.txt" "$CHECKSUMS_URL" \
  || die "download failed: $CHECKSUMS_URL"

expected=$(grep " ${ARCHIVE}\$" "$TMP/checksums.txt" | awk '{print $1}' || true)
[ -n "$expected" ] || die "no checksum for $ARCHIVE in checksums.txt"

if command -v sha256sum >/dev/null 2>&1; then
  actual=$(sha256sum "$TMP/$ARCHIVE" | awk '{print $1}')
elif command -v shasum >/dev/null 2>&1; then
  actual=$(shasum -a 256 "$TMP/$ARCHIVE" | awk '{print $1}')
else
  die "no sha256 tool found (sha256sum or shasum)"
fi

[ "$expected" = "$actual" ] \
  || die "checksum mismatch: expected $expected, got $actual"

msg "extracting"
tar -xzf "$TMP/$ARCHIVE" -C "$TMP"

[ -f "$TMP/$BINARY" ] || die "archive did not contain a '$BINARY' binary"

msg "installing to $PREFIX/$BINARY"
install -m 0755 "$TMP/$BINARY" "$PREFIX/$BINARY" 2>/dev/null \
  || { cp "$TMP/$BINARY" "$PREFIX/$BINARY" && chmod 0755 "$PREFIX/$BINARY"; }

# ---- PATH hint ----

case ":$PATH:" in
  *":$PREFIX:"*) ;;
  *)
    warn "$PREFIX is not on your PATH"
    warn "add this to your shell rc file:"
    warn "  export PATH=\"$PREFIX:\$PATH\""
    ;;
esac

msg "installed $("$PREFIX/$BINARY" --version 2>/dev/null || echo hrdx)"
msg "run:  hrdx          (interactive tui)"
msg "run:  hrdx --help   (all flags)"