#!/bin/bash

# Safety measures
set -o errexit  # Leave immediately if a command returns an error
set -o nounset  # Leave immediately if an unitialized value is used
set -o pipefail # Leave immediately if a command fails in a pipe

#####################################################################
# Parameters
#####################################################################

DOTFILES_REPO="git@github.com:yannrouillard/dotfiles.git"
SSH_KEY_PATH="${HOME}/.ssh/id_ed25519"
SSH_KEY_NAME="$(scutil --get LocalHostName)"
ACHILLES_GITLAB_HOST="git.achilles.systems"

#####################################################################
# Package Helper functions
#####################################################################

function brew_pkg() {
    local package="$1" option="${2:-}"
    brew ls --versions "${package}" >/dev/null || brew install "${package}"
    [[ ${option} != "--link" ]] || brew link --overwrite "${package}"
}

function brew_cask_pkg() {
    local package="$1"
    brew ls --cask --versions "${package}" >/dev/null || brew install --cask "${package}"
}

function mas_pkg() {
    local package="$1"
    local package_id
    package_id=$(mas search "${package}" | grep " ${package}" | awk '{ print $1 }' || true)
    [[ -n "${package_id}" ]] || return 1

    mas list | grep "^ ${package_id} " >/dev/null || mas install "${package_id}"
}

#####################################################################
# Mac Helper functions
#####################################################################

function is_mac_m1() {
    [[ "$(uname -m)" == "arm64" ]]
}

function is_rosetta_installed() {
    [[ -n "$(pkgutil --files com.apple.pkg.RosettaUpdateAuto)" ]]
}

function binary_exist() {
    local binary="$1"
    command -v "${binary}" &>/dev/null || return 1
}

function user_shell() {
    local requested_shell="$1"
    local current_user_shell

    current_user_shell=$(sudo dscl . -read "/Users/${USER}" UserShell | awk '{ print $2 }')

    [[ "${requested_shell}" != "${current_user_shell}" ]] || return 0
    sudo dscl . -create "/Users/${USER}" UserShell "${requested_shell}"
}

function install_brew() {
    binary_exist brew ||
        /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
}

#####################################################################
# Git Helper functions
#####################################################################

function is_git_folder() {
    [[ -d "${target_folder}" ]] || return 1
    (cd "${target_folder}" && git rev-parse --git-dir 2>/dev/null) || return 1
}

function git_source() {
    local git_url="$1" target_folder="$2"
    ! is_git_folder || return 0
    mkdir -p "${target_folder}"
    git clone "${git_url}" "${target_folder}"
}

function has_github_access() {
    gh auth status --hostname github.com >/dev/null
}

function configure_github_access() {
    gh config set git_protocol ssh
    gh config set prompt disabled
    gh auth login --scopes "read:public_key" --web
    gh config set prompt enabled
}

function has_github_ssh_key() {
    local key_name="$1"
    gh ssh-key list | grep --quiet "${key_name}"
}

function configure_github_ssh_key() {
    local key_name="$1" key_path="$2"
    gh auth refresh --scopes "write:public_key" --hostname github.com
    gh ssh-key add --title "${key_name}" "${key_path}"
    gh auth refresh --scopes "read:public_key" --hostname github.com
}

function has_gitlab_access() {
    glab auth status --hostname git.achilles.systems >/dev/null
}

function configure_gitlab_access() {
    glab auth login --hostname git.achilles.systems
}

function has_gitlab_ssh_key() {
    local key_name="$1"
    GITLAB_HOST="${ACHILLES_GITLAB_HOST}" glab ssh-key list | grep --quiet "${SSH_KEY_NAME}"
}

function configure_gitlab_ssh_key() {
    local key_name="$1" key_path="$2"
    glab ssh-key add --title "${key_name}" "${key_path}"
}

function has_ssh_config() {
    [[ -f .ssh/config ]]
}

function create_temporary_ssh_config() {
    cat >.ssh/config <<EOF
Host *
  UseKeychain yes
  AddKeysToAgent yes
  IdentityFile ~/.ssh/id_ed25519
EOF
}

function has_ssh_key() {
    local key_path="$1"
    [[ -f "${key_path}" ]]
}

function generate_ssh_key() {
    local key_path="$1"
    ssh-keygen -t ed25519 -f "${key_path}" -a 100
    ssh-add -K "${key_path}"
}

#####################################################################
# Bundle functions
#####################################################################

function bundle_cli_env() {
    git_source "https://github.com/zdharma/zplugin.git" ~/.zplugin/bin
    brew_pkg coreutils
    brew_pkg findutils
    brew_pkg zsh
    brew_pkg bash
    brew_pkg ripgrep
    brew_pkg ncdu
    brew_pkg bat
    brew_pkg fd
    brew_pkg exa
    brew_pkg fzf
    brew_pkg vim
    brew_pkg jq
    brew_pkg z

    if is_mac_m1; then
        user_shell "/opt/homebrew/bin/zsh"
    else
        user_shell "/usr/local/bin/zsh"
    fi
}

function bundle_mac_desktop() {

    if is_mac_m1 && ! is_rosetta_installed; then
        sudo softwareupdate --install-rosetta
    fi

    defaults write com.apple.dock autohide -bool true
    defaults write com.apple.dock tilesize 39
    defaults write com.apple.dock persistent-apps -array '()'

    brew_cask_pkg iterm2
    mkdir -p "$HOME/.iterm2"
    defaults write com.googlecode.iterm2 PrefsCustomFolder "$HOME/.iterm2"
    defaults write com.googlecode.iterm2.plist LoadPrefsFromCustomFolder -bool true

    brew_cask_pkg google-chrome
    brew_cask_pkg firefox
    brew_cask_pkg 1password

    defaults write com.apple.AppleMultitouchTrackpad Clicking -bool true
    defaults write com.apple.AppleMultitouchTrackpad showAppExposeGestureEnabled -bool true
    defaults write com.apple.driver.AppleBluetoothMultitouch.trackpad -bool true
    brew_cask_pkg numi
    brew_cask_pkg spotify
    brew_cask_pkg tor-browser
    brew_cask_pkg whatsapp
    brew_cask_pkg signal
    brew_cask_pkg adobe-acrobat-reader
    brew_cask_pkg gimp
    brew_cask_pkg alfred
    brew_cask_pkg bettertouchtool
    brew_cask_pkg vlc
    brew tap homebrew/cask-fonts
    brew_cask_pkg font-fira-code
    brew_cask_pkg font-hack-nerd-font
    brew_cask_pkg transmission
    brew_cask_pkg protonvpn
    brew_cask_pkg obsidian
    brew_cask_pkg google-drive

    brew_pkg mas

    mas_pkg "Be Focused Pro - Focus Timer"
    mas_pkg "Elmedia:universal video player"
    mas_pkg "Microsoft To Do"

    #brew_cask_pkg wondershare-filmora
    brew_cask_pkg calibre
    brew_cask_pkg send-to-kindle
}

function bundle_achilles() {
    brew_cask_pkg 1password
    brew_cask_pkg pritunl
    brew_cask_pkg slack
    brew_pkg awscli
    brew_pkg aliyun-cli
    brew_pkg vault
    pip3 install hvac

    brew_pkg terraform
    brew_pkg packer
    brew_pkg tflint
    brew_pkg kubectl
    brew_pkg jinja2
    pip3 install jinja2-base64-filters

    pip3 install pyyaml

    brew_pkg postgresql
    brew tap mongodb/brew
    brew_pkg mongodb-community@4.2 --link
    brew_pkg openjdk@11

    mas_pkg "Microsoft Remote Desktop"

    bundle_devel_python

    # Pause for configuring pritunl

    mkdir -p "${HOME}/.terraform.d/plugin-cache"

    brew_pkg glab
    has_gitlab_access || configure_gitlab_access
    has_gitlab_ssh_key "${SSH_KEY_NAME}" || \
        configure_gitlab_ssh_key "${SSH_KEY_NAME}" "${SSH_KEY_PATH}"

    curl https://nexus.achilles.systems/repository/infra/infra-cli | \
        sudo bash -x -s auto-update

    # Configure aliyun authentication
    # Configure aws authentication
}

function bundle_devel_common() {
    brew_pkg diff-so-fancy
    brew_cask_pkg visual-studio-code
    defaults write com.microsoft.VSCode ApplePressAndHoldEnabled -bool false

    brew_cask_pkg docker
}

function bundle_devel_python() {
    brew_pkg python
    brew_pkg pipenv
}

function bundle_devel_node() {
    brew_pkg node
}

function bundle_devel_shell() {
    brew_pkg shellcheck
}

function bundle_android() {
    brew_cask_pkg android-platform-tools
}

function bundle_hacker() {
    brew_cask_pkg wireshask
    brew_pkg spoof-mac
}

function bundle_bootstrap() {
    install_brew
    brew_pkg 1password

    has_ssh_config || create_temporary_ssh_config
    has_ssh_key "${SSH_KEY_PATH}" || generate_ssh_key "${SSH_KEY_PATH}"

    brew_pkg gh
    has_github_access || configure_github_access
    has_github_ssh_key "${SSH_KEY_NAME}" ||
        configure_github_ssh_key "${SSH_KEY_NAME}" "${SSH_KEY_PATH}"

    brew_pkg yadm
    yadm remote >/dev/null || yadm clone "${DOTFILES_REPO}"
}

#####################################################################
# Main code
#####################################################################

available_targets=("cli_env" "mac_desktop" "devel_common")

[[ -z "$*" ]] || available_targets=("$@")

for target in "${available_targets[@]}"; do
    eval "bundle_${target}"
done