#!/usr/bin/env bash
set -euo pipefail

# Install the latest caw CLI and TSS node assets.
# Re-running is safe: existing binaries are skipped.

CAW_BASE_URL="${CAW_BASE_URL:-https://download.agenticwallet.cobo.com/binary-release}"
CAW_VERSION="${CAW_VERSION:-v0.2.70}"
TSS_BASE_URL="${TSS_BASE_URL:-https://download.tss.cobo.com/binary-release/latest}"
INSTALL_ROOT="${INSTALL_ROOT:-$HOME/.cobo-agentic-wallet}"
BIN_DIR="${BIN_DIR:-$INSTALL_ROOT/bin}"
CACHE_TSS_DIR="${CACHE_TSS_DIR:-$INSTALL_ROOT/cache/tss-node}"
LOG_DIR="${LOG_DIR:-$INSTALL_ROOT/logs}"

detect_platform() {
  local os arch
  os="$(uname -s | tr '[:upper:]' '[:lower:]')"
  arch="$(uname -m | tr '[:upper:]' '[:lower:]')"
  case "$os" in
    linux|darwin) ;;
    *)
      echo "Unsupported OS: $os" >&2
      exit 1
      ;;
  esac
  case "$arch" in
    x86_64|amd64) arch="amd64" ;;
    aarch64|arm64) arch="arm64" ;;
    *)
      echo "Unsupported architecture: $arch" >&2
      exit 1
      ;;
  esac
  printf "%s %s\n" "$os" "$arch"
}

sha256_file() {
  local file="$1"
  if command -v sha256sum >/dev/null 2>&1; then
    sha256sum "$file" | awk '{print $1}'
  else
    shasum -a 256 "$file" | awk '{print $1}'
  fi
}

download_with_resume() {
  local url="$1"
  local dest="$2"
  mkdir -p "$(dirname "$dest")"
  curl --fail --location --silent --show-error --continue-at - --output "$dest" "$url"
}

extract_caw_assets() {
  local tarball="$1"
  local dest_dir="$2"
  local tmp_dir
  tmp_dir="$(mktemp -d)"
  trap 'rm -rf "$tmp_dir"' RETURN

  tar -xzf "$tarball" -C "$tmp_dir"

  local caw_bin
  caw_bin="$(find "$tmp_dir" -type f \( -name "caw" -o -name "caw.exe" \) | head -n 1)"
  if [[ -z "$caw_bin" ]]; then
    caw_bin="$(find "$tmp_dir" -type f -name "caw-*" ! -name "*.sha256" | head -n 1)"
  fi
  if [[ -z "$caw_bin" ]]; then
    echo "caw binary not found in tarball" >&2
    exit 1
  fi

  mkdir -p "$dest_dir"
  cp "$caw_bin" "$dest_dir/caw"
  chmod 755 "$dest_dir/caw"
}

extract_tss_assets() {
  local tarball="$1"
  local tmp_dir
  tmp_dir="$(mktemp -d)"
  trap 'rm -rf "$tmp_dir"' RETURN

  tar -xzf "$tarball" -C "$tmp_dir"

  local tss_bin
  tss_bin="$(find "$tmp_dir" -type f -name "cobo-tss-node" | head -n 1)"
  if [[ -z "$tss_bin" ]]; then
    echo "cobo-tss-node binary not found in tarball" >&2
    exit 1
  fi

  mkdir -p "$CACHE_TSS_DIR"
  cp "$tss_bin" "$CACHE_TSS_DIR/cobo-tss-node"
  chmod 755 "$CACHE_TSS_DIR/cobo-tss-node"
  sha256_file "$CACHE_TSS_DIR/cobo-tss-node" > "$CACHE_TSS_DIR/cobo-tss-node.sha256"
  chmod 600 "$CACHE_TSS_DIR/cobo-tss-node.sha256"

  local tpl
  tpl="$(find "$tmp_dir" -type f -name "*.yaml.template" ! -name "._*" | head -n 1 || true)"
  if [[ -n "$tpl" ]]; then
    mkdir -p "$CACHE_TSS_DIR/configs"
    cp "$tpl" "$CACHE_TSS_DIR/configs/cobo-tss-node-config.yaml.template"
    cp "$tpl" "$CACHE_TSS_DIR/configs/cobo-tss-node-config.yaml"
    sha256_file "$CACHE_TSS_DIR/configs/cobo-tss-node-config.yaml.template" > "$CACHE_TSS_DIR/configs/cobo-tss-node-config.yaml.template.sha256"
    sha256_file "$CACHE_TSS_DIR/configs/cobo-tss-node-config.yaml" > "$CACHE_TSS_DIR/configs/cobo-tss-node-config.yaml.sha256"
    chmod 600 "$CACHE_TSS_DIR/configs/"*.sha256
  fi
}

wait_job_or_fail() {
  local pid="$1"
  local log_path="$2"
  local label="$3"
  if ! wait "$pid"; then
    echo "[ERROR] ${label} failed. See log: ${log_path}" >&2
    exit 1
  fi
}

main() {
  read -r os arch < <(detect_platform)
  mkdir -p "$BIN_DIR" "$LOG_DIR" "$CACHE_TSS_DIR"

  local caw_url="${CAW_BASE_URL}/${CAW_VERSION}/caw-${os}-${arch}-${CAW_VERSION}.tar.gz"
  local tss_url="${TSS_BASE_URL}/cobo-tss-node-${os}-${arch}.tar.gz"
  local caw_log="$LOG_DIR/caw-download.log"
  local tss_log="$LOG_DIR/tss-prewarm.log"

  echo "[1/3] Start downloads..."

  local caw_pid="" tss_pid=""

  (
    set -euo pipefail
    caw_tmp_tar="$(mktemp)"
    trap 'rm -f "$caw_tmp_tar"' EXIT
    download_with_resume "$caw_url" "$caw_tmp_tar"
    extract_caw_assets "$caw_tmp_tar" "$BIN_DIR"
    echo "[DONE] caw installed to $BIN_DIR/caw"
  ) >"$caw_log" 2>&1 &
  caw_pid=$!

  (
    set -euo pipefail
    tss_tmp_tar="$(mktemp)"
    trap 'rm -f "$tss_tmp_tar"' EXIT
    download_with_resume "$tss_url" "$tss_tmp_tar"
    extract_tss_assets "$tss_tmp_tar"
    echo "[DONE] TSS node installed to $CACHE_TSS_DIR"
  ) >"$tss_log" 2>&1 &
  tss_pid=$!

  echo "[2/3] Waiting for downloads to complete..."
  [[ -n "$caw_pid" ]] && wait_job_or_fail "$caw_pid" "$caw_log" "caw download"
  [[ -n "$tss_pid" ]] && wait_job_or_fail "$tss_pid" "$tss_log" "tss download"

  echo "[3/3] Done. caw $("$BIN_DIR/caw" --version) at $BIN_DIR/caw, TSS at $CACHE_TSS_DIR"
}

main