# Downloads the newest Windows qinit CLI to %LOCALAPPDATA%\qinit\bin.
# Override the destination with $env:QINIT_BIN.
$ErrorActionPreference = "Stop"
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

$Repo = if ($env:QINIT_REPOSITORY) { $env:QINIT_REPOSITORY } else { "hackerby888/qinit" }
$BinDir = if ($env:QINIT_BIN) { $env:QINIT_BIN } else { Join-Path $env:LOCALAPPDATA "qinit\bin" }
$TotalSteps = 5

function Show-InstallStep {
  param([int]$Step, [string]$Status)

  $percent = [int](($Step - 1) * 100 / $TotalSteps)
  Write-Progress -Activity "Installing qinit" -Status "[$Step/$TotalSteps] $Status" -PercentComplete $percent
  Write-Host ""
  Write-Host "[$Step/$TotalSteps] $Status"
}

# Only x64 ships today; ARM64 Windows runs it under emulation.
$arch = $env:PROCESSOR_ARCHITECTURE
if ($arch -eq "AMD64" -or $arch -eq "x86" -or $arch -eq "ARM64") {
  $assetArch = "x64"
} else {
  Write-Error "qinit: unsupported arch '$arch'"
  return
}
$asset = "qinit-windows-$assetArch.exe"

Show-InstallStep 1 "Resolving qinit release"
# QINIT_TAG pins a release (CI installs a tag before it becomes latest); otherwise follow the latest pointer.
if ($env:QINIT_TAG) {
  $tag = $env:QINIT_TAG
} else {
  $pointer = "https://github.com/$Repo/releases/download/qinit-cli-latest/latest.txt"
  try {
    $tag = (Invoke-RestMethod -UseBasicParsing -Uri $pointer).Trim()
  } catch {
    Write-Error "qinit: could not download the qinit CLI release pointer ($($_.Exception.Message))"
    return
  }
}
if ($tag -cnotmatch '^qinit-cli-[A-Za-z0-9._-]+$') {
  Write-Error "qinit: invalid qinit CLI release pointer"
  return
}
Write-Host "      found $tag"
$base = "https://github.com/$Repo/releases/download/$tag"

$tmp = New-Item -ItemType Directory -Path (Join-Path $env:TEMP ("qinit-" + [Guid]::NewGuid().ToString("N"))) -Force
try {
  $dl = Join-Path $tmp "qinit.exe"
  Show-InstallStep 2 "Downloading $asset"
  try {
    Invoke-WebRequest -Uri "$base/$asset" -OutFile $dl -UseBasicParsing
  } catch {
    Write-Error "qinit: download failed ($base/$asset)"
    return
  }
  Write-Host "      downloaded"

  # Verify sha256 against SHA256SUMS if present (lines: "<sha>  <name>", optional '*' before name).
  Show-InstallStep 3 "Verifying checksum"
  $response = $null
  try {
    $response = Invoke-WebRequest -Uri "$base/SHA256SUMS" -UseBasicParsing
  } catch {
    # SHA256SUMS is optional.
  }
  if ($null -ne $response) {
    # PowerShell may return release assets as bytes, so decode before matching.
    if ($response.Content -is [byte[]]) {
      $sums = [Text.Encoding]::UTF8.GetString($response.Content)
    } else {
      $sums = [string]$response.Content
    }
    $checksumPattern = '(?m)^([0-9a-fA-F]{64})\s+\*?' + [regex]::Escape($asset) + '\s*$'
    $checksumMatch = [regex]::Match($sums, $checksumPattern)
    if ($checksumMatch.Success) {
      $want = $checksumMatch.Groups[1].Value.ToLower()
      $got = (Get-FileHash -Algorithm SHA256 $dl).Hash.ToLower()
      if ($got -ne $want) {
        Write-Error "qinit: sha256 mismatch (want $want got $got)"
        return
      }
      Write-Host "      sha256 verified"
    } else {
      Write-Host "      checksum entry not published; skipped"
    }
  } else {
    Write-Host "      checksum file not published; skipped"
  }

  Show-InstallStep 4 "Installing qinit"
  New-Item -ItemType Directory -Force -Path $BinDir | Out-Null
  $dest = Join-Path $BinDir "qinit.exe"
  # Windows locks a running .exe; if qinit is running, move the old one aside (rename is allowed) before copy.
  if (Test-Path $dest) {
    try {
      Move-Item -Force $dest "$dest.old"
    } catch {}
  }
  Move-Item -Force $dl $dest
  Write-Host "      installed -> $dest"
} finally {
  Remove-Item -Recurse -Force $tmp -ErrorAction SilentlyContinue
}

# Add BinDir to the user PATH if missing (takes effect in new terminals).
$userPath = [Environment]::GetEnvironmentVariable("Path", "User")
if (($userPath -split ';') -notcontains $BinDir) {
  [Environment]::SetEnvironmentVariable("Path", (($userPath.TrimEnd(';')) + ";" + $BinDir), "User")
  Write-Host "qinit: added $BinDir to your user PATH - open a new terminal to use 'qinit'"
}
# Make qinit available in this session too.
$env:Path = "$env:Path;$BinDir"

Show-InstallStep 5 "Preparing development tools"
$setupExit = 1
try {
  & $dest setup
  $setupExit = $LASTEXITCODE
} catch {}
if ($setupExit -ne 0) {
  Write-Progress -Activity "Installing qinit" -Completed
  Write-Host "qinit: setup failed; the CLI remains installed at $dest"
  Write-Host "qinit: retry: & `"$dest`" setup"
  throw "qinit: setup failed with exit code $setupExit"
}
Write-Host "      development tools ready"
Write-Progress -Activity "Installing qinit" -Completed

& $dest version 2>$null