# Install Fuse from GitHub Releases.
#
#   irm https://raw.githubusercontent.com/provasign/fuse/main/install.ps1 | iex
#
# Parameters (pass as env vars before piping, or dot-source and call directly):
#   $env:VERSION       release tag to install   (default: latest)
#   $env:INSTALL_DIR   install directory         (default: $HOME\bin)
#
# Supported platforms: windows-amd64
#
# Note: Fuse embeds Grove as a library — no separate grove installation is required.
[CmdletBinding()]
param(
  [string]$Version    = $env:VERSION,
  [string]$InstallDir = $env:INSTALL_DIR
)
$ErrorActionPreference = "Stop"

$PRODUCT = "fuse"
$REPO    = "provasign/fuse"
$ARCH    = "amd64"

if (-not $InstallDir) { $InstallDir = "$env:USERPROFILE\bin" }

function info($msg) { Write-Host "==> $msg" -ForegroundColor Blue }
function ok($msg)   { Write-Host "✅ $msg" -ForegroundColor Green }
function die($msg)  { Write-Error "❌ $msg"; exit 1 }

# ── Version resolution ───────────────────────────────────────────────────────
if (-not $Version) {
  info "Resolving latest release…"
  $rel = Invoke-RestMethod "https://api.github.com/repos/$REPO/releases/latest"
  $Version = $rel.tag_name
  if (-not $Version) { die "Could not determine latest version — set VERSION=vX.Y.Z" }
}
info "Version: $Version"

$FILE    = "$PRODUCT-$Version-windows-$ARCH.exe"
$BASE    = "https://github.com/$REPO/releases/download/$Version"
$TMP     = [System.IO.Path]::GetTempPath()
$tmpFile = "$TMP$FILE"

# ── Download ─────────────────────────────────────────────────────────────────
info "Downloading $FILE…"
Invoke-WebRequest "$BASE/$FILE" -OutFile $tmpFile

# ── Checksum verification ────────────────────────────────────────────────────
$actual = (Get-FileHash $tmpFile -Algorithm SHA256).Hash.ToLower()
try {
  Invoke-WebRequest "$BASE/checksums.txt" -OutFile "$TMP\provasign-checksums.txt" -ErrorAction Stop
  $lines    = Get-Content "$TMP\provasign-checksums.txt"
  $expected = ($lines | Where-Object { $_ -match [regex]::Escape($FILE) }) -split '\s+' | Select-Object -First 1
  if ($expected) {
    if ($expected -ne $actual) { die "CHECKSUM MISMATCH`n  expected: $expected`n  actual:   $actual" }
    ok "Checksum verified"
  } else {
    ok "SHA256: $actual"
  }
} catch {
  ok "SHA256: $actual  (no checksums.txt in this release)"
}

# ── Install ──────────────────────────────────────────────────────────────────
New-Item -ItemType Directory -Force -Path $InstallDir | Out-Null
Copy-Item $tmpFile "$InstallDir\$PRODUCT.exe" -Force
Remove-Item $tmpFile -ErrorAction SilentlyContinue
ok "$PRODUCT $Version → $InstallDir\$PRODUCT.exe"

# ── PATH registration ────────────────────────────────────────────────────────
$currentPath = [System.Environment]::GetEnvironmentVariable("PATH", "User")
if ($currentPath -notlike "*$InstallDir*") {
  [System.Environment]::SetEnvironmentVariable("PATH", "$InstallDir;$currentPath", "User")
  ok "Added $InstallDir to PATH (open a new terminal for it to take effect)"
}

Write-Host ""
Write-Host "$PRODUCT $Version installed."
Write-Host "Next: fuse install  (register git merge driver globally)"