#!/usr/bin/env bash
# HOW TO EDIT THIS FILE:
# - Default apps: Set optional DEFAULT_*_APP values
# - Dock items: Add/remove app paths in DOCK_ITEMS array
# - macOS defaults: Edit defaults commands below (use: defaults read <domain> to see current values)
# - Homebrew packages: Add/remove entries in BREW_FORMULAE/BREW_CASKS arrays
# - App Store apps: Add/remove entries in MAS_APPS array (format: "app_id|App Name")
# - Admin-only commands are moved to the end and commented out
# - Client profiles: edit apply_client_profile in this file and run with --client NAME
# After editing, run: ./prep.sh

set -u -o pipefail

# Get the directory where this script is located
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]:-${0}}")" && pwd)"

###############################################################################
# User Configuration                                                          #
###############################################################################

# Default Apps (optional; app must already be installed)
DEFAULT_BROWSER="Google Chrome"
# DEFAULT_EMAIL_APP="Mail"
# DEFAULT_CALENDAR_APP="Calendar"
# DEFAULT_MAPS_APP="Maps"
# DEFAULT_MUSIC_APP="Music"
# DEFAULT_PHOTOS_APP="Photos"
# DEFAULT_TEXT_EDITOR_APP="Visual Studio Code"

###############################################################################
# Dock Configuration                                                          #
###############################################################################

DOCK_ITEMS=(
  "/Applications/Google Chrome.app"
  "/Applications/Google Drive.app"
  "/Applications/1Password.app"
  "/Applications/WhatsApp.app"
  "/Applications/Slack.app"
  "/Applications/Microsoft Word.app"
  "/Applications/Microsoft Excel.app"
  "/System/Applications/Notes.app"
  "/System/Applications/Calendar.app"
  "/Applications/Safari.app"
  "/System/Applications/System Settings.app"
)

###############################################################################
# Homebrew                                                                    #
###############################################################################

BREW_FORMULAE=()
BREW_CASKS=()

###############################################################################
# Mac App Store (mas)                                                         #
###############################################################################

MAS_APPS=(
  "409201541|Pages"
  "409203825|Numbers"
  "409183694|Keynote"
)

###############################################################################
# Logging and Helpers                                                         #
###############################################################################

LOG_FILE="${HOME}/Downloads/.prep-defaults-$(date '+%Y%m%d').log"
FAILURES=()
STEP_NUM=0
TOTAL_STEPS=7
REVERT_DEFAULTS=false
CLIENT_PROFILE=""
SUDO_KEEPALIVE_PID=""
SUDO_INITIALIZED=false
ACCEPT_XCODE_LICENSE=false

log_to_file() {
  printf "[%s] %s\n" "$(date '+%Y-%m-%d %H:%M:%S')" "$*" >> "$LOG_FILE"
}

log() {
  log_to_file "$*"
  printf "[OK] %s\n" "$*"
}

warn() {
  log_to_file "WARN: $*"
  printf "[WARN] %s\n" "$*" >&2
}

error() {
  log_to_file "ERROR: $*"
  printf "[ERROR] %s\n" "$*" >&2
  FAILURES+=("$*")
}

filter_dock_items() {
  local item
  local filtered=()
  local missing=()

  for item in "${DOCK_ITEMS[@]}"; do
    if [[ "$item" == "SPACER" ]]; then
      filtered+=("$item")
    elif [[ -e "$item" ]]; then
      filtered+=("$item")
    else
      missing+=("$item")
    fi
  done

  if [[ ${#missing[@]} -gt 0 ]]; then
    warn "Dock item not found, skipping:"
    for item in "${missing[@]}"; do
      warn "  - $item"
    done
  fi

  DOCK_ITEMS=("${filtered[@]}")
}

step_start() {
  STEP_NUM=$((STEP_NUM + 1))
  printf "\n[%d/%d] %s\n" "$STEP_NUM" "$TOTAL_STEPS" "$1"
  log_to_file "STEP $STEP_NUM/$TOTAL_STEPS: $1"
}

show_setting() {
  local label="$1"
  local domain="$2"
  local key="$3"
  local current="(not set)"
  if defaults read "$domain" "$key" >/dev/null 2>&1; then
    current="$(defaults read "$domain" "$key")"
  fi
  printf "%s: %s\n" "$label" "$current"
}

run_cmd() {
  local desc="$1"
  shift
  if "$@" >> "$LOG_FILE" 2>&1; then
    log "$desc"
  else
    error "$desc (failed)"
  fi
}

run_cmd_admin() {
  local desc="$1"
  shift
  ensure_sudo
  log_to_file "ADMIN: $desc"
  if sudo -n "$@" >> "$LOG_FILE" 2>&1; then
    log "$desc"
  else
    error "$desc (failed; admin session expired)"
  fi
}

run_optional() {
  local desc="$1"
  shift
  if "$@" >> "$LOG_FILE" 2>&1; then
    log "$desc"
  else
    warn "$desc (failed, ignored)"
  fi
}

run_optional_admin() {
  local desc="$1"
  shift
  ensure_sudo
  log_to_file "ADMIN: $desc"
  if sudo -n "$@" >> "$LOG_FILE" 2>&1; then
    log "$desc"
  else
    warn "$desc (failed; admin session expired, ignored)"
  fi
}

init_sudo() {
  if ! command -v sudo >/dev/null 2>&1; then
    warn "sudo not available; skipping admin credential caching"
    return 0
  fi

  printf "Admin access is required for some steps. Please authenticate.\n"
  if ! sudo -v; then
    error "Failed to obtain sudo credentials"
    exit 1
  fi

  # Keep sudo timestamp alive while the script runs.
  while true; do
    sudo -n true >/dev/null 2>&1 || break
    sleep 60
  done &
  SUDO_KEEPALIVE_PID=$!
  SUDO_INITIALIZED=true
}

ensure_sudo() {
  if [[ "${SUDO_INITIALIZED}" == "true" ]]; then
    return 0
  fi
  init_sudo
}

cleanup_sudo() {
  if [[ -n "${SUDO_KEEPALIVE_PID:-}" ]]; then
    kill "$SUDO_KEEPALIVE_PID" >/dev/null 2>&1 || true
  fi
  if command -v sudo >/dev/null 2>&1; then
    sudo -k >/dev/null 2>&1 || true
  fi
}

show_summary() {
  printf "\nSummary\n"
  printf "\n"
  if [[ ${#FAILURES[@]} -eq 0 ]]; then
    printf "All tasks completed successfully.\n"
  else
    printf "Completed with %d issue(s):\n" "${#FAILURES[@]}"
    for failure in "${FAILURES[@]}"; do
      printf "  - %s\n" "$failure"
    done
  fi
  printf "Log file: %s\n" "$LOG_FILE"
}

show_usage() {
  printf "Usage: %s [--revert] [--client NAME] [NAME]\n" "$(basename "$0")"
  printf "  --revert        Revert defaults set by this script\n"
  printf "  --client NAME   Apply inline client profile from prep.sh\n"
  printf "  --accept-xcode-license  Accept Xcode license after install\n"
  printf "  NAME            Positional client name (same as --client)\n"
}

apply_client_profile() {
  if [[ -z "$CLIENT_PROFILE" ]]; then
    CLIENT_PROFILE="default"
  fi

  case "$CLIENT_PROFILE" in
    default)
      BREW_FORMULAE=(
        "mas"
        "dockutil"
      )

      BREW_CASKS=(
        "1password"
        "slack"
        "google-chrome"
        "google-drive"
        "whatsapp"
      )
      ;;
    # Example:
    # acme)
    #   DEFAULT_BROWSER="Google Chrome"
    #   BREW_CASKS+=(
    #     "slack"
    #   )
    #   ;;
    *)
      error "Unknown client profile: ${CLIENT_PROFILE}"
      exit 1
      ;;
  esac

  log "Loaded client profile: ${CLIENT_PROFILE}"
}

###############################################################################
# Homebrew                                                                    #
###############################################################################

ensure_xcode_cli_tools() {
  if /usr/bin/xcode-select -p >/dev/null 2>&1; then
    log "Xcode Command Line Tools already installed"
    if [[ "${ACCEPT_XCODE_LICENSE}" == "true" ]]; then
      accept_xcode_license
    fi
    return 0
  fi

  run_optional "Request Xcode Command Line Tools install" /usr/bin/xcode-select --install

  # Wait until installation completes (user confirmation required).
  while ! /usr/bin/xcode-select -p >/dev/null 2>&1; do
    printf "Waiting for Xcode Command Line Tools installation to finish...\n"
    sleep 20
  done
  log "Xcode Command Line Tools installed"
  if [[ "${ACCEPT_XCODE_LICENSE}" == "true" ]]; then
    accept_xcode_license
  fi
}

accept_xcode_license() {
  if ! command -v xcodebuild >/dev/null 2>&1; then
    warn "xcodebuild not available; cannot accept Xcode license"
    return 0
  fi

  run_cmd_admin "Accept Xcode license" /usr/bin/xcodebuild -license accept
}

install_homebrew() {
  if command -v brew >/dev/null 2>&1; then
    log "Homebrew already installed"
    return 0
  fi

  if ! command -v /bin/bash >/dev/null 2>&1; then
    error "bash not available for Homebrew install"
    return 1
  fi

  ensure_sudo
  run_cmd "Install Homebrew" /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"

  if [[ -x /opt/homebrew/bin/brew ]]; then
    eval "$(/opt/homebrew/bin/brew shellenv)"
  elif [[ -x /usr/local/bin/brew ]]; then
    eval "$(/usr/local/bin/brew shellenv)"
  fi
}

install_brew_packages() {
  if ! command -v brew >/dev/null 2>&1; then
    warn "Homebrew not installed; skipping package install"
    return 0
  fi

  ensure_sudo
  local formula
  for formula in "${BREW_FORMULAE[@]}"; do
    run_optional "Install Homebrew formula ($formula)" brew install "$formula"
  done

  local cask
  for cask in "${BREW_CASKS[@]}"; do
    run_optional "Install Homebrew cask ($cask)" brew install --cask "$cask"
  done
}

###############################################################################
# Mac App Store (mas)                                                         #
###############################################################################

install_mas_apps() {
  if ! command -v mas >/dev/null 2>&1; then
    warn "mas not installed; skipping App Store installs"
    return 0
  fi

  if [[ ${#MAS_APPS[@]} -eq 0 ]]; then
    warn "No App Store apps listed; skipping"
    return 0
  fi

  local entry app_id app_name
  for entry in "${MAS_APPS[@]}"; do
    app_id="${entry%%|*}"
    app_name="${entry#*|}"
    if [[ -z "$app_id" || "$app_id" == "$app_name" ]]; then
      warn "Skipping invalid MAS entry: $entry"
      continue
    fi
    run_optional "Install App Store app (${app_name})" mas install "$app_id"
  done
}

###############################################################################
# macOS System Defaults                                                       #
###############################################################################

close_system_settings() {
  run_optional "Close System Preferences" osascript -e 'tell application "System Preferences" to quit'
  run_optional "Close System Settings" osascript -e 'tell application "System Settings" to quit'
}

ensure_safari_initialized() {
  local safari_container="${HOME}/Library/Containers/com.apple.Safari"
  if [[ -d "$safari_container" ]]; then
    return 0
  fi

  run_optional "Launch Safari to initialize container" open -a "Safari"
  sleep 3
  run_optional "Quit Safari after initialization" osascript -e 'tell application "Safari" to quit'
  sleep 2
}

apply_defaults() {
  # General UI/UX
  run_cmd "Expand save panel (save)" defaults write NSGlobalDomain NSNavPanelExpandedStateForSaveMode -bool true
  run_cmd "Expand save panel (save2)" defaults write NSGlobalDomain NSNavPanelExpandedStateForSaveMode2 -bool true
  run_cmd "Expand print panel (print)" defaults write NSGlobalDomain PMPrintingExpandedStateForPrint -bool true
  run_cmd "Expand print panel (print2)" defaults write NSGlobalDomain PMPrintingExpandedStateForPrint2 -bool true
  run_cmd "Disable Siri status menu" defaults write com.apple.Siri SiriPrefStashedStatusMenuVisible -bool false
  run_cmd "Disable Siri voice trigger" defaults write com.apple.Siri VoiceTriggerUserEnabled -bool false
  run_cmd "Always prefer tabs" defaults write -g AppleWindowTabbingMode -string always
  run_cmd "Show Bluetooth in Control Center" defaults write com.apple.controlcenter "NSStatusItem Visible Bluetooth" -bool true
  run_cmd "Show Sound in Control Center" defaults write com.apple.controlcenter "NSStatusItem Visible Sound" -bool true
  run_cmd "Hide Spotlight menu item" defaults -currentHost write com.apple.Spotlight MenuItemHidden -int 1

  # Finder
  run_cmd "Show Finder path bar" defaults write com.apple.finder ShowPathbar -bool true
  run_cmd "Default Finder view style (list)" defaults write com.apple.finder FXPreferredViewStyle -string "Nlsv"
  run_cmd "Show Finder status bar" defaults write com.apple.finder ShowStatusBar -boolean true
  run_cmd "Show hidden files" defaults write com.apple.finder AppleShowAllFiles true
  run_cmd "Show file extensions" defaults write NSGlobalDomain AppleShowAllExtensions -boolean true

  # Unhide ~/Library
  run_optional "Unhide ~/Library" chflags nohidden "$HOME/Library"
  if xattr -p com.apple.FinderInfo "$HOME/Library" >/dev/null 2>&1; then
    run_optional "Remove FinderInfo xattr" xattr -d com.apple.FinderInfo "$HOME/Library"
  else
    log "FinderInfo xattr not present; skipping"
  fi

  # Text Input
  run_cmd "Disable auto-capitalization" defaults write NSGlobalDomain NSAutomaticCapitalizationEnabled -bool false
  run_cmd "Disable auto-correction" defaults write NSGlobalDomain NSAutomaticSpellingCorrectionEnabled -bool false

  # Bluetooth
  run_cmd "Set Bluetooth audio quality" defaults write com.apple.BluetoothAudioAgent "Apple Bitpool Min (editable)" -int 40

  # Network
  run_cmd "Browse all network interfaces" defaults write com.apple.NetworkBrowser BrowseAllInterfaces -bool true

  # Screenshots
  run_cmd "Save screenshots to Downloads" defaults write com.apple.screencapture location -string "$HOME/Downloads"
  run_cmd "Use PNG for screenshots" defaults write com.apple.screencapture type -string "png"

  # Safari (ignore failures if Safari is not present)
  ensure_safari_initialized
  run_optional "Enable Safari Develop menu" defaults write com.apple.Safari IncludeDevelopMenu -bool true
  run_optional "Enable Safari WebKit developer extras (global)" defaults write com.apple.Safari WebKitDeveloperExtrasEnabledPreferenceKey -bool true
  run_optional "Enable Safari WebKit developer extras" defaults write com.apple.Safari com.apple.Safari.ContentPageGroupIdentifier.WebKit2DeveloperExtrasEnabled -bool true
  run_optional "Disable Safari AutoFill Address Book" defaults write com.apple.Safari AutoFillFromAddressBook -bool false
  run_optional "Disable Safari AutoFill Passwords" defaults write com.apple.Safari AutoFillPasswords -bool false
  run_optional "Disable Safari AutoFill Credit Cards" defaults write com.apple.Safari AutoFillCreditCardData -bool false
  run_optional "Disable Safari AutoFill Misc" defaults write com.apple.Safari AutoFillMiscellaneousForms -bool false
  run_optional "Enable Safari Do Not Track" defaults write com.apple.Safari SendDoNotTrackHTTPHeader -bool true
}

apply_defaults_revert() {
  # General UI/UX
  run_optional "Revert save panel expansion (save)" defaults delete NSGlobalDomain NSNavPanelExpandedStateForSaveMode
  run_optional "Revert save panel expansion (save2)" defaults delete NSGlobalDomain NSNavPanelExpandedStateForSaveMode2
  run_optional "Revert print panel expansion (print)" defaults delete NSGlobalDomain PMPrintingExpandedStateForPrint
  run_optional "Revert print panel expansion (print2)" defaults delete NSGlobalDomain PMPrintingExpandedStateForPrint2
  run_optional "Revert Siri status menu" defaults delete com.apple.Siri SiriPrefStashedStatusMenuVisible
  run_optional "Revert Siri voice trigger" defaults delete com.apple.Siri VoiceTriggerUserEnabled
  run_optional "Revert window tabbing preference" defaults delete -g AppleWindowTabbingMode
  run_optional "Revert Bluetooth Control Center item" defaults delete com.apple.controlcenter "NSStatusItem Visible Bluetooth"
  run_optional "Revert Sound Control Center item" defaults delete com.apple.controlcenter "NSStatusItem Visible Sound"
  run_optional "Revert Spotlight menu item" defaults -currentHost delete com.apple.Spotlight MenuItemHidden

  # Finder
  run_optional "Revert Finder path bar" defaults delete com.apple.finder ShowPathbar
  run_optional "Revert Finder view style" defaults delete com.apple.finder FXPreferredViewStyle
  run_optional "Revert Finder status bar" defaults delete com.apple.finder ShowStatusBar
  run_optional "Revert hidden files visibility" defaults delete com.apple.finder AppleShowAllFiles
  run_optional "Revert file extensions visibility" defaults delete NSGlobalDomain AppleShowAllExtensions

  # ~/Library visibility
  run_optional "Hide ~/Library" chflags hidden "$HOME/Library"

  # Text Input
  run_optional "Revert auto-capitalization" defaults delete NSGlobalDomain NSAutomaticCapitalizationEnabled
  run_optional "Revert auto-correction" defaults delete NSGlobalDomain NSAutomaticSpellingCorrectionEnabled

  # Bluetooth
  run_optional "Revert Bluetooth audio quality" defaults delete com.apple.BluetoothAudioAgent "Apple Bitpool Min (editable)"

  # Network
  run_optional "Revert network interface browsing" defaults delete com.apple.NetworkBrowser BrowseAllInterfaces

  # Screenshots
  run_optional "Revert screenshot location" defaults delete com.apple.screencapture location
  run_optional "Revert screenshot format" defaults delete com.apple.screencapture type

  # Safari (ignore failures if Safari is not present)
  run_optional "Revert Safari Develop menu" defaults delete com.apple.Safari IncludeDevelopMenu
  run_optional "Revert Safari WebKit developer extras (global)" defaults delete com.apple.Safari WebKitDeveloperExtrasEnabledPreferenceKey
  run_optional "Revert Safari WebKit developer extras" defaults delete com.apple.Safari com.apple.Safari.ContentPageGroupIdentifier.WebKit2DeveloperExtrasEnabled
  run_optional "Revert Safari AutoFill Address Book" defaults delete com.apple.Safari AutoFillFromAddressBook
  run_optional "Revert Safari AutoFill Passwords" defaults delete com.apple.Safari AutoFillPasswords
  run_optional "Revert Safari AutoFill Credit Cards" defaults delete com.apple.Safari AutoFillCreditCardData
  run_optional "Revert Safari AutoFill Misc" defaults delete com.apple.Safari AutoFillMiscellaneousForms
  run_optional "Revert Safari Do Not Track" defaults delete com.apple.Safari SendDoNotTrackHTTPHeader
}

restart_apps() {
  run_optional "Restart Safari" killall Safari
  run_optional "Restart Finder" killall Finder
}

configure_dock() {
  if ! command -v dockutil >/dev/null 2>&1; then
    warn "dockutil not installed; skipping Dock configuration"
    return 0
  fi

  if [[ ${#DOCK_ITEMS[@]} -eq 0 ]]; then
    warn "No Dock items configured; skipping Dock configuration"
    return 0
  fi

  run_optional "Clear Dock items" dockutil --remove all --no-restart

  local item
  for item in "${DOCK_ITEMS[@]}"; do
    if [[ "$item" == "SPACER" ]]; then
      run_optional "Add Dock spacer" dockutil --add '' --type spacer --section apps --no-restart
    else
      run_optional "Add Dock item (${item})" dockutil --add "$item" --no-restart
    fi
  done

  run_optional "Restart Dock" killall Dock
}

parse_args() {
  while [[ $# -gt 0 ]]; do
    case "$1" in
      --revert)
        REVERT_DEFAULTS=true
        shift
        ;;
      --client)
        shift
        if [[ -z "${1:-}" ]]; then
          printf "Missing value for --client\n" >&2
          show_usage
          exit 1
        fi
        CLIENT_PROFILE="$1"
        shift
        ;;
      --client=*)
        CLIENT_PROFILE="${1#*=}"
        shift
        ;;
      --accept-xcode-license)
        ACCEPT_XCODE_LICENSE=true
        shift
        ;;
      -h|--help)
        show_usage
        exit 0
        ;;
      *)
        if [[ -z "$CLIENT_PROFILE" ]]; then
          CLIENT_PROFILE="$1"
          shift
        else
          printf "Unknown argument: %s\n" "$1" >&2
          show_usage
          exit 1
        fi
        ;;
    esac
  done
}

main() {
  trap cleanup_sudo EXIT
  parse_args "$@"
  apply_client_profile

  printf "macOS Defaults Setup\n"
  printf "Log file: %s\n\n" "$LOG_FILE"

  printf "Summary before applying macOS defaults:\n"
  show_setting "Show all filename extensions" "NSGlobalDomain" "AppleShowAllExtensions"
  show_setting "Show Finder status bar" "com.apple.finder" "ShowStatusBar"
  show_setting "Show Finder path bar" "com.apple.finder" "ShowPathbar"
  show_setting "Default Finder view style" "com.apple.Finder" "FXPreferredViewStyle"
  printf "\n"

  step_start "Installing Xcode Command Line Tools"
  ensure_xcode_cli_tools

  # Optional: Install Homebrew
  step_start "Installing Homebrew"
  install_homebrew

  # Optional: Install Homebrew packages (inline list)
  step_start "Installing Homebrew packages"
  install_brew_packages
  filter_dock_items

  # Optional: Install Mac App Store apps (requires mas + sign-in)
  # step_start "Installing App Store apps"
  # install_mas_apps

  step_start "Closing System Settings"
  close_system_settings

  step_start "Applying macOS defaults"
  if [[ "$REVERT_DEFAULTS" == "true" ]]; then
    apply_defaults_revert
  else
    apply_defaults
  fi

  step_start "Configuring Dock"
  configure_dock

  step_start "Restarting affected apps"
  restart_apps

  # Optional: Reset Dock to defaults (uncomment to enable)
  # step_start "Resetting Dock to defaults"
  # run_cmd "Reset Dock to default icons" defaults delete com.apple.dock
  # run_optional "Restart Dock" killall Dock

  printf "\nSummary after applying macOS defaults:\n"
  show_setting "Show all filename extensions" "NSGlobalDomain" "AppleShowAllExtensions"
  show_setting "Show Finder status bar" "com.apple.finder" "ShowStatusBar"
  show_setting "Show Finder path bar" "com.apple.finder" "ShowPathbar"
  show_setting "Default Finder view style" "com.apple.Finder" "FXPreferredViewStyle"

  show_summary
}

main "$@"

###############################################################################
# Admin-only commands (disabled)                                              #
###############################################################################
# The commands below require admin privileges. They are intentionally commented
# out and moved to the end of the file per request. Uncomment and run manually
# if/when you want to apply them.
#
# Show /Volumes
# sudo chflags nohidden /Volumes
#
# Login Window - show host info
# sudo defaults write /Library/Preferences/com.apple.loginwindow AdminHostInfo HostName