#!/usr/bin/env bash
# Twelve Data CLI installer
#
# Usage:
#   curl -fsSL https://raw.githubusercontent.com/twelvedata/twelvedata-cli/main/install.sh | bash
#   curl -fsSL https://raw.githubusercontent.com/twelvedata/twelvedata-cli/main/install.sh | bash -s v1.0.0
#
# Environment variables:
#   TWELVEDATA_INSTALL  - Custom install directory (default: ~/.twelvedata)
#   GITHUB_BASE         - Custom GitHub base URL (default: https://github.com)

# Wrap everything in a function so a truncated download is never executed.
main() {

set -euo pipefail

# ─── Colors (only when outputting to a terminal) ─────────────────────────────

Color_Off='' Red='' Green='' Dim='' Bold='' Blue='' Yellow=''

if [[ -t 1 ]]; then
  Color_Off='\033[0m'
  Red='\033[0;31m'
  Green='\033[0;32m'
  Yellow='\033[0;33m'
  Dim='\033[0;2m'
  Bold='\033[1m'
  Blue='\033[0;34m'
fi

# ─── Helpers ─────────────────────────────────────────────────────────────────

error() {
  printf "%b\n" "${Red}error${Color_Off}: $*" >&2
  exit 1
}

warn() {
  printf "%b\n" "${Yellow}warn${Color_Off}: $*" >&2
}

info() {
  printf "%b\n" "${Dim}$*${Color_Off}"
}

success() {
  printf "%b\n" "${Green}$*${Color_Off}"
}

bold() {
  printf "%b\n" "${Bold}$*${Color_Off}"
}

tildify() {
  if [[ $1 == "$HOME"/* ]]; then
    echo "~${1#"$HOME"}"
  else
    echo "$1"
  fi
}

# ─── Dependency checks ──────────────────────────────────────────────────────

command -v curl >/dev/null 2>&1 || error "curl is required but not found. Install it and try again."
command -v tar  >/dev/null 2>&1 || error "tar is required but not found. Install it and try again."

# SHA256: Linux ships `sha256sum`; macOS ships `shasum`. Either works.
if command -v sha256sum >/dev/null 2>&1; then
  sha256_cmd="sha256sum"
elif command -v shasum >/dev/null 2>&1; then
  sha256_cmd="shasum -a 256"
else
  error "Neither sha256sum nor shasum is available — cannot verify download integrity."
fi

# ─── OS / Architecture detection ────────────────────────────────────────────

platform=$(uname -ms)

case $platform in
  'Darwin x86_64')   target=darwin-x64 ;;
  'Darwin arm64')    target=darwin-arm64 ;;
  'Linux aarch64')   target=linux-arm64 ;;
  'Linux x86_64')    target=linux-x64 ;;
  'Linux arm64')     target=linux-arm64 ;;
  *)
    error "Unsupported platform: ${platform}.

  Twelve Data CLI supports:
    - macOS (Apple Silicon / Intel)
    - Linux (x64 / arm64)

  For Windows, run this in PowerShell:
    irm https://raw.githubusercontent.com/twelvedata/twelvedata-cli/main/install.ps1 | iex"
    ;;
esac

# Detect Rosetta 2 on macOS — prefer native arm64 binary
if [[ $target == "darwin-x64" ]]; then
  if [[ $(sysctl -n sysctl.proc_translated 2>/dev/null || echo 0) == "1" ]]; then
    target=darwin-arm64
    info "  Rosetta 2 detected — installing native arm64 binary"
  fi
fi

# Note: Alpine (musl) is supported. The twelvedata binary is built with CGO_ENABLED=0
# so it is statically linked and runs on musl-based distributions unchanged.

# ─── Version + Download URL ─────────────────────────────────────────────────

GITHUB_BASE=${GITHUB_BASE:-"https://github.com"}

# Validate GITHUB_BASE is HTTPS to prevent download from arbitrary sources
case "$GITHUB_BASE" in
  https://*) ;;
  *) error "GITHUB_BASE must start with https:// (got: ${GITHUB_BASE})" ;;
esac

REPO="${GITHUB_BASE}/twelvedata/twelvedata-cli"

VERSION=${1:-}

# Validate version format if provided
if [[ -n $VERSION ]]; then
  # Strip leading 'v' if present, then re-add for the tag
  VERSION="${VERSION#v}"
  if ! [[ $VERSION =~ ^[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z0-9.]+)?$ ]]; then
    error "Invalid version format: ${VERSION}

  Expected: semantic version like 1.0.0 or 1.2.3-beta.1
  Usage:    curl -fsSL <install-url> | bash -s v1.0.0"
  fi
  url="${REPO}/releases/download/v${VERSION}/twelvedata-${target}.tar.gz"
  checksums_url="${REPO}/releases/download/v${VERSION}/checksums.txt"
else
  url="${REPO}/releases/latest/download/twelvedata-${target}.tar.gz"
  checksums_url="${REPO}/releases/latest/download/checksums.txt"
fi

archive_name="twelvedata-${target}.tar.gz"

# ─── Install directory ──────────────────────────────────────────────────────

install_dir="${TWELVEDATA_INSTALL:-$HOME/.twelvedata}"
bin_dir="${install_dir}/bin"
exe="${bin_dir}/twelvedata"

mkdir -p "$bin_dir" || error "Failed to create install directory: ${bin_dir}"

# ─── Download + Extract ─────────────────────────────────────────────────────

echo ""
bold "  Installing Twelve Data CLI..."
echo ""

tmpdir=$(mktemp -d) || error "Failed to create temporary directory"
trap 'rm -rf "$tmpdir"' EXIT INT TERM

tmpfile="${tmpdir}/twelvedata.tar.gz"

info "  Downloading from ${url}"
echo ""

curl --fail --location --progress-bar --output "$tmpfile" "$url" ||
  error "Download failed.

  Possible causes:
    - No internet connection
    - The version does not exist: ${VERSION:-latest}
    - GitHub is unreachable

  URL: ${url}"

# Verify SHA256 against the release's checksums.txt before extracting.
checksums_file="${tmpdir}/checksums.txt"

curl --fail --location --silent --output "$checksums_file" "$checksums_url" ||
  error "Failed to download checksums.txt for integrity verification.

  URL: ${checksums_url}"

expected=$(awk -v name="$archive_name" '$2 == name {print $1; exit}' "$checksums_file")
if [[ -z $expected ]]; then
  error "checksums.txt has no entry for ${archive_name} — refusing to install unverified binary."
fi

actual=$($sha256_cmd "$tmpfile" | awk '{print $1}')
if [[ $actual != "$expected" ]]; then
  error "SHA256 mismatch — refusing to install.

  File:     ${archive_name}
  Expected: ${expected}
  Actual:   ${actual}"
fi

info "  SHA256 verified"

tar -xzf "$tmpfile" -C "$bin_dir" ||
  error "Failed to extract archive. The download may be corrupted — try again."

chmod +x "$exe" || error "Failed to make binary executable"

# Strip macOS Gatekeeper quarantine flag (set automatically on curl downloads)
# Without this, macOS will block the binary: "cannot be opened because Apple
# cannot check it for malicious software"
if [[ $(uname -s) == "Darwin" ]]; then
  xattr -d com.apple.quarantine "$exe" 2>/dev/null || true
fi

# ─── Verify installation ────────────────────────────────────────────────────

installed_version=$("$exe" --version 2>/dev/null || echo "unknown")

echo ""
success "  Twelve Data CLI ${installed_version} installed successfully!"
echo ""
info "  Binary:  $(tildify "$exe")"

# ─── PATH setup ─────────────────────────────────────────────────────────────

# Check if already on PATH
if command -v twelvedata >/dev/null 2>&1; then
  existing=$(command -v twelvedata)
  if [[ "$existing" == "$exe" ]]; then
    echo ""
    bold "  Run ${Blue}twelvedata --help${Color_Off}${Bold} to get started${Color_Off}"
    echo ""
    info "  Enable shell completion (optional):"
    echo ""
    bold "    twelvedata completion install"
    echo ""
    exit 0
  else
    warn "another 'twelvedata' was found at ${existing}"
    info "  The new installation at $(tildify "$exe") may be shadowed."
  fi
fi

# Check if bin_dir is already in PATH
if echo "$PATH" | tr ':' '\n' | grep -qxF "${bin_dir}" 2>/dev/null; then
  echo ""
  bold "  Run ${Blue}twelvedata --help${Color_Off}${Bold} to get started${Color_Off}"
  echo ""
  exit 0
fi

# Determine shell config file
shell_name=$(basename "${SHELL:-}")
config=""
shell_line=""

# Build a $HOME-relative path for shell config (~ doesn't expand inside quotes)
if [[ $bin_dir == "$HOME"/* ]]; then
  shell_bin_dir="\$HOME${bin_dir#"$HOME"}"
else
  shell_bin_dir="$bin_dir"
fi

case $shell_name in
  zsh)
    config="${ZDOTDIR:-$HOME}/.zshrc"
    shell_line="export PATH=\"${shell_bin_dir}:\$PATH\""
    ;;
  bash)
    # macOS bash opens login shells — .bash_profile is loaded, not .bashrc.
    # Linux bash opens non-login interactive shells — .bashrc is preferred.
    if [[ $(uname -s) == "Darwin" ]]; then
      if [[ -f "$HOME/.bash_profile" ]]; then
        config="$HOME/.bash_profile"
      elif [[ -f "$HOME/.bashrc" ]]; then
        config="$HOME/.bashrc"
      else
        config="$HOME/.bash_profile"
      fi
    else
      if [[ -f "$HOME/.bashrc" ]]; then
        config="$HOME/.bashrc"
      elif [[ -f "$HOME/.bash_profile" ]]; then
        config="$HOME/.bash_profile"
      else
        config="$HOME/.bashrc"
      fi
    fi
    shell_line="export PATH=\"${shell_bin_dir}:\$PATH\""
    ;;
  fish)
    config="${XDG_CONFIG_HOME:-$HOME/.config}/fish/conf.d/twelvedata.fish"
    mkdir -p "$(dirname "$config")"
    shell_line="fish_add_path ${shell_bin_dir}"
    ;;
esac

if [[ -n $config ]]; then
  # Check if PATH entry already exists (check both tildified and absolute)
  if [[ -f "$config" ]] && (grep -qF "$(tildify "$bin_dir")" "$config" 2>/dev/null || grep -qF "$bin_dir" "$config" 2>/dev/null); then
    info "  PATH already configured in $(tildify "$config")"
  elif [[ -w "${config%/*}" ]] || [[ -w "$config" ]]; then
    {
      echo ""
      echo "# Twelve Data CLI"
      echo "$shell_line"
    } >> "$config"
    info "  Added $(tildify "$bin_dir") to \$PATH in $(tildify "$config")"
    echo ""
    info "  To start using Twelve Data CLI, run:"
    echo ""
    bold "    source $(tildify "$config")"
    bold "    twelvedata --help"
  else
    echo ""
    info "  Manually add to your shell config:"
    echo ""
    bold "    ${shell_line}"
  fi
else
  echo ""
  info "  Add to your shell config:"
  echo ""
  bold "    export PATH=\"${shell_bin_dir}:\$PATH\""
fi

echo ""
info "  Next steps:"
echo ""
bold "    export TWELVEDATA_API_KEY=..."
bold "    twelvedata --help"
echo ""
info "  Enable shell completion (optional):"
echo ""
bold "    twelvedata completion install"
echo ""

}

# Run the installer — this line MUST be the last line in the file.
# If the download is interrupted, bash will not execute an incomplete function.
main "$@"