#!/usr/bin/env bash
# Copy the native release bundle into the resource layout used by Tauri.
set -euo pipefail

usage() {
  cat <<'EOF'
Usage: prepare-desktop-runtime.sh [--bundle-dir DIR] [--output-dir DIR] [--platform PLATFORM]

Prepare apps/desktop/src-tauri/resources/kandev from an existing release
runtime bundle. The input bundle must contain:

  bin/kandev[.exe]
  bin/agentctl[.exe]
  bin/agentctl-linux-amd64
  bin/agentctl-linux-arm64
  bin/agentctl-darwin-arm64
  bin/agentctl-darwin-amd64

Options:
  --bundle-dir DIR  Source runtime bundle. Defaults to dist/kandev.
  --output-dir DIR  Destination runtime resource directory.
                    Defaults to apps/desktop/src-tauri/resources/kandev.
  --platform NAME   Release platform to include in verification output.
  -h, --help        Show this help.
EOF
}

ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
BUNDLE_DIR="${ROOT_DIR}/dist/kandev"
OUTPUT_DIR="${ROOT_DIR}/apps/desktop/src-tauri/resources/kandev"
VERIFY_SCRIPT="${ROOT_DIR}/scripts/release/verify-desktop-runtime.sh"
PLATFORM=""
REMOTE_AGENTCTL_HELPERS=(
  agentctl-linux-amd64
  agentctl-linux-arm64
  agentctl-darwin-arm64
  agentctl-darwin-amd64
)

while [ "$#" -gt 0 ]; do
  case "$1" in
    --bundle-dir)
      BUNDLE_DIR="${2:?Missing value for --bundle-dir}"
      shift 2
      ;;
    --output-dir)
      OUTPUT_DIR="${2:?Missing value for --output-dir}"
      shift 2
      ;;
    --platform)
      PLATFORM="${2:?Missing value for --platform}"
      shift 2
      ;;
    -h|--help)
      usage
      exit 0
      ;;
    *)
      printf 'Unknown argument: %s\n\n' "$1" >&2
      usage >&2
      exit 2
      ;;
  esac
done

refuse_dangerous_output_dir() {
  local output_parent output_base resolved_parent resolved_output
  case "$OUTPUT_DIR" in
    ""|"."|".."|"/"|"/."|"/..")
      printf 'Refusing dangerous desktop runtime output directory: %s\n' "${OUTPUT_DIR:-<empty>}" >&2
      exit 1
      ;;
  esac
  output_parent="$(dirname "$OUTPUT_DIR")"
  output_base="$(basename "$OUTPUT_DIR")"
  if resolved_parent="$(cd "$output_parent" 2>/dev/null && pwd -P)"; then
    resolved_output="$resolved_parent/$output_base"
    if [ "$resolved_output" = "/" ] || [ "$resolved_output" = "$ROOT_DIR" ]; then
      printf 'Refusing dangerous desktop runtime output directory: %s\n' "$OUTPUT_DIR" >&2
      exit 1
    fi
  fi
}

refuse_dangerous_output_dir
chmod +x "$BUNDLE_DIR/bin/kandev" "$BUNDLE_DIR/bin/agentctl" 2>/dev/null || true
for helper in "${REMOTE_AGENTCTL_HELPERS[@]}"; do
  chmod +x "$BUNDLE_DIR/bin/$helper" 2>/dev/null || true
done
chmod +x "$BUNDLE_DIR/bin/kandev.exe" "$BUNDLE_DIR/bin/agentctl.exe" 2>/dev/null || true
VERIFY_ARGS=()
if [ -n "$PLATFORM" ]; then
  VERIFY_ARGS=(--platform "$PLATFORM")
fi
"$VERIFY_SCRIPT" "${VERIFY_ARGS[@]}" "$BUNDLE_DIR" >/dev/null

rm -rf -- "$OUTPUT_DIR"
mkdir -p "$OUTPUT_DIR/bin"
printf '*\n!.gitignore\n' > "$OUTPUT_DIR/.gitignore"

copy_one() {
  local label="$1"
  shift
  local source
  for source in "$@"; do
    if [ -f "$source" ]; then
      cp "$source" "$OUTPUT_DIR/bin/$(basename "$source")"
      chmod +x "$OUTPUT_DIR/bin/$(basename "$source")" 2>/dev/null || true
      return 0
    fi
  done
  printf 'Missing %s in %s\n' "$label" "$BUNDLE_DIR/bin" >&2
  exit 1
}

copy_one "Kandev launcher binary" "$BUNDLE_DIR/bin/kandev" "$BUNDLE_DIR/bin/kandev.exe"
copy_one "agentctl binary" "$BUNDLE_DIR/bin/agentctl" "$BUNDLE_DIR/bin/agentctl.exe"
for helper in "${REMOTE_AGENTCTL_HELPERS[@]}"; do
  copy_one "remote agentctl helper $helper" "$BUNDLE_DIR/bin/$helper"
done

"$VERIFY_SCRIPT" "${VERIFY_ARGS[@]}" "$OUTPUT_DIR" >/dev/null
if [ -n "$PLATFORM" ]; then
  printf 'Desktop runtime prepared for %s at %s\n' "$PLATFORM" "$OUTPUT_DIR"
else
  printf 'Desktop runtime prepared at %s\n' "$OUTPUT_DIR"
fi