#!/usr/bin/env bash
#
# Scripted atproto OAuth sign-in for the iOS Simulator (plan 0038 I5).
#
# Reads ~/.aliceoa_bsky_social_source exactly once, in this command, and never
# prints, echoes, or logs its values. The authorization URL travels only from
# the app container to the headless browser; it is never posted. Output is the
# sign-in result and the granted scope names.
#
# Usage: scripts/sim-signin.sh [device] [app path]
#   DEVICE=iPhone 17e scripts/sim-signin.sh
#
set -euo pipefail

lock="${TMPDIR:-/tmp}/atirc-sim-signin.lock"
if ! mkdir "$lock" 2>/dev/null; then
    echo "FAIL: another sim-signin is running ($lock); remove it if stale" >&2
    exit 1
fi
trap 'rmdir "$lock" 2>/dev/null || true' EXIT

CREDS="${ATIRC_CREDS:-$HOME/.aliceoa_bsky_social_source}"
ACCOUNT="${ATIRC_ACCOUNT:-ALICE}"
DEVICE="${1:-${DEVICE:-iPhone 17e}}"
BUNDLE_ID="com.fedfork.irc.AT-IRC"
APP="${2:-${APP:-.build/Build/Products/Debug-iphonesimulator/AT-IRC.app}}"
SOCIALWEB="${SOCIALWEB_SRC:-/Users/johnandersen777/src/linux-kcp/socialweb-computer-kcp}"
CHROME="${CHROME:-/Applications/Google Chrome.app/Contents/MacOS/Google Chrome}"
LOG="${TMPDIR:-/tmp}/atirc-oauth-signin.$$.log"

cd "$(dirname "$0")/.."

# The one read of the credential file in this shell.
source "$CREDS"
handle_var="${ACCOUNT}_ATPROTO_HANDLE"
handle="${!handle_var:?$handle_var is missing from $CREDS}"

[ -d "$APP" ] || { echo "FAIL: $APP does not exist; build first" >&2; exit 1; }
[ -f "$(dirname "$0")/sim-oauth.ts" ] || { echo "FAIL: Scripts/sim-oauth.ts missing" >&2; exit 1; }

xcrun simctl bootstatus "$DEVICE" -b >/dev/null 2>&1 || true
xcrun simctl terminate "$DEVICE" "$BUNDLE_ID" >/dev/null 2>&1 || true
xcrun simctl uninstall "$DEVICE" "$BUNDLE_ID" >/dev/null 2>&1 || true
# A persisted account would skip LoginView and the auto sign-in.
xcrun simctl keychain "$DEVICE" reset >/dev/null 2>&1 || true
xcrun simctl install "$DEVICE" "$APP"

data="$(xcrun simctl get_app_container "$DEVICE" "$BUNDLE_ID" data)"
url_file="$data/Documents/.atirc-signin-url"
result_file="$data/Documents/.atirc-signin-result"
rm -f "$url_file" "$result_file"

SIMCTL_CHILD_ATIRC_SIGNIN_HANDLE="$handle" \
    xcrun simctl launch --terminate-running-process "$DEVICE" "$BUNDLE_ID" >/dev/null

for _ in $(seq 1 120); do
    [ -s "$url_file" ] && break
    sleep 0.5
done
if [ ! -s "$url_file" ]; then
    echo "FAIL: the app did not write an authorization URL (see the app log)" >&2
    exit 1
fi
url="$(cat "$url_file")"

# The browser script reads the same credential file itself; no value is passed
# on the command line.
if ! deno run -A --no-lock "$(dirname "$0")/sim-oauth.ts" \
        --creds "$CREDS" --account "$ACCOUNT" --url "$url" --chrome "$CHROME" \
        >"$LOG" 2>&1; then
    echo "FAIL: browser sign-in failed (details in $LOG; it contains no credentials or URLs)" >&2
    exit 1
fi

for _ in $(seq 1 180); do
    [ -s "$result_file" ] && break
    sleep 0.5
done
if [ ! -s "$result_file" ]; then
    echo "FAIL: the app did not finish sign-in (see the app log)" >&2
    exit 1
fi

result="$(cat "$result_file")"
rm -f "$url_file" "$result_file" "$LOG"
if printf '%s' "$result" | grep -q '^ok '; then
    echo "$result" | sed -n '1p'
    scopes="$(printf '%s\n' "$result" | sed -n 's/^scope //p')"
    count="$(printf '%s' "$scopes" | wc -w | tr -d ' ')"
    echo "granted scopes: $count"
    printf '%s' "$scopes" | tr ' ' '\n' | sed '/^$/d' | sed 's/^/  /'
else
    echo "FAIL: sign-in failed" >&2
    printf '%s\n' "$result" | sed -n 's/^error /  /p' >&2
    exit 1
fi