#!/bin/bash -p

# omarchy:summary=Set the Omarchy package channel.
# omarchy:args=<stable|rc|edge|dev>
# omarchy:requires-sudo=true

if [[ $- != *p* ]]; then
  echo "Refusing an unsafe Bash startup for channel switching." >&2
  exit 126
fi
security_entrypoint=$(/usr/bin/readlink -e -- "${BASH_SOURCE[0]}") || exit 126
source "${security_entrypoint%/*}/omarchy-security-functions" || exit 126
omarchy_security_require_privileged_bash_startup || exit 126
set -euo pipefail
omarchy_security_sanitize_bash_environment "$0" "$@"
omarchy_security_require_source_root "$0"
user_path=$PATH
omarchy_security_revoke_sudo_timestamp || exit 1
omarchy_security_install_sudo_cleanup_traps
omarchy_security_enable_no_update_sudo

usage() { echo "Usage: omarchy-channel-set [stable|rc|edge|dev]"; }
fail() { echo "Error: $*" >&2; exit 1; }

confirm_dev() {
  cat <<'WARNING'

The dev channel links Omarchy directly to a checkout of the source in ~/omarchy.
It's exclusively intended for developers working on Omarchy itself.

WARNING

  gum confirm --default=false "Switch to dev channel?"
}

validate_dev_checkout() {
  local checkout="$1"

  if [[ -e $checkout && ! -d $checkout/.git ]]; then
    fail "$checkout already exists and is not a git checkout."
  fi

  if [[ -d $checkout/.git && ( ! -d $checkout/bin || ! -d $checkout/default || ! -d $checkout/shell ) ]]; then
    fail "$checkout is a git checkout, but it does not look like Omarchy."
  fi
}

link_dev_checkout() {
  local checkout="$1" required
  [[ -d $checkout/.git ]] || git clone https://github.com/basecamp/omarchy.git "$checkout"

  # Check the destination before changing /etc/omarchy.conf or sudo's path.
  # An existing checkout is not pulled automatically and may predate this policy.
  for required in bin/omarchy-security-functions bin/omarchy-update bin/omarchy-refresh-pacman default/omarchy/sudo-no-update/sudo; do
    if [[ ! -f $checkout/$required || ! -r $checkout/$required ||
      ( $required != "bin/omarchy-security-functions" && ! -x $checkout/$required ) ]]; then
      fail "Update the checkout before switching to dev; missing required update support in $required."
    fi
  done

  omarchy-dev-link "$checkout" --no-reboot
}

(( $# > 0 )) || { usage; exit 1; }

dev_checkout=""
channel="$1"
leaving_dev=0

case "$channel" in
  stable)
    pacman_channel=stable
    packages=(omarchy omarchy-settings)
    ;;
  rc)
    pacman_channel=rc
    packages=(omarchy omarchy-settings)
    ;;
  edge)
    pacman_channel=edge
    packages=(omarchy-dev omarchy-settings-dev)
    ;;
  dev)
    confirm_dev || { echo "Cancelled."; exit 0; }
    dev_checkout="$HOME/omarchy"
    validate_dev_checkout "$dev_checkout"
    pacman_channel=edge
    packages=(omarchy-dev omarchy-settings-dev)
    ;;
  *)
    echo "Unknown channel: $channel" >&2
    usage >&2
    exit 1
    ;;
esac

if [[ -z $dev_checkout && $OMARCHY_PATH != "/usr/share/omarchy" ]]; then
  leaving_dev=1
fi

if [[ -n $dev_checkout ]]; then
  link_dev_checkout "$dev_checkout"
  export OMARCHY_PATH="$dev_checkout"
  omarchy_security_enable_no_update_sudo
  omarchy-state set reboot-required
fi

omarchy-refresh-pacman "$pacman_channel" defer-hook
# --ask 4 accepts omarchy <-> omarchy-dev replacement prompts without file overwrites.
sudo env OMARCHY_UPDATE_PACMAN=1 pacman -S --needed --noconfirm --ask 4 "${packages[@]}"

if [[ -z $dev_checkout ]]; then
  omarchy-dev-unlink --no-reboot
  export OMARCHY_PATH=/usr/share/omarchy
  omarchy_security_enable_no_update_sudo

  if (( leaving_dev )); then
    omarchy-state set reboot-required
  fi
fi

OMARCHY_UPDATE_USER_PATH="$user_path" "$OMARCHY_PATH/bin/omarchy-update" -y

# No channel-owned privileged work follows the historical refresh hook.
omarchy_security_revoke_sudo_timestamp
PATH="$OMARCHY_PATH/default/omarchy/sudo-no-update:$user_path" \
  "$OMARCHY_PATH/bin/omarchy-refresh-pacman" "$pacman_channel" run-deferred