#!/bin/bash

# Path: Scripts/base.sh

set -e

BLUE='\033[1;34m'
YELLOW='\033[1;33m'
GREEN='\033[1;32m'
RED='\033[1;31m'
NC='\033[0m'

DOTFILES_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
REPO_ROOT="$(dirname "$DOTFILES_DIR")"
source "$DOTFILES_DIR/lib/distro.sh"

echo -e "${BLUE}    LOG:${YELLOW} Initializing Base System Layer...${NC}"

# Confirm Architecture
ARCH=$(uname -m)
if [ "$ARCH" != "x86_64" ] && [ "$ARCH" != "aarch64" ] && [ "$ARCH" != "arm64" ]; then
    echo -e "${RED}    ERROR: Unsupported architecture: $ARCH${NC}"
    exit 1
fi

is_wsl() {
    [ -f /proc/version ] && grep -qEi "(Microsoft|WSL)" /proc/version
}

# Package Installation
PACKAGES=(
    curl wget git sudo
    zsh tmux
    unzip tar gzip
    build-essential
    openssl
    python bison mercurial
    ripgrep fd bat fzf jq
    btop httpie gnupg
    zoxide stow direnv
    bind nmap socat tcpdump net-tools
    strace gdb hexyl
    ninja-build libcurl4-openssl-dev
    just
)

FINAL_PACKAGES=()

for pkg in "${PACKAGES[@]}"; do
    case "$pkg" in
        "build-essential")
            if is_arch_family; then
                FINAL_PACKAGES+=(base-devel)
            elif is_debian_family; then
                FINAL_PACKAGES+=(build-essential)
            elif is_fedora_family; then
                FINAL_PACKAGES+=(gcc gcc-c++ make patch)
            elif is_macos; then
                :
            fi
            continue
            ;;
        "python")
            if is_arch_family; then
                FINAL_PACKAGES+=(python)
            elif is_debian_family; then
                FINAL_PACKAGES+=(python3 python3-pip python3-venv)
            elif is_fedora_family; then
                FINAL_PACKAGES+=(python3 python3-pip)
            elif is_macos; then
                FINAL_PACKAGES+=(python)
            fi
            continue
            ;;
        "fd")
            if is_arch_family; then
                FINAL_PACKAGES+=(fd)
            elif is_debian_family || is_fedora_family; then
                FINAL_PACKAGES+=(fd-find)
            fi
            continue
            ;;
        "bat")
            FINAL_PACKAGES+=(bat)
            continue
            ;;
        "openssl")
            if is_arch_family; then
                FINAL_PACKAGES+=(openssl)
            elif is_debian_family; then
                FINAL_PACKAGES+=(libssl-dev)
            elif is_fedora_family; then
                FINAL_PACKAGES+=(openssl openssl-devel)
            elif is_macos; then
                FINAL_PACKAGES+=(openssl@3)
            fi
            continue
            ;;
        "bind")
            if is_arch_family; then
                FINAL_PACKAGES+=(bind)
            elif is_debian_family; then
                FINAL_PACKAGES+=(dnsutils)
            elif is_fedora_family; then
                FINAL_PACKAGES+=(bind-utils)
            elif is_macos; then
                FINAL_PACKAGES+=(bind)
            fi
            continue
            ;;
        "ninja-build")
            if is_arch_family; then
                FINAL_PACKAGES+=(ninja)
            elif is_debian_family || is_fedora_family; then
                FINAL_PACKAGES+=(ninja-build)
            elif is_macos; then
                FINAL_PACKAGES+=(ninja)
            fi
            continue
            ;;
        "libcurl4-openssl-dev")
            if is_arch_family; then
                FINAL_PACKAGES+=(curl)
            elif is_debian_family; then
                FINAL_PACKAGES+=(libcurl4-openssl-dev)
            elif is_fedora_family; then
                FINAL_PACKAGES+=(libcurl-devel)
            elif is_macos; then
                FINAL_PACKAGES+=(curl)
            fi
            continue
            ;;
        "gnupg")
            if is_fedora_family; then
                FINAL_PACKAGES+=(gnupg2)
            elif is_macos; then
                FINAL_PACKAGES+=(gnupg)
            else
                FINAL_PACKAGES+=(gnupg)
            fi
            continue
            ;;
        *)
    esac

    FINAL_PACKAGES+=("$pkg")
done

if is_debian_family; then
    FINAL_PACKAGES+=(ca-certificates bsdmainutils pkg-config cmake)
fi

if is_fedora_family; then
    FINAL_PACKAGES+=(ca-certificates pkgconf-pkg-config cmake)
    FINAL_PACKAGES+=(R-core gcc-gfortran bzip2 bzip2-devel readline-devel sqlite sqlite-devel tk-devel libffi-devel xz xz-devel ncurses-devel zlib-devel findutils llvm)
fi

if is_macos; then
    FINAL_PACKAGES=(
        curl wget git zsh tmux unzip
        python bison mercurial
        ripgrep fd bat fzf jq
        btop httpie gnupg
        zoxide stow direnv
        bind nmap socat
        hexyl ninja just
    )
fi

echo -e "${BLUE}    LOG:${YELLOW} Installing: ${NC}${FINAL_PACKAGES[*]}"

install_status=0
install_packages "${FINAL_PACKAGES[@]}" || install_status=$?

if [ "$install_status" -eq 42 ]; then
    exit 0
elif [ "$install_status" -ne 0 ]; then
    exit "$install_status"
fi

if is_debian_family || is_fedora_family; then
    echo -e "${BLUE}    LOG:${YELLOW} Fixing fd/bat binary names when needed...${NC}"
    [ -f /usr/bin/fdfind ] && sudo ln -sf /usr/bin/fdfind /usr/local/bin/fd
    [ -f /usr/bin/batcat ] && sudo ln -sf /usr/bin/batcat /usr/local/bin/bat
fi

# Installing pinned repo-managed CLI binaries
bash "$REPO_ROOT/Scripts/bin/install.sh" --all

if ! command -v rclone &> /dev/null; then
    echo -e "${BLUE}    LOG:${YELLOW} Installing Rclone CLI...${NC}"

    if is_macos; then
        brew install rclone
    else

        case "$ARCH" in
            x86_64)
                RCLONE_ARCH="amd64"
                ;;
            aarch64|arm64)
                RCLONE_ARCH="arm64"
                ;;
        esac

        TEMP_DIR="$(mktemp -d)"
        RCLONE_ZIP="$TEMP_DIR/rclone.zip"

        curl -fLsS "https://downloads.rclone.org/rclone-current-linux-${RCLONE_ARCH}.zip" -o "$RCLONE_ZIP"
        unzip -q "$RCLONE_ZIP" -d "$TEMP_DIR"
        install -m 755 "$TEMP_DIR"/rclone-*-linux-"${RCLONE_ARCH}"/rclone "$HOME/.local/bin/rclone"
        rm -rf "$TEMP_DIR"
    fi
fi

if ! command -v earthly &> /dev/null; then
    echo -e "${BLUE}    LOG:${YELLOW} Installing Earthly CLI...${NC}"

    if is_macos; then
        brew install earthly
    else

        case "$ARCH" in
            x86_64)
                EARTHLY_ARCH="amd64"
                ;;
            aarch64|arm64)
                EARTHLY_ARCH="arm64"
                ;;
        esac

        curl -fLsS "https://github.com/earthly/earthly/releases/latest/download/earthly-linux-${EARTHLY_ARCH}" \
            -o "$HOME/.local/bin/earthly"
        chmod +x "$HOME/.local/bin/earthly"
    fi
fi

# Docker Installation
if command -v docker &> /dev/null; then
    echo -e "${GREEN}    LOG: Docker is already installed.${NC}"
else
    if is_wsl; then
        echo -e "${RED}    LOG: WSL Detected! Skipping Native Docker.${NC}"
        echo -e "${RED}    >>> Please install Docker Desktop on Windows.${NC}"
    elif is_macos; then
        echo -e "${YELLOW}    NOTE:${NC} Docker is not installed. Please install Docker Desktop for macOS manually."
    else
        echo -e "${BLUE}    LOG:${YELLOW} Installing Native Docker...${NC}"
        if is_arch_family; then
            sudo pacman -S --noconfirm --needed docker docker-compose
            sudo systemctl enable --now docker
        elif is_debian_family; then
            curl -fsSL https://get.docker.com | sh
        elif is_fedora_family; then
            if is_atomic_fedora; then
                echo -e "${YELLOW}    NOTE:${NC} Skipping native Docker auto-install on rpm-ostree systems."
                echo -e "${YELLOW}    NOTE:${NC} After reboot, install your preferred container runtime separately if needed."
            else
                sudo dnf install -y moby-engine docker-compose
                sudo systemctl enable --now docker
            fi
        fi

        # Add user to group
        if command -v getent >/dev/null 2>&1 && getent group docker >/dev/null 2>&1; then
            sudo usermod -aG docker $(whoami)
        fi
    fi
fi

# 4. Zsh & Configuration
if [ ! -d "$HOME/.oh-my-zsh" ]; then
    echo -e "${BLUE}    LOG:${YELLOW} Installing Oh My Zsh...${NC}"
    sh -c "$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)" "" --unattended
fi

# Plugins
ZSH_CUSTOM="${ZSH_CUSTOM:-$HOME/.oh-my-zsh/custom}"
mkdir -p "$ZSH_CUSTOM/plugins"
[ ! -d "$ZSH_CUSTOM/plugins/zsh-syntax-highlighting" ] && git clone https://github.com/zsh-users/zsh-syntax-highlighting.git "$ZSH_CUSTOM/plugins/zsh-syntax-highlighting"
[ ! -d "$ZSH_CUSTOM/plugins/zsh-autosuggestions" ] && git clone https://github.com/zsh-users/zsh-autosuggestions "$ZSH_CUSTOM/plugins/zsh-autosuggestions"

# 5. Git Credentials (WSL Bridge)
if is_wsl; then
    GCM_WIN="/mnt/c/Program Files/Git/mingw64/bin/git-credential-manager.exe"
    [ -f "$GCM_WIN" ] && git config --global credential.helper "! \"$GCM_WIN\""
else
    git config --global credential.helper 'cache --timeout=43200'
fi

# 6. Cleanup & Secrets
rm -f "$HOME/.zshrc" "$HOME/.zsh_aliases"
mkdir -p "$REPO_ROOT/Zsh"
touch "$REPO_ROOT/Zsh/.zsh_secrets"

# 7. Set Shell
TARGET_SHELL="$(command -v zsh)"
CURRENT_LOGIN_SHELL=""

if command -v getent >/dev/null 2>&1; then
    CURRENT_LOGIN_SHELL="$(getent passwd "$(whoami)" | cut -d: -f7)"
elif is_macos && command -v dscl >/dev/null 2>&1; then
    CURRENT_LOGIN_SHELL="$(dscl . -read "/Users/$(whoami)" UserShell 2>/dev/null | awk '{print $2}')"
fi

if [ "$CURRENT_LOGIN_SHELL" != "$TARGET_SHELL" ]; then
    if [ ! -t 0 ]; then
        echo -e "${YELLOW}    NOTE:${NC} Non-interactive session detected. Skipping login shell change to $TARGET_SHELL."
        echo -e "${YELLOW}    NOTE:${NC} Run 'chsh -s $TARGET_SHELL' manually later if you want zsh as your login shell."
    elif is_macos && command -v chsh >/dev/null 2>&1; then
        chsh -s "$TARGET_SHELL"
    elif command -v chsh >/dev/null 2>&1; then
        sudo chsh -s "$TARGET_SHELL" "$(whoami)"
    elif command -v usermod >/dev/null 2>&1; then
        sudo usermod -s "$TARGET_SHELL" "$(whoami)"
    else
        echo -e "${YELLOW}    NOTE:${NC} Could not find chsh/usermod. Please change your login shell to $TARGET_SHELL manually."
    fi
fi

echo -e "${GREEN}    LOG: Base System Setup Complete.${NC}"