#!/bin/sh
# tx9 installer -- served by https://tx9.col-agents.com/install (decision 10,
# docs/tx9-cli-design.md; site/ is the Cloudflare Worker that serves it).
#
#   curl -fsSL https://tx9.col-agents.com/install | sh
#
# Detects OS/arch, resolves the current release version from the site,
# downloads the matching tx9 binary + its checksums.txt from R2 (via the
# site's /releases/<version>/ routes), verifies the checksum, and installs
# to ~/.local/bin/tx9 (override with TX9_INSTALL_DIR).
#
# Asset naming is the one invariant this script shares with
# internal/selfupdate.AssetName, the Makefile's `dist` target,
# .depot/workflows/release.yml, and site/src/index.ts: plain, uncompressed
# executables named tx9_<os>_<arch>, verified against a checksums.txt in
# `sha256sum` output format ("<64-hex-digest>  <filename>" per line).
#
# Deliberately plain POSIX sh + curl: no jq, no JSON parsing -- the site
# serves /releases/latest as a bare version string, and versioned asset
# URLs are plain paths.
set -eu

ORIGIN="${TX9_ORIGIN:-https://tx9.col-agents.com}"
INSTALL_DIR="${TX9_INSTALL_DIR:-$HOME/.local/bin}"

log() {
  printf 'tx9-install: %s\n' "$*" >&2
}

die() {
  log "$*"
  exit 1
}

need() {
  command -v "$1" >/dev/null 2>&1 || die "'$1' is required to install tx9"
}

detect_os() {
  case "$(uname -s)" in
    Linux) echo linux ;;
    Darwin) echo darwin ;;
    *) die "unsupported OS: $(uname -s) (tx9 currently ships Linux and macOS binaries)" ;;
  esac
}

detect_arch() {
  case "$(uname -m)" in
    x86_64 | amd64) echo amd64 ;;
    aarch64 | arm64) echo arm64 ;;
    *) die "unsupported architecture: $(uname -m) (tx9 currently ships amd64 and arm64 binaries)" ;;
  esac
}

need curl
need uname
need mktemp
need mkdir
need chmod
need mv
need awk

os=$(detect_os)
arch=$(detect_arch)
asset="tx9_${os}_${arch}"

tmpdir=$(mktemp -d)
trap 'rm -rf "$tmpdir"' EXIT INT TERM HUP

log "resolving latest version..."
version=$(curl -fsSL "${ORIGIN}/releases/latest") \
  || die "could not resolve the latest version from ${ORIGIN}/releases/latest (no release published yet?)"
# Strict X.Y.Z, mirroring site/src/index.ts's VERSION_RE — anything else
# (including dot-only strings like "..", which would path-traverse the
# URL) is rejected before it reaches a URL: only digits and dots, no
# leading/trailing/adjacent dots, and exactly two dots.
case "$version" in
  *[!0-9.]* | "" | .* | *. | *..* | *.*.*.*)
    die "unexpected version string from ${ORIGIN}/releases/latest: '${version}'" ;;
  *.*.*) ;;
  *) die "unexpected version string from ${ORIGIN}/releases/latest: '${version}'" ;;
esac

base_url="${ORIGIN}/releases/${version}"
asset_url="${base_url}/${asset}"
checksums_url="${base_url}/checksums.txt"

log "downloading ${asset} ${version}..."
if ! curl -fsSL "$asset_url" -o "$tmpdir/$asset"; then
  die "download failed: $asset_url (unsupported platform, or a partially published release)"
fi

log "downloading checksums.txt..."
if ! curl -fsSL "$checksums_url" -o "$tmpdir/checksums.txt"; then
  die "download failed: $checksums_url"
fi

expected=$(awk -v want="$asset" '$2 == want { print $1; found=1 } END { if (!found) exit 1 }' "$tmpdir/checksums.txt") \
  || die "no checksum entry for ${asset} in checksums.txt"

if command -v sha256sum >/dev/null 2>&1; then
  actual=$(sha256sum "$tmpdir/$asset" | awk '{ print $1 }')
elif command -v shasum >/dev/null 2>&1; then
  actual=$(shasum -a 256 "$tmpdir/$asset" | awk '{ print $1 }')
else
  die "neither sha256sum nor shasum found; cannot verify ${asset} (install them, or download and verify manually)"
fi

[ "$actual" = "$expected" ] || die "checksum mismatch for ${asset}: got ${actual}, want ${expected} (not installing)"

mkdir -p "$INSTALL_DIR"
chmod 0755 "$tmpdir/$asset"
mv "$tmpdir/$asset" "$INSTALL_DIR/tx9"

log "installed tx9 to ${INSTALL_DIR}/tx9"

case ":${PATH}:" in
  *":${INSTALL_DIR}:"*) ;;
  *)
    log "note: ${INSTALL_DIR} is not on your PATH. Add it to your shell profile, e.g.:"
    log "  export PATH=\"${INSTALL_DIR}:\$PATH\""
    ;;
esac

if installed=$("$INSTALL_DIR/tx9" version 2>/dev/null); then
  log "tx9 ${installed} ready"
else
  log "installed, but 'tx9 version' did not run cleanly -- check ${INSTALL_DIR}/tx9 manually"
fi