#!/usr/bin/env bash
#
# Builds a .rpm package as part of the bundling process.
#
# Required environment variables:
#   - WORKSPACE_ROOT_DIR: The root directory of the Cargo workspace.
#   - DIST_DIR: A temporary directory we can use for staging files as we build the package.
#   - OUT_DIR: The directory into which we should place the final package.
#   - CARGO_TARGET_OUTPUT_DIR: The cargo target directory containing build output.
#   - RELEASE_CHANNEL: The release channel we're bundling (e.g.: "dev").
#   - BUNDLE_ID: The app ID for the bundle (e.g.: "dev.galaxy.GalaxyDev").
#   - EXECUTABLE_PATH: The path to the compiled executable we want to install.
#   - BINARY_NAME: The name that the compiled executable should have on the target machine.
#   - ARTIFACT: Which artifact to build: app or cli.

set -e

ARTIFACT="${ARTIFACT:-app}"
source "$WORKSPACE_ROOT_DIR/script/linux/package_metadata"

BUILD_ARCH="${BUILD_ARCH:-$(uname -m)}"
if [ "$BUILD_ARCH" = "aarch64" ]; then
  ARCH="aarch64"
else
  ARCH="x86_64"
fi

RPMBUILD_DIR="$DIST_DIR/rpmbuild"

FULL_PACKAGE_NAME="$PACKAGE_NAME-$ARCH"
PKGDIR="$DIST_DIR/rpmpkg/$FULL_PACKAGE_NAME"

cleanup() {
  # Delete the rpmbuild directory where the build took place.
  if [ -d "$RPMBUILD_DIR" ]; then
    rm -rf "$RPMBUILD_DIR"
  fi
}

# Run cleanup() when the script terminates (whether it succeeded or failed).
trap cleanup EXIT

# Construct a directory that contains the build tree.
rm -rf "$RPMBUILD_DIR"
mkdir -p "$RPMBUILD_DIR"/{SPEC,RPMS}

# Move the RPM-specific package metadata into the package directory.
VERSION="$GIT_RELEASE_TAG"
RELEASE="1"
sed \
    "s#@@PACKAGE_NAME@@#$PACKAGE_NAME#g; \
     s#@@CHANNEL_SUFFIX@@#$CHANNEL_SUFFIX#g; \
     s#@@BINARY_NAME@@#$BINARY_NAME#g; \
     s#@@GALAXY_AI_COMMAND_NAME@@#$GALAXY_AI_COMMAND_NAME#g; \
     s#@@GALAXY_CONTROL_COMMAND_NAME@@#$GALAXY_CONTROL_COMMAND_NAME#g; \
     s#@@VERSION@@#$VERSION#g; \
     s#@@RELEASE@@#$RELEASE#g; \
     s#@@ARCH@@#$ARCH#g; \
     s#@@WORKSPACEROOT@@#$WORKSPACE_ROOT_DIR#g; \
     s#@@BUNDLEID@@#$BUNDLE_ID#g; \
     s#@@REPO_NAME@@#$REPO_NAME#g; \
     s#@@RELEASE_CHANNEL@@#$RELEASE_CHANNEL#g" \
    < "$WORKSPACE_ROOT_DIR/resources/linux/rpm/$ARTIFACT/warp.spec.template" \
    > "$RPMBUILD_DIR/SPEC/warp.spec"

# Build the actual package.
fakeroot rpmbuild -v -bb "$RPMBUILD_DIR/SPEC/warp.spec" --target="$ARCH" --define "_topdir $RPMBUILD_DIR"

# Copy the package to the output directory.
RPM_NAME="$PACKAGE_NAME-$VERSION-$RELEASE.$ARCH.rpm"
cp "$RPMBUILD_DIR/RPMS/$ARCH/$RPM_NAME" "$OUT_DIR"

# If we're running on GitHub, sign the package using our signing key that
# should have already been added to the gpg-agent with a preset passphrase.
if [ "${GITHUB_ACTIONS}" == "true" ]; then
  # Import our signing key's public key into rpm so the signature can be
  # verified.
  sudo rpm --import https://releases.warp.dev/linux/keys/warp.asc

  # We use batch mode with tty-based pin entry to ensure that the build doesn't
  # hang waiting on user input if, for some reason, we failed to preset the
  # passphrase for the signing key in the gpg-agent cache.
  #
  # Additionally, until we know that this works, don't let an error here fail
  # the build.
  rpmsign \
    --verbose \
    --addsign --key-id "linux-maintainers@warp.dev" \
    --define "_gpg_sign_cmd_extra_args --batch --yes --pinentry-mode loopback" --define "_gpg_digest_algo sha256" \
    "$OUT_DIR/$RPM_NAME" \
    || true
fi

echo "Successfully built .rpm package at $OUT_DIR/$RPM_NAME!"