#!/bin/bash
# Publish ActiveBlue AI to a local APT repository
# Run this on the repository host after build_deb.sh
set -euo pipefail

SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
VERSION=$(cat "$SCRIPT_DIR/VERSION" 2>/dev/null || echo "0.1.0")
PKG_NAME="activeblue-ai"
DEB_FILE="$SCRIPT_DIR/dist/${PKG_NAME}_${VERSION}_all.deb"

# APT repo configuration
REPO_ROOT="${REPO_ROOT:-/srv/apt-repo}"
REPO_DIST="${REPO_DIST:-stable}"
REPO_COMP="${REPO_COMP:-main}"
REPO_ARCH="${REPO_ARCH:-all}"
GPG_KEY="${GPG_KEY:-}"

if [ ! -f "$DEB_FILE" ]; then
    echo "ERROR: .deb not found at $DEB_FILE" >&2
    echo "Run ./build_deb.sh first." >&2
    exit 1
fi

if ! command -v dpkg-scanpackages &>/dev/null; then
    echo "Installing dpkg-dev..."
    sudo apt-get install -y dpkg-dev apt-utils
fi

# Create repo structure
POOL_DIR="$REPO_ROOT/pool/$REPO_DIST/$REPO_COMP"
DISTS_DIR="$REPO_ROOT/dists/$REPO_DIST/$REPO_COMP/binary-$REPO_ARCH"
mkdir -p "$POOL_DIR" "$DISTS_DIR"

# Copy .deb to pool
cp -v "$DEB_FILE" "$POOL_DIR/"

# Generate Packages index
cd "$REPO_ROOT"
dpkg-scanpackages "pool/$REPO_DIST/$REPO_COMP" /dev/null > "dists/$REPO_DIST/$REPO_COMP/binary-$REPO_ARCH/Packages"
gzip -9 -c "dists/$REPO_DIST/$REPO_COMP/binary-$REPO_ARCH/Packages" > \
    "dists/$REPO_DIST/$REPO_COMP/binary-$REPO_ARCH/Packages.gz"

# Generate Release file
SUITE="$REPO_DIST"
DATE=$(date -uR)
cat > "dists/$REPO_DIST/Release" <<RELEASE
Origin: ActiveBlue
Label: ActiveBlue AI
Suite: $SUITE
Version: $VERSION
Codename: $REPO_DIST
Architectures: $REPO_ARCH
Components: $REPO_COMP
Description: ActiveBlue AI APT repository
Date: $DATE
RELEASE

# Add checksums
{
    echo "MD5Sum:"
    find "dists/$REPO_DIST/$REPO_COMP" -type f | while read f; do
        rel="${f#dists/$REPO_DIST/}"
        md5=$(md5sum "$f" | cut -d' ' -f1)
        size=$(stat -c%s "$f")
        echo " $md5 $size $rel"
    done
    echo "SHA256:"
    find "dists/$REPO_DIST/$REPO_COMP" -type f | while read f; do
        rel="${f#dists/$REPO_DIST/}"
        sha=$(sha256sum "$f" | cut -d' ' -f1)
        size=$(stat -c%s "$f")
        echo " $sha $size $rel"
    done
} >> "dists/$REPO_DIST/Release"

# Sign with GPG if key provided
if [ -n "$GPG_KEY" ]; then
    gpg --default-key "$GPG_KEY" --armor --detach-sign \
        -o "dists/$REPO_DIST/Release.gpg" "dists/$REPO_DIST/Release"
    gpg --default-key "$GPG_KEY" --clearsign \
        -o "dists/$REPO_DIST/InRelease" "dists/$REPO_DIST/Release"
    echo "Release signed with GPG key: $GPG_KEY"
else
    echo "WARNING: No GPG_KEY set — repository is unsigned."
    echo "Set GPG_KEY=<key-id> to sign the release."
fi

echo ""
echo "Repository published to: $REPO_ROOT"
echo ""
echo "To use this repository, add to /etc/apt/sources.list.d/activeblue.list:"
echo "  deb [trusted=yes] http://<your-server>/apt-repo $REPO_DIST $REPO_COMP"
echo ""
echo "Then:"
echo "  sudo apt-get update"
echo "  sudo apt-get install activeblue-ai"