#!/usr/bin/env bash
set -euo pipefail

usage() {
  echo "Usage: $0 <build-bin-dir> <output-dir> <version>" >&2
  echo "Set ALLOW_DIRTY=1 only for an explicitly marked development artifact." >&2
  exit 2
}

[[ $# -eq 3 ]] || usage

source_root=$(git rev-parse --show-toplevel)
build_bin=$(realpath "$1")
output_dir=$(realpath -m "$2")
version=$3

[[ $version =~ ^[0-9A-Za-z][0-9A-Za-z._-]*$ ]] || { echo "Invalid version label" >&2; exit 2; }
[[ -x "$build_bin/monzerod" ]] || { echo "Missing executable: $build_bin/monzerod" >&2; exit 2; }
[[ -x "$build_bin/monzero-wallet-cli" ]] || { echo "Missing executable: $build_bin/monzero-wallet-cli" >&2; exit 2; }

source_commit=$(git -C "$source_root" rev-parse HEAD)
source_epoch=${SOURCE_DATE_EPOCH:-$(git -C "$source_root" show -s --format=%ct "$source_commit")}
[[ $source_epoch =~ ^[0-9]+$ ]] || { echo "SOURCE_DATE_EPOCH must be an integer" >&2; exit 2; }

dirty=false
if [[ -n $(git -C "$source_root" status --porcelain --untracked-files=normal) ]]; then
  dirty=true
  [[ ${ALLOW_DIRTY:-0} == 1 ]] || {
    echo "Refusing to package a dirty source tree. Commit the reviewed baseline first." >&2
    exit 1
  }
  version="${version}-development-dirty"
fi

package_name="monzero-${version}-linux-x86_64"
mkdir -p "$output_dir"
work_dir=$(mktemp -d "${TMPDIR:-/tmp}/monzero-package.XXXXXX")
trap 'rm -rf -- "$work_dir"' EXIT
package_dir="$work_dir/$package_name"
mkdir -p "$package_dir"

install -m 0755 "$build_bin/monzerod" "$package_dir/monzerod"
install -m 0755 "$build_bin/monzero-wallet-cli" "$package_dir/monzero-wallet-cli"
for optional in monzero-wallet-rpc monzero-gen-ssl-cert; do
  [[ -x "$build_bin/$optional" ]] && install -m 0755 "$build_bin/$optional" "$package_dir/$optional"
done

install -m 0755 "$source_root/start-monzerod.sh" "$package_dir/start-monzerod.sh"
install -m 0755 "$source_root/start-monzero-wallet-cli.sh" "$package_dir/start-monzero-wallet-cli.sh"
install -m 0755 "$source_root/start-monzero-miner.sh" "$package_dir/start-monzero-miner.sh"
install -m 0755 "$source_root/stop-monzero-miner.sh" "$package_dir/stop-monzero-miner.sh"
install -m 0644 "$source_root/LICENSE" "$package_dir/LICENSE"
install -m 0644 "$source_root/MONZERO_CHAIN_SPEC.md" "$package_dir/MONZERO_CHAIN_SPEC.md"
install -m 0644 "$source_root/docs/RELEASE_CHECKLIST.md" "$package_dir/RELEASE_CHECKLIST.md"

{
  echo "package=$package_name"
  echo "source_commit=$source_commit"
  echo "source_date_epoch=$source_epoch"
  echo "source_tree_dirty=$dirty"
  echo "binary_build_reproducibility=unverified"
  echo "assets_consensus_enabled=false"
  echo "native_ticker=XMZ"
} > "$package_dir/BUILD-MANIFEST.txt"

(
  cd "$package_dir"
  find . -maxdepth 1 -type f ! -name SHA256SUMS -printf '%P\n' \
    | LC_ALL=C sort \
    | xargs -r sha256sum > SHA256SUMS
  sha256sum -c SHA256SUMS
)

archive="$output_dir/$package_name.tar.gz"
tar --sort=name \
  --mtime="@$source_epoch" \
  --owner=0 --group=0 --numeric-owner \
  --pax-option=delete=atime,delete=ctime \
  -C "$work_dir" -cf - "$package_name" \
  | gzip -n -9 > "$archive"
sha256sum "$archive" > "$archive.sha256"

echo "$archive"
echo "$archive.sha256"