#!/usr/bin/env bash
# derive-gitlab.sh — 从 git origin 远程派生 GitLab 凭据并回填 .env.local
#
# 用法: bash derive-gitlab.sh [.env.local 路径，默认 .env.local]
#
# 派生字段:
#   GITLAB_API_URL    = <scheme>://<host>/api/v3
#   GITLAB_PROJECT_ID = 通过 GitLab API（GET /projects?search=...）解析得到的项目数字 ID
#                       要求 GITLAB_TOKEN 已填且有效；token 缺失 / 验证失败 / 未匹配时留 TBD
#
# 仅当字段值为 TBD(A5 自动补) 或空时回填；用户手填值不动。
# 仅支持 http(s) origin URL；其他协议（ssh / git@）跳过。
# GITLAB_TOKEN 不派生，留给用户手填。
#
# 退出码:
#   0 = 派生完成或主动跳过（origin 不存在 / 协议不支持）
#   2 = .env.local 路径错

set -uo pipefail

ENV_FILE=${1:-.env.local}
[ -f "$ENV_FILE" ] || { echo "derive-gitlab.sh: env file not found: $ENV_FILE" >&2; exit 2; }

URL=$(git remote get-url origin 2>/dev/null || true)
if [ -z "$URL" ]; then
  echo "derive-gitlab.sh: 未配置 origin 远程，GITLAB_* 留给用户手填" >&2
  exit 0
fi

case "$URL" in
  https://*) SCHEME=https ;;
  http://*)  SCHEME=http ;;
  *)
    echo "derive-gitlab.sh: origin 不是 http(s) URL ($URL)，跳过派生" >&2
    exit 0
    ;;
esac

REST=${URL#${SCHEME}://}
HOST=${REST%%/*}
PATH_RAW=${REST#*/}
PATH_RAW=${PATH_RAW%.git}
REPO_NAME=$(basename "$PATH_RAW")

API_URL="${SCHEME}://${HOST}/api/v3"

update_field() {
  local key=$1 newval=$2
  local line
  line=$(grep -E "^${key}=" "$ENV_FILE" | head -1)
  if [ -z "$line" ]; then
    echo "  ${key} = (.env.local 中无此行，跳过)" >&2
    return
  fi
  local current=${line#${key}=}
  # 剥外层单/双引号再比较，模板里 TBD(A5 自动补) 因含空格/括号必须加引号才能被 source
  local stripped=$current
  case "$stripped" in
    \'*\') stripped=${stripped#\'}; stripped=${stripped%\'} ;;
    \"*\") stripped=${stripped#\"}; stripped=${stripped%\"} ;;
  esac
  if [ -z "$stripped" ] || [ "$stripped" = "TBD(A5 自动补)" ]; then
    sed -i.bak -E "s|^${key}=.*$|${key}=${newval}|" "$ENV_FILE" && rm -f "${ENV_FILE}.bak"
    echo "  ${key} = ${newval}  [已派生填入]"
  elif [ "$stripped" = "$newval" ]; then
    echo "  ${key} = ${newval}  [已是派生值，无需更新]"
  else
    echo "  ${key} = ${stripped}  [保留用户手填，未覆盖派生值 ${newval}]"
  fi
}

report_token() {
  local key=GITLAB_TOKEN
  local line
  line=$(grep -E "^${key}=" "$ENV_FILE" | head -1)
  if [ -z "$line" ]; then
    echo "  ${key} = (.env.local 中无此行，跳过)" >&2
    return
  fi
  local current=${line#${key}=}
  local stripped=$current
  case "$stripped" in
    \'*\') stripped=${stripped#\'}; stripped=${stripped%\'} ;;
    \"*\") stripped=${stripped#\"}; stripped=${stripped%\"} ;;
  esac
  case "$stripped" in
    ""|"【人工填写："*|"TBD"*)
      echo "  ${key} = ${stripped}  [待人工填写：GitLab Profile → Account → Private token]"
      ;;
    *)
      local masked
      if [ ${#stripped} -le 8 ]; then
        masked=$(printf '%*s' ${#stripped} '' | tr ' ' '*')
      else
        masked="${stripped:0:4}$(printf '%*s' $((${#stripped}-8)) '' | tr ' ' '*')${stripped: -4}"
      fi
      echo "  ${key} = ${masked}  [已填入，长度 ${#stripped}]"
      ;;
  esac
}

echo "derive-gitlab.sh: 从 origin ($URL) 派生 GitLab 凭据："
update_field GITLAB_API_URL "$API_URL"

# GITLAB_PROJECT_ID：通过 GitLab API 解析数字 ID（要求 token 已填且有效）
TOKEN_LINE=$(grep -E '^GITLAB_TOKEN=' "$ENV_FILE" | head -1)
TOKEN_VAL=${TOKEN_LINE#GITLAB_TOKEN=}
case "$TOKEN_VAL" in
  \'*\') TOKEN_VAL=${TOKEN_VAL#\'}; TOKEN_VAL=${TOKEN_VAL%\'} ;;
  \"*\") TOKEN_VAL=${TOKEN_VAL#\"}; TOKEN_VAL=${TOKEN_VAL%\"} ;;
esac

case "$TOKEN_VAL" in
  ""|"【人工填写："*|"TBD"*)
    echo "  GITLAB_PROJECT_ID = TBD  [token 未填，跳过 API 解析；填完 token 后重跑此脚本]"
    ;;
  *)
    USER_HTTP=$(curl -sS -o /dev/null -w '%{http_code}' --header "PRIVATE-TOKEN: $TOKEN_VAL" "$API_URL/user" 2>/dev/null || echo "000")
    if [ "$USER_HTTP" != "200" ]; then
      echo "  GITLAB_PROJECT_ID = TBD  [token 验证失败 HTTP $USER_HTTP，留 TBD 待人工确认]"
    else
      SEARCH_RESP=$(curl -sS --header "PRIVATE-TOKEN: $TOKEN_VAL" \
        "$API_URL/projects?search=$REPO_NAME&simple=true&per_page=50" 2>/dev/null || echo "[]")
      NUMERIC_ID=$(echo "$SEARCH_RESP" | jq -r --arg p "$PATH_RAW" \
        '.[] | select(.path_with_namespace == $p) | .id' 2>/dev/null | head -1)
      if [ -n "$NUMERIC_ID" ]; then
        update_field GITLAB_PROJECT_ID "$NUMERIC_ID"
      else
        echo "  GITLAB_PROJECT_ID = TBD  [API 未匹配 path_with_namespace=$PATH_RAW，请到 GitLab 项目设置页查数字 ID 后填入]"
      fi
    fi
    ;;
esac

report_token