#!/usr/bin/env bash
set -euo pipefail

LOG=/tmp/sovran-install.log
exec > >(tee -a "$LOG") 2>&1

export PATH=/run/current-system/sw/bin:$PATH

# Changed to 2TB cutoff
BYTES_2TB=$((2 * 1024 * 1024 * 1024 * 1024))
LOGO="/etc/sovran/logo.png"

human_size() {
  numfmt --to=iec --suffix=B "$1"
}

# ── 1. WELCOME & ROLE SELECTION ──────────────────────────────────────────

ROLE=$(zenity --list --radiolist \
  --window-icon="$LOGO" \
  --width=1000 --height=400 \
  --title="Welcome to Sovran SystemsOS" \
  --text="<span font='36' weight='heavy'>Sovran Systems</span>\n<span font='16' style='italic' foreground='#aaaaaa'>Be Digitally Sovereign</span>\n\nPlease select your preferred installation type:" \
  --print-column=3 \
  --column="Select" --column="Logo" --column="Role" --column="Description" \
  TRUE "🖥️" "Server+Desktop" "Gives you the full Sovereign Experience. A beautiful, easy-to-use, powerful daily driver desktop computer plus your very own cloud, website, secure messaging, video calling, password manager, and full Bitcoin node with Bitcoin Lightning and non-KYC buying and selling." \
  FALSE "💻" "Desktop Only" "The same beautiful, easy-to-use desktop experience, but just the desktop without the background server applications." \
  FALSE "₿" "Node (Bitcoin-only)" "Full Bitcoin node with Bitcoin Lightning and non-KYC buying and selling." || true)

if [ -z "$ROLE" ]; then
  zenity --error --window-icon="$LOGO" --text="Installation cancelled."
  exit 1
fi

# ── 2. FETCH DISKS ───────────────────────────────────────────────────────

# Filter out USB drives and loop/cdrom devices so it doesn't try to install to the installation media
mapfile -t DISKS < <(lsblk -b -dno NAME,SIZE,TYPE,RO,TRAN -e 7,11 | awk '$3=="disk" && $4=="0" && $5!="usb" {print $1":"$2}')

if [ "${#DISKS[@]}" -eq 0 ]; then
  zenity --error --window-icon="$LOGO" --text="No valid internal drives found. (USB drives are ignored)"
  exit 1
fi

IFS=$'\n' DISKS_SORTED=($(printf "%s\n" "${DISKS[@]}" | sort -t: -k2,2n))
unset IFS

BOOT_DISK="${DISKS_SORTED[0]%%:*}"
BOOT_SIZE="${DISKS_SORTED[0]##*:}"

DATA_DISK=""
DATA_SIZE=""

if [ "${#DISKS_SORTED[@]}" -ge 2 ]; then
  DATA_DISK="${DISKS_SORTED[-1]%%:*}"
  DATA_SIZE="${DISKS_SORTED[-1]##*:}"
fi

# Updated to check against 2TB
if [ -n "$DATA_DISK" ] && [ "$DATA_SIZE" -lt "$BYTES_2TB" ]; then
  zenity --warning --window-icon="$LOGO" --text="Second disk detected (${DATA_DISK}), but it is smaller than 2TB.\n\nIt will NOT be used."
  DATA_DISK=""
  DATA_SIZE=""
fi

SUMMARY="Boot disk: /dev/${BOOT_DISK} ($(human_size "$BOOT_SIZE"))"
if [ -n "$DATA_DISK" ]; then
  SUMMARY="${SUMMARY}\nData disk: /dev/${DATA_DISK} ($(human_size "$DATA_SIZE"))"
else
  SUMMARY="${SUMMARY}\nData disk: none"
fi

CONFIRM=$(zenity --entry --window-icon="$LOGO" --text="WARNING: This will ERASE ALL DATA on:\n\n${SUMMARY}\n\nType ERASE to continue.")
if [ "$CONFIRM" != "ERASE" ]; then
  zenity --error --window-icon="$LOGO" --text="Install cancelled."
  exit 1
fi

BOOT_PATH="/dev/${BOOT_DISK}"
DATA_PATH=""
if [ -n "$DATA_DISK" ]; then
  DATA_PATH="/dev/${DATA_DISK}"
fi

# ── 3. PARTITION & FORMAT ─────────────────────────────────────────────────

# Run Disko to partition and format drives
# Use --arg (not --argstr) so device paths are passed as Nix string values correctly
(
  if [ -n "$DATA_PATH" ]; then
    disko --mode disko /etc/sovran/flake/iso/disko.nix \
      --arg device '"'"$BOOT_PATH"'"' \
      --arg dataDevice '"'"$DATA_PATH"'"'
  else
    disko --mode disko /etc/sovran/flake/iso/disko.nix \
      --arg device '"'"$BOOT_PATH"'"'
  fi
) 2>&1 | zenity --progress --pulsing \
  --window-icon="$LOGO" \
  --title="Partitioning Drives" \
  --text="Partitioning and formatting your drives...\n\nThis will take a moment." \
  --width=500 \
  --auto-close \
  --no-cancel

nixos-generate-config --root /mnt

cp /mnt/etc/nixos/hardware-configuration.nix /tmp/hardware-configuration.nix
rm -rf /mnt/etc/nixos/*
cp -a /etc/sovran/flake/* /mnt/etc/nixos/
cp /tmp/hardware-configuration.nix /mnt/etc/nixos/hardware-configuration.nix

# ── 4. APPLY ROLE STATE & TEMPLATE ───────────────────────────────────────

IS_SERVER="false"
IS_DESKTOP="false"
IS_NODE="false"

case "$ROLE" in
  "Server+Desktop") IS_SERVER="true" ;;
  "Desktop Only") IS_DESKTOP="true" ;;
  "Node (Bitcoin-only)") IS_NODE="true" ;;
esac

cat > /mnt/etc/nixos/role-state.nix <<EOF
# THIS FILE IS AUTO-GENERATED BY THE INSTALLER. DO NOT EDIT.
# To change your role later, edit custom.nix instead.
{ config, lib, ... }:
{
  sovran_systemsOS.roles.server_plus_desktop = lib.mkDefault ${IS_SERVER};
  sovran_systemsOS.roles.desktop = lib.mkDefault ${IS_DESKTOP};
  sovran_systemsOS.roles.node = lib.mkDefault ${IS_NODE};
}
EOF

# Copy the pristine custom.template.nix for the user to edit
cp /mnt/etc/nixos/custom.template.nix /mnt/etc/nixos/custom.nix

# ── 5. VERIFY FILES BEFORE INSTALL ───────────────────────────────────────

# Sanity check: ensure role-state.nix and custom.nix exist before calling nixos-install
for f in /mnt/etc/nixos/role-state.nix /mnt/etc/nixos/custom.nix; do
  if [ ! -f "$f" ]; then
    zenity --error --window-icon="$LOGO" --width=500 \
      --title="Installation Error" \
      --text="<b>A required file is missing:</b>\n\n<tt>${f}</tt>\n\nThe installation cannot continue. Please check the log at <tt>${LOG}</tt> and try again."
    exit 1
  fi
done

# ── 6. FINAL INSTALL & REBOOT ────────────────────────────────────────────

nixos-install --root /mnt --flake /mnt/etc/nixos#nixos 2>&1 | \
  zenity --progress --pulsing \
    --window-icon="$LOGO" \
    --title="Installing Sovran SystemsOS" \
    --text="Installing your system...\n\nThis may take 20–40 minutes depending on your internet speed.\nPlease do not turn off your computer." \
    --width=500 \
    --auto-close \
    --no-cancel

zenity --info --width=600 --title="INSTALLATION COMPLETE! 🎉 PLEASE READ" --text="<b><span size='large'>Installation Successful!</span></b>

Before you reboot, please write down your main login details:

<b>Username:</b> free
<b>Password:</b> free

🚨 <b>CRITICAL:</b> Do not lose this password! If you forget this, you will be permanently locked out of your computer.

📁 <b>Other Passwords:</b> Once the system reboots, it will finish building your forts and generate all the passwords for your apps (Nextcloud, Bitcoin, Matrix, etc.). It will save them in a secure PDF in your <b>Documents</b> folder.

Click OK to reboot into your new system!"

reboot