#!/usr/bin/env bash
# frozen_string_literal: true
#
# bin/sync-upstream — automate upstream DocuSeal sync
#
# Usage:
#   bin/sync-upstream <tag>
#
# Example:
#   bin/sync-upstream 3.0.2
#
# Environment:
#   UPSTREAM_REMOTE  (default: upstream)
#   UPSTREAM_URL     (default: https://github.com/docusealco/docuseal.git)

set -euo pipefail

UPSTREAM_REMOTE="${UPSTREAM_REMOTE:-upstream}"
TAG="${1:-}"

if [ -z "$TAG" ]; then
  echo "Usage: $0 <tag>" >&2
  echo "  e.g. $0 3.0.2" >&2
  exit 1
fi

# Ensure rerere is on so recurring conflict resolutions are cached
git config rerere.enabled true
git config rerere.autoupdate true

echo "=== Fetching $UPSTREAM_REMOTE ==="
git fetch "$UPSTREAM_REMOTE" --tags

# Record the commit at the tag so we can verify later
TAG_COMMIT="$(git rev-parse --verify "$TAG^{commit}" 2>/dev/null || true)"
if [ -z "$TAG_COMMIT" ]; then
  echo "Tag $TAG not found. Double-check the tag name." >&2
  exit 1
fi

echo "=== Creating sync/upstream-$TAG from $TAG ==="
git checkout -b "sync/upstream-$TAG" "$TAG"

echo "=== Applying rebrand sweep ==="
bin/rebrand-sync

echo "=== Committing rebranded tree ==="
git add -A
if git diff --cached --quiet; then
  echo "Nothing to commit — rebrand-sync produced no changes."
else
  git commit -m "Apply WaboSign rebrand sweep to upstream $TAG"
fi

echo "=== Merging into master ==="
git checkout master
git merge --no-ff "sync/upstream-$TAG" -m "Merge upstream $TAG into master"

echo "=== Restoring WaboSign brand assets overwritten by merge ==="
# Merging an upstream tag may overwrite our brand files that rebrand-sync cannot
# protect (binary / opaque-image, they bypass the text sweep). The authoritative
# list lives in config/brand_assets.sha256 — derive it from there so a new brand
# file added to the baseline is automatically restored too. Restore from the
# pre-merge master (ORIG_HEAD).
RESTORED=()
mapfile -t BRAND_FILES < <(awk '!/^#/ && NF {print $2}' config/brand_assets.sha256)
for f in "${BRAND_FILES[@]}"; do
  if git show "ORIG_HEAD:$f" &>/dev/null; then
    git checkout ORIG_HEAD -- "$f"
    RESTORED+=("$f")
    echo "  restored: $f"
  fi
done

echo "=== Catching new upstream files (post-merge sweep) ==="
bin/rebrand-sync

echo "=== Verifying invariants ==="
# Both checks must pass before this sync can be considered clean. With
# `set -e` a failure already aborts, but wrap them so the operator/agent sees a
# clear remediation path and the half-merged tree is left in place to inspect.
if ! bin/rebrand-check; then
  echo "" >&2
  echo "!! rebrand-check failed: un-rebranded DocuSeal text survived the sweep." >&2
  echo "   Inspect the lines above; if a token must be preserved, add it to" >&2
  echo "   PRESERVE (bin/rebrand-sync) AND ALLOW_PATTERNS (bin/rebrand-check)." >&2
  echo "   The merge is left in place for you to fix; do NOT push until green." >&2
  exit 1
fi
if ! bin/fork-check; then
  echo "" >&2
  echo "!! fork-check failed: a fork invariant was broken by this merge." >&2
  echo "   Each violation above names the file + the reason (from" >&2
  echo "   config/fork_invariants.yml's why:). Typical fixes:" >&2
  echo "     - re-introduced gate    -> remove it" >&2
  echo "     - brand asset overwritten -> git checkout ORIG_HEAD -- <path>" >&2
  echo "     - new upstream feature  -> add a scoped invariant to the manifest" >&2
  echo "   The merge is left in place for you to fix; do NOT push until green." >&2
  exit 1
fi

if [ "${RUN_TESTS:-0}" = "1" ]; then
  echo "=== Running test suite (RUN_TESTS=1) ==="
  bundle exec rspec
fi

echo ""
echo "============================================================"
echo "Sync of $TAG complete. Invariants: rebrand-check + fork-check PASS."
echo "Brand assets restored: ${#RESTORED[@]}"
if [ "${RUN_TESTS:-0}" != "1" ]; then
  echo "Tests: not run (set RUN_TESTS=1 to run rspec, or rely on CI)."
fi
echo ""
echo "Remaining human-judgment review (see REBRANDING.md \"Human-judgment\"):"
echo "  - Does the rendered WaboSign 'W' mark look right?"
echo "  - Did upstream add a genuinely new feature/gate needing a fork policy call?"
echo "  - Do new upstream UI strings need rebranding nuance the sweep can't infer?"
echo ""
echo "Then: bundle install && yarn install, tag, and push:"
echo "  git tag wabosign-synced-with-$TAG && git push origin master --tags"
echo "============================================================"