local.sh

#!/usr/bin/env bash

# Root is $DOTPATH if it exists, otherwise the directory of this script
root=$(realpath "${DOTPATH:-$(dirname "$(realpath "$0")")}")

# Source the bash_traceback.sh file
source "${root}/bash_traceback.sh"

###############################################################################
# Local settings and variables                                                #
###############################################################################

echo -e "🔑 \033[1;34mSetting local settings and variables...\033[0m"

# ensure signed in to 1Password
echo -e "🔐 \033[1;35mSigning in to 1Password...\033[0m"
if [[ -z "$(op account get 2>/dev/null)" ]]; then
	echo -e "ℹ️  \033[1;33mSigning in to 1Password for the first time, please follow the instructions and enable the SSH Agent in the 1Password app.\033[0m"
	op signin --help
	open /Applications/1Password.app
	eval "$(op account add --address my.1password.com)"
fi
eval "$(op signin)"

# Set up .gitconfig.private
echo -e "📝 \033[1;35mSetting up .gitconfig.private...\033[0m"
USERNAME=$(op user get --me | grep 'Name:' | sed 's/Name: *//')
GITHUB_USER=$(op read "op://Private/GitHub/username")
EMAIL=$(op read "op://Private/GitHub/email")
SIGNING_KEY=$(op read "op://Private/GitHub SSH Commit Signing Key/public key")
if [[ -n ${USERNAME} ]] && [[ -n ${EMAIL} ]] && [[ -n ${SIGNING_KEY} ]] && [[ -n ${GITHUB_USER} ]]; then
	git config --file="${HOME}"/.gitconfig.private user.name "${USERNAME}"
	git config --file="${HOME}"/.gitconfig.private user.email "${EMAIL}"
	git config --file="${HOME}"/.gitconfig.private user.signingKey "${SIGNING_KEY}"
	git config --file="${HOME}"/.gitconfig.private github.user "${GITHUB_USER}"
else
	echo -e "❌ \033[1;31mError: One or more values for .gitconfig are not set. Exiting.\033[0m"
	exit 1
fi

# Inject secrets into files using 1Password
if [[ ${1-} != "--yes" ]] && [[ ${1-} != "-y" ]]; then
	read -rp $'❓ \e[1;31mDo you want to inject secrets and overwrite all files from injectme/ to your home directory? (y/n)\e[0m ' INJECTME
else
	INJECTME="y"
fi
if [[ ${INJECTME} =~ ^[Yy]$ ]]; then
	echo -e "💉 \033[1;35mInjecting secrets into files using 1Password...\033[0m"
	find injectme -type f -name "*.tpl" | while read -r template; do
		# Get the output path by:
		# 1. Removing 'injectme/' prefix
		# 2. Removing '.tpl' suffix
		# 3. Prepending $HOME
		output="${HOME}/${template#injectme/}"
		output="${output%.tpl}"

		# Create the output directory if it doesn't exist
		mkdir -p "$(dirname "${output}")"

		# Inject the template
		op inject --in-file "${root}/${template}" --out-file "${output}" --force &>/dev/null
		echo -e "✅ \033[1;32mInjected ${template} -> ${output/#${HOME}/\~}\033[0m"
	done
fi

# Copy all files from copyme/ to $HOME
if [[ ${1-} != "--yes" ]] && [[ ${1-} != "-y" ]]; then
	read -rp $'❓ \e[1;31mDo you want to copy and overwrite all files from copyme/ to your home directory? (y/n)\e[0m ' COPYME
else
	COPYME="y"
fi
if [[ ${COPYME} =~ ^[Yy]$ ]]; then
	echo -e "📝 \033[1;35mCopying files from copyme/ to ${HOME}...\033[0m"
	rsync -av --exclude='.DS_Store' copyme/ "${HOME}" |
		grep -v "building file list ... done" |
		awk '/^$/ { exit } !/\/$/ { printf "✅ \033[1;32mCopied copyme/%s -> ~/%s\033[0m\n", $0, $0; }'
	# 1Password needs the permissions to be set to 700
	chmod 700 "${HOME}/.config/op"
	chmod 700 "${HOME}/.config/op/plugins/used_items"
fi

# iStat Menus
if [[ -z "$(defaults read com.bjango.istatmenus license6 2>/dev/null || echo '')" ]]; then
	echo -e "📝 \033[1;35mRegistering iStat Menus...\033[0m"
	ISTAT_EMAIL=$(op read "op://Private/iStat Menus 6/registered email")
	ISTAT_KEY=$(op read "op://Private/iStat Menus 6/license key")

	defaults write com.bjango.istatmenus _modelid -string "$(sysctl hw.model | sed 's/hw.model: //')"
	defaults write com.bjango.istatmenus installDateV6 -int "$(date -v +14d +%s)"
	/usr/libexec/PlistBuddy -c "Add :license6 dict" ~/Library/Preferences/com.bjango.istatmenus.plist
	/usr/libexec/PlistBuddy -c "Add :license6:email string ${ISTAT_EMAIL}" ~/Library/Preferences/com.bjango.istatmenus.plist
	/usr/libexec/PlistBuddy -c "Add :license6:serial string ${ISTAT_KEY}" ~/Library/Preferences/com.bjango.istatmenus.plist

	echo -e "✅ \033[1;32miStat Menus registered successfully.\033[0m"
else
	echo -e "✅ \033[1;32miStat Menus is already registered.\033[0m"
fi

# Charles
if [[ -z $(xmllint --xpath "string(//configuration/registrationConfiguration/key)" ~/Library/Preferences/com.xk72.charles.config) ]]; then
	echo -e "📝 \033[1;35mRegistering Charles...\033[0m"

	CHARLES_NAME=$(op read "op://Private/Charles/registered name")
	CHARLES_KEY=$(op read "op://Private/Charles/license key")
	# use printf instead of echo to avoid issues with newline characters in bash (not a problem with zsh)
	printf 'cd /configuration/registrationConfiguration/name\nset %s\nsave\n' "${CHARLES_NAME}" | xmllint --shell ~/Library/Preferences/com.xk72.charles.config >/dev/null
	printf 'cd /configuration/registrationConfiguration/key\nset %s\nsave\n' "${CHARLES_KEY}" | xmllint --shell ~/Library/Preferences/com.xk72.charles.config >/dev/null

	echo -e "✅ \033[1;32mCharles registered successfully.\033[0m"
else
	echo -e "✅ \033[1;32mCharles is already registered.\033[0m"
fi

# GitHub CLI
echo -e "📝 \033[1;35mSetting up GitHub CLI...\033[0m"
if [[ -z $(gh auth status 2>/dev/null || echo '') ]]; then
	gh auth login --git-protocol ssh --hostname github.com --skip-ssh-key --web
	echo -e "✅ \033[1;32mGitHub CLI is authenticated.\033[0m"
else
	echo -e "✅ \033[1;32mGitHub CLI is already authenticated.\033[0m"
fi

# Set computer name
confirm_set() {
	while true; do
		read -rp "$1" "$2"
		read -rp "❓ Set to '${!2}'? (y/n) "
		if [[ ${REPLY} =~ ^[Yy]$ ]]; then
			break
		fi
	done
}

set_computer_name() {
	local interactive=$1

	local uuid
	local serial
	local model
	uuid=$(system_profiler SPHardwareDataType | awk '/Hardware UUID/ {print $3}')
	serial=$(system_profiler SPHardwareDataType | awk '/Serial Number/ {print $4}')
	model=$(sysctl hw.model | sed 's/hw.model: //')

	echo -e "🔍 \033[1;35mLooking up computer name on 1Password for ${uuid}...\033[0m"
	local name
	name=$(op read "op://Private/Computers/${uuid}/name" 2>/dev/null || echo '')
	if [[ -z ${name} ]]; then
		echo -e "🤔 \033[1;33mNew computer, who dis? (UUID: ${uuid})\033[0m"
		if [[ ${interactive} != "true" ]]; then
			echo -e "💡 \033[1;33mRun in interactive mode to set a name for this computer\033[0m"
			return 0
		fi
		confirm_set "💻 Set the name for this computer: " name
		echo -e "💾 \033[1;35mSaving computer name to 1Password...\033[0m"
		op item edit --vault Private Computers "${uuid}.name[text]=${name}" &>/dev/null
		op item edit --vault Private Computers "${uuid}.serial number[text]=${serial}" &>/dev/null
		op item edit --vault Private Computers "${uuid}.model[text]=${model}" &>/dev/null
		echo -e "✅ \033[1;32mComputer name set and saved to 1Password\033[0m"
	fi

	current_name=$(scutil --get ComputerName)
	if [[ ${current_name} == "${name}" ]]; then
		echo -e "✅ \033[1;32mComputer name is already set to '${name}'.\033[0m"
		return 0
	fi

	echo -e "💾 \033[1;35mSetting computer name to '${name}'...\033[0m"
	sudo scutil --set ComputerName "${name}"
	sudo defaults write /Library/Preferences/SystemConfiguration/com.apple.smb.server NetBIOSName -string "${name}"
	# Replace spaces with underscores for host names
	name=$(echo "${name}" | tr ' ' '_')
	sudo scutil --set LocalHostName "${name}"
	sudo scutil --set HostName "${name}"
	echo -e "✅ \033[1;32mComputer name set\033[0m"
}

# Set interactive mode based on command line args
INTERACTIVE="true"
if [[ ${1-} == "-y" ]] || [[ ${1-} == "--yes" ]]; then
	INTERACTIVE="false"
fi

if [[ $(uname) == "Darwin" ]]; then
	set_computer_name "${INTERACTIVE}"
fi