<#  
    Atualiza C:\PilotDownloads\ com o conteúdo do repositório (branch main)
    https://gitea.magicis.com.br/PilotSupport/vlt-install e executa pilot_install.ps1

    Ajuste as variáveis $GitUser e $GitToken conforme necessário.
#>

# ========= CONFIGURAÇÃO DE USUÁRIO/TOKEN =========
$GitUser  = "ricardo.sarda"          # coloque aqui seu usuário do Gitea
$GitToken = "d6504f7d969c77a51dcbd5854a1f37f0a96398cd"        # coloque aqui o Personal Access Token do Gitea
# ================================================

$ErrorActionPreference = 'Stop'

# ===== Auto-desbloqueio (MOTW) =====
try {
  $scriptPath = $MyInvocation.MyCommand.Path
  if ($scriptPath -and (Test-Path -LiteralPath $scriptPath)) {
    Unblock-File -LiteralPath $scriptPath -ErrorAction SilentlyContinue
    # remove explicitamente o ADS se existir (não falha se não existir)
    Remove-Item -LiteralPath "$scriptPath`:Zone.Identifier" -Force -ErrorAction SilentlyContinue
  }
} catch {}

# ===== Configurações =====

$RepoUrl    = 'https://gitea.magicis.com.br/PilotSupport/vlt-install'
$Branch     = 'main'
$TargetDir  = 'C:\PilotDownloads'
$WorkDir    = Join-Path $env:TEMP 'vlt-install_repo'
$CopyLog    = Join-Path $env:TEMP 'vlt-install_copy.log'

function Write-Info($m){ Write-Host "[INFO ] $m" -ForegroundColor Cyan }
function Write-Ok($m)  { Write-Host "[ OK  ] $m" -ForegroundColor Green }
function Write-Warn($m){ Write-Host "[WARN ] $m" -ForegroundColor Yellow }
function Write-Err($m) { Write-Host "[ERRO ] $m" -ForegroundColor Red }

function Ensure-Dir([string]$Path){
  if (-not (Test-Path -LiteralPath $Path)) {
    New-Item -ItemType Directory -Path $Path -Force | Out-Null
  }
}

function Test-Winget { [bool](Get-Command winget -ErrorAction SilentlyContinue) }

function Ensure-Git-WithWinget {
  if (-not (Test-Winget)) {
    Write-Err "winget não encontrado. Instale o 'App Installer' da Microsoft Store."
    throw "winget ausente"
  }

  Write-Info "Verificando Git via winget..."
  $argsCommon = @('--accept-package-agreements','--accept-source-agreements','--silent')

  $gitInstalled = $false
  try {
    $list = winget list --id Git.Git -e @argsCommon 2>$null
    if ($list -match 'Git\s+Git') { $gitInstalled = $true }
  } catch { }

  if ($gitInstalled) {
    Write-Info "Atualizando Git (se necessário)..."
    & winget upgrade --id Git.Git -e @argsCommon | Out-Null
  } else {
    Write-Info "Instalando Git..."
    & winget install --id Git.Git -e @argsCommon | Out-Null
  }

  if (-not (Get-Command git -ErrorAction SilentlyContinue)) {
    $maybeGit = 'C:\Program Files\Git\cmd\git.exe'
    if (Test-Path $maybeGit) { $env:Path = "C:\Program Files\Git\cmd;$env:Path" }
  }

  $ver = git --version 2>$null
  if (-not $ver) { throw "Git não acessível após instalação/atualização." }
  Write-Ok "Git pronto: $ver"
}

function Get-BasicAuthHeader([string]$user,[string]$token){
  if (-not $user -or -not $token) { return $null }
  $bytes  = [Text.Encoding]::ASCII.GetBytes("$user`:$token")
  $base64 = [Convert]::ToBase64String($bytes)
  return "Authorization: Basic $base64"
}

function Get-GitCommonArgs {
  param([string]$AuthHeader)

  $args = @(
    '-c','credential.helper=',
    '-c','credential.interactive=never',
    '-c','core.askPass='
  )
  if ($AuthHeader) {
    $args += @('-c',"http.extraHeader=$AuthHeader")
  }
  return ,$args
}

try {
  Ensure-Git-WithWinget
  Ensure-Dir $TargetDir

  $AuthHeader = $null
  if ($GitUser -and $GitToken) {
    $AuthHeader = Get-BasicAuthHeader -user $GitUser -token $GitToken
    Write-Info "Usando autenticação com header."
  }

  $env:GIT_TERMINAL_PROMPT = '0'

  if (Test-Path (Join-Path $WorkDir '.git')) {
    Write-Info "Atualizando repositório em $WorkDir ..."
    Push-Location $WorkDir
    & git (Get-GitCommonArgs -AuthHeader $AuthHeader) fetch --all --prune
    & git (Get-GitCommonArgs -AuthHeader $AuthHeader) checkout $Branch
    & git (Get-GitCommonArgs -AuthHeader $AuthHeader) reset --hard "origin/$Branch"
    Pop-Location
  } else {
    Write-Info "Clonando repositório (branch $Branch) para $WorkDir ..."
    try { Remove-Item -LiteralPath $WorkDir -Recurse -Force -ErrorAction SilentlyContinue } catch { }
    Ensure-Dir $WorkDir
    & git (Get-GitCommonArgs -AuthHeader $AuthHeader) clone --depth 1 --branch $Branch $RepoUrl $WorkDir
    Write-Ok "Clone concluído."
  }

  Write-Info "Copiando arquivos para $TargetDir (sem espelhar)..."
  $rc = robocopy `
      $WorkDir `
      $TargetDir `
      * `
      /E /IS /IT /R:1 /W:1 /NFL /NDL /NP `
      /XD ".git" `
      /XF ".gitignore" ".gitattributes" `
      /LOG:$CopyLog

  if ($LASTEXITCODE -ge 8) {
    Write-Err "Falha ao copiar arquivos. Veja o log: $CopyLog"
    exit $LASTEXITCODE
  } else {
    Write-Ok "Cópia finalizada. (código robocopy: $LASTEXITCODE) Log: $CopyLog"
  }

  $InstallScript = Join-Path $TargetDir 'pilot_install.ps1'
  if (Test-Path -LiteralPath $InstallScript) {
    Write-Info "Executando $InstallScript ..."
    try { Unblock-File -LiteralPath $InstallScript -ErrorAction SilentlyContinue } catch { }
    $p = Start-Process -FilePath 'powershell.exe' -ArgumentList @(
      '-NoProfile','-ExecutionPolicy','Bypass','-File', $InstallScript
    ) -Wait -PassThru
    if ($p.ExitCode -ne 0) {
      Write-Err "pilot_install.ps1 retornou código $($p.ExitCode)."
      exit $p.ExitCode
    } else {
      Write-Ok "pilot_install.ps1 executado com sucesso."
    }
  } else {
    Write-Warn "Arquivo não encontrado: $InstallScript. Execução ignorada."
  }

  Write-Ok "Processo concluído."
  Stop-Process -Id $PID -Force

} catch {
  Write-Err ("Erro: " + $_.Exception.Message)
  exit 1
} finally {
  Remove-Item Env:\GIT_TERMINAL_PROMPT -ErrorAction SilentlyContinue
}
