#!/bin/sh
# Installs `names`, the Logos Names command line, with the LEZ wallet built in.
#
#   curl -fsSL https://logos-names.wrapit.workers.dev/install.sh | sh
#
# Puts the binary in ~/.local/bin (set NAMES_INSTALL_DIR to change that) and its
# man pages in ~/.local/share/man/man1 (NAMES_MAN_DIR), each checked against the
# release signing key's signature (ssh-keygen -Y verify) and the published
# SHA-256, plus RISC Zero's prover r0vm from RISC Zero's GitHub release
# (NAMES_SKIP_PROVER=1 skips it). Nothing else is installed or changed.
set -eu

# Binaries come from the project's GitHub releases.
BASE="${NAMES_DOWNLOAD_BASE:-https://github.com/jefdiesel/logos-names/releases/latest/download}"
DIR="${NAMES_INSTALL_DIR:-$HOME/.local/bin}"
MAN_DIR="${NAMES_MAN_DIR:-$HOME/.local/share/man/man1}"

case "$(uname -s)-$(uname -m)" in
  Darwin-arm64) target=macos-arm64 ;;
  Linux-x86_64) target=linux-x86_64 ;;
  *)
    echo "names: no build for $(uname -s) $(uname -m) yet (macOS on Apple silicon and Linux x86_64 only)." >&2
    exit 1
    ;;
esac

if command -v sha256sum >/dev/null 2>&1; then sha() { sha256sum "$1" | cut -d' ' -f1; }
else sha() { shasum -a 256 "$1" | cut -d' ' -f1; }; fi

tmp="$(mktemp -d)"
trap 'rm -rf "$tmp"' EXIT

# Releases are signed with the maintainer's key (scripts/release-signing-key.pub in
# the repository). The public key is embedded here as an allowed_signers line, so a
# swapped binary on the download host cannot also swap the key. Verification needs
# ssh-keygen -Y (OpenSSH 8.0 or newer, on stock macOS and Linux). Without it the
# install stops, since the SHA-256 alone only catches corruption, not a swapped
# binary. NAMES_ALLOW_UNSIGNED=1 installs anyway, on that checksum alone. A missing
# or bad signature always stops the install.
cat >"$tmp/allowed_signers" <<'EOF_KEY'
release@logos-names namespaces="logos-names-release" ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBTV+Zb8/xPUbSkfG5T54jmrSRyY/jBIJKAtAobvH3Q+
EOF_KEY
have_sig=0
if command -v ssh-keygen >/dev/null 2>&1 &&
  ! ssh-keygen -Y verify 2>&1 | grep -qiE 'illegal option|unknown option|invalid option'; then
  have_sig=1
elif [ "${NAMES_ALLOW_UNSIGNED:-}" = 1 ]; then
  echo "names: warning: ssh-keygen (OpenSSH 8.0 or newer) not found; NAMES_ALLOW_UNSIGNED=1, so checking only the SHA-256, not the release signature." >&2
else
  echo "names: ssh-keygen (OpenSSH 8.0 or newer) is needed to check the release signature; not installing." >&2
  echo "names: install OpenSSH, or run again with NAMES_ALLOW_UNSIGNED=1 to trust the SHA-256 alone." >&2
  exit 1
fi

# verify <file> <release asset name>: fetch <asset>.sig and check <file> against it.
verify() {
  [ "$have_sig" = 1 ] || return 0
  if ! curl -fsSL "$BASE/$2.sig" -o "$1.sig" 2>/dev/null; then
    echo "names: no signature published for $2; not installing." >&2
    return 1
  fi
  if ! ssh-keygen -Y verify -f "$tmp/allowed_signers" -I release@logos-names \
    -n logos-names-release -s "$1.sig" <"$1" >/dev/null 2>&1; then
    echo "names: bad signature on $2; not installing." >&2
    return 1
  fi
}

echo "Downloading names for $target..."
curl -fsSL "$BASE/names-$target" -o "$tmp/names"
curl -fsSL "$BASE/names-$target.sha256" -o "$tmp/names.sha256"
verify "$tmp/names" "names-$target" || exit 1
expected="$(cut -d' ' -f1 "$tmp/names.sha256")"
actual="$(sha "$tmp/names")"
if [ "$expected" != "$actual" ]; then
  echo "names: checksum mismatch (expected $expected, got $actual); not installing." >&2
  exit 1
fi

mkdir -p "$DIR"
install -m 755 "$tmp/names" "$DIR/names"
# The LEZ wallet inside names links the PC/SC smart-card library (for Keycard). macOS
# ships it; on Linux it is a package that minimal systems lack.
if ! version="$("$DIR/names" --version 2>&1)"; then
  case "$version" in
  *libpcsclite*)
    echo "Installed $DIR/names, but it needs the PC/SC library (libpcsclite.so.1) to start. Install it with:" >&2
    echo "  Debian/Ubuntu: sudo apt install libpcsclite1" >&2
    echo "  Fedora:        sudo dnf install pcsc-lite-libs" >&2
    echo "  Arch:          sudo pacman -S pcsclite" >&2
    ;;
  *) echo "Installed $DIR/names, but it does not start: $version" >&2 ;;
  esac
else
  echo "Installed $DIR/names ($version)"
fi

# The man pages are a bonus: if they can't be fetched, the install still stands.
if curl -fsSL "$BASE/names-man.tar.gz" -o "$tmp/man.tar.gz" 2>/dev/null &&
  curl -fsSL "$BASE/names-man.tar.gz.sha256" -o "$tmp/man.sha256" 2>/dev/null &&
  [ "$(cut -d' ' -f1 "$tmp/man.sha256")" = "$(sha "$tmp/man.tar.gz")" ] &&
  verify "$tmp/man.tar.gz" names-man.tar.gz &&
  mkdir -p "$MAN_DIR" && tar -xzf "$tmp/man.tar.gz" -C "$tmp" &&
  cp "$tmp"/man1/*.1 "$MAN_DIR"/; then
  echo "Installed man pages in $MAN_DIR (man names)"
fi

# Private changes are proven locally by RISC Zero's r0vm (3.0.5, what LEZ v0.3.1
# uses). It comes from RISC Zero's own GitHub release, checked against the
# release's SHA-256, and goes next to names, which finds it there.
case "$target" in
  macos-arm64) r0=aarch64-apple-darwin; r0sha=0f676055ad88d7ede06beaec3b7f850413e091db08bb7cf9969a78d9ad168562 ;;
  linux-x86_64) r0=x86_64-unknown-linux-gnu; r0sha=936ef988b78f20e3bd9f80e375f3adc934b13addc6ae2680f2e5fc0bcc966158 ;;
esac
if [ "${NAMES_SKIP_PROVER:-}" != 1 ] && ! { [ -x "$DIR/r0vm" ] && "$DIR/r0vm" --version 2>/dev/null | grep -q " 3.0.5"; }; then
  echo "Downloading RISC Zero's prover (r0vm 3.0.5, about 70 MB) for private changes..."
  if curl -fsSL "https://github.com/risc0/risc0/releases/download/v3.0.5/cargo-risczero-$r0.tgz" -o "$tmp/r0.tgz" &&
    [ "$(sha "$tmp/r0.tgz")" = "$r0sha" ] && tar -xzf "$tmp/r0.tgz" -C "$tmp" r0vm; then
    install -m 755 "$tmp/r0vm" "$DIR/r0vm"
    echo "Installed $DIR/r0vm"
  else
    echo "Could not install r0vm; lookups and public changes still work, private ones need it." >&2
  fi
fi

case ":$PATH:" in
  *":$DIR:"*) ;;
  *)
    # Add it to the shell's startup file once, so new terminals find `names`.
    login_shell="${SHELL:-}"
    case "${login_shell##*/}" in
      zsh) RC="$HOME/.zshrc" ;;
      bash) if [ "$(uname -s)" = Darwin ]; then RC="$HOME/.bash_profile"; else RC="$HOME/.bashrc"; fi ;;
      *) RC="$HOME/.profile" ;;
    esac
    LINE="export PATH=\"$DIR:\$PATH\""
    if ! grep -qsF "$LINE" "$RC"; then
      printf '\n# Added by the names installer\n%s\n' "$LINE" >> "$RC"
    fi
    echo
    echo "Added $DIR to your PATH in $RC. Open a new terminal, or run:"
    echo "  export PATH=\"$DIR:\$PATH\""
    ;;
esac

cat <<'EOF'

Try it:
  names resolve jef         look a name up (no setup needed)
  names open jef            show its page, served from this machine
  names setup               make a wallet; fund its public account, then run it again
  names register <name>     claim a name, held privately

Every command: names --help, or man names
Guide: https://logos-names.wrapit.workers.dev/
EOF