#!/bin/sh
set -eu

umask 077

ROOT=$(CDPATH='' cd -- "$(dirname -- "$0")/.." && pwd)
workspace=$(mktemp -d "${TMPDIR:-/tmp}/wnh-android-release-ci.XXXXXX")
signing_dir="$workspace/signing"
environment_file="$workspace/release.env"
output_dir="$workspace/output"
key_alias=who-need-help-ci-upload
base_url=https://android-release-ci.invalid

cleanup() {
  rm -rf "$workspace"
}
trap cleanup EXIT HUP INT TERM

WNH_ANDROID_SIGNING_DIR="$signing_dir" \
WNH_ANDROID_SIGNING_KEY_ALIAS="$key_alias" \
  "$ROOT/scripts/init-android-release-signing.sh" >/dev/null

fingerprint=$(
  "$ROOT/scripts/android-signing-fingerprint.sh" \
    "$signing_dir/who-need-help-upload.p12" \
    "$signing_dir/who-need-help-upload.password" \
    "$key_alias"
)

printf '%s\n' \
  'DEPLOYMENT_ENV=production' \
  'PHX_HOST=android-release-ci.invalid' \
  'PHX_SCHEME=https' \
  'PHX_URL_PORT=443' \
  "WNH_BASE_URL=$base_url" \
  "WNH_DEBUG_BASE_URL=$base_url" \
  'WNH_TRACKING_MIN_TIME_MS=5000' \
  'WNH_TRACKING_HTTP_TIMEOUT_MS=15000' \
  'WNH_ANDROID_VERSION_CODE=1' \
  'WNH_ANDROID_VERSION_NAME=0.1.0-ci' \
  "WNH_ANDROID_SIGNING_KEY_ALIAS=$key_alias" \
  'GOOGLE_OAUTH_CLIENT_ID=android-release-ci-web-client' \
  'GOOGLE_OAUTH_AUTHORIZED_PARTY_IDS=android-release-ci-android-client' \
  'WNH_FIREBASE_APPLICATION_ID=1:123456789:android:release-ci' \
  'WNH_FIREBASE_API_KEY=android-release-ci-firebase-key' \
  'WNH_FIREBASE_PROJECT_ID=android-release-ci' \
  'WNH_FIREBASE_GCM_SENDER_ID=123456789' \
  'ANDROID_APP_LINKS_PACKAGE_NAME=org.whoneedhelp.mobile' \
  "ANDROID_APP_LINKS_SHA256_CERT_FINGERPRINTS=$fingerprint" \
  "ANDROID_PLAY_APP_SIGNING_SHA256_CERT_FINGERPRINTS=$fingerprint" \
  >"$environment_file"
chmod 600 "$environment_file"

WNH_ANDROID_SIGNING_DIR="$signing_dir" \
WNH_ANDROID_RELEASE_OUTPUT_DIR="$output_dir" \
WNH_ENV_FILE="$environment_file" \
  "$ROOT/scripts/android-release-build.sh"

echo "Ephemeral signed Android release pipeline passed."