#!/usr/bin/env bash
# CASAN DevKit installer — adopt the CASAN harness into a target project.
#
# Copies the Level-1 core harness (packages/casan-harness + bin/casan) into a target
# repo, scaffolds a per-project domain from the domain-pack template, and registers the
# project in project-registry.json so `casan reuse` sees it. Does NOT touch harness gate
# logic — adoption is config + domain only.
#
# Usage:
#   packages/casan-devkit/install.sh --target <dir> --project <id> [--domain <name>] [--template nestjs-react]
#
# Run from a CASAN source hub (or an extracted casan-devkit bundle).
set -euo pipefail

TARGET="" PROJECT="" DOMAIN="custom" TEMPLATE=""
while [[ $# -gt 0 ]]; do
  case "$1" in
    --target)  TARGET="$2"; shift 2 ;;
    --project) PROJECT="$2"; shift 2 ;;
    --domain)  DOMAIN="$2"; shift 2 ;;
    --template) TEMPLATE="$2"; shift 2 ;;
    -h|--help) grep '^#' "$0" | sed 's/^# \{0,1\}//'; exit 0 ;;
    *) echo "install: unknown arg $1" >&2; exit 64 ;;
  esac
done
[[ -n "$TARGET" && -n "$PROJECT" ]] || { echo "install: --target and --project are required" >&2; exit 64; }
[[ "$PROJECT" =~ ^[a-z][a-z0-9-]{1,62}$ ]] || {
  echo "install: --project must match ^[a-z][a-z0-9-]{1,62}$" >&2
  exit 64
}

SRC="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"   # source-hub / bundle root
[[ -d "$SRC/packages/casan-harness" ]] || { echo "install: cannot find packages/casan-harness under $SRC" >&2; exit 1; }

if [[ -n "$TEMPLATE" ]]; then
  python3 "$SRC/packages/casan-devkit/project-scaffold.py" \
    --target "$TARGET" --project "$PROJECT" --name "$DOMAIN" --template "$TEMPLATE"
fi

echo "==> installing CASAN core into $TARGET (project=$PROJECT domain=$DOMAIN)"
mkdir -p "$TARGET/packages" "$TARGET/bin" "$TARGET/apps/$PROJECT/domain"

# 1) core harness + CLI
RSYNC_EXCLUDES=(--exclude='__pycache__' --exclude='*.pyc' --exclude='.DS_Store' --exclude='*.log')
[[ -f "$TARGET/packages/casan-harness/level5/project-registry.json" ]] && RSYNC_EXCLUDES+=(--exclude='level5/project-registry.json')
rsync -a "${RSYNC_EXCLUDES[@]}" "$SRC/packages/casan-harness/" "$TARGET/packages/casan-harness/"
cp "$SRC/bin/casan" "$TARGET/bin/casan"; chmod +x "$TARGET/bin/casan"
[[ -f "$SRC/VERSION" ]] && cp "$SRC/VERSION" "$TARGET/VERSION"

# 2) per-project domain from the domain-pack template
rsync -a --ignore-existing "$SRC/packages/casan-devkit/templates/domain-pack/" "$TARGET/apps/$PROJECT/domain/"

# 3) Prompt enforcement entrypoints, policy, and repository-agent contracts.
mkdir -p "$TARGET/.casan" "$TARGET/.github" "$TARGET/.gitea/workflows" "$TARGET/docs/casan"
cp "$SRC/packages/casan-devkit/templates/prompt-enforcement/casan-chat" "$TARGET/bin/casan-chat"
cp "$SRC/packages/casan-devkit/templates/prompt-enforcement/casan-chat.ps1" "$TARGET/bin/casan-chat.ps1"
chmod +x "$TARGET/bin/casan-chat"

python3 - "$TARGET/.casan/prompt-policy.json" "$PROJECT" <<'PY'
import json, sys
path, project = sys.argv[1], sys.argv[2]
policy = {
    "schema_version": 1,
    "mode": "enforced",
    "project_id": project,
    "domain_root": f"apps/{project}/domain",
    "certified_entrypoints": ["bin/casan-chat", "bin/casan-chat.ps1", "CASAN Control Panel"],
    "direct_external_ui": "not_interceptable_not_certified",
    "required_instruction_files": ["AGENTS.md", "CLAUDE.md", ".github/copilot-instructions.md"],
}
with open(path, "w", encoding="utf-8") as handle:
    json.dump(policy, handle, ensure_ascii=False, indent=2)
    handle.write("\n")
PY

python3 - "$TARGET" "$SRC/packages/casan-devkit/templates/prompt-enforcement/agent-instructions.md" <<'PY'
import pathlib, re, sys
root = pathlib.Path(sys.argv[1])
snippet = pathlib.Path(sys.argv[2]).read_text(encoding="utf-8").strip()
start = "<!-- CASAN_PROMPT_ENFORCEMENT_START -->"
end = "<!-- CASAN_PROMPT_ENFORCEMENT_END -->"
pattern = re.compile(re.escape(start) + r".*?" + re.escape(end), re.DOTALL)
for relative in ("AGENTS.md", "CLAUDE.md", ".github/copilot-instructions.md"):
    path = root / relative
    path.parent.mkdir(parents=True, exist_ok=True)
    existing = path.read_text(encoding="utf-8") if path.exists() else ""
    updated = pattern.sub(snippet, existing) if pattern.search(existing) else (existing.rstrip() + "\n\n" + snippet).lstrip()
    path.write_text(updated.rstrip() + "\n", encoding="utf-8")
PY

cp "$SRC/docs/packaging/PROMPT_ENFORCEMENT_GUIDE.md" "$TARGET/docs/casan/CASAN_PROMPT_ENFORCEMENT.md"

# 4) Standalone Gitea contract workflow. The project's existing CI remains untouched.
cp "$SRC/packages/casan-devkit/templates/gitea-workflow/prompt-enforcement.yml" "$TARGET/.gitea/workflows/casan-prompt-enforcement.yml"
python3 - "$TARGET/.gitea/workflows/casan-prompt-enforcement.yml" "$PROJECT" <<'PY'
import pathlib, sys
path, project = pathlib.Path(sys.argv[1]), sys.argv[2]
path.write_text(path.read_text(encoding="utf-8").replace("__PROJECT_ID__", project), encoding="utf-8")
PY

# 5) register in project-registry.json (append if absent)
REG="$TARGET/packages/casan-harness/level5/project-registry.json"
python3 - "$REG" "$PROJECT" "$DOMAIN" <<'PY'
import json, os, sys
reg, pid, dom = sys.argv[1], sys.argv[2], sys.argv[3]
data = json.load(open(reg))
version = next((p.get("harness_version") for p in data.get("projects", []) if p.get("harness_version")), "1.0.0")
target = os.path.abspath(os.path.join(os.path.dirname(reg), "..", "..", ".."))
data["projects"] = [p for p in data.get("projects", []) if os.path.isdir(os.path.join(target, p.get("domain_root", "__missing__")))]
if not any(p.get("project_id") == pid for p in data["projects"]):
    data["projects"].append({
        "project_id": pid, "domain": dom, "domain_root": f"apps/{pid}/domain",
        "harness_package": "fpt-casan-sdd-harness",
        "harness_version": version,
        "status": "active",
    })
    json.dump(data, open(reg, "w"), indent=2, ensure_ascii=False); open(reg, "a").write("\n")
    print(f"registered {pid}")
else:
    print(f"{pid} already registered")
PY

# 6) Fail the installation if a managed enforcement artifact is absent or malformed.
bash "$TARGET/packages/casan-harness/scripts/bash/prompt-enforcement-verify.sh" \
  --root "$TARGET" --project "$PROJECT"

cat <<EOF

==> done. Next steps in $TARGET:
  1. Put your requirement in   apps/$PROJECT/domain/input/requirement.md
  2. Add golden baseline in    apps/$PROJECT/domain/golden-runs/
  3. Run the gate:             CASAN_DOMAIN_ROOT=apps/$PROJECT/domain bin/casan gate
  4. Prove reuse:              bin/casan reuse   # expects HARNESS_REUSE_VALID
  5. Send every AI prompt via: bin/casan-chat "<prompt>"
  6. On Windows/WSL2 use:      powershell -ExecutionPolicy Bypass -File bin/casan-chat.ps1 "<prompt>"
  7. Verify enforcement:       bin/casan prompt verify
See docs/casan/CASAN_PROMPT_ENFORCEMENT.md.
EOF