#!/usr/bin/env python3
"""Patche le scaffold Android généré par `flutter create` :
   - permissions (internet + auto-install APK)
   - signature release depuis key.properties
   - schéma de redirection OIDC (flutter_appauth)
Lancé dans la CI après `flutter create`. Idempotent."""
import os
import re

KSPW = os.environ["KSPW"]
ALIAS = os.environ["ALIAS"]
KEYSTORE_PATH = os.environ.get("KEYSTORE_PATH", os.path.abspath("gamemanager.keystore"))

# 1) key.properties (chemin absolu du keystore, robuste peu importe le cwd gradle)
with open("android/key.properties", "w") as f:
    f.write(
        f"storePassword={KSPW}\n"
        f"keyPassword={KSPW}\n"
        f"keyAlias={ALIAS}\n"
        f"storeFile={KEYSTORE_PATH}\n"
    )

# 2) AndroidManifest : permissions + App Link HTTPS (retour OIDC fiable)
man = "android/app/src/main/AndroidManifest.xml"
s = open(man).read()
# namespace tools (pour merger dans l'activity de flutter_appauth)
if "xmlns:tools" not in s:
    s = s.replace("<manifest ", '<manifest xmlns:tools="http://schemas.android.com/tools" ', 1)
perms = (
    '<uses-permission android:name="android.permission.INTERNET"/>\n'
    '    <uses-permission android:name="android.permission.REQUEST_INSTALL_PACKAGES"/>\n'
)
if "REQUEST_INSTALL_PACKAGES" not in s:
    s = s.replace("<application", perms + "    <application", 1)
# App Link https://gamemanager-api.nfteam.ovh/oidc/callback → capté par l'app
applink = (
    '        <activity android:name="net.openid.appauth.RedirectUriReceiverActivity" '
    'android:exported="true" tools:node="merge">\n'
    '            <intent-filter android:autoVerify="true">\n'
    '                <action android:name="android.intent.action.VIEW"/>\n'
    '                <category android:name="android.intent.category.DEFAULT"/>\n'
    '                <category android:name="android.intent.category.BROWSABLE"/>\n'
    '                <data android:scheme="https" android:host="gamemanager-api.nfteam.ovh" '
    'android:path="/oidc/callback"/>\n'
    '            </intent-filter>\n'
    '        </activity>\n'
)
if "gamemanager-api.nfteam.ovh" not in s:
    s = s.replace("</application>", applink + "    </application>", 1)
open(man, "w").write(s)

# 3) build.gradle : signature + schéma OIDC
gr = "android/app/build.gradle"
s = open(gr).read()
# ⚠️ Rien n'est autorisé AVANT le bloc plugins {} → on insère juste avant `android {`
if "keystoreProperties" not in s:
    s = s.replace(
        "android {",
        'def keystoreProperties = new Properties()\n'
        'def keystorePropertiesFile = rootProject.file("key.properties")\n'
        'if (keystorePropertiesFile.exists()) { keystoreProperties.load(new FileInputStream(keystorePropertiesFile)) }\n\n'
        'android {',
        1,
    )
if "appAuthRedirectScheme" not in s:
    s = s.replace(
        "defaultConfig {",
        'defaultConfig {\n        manifestPlaceholders += [appAuthRedirectScheme: "nfteam.gamemanager"]',
        1,
    )
if "signingConfigs {" not in s:
    s = re.sub(
        r"(\n\s*buildTypes\s*\{)",
        '\n    signingConfigs {\n'
        '        release {\n'
        '            keyAlias keystoreProperties["keyAlias"]\n'
        '            keyPassword keystoreProperties["keyPassword"]\n'
        '            storeFile file(keystoreProperties["storeFile"])\n'
        '            storePassword keystoreProperties["storePassword"]\n'
        '        }\n    }\n\\1',
        s,
        count=1,
    )
s = s.replace("signingConfig signingConfigs.debug", "signingConfig signingConfigs.release")
open(gr, "w").write(s)
print("patch_android: OK")