ROOT_DIR=$(git rev-parse --show-toplevel)
OS=$(go env GOOS)
ARCH=$(go env GOARCH)
ZOT_PATH=${ROOT_DIR}/bin/zot-${OS}-${ARCH}
ZLI_PATH=${ROOT_DIR}/bin/zli-${OS}-${ARCH}
ZOT_MINIMAL_PATH=${ROOT_DIR}/bin/zot-${OS}-${ARCH}-minimal
ZB_PATH=${ROOT_DIR}/bin/zb-${OS}-${ARCH}
TEST_DATA_DIR=${BATS_FILE_TMPDIR}/test/data
AUTH_USER=poweruser
AUTH_PASS=sup*rSecr9T
# additional creds for sha256/sha512 based password hashes
AUTH_USER2=poweruser2
AUTH_PASS2=sup*rSecr2T
AUTH_USER3=poweruser3
AUTH_PASS3=sup*rSecr3T
AUTH_USER4=poweruser4
AUTH_PASS4=sup*rSecr4T
AUTH_USER5=poweruser5
AUTH_PASS5=sup*rSecr5T

mkdir -p ${TEST_DATA_DIR}

function zot_serve() {
    local zot_path=${1}
    local config_file=${2}
    ${zot_path} serve ${config_file} &
    # zot.pid file keeps a list of zot server PIDs (in case multiple zot servers are started)
    echo -n "$! " >> ${BATS_FILE_TMPDIR}/zot.pid
}

function zot_rel_serve() {
    local config_file=${1}
    local zot_path=${BATS_FILE_TMPDIR}/zot-rel-${OS}-${ARCH}

    if [ ! -f "${zot_path}" ]; then
        if ! curl -f -L -o "${zot_path}" https://github.com/project-zot/zot/releases/latest/download/zot-${OS}-${ARCH}; then 
            echo "ERROR: Failed to download zot binary from GitHub." >&2
            return 1
        fi
        # Download checksum file and verify integrity
        checksum_url="https://github.com/project-zot/zot/releases/latest/download/checksums.sha256.txt"
        checksum_file="${BATS_FILE_TMPDIR}/zot-sha256sums.txt"
        curl -L -o "${checksum_file}" "${checksum_url}"
        expected_sum=$(grep "zot-${OS}-${ARCH}$" "${checksum_file}" | awk '{print $1}')
        if [ -z "${expected_sum}" ]; then
            echo "ERROR: Could not find checksum for zot-${OS}-${ARCH} in checksums.sha256.txt" >&2
            exit 1
        fi
        actual_sum=$(sha256sum "${zot_path}" | awk '{print $1}')
        if [ "${expected_sum}" != "${actual_sum}" ]; then
            echo "ERROR: Checksum verification failed for zot-${OS}-${ARCH}" >&2
            exit 1
        fi
        chmod +x "${zot_path}"
    fi

    ${zot_path} serve ${config_file} &
    # zot.pid file keeps a list of zot server PIDs (in case multiple zot servers are started)
    echo -n "$! " >> ${BATS_FILE_TMPDIR}/zot.pid
}

function zot_rel_min_serve() {
    local config_file=${1}
    local zot_path=${BATS_FILE_TMPDIR}/zot-rel-${OS}-${ARCH}-minimal

    if [ ! -f "${zot_path}" ]; then
        if ! curl -f -L -o "${zot_path}" https://github.com/project-zot/zot/releases/latest/download/zot-${OS}-${ARCH}-minimal; then
            echo "ERROR: Failed to download zot binary from GitHub." >&2
            return 1
        fi
        # Download checksum file and verify integrity
        checksum_url="https://github.com/project-zot/zot/releases/latest/download/checksums.sha256.txt"
        checksum_file="${BATS_FILE_TMPDIR}/zot-sha256sums.txt"
        curl -L -o "${checksum_file}" "${checksum_url}"
        expected_sum=$(grep "zot-${OS}-${ARCH}-minimal$" "${checksum_file}" | awk '{print $1}')
        if [ -z "${expected_sum}" ]; then
            echo "ERROR: Could not find checksum for zot-${OS}-${ARCH}-minimal in checksums.sha256.txt" >&2
            exit 1
        fi
        actual_sum=$(sha256sum "${zot_path}" | awk '{print $1}')
        if [ "${expected_sum}" != "${actual_sum}" ]; then
            echo "ERROR: Checksum verification failed for zot-${OS}-${ARCH}-minimal" >&2
            exit 1
        fi
        chmod +x "${zot_path}"
    fi

    ${zot_path} serve ${config_file} &
    # zot.pid file keeps a list of zot server PIDs (in case multiple zot servers are started)
    echo -n "$! " >> ${BATS_FILE_TMPDIR}/zot.pid
}

# stops all zot instances started by the test
function zot_stop_all() {
    if [ -f "${BATS_FILE_TMPDIR}/zot.pid" ]; then
        local pids
        pids="$(cat "${BATS_FILE_TMPDIR}/zot.pid" 2>/dev/null || true)"

        # Ask zot(s) to terminate.
        if [ -n "$pids" ]; then
            kill $pids 2>/dev/null || true
        fi

        # Wait for processes to exit (helps avoid stale responders on restart).
        local deadline=$((SECONDS + 10))
        while [ $SECONDS -lt $deadline ]; do
            local any_alive=0
            local p
            for p in $pids; do
                if kill -0 "$p" 2>/dev/null; then
                    any_alive=1
                    break
                fi
            done
            [ "$any_alive" -eq 0 ] && break
            sleep 0.1
        done

        # Force kill any stragglers.
        local p
        for p in $pids; do
            kill -0 "$p" 2>/dev/null && kill -9 "$p" 2>/dev/null || true
        done

        # If we know the port, wait for it to stop accepting connections.
        if [ -f "${BATS_FILE_TMPDIR}/zot.port" ]; then
            local zot_port
            zot_port="$(cat "${BATS_FILE_TMPDIR}/zot.port" 2>/dev/null || true)"
            if [ -n "$zot_port" ]; then
                local port_deadline=$((SECONDS + 10))
                while [ $SECONDS -lt $port_deadline ]; do
                    # bash /dev/tcp returns success when something is accepting connections.
                    (echo >"/dev/tcp/127.0.0.1/${zot_port}") >/dev/null 2>&1 || break
                    sleep 0.1
                done
            fi
        fi

        rm -f "${BATS_FILE_TMPDIR}/zot.pid"
    fi
}

# Verifies zot is listening and responding with a valid /v2/_catalog.
# Exits with 1 and a clear message if zot did not start or response is not from zot.
function wait_zot_reachable() {
    local zot_port=${1}
    local zot_url=http://127.0.0.1:${zot_port}/v2/_catalog

    # If we have zot PIDs, ensure at least one process is still running (zot didn't exit on startup, e.g. bind failure).
    # When multiple zots run in the same test (e.g. sync.bats), zot.pid holds all PIDs; we only require one alive here.
    # The curl below to the given port is what confirms the specific instance for that port is up.
    if [ -f "${BATS_FILE_TMPDIR}/zot.pid" ]; then
        local pids
        read -r pids < "${BATS_FILE_TMPDIR}/zot.pid" || true
        local one_alive=0
        for p in $pids; do
            kill -0 "$p" 2>/dev/null && one_alive=1 && break
        done
        if [ "$one_alive" -eq 0 ]; then
            echo "ERROR: zot process(es) exited before becoming reachable (check bind or config). Port ${zot_port}" >&2
            exit 1
        fi
    fi

    local response curl_ret curl_err curl_err_file
    local start_ts=$SECONDS
    while true; do
        curl_err_file="$(mktemp "${BATS_FILE_TMPDIR}/curl_err.XXXXXX")"
        # Be robust if the test harness enables `set -e` (errexit): a failing `curl` inside
        # command substitution can otherwise abort the function before we can retry.
        local errexit_was_set=0
        case "$-" in
            *e*) errexit_was_set=1 ;;
        esac
        set +e
        response="$(curl -sS --connect-timeout 3 \
            --max-time 5 \
            -w "\n%{http_code}" \
            "${zot_url}" 2>"${curl_err_file}")"
        curl_ret=$?
        [ "$errexit_was_set" -eq 1 ] && set -e
        curl_err="$(cat "${curl_err_file}" 2>/dev/null || true)"
        rm -f "${curl_err_file}"

        if [ $curl_ret -eq 0 ]; then
            break
        fi

        # Retry transient startup/shutdown races (notably curl 52: "Empty reply from server").
        if [ $((SECONDS - start_ts)) -ge 180 ]; then
            echo "ERROR: zot did not become reachable at ${zot_url} (curl exit ${curl_ret})" >&2
            [ -n "$curl_err" ] && echo "curl: ${curl_err}" >&2
            exit 1
        fi
        sleep 1
    done

    # curl -s -w "\n%{http_code}" appends HTTP code on last line; body is everything else
    local http_code
    http_code=$(echo "$response" | tail -n1)
    response=$(echo "$response" | sed '$d')

    if [ "$http_code" = "401" ]; then
        # Zot is up but requires auth (e.g. redis_session_store, openid_claim_mapping); treat as reachable
        echo "$response"
        return 0
    fi

    if [ "$http_code" != "200" ]; then
        echo "ERROR: zot at ${zot_url} returned HTTP ${http_code}" >&2
        exit 1
    fi

    if ! echo "$response" | jq -e '.repositories != null' >/dev/null 2>&1; then
        echo "ERROR: response from ${zot_url} is not a valid zot _catalog response (missing .repositories)" >&2
        exit 1
    fi
    echo "$response"
}

function zli_add_config() {
    local registry_name=${1}
    local registry_url=${2}
    # Clean up old configuration for the same registry
    if ${ZLI_PATH} config --list | grep -q ${registry_name}; then
        ${ZLI_PATH} config remove ${registry_name}
    fi
    # Add the new registry
    ${ZLI_PATH} config add ${registry_name} ${registry_url}
}

function zli_show_config() {
    local registry_name=${1}
    ${ZLI_PATH} config ${registry_name} -l || true
}

function zli_delete_config() {
    local registry_name=${1}
    ${ZLI_PATH} config remove ${registry_name} || true
}

function zb_run() {
    local zot_address=${1}
    ${ZB_PATH} -c 10 -n 30 -o stdout ${zot_address} --skip-cleanup
}

function log_output() {
    local zot_log_file=${1:-${BATS_FILE_TMPDIR}/zot/zot-log.json}
    cat ${zot_log_file} | jq ' .["message"] '
}