#!/usr/bin/env bash
set -euo pipefail

# --- Configuration ---
DEFAULT_REPO="/holocron/archives/homelab"
SECRET_PATH="/run/secrets/borg_passwd"

# --- Usage ---
# ./browse-borg-root.sh [optional-path-to-repo]
REPO="${1:-$DEFAULT_REPO}"

# --- Always escalate to root at start ---
if [[ $EUID -ne 0 ]]; then
  exec sudo --preserve-env=BORG_PASSPHRASE,BORG_REPO "$0" "$@"
fi

# --- Determine passphrase ---
if [[ -z "${BORG_PASSPHRASE:-}" ]]; then
  if [[ "$REPO" == /holocron* && -f "$SECRET_PATH" ]]; then
    echo "Using default Borg passphrase from $SECRET_PATH"
    BORG_PASSPHRASE=$(<"$SECRET_PATH")
  else
    read -rsp "Enter Borg passphrase: " BORG_PASSPHRASE
    echo
  fi
fi
export BORG_PASSPHRASE

# --- Check dependencies ---
for cmd in borg fzf lf; do
  if ! command -v "$cmd" &>/dev/null; then
    echo "Error: '$cmd' is required but not installed." >&2
    exit 1
  fi
done

# --- Verify repo exists ---
if [[ ! -d "$REPO" ]]; then
  echo "Error: repository path '$REPO' not found."
  exit 1
fi

# --- List archives (newest on bottom) ---
archives=$(borg list --format "{archive} {time}\n" "$REPO" \
  | sort -k2 \
  | awk '{print $1}')

if [[ -z "$archives" ]]; then
  echo "No archives found in $REPO"
  exit 0
fi

# --- Select archive with fzf ---
archive=$(echo "$archives" | fzf --reverse --prompt="Select archive: ")
if [[ -z "$archive" ]]; then
  echo "No archive selected."
  exit 0
fi

# --- Mount ---
MOUNT_DIR=$(mktemp -d -t borg-mnt-XXXXXX)
echo "Mounting archive '$archive' at $MOUNT_DIR..."

cleanup() {
  echo "Unmounting archive..."
  borg umount "$MOUNT_DIR" >/dev/null 2>&1 || true
  rmdir "$MOUNT_DIR" >/dev/null 2>&1 || true
}
trap cleanup EXIT INT TERM

borg mount "$REPO::$archive" "$MOUNT_DIR"
lf "$MOUNT_DIR"