#!/usr/bin/env sh

if ! command -v git > /dev/null; then
        echo "git is not installed"
        exit 1
fi

if ! command -v curl > /dev/null; then
        echo "curl is not installed"
        exit 1
fi

if ! command -v jq > /dev/null; then
        echo "jq is not installed"
        exit 1
fi

mkdir -p ~/.ssh/git-commit-signing

echo "Downloading SSH key"

ssh_key=$(curl --request GET \
        --url "${CODER_AGENT_URL}api/v2/workspaceagents/me/gitsshkey" \
        --header "Coder-Session-Token: ${CODER_AGENT_TOKEN}")

jq --raw-output ".public_key" > ~/.ssh/git-commit-signing/coder.pub <<EOF
$ssh_key
EOF

jq --raw-output ".private_key" > ~/.ssh/git-commit-signing/coder <<EOF
$ssh_key
EOF

chmod -R 400 ~/.ssh/git-commit-signing/coder
chmod -R 400 ~/.ssh/git-commit-signing/coder.pub

echo "Configuring git to use the SSH key"

git config --global gpg.format ssh
git config --global commit.gpgsign true
git config --global user.signingkey ~/.ssh/git-commit-signing/coder