#!/usr/bin/env nix-shell
#!nix-shell -i bash -p nix curl cacert

set -euo pipefail

cd $(readlink -e $(dirname "${BASH_SOURCE[0]}"))

export SSL_CERT_FILE=$NIX_SSL_CERT_FILE

readonly SECURITY_KEY="7f8faaaa468174dc1c9cd62e5f218a5b"
prefix="https://wps-linux-personal.wpscdn.cn"

linux_payload=$(curl -s "https://linux.wps.cn")
darwin_payload=$(curl -s "https://mac.wps.cn")

linux_version=$(echo "$linux_payload" | grep -oP '(?<=banner_txt">)[^<]+')
darwin_version=$(echo "$darwin_payload" | grep -oP '(?<=\s)\d+(?:\.\d+)+(?=/)')

linux_amd64_url=$(echo "$linux_payload" | grep -oP "downLoad\('[^']*'" | head -1 | sed "s/downLoad('//;s/'$//")
darwin_arm64_url="https://package.mac.wpscdn.cn/mac_wps_pkg/${darwin_version}/WPS_Office_${darwin_version}(${darwin_version##*.})_arm64.dmg"

timestamp10=$(date '+%s')
linux_amd64_md5hash=($(printf '%s' "$SECURITY_KEY${linux_amd64_url#$prefix}$timestamp10" | md5sum))

linux_amd64_hash=$(nix-prefetch-url --name "wpsoffice-cn-$linux_version.deb" "$linux_amd64_url?t=$timestamp10&k=$linux_amd64_md5hash")
darwin_arm64_hash=$(nix-prefetch-url --name "wpsoffice-cn-$darwin_version.dmg" "$darwin_arm64_url")

linux_amd64_hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 "$linux_amd64_hash")
darwin_arm64_hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 "$darwin_arm64_hash")

cat > sources.nix << EOF
# Generated by ./update.sh - do not update manually!
# Last updated: $(date +%F)
{
  linux-version = "$linux_version";
  darwin-version = "$darwin_version";
  x86_64-linux = {
    url = "$linux_amd64_url";
    hash = "$linux_amd64_hash";
  };
  aarch64-darwin = {
    url = "$darwin_arm64_url";
    hash = "$darwin_arm64_hash";
  };
}
EOF
