update.sh

#!/usr/bin/env bash
set -euo pipefail

repo="pingdotgg/t3code"
api_url="https://api.github.com/repos/${repo}/releases/latest"

for cmd in curl jq; do
  if ! command -v "${cmd}" >/dev/null 2>&1; then
    echo "Missing required command: ${cmd}" >&2
    exit 1
  fi
done

release_json="$(curl -fsSL "${api_url}")"
tag="$(jq -r '.tag_name' <<<"${release_json}")"
if [[ -z "${tag}" || "${tag}" == "null" ]]; then
  echo "Could not read tag_name from GitHub release payload." >&2
  exit 1
fi

version="${tag#v}"

asset_names=(
  "x86_64-linux:T3-Code-${version}-x86_64.AppImage"
  "x86_64-darwin:T3-Code-${version}-x64.zip"
  "aarch64-darwin:T3-Code-${version}-arm64.zip"
)

to_sri() {
  local digest="$1"
  local hex_hash="${digest#sha256:}"

  if command -v nix >/dev/null 2>&1; then
    nix hash convert --hash-algo sha256 --from base16 --to sri "${hex_hash}"
  elif command -v xxd >/dev/null 2>&1 && command -v base64 >/dev/null 2>&1; then
    printf 'sha256-%s\n' "$(printf '%s' "${hex_hash}" | xxd -r -p | base64 | tr -d '\n')"
  else
    echo "Missing required command for SRI conversion. Install nix or xxd+base64." >&2
    exit 1
  fi
}

printf '# Update values for flake.nix\n'
printf 'version = "%s";\n' "${version}"
printf 'sources = {\n'

for entry in "${asset_names[@]}"; do
  system="${entry%%:*}"
  asset_name="${entry#*:}"

  asset_json="$(
    jq -cr --arg name "${asset_name}" '.assets[] | select(.name == $name)' <<<"${release_json}" \
      | head -n 1
  )"
  if [[ -z "${asset_json}" ]]; then
    echo "Could not find asset '${asset_name}' for system '${system}' in release '${tag}'." >&2
    jq -r '.assets[].name' <<<"${release_json}" >&2
    exit 1
  fi

  digest="$(jq -r '.digest' <<<"${asset_json}")"
  url="$(jq -r '.browser_download_url' <<<"${asset_json}")"

  if [[ -z "${digest}" || "${digest}" == "null" || -z "${url}" || "${url}" == "null" ]]; then
    echo "Asset '${asset_name}' is missing digest and/or browser_download_url fields." >&2
    exit 1
  fi

  if [[ ! "${digest}" =~ ^sha256:[0-9a-fA-F]{64}$ ]]; then
    echo "Unexpected digest format for '${asset_name}': ${digest}" >&2
    exit 1
  fi

  sri_hash="$(to_sri "${digest}")"

  cat <<EOF
  ${system} = {
    url = "${url}";
    hash = "${sri_hash}";
  };
EOF
done

printf '};\n'