#!/bin/bash -e -o pipefail
################################################################################
##  File:  configure-machine.sh
##  Desc:  Configure guest OS settings
################################################################################

source ~/utils/utils.sh

echo "Enabling developer mode..."
sudo /usr/sbin/DevToolsSecurity --enable

# Turn off hibernation and get rid of the sleepimage
sudo pmset hibernatemode 0
sudo rm -f /var/vm/sleepimage

# Disable App Nap System Wide
defaults write NSGlobalDomain NSAppSleepDisabled -bool YES

# Disable Keyboard Setup Assistant window
sudo defaults write /Library/Preferences/com.apple.keyboardtype "keyboardtype" -dict-add "3-7582-0" -int 40

# Update VoiceOver Utility to allow VoiceOver to be controlled with AppleScript
# by creating a special Accessibility DB file (SIP must be disabled) and
# updating the user defaults system to reflect this change.
if csrutil status | grep -Eq  "System Integrity Protection status: (disabled|unknown)"; then
    sudo bash -c 'echo -n "a" > /private/var/db/Accessibility/.VoiceOverAppleScriptEnabled'
fi
defaults write com.apple.VoiceOver4/default SCREnableAppleScript -bool YES

# https://developer.apple.com/support/expiration/
# Enterprise iOS Distribution Certificates generated between February 7 and September 1st, 2020 will expire on February 7, 2023.
# Rotate the certificate before expiration to ensure your apps are installed and signed with an active certificate.
# Confirm that the correct intermediate certificate is installed by verifying the expiration date is set to 2030.
# sudo security delete-certificate -Z FF6797793A3CD798DC5B2ABEF56F73EDC9F83A64 /Library/Keychains/System.keychain

swiftc -suppress-warnings "${HOME}/image-generation/add-certificate.swift"

certs=(
    AppleWWDRCAG3.cer
    DeveloperIDG2CA.cer
)
for cert in ${certs[@]}; do
    echo "Adding ${cert} certificate"
    cert_path="${HOME}/${cert}"
    curl -fsSL "https://www.apple.com/certificateauthority/${cert}" --output ${cert_path}
    sudo ./add-certificate ${cert_path}
    rm ${cert_path}
done

rm -f ./add-certificate

# enable-automationmode-without-authentication
brew install expect
retry=10
while [[ $retry -gt 0 ]]; do
{
    /usr/bin/expect <<EOF
        spawn automationmodetool enable-automationmode-without-authentication
        expect "password"
        send "${PASSWORD}\r"
        expect {
            "succeeded." { puts "Automation mode enabled successfully"; exit 0 }
            eof
        }
EOF
} && break

    retry=$((retry-1))
    if [[ $retry -eq 0 ]]; then
        echo "No retry attempts left"
        exit 1
    fi
    sleep 10
done

echo "Getting terminal windows"
launchctl_output=$(launchctl list | grep -i terminal || true)

if [ -n "$launchctl_output" ]; then
    term_service=$(echo "$launchctl_output" | cut -f3)
    echo "Close terminal windows: gui/501/${term_service}"
    launchctl bootout gui/501/${term_service} && sleep 5
else
    echo "No open terminal windows found."
fi

# test enable-automationmode-without-authentication
if [[ ! "$(automationmodetool)" =~ "DOES NOT REQUIRE" ]]; then
    echo "Failed to enable enable-automationmode-without-authentication option"
    exit 1
fi

# Create symlink for tests running
if [[ ! -d "/usr/local/bin" ]];then
    sudo mkdir -p -m 775 /usr/local/bin
    sudo chown $USER:admin /usr/local/bin
fi
chmod +x $HOME/utils/invoke-tests.sh
sudo ln -s $HOME/utils/invoke-tests.sh /usr/local/bin/invoke_tests