#!/usr/bin/env runts -- --allow-env --allow-import --allow-net --allow-read

import {parseArgs} from "jsr:@std/cli/parse-args";
import {encryptEcdhP256} from "https://global.hatter.ink/script/get/@0/deno-wrapkey-mod.ts";
import {args, exit, getEnv, log,} from "https://global.hatter.ink/script/get/@44/deno-commons-mod.ts";
import {fetchWithTimeoutAndAutoProxy} from "https://global.hatter.ink/script/get/@1/deno-fetch-auto-proxy-mod.ts";

const endpoint = getEnv("POST_ENCRYPTED_NOTE_ENDPOINT");
const publicKeyPointHex = getEnv("ENCRYPTION_PUBLIC_KEY_POINT_HEX");

if (!endpoint || !publicKeyPointHex) {
    log.error("Endpoint and public key point hex must both assigned.");
    if (!endpoint) {
        log.info("POST_ENCRYPTED_NOTE_ENDPOINT must be assigned.");
    }
    if (!publicKeyPointHex) {
        log.info("ENCRYPTION_PUBLIC_KEY_POINT_HEX must be assigned.");
    }
    exit(1);
}

const flags = parseArgs(args(), {
    boolean: ["help", "post-message"],
    string: ["title"],
});

if (flags.help) {
    console.log("post-note.ts [--post-message] [--title <title>] <message>");
    exit(0);
}

if (flags._.length === 0) {
    log.error("Requires message.");
    exit(1);
}

const fetchArgs = [];
if (flags.title) {
    const encryptedTitle = await encryptEcdhP256(
        "k",
        publicKeyPointHex,
        new TextEncoder().encode(flags.title),
    );
    fetchArgs.push(`title=${encodeURIComponent(encryptedTitle.toString())}`);
}
const encryptedMessage = await encryptEcdhP256(
    "k",
    publicKeyPointHex,
    new TextEncoder().encode(flags._.join("\n")),
);
fetchArgs.push(`memo=${encodeURIComponent(encryptedMessage.toString())}`);

if (flags["post-message"]) {
    fetchArgs.push("postMessage=true");
}

const response = await fetchWithTimeoutAndAutoProxy(
    `${endpoint}?${fetchArgs.join("&")}`,
);

console.info(response.status, await response.json());

// @SCRIPT-SIGNATURE-V1: yk-r1.ES256.20260211T230055+08:00.MEYCIQDTM5393nrl6WXzDopn
// 9FeMIl2z7QUoQVOHP4BHZVH4OgIhANMUWUtFZDuOVH0J9e1PyS0j690Z+8AlTry7r/UHYoIu