#!/usr/bin/with-contenv bashio
# shellcheck shell=bash
set -e

# Claude Desktop is launched with --password-store=basic (see /defaults/autostart) so that no
# system keyring — and therefore no keyring password prompt — is ever needed. Electron does not
# accept that backend unless the application itself calls
# safeStorage.setUsePlainTextEncryption(true), and Claude Desktop never does, so without this
# patch safeStorage.isEncryptionAvailable() stays false: the auth token is never persisted and
# the user is asked to sign in again on every start.
#
# claude-safestorage-patch.js injects that opt-in into the app's main bundle inside app.asar.
# It runs on every boot, and after 81-claude_update.sh, on purpose: an apt upgrade of
# claude-desktop replaces app.asar with a fresh unpatched copy. The patcher is marker-guarded,
# so a boot where the app did not change is a cheap no-op.
#
# A failure here must never block startup — the app still runs fine unpatched, it just forgets
# the sign-in — so the patcher's exit status is reported, not propagated, and it is capped with
# a timeout so a pathological archive cannot stall the boot indefinitely.

ASAR="/usr/lib/claude-desktop/resources/app.asar"
PATCHER="/usr/local/bin/claude-safestorage-patch.js"

if [ ! -f "$ASAR" ]; then
    bashio::log.warning "Claude Desktop app.asar not found; skipping the safeStorage patch"
    exit 0
fi

if [ ! -f "$PATCHER" ]; then
    bashio::log.warning "$PATCHER not found; skipping the safeStorage patch"
    exit 0
fi

# The patcher removes its own temporary archive on every failure path, but `timeout` kills it
# outright, so a run that hits the cap leaves one behind. Those are archive-sized, and the live
# archive stays unpatched, so every later boot would retry under a new pid and strand another
# copy until the container runs out of space.
cleanup_tmp() {
    find "$(dirname "$ASAR")" -maxdepth 1 -name ".$(basename "$ASAR").addon-tmp.*" -delete 2>/dev/null || true
}

if output=$(timeout 120 node "$PATCHER" "$ASAR" 2>&1); then
    bashio::log.info "safeStorage: ${output}"
else
    rc=$?
    if [ "$rc" -eq 124 ]; then
        bashio::log.warning "safeStorage patch timed out after 120s; continuing unpatched."
    else
        bashio::log.warning "safeStorage patch failed (exit ${rc}); the sign-in will not persist."
    fi
    while IFS= read -r line; do
        if [ -n "$line" ]; then
            bashio::log.warning "${line}"
        fi
    done <<< "${output}"
    cleanup_tmp
fi

# Explicitly successful: a failed patch is never fatal, so the status of whatever ran last above
# must not become this script's status and abort the boot.
exit 0