#!/bin/bash

set -e
set -o pipefail

# Usage function
usage() {
    echo "Usage: wild-secret <yaml_key_path>"
    echo ""
    echo "Read a value from ./secrets.yaml using a YAML key path."
    echo ""
    echo "Examples:"
    echo "  wild-secret 'database.password'      # Get database password"
    echo "  wild-secret 'api.keys.github'        # Get GitHub API key"
    echo "  wild-secret 'credentials[0].token'   # Get first credential token"
    echo ""
    echo "Options:"
    echo "  -h, --help  Show this help message"
}

# Parse arguments
while [[ $# -gt 0 ]]; do
    case $1 in
        -h|--help)
            usage
            exit 0
            ;;
        -*)
            echo "Unknown option $1"
            usage
            exit 1
            ;;
        *)
            if [ -z "${KEY_PATH}" ]; then
                KEY_PATH="$1"
            else
                echo "Too many arguments"
                usage
                exit 1
            fi
            shift
            ;;
    esac
done

if [ -z "${KEY_PATH}" ]; then
    echo "Error: YAML key path is required"
    usage
    exit 1
fi

# Check if WC_HOME is set
if [ -z "${WC_HOME:-}" ]; then
    echo "Error: WC_HOME environment variable not set" >&2
    exit 1
fi

SECRETS_FILE="${WC_HOME}/secrets.yaml"

if [ ! -f "${SECRETS_FILE}" ]; then
    echo "Error: secrets file not found at ${SECRETS_FILE}" >&2
    exit 1
fi

# Use yq to extract the value from the YAML file
result=$(yq eval ".${KEY_PATH}" "${SECRETS_FILE}" 2>/dev/null)

# Check if result is null (key not found)
if [ "${result}" = "null" ]; then
    echo "Error: Key path '${KEY_PATH}' not found in ${SECRETS_FILE}" >&2
    exit 1
fi

echo "${result}"