#!/usr/bin/env bash
#
# app-list.sh — List Authentik applications
#
# Usage: app-list.sh [-f format] [-s search]
#
# Options:
#   -f format   Output format: table (default), json
#   -s search   Search by application name
#   -h          Show this help
set -euo pipefail

MOSAIC_HOME="${MOSAIC_HOME:-$HOME/.config/mosaic}"
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
source "$MOSAIC_HOME/tools/_lib/credentials.sh"
load_credentials authentik

FORMAT="table"
SEARCH=""

while getopts "f:s:h" opt; do
  case $opt in
    f) FORMAT="$OPTARG" ;;
    s) SEARCH="$OPTARG" ;;
    h) head -12 "$0" | grep "^#" | sed 's/^# \?//'; exit 0 ;;
    *) echo "Usage: $0 [-f format] [-s search]" >&2; exit 1 ;;
  esac
done

TOKEN=$("$SCRIPT_DIR/auth-token.sh" -q)

PARAMS="ordering=name"
[[ -n "$SEARCH" ]] && PARAMS="${PARAMS}&search=${SEARCH}"

response=$(curl -sk -w "\n%{http_code}" \
  -H "Authorization: Bearer $TOKEN" \
  "${AUTHENTIK_URL}/api/v3/core/applications/?${PARAMS}")

http_code=$(echo "$response" | tail -n1)
body=$(echo "$response" | sed '$d')

if [[ "$http_code" != "200" ]]; then
  echo "Error: Failed to list applications (HTTP $http_code)" >&2
  exit 1
fi

if [[ "$FORMAT" == "json" ]]; then
  echo "$body" | jq '.results'
  exit 0
fi

echo "NAME                          SLUG                          PROVIDER           LAUNCH URL"
echo "----------------------------  ----------------------------  -----------------  ----------------------------------------"
echo "$body" | jq -r '.results[] | [
  .name,
  .slug,
  (.provider_obj.name // "none"),
  (.launch_url // "—")
] | @tsv' | while IFS=$'\t' read -r name slug provider launch_url; do
  printf "%-28s  %-28s  %-17s  %s\n" \
    "${name:0:28}" "${slug:0:28}" "${provider:0:17}" "$launch_url"
done