#!/usr/bin/env bash
#
# Run the interactive PKCE OAuth2 login against Gitea, then install
# the git credential helper so subsequent git operations against
# FORGE_GITEA_URL are silent.  Idempotent.

set -euo pipefail

here="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd -P)"
# shellcheck disable=SC1091
. "$here/common.sh"

load_env
require_env FORGE_GITEA_URL
require_env FSDGG_CLI_CLIENT_ID
require_cmd python3

# Forward every useful flag. --force re-runs PKCE even if an existing
# live token is present.  --no-browser prints the URL but skips the
# webbrowser.open call (for headless / SSH sessions).
python3 "$here/forge_auth.py" login "$@"

# Install the credential helper. Safe to run every time.
"$here/install-git-credential-helper.sh"

ok  "login complete"
note "git operations against your Gitea server now authenticate silently."
note "Test with:"
note "    git ls-remote \"\$FORGE_ORCHESTRATOR_REPO_URL\""