#!/bin/bash
# scripts/install_certificate.sh
# 导入Mac Development Certificate到Keychain

set -e

echo "=== 导入 Certificate 到 Keychain ==="

# 配置
TEAM_ID="K3TDMD9Y6B"
BUNDLE_ID="com.momentry.markbase.fskit"
KEYCHAIN=~/Library/Keychains/login.keychain-db

# 检查Downloads目录中的证书文件
echo ""
echo "搜索证书文件..."
CERT_FILES=$(find ~/Downloads -name "*.cer" -mtime -1 2>/dev/null | head -5)

if [ -z "${CERT_FILES}" ]; then
    echo "❌ 未找到证书文件"
    echo "   请确保已从Portal下载证书到 ~/Downloads/"
    exit 1
fi

echo ""
echo "找到证书文件："
echo "${CERT_FILES}"
echo ""

# 选择最新的证书文件
CERT_FILE=$(echo "${CERT_FILES}" | head -1)
echo "使用证书：${CERT_FILE}"
echo ""

# 导入证书到Keychain
echo "步骤1: 导入证书..."
security import "${CERT_FILE}" \
    -k "${KEYCHAIN}" \
    -T /usr/bin/codesign \
    -T /Applications/Xcode.app/Contents/Developer/usr/bin/codesign \
    -f pkcs1

echo ""
echo "步骤2: 验证证书导入..."
security find-identity -v -p codesigning

echo ""
echo "步骤3: 检查Keychain状态..."
security list-keychains

echo ""
echo "✅ Certificate导入成功"
echo ""
echo "证书信息："
echo "  Team ID: ${TEAM_ID}"
echo "  Bundle ID: ${BUNDLE_ID}"
echo "  Expiration: 2027/05/18"
echo ""
echo "下一步："
echo "  1. 构建签名应用"
echo "  2. 安装System Extension"
echo "  3. System Settings批准"