#!/usr/bin/env bash
set -euo pipefail
log_info(){ echo "[INFO]  $(date -Iseconds) $*"; }
log_warn(){ echo "[WARN]  $(date -Iseconds) $*" >&2; }
log_error(){ echo "[ERROR] $(date -Iseconds) $*" >&2; }
die(){ log_error "$*"; exit 1; }
need(){ command -v "$1" >/dev/null 2>&1 || die "Missing required tool: $1"; }

expand_path() {
  local p="$1"
  # shellcheck disable=SC2086
  eval echo "$p"
}

confirm_gate() {
  : "${DRY_RUN:=1}"
  : "${REQUIRE_CONFIRM:=1}"
  : "${CONFIRM_PHRASE:=I UNDERSTAND THIS WILL CREATE A SECRETS VAULT}"
  [[ "$DRY_RUN" == "0" ]] || die "DRY_RUN=$DRY_RUN (set DRY_RUN=0)."
  if [[ "$REQUIRE_CONFIRM" == "1" ]]; then
    echo "Type to confirm:"
    echo "  $CONFIRM_PHRASE"
    read -r input
    [[ "$input" == "$CONFIRM_PHRASE" ]] || die "Confirmation phrase mismatch."
  fi
}

json_escape() {
  local s="$1"
  s="${s//\\/\\\\}"; s="${s//\"/\\\"}"; s="${s//$'\n'/\\n}"
  printf "%s" "$s"
}