// genkey generates an Ed25519 keypair for license signing.
// Run once; store the private key in Bitwarden and set the public key in config.
//
// Usage: go run ./cmd/genkey
package main

import (
	"encoding/json"
	"fmt"
	"os"
	"time"

	"github.com/wangjia/jiu/backend/internal/util"
)

func main() {
	priv, pub, err := util.GenerateEd25519KeyPair()
	if err != nil {
		fmt.Fprintf(os.Stderr, "failed to generate keypair: %v\n", err)
		os.Exit(1)
	}

	fmt.Println("=== Ed25519 License Keypair ===")
	fmt.Println()
	fmt.Println("[Bitwarden] Private key (keep secret, never commit):")
	fmt.Println(priv)
	fmt.Println()
	fmt.Println("[Config / LICENSE_ED25519_PUBLIC_KEY] Public key:")
	fmt.Println(pub)
	fmt.Println()

	// Demo: issue and verify a sample token to confirm the keypair works
	now := time.Now()
	exp := now.Add(30 * 24 * time.Hour).Unix()
	sample := util.LicensePayload{
		ShopID:     1,
		LicenseID:  1,
		Type:       "trial",
		IssuedAt:   now.Unix(),
		ExpiresAt:  &exp,
		MaxDevices: 3,
	}
	token, err := util.IssueLicenseToken(sample, priv)
	if err != nil {
		fmt.Fprintf(os.Stderr, "demo sign failed: %v\n", err)
		os.Exit(1)
	}
	verified, err := util.VerifyLicenseToken(token, pub)
	if err != nil {
		fmt.Fprintf(os.Stderr, "demo verify failed: %v\n", err)
		os.Exit(1)
	}
	out, _ := json.MarshalIndent(verified, "", "  ")
	fmt.Println("[Demo] Sample token (30-day trial, shop_id=1):")
	fmt.Println(token)
	fmt.Println()
	fmt.Println("[Demo] Verified payload:")
	fmt.Println(string(out))
}