setupidentity

var (
	// ErrFingerprintNotFound is returned when a GPG key fingerprint cannot be parsed.
	ErrFingerprintNotFound = errors.New("could not determine fingerprint for key")
	// ErrNoSecretKey is returned when no secret key is found after import.
	ErrNoSecretKey = errors.New("no secret key found after import")
	// ErrEmptyToken is returned when the user provides an empty token.
	ErrEmptyToken = errors.New("token cannot be empty")
)

var SetupIdentityCmd = &cobra.Command{
	Use:   "setup-identity",
	Short: "Bootstraps the secure environment (GPG, Pass, GitHub).",
	Long: `Configures the "Chain of Trust" workflow: GPG Agent, Git signing,
Password Store, and GitHub CLI authentication.`,
	RunE: func(cmd *cobra.Command, _ []string) error {
		presenter := ui.NewPresenter(cmd.OutOrStdout(), cmd.ErrOrStderr())
		ctx := cmd.Context()

		presenter.Summary("Secure Environment Bootstrap")

		presenter.Header("1. Configuring Tools & Shell")

		err := configureGPGAgent(ctx, presenter)
		if err != nil {
			return err
		}

		err = configureGitSecurity(ctx, presenter)
		if err != nil {
			return err
		}

		err = configureBashrc(presenter)
		if err != nil {
			return err
		}

		presenter.Newline()

		presenter.Header("2. Identity & Secrets")

		keyID, err := importGPGKey(ctx, presenter)
		if err != nil {
			return err
		}

		err = trustGPGKey(ctx, presenter, keyID)
		if err != nil {
			return err
		}

		err = initPass(ctx, presenter, keyID)
		if err != nil {
			return err
		}

		err = authenticateGitHub(ctx, presenter)
		if err != nil {
			return err
		}

		presenter.Success("Bootstrap Complete! Your environment is secure.")
		presenter.Advice("Run 'source ~/.bashrc' to refresh your shell configuration.")

		return nil
	},
}