keyguard: add update script

    useBwrap = false;

  };

  passthru.updateScript = ./update.sh;

  doCheck = false;

  gradleFlags = [ "-Dorg.gradle.java.home=${jdk17}" ];

#!/usr/bin/env nix-shell

#!nix-shell -I nixpkgs=./. -i bash -p bash nixVersions.latest curl coreutils jq common-updater-scripts

set -eou pipefail

ROOT="$(dirname "$(readlink -f "$0")")"

latest=$(curl ${GITHUB_TOKEN:+-u ":$GITHUB_TOKEN"} -sL https://api.github.com/repos/AChep/keyguard-app/releases/latest)

latestTag=$(echo "$latest" | jq -r ".tag_name")

latestName=$(echo "$latest" | jq -r ".name")

latestVersion=$(echo "$latestName" | awk -F'v|-' '{print $2}')

currentVersion=$(nix-instantiate --eval -E "with import ./. {}; keyguard.version" | tr -d '"')

echo "latest  version: $latestVersion"

echo "current version: $currentVersion"

if [[ "$latestVersion" == "$currentVersion" ]]; then

    echo "package is up-to-date"

    exit 0

fi

hash=$(nix hash convert --hash-algo sha256 --to sri $(nix-prefetch-url --unpack "https://github.com/AChep/keyguard-app/archive/refs/tags/${latestTag}.tar.gz"))

update-source-version keyguard $latestVersion $hash

sed -i "s/tag = \"r[0-9]\+\";/tag = \"$latestTag\";/g" "$ROOT/package.nix"

$(nix-build -A keyguard.mitmCache.updateScript)