# Start configuration added by Zim install {{{
#
# User configuration sourced by interactive shells
#

# -----------------
# Zsh configuration
# -----------------

#
# Input/output
#

setopt CLOBBER # enable >>

# Set editor default keymap to emacs (`-e`) or vi (`-v`)
bindkey -e

# Prompt for spelling correction of commands.
#setopt CORRECT

# Customize spelling correction prompt.
#SPROMPT='zsh: correct %F{red}%R%f to %F{green}%r%f [nyae]? '

# Remove path separator from WORDCHARS.
WORDCHARS=${WORDCHARS//[\/]}

# -----------------
# Zim configuration
# -----------------

# Use degit instead of git as the default tool to install and update modules.
#zstyle ':zim:zmodule' use 'degit'

# --------------------
# Module configuration
# --------------------

#
# git
#

# Set a custom prefix for the generated aliases. The default prefix is 'G'.
#zstyle ':zim:git' aliases-prefix 'g'

#
# input
#

# Append `../` to your input for each `.` you type after an initial `..`
#zstyle ':zim:input' double-dot-expand yes

#
# termtitle
#

# Set a custom terminal title format using prompt expansion escape sequences.
# See http://zsh.sourceforge.net/Doc/Release/Prompt-Expansion.html#Simple-Prompt-Escapes
# If none is provided, the default '%n@%m: %~' is used.
#zstyle ':zim:termtitle' format '%1~'

#
# zsh-autosuggestions
#

# Disable automatic widget re-binding on each precmd. This can be set when
# zsh-users/zsh-autosuggestions is the last module in your ~/.zimrc.
ZSH_AUTOSUGGEST_MANUAL_REBIND=1

# Customize the style that the suggestions are shown with.
# See https://github.com/zsh-users/zsh-autosuggestions/blob/master/README.md#suggestion-highlight-style
#ZSH_AUTOSUGGEST_HIGHLIGHT_STYLE='fg=242'

#
# zsh-syntax-highlighting
#

# Set what highlighters will be used.
# See https://github.com/zsh-users/zsh-syntax-highlighting/blob/master/docs/highlighters.md
ZSH_HIGHLIGHT_HIGHLIGHTERS=(main brackets)

# Customize the main highlighter styles.
# See https://github.com/zsh-users/zsh-syntax-highlighting/blob/master/docs/highlighters/main.md#how-to-tweak-it
#typeset -A ZSH_HIGHLIGHT_STYLES
#ZSH_HIGHLIGHT_STYLES[comment]='fg=242'

# ------------------
# Initialize modules
# ------------------

ZIM_HOME=${ZDOTDIR:-${HOME}}/.zim
# Download zimfw plugin manager if missing.
if [[ ! -e ${ZIM_HOME}/zimfw.zsh ]]; then
  if (( ${+commands[curl]} )); then
    curl -fsSL --create-dirs -o ${ZIM_HOME}/zimfw.zsh \
        https://github.com/zimfw/zimfw/releases/latest/download/zimfw.zsh
  else
    mkdir -p ${ZIM_HOME} && wget -nv -O ${ZIM_HOME}/zimfw.zsh \
        https://github.com/zimfw/zimfw/releases/latest/download/zimfw.zsh
  fi
fi
# Install missing modules, and update ${ZIM_HOME}/init.zsh if missing or outdated.
if [[ ! ${ZIM_HOME}/init.zsh -nt ${ZDOTDIR:-${HOME}}/.zimrc ]]; then
  source ${ZIM_HOME}/zimfw.zsh init -q
fi
# Initialize modules.
source ${ZIM_HOME}/init.zsh

# ------------------------------
# Post-init module configuration
# ------------------------------

#
# History
#

unsetopt SHARE_HISTORY

setopt EXTENDED_HISTORY
setopt INC_APPEND_HISTORY
setopt HIST_IGNORE_ALL_DUPS

export HISTTIMEFORMAT="[%F %T] "
export HISTFILE=~/.zsh_history
export HISTFILESIZE=1000000000
export HISTSIZE=1000000000

#alias history='history -E 0'


#
# zsh-history-substring-search
#

zmodload -F zsh/terminfo +p:terminfo
# Bind ^[[A/^[[B manually so up/down works both before and after zle-line-init
#for key ('^[[A' '^P' ${terminfo[kcuu1]}) bindkey ${key} history-substring-search-up
#for key ('^[[B' '^N' ${terminfo[kcud1]}) bindkey ${key} history-substring-search-down
#for key ('k') bindkey -M vicmd ${key} history-substring-search-up
#for key ('j') bindkey -M vicmd ${key} history-substring-search-down
#unset key
# }}} End configuration added by Zim install


# screen window naming

if [[ "$TERM" == screen* ]]; then
    screen_set_window_title () {

	if [ -z "$SLABEL" ]
	then

	    local HPWD="$PWD"
	    case $HPWD in
		$HOME) HPWD="~";;
		$HOME/*) HPWD="~${HPWD#$HOME}";;
	    esac
	    printf '\ek%s\e\\' "$HPWD"
	else
	    printf '\ek%s\e\\' "$SLABEL"
	fi
    }
    PROMPT_COMMAND="screen_set_window_title; $PROMPT_COMMAND"
fi

edit_secure() {
    # Using $HOME is safer than ~ inside scripts
    local plain_file="$HOME/.scripts/secure_functions.sh"
    local encrypted_file="${plain_file}.gpg"

    # 1. Check if the encrypted file exists
    if [[ -f "$encrypted_file" ]]; then
        # It exists: Decrypt it so we can edit
        gpg -q -o "$plain_file" -d "$encrypted_file" || return 1
    else
        # It doesn't exist: Create the directory just in case
        mkdir -p "$(dirname "$plain_file")"
        echo "Creating new secure file..."
    fi

    # 2. Open editor (Defaults to nano if EDITOR is not set)
    ${EDITOR:-nano} "$plain_file"

    # 3. Encrypt and Cleanup
    # Only encrypt if the file actually exists (in case you exited editor without saving)
    if [[ -f "$plain_file" ]]; then
        echo "Encrypting..."
        # Encrypt (-c) AND THEN remove the plaintext file (rm) only if encryption succeeded (&&)
        gpg -c "$plain_file" && rm "$plain_file"
        echo "Done. Secrets saved to $encrypted_file"
    else
        echo "Aborted: No file saved."
    fi
}


_run_secure_func() {
  local func_name="$1"
  local encrypted_file="$HOME/.scripts/secure_functions.sh.gpg"

  [[ -f "$encrypted_file" ]] || { 
    echo "Error: Encrypted file not found" >&2
    return 1 
  }

  # SECURITY CRITICAL: Run in isolated subshell with history disabled
  (
    # Cross-shell history disabling
    unset HISTFILE          # Disables history file in BOTH shells
    HISTSIZE=0              # Bash: disable in-memory history
    SAVEHIST=0              # Zsh: disable history saving
    
    # Zsh-specific hardening (safe to run in bash too)
    [ -n "${ZSH_VERSION:-}" ] && setopt no_history no_hist_save no_hist_verify 2>/dev/null || true

    # Decrypt → source → execute (all in-memory)
    gpg --quiet --decrypt "$encrypted_file" 2>/dev/null | {
      source /dev/stdin
      "$func_name"
    }
  )
  
  # Optional: Invalidate cache after use (prevents lingering secrets)
  #{ sleep 1; echo RELOADAGENT | gpg-connect-agent >/dev/null 2>&1; } &
}


test_secure() {
 _run_secure_func _test_secure
}


[ -f ~/.fzf.zsh ] && source ~/.fzf.zsh

alias bat=batcat
alias ll='eza --icons=auto -T --level 2 -lah --group-directories-first --color=always | less'
alias config='/usr/bin/git --git-dir=$HOME/.dotfiles/ --work-tree=$HOME'

export VCPKG_ROOT=/opt/vcpkg

. "$HOME/.local/bin/env"