#!/bin/bash

echo "🔄 Extracting new keys from YubiKey and updating Git config..."

# 1. Update PERSONAL (Slot 9a) -> .git-naomi
# ---------------------------------------------------------
echo "   -> Processing Slot 9a (Personal)..."
KEY_9A=$(ykman piv keys export 9a - | ssh-keygen -i -m PKCS8 -f /dev/stdin)
git config -f ~/.git-naomi user.signingkey "key::$KEY_9A"

# 2. Update DEEPGRAM (Slot 9c) -> .git-dg
# ---------------------------------------------------------
echo "   -> Processing Slot 9c (Deepgram)..."
KEY_9C=$(ykman piv keys export 9c - | ssh-keygen -i -m PKCS8 -f /dev/stdin)
git config -f ~/.git-dg user.signingkey "key::$KEY_9C"

# 3. Update FREECODECAMP (Slot 9e) -> .git-fcc
# ---------------------------------------------------------
echo "   -> Processing Slot 9e (FreeCodeCamp)..."
KEY_9D=$(ykman piv keys export 9e - | ssh-keygen -i -m PKCS8 -f /dev/stdin)
git config -f ~/.git-fcc user.signingkey "key::$KEY_9D"

echo "✅ Done! Your local Git is now synced with your new hardware keys."
echo "⚠️  REMINDER: You must now upload these new public keys to GitHub and your 'prod' server!"