#!/usr/bin/env bash
set -euo pipefail
# Usage: encode-evidence.sh input output label short-commit
# Identical privacy masks on both sides; no outcome content is replaced.
# The destination prefix is synthetic; its repository-name suffix stays visible.
input=$1
output=$2
label=$3
commit=$4
filter="scale=1280:800,drawbox=x=392:y=94:w=290:h=22:color=black:t=fill,drawbox=x=725:y=410:w=160:h=40:color=black:t=fill,drawbox=x=990:y=65:w=275:h=50:color=black:t=fill,drawbox=x=0:y=736:w=1280:h=64:color=black:t=fill,drawtext=text='$label | $commit | Web - Chromium - Linux - dark - 1280x800 CSS':x=24:y=750:fontsize=18:fontcolor=white,drawtext=text='Synthetic destination prefix and unrelated labels redacted':x=24:y=777:fontsize=13:fontcolor=gray"
case "$output" in
  *.mp4) ffmpeg -y -i "$input" -vf "$filter,fps=15" -c:v libx264 -preset fast -crf 20 -an "$output" ;;
  *.png) ffmpeg -y -i "$input" -vf "$filter" -frames:v 1 "$output" ;;
esac