# Dev to prod release orchestrator.
# Usage (from repo root):
#   npm run devtoprod:release
#   npm run devtoprod:release -- -DryRun
#   npm run devtoprod:release -- -Config infra/deploy/devtoprod.config.json
#
# Requires infra/deploy/devtoprod.config.json (copy from devtoprod.config.example.json).

param(
    [string]$Config = (Join-Path $PSScriptRoot "..\deploy\devtoprod.config.json"),
    [switch]$DryRun
)

$ErrorActionPreference = "Stop"
. (Join-Path $PSScriptRoot "lib\Deploy-CliResult.ps1")

$RepoRoot = (Resolve-Path (Join-Path $PSScriptRoot "..\..")).Path
Set-Location $RepoRoot

$BannerWidth = 64
$CompletedSteps = [System.Collections.Generic.List[string]]::new()
$FailedStep = $null

function Write-ReleaseBanner {
    param([bool]$Success, [string]$FailedAt = '')

    Write-Host ''
    Write-Host ('=' * $BannerWidth)
    if ($Success) {
        Write-Host '  RELEASE SUCCEEDED - production promoted'
        Write-Host ('  Steps: ' + ($CompletedSteps -join ', '))
        Write-Host '  Next:  open https://gallery.mysuperlab.netcraze.pro/'
    } else {
        Write-Host "  RELEASE FAILED at step: $FailedAt"
        if ($CompletedSteps.Count -gt 0) {
            Write-Host ('  Completed: ' + ($CompletedSteps -join ', '))
        }
        Write-Host "  Failed:    $FailedAt"
    }
    Write-Host ('=' * $BannerWidth)
}

function Get-StepEnabled {
    param([hashtable]$Steps, [string]$Name)
    if ($Steps.ContainsKey($Name)) {
        return [bool]$Steps[$Name]
    }
    return $false
}

function Invoke-Npm {
    param([string]$Script, [string[]]$ExtraArgs = @())
    $args = @('run', $Script)
    if ($ExtraArgs.Count -gt 0) {
        $args += '--'
        $args += $ExtraArgs
    }
    & npm @args
    return $LASTEXITCODE
}

function Invoke-Step {
    param(
        [string]$Name,
        [scriptblock]$Action
    )

    if ($DryRun) {
        Write-Host "[dry-run] Would run: $Name"
        $script:CompletedSteps.Add($Name)
        return $true
    }

    Write-Host ''
    Write-Host "--- Step: $Name ---" -ForegroundColor Cyan
    try {
        $code = & $Action
        if ($null -eq $code) {
            $code = if ($null -ne $LASTEXITCODE) { $LASTEXITCODE } else { 0 }
        }
        if ($code -ne 0) {
            $script:FailedStep = $Name
            return $false
        }
        $script:CompletedSteps.Add($Name)
        return $true
    } catch {
        Write-Host $_.Exception.Message -ForegroundColor Red
        $script:FailedStep = $Name
        return $false
    }
}

function Get-ProfileSteps {
    param([string]$Profile, [bool]$SchemaChanged)

    $base = @{
        validateBuild = $false
        gitCommitPush = $false
        thumbnails = $false
        backupDev = $false
        backupProd = $false
        migrateProdSchema = $false
        restoreProd = $false
        syncImages = $false
        dockerPublish = $false
        truenasRestartPause = $false
        verify = $false
    }

    switch ($Profile) {
        'code' {
            $base.validateBuild = $true
            $base.gitCommitPush = $true
            $base.dockerPublish = $true
            $base.truenasRestartPause = $true
            $base.verify = $true
        }
        'data' {
            $base.validateBuild = $true
            $base.thumbnails = $true
            $base.backupDev = $true
            $base.backupProd = $true
            $base.restoreProd = $true
            $base.syncImages = $true
            $base.verify = $true
        }
        default {
            $base.validateBuild = $true
            $base.gitCommitPush = $true
            $base.thumbnails = $true
            $base.backupDev = $true
            $base.backupProd = $true
            $base.restoreProd = $true
            $base.syncImages = $true
            $base.dockerPublish = $true
            $base.truenasRestartPause = $true
            $base.verify = $true
            if ($SchemaChanged) {
                $base.migrateProdSchema = $true
            }
        }
    }

    return $base
}

function Merge-Steps {
    param([hashtable]$ProfileSteps, [object]$ConfigSteps)

    if ($null -eq $ConfigSteps) { return $ProfileSteps }
    foreach ($key in $ConfigSteps.PSObject.Properties.Name) {
        $ProfileSteps[$key] = [bool]$ConfigSteps.$key
    }
    return $ProfileSteps
}

function Get-LatestDevBackup {
    $backupDir = Join-Path $RepoRoot 'db\DataBackup'
    if (-not (Test-Path $backupDir)) {
        throw "Backup directory not found: $backupDir"
    }
    $latest = Get-ChildItem -Path $backupDir -Filter 'gallery_dev_data_*.txt' |
        Sort-Object LastWriteTime -Descending |
        Select-Object -First 1
    if (-not $latest) {
        throw 'No gallery_dev_data_*.txt backup found in db/DataBackup/'
    }
    return $latest.FullName
}

function Test-BoundsJson {
    param(
        [string]$Url,
        [switch]$Insecure,
        [int]$MaxTimeSeconds = 10,
        [int]$Retries = 3
    )

    for ($attempt = 1; $attempt -le $Retries; $attempt++) {
        $curlArgs = @('-s', '-f', '--max-time', $MaxTimeSeconds)
        if ($Insecure) { $curlArgs += '-k' }
        $curlArgs += $Url

        $body = & curl.exe @curlArgs 2>$null
        if ($LASTEXITCODE -eq 0 -and $body) {
            try {
                $json = $body | ConvertFrom-Json
                if ($null -ne $json.min_year -and $null -ne $json.max_year) {
                    return $true
                }
            } catch {
                # Continue retries below.
            }
        }

        if ($attempt -lt $Retries) {
            Start-Sleep -Seconds 2
        }
    }

    return $false
}

# --- Load config ---
if (-not (Test-Path $Config)) {
    Write-Host "Config not found: $Config" -ForegroundColor Red
    Write-Host 'Copy infra/deploy/devtoprod.config.example.json to infra/deploy/devtoprod.config.json and edit it.'
    Write-ReleaseBanner -Success $false -FailedAt 'loadConfig'
    exit 1
}

$raw = Get-Content -LiteralPath $Config -Raw -Encoding UTF8
$cfg = $raw | ConvertFrom-Json

$profile = if ($cfg.profile) { $cfg.profile } else { 'full' }
$schemaChanged = [bool]$cfg.schemaChanged
$steps = Merge-Steps (Get-ProfileSteps -Profile $profile -SchemaChanged $schemaChanged) $cfg.steps

if ($cfg.autoConfirm) {
    $env:CONFIRM_PROD = '1'
}

if ($cfg.smb.user) { $env:SMB_USER = $cfg.smb.user }
if ($cfg.smb.password) { $env:SMB_PASSWORD = $cfg.smb.password }

$smbHost = if ($cfg.smb.host) { $cfg.smb.host } else { '192.168.10.122' }
$smbShare = if ($cfg.smb.share) { $cfg.smb.share } else { 'Gallery' }
$imageDest = "\\$smbHost\$smbShare\data\images"

$script:backupFile = ''
if ($cfg.backupFile -and $cfg.backupFile.Trim()) {
    $script:backupFile = (Resolve-Path (Join-Path $RepoRoot $cfg.backupFile) -ErrorAction Stop).Path
}

Write-Host "Gallery dev -> prod release"
Write-Host "Config: $Config"
Write-Host "Profile: $profile"
if ($DryRun) { Write-Host 'Mode: DRY RUN (no changes)' -ForegroundColor Yellow }

$enabled = @($steps.Keys | Where-Object { $steps[$_] } | Sort-Object)
Write-Host ('Steps: ' + ($enabled -join ', '))

# --- Steps ---
if (Get-StepEnabled $steps 'validateBuild') {
    $ok = Invoke-Step 'validateBuild' {
        $code = Invoke-Npm 'prod:build'
        if ($code -ne 0) { return $code }

        # Always prefer the dev host on LAN (192.168.10.70) because the HTTPS dev domain
        # can return transient 504 HTML pages during load.
        $devCandidates = @()
        if ($cfg.verify.devLanUrl) { $devCandidates += $cfg.verify.devLanUrl }
        $devCandidates += 'http://192.168.10.70:5173/api/bounds'
        if ($cfg.verify.lanUrl) { $devCandidates += $cfg.verify.lanUrl }
        if ($cfg.verify.devUrl) { $devCandidates += $cfg.verify.devUrl }
        $devCandidates = $devCandidates | Select-Object -Unique

        $devOk = $false
        foreach ($u in $devCandidates) {
            Write-Host "Checking dev /api/bounds: $u"
            $useInsecure = $u.StartsWith('https://', [System.StringComparison]::OrdinalIgnoreCase)
            if (Test-BoundsJson -Url $u -Insecure:$useInsecure -MaxTimeSeconds 10 -Retries 3) {
                Write-Host "Dev API OK: $u"
                $devOk = $true
                break
            }
            Write-Host "Dev API check failed for: $u" -ForegroundColor DarkYellow
        }

        if (-not $devOk) {
            Write-Host "Dev API check failed on all URLs." -ForegroundColor Red
            return 1
        }
        return 0
    }
    if (-not $ok) { Write-ReleaseBanner -Success $false -FailedAt $FailedStep; exit 1 }
}

if (Get-StepEnabled $steps 'gitCommitPush') {
    $ok = Invoke-Step 'gitCommitPush' {
        $branch = if ($cfg.git.branch) { $cfg.git.branch } else { 'main' }
        $message = if ($cfg.git.message) { $cfg.git.message } else { 'Release: deploy' }
        $stageAll = if ($null -ne $cfg.git.stageAll) { [bool]$cfg.git.stageAll } else { $true }

        if ($stageAll) {
            git add -A
            if ($LASTEXITCODE -ne 0) { return $LASTEXITCODE }
        }

        $status = git status --porcelain
        if (-not $status) {
            Write-Host 'Git: working tree clean, skipping commit.'
        } else {
            git commit -m $message
            if ($LASTEXITCODE -ne 0) { return $LASTEXITCODE }
        }

        git push origin $branch
        if ($LASTEXITCODE -ne 0) { return $LASTEXITCODE }
        return 0
    }
    if (-not $ok) { Write-ReleaseBanner -Success $false -FailedAt $FailedStep; exit 1 }
}

if (Get-StepEnabled $steps 'thumbnails') {
    $ok = Invoke-Step 'thumbnails' {
        $code = Invoke-Npm 'devtoprod:thumbnails'
        return $code
    }
    if (-not $ok) { Write-ReleaseBanner -Success $false -FailedAt $FailedStep; exit 1 }
}

if (Get-StepEnabled $steps 'backupDev') {
    $ok = Invoke-Step 'backupDev' {
        $code = Invoke-Npm 'dev:db:backup'
        if ($code -ne 0) { return $code }
        if (-not $script:backupFile) {
            $script:backupFile = Get-LatestDevBackup
            Write-Host "Using latest dev backup: $($script:backupFile)"
        }
        return 0
    }
    if (-not $ok) { Write-ReleaseBanner -Success $false -FailedAt $FailedStep; exit 1 }
}

if (Get-StepEnabled $steps 'backupProd') {
    $ok = Invoke-Step 'backupProd' {
        $code = Invoke-Npm 'prod:db:backup'
        return $code
    }
    if (-not $ok) { Write-ReleaseBanner -Success $false -FailedAt $FailedStep; exit 1 }
}

if (Get-StepEnabled $steps 'migrateProdSchema') {
    $ok = Invoke-Step 'migrateProdSchema' {
        $env:DB_NAME = 'gallery_prod'
        try {
            $code = Invoke-Npm 'dev:migrate'
            return $code
        } finally {
            Remove-Item Env:\DB_NAME -ErrorAction SilentlyContinue
        }
    }
    if (-not $ok) { Write-ReleaseBanner -Success $false -FailedAt $FailedStep; exit 1 }
}

if (Get-StepEnabled $steps 'restoreProd') {
    $ok = Invoke-Step 'restoreProd' {
        if (-not $script:backupFile) {
            if ($cfg.backupFile -and $cfg.backupFile.Trim()) {
                $script:backupFile = (Resolve-Path (Join-Path $RepoRoot $cfg.backupFile)).Path
            } else {
                $script:backupFile = Get-LatestDevBackup
            }
        }
        $rel = $script:backupFile.Replace($RepoRoot, '').TrimStart('\', '/').Replace('\', '/')
        Write-Host "Restore file: $rel"
        $code = Invoke-Npm 'devtoprod:db:restore' @('--file', $rel)
        return $code
    }
    if (-not $ok) { Write-ReleaseBanner -Success $false -FailedAt $FailedStep; exit 1 }
}

if (Get-StepEnabled $steps 'syncImages') {
    $ok = Invoke-Step 'syncImages' {
        $syncScript = Join-Path $PSScriptRoot 'sync-images-to-prod.ps1'
        if ($cfg.autoConfirm) {
            & $syncScript -Dest $imageDest -SkipConfirm
        } else {
            & $syncScript -Dest $imageDest
        }
        return $LASTEXITCODE
    }
    if (-not $ok) { Write-ReleaseBanner -Success $false -FailedAt $FailedStep; exit 1 }
}

if (Get-StepEnabled $steps 'dockerPublish') {
    $ok = Invoke-Step 'dockerPublish' {
        $code = Invoke-Npm 'prod:docker:publish'
        return $code
    }
    if (-not $ok) { Write-ReleaseBanner -Success $false -FailedAt $FailedStep; exit 1 }
}

if (Get-StepEnabled $steps 'truenasRestartPause') {
    if ($DryRun) {
        Write-Host '[dry-run] Would pause for TrueNAS gallery-web restart'
        $CompletedSteps.Add('truenasRestartPause')
    } else {
        Write-Host ''
        Write-Host '--- Manual: restart gallery-web on TrueNAS ---' -ForegroundColor Yellow
        Write-Host '1. TrueNAS Web UI -> Apps -> gallery-web -> Restart'
        Write-Host '2. Wait until status is Running'
        Read-Host 'Press Enter after restarting gallery-web on TrueNAS'
        $CompletedSteps.Add('truenasRestartPause')
    }
}

if (Get-StepEnabled $steps 'verify') {
    $ok = Invoke-Step 'verify' {
        $lanUrl = if ($cfg.verify.lanUrl) { $cfg.verify.lanUrl } else { 'http://192.168.10.122:5173/api/bounds' }
        $publicUrl = if ($cfg.verify.publicUrl) { $cfg.verify.publicUrl } else { 'https://gallery.mysuperlab.netcraze.pro/api/bounds' }

        if (-not (Test-BoundsJson -Url $lanUrl)) {
            Write-Host "LAN verify failed: $lanUrl" -ForegroundColor Red
            return 1
        }
        Write-Host "LAN API OK: $lanUrl"

        if (-not (Test-BoundsJson -Url $publicUrl -Insecure)) {
            Write-Host "Public verify failed: $publicUrl" -ForegroundColor Red
            return 1
        }
        Write-Host "Public API OK: $publicUrl"
        return 0
    }
    if (-not $ok) { Write-ReleaseBanner -Success $false -FailedAt $FailedStep; exit 1 }
}

Write-ReleaseBanner -Success $true
exit 0