#!/usr/bin/env bash
set -Eeuo pipefail

ROOT="${ROOT:-/var/www/dhv2.korexlabs.com}"
ZIP="${ZIP:-$ROOT/DH_V2_PATCH_D5_6_4.zip}"
STAMP="$(date +%Y%m%d_%H%M%S)"
STAGE="/root/dhv2-d564-stage-$STAMP"
BACKUP_ROOT="/root/DH_V2_BACKUPS"
PRE_BACKUP="$BACKUP_ROOT/D5_6_4_PRE_$STAMP"
POST_BACKUP="$BACKUP_ROOT/D5_6_4_OK_$STAMP"
API_TEST_IMAGE='dhv2-api:d564-test'
WEB_TEST_IMAGE='dhv2-web:d564-test'
TEST_LOG="/tmp/dhv2-d564-tests-$STAMP.log"
MIGRATION_LOG="/tmp/dhv2-d564-migration-$STAMP.log"
HEALTH_FILE="/tmp/dhv2-d564-health-$STAMP.json"
MIN_FREE_KB=$((4 * 1024 * 1024))

cleanup() {
  rm -rf "$STAGE"
  rm -f "$TEST_LOG" "$MIGRATION_LOG" "$HEALTH_FILE"
  docker image rm "$API_TEST_IMAGE" "$WEB_TEST_IMAGE" >/dev/null 2>&1 || true
}
trap cleanup EXIT
trap 'echo; echo "ERROR D5.6.4 en línea $LINENO: $BASH_COMMAND"' ERR

cd "$ROOT"
test -f "$ZIP"
CURRENT_API="$(node -p "require('./api-v3/package.json').version")"
CURRENT_WEB="$(node -p "require('./web-v2/package.json').version")"
[[ "$CURRENT_API" == '0.19.6-2' ]] || { echo "ERROR: D5.6.4 requiere API 0.19.6-2. Actual: $CURRENT_API"; exit 1; }
[[ "$CURRENT_WEB" == '0.19.6-3' ]] || { echo "ERROR: D5.6.4 requiere WEB 0.19.6-3. Actual: $CURRENT_WEB"; exit 1; }

FREE_KB="$(df -Pk "$ROOT" | awk 'NR==2 {print $4}')"
if [[ ! "$FREE_KB" =~ ^[0-9]+$ ]] || (( FREE_KB < MIN_FREE_KB )); then
  echo "ERROR: espacio libre insuficiente. Libre: $(( FREE_KB / 1024 )) MB"
  exit 1
fi
[[ "$(docker inspect dhv2-db --format '{{.State.Health.Status}}' 2>/dev/null || true)" == 'healthy' ]]
docker compose exec -T db sh -lc 'pg_isready -U "$POSTGRES_USER" -d "$POSTGRES_DB"'

echo '[1/10] Staging incremental'
mkdir -p "$STAGE"
cp -a api-v3 "$STAGE/api-v3"
cp -a web-v2 "$STAGE/web-v2"
mkdir -p "$STAGE/scripts"
unzip -oq "$ZIP" 'api-v3/*' 'web-v2/*' 'scripts/*' -d "$STAGE"
[[ "$(node -p "require('$STAGE/api-v3/package.json').version")" == '0.19.6-4' ]]
[[ "$(node -p "require('$STAGE/web-v2/package.json').version")" == '0.19.6-4' ]]
bash "$STAGE/scripts/check-phase-d5-6-4.sh" "$STAGE"

echo '[2/10] Build API en staging'
docker build --target builder -t "$API_TEST_IMAGE" "$STAGE/api-v3"

echo '[3/10] Tests API en staging'
docker run --rm \
  -v "$STAGE/api-v3/test:/app/test:ro" \
  -v "$STAGE/api-v3/tsconfig.test.json:/app/tsconfig.test.json:ro" \
  "$API_TEST_IMAGE" npm test 2>&1 | tee "$TEST_LOG"
grep -Eq 'tests[[:space:]]+266' "$TEST_LOG"
grep -Eq 'pass[[:space:]]+266' "$TEST_LOG"
grep -Eq 'fail[[:space:]]+0' "$TEST_LOG"

echo '[4/10] Build WEB en staging'
docker build -t "$WEB_TEST_IMAGE" "$STAGE/web-v2"

echo '[5/10] Backup PRE'
mkdir -p "$PRE_BACKUP"; chmod 700 "$PRE_BACKUP"
docker compose exec -T db sh -lc 'pg_dump -U "$POSTGRES_USER" -d "$POSTGRES_DB" -Fc' > "$PRE_BACKUP/database.dump"
tar -czf "$PRE_BACKUP/source.tar.gz" \
  --exclude='api-v3/node_modules' --exclude='api-v3/dist' \
  --exclude='web-v2/node_modules' --exclude='web-v2/dist' \
  api-v3 web-v2 scripts docs docker-compose.yml .env.example .gitignore README.md
if [[ -f .env ]]; then cp -a .env "$PRE_BACKUP/.env"; chmod 600 "$PRE_BACKUP/.env"; fi
printf 'Base previa API=%s WEB=%s\n' "$CURRENT_API" "$CURRENT_WEB" > "$PRE_BACKUP/BASE_VERSION.txt"
(
  cd "$PRE_BACKUP"
  sha256sum database.dump source.tar.gz BASE_VERSION.txt > SHA256SUMS.txt
  [[ ! -f .env ]] || sha256sum .env >> SHA256SUMS.txt
  sha256sum -c SHA256SUMS.txt
)

echo '[6/10] Aplicando patch incremental'
unzip -oq "$ZIP" 'api-v3/*' 'web-v2/*' 'scripts/*' -d "$ROOT"
chmod +x scripts/check-phase-d5-6-4.sh scripts/phase-d5-6-4-acceptance.sh scripts/deploy-phase-d5-6-4.sh
bash scripts/check-phase-d5-6-4.sh "$ROOT"

echo '[7/10] Construyendo imágenes finales'
docker compose build api migrate web

echo '[8/10] Verificando migraciones'
docker compose --profile tools run --rm migrate npm run migration:show 2>&1 | tee "$MIGRATION_LOG"
grep -Fq 'Pending migrations: no' "$MIGRATION_LOG"

echo '[9/10] Recreando API/web y aceptación'
docker compose up -d --force-recreate api web
for i in $(seq 1 40); do
  if curl -fsS http://127.0.0.1:3101/api/v3/health >"$HEALTH_FILE" 2>/dev/null; then break; fi
  if [[ "$i" == '40' ]]; then docker compose logs --tail=200 api web; exit 1; fi
  sleep 2
done
cat "$HEALTH_FILE"; echo
grep -Fq '"version":"0.19.6-4"' "$HEALTH_FILE"
grep -Fq '"phase":"D5.6.4"' "$HEALTH_FILE"
grep -Fq '"database":"ok"' "$HEALTH_FILE"
bash scripts/phase-d5-6-4-acceptance.sh

echo '[10/10] Backup POST'
mkdir -p "$POST_BACKUP"; chmod 700 "$POST_BACKUP"
docker compose exec -T db sh -lc 'pg_dump -U "$POSTGRES_USER" -d "$POSTGRES_DB" -Fc' > "$POST_BACKUP/database.dump"
tar -czf "$POST_BACKUP/source.tar.gz" \
  --exclude='api-v3/node_modules' --exclude='api-v3/dist' \
  --exclude='web-v2/node_modules' --exclude='web-v2/dist' \
  api-v3 web-v2 scripts docs docker-compose.yml .env.example .gitignore README.md
cp -a "$ZIP" "$POST_BACKUP/"
docker compose ps -a > "$POST_BACKUP/docker-status.txt"
printf 'D5.6.4 OK\nBase previa API=%s WEB=%s\nVersión final API/WEB=0.19.6-4\n' "$CURRENT_API" "$CURRENT_WEB" > "$POST_BACKUP/BACKUP_OK.txt"
if [[ -f .env ]]; then cp -a .env "$POST_BACKUP/.env"; chmod 600 "$POST_BACKUP/.env"; fi
(
  cd "$POST_BACKUP"
  sha256sum database.dump source.tar.gz "$(basename "$ZIP")" BACKUP_OK.txt > SHA256SUMS.txt
  [[ ! -f .env ]] || sha256sum .env >> SHA256SUMS.txt
  sha256sum -c SHA256SUMS.txt
)

echo
echo 'ACEPTACIÓN DE FASE D5.6.4: OK'
echo 'D5.6.4 desplegada correctamente'
echo 'API: 0.19.6-4'
echo 'WEB: 0.19.6-4'
echo "Backup PRE: $PRE_BACKUP"
echo "Backup POST: $POST_BACKUP"