#!/usr/bin/env bash
set -Eeuo pipefail

ROOT="${ROOT:-/var/www/dhv2.korexlabs.com}"
ZIP="${ZIP:-$ROOT/DH_V2_FASE_D5_3_7_2_4_SOURCE.zip}"
STAMP="$(date +%Y%m%d_%H%M%S)"
STAGE="/root/dhv2-d53724-stage-$STAMP"
BACKUP_ROOT="/root/DH_V2_BACKUPS"
PRE_BACKUP="$BACKUP_ROOT/D5_3_7_2_4_PRE_$STAMP"
POST_BACKUP="$BACKUP_ROOT/D5_3_7_2_4_OK_$STAMP"
MIGRATION_LOG="/tmp/dhv2-d53724-migration-$STAMP.log"
MIGRATION_AFTER_LOG="/tmp/dhv2-d53724-migration-after-$STAMP.log"
HEALTH_FILE="/tmp/dhv2-d53724-health-$STAMP.json"
MIN_FREE_KB=$((12 * 1024 * 1024))

cleanup() {
  rm -rf "$STAGE"
  rm -f "$MIGRATION_LOG" "$MIGRATION_AFTER_LOG" "$HEALTH_FILE"
  docker image rm dhv2-api:d53724-test dhv2-web:d53724-test >/dev/null 2>&1 || true
}
trap cleanup EXIT
trap 'echo; echo "ERROR D5.3.7.2.4 en línea $LINENO: $BASH_COMMAND"' ERR

cd "$ROOT"
test -f "$ZIP"

echo "[1/11] Preflight y staging"
FREE_KB="$(df -Pk "$ROOT" | awk 'NR==2 {print $4}')"
if [[ ! "$FREE_KB" =~ ^[0-9]+$ ]] || (( FREE_KB < MIN_FREE_KB )); then
  echo "ERROR: espacio libre insuficiente para un deploy con builds Docker."
  echo "Libre: $(( FREE_KB / 1024 )) MB · requerido: $(( MIN_FREE_KB / 1024 )) MB"
  echo "Revisá logs y caché. Una opción segura para caché de builds es: docker builder prune -af"
  exit 1
fi
DB_HEALTH="$(docker inspect dhv2-db --format '{{if .State.Health}}{{.State.Health.Status}}{{else}}none{{end}}' 2>/dev/null || true)"
if [[ "$DB_HEALTH" != "healthy" ]]; then
  echo "ERROR: PostgreSQL no está healthy (estado: $DB_HEALTH). No se inicia el deploy."
  docker compose ps -a || true
  docker logs --tail 80 dhv2-db || true
  exit 1
fi
docker compose exec -T db sh -lc 'pg_isready -U "$POSTGRES_USER" -d "$POSTGRES_DB"'
mkdir -p "$STAGE"
unzip -q "$ZIP" -d "$STAGE"
[[ "$(node -p "require('$STAGE/api-v3/package.json').version")" == "0.19.3-7.2.4" ]]
[[ "$(node -p "require('$STAGE/web-v2/package.json').version")" == "0.19.3-7.2.4" ]]
grep -Fq "API_PHASE = 'D5.3.7.2.4'" "$STAGE/api-v3/src/version.ts"
echo "Espacio libre antes de builds: $(( FREE_KB / 1024 / 1024 )) GB"

echo "[2/11] Compilando API en staging"
docker build --target builder -t dhv2-api:d53724-test "$STAGE/api-v3"

echo "[3/11] Ejecutando tests API en staging"
docker run --rm \
  -v "$STAGE/api-v3/test:/app/test:ro" \
  -v "$STAGE/api-v3/tsconfig.test.json:/app/tsconfig.test.json:ro" \
  dhv2-api:d53724-test npm test

echo "[4/11] Compilando web en staging"
docker build -t dhv2-web:d53724-test "$STAGE/web-v2"

FREE_AFTER_BUILD_KB="$(df -Pk "$ROOT" | awk 'NR==2 {print $4}')"
if [[ ! "$FREE_AFTER_BUILD_KB" =~ ^[0-9]+$ ]] || (( FREE_AFTER_BUILD_KB < 4 * 1024 * 1024 )); then
  echo "ERROR: los builds dejaron menos de 4 GB libres. Producción no será modificada."
  df -h "$ROOT"
  exit 1
fi
if [[ "$(docker inspect dhv2-db --format '{{.State.Health.Status}}' 2>/dev/null || true)" != "healthy" ]]; then
  echo "ERROR: PostgreSQL dejó de estar healthy durante staging. Producción no será modificada."
  docker logs --tail 80 dhv2-db || true
  exit 1
fi

echo "[5/11] Backup PRE"
mkdir -p "$PRE_BACKUP"
docker compose exec -T db sh -lc 'pg_dump -U "$POSTGRES_USER" -d "$POSTGRES_DB" -Fc' > "$PRE_BACKUP/database.dump"
tar \
  --exclude='api-v3/node_modules' \
  --exclude='api-v3/dist' \
  --exclude='web-v2/node_modules' \
  --exclude='web-v2/dist' \
  --exclude='.git' \
  --exclude='DH_V2_FASE_*.zip' \
  -czf "$PRE_BACKUP/source.tar.gz" \
  api-v3 web-v2 docs scripts infra docker-compose.yml README.md .env.example
if [[ -f .env ]]; then
  cp -a .env "$PRE_BACKUP/.env"
  chmod 600 "$PRE_BACKUP/.env"
fi

echo "[6/11] Instalando source"
unzip -oq "$ZIP" -d "$ROOT"
chmod +x "$ROOT/scripts/deploy-phase-d5-3-7-2-4.sh" "$ROOT/scripts/phase-d5-3-7-2-4-acceptance.sh"
echo "API source: $(node -p "require('./api-v3/package.json').version")"
echo "WEB source: $(node -p "require('./web-v2/package.json').version")"

echo "[7/11] Construyendo imágenes finales"
docker compose build api migrate web

echo "[8/11] Aplicando migraciones pendientes"
# Se muestra la salida real; con pipefail un fallo del contenedor no queda oculto por tee.
docker compose --profile tools run --rm migrate npm run migration:show 2>&1 | tee "$MIGRATION_LOG"
if grep -Fq 'Pending migrations: yes' "$MIGRATION_LOG"; then
  docker compose --profile tools run --rm migrate npm run migration:run
fi
docker compose --profile tools run --rm migrate npm run migration:show 2>&1 | tee "$MIGRATION_AFTER_LOG"
grep -Fq 'Pending migrations: no' "$MIGRATION_AFTER_LOG"

echo "[9/11] Recreando API y web"
docker compose up -d --force-recreate api web
for i in $(seq 1 40); do
  if curl -fsS http://127.0.0.1:3101/api/v3/health >"$HEALTH_FILE" 2>/dev/null; then
    break
  fi
  if [[ "$i" == "40" ]]; then
    docker compose logs --tail=200 api
    exit 1
  fi
  sleep 2
done
cat "$HEALTH_FILE"; echo
grep -Fq '"version":"0.19.3-7.2.4"' "$HEALTH_FILE"
grep -Fq '"phase":"D5.3.7.2.4"' "$HEALTH_FILE"
grep -Fq '"database":"ok"' "$HEALTH_FILE"

echo "[10/11] Aceptación automática"
bash "$ROOT/scripts/phase-d5-3-7-2-4-acceptance.sh"

echo "[11/11] Backup POST"
mkdir -p "$POST_BACKUP"
docker compose exec -T db sh -lc 'pg_dump -U "$POSTGRES_USER" -d "$POSTGRES_DB" -Fc' > "$POST_BACKUP/database.dump"
docker compose ps -a > "$POST_BACKUP/docker-status.txt"
cp -a "$ZIP" "$POST_BACKUP/"
if [[ -f .env ]]; then
  cp -a .env "$POST_BACKUP/.env"
  chmod 600 "$POST_BACKUP/.env"
fi
sha256sum "$POST_BACKUP/$(basename "$ZIP")" > "$POST_BACKUP/SHA256SUMS.txt"

echo
echo "D5.3.7.2.4 desplegada correctamente"
echo "Backup PRE : $PRE_BACKUP"
echo "Backup POST: $POST_BACKUP"