#!/usr/bin/env bash
set -Eeuo pipefail

ROOT="${ROOT:-/var/www/dhv2.korexlabs.com}"
ZIP="${ZIP:-$ROOT/DH_V2_FASE_D5_5_1_SOURCE.zip}"
STAMP="$(date +%Y%m%d_%H%M%S)"
STAGE="/root/dhv2-d551-stage-$STAMP"
BACKUP_ROOT="/root/DH_V2_BACKUPS"
PRE_BACKUP="$BACKUP_ROOT/D5_5_1_PRE_$STAMP"
POST_BACKUP="$BACKUP_ROOT/D5_5_1_OK_$STAMP"
MIGRATION_LOG="/tmp/dhv2-d551-migration-$STAMP.log"
TEST_LOG="/tmp/dhv2-d551-tests-$STAMP.log"
HEALTH_FILE="/tmp/dhv2-d551-health-$STAMP.json"
MIN_FREE_KB=$((4 * 1024 * 1024))

cleanup() {
  rm -rf "$STAGE"
  rm -f "$MIGRATION_LOG" "$TEST_LOG" "$HEALTH_FILE"
  docker image rm dhv2-api:d551-test dhv2-web:d551-test >/dev/null 2>&1 || true
}
trap cleanup EXIT
trap 'echo; echo "ERROR D5.5.1 en línea $LINENO: $BASH_COMMAND"' ERR

cd "$ROOT"
test -f "$ZIP"

CURRENT_API="$(node -p "require('./api-v3/package.json').version")"
CURRENT_WEB="$(node -p "require('./web-v2/package.json').version")"
[[ "$CURRENT_API" == "0.19.4-1" ]]
[[ "$CURRENT_WEB" == "0.19.4-1" ]]

echo "[1/10] Preflight y staging"
FREE_KB="$(df -Pk "$ROOT" | awk 'NR==2 {print $4}')"
if [[ ! "$FREE_KB" =~ ^[0-9]+$ ]] || (( FREE_KB < MIN_FREE_KB )); then
  echo "ERROR: espacio libre insuficiente. Libre: $(( FREE_KB / 1024 )) MB"
  exit 1
fi
[[ "$(docker inspect dhv2-db --format '{{.State.Health.Status}}' 2>/dev/null || true)" == "healthy" ]]
docker compose exec -T db sh -lc 'pg_isready -U "$POSTGRES_USER" -d "$POSTGRES_DB"'
mkdir -p "$STAGE"
unzip -q "$ZIP" -d "$STAGE"
[[ "$(node -p "require('$STAGE/api-v3/package.json').version")" == "0.19.5-1" ]]
[[ "$(node -p "require('$STAGE/web-v2/package.json').version")" == "0.19.5-1" ]]
grep -Fq "API_PHASE = 'D5.5.1'" "$STAGE/api-v3/src/version.ts"
grep -Fq "APP_PHASE = 'Fase D5.5.1 · Corrección de staging de planificación'" "$STAGE/web-v2/src/config/version.ts"

echo "[2/10] Compilando API en staging"
docker build --target builder -t dhv2-api:d551-test "$STAGE/api-v3"

echo "[3/10] Ejecutando tests API en staging"
docker run --rm \
  -v "$STAGE/api-v3/test:/app/test:ro" \
  -v "$STAGE/api-v3/tsconfig.test.json:/app/tsconfig.test.json:ro" \
  dhv2-api:d551-test npm test 2>&1 | tee "$TEST_LOG"
grep -Eq 'tests[[:space:]]+252' "$TEST_LOG"
grep -Eq 'pass[[:space:]]+252' "$TEST_LOG"
grep -Eq 'fail[[:space:]]+0' "$TEST_LOG"

echo "[4/10] Compilando web en staging"
docker build -t dhv2-web:d551-test "$STAGE/web-v2"

grep -Fq 'Área → Operadora → fecha' "$STAGE/web-v2/src/pages/InspectionVisitEditorPage.tsx"
grep -Fq 'CHECKLIST AUTOMÁTICO' "$STAGE/web-v2/src/pages/InspectionVisitEditorPage.tsx"
grep -Fq 'Agregar registro sin pendiente previo' "$STAGE/web-v2/src/pages/InspectionVisitEditorPage.tsx"
grep -Fq 'Motivo de exclusión' "$STAGE/web-v2/src/pages/InspectionVisitEditorPage.tsx"
grep -Fq 'debe iniciar la visita desde la APK' "$STAGE/web-v2/src/pages/InspectionVisitEditorPage.tsx"
if grep -Fq 'startInspectionVisit' "$STAGE/web-v2/src/pages/InspectionVisitEditorPage.tsx"; then exit 1; fi
grep -Fq 'generateInspectionVisitChecklist' "$STAGE/web-v2/src/lib/api.ts"
grep -Fq 'excludeInspectionVisitAsset' "$STAGE/web-v2/src/lib/api.ts"

echo "[5/10] Backup PRE D5.5.1"
mkdir -p "$PRE_BACKUP"
chmod 700 "$PRE_BACKUP"
docker compose exec -T db sh -lc 'pg_dump -U "$POSTGRES_USER" -d "$POSTGRES_DB" -Fc' > "$PRE_BACKUP/database.dump"
tar -czf "$PRE_BACKUP/source.tar.gz" \
  --exclude='api-v3/node_modules' --exclude='api-v3/dist' \
  --exclude='web-v2/node_modules' --exclude='web-v2/dist' \
  api-v3 web-v2 scripts docs docker-compose.yml .env.example .gitignore README.md
if [[ -f .env ]]; then cp -a .env "$PRE_BACKUP/.env"; chmod 600 "$PRE_BACKUP/.env"; fi
STRONG_BACKUP="$(find "$BACKUP_ROOT" -maxdepth 1 -type d -name 'INVENTARIO_A_REVISAR_*' -printf '%T@ %p\n' | sort -nr | head -n1 | cut -d' ' -f2-)"
printf 'Backup fuerte conceptual previo: %s\nPalabra clave: INVENTARIO A REVISAR\n' "$STRONG_BACKUP" > "$PRE_BACKUP/INVENTARIO_A_REVISAR_REFERENCE.txt"
(
  cd "$PRE_BACKUP"
  sha256sum database.dump source.tar.gz INVENTARIO_A_REVISAR_REFERENCE.txt > SHA256SUMS.txt
  [[ ! -f .env ]] || sha256sum .env >> SHA256SUMS.txt
  sha256sum -c SHA256SUMS.txt
)

echo "[6/10] Instalando source D5.5.1"
unzip -oq "$ZIP" -d "$ROOT"
chmod +x "$ROOT/scripts/deploy-phase-d5-5-1.sh" "$ROOT/scripts/phase-d5-5-1-acceptance.sh"
echo "API source: $(node -p "require('./api-v3/package.json').version")"
echo "WEB source: $(node -p "require('./web-v2/package.json').version")"

echo "[7/10] Construyendo imágenes finales"
docker compose build api migrate web

echo "[8/10] Aplicando migración D5.5"
docker compose --profile tools run --rm migrate npm run migration:run
docker compose --profile tools run --rm migrate npm run migration:show 2>&1 | tee "$MIGRATION_LOG"
grep -Fq 'Pending migrations: no' "$MIGRATION_LOG"

echo "[9/10] Recreando API/web y aceptación"
docker compose up -d --force-recreate api web
for i in $(seq 1 40); do
  if curl -fsS http://127.0.0.1:3101/api/v3/health >"$HEALTH_FILE" 2>/dev/null; then break; fi
  if [[ "$i" == "40" ]]; then docker compose logs --tail=200 api; exit 1; fi
  sleep 2
done
cat "$HEALTH_FILE"; echo
grep -Fq '"version":"0.19.5-1"' "$HEALTH_FILE"
grep -Fq '"phase":"D5.5.1"' "$HEALTH_FILE"
grep -Fq '"database":"ok"' "$HEALTH_FILE"
bash "$ROOT/scripts/phase-d5-5-1-acceptance.sh"

echo "[10/10] Backup POST"
mkdir -p "$POST_BACKUP"
chmod 700 "$POST_BACKUP"
docker compose exec -T db sh -lc 'pg_dump -U "$POSTGRES_USER" -d "$POSTGRES_DB" -Fc' > "$POST_BACKUP/database.dump"
docker compose ps -a > "$POST_BACKUP/docker-status.txt"
cp -a "$ZIP" "$POST_BACKUP/"
if [[ -f .env ]]; then cp -a .env "$POST_BACKUP/.env"; chmod 600 "$POST_BACKUP/.env"; fi
printf 'PRE D5.5.1: %s\nINVENTARIO A REVISAR: %s\n' "$PRE_BACKUP" "$STRONG_BACKUP" > "$POST_BACKUP/BACKUP_REFERENCES.txt"
(
  cd "$POST_BACKUP"
  sha256sum database.dump "$(basename "$ZIP")" BACKUP_REFERENCES.txt > SHA256SUMS.txt
  [[ ! -f .env ]] || sha256sum .env >> SHA256SUMS.txt
)

echo
echo "D5.5.1 desplegada correctamente"
echo "Backup PRE: $PRE_BACKUP"
echo "Backup fuerte INVENTARIO A REVISAR: $STRONG_BACKUP"
echo "Backup POST: $POST_BACKUP"