#!/bin/bash
# Merges the latest upstream stable release tag into the lotus branch, builds, and deploys.
# Triggered via webhook by LotusBot !cinny-update command.
# Requires:
#   /etc/cinny-monitor.env  — MATRIX_TOKEN, MATRIX_SERVER, MATRIX_ROOM
#   /opt/lotus-cinny/       — git clone of code.lotusguild.org/LotusGuild/cinny
#                             with upstream remote: https://github.com/cinnyapp/cinny.git
set -euo pipefail

REPO_DIR="/opt/lotus-cinny"
WEB_ROOT="/var/www/html"
CONFIG_BACKUP="/opt/lotus-cinny/.cinny-config.json"
BUILD_DIR="/opt/lotus-cinny/dist"
STATE_FILE="/var/lib/cinny-monitor/last-upstream-tag"
ENV_FILE="/etc/cinny-monitor.env"
LOG="/var/log/cinny-build.log"

exec >> "$LOG" 2>&1
echo "=== $(date) === Cinny build triggered ==="

[ -f "$ENV_FILE" ] || { echo "ERROR: $ENV_FILE missing"; exit 1; }
set -a
# shellcheck source=/dev/null
source "$ENV_FILE"
set +a

matrix_notify() {
    local msg="$1"
    echo "[notify] $msg"
    [ -z "${MATRIX_TOKEN:-}" ] && return
    export _NOTIFY_MSG="$msg"
    python3 << 'PYEOF'
import urllib.request, urllib.parse, json, time, sys, os
token  = os.environ.get('MATRIX_TOKEN', '')
server = os.environ.get('MATRIX_SERVER', '').rstrip('/')
room   = os.environ.get('MATRIX_ROOM', '')
msg    = os.environ.get('_NOTIFY_MSG', '')
if not all([token, server, room, msg]):
    sys.exit(0)
txn  = str(int(time.time() * 1000))
api  = f"{server}/_matrix/client/v3/rooms/{urllib.parse.quote(room, safe='')}/send/m.room.message/{txn}"
body = json.dumps({"msgtype": "m.text", "body": msg}).encode()
req  = urllib.request.Request(api, data=body, method="PUT", headers={
    "Authorization": f"Bearer {token}", "Content-Type": "application/json"
})
try:
    urllib.request.urlopen(req, timeout=10)
except Exception as e:
    print(f"Notify failed: {e}", file=sys.stderr)
PYEOF
}

if [ ! -d "$REPO_DIR/.git" ]; then
    matrix_notify "cinny-build: FAILED — $REPO_DIR is not a git repo. Clone the lotus fork first."
    exit 1
fi

cd "$REPO_DIR"

if ! git remote | grep -q '^upstream$'; then
    matrix_notify "cinny-build: FAILED — upstream remote missing. Run: git remote add upstream https://github.com/cinnyapp/cinny.git"
    exit 1
fi

matrix_notify "cinny-build: fetching upstream tags..."

git fetch upstream --tags --no-recurse-submodules -q

# Get latest stable release tag from GitHub API
LATEST_TAG=$(curl -sf \
    -H "Accept: application/vnd.github.v3+json" \
    -H "User-Agent: lotus-cinny-monitor/1.0" \
    "https://api.github.com/repos/cinnyapp/cinny/releases/latest" | python3 -c "import sys,json; print(json.load(sys.stdin)['tag_name'])")

CURRENT_TAG=$(git describe --tags --exact-match HEAD 2>/dev/null || git log -1 --format='%D' | grep -oP 'tag: \K[^,]+' | head -1 || echo "untagged")
echo "Current: $CURRENT_TAG — Target: $LATEST_TAG"

if [ "$CURRENT_TAG" = "$LATEST_TAG" ]; then
    matrix_notify "cinny-build: already on $LATEST_TAG, nothing to do."
    exit 0
fi

matrix_notify "cinny-build: merging $LATEST_TAG into lotus branch..."

# Back up live config before touching anything
[ -f "$WEB_ROOT/config.json" ] && cp "$WEB_ROOT/config.json" "$CONFIG_BACKUP"

if ! git merge "$LATEST_TAG" --no-edit 2>&1; then
    git merge --abort 2>/dev/null || true
    matrix_notify "cinny-build: FAILED — merge conflict at $LATEST_TAG. SSH to LXC 106 and resolve manually. See /var/log/cinny-build.log"
    exit 1
fi

echo "Running npm ci..."
npm ci 2>&1 | tail -5

rm -rf "$BUILD_DIR"
export NODE_OPTIONS='--max_old_space_size=6144'
echo "Building $LATEST_TAG..."
npm run build 2>&1 | tail -10

if [ ! -f "$BUILD_DIR/index.html" ]; then
    matrix_notify "cinny-build: FAILED — build produced no output at $LATEST_TAG. See /var/log/cinny-build.log"
    exit 1
fi

rm -rf "${WEB_ROOT:?}"/*
cp -r "$BUILD_DIR"/* "$WEB_ROOT/"
[ -f "$CONFIG_BACKUP" ] && cp "$CONFIG_BACKUP" "$WEB_ROOT/config.json"
nginx -s reload

# Push merged lotus branch to origin
git push origin lotus

# Update state file so upstream-check knows we're on this tag
echo "$LATEST_TAG" > "$STATE_FILE"

matrix_notify "cinny-build: deployed $LATEST_TAG — Lotus Cinny is live."
echo "=== Build complete: $LATEST_TAG ==="