#!/bin/bash

# ==============================================================================
# 🚀 WA-AKG Auto Deployment & Startup Script
# ==============================================================================

# Text Colors
GREEN='\033[0;32m'
RED='\033[0;31m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
NC='\033[0m' # No Color

echo -e "${BLUE}====================================================${NC}"
echo -e "${BLUE}       ⚡ WA-AKG PM2 AUTO STARTUP SCRIPT ⚡        ${NC}"
echo -e "${BLUE}====================================================${NC}"

# Step 1: Check for .env file & Security Auditing
echo -e "\n${BLUE}[1/6] Checking configuration file...${NC}"
if [ ! -f .env ]; then
    echo -e "${RED}❌ Error: .env file not found!${NC}"
    echo -e "${YELLOW}Please create a .env file first (copy from .env.example) and configure your database and authentication secret.${NC}"
    exit 1
fi
echo -e "${GREEN}✓ .env configuration file found.${NC}"

# Read configurations
PORT=$(grep -E "^PORT=" .env | cut -d'=' -f2 | tr -d '"' | tr -d "'" | tr -d ' ')
PORT=${PORT:-3000}

AUTH_SEC=$(grep -E "^AUTH_SECRET=" .env | cut -d'=' -f2 | tr -d '"' | tr -d "'" | tr -d ' ')
SWAG_PASS=$(grep -E "^NEXT_PUBLIC_SWAGGER_PASSWORD=" .env | cut -d'=' -f2 | tr -d '"' | tr -d "'" | tr -d ' ')
ADM_PASS=$(grep -E "^ADMIN_PASSWORD=" .env | cut -d'=' -f2 | tr -d '"' | tr -d "'" | tr -d ' ')
ROOT_DB_PASS=$(grep -E "^MYSQL_ROOT_PASSWORD=" .env | cut -d'=' -f2 | tr -d '"' | tr -d "'" | tr -d ' ')

# Security audit check (results will be printed at the end)
USING_DEFAULTS=0
if [ "$AUTH_SEC" = "your-super-secret-key-at-least-32-chars-change-this-in-production" ] || [ -z "$AUTH_SEC" ]; then
    USING_DEFAULTS=1
fi
if [ "$SWAG_PASS" = "admin123" ] || [ "$SWAG_PASS" = "change-this-in-production" ]; then
    USING_DEFAULTS=1
fi
if [ "$ADM_PASS" = "change-this-in-production" ]; then
    USING_DEFAULTS=1
fi
if [ "$ROOT_DB_PASS" = "change-this-in-production" ]; then
    USING_DEFAULTS=1
fi

# Step 2: Check if port is already in use (Fail early before build)
echo -e "\n${BLUE}[2/6] Checking port $PORT availability...${NC}"
PORT_IN_USE=0

# Test socket connection using bash pseudo-device /dev/tcp
if (echo > /dev/tcp/127.0.0.1/$PORT) >/dev/null 2>&1; then
    PORT_IN_USE=1
fi

# Fallback: Check using ss command if ss is installed
if [ $PORT_IN_USE -eq 0 ] && command -v ss &> /dev/null; then
    if ss -tln | grep -q -E ":$PORT( |$)"; then
        PORT_IN_USE=1
    fi
fi

# Fallback 2: Check using netstat if netstat is installed
if [ $PORT_IN_USE -eq 0 ] && command -v netstat &> /dev/null; then
    if netstat -tln | grep -q -E ":$PORT( |$)"; then
        PORT_IN_USE=1
    fi
fi

# If port is occupied, fail early
if [ $PORT_IN_USE -eq 1 ]; then
    echo -e "${RED}❌ Error: Port $PORT is already in use by another application!${NC}"
    echo -e "${YELLOW}Please change the PORT value in your .env file to a free port (e.g. 3030) before starting.${NC}"
    exit 1
fi
echo -e "${GREEN}✓ Port $PORT is available.${NC}"

# Step 3: Install dependencies
echo -e "\n${BLUE}[3/6] Installing project dependencies...${NC}"
npm install
if [ $? -ne 0 ]; then
    echo -e "${RED}❌ Error: Failed to install npm packages!${NC}"
    exit 1
fi
echo -e "${GREEN}✓ Dependencies installed successfully.${NC}"

# Step 4: Run Database Schema Sync & Check Admin
echo -e "\n${BLUE}[4/6] Syncing database schema with Prisma...${NC}"
npx prisma db push
if [ $? -ne 0 ]; then
    echo -e "${RED}❌ Error: Database schema push failed!${NC}"
    echo -e "${YELLOW}Please check your DATABASE_URL in the .env file and ensure the database server is running.${NC}"
    exit 1
fi
echo -e "${GREEN}✓ Database schema is up to date.${NC}"

# Check if admin user exists in the database
echo -e "\n${BLUE}[*] Checking database for existing admin accounts...${NC}"
node scripts/check-admin-exists.js
CHECK_STATUS=$?

if [ $CHECK_STATUS -eq 2 ]; then
    echo -e "${YELLOW}⚠️ No admin user found in the database. Initializing default admin setup...${NC}"
    
    # Try reading from .env file
    ENV_ADMIN_EMAIL=$(grep -E "^ADMIN_EMAIL=" .env | cut -d'=' -f2 | tr -d '"' | tr -d "'" | tr -d ' ')
    ENV_ADMIN_PASSWORD=$(grep -E "^ADMIN_PASSWORD=" .env | cut -d'=' -f2 | tr -d '"' | tr -d "'" | tr -d ' ')
    
    if [ -n "$ENV_ADMIN_EMAIL" ] && [ -n "$ENV_ADMIN_PASSWORD" ]; then
        echo -e "${GREEN}✓ Found ADMIN_EMAIL and ADMIN_PASSWORD in .env. Creating SuperAdmin automatically...${NC}"
        npm run make-admin "$ENV_ADMIN_EMAIL" "$ENV_ADMIN_PASSWORD"
    else
        # Check if stdin is connected to a terminal (interactive TTY)
        if [ -t 0 ]; then
            echo -e "${BLUE}Please enter credentials to create the default SUPERADMIN account:${NC}"
            read -p "Enter Admin Email: " INPUT_EMAIL
            read -sp "Enter Admin Password: " INPUT_PASSWORD
            echo "" # New line after hidden password
            
            if [ -n "$INPUT_EMAIL" ] && [ -n "$INPUT_PASSWORD" ]; then
                npm run make-admin "$INPUT_EMAIL" "$INPUT_PASSWORD"
            else
                echo -e "${RED}❌ Error: Email and password cannot be empty. Skipping admin creation.${NC}"
            fi
        else
            echo -e "${RED}❌ Warning: No admin user found, and no ADMIN_EMAIL/ADMIN_PASSWORD defined in .env.${NC}"
            echo -e "${YELLOW}Please run the following command manually to create your admin account later:${NC}"
            echo -e "  ${GREEN}npm run make-admin <email> <password>${NC}"
        fi
    fi
elif [ $CHECK_STATUS -eq 0 ]; then
    echo -e "${GREEN}✓ Existing admin account detected. Skipping admin setup.${NC}"
else
    echo -e "${RED}⚠️ Warning: Could not verify admin status (database connection issue). Skipping admin setup.${NC}"
fi

# Step 5: Build Next.js Production Assets
echo -e "\n${BLUE}[5/6] Building Next.js production assets...${NC}"
npm run build
if [ $? -ne 0 ]; then
    echo -e "${RED}❌ Error: Next.js build failed!${NC}"
    exit 1
fi
echo -e "${GREEN}✓ Production assets built successfully.${NC}"

# Step 6: Start / Reload in PM2
echo -e "\n${BLUE}[6/6] Deploying process in PM2...${NC}"

# Check if pm2 command exists
if ! command -v pm2 &> /dev/null; then
    echo -e "${YELLOW}⚠️ PM2 is not installed globally. Installing globally...${NC}"
    npm install -g pm2
fi

# Check if application is already running in PM2
if pm2 show wa-akg &> /dev/null; then
    echo -e "${YELLOW}🔄 Application 'wa-akg' is already running. Reloading to apply changes...${NC}"
    pm2 reload wa-akg
else
    echo -e "${GREEN}🚀 Starting 'wa-akg' process using ecosystem.config.js...${NC}"
    pm2 start ecosystem.config.js
fi

if [ $? -ne 0 ]; then
    echo -e "${RED}❌ Error: Failed to start PM2 process!${NC}"
    exit 1
fi

echo -e "\n${GREEN}====================================================${NC}"
echo -e "${GREEN}       🎉 WA-AKG DEPLOYED SUCCESSFULLY! 🎉         ${NC}"
echo -e "${GREEN}====================================================${NC}"
echo -e "\n${BLUE}Useful PM2 Commands:${NC}"
echo -e "  - View status:           ${YELLOW}pm2 status${NC}"
echo -e "  - View real-time logs:   ${YELLOW}pm2 logs wa-akg${NC}"
echo -e "  - Monitor resources:     ${YELLOW}pm2 monit${NC}"
echo -e "  - Stop gateway service:  ${YELLOW}pm2 stop wa-akg${NC}"
echo -e "  - Restart service:       ${YELLOW}pm2 restart wa-akg${NC}"

echo -e "\n${BLUE}Useful Project Script Commands:${NC}"
echo -e "  - Run Dev Mode:          ${YELLOW}npm run dev${NC}"
echo -e "  - Create/Promote Admin:  ${YELLOW}npm run make-admin <email> <password>${NC}"
echo -e "  - Open Database Studio:  ${YELLOW}npm run db:studio${NC}"

echo -e "\n${YELLOW}To enable auto-start on server reboot, run:${NC}"
echo -e "  ${GREEN}pm2 startup${NC}"
echo -e "  ${GREEN}pm2 save${NC}"
echo -e "${BLUE}====================================================${NC}"

# Display Security Warning at the very end so it is not buried by logs
if [ $USING_DEFAULTS -eq 1 ]; then
    echo -e "\n${RED}======================================================================${NC}"
    echo -e "${RED} ⚠️  SECURITY WARNING: INSECURE / DEFAULT VALUES DETECTED IN .env!${NC}"
    echo -e "${RED}======================================================================${NC}"
    echo -e "${YELLOW} It looks like you are using default values for AUTH_SECRET, Swagger,${NC}"
    echo -e "${YELLOW} admin, or MySQL root passwords. Keeping these defaults makes your${NC}"
    echo -e "${YELLOW} gateway highly vulnerable to unauthorized access and exploits!${NC}"
    echo -e "${YELLOW} Please update your .env file with secure unique values immediately.${NC}"
    echo -e "${RED}======================================================================${NC}\n"
else
    echo -e ""
fi