#!/usr/bin/env bash
set -e  # Exit on error

###############################################################################
### CONFIGURATION
###############################################################################

# Determine BASE_DIR as parent of the scripts directory
BASE_DIR="$(cd "$(dirname "$(dirname "${BASH_SOURCE[0]}")")" && pwd)"

ENV_FILE="$BASE_DIR/api/.env"
RUN_DIR="$BASE_DIR/run"                 # Where we keep *.pid
BASE_LOG_DIR="$BASE_DIR/logs"           # Base logs directory

TIMESTAMP=$(date +"%Y%m%d_%H%M%S")
LOG_DIR="$BASE_LOG_DIR/$TIMESTAMP"      # Timestamped log directory
LATEST_LINK="$BASE_LOG_DIR/latest"      # Symlink to latest logs
VENV_PATH="$BASE_DIR/venv"

ARQ_WORKERS=${ARQ_WORKERS:-1}
LOG_TO_FILE=${LOG_TO_FILE:-true}    # Set to false in Docker to use stdout

# Log startup
cd "$BASE_DIR"
echo "Starting Dograh Services at $(date) in BASE_DIR: ${BASE_DIR}"

###############################################################################
### 1) Load environment variables
###############################################################################

# Load environment from a file if it exists
if [[ -f "$ENV_FILE" ]]; then
  set -a && . "$ENV_FILE" && set +a
fi

if [[ -z "${DOGRAH_DEVOPS_SECRET:-}" ]]; then
  echo "ERROR: DOGRAH_DEVOPS_SECRET is not set. Add it to $ENV_FILE before starting production services."
  exit 1
fi
if [[ "$DOGRAH_DEVOPS_SECRET" == "change-me-dograh-devops-secret" ]]; then
  echo "ERROR: DOGRAH_DEVOPS_SECRET still has the example placeholder value. Replace it in $ENV_FILE."
  exit 1
fi

UVICORN_BASE_PORT=${UVICORN_BASE_PORT:-8000}
CPU_CORES=$(nproc 2>/dev/null || sysctl -n hw.ncpu 2>/dev/null || echo 1)
FASTAPI_WORKERS=${FASTAPI_WORKERS:-$CPU_CORES}

# Interface uvicorn binds to. Defaults to loopback for single-box installs where
# a local nginx proxies to it. In a cluster where nginx runs on a separate host,
# set UVICORN_HOST=0.0.0.0 (or this node's reachable IP) in api/.env so the
# remote nginx can reach these workers.
UVICORN_HOST=${UVICORN_HOST:-127.0.0.1}

# Whether this node manages a local nginx (renders the upstream config and
# reloads nginx). Defaults to "true" for single-box installs. In a cluster where
# nginx lives on a separate host, set MANAGE_NGINX=false in api/.env so this
# API/worker node never touches nginx.
MANAGE_NGINX=${MANAGE_NGINX:-true}

###############################################################################
### 1b) Safety check — refuse to start over running services
###############################################################################

if [[ -d "$RUN_DIR" ]]; then
  live_count=0
  for pidfile in "$RUN_DIR"/*.pid; do
    [[ -e "$pidfile" ]] || continue
    pid=$(<"$pidfile")
    if kill -0 "$pid" 2>/dev/null; then
      live_count=$((live_count + 1))
    fi
  done

  if [[ $live_count -gt 0 ]]; then
    echo "ERROR: $live_count service(s) are still running."
    echo ""
    echo "  Stop first:                       ./scripts/stop_services.sh"
    echo "  For a zero-downtime deploy, use:  ./scripts/rolling_update.sh"
    echo ""
    exit 1
  fi
fi

###############################################################################
### 1c) Verify Node >= 22.6 (required by api/mcp_server/ts_validator)
###############################################################################

if ! command -v node >/dev/null 2>&1; then
  echo "ERROR: node is not installed. api/mcp_server/ts_validator requires Node >= 22.6."
  echo "Install via: curl -fsSL https://deb.nodesource.com/setup_22.x | sudo -E bash - && sudo apt-get install -y nodejs"
  exit 1
fi
NODE_VERSION=$(node -v | sed 's/^v//')
NODE_MAJOR=${NODE_VERSION%%.*}
NODE_MINOR=$(echo "$NODE_VERSION" | cut -d. -f2)
if [[ $NODE_MAJOR -lt 22 ]] || { [[ $NODE_MAJOR -eq 22 ]] && [[ $NODE_MINOR -lt 6 ]]; }; then
  echo "ERROR: Node $NODE_VERSION is too old. api/mcp_server/ts_validator requires Node >= 22.6."
  echo "Upgrade via: curl -fsSL https://deb.nodesource.com/setup_22.x | sudo -E bash - && sudo apt-get install -y nodejs"
  exit 1
fi
echo "Node $NODE_VERSION detected (>= 22.6 required)"

###############################################################################
### 2) Define services
###############################################################################

# Map "service name" → "command to run"
# Using arrays for bash 3.2 compatibility
SERVICE_NAMES=()
SERVICE_COMMANDS=()

# ari_manager (telephony ARI bridge) and campaign_orchestrator (outbound
# campaign loop) are optional. Each is gated behind an env flag that defaults to
# "true" so existing installs are unchanged; set the flag to "false" in api/.env
# to run this node as an API/worker tier only (e.g. a scale-out replica that must
# not also run these singleton services).
ENABLE_ARI_MANAGER=${ENABLE_ARI_MANAGER:-true}
ENABLE_CAMPAIGN_ORCHESTRATOR=${ENABLE_CAMPAIGN_ORCHESTRATOR:-true}

if [[ "$ENABLE_ARI_MANAGER" == "true" ]]; then
  SERVICE_NAMES+=("ari_manager")
  SERVICE_COMMANDS+=("python -m api.services.telephony.ari_manager")
else
  echo "ari_manager disabled (ENABLE_ARI_MANAGER=$ENABLE_ARI_MANAGER)"
fi

if [[ "$ENABLE_CAMPAIGN_ORCHESTRATOR" == "true" ]]; then
  SERVICE_NAMES+=("campaign_orchestrator")
  SERVICE_COMMANDS+=("python -m api.services.campaign.campaign_orchestrator")
else
  echo "campaign_orchestrator disabled (ENABLE_CAMPAIGN_ORCHESTRATOR=$ENABLE_CAMPAIGN_ORCHESTRATOR)"
fi

# Add uvicorn workers on separate ports (behind nginx least_conn)
for ((w=0; w<FASTAPI_WORKERS; w++)); do
  port=$((UVICORN_BASE_PORT + w))
  SERVICE_NAMES+=("uvicorn_$port")
  SERVICE_COMMANDS+=("uvicorn api.app:app --host $UVICORN_HOST --port $port")
done

# Add ARQ workers dynamically
for ((i=1; i<=ARQ_WORKERS; i++)); do
  SERVICE_NAMES+=("arq$i")
  SERVICE_COMMANDS+=("python -m arq api.tasks.arq.WorkerSettings --custom-log-dict api.tasks.arq.LOG_CONFIG")
done

###############################################################################
### 3) Activate virtual environment
###############################################################################

if [[ -d "$VENV_PATH" && -f "$VENV_PATH/bin/activate" ]]; then
  source "$VENV_PATH/bin/activate"
  echo "Virtual environment activated: $VENV_PATH"
else
  echo "Warning: Virtual environment not found at $VENV_PATH"
  echo "Continuing without virtual environment activation..."
fi

mkdir -p "$RUN_DIR"

NGINX_UPSTREAM_TEMPLATE="$BASE_DIR/nginx/dograh_upstream.conf.template"
NGINX_UPSTREAM_CONF="/etc/nginx/conf.d/dograh_upstream.conf"

###############################################################################
### 4) Install ts_validator npm dependencies
###############################################################################

TS_VALIDATOR_DIR="$BASE_DIR/api/mcp_server/ts_validator"
if [[ -f "$TS_VALIDATOR_DIR/package.json" ]]; then
  (cd "$TS_VALIDATOR_DIR" && npm install)
fi

###############################################################################
### 5) Run migrations
###############################################################################

alembic -c "$BASE_DIR/api/alembic.ini" upgrade head

###############################################################################
### 7) Prepare logs
###############################################################################

mkdir -p "$BASE_LOG_DIR" "$LOG_DIR"

# Remove old symlink and create a new one
if [[ -L "$LATEST_LINK" ]]; then
  rm "$LATEST_LINK"
fi
ln -s "$TIMESTAMP" "$LATEST_LINK"

echo "Log directory: $LOG_DIR"
echo "Latest symlink: $LATEST_LINK -> $TIMESTAMP"

###############################################################################
### 8) Start services
###############################################################################

for i in "${!SERVICE_NAMES[@]}"; do
  name="${SERVICE_NAMES[$i]}"
  cmd="${SERVICE_COMMANDS[$i]}"
  echo "→ Starting $name"

  (
    cd "$BASE_DIR"
    if [[ "$LOG_TO_FILE" == "true" ]]; then
      export LOG_FILE_PATH="$LOG_DIR/$name.log"
      exec $cmd >>"$LOG_DIR/$name.log" 2>&1
    else
      # Log to stdout/stderr for Docker
      exec $cmd
    fi
  ) &

  pid=$!
  echo $pid >"$RUN_DIR/$name.pid"
  echo "  Started with PID $pid"

done

# Cold start always uses band A (for rolling_update.sh dual-band strategy)
echo "A" > "$RUN_DIR/active_band"

###############################################################################
### 8) Generate nginx upstream config & reload
###############################################################################

if [[ "$MANAGE_NGINX" != "true" ]]; then
  echo "Skipping nginx config (MANAGE_NGINX=$MANAGE_NGINX) — nginx managed off-node."
elif [[ -f "$NGINX_UPSTREAM_TEMPLATE" ]]; then
  # Build upstream server list from worker ports
  UPSTREAM_SERVERS=""
  for ((w=0; w<FASTAPI_WORKERS; w++)); do
    port=$((UVICORN_BASE_PORT + w))
    UPSTREAM_SERVERS="${UPSTREAM_SERVERS}    server 127.0.0.1:${port};\n"
  done

  # Generate upstream config from template
  sed -e "s|{{UVICORN_UPSTREAM_SERVERS}}|${UPSTREAM_SERVERS}|" \
      "$NGINX_UPSTREAM_TEMPLATE" | sudo tee "$NGINX_UPSTREAM_CONF" > /dev/null

  echo "Generated nginx upstream config with $FASTAPI_WORKERS workers (ports ${UVICORN_BASE_PORT}-$((UVICORN_BASE_PORT + FASTAPI_WORKERS - 1)))"

  # Test and reload nginx
  if sudo nginx -t 2>/dev/null; then
    sudo systemctl reload nginx
    echo "Nginx reloaded successfully"
  else
    echo "ERROR: nginx config test failed, not reloading"
    sudo nginx -t
    exit 1
  fi
fi

###############################################################################
### 9) Summary
###############################################################################

echo
echo "──────────────────────────────────────────────────"
echo "Mode: PRODUCTION"
echo ""
for name in "${SERVICE_NAMES[@]}"; do
  pid=$(<"$RUN_DIR/$name.pid")
  echo "✓ $name (PID $pid) → $LOG_DIR/$name.log"
done
echo ""
echo "  Rotation: ${LOG_ROTATION_SIZE:-100 MB}"
echo "  Retention: ${LOG_RETENTION:-7 days}"
echo "  Compression: ${LOG_COMPRESSION:-gz}"
echo "Logs: tail -f $LOG_DIR/*.log"
echo "Rotated logs: ls $LOG_DIR/*.log.*"
echo "To stop: ./scripts/stop_services.sh"
echo "──────────────────────────────────────────────────"