#!/usr/bin/env bash
set -euo pipefail

# Usage: ./scripts/deploy-release.sh v0.0.1
# Requires: curl, tar, (optional) rsync
#
# Auth token: set RELEASE_TOKEN env var or create /etc/ferme-release-token

TAG="${1:-}"
if [ -z "$TAG" ]; then
  echo "Usage: $0 v0.0.1" >&2
  exit 1
fi

REPO_OWNER="MALIO-DEV"
REPO_NAME="Ferme"
GITEA_API="https://gitea.malio.fr/api/v1"
DEPLOY_DIR="/var/www/ferme"

if [ -f /etc/ferme-release-token ] && [ -z "${RELEASE_TOKEN:-}" ]; then
  RELEASE_TOKEN="$(cat /etc/ferme-release-token)"
fi

tmp_dir="$(mktemp -d)"
cleanup() {
  rm -rf "$tmp_dir"
}
trap cleanup EXIT

release_json="$tmp_dir/release.json"
curl_opts=(-sS)
if [ -n "${RELEASE_TOKEN:-}" ]; then
  curl_opts+=(-H "Authorization: token ${RELEASE_TOKEN}")
fi
curl "${curl_opts[@]}" \
  "${GITEA_API}/repos/${REPO_OWNER}/${REPO_NAME}/releases/tags/${TAG}" \
  -o "$release_json"

asset_url="$(python3 - "$release_json" <<'PY'
import json, sys
data = json.load(open(sys.argv[1], 'r'))
assets = data.get("assets", [])
for a in assets:
    name = a.get("name", "")
    if name.startswith("ferme-") and name.endswith(".tar.gz"):
        print(a.get("browser_download_url", ""))
        break
PY
)"

if [ -z "$asset_url" ]; then
  echo "Release asset not found for tag ${TAG}" >&2
  exit 1
fi

archive="$tmp_dir/artefact.tar.gz"
curl "${curl_opts[@]}" -L "$asset_url" -o "$archive"

tar -xzf "$archive" -C "$tmp_dir"

if command -v rsync >/dev/null 2>&1; then
  rsync -a --delete \
    --exclude ".env" \
    --exclude ".env.local" \
    --exclude "config/jwt" \
    --exclude "var" \
    "$tmp_dir"/ "$DEPLOY_DIR"/
else
  cp -a "$tmp_dir"/. "$DEPLOY_DIR"/
fi

echo "Release ${TAG} deployed to ${DEPLOY_DIR}"

if [ -n "${DEPLOY_OWNER:-}" ]; then
  DEPLOY_GROUP="${DEPLOY_GROUP:-www-data}"
  DEPLOY_PERMS_SCOPE="${DEPLOY_PERMS_SCOPE:-var}"
  if [ "$DEPLOY_PERMS_SCOPE" = "all" ]; then
    chown -R "${DEPLOY_OWNER}:${DEPLOY_GROUP}" "$DEPLOY_DIR"
    chmod -R g+rx,o+rx "$DEPLOY_DIR"
  elif [ -d "${DEPLOY_DIR}/var" ]; then
    chown -R "${DEPLOY_OWNER}:${DEPLOY_GROUP}" "${DEPLOY_DIR}/var"
    chmod -R g+rwX "${DEPLOY_DIR}/var"
  fi
fi

if [ -f "${DEPLOY_DIR}/.env.local" ]; then
  echo "Running migrations (if any)..."
  php "${DEPLOY_DIR}/bin/console" doctrine:migrations:migrate --no-interaction --env=prod
else
  echo "Skip migrations: ${DEPLOY_DIR}/.env.local not found" >&2
fi