#!/bin/bash
# Tier-1 dispatch for cap component operations.
# Delegates to generated run-{op}.sh scripts when present (manifest-plan workflow),
# or falls back to inline _do_{op} functions for direct invocation.
set -euo pipefail

SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
cd "$SCRIPT_DIR"

[ -f "${SCRIPT_DIR}/env-cap" ] && source "${SCRIPT_DIR}/env-cap"

CAP_NAME="${CAP_NAME:-cap}"
CAP_NAMESPACE="${CAP_NAMESPACE:-cap-svc}"
CAP_HTTP_PORT="${CAP_HTTP_PORT:-3000}"

CMD_TSK="${CMD_TSK:-${1:-install}}"

_resolve_kubeconfig() {
  if [ -n "${KUBECONFIG:-}" ] && [ -f "$KUBECONFIG" ]; then
    return
  fi
  for candidate in /var/lib/k0s/pki/admin.conf /etc/kubernetes/admin.conf /root/.kube/config; do
    if [ -f "$candidate" ]; then
      export KUBECONFIG="$candidate"
      return
    fi
  done
  echo "ERROR: kubeconfig not found — set KUBECONFIG explicitly" >&2; exit 1
}

_kubectl() {
  if command -v kubectl >/dev/null 2>&1; then
    command kubectl "$@"
  elif command -v k0s >/dev/null 2>&1; then
    k0s kubectl "$@"
  else
    echo "ERROR: no kubectl or k0s binary found" >&2; exit 127
  fi
}

_wait_for_pod() {
  local timeout="${1:-300}"
  _kubectl wait pod \
    --namespace "$CAP_NAMESPACE" \
    --selector "app.kubernetes.io/name=${CAP_NAME}" \
    --for=condition=Ready \
    --timeout="${timeout}s"
}

_do_install() {
  for manifest in namespace.yaml certificate.yaml referencegrant.yaml \
                  valkey-pvc.yaml valkey-deployment.yaml valkey-service.yaml \
                  deployment.yaml service.yaml httproute.yaml; do
    local path="$SCRIPT_DIR/manifests/${manifest}"
    [ -f "$path" ] && _kubectl apply -f "$path"
  done
  echo "Waiting for ${CAP_NAME} pod to be ready..."
  _wait_for_pod 300
  echo "${CAP_NAME} installed in namespace ${CAP_NAMESPACE}"
}

_do_update() {
  for manifest in httproute.yaml deployment.yaml; do
    local path="$SCRIPT_DIR/manifests/${manifest}"
    [ -f "$path" ] && _kubectl apply -f "$path"
  done
  _kubectl rollout restart "deployment/${CAP_NAME}" --namespace "$CAP_NAMESPACE"
  echo "Waiting for ${CAP_NAME} to restart..."
  _wait_for_pod 180
  echo "${CAP_NAME} updated in namespace ${CAP_NAMESPACE}"
}

_do_delete() {
  for manifest in httproute.yaml deployment.yaml service.yaml \
                  valkey-service.yaml valkey-deployment.yaml; do
    local path="$SCRIPT_DIR/manifests/${manifest}"
    [ -f "$path" ] && _kubectl delete -f "$path" --ignore-not-found
  done
  echo "${CAP_NAME} deleted from namespace ${CAP_NAMESPACE}"
}

_do_restart() {
  _kubectl rollout restart "deployment/${CAP_NAME}" --namespace "$CAP_NAMESPACE"
  _wait_for_pod 180
  echo "${CAP_NAME} restarted"
}

_do_health() {
  local pod
  pod=$(_kubectl get pod \
    --namespace "$CAP_NAMESPACE" \
    --selector "app.kubernetes.io/name=${CAP_NAME}" \
    -o jsonpath='{.items[0].metadata.name}' 2>/dev/null)
  if [ -z "$pod" ]; then
    echo "UNHEALTHY: no pod found for ${CAP_NAME} in ${CAP_NAMESPACE}" >&2; exit 1
  fi
  if _kubectl exec --namespace "$CAP_NAMESPACE" "$pod" -- \
      wget -qO- "http://localhost:${CAP_HTTP_PORT}/" >/dev/null 2>&1; then
    echo "HEALTHY: ${CAP_NAME} responding"
  else
    echo "UNHEALTHY: ${CAP_NAME} did not respond" >&2; exit 1
  fi
}

_resolve_kubeconfig

case "$CMD_TSK" in
  install)  [ -f "$SCRIPT_DIR/run-init.sh" ]    && exec bash "$SCRIPT_DIR/run-init.sh";    _do_install  ;;
  update)   [ -f "$SCRIPT_DIR/run-update.sh" ]  && exec bash "$SCRIPT_DIR/run-update.sh";  _do_update   ;;
  delete)   [ -f "$SCRIPT_DIR/run-delete.sh" ]  && exec bash "$SCRIPT_DIR/run-delete.sh";  _do_delete   ;;
  restart)  [ -f "$SCRIPT_DIR/run-restart.sh" ] && exec bash "$SCRIPT_DIR/run-restart.sh"; _do_restart  ;;
  health)   _do_health ;;
  *)        echo "ERROR: unknown CMD_TSK='${CMD_TSK}'. Valid: install|update|delete|restart|health" >&2; exit 1 ;;
esac