#!/bin/bash
set -euo pipefail

SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
cd "$SCRIPT_DIR"
# shellcheck source=/dev/null
[ -f "${SCRIPT_DIR}/env-odoo" ]          && source "${SCRIPT_DIR}/env-odoo"
[ -f "${SCRIPT_DIR}/_credentials.env" ]  && source "${SCRIPT_DIR}/_credentials.env"

ODOO_NAMESPACE="${ODOO_NAMESPACE:-default}"
ODOO_IMAGE="${ODOO_IMAGE:-odoo:18.0}"
ODOO_TENANT="${ODOO_TENANT:-}"
ODOO_DB_NAME="${ODOO_DB_NAME:-}"
ODOO_DB_HOST="${ODOO_DB_HOST:-postgresql.core-data.svc.cluster.local}"
ODOO_DB_PORT="${ODOO_DB_PORT:-5432}"
ODOO_DB_USER="${ODOO_DB_USER:-odoo}"
ODOO_DOMAIN="${ODOO_DOMAIN:-}"
ODOO_STORAGE_CLASS="${ODOO_STORAGE_CLASS:-longhorn-retain}"
ODOO_STORAGE_SIZE="${ODOO_STORAGE_SIZE:-5Gi}"
ODOO_CLUSTER_ISSUER="${ODOO_CLUSTER_ISSUER:-letsencrypt-prod}"
ODOO_GATEWAY_NAME="${ODOO_GATEWAY_NAME:-libre-wuji}"
ODOO_GATEWAY_NS="${ODOO_GATEWAY_NS:-kube-system}"

CMD_TSK="${CMD_TSK:-${1:-install}}"

_resolve_kubeconfig() {
  if [ -n "${KUBECONFIG:-}" ] && [ -f "$KUBECONFIG" ]; then
    return
  fi
  for candidate in \
    /var/lib/k0s/pki/admin.conf \
    /etc/kubernetes/admin.conf \
    /root/.kube/config; do
    if [ -f "$candidate" ]; then
      export KUBECONFIG="$candidate"
      return
    fi
  done
  echo "ERROR: kubeconfig not found — set KUBECONFIG explicitly" >&2; exit 1
}

_kubectl() {
  if command -v kubectl >/dev/null 2>&1; then
    command kubectl "$@"
  elif command -v k0s >/dev/null 2>&1; then
    k0s kubectl "$@"
  else
    echo "ERROR: no kubectl or k0s binary found" >&2; exit 127
  fi
}

_require_env() {
  local var="$1"
  if [ -z "${!var:-}" ]; then
    echo "ERROR: required variable $var is not set" >&2; exit 1
  fi
}

_pod_name() {
  _kubectl get pod \
    --namespace "$ODOO_NAMESPACE" \
    --selector "app.kubernetes.io/name=odoo,app.kubernetes.io/instance=${ODOO_TENANT}" \
    -o jsonpath='{.items[0].metadata.name}' 2>/dev/null
}

_wait_for_pod() {
  local timeout="${1:-300}"
  _kubectl wait pod \
    --namespace "$ODOO_NAMESPACE" \
    --selector "app.kubernetes.io/name=odoo,app.kubernetes.io/instance=${ODOO_TENANT}" \
    --for=condition=Ready \
    --timeout="${timeout}s"
}

_do_install() {
  _require_env ODOO_DB_PASSWORD
  _require_env ODOO_ADMIN_PASSWORD

  for manifest in namespace.yaml networkpolicy.yaml certificate.yaml pvc.yaml deployment.yaml service.yaml httproute.yaml; do
    local path="$SCRIPT_DIR/manifests/${manifest}"
    [ -f "$path" ] && _kubectl apply -f "$path"
  done

  echo "Waiting for Odoo pod (tenant: ${ODOO_TENANT}) to be ready..."
  _wait_for_pod 300
  echo "Odoo tenant ${ODOO_TENANT} installed in namespace ${ODOO_NAMESPACE}"
}

_do_update() {
  _kubectl rollout restart \
    deployment/odoo \
    --namespace "$ODOO_NAMESPACE"
  echo "Waiting for Odoo to restart..."
  _wait_for_pod 180
  echo "Odoo tenant ${ODOO_TENANT} updated"
}

_do_delete() {
  for manifest in httproute.yaml deployment.yaml service.yaml networkpolicy.yaml; do
    local path="$SCRIPT_DIR/manifests/${manifest}"
    [ -f "$path" ] && _kubectl delete -f "$path" --ignore-not-found
  done
  echo "Odoo tenant ${ODOO_TENANT} deleted from namespace ${ODOO_NAMESPACE}"
}

_do_backup() {
  _require_env BACKUP_DIR
  local pod timestamp backup_file
  pod=$(_pod_name)
  timestamp=$(date +%Y%m%d_%H%M%S)
  backup_file="${BACKUP_DIR}/odoo_${ODOO_TENANT}_filestore_${timestamp}.tar.gz"
  mkdir -p "$BACKUP_DIR"
  _kubectl exec --namespace "$ODOO_NAMESPACE" "$pod" -- \
    tar czf - -C /var/lib/odoo filestore > "$backup_file"
  echo "Backup written to $backup_file"
}

_do_restore() {
  _require_env BACKUP_FILE
  local pod
  pod=$(_pod_name)
  _kubectl exec --stdin --namespace "$ODOO_NAMESPACE" "$pod" -- \
    tar xzf - -C /var/lib/odoo < "$BACKUP_FILE"
  echo "Restore completed from $BACKUP_FILE"
}

_do_health() {
  local pod
  pod=$(_pod_name 2>/dev/null || true)
  if [ -z "$pod" ]; then
    echo "UNHEALTHY: no odoo pod found for tenant ${ODOO_TENANT} in namespace ${ODOO_NAMESPACE}" >&2
    exit 1
  fi
  if _kubectl exec --namespace "$ODOO_NAMESPACE" "$pod" -- \
      curl -sf http://localhost:8069/web/health >/dev/null 2>&1; then
    echo "HEALTHY: odoo tenant ${ODOO_TENANT} responding"
  else
    echo "UNHEALTHY: odoo tenant ${ODOO_TENANT} did not respond to /web/health" >&2
    exit 1
  fi
}

_do_restart() {
  _kubectl rollout restart deployment/odoo --namespace "$ODOO_NAMESPACE"
  _wait_for_pod 180
  echo "Odoo tenant ${ODOO_TENANT} restarted"
}

_resolve_kubeconfig

# Delegate to generated run-{op}.sh when present — they execute the full manifest-plan
# workflow (create-credentials, create-cf-secret, init-db, apply, wait).
case "$CMD_TSK" in
  install)
    [ -f "$SCRIPT_DIR/run-init.sh" ]    && exec bash "$SCRIPT_DIR/run-init.sh"
    _do_install ;;
  update)
    [ -f "$SCRIPT_DIR/run-update.sh" ]  && exec bash "$SCRIPT_DIR/run-update.sh"
    _do_update ;;
  delete)
    [ -f "$SCRIPT_DIR/run-delete.sh" ]  && exec bash "$SCRIPT_DIR/run-delete.sh"
    _do_delete ;;
  restart)
    [ -f "$SCRIPT_DIR/run-restart.sh" ] && exec bash "$SCRIPT_DIR/run-restart.sh"
    _do_restart ;;
  backup)  _do_backup  ;;
  restore) _do_restore ;;
  health)  _do_health  ;;
  *)
    echo "ERROR: unknown CMD_TSK='$CMD_TSK'. Valid: install|update|delete|backup|restore|health|restart" >&2
    exit 1
    ;;
esac