#!/bin/bash
#
# KOPEKOMA System — Development Server Deploy Script
#
# Update branch `development` di server dengan sekali jalan:
#   git pull → composer install → npm build → migrate → seed → optimize → reload.
#
# Penggunaan:
#   sudo ./deploy.sh                    # Normal deploy
#   sudo ./deploy.sh --skip-migration   # Skip migration DAN seeder
#   sudo ./deploy.sh --skip-build       # Skip npm build (kalau tidak ada perubahan frontend)
#   sudo ./deploy.sh --branch=main      # Override branch (default: development)
#
# Pre-requisite:
#   - Jalankan dengan sudo (akses systemctl untuk reload php-fpm & nginx)
#   - Sesuaikan APP_DIR, APP_USER, PHP_FPM_SERVICE di bawah dengan kondisi server
#   - File ini punya permission +x: chmod +x deploy.sh
#
# Catatan:
#   - Queue/cache/session pakai driver database (lihat .env), jadi tidak ada
#     Reverb/Horizon yang perlu di-restart. queue:restart cukup untuk worker.
#

set -euo pipefail

# ─── Config ──────────────────────────────────────────────────────
APP_DIR="/var/www/kopekoma-system"
APP_USER="www-data"
LOCK_FILE="/tmp/kopekoma-deploy.lock"
LOG_FILE="/var/log/kopekoma-deploy.log"
PHP_FPM_SERVICE="php8.4-fpm"
GIT_BRANCH="development"
BACKUP_DIR="/var/backups/kopekoma"
BACKUP_KEEP=10

# Flags
SKIP_MIGRATION=false
SKIP_BUILD=false

for arg in "$@"; do
    case $arg in
        --skip-migration) SKIP_MIGRATION=true ;;
        --skip-build)     SKIP_BUILD=true ;;
        --branch=*)       GIT_BRANCH="${arg#*=}" ;;
        *) echo "Unknown flag: $arg"; exit 1 ;;
    esac
done

# ─── Helpers ─────────────────────────────────────────────────────
log() {
    local msg="$1"
    local timestamp=$(date '+%Y-%m-%d %H:%M:%S')
    echo -e "[$timestamp] $msg" | tee -a "$LOG_FILE"
}

step()    { log "\n→ $1"; }
success() { log "  ✓ $1"; }

error() {
    log "  ✗ ERROR: $1"
    cleanup
    exit 1
}

cleanup() {
    STATUS=$?

    [ -f "$LOCK_FILE" ] && rm -f "$LOCK_FILE"

    # Kalau deploy mati di tengah (set -e, Ctrl-C, atau error), situs jangan
    # ditinggal di maintenance mode tanpa siapa pun yang tahu. Naikkan lagi dan
    # beri tahu operator apa yang harus diperiksa.
    if [ "$STATUS" -ne 0 ] && [ "${MAINTENANCE_ON:-false}" = true ]; then
        log "  ⚠ Deploy GAGAL (exit $STATUS) — menaikkan kembali aplikasi"
        php artisan up 2>/dev/null || log "  ✗ 'artisan up' gagal — situs MASIH di maintenance mode!"

        if [ -f "$APP_DIR/.last-backup" ]; then
            log "  ⓘ Backup pra-deploy: $(cat "$APP_DIR/.last-backup")"
            log "  ⓘ Commit sebelumnya:  $(cat "$APP_DIR/.last-commit" 2>/dev/null || echo 'tidak tercatat')"
            log "  ⓘ Rollback manual: git reset --hard <commit>, lalu"
            log "    gunzip < <backup> | mysql <database>"
        fi
    fi
}

trap cleanup EXIT INT TERM

# ─── Pre-checks ──────────────────────────────────────────────────
if [ "$EUID" -ne 0 ]; then
    error "Script harus dijalankan dengan sudo"
fi

if [ -f "$LOCK_FILE" ]; then
    PID=$(cat "$LOCK_FILE")
    if ps -p "$PID" > /dev/null 2>&1; then
        error "Deploy sudah berjalan (PID: $PID). Tunggu selesai atau hapus $LOCK_FILE"
    else
        log "  ⚠ Lock file ada tapi proses tidak jalan, hapus lock lama"
        rm -f "$LOCK_FILE"
    fi
fi

echo $$ > "$LOCK_FILE"

if [ ! -d "$APP_DIR" ]; then
    error "Folder app tidak ditemukan: $APP_DIR (sesuaikan APP_DIR di script)"
fi

cd "$APP_DIR"

# Semua operasi dijalankan sebagai root (user yang punya SSH key GitHub, akses
# composer/npm cache, dan home writable). www-data di server ini home-nya tidak
# writable sehingga gagal untuk git SSH, composer, & npm. Ownership di-normalize
# ke $APP_USER di langkah terakhir untuk runtime php-fpm.
# safe.directory --system supaya root tidak kena "dubious ownership" pada repo
# yang sudah ter-chown ke $APP_USER dari deploy sebelumnya.
git config --system --add safe.directory "$APP_DIR" 2>/dev/null || true

DEPLOY_START=$(date +%s)
log "═══════════════════════════════════════════════════════════════"
log "  KOPEKOMA System — Deploy"
log "  Time:    $(date '+%Y-%m-%d %H:%M:%S')"
log "  User:    $(whoami)"
log "  Branch:  $GIT_BRANCH"
log "  Skip Migration: $SKIP_MIGRATION"
log "  Skip Build:     $SKIP_BUILD"
log "═══════════════════════════════════════════════════════════════"

# ─── 1. Maintenance mode ─────────────────────────────────────────
step "1/9 Activating maintenance mode"
php artisan down --retry=60 --secret="kopekoma-deploy" 2>/dev/null || true
MAINTENANCE_ON=true
success "Maintenance mode aktif (bypass via /kopekoma-deploy)"

# ─── 2. Pull latest code ─────────────────────────────────────────
step "2/9 Pulling latest code from origin/$GIT_BRANCH"
git fetch --all --prune
CURRENT_COMMIT=$(git rev-parse HEAD)
git checkout "$GIT_BRANCH"
git reset --hard "origin/$GIT_BRANCH"
NEW_COMMIT=$(git rev-parse HEAD)

if [ "$CURRENT_COMMIT" = "$NEW_COMMIT" ]; then
    log "  ⚠ Tidak ada perubahan code (commit sama: ${NEW_COMMIT:0:8})"
else
    success "Code update: ${CURRENT_COMMIT:0:8} → ${NEW_COMMIT:0:8}"
fi

# Simpan commit sebelumnya untuk rollback manual kalau perlu
echo "$CURRENT_COMMIT" > "$APP_DIR/.last-commit"

# ─── 3. Install PHP dependencies ─────────────────────────────────
step "3/9 Installing PHP dependencies (composer)"
composer install \
    --no-dev \
    --optimize-autoloader \
    --no-interaction \
    --no-progress \
    --prefer-dist 2>&1 | tee -a "$LOG_FILE"
success "Composer install selesai"

# ─── 4. Build frontend assets ────────────────────────────────────
if [ "$SKIP_BUILD" = false ]; then
    step "4/9 Installing & building frontend assets (npm + vite)"
    npm ci --silent 2>&1 | tee -a "$LOG_FILE"
    npm run build 2>&1 | tee -a "$LOG_FILE"
    success "Frontend assets ter-build"
else
    log "  ⚠ Skip frontend build (--skip-build)"
fi

# ─── 5. Run database migrations ──────────────────────────────────
if [ "$SKIP_MIGRATION" = false ]; then
    # Backup WAJIB sebelum migrate. Migrasi destruktif (dropColumn, ubah tipe
    # kolom) tidak dapat dipulihkan, dan isi database ini adalah catatan simpanan
    # & pinjaman anggota. `set -e` menghentikan deploy kalau dump gagal — itu
    # memang yang diinginkan: lebih baik deploy batal daripada jalan tanpa jaring.
    step "5/9 Backing up database before migration"
    mkdir -p "$BACKUP_DIR"

    DB_NAME=$(php artisan tinker --execute='echo config("database.connections.mysql.database");' 2>/dev/null | tail -1)
    DB_USER=$(php artisan tinker --execute='echo config("database.connections.mysql.username");' 2>/dev/null | tail -1)
    DB_PASS=$(php artisan tinker --execute='echo config("database.connections.mysql.password");' 2>/dev/null | tail -1)
    DB_HOST=$(php artisan tinker --execute='echo config("database.connections.mysql.host");' 2>/dev/null | tail -1)

    if [ -z "$DB_NAME" ]; then
        error "Tidak bisa membaca nama database dari config. Batal — menolak migrate tanpa backup."
    fi

    BACKUP_FILE="$BACKUP_DIR/pre-deploy-$(date +%F-%H%M%S)-${NEW_COMMIT:0:8}.sql.gz"

    MYSQL_PWD="$DB_PASS" mysqldump \
        --single-transaction \
        --routines \
        --triggers \
        --host="$DB_HOST" \
        --user="$DB_USER" \
        "$DB_NAME" | gzip > "$BACKUP_FILE"

    if [ ! -s "$BACKUP_FILE" ]; then
        error "Backup kosong atau gagal dibuat. Batal — menolak migrate tanpa backup."
    fi

    success "Backup DB: $BACKUP_FILE ($(du -h "$BACKUP_FILE" | cut -f1))"

    step "5b/9 Running database migrations"
    php artisan migrate --force --no-interaction 2>&1 | tee -a "$LOG_FILE"
    success "Migration selesai"

    # Seeder referensi — WAJIB, dan sengaja di sini: masih di dalam maintenance
    # window, setelah migrate, sebelum cache di-warm.
    #
    # Tanpa langkah ini rilis pertama di database kosong selesai tanpa role,
    # tanpa permission, tanpa user — tak ada yang bisa login sama sekali. Dan
    # tiap rilis yang menambah permission (mis. `access_activity_log`,
    # `access_laporan_titipan`, `bypass_time_deposit_schedule`) akan menghasilkan
    # 403 diam-diam di layar yang bersangkutan: menunya tampil, kliknya ditolak.
    #
    # GradeSeeder + RolePermissionSeeder idempotent terhadap definisinya sendiri
    # (`firstOrCreate`), jadi aman dijalankan tiap deploy. UserSeeder dipisah —
    # lihat catatannya di bawah.
    #
    # PERINGATAN: `RolePermissionSeeder` memakai `syncPermissions()`, yang
    # MENCABUT permission yang diberikan ke sebuah ROLE lewat layar Peran & Izin
    # kalau permission itu tak ada di daftar konstanta seeder. Pemberian izin
    # khusus yang ingin bertahan lintas deploy harus diberikan ke PENGGUNA,
    # bukan ke peran — atau dimasukkan ke konstanta seeder.
    step "5c/9 Seeding reference data (grades, roles, permissions)"
    php artisan db:seed --class=GradeSeeder --force --no-interaction 2>&1 | tee -a "$LOG_FILE"
    php artisan db:seed --class=RolePermissionSeeder --force --no-interaction 2>&1 | tee -a "$LOG_FILE"

    # UserSeeder DIPISAH dan bersyarat. Ia MELEMPAR di produksi bila
    # SEED_ADMIN_EMAIL / SEED_ADMIN_PASSWORD belum diset — dan dengan `set -e`
    # itu menggagalkan deploy tepat setelah migrate, meninggalkan aplikasi dalam
    # maintenance mode. Membuat admin adalah urusan pemasangan pertama, bukan
    # tiap rilis, jadi ia hanya dijalankan bila kredensialnya memang disiapkan.
    if grep -qE '^SEED_ADMIN_EMAIL=.+' "$APP_DIR/.env"; then
        php artisan db:seed --class=UserSeeder --force --no-interaction 2>&1 | tee -a "$LOG_FILE"
        success "Seeder selesai (termasuk akun admin)"
    else
        success "Seeder selesai (akun admin dilewati)"
        log "  ⚠ SEED_ADMIN_EMAIL belum diset — UserSeeder dilewati."
        log "     Pada PEMASANGAN PERTAMA ini berarti belum ada satu pun akun."
        log "     Set SEED_ADMIN_EMAIL & SEED_ADMIN_PASSWORD di .env lalu:"
        log "     php artisan db:seed --class=UserSeeder --force"
    fi

    # Simpan lokasi backup supaya rollback tahu harus memulihkan dari mana.
    echo "$BACKUP_FILE" > "$APP_DIR/.last-backup"

    # Buang backup lama, sisakan yang terbaru.
    ls -1t "$BACKUP_DIR"/pre-deploy-*.sql.gz 2>/dev/null | tail -n +$((BACKUP_KEEP + 1)) | xargs -r rm -f
else
    log "  ⚠ Skip migration (--skip-migration) — seeder ikut dilewati."
    log "     Kalau rilis ini menambah permission, jalankan manual setelah deploy:"
    log "     php artisan db:seed --class=RolePermissionSeeder --force"
fi

# ─── 6. Optimize Laravel ─────────────────────────────────────────
step "6/9 Optimizing Laravel (config, route, view, event cache)"
php artisan optimize:clear 2>&1 | tee -a "$LOG_FILE"
php artisan config:cache 2>&1 | tee -a "$LOG_FILE"
php artisan route:cache 2>&1 | tee -a "$LOG_FILE"
php artisan view:cache 2>&1 | tee -a "$LOG_FILE"
php artisan event:cache 2>&1 | tee -a "$LOG_FILE"
success "Laravel optimize selesai"

# ─── 7. Set file permissions (terakhir, normalize semua tulisan root) ─
step "7/9 Setting file permissions"
chown -R $APP_USER:$APP_USER "$APP_DIR"
chmod -R 775 "$APP_DIR/storage" "$APP_DIR/bootstrap/cache"
success "Permissions set (owner: $APP_USER)"

# ─── 8. Reload PHP-FPM & restart queue ───────────────────────────
step "8/9 Reloading PHP-FPM (clear OPcache) & restarting queue workers"
# Auto-detect service php-fpm kalau yang di config tidak ada (versi PHP bisa beda).
if ! systemctl list-unit-files | grep -q "^${PHP_FPM_SERVICE}.service"; then
    DETECTED=$(systemctl list-unit-files --type=service 2>/dev/null \
        | grep -oE 'php[0-9.]+-fpm\.service' | head -n1 | sed 's/\.service//')
    if [ -n "$DETECTED" ]; then
        log "  ⚠ $PHP_FPM_SERVICE tidak ada, pakai hasil deteksi: $DETECTED"
        PHP_FPM_SERVICE="$DETECTED"
    fi
fi
# Reload fpm best-effort: kalau gagal jangan bikin deploy mati (site harus tetap
# bisa keluar dari maintenance di step 9).
if systemctl reload "$PHP_FPM_SERVICE" 2>&1 | tee -a "$LOG_FILE"; then
    success "PHP-FPM reloaded ($PHP_FPM_SERVICE)"
else
    log "  ⚠ Gagal reload $PHP_FPM_SERVICE — cek 'systemctl list-units | grep fpm' & set PHP_FPM_SERVICE"
fi
# queue:restart signal worker (database driver) untuk exit setelah job aktif
# selesai; supervisor/systemd timer akan respawn dengan code baru.
php artisan queue:restart 2>&1 | tee -a "$LOG_FILE"
success "Queue workers signaled to restart"

# ─── 9. Reload Nginx & disable maintenance ───────────────────────
step "9/9 Reloading Nginx & disabling maintenance mode"
nginx -t 2>&1 | tee -a "$LOG_FILE" || error "Nginx config test gagal"
systemctl reload nginx
php artisan up 2>&1 | tee -a "$LOG_FILE"
success "Maintenance mode dinonaktifkan, app live"

# ─── Done ────────────────────────────────────────────────────────
DEPLOY_END=$(date +%s)
ELAPSED=$((DEPLOY_END - DEPLOY_START))

log ""
log "═══════════════════════════════════════════════════════════════"
log "  ✅ DEPLOY SELESAI dalam ${ELAPSED} detik"
log "  Branch: $GIT_BRANCH"
log "  Commit: ${NEW_COMMIT:0:8}"
log "═══════════════════════════════════════════════════════════════"
log ""