#!/usr/bin/env bash
#
# Deploy the standalone CVM (ContextVM) server to its host.
#
# The host is intentionally NOT committed — this repository is public. Provide it
# via either:
#   • ~/.config/skatespots/cvm.env   (contains: CVM_HOST=ubuntu@your-host), or
#   • an environment variable:
#       CVM_HOST=ubuntu@your-host npm run deploy:cvm
#
# Optional overrides (env or ~/.config/skatespots/cvm.env):
#   CVM_SSH_KEY   SSH private key        (default: ~/.ssh/skatespots-new)
#   CVM_DIR       Remote checkout dir    (default: /home/ubuntu/skatespots-cvm)
#   CVM_SERVICE   systemd unit name      (default: skatespots-cvm)
#
# Usage:
#   npm run deploy:cvm
#   bash scripts/deploy-cvm.sh --rollback   # restore the newest remote backup
set -euo pipefail

REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"

# Load the local, never-committed config if present.
CONF="${HOME}/.config/skatespots/cvm.env"
if [[ -f "$CONF" ]]; then
  # shellcheck disable=SC1090
  source "$CONF"
fi

: "${CVM_HOST:?Set CVM_HOST (e.g. in ~/.config/skatespots/cvm.env) — the host is never committed}"
CVM_SSH_KEY="${CVM_SSH_KEY:-$HOME/.ssh/skatespots-new}"
CVM_DIR="${CVM_DIR:-/home/ubuntu/skatespots-cvm}"
CVM_SERVICE="${CVM_SERVICE:-skatespots-cvm}"

SSH=(ssh -i "$CVM_SSH_KEY" -o BatchMode=yes -o ConnectTimeout=12 "$CVM_HOST")

if [[ "${1:-}" == "--rollback" ]]; then
  echo "→ Rolling back to the newest backup on the host"
  "${SSH[@]}" "LATEST=\$(ls -1t $CVM_DIR/server.ts.bak-* | head -1); cp \"\$LATEST\" $CVM_DIR/server.ts; sudo systemctl restart $CVM_SERVICE && echo \"restored: \$LATEST\""
  exit 0
fi

echo "→ Backing up the remote server.ts"
"${SSH[@]}" "cp $CVM_DIR/server.ts $CVM_DIR/server.ts.bak-\$(date +%Y%m%d-%H%M%S)"

echo "→ Uploading cvm-server/server.ts"
scp -i "$CVM_SSH_KEY" -o BatchMode=yes "$REPO_ROOT/cvm-server/server.ts" "$CVM_HOST:$CVM_DIR/server.ts"

echo "→ Restarting $CVM_SERVICE"
"${SSH[@]}" "sudo systemctl restart $CVM_SERVICE && sleep 10 && echo \"active: \$(systemctl is-active $CVM_SERVICE)\""

echo "→ Recent log:"
"${SSH[@]}" "journalctl -u $CVM_SERVICE -n 25 --no-pager | grep -E 'Heartbeat|Server running|Data relays|CVM relay' || true"

echo "✅ CVM server deployed."