#!/usr/bin/env bash
# Прогон deploy/install.sh в чистом контейнере Ubuntu 24.04 (AGENT.md 11.3).
# Требуется Docker с поддержкой привилегированных контейнеров (systemd внутри).
set -euo pipefail

REPO_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
IMAGE="${GLCHAT_TEST_IMAGE:-jrei/systemd-ubuntu:24.04}"
CONTAINER="${GLCHAT_TEST_CONTAINER:-glchat-install-test-$$}"

log() { printf '\n=== %s ===\n' "$*"; }

cleanup() {
    docker rm -f "$CONTAINER" >/dev/null 2>&1 || true
}
trap cleanup EXIT

log "запуск ${IMAGE} как systemd-контейнера"
docker rm -f "$CONTAINER" >/dev/null 2>&1 || true
docker run -d --name "$CONTAINER" \
    --privileged \
    --cgroupns=host \
    --tmpfs /tmp:exec,size=2g --tmpfs /run --tmpfs /run/lock \
    -v /sys/fs/cgroup:/sys/fs/cgroup:rw \
    "$IMAGE" /sbin/init >/dev/null

log "ожидание systemd"
for _ in $(seq 1 30); do
    if docker exec "$CONTAINER" systemctl is-system-running 2>/dev/null | grep -qE 'running|degraded'; then
        break
    fi
    sleep 1
done
docker exec "$CONTAINER" systemctl is-system-running || true
docker exec "$CONTAINER" bash -lc '. /etc/os-release && echo "тестовое окружение: $PRETTY_NAME"' 

log "копируем репозиторий внутрь контейнера"
docker exec "$CONTAINER" mkdir -p /opt/glchat-src
docker cp "${REPO_DIR}/." "${CONTAINER}:/opt/glchat-src/"

log "1/4 install.sh --dry-run"
docker exec "$CONTAINER" bash -lc '
  cd /opt/glchat-src && GLCHAT_ETC_DIR=/tmp/dryrun \
    bash deploy/install.sh --dry-run --domain gl.test.local --email admin@gl.test.local \
      --admin admin@gl.test.local --password "test-password-123" --yes
'

log "2/4 install.sh (боевой прогон: TLS и публичные порты не трогаем)"
docker exec "$CONTAINER" bash -lc "
  cd /opt/glchat-src && GLCHAT_ETC_DIR=/opt/glchat \
    bash deploy/install.sh --domain gl.test.local --email admin@gl.test.local \
      --admin admin@gl.test.local --password 'test-password-123' \
      --skip-tls --app-port 8080 --no-turn --yes
"

log "3/4 идемпотентность: повторный запуск с --reconfigure"
docker exec "$CONTAINER" bash -lc "
  cd /opt/glchat-src && GLCHAT_ETC_DIR=/opt/glchat \
    bash deploy/install.sh --domain gl.test.local --email admin@gl.test.local \
      --admin admin@gl.test.local --password 'test-password-123' \
      --skip-tls --app-port 8080 --no-turn --reconfigure --yes
"

log "4/4 проверки состояния"
docker exec "$CONTAINER" bash -lc '
  set -e
  echo "--- healthz"; curl -fsS http://127.0.0.1:8080/healthz; echo
  echo "--- readyz";  curl -fsS http://127.0.0.1:8080/readyz; echo
  echo "--- meta";    curl -fsS http://127.0.0.1:8080/api/v1/meta; echo
  echo "--- index";   curl -fsS http://127.0.0.1:8080/ | head -c 120; echo
  test -x /usr/local/bin/glchat && echo "CLI: ok"
  test -f /opt/glchat/compose.yaml && echo "compose: ok"
  test -f /opt/glchat/external-proxy.conf && echo "external-proxy fragment: ok"
  stat -c "perms %a %n" /opt/glchat/.env
  systemctl is-enabled glchat.service
  glchat version
'

log "ОК: прогон установщика в чистом Ubuntu 24.04 завершён"