#!/usr/bin/env bash
# deploy-by-script-to <target_branch>: checkout target, verify .secrets/<env>, force sync with origin, deploy target, checkout test.
# Launched from ia_dev root. Project root from projects/<id>/conf.json (deploy.secrets_path) when MAIL_TO or AI_AGENT_TOKEN set. Target: pprod | prod only.
set -euo pipefail

SCRIPT_REAL="$(readlink -f "${BASH_SOURCE[0]:-$0}" 2>/dev/null || realpath "${BASH_SOURCE[0]:-$0}" 2>/dev/null || echo "${BASH_SOURCE[0]:-$0}")"
DEPLOY_IA="$(cd "$(dirname "$SCRIPT_REAL")" && pwd)"
IA_DEV_ROOT="$(cd "$DEPLOY_IA/.." && pwd)"
# shellcheck source=../lib/project_config.sh
source "${IA_DEV_ROOT}/lib/project_config.sh"
PROJECT_ROOT=""
if [[ -n "${PROJECT_ID:-}" && -f "${PROJECT_CONFIG_PATH:-}" ]] && command -v jq >/dev/null 2>&1; then
	_secrets_path="$(jq -r '.deploy.secrets_path // ""' "$PROJECT_CONFIG_PATH" 2>/dev/null)"
	if [[ -n "$_secrets_path" ]]; then
		PROJECT_ROOT="$(dirname "$_secrets_path")"
	fi
fi
if [[ -z "$PROJECT_ROOT" || ! -d "$PROJECT_ROOT" ]]; then
	PROJECT_ROOT="$(cd "$DEPLOY_IA/../.." && pwd)"
fi
if [[ "$(pwd)" != "$PROJECT_ROOT" ]]; then
	cd "$PROJECT_ROOT" && exec "$SCRIPT_REAL" "$@"
fi
if ! git rev-parse --is-inside-work-tree >/dev/null 2>&1; then
	echo "[deploy-by-script-to][ERROR] Not in a git repository (PROJECT_ROOT=${PROJECT_ROOT})" >&2
	exit 1
fi

TARGET_BRANCH="${1:-}"
if [[ -z "$TARGET_BRANCH" ]]; then
	echo "[deploy-by-script-to][ERROR] Missing <target_branch> argument (expected: pprod | prod)" >&2
	echo "Usage: ./deploy/deploy-by-script-to.sh <target_branch>  (from ia_dev; pprod or prod only)" >&2
	exit 1
fi
if [[ ! "$TARGET_BRANCH" =~ ^(pprod|prod)$ ]]; then
	echo "[deploy-by-script-to][ERROR] Invalid target branch: must be pprod or prod (got: '${TARGET_BRANCH}')" >&2
	echo "Usage: ./deploy/deploy-by-script-to.sh <pprod|prod>" >&2
	exit 1
fi

current="$(git rev-parse --abbrev-ref HEAD)"
if [[ "$current" != "test" ]]; then
	echo "[deploy-by-script-to][ERROR] Must be on branch 'test' (current: '${current}'). Run /change-to-all-branches first." >&2
	exit 1
fi

echo "[deploy-by-script-to] Step 1/5: checkout ${TARGET_BRANCH}..."
if [[ "$(git rev-parse --abbrev-ref HEAD)" != "$TARGET_BRANCH" ]]; then
	git checkout "$TARGET_BRANCH"
fi

SECRETS_DIR="${PROJECT_ROOT}/.secrets/${TARGET_BRANCH}"
if [[ ! -d "$SECRETS_DIR" ]]; then
	echo "[deploy-by-script-to][ERROR] .secrets/${TARGET_BRANCH} does not exist at ${SECRETS_DIR}" >&2
	exit 1
fi
echo "[deploy-by-script-to] Step 2/5: .secrets/${TARGET_BRANCH} OK"

echo "[deploy-by-script-to] Step 3/5: force sync local branch with origin/${TARGET_BRANCH}..."
git fetch origin
git reset --hard "origin/${TARGET_BRANCH}"

echo "[deploy-by-script-to] Step 4/5: deploy ${TARGET_BRANCH} (--import-v1 --skipSetupHost)..."
deploy_script="$PROJECT_ROOT/deploy/scripts_v2/deploy.sh"
if [[ -n "${PROJECT_CONFIG_PATH:-}" && -f "${PROJECT_CONFIG_PATH:-}" ]] && command -v jq >/dev/null 2>&1; then
	_cfg_script="$(jq -r '.deploy.deploy_script_path // ""' "$PROJECT_CONFIG_PATH" 2>/dev/null)"
	[[ -n "$_cfg_script" && -x "$_cfg_script" ]] && deploy_script="$_cfg_script"
fi
"$deploy_script" "$TARGET_BRANCH" --import-v1 --skipSetupHost

echo "[deploy-by-script-to] Step 5/5: checkout test..."
git checkout test

echo "[deploy-by-script-to] OK: aligned, synced, deployed to ${TARGET_BRANCH}, back on test"