#!/usr/bin/env bash
set -euo pipefail

REMOTE_HOST="${REMOTE_HOST:-root@192.0.2.10}"
REMOTE_PATH="${REMOTE_PATH:-/mnt/user/appdata/geointel}"
REMOTE_BRANCH="${REMOTE_BRANCH:-main}"
REMOTE_REPO="${REMOTE_REPO:-gitea-widefrog:Jens/geointel.git}"
SSH_KEY="${SSH_KEY:-$HOME/.ssh/geointel_unraid_deploy}"
FRONTEND_URL="${FRONTEND_URL:-http://192.0.2.10:1202}"
BOOTSTRAP="${DEPLOY_BOOTSTRAP:-0}"
DEPLOY_GEOINTEL_INSTALL_AI="${GEOINTEL_INSTALL_AI:-}"

ssh_opts=(-o BatchMode=yes -o StrictHostKeyChecking=accept-new)
if [[ -f "$SSH_KEY" ]]; then
  ssh_opts+=(-i "$SSH_KEY")
fi

ssh "${ssh_opts[@]}" "$REMOTE_HOST" \
  "REMOTE_PATH='$REMOTE_PATH' REMOTE_BRANCH='$REMOTE_BRANCH' REMOTE_REPO='$REMOTE_REPO' FRONTEND_URL='$FRONTEND_URL' DEPLOY_BOOTSTRAP='$BOOTSTRAP' DEPLOY_GEOINTEL_INSTALL_AI='$DEPLOY_GEOINTEL_INSTALL_AI' bash -s" <<'REMOTE_SCRIPT'
set -euo pipefail

cd "$REMOTE_PATH"
git config --global --add safe.directory "$REMOTE_PATH"

if [[ ! -d .git ]]; then
  if [[ "$DEPLOY_BOOTSTRAP" != "1" ]]; then
    echo "No git checkout found in $REMOTE_PATH."
    echo "Re-run with DEPLOY_BOOTSTRAP=1 for the first deployment bootstrap."
    exit 2
  fi
  git init
  git remote add origin "$REMOTE_REPO"
fi

if git remote get-url origin >/dev/null 2>&1; then
  git remote set-url origin "$REMOTE_REPO"
else
  git remote add origin "$REMOTE_REPO"
fi
git fetch origin "$REMOTE_BRANCH"
git checkout -B "$REMOTE_BRANCH" "origin/$REMOTE_BRANCH"
# Remove only untracked source files that can enter the image. Persistent
# runtime roots (.env, storage, models and postgres-data) are deliberately not
# in this scoped clean list.
git clean -fd -- backend frontend deploy scripts fixtures tests contracts demo
chmod +x scripts/*.sh backend/docker_start.sh deploy/unraid/*.sh || true

# Persistent runtime roots can legitimately contain untracked files. The
# deploy checkout nevertheless has an exact, freshly fetched source revision
# because every image-bearing source path was reset and cleaned above.
DEPLOY_BUILD_SHA="$(git rev-parse HEAD)"

GEOINTEL_BUILD_SHA="$DEPLOY_BUILD_SHA" \
FRONTEND_URL="$FRONTEND_URL" \
DEPLOY_GEOINTEL_INSTALL_AI="${DEPLOY_GEOINTEL_INSTALL_AI:-}" \
bash deploy/unraid/deploy-release.sh
REMOTE_SCRIPT