#!/bin/bash

# Colors for output
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
NC='\033[0m' # No Color

echo -e "${BLUE}========================================${NC}"
echo -e "${BLUE}Beckn-ONIX Complete Setup${NC}"
echo -e "${BLUE}========================================${NC}"

# Check if Docker is running
if ! docker info > /dev/null 2>&1; then
    echo -e "${RED}Error: Docker is not running. Please start Docker first.${NC}"
    exit 1
fi

# Step 1: Run the Beckn network installer
echo -e "${YELLOW}Step 1: Starting all Beckn ONIX adapter services...${NC}"
docker compose -f ./docker-compose-adapter.yml down 2>/dev/null
docker compose -f ./docker-compose-adapter.yml up -d

# Make the installer executable
#chmod +x ./beckn-onix.sh

# Auto-select option 3 (local setup) for the installer
#echo -e "${GREEN}Running local network setup...${NC}"
#echo "3" | ./beckn-onix.sh

cd ..

# Wait for services to stabilize
#echo -e "${YELLOW}Waiting for services to be ready...${NC}"
#sleep 15

# Step 2: Configure Vault for key management
echo -e "${YELLOW}Step 2: Setting up Vault for key management...${NC}"

# Check if Vault is running, if not start it
if ! docker ps | grep -q "vault"; then
    echo -e "${BLUE}Starting Vault container...${NC}"
    docker run -d \
        --name vault \
        --cap-add=IPC_LOCK \
        -e VAULT_DEV_ROOT_TOKEN_ID=root \
        -e VAULT_DEV_LISTEN_ADDRESS=0.0.0.0:8200 \
        -p 8200:8200 \
        hashicorp/vault:latest > /dev/null 2>&1
    
    # Wait for Vault to be ready
    echo -e "${BLUE}Waiting for Vault to start...${NC}"
    for i in {1..30}; do
        if docker exec -e VAULT_ADDR=http://127.0.0.1:8200 vault vault status > /dev/null 2>&1; then
            echo -e "${GREEN}✓ Vault is ready${NC}"
            break
        fi
        if [ $i -eq 30 ]; then
            echo -e "${RED}Error: Vault failed to start${NC}"
            exit 1
        fi
        sleep 1
    done
fi

# Configure Vault with error handling
echo -e "${BLUE}Configuring Vault policies...${NC}"

# Enable AppRole auth
if ! docker exec -e VAULT_ADDR=http://127.0.0.1:8200 -e VAULT_TOKEN=root vault \
    vault auth list 2>/dev/null | grep -q "approle"; then
    docker exec -e VAULT_ADDR=http://127.0.0.1:8200 -e VAULT_TOKEN=root vault \
        vault auth enable approle 2>/dev/null || {
            echo -e "${YELLOW}AppRole already enabled or error occurred${NC}"
        }
fi

# Create policy
echo 'path "beckn/*" { capabilities = ["create", "read", "update", "delete", "list"] }' | \
    docker exec -i -e VAULT_ADDR=http://127.0.0.1:8200 -e VAULT_TOKEN=root vault \
    vault policy write beckn-policy - > /dev/null 2>&1 || {
        echo -e "${YELLOW}Policy already exists or updated${NC}"
    }

# Create role
docker exec -e VAULT_ADDR=http://127.0.0.1:8200 -e VAULT_TOKEN=root vault \
    vault write auth/approle/role/beckn-role \
    token_policies="beckn-policy" \
    token_ttl=24h \
    token_max_ttl=48h > /dev/null 2>&1 || {
        echo -e "${YELLOW}Role already exists or updated${NC}"
    }

# Get Vault credentials with error handling
echo -e "${BLUE}Getting Vault credentials...${NC}"
ROLE_ID=$(docker exec -e VAULT_ADDR=http://127.0.0.1:8200 -e VAULT_TOKEN=root vault \
    vault read -field=role_id auth/approle/role/beckn-role/role-id 2>/dev/null)

if [ -z "$ROLE_ID" ]; then
    echo -e "${RED}Error: Failed to get ROLE_ID from Vault${NC}"
    exit 1
fi

SECRET_ID=$(docker exec -e VAULT_ADDR=http://127.0.0.1:8200 -e VAULT_TOKEN=root vault \
    vault write -field=secret_id -f auth/approle/role/beckn-role/secret-id 2>/dev/null)

if [ -z "$SECRET_ID" ]; then
    echo -e "${RED}Error: Failed to get SECRET_ID from Vault${NC}"
    exit 1
fi

echo -e "${GREEN}✓ Got Vault credentials:${NC}"
echo -e "  ROLE_ID: ${ROLE_ID:0:20}..."
echo -e "  SECRET_ID: ${SECRET_ID:0:20}..."

# Enable KV v2 secrets engine
docker exec -e VAULT_ADDR=http://127.0.0.1:8200 -e VAULT_TOKEN=root vault \
    vault secrets enable -path=beckn kv-v2 > /dev/null 2>&1 || {
        echo -e "${YELLOW}Secrets engine already enabled${NC}"
    }

echo -e "${GREEN}✓ Vault configured successfully${NC}"

# Seed the keys for BAP network
echo -e "${BLUE}Seeding keys for BAP network...${NC}"
docker exec -e VAULT_ADDR=http://127.0.0.1:8200 -e VAULT_TOKEN=root vault \
    vault kv put secret/keys/bap-network \
    signingPublicKey='1ct6/Xg6gHhT9QolufThbY4mWHYkIpXzh7YxMFM8MQE=' \
    signingPrivateKey='C2hPMyeN+1Vzn8+7F/MUHmR5jKFuSb7s6tf/U5qni8vVy3r9eDqAeFP1CiW59OFtjiZYdiQilfOHtjEwUzwxAQ==' > /dev/null 2>&1

if [ $? -eq 0 ]; then
    echo -e "${GREEN}✓ BAP network keys seeded successfully${NC}"
else
    echo -e "${YELLOW}Warning: Failed to seed BAP network keys or keys already exist${NC}"
fi

# Step 3: Check services status
echo -e "${YELLOW}Step 3: Checking services status...${NC}"

# Check if services are running
if docker ps | grep -q "registry"; then
    echo -e "${GREEN}✓ Registry is running${NC}"
fi
if docker ps | grep -q "gateway"; then
    echo -e "${GREEN}✓ Gateway is running${NC}"
fi
if docker ps | grep -q "bap-client"; then
    echo -e "${GREEN}✓ BAP services are running${NC}"
fi
if docker ps | grep -q "bpp-client"; then
    echo -e "${GREEN}✓ BPP services are running${NC}"
fi
if docker ps | grep -q "vault"; then
    echo -e "${GREEN}✓ Vault is running${NC}"
fi

# Step 4: Create required directories
echo -e "${YELLOW}Step 4: Creating required directories...${NC}"

# Create schemas directory for validation
if [ ! -d "schemas" ]; then
    mkdir -p schemas
    echo -e "${GREEN}✓ Created schemas directory${NC}"
else
    echo -e "${YELLOW}schemas directory already exists${NC}"
fi

# Create logs directory
if [ ! -d "logs" ]; then
    mkdir -p logs
    echo -e "${GREEN}✓ Created logs directory${NC}"
else
    echo -e "${YELLOW}logs directory already exists${NC}"
fi

# Create plugins directory if not exists
if [ ! -d "plugins" ]; then
    mkdir -p plugins
    echo -e "${GREEN}✓ Created plugins directory${NC}"
else
    echo -e "${YELLOW}plugins directory already exists${NC}"
fi

# Step 5: Build adapter plugins
echo -e "${YELLOW}Step 5: Building adapter plugins...${NC}"

if [ -f "./install/build-plugins.sh" ]; then
    chmod +x ./install/build-plugins.sh
    ./install/build-plugins.sh
    if [ $? -eq 0 ]; then
        echo -e "${GREEN}✓ Plugins built successfully${NC}"
    else
        echo -e "${RED}Error: Plugin build failed${NC}"
        exit 1
    fi
else
    echo -e "${RED}Error: install/build-plugins.sh not found${NC}"
    exit 1
fi

# Step 6: Build the adapter server
echo -e "${YELLOW}Step 6: Building Beckn-ONIX adapter server...${NC}"

if [ -f "go.mod" ]; then
    go build -o beckn-adapter cmd/adapter/main.go
    if [ $? -eq 0 ]; then
        echo -e "${GREEN}✓ Adapter server built successfully${NC}"
    else
        echo -e "${RED}Error: Failed to build adapter server${NC}"
        echo -e "${YELLOW}Please check Go installation and dependencies${NC}"
        exit 1
    fi
else
    echo -e "${RED}Error: go.mod not found${NC}"
    exit 1
fi

# Step 7: Create environment file
echo -e "${YELLOW}Step 7: Creating environment configuration...${NC}"

# Check if we have Vault credentials
if [ -z "$ROLE_ID" ] || [ -z "$SECRET_ID" ]; then
    echo -e "${RED}Error: Vault credentials not available${NC}"
    echo -e "${YELLOW}Please check Vault configuration and try again${NC}"
    exit 1
fi

cat > .env <<EOF
# Beckn-ONIX Environment Configuration
# Generated on $(date)

# Service URLs
export REDIS_URL=localhost:6379
export MONGO_URL=mongodb://localhost:27017

# Adapter Configuration
export ADAPTER_PORT=8080
export ADAPTER_MODE=development

# Vault Configuration
export VAULT_ADDR=http://localhost:8200
export VAULT_TOKEN=root
export VAULT_ROLE_ID=$ROLE_ID
export VAULT_SECRET_ID=$SECRET_ID
EOF

if [ -f ".env" ]; then
    echo -e "${GREEN}✓ Environment file created successfully${NC}"
    echo -e "${YELLOW}  Vault ROLE_ID and SECRET_ID have been saved to .env${NC}"
else
    echo -e "${RED}Error: Failed to create .env file${NC}"
    exit 1
fi

# Display final status
echo ""
echo -e "${GREEN}========================================${NC}"
echo -e "${GREEN}✅ Setup Complete!${NC}"
echo -e "${GREEN}========================================${NC}"
echo ""
echo -e "${BLUE}Services Running:${NC}"
echo -e "  💾 Redis:        localhost:6379"
echo -e "  🗄️  MongoDB:      localhost:27017"
echo ""
echo -e "${GREEN}Next Steps:${NC}"
echo -e "1. Run the adapter:"
echo -e "   ${YELLOW}source .env && ./beckn-adapter --config=config/local-dev.yaml${NC}"
echo ""
echo -e "2. Test the endpoints:"
echo -e "   ${YELLOW}./test_endpoints.sh${NC}"
echo ""
echo -e "3. Stop all services:"
echo -e "   ${YELLOW}cd install && docker compose down${NC}"
echo ""
echo -e "4. View logs:"
echo -e "   ${YELLOW}docker compose logs -f [service-name]${NC}"
echo -e "${GREEN}========================================${NC}"