#!/usr/bin/env bash
set -euo pipefail

repository_root=$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)
workspace_venv="$repository_root/../.venv"
test_tmp=$(mktemp -d)
chmod 0700 "$test_tmp"

export ANSIBLE_COLLECTIONS_PATH="$test_tmp/collections"
export ANSIBLE_ROLES_PATH="$(dirname "$repository_root")"
# Avoid controller temporary-file ACL requirements when becoming narratio.
export ANSIBLE_PIPELINING=true
export ANSIBLE_REMOTE_TMP=/tmp

inventory="$repository_root/tests/inventory"
converge="$repository_root/tests/converge.yml"
verify_baseline="$repository_root/tests/verify-baseline.yml"
representative="$repository_root/tests/representative.yml"
verify_config="$repository_root/tests/verify-config.yml"
ansible_playbook="$workspace_venv/bin/ansible-playbook"
baseline_args=(
  -e 'narratio_whisperx_transcribe_url=http://127.0.0.1:8000/transcribe'
  -e '{"narratio_audita_credentials":null,"narratio_audita_overlay":null,"narratio_audita_proposal_profile":null,"narratio_audita_validation_profile":null,"narratio_notarius_credentials":null,"narratio_notarius_config_overlay":null,"narratio_scriptorium_credentials":null}'
)

cleanup() {
  exit_status=$?
  trap - EXIT
  "$ansible_playbook" -i "$inventory" "${baseline_args[@]}" "$converge" >/dev/null 2>&1 || true
  rm -rf -- "$test_tmp"
  exit "$exit_status"
}
trap cleanup EXIT

require_clean_recap() {
  grep -Eq 'changed=0 .*failed=0' "$1"
}

run_converge() {
  output_file=$1
  shift
  "$ansible_playbook" -i "$inventory" "$@" "$converge" | tee "$output_file"
}

cd "$repository_root"
"$workspace_venv/bin/ansible-galaxy" collection install \
  -r collections/requirements.yml \
  -p "$ANSIBLE_COLLECTIONS_PATH"
"$ansible_playbook" -i "$inventory" --syntax-check "$converge"
"$ansible_playbook" -i "$inventory" --syntax-check "$representative"
"$workspace_venv/bin/ansible-lint" "$converge" "$representative" \
  "$verify_baseline" "$verify_config"

baseline_log="$test_tmp/baseline.log"
run_converge "$baseline_log" "${baseline_args[@]}"
"$ansible_playbook" -i "$inventory" "$verify_baseline"
baseline_repeat_log="$test_tmp/baseline-repeat.log"
run_converge "$baseline_repeat_log" "${baseline_args[@]}"
require_clean_recap "$baseline_repeat_log"

selected_version_log="$test_tmp/selected-version.log"
run_converge "$selected_version_log" "${baseline_args[@]}" -e 'narratio_version=v2.1.0'
/usr/local/bin/narratio version | grep -Fx 'narratio v2.1.0'

custom_go_binary="$test_tmp/go"
custom_go_invocations="$test_tmp/go-invocations.log"
printf '%s\n' \
  '#!/usr/bin/env bash' \
  'set -euo pipefail' \
  "printf '%s\\n' \"\$*\" >> $custom_go_invocations" \
  'exec /snap/bin/go "$@"' > "$custom_go_binary"
chmod 0755 "$custom_go_binary"
sudo rm -f -- /usr/local/bin/narratio
recovery_log="$test_tmp/recovery.log"
run_converge "$recovery_log" "${baseline_args[@]}" \
  -e 'narratio_version=v2.1.0' \
  -e '{"narratio_manage_build_dependencies": false}' \
  -e "narratio_go_binary=$custom_go_binary"
grep -q . "$custom_go_invocations"
/usr/local/bin/narratio version | grep -Fx 'narratio v2.1.0'
"$ansible_playbook" -i "$inventory" "$verify_baseline"
recovery_repeat_log="$test_tmp/recovery-repeat.log"
run_converge "$recovery_repeat_log" "${baseline_args[@]}" \
  -e 'narratio_version=v2.1.0' \
  -e '{"narratio_manage_build_dependencies": false}' \
  -e "narratio_go_binary=$custom_go_binary"
require_clean_recap "$recovery_repeat_log"

representative_log="$test_tmp/representative.log"
"$ansible_playbook" -i "$inventory" "$representative" | tee "$representative_log"
/usr/local/bin/narratio version | grep -Fx 'narratio v3.1.0'
synthetic_notarius_api_key=notarius-representative-synthetic-value
synthetic_audita_api_key=audita-representative-synthetic-value
representative_validation_log="$test_tmp/representative-validation.log"
NARRATIO_TEST_NOTARIUS_API_KEY="$synthetic_notarius_api_key" \
NARRATIO_TEST_AUDITA_API_KEY="$synthetic_audita_api_key" \
  "$ansible_playbook" -i "$inventory" "$verify_config" | tee "$representative_validation_log"
! grep -Fq "$synthetic_notarius_api_key" "$representative_log" "$representative_validation_log"
! grep -Fq "$synthetic_audita_api_key" "$representative_log" "$representative_validation_log"
representative_repeat_log="$test_tmp/representative-repeat.log"
"$ansible_playbook" -i "$inventory" "$representative" | tee "$representative_repeat_log"
require_clean_recap "$representative_repeat_log"

empty_overlay_log="$test_tmp/empty-overlay.log"
empty_inputs='{"narratio_audita_credentials":[],"narratio_notarius_credentials":[],"narratio_audita_overlay":"","narratio_audita_proposal_profile":"","narratio_audita_validation_profile":"","narratio_notarius_config_overlay":"","narratio_scriptorium_credentials":[],"narratio_scriptorium_artifacts":null}'
empty_expectations='{"narratio_test_audita_credentials":[],"narratio_test_notarius_credentials":[],"narratio_test_audita_overlay":"","narratio_test_audita_proposal_profile":"","narratio_test_audita_validation_profile":"","narratio_test_notarius_config_overlay":"","narratio_test_scriptorium_credentials":[],"narratio_test_scriptorium_credentials_only":true}'
"$ansible_playbook" -i "$inventory" \
  -e "$empty_inputs" \
  "$representative" | tee "$empty_overlay_log"
"$ansible_playbook" -i "$inventory" \
  -e "$empty_expectations" \
  "$verify_config"
empty_repeat_log="$test_tmp/empty-repeat.log"
"$ansible_playbook" -i "$inventory" -e "$empty_inputs" \
  "$representative" | tee "$empty_repeat_log"
require_clean_recap "$empty_repeat_log"