#!/usr/bin/env bash
set -euo pipefail

repository_root=$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)
workspace_venv="$repository_root/../.venv"
test_tmp=$(mktemp -d)
chmod 0700 "$test_tmp"

export ANSIBLE_COLLECTIONS_PATH="$test_tmp/collections"
export ANSIBLE_ROLES_PATH="$(dirname "$repository_root")"

inventory="$repository_root/tests/inventory"
converge="$repository_root/tests/converge.yml"
verify="$repository_root/tests/verify.yml"
unsupported="$repository_root/tests/unsupported.yml"
ansible_playbook="$workspace_venv/bin/ansible-playbook"
default_commit=0fc92f364316c874d366b00cdc884a33e1900b25
previous_commit=9202ccddb962ab499f0772d3c01efdf2ff703077
source_dir=/usr/local/src/seriatim
binary_path=/usr/local/bin/seriatim

cleanup() {
  exit_status=$?
  trap - EXIT
  "$ansible_playbook" -i "$inventory" "$converge" >/dev/null 2>&1 || true
  rm -rf -- "$test_tmp"
  exit "$exit_status"
}
trap cleanup EXIT

require_clean_recap() {
  grep -Eq 'changed=0 .*failed=0' "$1"
}

require_changed_recap() {
  grep -Eq 'changed=[1-9][0-9]* .*failed=0' "$1"
}

run_converge() {
  output_file=$1
  shift
  "$ansible_playbook" -i "$inventory" "$@" "$converge" | tee "$output_file"
}

verify_release() {
  expected_version=$1
  expected_commit=$2
  "$ansible_playbook" -i "$inventory" \
    -e "seriatim_expected_version=$expected_version" \
    -e "seriatim_expected_commit=$expected_commit" \
    "$verify"
}

cd "$repository_root"
"$workspace_venv/bin/ansible-galaxy" collection install \
  -r collections/requirements.yml \
  -p "$ANSIBLE_COLLECTIONS_PATH"
"$ansible_playbook" -i "$inventory" --syntax-check "$converge"
"$workspace_venv/bin/ansible-lint" "$converge" "$verify" "$unsupported"

baseline_log="$test_tmp/baseline.log"
run_converge "$baseline_log"
verify_release v1.5.0 "$default_commit"
baseline_repeat_log="$test_tmp/baseline-repeat.log"
run_converge "$baseline_repeat_log"
require_clean_recap "$baseline_repeat_log"

sudo rm -f -- "$binary_path"
missing_binary_log="$test_tmp/missing-binary.log"
run_converge "$missing_binary_log"
require_changed_recap "$missing_binary_log"
grep -A1 -E 'TASK .*Build Seriatim' "$missing_binary_log" | grep -q '^changed:'
missing_binary_repeat_log="$test_tmp/missing-binary-repeat.log"
run_converge "$missing_binary_repeat_log"
require_clean_recap "$missing_binary_repeat_log"

custom_go_binary="$test_tmp/go"
ln -s /snap/bin/go "$custom_go_binary"
sudo rm -f -- "$binary_path"
custom_go_log="$test_tmp/custom-go.log"
run_converge "$custom_go_log" \
  -e '{"seriatim_manage_build_dependencies": false}' \
  -e "seriatim_go_binary=$custom_go_binary"
require_changed_recap "$custom_go_log"
grep -A1 -E 'TASK .*Build Seriatim' "$custom_go_log" | grep -q '^changed:'
verify_release v1.5.0 "$default_commit"
custom_go_repeat_log="$test_tmp/custom-go-repeat.log"
run_converge "$custom_go_repeat_log" \
  -e '{"seriatim_manage_build_dependencies": false}' \
  -e "seriatim_go_binary=$custom_go_binary"
require_clean_recap "$custom_go_repeat_log"

sudo chmod 0700 "$binary_path"
metadata_log="$test_tmp/metadata.log"
run_converge "$metadata_log"
require_changed_recap "$metadata_log"
grep -A1 -E 'TASK .*Build Seriatim' "$metadata_log" | grep -q '^skipping:'
grep -A3 -E 'TASK .*Converge installed metadata' "$metadata_log" | \
  grep -q "^changed:.*'path': '$binary_path'"
metadata_repeat_log="$test_tmp/metadata-repeat.log"
run_converge "$metadata_repeat_log"
require_clean_recap "$metadata_repeat_log"

previous_release_log="$test_tmp/previous-release.log"
run_converge "$previous_release_log" -e seriatim_version=v1.4.0
require_changed_recap "$previous_release_log"
verify_release v1.4.0 "$previous_commit"
previous_repeat_log="$test_tmp/previous-repeat.log"
run_converge "$previous_repeat_log" -e seriatim_version=v1.4.0
require_clean_recap "$previous_repeat_log"

restored_release_log="$test_tmp/restored-release.log"
run_converge "$restored_release_log"
require_changed_recap "$restored_release_log"
verify_release v1.5.0 "$default_commit"
restored_repeat_log="$test_tmp/restored-repeat.log"
run_converge "$restored_repeat_log"
require_clean_recap "$restored_repeat_log"

platform_cases=(
  'Debian 26.04 x86_64 distribution'
  'Ubuntu 24.04 x86_64 release'
  'Ubuntu 26.04 riscv64 architecture'
)
for platform_case in "${platform_cases[@]}"; do
  read -r distribution release architecture label <<<"$platform_case"
  case_root="$test_tmp/unsupported-$label"
  case_source="$case_root/source"
  case_binary="$case_root/bin/seriatim"
  case_log="$test_tmp/unsupported-$label.log"
  if "$ansible_playbook" -i "$inventory" \
    -e "test_distribution=$distribution" \
    -e "test_distribution_version=$release" \
    -e "test_architecture=$architecture" \
    -e "seriatim_source_dir=$case_source" \
    -e "seriatim_binary_path=$case_binary" \
    "$unsupported" | tee "$case_log"; then
    echo "Unsupported $label case unexpectedly succeeded" >&2
    exit 1
  fi
  grep -Eq 'failed=1' "$case_log"
  [[ ! -e "$case_source" ]]
  [[ ! -e "$case_binary" ]]
done

[[ "$("$binary_path" --version)" == 'seriatim version v1.5.0' ]]
[[ "$(sudo git -C "$source_dir" rev-parse HEAD)" == "$default_commit" ]]
[[ "$(sudo stat -c '%U:%G %a' "$binary_path")" == 'root:root 755' ]]