#!/usr/bin/env bash
# 家里 Station NAS（192.168.110.29 · DS213j · 无 Docker）部署工作手机网站
#
# 用法（Mac 与 NAS 同网）：
#   export NAS_HOST=192.168.110.29 NAS_USER=admin NAS_PASS='zhiqun1984'
#   bash sdk/scripts/deploy_home_station.sh
#
# 访问（部署成功后）：
#   内网（最稳）  http://192.168.110.29:8899/hub
#   公网 HTTPS    https://workphone.quwanzhi.com/hub  （推荐；kr Nginx 443 → frp 8889 → NAS 8899）
#   公网 HTTP     http://workphone.quwanzhi.com/hub   （部分网络/Clash 下 80 可能 Empty reply）
#   frp 直连      http://opennas2.quwanzhi.com:8889/hub
#   API Key       workphone-secret-key（Header: X-API-Key）
#
# 外网验收注意：
#   - kr 本机 curl 127.0.0.1 + Host 已 200；链路正常
#   - Mac 开 Clash 时域名可能解析到 fake-ip（198.18.x）→ 请加 DIRECT 或 --resolve
#   - 腾讯云安全组 API 凭证失效时需控制台手动放行 80/443/8889

set -euo pipefail

NAS_HOST="${NAS_HOST:-192.168.110.29}"
NAS_USER="${NAS_USER:-admin}"
NAS_PASS="${NAS_PASS:-zhiqun1984}"
NAS_SDK_DIR="${NAS_SDK_DIR:-/volume1/web/workphone-sdk}"
NAS_CKB_WEB="${NAS_CKB_WEB:-/volume1/web/cunkebao}"
SDK_PORT="${SDK_PORT:-8899}"
CKB_WEB_PORT="${CKB_WEB_PORT:-8800}"

SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
SDK_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
REPO_ROOT="$(cd "$SDK_ROOT/.." && pwd)"
CKB_ROOT="$(cd "$REPO_ROOT/../cunkebao_v3" 2>/dev/null && pwd || echo "")"

SSH_OPTS=(-o StrictHostKeyChecking=no -o ConnectTimeout=15
  -o KexAlgorithms=+diffie-hellman-group1-sha1
  -o Ciphers=+aes128-cbc,3des-cbc,aes192-cbc,aes256-cbc)

ssh_nas() {
  sshpass -p "$NAS_PASS" ssh "${SSH_OPTS[@]}" "${NAS_USER}@${NAS_HOST}" "$@"
}

rsync_nas() {
  sshpass -p "$NAS_PASS" rsync -avz -e "ssh ${SSH_OPTS[*]}" "$@"
}

echo ">>> 探测家里 NAS ${NAS_HOST} …"
ssh_nas "hostname; free -m | head -2"

echo ">>> 同步工作手机 SDK -> ${NAS_SDK_DIR}"
ssh_nas "mkdir -p '${NAS_SDK_DIR}'"
rsync_nas \
  --exclude '.git' --exclude '__pycache__' --exclude '*.pyc' --exclude 'node_modules' \
  --exclude '.venv' --exclude 'venv' --exclude '.pytest_cache' \
  --exclude 'android-app' --exclude 'admin' --exclude 'phone' \
  --exclude 'scripts/gadget_work' --exclude 'scripts/**/*.apk' \
  --exclude 'data/operation_logs' --exclude '*.md' \
  "${SDK_ROOT}/app" "${SDK_ROOT}/scripts" \
  "${SDK_ROOT}/requirements.nas-lite.txt" "${SDK_ROOT}/requirements.txt" \
  "${SDK_ROOT}/Dockerfile" "${SDK_ROOT}/docker-compose.nas.yml" \
  "${NAS_USER}@${NAS_HOST}:${NAS_SDK_DIR}/"

echo ">>> 安装 Python 依赖（NAS 精简版）…"
ssh_nas "bash -s" <<REMOTE
set -e
export PATH="/var/services/homes/admin/.local/bin:/usr/local/bin:\$PATH"
PY=/usr/local/bin/python3
SDK_DIR='${NAS_SDK_DIR}'
cd "\$SDK_DIR"
"\$PY" -m pip install --user -q -r requirements.nas-lite.txt 2>&1 | tail -5 || true
REMOTE

echo ">>> 写入启动脚本 …"
ssh_nas "bash -s" <<REMOTE
set -e
SDK_DIR='${NAS_SDK_DIR}'
PORT='${SDK_PORT}'
cat > "\$SDK_DIR/start_workphone.sh" <<'EOS'
#!/bin/sh
export PATH="/var/services/homes/admin/.local/bin:/usr/local/bin:\$PATH"
cd __SDK_DIR__/app
export ENV=production
export API_KEY=REPLACE_WITH_A_RANDOM_SECRET
export AI_BRAIN_ENABLED=false
# 家里 NAS 无 Mongo/Redis 容器；SDK 可降级运行
export MONGO_URI=
export REDIS_URL=
exec /usr/local/bin/python3 -m uvicorn main:app --host 0.0.0.0 --port __PORT__
EOS
sed -i "s|__SDK_DIR__|\$SDK_DIR|g; s|__PORT__|\$PORT|g" "\$SDK_DIR/start_workphone.sh"
chmod +x "\$SDK_DIR/start_workphone.sh"

# 停止旧进程
pkill -f "uvicorn main:app.*${SDK_PORT}" 2>/dev/null || true
sleep 1
nohup "\$SDK_DIR/start_workphone.sh" > "\$SDK_DIR/workphone.log" 2>&1 &
sleep 8
REMOTE

echo ">>> 健康检查 …"
if ssh_nas "wget -qO- http://127.0.0.1:${SDK_PORT}/health 2>/dev/null | head -c 200"; then
  echo ""
  echo "✅ 工作手机 SDK 已启动"
else
  echo "⚠️  health 未响应，查看日志："
  ssh_nas "tail -30 '${NAS_SDK_DIR}/workphone.log' 2>/dev/null || true"
fi

# 存客宝前端（可选：本地构建后 rsync）
if [[ -d "${CKB_ROOT}/Cunkebao" ]]; then
  echo ">>> 构建存客宝前端（本机）…"
  if command -v pnpm >/dev/null 2>&1; then
    (cd "${CKB_ROOT}/Cunkebao" && pnpm install --silent 2>/dev/null && VITE_API_BASE_URL="" pnpm run build 2>&1 | tail -5) || echo "存客宝构建跳过（pnpm 失败）"
  fi
  if [[ -d "${CKB_ROOT}/Cunkebao/dist" ]]; then
    echo ">>> 同步存客宝静态站到 NAS ${NAS_CKB_WEB} …"
    ssh_nas "mkdir -p '${NAS_CKB_WEB}'"
    rsync_nas -a --delete "${CKB_ROOT}/Cunkebao/dist/" "${NAS_USER}@${NAS_HOST}:${NAS_CKB_WEB}/"
    echo "   存客宝静态：http://${NAS_HOST}:${CKB_WEB_PORT}/ （需 WebStation/反代，或 python -m http.server）"
  fi
fi

echo ""
echo "=============================================="
echo "  家里 NAS 部署完成"
echo "  工作手机控制台: http://${NAS_HOST}:${SDK_PORT}/hub"
echo "  SDK API / 文档: http://${NAS_HOST}:${SDK_PORT}/docs"
echo "  请在 DSM 防火墙放行 TCP ${SDK_PORT}"
echo "=============================================="