#!/bin/bash
# Install + start demo-withdraw API + auto-confirm loop inside bank container.
# Host:
#   ./scripts/taler-bank/install-demo-withdraw-api.sh
set -euo pipefail
ROOT=$(cd "$(dirname "$0")" && pwd)
CTR="${BANK_CONTAINER:-taler-hacktivism-bank}"

podman cp "$ROOT/demo-withdraw-api.py" "$CTR:/usr/local/bin/demo-withdraw-api.py"
podman cp "$ROOT/auto-confirm-withdrawals.sh" "$CTR:/usr/local/bin/auto-confirm-withdrawals.sh"
podman cp "$ROOT/refresh-demo-withdraw.sh" "$CTR:/usr/local/bin/refresh-demo-withdraw.sh"
podman exec -u root "$CTR" chmod 755 \
  /usr/local/bin/demo-withdraw-api.py \
  /usr/local/bin/auto-confirm-withdrawals.sh \
  /usr/local/bin/refresh-demo-withdraw.sh

# nginx: ensure demo-withdraw / auto-account / Integration → :19096
# FP pattern: Caddy @wdGet GET → :9013 → this location → demo-api
# (single in-CTR python; no nested podman)
podman exec -u root "$CTR" bash -lc '
set -e
python3 - <<PY
from pathlib import Path
p = Path("/etc/nginx/sites-available/bank-landing")
t = p.read_text()
changed = False
anchor = "    location /intro/ {"
blocks = []
if "demo-withdraw.json" not in t:
    blocks.append("""    location = /intro/demo-withdraw.json {
        proxy_pass http://127.0.0.1:19096/demo-withdraw.json;
        proxy_http_version 1.1;
        proxy_set_header Host \$host;
        add_header Cache-Control "no-store" always;
        add_header Access-Control-Allow-Origin * always;
    }
""")
    print("nginx demo-withdraw location added")
else:
    print("nginx already has demo-withdraw")
if "auto-account.json" not in t:
    blocks.append("""    location = /intro/auto-account.json {
        proxy_pass http://127.0.0.1:19096/auto-account.json;
        proxy_http_version 1.1;
        proxy_set_header Host \$host;
        add_header Cache-Control "no-store" always;
        add_header Access-Control-Allow-Origin * always;
    }
""")
    print("nginx auto-account location added")
else:
    print("nginx already has auto-account")
if "taler-integration/withdrawal-operation" not in t:
    blocks.append("""    # FP pattern: GET Integration via demo-api (suggested/required_exchange)
    # Caddy @wdGet → :9013 → here → :19096; POST/other stays on :9012
    location /taler-integration/withdrawal-operation/ {
        proxy_pass http://127.0.0.1:19096;
        proxy_http_version 1.1;
        proxy_set_header Host \$host;
        proxy_read_timeout 70s;
        add_header Cache-Control "no-store" always;
        add_header Access-Control-Allow-Origin * always;
    }
""")
    print("nginx Integration withdrawal-operation location added")
else:
    print("nginx already has Integration withdrawal-operation")
if blocks:
    if anchor not in t:
        raise SystemExit("nginx anchor location /intro/ not found")
    t = t.replace(anchor, "".join(blocks) + anchor, 1)
    p.write_text(t)
    changed = True
if not changed:
    print("nginx locations already complete")
PY
nginx -t && nginx -s reload || true
'

# start/restart API + single auto-confirm loop (flock inside script)
podman exec -u root "$CTR" bash -lc '
# stop demo-withdraw by pid (avoid pkill -f self-match); wait for :19096
ps -eo pid=,args= | awk "/demo-withdraw-api\\.py/ && !/awk/ {print \$1}" | while read p; do kill \$p 2>/dev/null || true; done
sleep 1
ps -eo pid=,args= | awk "/demo-withdraw-api\\.py/ && !/awk/ {print \$1}" | while read p; do kill -9 \$p 2>/dev/null || true; done
sleep 0.5
nohup python3 /usr/local/bin/demo-withdraw-api.py \
  >>/var/log/demo-withdraw-api.log 2>&1 </dev/null &
echo "api pid $!"
# fail loud if bind lost to a leftover listener
sleep 0.5
ps -eo pid=,args= | awk "/demo-withdraw-api\\.py/ && !/awk/" || {
  echo "ERROR: demo-withdraw-api failed to stay up (port busy?)" >&2
  tail -20 /var/log/demo-withdraw-api.log >&2 || true
  exit 1
}
# stop auto-confirm by pid
ps -eo pid=,args= | awk "/auto-confirm-withdrawals\\.sh --loop/ && !/awk/ {print \$1}" | while read p; do kill \$p 2>/dev/null || true; done
sleep 0.5
if [ -f /var/log/auto-confirm-withdrawals.log ]; then
  sz=$(wc -c </var/log/auto-confirm-withdrawals.log)
  if [ "${sz:-0}" -gt 5000000 ]; then
    tail -100 /var/log/auto-confirm-withdrawals.log > /tmp/ac-keep.log
    : > /var/log/auto-confirm-withdrawals.log
    cat /tmp/ac-keep.log >> /var/log/auto-confirm-withdrawals.log
  fi
fi
nohup env QUIET=1 WATCH_MAX=80 \
  /usr/local/bin/auto-confirm-withdrawals.sh --loop 2 \
  >>/var/log/auto-confirm-withdrawals.log 2>&1 </dev/null &
echo "auto-confirm pid $!"
sleep 1
ps -eo pid=,args= | awk "/auto-confirm-withdrawals\\.sh --loop/ && !/awk/"
curl -sS -m 8 http://127.0.0.1:19096/demo-withdraw.json | head -c 300; echo
'

echo "OK: demo-withdraw API + auto-confirm in $CTR"
echo "Public: https://bank.hacktivism.ch/intro/demo-withdraw.json"