$ErrorActionPreference = "Stop"
Set-StrictMode -Version Latest

$root = Split-Path -Parent $MyInvocation.MyCommand.Path
Set-Location $root

if (-not (Test-Path -LiteralPath (Join-Path $root "compose.customer.yaml") -PathType Leaf)) {
  throw "compose.customer.yaml is missing. Run this installer from the extracted Proxima Engine repository folder."
}

if (-not (Get-Command docker -ErrorAction SilentlyContinue)) {
  throw "Docker CLI was not found. Install Docker Desktop with the WSL 2 backend and Docker Compose v2, then rerun this script."
}

if (-not (Test-Path -LiteralPath (Join-Path $root ".env") -PathType Leaf)) {
  if ([string]::IsNullOrWhiteSpace($env:PROXIMA_NODE_ID)) {
    throw "Set PROXIMA_NODE_ID using the enrollment configuration copied from Agata Proxima → Nodes."
  }
  if ([string]::IsNullOrWhiteSpace($env:PROXIMA_NODE_ENROLLMENT_URL)) {
    $env:PROXIMA_NODE_ENROLLMENT_URL = "https://api.agataproxima.com/api/v1/nodes/enroll"
  }
  if ([string]::IsNullOrWhiteSpace($env:PROXIMA_NODE_HEARTBEAT_URL)) {
    $env:PROXIMA_NODE_HEARTBEAT_URL = $env:PROXIMA_NODE_ENROLLMENT_URL.Replace("/api/v1/nodes/enroll", "/api/v1/nodes/heartbeat")
  }
  if ([string]::IsNullOrWhiteSpace($env:PROXIMA_UPSTREAM_ADDR)) {
    $env:PROXIMA_UPSTREAM_ADDR = Read-Host "PostgreSQL upstream host:port (for example, db.example.com:5432)"
  }
  if ([string]::IsNullOrWhiteSpace($env:PROXIMA_LISTEN_ADDR)) {
    $env:PROXIMA_LISTEN_ADDR = "0.0.0.0:6432"
  }
  if ([string]::IsNullOrWhiteSpace($env:PROXIMA_UPSTREAM_ADDR)) {
    throw "A PostgreSQL upstream address is required."
  }
  @(
    "PROXIMA_NODE_ID=$($env:PROXIMA_NODE_ID)"
    "PROXIMA_NODE_ENROLLMENT_URL=$($env:PROXIMA_NODE_ENROLLMENT_URL)"
    "PROXIMA_NODE_HEARTBEAT_URL=$($env:PROXIMA_NODE_HEARTBEAT_URL)"
    "PROXIMA_UPSTREAM_ADDR=$($env:PROXIMA_UPSTREAM_ADDR)"
    "PROXIMA_LISTEN_ADDR=$($env:PROXIMA_LISTEN_ADDR)"
    "PROXIMA_ENVIRONMENT=production"
  ) | Set-Content -LiteralPath (Join-Path $root ".env") -Encoding ascii
}

$tokenPath = Join-Path $root "secrets/node_enrollment_token"
if (-not (Test-Path -LiteralPath $tokenPath -PathType Leaf)) {
  if ([string]::IsNullOrWhiteSpace($env:PROXIMA_NODE_ENROLLMENT_TOKEN)) {
    throw "The one-time enrollment token is missing. Copy the enrollment configuration from Agata Proxima → Nodes and rerun this installer."
  }
  New-Item -ItemType Directory -Force -Path (Split-Path -Parent $tokenPath) | Out-Null
  [System.IO.File]::WriteAllText($tokenPath, $env:PROXIMA_NODE_ENROLLMENT_TOKEN, [System.Text.UTF8Encoding]::new($false))
}
Remove-Item Env:PROXIMA_NODE_ENROLLMENT_TOKEN -ErrorAction SilentlyContinue

$dockerOs = docker info --format '{{.OSType}}'
if ($LASTEXITCODE -ne 0) {
  throw "Docker Desktop is not running or the Docker daemon is unavailable. Start Docker Desktop, wait until it reports Engine running, and rerun this script."
}
if ($dockerOs.Trim() -ne "linux") {
  throw "Proxima Engine uses a Linux container image. In Docker Desktop, switch to Linux containers and rerun this installer."
}

$version = docker compose version
if ($LASTEXITCODE -ne 0) { throw "Docker Compose v2 is required. Update Docker Desktop and confirm that 'docker compose version' works." }
Write-Host $version

$configOutput = docker compose -f compose.customer.yaml config --quiet 2>&1
if ($LASTEXITCODE -ne 0) {
  throw "Customer Compose configuration is invalid. Check the generated .env file and enrollment-token secret. Details: $configOutput"
}

Write-Host "Building and starting Proxima Engine. The first build downloads Rust dependencies and can take several minutes."
docker compose -f compose.customer.yaml up -d --build
if ($LASTEXITCODE -ne 0) {
  docker compose -f compose.customer.yaml logs --tail 100 engine
  throw "Engine container did not start. Review the logs above, correct the reported issue, and rerun this installer."
}

Write-Host "Waiting up to 120 seconds for Docker's Engine health check..."
$healthy = $false
for ($attempt = 0; $attempt -lt 40; $attempt++) {
  $containerId = docker compose -f compose.customer.yaml ps -q engine
  if ($LASTEXITCODE -eq 0 -and -not [string]::IsNullOrWhiteSpace(($containerId | Out-String).Trim())) {
    $health = docker inspect --format '{{.State.Health.Status}}' $containerId
    if ($LASTEXITCODE -eq 0 -and $health.Trim() -eq "healthy") {
      $healthy = $true
      break
    }
    if ($LASTEXITCODE -eq 0 -and $health.Trim() -eq "unhealthy") {
      break
    }
  }
  Start-Sleep -Seconds 3
}

if (-not $healthy) {
  docker compose -f compose.customer.yaml ps
  docker compose -f compose.customer.yaml logs --tail 100 engine
  throw "Engine did not pass its Docker health check within 120 seconds. Review the container status and logs above before retrying."
}

Write-Host ""
Write-Host "Proxima Engine is healthy."
Write-Host "PostgreSQL proxy: 127.0.0.1:6432"
Write-Host "Node enrollment and signed heartbeat are active. The organization-scoped tenant verification key is stored in the protected node identity file."
Write-Host "Confirm that the registered node appears as healthy in Agata Proxima Fleet."
docker compose -f compose.customer.yaml ps