#!/usr/bin/env bash
set -euo pipefail

ROOT_DIR=$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/.." && pwd)
COMPOSE_DIR="$ROOT_DIR/infra/compose"

echo "🚀 Dev up: networks, certs, infra, services"

# 1) Ensure .env exists
if [[ ! -f "$COMPOSE_DIR/.env" ]]; then
  cp "$COMPOSE_DIR/env.example" "$COMPOSE_DIR/.env"
  echo "📝 Created .env from template"
fi

# 2) Read only needed values from .env (do not 'source' due to spaces)
get_env() {
  local key="$1"; local def="${2-}"
  local line
  line=$(grep -E "^${key}=" "$COMPOSE_DIR/.env" | tail -n1 || true)
  if [[ -z "$line" ]]; then printf "%s" "$def"; return; fi
  printf "%s" "${line#*=}"
}

DOMAIN=${DOMAIN:-$(get_env DOMAIN local)}
AUTHENTIK_BOOTSTRAP_TOKEN=${AUTHENTIK_BOOTSTRAP_TOKEN:-$(get_env AUTHENTIK_BOOTSTRAP_TOKEN "")}
AUTHENTIK_OUTPOST_TOKEN=${AUTHENTIK_OUTPOST_TOKEN:-$(get_env AUTHENTIK_OUTPOST_TOKEN "")}
START_APP_SERVICES=${START_APP_SERVICES:-$(get_env START_APP_SERVICES true)}

# 3) Networks and certs
bash "$ROOT_DIR/scripts/create-networks.sh"
bash "$ROOT_DIR/scripts/generate-dev-certs.sh"

# 4) Bring up core infra (detached)
echo "🏗️ Starting Traefik + core infra..."
docker compose -f "$COMPOSE_DIR/compose.yaml" up -d \
  apa-traefik apa-authentik-db apa-authentik-redis apa-authentik-server apa-authentik-worker \
  apa-vault apa-postgres apa-neo4j apa-qdrant apa-minio apa-redis apa-prometheus apa-grafana apa-loki

# ... (lines 40-79 skipped for brevity in replacement, but context maintained)

# 7) Start Authentik outpost if token present
if [[ -n "${AUTHENTIK_OUTPOST_TOKEN:-}" && "${AUTHENTIK_OUTPOST_TOKEN}" != "changeme" ]]; then
  echo "🔐 Starting Authentik outpost..."
  docker compose -f "$COMPOSE_DIR/compose.yaml" up -d apa-authentik-outpost || true
else
  echo "ℹ️  Set AUTHENTIK_OUTPOST_TOKEN in $COMPOSE_DIR/.env to start authentik-outpost"
fi

# 8) Start application services (optional)
if [[ "${START_APP_SERVICES:-true}" == "true" ]]; then
  echo "🚀 Starting application services..."
  docker compose -f "$COMPOSE_DIR/compose.yaml" up -d \
    apa-svc-ingestion apa-svc-extract apa-svc-kg apa-svc-rag-retriever apa-svc-coverage \
    apa-svc-firm-connectors apa-svc-forms apa-svc-hmrc apa-svc-normalize-map apa-svc-ocr \
    apa-svc-rag-indexer apa-svc-reason apa-svc-rpa apa-unleash || true
fi

echo "🎉 Dev environment is up"
echo "🔗 Traefik dashboard: http://localhost:8080"
echo "🔐 Authentik: https://auth.${DOMAIN}"
echo "📊 Grafana: https://grafana.${DOMAIN}"
echo "📝 Review UI: https://review.${DOMAIN}"