# 统一部署脚本 - 解决SSH认证冲突
param(
    [string]$Server = "45.249.208.118",
    [string]$User = "root",
    [string]$SshKeyPath = "$env:USERPROFILE\.ssh\id_rsa",
    [string]$Password = "",
    [string]$ProjectPath = "/root/youyidian-3d",
    [switch]$UsePassword = $false,
    [switch]$NoCache = $false,
    [ValidateSet("ssh-key", "password", "auto")]
    [string]$AuthMethod = "auto"
)

$ErrorActionPreference = "Stop"

Write-Host "========================================" -ForegroundColor Cyan
Write-Host "  统一部署脚本 - 解决SSH冲突" -ForegroundColor Cyan
Write-Host "========================================" -ForegroundColor Cyan
Write-Host ""

# 检查工具
$plinkPath = "C:\Program Files\PuTTY\plink.exe"
$pscpPath = "C:\Program Files\PuTTY\pscp.exe"

$toolsFound = $true
if (-not (Test-Path $plinkPath)) {
    Write-Host "警告: 未找到 plink.exe" -ForegroundColor Yellow
    $toolsFound = $false
}
if (-not (Test-Path $pscpPath)) {
    Write-Host "警告: 未找到 pscp.exe" -ForegroundColor Yellow
    $toolsFound = $false
}

if (-not $toolsFound) {
    Write-Host "请安装 PuTTY 工具包" -ForegroundColor Red
    Write-Host "下载地址: https://www.putty.org/" -ForegroundColor Red
    exit 1
}

# 自动选择认证方式
$useSshKey = $false
$usePassword = $false

switch ($AuthMethod) {
    "ssh-key" { 
        $useSshKey = $true
        Write-Host "强制使用SSH密钥认证" -ForegroundColor Yellow
    }
    "password" { 
        $usePassword = $true
        Write-Host "强制使用密码认证" -ForegroundColor Yellow
    }
    "auto" {
        # 自动检测最佳认证方式
        if ((-not [string]::IsNullOrEmpty($SshKeyPath)) -and (Test-Path $SshKeyPath)) {
            $useSshKey = $true
            Write-Host "检测到SSH密钥文件，使用密钥认证" -ForegroundColor Green
        } elseif ($UsePassword -or (-not [string]::IsNullOrEmpty($Password))) {
            $usePassword = $true
            Write-Host "使用密码认证" -ForegroundColor Green
        } else {
            Write-Host "错误: 未找到SSH密钥且未提供密码" -ForegroundColor Red
            Write-Host "请使用 -SshKeyPath 指定密钥文件路径" -ForegroundColor Yellow
            Write-Host "或使用 -Password 提供密码" -ForegroundColor Yellow
            Write-Host "或使用 -UsePassword 参数启用密码认证" -ForegroundColor Yellow
            exit 1
        }
    }
}

# 验证SSH密钥
if ($useSshKey) {
    if (-not (Test-Path $SshKeyPath)) {
        Write-Host "错误: SSH密钥文件不存在: $SshKeyPath" -ForegroundColor Red
        Write-Host ""
        Write-Host "创建SSH密钥的步骤：" -ForegroundColor Yellow
        Write-Host "1. 在PowerShell中运行: ssh-keygen -t rsa -b 4096 -C 'deploy@youyidian'" -ForegroundColor Gray
        Write-Host "2. 将生成的公钥复制到服务器: ssh-copy-id -i ~/.ssh/id_rsa.pub ${User}@${Server}" -ForegroundColor Gray
        Write-Host "3. 或手动复制公钥内容到服务器的 ~/.ssh/authorized_keys" -ForegroundColor Gray
        exit 1
    }
    Write-Host "使用SSH密钥: $SshKeyPath" -ForegroundColor Green
}

# 验证密码
if ($usePassword -and [string]::IsNullOrEmpty($Password)) {
    Write-Host "错误: 使用密码认证需要提供 -Password 参数" -ForegroundColor Red
    exit 1
}

Write-Host "服务器: $Server" -ForegroundColor Green
Write-Host "用户: $User" -ForegroundColor Green
Write-Host "目标路径: $ProjectPath" -ForegroundColor Green
Write-Host ""

# 需要上传的关键文件列表（完整列表）
$filesToUpload = @(
    # 核心配置文件
    "package.json",
    "package-lock.json", 
    "next.config.js",
    ".env",
    "prisma/schema.prisma",
    "Dockerfile",
    "docker-compose.yml",
    
    # 应用核心文件
    "app/layout.tsx",
    "app/page.tsx",
    "app/login/page.tsx",
    "app/register/page.tsx",
    "app/api/auth/register/route.ts",
    "app/api/auth/login/route.ts",
    "app/api/auth/logout/route.ts",
    "app/api/user/me/route.ts",
    "app/api/admin/users/route.ts",
    "app/api/admin/dashboard/route.ts",
    
    # 库文件
    "lib/prisma.ts",
    "lib/auth.ts",
    "lib/config.ts",
    "lib/configLoader.ts",
    "lib/utils.ts",
    "middleware.ts",
    
    # 组件和样式
    "components/ui",
    "components/auth",
    "components/admin",
    "public",
    "styles",
    
    # 其他重要文件
    "README.md",
    "tsconfig.json",
    "tailwind.config.ts"
)

Write-Host "[1/6] 检查文件完整性..." -ForegroundColor Yellow

$missingFiles = @()
foreach ($file in $filesToUpload) {
    if (-not (Test-Path $file)) {
        $missingFiles += $file
    }
}

if ($missingFiles.Count -gt 0) {
    Write-Host "以下文件不存在，将跳过:" -ForegroundColor Yellow
    $missingFiles | ForEach-Object { Write-Host "  - $_" -ForegroundColor Yellow }
    Write-Host ""
}

# 测试SSH连接
Write-Host "[2/6] 测试SSH连接..." -ForegroundColor Yellow

$testCmd = "echo 'SSH连接测试成功'"
if ($useSshKey) {
    & $plinkPath -ssh -i $SshKeyPath -batch "${User}@${Server}" $testCmd | Out-Null
} else {
    if ([string]::IsNullOrEmpty($Password)) {
        Write-Host "请输入服务器密码:" -ForegroundColor Yellow -NoNewline
        $securePwd = Read-Host -AsSecureString
        $passwordPtr = [Runtime.InteropServices.Marshal]::SecureStringToBSTR($securePwd)
        $Password = [Runtime.InteropServices.Marshal]::PtrToStringAuto($passwordPtr)
    }
    & $plinkPath -ssh "${User}@${Server}" $testCmd | Out-Null
}

if ($LASTEXITCODE -ne 0) {
    Write-Host "SSH连接测试失败" -ForegroundColor Red
    exit 1
}
Write-Host "  ✓ SSH连接正常" -ForegroundColor Green

# 确保远程目录存在
Write-Host "[3/6] 准备远程目录..." -ForegroundColor Yellow

$ensureDirCmd = "mkdir -p '$ProjectPath'"
if ($useSshKey) {
    & $plinkPath -ssh -i $SshKeyPath -batch "${User}@${Server}" $ensureDirCmd | Out-Null
} else {
    & $plinkPath -ssh -pw $Password "${User}@${Server}" $ensureDirCmd | Out-Null
}

if ($LASTEXITCODE -ne 0) {
    Write-Host "创建远程目录失败" -ForegroundColor Red
    exit 1
}

# 上传文件
Write-Host "[4/6] 上传文件到服务器..." -ForegroundColor Yellow

$uploadedCount = 0
$totalFiles = ($filesToUpload | Where-Object { Test-Path $_ }).Count

foreach ($file in $filesToUpload) {
    if (Test-Path $file) {
        $remotePath = "$ProjectPath/$file"
        $remoteDir = Split-Path $remotePath -Parent
        
        # 确保远程目录存在
        $mkdirCmd = "mkdir -p '$remoteDir'"
        if ($useSshKey) {
            & $plinkPath -ssh -i $SshKeyPath -batch "${User}@${Server}" $mkdirCmd | Out-Null
        } else {
            & $plinkPath -ssh -pw $Password "${User}@${Server}" $mkdirCmd | Out-Null
        }
        
        # 上传文件
        $uploadParams = @("-q")
        if ($useSshKey) {
            $uploadParams += "-i", $SshKeyPath, "-batch"
        } else {
            $uploadParams += "-pw", $Password
        }
        $uploadParams += $file, "${User}@${Server}:$remotePath"
        
        & $pscpPath @uploadParams 2>&1 | Out-Null
        
        if ($LASTEXITCODE -eq 0) {
            $uploadedCount++
            Write-Host "  ✓ $file" -ForegroundColor Green
        } else {
            Write-Host "  ✗ $file (上传失败)" -ForegroundColor Red
        }
    }
}

Write-Host "文件上传完成: $uploadedCount/$totalFiles 个文件" -ForegroundColor $(if ($uploadedCount -eq $totalFiles) { "Green" } else { "Yellow" })

if ($uploadedCount -lt $totalFiles) {
    Write-Host "警告: 部分文件上传失败，可能影响部署" -ForegroundColor Yellow
}

# 创建部署脚本
Write-Host "[5/6] 创建并执行远程部署脚本..." -ForegroundColor Yellow

$buildFlag = if ($NoCache) { "--no-cache" } else { "" }
$timestamp = Get-Date -Format "yyyyMMdd-HHmmss"

# 创建本地临时脚本
$localDeployScript = Join-Path $env:TEMP "deploy-unified-$timestamp.sh"
$utf8NoBom = New-Object System.Text.UTF8Encoding $false

# 远程部署脚本内容
$deployScript = @"
#!/bin/bash
set -e

echo "========================================"
echo "开始部署应用..."
echo "开始时间: $(date)"
echo "========================================"

cd $ProjectPath

# 备份重要数据
echo "[1/7] 备份数据..."
if [ -d "uploads" ] && [ -n "$(ls -A uploads 2>/dev/null)" ]; then
    mkdir -p backups
    backup_dir="backups/uploads-$(date +%Y%m%d-%H%M%S)"
    cp -r uploads "`$backup_dir"
    echo "  ✓ 上传目录已备份到 `$(basename `$backup_dir)"
fi

# 检查Docker环境
echo "[2/7] 检查Docker环境..."
if ! command -v docker &> /dev/null; then
    echo "错误: Docker 未安装" >&2
    exit 1
fi

if docker compose version &> /dev/null; then
    DOCKER_COMPOSE="docker compose"
elif command -v docker-compose &> /dev/null; then
    DOCKER_COMPOSE="docker-compose"
else
    echo "错误: Docker Compose 未安装" >&2
    exit 1
fi

echo "  ✓ 使用Docker Compose: `$DOCKER_COMPOSE"

# 停止旧容器
echo "[3/7] 停止旧容器..."
`$DOCKER_COMPOSE down --timeout 30 2>/dev/null || true
echo "  ✓ 旧容器已停止"

# 构建并启动应用
echo "[4/7] 构建并启动应用..."
if [ -n "$buildFlag" ]; then
    echo "  ⚠ 使用 --no-cache 模式重新构建"
    `$DOCKER_COMPOSE build $buildFlag app
fi

echo "  ✓ 启动应用容器..."
`$DOCKER_COMPOSE up -d app

if [ `$? -ne 0 ]; then
    echo "错误: 容器启动失败" >&2
    exit 1
fi

# 等待容器就绪
echo "[5/7] 等待容器就绪..."
for i in {1..30}; do
    if `$DOCKER_COMPOSE ps app | grep -q "Up"; then
        echo "  ✓ 容器运行正常"
        break
    fi
    if [ $i -eq 30 ]; then
        echo "错误: 容器启动超时" >&2
        exit 1
    fi
    sleep 2
done

# 数据库迁移
echo "[6/7] 检查数据库状态..."
if [ -f prisma/schema.prisma ]; then
    echo "  → 执行数据库迁移..."
    `$DOCKER_COMPOSE exec -T app npx prisma db push --accept-data-loss --schema=/app/prisma/schema.prisma 2>/dev/null || {
        echo "  ⚠ 数据库迁移跳过或已存在"
    }
fi

# 健康检查
echo "[7/7] 执行健康检查..."
sleep 5
max_attempts=10
attempt=0
while [ `$attempt -lt `$max_attempts ]; do
    if curl -f -s http://localhost:3000/api/health > /dev/null 2>&1; then
        echo "  ✓ 应用健康检查通过"
        break
    fi
    attempt=`$((attempt + 1))
    if [ $attempt -eq $max_attempts ]; then
        echo "  ⚠ 健康检查超时，应用可能需要更多时间启动"
    fi
    sleep 3
done

# 显示部署结果
echo ""
echo "========================================"
echo "部署完成！"
echo "完成时间: $(date)"
echo "========================================"
echo ""
echo "容器状态:"
`$DOCKER_COMPOSE ps
echo ""
echo "最近日志:"
`$DOCKER_COMPOSE logs app --tail=10

# 显示应用访问信息
echo ""
echo "应用访问信息:"
echo "  本地访问: http://localhost:3000"
echo "  外网访问: http://$Server:4320"
echo ""

"@

[System.IO.File]::WriteAllText($localDeployScript, $deployScript, $utf8NoBom)

# 上传并执行部署脚本
$remoteDeployScript = "/tmp/deploy-unified-$timestamp.sh"

$uploadParams = @("-q")
if ($useSshKey) {
    $uploadParams += "-i", $SshKeyPath, "-batch"
} else {
    $uploadParams += "-pw", $Password
}
$uploadParams += $localDeployScript, "${User}@${Server}:$remoteDeployScript"

Write-Host "  → 上传部署脚本..." -ForegroundColor Yellow
& $pscpPath @uploadParams
if ($LASTEXITCODE -ne 0) {
    Write-Host "上传部署脚本失败" -ForegroundColor Red
    Remove-Item $localDeployScript -Force -ErrorAction SilentlyContinue
    exit 1
}

Write-Host "  → 执行远程部署..." -ForegroundColor Yellow
if ($useSshKey) {
    & $plinkPath -ssh -i $SshKeyPath -batch "${User}@${Server}" "chmod +x $remoteDeployScript && bash $remoteDeployScript && rm -f $remoteDeployScript"
} else {
    & $plinkPath -ssh -pw $Password "${User}@${Server}" "chmod +x $remoteDeployScript && bash $remoteDeployScript && rm -f $remoteDeployScript"
}

$deployExitCode = $LASTEXITCODE

# 清理临时文件
Remove-Item $localDeployScript -Force -ErrorAction SilentlyContinue

# 显示部署结果
Write-Host "[6/6] 部署结果..." -ForegroundColor Yellow

if ($deployExitCode -eq 0) {
    Write-Host ""
    Write-Host "========================================" -ForegroundColor Green
    Write-Host "  部署成功完成！" -ForegroundColor Green
    Write-Host "========================================" -ForegroundColor Green
    Write-Host ""
    Write-Host "🎉 应用已成功部署到服务器" -ForegroundColor Green
    Write-Host ""
    Write-Host "📍 访问地址:" -ForegroundColor Cyan
    Write-Host "  本地: http://localhost:3000" -ForegroundColor White
    Write-Host "  外网: http://$Server:4320" -ForegroundColor White
    Write-Host ""
    Write-Host "🔧 使用方法:" -ForegroundColor Yellow
    if ($useSshKey) {
        Write-Host "  - 使用SSH密钥认证 (推荐)" -ForegroundColor Green
    } else {
        Write-Host "  - 使用密码认证" -ForegroundColor Yellow
        Write-Host "  建议配置SSH密钥以提高安全性" -ForegroundColor Gray
    }
    Write-Host ""
} else {
    Write-Host ""
    Write-Host "========================================" -ForegroundColor Red
    Write-Host "  部署失败！" -ForegroundColor Red
    Write-Host "  退出码: $deployExitCode" -ForegroundColor Red
    Write-Host "========================================" -ForegroundColor Red
    Write-Host ""
    Write-Host "🔧 可能的解决方案:" -ForegroundColor Yellow
    Write-Host "  1. 检查网络连接" -ForegroundColor White
    Write-Host "  2. 验证服务器凭证" -ForegroundColor White
    Write-Host "  3. 查看服务器日志: docker-compose logs app" -ForegroundColor White
    Write-Host "  4. 重新运行脚本: .\$($MyInvocation.MyCommand.Name) -AuthMethod auto" -ForegroundColor White
    Write-Host ""
}

Write-Host "💡 提示:" -ForegroundColor Cyan
Write-Host "  - 使用 -NoCache 参数强制重新构建" -ForegroundColor Gray
Write-Host "  - 使用 -AuthMethod ssh-key 强制使用密钥认证" -ForegroundColor Gray
Write-Host "  - 使用 -AuthMethod password 强制使用密码认证" -ForegroundColor Gray
Write-Host "  - 使用 -SshKeyPath 指定自定义密钥路径" -ForegroundColor Gray
Write-Host ""