#!/usr/bin/env bash
set -euo pipefail

ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
cd "$ROOT_DIR"
ARTIFACT_ROOT="${RELEASE_GATE_ARTIFACT_DIR:-${ROOT_DIR}/artifacts/release-gate/$(date +%Y%m%d-%H%M%S)}"
MODE="${1:-all}"
CURRENT_STAGE=""

usage() {
  cat <<USAGE
Usage: bash scripts/qa/run-release-gate.sh <verify-candidate|all|static|smoke-local|full-local|project-wide|deploy|ci-release|r66-trialrun|help>

说明：
  verify-candidate 仅 static + 完整受管 full-local，生成共享回执；绝不部署
  static       运行部署契约、server Prisma 校验、client typecheck/build
  smoke-local  运行本地网页 smoke 门禁
  full-local   运行本地全量门禁（server regression + client full E2E）
  project-wide 项目级门禁：static + 覆盖扫描 + UI/移动契约 + 迁移漂移诊断 + 业务流 + 全页面视觉 + live readiness
  deploy       只消费显式回执，经生产身份引导器发布；不隐式运行测试
  all          smoke-local -> 单次 verify-candidate（或重验显式回执）-> 生产发布链
  ci-release   单次 verify-candidate（或重验显式回执）-> 生产发布链
  r66-trialrun  R66 小团队试点门禁：static -> server regression-all -> smoke-local

可选环境变量：
  RELEASE_GATE_ARTIFACT_DIR   失败产物输出目录
  RELEASE_GATE_RECEIPT_DIR    显式消费的完整候选回执目录；不自动选择历史回执
  QA_*                        透传给 scripts/qa/run-web-gates.sh
  LIVE_SMOKE_*                透传给 deploy.sh 与 live smoke
  PROJECT_WIDE_SKIP_BUSINESS_FLOW=1  跳过业务流 E2E
  PROJECT_WIDE_SKIP_VISUAL=1         跳过项目级视觉 E2E
  PROJECT_WIDE_SKIP_REASON / PROJECT_WIDE_SKIP_OPERATOR / PROJECT_WIDE_SKIP_APPROVAL_REF
                             skip 仅限有批准记录的 project-wide 诊断，PARTIAL/退出2
  DEPLOY_SERVER / REMOTE_DIR / REMOTE_ENV_FILE / SYNC_ENV
  COMPOSE_PROJECT_NAME / POSTGRES_DATA_DIR / STORAGE_HOST_DIR / DEPLOY_DATA_MODE
USAGE
}

collect_failure_artifacts() {
  local stage_name="${CURRENT_STAGE:-unknown}"
  local target_dir="${ARTIFACT_ROOT}/${stage_name}"
  mkdir -p "$target_dir"
  bash "$ROOT_DIR/scripts/qa/collect-failure-artifacts.sh" "$target_dir" >/dev/null 2>&1 || true
  echo "[release-gate] 已收集失败产物：$target_dir" >&2
}

handle_error() {
  local exit_code="$?"
  echo "[release-gate][FAIL] 阶段 ${CURRENT_STAGE:-unknown} 失败（exit=${exit_code}）" >&2
  # Rejected publication must not trigger diagnostic reads of real configuration.
  case "$MODE" in
    ci-release|all|deploy) ;;
    *) collect_failure_artifacts ;;
  esac
  exit "$exit_code"
}
trap handle_error ERR

run_stage() {
  local stage_name="$1"
  shift
  CURRENT_STAGE="$stage_name"
  echo ">>> [release-gate] ${stage_name}"
  if [[ "$MODE" == "verify-candidate" ]]; then
    node "$ROOT_DIR/scripts/qa/release-gate-result.mjs" stage-start "$ARTIFACT_ROOT" "$stage_name"
  fi
  "$@"
  if [[ "$MODE" == "verify-candidate" ]]; then
    node "$ROOT_DIR/scripts/qa/release-gate-result.mjs" stage-end "$ARTIFACT_ROOT" "$stage_name" 0
  fi
}

stage_static() {
  node "$ROOT_DIR/deploy/trialrun/validate-env-contract.js"
  (
    cd "$ROOT_DIR/server"
    npm test -- tests/unit/scripts/deployment-db-lifecycle.test.js tests/unit/scripts/deploy-init.test.js
    npm run prisma:validate
  )
  (
    cd "$ROOT_DIR/client"
    npm run typecheck
    npm run build
  )
}

stage_smoke_local() {
  bash "$ROOT_DIR/scripts/qa/run-web-gates.sh" smoke-local
}

stage_full_local() {
  bash "$ROOT_DIR/scripts/qa/run-web-gates.sh" full-local
}

stage_server_regression_all() {
  (
    cd "$ROOT_DIR/server"
    ./scripts/regression-all.sh
  )
}

stage_project_wide_static() {
  local issue_csv="$ROOT_DIR/issues/2026-05-08_23-38-37-project-wide-qa-second-pass.csv"
  python3 /home/shunli/.codex/skills/plan/scripts/validate_issues_csv.py "$issue_csv"
  node "$ROOT_DIR/scripts/qa/check-ui-design-rules.mjs" --strict
  node "$ROOT_DIR/scripts/qa/check-error-reason-contract.mjs" --strict
  node "$ROOT_DIR/scripts/qa/check-error-reason-contract.mjs" --self-test
  node "$ROOT_DIR/scripts/qa/check-mobile-route-contract.mjs"
  node "$ROOT_DIR/scripts/qa/check-flow-coverage.mjs" --json > "$ARTIFACT_ROOT/flow-coverage.json"
  node "$ROOT_DIR/scripts/qa/check-flow-coverage.mjs" --markdown "$ARTIFACT_ROOT/flow-coverage.md"
  node "$ROOT_DIR/scripts/qa/check-live-smoke-env.mjs" --json > "$ARTIFACT_ROOT/live-smoke-env.json"
  bash "$ROOT_DIR/scripts/qa/check-local-migration-drift.sh"
}

stage_project_wide_business_flow() {
  if [[ "${PROJECT_WIDE_SKIP_BUSINESS_FLOW:-0}" == "1" ]]; then
    echo "[release-gate] 跳过业务流 E2E（PROJECT_WIDE_SKIP_BUSINESS_FLOW=1）"
    return 0
  fi

  bash "$ROOT_DIR/scripts/qa/run-business-flow-gates.sh" local
}

stage_project_wide_visual() {
  if [[ "${PROJECT_WIDE_SKIP_VISUAL:-0}" == "1" ]]; then
    echo "[release-gate] 跳过项目级视觉 E2E（PROJECT_WIDE_SKIP_VISUAL=1）"
    return 0
  fi

  bash "$ROOT_DIR/scripts/qa/run-web-gates.sh" project-wide-visual-local
}

stage_project_wide_live_readiness() {
  LIVE_SMOKE_BASE_URL="${LIVE_SMOKE_BASE_URL:-https://oa.hyinda.com}" bash "$ROOT_DIR/scripts/qa/run-live-smoke-readiness.sh"
}

stage_deploy() {
  RELEASE_GATE_EXPECTED_COMMIT="$(node "$ROOT_DIR/scripts/qa/release-gate-result.mjs" require "${RELEASE_GATE_RECEIPT_DIR:-}")"
  export RELEASE_GATE_EXPECTED_COMMIT
  node "$ROOT_DIR/deploy/trialrun/production-identity-bootstrap.mjs"
}

prepare_release_receipt() {
  if [[ -z "${RELEASE_GATE_RECEIPT_DIR+x}" ]]; then
    # This verification-only child cannot call back into the deployment chain.
    RELEASE_GATE_ARTIFACT_DIR="$ARTIFACT_ROOT" bash "$ROOT_DIR/scripts/qa/run-release-gate.sh" verify-candidate
    RELEASE_GATE_RECEIPT_DIR="$ARTIFACT_ROOT"
    export RELEASE_GATE_RECEIPT_DIR
  fi
}

# The verification-only mode records its own original exit and never deploys.
finish_candidate() {
  local original_status=$? receipt_status=0
  trap - EXIT ERR INT TERM
  node "$ROOT_DIR/scripts/qa/release-gate-result.mjs" finish "$ARTIFACT_ROOT" "$original_status" || receipt_status=$?
  if (( original_status )); then exit "$original_status"; fi
  exit "$receipt_status"
}

if [[ "$MODE" != "help" && "$MODE" != "-h" && "$MODE" != "--help" ]]; then
  # Validate before static, remote readiness or deployment side effects.
  trap - ERR
  node "$ROOT_DIR/scripts/qa/release-gate-result.mjs" skip "$ARTIFACT_ROOT" "$MODE"
  case "$MODE" in
    ci-release|all|deploy)
      node "$ROOT_DIR/scripts/qa/release-gate-result.mjs" write-mode
      # Invalid explicit receipts fail before smoke or other side effects.
      if [[ -n "${RELEASE_GATE_RECEIPT_DIR+x}" || "$MODE" == "deploy" ]]; then
        RELEASE_GATE_EXPECTED_COMMIT="$(node "$ROOT_DIR/scripts/qa/release-gate-result.mjs" require "${RELEASE_GATE_RECEIPT_DIR:-}")"
        export RELEASE_GATE_EXPECTED_COMMIT
      fi
      ;;
  esac
  if [[ "$MODE" != "verify-candidate" ]]; then trap handle_error ERR; fi
fi

if [[ "$MODE" != "verify-candidate" ]]; then mkdir -p "$ARTIFACT_ROOT"; fi

case "$MODE" in
  help|-h|--help)
    usage
    ;;
  verify-candidate)
    node "$ROOT_DIR/scripts/qa/release-gate-result.mjs" init "$ARTIFACT_ROOT"
    trap finish_candidate EXIT
    trap 'exit 130' INT
    trap 'exit 143' TERM
    unset QA_ENVIRONMENT_CONTEXT QA_DIAGNOSTIC_REPORT_DIR QA_DIAGNOSTIC_STAGE
    QA_FULL_REPORT_DIR="$(node "$ROOT_DIR/scripts/qa/release-gate-result.mjs" full-path "$ARTIFACT_ROOT")"
    export QA_FULL_REPORT_DIR
    run_stage static stage_static
    run_stage full-local stage_full_local
    exit 0
    ;;
  static)
    run_stage static stage_static
    ;;
  smoke-local)
    run_stage smoke-local stage_smoke_local
    ;;
  full-local)
    run_stage full-local stage_full_local
    ;;
  project-wide)
    run_stage static stage_static
    run_stage project-wide-static stage_project_wide_static
    run_stage project-wide-business-flow stage_project_wide_business_flow
    run_stage project-wide-visual stage_project_wide_visual
    run_stage project-wide-live-readiness stage_project_wide_live_readiness
    ;;
  deploy)
    run_stage deploy stage_deploy
    ;;
  ci-release)
    prepare_release_receipt
    run_stage deploy stage_deploy
    ;;
  r66-trialrun)
    run_stage static stage_static
    run_stage server-regression-all stage_server_regression_all
    run_stage smoke-local stage_smoke_local
    ;;
  all)
    run_stage smoke-local stage_smoke_local
    prepare_release_receipt
    run_stage deploy stage_deploy
    ;;
  *)
    usage >&2
    exit 1
    ;;
esac

if [[ "$MODE" == "project-wide" && ( "${PROJECT_WIDE_SKIP_BUSINESS_FLOW:-0}" == "1" || "${PROJECT_WIDE_SKIP_VISUAL:-0}" == "1" ) ]]; then
  echo "[release-gate][PARTIAL] 诊断跳过不具备发布资格"
  exit 2
fi

echo "[release-gate][PASS] 模式 ${MODE} 通过"
echo "[release-gate] 产物目录：${ARTIFACT_ROOT}"