#!/usr/bin/env bash
set -euo pipefail

repo_root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
cd "${repo_root}"

project_name="${MINEROPS_AGENT_ENROLLMENT_TEST_PROJECT:-minerops-agent-enrollment-test-$$}"
compose=(
    docker compose
    --project-name "${project_name}"
    --env-file .env.dev
    -f compose.dev.yaml
)

cleanup() {
    status=$?
    if (( status != 0 )); then
        "${compose[@]}" logs --no-color --tail 120 postgres || true
    fi
    "${compose[@]}" down --volumes --remove-orphans >/dev/null 2>&1 || true
    exit "${status}"
}
trap cleanup EXIT

[[ -f .env.dev ]] || {
    echo "Missing .env.dev" >&2
    exit 1
}

for source_file in \
    backend/tests/test_agent_enrollment.py \
    backend/tests/test_agent_enrollment_postgres.py \
    backend/tests/test_agent_auth.py
do
    permissions="$(stat -c '%a' "${source_file}")"
    (( (10#${permissions} % 10) & 4 )) || {
        echo "${source_file} is not readable by the non-root test container" >&2
        exit 1
    }
done

"${compose[@]}" up --detach postgres

for attempt in $(seq 1 60); do
    "${compose[@]}" exec -T postgres sh -ec \
        'pg_isready -U "$POSTGRES_USER" -d "$POSTGRES_DB"' \
        >/dev/null 2>&1 && break

    (( attempt < 60 )) || {
        echo "PostgreSQL did not become ready" >&2
        exit 1
    }

    sleep 1
done

"${compose[@]}" build backend

"${compose[@]}" run --rm --no-deps \
    backend alembic upgrade head

"${compose[@]}" run --rm --no-deps \
    -v "${repo_root}/backend/tests:/app/tests:ro" \
    backend python -m unittest -v \
        tests.test_agent_auth \
        tests.test_agent_enrollment \
        tests.test_agent_enrollment_postgres

echo "Secure Agent enrollment focused tests passed."