#!/bin/bash
# scripts/repair-bot/repair-bot-188.sh
# 修復機器人白名單腳本 — 188 主機 (主服務主機)
# 2026-04-05 Claude Code: Sprint 3 Host Auto-Repair
#
# 安全設計:
#   - SSH authorized_keys 的 command= 指向此腳本
#   - Docker Compose 類: docker compose up -d
#   - Systemd 類: sudo systemctl restart
#
# 部署位置: /home/ollama/bin/repair-bot-188.sh (on 192.168.0.188)
# 使用者: ollama

LOG="${HOME}/.repair-bot.log"
log() { echo "[$(date '+%Y-%m-%d %H:%M:%S')] $*" | tee -a "$LOG"; }

# 白名單: component → 修復方式
declare -A COMPOSE_DIRS=(
  ["openclaw"]="/home/ollama/clawbot-v5"
  ["minio"]="/home/ollama/minio"
  ["signoz"]="/home/ollama/signoz/deploy/docker"
)

declare -A SYSTEMD_SERVICES=(
  ["redis"]="redis-server"
  ["nginx"]="nginx"
  ["ollama"]="ollama"
)

CMD="${SSH_ORIGINAL_COMMAND:-}"
log "repair-bot-188 invoked: CMD=$CMD"

if [[ "$CMD" =~ ^repair:([a-z0-9][a-z0-9-]{0,30})$ ]]; then  # M3: 統一 Python 端 regex，禁止底線
  COMPONENT="${BASH_REMATCH[1]}"

  # Docker Compose 類
  DIR="${COMPOSE_DIRS[$COMPONENT]}"
  if [ -n "$DIR" ]; then
    if [ ! -d "$DIR" ]; then
      log "DENIED: directory not found '$DIR'"
      echo "REPAIR_DENIED:dir_not_found:$DIR"
      exit 1
    fi
    log "EXECUTING: cd $DIR && docker compose up -d"
    cd "$DIR" && docker compose up -d 2>&1 | tail -5
    EXIT_CODE=$?
    if [ $EXIT_CODE -eq 0 ]; then
      log "REPAIR_OK: $COMPONENT"
      echo "REPAIR_OK:$COMPONENT"
    else
      log "REPAIR_FAIL: $COMPONENT (exit $EXIT_CODE)"
      echo "REPAIR_FAIL:$COMPONENT:exit_$EXIT_CODE"
      exit 1
    fi
    exit 0
  fi

  # Systemd 類
  SVC="${SYSTEMD_SERVICES[$COMPONENT]}"
  if [ -n "$SVC" ]; then
    log "EXECUTING: sudo systemctl restart $SVC"
    sudo systemctl restart "$SVC" 2>&1
    EXIT_CODE=$?
    if [ $EXIT_CODE -eq 0 ]; then
      log "REPAIR_OK: $COMPONENT"
      echo "REPAIR_OK:$COMPONENT"
    else
      log "REPAIR_FAIL: $COMPONENT (exit $EXIT_CODE)"
      echo "REPAIR_FAIL:$COMPONENT:exit_$EXIT_CODE"
      exit 1
    fi
    exit 0
  fi

  log "DENIED: unknown component '$COMPONENT'"
  echo "REPAIR_DENIED:unknown_component:$COMPONENT"
  exit 1

elif [ "$CMD" = "health" ]; then
  echo "REPAIR_BOT_HEALTHY:188"
else
  log "DENIED: invalid command '$CMD'"
  echo "REPAIR_DENIED:invalid_command"
  exit 1
fi