#!/usr/bin/env bash
# MeterVault in-container updater — installed to /usr/bin/update by metervault-install.sh.
# Pulls the latest source and rebuilds in place: no host round-trip and no re-fetch of the
# community-scripts framework (safer + simpler than re-running the ct script).
#
# Kept as a standalone file rather than a heredoc in the installer so an already-provisioned
# container can bootstrap it straight from its own checkout:
#   git -C /opt/metervault-src fetch --depth 1 origin master
#   git -C /opt/metervault-src reset --hard origin/master
#   install -m 0755 /opt/metervault-src/deploy/install/metervault-update.sh /usr/bin/update
set -euo pipefail

: "${SOURCE_DIR:=/opt/metervault-src}"
: "${INSTALL_DIR:=/opt/metervault}"
: "${METERVAULT_BRANCH:=master}"

# SAFETY GUARD — this must run INSIDE the MeterVault LXC, never on the Proxmox host.
if ! systemd-detect-virt --container --quiet 2>/dev/null; then
  echo "Run 'update' inside the MeterVault LXC, not on the Proxmox host." >&2
  exit 1
fi

if [[ ! -d "${SOURCE_DIR}/.git" ]]; then
  echo "No source checkout at ${SOURCE_DIR} — cannot rebuild. Reinstall to restore it." >&2
  exit 1
fi

export DOTNET_CLI_TELEMETRY_OPTOUT=1 DOTNET_NOLOGO=1

echo "Stopping metervault…"
systemctl stop metervault || true

echo "Pulling latest source…"
git -C "${SOURCE_DIR}" fetch --depth 1 origin "${METERVAULT_BRANCH}"
git -C "${SOURCE_DIR}" reset --hard "origin/${METERVAULT_BRANCH}"

echo "Rebuilding (dotnet publish — this can take a few minutes)…"
dotnet publish "${SOURCE_DIR}/src/App/MeterVault.App.csproj" -c Release -o "${INSTALL_DIR}" /p:UseAppHost=false

echo "Starting metervault…"
systemctl start metervault

# Refresh this script from the checkout we just pulled, so a change to the updater itself lands
# without stranding the container again. Atomic rename, never an in-place write: bash reads the
# running script lazily, so truncating it mid-run would corrupt the remainder of this execution.
self="${SOURCE_DIR}/deploy/install/metervault-update.sh"
if [[ -f "${self}" ]] && ! cmp -s "${self}" /usr/bin/update; then
  install -m 0755 "${self}" /usr/bin/.update.new && mv /usr/bin/.update.new /usr/bin/update
  echo "Updater itself refreshed — the new version applies from the next run."
fi

echo "MeterVault updated."