# ============================================================
#  Build + package the 2025 Rec Room server (E12354 base, retargeted at
#  gameauth.ddns.net + our Photon IDs) into campus-deploy.tar.gz.
#
#  This is the SUCCESSOR to Campus2025Server\PackageServer.ps1 (which
#  built the 2023 server). Uses the same tarball name so the existing
#  DeployCampusServer.bat / GoLive.bat upload pipeline works unchanged;
#  just point them at this folder.
# ============================================================
$ErrorActionPreference = "Stop"
Set-Location $PSScriptRoot

$src = "Server\2025-RecRoom-Server-E12354-main"        # C# project folder inside this repo
$csproj = "$src\CampusServer.csproj"
$out = Join-Path $env:TEMP "campus-deploy-2025"
$pkg = "campus-deploy.tar.gz"

Write-Host ""
Write-Host "  ==========================================="
Write-Host "    Campus 2025 (E12354 base) - build + package"
Write-Host "  ==========================================="
Write-Host ""

if (-not (Test-Path $csproj)) { Write-Host "  [X] $csproj not found."; pause; exit 1 }

# Unique stamp for this package so DeployCampusServer.bat can confirm the VPS is
# actually running THIS package (not some stale prior build).
$tag     = -join ((1..6) | ForEach-Object { "0123456789abcdef"[(Get-Random -Max 16)] })
$buildId = "{0} #{1}" -f (Get-Date -Format "yyyy-MM-dd HH:mm:ss"), $tag

Write-Host "  [1/4] Publishing (linux-x64, self-contained) ..."
if (Test-Path $out) { Remove-Item $out -Recurse -Force }
dotnet publish $csproj -c Release -r linux-x64 --self-contained true -o $out -v quiet -clp:ErrorsOnly
if ($LASTEXITCODE -ne 0) { Write-Host "  [X] Build failed - see errors above."; pause; exit 1 }

Write-Host "  [2/4] Adding data + web + build stamp ..."
# The 2025 server reads Data / Web from ContentRoot (Environment.CurrentDirectory on
# the VPS = /opt/campus). Publish doesn't automatically copy either, so we do it here.
# "Website" is the public site Kestrel now serves at the domain root (it replaced the
# separate Flask process in Website/server.py). Without it in the tarball the landing
# page 404s on the VPS even though it works locally.
foreach ($d in @("Data", "Web", "AdminPanel", "Website")) {
    if (Test-Path "$src\$d") {
        # Data goes via robocopy so the avatar-pack dumps (Data\CDN\AvatarBlobs\<n>\ - tens of GB,
        # uploaded to the VPS separately and imported there) and any archives never enter the
        # tarball. Only the flat .assetbundle files in AvatarBlobs are served.
        if ($d -eq "Data") {
            $xd = @(); Get-ChildItem "$src\Data\CDN\AvatarBlobs" -Directory -ErrorAction SilentlyContinue | ForEach-Object { $xd += $_.FullName }
            $xd += "$src\Data\AvatarImportStaging"
            # Runtime-only state that must never be shipped over the live copy: the request log
            # (it would replace the VPS log with the dev box's) and the upload-guard quarantine.
            $xd += "$src\Data\Quarantine"
            $rc = & robocopy "$src\Data" "$out\Data" /E /XD @xd /XF *.zip *.7z *.rar APILog.txt /NFL /NDL /NJH /NJS /NP
            if ($LASTEXITCODE -ge 8) { throw "robocopy Data failed ($LASTEXITCODE)" }
            $n = (Get-ChildItem "$out\Data" -Recurse -File -ErrorAction SilentlyContinue).Count
            Write-Host ("        + Data ({0} files, packs excluded)" -f $n)
            continue
        }
        Copy-Item "$src\$d" "$out\" -Recurse -Force
        $n = (Get-ChildItem "$src\$d" -Recurse -File -ErrorAction SilentlyContinue).Count
        Write-Host ("        + $d ({0} files)" -f $n)
    }
}

# Cache-bust the website's own scripts/styles with THIS build's tag. The HTML referenced
# app.js?v=<hand-typed date> and Kestrel serves static files with max-age=3600, so after a
# deploy every browser kept running the previous app.js for up to an hour (or until the
# hand-typed tag was remembered and bumped). Now every packaged HTML page points at
# app.js?v=<build tag>, which changes on every package, so the new site is live on the
# next page load with no hard refresh.
$siteOut = Join-Path $out "Website"
if (Test-Path $siteOut) {
    $bumped = 0
    Get-ChildItem $siteOut -Filter *.html -Recurse | ForEach-Object {
        $html = [IO.File]::ReadAllText($_.FullName)
        $new = [regex]::Replace($html, '((?:app|data)\.js|style\.css)\?v=[A-Za-z0-9._-]+', ('$1?v=' + $tag))
        if ($new -ne $html) { [IO.File]::WriteAllText($_.FullName, $new, [Text.UTF8Encoding]::new($false)); $bumped++ }
    }
    Write-Host ("        + cache-busted app.js/data.js/style.css in {0} page(s) (v={1})" -f $bumped, $tag)
}

# Tachyon voice server SOURCE (C++23). It lives next to Server\ / Website\ in this repo
# (tachyon-server-master\tachyon-server-master, double-nested from the zip). It can't be
# cross-built from Windows, so the SOURCE ships in the tarball under tachyon/ and install.sh
# builds it on the VPS - guarded and non-fatal, so a Tachyon problem never blocks the campus
# server. Skip build/ (local output) and the empty submodule checkout; install.sh re-clones it.
$tachyonSrc = "tachyon-server-master\tachyon-server-master"
if (Test-Path "$tachyonSrc\CMakeLists.txt") {
    $tdst = "$out\tachyon"
    New-Item -ItemType Directory -Force -Path $tdst | Out-Null
    Get-ChildItem $tachyonSrc -Force | Where-Object { $_.Name -notin @('build', '.git', '.gitignore') } | ForEach-Object {
        Copy-Item $_.FullName $tdst -Recurse -Force
    }
    $tn = (Get-ChildItem $tdst -Recurse -File -ErrorAction SilentlyContinue).Count
    Write-Host ("        + tachyon ({0} files)" -f $tn)
}
else {
    Write-Host "        [!] tachyon source not found at $tachyonSrc - voice server NOT bundled"
}
# Build stamp - written verbatim, no trailing newline; the installer compares this
# byte-for-byte against LastBuild.txt to prove the deploy landed.
[IO.File]::WriteAllText("$out\Data\BUILD.txt", $buildId)
[IO.File]::WriteAllText("LastBuild.txt", $buildId)

Write-Host "  [3/4] Writing installer ..."
# MUST be LF-only. A CRLF shebang makes bash fail with "bad interpreter".
$install = @'
#!/usr/bin/env bash
set -e
APP=/opt/campus
UNIT=/etc/systemd/system/campus.service
BIN_NAME=CampusServer

echo ""
# One deploy at a time. Two overlapping deploys (a second DeployCampusServer.bat started while
# the first was still in its Tachyon build step) replaced /opt/campus/*.dll under a RUNNING
# server: .NET memory-maps its DLLs, so the process died with SIGBUS / BadImageFormatException
# ("The format of the file '/opt/campus/CampusServer.dll' is invalid") - four times on
# 2026-09-11, each within seconds of an SSH login. Every such crash drops every player at once.
LOCK=/run/campus-deploy.lock
exec 9>"$LOCK"
if ! flock -n 9; then
    echo "  [X] another deploy is still running (lock $LOCK). Wait for it to finish, then re-run."
    exit 1
fi

echo "  [1/6] stopping the server ..."
systemctl stop campus 2>/dev/null || true
# stop is synchronous, but be certain nothing is still mapping the old binaries before they
# are overwritten: wait for the unit to be fully inactive and the process to be gone.
for i in $(seq 1 30); do
    if ! systemctl is-active --quiet campus && ! pgrep -x "$BIN_NAME" >/dev/null 2>&1; then break; fi
    sleep 1
done
if pgrep -x "$BIN_NAME" >/dev/null 2>&1; then
    echo "  [X] $BIN_NAME is still running after 30s - refusing to overwrite its files."
    exit 1
fi

echo "  [2/6] copying files ..."
mkdir -p "$APP"

# Preserve live DBs across deploys — burner accounts, dorm state, heartbeats etc.
# live in Data/DBs/*.db and would otherwise be clobbered by the tarball's seed copies.
DB_BACKUP=$(mktemp -d /tmp/campus-dbs-XXXXXX)
if [ -d "$APP/Data/DBs" ] && [ "$(ls -A "$APP/Data/DBs" 2>/dev/null)" ]; then
    echo "        preserving existing $APP/Data/DBs -> $DB_BACKUP"
    cp -a "$APP/Data/DBs/." "$DB_BACKUP/"
    HAVE_LIVE_DBS=1
else
    HAVE_LIVE_DBS=0
fi

cp -r ./* "$APP"/
chmod +x "$APP/$BIN_NAME" 2>/dev/null || true

if [ "$HAVE_LIVE_DBS" = "1" ]; then
    mkdir -p "$APP/Data/DBs"
    cp -a "$DB_BACKUP/." "$APP/Data/DBs/"
    echo "        restored live DBs (kept burner accounts, etc.)"
fi
rm -rf "$DB_BACKUP"

echo "  [3/6] writing / refreshing systemd unit ..."
# Same unit name (campus.service) as the 2023 server so nothing else on the VPS
# needs to change - Caddy, journalctl -u campus, our watch script all keep working.
# ExecStart points at the 2025 binary (CampusServer, forced via AssemblyName in the csproj).
cat > "$UNIT" <<UNITEOF
[Unit]
Description=Campus 2025 (E12354 base) Rec Room server
After=network.target

[Service]
Type=simple
WorkingDirectory=$APP
# Kestrel binds inside the container. Caddy on the same box handles TLS + proxies
# https://gameauth.ddns.net/* to localhost:8080, so only HTTP-on-8080 is needed.
Environment=ASPNETCORE_URLS=http://0.0.0.0:8080
# Workstation GC (matches <ServerGarbageCollector>false</ServerGarbageCollector> in the csproj;
# this env var would otherwise override it). Server GC reserved a per-core heap and held ~1.3 GB
# resident for a few dozen players on a 4-core box.
Environment=DOTNET_gcServer=0
ExecStart=$APP/$BIN_NAME
Restart=always
RestartSec=3
StandardOutput=journal
StandardError=journal

[Install]
WantedBy=multi-user.target
UNITEOF
systemctl daemon-reload

echo "  [4/6] starting the server ..."
systemctl enable campus >/dev/null 2>&1 || true
systemctl start campus
sleep 3

echo "  [5/6] status ..."
systemctl is-active campus || true

echo "  [6/6] smoke test - GET / ..."
# The 2025 server routes "/" to the NS response (WebController.NsRoot). If the
# server is up and answering right, this prints 200. On any other code it dumps
# the tail of the journal so the operator can see WHY it's not answering.
code=$(curl -s -o /dev/null -w "%{http_code}" --max-time 5 http://127.0.0.1:8080/ || echo 000)
echo "        GET http://127.0.0.1:8080/  ->  HTTP $code"

# Same URL, but asking as a browser would: this must come back as the website, not the
# NS JSON. Catches a missing Website/ folder, which is otherwise invisible until someone
# opens the domain in a browser and gets the NameServer blob.
site=$(curl -s --max-time 5 -H 'Accept: text/html' http://127.0.0.1:8080/ || true)
if echo "$site" | grep -qi '<html'; then
    echo "        GET / (Accept: text/html)  ->  website OK"
else
    echo "  [!] / with Accept: text/html did NOT return the website - is Website/ in the tarball?"
fi

if [ "$code" != "200" ]; then
    echo ""
    echo "  [!] Non-200 - last 20 lines of journal:"
    journalctl -u campus --no-pager -n 20 || true
fi

# ---- Tachyon voice server (optional, NON-FATAL) --------------------------------------------
# The campus server is already up above. This builds + runs the bundled Tachyon voice server
# IF the C++ toolchain is present; ANY failure here only warns and the deploy still succeeds.
# Voice stays on Photon until ConfigCampus.TachyonVoiceEndpoint is set, so this being down
# changes nothing about the game until you flip that on.
TACHYON="$APP/tachyon"
# The address the CLIENT dials for voice (UDP). Must be reachable from the internet AND a raw
# IP:port - the client's LiteNetLib voice connector does not resolve hostnames (every address in
# Tachyon's own examples is an IP), so a DDNS hostname here means the client never dials it.
# Written into a campus systemd drop-in below ONLY if Tachyon comes up, so the game is pointed at
# Tachyon only when it's actually running.
TACHYON_PUBLIC="50.114.179.17:7777"
if [ -d "$TACHYON" ]; then
  echo ""
  echo "  [tachyon] setting up voice server (non-fatal) ..."
  (
    set -e
    cd "$TACHYON"

    # Deps (Debian/Ubuntu). build-essential is REQUIRED - it brings gcc, g++ AND make; installing
    # g++ alone leaves cmake unable to find "make" (CMAKE_MAKE_PROGRAM not set), which is exactly
    # what failed the first deploy. Errors are shown, not swallowed, so a broken apt is visible.
    if command -v apt-get >/dev/null 2>&1; then
      echo "        installing build deps (build-essential, cmake, curl/ssl dev) ..."
      DEBIAN_FRONTEND=noninteractive apt-get update -y || echo "        [tachyon] apt-get update failed - continuing"
      DEBIAN_FRONTEND=noninteractive apt-get install -y \
        build-essential cmake git pkg-config libcurl4-openssl-dev libssl-dev \
        || echo "        [tachyon] apt-get install failed - toolchain may be incomplete"
    fi

    # Preflight: without a compiler AND make, cmake can't build. Skip with a clear, actionable
    # message rather than dumping raw CMake errors into the deploy log.
    if ! command -v cmake >/dev/null 2>&1 || ! command -v make >/dev/null 2>&1 \
         || ! { command -v g++ >/dev/null 2>&1 || command -v c++ >/dev/null 2>&1; }; then
      echo "  [tachyon] build toolchain missing (need cmake + make + g++). Install with:"
      echo "             apt-get install -y build-essential cmake git pkg-config libcurl4-openssl-dev libssl-dev"
      echo "           then re-run the deploy, or build by hand (tachyon/deploy/DEPLOY.md). Skipping - campus server is unaffected."
      exit 0
    fi

    # Submodule ships empty (LiteNetLibPP) - clone it if the source isn't there.
    if [ ! -e vendor/LiteNetLibPP/CMakeLists.txt ]; then
      echo "        fetching LiteNetLibPP submodule ..."
      rm -rf vendor/LiteNetLibPP
      git clone --depth 1 https://github.com/Revan600/LiteNetLibPP.git vendor/LiteNetLibPP
    fi

    # Build only when needed (first deploy, or a source file newer than the binary).
    if [ ! -x build/tachyon ] || [ -n "$(find src CMakeLists.txt -newer build/tachyon 2>/dev/null)" ]; then
      echo "        building tachyon (this can take a couple of minutes) ..."
      cmake -S . -B build -DCMAKE_BUILD_TYPE=Release >/dev/null
      cmake --build build -j"$(nproc)" >/dev/null
    fi
    test -x build/tachyon

    # Open UDP 7777 if ufw is the firewall (guarded - other setups are the operator's job).
    if command -v ufw >/dev/null 2>&1; then ufw allow 7777/udp >/dev/null 2>&1 || true; fi

    # systemd unit pointing at the shipped build + conf.
    cat > /etc/systemd/system/tachyon.service <<TUNIT
[Unit]
Description=Tachyon voice server (Campus)
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
WorkingDirectory=$TACHYON
ExecStart=$TACHYON/build/tachyon --config $TACHYON/tachyon.conf
Restart=on-failure
RestartSec=3

[Install]
WantedBy=multi-user.target
TUNIT
    systemctl daemon-reload
    systemctl enable tachyon >/dev/null 2>&1 || true
    systemctl restart tachyon
    sleep 1
    if systemctl is-active --quiet tachyon; then
      echo "        tachyon is UP (UDP 7777)."
    else
      echo "  [tachyon] built but not active - journalctl -u tachyon"
    fi
  ) || echo "  [tachyon] setup skipped/failed (toolchain missing?) - build manually: tachyon/deploy/DEPLOY.md. Campus server is unaffected."

  # Point campus voice at Tachyon ONLY if it actually came up; otherwise make sure voice is on
  # Photon. Done via a systemd drop-in that sets CAMPUS_TACHYON_ENDPOINT (ConfigCampus reads it),
  # so no rebuild is needed to toggle. Keyed on the live service state, so it self-heals across
  # deploys: a Tachyon that stops building/running reverts the game to Photon on the next deploy.
  CAMPUS_DROPIN=/etc/systemd/system/campus.service.d/tachyon.conf
  if systemctl is-active --quiet tachyon 2>/dev/null; then
    mkdir -p /etc/systemd/system/campus.service.d
    cat > "$CAMPUS_DROPIN" <<DROPIN
[Service]
Environment=CAMPUS_TACHYON_ENDPOINT=$TACHYON_PUBLIC
Environment=CAMPUS_TACHYON_SERVER_ID=tachyon-1
DROPIN
    echo "  [tachyon] voice ENABLED -> $TACHYON_PUBLIC (restarting campus to pick it up)"
    systemctl daemon-reload
    systemctl restart campus
  elif [ -f "$CAMPUS_DROPIN" ]; then
    rm -f "$CAMPUS_DROPIN"
    systemctl daemon-reload
    systemctl restart campus
    echo "  [tachyon] not running -> voice reverted to Photon (removed campus drop-in)"
  fi
fi
'@
# Force LF line endings + UTF-8 no BOM (bash rejects CRLF shebang / BOM).
$installLF = $install -replace "`r`n","`n"
[IO.File]::WriteAllBytes("$out\install.sh", [Text.UTF8Encoding]::new($false).GetBytes($installLF))

Write-Host "  [4/4] Packing $pkg ..."
if (Test-Path $pkg) { Remove-Item $pkg -Force }
# tar is native on Windows 10+; -C to switch into the publish dir so paths in the
# tarball are relative ("./install.sh" etc.) - what the installer expects.
tar -czf $pkg -C $out .
if ($LASTEXITCODE -ne 0) { Write-Host "  [X] tar failed"; pause; exit 1 }

$szMB = [math]::Round((Get-Item $pkg).Length / 1MB, 1)
Write-Host ""
Write-Host "  ==========================================="
Write-Host "    PACKAGED OK"
Write-Host ("    file  : $pkg  ({0} MB)" -f $szMB)
Write-Host "    build : $buildId"
Write-Host ""
Write-Host "    Next:  DeployCampusServer.bat"
Write-Host "  ==========================================="