#!/usr/bin/env bash
set -euo pipefail

if [[ $# -lt 1 ]]; then
  echo "usage: $0 <base-url>" >&2
  echo "example: $0 https://rmcp.itexp.me" >&2
  exit 1
fi

BASE_URL="${1%/}"
TIMEOUT_SECONDS="${SMOKE_TIMEOUT_SECONDS:-20}"

check_head() {
  local path="$1"
  local expected_prefix="${2:-2}"
  local url="${BASE_URL}${path}"
  local code

  code="$(curl -k -sS -o /dev/null -I -L --max-time "${TIMEOUT_SECONDS}" -w '%{http_code}' "${url}")"
  printf '%-36s %s\n' "${path}" "${code}"

  if [[ "${code}" != ${expected_prefix}* ]]; then
    echo "unexpected status for ${url}: ${code}" >&2
    return 1
  fi
}

check_json() {
  local path="$1"
  local expected_status_one="$2"
  local expected_status_two="${3:-}"
  local url="${BASE_URL}${path}"
  local headers
  local code
  local content_type

  headers="$(mktemp)"
  code="$(curl -k -sS -o /dev/null -D "${headers}" --max-time "${TIMEOUT_SECONDS}" -w '%{http_code}' "${url}")"
  content_type="$(awk -F': *' 'tolower($1) == "content-type" {print $2}' "${headers}" | tr -d '\r' | tail -n1)"
  rm -f "${headers}"

  printf '%-36s %s (%s)\n' "${path}" "${code}" "${content_type:-unknown}"

  if [[ "${code}" != "${expected_status_one}" && ( -z "${expected_status_two}" || "${code}" != "${expected_status_two}" ) ]]; then
    echo "unexpected status for ${url}: ${code}" >&2
    return 1
  fi

  if [[ "${code}" == "200" && "${content_type}" != application/json* ]]; then
    echo "unexpected content-type for ${url}: ${content_type:-missing}" >&2
    return 1
  fi
}

check_get() {
  local path="$1"
  local expected_prefix="${2:-2}"
  local url="${BASE_URL}${path}"
  local code

  code="$(curl -k -sS -o /dev/null --max-time "${TIMEOUT_SECONDS}" -w '%{http_code}' "${url}")"
  printf '%-36s %s\n' "${path}" "${code}"

  if [[ "${code}" != ${expected_prefix}* ]]; then
    echo "unexpected status for ${url}: ${code}" >&2
    return 1
  fi
}

check_redirect() {
  local path="$1"
  local expected_location_suffix="$2"
  local url="${BASE_URL}${path}"
  local headers
  local code
  local location

  headers="$(mktemp)"
  code="$(curl -k -sS -o /dev/null -D "${headers}" --max-time "${TIMEOUT_SECONDS}" -w '%{http_code}' "${url}")"
  location="$(awk -F': *' 'tolower($1) == "location" {print $2}' "${headers}" | tr -d '\r' | tail -n1)"
  rm -f "${headers}"

  printf '%-36s %s -> %s\n' "${path}" "${code}" "${location:-missing}"

  if [[ "${code}" != 30* ]]; then
    echo "expected redirect for ${url}, got ${code}" >&2
    return 1
  fi

  if [[ "${location}" != *"${expected_location_suffix}" ]]; then
    echo "unexpected redirect location for ${url}: ${location:-missing}" >&2
    return 1
  fi
}

echo "staging smoke: ${BASE_URL}"
echo
echo "public routes"
check_head "/" 2
check_head "/login" 2
check_head "/agents" 2
check_head "/secrets" 2
check_head "/wizard/" 2
check_get "/mcp/health" 2
check_json "/api/auth/session" 200 401

echo
echo "legacy redirects"
check_redirect "/html/login.html" "/login"
check_redirect "/html/agents.html" "/agents"
check_redirect "/html/wizard/" "/wizard/"

echo
echo "smoke completed"