name: Local Build and Deploy
on:
  push:
    branches:
      - main
jobs:
  deploy:
    runs-on: shell
    steps:
      - name: Run Deploy Scripts Locally
        run: |
          set -e
          
          # 1. Deployment lock & init
          exec 9>/var/tmp/epic_web_control_deploy.lock
          flock -n 9 || { echo "ERROR: Another deployment is already running! Cancelling."; exit 1; }
          
          echo "--- EPIC WEB CONTROL: Starting Auto-Cleanup & Deploy ---"
          
          error_handler() {
            echo "!!! DEPLOYMENT FAILED on line $1 !!!" >&2
            sudo systemctl restart atom-nexst.service || true
            exit 1
          }
          trap 'error_handler $LINENO' ERR
          
          # Zorg dat de opslagmappen bestaan
          sudo mkdir -p /var/www/atom-media/uploads /var/www/atom-media/imaging /var/www/atom-media/public_assets
          sudo chown -R www-data:www-data /var/www/atom-media
          sudo chmod -R 775 /var/www/atom-media

          # 2. Cleanup & Git Sync
          cd /var/www/atom-nexst/
          git fetch origin --prune
          git reset --hard origin/main
          git clean -fd -e .env -e .env.local -e .env.production -e .env*.local -e .next
          
          find .next -mindepth 1 -maxdepth 1 ! -name 'cache' -exec rm -rf {} + 2>/dev/null || true
          
          # 3. Environment Sanitization
          if [ -f .env ]; then
            export $(grep -v '^#' .env | xargs)
            export DATABASE_URL=$(echo "$DATABASE_URL" | sed 's/[&?]connect_timeout=[^&]*//g')
          fi

          # 4. Dependencies & Database
          export PNPM_CONFIG_ONLY_BUILT_DEPENDENCIES="@parcel/watcher,@swc/core,sharp"
          export PRISMA_SKIP_POSTINSTALL_GENERATE=1
          pnpm install --frozen-lockfile
          pnpm db:migrate
          pnpm prisma:generate
          
          # 5. Build
          pnpm build
          
          # 6. Sync Standalone Bundle & Overlays
          echo "Preparing standalone bundle paths..."
          
          # Zorg voor een schone basis
          mkdir -p .next/standalone/public
          cp -r public/* .next/standalone/public/ 2>/dev/null || true
          cp -r .next/static .next/standalone/.next/
          cp -r node_modules/@prisma .next/standalone/node_modules/ 2>/dev/null || true
          cp .env .next/standalone/.env
          
          # AANPASSING: Overlay dynamische assets (logo's/favicons) vanuit de veilige bron
          # --delete zorgt ervoor dat oude logo's die je uit de bronmap hebt verwijderd, 
          # ook echt van de website verdwijnen.
          if [ -d /var/www/atom-media/public_assets ]; then
            rsync -av --delete /var/www/atom-media/public_assets/ .next/standalone/public/
          fi
          
          # Symlinks voor uploads (altijd verwijzen naar de veilige bron)
          rm -rf .next/standalone/public/uploads .next/standalone/public/imaging
          ln -sfn /var/www/atom-media/uploads .next/standalone/public/uploads
          ln -sfn /var/www/atom-media/imaging .next/standalone/public/imaging
          
          # 7. Permissions
          sudo chown -R www-data:www-data /var/www/atom-nexst/
          sudo chmod -R g+rw /var/www/atom-nexst/
          
          # 8. Restart
          sudo systemctl restart atom-nexst.service
          sleep 3
          if ! systemctl is-active --quiet atom-nexst.service; then
            echo "ERROR: Service failed to start!" >&2
            exit 1
          fi
          
          echo "--- Deployment successfully completed ---"