#!/usr/bin/env bash
# Review all Besu VMs: validators, sentries, and RPC nodes (status, service, block height).
# Optional: apply tx-pool eviction with --apply-txpool.
# Run from project root. Usage: bash scripts/review-sentry-and-rpc-nodes.sh [--apply-txpool]
# Note: RPC 2307/2308 (Putu) may show block behind if not synced; check logs if needed.

set -euo pipefail

SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
PROJECT_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
cd "$PROJECT_ROOT"
[ -f config/ip-addresses.conf ] && source config/ip-addresses.conf 2>/dev/null || true

PROXMOX_USER="${PROXMOX_USER:-root}"
R630_01="${PROXMOX_HOST_R630_01:-${PROXMOX_R630_01:-192.168.11.11}}"
R630_02="${PROXMOX_HOST_R630_02:-${PROXMOX_R630_02:-192.168.11.12}}"
ML110="${PROXMOX_HOST_ML110:-${PROXMOX_ML110:-192.168.11.10}}"

# VMID:host:service:config_name (config path under /etc/besu/)
# Host mapping per docs/04-configuration/verification-evidence/BESU_VMIDS_FROM_PROXMOX_20260208.md
# Validators: 1000-1002 r630-01, 1003-1004 ml110
# Sentries: 1500-1502 r630-01; 1503-1506 ml110
# RPC: 2101 r630-01; 2201,2303,2401 r630-02; 2301,2304-2308,2400,2402,2403 ml110; 2503-2505 r630-01 (HYBX; use besu.service, not besu-rpc — if Besu not installed, service is disabled). 2506-2508 destroyed 2026-02-08.
VALIDATORS=(
  "1000:$R630_01:besu-validator:config-validator.toml"
  "1001:$R630_01:besu-validator:config-validator.toml"
  "1002:$R630_01:besu-validator:config-validator.toml"
  "1003:$ML110:besu-validator:config-validator.toml"
  "1004:$ML110:besu-validator:config-validator.toml"
)
SENTRIES=(
  "1500:$R630_01:besu-sentry:config-sentry.toml"
  "1501:$R630_01:besu-sentry:config-sentry.toml"
  "1502:$R630_01:besu-sentry:config-sentry.toml"
  "1503:$ML110:besu-sentry:config-sentry.toml"
  "1504:$ML110:besu-sentry:config-sentry.toml"
  "1505:$ML110:besu-sentry:config-sentry.toml"
  "1506:$ML110:besu-sentry:config-sentry.toml"
)
RPC_NODES=(
  "2101:$R630_01:besu-rpc:config-rpc-core.toml"
  "2201:$R630_02:besu-rpc:config-rpc-public.toml"
  "2301:$ML110:besu-rpc:config-rpc-private.toml"
  "2303:$R630_02:besu-rpc:config-rpc.toml"
  "2304:$ML110:besu-rpc:config-rpc.toml"
  "2305:$ML110:besu-rpc:config-rpc.toml"
  "2306:$ML110:besu-rpc:config-rpc.toml"
  "2307:$ML110:besu-rpc:config-rpc.toml"
  "2308:$ML110:besu-rpc:config-rpc.toml"
  "2400:$ML110:besu-rpc:config-rpc.toml"
  "2401:$R630_02:besu-rpc:config-rpc.toml"
  "2402:$ML110:besu-rpc:config-rpc.toml"
  "2403:$ML110:besu-rpc:config-rpc.toml"
  "2503:$R630_01:besu-rpc:config-rpc.toml"
  "2504:$R630_01:besu-rpc:config-rpc.toml"
  "2505:$R630_01:besu-rpc:config-rpc.toml"
)

RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
CYAN='\033[0;36m'
NC='\033[0m'
log_info() { echo -e "${BLUE}[INFO]${NC} $1"; }
log_success() { echo -e "${GREEN}[✓]${NC} $1"; }
log_warn() { echo -e "${YELLOW}[⚠]${NC} $1"; }
log_error() { echo -e "${RED}[✗]${NC} $1"; }

APPLY_TXPOOL=false
[[ "${1:-}" = "--apply-txpool" ]] && APPLY_TXPOOL=true

review_one() {
  local vmid="$1" host="$2" service="$3" config_name="$4" is_rpc="${5:-false}"
  local ssh_target="${PROXMOX_USER}@${host}"
  local ct_status service_status block_info=""

  ct_status=$(ssh -o ConnectTimeout=5 -o StrictHostKeyChecking=no "$ssh_target" "pct status $vmid 2>/dev/null" | awk '{print $2}' || echo "unknown")
  if [[ "$ct_status" != "running" ]]; then
    echo -e "  VMID $vmid: container ${RED}$ct_status${NC} (host $host)"
    return 0
  fi

  # HYBX 2503-2505 use besu.service; check it if besu-rpc not active
  service_status=$(ssh -o ConnectTimeout=5 -o StrictHostKeyChecking=no "$ssh_target" "pct exec $vmid -- systemctl is-active $service 2>/dev/null" || echo "unknown")
  if [[ "$service_status" != "active" && "$vmid" =~ ^250[345]$ ]]; then
    service_status=$(ssh -o ConnectTimeout=5 -o StrictHostKeyChecking=no "$ssh_target" "pct exec $vmid -- systemctl is-active besu.service 2>/dev/null" || echo "unknown")
  fi
  if [[ "$service_status" = "active" ]]; then
    echo -e "  VMID $vmid: container running, ${GREEN}$service active${NC}"
  elif [[ "$service_status" = "inactive" && "$vmid" =~ ^250[345]$ ]]; then
    echo -e "  VMID $vmid: container running, ${YELLOW}besu.service inactive (HYBX: Besu not installed or disabled)${NC}"
  else
    echo -e "  VMID $vmid: container running, ${YELLOW}$service $service_status${NC}"
  fi

  if [[ "$is_rpc" = "true" ]]; then
    local ip
    ip=$(ssh -o ConnectTimeout=5 -o StrictHostKeyChecking=no "$ssh_target" "pct exec $vmid -- hostname -I 2>/dev/null | awk '{print \$1}'" 2>/dev/null || echo "")
    if [[ -n "$ip" ]]; then
      local resp
      resp=$(curl -s -m 3 -X POST -H "Content-Type: application/json" -d '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}' "http://$ip:8545" 2>/dev/null || echo "")
      if echo "$resp" | grep -q '"result"'; then
        local block_hex block_dec
        block_hex=$(echo "$resp" | jq -r '.result' 2>/dev/null)
        block_dec=$((block_hex))
        # Chain 138 is past 2M; flag if node is >50k blocks behind
        if [[ "$block_dec" -lt 2050000 ]]; then
          echo -e "    RPC $ip:8545 → block ${YELLOW}$block_dec (behind)${NC}"
        else
          echo -e "    RPC $ip:8545 → block ${GREEN}$block_dec${NC}"
        fi
      else
        echo -e "    RPC $ip:8545 → ${YELLOW}no response${NC}"
      fi
    fi
  fi

  if "$APPLY_TXPOOL"; then
    # Apply layered tx-pool + min-score=0; try /etc/besu/ then /config/
    local cfg_etc="/etc/besu/$config_name" cfg_alt="/config/$config_name"
    ssh -o ConnectTimeout=5 -o StrictHostKeyChecking=no "$ssh_target" "pct exec $vmid -- bash -c '
      CFG=\"$cfg_etc\"
      [ -f \"\$CFG\" ] || CFG=\"$cfg_alt\"
      [ ! -f \"\$CFG\" ] && exit 0
      sed -i \"/^tx-pool-max-size=/d\" \"\$CFG\" 2>/dev/null || true
      sed -i \"/^tx-pool-limit-by-account-percentage=/d\" \"\$CFG\" 2>/dev/null || true
      sed -i \"/^tx-pool-retention-hours=/d\" \"\$CFG\" 2>/dev/null || true
      if ! grep -q \"tx-pool-max-future-by-sender\" \"\$CFG\"; then
        echo \"\" >> \"\$CFG\"
        echo \"# Layered Tx-Pool (tx-pool-min-score not used: unsupported in some Besu builds)\" >> \"\$CFG\"
        echo \"tx-pool-max-future-by-sender=200\" >> \"\$CFG\"
        echo \"tx-pool-layer-max-capacity=12500000\" >> \"\$CFG\"
        echo \"tx-pool-max-prioritized=2000\" >> \"\$CFG\"
        echo \"tx-pool-price-bump=10\" >> \"\$CFG\"
      fi
      sed -i \"/^tx-pool-min-score=/d\" \"\$CFG\" 2>/dev/null || true
    '" 2>/dev/null && {
      ssh -o ConnectTimeout=5 -o StrictHostKeyChecking=no "$ssh_target" "pct exec $vmid -- systemctl restart $service" 2>/dev/null && \
        echo -e "    ${GREEN}Tx-pool eviction applied, $service restarted${NC}" || echo -e "    ${YELLOW}Config updated, restart failed${NC}"
    } || true
  fi
}

echo ""
echo -e "${CYAN}=== Validator Nodes ===${NC}"
for entry in "${VALIDATORS[@]}"; do
  IFS=: read -r vmid host service config_name <<< "$entry"
  review_one "$vmid" "$host" "$service" "$config_name" "false"
done

echo ""
echo -e "${CYAN}=== Sentry Nodes ===${NC}"
for entry in "${SENTRIES[@]}"; do
  IFS=: read -r vmid host service config_name <<< "$entry"
  review_one "$vmid" "$host" "$service" "$config_name" "false"
done

echo ""
echo -e "${CYAN}=== RPC Nodes ===${NC}"
for entry in "${RPC_NODES[@]}"; do
  IFS=: read -r vmid host service config_name <<< "$entry"
  review_one "$vmid" "$host" "$service" "$config_name" "true"
done

echo ""
if "$APPLY_TXPOOL"; then
  log_success "Review complete; tx-pool eviction applied and services restarted where config was updated."
else
  log_info "Review complete. To apply tx-pool eviction (layered + min-score=0) and restart: $0 --apply-txpool"
fi