/**
 * 修复广州Nginx：把/images/移到正确的server块
 */

const GZ = { ip: '43.139.217.141', port: 3910, key: 'zy_gtw_4a155446b7acc09fe46a2a29972c0ca5d9954da19c35dc23' }

async function callGK(srv, method, path, body = null) {
  const url = `http://${srv.ip}:${srv.port}${path}`
  const opts = { method, headers: { 'Authorization': `Bearer ${srv.key}`, 'Content-Type': 'application/json' } }
  if (body) opts.body = JSON.stringify(body)
  const res = await fetch(url, opts)
  const text = await res.text()
  try { return { status: res.status, data: JSON.parse(text) } }
  catch { return { status: res.status, data: { raw: text } } }
}

async function exec(srv, cmd) {
  const r = await callGK(srv, 'POST', '/exec', { cmd })
  return r.data
}

async function readFile(srv, path) {
  const r = await callGK(srv, 'POST', '/file/read', { path })
  if (r.status === 200) return r.data.content
  return null
}

async function writeFile(srv, path, content) {
  return (await callGK(srv, 'POST', '/file/write', { path, content })).status === 200
}

async function main() {
  console.log('═'.repeat(50))
  console.log('🔧 修复广州Nginx: /images/ 位置修正')
  console.log('═'.repeat(50))

  // 读取配置
  const config = await readFile(GZ, '/etc/nginx/sites-enabled/guanghulab')
  if (!config) {
    console.log('❌ 无法读取配置')
    return
  }
  
  console.log('当前配置长度:', config.length, '字符')
  
  // 找两个server块的结构
  // 第一个server: listen 443 ssl (HTTPS)
  // 第二个server: listen 80 (HTTP redirect)
  
  // 找到 "server {" 的两次出现
  const firstServer = config.indexOf('server {')
  const secondServer = config.indexOf('server {', firstServer + 10)
  const firstServerEnd = config.indexOf('}', firstServer)
  const secondServerEnd = config.indexOf('}', secondServer)
  
  console.log('\n结构分析:')
  console.log('  第一个server { 位置:', firstServer)
  console.log('  第一个server } 位置:', firstServerEnd)
  console.log('  第二个server { 位置:', secondServer)
  console.log('  第二个server } 位置:', secondServerEnd)
  
  // 用Python来精确处理
  const result = await exec(GZ, `
python3 << 'PYEOF'
with open('/etc/nginx/sites-enabled/guanghulab', 'r') as f:
    content = f.read()

# 找到/images/配置块（在第二个server块中）
images_start = content.find('    # 铸渊图片工作室')
images_end = content.find('}', images_start) + 1  # 包括最后一个}

if images_start == -1:
    print('ERROR: 找不到/images/配置块')
    exit(1)

images_block = content[images_start:images_end]
print('找到/images/块:', images_block[:60] + '...')

# 从原文件中删除/images/块
content_without = content[:images_start] + content[images_end:]
print('删除/images/后长度:', len(content_without))

# 找到第一个server块（HTTPS）的结束位置
# 第一个server块以"listen 443 ssl"开头，找到对应的}
first_server_start = content_without.index('server {')
# 找到listen 443 ssl的server块
depth = 0
pos = first_server_start
while pos < len(content_without):
    if content_without[pos] == '{':
        depth += 1
    elif content_without[pos] == '}':
        depth -= 1
        if depth == 0:
            # 在第一个server块的}前插入/images/块
            new_content = content_without[:pos] + '\\n' + images_block + content_without[pos:]
            with open('/etc/nginx/sites-enabled/guanghulab', 'w') as f:
                f.write(new_content)
            print(f'OK: 在第一个server块内(位置{pos})插入')
            break
    pos += 1
else:
    print('ERROR: 找不到第一个server块结尾')

# 验证
with open('/etc/nginx/sites-enabled/guanghulab', 'r') as f:
    final = f.read()

# 检查images块是否在正确的server块中
ssl_pos = final.find('listen 443 ssl')
second_server_pos = final.find('listen 80;\\n    server_name guanghulab.com')
images_in_final = final.find('location /images/')

print(f'SSL server start: {ssl_pos}')
print(f'HTTP redirect start: {second_server_pos}')
print(f'/images/ location: {images_in_final}')
if ssl_pos < images_in_final < second_server_pos:
    print('✅ /images/ 在正确的SSL server块中!')
else:
    print('❌ /images/ 位置不正确!')
PYEOF
`)
  console.log('\nPython:', result.stdout || result.stderr)

  // 测试Nginx
  const r1 = await exec(GZ, 'nginx -t 2>&1')
  console.log('Nginx测试:', r1.stdout || r1.stderr)

  if ((r1.stdout || '').includes('test failed') || (r1.stderr || '').includes('test failed')) {
    console.log('⚠️ 配置错误，回滚')
    // 重新部署 - 从备份读取
  } else {
    await exec(GZ, 'nginx -s reload 2>&1')
    console.log('Nginx重载成功')
    
    // 测试
    const r2 = await exec(GZ, `curl -s -k --connect-timeout 5 -w "\\nHTTP:%{http_code}" https://localhost/images/ 2>&1 | tail -5`)
    console.log('\n测试 https://localhost/images/:')
    console.log((r2.stdout || '').slice(0, 200))
    
    // 从外网测试
    const SG_IP = '43.156.237.110'
    const r3 = await exec(GZ, `curl -s --connect-timeout 5 -w "\\nHTTP:%{http_code}" "http://${SG_IP}/images/" -H "Host: guanghulab.com" 2>&1 | tail -3`)
    console.log('\n测试 http://SG_IP/images/ (Host: guanghulab.com):')
    console.log(r3.stdout || r3.stderr)
  }

  console.log('\n' + '═'.repeat(50))
  console.log('✅ 修复完成')
  console.log('═'.repeat(50))
}

main().catch(err => console.error('❌', err))