# d0a1 pack - WordPress + IA (Windows)
# Tu WordPress con IA local. Genera borradores, modera comentarios.
#
# Local:  .\deploy.ps1 local    -> http://localhost:8080
# VPS:    .\deploy.ps1 vps      -> http://TU_IP:8080
# Stop:   .\deploy.ps1 stop
#
# Requiere: Docker Desktop para Windows (https://docs.docker.com/desktop/)

param(
    [Parameter(Position = 0)]
    [ValidateSet('local', 'vps', 'stop')]
    [string]$Mode = 'local'
)

$ErrorActionPreference = 'Stop'

# Escape ANSI via [char]27 (compatible con Windows PowerShell 5.1 y PS 7+)
$Esc = [char]27
$Green = "$Esc[32m"; $Cyan = "$Esc[36m"; $Yellow = "$Esc[33m"; $Red = "$Esc[31m"; $Bold = "$Esc[1m"; $NC = "$Esc[0m"
if ($env:NO_COLOR) {
    $Green = $Cyan = $Yellow = $Red = $Bold = $NC = ''
}

$ScriptDir = $PSScriptRoot
$ComposeFile = Join-Path $ScriptDir 'docker-compose.yml'

function Info($msg) { Write-Host "${Bold}${Green}>>>${NC} $msg" }
function Warn($msg) { Write-Host "${Bold}${Yellow}>>>${NC} $msg" }
function Err($msg)  { Write-Host "${Bold}${Red}>>>${NC} $msg" }
function Ok($msg)   { Write-Host "${Green}OK${NC} $msg" }

function Find-FreePort([int]$Start) {
    for ($p = $Start; $p -le ($Start + 20); $p++) {
        $inUse = Get-NetTCPConnection -LocalPort $p -State Listen -ErrorAction SilentlyContinue
        if (-not $inUse) { return $p }
    }
    return $Start
}

Write-Host ''
Write-Host "${Bold}${Cyan}============================================================${NC}"
Write-Host "${Bold}${Cyan}  d0a1 pack - WordPress + IA (Windows)${NC}"
Write-Host "${Bold}${Cyan}  WP + IA local. Sin cuotas.${NC}"
Write-Host "${Bold}${Cyan}============================================================${NC}"
Write-Host ''

# --- Stop mode ------------------------------------------------------------
if ($Mode -eq 'stop') {
    Warn 'Parando...'
    docker compose -f $ComposeFile down
    Info 'Parado.'
    exit 0
}

# --- Check Docker ---------------------------------------------------------
if (-not (Get-Command docker -ErrorAction SilentlyContinue)) {
    Err 'Docker no esta instalado.'
    Write-Host ''
    Write-Host 'Instala Docker Desktop para Windows:'
    Write-Host '  https://docs.docker.com/desktop/setup/install/windows-install/'
    exit 1
}
# En PS 5.1, *> $null sobre comandos nativos convierte stderr en errores
# terminantes con EAP=Stop (PS #4002). Se descarta via cmd /c.
$null = cmd /c "docker info >NUL 2>&1"
if ($LASTEXITCODE -ne 0) {
    Err 'Docker Desktop no responde. Abre Docker Desktop y espera a que arranque.'
    exit 1
}
# En PS 5.1, *> $null sobre comandos nativos convierte stderr en errores
# terminantes con EAP=Stop (PS #4002). Se descarta via cmd /c.
cmd /c "docker compose version >NUL 2>&1"
$composeOk = ($LASTEXITCODE -eq 0)
if (-not $composeOk) {
    Err 'Docker Compose v2 no disponible. Actualiza Docker Desktop.'
    exit 1
}
Ok "Docker: $(cmd /c 'docker compose version --short 2>NUL')"

# --- Check RAM ------------------------------------------------------------
$TotalRamGb = [math]::Round((Get-CimInstance Win32_ComputerSystem).TotalPhysicalMemory / 1GB, 1)
if ($TotalRamGb -lt 5.5) {
    Err "Se necesitan 6 GB de RAM minimo (detectado: $TotalRamGb GB)."
    exit 1
}
Ok "RAM: $TotalRamGb GB"

# --- Setup .env -----------------------------------------------------------
$EnvFile = Join-Path $ScriptDir '.env'
if (-not (Test-Path $EnvFile)) {
    Warn 'No se encontro .env. Creando desde .env.example...'
    Copy-Item (Join-Path $ScriptDir '.env.example') $EnvFile

    # Generar contrasenas aleatorias (32 hex chars) sin depender de openssl
    $Bytes = New-Object byte[] 16
    $RootPass = ''; $WpPass = ''
    $rng = [System.Security.Cryptography.RandomNumberGenerator]::Create()
    $rng.GetBytes($Bytes); $RootPass = ($Bytes | ForEach-Object { $_.ToString('x2') }) -join ''
    $rng.GetBytes($Bytes); $WpPass   = ($Bytes | ForEach-Object { $_.ToString('x2') }) -join ''
    $rng.Dispose()

    # 1a coincidencia en el fichero = MYSQL_ROOT_PASSWORD, 2a = MYSQL_PASSWORD.
    # -replace no acepta tercer operando (count) en ninguna version de PS,
    # asi que se recorre linea a linea.
    $Lines = Get-Content $EnvFile
    $Replaced = 0
    for ($i = 0; $i -lt $Lines.Count; $i++) {
        if ($Lines[$i] -like '*change-me-to-a-strong-password*') {
            if ($Replaced -eq 0) {
                $Lines[$i] = $Lines[$i] -replace 'change-me-to-a-strong-password', $RootPass
            } else {
                $Lines[$i] = $Lines[$i] -replace 'change-me-to-a-strong-password', $WpPass
            }
            $Replaced++
        }
    }
    Set-Content $EnvFile -Value $Lines
    Info "Contrasenas generadas en $EnvFile"
}

# --- GPU NVIDIA? (si hay, Ollama la usa y va 5-10x mas rapido) ---------------
$HasGpu = $false
if (Get-Command nvidia-smi -ErrorAction SilentlyContinue) {
    $GpuInfo = & nvidia-smi --query-gpu=name,memory.total --format=csv,noheader 2>$null
    if ($LASTEXITCODE -eq 0 -and $GpuInfo) {
        $HasGpu = $true
        $GpuName = ($GpuInfo -split ',')[0].Trim()
        Info "GPU NVIDIA detectada: $GpuName (aceleracion activada)"
    }
}
if (-not $HasGpu) {
    Warn 'Sin GPU NVIDIA: modo CPU (~10-20 tokens/s). Con una GPU NVIDIA va 5-10x mas rapido.'
}
# --- Auto-detect ports ----------------------------------------------------
# --- Tumbar deploy previo (antes de detectar puertos) ----------------------
cmd /c docker compose -f $ComposeFile down '>' NUL '2>&1'

$OllamaPort = Find-FreePort 11434
$WpPort     = Find-FreePort 8080
$WebUiPort  = Find-FreePort 3000

# --- Mode info ------------------------------------------------------------
if ($Mode -eq 'local') {
    Warn 'Modo: local (tu ordenador)'
    Write-Host "  WordPress: ${Cyan}http://localhost:${WpPort}${NC}"
    Write-Host "  IA (chat): ${Cyan}http://localhost:${WebUiPort}${NC}"
} else {
    Warn 'Modo: VPS (accesible desde fuera)'
    # IP real de LAN: la de la interfaz con la ruta por defecto (evita
    # vEthernet WSL/Hyper-V, Docker, VPN)
    $GwIf = (Get-NetRoute -DestinationPrefix '0.0.0.0/0' -ErrorAction SilentlyContinue |
        Sort-Object RouteMetric | Select-Object -First 1).ifIndex
    $Ip = (Get-NetIPAddress -AddressFamily IPv4 -ErrorAction SilentlyContinue |
        Where-Object { $_.ifIndex -eq $GwIf -and $_.IPAddress -notlike '127.*' } |
        Select-Object -First 1).IPAddress
    if (-not $Ip) { $Ip = 'TU_IP' }
    Write-Host "  WordPress: ${Cyan}http://${Ip}:${WpPort}${NC}"
    Write-Host "  IA (chat): ${Cyan}http://${Ip}:${WebUiPort}${NC}"
    Write-Host ''
    Write-Host "  ${Bold}¿No tienes VPS?${NC} Consigue uno con descuento:"
    Write-Host "  ${Cyan}https://d0a1.es/go/vultr/${NC}  - Vultr"
    Write-Host "  ${Cyan}https://d0a1.es/go/digitalocean/${NC}  - DigitalOcean (`$200 credit)"
}

if ($OllamaPort -ne 11434) { Warn "Puerto 11434 ocupado, usando $OllamaPort" }
if ($WpPort     -ne 8080)  { Warn "Puerto 8080 ocupado, usando $WpPort" }
if ($WebUiPort  -ne 3000)  { Warn "Puerto 3000 ocupado, usando $WebUiPort" }
Write-Host ''

# --- Deploy ----------------------------------------------------------------
Warn 'Descargando contenedores (3-5 min la primera vez)...'
cmd /c docker compose -f $ComposeFile down '>' NUL '2>&1'
$env:OLLAMA_PORT = "$OllamaPort"
$env:WP_PORT     = "$WpPort"
$env:WEBUI_PORT  = "$WebUiPort"
$ComposeArgs = @('-f', $ComposeFile)
if ($HasGpu) {
    $OverrideFile = Join-Path $ScriptDir 'docker-compose.gpu.yml'
    Set-Content -Path $OverrideFile -Value "services:`r`n  ollama:`r`n    gpus: all`r`n"
    $ComposeArgs += @('-f', $OverrideFile)
}
docker compose @ComposeArgs up -d
if ($LASTEXITCODE -ne 0) { Err "docker compose up fallo (exit $LASTEXITCODE)."; exit 1 }

# --- Pull model -------------------------------------------------------------
Info 'Esperando a que Ollama arranque...'
$MaxWait = 60; $Waited = 0
while ($true) {
    # Descarte de stderr via cmd /c (ver nota de PS 5.1 / PS #4002 arriba)
    cmd /c "docker exec d0a1-wp-ollama ollama ps >NUL 2>&1"
    if ($LASTEXITCODE -eq 0) { break }
    Start-Sleep -Seconds 2
    $Waited += 2
    if ($Waited -ge $MaxWait) {
        Err 'Ollama no arranco. Revisa: docker logs d0a1-wp-ollama'
        exit 1
    }
}
# Si el usuario define $env:HTTPS_PROXY, Ollama lo usa para el pull (doc oficial):
$ProxyEnv = @()
if ($env:HTTPS_PROXY) { $ProxyEnv = @('-e', "HTTPS_PROXY=$env:HTTPS_PROXY", '-e', "HTTP_PROXY=$env:HTTP_PROXY") }
# --- Modelo ya presente? (volumen persistente: no re-descargar) ------------
$ModelList = docker exec d0a1-wp-ollama ollama list 2>$null
if ("$ModelList" -match 'llama3.2:3b') {
    Info 'Modelo llama3.2:3b ya descargado (volumen intacto). Omitiendo descarga.'
} else {
    # --- Modelo: HF primero (CDN propio, rapido) y registry de Ollama como ultimo recurso ---

$Gguf = Join-Path $ScriptDir 'llama3.2-3b-q4.gguf'
$HfUrls = @(
    'https://huggingface.co/bartowski/Llama-3.2-3B-Instruct-GGUF/resolve/main/Llama-3.2-3B-Instruct-Q4_K_M.gguf',
    'https://huggingface.co/unsloth/Llama-3.2-3B-Instruct-GGUF/resolve/main/Llama-3.2-3B-Instruct-Q4_K_M.gguf'
)
Info 'Descargando modelo de IA (llama3.2:3b, ~2 GB)...'
foreach ($Url in $HfUrls) {
    curl.exe -# -L --retry 3 --max-time 1800 -o "$Gguf" $Url
    if ($LASTEXITCODE -eq 0 -and (Test-Path $Gguf) -and (Get-Item $Gguf).Length -gt 1900000000) { break }
    Remove-Item "$Gguf" -Force -ErrorAction SilentlyContinue
    if ($Url -ne $HfUrls[-1]) { Warn 'Mirror no accesible, probando el siguiente...' }
}
if ((Test-Path $Gguf) -and (Get-Item $Gguf).Length -gt 1900000000) {
    Info 'Importando modelo en Ollama...'
    docker cp "$Gguf" d0a1-wp-ollama:/root/.ollama/import.gguf
    docker exec d0a1-wp-ollama sh -c 'printf "FROM /root/.ollama/import.gguf\\nPARAMETER num_ctx 16384\\n" > /tmp/mf && ollama create llama3.2:3b -f /tmp/mf'
    $CreateOk = ($LASTEXITCODE -eq 0)
    docker exec d0a1-wp-ollama rm -f /root/.ollama/import.gguf | Out-Null
    Remove-Item "$Gguf" -Force -ErrorAction SilentlyContinue
    $PullOk = $CreateOk
    if (-not $CreateOk) { Err 'Fallo al importar el modelo desde el GGUF.' }
} else {
    # Ultimo recurso: pull directo (1 intento, ya sin esperar 3 rondas)
    Warn 'HuggingFace no accesible. Probando el registry de Ollama (ultimo recurso)...'
    docker exec @ProxyEnv d0a1-wp-ollama ollama pull llama3.2:3b
    if ($LASTEXITCODE -eq 0) {
        $PullOk = $true
        # Contexto ampliado (el default 4096 da 400 en Open WebUI con prompts largos)
        docker exec d0a1-wp-ollama sh -c 'printf "FROM llama3.2:3b\\nPARAMETER num_ctx 16384\\n" > /tmp/mf && ollama create llama3.2:3b -f /tmp/mf'
    }
}
if (-not $PullOk) {
    Err 'No se pudo descargar el modelo (ni HuggingFace ni registry).'
    if (-not $env:HTTPS_PROXY) {
        Write-Host '  Tu red bloquea ambos. Si tienes proxy/VPN:'
        Write-Host '    $env:HTTPS_PROXY = "http://127.0.0.1:7890"   # (puerto de tu proxy)'
        Write-Host '    .\deploy.ps1 vps'
    }
    exit 1
}
}

# --- Done -------------------------------------------------------------------
Write-Host ''
Info 'Listo! Tu WordPress con IA esta corriendo.'
Write-Host ''
if ($Mode -eq 'local') {
    Write-Host "  ${Bold}WordPress:${NC} ${Cyan}http://localhost:${WpPort}${NC}"
    Write-Host "  ${Bold}IA (chat):${NC} ${Cyan}http://localhost:${WebUiPort}${NC}"
} else {
    Write-Host "  ${Bold}WordPress:${NC} ${Cyan}http://${Ip}:${WpPort}${NC}"
    Write-Host "  ${Bold}IA (chat):${NC} ${Cyan}http://${Ip}:${WebUiPort}${NC}"
}
Write-Host ''
Write-Host "  ${Bold}Configurar WordPress:${NC}"
Write-Host '  1. Abre la URL de WordPress en tu navegador'
Write-Host '  2. Sigue el asistente de instalacion (2 minutos)'
Write-Host "  3. Instala el plugin 'AI Agent Bridge' desde el panel"
Write-Host ''
Write-Host "  ${Bold}Parar:${NC} .\deploy.ps1 stop"
Write-Host "  ${Bold}¿Quieres mas?${NC} ${Cyan}https://d0a1.es/packs/${NC}"
Write-Host ''