#!/usr/bin/env bash
set -euo pipefail

PGVER=17
CONF="/etc/postgresql/${PGVER}/main/postgresql.conf"
HBA="/etc/postgresql/${PGVER}/main/pg_hba.conf"
APP_USER="eva_mem_app"
DB_NAME="eva_memory"
APP_PASS="$(tr -dc 'A-Za-z0-9@#%+=' </dev/urandom | head -c 24)"

sed -i "s/^#\?listen_addresses.*/listen_addresses = '0.0.0.0'/" "$CONF"
if ! grep -q "eva_memory access" "$HBA"; then
  cat >> "$HBA" <<'EOFHBA'
# eva_memory access
host    all             all             127.0.0.1/32            scram-sha-256
host    all             all             192.168.0.8/32          scram-sha-256
EOFHBA
fi
systemctl restart postgresql

su - postgres -c "psql -v ON_ERROR_STOP=1 <<SQL
DO
\$\$BEGIN
  IF NOT EXISTS (SELECT FROM pg_roles WHERE rolname='${APP_USER}') THEN
    CREATE ROLE ${APP_USER} LOGIN PASSWORD '${APP_PASS}';
  ELSE
    ALTER ROLE ${APP_USER} WITH PASSWORD '${APP_PASS}';
  END IF;
END
\$\$;
SQL"

if ! su - postgres -c "psql -tAc \"SELECT 1 FROM pg_database WHERE datname='${DB_NAME}'\"" | grep -q 1; then
  su - postgres -c "createdb -O ${APP_USER} ${DB_NAME}"
fi

su - postgres -c "psql -d ${DB_NAME} -v ON_ERROR_STOP=1 <<'SQL'
CREATE EXTENSION IF NOT EXISTS vector;
CREATE TABLE IF NOT EXISTS mem_items (
  id BIGSERIAL PRIMARY KEY,
  item_type TEXT NOT NULL,
  title TEXT,
  content TEXT NOT NULL,
  tags TEXT[] DEFAULT '{}',
  source_path TEXT,
  created_at TIMESTAMPTZ DEFAULT now(),
  updated_at TIMESTAMPTZ DEFAULT now()
);
CREATE TABLE IF NOT EXISTS mem_vectors (
  item_id BIGINT PRIMARY KEY REFERENCES mem_items(id) ON DELETE CASCADE,
  embedding vector(1536),
  model TEXT,
  created_at TIMESTAMPTZ DEFAULT now()
);
CREATE INDEX IF NOT EXISTS idx_mem_items_type ON mem_items(item_type);
CREATE INDEX IF NOT EXISTS idx_mem_items_updated ON mem_items(updated_at DESC);
SQL"

su - postgres -c "psql -d ${DB_NAME} -v ON_ERROR_STOP=1 <<SQL
GRANT CONNECT ON DATABASE ${DB_NAME} TO ${APP_USER};
GRANT USAGE ON SCHEMA public TO ${APP_USER};
GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA public TO ${APP_USER};
GRANT USAGE, SELECT ON ALL SEQUENCES IN SCHEMA public TO ${APP_USER};
ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES TO ${APP_USER};
ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT USAGE, SELECT ON SEQUENCES TO ${APP_USER};
SQL"

install -m 700 -d /etc/eva-memory
cat > /etc/eva-memory/connection.env <<EOF
DB_HOST=192.168.0.135
DB_PORT=5432
DB_NAME=${DB_NAME}
DB_USER=${APP_USER}
DB_PASS=${APP_PASS}
EOF
chmod 600 /etc/eva-memory/connection.env

echo "DONE"