#!/usr/bin/env bash

# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
# SPDX-License-Identifier: Apache-2.0

set -euo pipefail

component=${1:-}
if [ -z "${component}" ]; then
  echo "usage: $0 <server|sandbox>" >&2
  exit 1
fi

case "${component}" in
  server|sandbox)
    ;;
  *)
    echo "invalid component '${component}'; expected server or sandbox" >&2
    exit 1
    ;;
esac

IMAGE_TAG=${IMAGE_TAG:-dev}
IMAGE_REPO_BASE=${IMAGE_REPO_BASE:-${NEMOCLAW_REGISTRY:-127.0.0.1:5000/navigator}}
CLUSTER_NAME=${CLUSTER_NAME:-$(basename "$PWD")}
CONTAINER_NAME="navigator-cluster-${CLUSTER_NAME}"
SOURCE_IMAGE="navigator/${component}:${IMAGE_TAG}"
TARGET_IMAGE="${IMAGE_REPO_BASE}/${component}:${IMAGE_TAG}"

source_candidates=(
  "navigator/${component}:${IMAGE_TAG}"
  "localhost:5000/navigator/${component}:${IMAGE_TAG}"
  "127.0.0.1:5000/navigator/${component}:${IMAGE_TAG}"
)

resolved_source_image=""
for candidate in "${source_candidates[@]}"; do
  if docker image inspect "${candidate}" >/dev/null 2>&1; then
    resolved_source_image="${candidate}"
    break
  fi
done

if [ -z "${resolved_source_image}" ]; then
  echo "missing local image for ${component}:${IMAGE_TAG}" >&2
  echo "checked candidates:" >&2
  for candidate in "${source_candidates[@]}"; do
    echo "  ${candidate}" >&2
  done
  echo "build it first with either:" >&2
  echo "  mise run docker:build:${component}" >&2
  echo "  mise run cluster" >&2
  exit 1
fi

docker tag "${resolved_source_image}" "${TARGET_IMAGE}"
docker push "${TARGET_IMAGE}"

# Evict the stale image from k3s's containerd cache so new pods pull the
# updated image. Without this, k3s uses its cached copy (imagePullPolicy
# defaults to IfNotPresent for non-:latest tags) and pods run stale code.
if docker ps -q --filter "name=${CONTAINER_NAME}" | grep -q .; then
  docker exec "${CONTAINER_NAME}" crictl rmi "${TARGET_IMAGE}" >/dev/null 2>&1 || true
fi