#!/bin/bash
# check-aw-data.sh - Проверка сбора данных ActivityWatch с RDP-сервера HOST-EXAMPLE
# Сервер: 192.0.2.13:5600
# Хост-источник: 198.51.100.18 (HOST-EXAMPLE)

SERVER="http://192.0.2.13:5600"
HOSTNAME_FILTER="HOST-EXAMPLE"
NOW=$(date -u +%s)
HOST_INACTIVE=false
GUARD_HEALTHY=false

classify_bucket_age() {
    local bucket="$1"
    local age_sec="$2"

    case "$bucket" in
        aw-watcher-window)
            if [ "$HOST_INACTIVE" = "true" ]; then
                printf '%s' "${CYAN}INACTIVE${NC}"
                return
            fi
            ;;
        aw-dlp-endpoint-signals)
            if [ "$HOST_INACTIVE" = "true" ] && [ "$GUARD_HEALTHY" = "true" ]; then
                printf '%s' "${CYAN}INACTIVE${NC}"
                return
            fi
            ;;
    esac

    case "$bucket" in
        aw-dlp-incidents|aw-dlp-review|aw-dlp-rules|aw-session-events)
            if [ "$age_sec" -lt 86400 ]; then
                printf '%s' "${GREEN}FRESH${NC}"
            else
                printf '%s' "${CYAN}EVENT-DRIVEN${NC}"
            fi
            ;;
        *)
            if [ "$age_sec" -lt 3600 ]; then
                printf '%s' "${GREEN}FRESH${NC}"
            elif [ "$age_sec" -lt 86400 ]; then
                printf '%s' "${YELLOW}STALE${NC}"
            else
                printf '%s' "${RED}DEAD${NC}"
            fi
            ;;
    esac
}

classify_bucket_no_events() {
    local bucket="$1"

    case "$bucket" in
        aw-watcher-window)
            if [ "$HOST_INACTIVE" = "true" ]; then
                printf '%s' "${CYAN}INACTIVE${NC}"
                return
            fi
            ;;
        aw-dlp-endpoint-signals)
            if [ "$HOST_INACTIVE" = "true" ] && [ "$GUARD_HEALTHY" = "true" ]; then
                printf '%s' "${CYAN}INACTIVE${NC}"
                return
            fi
            ;;
        aw-dlp-incidents|aw-dlp-review|aw-dlp-rules|aw-session-events)
            printf '%s' "${CYAN}EVENT-DRIVEN${NC}"
            return
            ;;
    esac

    printf '%s' "${RED}EMPTY${NC}"
}

# Цвета
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
CYAN='\033[0;36m'
NC='\033[0m'

# Проверка доступности сервера
echo "=== ActivityWatch Data Check: $HOSTNAME_FILTER ==="
echo ""
echo -n "Server connectivity... "
RESP=$(no_proxy=192.0.2.13 curl -s --connect-timeout 10 --max-time 15 "$SERVER/api/0/info" 2>&1)
if [ $? -eq 0 ] && echo "$RESP" | jq -e '.version' > /dev/null 2>&1; then
    VERSION=$(echo "$RESP" | jq -r '.version')
    echo -e "${GREEN}OK${NC} (aw-server $VERSION)"
else
    echo -e "${RED}FAILED${NC} (cannot reach $SERVER)"
    exit 1
fi
echo ""

# Context for inactive/event-driven classification.
WORKTIME_EVENT_DATA=$(no_proxy=192.0.2.13 curl -s --connect-timeout 10 --max-time 15 "$SERVER/api/0/buckets/aw-worktime-sessions_$HOSTNAME_FILTER/events?limit=1" 2>&1)
WORKTIME_TS=$(echo "$WORKTIME_EVENT_DATA" | jq -r '.[0].timestamp // ""' 2>/dev/null)
WORKTIME_ACTIVE=$(echo "$WORKTIME_EVENT_DATA" | jq -r '.[0].data.active // false' 2>/dev/null)
if [ -n "$WORKTIME_TS" ]; then
  WORKTIME_EPOCH=$(date -d "$WORKTIME_TS" +%s 2>/dev/null || echo 0)
  if [ "$WORKTIME_EPOCH" -gt 0 ]; then
    WORKTIME_AGE=$((NOW - WORKTIME_EPOCH))
    if [ "$WORKTIME_AGE" -lt 900 ] && [ "$WORKTIME_ACTIVE" != "true" ]; then
      HOST_INACTIVE=true
    fi
  fi
fi

GUARD_EVENT_DATA=$(no_proxy=192.0.2.13 curl -s --connect-timeout 10 --max-time 15 "$SERVER/api/0/buckets/aw-rus-collector-guard_$HOSTNAME_FILTER/events?limit=1" 2>&1)
GUARD_TS=$(echo "$GUARD_EVENT_DATA" | jq -r '.[0].timestamp // ""' 2>/dev/null)
GUARD_STATUS=$(echo "$GUARD_EVENT_DATA" | jq -r '.[0].data.status // ""' 2>/dev/null)
GUARD_PROBLEMS=$(echo "$GUARD_EVENT_DATA" | jq -r '([.[0].data.problems[]?] | length) // 0' 2>/dev/null)
if [ -n "$GUARD_TS" ]; then
  GUARD_EPOCH=$(date -d "$GUARD_TS" +%s 2>/dev/null || echo 0)
  if [ "$GUARD_EPOCH" -gt 0 ]; then
    GUARD_AGE=$((NOW - GUARD_EPOCH))
    if [ "$GUARD_AGE" -lt 300 ] && [ "$GUARD_STATUS" = "ok" ] && [ "$GUARD_PROBLEMS" = "0" ]; then
      GUARD_HEALTHY=true
    fi
  fi
fi

# Проверка бакетов
echo "--- Buckets ---"
printf "%-45s %-8s %-22s %s\n" "BUCKET" "EVENTS" "LAST EVENT" "STATUS"
printf "%-45s %-8s %-22s %s\n" "---------------------------------------------" "--------" "----------------------" "------"

BUCKETS=(
  "aw-dlp-endpoint-signals"
  "aw-dlp-incidents"
  "aw-dlp-review"
  "aw-dlp-rules"
  "aw-watcher-afk"
  "aw-watcher-window"
  "aw-session-events"
  "aw-worktime-sessions"
)

for bucket in "${BUCKETS[@]}"; do
  bucket_full="${bucket}_${HOSTNAME_FILTER}"
  
  # Получаем последний event
  EVENT_DATA=$(no_proxy=192.0.2.13 curl -s --connect-timeout 10 --max-time 15 "$SERVER/api/0/buckets/$bucket_full/events?limit=1" 2>&1)
  LAST_ID=$(echo "$EVENT_DATA" | jq '.[0].id // 0')
  LAST_TS=$(echo "$EVENT_DATA" | jq -r '.[0].timestamp // "no events"')
  
  # Вычисляем возраст
  if [ "$LAST_TS" != "no events" ] && [ -n "$LAST_TS" ]; then
    EVENT_EPOCH=$(date -d "$LAST_TS" +%s 2>/dev/null || echo 0)
    if [ "$EVENT_EPOCH" -gt 0 ]; then
      AGE_SEC=$((NOW - EVENT_EPOCH))
      if [ $AGE_SEC -lt 3600 ]; then
        AGE="$((AGE_SEC / 60))m ago"
      elif [ $AGE_SEC -lt 86400 ]; then
        AGE="$((AGE_SEC / 3600))h ago"
      else
        AGE="$((AGE_SEC / 86400))d ago"
      fi
      STATUS="$(classify_bucket_age "$bucket" "$AGE_SEC")"
    else
      AGE="unknown"
      STATUS="${RED}?${NC}"
    fi
  else
    AGE="none"
    LAST_ID="0"
    STATUS="$(classify_bucket_no_events "$bucket")"
  fi
  
  printf "%-45s %-8s %-22s %b\n" "$bucket_full" "$LAST_ID" "$LAST_TS ($AGE)" "$STATUS"
done

echo ""

# Проверка CORS
echo "--- CORS Check ---"
CORS_RESP=$(no_proxy=192.0.2.13 curl -s --connect-timeout 10 --max-time 15 -o /dev/null -w '%{http_code}' -H "Origin: http://192.0.2.13:5600" "$SERVER/api/0/settings/" 2>&1)
if [ "$CORS_RESP" = "200" ]; then
    echo -e "${GREEN}CORS: OK${NC} (HTTP 200)"
else
    echo -e "${RED}CORS: FAIL${NC} (HTTP $CORS_RESP)"
fi

echo ""
echo "=== Check Complete ==="
echo "Timestamp: $(date -u '+%Y-%m-%d %H:%M:%S UTC')"