<#
.SYNOPSIS
    Obnovlyaet klon RDP-login-monitor s git.kalinamall.ru i kopiruet dist na NETLOGON.
.DESCRIPTION
    Dlya servera publikatsii (napr. DC3). Ne trebuet imenovaniya remote: pri otsutstvii
    dobavlyaetsya origin ili vypolnyaetsya git pull po URL.
    Kopiruyutsya: polnyj spisok v Docs/deploy-netlogon-publish.md.
.EXAMPLE
    powershell.exe -NoProfile -ExecutionPolicy Bypass -File C:\soft\update-rdp-monitor.ps1
.EXAMPLE
    powershell.exe -NoProfile -ExecutionPolicy Bypass -File C:\soft\update-rdp-monitor.ps1 -WhatIf
#>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
    [string]$RepoPath = 'C:\Soft\Git\RDP-login-monitor',
    [string]$NetlogonDest = '\\b26\NETLOGON\RDP-login-monitor',
    [string]$GitUrl = 'https://git.kalinamall.ru/PapaTramp/RDP-login-monitor.git',
    [string]$GitBranch = 'main',
    [string]$LogFile = 'C:\soft\Logs\update-rdp-monitor.log'
)

$ErrorActionPreference = 'Stop'
$DistFiles = @(
    'Login_Monitor.ps1',
    'version.txt',
    'Deploy-LoginMonitor.ps1',
    'Exchange-MailSecurity.ps1',
    'Notify-Common.ps1',
    'Install-DomainMonitors.ps1',
    'Deploy-DomainMonitors.ps1',
    'exchange_monitor.settings.example.ps1'
)

function Write-UpdateLog {
    param([string]$Message)
    $line = '[{0}] {1}' -f (Get-Date -Format 'yyyy-MM-dd HH:mm:ss'), $Message
    Write-Host $line
    $dir = Split-Path -Parent $LogFile
    if (-not (Test-Path -LiteralPath $dir)) {
        New-Item -ItemType Directory -Path $dir -Force | Out-Null
    }
    $utf8Bom = New-Object System.Text.UTF8Encoding $true
    [System.IO.File]::AppendAllText($LogFile, $line + [Environment]::NewLine, $utf8Bom)
}

function Invoke-GitCommand {
    param(
        [Parameter(Mandatory = $true)][string[]]$Arguments,
        [string]$WorkingDirectory = $RepoPath
    )
    $prevEap = $ErrorActionPreference
    $ErrorActionPreference = 'Continue'
    try {
        Push-Location -LiteralPath $WorkingDirectory
        $out = & git @Arguments 2>&1
        $code = $LASTEXITCODE
    } finally {
        Pop-Location
        $ErrorActionPreference = $prevEap
    }
    foreach ($line in @($out)) {
        if ($null -ne $line -and "$line".Length -gt 0) {
            Write-UpdateLog "git: $line"
        }
    }
    if ($code -ne 0) {
        throw ("git {0} failed (exit {1})" -f ($Arguments -join ' '), $code)
    }
    return @($out)
}

function Ensure-GitAvailable {
    if (-not (Get-Command git -ErrorAction SilentlyContinue)) {
        throw 'git.exe not found in PATH. Install Git for Windows.'
    }
}

function Ensure-GitRepository {
    $gitDir = Join-Path $RepoPath '.git'
    if (-not (Test-Path -LiteralPath $gitDir)) {
        throw "Not a git repo (no .git): $RepoPath. Clone first: git clone $GitUrl `"$RepoPath`""
    }
}

function Get-ConfiguredGitRemoteName {
    $names = @(Invoke-GitCommand -Arguments @('remote') | ForEach-Object { "$_".Trim() } | Where-Object { $_ })
    if ($names.Count -gt 0) {
        if ('origin' -in $names) { return 'origin' }
        return $names[0]
    }
    return $null
}

function Ensure-GitOriginRemote {
    $name = Get-ConfiguredGitRemoteName
    if ($null -ne $name) {
        Write-UpdateLog "Using remote: $name"
        return $name
    }
    Write-UpdateLog "No remotes; adding origin -> $GitUrl"
    Invoke-GitCommand -Arguments @('remote', 'add', 'origin', $GitUrl)
    return 'origin'
}

function Update-Repository {
    Ensure-GitRepository
    $remote = Ensure-GitOriginRemote
    Invoke-GitCommand -Arguments @('fetch', $remote, $GitBranch)
    Invoke-GitCommand -Arguments @('pull', $remote, $GitBranch)
    $null = Invoke-GitCommand -Arguments @('rev-parse', '--short', 'HEAD')
}

function Copy-FileToNetlogon {
    param(
        [Parameter(Mandatory = $true)][string]$SourcePath,
        [Parameter(Mandatory = $true)][string]$DestPath
    )
    if ($SourcePath -like '*.ps1') {
        $raw = [System.IO.File]::ReadAllBytes($SourcePath)
        $utf8NoBom = New-Object System.Text.UTF8Encoding $false
        $text = $utf8NoBom.GetString($raw)
        if ($text.Length -gt 0 -and [int][char]$text[0] -eq 0xFEFF) {
            $text = $text.Substring(1)
        }
        $utf8Bom = New-Object System.Text.UTF8Encoding $true
        [System.IO.File]::WriteAllText($DestPath, $text, $utf8Bom)
        return
    }
    Copy-Item -LiteralPath $SourcePath -Destination $DestPath -Force
}

function Publish-DistributionFiles {
    if (-not (Test-Path -LiteralPath $NetlogonDest)) {
        if ($PSCmdlet.ShouldProcess($NetlogonDest, 'Create directory')) {
            New-Item -ItemType Directory -Path $NetlogonDest -Force | Out-Null
            Write-UpdateLog "Created: $NetlogonDest"
        }
    }
    foreach ($name in $DistFiles) {
        $src = Join-Path $RepoPath $name
        if (-not (Test-Path -LiteralPath $src)) {
            throw "Missing in repo: $src"
        }
        $dst = Join-Path $NetlogonDest $name
        if ($PSCmdlet.ShouldProcess($dst, "Copy from $src")) {
            Copy-FileToNetlogon -SourcePath $src -DestPath $dst
            Write-UpdateLog "Copied: $name -> $NetlogonDest"
        }
    }
    $verFile = Join-Path $NetlogonDest 'version.txt'
    if (Test-Path -LiteralPath $verFile) {
        $ver = (Get-Content -LiteralPath $verFile -Raw).Trim()
        Write-UpdateLog "NETLOGON version: $ver"
    }
}

try {
    Write-UpdateLog '=== RDP-login-monitor: git pull -> NETLOGON ==='
    Ensure-GitAvailable
    Update-Repository
    Publish-DistributionFiles
    Write-UpdateLog '=== Done ==='
    exit 0
} catch {
    Write-UpdateLog "ERROR: $($_.Exception.Message)"
    exit 1
}