#!/usr/bin/env bash
set -euo pipefail

TARGET_URL="${TARGET_URL:-https://example.com}"
SESSION_ID="${SESSION_ID:-unknown}"
IDLE_TIMEOUT="${IDLE_TIMEOUT:-1800}"
X11VNC_FLAGS="${X11VNC_FLAGS:--wait 5 -defer 5 -threads}"
ENABLE_HEARTBEAT="${ENABLE_HEARTBEAT:-1}"
TOUCH_PATH="${TOUCH_PATH:-/api/sessions/${SESSION_ID}/touch}"
UNIVERSAL_WEB="${UNIVERSAL_WEB:-0}"
START_URL="${START_URL:-about:blank}"
HOME_URL="${HOME_URL:-$TARGET_URL}"
SCREEN_GEOMETRY="${SCREEN_GEOMETRY:-1920x1080x24}"
CHROME_WINDOW_SIZE="${CHROME_WINDOW_SIZE:-1920,1080}"

if [ "$UNIVERSAL_WEB" = "1" ]; then
  HOME_URL="${HOME_URL:-$START_URL}"
fi

mkdir -p /opt/portal
cp -r /usr/share/novnc/* /opt/portal/

cat > /opt/portal/index.html <<HTML
<!doctype html>
<html>
<head>
  <meta charset="utf-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1" />
  <title>Инфрастуктурный полигон МОНТ</title>
  <style>
    html,body,#screen{margin:0;height:100%;background:#111}
    .nav-panel{
      position:fixed;left:16px;top:34px;z-index:99;display:flex;gap:10px;
      background:linear-gradient(180deg,rgba(15,24,36,.78),rgba(9,14,22,.86));border:1px solid rgba(255,255,255,.22);backdrop-filter: blur(5px);
      box-shadow:0 10px 28px rgba(0,0,0,.36);padding:9px 10px;border-radius:14px
    }
    .nav-btn{
      border:1px solid rgba(255,255,255,.26);border-radius:999px;padding:9px 14px;cursor:pointer;letter-spacing:.01em;
      background:linear-gradient(180deg,#2a8cd6,#1668a6);color:#fff;font:700 13px/1 sans-serif;box-shadow:inset 0 1px 0 rgba(255,255,255,.22),0 5px 12px rgba(10,46,78,.45)
    }
    .nav-btn:hover{filter:brightness(1.08)}
    .nav-btn:active{transform:translateY(1px)}
  </style>
</head>
<body>
  <div id="screen"></div>
  <div class="nav-panel">
    <button class="nav-btn" id="btn-back" type="button" title="Назад">←</button>
    <button class="nav-btn" id="btn-home" type="button" title="Главная">⌂</button>
  </div>
  <script type="module">
    import RFB from './core/rfb.js';
    const XK_ALT_L = 0xffe9;
        const XK_LEFT = 0xff51;
            const HOME_URL = ${HOME_URL@Q};
    const wsBase = location.pathname.replace(/\/+$/, '');
    const wsUrl = (location.protocol === 'https:' ? 'wss://' : 'ws://') + location.host + wsBase + '/websockify';
    const rfb = new RFB(document.getElementById('screen'), wsUrl);
    rfb.viewOnly = false;
    rfb.scaleViewport = true;
    rfb.resizeSession = true;
    const enableHeartbeat = "${ENABLE_HEARTBEAT}" === "1";
    const SESSION_CLOSED_URL_BASE = '/?session_closed=';
    const CLOSE_PATH = '${TOUCH_PATH}'.replace(/\/touch$/, '/close');
    function goSessionClosed(reason = 'idle') {
      const safeReason = reason === 'limit' ? 'limit' : 'idle';
      const target = `${SESSION_CLOSED_URL_BASE}${safeReason}`;
      try {
        if (window.top && window.top !== window) {
          window.top.location.href = target;
          return;
        }
      } catch (e) {}
      window.location.href = target;
    }
    async function touch() {
      try {
        const res = await fetch('${TOUCH_PATH}', {method:'POST', credentials:'include'});
        if (!res.ok) {
          let reason = 'idle';
          try {
            const payload = await res.json();
            if (payload && typeof payload.reason === 'string') {
              reason = payload.reason;
            }
          } catch (e) {}
          goSessionClosed(reason);
        }
      } catch(e) {}
    }
    let closing = false;
    async function closeSessionNow() {
      if (closing) return;
      closing = true;
      try {
        await fetch(CLOSE_PATH, {method: 'POST', credentials: 'include', keepalive: true});
      } catch (e) {}
    }
    if (enableHeartbeat) {
      setInterval(touch, 15000);
      touch();
      window.addEventListener('pagehide', closeSessionNow);
      window.addEventListener('beforeunload', closeSessionNow);
    }
    function keyTap(keysym, code) {
      rfb.sendKey(keysym, code, true);
      rfb.sendKey(keysym, code, false);
    }
    function chord(mod, key, modCode, keyCode) {
      rfb.sendKey(mod, modCode, true);
      keyTap(key, keyCode);
      rfb.sendKey(mod, modCode, false);
    }
    function typeText(text) {
      for (const ch of text) {
        const code = ch.codePointAt(0);
        keyTap(code, ch);
      }
    }
    function goHome() {
      try {
        if (window.top && window.top !== window) {
          window.top.location.href = '/';
          return;
        }
      } catch (e) {}
      window.location.href = '/';
    }
    document.getElementById('btn-back').addEventListener('click', () => chord(XK_ALT_L, XK_LEFT, "AltLeft", "ArrowLeft"));
    document.getElementById('btn-home').addEventListener('click', goHome);
    document.addEventListener('contextmenu', (e) => e.preventDefault());
  </script>
</body>
</html>
HTML

export DISPLAY=:1
Xvfb :1 -screen 0 "$SCREEN_GEOMETRY" &
fluxbox >/tmp/fluxbox.log 2>&1 &
sleep 1

if [ "$UNIVERSAL_WEB" = "1" ]; then
  chromium \
    --no-sandbox \
    --disable-dev-shm-usage \
    --disable-gpu \
    --use-gl=swiftshader \
    --kiosk \
    --remote-debugging-address=0.0.0.0 \
    --remote-debugging-port=9222 \
    --remote-allow-origins=* \
    --disable-translate \
    --disable-features=TranslateUI,ExtensionsToolbarMenu \
    --disable-pinch \
    --overscroll-history-navigation=0 \
    --ignore-certificate-errors \
    --allow-insecure-localhost \
    --allow-running-insecure-content \
    --window-size="$CHROME_WINDOW_SIZE" \
    --no-first-run \
    --no-default-browser-check \
    "$START_URL" \
    >/tmp/chromium.log 2>&1 &
  python3 /manager.py >/tmp/manager.log 2>&1 &
else
  chromium \
    --no-sandbox \
    --disable-dev-shm-usage \
    --disable-gpu \
    --use-gl=swiftshader \
    --kiosk \
    --app="$TARGET_URL" \
    --disable-translate \
    --disable-features=TranslateUI,ExtensionsToolbarMenu \
    --disable-pinch \
    --overscroll-history-navigation=0 \
    --ignore-certificate-errors \
    --allow-insecure-localhost \
    --allow-running-insecure-content \
    --window-size="$CHROME_WINDOW_SIZE" \
    --no-first-run \
    --no-default-browser-check \
    >/tmp/chromium.log 2>&1 &
fi

start_x11vnc_with_retry() {
  local display_arg="$1"
  local attempt=0
  while [ "$attempt" -lt 12 ]; do
    x11vnc -display "$display_arg" -rfbport 5900 -forever -shared -nopw -noxdamage $X11VNC_FLAGS >/tmp/x11vnc.log 2>&1 &
    local pid=$!
    sleep 1
    if kill -0 "$pid" 2>/dev/null; then
      return 0
    fi
    attempt=$((attempt + 1))
    sleep 0.5
  done
  return 1
}

start_x11vnc_with_retry ":1" || true

exec websockify --verbose --idle-timeout="$IDLE_TIMEOUT" --web=/opt/portal 6080 localhost:5900
