#!/usr/bin/env bash
set -Eeuo pipefail

ROOT="${ROOT:-/var/www/dhv2.korexlabs.com}"
API_URL="${API_URL:-http://127.0.0.1:3101/api/v3}"
TMP_MIGRATION="/tmp/dhv2-d5324-accept-migration-$$.log"
trap 'rm -f "$TMP_MIGRATION"' EXIT
cd "$ROOT"

echo "========== D5.3.24 · VERSIONES =========="
[[ "$(node -p "require('./api-v3/package.json').version")" == "0.19.3-24" ]]
[[ "$(node -p "require('./web-v2/package.json').version")" == "0.19.3-24" ]]
grep -Fq "API_PHASE = 'D5.3.24'" api-v3/src/version.ts
grep -Fq "APP_PHASE = 'Fase D5.3.24 · Historial de contexto operativo'" web-v2/src/config/version.ts
echo "API: 0.19.3-24"
echo "WEB: 0.19.3-24"

echo
echo "========== D5.3.24 · DB Y MIGRACIONES =========="
[[ "$(docker inspect dhv2-db --format '{{.State.Health.Status}}')" == "healthy" ]]
docker compose exec -T db sh -lc 'pg_isready -U "$POSTGRES_USER" -d "$POSTGRES_DB"'
docker compose --profile tools run --rm migrate npm run migration:show 2>&1 | tee "$TMP_MIGRATION"
grep -Fq 'Pending migrations: no' "$TMP_MIGRATION"
docker compose exec -T db sh -lc 'psql -U "$POSTGRES_USER" -d "$POSTGRES_DB" -Atc "SELECT to_regclass('"'"'public.asset_context_history'"'"');"' | grep -Fxq 'asset_context_history'
for column in asset_id parent_id operational_area_id operator_company_id valid_from valid_until change_reason end_reason asset_version_number source request_id created_by ended_by; do
  docker compose exec -T db sh -lc "psql -U \"\$POSTGRES_USER\" -d \"\$POSTGRES_DB\" -Atc \"SELECT column_name FROM information_schema.columns WHERE table_name='asset_context_history' AND column_name='$column';\"" | grep -Fxq "$column"
done
ACTIVE_DUPLICATES="$(docker compose exec -T db sh -lc 'psql -U "$POSTGRES_USER" -d "$POSTGRES_DB" -Atc "SELECT COUNT(*) FROM (SELECT asset_id FROM asset_context_history WHERE valid_until IS NULL GROUP BY asset_id HAVING COUNT(*)>1) duplicated;"')"
[[ "$ACTIVE_DUPLICATES" == "0" ]]
ASSET_COUNT="$(docker compose exec -T db sh -lc 'psql -U "$POSTGRES_USER" -d "$POSTGRES_DB" -Atc "SELECT COUNT(*) FROM assets;"')"
ACTIVE_CONTEXT_COUNT="$(docker compose exec -T db sh -lc 'psql -U "$POSTGRES_USER" -d "$POSTGRES_DB" -Atc "SELECT COUNT(*) FROM asset_context_history WHERE valid_until IS NULL;"')"
[[ "$ACTIVE_CONTEXT_COUNT" == "$ASSET_COUNT" ]]
echo "Historial temporal de jerarquía, Área y Operadora presente: OK"

echo
echo "========== D5.3.24 · PERMISO DE CAMBIO =========="
docker compose exec -T db sh -lc 'psql -U "$POSTGRES_USER" -d "$POSTGRES_DB" -Atc "SELECT code FROM permissions WHERE code='"'"'assets.manage_context'"'"';"' | grep -Fxq 'assets.manage_context'
for role in admin supervisor; do
  docker compose exec -T db sh -lc "psql -U \"\$POSTGRES_USER\" -d \"\$POSTGRES_DB\" -Atc \"SELECT r.code FROM role_permissions rp JOIN roles r ON r.id=rp.role_id JOIN permissions p ON p.id=rp.permission_id WHERE p.code='assets.manage_context' AND r.code='$role';\"" | grep -Fxq "$role"
done
if docker compose exec -T db sh -lc 'psql -U "$POSTGRES_USER" -d "$POSTGRES_DB" -Atc "SELECT r.code FROM role_permissions rp JOIN roles r ON r.id=rp.role_id JOIN permissions p ON p.id=rp.permission_id WHERE p.code='"'"'assets.manage_context'"'"' AND r.code='"'"'inspector'"'"';"' | grep -q .; then
  echo "ERROR: Inspector no debe poder transferir el contexto de un Inventario consolidado"
  exit 1
fi
echo "Cambio formal de contexto reservado a administración de oficina: OK"

echo
echo "========== D5.3.24 · HEALTH =========="
HEALTH="$(curl -fsS "$API_URL/health")"
echo "$HEALTH"
grep -Fq '"version":"0.19.3-24"' <<<"$HEALTH"
grep -Fq '"phase":"D5.3.24"' <<<"$HEALTH"
grep -Fq '"database":"ok"' <<<"$HEALTH"

echo
echo "========== D5.3.24 · HISTORIA NO DESTRUCTIVA =========="
grep -Fq 'FROM asset_versions version' api-v3/src/database/migrations/1788804000000-phase-d5-3-24-asset-context-history.ts
grep -Fq 'ASSET_CONTEXT_CHANGE_REQUIRES_TRANSFER' api-v3/src/asset-master/assets.service.ts
grep -Fq 'AssetVersionChangeType.CONTEXT_CHANGED' api-v3/src/asset-master/assets.service.ts
grep -Fq 'AuditAction.ASSET_CONTEXT_CHANGED' api-v3/src/asset-master/assets.service.ts
if grep -Fq 'DELETE FROM asset_context_history' api-v3/src/asset-master/assets.service.ts; then exit 1; fi
echo "Cambio actual conserva contexto anterior y genera versión/auditoría: OK"

echo
echo "========== D5.3.24 · RECONSTRUCCIÓN TEMPORAL =========="
grep -Fq 'FROM asset_context_history history' api-v3/src/asset-master/asset-temporal.service.ts
grep -Fq 'history.valid_from <= $2' api-v3/src/asset-master/asset-temporal.service.ts
grep -Fq 'history.valid_until IS NULL OR history.valid_until > $2' api-v3/src/asset-master/asset-temporal.service.ts
grep -Fq "@Get(':id/context-history')" api-v3/src/asset-master/assets.controller.ts
grep -Fq "@Post(':id/context')" api-v3/src/asset-master/assets.controller.ts
echo "La consulta histórica resuelve el contexto vigente en la fecha solicitada: OK"

echo
echo "========== D5.3.24 · FLUJO WEB =========="
grep -Fq 'Jerarquía, Área y Operadora' web-v2/src/features/assets/AssetContextHistoryPanel.tsx
grep -Fq 'Cambiar contexto' web-v2/src/features/assets/AssetContextHistoryPanel.tsx
grep -Fq 'Historial de contexto' web-v2/src/features/assets/AssetContextHistoryPanel.tsx
grep -Fq 'canDirectContextEdit' web-v2/src/pages/AssetEditorPage.tsx
grep -Fq "hasPermission('assets.manage_context')" web-v2/src/pages/AssetEditorPage.tsx
echo "Inventario muestra contexto vigente, historial y cambio con motivo/fecha: OK"

echo
echo "========== D5.3.24 · REGLAS PRESERVADAS =========="
grep -Fq 'INSPECTION_VISIT_ACT_ALREADY_EXISTS' api-v3/src/inspection-acts/inspection-acts.service.ts
grep -Fq 'INSPECTION_FINDING_RESPONSE_IMMUTABLE' api-v3/src/inspection-findings/inspection-findings.service.ts
if grep -Fq 'UPDATE inspection_findings SET asset_id' api-v3/src/asset-master/assets.service.ts; then exit 1; fi
echo "Una visita = una Acta y documentos/hallazgos históricos no se reescriben: OK"

echo
echo "========== D5.3.24 · SMTP =========="
SMTP_STATE="$(docker compose exec -T api sh -lc 'if [ -n "$SMTP_HOST" ] && [ -n "$MAIL_FROM" ]; then echo configured; else echo pending; fi')"
if [[ "$SMTP_STATE" == "configured" ]]; then echo "SMTP configurado"; else echo "SMTP sigue pendiente y no bloquea esta fase"; fi

echo
echo "========== D5.3.24 · HIGIENE DE CÓDIGO =========="
if grep -RnhE --include='*.ts' --include='*.tsx' '^[[:space:]]*(//|/\*|\*)' api-v3/src web-v2/src; then
  echo "ERROR: quedaron comentarios narrativos en código de producción"
  exit 1
fi
if grep -nE '/\*|\*/' web-v2/src/styles.css; then
  echo "ERROR: quedaron comentarios internos en estilos de producción"
  exit 1
fi
echo "Código de producción preparado para revisión externa: OK"

echo
echo "========== D5.3.24 · SEGURIDAD HEREDADA =========="
STRONG_BACKUP="$(find /root/DH_V2_BACKUPS -maxdepth 1 -type d -name 'INVENTARIO_A_REVISAR_*' -printf '%T@ %p\n' | sort -nr | head -n1 | cut -d' ' -f2-)"
[[ -n "$STRONG_BACKUP" && -s "$STRONG_BACKUP/BACKUP_OK.txt" ]]
grep -Fq 'INVENTARIO A REVISAR' "$STRONG_BACKUP/BACKUP_OK.txt"
echo "Backup fuerte de referencia: $STRONG_BACKUP"

echo
echo "========== D5.3.24 · CONTENEDORES =========="
docker compose ps -a
[[ "$(docker inspect dhv2-db --format '{{.State.Health.Status}}')" == "healthy" ]]
[[ "$(docker inspect dhv2-api --format '{{.State.Status}}')" == "running" ]]
[[ "$(docker inspect dhv2-web --format '{{.State.Status}}')" == "running" ]]

echo
echo "ACEPTACIÓN DE FASE D5.3.24: OK"