#!/usr/bin/env bash
set -Eeuo pipefail

ROOT="${ROOT:-/var/www/dhv2.korexlabs.com}"
API_URL="${API_URL:-http://127.0.0.1:3101/api/v3}"
TMP_MIGRATION="/tmp/dhv2-d53182-accept-migration-$$.log"
trap 'rm -f "$TMP_MIGRATION"' EXIT
cd "$ROOT"

echo "========== D5.3.18.2 · VERSIONES =========="
[[ "$(node -p "require('./api-v3/package.json').version")" == "0.19.3-18.2" ]]
[[ "$(node -p "require('./web-v2/package.json').version")" == "0.19.3-18.2" ]]
grep -Fq "API_PHASE = 'D5.3.18.2'" api-v3/src/version.ts
grep -Fq "APP_PHASE = 'Fase D5.3.18.2 · Expediente operativo'" web-v2/src/config/version.ts
echo "API: 0.19.3-18.2"
echo "WEB: 0.19.3-18.2"

echo
echo "========== D5.3.18.2 · DB Y MIGRACIONES =========="
[[ "$(docker inspect dhv2-db --format '{{.State.Health.Status}}')" == "healthy" ]]
docker compose exec -T db sh -lc 'pg_isready -U "$POSTGRES_USER" -d "$POSTGRES_DB"'
docker compose --profile tools run --rm migrate npm run migration:show 2>&1 | tee "$TMP_MIGRATION"
grep -Fq 'Pending migrations: no' "$TMP_MIGRATION"
docker compose exec -T db sh -lc 'psql -U "$POSTGRES_USER" -d "$POSTGRES_DB" -Atc "SELECT code FROM permissions WHERE code = '\''inspection_findings.close'\'';"' | grep -Fxq 'inspection_findings.close'
CLOSE_ROLES="$(docker compose exec -T db sh -lc 'psql -U "$POSTGRES_USER" -d "$POSTGRES_DB" -Atc "SELECT role.code FROM role_permissions rp JOIN roles role ON role.id=rp.role_id JOIN permissions permission ON permission.id=rp.permission_id WHERE permission.code='\''inspection_findings.close'\'' ORDER BY role.code;"')"
[[ "$CLOSE_ROLES" == $'director\ninspector\nsupervisor' ]]
echo "Cierre habilitado sólo para Director, Inspector y Supervisor: OK"

echo
echo "========== D5.3.18.2 · HEALTH =========="
HEALTH="$(curl -fsS "$API_URL/health")"
echo "$HEALTH"
grep -Fq '"version":"0.19.3-18.2"' <<<"$HEALTH"
grep -Fq '"phase":"D5.3.18.2"' <<<"$HEALTH"
grep -Fq '"database":"ok"' <<<"$HEALTH"

echo
echo "========== D5.3.18.2 · EXPEDIENTE OPERATIVO =========="
grep -Fq 'officeWorkflow' api-v3/src/inspection-findings/inspection-findings.service.ts
grep -Fq 'FindingOfficeWorkspace' web-v2/src/pages/FindingDetailPage.tsx
grep -Fq 'Dar curso al hallazgo' web-v2/src/features/inspections/FindingOfficeWorkspace.tsx
grep -Fq 'ACCIÓN RECOMENDADA' web-v2/src/features/inspections/FindingOfficeWorkspace.tsx
echo "Ficha única y acción recomendada: OK"

echo
echo "========== D5.3.18.2 · PRESENTACIONES APPEND-ONLY =========="
grep -Fq 'INSPECTION_FINDING_RESPONSE_IMMUTABLE' api-v3/src/inspection-findings/inspection-findings.service.ts
grep -Fq 'Nueva presentación / ampliación de la empresa' web-v2/src/features/inspections/FindingOfficeWorkspace.tsx
grep -Fq 'Primera respuesta registrada · inmutable' web-v2/src/features/inspections/FindingOfficeWorkspace.tsx
grep -Fq 'Agregar presentación' web-v2/src/features/inspections/FindingOfficeWorkspace.tsx
grep -Fq "type: 'COMPANY_RESPONSE'" web-v2/src/features/inspections/FindingOfficeWorkspace.tsx
echo "Respuesta original protegida y presentaciones sucesivas históricas: OK"

echo
echo "========== D5.3.18.2 · CIERRE CONTROLADO =========="
grep -Fq "@RequirePermissions('inspection_findings.close')" api-v3/src/inspection-findings/inspection-findings.controller.ts
grep -Fq "hasPermission('inspection_findings.close')" web-v2/src/pages/FindingDetailPage.tsx
grep -Fq 'El cierre está reservado a Inspector, Supervisor o Director.' web-v2/src/features/inspections/FindingOfficeWorkspace.tsx
echo "Cierre separado del seguimiento general: OK"

echo
echo "========== D5.3.18.2 · HIGIENE DE CÓDIGO =========="
if grep -RnhE --include='*.ts' --include='*.tsx' '^[[:space:]]*(//|/\*|\*)' api-v3/src web-v2/src; then
  echo "ERROR: quedaron comentarios narrativos en código de producción"
  exit 1
fi
if grep -nE '/\*|\*/' web-v2/src/styles.css; then
  echo "ERROR: quedaron comentarios internos en estilos de producción"
  exit 1
fi
echo "Código de producción preparado para revisión externa: OK"

echo
echo "========== D5.3.18.2 · SEGURIDAD HEREDADA =========="
STRONG_BACKUP="$(find /root/DH_V2_BACKUPS -maxdepth 1 -type d -name 'INVENTARIO_A_REVISAR_*' -printf '%T@ %p\n' | sort -nr | head -n1 | cut -d' ' -f2-)"
[[ -n "$STRONG_BACKUP" && -s "$STRONG_BACKUP/BACKUP_OK.txt" ]]
grep -Fq 'INVENTARIO A REVISAR' "$STRONG_BACKUP/BACKUP_OK.txt"
echo "Backup fuerte de referencia: $STRONG_BACKUP"

echo
echo "========== D5.3.18.2 · CONTENEDORES =========="
docker compose ps -a
[[ "$(docker inspect dhv2-db --format '{{.State.Health.Status}}')" == "healthy" ]]
[[ "$(docker inspect dhv2-api --format '{{.State.Status}}')" == "running" ]]
[[ "$(docker inspect dhv2-web --format '{{.State.Status}}')" == "running" ]]

echo
echo "ACEPTACIÓN DE FASE D5.3.18.2: OK"