#!/usr/bin/env bash
set -Eeuo pipefail

ROOT="${ROOT:-/var/www/dhv2.korexlabs.com}"
API_URL="${API_URL:-http://127.0.0.1:3101/api/v3}"
TMP_MIGRATION="/tmp/dhv2-d55-accept-migration-$$.log"
trap 'rm -f "$TMP_MIGRATION"' EXIT
cd "$ROOT"

echo "========== D5.5.2 · VERSIONES =========="
[[ "$(node -p "require('./api-v3/package.json').version")" == "0.19.5-2" ]]
[[ "$(node -p "require('./web-v2/package.json').version")" == "0.19.5-2" ]]
grep -Fq "API_PHASE = 'D5.5.2'" api-v3/src/version.ts
grep -Fq "APP_PHASE = 'Fase D5.5.2 · Planificación web y checklist'" web-v2/src/config/version.ts
echo "API: 0.19.5-2"
echo "WEB: 0.19.5-2"

echo
echo "========== D5.5.2 · DB Y MIGRACIONES =========="
[[ "$(docker inspect dhv2-db --format '{{.State.Health.Status}}')" == "healthy" ]]
docker compose exec -T db sh -lc 'pg_isready -U "$POSTGRES_USER" -d "$POSTGRES_DB"'
docker compose --profile tools run --rm migrate npm run migration:show 2>&1 | tee "$TMP_MIGRATION"
grep -Fq 'Pending migrations: no' "$TMP_MIGRATION"
for table in inspection_visit_checklist_items inspection_visit_asset_events; do
  docker compose exec -T db sh -lc "psql -U \"\$POSTGRES_USER\" -d \"\$POSTGRES_DB\" -Atc \"SELECT to_regclass('public.$table');\"" | grep -Fxq "$table"
done
for spec in \
  'inspection_visits:operational_area_id' \
  'inspection_visits:operator_company_id' \
  'inspection_visits:checklist_generation' \
  'inspection_visits:checklist_generated_at' \
  'inspection_visit_assets:planning_source' \
  'inspection_visit_assets:exclusion_reason' \
  'inspection_visit_assets:excluded_by' \
  'inspection_visit_assets:excluded_at'; do
  table="${spec%%:*}"; column="${spec##*:}"
  docker compose exec -T db sh -lc "psql -U \"\$POSTGRES_USER\" -d \"\$POSTGRES_DB\" -Atc \"SELECT column_name FROM information_schema.columns WHERE table_name='$table' AND column_name='$column';\"" | grep -Fxq "$column"
done
echo "Contexto Área/Operadora, checklist y ledger de planificación presentes: OK"

echo
echo "========== D5.5.2 · HEALTH =========="
HEALTH="$(curl -fsS "$API_URL/health")"
echo "$HEALTH"
grep -Fq '"version":"0.19.5-2"' <<<"$HEALTH"
grep -Fq '"phase":"D5.5.2"' <<<"$HEALTH"
grep -Fq '"database":"ok"' <<<"$HEALTH"

echo
echo "========== D5.5.2 · ÁREA → OPERADORA =========="
grep -Fq "@Get('planning-context/areas')" api-v3/src/inspection-visits/inspection-visits.controller.ts
grep -Fq "@Get('planning-context/areas/:areaId/operators')" api-v3/src/inspection-visits/inspection-visits.controller.ts
grep -Fq "relation.relation_role = 'OPERATOR'" api-v3/src/inspection-visits/inspection-visits.service.ts
grep -Fq 'INSPECTION_OPERATOR_NOT_ACTIVE_IN_AREA' api-v3/src/inspection-visits/inspection-visits.service.ts
grep -Fq 'Área → Operadora → fecha' web-v2/src/pages/InspectionVisitEditorPage.tsx
echo "Oficina selecciona Área y sólo Operadoras con relación OPERATOR vigente: OK"

echo
echo "========== D5.5.2 · CHECKLIST VERSIONADO =========="
grep -Fq "@Post(':id/checklist/generate')" api-v3/src/inspection-visits/inspection-visits.controller.ts
grep -Fq 'CREATE TABLE inspection_visit_checklist_items' api-v3/src/database/migrations/1789063200000-phase-d5-5-web-planning-checklist.ts
grep -Fq 'generation_number integer NOT NULL' api-v3/src/database/migrations/1789063200000-phase-d5-5-web-planning-checklist.ts
grep -Fq 'visit.checklistGeneratedAt = null' api-v3/src/inspection-visits/inspection-visits.service.ts
grep -Fq 'INSPECTION_CHECKLIST_REQUIRED' api-v3/src/inspection-visits/inspection-visits.service.ts
echo "Cada regeneración conserva la anterior y cambios de contexto/fecha exigen revisión nueva: OK"

echo
echo "========== D5.5.2 · ANTECEDENTES Y VENCIMIENTOS =========="
for kind in COMPANY_OVERDUE VERIFICATION_OVERDUE UPCOMING_CONTROL ANTECEDENT; do
  grep -Fq "'$kind'" api-v3/src/inspection-visits/inspection-visits.service.ts
done
grep -Fq "item_kind IN ('COMPANY_OVERDUE','VERIFICATION_OVERDUE','UPCOMING_CONTROL')" api-v3/src/inspection-visits/inspection-visits.service.ts
grep -Fq "'AUTO_INCLUDED'" api-v3/src/inspection-visits/inspection-visits.service.ts
echo "Respuestas vencidas, controles vencidos, próximos 30 días y antecedentes alimentan el plan: OK"

echo
echo "========== D5.5.2 · PREVENTIVOS Y EXCLUSIONES =========="
grep -Fq "'PREVENTIVE'" api-v3/src/inspection-visits/inspection-visits.service.ts
grep -Fq 'INSPECTION_EXCLUSION_REASON_REQUIRED' api-v3/src/inspection-visits/inspection-visits.service.ts
grep -Fq 'INSPECTION_REINCLUDE_REQUIRED' api-v3/src/inspection-visits/inspection-visits.service.ts
grep -Fq '@MinLength(10)' api-v3/src/inspection-visits/dto/exclude-inspection-visit-asset.dto.ts
grep -Fq 'INSPECTION_VISIT_ASSET_EXCLUDED' api-v3/src/inspection-visits/inspection-visits.service.ts
grep -Fq 'INSPECTION_VISIT_ASSET_REINCLUDED' api-v3/src/inspection-visits/inspection-visits.service.ts
echo "Preventivos respetan el contexto y toda exclusión/reincorporación conserva motivo e historia: OK"

echo
echo "========== D5.5.2 · HISTORIA APPEND-ONLY =========="
grep -Fq 'CREATE TABLE inspection_visit_asset_events' api-v3/src/database/migrations/1789063200000-phase-d5-5-web-planning-checklist.ts
grep -Eq 'REVOKE UPDATE, DELETE ON TABLE[[:space:]]*$' api-v3/src/database/migrations/1789063200000-phase-d5-5-web-planning-checklist.ts || true
grep -Fq 'inspection_visit_checklist_items, inspection_visit_asset_events' api-v3/src/database/migrations/1789063200000-phase-d5-5-web-planning-checklist.ts
echo "Generaciones y eventos de inclusión/exclusión quedan append-only para el rol de aplicación: OK"

echo
echo "========== D5.5.2 · VERIFICACIONES INTEGRADAS =========="
grep -Fq 'operationalAreaId: areaId' api-v3/src/inspection-verifications/inspection-verifications.service.ts
grep -Fq 'operatorCompanyId: companyId' api-v3/src/inspection-verifications/inspection-verifications.service.ts
grep -Fq "planning_source = 'VERIFICATION'" api-v3/src/inspection-verifications/inspection-verifications.service.ts
grep -Fq "'VERIFICATION_INCLUDED'" api-v3/src/inspection-verifications/inspection-verifications.service.ts
echo "Las visitas originadas por verificaciones usan el mismo contrato Área/Operadora/checklist: OK"

echo
echo "========== D5.5.2 · INICIO APK-ONLY =========="
grep -Fq 'assertMobileInspector(principal)' api-v3/src/inspection-visits/inspection-visits.service.ts
grep -Fq 'transport !== '\''bearer'\''' api-v3/src/inspection-operations/mobile-inspector-policy.ts
grep -Fq "includes('inspector')" api-v3/src/inspection-operations/mobile-inspector-policy.ts
if grep -Fq 'startInspectionVisit' web-v2/src/pages/InspectionVisitEditorPage.tsx; then exit 1; fi
grep -Fq 'debe iniciar la visita desde la APK' web-v2/src/pages/InspectionVisitEditorPage.tsx
echo "Dashboard planifica y asigna; el inicio y la ejecución siguen reservados a la APK: OK"

echo
echo "========== D5.5.2 · REGLAS PRESERVADAS =========="
grep -Fq 'INSPECTION_VISIT_ACT_ALREADY_EXISTS' api-v3/src/inspection-acts/inspection-acts.service.ts
grep -Fq 'INSPECTION_FINDING_RESPONSE_IMMUTABLE' api-v3/src/inspection-findings/inspection-findings.service.ts
grep -Fq 'VERIFICATION_RESULT_IMMUTABLE' api-v3/src/inspection-verifications/inspection-verifications.service.ts
grep -Fq 'FINDING_CATALOG_ITEM_NOT_APPLICABLE' api-v3/src/inspection-findings/inspection-findings.service.ts
if grep -Fq 'UPDATE inspection_findings SET asset_id' api-v3/src/asset-master/assets.service.ts; then exit 1; fi
echo "Una visita = una Acta; hallazgos, catálogo contextual y verificaciones históricas siguen protegidos: OK"

echo
echo "========== D5.5.2 · SMTP =========="
SMTP_STATE="$(docker compose exec -T api sh -lc 'if [ -n "$SMTP_HOST" ] && [ -n "$MAIL_FROM" ]; then echo configured; else echo pending; fi')"
if [[ "$SMTP_STATE" == "configured" ]]; then echo "SMTP configurado"; else echo "SMTP sigue pendiente y no bloquea esta fase"; fi

echo
echo "========== D5.5.2 · HIGIENE DE CÓDIGO =========="
if grep -RnhE --include='*.ts' --include='*.tsx' '^[[:space:]]*(//|/\*|\*)' api-v3/src web-v2/src; then
  echo "ERROR: quedaron comentarios narrativos en código de producción"
  exit 1
fi
if grep -nE '/\*|\*/' web-v2/src/styles.css; then
  echo "ERROR: quedaron comentarios internos en estilos de producción"
  exit 1
fi
echo "Código de producción preparado para revisión externa: OK"

echo
echo "========== D5.5.2 · SEGURIDAD HEREDADA =========="
STRONG_BACKUP="$(find /root/DH_V2_BACKUPS -maxdepth 1 -type d -name 'INVENTARIO_A_REVISAR_*' -printf '%T@ %p\n' | sort -nr | head -n1 | cut -d' ' -f2-)"
[[ -n "$STRONG_BACKUP" && -s "$STRONG_BACKUP/BACKUP_OK.txt" ]]
grep -Fq 'INVENTARIO A REVISAR' "$STRONG_BACKUP/BACKUP_OK.txt"
echo "Backup fuerte de referencia: $STRONG_BACKUP"

echo
echo "========== D5.5.2 · CONTENEDORES =========="
docker compose ps -a
[[ "$(docker inspect dhv2-db --format '{{.State.Health.Status}}')" == "healthy" ]]
[[ "$(docker inspect dhv2-api --format '{{.State.Status}}')" == "running" ]]
[[ "$(docker inspect dhv2-web --format '{{.State.Status}}')" == "running" ]]

echo
echo "ACEPTACIÓN DE FASE D5.5.2: OK"