import bcrypt from 'bcrypt';
import pool from '../config/database.js';

// Spaltenname -> SQL-Definition
const COLS_TO_ADD = {
  tenants: {
    notified_7d_at:      'TIMESTAMP NULL',
    notified_1d_at:      'TIMESTAMP NULL',
    notified_expired_at: 'TIMESTAMP NULL',
  },
  artikel: {
    bild_url:     'VARCHAR(500) NULL',
    beschreibung: 'TEXT NULL',
    aktiv:        'TINYINT(1) NOT NULL DEFAULT 1',
  },
};

async function ensureColumns() {
  for (const [table, cols] of Object.entries(COLS_TO_ADD)) {
    const [existing] = await pool.query(
      `SELECT COLUMN_NAME FROM information_schema.columns
       WHERE TABLE_SCHEMA = DATABASE() AND TABLE_NAME = ?`,
      [table]
    );
    const have = new Set(existing.map(c => c.COLUMN_NAME));
    for (const [col, def] of Object.entries(cols)) {
      if (!have.has(col)) {
        await pool.query(`ALTER TABLE ${table} ADD COLUMN ${col} ${def}`);
        console.log(`[bootstrap] ${table} ALTER ADD ${col}`);
      }
    }
  }
}

export async function bootstrapSuperAdmin() {
  // Auf DB warten (max 30s)
  for (let i = 0; i < 30; i++) {
    try { await pool.query('SELECT 1'); break; }
    catch { await new Promise(r => setTimeout(r, 1000)); }
  }

  // Migrations
  try { await ensureColumns(); }
  catch (e) { console.error('[bootstrap] Migration-Fehler:', e.message); }

  const email = process.env.SUPERADMIN_EMAIL;
  const password = process.env.SUPERADMIN_PASSWORD;
  if (!email || !password) {
    console.warn('[bootstrap] SUPERADMIN_EMAIL/PASSWORD nicht gesetzt - skip');
    return;
  }
  const [rows] = await pool.query(
    "SELECT id FROM mitarbeiter WHERE email = ? AND tenant_id IS NULL AND rolle = 'superadmin'",
    [email]
  );
  if (rows.length > 0) {
    console.log('[bootstrap] SuperAdmin existiert:', email);
    return;
  }
  const hash = await bcrypt.hash(password, 10);
  await pool.query(
    `INSERT INTO mitarbeiter (id, tenant_id, email, password_hash, name, rolle, aktiv)
     VALUES (UUID(), NULL, ?, ?, 'SuperAdmin', 'superadmin', 1)`,
    [email, hash]
  );
  console.log('[bootstrap] SuperAdmin angelegt:', email);
}