#!/usr/bin/env bash
set -u -o pipefail

ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
CLIENT_DIR="$ROOT_DIR/client"
PUBLIC_BASE_URL="${LIVE_SMOKE_BASE_URL:-https://oa.hyinda.com}"
REPORT_DIR="${P2_FIN_LIVE_REPORT_DIR:-$ROOT_DIR/artifacts/qa-flow/p2-fin-live-$(date +%Y%m%d-%H%M%S)}"
SUMMARY_TXT="$REPORT_DIR/summary.txt"
STATUS=0

mkdir -p "$REPORT_DIR"
: >"$SUMMARY_TXT"

load_default_env() {
  local env_file="${P2_FIN_LIVE_ENV_FILE:-$HOME/.hyb-oa/live-smoke.env}"
  if [[ "${P2_FIN_LIVE_SKIP_ENV_FILE:-0}" == "1" || ! -f "$env_file" ]]; then
    return 0
  fi

  set -a
  # shellcheck disable=SC1090
  source "$env_file"
  set +a
  PUBLIC_BASE_URL="${LIVE_SMOKE_BASE_URL:-$PUBLIC_BASE_URL}"
  echo "[p2-fin-live] loaded masked env file" | tee -a "$SUMMARY_TXT"
}

run_step() {
  local name="$1"
  shift
  local log_file="$REPORT_DIR/${name}.log"

  echo ">>> [p2-fin-live] $name" | tee -a "$SUMMARY_TXT"
  if "$@" > >(tee "$log_file") 2>&1; then
    echo "[p2-fin-live][PASS] $name" | tee -a "$SUMMARY_TXT"
  else
    local code="$?"
    echo "[p2-fin-live][FAIL] $name exit=$code" | tee -a "$SUMMARY_TXT"
    STATUS=1
  fi
}

run_shell_step() {
  local name="$1"
  local command="$2"
  run_step "$name" bash -lc "$command"
}

force_payment_batch_flag_off() {
  node <<'NODE'
const baseUrl = (process.env.LIVE_SMOKE_BASE_URL || "https://oa.hyinda.com").replace(/\/$/, "");
const identifier = process.env.LIVE_SMOKE_ADMIN_IDENTIFIER?.trim();
const password = process.env.LIVE_SMOKE_ADMIN_PASSWORD?.trim();
const issueId = process.env.QA_ISSUE_ID?.trim() || "P2FLIVE";

if (!identifier || !password) {
  console.error("[p2-fin-live][rollback] missing admin credentials");
  process.exit(1);
}

async function fetchJson(url, init = {}) {
  const response = await fetch(url, {
    ...init,
    signal: AbortSignal.timeout(20_000),
  });
  const text = await response.text();
  let json = null;
  try {
    json = text ? JSON.parse(text) : null;
  } catch {
    json = null;
  }
  return { response, json };
}

function errorSummary(json, status) {
  const error = json?.error ?? {};
  return `${status} ${error.code ?? ""} ${error.message ?? ""}`.trim();
}

const login = await fetchJson(`${baseUrl}/api/auth/login`, {
  method: "POST",
  headers: {
    "content-type": "application/json",
    "x-device-fingerprint": "p2-fin-live-runner-rollback",
  },
  body: JSON.stringify({ identifier, password }),
});
if (!login.response.ok || !login.json?.data?.accessToken) {
  console.error(`[p2-fin-live][rollback] login failed: ${errorSummary(login.json, login.response.status)}`);
  process.exit(1);
}

const token = login.json.data.accessToken;
const list = await fetchJson(`${baseUrl}/api/system/feature-flags`, {
  headers: { authorization: `Bearer ${token}`, accept: "application/json" },
});
if (!list.response.ok) {
  console.error(`[p2-fin-live][rollback] list flags failed: ${errorSummary(list.json, list.response.status)}`);
  process.exit(1);
}

const flag = list.json?.data?.items?.find((item) => item.flagKey === "payment_batch_v1");
if (!flag) {
  console.error("[p2-fin-live][rollback] missing payment_batch_v1");
  process.exit(1);
}

if (flag.overrideMode === "force_off" && flag.effectiveEnabled === false) {
  console.log("[p2-fin-live][rollback] payment_batch_v1 already force_off");
  process.exit(0);
}

const updated = await fetchJson(`${baseUrl}/api/system/feature-flags/payment_batch_v1`, {
  method: "PUT",
  headers: {
    authorization: `Bearer ${token}`,
    "content-type": "application/json",
    accept: "application/json",
  },
  body: JSON.stringify({
    overrideMode: "force_off",
    rolloutType: "global",
    departmentIds: [],
    note: `${issueId} runner final rollback`,
    expectedVersion: flag.version,
  }),
});
if (!updated.response.ok) {
  console.error(`[p2-fin-live][rollback] update failed: ${errorSummary(updated.json, updated.response.status)}`);
  process.exit(1);
}
const item = updated.json?.data?.item;
console.log(`[p2-fin-live][rollback] payment_batch_v1 override=${item?.overrideMode ?? "unknown"} effective=${item?.effectiveEnabled ?? "unknown"}`);
NODE
}

write_summary_json() {
  local qa_status="PASS"
  if [[ "$STATUS" -ne 0 ]]; then
    qa_status="FAIL"
  fi

  QA_REPORT_DIR="$REPORT_DIR" \
    QA_ISSUE_ID="${QA_ISSUE_ID:-P2FLIVE}" \
    QA_BASE_URL="$PUBLIC_BASE_URL" \
    QA_MODE="p2-fin-live-window" \
    QA_STATUS="$qa_status" \
    QA_SUMMARY_NOTES="${QA_ISSUE_ID:-P2FLIVE} 公网短窗口：临时启用 payment_batch_v1，完成测试付款闭环后强制回滚到 flag_force_off；不部署、不接真实支付、不开放图片 OCR。" \
    node "$ROOT_DIR/scripts/qa/write-qa-summary.mjs" >/dev/null 2>&1 || true
}

finish() {
  if [[ "${P2_FIN_LIVE_APPROVED:-0}" == "1" ]]; then
    echo ">>> [p2-fin-live] final-force-flag-off" | tee -a "$SUMMARY_TXT"
    if force_payment_batch_flag_off > >(tee "$REPORT_DIR/final-force-flag-off.log") 2>&1; then
      echo "[p2-fin-live][PASS] final-force-flag-off" | tee -a "$SUMMARY_TXT"
    else
      local code="$?"
      echo "[p2-fin-live][FAIL] final-force-flag-off exit=$code" | tee -a "$SUMMARY_TXT"
      STATUS=1
    fi

    echo ">>> [p2-fin-live] final-flag-off-check" | tee -a "$SUMMARY_TXT"
    if LIVE_SMOKE_BASE_URL="$PUBLIC_BASE_URL" node "$ROOT_DIR/scripts/qa/check-payment-batch-flag-off.mjs" --json > >(tee "$REPORT_DIR/final-flag-off-check.log") 2>&1; then
      echo "[p2-fin-live][PASS] final-flag-off-check" | tee -a "$SUMMARY_TXT"
    else
      local code="$?"
      echo "[p2-fin-live][FAIL] final-flag-off-check exit=$code" | tee -a "$SUMMARY_TXT"
      STATUS=1
    fi
  fi

  write_summary_json
  echo "[p2-fin-live] report=$REPORT_DIR" | tee -a "$SUMMARY_TXT"
  exit "$STATUS"
}

trap finish EXIT

load_default_env

if [[ "${P2_FIN_LIVE_APPROVED:-0}" != "1" ]]; then
  echo "[p2-fin-live][ERROR] P2_FIN_LIVE_APPROVED=1 is required for public write test" | tee -a "$SUMMARY_TXT"
  STATUS=2
  exit "$STATUS"
fi

run_shell_step "live-env-strict" "LIVE_SMOKE_BASE_URL='$PUBLIC_BASE_URL' node '$ROOT_DIR/scripts/qa/check-live-smoke-env.mjs' --strict"
run_shell_step "pre-flag-off-check" "LIVE_SMOKE_BASE_URL='$PUBLIC_BASE_URL' node '$ROOT_DIR/scripts/qa/check-payment-batch-flag-off.mjs' --json"
run_shell_step "p2-fin-live-spec" "cd '$CLIENT_DIR' && PLAYWRIGHT_MANUAL=1 E2E_MODE=live P2_FIN_LIVE_APPROVED=1 QA_ISSUE_ID='${QA_ISSUE_ID:-P2FLIVE}' P2_FIN_LIVE_MARKER_PREFIX='${P2_FIN_LIVE_MARKER_PREFIX:-${QA_ISSUE_ID:-P2FLIVE}}' P2_FIN_LIVE_REPORT_DIR='$REPORT_DIR' LIVE_SMOKE_BASE_URL='$PUBLIC_BASE_URL' npx playwright test tests/e2e/manual/p2-fin-live-payment-batch.spec.ts --workers=1 --reporter=list"

if [[ "${P2_FIN_LIVE_SKIP_MOBILE:-0}" == "1" ]]; then
  echo "[p2-fin-live][SKIP] mobile-wecom P2_FIN_LIVE_SKIP_MOBILE=1" | tee -a "$SUMMARY_TXT"
else
  run_shell_step "public-mobile-matrix" "cd '$CLIENT_DIR' && E2E_BASE_URL='$PUBLIC_BASE_URL' npx playwright test tests/e2e/dg7-mobile-information-dedupe.spec.ts tests/e2e/r124-mobile-entry-matrix.spec.ts --workers=1 --reporter=list"
  run_shell_step "wecom-rendering-matrix" "cd '$CLIENT_DIR' && E2E_BASE_URL='$PUBLIC_BASE_URL' npx playwright test tests/e2e/r6-wecom-mobile-rendering-hardening.spec.ts --workers=1 --reporter=list"
fi