#!/usr/bin/env bash
# Smoke test CRUD via RPC-backed API
set -euo pipefail
BASE="http://127.0.0.1:8000"
JAR="/tmp/panels-cookies.txt"
PASS="${SEED_PASSWORD:-TestAdmin123!}"
SUFFIX=$((RANDOM % 90000 + 10000))
WORKER_TAG=$(printf '%02d' $((10 + SUFFIX % 80)))

pass() { echo "✓ $1"; }
fail() { echo "✗ $1"; exit 1; }

check_status() {
  local name="$1" expected="$2" actual="$3" body="$4"
  if [[ "$actual" != "$expected" ]]; then
    echo "FAIL $name: expected HTTP $expected, got $actual"
    echo "$body" | head -c 800
    exit 1
  fi
  pass "$name (HTTP $actual)"
}

echo "=== Health ==="
H=$(curl -s -w "\n%{http_code}" "$BASE/v1/health")
BODY=$(echo "$H" | head -n -1)
CODE=$(echo "$H" | tail -1)
check_status "health" "200" "$CODE" "$BODY"
echo "$BODY" | grep -q '"ok":true' || fail "health body not ok"

echo "=== Login ==="
LOGIN=$(curl -s -w "\n%{http_code}" -c "$JAR" -X POST "$BASE/v1/auth/login" \
  -H "Content-Type: application/json" \
  -d "{\"username\":\"arct2608\",\"password\":\"$PASS\"}")
BODY=$(echo "$LOGIN" | head -n -1)
CODE=$(echo "$LOGIN" | tail -1)
check_status "login" "200" "$CODE" "$BODY"

echo "=== Companies LIST ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/companies")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "companies list" "200" "$CODE" "$BODY"
echo "$BODY" | grep -q '"ok":true' || fail "companies list envelope"
echo "$BODY" | grep -q 'ARCT2608' || fail "seed company missing"

echo "=== Companies CREATE ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" -X POST "$BASE/v1/companies" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Subempresa Prueba RPC",
    "code": "SUBRPC'"$SUFFIX"'",
    "razon_social": "Subempresa Prueba SA de CV",
    "rfc": "SPR010101ABC",
    "regimen_fiscal": "601",
    "registro_patronal": "A1234567890",
    "domicilio_fiscal": "Calle Test 123",
    "codigo_postal": "01000",
    "ciudad": "Ciudad de México",
    "estado": "CDMX"
  }')
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "company create" "201" "$CODE" "$BODY"
COMPANY_ID=$(echo "$BODY" | grep -o '"id":[0-9]*' | head -1 | cut -d: -f2)
[[ -n "$COMPANY_ID" ]] || fail "no company id in create response"

echo "=== Companies GET ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/companies/$COMPANY_ID")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "company get" "200" "$CODE" "$BODY"
echo "$BODY" | grep -qi "SUBRPC$SUFFIX" || fail "company code mismatch"

echo "=== Companies PATCH ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" -X PATCH "$BASE/v1/companies/$COMPANY_ID" \
  -H "Content-Type: application/json" \
  -d '{"nombre_comercial":"Sub RPC Editada","telefono":"5551234567"}')
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "company patch" "200" "$CODE" "$BODY"
echo "$BODY" | grep -q 'Sub RPC Editada' || fail "company patch not applied"

echo "=== Projects LIST ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/projects")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "projects list" "200" "$CODE" "$BODY"

echo "=== Projects CREATE ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" -X POST "$BASE/v1/projects" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Obra Prueba RPC",
    "company_id": 1,
    "address": "Av. Reforma 100",
    "contract_amount": 1500000,
    "start_date": "2026-01-01"
  }')
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "project create" "201" "$CODE" "$BODY"
PROJECT_ID=$(echo "$BODY" | grep -o '"id":[0-9]*' | head -1 | cut -d: -f2)
[[ -n "$PROJECT_ID" ]] || fail "no project id"

echo "=== Projects GET ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/projects/$PROJECT_ID")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "project get" "200" "$CODE" "$BODY"

echo "=== Projects PATCH ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" -X PATCH "$BASE/v1/projects/$PROJECT_ID" \
  -H "Content-Type: application/json" \
  -d '{"name":"Obra Prueba RPC Editada","resident_name":"Ing. Test"}')
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "project patch" "200" "$CODE" "$BODY"
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/projects/$PROJECT_ID")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "project get after patch" "200" "$CODE" "$BODY"
echo "$BODY" | grep -qi 'Obra Prueba RPC Editada' || fail "project patch not applied"

echo "=== Workers CREATE ==="
WORKER_JSON=$(cat <<EOF
{
  "first_name": "Juan",
  "last_name_p": "Perez",
  "last_name_m": "Lopez",
  "curp": "ROCL900215HDFRPM${WORKER_TAG}",
  "rfc": "ROCL900215A${WORKER_TAG}",
  "nss": "12345679000",
  "phone": "5559876543",
  "email": "worker${SUFFIX}@test.local",
  "address": "Calle Worker 1",
  "hire_type": "ARCT2608",
  "position": "Oficial",
  "risk_code": "medio",
  "work_type": "N",
  "daily_wage": 450,
  "project_id": ${PROJECT_ID}
}
EOF
)
R=$(curl -s -w "\n%{http_code}" -b "$JAR" -X POST "$BASE/v1/workers" \
  -H "Content-Type: application/json" \
  -d "$WORKER_JSON")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "worker create" "201" "$CODE" "$BODY"
WORKER_ID=$(echo "$BODY" | grep -o '"id":[0-9]*' | head -1 | cut -d: -f2)
[[ -n "$WORKER_ID" ]] || fail "no worker id"

echo "=== Workers GET ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/workers/$WORKER_ID")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "worker get" "200" "$CODE" "$BODY"

echo "=== Workers LIST ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/workers")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "workers list" "200" "$CODE" "$BODY"

echo "=== Workers PATCH ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" -X PATCH "$BASE/v1/workers/$WORKER_ID" \
  -H "Content-Type: application/json" \
  -d '{"position":"Residente","daily_wage":500}')
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "worker patch" "200" "$CODE" "$BODY"

echo "=== Catalogs ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/catalogs")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "catalogs" "200" "$CODE" "$BODY"
echo "$BODY" | grep -q '"risks"' || fail "catalogs missing risks"

echo "=== Expenses LIST ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/expenses")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "expenses list" "200" "$CODE" "$BODY"
echo "$BODY" | grep -q '"ok":true' || fail "expenses list envelope"

echo "=== Expenses CREATE ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" -X POST "$BASE/v1/expenses" \
  -H "Content-Type: application/json" \
  -d "{
    \"company_id\": 1,
    \"project_id\": ${PROJECT_ID},
    \"description\": \"Gasto smoke test ${SUFFIX}\",
    \"subtotal\": 1000,
    \"total\": 1160,
    \"tax_included\": false,
    \"is_deductible\": true,
    \"counts_toward_budget\": true
  }")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "expense create" "201" "$CODE" "$BODY"
EXPENSE_ID=$(echo "$BODY" | grep -o '"id":[0-9]*' | head -1 | cut -d: -f2)
[[ -n "$EXPENSE_ID" ]] || fail "no expense id"

echo "=== Expenses GET ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/expenses/$EXPENSE_ID")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "expense get" "200" "$CODE" "$BODY"

echo "=== Expenses PATCH ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" -X PATCH "$BASE/v1/expenses/$EXPENSE_ID" \
  -H "Content-Type: application/json" \
  -d '{"description":"Gasto smoke editado","notes":"ok"}')
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "expense patch" "200" "$CODE" "$BODY"

echo "=== IVA summary ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/iva/summary?company_id=1&year=2026&month=1")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "iva summary" "200" "$CODE" "$BODY"

echo "=== Cost settings GET/PUT ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/cost-settings")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "cost settings get" "200" "$CODE" "$BODY"
R=$(curl -s -w "\n%{http_code}" -b "$JAR" -X PUT "$BASE/v1/cost-settings" \
  -H "Content-Type: application/json" \
  -d '{"budget_warn_pct":85,"budget_critical_pct":100,"default_iva_rate":0.16}')
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "cost settings put" "200" "$CODE" "$BODY"

echo "=== Warehouses LIST ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/warehouses")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "warehouses list" "200" "$CODE" "$BODY"

echo "=== Warehouse central ensure ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" -X POST "$BASE/v1/warehouses/central/ensure")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "warehouse central ensure" "200" "$CODE" "$BODY"
CENTRAL_ID=$(echo "$BODY" | grep -o '"id":[0-9]*' | head -1 | cut -d: -f2)
[[ -n "$CENTRAL_ID" ]] || fail "no central warehouse id"

echo "=== Project warehouse open ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" -X POST "$BASE/v1/projects/$PROJECT_ID/warehouse/open")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "project warehouse open" "200" "$CODE" "$BODY"
PROJECT_WH_ID=$(echo "$BODY" | grep -o '"id":[0-9]*' | head -1 | cut -d: -f2)
[[ -n "$PROJECT_WH_ID" ]] || fail "no project warehouse id"

echo "=== Warehouse material ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" -X POST "$BASE/v1/warehouse-materials" \
  -H "Content-Type: application/json" \
  -d "{\"code\":\"MAT${SUFFIX}\",\"name\":\"Material smoke\",\"unit\":\"PZA\"}")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "warehouse material upsert" "200" "$CODE" "$BODY"
MATERIAL_ID=$(echo "$BODY" | grep -o '"id":[0-9]*' | head -1 | cut -d: -f2)
[[ -n "$MATERIAL_ID" ]] || fail "no material id"

echo "=== Warehouse entry ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" -X POST "$BASE/v1/warehouses/$CENTRAL_ID/entries" \
  -H "Content-Type: application/json" \
  -d "{\"material_id\":${MATERIAL_ID},\"quantity\":10,\"unit_cost\":50}")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "warehouse entry" "201" "$CODE" "$BODY"

echo "=== Warehouse transfer ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" -X POST "$BASE/v1/warehouse-transfers" \
  -H "Content-Type: application/json" \
  -d "{\"from_warehouse_id\":${CENTRAL_ID},\"to_warehouse_id\":${PROJECT_WH_ID},\"material_id\":${MATERIAL_ID},\"quantity\":3}")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "warehouse transfer" "201" "$CODE" "$BODY"

echo "=== Warehouse stock ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/warehouses/$PROJECT_WH_ID/stock")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "warehouse stock" "200" "$CODE" "$BODY"
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/warehouses/stock/global")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "warehouse global stock" "200" "$CODE" "$BODY"

echo "=== Warehouse movements ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/warehouses/$PROJECT_WH_ID/movements")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "warehouse movements" "200" "$CODE" "$BODY"

echo "=== Cost control (project) ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/projects/$PROJECT_ID/cost-control/summary")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "cost control summary" "200" "$CODE" "$BODY"
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/projects/$PROJECT_ID/cost-control/items")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "cost control items" "200" "$CODE" "$BODY"
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/projects/$PROJECT_ID/cost-control/chapters")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "cost control chapters" "200" "$CODE" "$BODY"
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/projects/$PROJECT_ID/cost-control/deviations")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "cost control deviations" "200" "$CODE" "$BODY"

echo "=== IAM endpoints ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/me/permissions")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "me permissions" "200" "$CODE" "$BODY"
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/iam/permissions")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "iam permissions" "200" "$CODE" "$BODY"
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/iam/users")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "iam users" "200" "$CODE" "$BODY"
R=$(curl -s -w "\n%{http_code}" -b "$JAR" "$BASE/v1/iam/roles/user/permissions")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "iam role permissions get" "200" "$CODE" "$BODY"

echo "=== Expenses DELETE (void) ==="
R=$(curl -s -w "\n%{http_code}" -b "$JAR" -X DELETE "$BASE/v1/expenses/$EXPENSE_ID")
BODY=$(echo "$R" | head -n -1); CODE=$(echo "$R" | tail -1)
check_status "expense void" "200" "$CODE" "$BODY"

echo ""
echo "All CRUD smoke tests passed."