#!/usr/bin/env node
import { readFileSync } from 'node:fs';
import { randomBytes } from 'node:crypto';
import { request as httpsRequest } from 'node:https';
const sql=readFileSync(new URL('./sql/review-rewards.sql',import.meta.url),'utf8');
if(!process.argv.includes('--apply')) {
  console.log('只读检查：复习奖励迁移脚本已就绪。使用 --apply 执行；历史已完成记录只生成零金额待核对凭据。');
  process.exit(0);
}
const master=process.env.XIAOSHU_MASTER_KEY;
if(!master)throw new Error('缺少 XIAOSHU_MASTER_KEY');
const parseUrl=(process.env.XIAOSHU_PARSE_URL||'https://server.xiaoshu.pro/parse').replace(/\/$/,'');
const appId=process.env.XIAOSHU_PARSE_APP_ID||'7pIbDBJmKx_main';
async function request(path,options={}) {
  const res=await fetch(parseUrl+path,{...options,headers:{'Content-Type':'application/json','X-Parse-Application-Id':appId,'X-Parse-Master-Key':master}});
  const data=await res.json();if(!res.ok||data.error)throw new Error(data.error||`HTTP ${res.status}`);return data;
}
function invokeMigration(url,token) {
  return new Promise((resolve,reject)=>{const body=JSON.stringify({token,params:{}}),req=httpsRequest(url,{method:'POST',headers:{'Content-Type':'application/json','Content-Length':Buffer.byteLength(body)}},(res)=>{let raw='';res.setEncoding('utf8');res.on('data',(chunk)=>raw+=chunk);res.on('end',()=>{try{resolve({ok:Number(res.statusCode)>=200&&Number(res.statusCode)<300,data:JSON.parse(raw)})}catch(error){reject(error)}});});req.on('error',reject);req.write(body);req.end();});
}
// Register only the new API-visible payroll fields before installing physical constraints.
for(const [name,fields] of Object.entries({PayrollLine:{reviewRewardId:{type:'String'},reviewTaskId:{type:'String'},plannedDate:{type:'String'}},PayrollBatch:{reviewCount:{type:'Number'},reviewAmount:{type:'Number'}}})) {
  const schema=await request('/schemas/'+name),missing=Object.fromEntries(Object.entries(fields).filter(([key])=>!schema.fields[key]));
  if(Object.keys(missing).length)await request('/schemas/'+name,{method:'PUT',body:JSON.stringify({fields:missing})});
}
const company=(await request('/classes/Company?limit=1&keys=objectId')).results?.[0];
if(!company)throw new Error('未找到帐套');
const suffix=Date.now()+'_'+randomBytes(5).toString('hex'),path='xiaoshu/system/review-rewards-'+suffix;
let userId='',functionId='';
try {
  const account=await request('/users',{method:'POST',body:JSON.stringify({username:'review_migration_'+suffix,password:randomBytes(32).toString('base64url'),isAdmin:true,adminRoleKey:'super-admin',roles:['admin','super-admin'],company:{__type:'Pointer',className:'Company',objectId:company.objectId},testCreatedBy:'review-rewards-migration'})});userId=account.objectId;
  if(!account.sessionToken)throw new Error('临时管理员没有会话');
  const code=`async function handler(request,response){try{const current=request.user;if(!current)return response.status(401).json({success:false});await current.fetch({useMasterKey:true});if(current.id!==${JSON.stringify(userId)}||current.get('adminRoleKey')!=='super-admin')return response.status(403).json({success:false});await Psql.none(${JSON.stringify(sql)});const counts=await Psql.query('SELECT "status",COUNT(*)::int AS count,SUM("amount") AS amount FROM "ReviewReward" GROUP BY "status"');return response.json({success:true,counts});}catch(error){return response.status(500).json({success:false,message:String(error.message||error)});}}`;
  const fn=await request('/classes/Function',{method:'POST',body:JSON.stringify({name:path,path,code,type:'standalone',desc:'复习奖励一次性数据库迁移',enabled:true,params:[],paramList:[],respType:'json'})});functionId=fn.objectId;
  const res=await invokeMigration(parseUrl.replace(/\/parse$/,'/api/functions/')+path,account.sessionToken);
  if(!res.ok||!res.data.success)throw new Error(res.data.message||'迁移失败');console.log(JSON.stringify(res.data,null,2));
} finally {
  // Cleanup failures are reported, including IDs, so no temporary privileged surface is silently left behind.
  const failures=[];
  if(functionId)try{await request('/classes/Function/'+functionId,{method:'DELETE'});}catch{failures.push('临时函数 '+functionId);}
  if(userId)try{await request('/users/'+userId,{method:'DELETE'});}catch{failures.push('临时管理员 '+userId);}
  if(failures.length)throw new Error('需要清理：'+failures.join('、'));
}