<?php

declare(strict_types=1);

use app\adminapi\logic\firstvisit\WecomPromotionLogic;
use app\common\service\DataScope\DataScopeService;
use think\facade\Db;

require dirname(__DIR__) . '/vendor/autoload.php';

$app = new think\App();
$app->initialize();

$admin = Db::name('admin')->where('root', 1)->whereNull('delete_time')->find();
if (!$admin) {
    throw new RuntimeException('未找到 root 管理员，无法执行数据范围冒烟测试');
}
$overview = WecomPromotionLogic::overview((int) $admin['id'], $admin, 'https://example.test');
foreach (['meta', 'config', 'summary', 'pools', 'links', 'member_options', 'operator_options', 'department_options'] as $key) {
    if (!array_key_exists($key, $overview)) {
        throw new RuntimeException("overview 缺少 {$key}");
    }
}
if (!str_ends_with((string) ($overview['config']['callback_url'] ?? ''), '/api/qywx/external-contact/notify')) {
    throw new RuntimeException('overview 未返回正确的获客消息回调地址');
}
foreach ($overview['member_options'] as $member) {
    if (empty($member['id']) || empty($member['userid'])) {
        throw new RuntimeException('member_options 返回了未绑定企业微信 userid 的成员');
    }
    if (!array_key_exists('display_dept_id', $member)) {
        throw new RuntimeException('member_options 缺少树形下拉展示部门');
    }
}
$enabledOperatorCount = 0;
foreach ($overview['operator_options'] as $operator) {
    $isEnabled = (int) ($operator['disable'] ?? 0) === 0;
    if ($isEnabled) {
        $enabledOperatorCount++;
    }
    if ((bool) ($operator['can_grant'] ?? false) !== $isEnabled) {
        throw new RuntimeException('操作人可授权状态不应依赖目标账号预先拥有页面权限');
    }
}
$memberIds = array_values(array_unique(array_map('intval', array_column($overview['member_options'], 'id'))));
if ($memberIds !== []) {
    $disabledMemberCount = (int) Db::name('admin')->whereIn('id', $memberIds)->where('disable', '<>', 0)->count();
    if ($disabledMemberCount > 0) {
        throw new RuntimeException('member_options 返回了已禁用的成员');
    }
}
if (!is_array($overview['department_options'])) {
    throw new RuntimeException('department_options 必须是部门树数组');
}
foreach ($overview['pools'] as $pool) {
    foreach (['operators', 'operator_admin_ids', 'can_operate', 'can_manage_access', 'can_delete'] as $key) {
        if (!array_key_exists($key, $pool)) {
            throw new RuntimeException("pools 缺少共享操作权限字段 {$key}");
        }
    }
}

$scopedAdmin = Db::name('admin')->where('root', 0)->whereNull('delete_time')->order('id', 'asc')->find();
if ($scopedAdmin) {
    $visibleIds = DataScopeService::getVisibleAdminIds((int) $scopedAdmin['id'], $scopedAdmin);
    $scopedOverview = WecomPromotionLogic::overview((int) $scopedAdmin['id'], $scopedAdmin, 'https://example.test');
    if ($visibleIds !== null) {
        $scopedPoolIds = array_values(array_filter(array_map('intval', array_column($scopedOverview['pools'], 'id'))));
        $sharedPoolMemberIds = $scopedPoolIds === []
            ? []
            : array_map('intval', Db::name('qywx_promotion_pool_member')
                ->whereIn('pool_id', $scopedPoolIds)
                ->whereNull('delete_time')
                ->column('admin_id'));
        foreach ($scopedOverview['member_options'] as $member) {
            if (!in_array((int) $member['id'], $visibleIds, true)
                && !in_array((int) $member['id'], $sharedPoolMemberIds, true)) {
                throw new RuntimeException('member_options 泄露了当前角色或部门范围外的成员');
            }
        }
        foreach ($scopedOverview['operator_options'] as $operator) {
            if (!in_array((int) $operator['id'], $visibleIds, true)) {
                throw new RuntimeException('operator_options 泄露了当前角色或部门范围外的账号');
            }
        }
        foreach ($scopedOverview['pools'] as $pool) {
            if (!in_array((int) $pool['owner_admin_id'], $visibleIds, true)
                && !in_array((int) $scopedAdmin['id'], array_map('intval', $pool['operator_admin_ids'] ?? []), true)) {
                throw new RuntimeException('pools 泄露了当前角色或部门范围外的数据');
            }
        }
    }
}

echo sprintf(
    "WECOM_PROMOTION_OVERVIEW_SMOKE_OK configured=%d callback=%d pools=%d links=%d members=%d operators=%d\n",
    !empty($overview['config']['ready']) ? 1 : 0,
    !empty($overview['config']['callback_ready']) ? 1 : 0,
    count($overview['pools']),
    count($overview['links']),
    count($overview['member_options']),
    $enabledOperatorCount
);