/**
 * This Source Code is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, You can obtain one at http://mozilla.org/MPL/2.0/.
 *
 * Copyright (c) Infonomic Company Limited
 */

/**
 * Super-admin bootstrap seed.
 *
 * Idempotent. Reads credentials from env (`BYLINE_SUPERADMIN_EMAIL`,
 * `BYLINE_SUPERADMIN_PASSWORD`) and calls the built-in
 * `seedSuperAdmin` helper from `@byline/admin/admin-users` against an
 * `AdminStore` built on the application's single connection pool.
 *
 * The admin account it produces:
 *   - `is_super_admin: true`  — bypasses every ability check
 *   - `is_enabled: true`       — ready to sign in immediately
 *   - `is_email_verified: true` — skip the verification gate for bootstrap
 *
 * In any non-dev deployment: change the credentials in env, run the seed
 * once, then immediately change the password from inside the admin UI.
 */

import type { AdminStore } from '@byline/admin'
import { seedSuperAdmin } from '@byline/admin/admin-users'
import { getBylineCore } from '@byline/core'

export async function seedAdmin() {
  const email = process.env.BYLINE_SUPERADMIN_EMAIL
  const password = process.env.BYLINE_SUPERADMIN_PASSWORD

  if (!email || !password) {
    console.warn(
      'Skipping admin seed: BYLINE_SUPERADMIN_EMAIL and BYLINE_SUPERADMIN_PASSWORD ' +
        'must both be set (see .env.local.example).'
    )
    return
  }

  const bylineCore = getBylineCore<AdminStore>()

  if (!bylineCore.adminStore) {
    throw new Error(
      'seedAdmin: bylineCore.adminStore is not configured. ' +
        'Pass adminStore to initBylineCore() in byline/server.config.ts.'
    )
  }

  console.log('Seeding super-admin')

  const result = await seedSuperAdmin(bylineCore.adminStore, { email, password })

  const created = result.created.role || result.created.user || result.created.assignment
  console.log(
    created ? `  - seeded super-admin (${email})` : `  - super-admin already present (${email})`
  )
}