import { Pool } from 'pg'
import refreshTokenHelper from "../../../utils/refreshTokenHelper"

const handleFunc = async (event: any) => {
  const config = useRuntimeConfig()
  const dbConfig = {
    host: config.pgHost,
    port: parseInt(config.pgPort || '5432'),
    database: config.pgDatabase,
    user: config.pgUser,
    password: config.pgPassword,
  }

  if (!dbConfig.host || !dbConfig.database || !dbConfig.user || !dbConfig.password) {
    throw createError({
      statusCode: 500,
      message: 'PostgreSQL credentials not configured. Please set PG_HOST, PG_DATABASE, PG_USER, PG_PASSWORD in .env'
    })
  }

  // Limited roles (FrontendMenu == 'c') only see their own organization. Admins
  // see all orgs (NULL filter is a no-op in the SQL below).
  const roleCookie = getCookie(event, 'logship_role')
  let menuType: string = 'Menu'
  try {
    const role = roleCookie ? JSON.parse(roleCookie) : null
    menuType = role?.FrontendMenu?.id || role?.FrontendMenu || 'Menu'
  } catch {}
  const orgIdCookie = getCookie(event, 'logship_organization_id')
  const orgIdNum = orgIdCookie ? parseInt(orgIdCookie) : NaN
  const orgFilter: number | null = (menuType === 'c' && Number.isFinite(orgIdNum)) ? orgIdNum : null

  const pool = new Pool(dbConfig)

  try {
    const sql = `
      SELECT
        p.m_product_id AS id,
        p.name,
        p.sku,
        p.created,
        org.name AS org_name
      FROM m_product p
      LEFT JOIN ad_org org ON org.ad_org_id = p.ad_org_id
      WHERE p.ad_client_id = 1000000
        AND p.isactive = 'Y'
        AND p.created >= NOW() - INTERVAL '10 days'
        AND ($1::int IS NULL OR p.ad_org_id = $1)
      ORDER BY p.created DESC
      LIMIT 10
    `

    const result = await pool.query(sql, [orgFilter])

    const records = result.rows.map((r: any) => ({
      id: Number(r.id),
      name: r.name,
      sku: r.sku,
      created: r.created,
      orgName: r.org_name || ''
    }))

    return { records }
  } catch (err: any) {
    console.error('PostgreSQL query error:', err)
    throw createError({
      statusCode: 500,
      message: `Database error: ${err.message}`
    })
  } finally {
    await pool.end()
  }
}

export default defineEventHandler(async (event) => {
  try {
    return await handleFunc(event)
  } catch(err: any) {
    try {
      let authToken: any = await refreshTokenHelper(event)
      return await handleFunc(event)
    } catch(error: any) {
      console.error('Fatal error in latest products:', error)
      throw error
    }
  }
})