package initdb

import (
	"golang.org/x/crypto/bcrypt"
	"gorm.io/gorm"
	"senlinai-agent/backend/internal/models"
)

const (
	rootUsername = "root"
	rootPassword = "123456"
	rootRole     = "root"
)

// InitUser returns the existing root user or creates and returns it when the user table is empty.
func InitUser(database *gorm.DB) (*models.SaUser, error) {
	var count int64
	if err := database.Model(&models.SaUser{}).Count(&count).Error; err != nil {
		return nil, err
	}
	if count > 0 {
		var user models.SaUser
		if err := database.Where("email = ? AND role = ?", rootUsername, rootRole).
			First(&user).Error; err != nil {
			return nil, err
		}
		return &user, nil
	}

	passwordHash, err := bcrypt.GenerateFromPassword([]byte(rootPassword), bcrypt.DefaultCost)
	if err != nil {
		return nil, err
	}

	user := &models.SaUser{
		Email:        rootUsername,
		DisplayName:  rootUsername,
		PasswordHash: string(passwordHash),
		Role:         rootRole,
	}
	if err := database.Create(user).Error; err != nil {
		return nil, err
	}
	return user, nil
}