"""Create or update a local user account with a hashed password."""

from __future__ import annotations

import argparse
import asyncio

from app.core.config import get_settings
from app.core.security import hash_password
from app.models.entities import UserAccount
from sqlalchemy import select
from sqlalchemy.ext.asyncio import AsyncSession, async_sessionmaker, create_async_engine


async def create_or_update_user(
    emp_no: str,
    name: str,
    password: str,
    role: str,
    email: str | None,
) -> int:
    settings = get_settings()
    engine = create_async_engine(settings.database_url, pool_pre_ping=True)
    session_factory = async_sessionmaker(engine, class_=AsyncSession, expire_on_commit=False)
    try:
        async with session_factory() as session:
            user = await session.scalar(select(UserAccount).where(UserAccount.emp_no == emp_no))
            if user is None:
                user = UserAccount(emp_no=emp_no, name=name, role=role, status="启用")
                session.add(user)
            user.name = name
            user.role = role
            user.status = "启用"
            user.password_hash = hash_password(password)
            user.email = email
            await session.commit()
            return user.id
    finally:
        await engine.dispose()


def main() -> None:
    parser = argparse.ArgumentParser(description=__doc__)
    parser.add_argument("--emp-no", required=True, help="Employee number used for login")
    parser.add_argument("--name", required=True, help="Display name")
    parser.add_argument("--password", required=True, help="Plain password; only its hash is stored")
    parser.add_argument(
        "--role",
        default="admin",
        choices=("普通用户", "dev", "procurement", "qc", "ops", "reviewer", "manager", "admin"),
    )
    parser.add_argument("--email")
    args = parser.parse_args()
    if len(args.password) < 8:
        parser.error("password must be at least 8 characters")
    user_id = asyncio.run(create_or_update_user(args.emp_no, args.name, args.password, args.role, args.email))
    print(f"user_id={user_id}")


if __name__ == "__main__":
    main()