#!/usr/bin/env python3
"""One-off WP-SD7 bootstrap: reset UAT admin passwords via official API, then run loops."""

from __future__ import annotations

import os
import sys
from pathlib import Path

os.environ.setdefault("AIDOP_API_BASE", "http://127.0.0.1:5005")

HERE = Path(__file__).resolve().parent
sys.path.insert(0, str(HERE))

from run_wp_sd7_api_loop import TENANTS, login, request, unwrap, main as run_loop  # noqa: E402

SUPER_CIPHER = os.environ.get("AIDOP_SUPER_CIPHER", "").strip()
if not SUPER_CIPHER:
    raise SystemExit("AIDOP_SUPER_CIPHER required")


def reset_password(super_token: str, user_id: str) -> str:
    status, body = request("POST", "/api/sysUser/resetPwd", {"id": int(user_id)}, super_token)
    pwd = unwrap(body)
    if status != 200 or not isinstance(pwd, str) or not pwd:
        raise SystemExit(f"resetPwd failed for {user_id}: HTTP {status} {body}")
    return pwd


def main() -> None:
    super_token = login("superAdmin.NET", "1300000000001", SUPER_CIPHER, already_encrypted=True)
    passwords = {}
    for code, meta in TENANTS.items():
        passwords[code] = reset_password(super_token, meta["user_id"])
        print("reset_ok", code, meta["account"])
    argv = sys.argv[:]
    for code in TENANTS:
        sys.argv = ["run_wp_sd7_api_loop.py", "--tenant", code, "--password", passwords[code]]
        run_loop()
    sys.argv = argv


if __name__ == "__main__":
    main()