#!/usr/bin/env python3
"""Reset UAT passwords and run a named WP-SD8 API loop. Do not commit."""

from __future__ import annotations

import os
import sys
from pathlib import Path

os.environ.setdefault("AIDOP_API_BASE", "http://127.0.0.1:5005")

HERE = Path(__file__).resolve().parent
sys.path.insert(0, str(HERE))

from run_wp_sd7_api_loop import TENANTS, login, request, unwrap, main as run_loop  # noqa: E402

SUPER_CIPHER = os.environ.get("AIDOP_SUPER_CIPHER", "").strip()
if not SUPER_CIPHER:
    raise SystemExit("AIDOP_SUPER_CIPHER required")


def reset_password(super_token: str, user_id: str) -> str:
    status, body = request("POST", "/api/sysUser/resetPwd", {"id": int(user_id)}, super_token)
    pwd = unwrap(body)
    if status != 200 or not isinstance(pwd, str) or not pwd:
        raise SystemExit(f"resetPwd failed for {user_id}: HTTP {status}")
    return pwd


def main() -> None:
    suffix = os.environ.get("AIDOP_UAT_OUT_PREFIX", "08-rerun1")
    modules = os.environ.get("AIDOP_UAT_MODULES", "").strip()
    super_token = login("superAdmin.NET", "1300000000001", SUPER_CIPHER, already_encrypted=True)
    passwords = {}
    for code, meta in TENANTS.items():
        passwords[code] = reset_password(super_token, meta["user_id"])
        print("reset_ok", code, meta["account"])
    argv = sys.argv[:]
    for code in TENANTS:
        args = [
            "run_wp_sd7_api_loop.py",
            "--tenant",
            code,
            "--password",
            passwords[code],
            "--out",
            f"{suffix}-{code}.json",
        ]
        if modules:
            args.extend(["--modules", modules])
        sys.argv = args
        run_loop()
    sys.argv = argv


if __name__ == "__main__":
    main()