fasto/backend/routes/originsRoutes.js

const express = require('express');
const crypto = require('crypto');
const { requireRole } = require('../middleware/auth');

const createOriginsRouter = ({ pool }) => {
  const router = express.Router();

  router.get('/origins', async (req, res) => {
    try {
      const { tenantId } = req.query;
      const effectiveTenantId = req.user.role === 'super_admin' ? tenantId : req.user.tenant_id;
      if (!effectiveTenantId || effectiveTenantId === 'all') return res.json([]);

      const [groups] = await pool.query('SELECT * FROM origin_groups WHERE tenant_id = ? ORDER BY created_at ASC', [effectiveTenantId]);

      if (groups.length === 0) {
        const gid = `origrp_${crypto.randomUUID().split('-')[0]}`;
        await pool.query('INSERT INTO origin_groups (id, tenant_id, name) VALUES (?, ?, ?)', [gid, effectiveTenantId, 'Origens Padrão']);

        const defaultOrigins = [
          { name: 'WhatsApp', color: 'bg-green-100 text-green-700 border-green-200 dark:bg-green-900/30 dark:text-green-400 dark:border-green-800' },
          { name: 'Instagram', color: 'bg-pink-100 text-pink-700 border-pink-200 dark:bg-pink-900/30 dark:text-pink-400 dark:border-pink-800' },
          { name: 'Website', color: 'bg-red-100 text-red-700 border-red-200 dark:bg-red-900/30 dark:text-red-400 dark:border-red-800' },
          { name: 'LinkedIn', color: 'bg-blue-100 text-blue-700 border-blue-200 dark:bg-blue-900/30 dark:text-blue-400 dark:border-blue-800' },
          { name: 'Indicação', color: 'bg-orange-100 text-orange-700 border-orange-200 dark:bg-orange-900/30 dark:text-orange-400 dark:border-orange-800' }
        ];

        for (const origin of defaultOrigins) {
          const oid = `oriitm_${crypto.randomUUID().split('-')[0]}`;
          await pool.query(
            'INSERT INTO origin_items (id, origin_group_id, name, color_class) VALUES (?, ?, ?, ?)',
            [oid, gid, origin.name, origin.color]
          );
        }

        await pool.query('UPDATE teams SET origin_group_id = ? WHERE tenant_id = ? AND origin_group_id IS NULL', [gid, effectiveTenantId]);
        groups.push({ id: gid, tenant_id: effectiveTenantId, name: 'Origens Padrão' });
      }

      const [items] = await pool.query('SELECT * FROM origin_items WHERE origin_group_id IN (?) ORDER BY created_at ASC', [groups.map(g => g.id)]);
      const [teams] = await pool.query('SELECT id, origin_group_id FROM teams WHERE tenant_id = ? AND origin_group_id IS NOT NULL', [effectiveTenantId]);

      const result = groups.map(g => ({
        ...g,
        items: items.filter(i => i.origin_group_id === g.id),
        teamIds: teams.filter(t => t.origin_group_id === g.id).map(t => t.id)
      }));

      res.json(result);
    } catch (error) {
      console.error("GET /origins error:", error);
      res.status(500).json({ error: error.message });
    }
  });

  router.post('/origins', requireRole(['admin', 'super_admin']), async (req, res) => {
    const { name, tenantId } = req.body;
    const effectiveTenantId = req.user.role === 'super_admin' ? tenantId : req.user.tenant_id;
    try {
      const gid = `origrp_${crypto.randomUUID().split('-')[0]}`;
      await pool.query('INSERT INTO origin_groups (id, tenant_id, name) VALUES (?, ?, ?)', [gid, effectiveTenantId, name]);
      res.status(201).json({ id: gid });
    } catch (error) {
      res.status(500).json({ error: error.message });
    }
  });

  router.put('/origins/:id', requireRole(['admin', 'super_admin']), async (req, res) => {
    const { name, teamIds } = req.body;
    try {
      if (name) {
        await pool.query('UPDATE origin_groups SET name = ? WHERE id = ?', [name, req.params.id]);
      }
      if (teamIds && Array.isArray(teamIds)) {
        await pool.query('UPDATE teams SET origin_group_id = NULL WHERE origin_group_id = ?', [req.params.id]);
        if (teamIds.length > 0) {
          await pool.query('UPDATE teams SET origin_group_id = ? WHERE id IN (?)', [req.params.id, teamIds]);
        }
      }
      res.json({ message: 'Origin group updated.' });
    } catch (error) {
      res.status(500).json({ error: error.message });
    }
  });

  router.delete('/origins/:id', requireRole(['admin', 'super_admin']), async (req, res) => {
    try {
      await pool.query('DELETE FROM origin_items WHERE origin_group_id = ?', [req.params.id]);
      await pool.query('UPDATE teams SET origin_group_id = NULL WHERE origin_group_id = ?', [req.params.id]);
      await pool.query('DELETE FROM origin_groups WHERE id = ?', [req.params.id]);
      res.json({ message: 'Origin group deleted.' });
    } catch (error) {
      res.status(500).json({ error: error.message });
    }
  });

  router.post('/origins/:id/items', requireRole(['admin', 'super_admin']), async (req, res) => {
    const { name, color_class } = req.body;
    try {
      const oid = `oriitm_${crypto.randomUUID().split('-')[0]}`;
      await pool.query(
        'INSERT INTO origin_items (id, origin_group_id, name, color_class) VALUES (?, ?, ?, ?)',
        [oid, req.params.id, name, color_class || 'bg-zinc-100 text-zinc-800 border-zinc-200']
      );
      res.status(201).json({ id: oid });
    } catch (error) {
      res.status(500).json({ error: error.message });
    }
  });

  router.put('/origin_items/:id', requireRole(['admin', 'super_admin']), async (req, res) => {
    const { name, color_class } = req.body;
    try {
      const [existing] = await pool.query('SELECT * FROM origin_items WHERE id = ?', [req.params.id]);
      if (existing.length === 0) return res.status(404).json({ error: 'Origin item not found' });

      await pool.query('UPDATE origin_items SET name = ?, color_class = ? WHERE id = ?', [name || existing[0].name, color_class || existing[0].color_class, req.params.id]);
      res.json({ message: 'Origin item updated.' });
    } catch (error) {
      res.status(500).json({ error: error.message });
    }
  });

  router.delete('/origin_items/:id', requireRole(['admin', 'super_admin']), async (req, res) => {
    try {
      await pool.query('DELETE FROM origin_items WHERE id = ?', [req.params.id]);
      res.json({ message: 'Origin item deleted.' });
    } catch (error) {
      res.status(500).json({ error: error.message });
    }
  });

  return router;
};

module.exports = {
  createOriginsRouter,
};