/**
 * Copyright (c) 2026 Niolla
 * All rights reserved.
 *
 * This source code is proprietary and confidential.
 * Unauthorized copying, modification, distribution, or use
 * of this file, via any medium, is strictly prohibited.
 */

// app/services/permission.service.js

const db = require("../models");
const User = db.User;
const RolePermission = db.rolePermission;
const UserRole = db.UserRole;
const UserPermission = db.userPermission;

const {
  getCachedPermissions,
  setCachedPermissions
} = require("../utils/cache.util");

const getEffectivePermissions = async (userId) => {
  try {
    const cached = await getCachedPermissions(userId);
    if (cached) {
      console.log("⚡ PERMISSION CACHE HIT");
      return cached;
    }

    console.log("🐢 PERMISSION CACHE MISS");

    const user = await User.findByPk(userId);
    if (!user) return [];

    const roles = await UserRole.findAll({ where: { user_id: userId }, attributes: ["role_id"] });
    const rolePermissions = roles.length ? await RolePermission.findAll({
      where: { role_id: roles.map((role) => role.role_id) },
      attributes: ["permission_id"]
    }) : [];

    const userPermissions = await UserPermission.findAll({
      where: { user_id: userId },
      attributes: ["permission_id"]
    });

    const map = {};

    // role permissions
    rolePermissions.forEach((rp) => {
      map[rp.permission_id] = true;
    });

    // user overrides (just add)
    userPermissions.forEach((up) => {
      map[up.permission_id] = true;
    });

    const finalPermissions = Object.keys(map);

    console.log("FINAL PERMS:", finalPermissions);

    await setCachedPermissions(userId, finalPermissions);

    return finalPermissions;

  } catch (err) {
    console.error("PERMISSION SERVICE ERROR:", err);
    return [];
  }
};

module.exports = { getEffectivePermissions };