#!/bin/bash
# =============================================================================
# clickhouse-init.sh — Pre-process shared SQL files for integration testing
#
# Copies SQL from /initdb-src/ to /tmp, patches credentials, then executes.
# =============================================================================
set -e

SRC_DIR="/initdb-src"
TMP_DIR="/tmp/initdb-patched"
mkdir -p "$TMP_DIR"

for f in "$SRC_DIR"/*.sql; do
    [ -f "$f" ] || continue
    base=$(basename "$f")
    echo "[init] Patching $base"
    sed \
        -e "s/USER 'admin'/USER 'default'/g" \
        -e "s/PASSWORD 'CHANGE_ME'/PASSWORD ''/g" \
        -e "s/PASSWORD 'ChangeMe'/PASSWORD ''/g" \
        "$f" > "$TMP_DIR/$base"
done

for f in "$TMP_DIR"/*.sql; do
    [ -f "$f" ] || continue
    echo "[init] Executing $(basename "$f")"
    clickhouse-client --multiquery < "$f"
done

echo "[init] All SQL files executed — initialisation terminée"

# =============================================================================
# Charger les stubs CSV dans les tables peuplées par des scripts externes
# (fetch_rules.py, update-csv-data.sh) qui ne sont pas exécutés en E2E.
# =============================================================================

load_csv_stub() {
    local csv_file="$1"
    local table="$2"
    local db="${3:-ja4_processing}"
    if [ -f "$csv_file" ]; then
        echo "[init] Loading $table from $(basename $csv_file)"
        clickhouse-client --query="INSERT INTO $db.$table FORMAT CSVWithNames" < "$csv_file" \
            && echo "[init]   OK" || echo "[init]   FAILED (non-fatal)"
    fi
}

STUB_DIR="/var/lib/clickhouse/user_files"

load_csv_stub "$STUB_DIR/anubis_ip_rules.csv"        "anubis_ip_rules"
load_csv_stub "$STUB_DIR/anubis_asn_rules.csv"        "anubis_asn_rules"
load_csv_stub "$STUB_DIR/ref_bot_networks.csv"         "ref_bot_networks"
load_csv_stub "$STUB_DIR/browser_h2_signatures.csv"   "browser_h2_signatures"

# Recharger les dictionnaires qui dépendent des nouvelles données
echo "[init] Reloading Anubis and H2 dictionaries..."
clickhouse-client --query="SYSTEM RELOAD DICTIONARY ja4_processing.dict_anubis_ip" 2>/dev/null || true
clickhouse-client --query="SYSTEM RELOAD DICTIONARY ja4_processing.dict_anubis_asn" 2>/dev/null || true
clickhouse-client --query="SYSTEM RELOAD DICTIONARY ja4_processing.dict_browser_h2_signatures" 2>/dev/null || true
echo "[init] Dictionary reload complete"