#!/bin/bash

API_URL="http://localhost:8001"
USER_EMAIL="med-test-${RANDOM}@example.com"
USER_NAME="medtest${RANDOM}"

echo "=========================================="
echo "Phase 2.7 - Fixed API Test Suite"
echo "=========================================="
echo ""

# Test 1: Health Check
echo "🔍 Test 1: Health Check"
HEALTH=$(curl -s ${API_URL}/health)
if echo "$HEALTH" | grep -q '"status":"ok"'; then
  echo "✅ PASS - $HEALTH"
else
  echo "❌ FAIL"
  exit 1
fi

# Test 2: Register User
echo "🔍 Test 2: Register User"
REGISTER=$(curl -s -X POST ${API_URL}/api/auth/register \
  -H "Content-Type: application/json" \
  -d '{"email":"'${USER_EMAIL}'","username":"'${USER_NAME}'","password":"SecurePass123!","first_name":"Test","last_name":"User"}')
if echo "$REGISTER" | grep -q '"token"'; then
  echo "✅ PASS"
  TOKEN=$(echo "$REGISTER" | grep -o '"token":"[^"]*' | cut -d'"' -f4)
else
  echo "❌ FAIL"
  exit 1
fi

# Test 3: Login
echo "🔍 Test 3: Login"
LOGIN=$(curl -s -X POST ${API_URL}/api/auth/login \
  -H "Content-Type: application/json" \
  -d '{"email":"'${USER_EMAIL}'","password":"SecurePass123!"}')
if echo "$LOGIN" | grep -q '"token"'; then
  echo "✅ PASS"
  TOKEN=$(echo "$LOGIN" | grep -o '"token":"[^"]*' | cut -d'"' -f4)
else
  echo "❌ FAIL"
fi

# Test 4: Create Medication (without profile_id)
echo "🔍 Test 4: Create Medication"
CREATE_MED=$(curl -s -X POST ${API_URL}/api/medications \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $TOKEN" \
  -d '{"name":"Lisinopril","dosage":"10mg","frequency":"once_daily","instructions":"Take with breakfast","start_date":"2026-03-01"}')
if echo "$CREATE_MED" | grep -q '"id"'; then
  echo "✅ PASS"
  MED_ID=$(echo "$CREATE_MED" | grep -o '"id":"[^"]*' | head -1 | cut -d'"' -f4)
  echo "Medication ID: $MED_ID"
else
  echo "❌ FAIL - Response: $CREATE_MED"
  MED_ID=""
fi

# Test 5: List Medications
echo "🔍 Test 5: List Medications"
LIST_MEDS=$(curl -s -X GET ${API_URL}/api/medications \
  -H "Authorization: Bearer $TOKEN")
if [ "$?" = "0" ]; then
  echo "✅ PASS"
else
  echo "❌ FAIL"
fi

# Test 6: Get Specific Medication
if [ -n "$MED_ID" ]; then
  echo "🔍 Test 6: Get Medication $MED_ID"
  GET_MED=$(curl -s -X GET ${API_URL}/api/medications/$MED_ID \
    -H "Authorization: Bearer $TOKEN")
  if echo "$GET_MED" | grep -q '"id"'; then
    echo "✅ PASS"
  else
    echo "❌ FAIL"
  fi
fi

# Test 7: Create Health Stat
echo "🔍 Test 7: Create Health Stat"
CREATE_STAT=$(curl -s -X POST ${API_URL}/api/health-stats \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $TOKEN" \
  -d '{"stat_type":"blood_pressure","value":{"systolic":120,"diastolic":80},"unit":"mmHg"}')
if echo "$CREATE_STAT" | grep -q '"id"'; then
  echo "✅ PASS"
  STAT_ID=$(echo "$CREATE_STAT" | grep -o '"id":"[^"]*' | cut -d'"' -f4)
else
  echo "⚠️  SKIP - Endpoint may not be implemented yet"
fi

# Test 8: List Health Stats
echo "🔍 Test 8: List Health Stats"
LIST_STATS=$(curl -s -X GET ${API_URL}/api/health-stats \
  -H "Authorization: Bearer $TOKEN")
if echo "$LIST_STATS" | grep -q 'health_stats\|\[\]'; then
  echo "✅ PASS"
else
  echo "⚠️  SKIP - Endpoint may not be implemented yet"
fi

# Test 9: Get User Profile
echo "🔍 Test 9: Get User Profile"
PROFILE=$(curl -s -X GET ${API_URL}/api/users/me \
  -H "Authorization: Bearer $TOKEN")
if echo "$PROFILE" | grep -q '"email"'; then
  echo "✅ PASS"
else
  echo "❌ FAIL"
fi

# Test 10: Unauthorized Access
echo "🔍 Test 10: Unauthorized Access"
UNAUTH=$(curl -s -w "%{http_code}" -X GET ${API_URL}/api/medications -o /dev/null)
if [ "$UNAUTH" = "401" ]; then
  echo "✅ PASS - Correctly blocked"
else
  echo "❌ FAIL - Got status $UNAUTH"
fi

echo ""
echo "=========================================="
echo "✅ Tests Complete!"
echo "=========================================="