"""补全 BOM 模块缺失的权限码"""
import subprocess, sys

CODES = [
    ('bom_manage:parent_spec', '父件规格'),
    ('bom_manage:child_id', '子件ID'),
    ('bom_manage:dosage', '用量'),
    ('bom_manage:remark', '备注'),
]

SQLS = []
# 1. sys_element
for code, name in CODES:
    SQLS.append(f"""INSERT INTO sys_element (menu_code, name, code, element_type)
SELECT 'bom_manage', '{name}', '{code}', 'column'
WHERE NOT EXISTS (SELECT 1 FROM sys_element WHERE code = '{code}');""")

# 2. sys_role_permission — 给已有 BOM 权限的角色补全
SQLS.append("""
INSERT INTO sys_role_permission (role_code, target_code, type, company_name)
SELECT rp.role_code, elem.code, 'element', rp.company_name
FROM (SELECT DISTINCT role_code, company_name FROM sys_role_permission WHERE target_code LIKE 'bom_manage:%') rp
CROSS JOIN (SELECT unnest(ARRAY['bom_manage:parent_spec','bom_manage:child_id','bom_manage:dosage','bom_manage:remark']) AS code) elem
WHERE NOT EXISTS (
  SELECT 1 FROM sys_role_permission rp2
  WHERE rp2.role_code = rp.role_code
    AND rp2.target_code = elem.code
    AND COALESCE(rp2.company_name, '') = COALESCE(rp.company_name, '')
);
""")

# 3. 验证
SQLS.append("""SELECT target_code, string_agg(role_code, ', ' ORDER BY role_code) AS roles
FROM sys_role_permission WHERE target_code LIKE 'bom_manage:%'
GROUP BY target_code ORDER BY target_code;""")

full_sql = '\n'.join(SQLS)
result = subprocess.run(
    ['docker', 'exec', '-i', 'inventory_db', 'psql', '-U', 'test', '-d', 'inventory_system'],
    input=full_sql, capture_output=True, text=True, timeout=10
)
print(result.stdout)
if result.stderr:
    print(result.stderr, file=sys.stderr)