#!/usr/bin/env node
'use strict';

/**
 * 开发运维脚本：重置用户密码（argon2id）
 * 用法：node scripts/set-password.js <username> <newPassword>
 * 说明：绕过 API 直接写库，仅限开发/运维；生产操作须记入变更单。
 */
const path = require('path');
require('dotenv').config({ path: path.join(__dirname, '..', '.env') });

const mysql = require('mysql2/promise');
const argon2 = require('argon2');

async function main() {
  const [username, password] = process.argv.slice(2);
  if (!username || !password) {
    console.error('用法: node scripts/set-password.js <username> <newPassword>');
    process.exit(1);
  }
  if (password.length < 10 || !/[a-z]/.test(password) || !/[A-Z]/.test(password) || !/\d/.test(password)) {
    console.error('密码强度不足：至少 10 位，须含大小写字母与数字');
    process.exit(1);
  }
  const conn = await mysql.createConnection(process.env.DATABASE_URL);
  const hash = await argon2.hash(password, { type: argon2.argon2id });
  const [res] = await conn.execute(
    'UPDATE users SET password_hash = ?, pwd_changed_at = NOW(), failed_attempts = 0, locked_until = NULL WHERE username = ?',
    [hash, username],
  );
  if (res.affectedRows === 0) {
    console.error(`用户不存在: ${username}`);
    process.exit(1);
  }
  console.log(`密码已重置: ${username}`);
  await conn.end();
}

main().catch((e) => {
  console.error(e.message);
  process.exit(1);
});