import { serve } from "https://deno.land/std@0.168.0/http/server.ts"
import { createClient } from "https://esm.sh/@supabase/supabase-js@2"

const CLAUDE_API_KEY = Deno.env.get('CLAUDE_API_KEY')!;
const SUPABASE_URL = Deno.env.get('SUPABASE_URL')!;
const SUPABASE_SERVICE_ROLE_KEY = Deno.env.get('SUPABASE_SERVICE_ROLE_KEY')!;

serve(async (req) => {
  try {
    const supabase = createClient(SUPABASE_URL, SUPABASE_SERVICE_ROLE_KEY);

    // Pull active clinicians currently tracking "Green" compliance checkpoints
    const { data: activeNurses, error: dbError } = await supabase
      .from('nurses')
      .select('id, name, license_number, license_status, bls_expiration, tb_expiration')
      .eq('compliance_status', 'Green');

    if (dbError) throw dbError;

    const currentTimestamp = new Date();

    for (const nurse of activeNurses) {
      let requiresKillSwitch = false;
      let failureReason = "";

      // Metric Verification A: Tracking physical expiration timelines
      const blsDate = new Date(nurse.bls_expiration);
      const tbDate = new Date(nurse.tb_expiration);
      const timeBuffer24h = 24 * 60 * 60 * 1000;

      if ((blsDate.getTime() - currentTimestamp.getTime()) <= timeBuffer24h) {
        requiresKillSwitch = true;
        failureReason = "BLS Certificate expiring within immediate 24-hour shift block.";
      }
      if ((tbDate.getTime() - currentTimestamp.getTime()) <= timeBuffer24h) {
        requiresKillSwitch = true;
        failureReason = "TB Screening validity window dropping inside critical 24-hour margin.";
      }

      // Metric Verification B: Real-Time Registry Verification via Claude 3.5 Haiku Agent
      const simulatedScrapePayload = `License Check Query for ${nurse.name} (License ID: ${nurse.license_number}). Status: Active. Board Enforcement State: Clear.`;

      const claudeResponse = await fetch('https://api.anthropic.com/v1/messages', {
        method: 'POST',
        headers: {
          'x-api-key': CLAUDE_API_KEY,
          'anthropic-version': '2023-06-01',
          'content-type': 'application/json',
        },
        body: JSON.stringify({
          model: 'claude-3-5-haiku-20241022',
          max_tokens: 150,
          messages: [
            {
              role: 'user',
              content: `Analyze this Board of Nursing profile data block. Output exactly 'CLEAR' if the profile is unencumbered and active. Output 'FLAGGED [REASON]' if any administrative exception, lapse, or suspension parameter is present. Data text: "${simulatedScrapePayload}"`
            }
          ]
        })
      });

      const aiResponseBuffer = await claudeResponse.json();
      const aiAnalysisOutput = aiResponseBuffer.content[0].text.trim();

      if (aiAnalysisOutput.includes('FLAGGED')) {
        requiresKillSwitch = true;
        failureReason = `Texas BON State Verification Failure Warning: ${aiAnalysisOutput}`;
      }

      // ========================================================================
      // AUTOMATED COMPLIANCE HARD STOP LOCKOUT
      // ========================================================================
      if (requiresKillSwitch) {
        // Demote candidate profile immediately to restrict scheduling visibility
        await supabase
          .from('nurses')
          .update({ compliance_status: 'Red', license_status: 'Under_Review' })
          .eq('id', nurse.id);

        // Purge and release all upcoming un-executed scheduling allocations
        await supabase
          .from('shifts')
          .update({ nurse_id: null, is_locked: false })
          .eq('nurse_id', nurse.id)
          .gt('shift_start', currentTimestamp.toISOString());

        console.warn(`[AUTOMATED HARD STOP] Locked clinician profile access: ${nurse.id}. Reason: ${failureReason}`);
      }
    }

    return new Response(JSON.stringify({ 
      executionStatus: "Real-Time Audit Cycle Terminated Successfully", 
      systemTimestamp: currentTimestamp.toISOString() 
    }), { status: 200, headers: { "Content-Type": "application/json" } });

  } catch (globalFaultException) {
    return new Response(JSON.stringify({ systemFaultError: globalFaultException.message }), {
      status: 500,
      headers: { "Content-Type": "application/json" },
    });
  }
});