const bcrypt = require("bcrypt");
const db = require("../config/database"); // Database connection
const fs = require("fs");
const jwt = require("jsonwebtoken");
const nlp = require("compromise");
const nodemailer = require("nodemailer");
const sender_port = process.env.SENDER_PORT;
const sender_security = process.env.SENDER_SECURITY;
const path = require('path')

const { emitEvent } = require("../services/secondaryWebsocket");

console.log('sender port : ', sender_port);
console.log('sender security : ', sender_security);
//  zoho transporter
const transporter = nodemailer.createTransport({
  host: "smtp.zoho.com",
  port: 465,
  secure: true,
   auth: {
    user: "kavya.j@tech4biz.io", // Your Zoho email address
    pass: "8pQfkBw8gbrz", // Your Zoho App Password (not your account password)
  }
});

exports.initWebSocket = (io) => {
  io.on("connection", (socket) => {
    console.log("Hospital connected:", socket.id);

    socket.on("register_hospital", (hospitalCode) => {
      hospitalSockets[hospitalCode] = socket;
      console.log(`Hospital ${hospitalCode} registered.`);
    });

    socket.on("disconnect", () => {
      const hospitalCode = Object.keys(hospitalSockets).find(
        (key) => hospitalSockets[key] === socket
      );
      if (hospitalCode) delete hospitalSockets[hospitalCode];
      console.log(`Hospital ${hospitalCode} disconnected.`);
    });
  });
};

exports.uploadIdPhoto = async (req, res) => {
  try {
    // Extracting user ID and hospital code
    const userId = parseInt(req.params.id, 10); // User ID from route
    const { hospital_code } = req.user; // Authenticated user's hospital code

    // Check if user ID is valid
    if (isNaN(userId)) {
      console.error("Invalid User ID:", userId);
      return res.status(400).json({ error: "Invalid user ID" });
    }

    // Check if a file was uploaded
    if (!req.file) {
      console.error("No file uploaded");
      return res.status(400).json({ error: "No file uploaded" });
    }

    const photoPath = `/uploads/id_photos/${req.file.filename}`;

    // Verify app user is part of the same hospital

    const query = `
            SELECT hospital_code FROM app_users WHERE id = ? AND hospital_code = ?
        `;
    const result = await db.query(query, [userId, hospital_code]);

    if (result.length === 0) {
      console.error(
        "Authorization failed for user ID:",
        userId,
        "with hospital_code:",
        hospital_code
      );
      return res
        .status(403)
        .json({ error: "You are not authorized to upload ID for this user" });
    }

    // Update the ID photo path in the database
    await db.query("UPDATE app_users SET id_photo_url = ? WHERE id = ?", [
      photoPath,
      userId,
    ]);

    res.status(200).json({
      message: "ID photo uploaded successfully!",
      id_photo_url: photoPath,
    });
  } catch (error) {
    console.error("Error uploading ID photo:", error.message);
    res.status(500).json({ error: "Internal server error" });
  }
};

exports.updateSettings = async (req, res) => {
  try {
    const userId  = req.user.id; // Assuming user is authenticated and userId is available
    const { pin, pin_enabled, remember_me } = req.body;

    // Validate pin (if provided)
    if (pin && (typeof pin !== 'string' || pin.length !== 4)) {
      return res.status(400).json({ error: 'Invalid PIN format. Must be a 4-digit string.' });
    }

    // Determine expiry based on remember_me
    let expiresIn = '5h';
    let expiryTimestamp = new Date();

    if (remember_me) {
      expiresIn = '30d';
      expiryTimestamp.setDate(expiryTimestamp.getDate() + 30);
    } else {
      expiryTimestamp.setHours(expiryTimestamp.getHours() + 5);
    }

    // Generate new access token
    const payload = { id: userId, role: 'AppUser' };
    const accessToken = jwt.sign(payload, process.env.JWT_ACCESS_TOKEN_SECRET, {
      expiresIn: expiresIn,
    });

    // Update user settings and access token
    const query = `UPDATE app_users SET pin_number = ?, pin_enabled = ?, remember_me = ?, access_token = ?, access_token_expiry = ? WHERE id = ?`;
    const result=await db.query(query, [pin, pin_enabled, remember_me, accessToken, expiryTimestamp, userId]);

    if (result.affectedRows > 0) {
      console.log("Table updated successfully.");
    } else {
      console.log("Table not updated. No matching user found.");
    }

    res.status(200).json({ message: 'Settings updated successfully.', accessToken });
  } catch (error) {
    console.error('Error updating settings:', error);
    res.status(500).json({ error: 'Internal Server Error' });
  }
};

exports.hitlike = async (req, res) => {
  try {
    // Extract user ID and session ID from the request
    const { session_id, id } = req.body;
    const log_id = id;
    const app_user_id = req.user.id;
    // Check if both app_user_id and session_id are provided
    if (!app_user_id || !session_id || !log_id) {
      return res.status(400).json({
        status: 'error',
        message: 'app user id and session id and log id are required',
      });
    }

    // Query to toggle the is_liked value
    const toggleQuery = `
      UPDATE interaction_logs
      SET is_liked = NOT is_liked
      WHERE app_user_id = ? AND session_id = ? AND id = ?
    `;

    // Execute the query
    const result = await db.query(toggleQuery, [app_user_id, session_id,log_id]);

    // Check if any rows were affected
    if (result.affectedRows > 0) {
      return res.status(200).json({
        status: 'success',
        message: 'Like updated successfully',
        data: {
          app_user_id,
          session_id,
          is_liked: result.changedRows > 0 ? 1 : 0, // 1 if changed, 0 if not
        },
      });
    } else {
      return res.status(404).json({
        status: 'error',
        message: 'No matching record found to toggle',
      });
    }
  } catch (error) {
    console.error('Error during like toggle:', error);
    return res.status(500).json({
      status: 'error',
      message: 'Internal server error',
    });
  }
};

exports.hitFlag = async (req, res) => {
  try {
    // Extract user ID and session ID from the request
    const { session_id, logid } = req.body;
    const log_id = logid;
    
    const app_user_id = req.user.id;
    // Check if both app_user_id and session_id are provided
    if (!app_user_id || !session_id || !log_id) {
      return res.status(400).json({
        status: 'error',
        message: 'app user id and session id and log id are required',
      });
    }

    // Query to toggle the is_liked value
    const toggleQuery = `
      UPDATE interaction_logs
SET is_flagged = NOT is_flagged
WHERE app_user_id = ? AND session_id = ? AND id = ?

    `;

    // Execute the query
    const result = await db.query(toggleQuery, [app_user_id, session_id,log_id]);

    // Check if any rows were affected
    if (result.affectedRows > 0) {
      return res.status(200).json({
        status: 'success',
        message: 'Updated successfully',
        data: {
          app_user_id,
          session_id  
        },
      });
    } else {
      return res.status(404).json({
        status: 'error',
        message: 'No matching record found to toggle',
      });
    }
  } catch (error) {
    console.error('Error during like toggle:', error);
    return res.status(500).json({
      status: 'error',
      message: 'Internal server error',
    });
  }
};

exports.addReportText = async (req, res) => {
  try {
    const { session_id, report_text } = req.body;
    const app_user_id = req.user.id;

    // Validate input
    if (!app_user_id || !session_id  || typeof report_text !== 'string') {
      return res.status(400).json({
        status: 'error',
        message: 'app_user_id, session_id, logid, and report_text are required',
      });
    }

    // Update query
    const updateQuery = `
      UPDATE interaction_logs
      SET report_text = ?
      WHERE app_user_id = ? AND session_id = ? 
    `;

    // Execute update
    const result = await db.query(updateQuery, [report_text, app_user_id, session_id]);

    // Handle response
    if (result.affectedRows > 0) {
      return res.status(200).json({
        status: 'success',
        message: 'Session reported successfully. Admin will review your report',
        data: {
          app_user_id,
          session_id,
          report_text
        },
      });
    } else {
      return res.status(404).json({
        status: 'error',
        message: 'No matching record found to update report text',
      });
    }
  } catch (error) {
    console.error('Error updating report text:', error);
    return res.status(500).json({
      status: 'error',
      message: 'Internal server error',
    });
  }
};

exports.updateChecked = async (req,res) =>{
  try {
    const app_user_id = req.params.id;
    if (!["Admin", 8].includes(req.user.role)) {
      return res.status(403).json({ error: "Unauthorized to approve IDs" });
    }

    const updateQuery = `
      UPDATE app_users
      SET checked = ?
      WHERE id = ?
    `;
    const result = await db.query(updateQuery, [1, app_user_id]);
    if (result.affectedRows > 0) {
      return res.status(200).json({
        status: 'success',
        message: 'Acknowledged successfully',
        
      });
    } else {
      return res.status(404).json({
        status: 'error',
        message: 'No matching record found to update checked',
      });
    }

    
  } catch (error) {
    console.error("Error updating checked:", error);
    return res.status(500).json({ error: "Internal server error" });
  }
}


exports.signup = async (req, res) => {
  try {
    const { pin, pin_status,remember_me, email, password, hospital_code, username } = req.body;

    if (!email || !password || !hospital_code || !username) {
      return res.status(400).json({
        error: "Email, password, username, and hospital code are required",
      });
    }

    const pin_enabled = (pin_status === undefined || pin_status === '') ? 0 : pin_status;
    const remember_me_ = (remember_me === undefined || remember_me === '') ? 0 : remember_me;

    // Check if the hospital_code exists in the `hospitals` table
    const hospitalQuery =
      "SELECT hospital_code FROM hospitals WHERE hospital_code = ?";
    const hospitalResult = await db.query(hospitalQuery, [hospital_code]);

    if (hospitalResult.length === 0) {
      return res.status(404).json({ error: "Invalid hospital code" });
    }

    // Check if the email is already in use
    const userQuery = "SELECT id FROM app_users WHERE email = ?";
    const userResult = await db.query(userQuery, [email]);

    if (userResult.length > 0) {
      return res.status(400).json({ error: "Email already in use" });
    }

       // Check if a file was uploaded
    if (!req.file) {
      return res.status(400).json({ error: "ID photo url is required" });
    }
    // Hash the password
    const hashPassword = await bcrypt.hash(password, 10);

    // Insert the new app user into the `app_users` table
    const insertQuery = `
            INSERT INTO app_users (email, hash_password, hospital_code, status, username, pin_number, pin_enabled, remember_me )
            VALUES (?, ?, ?, 'Pending', ?, ?, ?,?)
        `;
    const result = await db.query(insertQuery, [
      email,
      hashPassword,
      hospital_code,
      username,
      pin,  // Set pin to null if not provided
      pin_enabled,
      remember_me_
    ]);

    const userId = result.insertId; // Get the new user's ID

 

    const filePath = `/uploads/id_photos/${req.file.filename}`; // Correct file path

    // Update the ID photo path in the database
    await db.query(
      "UPDATE app_users SET id_photo_url = ?, upload_status = ? WHERE id = ?",
      [filePath, "1", userId]
    );

    // ✅ Notify hospitals in the SECONDARY WebSocket instance
    emitEvent("new_user", {
      message: `A new user has been created for hospital ${hospital_code}.`,
      user: { id: userId, username, email, hospital_code: hospital_code },
    });

    res.status(201).json({
      message: "User signed up and ID photo uploaded successfully!",
      data: {
        id: userId,
        email,
        hospital_code,
        username,
        id_photo_url: filePath,
        pin: pin || null,
        pin_status : pin_status,
        remember_me: remember_me
      },
    });

  } catch (error) {
    console.error("Error during signup and ID photo upload:", error.message);
    res.status(500).json({ error: "Internal server error" });
  }
};

exports.login = async (req, res) => {
  try {
    const { email, password } = req.body;
    let remember_me;

    if (!email || !password) {
      return res.status(400).json({ error: "Email and password are required" });
    }

    console.log("email----",email)
    // Check if the user exists
    const query = "SELECT * FROM app_users WHERE email = ?";
    const result = await db.query(query, [email]);

   console.log("result---",result)
    if (result.length === 0) {
      return res.status(404).json({ error: "User not found" });
    }

    const user = result[0];
    remember_me = user.remember_me

    console.log("user-data----------------------",user);

    const hospitalData = await db.query("SELECT * FROM hospitals WHERE hospital_code = ?", [user.hospital_code]);
    // if (hospitalData.publicSignupEnabled) {
    //   throw new Error("Hospital not found");
    // }

    console.log("hospitalData---",hospitalData)

     let actual_status;
      actual_status = user.status
    if(hospitalData[0].publicSignupEnabled){
      user.status = "Active"
    }

    if (user.status === "Pending" && !hospitalData[0].publicSignupEnabled) {
      return res.status(404).json({ error: "Your Account is Under Review" });

    }

    if (user.status === "Inactive" && !hospitalData[0].publicSignupEnabled) {
      return res.status(404).json({ error: "Contact admin your account is not approved" });

    }

    
    // Validate the password
    const validPassword = await bcrypt.compare(password, user.hash_password);
    if (!validPassword) {
      return res.status(401).json({ error: "Invalid email or password" });
    }

    // Determine expiry based on remember_me
    let expiresIn = "5h";
    let expiryTimestamp = new Date();
    let rememberMeValue = remember_me;
    if (rememberMeValue === undefined) rememberMeValue = user.remember_me;
    if (rememberMeValue === true || rememberMeValue === 1 || rememberMeValue === "1" || rememberMeValue === "true") {
      const updateQuery = `
      UPDATE app_users
      SET remember_me = ?
      WHERE id = ?
    `;
    await db.query(updateQuery, [remember_me,user.id]);

      expiresIn = "30d";
      expiryTimestamp.setDate(expiryTimestamp.getDate() + 30);
    } else {
      expiryTimestamp.setHours(expiryTimestamp.getHours() + 5);
    }

    // Generate a new access token
    const payload = { id: user.id, email: user.email, role: "AppUser" };
    const accessToken = jwt.sign(payload, process.env.JWT_ACCESS_TOKEN_SECRET, {
      expiresIn: expiresIn,
    });

    // SQL query to fetch hospital data based on the provided hospital_code
    const query_hospital = `
      SELECT * FROM hospitals WHERE hospital_code = ?;
        `;

    // Run the query
    const result_hospital = await db.query(query_hospital, [user.hospital_code]);

    // hospital users
    const queryHospitalUsr = `
      SELECT * FROM hospital_users WHERE hospital_code = ?;
        `;

    // Run the query
    const resultHospitalUsr = await db.query(queryHospitalUsr, [user.hospital_code]);

    const hospitalUser = resultHospitalUsr[0];
    if (!hospitalUser) {
        return res.status(404).json({ error: "Hospital user not found" });
    }
    // Update the access token and expiry in the database
    const updateQuery = `
      UPDATE app_users
      SET access_token = ?, access_token_expiry = ?, remember_me = ?
      WHERE id = ?
    `;
    await db.query(updateQuery, [accessToken, expiryTimestamp, (rememberMeValue === true || rememberMeValue === 1 || rememberMeValue === "1" || rememberMeValue === "true") ? 1 : 0, user.id]);

   
    // Send response
    res.status(200).json({
      message: "Login successful",
      user: {
        id: user.id,
        email: user.email,
        pin: user.pin_number,
        pin_enabled: user.pin_enabled,
        hospital_code: user.hospital_code,
        hospital_id : hospitalData[0].id,
        status: user.status,
        actualStatus: actual_status,
        hospital_name: result_hospital[0].name_hospital,
        primary_color: result_hospital[0].primary_color,
        secondary_color: result_hospital[0].secondary_color,
        upload_status: user.upload_status,
        id_photo_url: user.id_photo_url,
        primary_admin_email: result_hospital[0].primary_admin_email,
        mobile_number: result_hospital[0].mobile_number,
        username: user.username,
        logo_url: resultHospitalUsr[0].profile_photo_url,
        query_title: user.query_title,
        remember_me: (rememberMeValue === true || rememberMeValue === 1 || rememberMeValue === "1" || rememberMeValue === "true") ? 1 : 0
      },
      accessToken,
    });


  } catch (error) {
    console.error("Error during login:", error.message);
    res.status(500).json({ error: "Internal server error" });
  }
};

exports.checkPin = async (req, res) => {
  try {
    const { email, pin } = req.body;

    if (!email || !pin) {
      return res.status(400).json({ error: "Email and Pin are required" });
    }

    // Check if the user exists
    const query = "SELECT * FROM app_users WHERE email = ?";
    const result = await db.query(query, [email]);

    if (result.length === 0) {
      return res.status(404).json({ error: "User not found" });
    }

    const user = result[0];

    const hospitalData = await db.query("SELECT * FROM hospitals WHERE hospital_code = ?", [user.hospital_code]);

    
    

    if (user.status === "Pending" && !hospitalData[0].publicSignupEnabled) {
      throw new Error("Your Account is Under Review");
    }

    if (user.status === "Inactive" && !hospitalData[0].publicSignupEnabled) {
      throw new Error("Contact admin your account is not approved");
    }
    // Check PIN if PIN status is enabled
      if (pin !== user.pin_number) {
        return res.status(401).json({ 
          error: "Invalid PIN",
          requires_pin: true,
          message: "Incorrect PIN. Please try again"
        });
      }
    
    // Send response
    res.status(200).json({
      message: "Pin verified successfully",
    });
  } catch (error) {
    console.error("Error during login:", error.message);
    res.status(500).json({ error: "Internal server error" });
  }
};

exports.logout = async (req, res) => {
  try {
    const userId = req.user.id; // Assuming the user is authenticated via middleware

    // Check if the user exists
    const query = "SELECT * FROM app_users WHERE id = ?";
    const result = await db.query(query, [userId]);

    if (result.length === 0) {
      return res.status(404).json({ error: "User not found" });
    }

    // Invalidate the access token in the database
    const updateQuery = `
            UPDATE app_users
            SET access_token = NULL, access_token_expiry = NULL
            WHERE id = ?
        `;
    await db.query(updateQuery, [userId]);

    res.status(200).json({ message: "Logout successful" });
  } catch (error) {
    console.error("Error during logout:", error.message);
    res.status(500).json({ error: "Internal server error" });
  }
};

// controller.js
exports.getAppUsersByHospitalCode = async (req, res) => {
  try {
    // Extract the hospital_code from the token (req.user object)
    const userId = req.user.id;

    if (!userId) {
      return res.status(400).json({ error: "User not found for the token" });
    }

    // Query to fetch hospital users based on the hospital_code
    const query = `
            SELECT id, email, status,hospital_code
            FROM app_users
            WHERE id = ?;
        `;
    const result = await db.query(query, [userId]);

    if (result.length === 0) {
      return res
        .status(404)
        .json({ error: "No users found for the specified Token" });
    }

    const hospitalData = await db.query("SELECT * FROM hospitals WHERE hospital_code = ?", [result[0].hospital_code]);
    if(hospitalData[0].publicSignupEnabled){
      result[0].status = 'Active'
    }
    // Send the response with the users data
    res.status(200).json({
      message: "Hospital users fetched successfully",
      user: result[0],
    });
  } catch (error) {
    console.error("Error fetching hospital users:", error.message);
    res.status(500).json({ error: "Internal server error" });
  }
};

exports.approveUserId = async (req, res) => {
  try {
    const appUserId = req.params.id; // App user ID to approve
    const { role } = req.user; // Authenticated user's details
    const { Action } = req.body;

    const { hospital_code } = req.user;

    if (!req.body.Action) {
      return res.status(400).json({ error: "Action is required" });
    }

    if (!["Superadmin", "Admin", 8].includes(role)) {
      return res.status(403).json({ error: "Unauthorized to approve IDs" });
    }

    const query = `
            SELECT hospital_code FROM app_users WHERE id = ? AND hospital_code = ?
        `;

    const result = await db.query(query, [appUserId, hospital_code]);

    if (result.length === 0) {
      return res
        .status(403)
        .json({ error: "User does not belong to your hospital" });
    }

    // Approve the ID
    if (Action == "Reject") {
      await db.query('UPDATE app_users SET status = "Inactive" WHERE id = ?', [
        appUserId,
      ]);
      res.status(200).json({ message: "ID Rejected successfully" });
    } else if (Action == "Approve") {
      await db.query('UPDATE app_users SET status = "Active" WHERE id = ?', [
        appUserId,
      ]);
      res.status(200).json({ message: "ID approved successfully" });
    }
  } catch (error) {
    console.error("Error approving ID:", error.message);
    res.status(500).json({ error: "Internal server error" });
  }
};

exports.getAppUsers = async (req, res) => {
  try {
    const { role } = req.user;
    // Ensure the user has the proper role
    if (!["Superadmin", "Admin", 9, 8].includes(role)) {
      return res.status(403).json({ error: "Unauthorized to view app users" });
    }

    // Query to fetch app users
    const query = `
            SELECT * FROM app_users;
        `;

    const users = await db.query(query);

    if (users.length === 0) {
      return res
        .status(404)
        .json({ message: "No app users found for this hospital" });
    }

    res.status(200).json({
      message: "App users fetched successfully",
      data: users,
    });
  } catch (error) {
    console.error("Error fetching app users:", error.message);
    res.status(500).json({ error: "Internal server error" });
  }
};

exports.getAppUserByHospitalId = async (req, res) => {
  try {
    const { role } = req.user;
    const { id } = req.params; // Extract user ID from request parameters
    // Log authenticated user details

    // Ensure the user has the proper role
    if (!["Superadmin", "Admin", 8, 9].includes(role)) {
      return res.status(403).json({ error: "Unauthorized to view app users" });
    }

    // fetching hospital code from hospital id
    const query1 = `SELECT * FROM hospitals WHERE id = ?`;
    const result1 = await db.query(query1, [id]);
    const hospital_code = result1[0].hospital_code;
    console.log("result1----", result1);

    // Query to fetch the app user by hospital_code
    const query = `SELECT * FROM app_users WHERE hospital_code = ?`;
    const users = await db.query(query, [hospital_code]);

    if (users.length === 0) {
      return res.status(404).json({ message: "App users not found" });
    }

    res.status(200).json({
      message: "App user fetched successfully",
      data: users, // Return single user object
    });
  } catch (error) {
    console.error("Error fetching app user:", error.message);
    res.status(500).json({ error: "Internal server error" });
  }
};

exports.deleteAppUser = async (req, res) => {
  try {
    const { id } = req.params;
    const { hospital_code } = req.user;

    // Check if the user exists
    const appUserquery = "SELECT * FROM app_users WHERE id = ?";
    const users = await db.query(appUserquery, [id]);

    if (users.length === 0) {
      return res
        .status(404)
        .json({ message: "No app users found for this hospital" });
    }

    // Ensure only Admin or Superadmin can delete users
    if (!["Admin", "Superadmin", 8, 7,"AppUser"].includes(req.user.role)) {
      return res.status(403).json({ error: "Unauthorized to delete users" });
    }

    // Ensure user belongs to the same hospital
    const query =
      "SELECT hospital_code,id_photo_url FROM app_users WHERE id = ? AND hospital_code = ?";

    const result = await db.query(query, [id, hospital_code]);

    if (!result || result.length === 0) {
      return res
        .status(403)
        .json({ error: "User does not belong to your hospital" });
    }

    // Unlink (delete) the associated file if it exists and is not null
    if (result[0].id_photo_url) {
      const filePath = path.join(__dirname, '..','..', 'uploads', result[0].id_photo_url.replace(/^\/uploads\//, ''));

      fs.access(filePath, fs.constants.F_OK, (err) => {
        if (err) {
          console.error(`File not found: ${filePath}`);
          return;
        }

        fs.unlink(filePath, (err) => {
          if (err) {
            console.error('Error deleting file:', err.message);
          } else {
            console.log('File deleted successfully:', filePath);
          }
        });
      });
    } else {
      console.log('No file to delete - id_photo_url is null');
    }

    // delete feedback
    await db.query(
      'DELETE FROM feedback WHERE sender_type = ? AND sender_id = ?',
      ['appuser', id] // Fixed: should be 'id' not 'req.user.id'
    );

    // Delete the user
    const deleteResult = await db.query("DELETE FROM app_users WHERE id = ?", [
      id,
    ]);

    if (deleteResult.affectedRows === 0) {
      return res.status(404).json({ error: "User not found" });
    }

    res.status(200).json({ message: "User deleted successfully" });
  } catch (error) {
    console.error("Error deleting user:", error.message);
    res.status(500).json({ error: "Internal server error" });
  }
};

//  query title CRUD
exports.updateQueryTitle = async (req, res) => {
  const id = req.user.id;
  const { query_title } = req.body;

  if (!query_title) {
    return res.status(400).json({ error: "query_title is required" });
  }

  try {
    const result = await db.query(
      "UPDATE app_users SET query_title = ? WHERE id = ?",
      [query_title, id]
    );

    if (result.affectedRows === 0) {
      return res.status(404).json({ error: "User not found" });
    }

    res.json({ message: "Query title updated successfully" });
  } catch (error) {
    console.error("Error updating query title:", error);
    res.status(500).json({ error: "Internal server error" });
  }
};

// Delete query_title for a user by user ID

exports.getShortTitle = (req, res) => {
  const { question } = req.body;

  console.log("Question: ", question);
  if (!question) return res.status(400).json({ error: "No question provided" });

  let shortTitle = nlp(question).sentences().toTitleCase().out("text");

  // Remove unnecessary question words
  shortTitle = shortTitle
    .replace(
      /^(What|How|Why|When|Where|Which|Who|Is|Are|Do|Does|Can|Could)\s+/i,
      ""
    )
    .trim();

  if (!shortTitle)
    return res.status(400).json({ error: "Invalid question format" });

  console.log("short question:", shortTitle);

  res.json({ query_title: shortTitle });
};

exports.deleteQueryTitle = async (req, res) => {
  const id = req.user.id;

  try {
    const result = await db.query(
      "UPDATE app_users SET query_title = NULL WHERE id = ?",
      [id]
    );

    if (result.affectedRows === 0) {
      return res.status(404).json({ error: "User not found" });
    }

    res.json({ message: "Query title deleted successfully" });
  } catch (error) {
    console.error("Error deleting query title:", error);
    res.status(500).json({ error: "Internal server error" });
  }
};

exports.sendOtp = async (req, res) => {
  try {
    const { email } = req.body;

    // Validate email input
    if (!email) {
      return res.status(400).json({ error: "Email is required" });
    }

    // Check if user exists
    const user = await db.query(
      "SELECT id, username, hospital_code FROM app_users WHERE email = ?",
      [email]
    );
    if (!user.length) {
      return res.status(404).json({ error: "User not found" });
    }

    console.log("user", user);
    const userId = user[0].id;
    const hospital_code = user[0].hospital_code;

    // fetch hospital name of app_user
    const hospital = await db.query(
      "SELECT name_hospital FROM hospitals WHERE hospital_code = ?",
      [hospital_code]
    );

    console.log("hospital result : ", hospital[0].name_hospital);
    // Generate a 6-digit OTP
    const otp = Math.floor(100000 + Math.random() * 900000).toString();
    const expiresAt = new Date(Date.now() + 2 * 60 * 60 * 1000); // OTP expires in 1 hour

    console.log("otp : ", otp, "expiresAt: ", expiresAt);
    // Store OTP in database
    await db.query(
      "UPDATE app_users SET otp_code = ?, otp_expires_at = ? WHERE id = ?",
      [otp, expiresAt, userId]
    );

    // // Send OTP via email
    const info = await sendMail(
      email,
      hospital[0].name_hospital,
      user[0].username,
      otp
    );

    res.json({ message: "OTP sent successfully", email_status: info.response });
  } catch (error) {
    console.error("Error sending OTP:", error);
    res.status(500).json({ error: "Internal server error" });
  }
};
exports.changePassword = async (req, res) => {
  try {
    const { email, otp, new_password } = req.body;

    console.log("email : ", email);
    // Validate inputs
    if (!email || !otp || !new_password) {
      return res
        .status(400)
        .json({ error: "Email, OTP, and new password are required" });
    }

    // Fetch OTP from the database
    const user = await db.query(
      "SELECT id, otp_code, otp_expires_at FROM app_users WHERE email = ?",
      [email]
    );

    if (!user.length) {
      return res.status(404).json({ error: "User not found" });
    }

    const userData = user[0];

    // ✅ Check if OTP matches
    if (userData.otp_code !== otp) {
      return res.status(400).json({ error: "Invalid OTP" });
    }

    // ✅ Check if OTP is expired
    if (new Date() > new Date(userData.otp_expires_at)) {
      return res.status(400).json({ error: "OTP expired. Request a new one." });
    }

    // ✅ Hash the new password
    const hashedPassword = await bcrypt.hash(new_password, 10);

    // ✅ Update password in DB & clear OTP
    await db.query(
      "UPDATE app_users SET hash_password = ?, otp_code = NULL, otp_expires_at = NULL WHERE id = ?",
      [hashedPassword, userData.id]
    );

    res.json({ message: "Password changed successfully!" });
  } catch (error) {
    console.error("Error resetting password:", error);
    res.status(500).json({ error: "Internal server error" });
  }
};

exports.sendPinOtp = async (req, res) => {
  try {
    const { email } = req.body;

    // Validate email input
    if (!email) {
      return res.status(400).json({ error: "Email is required" });
    }

    // Check if user exists
    const user = await db.query(
      "SELECT id, username, hospital_code FROM app_users WHERE email = ?",
      [email]
    );
    if (!user.length) {
      return res.status(404).json({ error: "User not found" });
    }

    console.log("user", user);
    const userId = user[0].id;
    const hospital_code = user[0].hospital_code;

    // fetch hospital name of app_user
    const hospital = await db.query(
      "SELECT name_hospital FROM hospitals WHERE hospital_code = ?",
      [hospital_code]
    );

    console.log("hospital result : ", hospital[0].name_hospital);
    // Generate a 6-digit OTP
    const otp = Math.floor(100000 + Math.random() * 900000).toString();
    const expiresAt = new Date(Date.now() + 2 * 60 * 60 * 1000); // OTP expires in 1 hour

    console.log("otp : ", otp, "expiresAt: ", expiresAt);
    // Store OTP in database
    await db.query(
      "UPDATE app_users SET pin_otp = ?, pin_otp_expiry = ? WHERE id = ?",
      [otp, expiresAt, userId]
    );

    // // Send OTP via email
    const info = await sendMail(
      email,
      hospital[0].name_hospital,
      user[0].username,
      otp
    );

    res.json({ message: "OTP sent successfully", email_status: info.response });
  } catch (error) {
    console.error("Error sending OTP:", error);
    res.status(500).json({ error: "Internal server error" });
  }
};

exports.changePinByOtp = async (req, res) => {
  try {
    const { email, otp, new_pin } = req.body;

    console.log("email : ", email);
    // Validate inputs
    if (!email || !otp || !new_pin) {
      return res
        .status(400)
        .json({ error: "Email, OTP, and new pin are required" });
    }

    // Fetch OTP from the database
    const user = await db.query(
      "SELECT id, pin_otp, pin_otp_expiry FROM app_users WHERE email = ?",
      [email]
    );

    if (!user.length) {
      return res.status(404).json({ error: "User not found" });
    }

    const userData = user[0];

    // ✅ Check if OTP matches
    if (userData.pin_otp !== otp) {
      return res.status(400).json({ error: "Invalid OTP" });
    }

    // ✅ Check if OTP is expired
    if (new Date() > new Date(userData.otp_expires_at)) {
      return res.status(400).json({ error: "OTP expired. Request a new one." });
    }

    // ✅ Hash the new password

    // ✅ Update password in DB & clear OTP
    await db.query(
      "UPDATE app_users SET pin_number = ?, pin_otp = NULL, pin_otp_expiry = NULL WHERE id = ?",
      [new_pin, userData.id]
    );

    res.json({ message: "Pin changed successfully!" });
  } catch (error) {
    console.error("Error resetting pin:", error);
    res.status(500).json({ error: "Internal server error" });
  }
};



async function sendMail(email, hospital_name, username, otp) {
  const mailOptions = {
    from: "kavya.j@tech4biz.io", // Sender's email
    to: email, // Recipient's email
    subject: "Spurrinai Login Credentials", // Email subject
    html: `<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Reset Your Password or Pin - Spurrinai Medical Platform</title>
    <style>
                @import url('https://fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900&family=Syne:wght@400..800&display=swap');

        body {
            font-family: 'Inter', sans-serif;
            margin: 0;
            padding: 0;
            background-color: #ebf3fa;
            color: #333;
        }
        .email-container {
            max-width: 600px;
            margin: 20px auto;
            background: white;
            border-radius: 10px;
            overflow: hidden;
            box-shadow: 0 5px 15px rgba(0, 0, 0, 0.08);
        }
        .email-header {
            background: linear-gradient(135deg, #2193b0, #6dd5ed);
            padding: 30px;
            text-align: center;
            color: white;
        }
        .hospital-name {
            display: inline-block;
            background-color: rgba(255, 255, 255, 0.2);
            padding: 5px 15px;
            border-radius: 20px;
            font-size: 14px;
            margin-bottom: 10px;
        }
        .email-header h1 {
            margin: 10px 0 0;
            font-size: 26px;
            font-weight: 500;
        }
        .email-content {
            padding: 40px 30px;
        }
        .greeting {
            font-size: 30px;
            font-weight: 700;
            margin-bottom: 20px;
            color: #303030;
        }
        .greeting-text{
            font-size: 18px;
            font-weight: 400;
            margin-bottom: 20px;
            line-height: 1.7;
            color: #303030;
        }
        .verification-code {
            background-color: #f5f9fc;
            border: 1px solid #e0e9f0;
            border-radius: 8px;
            padding: 20px;
            margin: 25px 0;
            text-align: center;
        }
        .code {
            font-family: 'Courier New', monospace;
            font-size: 32px;
            letter-spacing: 6px;
            color: #2193b0;
            font-weight: bold;
            padding: 10px 0;
        }
        .reset-button {
            display: block;
            background-color: #2193b0;
            color: white;
            text-decoration: none;
            text-align: center;
            padding: 15px 20px;
            border-radius: 5px;
            margin: 30px auto;
            max-width: 250px;
            font-weight: 500;
            transition: background-color 0.3s;
        }
        .reset-button:hover {
            background-color: #1a7b92;
        }
        .expiry-note {
            background-color: #fff8e1;
            border-left: 4px solid #ffc107;
            padding: 12px 15px;
            margin: 25px 0;
            font-size: 14px;
            color: #856404;
        }
        .security-note {
            margin-top: 30px;
            padding-top: 20px;
            border-top: 1px solid #eee;
            font-size: 14px;
            color: #666;
        }
        .email-footer {
            background-color: #f5f9fc;
            padding: 20px;
            text-align: center;
            font-size: 13px;
            color: #888;
            border-top: 1px solid #e0e9f0;
        }
        .support-link {
            color: #2193b0;
            text-decoration: none;
        }
        .device-info {
            margin-top: 20px;
            background-color: #f5f9fc;
            padding: 15px;
            border-radius: 6px;
            font-size: 14px;
        }
        .device-info p {
            margin: 5px 0;
            color: #666;
        }
    </style>
</head>
<body>
    <div class="email-container">
        <div class="email-header">
            <div class="hospital-name"> ${hospital_name}</div>
            <h1>Reset Your Password or Pin</h1>
        </div>
        <div class="email-content">
            <div class="greeting">Hello ${username},</div>
            
            <p class="greeting-text" >We received a request to <strong>reset the password</strong> for your account on the <strong> Spurrinai healthcare platform</strong>. For your security reasons, please verify this action.</p>
            
            <div class="verification-code">
                <p>Please enter this verification code:</p>
                <div class="code">${otp}</div>
                <p>on the password reset screen</p>
            </div>
            
                <a href="spurrinai://ResetPassword/${otp}" class="reset-button">Reset Password</a>

            <div class="expiry-note">
                <strong>Note:</strong> This verification code will expire in 2 hours for security reasons.
            </div>
            
          
            
            <div class="security-note">
                <p>If you did not request this password reset, please contact our IT security team immediately at <a href="mailto:info@spurrinai.com" class="support-link">info@spurrinai.com</a> or call our support line at +1 (800) 555-1234.</p>
            </div>
        </div>
        <div class="email-footer">
            <p>© 2025 Spurrinai - Healthcare Data Management Platform</p>
            <p>This is an automated message. Please do not reply to this email.</p>
            <p>Need help? Contact <a href="mailto:support@spurrinai.com" class="support-link">support@spurrinai.com</a></p>
        </div>
    </div>
</body>
</html>`,
  };

  try {
    const info = await transporter.sendMail(mailOptions);
    console.log("info: ", info);
    return info;
  } catch (error) {
    console.error(`Error sending email to ${email}:`, error);
    return error;
  }
}

// chat-sessions
exports.getChatSessionsByAppUserID = async (req, res) => {
  try {

    console.log("user data", req.user)
    const { role } = req.user;
    // Ensure the user has the proper role
    // if (!['Superadmin', 'Admin', 9, 8].includes(role)) {
    //     return res.status(403).json({ error: 'Unauthorized to view chats' });
    // }

    if (!req.user.id) {
      return res.status(400).json({ error: "user id not found" });
    }
    // Query to fetch app users
    const query = `
    SELECT session_id, 
           MIN(session_title) AS session_title, 
           MIN(created_at) AS created_at 
    FROM interaction_logs 
    WHERE app_user_id = ${req.user.id} 
    AND session_id IS NOT NULL
    GROUP BY session_id
    ORDER BY session_id DESC;
`;


    const session_ids = await db.query(query);

    if (session_ids.length === 0) {
      return res.status(404).json({ message: 'No interaction logs found for this app user', data: session_ids });
    }

    res.status(200).json({
      message: 'Interaction logs fetched successfully',
      data: session_ids,
    });
  } catch (error) {
    console.error('Error fetching interaction logs:', error.message);
    res.status(500).json({ error: 'Internal server error' });
  }
}

exports.getChatForEachSession = async (req, res) => {
  try {

    console.log("user data", req.user)
    const session_id = req.params.session_id;

    console.log("session_id ", session_id)
    // Ensure the user has the proper role
    // if (!['Superadmin', 'Admin', 9, 8].includes(role)) {
    //     return res.status(403).json({ error: 'Unauthorized to view chats' });
    // }

    if (!req.user.id) {
      return res.status(400).json({ error: "user id not found" });
    }
    // Query to fetch app users
    const query = `
    SELECT * FROM interaction_logs 
    WHERE app_user_id = ? 
    AND session_id = ? 
    AND status = 'Active';
`;


    const values = [req.user.id, session_id];

    const interaction_logs = await db.query(query, values);

    if (interaction_logs.length === 0) {
      return res.status(404).json({ message: 'No interaction logs found for this app user or session', data: interaction_logs });
    }

    res.status(200).json({
      message: 'Interaction logs fetched successfully',
      data: interaction_logs,
    });
  } catch (error) {
    console.error('Error fetching interaction logs:', error.message);
    res.status(500).json({ error: 'Internal server error' });
  }
}

exports.deleteChatSessions = async (req, res) => {
  const id = req.user.id;
  const { session_id } = req.body

  console.log("session_id ", session_id)
  console.log("app_user_id ", id)

  try {
    const result = await db.query(
      "UPDATE interaction_logs SET session_id = NULL WHERE app_user_id = ? AND session_id = ?",
      [id, session_id]
    );

    if (result.affectedRows === 0) {
      return res.status(404).json({ error: "No session found" });
    }

    res.json({ message: "Chat session deleted successfully" });
  } catch (error) {
    console.error("Error deleting query title:", error);
    res.status(500).json({ error: "Internal server error" });
  }
}

exports.clearChatbasedOnSessions = async (req, res) => {
  const id = req.user.id;
  const { session_id } = req.body

  try {
    const result = await db.query(
      "UPDATE interaction_logs SET status = ? WHERE app_user_id = ? AND session_id = ?",
      ['Inactive', id, session_id]
    );

    if (result.affectedRows === 0) {
      return res.status(404).json({ error: "No chat found" });
    }

    res.json({ message: "Chat deleted successfully" });
  } catch (error) {
    console.error("Error deleting chat:", error);
    res.status(500).json({ error: "Internal server error" });
  }
}

exports.getChatByTime = async (req, res) => {
  try {

    console.log("user data", req.user)
    const { lastcreated_at } = req.body;

    // Ensure the user has the proper role
    // if (!['Superadmin', 'Admin', 9, 8].includes(role)) {
    //     return res.status(403).json({ error: 'Unauthorized to view chats' });
    // }

    if (!req.user.id) {
      return res.status(400).json({ error: "user id not found" });
    }
    // Query to fetch app users

    let results

    console.log("last created at", lastcreated_at)
    if (!lastcreated_at) {  // Handles null, undefined, empty string, etc.

      const query = `
        SELECT * FROM interaction_logs 
        WHERE app_user_id = ?;
      `;

      results = await db.query(query, [req.user.id]);
    } else {
      console.log("Executing with last_created_at:", lastcreated_at);

      const query = `
        SELECT * FROM interaction_logs 
        WHERE app_user_id = ? 
        AND created_at > ?;
      `;

      results = await db.query(query, [req.user.id, lastcreated_at]);
    }


    if (results.length === 0) {
      return res.status(404).json({ message: 'No interaction logs found for this app user' });
    }

    res.status(200).json({
      message: 'Interaction logs fetched successfully',
      data: results,
    });
  } catch (error) {
    console.error('Error fetching interaction logs:', error.message);
    res.status(500).json({ error: 'Internal server error' });
  }

}

exports.checkEmailCode = async (req, res) => {
  try {
    const { email, hospital_code } = req.body;

    // Check if the email and code are provided
    if (!email || !hospital_code) {
      return res.status(400).json({ error: "Email and code are required" });
    }

    console.log("received data", email, hospital_code)
    // Check if the email exists in the database
    const useremail = await db.query("SELECT * FROM app_users WHERE email = ?", [email]);
    console.log("user email", useremail)
    if (useremail.length) {
      return res.status(404).json({ error: "Email already in use" });
    }

    // Check if the code is correct
    const usercode = await db.query("SELECT hospital_code FROM hospital_users WHERE hospital_code = ?", [hospital_code]);
    console.log("user code", usercode)

    if (!usercode.length) {
      return res.status(404).json({ error: "Please enter valid hospital code" });
    }


    // Code is correct, return success response    
    res.status(200).json({ message: "Email code is correct" });
  } catch (error) {
    console.error("Error checking email code:", error);
    res.status(500).json({ error: "Internal server error" });
  }
}

// get popular topics
exports.getPopularTopics = async (req, res) => {
  let popularTopics = [];
  try {
    // Fetch top 4 most viewed questions
    console.log("req.user data : ", req.user)
    const rows = await getMappedPopularQuestionsAnswers(req.user.hospital_code);
    if (!rows) {
      popularTopics = []
    }
    else {
      popularTopics = rows;
    }
    console.log('hospital data : ', rows)
    res.status(200).json({
      success: true,
      data: popularTopics
    });
  } catch (error) {
    console.error('Error fetching popular topics:', error);
    res.status(500).json({
      success: false,
      message: 'Internal server error'
    });
  }
}

const getMappedPopularQuestionsAnswers = async (hospitalCode) => {
  console.log("Hospital code is---", hospitalCode);
  
  try {
    const query = `
      SELECT il.query, il.response
      FROM interaction_logs il
      WHERE il.hospital_code = ?
      ORDER BY il.created_at DESC  -- Sorting by most recent interactions
      LIMIT 10;  -- Fetch more than 4 to filter unwanted entries
    `;
    
    const rows = await db.query(query, [hospitalCode]);

    console.log("Fetched questions before filtering:", rows);

    // Skip the row if either condition is true
    const filteredRows = rows.filter(row => 
      !(row.query.toLowerCase().includes("yes") || row.response.includes("Please reply with 'yes'"))
    );

    // Return only the top 4 filtered results
    return filteredRows.slice(0, 4);

  } catch (error) {
    console.error("Error fetching popular topics:", error.message);
    throw new Error("Internal server error");
  }
};

exports.changePin = async (req, res) => {
  try {
    const { current_pin, new_pin } = req.body;
    const userId = req.user.id;

    if (!current_pin || !new_pin) {
      return res.status(400).json({ error: "Current pin and new pin are required" });
    }

    // Add PIN length validation
    if (new_pin.length !== 4 || !/^\d+$/.test(new_pin)) {
      return res.status(400).json({ error: "New PIN must be exactly 4 digits" });
    }

    // Get user's current pin
    const userQuery = "SELECT pin_number FROM app_users WHERE id = ?";
    const user = await db.query(userQuery, [userId]);

    if (!user.length) {
      return res.status(404).json({ error: "User not found" });
    }

    // Verify current pin
    if (user[0].pin_number !== current_pin) {
      return res.status(400).json({ error: "Current pin is incorrect" });
    }

    // Check if new pin is same as current pin
    if (current_pin === new_pin) {
      return res.status(400).json({ error: "New PIN cannot be the same as current PIN" });
    }

    // Update to new pin
    await db.query(
      "UPDATE app_users SET pin_number = ? WHERE id = ?",
      [new_pin, userId]
    );

    res.json({ message: "Pin changed successfully" });
  } catch (error) {
    console.error("Error changing pin:", error);
    res.status(500).json({ error: "Internal server error" });
  }
};

exports.forgotPin = async (req, res) => {
  try {
    const { email } = req.body;

    if (!email) {
      return res.status(400).json({ error: "Email is required" });
    }

    // Get user details
    const userQuery = `
      SELECT au.id, au.username, au.pin_number, au.hospital_code, h.name_hospital 
      FROM app_users au
      JOIN hospitals h ON au.hospital_code = h.hospital_code
      WHERE au.email = ?
    `;
    const user = await db.query(userQuery, [email]);

    if (!user.length) {
      return res.status(404).json({ error: "User not found" });
    }

    const userData = user[0];

    // Send pin via email
    const mailOptions = {
      from: "kavya.j@tech4biz.io",
      to: email,
      subject: "Your Spurrinai PIN",
      html: `<!DOCTYPE html>
      <html lang="en">
      <head>
          <meta charset="UTF-8">
          <meta name="viewport" content="width=device-width, initial-scale=1.0">
          <title>Your PIN - Spurrinai Medical Platform</title>
          <style>
              @import url('https://fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900&family=Syne:wght@400..800&display=swap');
              body {
                  font-family: 'Inter', sans-serif;
                  margin: 0;
                  padding: 0;
                  background-color: #ebf3fa;
                  color: #333;
              }
              .email-container {
                  max-width: 600px;
                  margin: 20px auto;
                  background: white;
                  border-radius: 10px;
                  overflow: hidden;
                  box-shadow: 0 5px 15px rgba(0, 0, 0, 0.08);
              }
              .email-header {
                  background: linear-gradient(135deg, #2193b0, #6dd5ed);
                  padding: 30px;
                  text-align: center;
                  color: white;
              }
              .hospital-name {
                  display: inline-block;
                  background-color: rgba(255, 255, 255, 0.2);
                  padding: 5px 15px;
                  border-radius: 20px;
                  font-size: 14px;
                  margin-bottom: 10px;
              }
              .email-content {
                  padding: 40px 30px;
              }
              .greeting {
                  font-size: 30px;
                  font-weight: 700;
                  margin-bottom: 20px;
                  color: #303030;
              }
              .pin-display {
                  background-color: #f5f9fc;
                  border: 1px solid #e0e9f0;
                  border-radius: 8px;
                  padding: 20px;
                  margin: 25px 0;
                  text-align: center;
              }
              .pin {
                  font-family: 'Courier New', monospace;
                  font-size: 32px;
                  letter-spacing: 6px;
                  color: #2193b0;
                  font-weight: bold;
                  padding: 10px 0;
              }
              .security-note {
                  margin-top: 30px;
                  padding-top: 20px;
                  border-top: 1px solid #eee;
                  font-size: 14px;
                  color: #666;
              }
              .email-footer {
                  background-color: #f5f9fc;
                  padding: 20px;
                  text-align: center;
                  font-size: 13px;
                  color: #888;
                  border-top: 1px solid #e0e9f0;
              }
          </style>
      </head>
      <body>
          <div class="email-container">
              <div class="email-header">
                  <div class="hospital-name">${userData.name_hospital}</div>
                  <h1>Your PIN Information</h1>
              </div>
              <div class="email-content">
                  <div class="greeting">Hello ${userData.username},</div>
                  
                  <p>Here is your PIN for the Spurrinai healthcare platform:</p>
                  
                  <div class="pin-display">
                      <div class="pin">${userData.pin_number}</div>
                  </div>
                  
                  <div class="security-note">
                      <p>For security reasons, please do not share this PIN with anyone. If you did not request this information, please contact our support team immediately.</p>
                  </div>
              </div>
              <div class="email-footer">
                  <p>© 2025 Spurrinai - Healthcare Data Management Platform</p>
                  <p>This is an automated message. Please do not reply to this email.</p>
                  <p>Need help? Contact <a href="mailto:support@spurrinai.com">support@spurrinai.com</a></p>
              </div>
          </div>
      </body>
      </html>`
    };

    await transporter.sendMail(mailOptions);

    res.json({ message: "PIN has been sent to your email" });
  } catch (error) {
    console.error("Error in forgot pin:", error);
    res.status(500).json({ error: "Internal server error" });
  }
};



// const bcrypt = require("bcrypt");
// const db = require("../config/database"); // Database connection
// const fs = require("fs");
// const JWT_ACCESS_TOKEN_SECRET = process.env.JWT_ACCESS_TOKEN_SECRET;
// const JWT_ACCESS_TOKEN_EXPIRY = "5h";
// const jwt = require("jsonwebtoken");
// const nlp = require("compromise");
// const nodemailer = require("nodemailer");
// const sender_mail = process.env.mail;
// const sender_app_password = process.env.apppassword;
// const sender_port = process.env.SENDER_PORT;
// const sender_security = process.env.SENDER_SECURITY;
// const path = require('path')

// const { emitEvent } = require("../services/secondaryWebsocket");

// console.log('sender port : ', sender_port);
// console.log('sender security : ', sender_security);
// //  zoho transporter
// const transporter = nodemailer.createTransport({
//   host: "smtp.zoho.com",
//   port: 465,
//   secure: true,
//   auth: {
//     user: "info@spurrin.com",
//     pass: "wTcEi6ME4yfc"
//   },
//   tls: {
//     rejectUnauthorized: false, // Allow self-signed certificates
//     minVersion: "TLSv1.2"
//   }
// });

// exports.initWebSocket = (io) => {
//   io.on("connection", (socket) => {
//     console.log("Hospital connected:", socket.id);

//     socket.on("register_hospital", (hospitalCode) => {
//       hospitalSockets[hospitalCode] = socket;
//       console.log(`Hospital ${hospitalCode} registered.`);
//     });

//     socket.on("disconnect", () => {
//       const hospitalCode = Object.keys(hospitalSockets).find(
//         (key) => hospitalSockets[key] === socket
//       );
//       if (hospitalCode) delete hospitalSockets[hospitalCode];
//       console.log(`Hospital ${hospitalCode} disconnected.`);
//     });
//   });
// };

// exports.uploadIdPhoto = async (req, res) => {
//   try {
//     // Extracting user ID and hospital code
//     const userId = parseInt(req.params.id, 10); // User ID from route
//     const { hospital_code } = req.user; // Authenticated user's hospital code

//     // Check if user ID is valid
//     if (isNaN(userId)) {
//       console.error("Invalid User ID:", userId);
//       return res.status(400).json({ error: "Invalid user ID" });
//     }

//     // Check if a file was uploaded
//     if (!req.file) {
//       console.error("No file uploaded");
//       return res.status(400).json({ error: "No file uploaded" });
//     }

//     const photoPath = `/uploads/id_photos/${req.file.filename}`;

//     // Verify app user is part of the same hospital

//     const query = `
//             SELECT hospital_code FROM app_users WHERE id = ? AND hospital_code = ?
//         `;
//     const result = await db.query(query, [userId, hospital_code]);

//     if (result.length === 0) {
//       console.error(
//         "Authorization failed for user ID:",
//         userId,
//         "with hospital_code:",
//         hospital_code
//       );
//       return res
//         .status(403)
//         .json({ error: "You are not authorized to upload ID for this user" });
//     }

//     // Update the ID photo path in the database
//     await db.query("UPDATE app_users SET id_photo_url = ? WHERE id = ?", [
//       photoPath,
//       userId,
//     ]);

//     res.status(200).json({
//       message: "ID photo uploaded successfully!",
//       id_photo_url: photoPath,
//     });
//   } catch (error) {
//     console.error("Error uploading ID photo:", error.message);
//     res.status(500).json({ error: "Internal server error" });
//   }
// };

// exports.updateSettings = async (req, res) => {
//   try {
//     const userId  = req.user.id; // Assuming user is authenticated and userId is available
//     const { pin, pin_enabled, remember_me } = req.body;

//     console.log("data---",pin,pin_enabled,remember_me)
    
//     // if (typeof pin_enabled !== 'boolean' || typeof remember_me !== 'boolean') {
//     //   return res.status(400).json({ error: 'Invalid data format' });
//     // }

//     // Validate pin (if provided)
//     if (pin && (typeof pin !== 'string' || pin.length !== 4)) {
//       return res.status(400).json({ error: 'Invalid PIN format. Must be a 4-digit string.' });
//     }

//     // Determine expiry based on remember_me
//     let expiresIn = '5h';
//     let expiryTimestamp = new Date();

//     if (remember_me) {
//       expiresIn = '30d';
//       expiryTimestamp.setDate(expiryTimestamp.getDate() + 30);
//     } else {
//       expiryTimestamp.setHours(expiryTimestamp.getHours() + 5);
//     }

//     // Generate new access token
//     const payload = { id: userId, role: 'AppUser' };
//     const accessToken = jwt.sign(payload, process.env.JWT_ACCESS_TOKEN_SECRET, {
//       expiresIn: expiresIn,
//     });

//     // Update user settings and access token
//     const query = `UPDATE app_users SET pin_number = ?, pin_enabled = ?, remember_me = ?, access_token = ?, access_token_expiry = ? WHERE id = ?`;
//     const result=await db.query(query, [pin, pin_enabled, remember_me, accessToken, expiryTimestamp, userId]);

//     if (result.affectedRows > 0) {
//       console.log("Table updated successfully.");
//     } else {
//       console.log("Table not updated. No matching user found.");
//     }

//     res.status(200).json({ message: 'Settings updated successfully.', accessToken });
//   } catch (error) {
//     console.error('Error updating settings:', error);
//     res.status(500).json({ error: 'Internal Server Error' });
//   }
// };

// exports.hitlike = async (req, res) => {
//   try {
//     // Extract user ID and session ID from the request
//     const { session_id, id } = req.body;
//     const log_id = id;
//     const app_user_id = req.user.id;
//     // Check if both app_user_id and session_id are provided
//     if (!app_user_id || !session_id || !log_id) {
//       return res.status(400).json({
//         status: 'error',
//         message: 'app user id and session id and log id are required',
//       });
//     }

//     // Query to toggle the is_liked value
//     const toggleQuery = `
//       UPDATE interaction_logs
//       SET is_liked = NOT is_liked
//       WHERE app_user_id = ? AND session_id = ? AND id = ?
//     `;

//     // Execute the query
//     const result = await db.query(toggleQuery, [app_user_id, session_id,log_id]);

//     // Check if any rows were affected
//     if (result.affectedRows > 0) {
//       return res.status(200).json({
//         status: 'success',
//         message: 'Like updated successfully',
//         data: {
//           app_user_id,
//           session_id,
//           is_liked: result.changedRows > 0 ? 1 : 0, // 1 if changed, 0 if not
//         },
//       });
//     } else {
//       return res.status(404).json({
//         status: 'error',
//         message: 'No matching record found to toggle',
//       });
//     }
//   } catch (error) {
//     console.error('Error during like toggle:', error);
//     return res.status(500).json({
//       status: 'error',
//       message: 'Internal server error',
//     });
//   }
// };



// exports.signup = async (req, res) => {
//   try {
//     const { pin, pin_status,remember_me, email, password, hospital_code, username } = req.body;

//     console.log("pin--",pin)  
//     console.log("pin_status",pin_status)
//     console.log("email--",email)
//     console.log('password---',password)
//     console.log("hospital_code---",hospital_code)
//     console.log("username--",username)
//     console.log("remember_me--",remember_me)

//     if (!email || !password || !hospital_code || !username) {
//       return res.status(400).json({
//         error: "Email, password, username, and hospital code are required",
//       });
//     }

//     const pin_enabled = (pin_status === undefined || pin_status === '') ? 0 : pin_status;
//     const remember_me_ = (remember_me === undefined || remember_me === '') ? 0 : remember_me;

    

//     // Check if the hospital_code exists in the `hospitals` table
//     const hospitalQuery =
//       "SELECT hospital_code FROM hospitals WHERE hospital_code = ?";
//     const hospitalResult = await db.query(hospitalQuery, [hospital_code]);

//     if (hospitalResult.length === 0) {
//       return res.status(404).json({ error: "Invalid hospital code" });
//     }

//     // Check if the email is already in use
//     const userQuery = "SELECT id FROM app_users WHERE email = ?";
//     const userResult = await db.query(userQuery, [email]);

//     if (userResult.length > 0) {
//       return res.status(400).json({ error: "Email already in use" });
//     }

//     // Hash the password
//     const hashPassword = await bcrypt.hash(password, 10);

//     // Insert the new app user into the `app_users` table
//     const insertQuery = `
//             INSERT INTO app_users (email, hash_password, hospital_code, status, username, pin_number, pin_enabled, remember_me )
//             VALUES (?, ?, ?, 'Pending', ?, ?, ?,?)
//         `;
//     const result = await db.query(insertQuery, [
//       email,
//       hashPassword,
//       hospital_code,
//       username,
//       pin,  // Set pin to null if not provided
//       pin_enabled,
//       remember_me_
//     ]);

//     const userId = result.insertId; // Get the new user's ID

//     // Check if a file was uploaded
//     if (!req.file) {
//       return res.status(400).json({ error: "ID photo is required" });
//     }

//     const filePath = `/uploads/id_photos/${req.file.filename}`; // Correct file path

//     // Update the ID photo path in the database
//     await db.query(
//       "UPDATE app_users SET id_photo_url = ?, upload_status = ? WHERE id = ?",
//       [filePath, "1", userId]
//     );

//     // ✅ Notify hospitals in the SECONDARY WebSocket instance
//     emitEvent("new_user", {
//       message: `A new user has been created for hospital ${hospital_code}.`,
//       user: { id: userId, username, email },
//     });

//     res.status(201).json({
//       message: "User signed up and ID photo uploaded successfully!",
//       data: {
//         id: userId,
//         email,
//         hospital_code,
//         username,
//         id_photo_url: filePath,
//         pin: pin || null,
//         pin_status : pin_status,
//         remember_me: remember_me
//       },
//     });

//   } catch (error) {
//     console.error("Error during signup and ID photo upload:", error.message);
//     res.status(500).json({ error: "Internal server error" });
//   }
// };

// exports.login = async (req, res) => {
//   try {
//     const { email, password } = req.body;
//     let remember_me;

//     if (!email || !password) {
//       return res.status(400).json({ error: "Email and password are required" });
//     }

//     console.log("email----",email)
//     // Check if the user exists
//     const query = "SELECT * FROM app_users WHERE email = ?";
//     const result = await db.query(query, [email]);

//    console.log("result---",result)
//     if (result.length === 0) {
//       return res.status(404).json({ error: "User not found" });
//     }

//     const user = result[0];
//     remember_me = user.remember_me

//     const hospitalData = await db.query("SELECT * FROM hospitals WHERE hospital_code = ?", [user.hospital_code]);
//     // if (hospitalData.publicSignupEnabled) {
//     //   throw new Error("Hospital not found");
//     // }


//     if (user.status === "Pending" && !hospitalData[0].publicSignupEnabled) {
//       return res.status(404).json({ message: "Your Account is Under Review" });

//     }

//     if (user.status === "Inactive" && !hospitalData[0].publicSignupEnabled) {
//       return res.status(404).json({ message: "Contact admin your account is not approved" });

//     }

//     if(hospitalData[0].publicSignupEnabled){
//       user.status = "Active"
//     }
//     // Validate the password
//     const validPassword = await bcrypt.compare(password, user.hash_password);
//     if (!validPassword) {
//       return res.status(401).json({ error: "Invalid email or password" });
//     }

//     // Determine expiry based on remember_me
//     let expiresIn = "5h";
//     let expiryTimestamp = new Date();
//     let rememberMeValue = remember_me;
//     if (rememberMeValue === undefined) rememberMeValue = user.remember_me;
//     if (rememberMeValue === true || rememberMeValue === 1 || rememberMeValue === "1" || rememberMeValue === "true") {
//       const updateQuery = `
//       UPDATE app_users
//       SET remember_me = ?
//       WHERE id = ?
//     `;
//     await db.query(updateQuery, [remember_me,user.id]);

//       expiresIn = "30d";
//       expiryTimestamp.setDate(expiryTimestamp.getDate() + 30);
//     } else {
//       expiryTimestamp.setHours(expiryTimestamp.getHours() + 5);
//     }

//     // Generate a new access token
//     const payload = { id: user.id, email: user.email, role: "AppUser" };
//     const accessToken = jwt.sign(payload, process.env.JWT_ACCESS_TOKEN_SECRET, {
//       expiresIn: expiresIn,
//     });

//     // SQL query to fetch hospital data based on the provided hospital_code
//     const query_hospital = `
//       SELECT * FROM hospitals WHERE hospital_code = ?;
//         `;

//     // Run the query
//     const result_hospital = await db.query(query_hospital, [user.hospital_code]);

//     // hospital users
//     const queryHospitalUsr = `
//       SELECT * FROM hospital_users WHERE hospital_code = ?;
//         `;

//     // Run the query
//     const resultHospitalUsr = await db.query(queryHospitalUsr, [user.hospital_code]);

//     const hospitalUser = resultHospitalUsr[0];
//     if (!hospitalUser) {
//         return res.status(404).json({ error: "Hospital user not found" });
//     }
//     // Update the access token and expiry in the database
//     const updateQuery = `
//       UPDATE app_users
//       SET access_token = ?, access_token_expiry = ?, remember_me = ?
//       WHERE id = ?
//     `;
//     await db.query(updateQuery, [accessToken, expiryTimestamp, (rememberMeValue === true || rememberMeValue === 1 || rememberMeValue === "1" || rememberMeValue === "true") ? 1 : 0, user.id]);

   
//     // Send response
//     res.status(200).json({
//       message: "Login successful",
//       user: {
//         id: user.id,
//         email: user.email,
//         pin: user.pin_number,
//         pin_enabled: user.pin_enabled,
//         hospital_code: user.hospital_code,
//         status: user.status,
//         hospital_name: result_hospital[0].name_hospital,
//         primary_color: result_hospital[0].primary_color,
//         secondary_color: result_hospital[0].secondary_color,
//         upload_status: user.upload_status,
//         id_photo_url: user.id_photo_url,
//         primary_admin_email: result_hospital[0].primary_admin_email,
//         mobile_number: result_hospital[0].mobile_number,
//         username: user.username,
//         logo_url: resultHospitalUsr[0].profile_photo_url,
//         query_title: user.query_title,
//         remember_me: (rememberMeValue === true || rememberMeValue === 1 || rememberMeValue === "1" || rememberMeValue === "true") ? 1 : 0
//       },
//       accessToken,
//     });
//   } catch (error) {
//     console.error("Error during login:", error.message);
//     res.status(500).json({ error: "Internal server error" });
//   }
// };

// exports.checkPin = async (req, res) => {
//   try {
//     const { email, pin } = req.body;

//     if (!email || !pin) {
//       return res.status(400).json({ error: "Email and Pin are required" });
//     }

//     // Check if the user exists
//     const query = "SELECT * FROM app_users WHERE email = ?";
//     const result = await db.query(query, [email]);

//     if (result.length === 0) {
//       return res.status(404).json({ error: "User not found" });
//     }

//     const user = result[0];

//     const hospitalData = await db.query("SELECT * FROM hospitals WHERE hospital_code = ?", [user.hospital_code]);

    
    

//     if (user.status === "Pending" && !hospitalData[0].publicSignupEnabled) {
//       throw new Error("Your Account is Under Review");
//     }

//     if (user.status === "Inactive" && !hospitalData[0].publicSignupEnabled) {
//       throw new Error("Contact admin your account is not approved");
//     }
//     // Check PIN if PIN status is enabled
//       if (pin !== user.pin_number) {
//         return res.status(401).json({ 
//           error: "Invalid PIN",
//           requires_pin: true,
//           message: "Incorrect PIN. Please try again"
//         });
//       }
    
//     // Send response
//     res.status(200).json({
//       message: "Pin verified successfully",
//     });
//   } catch (error) {
//     console.error("Error during login:", error.message);
//     res.status(500).json({ error: "Internal server error" });
//   }
// };

// exports.logout = async (req, res) => {
//   try {
//     const userId = req.user.id; // Assuming the user is authenticated via middleware

//     // Check if the user exists
//     const query = "SELECT * FROM app_users WHERE id = ?";
//     const result = await db.query(query, [userId]);

//     if (result.length === 0) {
//       return res.status(404).json({ error: "User not found" });
//     }

//     // Invalidate the access token in the database
//     const updateQuery = `
//             UPDATE app_users
//             SET access_token = NULL, access_token_expiry = NULL
//             WHERE id = ?
//         `;
//     await db.query(updateQuery, [userId]);

//     res.status(200).json({ message: "Logout successful" });
//   } catch (error) {
//     console.error("Error during logout:", error.message);
//     res.status(500).json({ error: "Internal server error" });
//   }
// };

// // controller.js
// exports.getAppUsersByHospitalCode = async (req, res) => {
//   try {
//     // Extract the hospital_code from the token (req.user object)
//     const userId = req.user.id;

//     if (!userId) {
//       return res.status(400).json({ error: "User not found for the token" });
//     }

//     // Query to fetch hospital users based on the hospital_code
//     const query = `
//             SELECT id, email, status,hospital_code
//             FROM app_users
//             WHERE id = ?;
//         `;
//     const result = await db.query(query, [userId]);

//     if (result.length === 0) {
//       return res
//         .status(404)
//         .json({ error: "No users found for the specified Token" });
//     }

//     const hospitalData = await db.query("SELECT * FROM hospitals WHERE hospital_code = ?", [result[0].hospital_code]);
//     if(hospitalData[0].publicSignupEnabled){
//       result[0].status = 'Active'
//     }
//     // Send the response with the users data
//     res.status(200).json({
//       message: "Hospital users fetched successfully",
//       user: result[0],
//     });
//   } catch (error) {
//     console.error("Error fetching hospital users:", error.message);
//     res.status(500).json({ error: "Internal server error" });
//   }
// };

// exports.approveUserId = async (req, res) => {
//   try {
//     const appUserId = req.params.id; // App user ID to approve
//     const { role } = req.user; // Authenticated user's details
//     const { Action } = req.body;

//     const { hospital_code } = req.user;

//     if (!req.body.Action) {
//       return res.status(400).json({ error: "Action is required" });
//     }

//     if (!["Superadmin", "Admin", 8].includes(role)) {
//       return res.status(403).json({ error: "Unauthorized to approve IDs" });
//     }

//     const query = `
//             SELECT hospital_code FROM app_users WHERE id = ? AND hospital_code = ?
//         `;

//     const result = await db.query(query, [appUserId, hospital_code]);

//     if (result.length === 0) {
//       return res
//         .status(403)
//         .json({ error: "User does not belong to your hospital" });
//     }

//     // Approve the ID
//     if (Action == "Reject") {
//       await db.query('UPDATE app_users SET status = "Inactive" WHERE id = ?', [
//         appUserId,
//       ]);
//       res.status(200).json({ message: "ID Rejected successfully" });
//     } else if (Action == "Approve") {
//       await db.query('UPDATE app_users SET status = "Active" WHERE id = ?', [
//         appUserId,
//       ]);
//       res.status(200).json({ message: "ID approved successfully" });
//     }
//   } catch (error) {
//     console.error("Error approving ID:", error.message);
//     res.status(500).json({ error: "Internal server error" });
//   }
// };

// exports.getAppUsers = async (req, res) => {
//   try {
//     const { role } = req.user;
//     // Ensure the user has the proper role
//     if (!["Superadmin", "Admin", 9, 8].includes(role)) {
//       return res.status(403).json({ error: "Unauthorized to view app users" });
//     }

//     // Query to fetch app users
//     const query = `
//             SELECT * FROM app_users;
//         `;

//     const users = await db.query(query);

//     if (users.length === 0) {
//       return res
//         .status(404)
//         .json({ message: "No app users found for this hospital" });
//     }

//     res.status(200).json({
//       message: "App users fetched successfully",
//       data: users,
//     });
//   } catch (error) {
//     console.error("Error fetching app users:", error.message);
//     res.status(500).json({ error: "Internal server error" });
//   }
// };

// exports.getAppUserByHospitalId = async (req, res) => {
//   try {
//     const { role } = req.user;
//     const { id } = req.params; // Extract user ID from request parameters
//     // Log authenticated user details

//     // Ensure the user has the proper role
//     if (!["Superadmin", "Admin", 8, 9].includes(role)) {
//       return res.status(403).json({ error: "Unauthorized to view app users" });
//     }

//     // fetching hospital code from hospital id
//     const query1 = `SELECT * FROM hospitals WHERE id = ?`;
//     const [result1] = await db.query(query1, [id]);
//     const hospital_code = result1.hospital_code;

//     // Query to fetch the app user by hospital_code
//     const query = `SELECT * FROM app_users WHERE hospital_code = ?`;
//     const users = await db.query(query, [hospital_code]);

//     if (users.length === 0) {
//       return res.status(404).json({ message: "App users not found" });
//     }

//     res.status(200).json({
//       message: "App user fetched successfully",
//       data: users, // Return single user object
//     });
//   } catch (error) {
//     console.error("Error fetching app user:", error.message);
//     res.status(500).json({ error: "Internal server error" });
//   }
// };

// exports.deleteAppUser = async (req, res) => {
//   try {
//     const { id } = req.params;
//     const { hospital_code } = req.user;

//     // Check if the user exists
//     // const [users] = await db.query('SELECT * FROM app_users WHERE id = ?', [id]); // ✅ Properly handle array
//     // if (!users || users.length === 0) {
//     //     return res.status(404).json({ error: 'User not found' });
//     // }
//     const appUserquery = "SELECT * FROM app_users WHERE id = ?";

//     const users = await db.query(appUserquery, [id]);

//     if (users.length === 0) {
//       return res
//         .status(404)
//         .json({ message: "No app users found for this hospital" });
//     }

//     // Ensure only Admin or Superadmin can delete users
//     if (!["Admin", "Superadmin", 8, 7].includes(req.user.role)) {
//       return res.status(403).json({ error: "Unauthorized to delete users" });
//     }



//     // Ensure user belongs to the same hospital
//     const query =
//       "SELECT hospital_code,id_photo_url FROM app_users WHERE id = ? AND hospital_code = ?";

//     const result = await db.query(query, [id, hospital_code]);

//     if (!result || result.length === 0) {
//       return res
//         .status(403)
//         .json({ error: "User does not belong to your hospital" });
//     }

//     // Unlink (delete) the associated file if it exists
//     const filePath = path.join(__dirname, '..','..', 'uploads', result[0].id_photo_url.replace(/^\/uploads\//, ''));

//     fs.access(filePath, fs.constants.F_OK, (err) => {
//       if (err) {
//         console.error(`File not found: ${filePath}`);
//         return;
//       }

//       fs.unlink(filePath, (err) => {
//         if (err) {
//           console.error('Error deleting file:', err.message);
//         } else {
//           console.log('File deleted successfully:', filePath);
//         }
//       });
//     });
//     // Delete the user
//     const deleteResult = await db.query("DELETE FROM app_users WHERE id = ?", [
//       id,
//     ]);

//     if (deleteResult.affectedRows === 0) {
//       return res.status(404).json({ error: "User not found" });
//     }

//     res.status(200).json({ message: "User deleted successfully" });
//   } catch (error) {
//     console.error("Error deleting user:", error.message);
//     res.status(500).json({ error: "Internal server error" });
//   }
// };

// //  query title CRUD
// exports.updateQueryTitle = async (req, res) => {
//   const id = req.user.id;
//   const { query_title } = req.body;

//   if (!query_title) {
//     return res.status(400).json({ error: "query_title is required" });
//   }

//   try {
//     const result = await db.query(
//       "UPDATE app_users SET query_title = ? WHERE id = ?",
//       [query_title, id]
//     );

//     if (result.affectedRows === 0) {
//       return res.status(404).json({ error: "User not found" });
//     }

//     res.json({ message: "Query title updated successfully" });
//   } catch (error) {
//     console.error("Error updating query title:", error);
//     res.status(500).json({ error: "Internal server error" });
//   }
// };

// // Delete query_title for a user by user ID

// exports.getShortTitle = (req, res) => {
//   const { question } = req.body;

//   console.log("Question: ", question);
//   if (!question) return res.status(400).json({ error: "No question provided" });

//   let shortTitle = nlp(question).sentences().toTitleCase().out("text");

//   // Remove unnecessary question words
//   shortTitle = shortTitle
//     .replace(
//       /^(What|How|Why|When|Where|Which|Who|Is|Are|Do|Does|Can|Could)\s+/i,
//       ""
//     )
//     .trim();

//   if (!shortTitle)
//     return res.status(400).json({ error: "Invalid question format" });

//   console.log("short question:", shortTitle);

//   res.json({ query_title: shortTitle });
// };

// exports.deleteQueryTitle = async (req, res) => {
//   const id = req.user.id;

//   try {
//     const result = await db.query(
//       "UPDATE app_users SET query_title = NULL WHERE id = ?",
//       [id]
//     );

//     if (result.affectedRows === 0) {
//       return res.status(404).json({ error: "User not found" });
//     }

//     res.json({ message: "Query title deleted successfully" });
//   } catch (error) {
//     console.error("Error deleting query title:", error);
//     res.status(500).json({ error: "Internal server error" });
//   }
// };

// exports.sendOtp = async (req, res) => {
//   try {
//     const { email } = req.body;

//     // Validate email input
//     if (!email) {
//       return res.status(400).json({ error: "Email is required" });
//     }

//     // Check if user exists
//     const user = await db.query(
//       "SELECT id, username, hospital_code FROM app_users WHERE email = ?",
//       [email]
//     );
//     if (!user.length) {
//       return res.status(404).json({ error: "User not found" });
//     }

//     console.log("user", user);
//     const userId = user[0].id;
//     const hospital_code = user[0].hospital_code;

//     // fetch hospital name of app_user
//     const hospital = await db.query(
//       "SELECT name_hospital FROM hospitals WHERE hospital_code = ?",
//       [hospital_code]
//     );

//     console.log("hospital result : ", hospital[0].name_hospital);
//     // Generate a 6-digit OTP
//     const otp = Math.floor(100000 + Math.random() * 900000).toString();
//     const expiresAt = new Date(Date.now() + 2 * 60 * 60 * 1000); // OTP expires in 1 hour

//     console.log("otp : ", otp, "expiresAt: ", expiresAt);
//     // Store OTP in database
//     await db.query(
//       "UPDATE app_users SET otp_code = ?, otp_expires_at = ? WHERE id = ?",
//       [otp, expiresAt, userId]
//     );

//     // // Send OTP via email
//     const info = await sendMail(
//       email,
//       hospital[0].name_hospital,
//       user[0].username,
//       otp
//     );

//     res.json({ message: "OTP sent successfully", email_status: info.response });
//   } catch (error) {
//     console.error("Error sending OTP:", error);
//     res.status(500).json({ error: "Internal server error" });
//   }
// };

// exports.changePassword = async (req, res) => {
//   try {
//     const { email, otp, new_password } = req.body;

//     console.log("email : ", email);
//     // Validate inputs
//     if (!email || !otp || !new_password) {
//       return res
//         .status(400)
//         .json({ error: "Email, OTP, and new password are required" });
//     }

//     // Fetch OTP from the database
//     const user = await db.query(
//       "SELECT id, otp_code, otp_expires_at FROM app_users WHERE email = ?",
//       [email]
//     );

//     if (!user.length) {
//       return res.status(404).json({ error: "User not found" });
//     }

//     const userData = user[0];

//     // ✅ Check if OTP matches
//     if (userData.otp_code !== otp) {
//       return res.status(400).json({ error: "Invalid OTP" });
//     }

//     // ✅ Check if OTP is expired
//     if (new Date() > new Date(userData.otp_expires_at)) {
//       return res.status(400).json({ error: "OTP expired. Request a new one." });
//     }

//     // ✅ Hash the new password
//     const hashedPassword = await bcrypt.hash(new_password, 10);

//     // ✅ Update password in DB & clear OTP
//     await db.query(
//       "UPDATE app_users SET hash_password = ?, otp_code = NULL, otp_expires_at = NULL WHERE id = ?",
//       [hashedPassword, userData.id]
//     );

//     res.json({ message: "Password changed successfully!" });
//   } catch (error) {
//     console.error("Error resetting password:", error);
//     res.status(500).json({ error: "Internal server error" });
//   }
// };

// async function sendMail(email, hospital_name, username, otp) {
//   const mailOptions = {
//     from: sender_mail, // Sender's email
//     to: email, // Recipient's email
//     subject: "Spurrinai Login Credentials", // Email subject
//     html: `<!DOCTYPE html>
// <html lang="en">
// <head>
//     <meta charset="UTF-8">
//     <meta name="viewport" content="width=device-width, initial-scale=1.0">
//     <title>Reset Your Password - Spurrinai Medical Platform</title>
//     <style>
//                 @import url('https://fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900&family=Syne:wght@400..800&display=swap');

//         body {
//             font-family: 'Inter', sans-serif;
//             margin: 0;
//             padding: 0;
//             background-color: #ebf3fa;
//             color: #333;
//         }
//         .email-container {
//             max-width: 600px;
//             margin: 20px auto;
//             background: white;
//             border-radius: 10px;
//             overflow: hidden;
//             box-shadow: 0 5px 15px rgba(0, 0, 0, 0.08);
//         }
//         .email-header {
//             background: linear-gradient(135deg, #2193b0, #6dd5ed);
//             padding: 30px;
//             text-align: center;
//             color: white;
//         }
//         .hospital-name {
//             display: inline-block;
//             background-color: rgba(255, 255, 255, 0.2);
//             padding: 5px 15px;
//             border-radius: 20px;
//             font-size: 14px;
//             margin-bottom: 10px;
//         }
//         .email-header h1 {
//             margin: 10px 0 0;
//             font-size: 26px;
//             font-weight: 500;
//         }
//         .email-content {
//             padding: 40px 30px;
//         }
//         .greeting {
//             font-size: 30px;
//             font-weight: 700;
//             margin-bottom: 20px;
//             color: #303030;
//         }
//         .greeting-text{
//             font-size: 18px;
//             font-weight: 400;
//             margin-bottom: 20px;
//             line-height: 1.7;
//             color: #303030;
//         }
//         .verification-code {
//             background-color: #f5f9fc;
//             border: 1px solid #e0e9f0;
//             border-radius: 8px;
//             padding: 20px;
//             margin: 25px 0;
//             text-align: center;
//         }
//         .code {
//             font-family: 'Courier New', monospace;
//             font-size: 32px;
//             letter-spacing: 6px;
//             color: #2193b0;
//             font-weight: bold;
//             padding: 10px 0;
//         }
//         .reset-button {
//             display: block;
//             background-color: #2193b0;
//             color: white;
//             text-decoration: none;
//             text-align: center;
//             padding: 15px 20px;
//             border-radius: 5px;
//             margin: 30px auto;
//             max-width: 250px;
//             font-weight: 500;
//             transition: background-color 0.3s;
//         }
//         .reset-button:hover {
//             background-color: #1a7b92;
//         }
//         .expiry-note {
//             background-color: #fff8e1;
//             border-left: 4px solid #ffc107;
//             padding: 12px 15px;
//             margin: 25px 0;
//             font-size: 14px;
//             color: #856404;
//         }
//         .security-note {
//             margin-top: 30px;
//             padding-top: 20px;
//             border-top: 1px solid #eee;
//             font-size: 14px;
//             color: #666;
//         }
//         .email-footer {
//             background-color: #f5f9fc;
//             padding: 20px;
//             text-align: center;
//             font-size: 13px;
//             color: #888;
//             border-top: 1px solid #e0e9f0;
//         }
//         .support-link {
//             color: #2193b0;
//             text-decoration: none;
//         }
//         .device-info {
//             margin-top: 20px;
//             background-color: #f5f9fc;
//             padding: 15px;
//             border-radius: 6px;
//             font-size: 14px;
//         }
//         .device-info p {
//             margin: 5px 0;
//             color: #666;
//         }
//     </style>
// </head>
// <body>
//     <div class="email-container">
//         <div class="email-header">
//             <div class="hospital-name"> ${hospital_name}</div>
//             <h1>Reset Your Password</h1>
//         </div>
//         <div class="email-content">
//             <div class="greeting">Hello ${username},</div>
            
//             <p class="greeting-text" >We received a request to <strong>reset the password</strong> for your account on the <strong> Spurrinai healthcare platform</strong>. For your security reasons, please verify this action.</p>
            
//             <div class="verification-code">
//                 <p>Please enter this verification code:</p>
//                 <div class="code">${otp}</div>
//                 <p>on the password reset screen</p>
//             </div>
            
//                 <a href="spurrinai://ResetPassword/${otp}" class="reset-button">Reset Password</a>

//             <div class="expiry-note">
//                 <strong>Note:</strong> This verification code will expire in 2 hours for security reasons.
//             </div>
            
          
            
//             <div class="security-note">
//                 <p>If you did not request this password reset, please contact our IT security team immediately at <a href="mailto:info@spurrinai.com" class="support-link">info@spurrinai.com</a> or call our support line at +1 (800) 555-1234.</p>
//             </div>
//         </div>
//         <div class="email-footer">
//             <p>© 2025 Spurrinai - Healthcare Data Management Platform</p>
//             <p>This is an automated message. Please do not reply to this email.</p>
//             <p>Need help? Contact <a href="mailto:support@spurrinai.com" class="support-link">support@spurrinai.com</a></p>
//         </div>
//     </div>
// </body>
// </html>`,
//   };

//   try {
//     const info = await transporter.sendMail(mailOptions);
//     console.log("info: ", info);
//     return info;
//   } catch (error) {
//     console.error(`Error sending email to ${email}:`, error);
//     return error;
//   }
// }

// // chat-sessions
// exports.getChatSessionsByAppUserID = async (req, res) => {
//   try {

//     console.log("user data", req.user)
//     const { role } = req.user;
//     // Ensure the user has the proper role
//     // if (!['Superadmin', 'Admin', 9, 8].includes(role)) {
//     //     return res.status(403).json({ error: 'Unauthorized to view chats' });
//     // }

//     if (!req.user.id) {
//       return res.status(400).json({ error: "user id not found" });
//     }
//     // Query to fetch app users
//     const query = `
//     SELECT session_id, 
//            MIN(session_title) AS session_title, 
//            MIN(created_at) AS created_at 
//     FROM interaction_logs 
//     WHERE app_user_id = ${req.user.id} 
//     AND session_id IS NOT NULL
//     GROUP BY session_id
//     ORDER BY session_id DESC;
// `;


//     const session_ids = await db.query(query);

//     if (session_ids.length === 0) {
//       return res.status(404).json({ message: 'No interaction logs found for this app user', data: session_ids });
//     }

//     res.status(200).json({
//       message: 'Interaction logs fetched successfully',
//       data: session_ids,
//     });
//   } catch (error) {
//     console.error('Error fetching interaction logs:', error.message);
//     res.status(500).json({ error: 'Internal server error' });
//   }
// }

// exports.getChatForEachSession = async (req, res) => {
//   try {

//     console.log("user data", req.user)
//     const session_id = req.params.session_id;

//     console.log("session_id ", session_id)
//     // Ensure the user has the proper role
//     // if (!['Superadmin', 'Admin', 9, 8].includes(role)) {
//     //     return res.status(403).json({ error: 'Unauthorized to view chats' });
//     // }

//     if (!req.user.id) {
//       return res.status(400).json({ error: "user id not found" });
//     }
//     // Query to fetch app users
//     const query = `
//     SELECT * FROM interaction_logs 
//     WHERE app_user_id = ? 
//     AND session_id = ? 
//     AND status = 'Active';
// `;


//     const values = [req.user.id, session_id];

//     const interaction_logs = await db.query(query, values);

//     if (interaction_logs.length === 0) {
//       return res.status(404).json({ message: 'No interaction logs found for this app user or session', data: interaction_logs });
//     }

//     res.status(200).json({
//       message: 'Interaction logs fetched successfully',
//       data: interaction_logs,
//     });
//   } catch (error) {
//     console.error('Error fetching interaction logs:', error.message);
//     res.status(500).json({ error: 'Internal server error' });
//   }
// }

// exports.deleteChatSessions = async (req, res) => {
//   const id = req.user.id;
//   const { session_id } = req.body

//   console.log("session_id ", session_id)
//   console.log("app_user_id ", id)

//   try {
//     const result = await db.query(
//       "UPDATE interaction_logs SET session_id = NULL WHERE app_user_id = ? AND session_id = ?",
//       [id, session_id]
//     );

//     if (result.affectedRows === 0) {
//       return res.status(404).json({ error: "No session found" });
//     }

//     res.json({ message: "Chat session deleted successfully" });
//   } catch (error) {
//     console.error("Error deleting query title:", error);
//     res.status(500).json({ error: "Internal server error" });
//   }
// }

// exports.clearChatbasedOnSessions = async (req, res) => {
//   const id = req.user.id;
//   const { session_id } = req.body

//   try {
//     const result = await db.query(
//       "UPDATE interaction_logs SET status = ? WHERE app_user_id = ? AND session_id = ?",
//       ['Inactive', id, session_id]
//     );

//     if (result.affectedRows === 0) {
//       return res.status(404).json({ error: "No chat found" });
//     }

//     res.json({ message: "Chat deleted successfully" });
//   } catch (error) {
//     console.error("Error deleting chat:", error);
//     res.status(500).json({ error: "Internal server error" });
//   }
// }

// exports.getChatByTime = async (req, res) => {
//   try {

//     console.log("user data", req.user)
//     const { lastcreated_at } = req.body;

//     // Ensure the user has the proper role
//     // if (!['Superadmin', 'Admin', 9, 8].includes(role)) {
//     //     return res.status(403).json({ error: 'Unauthorized to view chats' });
//     // }

//     if (!req.user.id) {
//       return res.status(400).json({ error: "user id not found" });
//     }
//     // Query to fetch app users

//     let results

//     console.log("last created at", lastcreated_at)
//     if (!lastcreated_at) {  // Handles null, undefined, empty string, etc.

//       const query = `
//         SELECT * FROM interaction_logs 
//         WHERE app_user_id = ?;
//       `;

//       results = await db.query(query, [req.user.id]);
//     } else {
//       console.log("Executing with last_created_at:", lastcreated_at);

//       const query = `
//         SELECT * FROM interaction_logs 
//         WHERE app_user_id = ? 
//         AND created_at > ?;
//       `;

//       results = await db.query(query, [req.user.id, lastcreated_at]);
//     }


//     if (results.length === 0) {
//       return res.status(404).json({ message: 'No interaction logs found for this app user' });
//     }

//     res.status(200).json({
//       message: 'Interaction logs fetched successfully',
//       data: results,
//     });
//   } catch (error) {
//     console.error('Error fetching interaction logs:', error.message);
//     res.status(500).json({ error: 'Internal server error' });
//   }

// }

// exports.checkEmailCode = async (req, res) => {
//   try {
//     const { email, hospital_code } = req.body;

//     // Check if the email and code are provided
//     if (!email || !hospital_code) {
//       return res.status(400).json({ error: "Email and code are required" });
//     }

//     console.log("received data", email, hospital_code)
//     // Check if the email exists in the database
//     const useremail = await db.query("SELECT * FROM app_users WHERE email = ?", [email]);
//     console.log("user email", useremail)
//     if (useremail.length) {
//       return res.status(404).json({ error: "Email already in use" });
//     }

//     // Check if the code is correct
//     const usercode = await db.query("SELECT hospital_code FROM hospital_users WHERE hospital_code = ?", [hospital_code]);
//     console.log("user code", usercode)

//     if (!usercode.length) {
//       return res.status(404).json({ error: "Please enter valid hospital code" });
//     }


//     // Code is correct, return success response    
//     res.status(200).json({ message: "Email code is correct" });
//   } catch (error) {
//     console.error("Error checking email code:", error);
//     res.status(500).json({ error: "Internal server error" });
//   }
// }

// // get popular topics
// exports.getPopularTopics = async (req, res) => {
//   let popularTopics = [];
//   try {
//     // Fetch top 4 most viewed questions
//     console.log("req.user data : ", req.user)
//     const rows = await getMappedPopularQuestionsAnswers(req.user.hospital_code);
//     if (!rows) {
//       popularTopics = []
//     }
//     else {
//       popularTopics = rows;
//     }
//     console.log('hospital data : ', rows)
//     res.status(200).json({
//       success: true,
//       data: popularTopics
//     });
//   } catch (error) {
//     console.error('Error fetching popular topics:', error);
//     res.status(500).json({
//       success: false,
//       message: 'Internal server error'
//     });
//   }
// }

// const getMappedPopularQuestionsAnswers = async (hospitalCode) => {
//   console.log("Hospital code is---", hospitalCode);
  
//   try {
//     const query = `
//       SELECT il.query, il.response
//       FROM interaction_logs il
//       WHERE il.hospital_code = ?
//       ORDER BY il.created_at DESC  -- Sorting by most recent interactions
//       LIMIT 10;  -- Fetch more than 4 to filter unwanted entries
//     `;
    
//     const rows = await db.query(query, [hospitalCode]);

//     console.log("Fetched questions before filtering:", rows);

//     // Skip the row if either condition is true
//     const filteredRows = rows.filter(row => 
//       !(row.query.toLowerCase().includes("yes") || row.response.includes("Please reply with 'yes'"))
//     );

//     // Return only the top 4 filtered results
//     return filteredRows.slice(0, 4);

//   } catch (error) {
//     console.error("Error fetching popular topics:", error.message);
//     throw new Error("Internal server error");
//   }
// };

// exports.changePin = async (req, res) => {
//   try {
//     const { current_pin, new_pin } = req.body;
//     const userId = req.user.id;

//     if (!current_pin || !new_pin) {
//       return res.status(400).json({ error: "Current pin and new pin are required" });
//     }

//     // Add PIN length validation
//     if (new_pin.length !== 4 || !/^\d+$/.test(new_pin)) {
//       return res.status(400).json({ error: "New PIN must be exactly 4 digits" });
//     }

//     // Get user's current pin
//     const userQuery = "SELECT pin_number FROM app_users WHERE id = ?";
//     const user = await db.query(userQuery, [userId]);

//     if (!user.length) {
//       return res.status(404).json({ error: "User not found" });
//     }

//     // Verify current pin
//     if (user[0].pin_number !== current_pin) {
//       return res.status(400).json({ error: "Current pin is incorrect" });
//     }

//     // Check if new pin is same as current pin
//     if (current_pin === new_pin) {
//       return res.status(400).json({ error: "New PIN cannot be the same as current PIN" });
//     }

//     // Update to new pin
//     await db.query(
//       "UPDATE app_users SET pin_number = ? WHERE id = ?",
//       [new_pin, userId]
//     );

//     res.json({ message: "Pin changed successfully" });
//   } catch (error) {
//     console.error("Error changing pin:", error);
//     res.status(500).json({ error: "Internal server error" });
//   }
// };

// exports.forgotPin = async (req, res) => {
//   try {
//     const { email } = req.body;

//     if (!email) {
//       return res.status(400).json({ error: "Email is required" });
//     }

//     // Get user details
//     const userQuery = `
//       SELECT au.id, au.username, au.pin_number, au.hospital_code, h.name_hospital 
//       FROM app_users au
//       JOIN hospitals h ON au.hospital_code = h.hospital_code
//       WHERE au.email = ?
//     `;
//     const user = await db.query(userQuery, [email]);

//     if (!user.length) {
//       return res.status(404).json({ error: "User not found" });
//     }

//     const userData = user[0];

//     // Send pin via email
//     const mailOptions = {
//       from: "srikanth.mallikarjuna@tech4biz.io",
//       to: email,
//       subject: "Your Spurrinai PIN",
//       html: `<!DOCTYPE html>
//       <html lang="en">
//       <head>
//           <meta charset="UTF-8">
//           <meta name="viewport" content="width=device-width, initial-scale=1.0">
//           <title>Your PIN - Spurrinai Medical Platform</title>
//           <style>
//               @import url('https://fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900&family=Syne:wght@400..800&display=swap');
//               body {
//                   font-family: 'Inter', sans-serif;
//                   margin: 0;
//                   padding: 0;
//                   background-color: #ebf3fa;
//                   color: #333;
//               }
//               .email-container {
//                   max-width: 600px;
//                   margin: 20px auto;
//                   background: white;
//                   border-radius: 10px;
//                   overflow: hidden;
//                   box-shadow: 0 5px 15px rgba(0, 0, 0, 0.08);
//               }
//               .email-header {
//                   background: linear-gradient(135deg, #2193b0, #6dd5ed);
//                   padding: 30px;
//                   text-align: center;
//                   color: white;
//               }
//               .hospital-name {
//                   display: inline-block;
//                   background-color: rgba(255, 255, 255, 0.2);
//                   padding: 5px 15px;
//                   border-radius: 20px;
//                   font-size: 14px;
//                   margin-bottom: 10px;
//               }
//               .email-content {
//                   padding: 40px 30px;
//               }
//               .greeting {
//                   font-size: 30px;
//                   font-weight: 700;
//                   margin-bottom: 20px;
//                   color: #303030;
//               }
//               .pin-display {
//                   background-color: #f5f9fc;
//                   border: 1px solid #e0e9f0;
//                   border-radius: 8px;
//                   padding: 20px;
//                   margin: 25px 0;
//                   text-align: center;
//               }
//               .pin {
//                   font-family: 'Courier New', monospace;
//                   font-size: 32px;
//                   letter-spacing: 6px;
//                   color: #2193b0;
//                   font-weight: bold;
//                   padding: 10px 0;
//               }
//               .security-note {
//                   margin-top: 30px;
//                   padding-top: 20px;
//                   border-top: 1px solid #eee;
//                   font-size: 14px;
//                   color: #666;
//               }
//               .email-footer {
//                   background-color: #f5f9fc;
//                   padding: 20px;
//                   text-align: center;
//                   font-size: 13px;
//                   color: #888;
//                   border-top: 1px solid #e0e9f0;
//               }
//           </style>
//       </head>
//       <body>
//           <div class="email-container">
//               <div class="email-header">
//                   <div class="hospital-name">${userData.name_hospital}</div>
//                   <h1>Your PIN Information</h1>
//               </div>
//               <div class="email-content">
//                   <div class="greeting">Hello ${userData.username},</div>
                  
//                   <p>Here is your PIN for the Spurrinai healthcare platform:</p>
                  
//                   <div class="pin-display">
//                       <div class="pin">${userData.pin_number}</div>
//                   </div>
                  
//                   <div class="security-note">
//                       <p>For security reasons, please do not share this PIN with anyone. If you did not request this information, please contact our support team immediately.</p>
//                   </div>
//               </div>
//               <div class="email-footer">
//                   <p>© 2025 Spurrinai - Healthcare Data Management Platform</p>
//                   <p>This is an automated message. Please do not reply to this email.</p>
//                   <p>Need help? Contact <a href="mailto:support@spurrinai.com">support@spurrinai.com</a></p>
//               </div>
//           </div>
//       </body>
//       </html>`
//     };

//     await transporter.sendMail(mailOptions);

//     res.json({ message: "PIN has been sent to your email" });
//   } catch (error) {
//     console.error("Error in forgot pin:", error);
//     res.status(500).json({ error: "Internal server error" });
//   }
// };