<?php

namespace classes;

/**
 * Self-healing schema bootstrap.
 *
 * Runs every `*_schema_bootstrap::ensureSchema()` on app start so the
 * production database always has the columns the current code expects.
 * This catches the "merged-to-master-but-never-applied-to-prod" failure
 * mode (e.g. TRU-77 invoice_email) where the deploy pipeline pre-deploy
 * step didn't run (missing GitHub secrets, network glitch, etc.).
 *
 * Each bootstrap is **additive + idempotent**:
 * - SHOW COLUMNS check before any ALTER
 * - ALTER TABLE ADD COLUMN only if missing
 * - Once `ensureSchema()` has been called once for a class, the static
 *   `$initialized` flag short-circuits subsequent calls
 *
 * The discovery + run loop itself is memoized per PHP process via
 * `self::$ran`, so the cost after the first request is a single
 * `class_exists` check (~microseconds).
 *
 * Errors in a single bootstrap are logged but never throw — a broken
 * migration must not 500 every request. A future /api/admin/schema-check
 * call will surface the failure.
 */
class schema_bootstrap_runtime
{
    /** @var bool Memoization for the discovery+run loop */
    private static bool $ran = false;

    /** @var string[] Class names that already failed this process (don't retry) */
    private static array $failed = [];

    public static function runAll(): void
    {
        if (self::$ran) {
            return;
        }
        self::$ran = true;

        $classesDir = __DIR__;
        $bootstraps = glob($classesDir . DIRECTORY_SEPARATOR . '*_schema_bootstrap.php');
        if (!$bootstraps) {
            return;
        }

        foreach ($bootstraps as $file) {
            $base = basename($file, '.php');
            $class = "classes\\{$base}";

            if (in_array($class, self::$failed, true)) {
                continue;
            }

            try {
                if (!class_exists($class)) {
                    require_once $file;
                }
                if (!class_exists($class)) {
                    continue;
                }
                if (!method_exists($class, 'ensureSchema')) {
                    continue;
                }
                $class::ensureSchema();
            } catch (\Throwable $e) {
                self::$failed[] = $class;
                error_log(sprintf(
                    '[schema-bootstrap] %s failed: %s',
                    $base,
                    $e->getMessage()
                ));
                // Intentionally do not throw — a broken migration must
                // not 500 every request. The next /api/admin/schema-check
                // call (or the next deploy's pre-deploy step) will
                // surface the failure.
            }
        }
    }
}