const express = require('express');
const { query } = require('../db');
const { authenticate, requireRole } = require('../middleware/auth');

const router = express.Router();

// ---- 邮件日志(admin/owner 可查) ----
router.get('/emails', authenticate, requireRole('owner', 'admin'), async (req, res) => {
  try {
    const { status, email, limit } = req.query;
    let q = 'SELECT * FROM email_logs WHERE 1=1';
    const p = [];
    if (status === 'sent' || status === 'failed') { q += ' AND status = ?'; p.push(status); }
    if (email) { q += ' AND to_email LIKE ?'; p.push(`%${email}%`); }
    q += ' ORDER BY id DESC LIMIT ?';
    p.push(Math.min(parseInt(limit) || 100, 500));
    const rows = await query(q, p);
    res.json(rows);
  } catch (e) { res.status(500).json({ error: e.message }); }
});

// ---- 系统日志(admin/owner 可查) ----
router.get('/system', authenticate, requireRole('owner', 'admin'), async (req, res) => {
  try {
    const { level, source, limit } = req.query;
    let q = 'SELECT * FROM system_logs WHERE 1=1';
    const p = [];
    if (['info', 'warn', 'error'].includes(level)) { q += ' AND level = ?'; p.push(level); }
    if (source) { q += ' AND source LIKE ?'; p.push(`%${source}%`); }
    q += ' ORDER BY id DESC LIMIT ?';
    p.push(Math.min(parseInt(limit) || 100, 500));
    const rows = await query(q, p);
    res.json(rows);
  } catch (e) { res.status(500).json({ error: e.message }); }
});

module.exports = router;