"""Administrative CLI: pull the client registry from GTI Gerenciador (the
panel) and mirror it into Tenant rows (source='GTI_GERENCIADOR'). GTI
Gerenciador is the single source of truth; the Fiscal Hub never gets MySQL
credentials — this only calls the panel's read-only internal endpoint.

Usage (from inside the Hub container, or anywhere DATABASE_URL +
GERENCIADOR_INTERNAL_URL + FISCAL_INTERNAL_API_TOKEN are reachable):

    python central/scripts/sync_clients_from_gerenciador.py

Prints a reconciliation summary; never prints the bearer token.
"""
import sys
from pathlib import Path

ROOT = Path(__file__).resolve().parents[2]
sys.path.insert(0, str(ROOT / "central"))

from sqlalchemy.orm import Session  # noqa: E402

from app import client_sync  # noqa: E402
from app.db import engine  # noqa: E402


def main():
    clients = client_sync.fetch_from_gerenciador()
    with Session(engine) as session:
        result = client_sync.sync_from_gerenciador(session, clients)
        session.commit()
    print(f"CLIENT_SYNC=ok fetched={result.fetched} created={result.created} updated={result.updated} unchanged={result.unchanged}")
    print(f"TOTAL_CLIENTS_GERENCIADOR={result.fetched} ACTIVE_CLIENTS_GERENCIADOR={result.active} INACTIVE_CLIENTS_GERENCIADOR={result.inactive}")


if __name__ == "__main__":
    try:
        main()
    except client_sync.ClientSyncUnavailable as error:
        print(f"CLIENT_SYNC=unavailable reason={error}")
        raise SystemExit(1)