#!/usr/bin/env bash
# F14 — SMTP gönderim + DNS özeti (secret yazdırmaz).
set -euo pipefail
ROOT="$(cd "$(dirname "$0")/.." && pwd)"
LOG="$ROOT/frontend/qa/logs/f14"
mkdir -p "$LOG"
TS=$(date +%s)

echo "[F14] DNS (faunamix.com)"
{
  echo "SPF:"; dig +short TXT faunamix.com 2>/dev/null || true
  echo "DMARC:"; dig +short TXT _dmarc.faunamix.com 2>/dev/null || true
  echo "DKIM google:"; dig +short TXT google._domainkey.faunamix.com 2>/dev/null || true
} | tee "$LOG/dns-$TS.txt"

if [[ -f "$ROOT/api/.env.railway" ]]; then
  set -a
  # shellcheck disable=SC1091
  source "$ROOT/api/.env.railway"
  set +a
  mysql -h "$DB_HOST" -P "${DB_PORT:-3306}" -u "$DB_USER" -p"$DB_PASS" --protocol=TCP "$DB_NAME" -N -e "
    SELECT JSON_UNQUOTE(JSON_EXTRACT(data_json, '$.smtp_host')),
           JSON_UNQUOTE(JSON_EXTRACT(data_json, '$.smtp_from')),
           JSON_UNQUOTE(JSON_EXTRACT(data_json, '$.smtp_port'))
    FROM site_settings WHERE section_key='general' LIMIT 1;
  " 2>/dev/null | tee "$LOG/smtp-panel-$TS.txt" || true
fi

echo "[F14] Canlı health SMTP"
curl -sS "https://faunamix-production.up.railway.app/health.php" | tee "$LOG/health-smtp-$TS.json"

echo ""
echo "Gönderim testi (PHP 8+ gerekir — Railway container veya PHP 8 yerel):"
echo "  QA_F14_TO='you@gmail.com,you@outlook.com,you@yahoo.com,test-xx@mail-tester.com' \\"
echo "  FAUNAMIX_ENV_FILE=api/.env.railway php scripts/qa-f14-send-test-mails.php"
echo ""
echo "mail-tester.com: siteden alınan adresi QA_F14_TO listesine ekleyin; skor ekran görüntüsü → frontend/qa/evidence/f14/"