import { auth } from "@/auth";
import { db } from "@/lib/db";
import { redirect } from "next/navigation";
import { generateDownloadUrl } from "@/lib/storage";
import { ChangePasswordForm } from "./change-password-form";
import { SignatureUploader } from "./signature-uploader";
import { SuperUserRequestForm } from "./superuser-request-form";
import type { Metadata } from "next";

export const metadata: Metadata = { title: "My Profile" };

const ROLE_LABELS: Record<string, string> = {
  TECHNICAL: "Technical",
  MANNING: "Manning",
  ACCOUNTS: "Accounts",
  MANAGER: "Manager",
  SUPERUSER: "SuperUser",
  AUDITOR: "Auditor",
  ADMIN: "Admin",
};

export default async function ProfilePage() {
  const session = await auth();
  if (!session?.user) redirect("/login");

  const user = await db.user.findUnique({
    where: { id: session.user.id },
    select: {
      id: true,
      name: true,
      email: true,
      employeeId: true,
      role: true,
      signatureKey: true,
      superUserRequests: {
        orderBy: { createdAt: "desc" },
        take: 1,
        select: { status: true, createdAt: true },
      },
    },
  });
  if (!user) redirect("/login");

  const canHaveSignature = user.role === "MANAGER" || user.role === "SUPERUSER";
  const canRequestSuperUser = user.role !== "SUPERUSER" && user.role !== "ADMIN";

  const signatureUrl = user.signatureKey
    ? await generateDownloadUrl(user.signatureKey)
    : null;

  const latestRequest = user.superUserRequests[0] ?? null;

  return (
    <div className="max-w-2xl space-y-8">
      <div>
        <h1 className="text-2xl font-semibold text-neutral-900">My Profile</h1>
        <p className="mt-1 text-sm text-neutral-500">Manage your account settings</p>
      </div>

      {/* Account Info */}
      <section className="rounded-lg border border-neutral-200 bg-white p-6">
        <h2 className="text-base font-semibold text-neutral-900 mb-4">Account Information</h2>
        <dl className="grid grid-cols-2 gap-x-6 gap-y-3 text-sm">
          <div>
            <dt className="text-neutral-500">Name</dt>
            <dd className="font-medium text-neutral-900">{user.name}</dd>
          </div>
          <div>
            <dt className="text-neutral-500">Email</dt>
            <dd className="font-medium text-neutral-900">{user.email}</dd>
          </div>
          <div>
            <dt className="text-neutral-500">Employee ID</dt>
            <dd className="font-mono text-sm font-medium text-neutral-900">{user.employeeId}</dd>
          </div>
          <div>
            <dt className="text-neutral-500">Role</dt>
            <dd>
              <span className="inline-flex items-center rounded-full bg-primary-50 px-2.5 py-0.5 text-xs font-medium text-primary-700">
                {ROLE_LABELS[user.role] ?? user.role}
              </span>
            </dd>
          </div>
        </dl>
      </section>

      {/* Change Password */}
      <section className="rounded-lg border border-neutral-200 bg-white p-6">
        <h2 className="text-base font-semibold text-neutral-900 mb-4">Change Password</h2>
        <ChangePasswordForm />
      </section>

      {/* Signature (managers & superusers) */}
      {canHaveSignature && (
        <section className="rounded-lg border border-neutral-200 bg-white p-6">
          <div className="mb-4">
            <h2 className="text-base font-semibold text-neutral-900">Approval Signature</h2>
            <p className="mt-1 text-sm text-neutral-500">
              Your signature is embedded in approved PO documents (PDF and XLSX).
              {!user.signatureKey && (
                <span className="ml-1 font-medium text-warning-700">
                  A signature is required to approve purchase orders.
                </span>
              )}
            </p>
          </div>
          <SignatureUploader currentSignatureUrl={signatureUrl} />
        </section>
      )}

      {/* SuperUser access request */}
      {canRequestSuperUser && (
        <section className="rounded-lg border border-neutral-200 bg-white p-6">
          <h2 className="text-base font-semibold text-neutral-900 mb-2">SuperUser Access</h2>
          <SuperUserRequestForm pendingRequest={latestRequest} />
        </section>
      )}
    </div>
  );
}