import { Suspense } from 'react';
import { redirect } from 'next/navigation';
import Link from 'next/link';
import { getServerSession } from '@/lib/auth/getServerSession';
import { PERMISSIONS } from '@/lib/permissions/permissions';
import AccessDenied from '@/components/admin/errors/AccessDenied';
import EmployeesTable from '@/components/admin/employees/EmployeesTable';
import { EmployeesTableSkeleton } from '@/components/ui/CustomSkeleton';
import { cookies } from 'next/headers';
import { SESSION_COOKIE } from '@/lib/auth/requireAuth';
import { Metadata } from 'next';

export const metadata: Metadata = {
  title: 'Employees List',
};

// ─── Data fetchers ────────────────────────────────────────────────────────────

async function getInitialEmployees(sessionToken: string) {
  try {
    const baseUrl = process.env.NEXT_PUBLIC_APP_URL || 'http://localhost:3000';
    const res = await fetch(`${baseUrl}/api/employees?page=1&limit=10`, {
      cache: 'no-store',
      headers: { Authorization: `Bearer ${sessionToken}` },
    });
    if (!res.ok) throw new Error('Failed to fetch employees');
    const data = await res.json();
    return data.data;
  } catch (error) {
    console.error('Failed to fetch initial employees:', error);
    return {
      employees: [],
      pagination: { page: 1, limit: 10, total: 0, totalPages: 0 },
    };
  }
}

async function getInitialCounts(sessionToken: string) {
  try {
    const baseUrl = process.env.NEXT_PUBLIC_APP_URL || 'http://localhost:3000';
    const res = await fetch(`${baseUrl}/api/employees/counts`, {
      cache: 'no-store',
      headers: { Authorization: `Bearer ${sessionToken}` },
    });
    if (!res.ok) throw new Error('Failed to fetch counts');
    const data = await res.json();
    return data.data as { active: number; deleted: number };
  } catch (error) {
    console.error('Failed to fetch employee counts:', error);
    return { active: 0, deleted: 0 };
  }
}

async function getRoles(sessionToken: string) {
  try {
    const baseUrl = process.env.NEXT_PUBLIC_APP_URL || 'http://localhost:3000';
    const res = await fetch(`${baseUrl}/api/employees/roles`, {
      cache: 'no-store',
      headers: { Authorization: `Bearer ${sessionToken}` },
    });
    if (!res.ok) return [];
    const data = await res.json();
    return data.data || [];
  } catch (error) {
    console.error('Failed to fetch roles:', error);
    return [];
  }
}

async function getPermissions(sessionToken: string) {
  try {
    const baseUrl = process.env.NEXT_PUBLIC_APP_URL || 'http://localhost:3000';
    const res = await fetch(`${baseUrl}/api/employees/permissions`, {
      cache: 'no-store',
      headers: { Authorization: `Bearer ${sessionToken}` },
    });
    if (!res.ok) return [];
    const data = await res.json();
    return data.data || [];
  } catch (error) {
    console.error('Failed to fetch permissions:', error);
    return [];
  }
}

// ─── Page content ─────────────────────────────────────────────────────────────

async function EmployeesContent() {
  const cookieStore = await cookies();
  const sessionId = cookieStore.get(SESSION_COOKIE)?.value;
  if (!sessionId) redirect('/admin/login');

  const session = await getServerSession();
  if (!session) redirect('/admin/login');
  if (!session.permissions.includes(PERMISSIONS.EMPLOYEES_READ)) return <AccessDenied />;

  const canCreate = session.permissions.includes(PERMISSIONS.EMPLOYEES_CREATE);
  const canEdit = session.permissions.includes(PERMISSIONS.EMPLOYEES_UPDATE);
  const canDelete = session.permissions.includes(PERMISSIONS.EMPLOYEES_DELETE);
  const canBulkDelete = session.permissions.includes(PERMISSIONS.EMPLOYEES_BULK_DELETE);
  const canActivateDeactivate = session.permissions.includes(PERMISSIONS.EMPLOYEES_ACTIVATE_DEACTIVATE);
  const canLogoutDevices = session.permissions.includes(PERMISSIONS.EMPLOYEES_LOGOUT_DEVICES);
  const canChangePassword = session.permissions.includes(PERMISSIONS.EMPLOYEES_CHANGE_PASSWORD);
  const canManageOverrides = session.permissions.includes(PERMISSIONS.EMPLOYEES_MANAGE_OVERRIDES);
  
  // ✅ New permissions
  const canViewDeleted = session.permissions.includes(PERMISSIONS.EMPLOYEES_VIEW_DELETED);
  const canPermanentDelete = session.permissions.includes(PERMISSIONS.EMPLOYEES_PERMANENT_DELETE);
  const canRestore = session.permissions.includes(PERMISSIONS.EMPLOYEES_RESTORE);
  const canBulkRestore = session.permissions.includes(PERMISSIONS.EMPLOYEES_BULK_RESTORE);
  const canViewTimeline = session.permissions.includes(PERMISSIONS.EMPLOYEES_VIEW_TIMELINE);

  const [initialData, initialCounts, roles, permissions] = await Promise.all([
    getInitialEmployees(sessionId),
    getInitialCounts(sessionId),
    getRoles(sessionId),
    getPermissions(sessionId),
  ]);

  return (
    <>
      <div className="flex flex-wrap justify-between items-center gap-3 mb-6">
        <div>
          <h1 className="text-2xl font-semibold" style={{ color: 'var(--color-text)' }}>
            Employees
          </h1>
          <p className="text-sm mt-1" style={{ color: 'var(--color-text-secondary)' }}>
            Manage employee information and permissions
          </p>
        </div>

        {canCreate && (
          <Link
            href="/admin/dashboard/employees/new"
            className="inline-flex items-center gap-2 px-4 py-2 rounded-lg text-sm font-medium transition-all hover:opacity-90"
            style={{ background: 'var(--color-cta)', color: 'white' }}
          >
            <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2">
              <path d="M12 5v14m-7-7h14"/>
            </svg>
            Add Employee
          </Link>
        )}
      </div>

      <EmployeesTable
        canEdit={canEdit}
        canDelete={canDelete}
        canBulkDelete={canBulkDelete}
        canActivateDeactivate={canActivateDeactivate}
        canLogoutDevices={canLogoutDevices}
        canChangePassword={canChangePassword}
        canManageOverrides={canManageOverrides}
        canViewDeleted={canViewDeleted}
        canPermanentDelete={canPermanentDelete}
        canRestore={canRestore}
        canBulkRestore={canBulkRestore}
        canViewTimeline={canViewTimeline}
        initialEmployees={initialData}
        initialCounts={initialCounts}
        roles={roles}
        allPermissions={permissions}
      />
    </>
  );
}

// ─── Page ─────────────────────────────────────────────────────────────────────

export default async function EmployeesPage() {
  return (
    <div className="sm:p-6">
      <Suspense fallback={<EmployeesTableSkeleton />}>
        <EmployeesContent />
      </Suspense>
    </div>
  );
}