/**
 * Auth helper functions (login, register, logout, refresh).
 *
 * These are plain functions that can be called from anywhere (Alpine-stores,
 * page-level handlers). They do NOT depend on Alpine — only on api.js and
 * localStorage.
 *
 * The Alpine store in store.js wraps these so the UI can react to state changes.
 */

import { api, setToken, clearToken, getToken } from './api.js';

/**
 * Login with email + password.
 * Backend: POST /api/v1/auth/login → {access_token, token_type, expires_in}
 *
 * @param {string} email
 * @param {string} password
 * @returns {Promise<{access_token: string, token_type: string, expires_in: number}>}
 */
export async function login(email, password) {
    const res = await api.post('/auth/login', { email, password });
    if (res && res.access_token) {
        setToken(res.access_token);
    }
    return res;
}

/**
 * Register a new user (first-admin bootstrap or admin invites a sales-rep).
 * Backend: POST /api/v1/auth/register → {user, access_token, token_type, expires_in}
 *
 * @param {{email: string, password: string, name: string, role?: string}} payload
 */
export async function register(payload) {
    const res = await api.post('/auth/register', payload);
    if (res && res.access_token) {
        setToken(res.access_token);
    }
    return res;
}

/**
 * Logout: tell the backend (best-effort), clear local JWT, redirect to login.
 * Backend: POST /api/v1/auth/logout → {message: "logged out"}
 */
export async function logout() {
    if (getToken()) {
        try {
            await api.post('/auth/logout', {});
        } catch {
            // best-effort — even if the backend is down, we still clear the local token
        }
    }
    clearToken();
    window.location.href = '/index.html';
}

/**
 * Refresh the JWT using the current (still-valid) token.
 * Backend: POST /api/v1/auth/refresh → {access_token, token_type, expires_in}
 *
 * @returns {Promise<{access_token: string, token_type: string, expires_in: number}>}
 */
export async function refreshToken() {
    const res = await api.post('/auth/refresh', {});
    if (res && res.access_token) {
        setToken(res.access_token);
    }
    return res;
}

/**
 * Fetch the currently-authenticated user's profile.
 * Backend: GET /api/v1/users/me → UserOut
 *
 * @returns {Promise<object>}
 */
export async function fetchCurrentUser() {
    return api.get('/users/me');
}