"use server";

import { redirect } from "next/navigation";
import { z } from "zod";
import { authenticate, createSession, destroySession } from "@/lib/auth";
import { db } from "@/db";
import { auditLogs } from "@/db/schema";

const loginSchema = z.object({
  email: z.string().email("Email không hợp lệ."),
  password: z.string().min(1, "Vui lòng nhập mật khẩu."),
});

export type LoginState = { error?: string };

export async function loginAction(_prev: LoginState, formData: FormData): Promise<LoginState> {
  const parsed = loginSchema.safeParse({
    email: formData.get("email"),
    password: formData.get("password"),
  });

  if (!parsed.success) {
    return { error: parsed.error.issues[0].message };
  }

  const result = await authenticate(parsed.data.email, parsed.data.password);
  if (!result.ok) return { error: result.error };

  await createSession(result.user);
  await db.insert(auditLogs).values({
    tenantId: result.user.tenantId,
    userId: result.user.userId,
    action: "LOGIN",
    entityType: "user",
    entityId: result.user.userId,
  });

  redirect("/");
}

export async function logoutAction() {
  await destroySession();
  redirect("/login");
}