"use client";

import { useEffect, useState } from "react";
import { useSession } from "next-auth/react";
import { useRouter } from "next/navigation";
import { Loader2 } from "lucide-react";

interface ProtectedRouteProps {
  children: React.ReactNode;
  requiredRole?: string;
  requiredPermission?: {
    module: string;
    action: string;
  };
}

export default function ProtectedRoute({
  children,
  requiredRole,
  requiredPermission,
}: ProtectedRouteProps) {
  const { data: session, status } = useSession();
  const router = useRouter();
  const [authorized, setAuthorized] = useState(false);
  const [loading, setLoading] = useState(true);

  useEffect(() => {
    if (status === "loading") {
      return;
    }

    if (!session) {
      router.push("/login");
      return;
    }

    // Verificar rol si se requiere
    if (requiredRole && session.user.role !== requiredRole) {
      router.push("/");
      return;
    }

    // Verificar permiso si se requiere
    if (requiredPermission) {
      // La verificación de permisos se hace en el servidor
      // Aquí solo verificamos que el usuario esté autenticado
      // Los permisos específicos se validan en las APIs
    }

    setAuthorized(true);
    setLoading(false);
  }, [session, status, router, requiredRole, requiredPermission]);

  if (status === "loading" || loading) {
    return (
      <div className="min-h-screen flex items-center justify-center">
        <div className="text-center">
          <Loader2 className="w-8 h-8 animate-spin mx-auto text-blue-600 mb-4" />
          <p className="text-gray-600">Verificando acceso...</p>
        </div>
      </div>
    );
  }

  if (!authorized) {
    return null;
  }

  return <>{children}</>;
}