"use client";

import { useRef, useState } from "react";
import Link from "next/link";
import { useRouter } from "next/navigation";
import { Loader2 } from "lucide-react";
import { toast } from "sonner";
import { Button } from "@/components/ui/button";
import { Input } from "@/components/ui/input";
import { Label } from "@/components/ui/label";
import { Card, CardContent, CardHeader, CardTitle, CardDescription } from "@/components/ui/card";
import { signUp } from "@/lib/auth/auth-client";
import { GoogleButton } from "./google-button";
import { Turnstile, type TurnstileHandle } from "./turnstile";

export function SignUpForm({
  googleEnabled,
  turnstileSiteKey,
}: {
  googleEnabled: boolean;
  turnstileSiteKey: string | null;
}) {
  const router = useRouter();
  const [loading, setLoading] = useState(false);
  // See sign-in-form: rendered only when configured, verified server-side.
  const [captchaToken, setCaptchaToken] = useState("");
  const turnstileRef = useRef<TurnstileHandle>(null);
  const captchaRequired = !!turnstileSiteKey;

  async function onSubmit(e: React.FormEvent<HTMLFormElement>) {
    e.preventDefault();
    setLoading(true);
    const form = new FormData(e.currentTarget);
    const { error } = await signUp.email(
      {
        name: String(form.get("name")),
        email: String(form.get("email")),
        password: String(form.get("password")),
      },
      captchaRequired ? { headers: { "x-captcha-response": captchaToken } } : undefined
    );
    if (error) {
      // Single-use token: re-challenge so the retry fails on its real cause.
      turnstileRef.current?.reset();
      // Accepted tradeoff (L8): the raw Better Auth message can reveal that an
      // email is already registered (account enumeration). We keep the specific
      // message for UX clarity; the signup endpoint is rate-limited server-side.
      toast.error(error.message ?? "Could not create account");
      setLoading(false);
      return;
    }
    toast.success("Account created! Welcome to Podcast Distribution AI.");
    router.push("/dashboard");
    router.refresh();
  }

  return (
    <Card className="rounded-3xl shadow-md">
      <CardHeader className="pb-2">
        <CardTitle className="text-2xl">Create your account</CardTitle>
        <CardDescription>Start producing podcasts with AI — free, no card required.</CardDescription>
      </CardHeader>
      <CardContent className="space-y-4">
        {googleEnabled && (
          <>
            <GoogleButton />
            <div className="relative">
              <div className="absolute inset-0 flex items-center">
                <span className="w-full border-t" />
              </div>
              <div className="relative flex justify-center text-xs uppercase">
                <span className="bg-card px-2 text-muted-foreground">or</span>
              </div>
            </div>
          </>
        )}
        <form onSubmit={onSubmit} className="space-y-4">
          <div className="space-y-2">
            <Label htmlFor="name">Name</Label>
            <Input id="name" name="name" autoComplete="name" required />
          </div>
          <div className="space-y-2">
            <Label htmlFor="email">Email</Label>
            <Input id="email" name="email" type="email" autoComplete="email" required />
          </div>
          <div className="space-y-2">
            <Label htmlFor="password">Password</Label>
            <Input
              id="password"
              name="password"
              type="password"
              autoComplete="new-password"
              minLength={8}
              required
            />
            <p className="text-xs text-muted-foreground">At least 8 characters.</p>
          </div>
          {turnstileSiteKey && (
            <Turnstile
              ref={turnstileRef}
              siteKey={turnstileSiteKey}
              onToken={setCaptchaToken}
              onError={() => toast.error("Could not load the security check. Please refresh.")}
              className="flex justify-center"
            />
          )}
          <Button
            type="submit"
            className="w-full"
            disabled={loading || (captchaRequired && !captchaToken)}
          >
            {loading && <Loader2 className="h-4 w-4 animate-spin" />}
            Create account
          </Button>
        </form>
        <p className="text-center text-sm text-muted-foreground">
          Already have an account?{" "}
          <Link href="/sign-in" className="font-semibold text-brand hover:underline">
            Sign in
          </Link>
        </p>
      </CardContent>
    </Card>
  );
}