import { redirect } from "next/navigation"
import Link from "next/link"
import { and, eq } from "drizzle-orm"
import { db } from "@/lib/db"
import { account_deletion_requests } from "@/lib/db/schema"
import { getSessionUser } from "@/lib/session"
import { LEGAL } from "@/lib/legal"
import { PrivacyManager } from "@/components/dashboard/privacy-manager"

export const metadata = { title: "Privacy & Data" }

export default async function PrivacySettingsPage() {
  const user = await getSessionUser()
  if (!user) redirect("/login")

  const pending = await db.query.account_deletion_requests.findFirst({
    where: and(
      eq(account_deletion_requests.user_id, user.id),
      eq(account_deletion_requests.status, "pending")
    ),
  })

  return (
    <div className="max-w-2xl space-y-6">
      <div>
        <h2 className="text-lg font-semibold text-white">Privacy &amp; Data</h2>
        <p className="text-sm text-white/40">
          Exercise your data rights under the GDPR — export a copy of your data or delete your
          account. Details are in our{" "}
          <Link
            href="/gdpr"
            className="text-indigo-400 underline underline-offset-2 transition hover:text-indigo-300"
          >
            GDPR &amp; Data Rights
          </Link>{" "}
          and{" "}
          <Link
            href="/privacy"
            className="text-indigo-400 underline underline-offset-2 transition hover:text-indigo-300"
          >
            Privacy Policy
          </Link>{" "}
          pages.
        </p>
      </div>
      <PrivacyManager
        accountEmail={user.email}
        graceDays={LEGAL.dataDeletionDays}
        pendingDeletion={
          pending ? { scheduled_for: pending.scheduled_for, created_at: pending.created_at } : null
        }
      />
    </div>
  )
}