import { NextRequest, NextResponse } from "next/server";
import { getSessionCookie } from "better-auth/cookies";

const protectedRoutes = [
  "/project",
  "/project/[slug]/tasks",
  "/project/[slug]/editor",
];

function matchesRoute(path: string, route: string): boolean {
  if (path === route) return true;

  const pattern = route.replace(/\[[\w]+\]/g, "[^\\/]+").replace(/\//g, "\\/");

  const regex = new RegExp(`^${pattern}$`);
  return regex.test(path);
}

export default async function proxy(req: NextRequest) {
  const path = req.nextUrl.pathname;

  const isProtectedRoute = protectedRoutes.some((route) =>
    matchesRoute(path, route)
  );

  const sessionCookie = getSessionCookie(req);

  if (isProtectedRoute && !sessionCookie) {
    return NextResponse.redirect(new URL("/get-started", req.nextUrl));
  }

  return NextResponse.next();
}

export const config = {
  matcher: ["/((?!api|_next/static|_next/image|privacy|terms|.*\\.png$).*)"],
};

import GetStartedContent from "@/features/auth/components/GetStartedContent";
import { verifyPublicAccess } from "@/lib/auth/dal";

export default async function Onboarding() {
  await verifyPublicAccess();

  return <GetStartedContent />;
}

export const getSession = cache(async () => {
  const h = await headers();
  const session = await auth.api.getSession({ headers: h });

  return session;
});

// Use this on public pages (like home) to redirect authenticated users
export const verifyPublicAccess = cache(async () => {
  const session = await getSession();

  if (session?.user) {
    if (!session.user.isProfileComplete) {
      redirect("/get-started/profile");
    } else {
      redirect("/project");
    }
  }

  return null; // No session, user can stay on public page
});

config.matcher