auth.tsx

import React, { createContext, useContext, useEffect, useMemo, useState } from 'react';
import { Role } from './roles';
import { apiLogin } from './api';

interface Session {
  token: string;
  user: { id: string; email: string; role: Role };
}

interface AuthContextValue {
  session: Session | null;
  login: (email: string, password: string) => Promise<void>;
  logout: () => void;
  loading: boolean;
  error: string | null;
}

const AuthContext = createContext<AuthContextValue | undefined>(undefined);
const STORAGE_KEY = 'freclean-admin-session';

export function AuthProvider({ children }: { children: React.ReactNode }) {
  const [session, setSession] = useState<Session | null>(null);
  const [loading, setLoading] = useState(false);
  const [error, setError] = useState<string | null>(null);

  useEffect(() => {
    const raw = sessionStorage.getItem(STORAGE_KEY);
    if (raw) setSession(JSON.parse(raw));
  }, []);

  async function login(email: string, password: string) {
    setLoading(true);
    setError(null);
    try {
      const data = await apiLogin(email, password);
      setSession(data);
      sessionStorage.setItem(STORAGE_KEY, JSON.stringify(data));
    } catch (e) {
      setError(e instanceof Error ? e.message : 'Login failed.');
      throw e;
    } finally {
      setLoading(false);
    }
  }

  function logout() {
    setSession(null);
    sessionStorage.removeItem(STORAGE_KEY);
  }

  const value = useMemo(() => ({ session, login, logout, loading, error }), [session, loading, error]);
  return <AuthContext.Provider value={value}>{children}</AuthContext.Provider>;
}

export function useAuth() {
  const ctx = useContext(AuthContext);
  if (!ctx) throw new Error('useAuth must be used within AuthProvider');
  return ctx;
}