data-entry-app/frontend/src/lib/session.ts

import { browser } from '$app/environment';
import { readable, writable } from 'svelte/store';

export type AppSession = {
  name: string;
  email: string;
  role: string;
  token: string;
  tenant_id?: string | null;
  client_role?: string | null;
  user_id?: number | null;
  client_account_id?: number | null;
  module_permissions?: Record<string, string>;
};

const ACCESS_LEVEL_ORDER: Record<string, number> = {
  none: 0,
  view: 1,
  edit: 2,
  manage: 3
};

const CLIENT_STORAGE_KEY = 'data-entry-app-client-session';
const ADMIN_STORAGE_KEY = 'data-entry-app-admin-session';

function readStoredSession(storageKey: string): AppSession | null {
  if (!browser) {
    return null;
  }

  const value = localStorage.getItem(storageKey);
  if (!value) {
    return null;
  }

  try {
    return JSON.parse(value) as AppSession;
  } catch {
    localStorage.removeItem(storageKey);
    return null;
  }
}

function createSessionStore(storageKey: string) {
  const store = writable<AppSession | null>(readStoredSession(storageKey));

  if (browser) {
    window.addEventListener('storage', (event) => {
      if (event.key === storageKey) {
        store.set(readStoredSession(storageKey));
      }
    });
  }

  return {
    subscribe: store.subscribe,
    set(session: AppSession) {
      if (browser) {
        localStorage.setItem(storageKey, JSON.stringify(session));
      }
      store.set(session);
    },
    clear() {
      if (browser) {
        localStorage.removeItem(storageKey);
      }
      store.set(null);
    }
  };
}

export function getStoredClientSession() {
  return readStoredSession(CLIENT_STORAGE_KEY);
}

export function getStoredAdminSession() {
  return readStoredSession(ADMIN_STORAGE_KEY);
}

export function hasStoredClientSession() {
  return getStoredClientSession() !== null;
}

export function hasStoredAdminSession() {
  return getStoredAdminSession() !== null;
}

export function hasModuleAccess(
  session: AppSession | null | undefined,
  moduleKey: string,
  minimumLevel: 'view' | 'edit' | 'manage' = 'view'
) {
  if (!session) {
    return false;
  }

  if (session.role === 'admin') {
    return true;
  }

  const currentLevel = session.module_permissions?.[moduleKey] ?? 'none';
  return (ACCESS_LEVEL_ORDER[currentLevel] ?? 0) >= ACCESS_LEVEL_ORDER[minimumLevel];
}

export const sessionHydrated = readable(false, (set) => {
  if (!browser) {
    return undefined;
  }

  const frame = window.requestAnimationFrame(() => {
    set(true);
  });

  return () => {
    window.cancelAnimationFrame(frame);
  };
});

export const clientSession = createSessionStore(CLIENT_STORAGE_KEY);
export const adminSession = createSessionStore(ADMIN_STORAGE_KEY);