admin / Synapse-Cortex

import { createContext, useCallback, useContext, useEffect, useState, type ReactNode } from 'react'
import { authApi } from '../api/auth'
import type { Me } from '../api/types'

interface AuthState {
  user: Me | null
  loading: boolean
  isAdmin: boolean
  isGlobalAdmin: boolean
  aiEnabled: boolean
  refresh: () => Promise<void>
  logout: () => Promise<void>
}

const AuthContext = createContext<AuthState | undefined>(undefined)

export function AuthProvider({ children }: { children: ReactNode }) {
  const [user, setUser] = useState<Me | null>(null)
  const [loading, setLoading] = useState(true)

  const refresh = useCallback(async () => {
    try {
      const me = await authApi.me()
      setUser(me)
    } catch {
      setUser(null)
    } finally {
      setLoading(false)
    }
  }, [])

  useEffect(() => {
    refresh()
  }, [refresh])

  const logout = useCallback(async () => {
    await authApi.logout()
    setUser(null)
  }, [])

  const isAdmin = user?.role === 'global_admin' || user?.role === 'tenant_admin'
  const isGlobalAdmin = user?.role === 'global_admin'
  const aiEnabled = user?.ai_enabled ?? false

  return (
    <AuthContext.Provider value={{ user, loading, isAdmin, isGlobalAdmin, aiEnabled, refresh, logout }}>
      {children}
    </AuthContext.Provider>
  )
}

export function useAuth(): AuthState {
  const ctx = useContext(AuthContext)
  if (!ctx) throw new Error('useAuth must be used within AuthProvider')
  return ctx
}