server.js

const express = require('express');
const cors = require('cors');
const crypto = require('crypto');
const app = express();
const port = process.env.PORT || 8080;

app.use(cors());
app.use(express.json());

// In-memory DB (replace with real DB later)
let users = [];
let complaints = [];
let messages = [];
let notifications = [];

// Helper
const genId = () => crypto.randomBytes(8).toString('hex');
const genToken = () => crypto.randomBytes(16).toString('hex');

// Health
app.get('/health', (req, res) => res.json({status: 'OK'}));

// Auth middleware
const auth = (req, res, next) => {
  const token = req.headers.authorization?.split(' ')[1];
  const user = users.find(u => u.token === token);
  if (!user) return res.status(401).json({error: 'Unauthorized'});
  req.user = user;
  next();
};

// ==================== AUTH ====================

// Register
app.post('/api/register', (req, res) => {
  const { name, phone, password, role } = req.body;
  if (!name || !phone || !password) return res.status(400).json({error: 'Missing fields'});
  if (users.find(u => u.phone === phone)) return res.status(400).json({error: 'Phone already registered'});
  const user = { id: genId(), name, phone, password, role: role || 'customer', token: null, emoCoins: 0, createdAt: new Date() };
  users.push(user);
  res.json({success: true, message: 'Registered successfully'});
});

// Login
app.post('/api/login', (req, res) => {
  const { phone, password } = req.body;
  const user = users.find(u => u.phone === phone && u.password === password);
  if (!user) return res.status(401).json({error: 'Invalid credentials'});
  user.token = genToken();
  res.json({success: true, token: user.token, role: user.role, name: user.name, id: user.id});
});

// Profile
app.get('/api/user/profile', auth, (req, res) => {
  const { password, token, ...safe } = req.user;
  res.json(safe);
});

// ==================== COMPLAINTS ====================

// Register complaint
app.post('/api/complaints', auth, (req, res) => {
  const { deviceName, imei, natureOfComplaint, bodyCondition, pickupAddress, location } = req.body;
  if (!deviceName || !pickupAddress) return res.status(400).json({error: 'Missing fields'});
  const complaint = {
    id: genId(),
    customerId: req.user.id,
    customerName: req.user.name,
    customerPhone: req.user.phone,
    deviceName, imei, natureOfComplaint, bodyCondition, pickupAddress, location,
    status: 'Registered',
    deliveryBoyId: null,
    serviceCentreId: null,
    timeline: [{status: 'Complaint Registered', time: new Date()}],
    images: { pickup: [], dropoff: [], received: [], returned: [] },
    amount: null,
    paymentMethod: null,
    paymentDone: false,
    createdAt: new Date()
  };
  complaints.push(complaint);
  // Notify supervisors
  users.filter(u => u.role === 'supervisor').forEach(sup => {
    notifications.push({id: genId(), userId: sup.id, message: `New complaint from ${req.user.name}`, complaintId: complaint.id, read: false, time: new Date()});
  });
  res.json({success: true, complaint});
});

// Get my complaints (customer)
app.get('/api/complaints/my', auth, (req, res) => {
  const myComplaints = complaints.filter(c => c.customerId === req.user.id);
  res.json(myComplaints);
});

// Get all complaints (supervisor/admin)
app.get('/api/complaints', auth, (req, res) => {
  if (!['supervisor','superadmin'].includes(req.user.role)) return res.status(403).json({error: 'Forbidden'});
  res.json(complaints);
});

// Get complaints by status
app.get('/api/complaints/status/:status', auth, (req, res) => {
  const filtered = complaints.filter(c => c.status === req.params.status);
  res.json(filtered);
});

// Assign delivery boy + service centre (supervisor)
app.post('/api/complaints/:id/assign', auth, (req, res) => {
  if (!['supervisor','superadmin'].includes(req.user.role)) return res.status(403).json({error: 'Forbidden'});
  const complaint = complaints.find(c => c.id === req.params.id);
  if (!complaint) return res.status(404).json({error: 'Not found'});
  const { deliveryBoyId, serviceCentreId } = req.body;
  complaint.deliveryBoyId = deliveryBoyId;
  complaint.serviceCentreId = serviceCentreId;
  complaint.status = 'Assigned';
  complaint.timeline.push({status: 'Agent Assigned for Pickup', time: new Date()});
  // Notify delivery boy
  notifications.push({id: genId(), userId: deliveryBoyId, message: `New pickup assigned`, complaintId: complaint.id, read: false, time: new Date()});
  // Notify customer
  notifications.push({id: genId(), userId: complaint.customerId, message: `Agent assigned for your complaint`, complaintId: complaint.id, read: false, time: new Date()});
  res.json({success: true, complaint});
});

// Update complaint status
app.post('/api/complaints/:id/status', auth, (req, res) => {
  const complaint = complaints.find(c => c.id === req.params.id);
  if (!complaint) return res.status(404).json({error: 'Not found'});
  const { status, images } = req.body;
  complaint.status = status;
  complaint.timeline.push({status, time: new Date()});
  if (images) Object.assign(complaint.images, images);
  // Notify customer
  notifications.push({id: genId(), userId: complaint.customerId, message: `Your complaint status: ${status}`, complaintId: complaint.id, read: false, time: new Date()});
  res.json({success: true, complaint});
});

// Set repair amount
app.post('/api/complaints/:id/amount', auth, (req, res) => {
  const complaint = complaints.find(c => c.id === req.params.id);
  if (!complaint) return res.status(404).json({error: 'Not found'});
  const { amount, quality } = req.body;
  complaint.amount = amount;
  complaint.quality = quality;
  complaint.timeline.push({status: `Quote sent: AED ${amount}`, time: new Date()});
  notifications.push({id: genId(), userId: complaint.customerId, message: `Repair quote: AED ${amount}`, complaintId: complaint.id, read: false, time: new Date()});
  res.json({success: true});
});

// Accept/reject amount (customer)
app.post('/api/complaints/:id/accept', auth, (req, res) => {
  const complaint = complaints.find(c => c.id === req.params.id);
  if (!complaint) return res.status(404).json({error: 'Not found'});
  const { accepted } = req.body;
  if (accepted) {
    complaint.status = 'Repair Started';
    complaint.timeline.push({status: 'Customer Accepted Quote - Repair Started', time: new Date()});
  } else {
    complaint.status = 'Quote Rejected';
    complaint.timeline.push({status: 'Customer Rejected Quote', time: new Date()});
  }
  res.json({success: true});
});

// Payment
app.post('/api/complaints/:id/payment', auth, (req, res) => {
  const complaint = complaints.find(c => c.id === req.params.id);
  if (!complaint) return res.status(404).json({error: 'Not found'});
  const { method } = req.body;
  complaint.paymentMethod = method;
  complaint.paymentDone = true;
  complaint.status = 'Payment Done';
  complaint.timeline.push({status: `Payment received - ${method}`, time: new Date()});
  // EmoCoins for customer
  const customer = users.find(u => u.id === complaint.customerId);
  if (customer) customer.emoCoins += 10;
  res.json({success: true});
});

// ==================== DELIVERY BOY ====================

// Get my assigned complaints
app.get('/api/delivery/complaints', auth, (req, res) => {
  if (req.user.role !== 'delivery') return res.status(403).json({error: 'Forbidden'});
  const myJobs = complaints.filter(c => c.deliveryBoyId === req.user.id);
  res.json(myJobs);
});

// ==================== SERVICE CENTRE ====================

// Get my assigned complaints
app.get('/api/service/complaints', auth, (req, res) => {
  if (req.user.role !== 'service') return res.status(403).json({error: 'Forbidden'});
  const myJobs = complaints.filter(c => c.serviceCentreId === req.user.id);
  res.json(myJobs);
});

// ==================== CHAT ====================

// Send message
app.post('/api/chat', auth, (req, res) => {
  const { complaintId, to, message } = req.body;
  const msg = {id: genId(), complaintId, from: req.user.id, fromName: req.user.name, fromRole: req.user.role, to, message, time: new Date()};
  messages.push(msg);
  notifications.push({id: genId(), userId: to, message: `New message from ${req.user.name}`, complaintId, read: false, time: new Date()});
  res.json({success: true, msg});
});

// Get messages for complaint
app.get('/api/chat/:complaintId', auth, (req, res) => {
  const msgs = messages.filter(m => m.complaintId === req.params.complaintId);
  res.json(msgs);
});

// ==================== NOTIFICATIONS ====================

app.get('/api/notifications', auth, (req, res) => {
  const myNotifs = notifications.filter(n => n.userId === req.user.id);
  res.json(myNotifs);
});

app.post('/api/notifications/read', auth, (req, res) => {
  notifications.filter(n => n.userId === req.user.id).forEach(n => n.read = true);
  res.json({success: true});
});

// ==================== SUPER ADMIN ====================

// Create staff profile
app.post('/api/admin/create', auth, (req, res) => {
  if (req.user.role !== 'superadmin') return res.status(403).json({error: 'Forbidden'});
  const { name, phone, email, role, location } = req.body;
  if (users.find(u => u.phone === phone)) return res.status(400).json({error: 'Already exists'});
  const tempPassword = genId().slice(0,8);
  const user = {id: genId(), name, phone, email, password: tempPassword, role, location, token: null, emoCoins: 0, createdAt: new Date()};
  users.push(user);
  res.json({success: true, tempPassword, user: {id: user.id, name, phone, email, role}});
});

// Get all staff
app.get('/api/admin/staff', auth, (req, res) => {
  if (!['supervisor','superadmin'].includes(req.user.role)) return res.status(403).json({error: 'Forbidden'});
  const staff = users.filter(u => u.role !== 'customer').map(({password, token, ...s}) => s);
  res.json(staff);
});

// Get delivery boys list
app.get('/api/admin/delivery', auth, (req, res) => {
  if (!['supervisor','superadmin'].includes(req.user.role)) return res.status(403).json({error: 'Forbidden'});
  const delivery = users.filter(u => u.role === 'delivery').map(({password, token, ...s}) => s);
  res.json(delivery);
});

// Get service centres list
app.get('/api/admin/service', auth, (req, res) => {
  if (!['supervisor','superadmin'].includes(req.user.role)) return res.status(403).json({error: 'Forbidden'});
  const service = users.filter(u => u.role === 'service').map(({password, token, ...s}) => s);
  res.json(service);
});

// ==================== EMOCOIN ====================

app.get('/api/emocoin/balance', auth, (req, res) => {
  res.json({balance: req.user.emoCoins || 0});
});

app.post('/api/emocoin/daily', auth, (req, res) => {
  req.user.emoCoins = (req.user.emoCoins || 0) + 2;
  res.json({success: true, balance: req.user.emoCoins});
});

// ==================== EMOWALL AI ====================

app.post('/api/ai/chat', auth, async (req, res) => {
  const { message } = req.body;
  const apiKey = process.env.GEMINI_API_KEY;
  if (!apiKey) return res.json({reply: 'AI not configured'});
  try {
    const response = await fetch(`https://generativelanguage.googleapis.com/v1beta/models/gemini-pro:generateContent?key=${apiKey}`, {
      method: 'POST',
      headers: {'Content-Type': 'application/json'},
      body: JSON.stringify({
        contents: [{parts: [{text: `You are Emowall AI assistant for Emobies mobile repair service. Help with repair queries and crypto/TheWall wallet questions. User: ${message}`}]}]
      })
    });
    const data = await response.json();
    const reply = data.candidates?.[0]?.content?.parts?.[0]?.text || 'Sorry, try again';
    res.json({reply});
  } catch(e) {
    res.json({reply: 'AI error, try again'});
  }
});

// Seed super admin
users.push({id: genId(), name: 'Divin K.K.', phone: '9847842172', password: 'Emobies@2026!', role: 'superadmin', token: null, emoCoins: 0, createdAt: new Date()});

app.listen(port, () => console.log('Emobies live on', port));