noo/lib/widgets/settings/settings_security.dart

import 'package:flutter/material.dart';
import 'package:lucide_icons_flutter/lucide_icons.dart';
import 'package:provider/provider.dart';
import '../../providers/session_controller.dart';
import '../noo/core/noo_toggle.dart';
import '../noo/lists/noo_settings_row.dart';
import 'settings_section.dart';

/// Per-platform copy for the login-lock row's label (DESIGN_SYSTEM.md 3's
/// "Biometric label" row, both the mobile table and the macOS/Windows
/// desktop table). Falls back to generic copy on platforms the spec
/// doesn't name (Linux, tests).
String biometricLabel(TargetPlatform platform) {
  switch (platform) {
    case TargetPlatform.iOS:
      return 'Lock with Face ID';
    case TargetPlatform.android:
      return 'Lock with fingerprint';
    case TargetPlatform.macOS:
      return 'Touch ID';
    case TargetPlatform.windows:
      return 'Windows Hello';
    case TargetPlatform.linux:
    case TargetPlatform.fuchsia:
      return 'Lock with device credential';
  }
}

/// Settings section 3: login lock, which gates opening the app, switching
/// accounts, and revealing hidden files behind the device's own PIN/
/// biometric credential (see `AppLockService` - this app never stores or
/// handles a PIN itself).
class SettingsSecuritySection extends StatelessWidget {
  const SettingsSecuritySection({super.key});

  Future<void> _handleLoginLockChanged(
    BuildContext context,
    SessionController session,
    bool value,
  ) async {
    final success = value ? await session.setupLoginLock() : await session.disableLoginLock();
    if (!success && context.mounted) {
      ScaffoldMessenger.of(context).showSnackBar(
        SnackBar(
          content: Text(
            value
                ? "Could not set up login lock - make sure this device has a PIN, pattern, password, or biometric configured"
                : 'Could not turn off login lock',
          ),
          behavior: SnackBarBehavior.floating,
        ),
      );
    }
  }

  @override
  Widget build(BuildContext context) {
    final session = context.watch<SessionController>();
    final platform = Theme.of(context).platform;

    return SettingsSection(
      title: 'Security',
      children: [
        NooSettingsRow(
          icon: LucideIcons.lock,
          label: Text(biometricLabel(platform)),
          subtitle: const Text("Require this device's PIN or biometric to open Noo"),
          trailing: NooToggle(
            checked: session.loginLockEnabled,
            onChanged: (value) => _handleLoginLockChanged(context, session, value),
          ),
        ),
        NooSettingsRow(
          icon: LucideIcons.arrowLeftRight,
          label: const Text('Lock account switching'),
          subtitle: const Text('Unlock to switch between saved accounts'),
          trailing: NooToggle(
            checked: session.lockAccountSwitching,
            onChanged: session.loginLockEnabled ? session.setLockAccountSwitching : null,
          ),
        ),
        NooSettingsRow(
          icon: LucideIcons.eyeOff,
          label: const Text('Lock hidden files'),
          subtitle: const Text('Unlock to reveal hidden files and folders'),
          trailing: NooToggle(
            checked: session.lockHiddenFiles,
            onChanged: session.loginLockEnabled ? session.setLockHiddenFiles : null,
          ),
        ),
      ],
    );
  }
}