import type { ReactNode } from "react";
import { Link } from "react-router";

import { ContactEmail } from "@/client/components/ui/contact-email";
import { useClientConfig } from "@/client/lib/config";

const Section = ({ title, children }: { title: string; children: ReactNode }) => (
  <section className="mt-12">
    <h2 className="mb-4 font-display text-xl font-semibold text-zinc-100">{title}</h2>
    <div className="space-y-4 text-base leading-[1.7] text-zinc-300">{children}</div>
  </section>
);

export const TermsPage = () => {
  const config = useClientConfig();
  if (!config || config.status !== "ok") return null;
  const { operatorName, operatorContactEmail } = config;

  return (
    <div className="mx-auto max-w-2xl py-12 sm:py-20">
      <p className="mb-6 text-[11px] font-medium uppercase tracking-[0.18em] text-zinc-500">Terms of service</p>

      <h1 className="mb-6 font-display text-[clamp(2rem,5.5vw,3.25rem)] font-semibold leading-[1.05] tracking-tight text-zinc-100">
        Terms of service
      </h1>

      <p className="mb-10 text-sm text-zinc-500">Effective April 27, 2026.</p>

      <p className="max-w-[60ch] text-base leading-[1.7] text-zinc-300">
        These terms govern your use of tessera, a single sign-on service operated by {operatorName} ("we", "us"). By
        accepting an invite, signing in, or otherwise using tessera you agree to these terms. If you do not agree, do
        not use the service.
      </p>

      <Section title="The service">
        <p>
          tessera is an OAuth 2.1 and OpenID Connect provider. It authenticates users on behalf of applications
          registered by an administrator and issues identity tokens that those applications can verify. tessera is
          intended to be operated as private infrastructure for a small group of invited users.
        </p>
      </Section>

      <Section title="Eligibility and accounts">
        <p>
          tessera is invite-only. You may use the service only if an administrator has minted an invite for your email
          address and you accept it. You must be at least 13 years old. Signing in with Google or GitHub does not create
          an account; you must already have a tessera account and have explicitly linked that identity from your account
          page.
        </p>
        <p>
          You are responsible for keeping your password and any linked identity providers secure. You are responsible
          for all activity that occurs under your account. Notify us promptly at{" "}
          <ContactEmail address={operatorContactEmail} /> if you believe your account has been accessed without your
          authorization.
        </p>
      </Section>

      <Section title="Acceptable use">
        <p>You agree not to:</p>
        <ul className="list-disc space-y-2 pl-6">
          <li>Use tessera to violate any law or any third party's rights.</li>
          <li>Attempt to access another user's account or to bypass authentication, rate limits, or invite gates.</li>
          <li>
            Probe, scan, or test the vulnerability of the service or related infrastructure without prior written
            permission.
          </li>
          <li>
            Submit automated traffic intended to disrupt the service or to enumerate accounts, invites, or OAuth
            clients.
          </li>
          <li>
            Reverse engineer, decompile, or otherwise attempt to extract source code from the running service, except to
            the extent permitted by law. (The tessera source itself is published under its own license; this clause
            concerns the operating service.)
          </li>
        </ul>
        <p>
          We may suspend or terminate access for any user who violates these rules or whose use of the service creates a
          security or operational risk.
        </p>
      </Section>

      <Section title="Third-party identity providers">
        <p>
          If you choose to link a Google or GitHub identity to your tessera account, your use of those providers is also
          governed by the providers' own terms. We are not responsible for the availability or behavior of third-party
          identity providers.
        </p>
      </Section>

      <Section title="Privacy">
        <p>
          Our handling of personal information is described in the{" "}
          <Link
            to="/privacy"
            className="text-zinc-100 underline decoration-zinc-700 underline-offset-[6px] transition-colors hover:text-accent-400 hover:decoration-accent-500/60"
          >
            privacy policy
          </Link>
          , which is incorporated into these terms by reference.
        </p>
      </Section>

      <Section title="Service availability and changes">
        <p>
          tessera is provided on a best-effort basis and may be unavailable from time to time for maintenance, upgrades,
          or reasons outside our control. We may add, remove, or change features at any time. We may also update these
          terms; material changes will be communicated through the service or by email.
        </p>
      </Section>

      <Section title="No warranty">
        <p>
          tessera is provided "as is" and "as available" without warranties of any kind, whether express or implied,
          including warranties of merchantability, fitness for a particular purpose, non-infringement, and that the
          service will be uninterrupted or error-free. You use the service at your own risk.
        </p>
      </Section>

      <Section title="Limitation of liability">
        <p>
          To the maximum extent permitted by law, {operatorName} and its operators will not be liable for any indirect,
          incidental, special, consequential, or punitive damages, or for any loss of profits, revenues, data, or
          goodwill, arising out of or in connection with your use of the service. Our total liability for any claim
          arising from these terms or the service is limited to one hundred US dollars (US $100).
        </p>
      </Section>

      <Section title="Termination">
        <p>
          You may stop using tessera at any time and may delete your account by emailing{" "}
          <ContactEmail address={operatorContactEmail} /> from the address on file. We may suspend or terminate your
          account for any reason, including violation of these terms or operational necessity. Upon termination, your
          right to use the service ends immediately; provisions that by their nature should survive termination,
          including disclaimers, limitations of liability, and governing law, will survive.
        </p>
      </Section>

      <Section title="Governing law and disputes">
        <p>
          These terms are governed by the laws of the State of California, without regard to its conflict-of-laws rules.
          The exclusive venue for any dispute arising out of these terms or the service is the state and federal courts
          located in San Francisco County, California, and you consent to the personal jurisdiction of those courts.
          Nothing in these terms limits any rights you may have under applicable consumer protection laws.
        </p>
      </Section>

      <Section title="Contact">
        <p>
          Questions about these terms can be sent to <ContactEmail address={operatorContactEmail} />.
        </p>
      </Section>
    </div>
  );
};