// Record consent with a timestamp and the exact version of your privacy policy
interface ConsentRecord {
  userId: string;
  type: 'marketing' | 'analytics' | 'functional';
  granted: boolean;
  timestamp: string;         // ISO 8601
  privacyPolicyVersion: string;
  ipAddress: string;         // evidence of consent
}

async function recordConsent(
  userId: string,
  type: ConsentRecord['type'],
  granted: boolean
): Promise<void> {
  await db.prepare(`
    INSERT INTO consent_records
    (user_id, type, granted, timestamp, policy_version, ip_address)
    VALUES (?, ?, ?, ?, ?, ?)
  `).bind(
    userId, type, granted,
    new Date().toISOString(),
    CURRENT_POLICY_VERSION,
    requestIp
  ).run();
}

// BAD: collecting more than you need
interface UserRegistration {
  email: string;
  password: string;
  fullName: string;
  phoneNumber: string;       // do you actually need this?
  dateOfBirth: string;       // only if legally required (e.g., age verification)
  address: string;           // only if you're shipping physical goods
  marketingOptIn: boolean;
}

// BETTER: minimal registration
interface UserRegistration {
  email: string;
  password: string;
  displayName: string;       // user-chosen, not necessarily real name
}

// Implementing "download my data" (right of access)
app.get('/api/user/export', requireAuth, async (req, res) => {
  const userId = req.user.id;

  const [user, orders, activityLog] = await Promise.all([
    db.prepare('SELECT id, email, display_name, created_at FROM users WHERE id = ?')
      .bind(userId).first(),
    db.prepare('SELECT * FROM orders WHERE user_id = ?')
      .bind(userId).all(),
    db.prepare('SELECT * FROM activity_log WHERE user_id = ? ORDER BY timestamp DESC')
      .bind(userId).all(),
  ]);

  res.setHeader('Content-Disposition', 'attachment; filename="my-data.json"');
  res.json({
    exportedAt: new Date().toISOString(),
    profile: user,
    orders: orders.results,
    activityLog: activityLog.results,
  });
});

// Implementing "delete my account" (right to erasure)
app.delete('/api/user', requireAuth, async (req, res) => {
  const userId = req.user.id;

  // Use a transaction to ensure all data is deleted atomically
  await db.batch([
    db.prepare('DELETE FROM sessions WHERE user_id = ?').bind(userId),
    db.prepare('DELETE FROM activity_log WHERE user_id = ?').bind(userId),
    db.prepare('DELETE FROM orders WHERE user_id = ?').bind(userId),
    db.prepare('DELETE FROM users WHERE id = ?').bind(userId),
  ]);

  res.json({ message: 'Account deleted.' });
});