import { NextRequest, NextResponse } from "next/server";
import { prisma } from "@/lib/prisma";

function getBearerToken(req: NextRequest): string | null {
  const auth = req.headers.get("authorization") || "";
  const match = auth.match(/^Bearer\s+(\S+)$/i);
  return match ? match[1] : null;
}

export async function GET(req: NextRequest) {
  const apiKey = process.env.INTERNAL_API_KEY;
  if (!apiKey) {
    return NextResponse.json({ error: "Internal API key not configured" }, { status: 500 });
  }
  const token = getBearerToken(req);
  if (!token || token !== apiKey) {
    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
  }

  const { searchParams } = new URL(req.url);
  const subdomain = searchParams.get("subdomain");

  if (!subdomain) {
    return NextResponse.json({ error: "subdomain required" }, { status: 400 });
  }

  const instance = await prisma.instance.findUnique({
    where: { id: subdomain },
    include: { node: true },
  });

  if (!instance || !instance.node) {
    return NextResponse.json({ error: "instance not found" }, { status: 404 });
  }

  if (instance.node.status !== "online" || !instance.node.tailscaleIp) {
    return NextResponse.json({ error: "node offline" }, { status: 503 });
  }

  return NextResponse.json({
    upstream: `${instance.node.tailscaleIp}:${instance.port}`,
  });
}