route.ts

import { NextResponse } from "next/server";
import { isAuthorized } from "@/lib/auth";
import {
  createPost,
  listPublishedPosts,
  PostConflictError,
} from "@/lib/posts";
import type { CreatePostInput } from "@/lib/types";

// Cosmos SDK requires the Node.js runtime (not Edge).
export const runtime = "nodejs";
// Always read fresh data.
export const dynamic = "force-dynamic";

/** GET /api/posts?pageSize=10&cursor=<token> — list published posts. */
export async function GET(request: Request) {
  const url = new URL(request.url);
  const pageSizeRaw = Number(url.searchParams.get("pageSize"));
  const pageSize =
    Number.isFinite(pageSizeRaw) && pageSizeRaw > 0 && pageSizeRaw <= 50
      ? pageSizeRaw
      : 10;
  const cursor = url.searchParams.get("cursor");

  const page = await listPublishedPosts({
    pageSize,
    continuationToken: cursor,
  });

  return NextResponse.json(page);
}

/** POST /api/posts — create a post (requires AUTHOR_API_KEY). */
export async function POST(request: Request) {
  if (!isAuthorized(request)) {
    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
  }

  let body: Partial<CreatePostInput>;
  try {
    body = await request.json();
  } catch {
    return NextResponse.json({ error: "Invalid JSON body" }, { status: 400 });
  }

  const { title, excerpt, content, author } = body;
  if (!title || !excerpt || !content || !author) {
    return NextResponse.json(
      { error: "title, excerpt, content and author are required." },
      { status: 400 },
    );
  }

  try {
    const post = await createPost({
      slug: body.slug ?? title,
      title,
      excerpt,
      content,
      author,
      tags: body.tags ?? [],
      status: body.status ?? "draft",
    });
    return NextResponse.json(post, { status: 201 });
  } catch (err) {
    if (err instanceof PostConflictError) {
      return NextResponse.json({ error: err.message }, { status: 409 });
    }
    throw err;
  }
}