import { NextRequest, NextResponse } from "next/server";

export function authenticateArmaBridge(req: NextRequest): string | NextResponse {
  const secret = process.env.ARMA_BRIDGE_API_KEY;
  if (!secret) return NextResponse.json({ error: "Arma bridge is not configured." }, { status: 503 });
  if (req.headers.get("x-arma-bridge-key") !== secret) return NextResponse.json({ error: "Unauthorized." }, { status: 401 });
  const serverId = req.headers.get("x-arma-server-id");
  if (!serverId || !/^[a-zA-Z0-9_-]{3,64}$/.test(serverId)) return NextResponse.json({ error: "Invalid server id." }, { status: 400 });
  return serverId;
}