import config from "@payload-config";
import { getPayload } from "payload";
import { NextRequest, NextResponse } from "next/server";
import type { GameServer } from "@/payload-types";
import { authenticateArmaBridge } from "./auth";

/**
 * Shared guard for bridge routes that operate on behalf of a known game
 * server: verifies the bridge API key + server id headers, then resolves the
 * matching `game-servers` doc.
 *
 * Returns the Payload instance and server doc on success, or a NextResponse
 * (503/401/400/409) the route should return verbatim.
 */
export async function requireArmaServer(
  req: NextRequest,
): Promise<
  | { payload: Awaited<ReturnType<typeof getPayload>>; server: GameServer }
  | NextResponse
> {
  const serverId = authenticateArmaBridge(req);
  if (serverId instanceof NextResponse) return serverId;

  const payload = await getPayload({ config });
  const servers = await payload.find({
    collection: "game-servers",
    where: { serverId: { equals: serverId } },
    limit: 1,
    overrideAccess: true,
  });
  const server = servers.docs[0];
  if (!server) {
    return NextResponse.json({ error: "Heartbeat is required first." }, { status: 409 });
  }

  return { payload, server };
}