import { NextResponse } from "next/server";
import { runScheduledPublish } from "@/lib/scheduling/run-scheduled-publish";

function isAuthorized(request: Request): boolean {
  const secret = process.env.CRON_SECRET?.trim();
  if (!secret) return false;

  const header = request.headers.get("authorization");
  if (header === `Bearer ${secret}`) return true;

  const url = new URL(request.url);
  return url.searchParams.get("secret") === secret;
}

export async function GET(request: Request) {
  if (!isAuthorized(request)) {
    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
  }

  const summary = await runScheduledPublish("cron_api");
  return NextResponse.json({
    success: true,
    ...summary,
    logFile: `logs/auto-post-${new Date().toISOString().slice(0, 10)}.log`,
  });
}

export async function POST(request: Request) {
  return GET(request);
}