import { NextResponse } from 'next/server';
import { auth } from '../../../../auth';

const API_BASE = process.env.NEXT_PUBLIC_API_URL_INTERNAL || 'http://recipe-api:8080';

export async function POST(req: Request) {
  const session = await auth();
  if (!session?.accessToken) {
    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
  }

  const body = await req.json();
  const { sourceProductId, targetProductId } = body as {
    sourceProductId: number;
    targetProductId: number;
  };

  const res = await fetch(`${API_BASE}/api/products/merge`, {
    method: 'POST',
    headers: {
      'Content-Type': 'application/json',
      Authorization: `Bearer ${session.accessToken}`,
    },
    body: JSON.stringify({ sourceProductId, targetProductId }),
    cache: 'no-store',
  });

  if (!res.ok) {
    const text = await res.text();
    return NextResponse.json({ error: text || 'Sammanslagning misslyckades' }, { status: res.status });
  }

  return NextResponse.json({ ok: true });
}
