import { Router, Request, Response } from 'express'
import { syncEntitlement } from '../services/entitlement'
import { RevenueCatEvent } from '../types'

const router = Router()

function verifyRevenueCatSecret(req: Request): boolean {
  const secret = process.env.REVENUECAT_WEBHOOK_SECRET
  if (!secret) {
    console.warn('[webhook] REVENUECAT_WEBHOOK_SECRET not set — skipping auth check')
    return true
  }
  const auth = req.headers['authorization'] ?? ''
  return auth === secret
}

router.post('/revenuecat', async (req: Request, res: Response) => {
  if (!verifyRevenueCatSecret(req)) {
    res.status(401).json({ error: 'unauthorized' })
    return
  }

  const body = req.body as RevenueCatEvent
  if (!body?.event?.type || !body?.event?.app_user_id) {
    res.status(400).json({ error: 'malformed payload' })
    return
  }

  // Acknowledge immediately — RC retries if we don't respond within 10s
  res.status(200).json({ received: true })

  try {
    await syncEntitlement(body)
  } catch (err) {
    console.error('[webhook] entitlement sync failed:', err)
  }
})

export default router