import { NextResponse } from "next/server";

import { assertAgencyAdmin, getRouteAgencyContextOrThrow } from "@/lib/agency";
import { assertRateLimit } from "@/lib/api/rate-limit";
import { assertSameOrigin } from "@/lib/api/security";
import { testPleskConnection } from "@/lib/plesk/client";
import { createSupabaseRouteClient } from "@/lib/supabase/route";

export async function POST(
  req: Request,
  { params }: { params: { id: string } },
) {
  try {
    assertSameOrigin(req);

    const context = await getRouteAgencyContextOrThrow();
    assertAgencyAdmin(context);
    assertRateLimit(`plesk-test:${context.userId}`, 20, 60_000);

    const supabase = createSupabaseRouteClient() as any;
    const { data: instance, error: loadError } = await supabase
      .from("plesk_instances")
      .select("id, agency_id, base_url, auth_type, encrypted_secret")
      .eq("id", params.id)
      .eq("agency_id", context.agencyId)
      .single();

    if (loadError || !instance) {
      throw new Error("Plesk instance not found");
    }

    let status: "connected" | "error" = "connected";
    let errorMessage: string | null = null;

    try {
      await testPleskConnection({
        baseUrl: instance.base_url,
        authType: instance.auth_type,
        encryptedSecret: instance.encrypted_secret,
      });
    } catch (error) {
      status = "error";
      errorMessage =
        error instanceof Error
          ? error.message.slice(0, 1000)
          : "Connection test failed";
    }

    const { data: updated } = await supabase
      .from("plesk_instances")
      .update({
        status,
        error_message: errorMessage,
        last_connected_at:
          status === "connected" ? new Date().toISOString() : null,
      })
      .eq("id", instance.id)
      .eq("agency_id", context.agencyId)
      .select(
        "id, name, base_url, auth_type, status, error_message, last_connected_at",
      )
      .single();

    await supabase.from("actions_log").insert({
      agency_id: context.agencyId,
      actor_user_id: context.userId,
      target_type: "plesk_instance",
      target_id: instance.id,
      action: "test_connection",
      status: status === "connected" ? "success" : "failed",
      error_message: errorMessage,
      metadata: { instance_id: instance.id },
    });

    return NextResponse.json({ ok: status === "connected", instance: updated });
  } catch (error) {
    return NextResponse.json(
      {
        error:
          error instanceof Error ? error.message : "Connection test failed",
      },
      { status: 400 },
    );
  }
}