import { NextRequest, NextResponse } from "next/server";
import { cookies } from "next/headers";
import { decodeAdminToken, ADMIN_COOKIE } from "@/lib/admin-auth";
import { adminApiUsesMock, listAdminCases } from "@/lib/admin-mock";
import { apiErrorResponse } from "@/lib/api-errors";
import { getOrCreateCorrelationId, withCorrelationId } from "@/lib/correlation-id";
import { fetchUpstream } from "@/lib/proxy-upstream";

export async function GET(req: NextRequest) {
  const correlationId = getOrCreateCorrelationId(req);
  const jar = await cookies();
  const officer = decodeAdminToken(jar.get(ADMIN_COOKIE)?.value);

  if (!officer) {
    return apiErrorResponse(401, "UNAUTHORIZED", "Officer authentication required", correlationId);
  }

  if (adminApiUsesMock()) {
    return withCorrelationId(NextResponse.json({ cases: listAdminCases(officer) }), correlationId);
  }

  const upstream = await fetchUpstream("/admin/cases", {
    method: "GET",
    headers: { Authorization: `Bearer ${jar.get(ADMIN_COOKIE)?.value}` },
    correlationId,
  });

  if (!upstream?.ok) {
    if (adminApiUsesMock()) {
      return withCorrelationId(NextResponse.json({ cases: listAdminCases(officer) }), correlationId);
    }
    return apiErrorResponse(
      upstream?.status ?? 503,
      "UPSTREAM_ERROR",
      "Failed to load cases",
      correlationId,
    );
  }

  const data = await upstream.json();
  return withCorrelationId(NextResponse.json(data), correlationId);
}
