import { getCurrentUser, isAdmin } from "@/lib/auth";

import { saveUpload, type UploadKind } from "@/lib/uploads";

export const dynamic = "force-dynamic";

export async function POST(request: Request) {

  const user = await getCurrentUser();

  if (!user) {

    return Response.json({ error: "Sign in to upload." }, { status: 401 });

  }

  let form: FormData;

  try {

    form = await request.formData();

  } catch {

    return Response.json({ error: "Expected multipart form data." }, { status: 400 });

  }

  const file = form.get("file");

  if (!(file instanceof File)) {

    return Response.json({ error: "No file provided." }, { status: 400 });

  }

  const kind: UploadKind = form.get("kind") === "pdf" ? "pdf" : "image";

  if (kind === "pdf" && !isAdmin(user)) {

    return Response.json({ error: "Admins only." }, { status: 403 });

  }

  try {

    const url = await saveUpload(file, kind);

    return Response.json({ url });

  } catch (err) {

    const message = err instanceof Error ? err.message : "Upload failed.";

    return Response.json({ error: message }, { status: 400 });

  }

}