import { requireApiV1Auth } from "@/lib/api-v1/auth";
import { apiJsonOk, toApiErrorResponse } from "@/lib/api-v1/response";
import { getCompanyProfile, updateCompanyProfile } from "@/lib/api-v1/services/company-service";
import { applyApiRateLimit } from "@/lib/api-v1/rate-limit";
import { parseJsonObject } from "@/lib/api-v1/validators";

export async function GET(request: Request) {
  try {
    const auth = await requireApiV1Auth(request);
    const rateLimit = applyApiRateLimit(
      request,
      {
        namespace: "api-v1:company:get",
        windowMs: 60_000,
        maxPerIp: 120,
        maxPerUser: 120,
      },
      auth.user.id
    );
    const result = await getCompanyProfile({ supabase: auth.supabase, user: auth.user });
    return apiJsonOk(result.data, { headers: rateLimit.headers });
  } catch (error) {
    return toApiErrorResponse(error);
  }
}

export async function PUT(request: Request) {
  try {
    const auth = await requireApiV1Auth(request, "company.data.write");
    const rateLimit = applyApiRateLimit(
      request,
      {
        namespace: "api-v1:company:put",
        windowMs: 60_000,
        maxPerIp: 60,
        maxPerUser: 60,
      },
      auth.user.id
    );
    const body = await parseJsonObject(request);
    const result = await updateCompanyProfile({ supabase: auth.supabase, user: auth.user, body });
    return apiJsonOk(result.data, {
      headers: rateLimit.headers,
    });
  } catch (error) {
    return toApiErrorResponse(error);
  }
}