import { randomUUID } from 'crypto'
import { NextRequest, NextResponse } from 'next/server'
import { getApiKeyFromRequest, validateApiKey, logApiCall, getClientIp } from '@/lib/external-api'
import { ExternalCertificateReportError, findExternalCertificateReports, parseCertificateReportQuery } from '@/lib/external-certificate-reports'

export const runtime = 'nodejs'
export const dynamic = 'force-dynamic'

export async function GET(request: NextRequest) {
  const start = Date.now(), traceId = randomUUID()
  const headers = { 'Cache-Control': 'private, no-store, max-age=0', 'X-Trace-Id': traceId }
  let keyId: string | undefined, status = 500
  try {
    const key = await validateApiKey(getApiKeyFromRequest(request))
    if (!key) { status = 401; return NextResponse.json({ success: false, error: { code: 'INVALID_API_KEY', message: 'API Key 无效或缺失' } }, { status, headers }) }
    keyId = key.id
    const query = parseCertificateReportQuery(request.nextUrl.searchParams)
    const data = await findExternalCertificateReports(query)
    status = 200
    return NextResponse.json({ success: true, data }, { headers })
  } catch (error) {
    status = error instanceof ExternalCertificateReportError ? error.status : 500
    if (!(error instanceof ExternalCertificateReportError)) console.error('[external/certificate-reports] lookup failed', { traceId })
    return NextResponse.json({ success: false, error: error instanceof ExternalCertificateReportError
      ? { code: error.code, message: error.message } : { code: 'SERVER_ERROR', message: '服务器内部错误' } }, { status, headers })
  } finally {
    if (keyId) await logApiCall({ apiKeyId: keyId, endpoint: '/api/external/certificate-reports', method: 'GET', queryType: 'certificate-report',
      statusCode: status, duration: Date.now() - start, ipAddress: getClientIp(request), userAgent: request.headers.get('user-agent') || undefined })
  }
}