import { reconcilePendingMailboxProvisioningJobs } from "@/lib/official-mail";
import { reconcileMailboxExternalAccessPolicies } from "@/lib/mail-external-access";

export const runtime = "nodejs";
export const dynamic = "force-dynamic";

function hasValidCronSecret(request: Request) {
  const expected = process.env.OFFICIAL_MAIL_CRON_SECRET?.trim();

  return Boolean(
    expected &&
      request.headers.get("x-officialmail-cron-secret")?.trim() === expected,
  );
}

export async function POST(request: Request) {
  if (!hasValidCronSecret(request)) {
    return Response.json(
      { error: "forbidden", message: "유효한 크론 시크릿이 필요합니다." },
      { status: 403 },
    );
  }

  try {
    const provisioning = await reconcilePendingMailboxProvisioningJobs();
    const externalAccess = await reconcileMailboxExternalAccessPolicies();

    return Response.json({ ok: true, summary: { externalAccess, provisioning } });
  } catch {
    return Response.json(
      {
        error: "mailbox-provisioning-reconcile-failed",
        message: "메일함 프로비저닝 자동 복구에 실패했습니다.",
      },
      { status: 500 },
    );
  }
}