import { NextRequest, NextResponse } from 'next/server'
import { syncCustomersFromLicServer } from '@/lib/actions/companies'

export const dynamic = 'force-dynamic'

export async function GET(req: NextRequest) {
  // Check authorization header
  const authHeader = req.headers.get('authorization')
  const cronSecret = process.env.CRON_SECRET

  // Secure the cron endpoint in production
  if (process.env.NODE_ENV === 'production' && cronSecret) {
    if (authHeader !== `Bearer ${cronSecret}`) {
      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
    }
  }

  try {
    const res = await syncCustomersFromLicServer()
    return NextResponse.json({ success: true, count: res.count })
  } catch (err: any) {
    console.error('[cron] Customer sync failed:', err)
    return NextResponse.json({ error: err.message || 'Sync failed' }, { status: 500 })
  }
}