import { NextRequest, NextResponse } from 'next/server';
import { db, schema } from '@/lib/db';
import { desc, eq } from 'drizzle-orm';
import { getSession } from '@/lib/auth';

// GET /api/admin/activity — system-wide token activity logs (admin only)
export async function GET(request: NextRequest) {
  try {
    const accessToken = request.cookies.get('scriba.access_token')?.value;
    const session = await getSession(accessToken);
    if (!session) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });

    const currentUser = await db.query.users.findFirst({
      where: eq(schema.users.id, session.user.id),
      columns: { role: true },
    });
    if (!currentUser || currentUser.role !== 'admin') {
      return NextResponse.json({ error: 'Forbidden' }, { status: 403 });
    }

    const [logs, allProjects] = await Promise.all([
      db.query.tokenLogs.findMany({
        orderBy: [desc(schema.tokenLogs.createdAt)],
        limit: 300,
      }),
      db.query.projects.findMany({
        columns: { id: true, name: true, userId: true },
      }),
    ]);

    return NextResponse.json({ logs, allProjects });
  } catch (error) {
    console.error('Admin activity logs error:', error);
    return NextResponse.json({ error: 'Failed to fetch activity logs' }, { status: 500 });
  }
}