captive-portal-cms/app/api/cards/route.ts

import { NextResponse } from 'next/server';
import { revalidatePath } from 'next/cache';
import { getCards, saveCards } from '@/lib/db';
import { validateCard } from '@/lib/validation';
import { sanitizeCardHtml } from '@/lib/sanitize';
import { Card } from '@/types';

export const dynamic = 'force-dynamic';

export async function GET(request: Request) {
  const { searchParams } = new URL(request.url);
  const portalId = searchParams.get('portalId');
  const cards = await getCards(portalId || undefined);
  return NextResponse.json(cards);
}

export async function POST(request: Request) {
  try {
    const incomingCard: Card = await request.json();

    const validation = validateCard(incomingCard);
    if (!validation.valid) {
      return NextResponse.json(
        { error: 'The card could not be saved because some fields are invalid. See the highlighted errors and fix them, then try again.', errors: validation.errors },
        { status: 400 },
      );
    }

    if (typeof incomingCard.fullContent === 'string') {
      incomingCard.fullContent = sanitizeCardHtml(incomingCard.fullContent);
    }

    const cards = await getCards();
    const existingIndex = cards.findIndex(c => c.id === incomingCard.id);

    if (existingIndex >= 0) {
      cards[existingIndex] = incomingCard;
    } else {
      cards.push(incomingCard);
    }

    await saveCards(cards);
    revalidatePath('/'); // Force public portal to update instantly
    return NextResponse.json(incomingCard, { status: 200 });
  } catch {
    return NextResponse.json(
      { error: 'Unexpected error while saving the card. The card was not saved. Check the server logs for details and try again.' },
      { status: 500 },
    );
  }
}

// NEW: Bulk update for saving card reordering
export async function PUT(request: Request) {
  try {
    const updatedCards: Card[] = await request.json();
    await saveCards(updatedCards);
    revalidatePath('/'); // Force public portal to update instantly
    return NextResponse.json({ success: true }, { status: 200 });
  } catch {
    return NextResponse.json(
      { error: 'Unexpected error while saving the new card order. The order was not saved. Reload the page and try again.' },
      { status: 500 },
    );
  }
}

export async function DELETE(request: Request) {
  try {
    const { searchParams } = new URL(request.url);
    const id = searchParams.get('id');
    
    if (!id) return NextResponse.json(
      { error: 'Missing "id" parameter: cannot tell which card to delete. Reload the page and retry.' },
      { status: 400 },
    );

    const cards = await getCards();
    const filteredCards = cards.filter(c => c.id !== id);
    
    await saveCards(filteredCards);
    revalidatePath('/'); // Force public portal to update instantly
    return NextResponse.json({ success: true }, { status: 200 });
  } catch {
    return NextResponse.json(
      { error: 'Unexpected error while deleting the card. The card was not deleted. Check the server logs and try again.' },
      { status: 500 },
    );
  }
}