const express = require('express');
const multer = require('multer');
const db = require('../db');
const { requireAuth } = require('../auth');
const { resolveActingProfile } = require('../lib/account');
const { uploadToImgbb, ALLOWED_EXT } = require('../lib/media');

const router = express.Router();
router.use(requireAuth);

const upload = multer({
    storage: multer.memoryStorage(),
    limits: { fileSize: 2 * 1024 * 1024 }, // 2 MB (Config.Media.maxBytes)
});

// POST /api/media/upload  (multipart: image)  {profileId}
router.post('/media/upload', upload.single('image'), async (req, res) => {
    try {
        const { profile } = await resolveActingProfile(req.account, req.body.profileId);
        if (!profile) return res.status(400).json({ error: 'no_profile' });
        if (!req.file) return res.status(400).json({ error: 'no_file' });

        const ext = (req.file.originalname.split('.').pop() || '').toLowerCase();
        const mimeOk = /^image\/(jpe?g|png)$/i.test(req.file.mimetype || '');
        if (!ALLOWED_EXT.includes(ext) && !mimeOk) return res.status(400).json({ error: 'unsupported_type' });

        const { url } = await uploadToImgbb(req.file.buffer, req.file.originalname);
        await db.insert(
            `INSERT INTO bleeter_media (owner_profile_id, source_type, url, original_name, mime_type, size_bytes)
             VALUES (?, 'upload', ?, ?, ?, ?)`,
            [profile.id, url, req.file.originalname, req.file.mimetype, req.file.size]
        );
        res.json({ ok: true, url });
    } catch (err) {
        console.error('[bleeter] media upload error', err.message);
        res.status(500).json({ error: 'upload_failed' });
    }
});

module.exports = router;