peworkshop/app/api/hunt/timer/route.js

import { query, queryOne, run } from "@/lib/db";
import { cookies } from "next/headers";
import { verifyToken } from "@/app/api/auth/[...nextauth]/route";

export const dynamic = "force-dynamic"; // Disable caching

// GET endpoint to get current timer status
export async function GET(request) {
  try {
    // Verify the user is authenticated
    const cookieStore = cookies();
    const sessionToken = cookieStore.get("next-auth.session-token")?.value;

    if (!sessionToken) {
      return Response.json({ error: "Unauthorized" }, { status: 401 });
    }

    const userData = verifyToken(sessionToken);
    if (!userData) {
      return Response.json({ error: "Invalid session" }, { status: 401 });
    }

    // Get the current hunt timer status
    const timerStatus = await queryOne(
      "SELECT active, start_time, end_time FROM hunt_timer ORDER BY id DESC LIMIT 1"
    );

    if (!timerStatus) {
      return Response.json({
        active: false,
        startTime: null,
        endTime: null,
      });
    }

    return Response.json({
      active: !!timerStatus.active,
      startTime: timerStatus.start_time,
      endTime: timerStatus.end_time,
    });
  } catch (error) {
    console.error("Error getting timer status:", error);
    return Response.json(
      { error: "Failed to get timer status" },
      { status: 500 }
    );
  }
}

// POST endpoint to start/stop timer
export async function POST(request) {
  try {
    // Verify the user is authenticated and is an admin
    const cookieStore = cookies();
    const sessionToken = cookieStore.get("next-auth.session-token")?.value;

    if (!sessionToken) {
      return Response.json({ error: "Unauthorized" }, { status: 401 });
    }

    const userData = verifyToken(sessionToken);
    if (!userData || userData.role !== "admin") {
      return Response.json(
        { error: "Unauthorized: Admin access required" },
        { status: 403 }
      );
    }

    const body = await request.json();
    const { action, endTime } = body;

    if (action === "start") {
      // Get current time in ISO format
      const startTime = new Date().toISOString();

      // Insert new timer record
      await run(
        "INSERT INTO hunt_timer (active, start_time, end_time) VALUES (?, ?, ?)",
        [1, startTime, endTime || null]
      );

      return Response.json({
        success: true,
        message: "Timer started successfully",
        startTime,
        endTime: endTime || null,
      });
    } else if (action === "stop") {
      // Update the most recent timer to inactive
      await run(
        "UPDATE hunt_timer SET active = 0, end_time = ? WHERE id = (SELECT id FROM hunt_timer ORDER BY id DESC LIMIT 1)",
        [new Date().toISOString()]
      );

      return Response.json({
        success: true,
        message: "Timer stopped successfully",
      });
    } else {
      return Response.json(
        { error: "Invalid action. Use 'start' or 'stop'." },
        { status: 400 }
      );
    }
  } catch (error) {
    console.error("Error managing timer:", error);
    return Response.json({ error: "Failed to manage timer" }, { status: 500 });
  }
}