dockhand/routes/api/license/+server.ts

import { json } from '@sveltejs/kit';
import type { RequestHandler } from './$types';
import {
	getLicenseStatus,
	activateLicense,
	deactivateLicense,
	getHostname
} from '$lib/server/license';
import { authorize } from '$lib/server/authorize';

// GET /api/license - Get current license status
// Any authenticated user can view license status (needed to determine if RBAC applies)
export const GET: RequestHandler = async ({ cookies }) => {
	const auth = await authorize(cookies);
	if (auth.authEnabled && !auth.isAuthenticated) {
		return json({ error: 'Authentication required' }, { status: 401 });
	}

	try {
		const status = await getLicenseStatus();
		const hostname = getHostname();

		return json({
			...status,
			hostname
		});
	} catch (error) {
		console.error('Error getting license status:', error);
		return json(
			{ error: 'Failed to get license status' },
			{ status: 500 }
		);
	}
};

// POST /api/license - Activate a license
export const POST: RequestHandler = async ({ request, cookies }) => {
	const auth = await authorize(cookies);
	if (auth.authEnabled && !await auth.can('license', 'manage')) {
		return json({ error: 'Permission denied' }, { status: 403 });
	}

	try {
		const { name, key } = await request.json();

		if (!name || !key) {
			return json(
				{ error: 'Name and key are required' },
				{ status: 400 }
			);
		}

		const result = await activateLicense(name, key);

		if (!result.success) {
			return json(
				{ error: result.error },
				{ status: 400 }
			);
		}

		return json({
			success: true,
			license: result.license
		});
	} catch (error) {
		console.error('Error activating license:', error);
		return json(
			{ error: 'Failed to activate license' },
			{ status: 500 }
		);
	}
};

// DELETE /api/license - Deactivate license
export const DELETE: RequestHandler = async ({ cookies }) => {
	const auth = await authorize(cookies);
	if (auth.authEnabled && !await auth.can('license', 'manage')) {
		return json({ error: 'Permission denied' }, { status: 403 });
	}

	try {
		await deactivateLicense();
		return json({ success: true });
	} catch (error) {
		console.error('Error deactivating license:', error);
		return json(
			{ error: 'Failed to deactivate license' },
			{ status: 500 }
		);
	}
};