breakpilot-compliance/admin-compliance/app/api/sdk/v1/canonical/route.ts

import { NextRequest, NextResponse } from 'next/server'

const BACKEND_URL = process.env.BACKEND_URL || 'http://backend-compliance:8002'

/**
 * Proxy: GET /api/sdk/v1/canonical?endpoint=...
 *
 * Routes to backend canonical control endpoints:
 *   endpoint=frameworks   → GET /api/compliance/v1/canonical/frameworks
 *   endpoint=controls     → GET /api/compliance/v1/canonical/controls(?severity=...&domain=...)
 *   endpoint=control&id=  → GET /api/compliance/v1/canonical/controls/{id}
 *   endpoint=sources      → GET /api/compliance/v1/canonical/sources
 *   endpoint=licenses     → GET /api/compliance/v1/canonical/licenses
 */
export async function GET(request: NextRequest) {
  try {
    const { searchParams } = new URL(request.url)
    const endpoint = searchParams.get('endpoint') || 'frameworks'

    let backendPath: string

    switch (endpoint) {
      case 'frameworks':
        backendPath = '/api/compliance/v1/canonical/frameworks'
        break

      case 'controls': {
        const severity = searchParams.get('severity')
        const domain = searchParams.get('domain')
        const params = new URLSearchParams()
        if (severity) params.set('severity', severity)
        if (domain) params.set('domain', domain)
        const qs = params.toString()
        backendPath = `/api/compliance/v1/canonical/controls${qs ? `?${qs}` : ''}`
        break
      }

      case 'control': {
        const controlId = searchParams.get('id')
        if (!controlId) {
          return NextResponse.json({ error: 'Missing control id' }, { status: 400 })
        }
        backendPath = `/api/compliance/v1/canonical/controls/${encodeURIComponent(controlId)}`
        break
      }

      case 'sources':
        backendPath = '/api/compliance/v1/canonical/sources'
        break

      case 'licenses':
        backendPath = '/api/compliance/v1/canonical/licenses'
        break

      default:
        return NextResponse.json({ error: `Unknown endpoint: ${endpoint}` }, { status: 400 })
    }

    const response = await fetch(`${BACKEND_URL}${backendPath}`)

    if (!response.ok) {
      if (response.status === 404) {
        return NextResponse.json(null, { status: 404 })
      }
      const errorText = await response.text()
      return NextResponse.json(
        { error: 'Backend error', details: errorText },
        { status: response.status }
      )
    }

    return NextResponse.json(await response.json())
  } catch (error) {
    console.error('Canonical control proxy error:', error)
    return NextResponse.json(
      { error: 'Failed to connect to backend' },
      { status: 503 }
    )
  }
}

/**
 * Proxy: POST /api/sdk/v1/canonical?endpoint=similarity-check&id=...
 *
 * Routes to: POST /api/compliance/v1/canonical/controls/{id}/similarity-check
 */
export async function POST(request: NextRequest) {
  try {
    const { searchParams } = new URL(request.url)
    const endpoint = searchParams.get('endpoint')
    const controlId = searchParams.get('id')

    if (endpoint !== 'similarity-check' || !controlId) {
      return NextResponse.json({ error: 'Invalid endpoint or missing id' }, { status: 400 })
    }

    const body = await request.json()
    const response = await fetch(
      `${BACKEND_URL}/api/compliance/v1/canonical/controls/${encodeURIComponent(controlId)}/similarity-check`,
      {
        method: 'POST',
        headers: { 'Content-Type': 'application/json' },
        body: JSON.stringify(body),
      }
    )

    if (!response.ok) {
      const errorText = await response.text()
      return NextResponse.json(
        { error: 'Backend error', details: errorText },
        { status: response.status }
      )
    }

    return NextResponse.json(await response.json())
  } catch (error) {
    console.error('Similarity check proxy error:', error)
    return NextResponse.json(
      { error: 'Failed to connect to backend' },
      { status: 503 }
    )
  }
}