import { NextRequest, NextResponse } from 'next/server';
import { auth } from '@/lib/server/auth/auth';
import { listAdminProviders, toPublic } from '@/lib/server/admin/providers';
import { errorToLog, serverLogger } from '@/lib/server/logger';

export const dynamic = 'force-dynamic';

/**
 * Public list of admin-configured TTS providers. Auth-gated and never returns
 * keys, base URLs, or ciphertext — only the data the
 * client needs to render the provider picker.
 */
export async function GET(req: NextRequest) {
  const session = await auth.api.getSession({ headers: req.headers });
  if (!session?.user) {
    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
  }

  try {
    const all = await listAdminProviders();
    const visible = all.filter((p) => p.enabled).map(toPublic);
    return NextResponse.json({ providers: visible });
  } catch (error) {
    serverLogger.warn({
      event: 'tts.shared_providers.list.failed',
      degraded: true,
      fallbackPath: 'empty_provider_list',
      error: errorToLog(error),
    }, 'Failed to list shared providers');
    return NextResponse.json({ providers: [] });
  }
}