import { NextRequest, NextResponse } from 'next/server';
import { previewTelemetryPolicy } from '@/lib/platform-client';

function getJwt(req: NextRequest): string {
  const cookie = req.headers.get('cookie') ?? '';
  const match = cookie.match(/(?:^|;\s*)token=([^;]+)/);
  if (match) return match[1];
  return req.headers.get('authorization')?.replace('Bearer ', '') ?? '';
}

export async function POST(req: NextRequest) {
  const jwt = getJwt(req);
  if (!jwt) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });

  try {
    const { targeting } = await req.json();
    const result = await previewTelemetryPolicy(jwt, targeting || {});
    return NextResponse.json(result);
  } catch (err) {
    return NextResponse.json({ error: String(err) }, { status: 500 });
  }
}
