/**
 * Marketplace plugin icon proxy
 *
 * GET /_emdash/api/admin/plugins/marketplace/:id/icon - Proxy icon from marketplace
 *
 * Avoids CORS/auth issues when the marketplace Worker is behind Cloudflare Access
 * or on a different origin. The admin UI uses this instead of linking directly.
 */

import type { APIRoute } from "astro";

import { requirePerm } from "#api/authorize.js";
import { apiError } from "#api/error.js";

export const prerender = false;

export const GET: APIRoute = async ({ params, url, locals }) => {
	const { emdash, user } = locals;
	const { id } = params;

	if (!emdash?.db) {
		return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
	}

	const denied = requirePerm(user, "plugins:read");
	if (denied) return denied;

	const marketplaceUrl = emdash.config.marketplace;
	if (!marketplaceUrl || !id) {
		return apiError("NOT_CONFIGURED", "Marketplace not configured", 400);
	}

	const width = url.searchParams.get("w");
	const target = new URL(`/api/v1/plugins/${encodeURIComponent(id)}/icon`, marketplaceUrl);
	if (width) target.searchParams.set("w", width);

	try {
		const resp = await fetch(target.href);
		if (!resp.ok) {
			// Allowlist: only forward Content-Type from upstream.
			// Never copy all upstream headers (denylist approach leaks
			// headers we haven't anticipated).
			return new Response(resp.body, {
				status: resp.status,
				headers: {
					"Content-Type": resp.headers.get("Content-Type") ?? "application/octet-stream",
					"Cache-Control": "private, no-store",
				},
			});
		}

		return new Response(resp.body, {
			headers: {
				"Content-Type": resp.headers.get("Content-Type") ?? "image/png",
				"Cache-Control": "private, no-store",
			},
		});
	} catch {
		return apiError("PROXY_ERROR", "Failed to fetch icon", 502);
	}
};