/**
 * Gateway proxy for the daemon workspace-commit control-plane endpoint.
 *
 * Follows the same forwarding pattern as upgrade-broadcast-proxy.ts:
 * strips hop-by-hop headers, replaces the client's edge JWT with a
 * minted service token, and proxies the request to the daemon.
 */

import { proxyForwardToResponse } from "@vellumai/assistant-client";

import { mintServiceToken } from "../../auth/token-exchange.js";
import type { GatewayConfig } from "../../config.js";
import { fetchImpl } from "../../fetch.js";
import { getLogger } from "../../logger.js";

const log = getLogger("workspace-commit-proxy");

export function createWorkspaceCommitProxyHandler(config: GatewayConfig) {
  return async function handleWorkspaceCommit(req: Request): Promise<Response> {
    const start = performance.now();

    const response = await proxyForwardToResponse(req, {
      baseUrl: config.assistantRuntimeBaseUrl,
      path: "/v1/admin/workspace-commit",
      serviceToken: mintServiceToken(),
      timeoutMs: config.runtimeTimeoutMs,
      fetchImpl,
    });

    const duration = Math.round(performance.now() - start);

    if (response.status >= 400) {
      log.warn(
        { status: response.status, duration },
        "Workspace commit proxy upstream error",
      );
    } else {
      log.info(
        { status: response.status, duration },
        "Workspace commit proxy completed",
      );
    }

    return response;
  };
}