import { NextResponse } from 'next/server';
import { requireUser } from '@/lib/session';

const ENGINE_URL    = process.env.ENGINE_URL    || 'http://localhost:3030';
const ENGINE_SECRET = process.env.ENGINE_SECRET || '';

export async function POST(req, { params }) {
  const user = await requireUser();
  if (!user) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
  const body = await req.json();
  try {
    const res = await fetch(`${ENGINE_URL}/api/channels/${params.id}/poll`, {
      method: 'POST',
      headers: {
        'Content-Type': 'application/json',
        'x-internal-secret': ENGINE_SECRET,
        'x-user-id': String(user.id),
      },
      body: JSON.stringify(body),
    });
    const data = await res.json();
    return NextResponse.json(data, { status: res.status });
  } catch (err) {
    return NextResponse.json({ error: err.message }, { status: 500 });
  }
}