/**
 * POST /api/schema/save — Save a schema markup to the database.
 */
import { NextResponse } from "next/server";
import { getCurrentUser } from "@/lib/auth";
import { prisma } from "@/lib/prisma";

export const dynamic = "force-dynamic";

export async function POST(req: Request) {
  const user = await getCurrentUser();
  if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });

  const body = await req.json().catch(() => null);
  if (!body?.brandId || !body?.pageUrl || !body?.schemaType || !body?.jsonLd) {
    return NextResponse.json({ error: "brandId, pageUrl, schemaType, jsonLd required" }, { status: 400 });
  }

  const brand = await prisma.brand.findUnique({
    where: { id: body.brandId },
    include: { organization: { include: { memberships: true } } },
  });
  if (!brand) return NextResponse.json({ error: "Brand not found" }, { status: 404 });
  if (!brand.organization.memberships.some((m) => m.userId === user.id)) {
    return NextResponse.json({ error: "Access denied" }, { status: 403 });
  }

  const schema = await prisma.schemaMarkup.create({
    data: {
      brandId: body.brandId,
      pageUrl: body.pageUrl,
      schemaType: body.schemaType,
      jsonLd: body.jsonLd,
      status: body.status || "draft",
      autoInject: body.autoInject ?? false,
    },
  });

  return NextResponse.json({ schema });
}
