import { withAdmin } from '../../../lib/permission-middleware';
import { checkImportRateLimit } from '../../../lib/rate-limit.js';
import { runCatalogSync } from '../../../lib/card-import/sync-catalog.js';

export default withAdmin(async function handler(req, res, user) {
  if (req.method !== 'POST') {
    return res.status(405).json({ error: 'Method not allowed' });
  }

  const { allowed, reset } = await checkImportRateLimit(req, user.userId);
  if (!allowed) {
    res.setHeader('Retry-After', Math.ceil((reset - Date.now()) / 1000));
    return res.status(429).json({ error: 'Too many attempts. Try again later.' });
  }

  try {
    const summary = await runCatalogSync();
    return res.status(200).json({ success: true, ...summary });
  } catch (error) {
    console.error('[POST /api/admin/sync-catalog]', error);
    return res.status(500).json({ error: 'Catalog sync failed', details: error.message });
  }
});