import { NextRequest, NextResponse } from 'next/server' import { neon } from '@neondatabase/serverless' // Initialize Neon client const sql = neon(process.env.DATABASE_URL!) interface Card { id: number name: string set_name?: string set_code?: string card_number?: string rarity?: string game: string mana_cost?: string cmc?: number card_type?: string colors?: string[] oracle_text?: string flavor_text?: string power?: string toughness?: string artist?: string image_url?: string stock_image_url?: string artwork_crop_coords?: any current_price?: number market_price?: number verified: boolean created_at?: string updated_at?: string } export default async function handler(req: NextRequest) { // Enable CORS const headers = { 'Access-Control-Allow-Origin': '*', 'Access-Control-Allow-Methods': 'GET, POST, OPTIONS', 'Access-Control-Allow-Headers': 'Content-Type, Authorization', } if (req.method === 'OPTIONS') { return new NextResponse(null, { status: 200, headers }) } try { const url = new URL(req.url) const searchParams = url.searchParams // Get query parameters const skip = parseInt(searchParams.get('skip') || '0') const limit = parseInt(searchParams.get('limit') || '100') const search = searchParams.get('search') const game = searchParams.get('game') const set_name = searchParams.get('set_name') // Build the query dynamically using template literals let baseQuery = 'SELECT * FROM cards WHERE 1=1' let queryConditions: string[] = [] let queryValues: any[] = [] if (game) { queryConditions.push(`game = '${game.replace(/'/g, "''")}'`) } if (set_name) { queryConditions.push(`set_name = '${set_name.replace(/'/g, "''")}'`) } if (search) { const escapedSearch = search.replace(/'/g, "''") queryConditions.push(`(name ILIKE '%${escapedSearch}%' OR oracle_text ILIKE '%${escapedSearch}%' OR card_type ILIKE '%${escapedSearch}%')`) } // Combine conditions if (queryConditions.length > 0) { baseQuery += ' AND ' + queryConditions.join(' AND ') } baseQuery += ' ORDER BY name' if (limit > 0) { baseQuery += ` LIMIT ${limit}` } if (skip > 0) { baseQuery += ` OFFSET ${skip}` } // Execute the query using unsafe (for dynamic queries) const result = await sql.unsafe(baseQuery) as unknown as any[] // Transform the result to match expected format const cards = result.map((row: any) => ({ ...row, colors: row.colors ? (typeof row.colors === 'string' ? JSON.parse(row.colors) : row.colors) : null, artwork_crop_coords: row.artwork_crop_coords ? (typeof row.artwork_crop_coords === 'string' ? JSON.parse(row.artwork_crop_coords) : row.artwork_crop_coords) : null })) return new NextResponse(JSON.stringify(cards), { status: 200, headers: { ...headers, 'Content-Type': 'application/json', }, }) } catch (error) { console.error('API Error:', error) return new NextResponse(JSON.stringify({ error: 'Internal server error', details: process.env.NODE_ENV === 'development' ? error.message : undefined }), { status: 500, headers: { ...headers, 'Content-Type': 'application/json', }, }) } }