/api/webhooks/stripe (dashboard)

export async function POST(request: NextRequest) {
  const webhookSecret = process.env.CABBAGE_WEBHOOK_SECRET

  // Verify webhook signature from Cabbage
  const signature = request.headers.get('x-cabbage-signature') || request.headers.get('x-webhook-signature')

  if (webhookSecret && !signature) {
    return NextResponse.json(
      { error: 'Missing webhook signature header' },
      { status: 400 }
    )
  }

  let event: { type: string; data: Record<string, unknown> }
  try {
    event = await request.json()
  } catch {
    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })
  }

  // TODO: Verify HMAC signature when CABBAGE_WEBHOOK_SECRET is set
  // For now, accept all events in development

  try {
    await billingEventService.handleCabbageWebhook(event)
    return NextResponse.json({ received: true }, { status: 200 })
  } catch (error) {
    console.error('Billing webhook processing failed:', error)
    return NextResponse.json(
      { error: 'Webhook processing failed' },
      { status: 500 }
    )
  }
}

export async function GET() {
  return NextResponse.json({
    status: 'active',
    webhook: 'cabbage-billing',
    stack: 'omerta → cabbage → chard',
    timestamp: new Date().toISOString()
  })
}

NextResponse.json(
      { error: 'Missing webhook signature header' },
      { status: 400 }
    )

request.json()

NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 })

NextResponse.json({ received: true }, { status: 200 })

NextResponse.json(
      { error: 'Webhook processing failed' },
      { status: 500 }
    )

NextResponse.json({
    status: 'active',
    webhook: 'cabbage-billing',
    stack: 'omerta → cabbage → chard',
    timestamp: new Date().toISOString()
  })