import { NextResponse } from 'next/server';
import { getSession } from '@/lib/session';
import * as phpdb from '@/lib/phpdb';

export type { FahrkostenRow } from '@/lib/phpdb';

export async function GET(req: Request) {
  const session = await getSession();
  if (!session) return NextResponse.json({ error: 'Nicht angemeldet' }, { status: 401 });

  const { searchParams } = new URL(req.url);
  const ab = searchParams.get('ab');
  if (!ab || !/^\d{4}-\d{2}-\d{2}$/.test(ab)) {
    return NextResponse.json({ error: 'Parameter ab (YYYY-MM-DD) fehlt' }, { status: 400 });
  }
  const bis = searchParams.get('bis') ?? new Date().toISOString().slice(0, 10);
  if (!/^\d{4}-\d{2}-\d{2}$/.test(bis)) {
    return NextResponse.json({ error: 'Parameter bis (YYYY-MM-DD) ungültig' }, { status: 400 });
  }

  try {
    const rows = await phpdb.getFahrkosten(ab, bis);
    return NextResponse.json(rows);
  } catch (error) {
    console.error('GET /api/fahrkosten:', error);
    return NextResponse.json({ error: 'Datenbankfehler' }, { status: 500 });
  }
}