import { NextResponse } from "next/server";
import { getServerSession } from "next-auth";
import { authOptions } from "../../auth/[...nextauth]/route";
import { documentService } from "@/lib/services/documentService";

/**
 * DELETE /api/documents/all
 * Eliminar TODOS los documentos (solo desarrollo, solo ADMIN)
 */
export async function DELETE() {
  try {
    const session = await getServerSession(authOptions);

    if (!session || !session.user) {
      return NextResponse.json({ error: "No autenticado" }, { status: 401 });
    }

    if (session.user.role !== "ADMIN") {
      return NextResponse.json(
        { error: "No tienes permisos para eliminar todos los documentos" },
        { status: 403 }
      );
    }

    const count = await documentService.deleteAllDocuments();

    return NextResponse.json({ success: true, count });
  } catch (error) {
    console.error("❌ [DELETE /api/documents/all] Error:", error);
    const errorMessage = error instanceof Error ? error.message : "Error desconocido";
    return NextResponse.json(
      { error: errorMessage },
      { status: 500 }
    );
  }
}