HUBZ

import { NextResponse } from 'next/server';
import { db } from '@/lib/db';

// Autonomous Client Site Deployment Endpoint
export async function POST(req) {
  const token = req.headers.get('authorization')?.replace('Bearer ', '');
  if (token !== process.env.HUBZ_DEPLOY_SECRET) {
    return NextResponse.json({ error: 'Unauthorized deployment key' }, { status: 401 });
  }

  const { slug, businessName, industry, htmlBundle, metadata } = await req.json();

  // Atomically register client site in PostgreSQL registry
  const { data, error } = await db
    .from('hubz_sites')
    .upsert({
      slug,
      business_name: businessName,
      industry,
      html_bundle: htmlBundle,
      metadata,
      deployed_at: new Date().toISOString(),
      active: true
    }, { onConflict: 'slug' })
    .select()
    .single();

  if (error) {
    return NextResponse.json({ error: error.message }, { status: 500 });
  }

  return NextResponse.json({
    success: true,
    url: `https://hubz.my.id/${slug}`,
    siteId: data.id
  });
}