server.js

const express = require("express");
const cors = require("cors");
const fs = require("fs").promises;
const path = require("path");

const app = express();
const port = process.env.PORT || 3000;
const DB_PATH = path.join(__dirname, "db.json");

app.use(cors());
app.use(express.json());

async function readDB() {
  const data = await fs.readFile(DB_PATH, "utf8");
  return JSON.parse(data);
}

async function writeDB(data) {
  await fs.writeFile(DB_PATH, JSON.stringify(data, null, 2));
}

app.get("/", (req, res) => {
  res.json({
    status: "OK",
    message: "SpicX API is running",
    endpoints: {
      data: "/data",
      products: "/products",
      categories: "/categories",
      users: "/users",
      carts: "/carts",
    },
  });
});

app.get("/data", async (req, res) => {
  try {
    const db = await readDB();
    res.json(db);
  } catch (error) {
    res.status(500).json({ error: "Internal server error" });
  }
});

app.get("/products", async (req, res) => {
  try {
    const db = await readDB();
    res.json(db.products || []);
  } catch (error) {
    res.status(500).json({ error: "Internal server error" });
  }
});

app.get("/products/:id", async (req, res) => {
  try {
    const db = await readDB();
    const product = db.products.find((p) => p.id === parseInt(req.params.id));
    product ? res.json(product) : res.status(404).json({ message: "Not found" });
  } catch (error) {
    res.status(500).json({ error: "Internal server error" });
  }
});

app.get("/categories", async (req, res) => {
  try {
    const db = await readDB();
    res.json(db.categories || []);
  } catch (error) {
    res.status(500).json({ error: "Internal server error" });
  }
});

app.get("/users", async (req, res) => {
  try {
    const db = await readDB();
    res.json(db.users || []);
  } catch (error) {
    res.status(500).json({ error: "Internal server error" });
  }
});

app.post("/users", async (req, res) => {
  try {
    const db = await readDB();
    const newUser = {
      id: Date.now(),
      ...req.body,
      role: "user",
      isActive: true,
      createdAt: new Date().toISOString(),
    };

    if (!db.users) db.users = [];

    const existing = db.users.find(u => u.email === newUser.email);
    if (existing) {
      return res.status(400).json({ error: "Email already registered" });
    }

    db.users.push(newUser);
    await writeDB(db);

    const { password, ...userWithoutPassword } = newUser;
    res.status(201).json(userWithoutPassword);
  } catch (error) {
    console.error("Error creating user:", error);
    res.status(500).json({ error: "Internal server error" });
  }
});

app.get("/carts", async (req, res) => {
  try {
    const { userId } = req.query;
    if (!userId) return res.status(400).json({ error: "userId required" });

    const db = await readDB();
    if (!db.carts) db.carts = [];

    const userCart = db.carts.find(c => c.userId == userId);
    res.json(userCart ? userCart.items : []);
  } catch (error) {
    res.status(500).json({ error: "Internal server error" });
  }
});

app.post("/carts", async (req, res) => {
  try {
    const { userId, items } = req.body;
    if (!userId) return res.status(400).json({ error: "userId required" });

    const db = await readDB();
    if (!db.carts) db.carts = [];

    const index = db.carts.findIndex(c => c.userId == userId);
    if (index >= 0) {
      db.carts[index].items = items;
    } else {
      db.carts.push({ userId, items });
    }

    await writeDB(db);
    res.json({ userId, items });
  } catch (error) {
    console.error("Error saving cart:", error);
    res.status(500).json({ error: "Internal server error" });
  }
});

app.listen(port, () => {
  console.log(`✅ API running on port ${port}`);
});