server.js

const express = require('express');
const cors = require('cors');
require('dotenv').config();

const app = express();
const PORT = process.env.PORT || 5000;

// Middleware
app.use(cors());
// Request size limits to prevent large payload attacks
app.use(express.json({ limit: '1mb' }));
app.use(express.urlencoded({ extended: true, limit: '1mb' }));
app.use(express.static(__dirname));

const verifyToken = require('./middleware/authMiddleware');
const aiRoutes = require('./routes/aiRoutes');

// Routes
app.use('/api/ai', aiRoutes);

// Public config endpoint — only exposes non-secret client-side keys
app.get('/api/config', (req, res) => {
    res.json({
        googleMapsApiKey: process.env.GOOGLE_MAPS_API_KEY || ''
    });
});

// Test Protected Route
app.get('/api/test-auth', verifyToken, (req, res) => {
    res.json({ message: 'Authenticated successfully!', user: req.user });
});

// Route: STABLE Database Count (Exact Firestore count())
app.get('/api/buyers/count', async (req, res) => {
    try {
        const admin = require('./config/firebaseAdmin');
        const db = admin.firestore();
        const snapshot = await db.collection('users').count().get();
        const count = snapshot.data().count;
        res.json({ count });
    } catch (err) {
        console.error('Firestore count error:', err);
        res.status(500).json({ error: 'Database error' });
    }
});

if (require.main === module) {
    app.listen(PORT, () => {
        console.log(`Server running on port ${PORT}`);
    });
}

module.exports = app;