ims/app/api/incidents/[id]/similar/route.ts

export const dynamic = 'force-dynamic'

import { NextRequest, NextResponse } from 'next/server'
import { getSession } from '@/lib/auth/get-session'
import { withUser, asAdmin } from '@/lib/db/with-user'
import { incidents } from '@/lib/db/schema'
import { eq, sql } from 'drizzle-orm'
import { embedText } from '@/lib/claude/embed'
import { getApiKey } from '@/lib/settings'

export async function GET(
  _request: NextRequest,
  { params }: { params: Promise<{ id: string }> }
) {
  const { id } = await params
  const session = await getSession()
  if (!session) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
  if (!['hse', 'admin'].includes(session.role))
    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })

  const googleAiKey = await getApiKey('GOOGLE_AI_API_KEY')

  const [incidentRow] = await withUser(session.sub, async tx =>
    tx.select({ id: incidents.id, description: incidents.description, embedding: incidents.embedding, status: incidents.status })
      .from(incidents).where(eq(incidents.id, id)).limit(1)
  )
  if (!incidentRow) return NextResponse.json({ error: 'Not found' }, { status: 404 })

  let embeddingVec: number[]
  if (incidentRow.embedding) {
    // pg driver may return the vector as a string — parse if needed
    const raw = incidentRow.embedding
    embeddingVec = typeof raw === 'string' ? (JSON.parse(raw) as number[]) : (raw as number[])
  } else {
    try {
      embeddingVec = await embedText(incidentRow.description, googleAiKey)
      if (incidentRow.status !== 'closed') {
        const embStr = `[${embeddingVec.join(',')}]`
        await asAdmin(db =>
          db.execute(sql`UPDATE incidents SET embedding = ${embStr}::vector(768) WHERE id = ${id}::uuid`)
        )
      }
    } catch {
      return NextResponse.json({ error: 'Embedding service unavailable' }, { status: 503 })
    }
  }

  const embStr = `[${embeddingVec.join(',')}]`
  const similar = await withUser(session.sub, async tx => {
    const result = await tx.execute(
      sql`SELECT * FROM match_incidents(${embStr}::vector(768), ${id}::uuid, ${5})`
    )
    return result.rows
  })

  return NextResponse.json(similar ?? [])
}