import express from 'express';
import cors from 'cors';
import { createOpenKit403, inMemoryLRU } from '@openkitx403/server';
import { Connection, PublicKey } from '@solana/web3.js';

const app = express();
app.use(cors());

// Initialize OpenKit403
const openkit = createOpenKit403({
  issuer: 'nft-gated-api',
  audience: 'http://localhost:3000',
  ttlSeconds: 60,
  replayStore: inMemoryLRU(),
  
  // Token gate: require specific NFT
  tokenGate: async (address: string) => {
    const connection = new Connection('https://api.mainnet-beta.solana.com');
    const pubkey = new PublicKey(address);
    
    // Check if wallet owns NFT from specific collection
    const NFT_COLLECTION = new PublicKey('YOUR_NFT_MINT_ADDRESS');
    
    const tokenAccounts = await connection.getParsedTokenAccountsByOwner(
      pubkey,
      { mint: NFT_COLLECTION }
    );
    
    return tokenAccounts.value.length > 0;
  }
});

// Public route
app.get('/api/public', (req, res) => {
  res.json({ message: 'This is public data' });
});

// Protected routes
const protectedRouter = express.Router();
protectedRouter.use(openkit.middleware());

protectedRouter.get('/profile', (req, res) => {
  const user = (req as any).openkitx403User;
  res.json({
    address: user.address,
    username: `NFT Holder ${user.address.slice(0, 6)}`,
    tier: 'Premium',
    joinedAt: new Date().toISOString()
  });
});

protectedRouter.get('/exclusive-content', (req, res) => {
  res.json({
    content: 'This is exclusive content only for NFT holders!',
    secretCode: 'HOLDER-' + Math.random().toString(36).substr(2, 9)
  });
});

app.use('/api/protected', protectedRouter);

const PORT = 3000;
app.listen(PORT, () => {
  console.log(`✅ Server running on http://localhost:${PORT}`);
});