WINDOW LAND

from fastapi import FastAPI, HTTPException
from pydantic import BaseModel
from db import get_pricing_for

app = FastAPI()

class QuoteRequest(BaseModel):
    service: str         # e.g. "curtain_wall"
    width_m: float
    height_m: float
    finish: str          # "powder_coated" | "anodised" | "polished"
    glass_type: str      # "tempered" | "laminated" | "low_e"

@app.post("/quote")
async def quote(req: QuoteRequest):
    area = req.width_m * req.height_m
    if area <= 0 or area > 200:
        raise HTTPException(400, "Area out of range")

    pricing = await get_pricing_for(req.service)
    if pricing is None:
        raise HTTPException(404, "Service not priced")

    finish_mult = pricing["finish_multipliers"][req.finish]
    glass_mult = pricing["glass_multipliers"][req.glass_type]

    base_aed = pricing["base_aed_per_m2"] * area
    total_aed = round(base_aed * finish_mult * glass_mult, 2)

    return {
        "service": req.service,
        "area_m2": round(area, 2),
        "total_aed": total_aed,
        "pricing_version": pricing["version"],
    }

import { jwtVerify, type JWTPayload } from "jose";
import { cookies } from "next/headers";

const SECRET = new TextEncoder().encode(process.env.JWT_SECRET!);

export type Role = "admin" | "editor" | "viewer";

export interface AdminClaims extends JWTPayload {
  sub: string;
  role: Role;
}

export async function getAdmin(required?: Role): Promise<AdminClaims> {
  const token = (await cookies()).get("admin_token")?.value;
  if (!token) throw new Error("Not authenticated");

  const { payload } = await jwtVerify<AdminClaims>(token, SECRET);

  if (required && rank(payload.role) < rank(required)) {
    throw new Error(`Requires ${required}, has ${payload.role}`);
  }
  return payload;
}

function rank(r: Role) {
  return { viewer: 0, editor: 1, admin: 2 }[r];
}