'use server';

// Add to .env.local — never commit real secrets:
// AUTHORIZATION=Bearer sk-live-xxxxxxxx

const BASE_URL = "https://api.example.com/v1/messages";

export interface RequestPayload {
  model: string;
  max_tokens: number;
  messages: {
    role: string;
    content: string;
  }[];
}

export interface ApiResult<T> {
  ok: boolean;
  data?: T;
  error?: string;
}

export async function callApi(payload: RequestPayload): Promise<ApiResult<unknown>> {
  try {
    const path = BASE_URL;
    const url = path;
    const response = await fetch(url, {
      method: "POST",
      headers: {
      "Content-Type": "application/json",
      "Authorization": process.env.AUTHORIZATION!,
      },
      body: JSON.stringify(payload),
      cache: 'no-store',
    });

    if (!response.ok) {
      const message = await response.text();
      return { ok: false, error: `Request failed (${response.status}): ${message}` };
    }

    const data = await response.json();
    return { ok: true, data };
  } catch (err) {
    return { ok: false, error: err instanceof Error ? err.message : 'Unknown error' };
  }
}