import { NextResponse } from 'next/server';

export const runtime = 'nodejs';
export const dynamic = 'force-dynamic';

/**
 * GET /api/version — deployment identity for automated verification.
 *
 * Returns only non-sensitive build identity (no env values, no config). The
 * scheduled prod-smoke workflow compares `commit` with the current main SHA so
 * "the container is up" is never confused with "the intended commit is live".
 */
export async function GET() {
  const commit =
    process.env.SOURCE_COMMIT ?? process.env.GIT_COMMIT_SHA ?? process.env.VERCEL_GIT_COMMIT_SHA ?? null;
  return NextResponse.json(
    {
      service: '0pt-web',
      commit,
      built_at: process.env.BUILD_TIME ?? null,
    },
    { headers: { 'cache-control': 'no-store' } },
  );
}