0pt/src/auth/require-order-owner.ts

import { NextResponse, type NextRequest } from "next/server";
import { requireRouteAuth } from "./require-route-auth";
import type { OrderOwner } from "@/lib/orders-store";

export type OrderOwnerAuthResult =
  | { response: NextResponse; owner?: never }
  | { response?: never; owner: OrderOwner };

/** Payment/order routes require a real verified principal even in dev escape mode. */
export async function requireOrderOwner(req: NextRequest): Promise<OrderOwnerAuthResult> {
  const auth = await requireRouteAuth(req);
  if (auth.response) return { response: auth.response };
  const principal = auth.ctx.principal;
  if (!principal?.tenantId || !principal.sub) {
    return {
      response: NextResponse.json({ error: "OPT_UNAUTHENTICATED", message: "Verified buyer required" }, { status: 401 }),
    };
  }
  return { owner: { tenantId: principal.tenantId, subject: principal.sub } };
}