import { NextResponse } from 'next/server'
import { cookies } from 'next/headers'
import { verifyJwt } from '@/lib/auth'
import { generateTemplateBuffer } from '@/lib/excel'

export async function GET() {
  const cookieStore = await cookies()
  const token = cookieStore.get('session_assets')?.value
  if (!token) return NextResponse.json({ error: '未授权' }, { status: 401 })
  const payload = verifyJwt(token)
  if (!payload) return NextResponse.json({ error: '会话已过期' }, { status: 401 })

  const buffer = generateTemplateBuffer()
  return new NextResponse(buffer, {
    headers: {
      'Content-Type': 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
      'Content-Disposition': 'attachment; filename="asset_import_template.xlsx"',
    },
  })
}