API proxy con autenticación

import { define, z } from "@jelou/functions";

export default define({
  name: "api-proxy",
  description: "Proxy a una API externa con autenticación inyectada",
  input: z.object({
    fields: z.array(z.string()).optional().describe("Campos a incluir en la respuesta"),
  }),
  config: {
    path: "/users/:id",
    methods: ["GET"],
    cors: {
      origin: "https://app.example.com",
      credentials: true,
    },
  },
  handler: async (input, ctx) => {
    const apiKey = ctx.env.get("INTERNAL_API_KEY");
    const baseUrl = ctx.env.get("API_BASE_URL");

    ctx.log("Proxy request", {
      userId: ctx.params.id,
      fields: input.fields,
    });

    const res = await fetch(
      `${baseUrl}/api/users/${ctx.params.id}`,
      { headers: { Authorization: `Bearer ${apiKey}` } },
    );

    if (!res.ok) {
      ctx.log("Upstream error", { status: res.status, userId: ctx.params.id });
      return { error: "not_found", status: res.status };
    }

    const user = await res.json();
    const result: Record<string, unknown> = {
      id: user.id,
      name: user.name,
      email: user.email,
    };

    if (input.fields?.includes("address")) {
      result.address = user.address;
    }
    if (input.fields?.includes("orders")) {
      result.recentOrders = user.orders?.slice(0, 5);
    }

    return result;
  },
});