import { verifyGorkWebhook } from "@gorkmail/sdk"

export async function handleWebhook(req: Request) {
  const signature = req.headers.get("X-Gork-Signature")
  const rawBody = await req.text()

  // 1. Verify webhook authenticity
  const isValid = await verifyGorkWebhook(rawBody, signature, process.env.WEBHOOK_SECRET)
  if (!isValid) return new Response("Unauthorized", { status: 401 })

  const event = JSON.parse(rawBody)

  if (event.event === "email.received") {
    const { from, subject, text, threadId, inboxId } = event.data

    // 2. Feed sanitized text to your LLM agent
    const aiResponse = await generateAgentReply({
      prompt: `Prospect: ${from}\nSubject: ${subject}\nBody: ${text}`,
    })

    // 3. Send threaded reply
    await client.messages.send({
      inboxId,
      to: [from],
      subject: `Re: ${subject}`,
      text: aiResponse,
      inReplyTo: threadId
    })
  }

  return new Response("OK", { status: 200 })
}