supabase/apps/studio/pages/api/get-deployment-commit.ts

import type { NextApiRequest, NextApiResponse } from 'next'
import { z } from 'zod'

const commitSchema = z.object({
  committer: z.object({ date: z.string().datetime({ offset: true }) }),
})

async function getCommitTime(commitSha: string) {
  try {
    const response = await fetch(
      `https://api.github.com/repos/supabase/supabase/git/commits/${commitSha}`,
      {
        headers: {
          Accept: 'application/vnd.github+json',
          'X-GitHub-Api-Version': '2026-03-10',
          'User-Agent': 'Supabase-Studio',
        },
      }
    )

    if (!response.ok) {
      throw new Error('Failed to fetch commit details')
    }

    const data = commitSchema.parse(await response.json())
    return new Date(data.committer.date).toISOString()
  } catch (error) {
    console.error('Error fetching commit time:', error)
    return 'unknown'
  }
}

export default async function handler(
  _req: NextApiRequest,
  res: NextApiResponse<{ commitSha: string; commitTime: string }>
) {
  const commitSha = process.env.VERCEL_GIT_COMMIT_SHA || 'development'
  const commitTime = commitSha !== 'development' ? await getCommitTime(commitSha) : 'unknown'

  // Valid metadata is identical for all visitors; failed lookups must remain retryable.
  res.setHeader(
    'Cache-Control',
    commitTime === 'unknown' ? 'private, no-store' : 'public, max-age=0, s-maxage=600'
  )

  res.status(200).json({
    commitSha,
    commitTime,
  })
}