const RECAPTCHA_SECRET = process.env.RECAPTCHA_SECRET || "6Le1vXklAAAAAAQkWbOLNSCFxcK2hD58oXTDH0GM";

export async function verifyRecaptcha(token: string | null): Promise<boolean> {
  if (process.env.NODE_ENV === "development") return true;
  if (!token) return false;
  try {
    const body = new URLSearchParams({ secret: RECAPTCHA_SECRET, response: token });
    const res = await fetch("https://www.google.com/recaptcha/api/siteverify", {
      method: "POST",
      headers: { "Content-Type": "application/x-www-form-urlencoded" },
      body: body.toString(),
    });
    const json = (await res.json()) as { success?: boolean };
    return json.success === true;
  } catch {
    return false;
  }
}