import { NextResponse } from "next/server";
import { prisma } from "@/lib/prisma";
import { requireCampusInstitution } from "@/lib/auth";

type Params = { params: Promise<{ id: string }> };

/** Update an enrollment status ({ status: "ENROLLED" | "DROPPED" | "RETAKE" }). */
export async function PATCH(req: Request, { params }: Params) {
  const session = await requireCampusInstitution();
  if (!session || !session.institutionId) {
    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
  }

  const { id } = await params;
  const enrollment = await prisma.cuEnrollment.findFirst({
    where: { id: Number(id), institutionId: session.institutionId },
    select: { id: true },
  });
  if (!enrollment) return NextResponse.json({ error: "Not found" }, { status: 404 });

  try {
    const body = await req.json();
    const status = String(body.status ?? "");
    if (!["ENROLLED", "DROPPED", "RETAKE"].includes(status)) {
      return NextResponse.json({ error: "Invalid status" }, { status: 400 });
    }
    const updated = await prisma.cuEnrollment.update({ where: { id: enrollment.id }, data: { status } });
    return NextResponse.json({ enrollment: updated });
  } catch {
    return NextResponse.json({ error: "Could not update enrollment" }, { status: 500 });
  }
}

/** Remove an enrollment. */
export async function DELETE(_req: Request, { params }: Params) {
  const session = await requireCampusInstitution();
  if (!session || !session.institutionId) {
    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
  }

  const { id } = await params;
  const enrollment = await prisma.cuEnrollment.findFirst({
    where: { id: Number(id), institutionId: session.institutionId },
    select: { id: true },
  });
  if (!enrollment) return NextResponse.json({ error: "Not found" }, { status: 404 });

  try {
    await prisma.cuEnrollment.delete({ where: { id: enrollment.id } });
    return NextResponse.json({ ok: true });
  } catch {
    return NextResponse.json({ error: "Could not delete enrollment" }, { status: 500 });
  }
}