import { NextResponse } from "next/server";
import { prisma } from "@/lib/prisma";
import { requireRole } from "@/lib/auth";
import { COMPLAINT_STATUSES } from "@/lib/constants";

type Params = { params: Promise<{ id: string }> };

/** Update complaint status / add response note. */
export async function PUT(req: Request, { params }: Params) {
  const session = await requireRole("INSTITUTION_ADMIN");
  if (!session || !session.institutionId) {
    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
  }
  const { id } = await params;
  try {
    const body = await req.json();
    const complaint = await prisma.complaint.findFirst({
      where: { id: Number(id), institutionId: session.institutionId },
    });
    if (!complaint) return NextResponse.json({ error: "Not found" }, { status: 404 });

    const status = COMPLAINT_STATUSES.includes(body.status as never) ? body.status : complaint.status;
    await prisma.complaint.update({
      where: { id: complaint.id },
      data: {
        status,
        responseNote:
          body.responseNote !== undefined ? String(body.responseNote).trim() || null : complaint.responseNote,
        resolvedAt:
          status === "RESOLVED" || status === "REJECTED" ? complaint.resolvedAt ?? new Date() : null,
      },
    });
    return NextResponse.json({ success: true });
  } catch {
    return NextResponse.json({ error: "Could not update complaint" }, { status: 500 });
  }
}

/** Delete a complaint. */
export async function DELETE(_req: Request, { params }: Params) {
  const session = await requireRole("INSTITUTION_ADMIN");
  if (!session || !session.institutionId) {
    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
  }
  const { id } = await params;
  const complaint = await prisma.complaint.findFirst({
    where: { id: Number(id), institutionId: session.institutionId },
  });
  if (!complaint) return NextResponse.json({ error: "Not found" }, { status: 404 });
  await prisma.complaint.delete({ where: { id: complaint.id } });
  return NextResponse.json({ success: true });
}