import { NextResponse } from "next/server";
import { prisma } from "@/lib/prisma";
import { requireAnyRole } from "@/lib/auth";

type Params = { params: Promise<{ id: string }> };

const STATUSES = ["NEW", "CONTACTED", "ADMITTED", "CLOSED"];

/** Update inquiry status (follow-up workflow). */
export async function PATCH(req: Request, { params }: Params) {
  const session = await requireAnyRole(["INSTITUTION_ADMIN", "TEACHER"]);
  if (!session || !session.institutionId) {
    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
  }

  const { id } = await params;
  const body = await req.json().catch(() => ({}));
  const status = String(body.status ?? "");
  if (!STATUSES.includes(status)) {
    return NextResponse.json({ error: "Invalid status" }, { status: 400 });
  }

  try {
    const inquiry = await prisma.admissionInquiry.updateMany({
      where: { id: Number(id), institutionId: session.institutionId },
      data: { status },
    });
    if (inquiry.count === 0) {
      return NextResponse.json({ error: "Not found" }, { status: 404 });
    }
    return NextResponse.json({ ok: true });
  } catch {
    return NextResponse.json({ error: "Could not update inquiry" }, { status: 500 });
  }
}