import { NextResponse } from "next/server";
import { prisma } from "@/lib/prisma";
import { requireRole } from "@/lib/auth";
import { NOTICE_AUDIENCES } from "@/lib/constants";

type Params = { params: Promise<{ id: string }> };

/** Update a notice. */
export async function PUT(req: Request, { params }: Params) {
  const session = await requireRole("INSTITUTION_ADMIN");
  if (!session || !session.institutionId) {
    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
  }
  const { id } = await params;
  try {
    const body = await req.json();
    const notice = await prisma.notice.findFirst({
      where: { id: Number(id), institutionId: session.institutionId },
    });
    if (!notice) return NextResponse.json({ error: "Not found" }, { status: 404 });

    const title = String(body.title ?? notice.title).trim();
    const text = String(body.body ?? notice.body).trim();
    if (!title || !text) return NextResponse.json({ error: "Missing fields" }, { status: 400 });

    await prisma.notice.update({
      where: { id: notice.id },
      data: {
        title,
        titleBn: body.titleBn !== undefined ? String(body.titleBn).trim() || null : notice.titleBn,
        body: text,
        audience: NOTICE_AUDIENCES.includes(body.audience as never) ? body.audience : notice.audience,
        publishDate: body.publishDate ? new Date(String(body.publishDate)) : notice.publishDate,
        expiryDate:
          body.expiryDate !== undefined
            ? body.expiryDate
              ? new Date(String(body.expiryDate))
              : null
            : notice.expiryDate,
        isPinned: typeof body.isPinned === "boolean" ? body.isPinned : notice.isPinned,
        isActive: typeof body.isActive === "boolean" ? body.isActive : notice.isActive,
      },
    });
    return NextResponse.json({ success: true });
  } catch {
    return NextResponse.json({ error: "Could not update notice" }, { status: 500 });
  }
}

/** Delete a notice. */
export async function DELETE(_req: Request, { params }: Params) {
  const session = await requireRole("INSTITUTION_ADMIN");
  if (!session || !session.institutionId) {
    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
  }
  const { id } = await params;
  const notice = await prisma.notice.findFirst({
    where: { id: Number(id), institutionId: session.institutionId },
  });
  if (!notice) return NextResponse.json({ error: "Not found" }, { status: 404 });
  await prisma.notice.delete({ where: { id: notice.id } });
  return NextResponse.json({ success: true });
}