import { NextResponse } from "next/server";
import { prisma } from "@/lib/prisma";
import { requireRole } from "@/lib/auth";

type Params = { params: Promise<{ id: string }> };

/** Approve / reject a leave request: { approve: boolean }. */
export async function PUT(req: Request, { params }: Params) {
  const session = await requireRole("INSTITUTION_ADMIN");
  if (!session || !session.institutionId) {
    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
  }
  const { id } = await params;

  try {
    const body = await req.json();
    const leave = await prisma.leaveRequest.findFirst({
      where: { id: Number(id), institutionId: session.institutionId },
    });
    if (!leave) return NextResponse.json({ error: "Not found" }, { status: 404 });
    if (leave.status !== "PENDING") {
      return NextResponse.json({ error: "Already decided" }, { status: 400 });
    }

    await prisma.leaveRequest.update({
      where: { id: leave.id },
      data: {
        status: body.approve ? "APPROVED" : "REJECTED",
        decidedAt: new Date(),
      },
    });
    return NextResponse.json({ success: true });
  } catch {
    return NextResponse.json({ error: "Could not update leave request" }, { status: 500 });
  }
}