import { NextResponse } from "next/server";
import { prisma } from "@/lib/prisma";
import { requireRole } from "@/lib/auth";

type Params = { params: Promise<{ id: string }> };

/** Update a member's route/stop/fare/status. */
export async function PUT(req: Request, { params }: Params) {
  const session = await requireRole("INSTITUTION_ADMIN");
  if (!session || !session.institutionId) {
    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
  }
  const { id } = await params;

  try {
    const body = await req.json();
    const member = await prisma.transportMember.findFirst({
      where: { id: Number(id), institutionId: session.institutionId },
    });
    if (!member) return NextResponse.json({ error: "Not found" }, { status: 404 });

    let routeId = member.routeId;
    if (body.routeId) {
      const route = await prisma.transportRoute.findFirst({
        where: { id: Number(body.routeId), institutionId: session.institutionId },
      });
      if (!route) return NextResponse.json({ error: "Route not found" }, { status: 404 });
      routeId = route.id;
    }

    let stopId: number | null = member.stopId;
    if (body.stopId !== undefined) {
      if (!body.stopId) {
        stopId = null;
      } else {
        const stop = await prisma.transportStop.findFirst({
          where: { id: Number(body.stopId), routeId, institutionId: session.institutionId },
        });
        if (!stop) return NextResponse.json({ error: "Stop not on this route" }, { status: 400 });
        stopId = stop.id;
      }
    }

    await prisma.transportMember.update({
      where: { id: member.id },
      data: {
        routeId,
        stopId,
        monthlyFare:
          body.monthlyFare !== undefined && Number(body.monthlyFare) >= 0
            ? Number(body.monthlyFare)
            : member.monthlyFare,
        status: body.status === "INACTIVE" ? "INACTIVE" : body.status === "ACTIVE" ? "ACTIVE" : member.status,
      },
    });
    return NextResponse.json({ success: true });
  } catch {
    return NextResponse.json({ error: "Could not update member" }, { status: 500 });
  }
}

/** Remove a student from transport (keeps past payments). */
export async function DELETE(_req: Request, { params }: Params) {
  const session = await requireRole("INSTITUTION_ADMIN");
  if (!session || !session.institutionId) {
    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
  }
  const { id } = await params;

  const member = await prisma.transportMember.findFirst({
    where: { id: Number(id), institutionId: session.institutionId },
  });
  if (!member) return NextResponse.json({ error: "Not found" }, { status: 404 });

  await prisma.$transaction([
    prisma.transportPayment.deleteMany({ where: { memberId: member.id } }),
    prisma.transportMember.delete({ where: { id: member.id } }),
  ]);
  return NextResponse.json({ success: true });
}