import { NextRequest, NextResponse } from 'next/server'
import prisma from '../../../../lib/prisma'
import { getAuthUser } from '@/lib/auth-utils'

// GET /api/offers/[id]
export async function GET(
  _request: NextRequest, 
  context: { params: Promise<{ id: string }> }
): Promise<Response> {
    try {
        const { id } = await context.params
        const offer = await prisma.offer.findUnique({
            where: { id },
            include: { business: true },
        })
        if (!offer) return NextResponse.json({ error: 'Non trouvé' }, { status: 404 })
        return NextResponse.json(offer)
    } catch (error) {
        console.error('GET /api/offers/[id] error:', error)
        return NextResponse.json({ error: 'Erreur serveur' }, { status: 500 })
    }
}

// PATCH /api/offers/[id] (Owner or Admin only)
export async function PATCH(
  request: NextRequest, 
  context: { params: Promise<{ id: string }> }
): Promise<Response> {
    try {
        const authUser = await getAuthUser(request)
        if (!authUser) {
            return NextResponse.json({ error: 'Authentification requise' }, { status: 401 })
        }

        const { id } = await context.params
        const existing = await prisma.offer.findUnique({
            where: { id },
            include: { business: { select: { ownerId: true } } }
        })

        if (!existing) {
            return NextResponse.json({ error: 'Offre non trouvée' }, { status: 404 })
        }

        if (existing.business.ownerId !== authUser.id && authUser.role !== 'ADMIN') {
            return NextResponse.json({ error: 'Non autorisé' }, { status: 403 })
        }

        const body = await request.json()
        const { title, description, price, type, imageUrl } = body

        const offer = await prisma.offer.update({
            where: { id },
            data: {
                ...(title !== undefined ? { title } : {}),
                ...(description !== undefined ? { description } : {}),
                ...(price !== undefined ? { price } : {}),
                ...(type !== undefined ? { type } : {}),
                ...(imageUrl !== undefined ? { imageUrl } : {}),
            },
            include: { business: true },
        })
        return NextResponse.json(offer)
    } catch (error) {
        console.error('PATCH /api/offers/[id] error:', error)
        return NextResponse.json({ error: 'Erreur lors de la mise à jour' }, { status: 500 })
    }
}

// DELETE /api/offers/[id] (Owner or Admin only)
export async function DELETE(
  request: NextRequest, 
  context: { params: Promise<{ id: string }> }
): Promise<Response> {
    try {
        const authUser = await getAuthUser(request)
        if (!authUser) {
            return NextResponse.json({ error: 'Authentification requise' }, { status: 401 })
        }

        const { id } = await context.params
        const existing = await prisma.offer.findUnique({
            where: { id },
            include: { business: { select: { ownerId: true } } }
        })

        if (!existing) {
            return NextResponse.json({ error: 'Offre non trouvée' }, { status: 404 })
        }

        if (existing.business.ownerId !== authUser.id && authUser.role !== 'ADMIN') {
            return NextResponse.json({ error: 'Non autorisé' }, { status: 403 })
        }

        await prisma.offer.delete({ where: { id } })
        return NextResponse.json({ success: true })
    } catch (error) {
        console.error('DELETE /api/offers/[id] error:', error)
        return NextResponse.json({ error: 'Erreur lors de la suppression' }, { status: 500 })
    }
}