import { requireAuth } from '~/server/utils/auth'
import { prisma } from '~/server/utils/prisma'

export default defineEventHandler(async (event) => {
  const id = getRouterParam(event, 'id')
  if (!id) throw createError({ statusCode: 400, message: 'Canvas ID is required' })

  const canvas = await prisma.canvas.findUnique({ where: { id } })
  if (!canvas) throw createError({ statusCode: 404, message: 'Canvas not found' })

  const user = tryLazyEventHandler(event, () => requireAuth(event)) || { id: null, role: 'guest' }

  // Определение роли
  let userRole = 'viewer'
  if (user.id === canvas.ownerId) userRole = 'owner'
  else if (user.role === 'admin') userRole = 'admin'
  else if (canvas.groupId) {
    const membership = await prisma.groupMember.findUnique({
      where: { userId_groupId: { userId: user.id as string, groupId: canvas.groupId } }
    })
    if (membership) userRole = membership.role
    else if (!canvas.isPublic) throw createError({ statusCode: 403, message: 'Access denied' })
  } else if (!canvas.isPublic) {
    throw createError({ statusCode: 403, message: 'Access denied' })
  }

  return { canvas, role: userRole }
})