import { requireAuth } from '~/server/utils/auth'
import { prisma } from '~/server/utils/prisma'

export default defineEventHandler(async (event) => {
  const adminUser = requireAuth(event)
  const groupId = getRouterParam(event, 'id')
  const body = await readBody(event)
  const { email, role = 'member' } = body

  if (!groupId || !email) {
    throw createError({ statusCode: 400, message: 'Group ID and Email are required' })
  }

  // 1. Проверяем, является ли текущий пользователь админом группы или глобальным админом
  const group = await prisma.group.findUnique({
    where: { id: groupId }
  })

  if (!group || (group.ownerId !== adminUser.id && adminUser.role !== 'admin')) {
    throw createError({ statusCode: 403, message: 'Only group owners or admins can add members' })
  }

  // 2. Ищем пользователя по email
  const userToAdd = await prisma.user.findUnique({
    where: { email }
  })

  if (!userToAdd) {
    throw createError({ statusCode: 404, message: 'User with this email not found in system' })
  }

  // 3. Добавляем в группу
  try {
    const membership = await prisma.groupMember.upsert({
      where: {
        userId_groupId: {
          userId: userToAdd.id,
          groupId: groupId
        }
      },
      update: { role },
      create: {
        userId: userToAdd.id,
        groupId: groupId,
        role
      }
    })

    return { success: true, membership }
  } catch (e) {
    throw createError({ statusCode: 500, message: 'Failed to add member to group' })
  }
})