import { requireAuth } from '~/server/utils/auth'
import { prisma } from '~/server/utils/prisma'

export default defineEventHandler(async (event) => {
  const adminUser = requireAuth(event)
  const groupId = getRouterParam(event, 'id')
  const body = await readBody(event)
  const { email, userId, role = 'member' } = body

  if (!groupId || (!email && !userId)) {
    throw createError({ statusCode: 400, message: 'Group ID and either Email or User ID are required' })
  }

  // 1. Проверяем права
  const group = await prisma.group.findUnique({ where: { id: groupId } })
  if (!group || (group.ownerId !== adminUser.id && adminUser.role !== 'admin')) {
    throw createError({ statusCode: 403, message: 'Only group owners or admins can add members' })
  }

  // 2. Находим пользователя
  let userToAdd = null
  if (userId) {
    userToAdd = await prisma.user.findUnique({ where: { id: userId } })
  } else if (email) {
    userToAdd = await prisma.user.findUnique({ where: { email } })
  }

  if (!userToAdd) {
    throw createError({ statusCode: 404, message: 'User not found' })
  }

  // 3. Добавляем в группу
  try {
    const membership = await prisma.groupMember.upsert({
      where: {
        userId_groupId: {
          userId: userToAdd.id,
          groupId: groupId
        }
      },
      update: { role },
      create: {
        userId: userToAdd.id,
        groupId: groupId,
        role
      }
    })

    return { success: true, membership }
  } catch (e) {
    throw createError({ statusCode: 500, message: 'Failed to add member to group' })
  }
})