import { NextResponse } from "next/server";
import { requireUser } from "@/lib/auth";
import { db } from "@/lib/db";
import { externalUrl } from "@/lib/http";
import { queuePull } from "@/lib/sync";

export async function POST(req: Request, { params }: { params: Promise<{ id: string }> }) {
  try {
    const user = await requireUser(); const { id: rawId } = await params; const id = Number(rawId); const form = await req.formData(); const action = String(form.get("action") || "");
    const source = db.prepare("SELECT id,user_id FROM sources WHERE id=?").get(id) as { id: number; user_id: number } | undefined;
    const member = db.prepare("SELECT role FROM source_members WHERE source_id=? AND user_id=?").get(id, user.id);
    if (!source || !member) throw new Error("Source not found");
    const owner = source.user_id === user.id;
    if (action === "rename") {
      const name = String(form.get("name") || "").trim(); if (!owner || !name || name.length > 80) throw new Error("Only the owner can rename a source");
      db.prepare("UPDATE sources SET name=? WHERE id=?").run(name, id);
    } else if (action === "set-enabled") {
      if (!owner) throw new Error("Only the owner can change source status"); const enabled = String(form.get("enabled")) === "1";
      db.prepare("UPDATE sources SET is_enabled=?,disabled_at=CASE WHEN ? THEN NULL ELSE CURRENT_TIMESTAMP END,sync_status=CASE WHEN ? THEN 'pending' ELSE 'disabled' END WHERE id=?").run(enabled ? 1 : 0, enabled ? 1 : 0, enabled ? 1 : 0, id);
      if (enabled) queuePull(id, "manual");
    } else if (action === "leave") {
      if (owner) throw new Error("Transfer ownership or delete the source before leaving");
      db.prepare("DELETE FROM source_members WHERE source_id=? AND user_id=?").run(id, user.id);
    } else if (action === "transfer") {
      if (!owner) throw new Error("Only the owner can transfer ownership"); const username = String(form.get("username") || "").trim();
      const target = db.prepare("SELECT u.id FROM users u JOIN source_members sm ON sm.user_id=u.id WHERE sm.source_id=? AND u.username=?").get(id, username) as { id: number } | undefined;
      if (!target || target.id === user.id) throw new Error("Choose another existing member");
      const transfer = db.transaction(() => { db.prepare("UPDATE sources SET user_id=? WHERE id=?").run(target.id, id); db.prepare("UPDATE source_members SET role='member' WHERE source_id=? AND user_id=?").run(id, user.id); db.prepare("UPDATE source_members SET role='owner' WHERE source_id=? AND user_id=?").run(id, target.id); });
      transfer();
    } else if (action === "delete") {
      if (!owner) throw new Error("Only the owner can delete a source");
      const remove = db.transaction(() => { db.prepare("DELETE FROM posts WHERE source_id=? AND origin='memos'").run(id); db.prepare("UPDATE posts SET source_id=NULL WHERE source_id=? AND origin='hub'").run(id); db.prepare("DELETE FROM sources WHERE id=?").run(id); });
      remove();
    } else throw new Error("Unknown source action");
    return NextResponse.redirect(externalUrl(req, "/dashboard?source=updated"));
  } catch (error) { return NextResponse.redirect(externalUrl(req, "/dashboard?error=" + encodeURIComponent(error instanceof Error ? error.message : "source"))); }
}