export const dynamic = 'force-dynamic';

import { NextRequest, NextResponse } from 'next/server';
import { supabase } from '@/lib/supabase';
import { getAuthContext } from '@/lib/access-control';

export async function GET(request: NextRequest) {
  const ctx = await getAuthContext(request);
  if (!ctx) {
    return NextResponse.json({ error: '未登录' }, { status: 401 });
  }

  let query = supabase
    .from('projects')
    .select(`
      *,
      owner:users!projects_owner_id_fkey(id, name, role, avatar_url),
      pm:users!projects_pm_id_fkey(id, name, role, avatar_url)
    `)
    .order('created_at', { ascending: false });

  if (!ctx.isAdmin) {
    if (ctx.accessibleProjectIds.length === 0) {
      return NextResponse.json([]);
    }
    query = query.in('id', ctx.accessibleProjectIds);
  }

  const { data, error } = await query;

  if (error) {
    return NextResponse.json({ error: error.message }, { status: 500 });
  }

  return NextResponse.json(data);
}

export async function POST(request: NextRequest) {
  const ctx = await getAuthContext(request);
  if (!ctx) {
    return NextResponse.json({ error: '未登录' }, { status: 401 });
  }
  if (!ctx.isAdmin) {
    return NextResponse.json({ error: '无权限' }, { status: 403 });
  }

  const body = await request.json();
  const { name, description, owner_id, pm_id, project_type, member_ids } = body;

  if (!name) {
    return NextResponse.json({ error: '项目名称为必填项' }, { status: 400 });
  }

  const { data: project, error: projectError } = await supabase
    .from('projects')
    .insert({
      name,
      description,
      owner_id,
      pm_id,
      project_type: project_type || 'general',
      status: 'green',
    })
    .select()
    .single();

  if (projectError) {
    return NextResponse.json({ error: projectError.message }, { status: 500 });
  }

  if (member_ids && member_ids.length > 0) {
    const memberRecords = member_ids.map((userId: string) => ({
      project_id: project.id,
      user_id: userId,
    }));

    await supabase.from('project_members').insert(memberRecords);
  }

  return NextResponse.json(project, { status: 201 });
}