import { NextRequest, NextResponse } from 'next/server'
import { getServerSession } from 'next-auth'
import { authOptions } from '@/lib/auth'
import { resolveBrandCenterAccessForUser } from '@/lib/brand-center-access'
import { isSuperAdmin } from '@/lib/department-permission'
import { getTeamFunctions, saveTeamFunction, TeamFunctionError } from '@/lib/team-functions'
import { teamFunctionInputSchema } from '@/lib/team-function-contract'

export const dynamic = 'force-dynamic'

async function identity() {
  const session = await getServerSession(authOptions)
  if (!session?.user?.id) return null
  const user = session.user
  if (!(await resolveBrandCenterAccessForUser(user.id, { role: user.role, isSuperAdmin: user.isSuperAdmin }))) return null
  return { userId: user.id, canEdit: await isSuperAdmin(user.id) }
}

function failure(error: unknown) {
  if (error instanceof TeamFunctionError) return NextResponse.json({ error: error.message }, { status: error.status })
  console.error('团队职能请求失败', error)
  return NextResponse.json({ error: '团队职能暂时无法读取或保存，请重试。' }, { status: 500 })
}

export async function GET() {
  try {
    const access = await identity()
    if (!access) return NextResponse.json({ error: '无权访问品牌中心团队职能。' }, { status: 403 })
    return NextResponse.json(await getTeamFunctions(access.canEdit), { headers: { 'Cache-Control': 'private, no-store' } })
  } catch (error) { return failure(error) }
}

export async function PUT(request: NextRequest) {
  try {
    const access = await identity()
    if (!access?.canEdit) return NextResponse.json({ error: '仅超级管理员可以维护团队职能。' }, { status: 403 })
    const parsed = teamFunctionInputSchema.safeParse(await request.json().catch(() => null))
    if (!parsed.success) return NextResponse.json({ error: '请检查负责人、说明和职责条目的格式或长度。' }, { status: 400 })
    return NextResponse.json(await saveTeamFunction(parsed.data, access.userId))
  } catch (error) { return failure(error) }
}