import { NextRequest, NextResponse } from 'next/server'
import { prisma } from '@/lib/db'
import { getSession } from '@/lib/auth'
import { getProjectWithTenantCheck } from '@/lib/tenant'

// POST: Add a new pendenz
export async function POST(req: NextRequest, { params }: { params: Promise<{ id: string }> }) {
  try {
    const { id } = await params
    const user = await getSession()
    if (!user) return NextResponse.json({ error: 'Nicht autorisiert' }, { status: 401 })
    if (user.role === 'VIEWER') return NextResponse.json({ error: 'Keine Berechtigung' }, { status: 403 })

    const project = await getProjectWithTenantCheck(id, user)
    if (!project) return NextResponse.json({ error: 'Projekt nicht gefunden' }, { status: 404 })

    const body = await req.json()
    const item = await (prisma as any).journalPendenz.create({
      data: {
        projectId: id,
        what: body.what || '',
        who: body.who || null,
        whenHow: body.whenHow || null,
      },
    })
    return NextResponse.json(item)
  } catch (error) {
    console.error('Error creating pendenz:', error)
    return NextResponse.json({ error: 'Failed to create pendenz' }, { status: 500 })
  }
}
