import { eq } from 'drizzle-orm'
import { z } from 'zod'
import { roles, users } from '../../../../db/schema'

const bodySchema = z.object({
  roleId: z.number().int().positive(),
})

export default defineEventHandler(async (event) => {
  await requirePermission(event, 'users.manage')
  const userId = Number(getRouterParam(event, 'id'))
  if (!Number.isInteger(userId) || userId <= 0) {
    throw createError({ statusCode: 400, statusMessage: 'Ungültige ID' })
  }
  const { roleId } = await readValidatedBody(event, bodySchema.parse)
  const db = useDb()

  const [user] = await db.select({ id: users.id }).from(users).where(eq(users.id, userId)).limit(1)
  if (!user) {
    throw createError({ statusCode: 404, statusMessage: 'Nutzer nicht gefunden' })
  }
  const [role] = await db.select({ id: roles.id }).from(roles).where(eq(roles.id, roleId)).limit(1)
  if (!role) {
    throw createError({ statusCode: 404, statusMessage: 'Rolle nicht gefunden' })
  }

  await assignRole(userId, roleId)
  return { ok: true }
})