import { NextRequest, NextResponse } from "next/server";
import { assertSameOrigin, requireUser } from "@/lib/auth/session";
import { attest, transition, type Transition } from "@/lib/listings/service";
import { apiError, handle } from "@/lib/api";
export const dynamic = "force-dynamic";
const ACTIONS = new Set(["publish", "pause", "resume", "archive", "mark-sold", "mark-rented", "reopen", "attest"]);
export async function POST(_req: NextRequest, { params }: { params: Promise<{ id: string; action: string }> }) {
  try {
    await assertSameOrigin(); const u = await requireUser(); const { id, action } = await params;
    if (!ACTIONS.has(action)) return apiError(404, "not_found", "Action inconnue");
    if (action === "attest") { await attest(id, u.id, u.roles); return NextResponse.json({ ok: true }); }
    const r = await transition(id, u.id, u.roles, action as Transition);
    if (r.problems.length) return NextResponse.json({ ok: false, problems: r.problems, status: r.listing.status }, { status: 422 });
    return NextResponse.json({ ok: true, status: r.listing.status, listing: { id: r.listing.id, slug: r.listing.slug, status: r.listing.status, moderationNote: r.listing.moderationNote } });
  } catch (e) { return handle(e); }
}