import { NextResponse } from "next/server";
import { requireSessionUser } from "@/lib/server/session";
import { requireActiveGroup } from "@/lib/server/groups";
import { transferOwnership } from "@/lib/server/group-members";
import { toErrorResponse } from "@/lib/server/errors";
import { getRequestMeta } from "@/lib/server/request";

export async function POST(req: Request) {
    const { requestId, ip, userAgent } = await getRequestMeta();
    try {
        const user = await requireSessionUser();
        const groupId = await requireActiveGroup(user.id);
        const body = await req.json().catch(() => null);
        const userId = Number(body?.userId || 0);
        if (!userId)
            return NextResponse.json({ requestId, error: { code: "MISSING_USER_ID", message: "userId is required" } }, { status: 400 });
        await transferOwnership({ actorUserId: user.id, groupId, newOwnerUserId: userId, requestId, ip, userAgent });
        return NextResponse.json({ requestId, ok: true });
    } catch (e) {
        const { status, body } = toErrorResponse(e, "POST /api/groups/members/transfer-owner", requestId);
        return NextResponse.json(body, { status });
    }
}