accounted/app/api/import/sie/[id]/route.ts

import { createClient } from '@/lib/supabase/server'
import { NextResponse } from 'next/server'

/**
 * GET /api/import/sie/[id]
 * Get details of a specific SIE import
 */
export async function GET(
  request: Request,
  { params }: { params: Promise<{ id: string }> }
) {
  const supabase = await createClient()
  const { id } = await params

  const {
    data: { user },
  } = await supabase.auth.getUser()

  if (!user) {
    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
  }

  const { data, error } = await supabase
    .from('sie_imports')
    .select('*')
    .eq('id', id)
    .eq('user_id', user.id)
    .single()

  if (error) {
    return NextResponse.json({ error: error.message }, { status: 500 })
  }

  if (!data) {
    return NextResponse.json({ error: 'Import not found' }, { status: 404 })
  }

  return NextResponse.json({ data })
}

/**
 * DELETE /api/import/sie/[id]
 * Delete an import record.
 *
 * Only failed or pending imports can be deleted. Completed imports have created
 * journal entries that are part of räkenskapsinformation — deleting the metadata
 * without reversing entries would leave orphaned bookkeeping data, and deleting
 * both is prohibited under BFL 7 kap (7-year retention).
 */
export async function DELETE(
  request: Request,
  { params }: { params: Promise<{ id: string }> }
) {
  const supabase = await createClient()
  const { id } = await params

  const {
    data: { user },
  } = await supabase.auth.getUser()

  if (!user) {
    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
  }

  // Check current status before deleting
  const { data: importRecord } = await supabase
    .from('sie_imports')
    .select('status')
    .eq('id', id)
    .eq('user_id', user.id)
    .single()

  if (!importRecord) {
    return NextResponse.json({ error: 'Import not found' }, { status: 404 })
  }

  if (importRecord.status === 'completed') {
    return NextResponse.json({
      error: 'Slutförd import kan inte raderas. Importerade verifikationer ingår i räkenskapsinformationen (BFL 7 kap).',
    }, { status: 403 })
  }

  const { error } = await supabase
    .from('sie_imports')
    .delete()
    .eq('id', id)
    .eq('user_id', user.id)

  if (error) {
    return NextResponse.json({ error: error.message }, { status: 500 })
  }

  return NextResponse.json({ success: true })
}