<?php
require_once '../includes/auth.php';
require_once '../includes/db.php';
require_once '../includes/api_helper.php';
require_once '../includes/logger.php';
require_once '../includes/notifier.php';

function sendJson($statusCode, $data) {
    http_response_code($statusCode);
    header('Content-Type: application/json');
    echo json_encode($data);
    exit();
}

// Check if user is admin
if (!isAdmin()) {
    sendJson(403, ['error' => 'Permission denied. Admins only.']);
}

$method = $_SERVER['REQUEST_METHOD'];

if ($method === 'GET') {
    try {
        // Auto-create table if not exists
        try {
            $pdo->query("SELECT 1 FROM settings LIMIT 1");
        } catch (PDOException $e) {
            $pdo->exec("
                CREATE TABLE IF NOT EXISTS settings (
                    setting_key VARCHAR(50) PRIMARY KEY,
                    setting_value TEXT NULL,
                    description VARCHAR(255) NULL,
                    updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP
                ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
            ");
            $defaultSettings = [
                ['line_notify_token', '', 'LINE Notify Token สำหรับส่งการแจ้งเตือน'],
                ['telegram_bot_token', '', 'Telegram Bot Token ที่ได้จาก BotFather'],
                ['telegram_chat_id', '', 'Telegram Chat ID หรือ Group ID ที่ต้องการให้บอทส่งข้อความ'],
                ['notify_events', '["vehicle","driver","schedule","maintenance"]', 'เหตุการณ์ที่ต้องการให้แจ้งเตือน (JSON array)']
            ];
            $stmt = $pdo->prepare("INSERT IGNORE INTO settings (setting_key, setting_value, description) VALUES (?, ?, ?)");
            foreach ($defaultSettings as $setting) {
                $stmt->execute($setting);
            }
        }
        
        $stmt = $pdo->query("SELECT setting_key, setting_value FROM settings");
        $settingsData = $stmt->fetchAll(PDO::FETCH_KEY_PAIR);
        sendJson(200, ['settings' => $settingsData]);
    } catch (PDOException $e) {
        sendJson(500, ['error' => 'Database error: ' . $e->getMessage()]);
    }
} elseif ($method === 'POST') {
    $data = json_decode(file_get_contents('php://input'), true);
    $action = $data['action'] ?? '';

    if ($action === 'save') {
        $settings = $data['settings'] ?? [];
        
        try {
            $pdo->beginTransaction();
            $stmt = $pdo->prepare("UPDATE settings SET setting_value = ? WHERE setting_key = ?");
            foreach ($settings as $key => $value) {
                // Ensure the setting key exists to avoid SQL errors if someone injects keys
                $checkStmt = $pdo->prepare("SELECT setting_key FROM settings WHERE setting_key = ?");
                $checkStmt->execute([$key]);
                if ($checkStmt->fetch()) {
                    $stmt->execute([$value, $key]);
                } else {
                    $insertStmt = $pdo->prepare("INSERT INTO settings (setting_key, setting_value) VALUES (?, ?)");
                    $insertStmt->execute([$key, $value]);
                }
            }
            $pdo->commit();
            
            logActivity("Updated Notification Settings", 'settings', null);
            sendJson(200, ['success' => true]);
        } catch (PDOException $e) {
            $pdo->rollBack();
            sendJson(500, ['error' => 'Database error: ' . $e->getMessage()]);
        }
    } 
    elseif ($action === 'test_line') {
        $token = $data['token'] ?? '';
        if (empty($token)) {
            sendJson(400, ['error' => 'LINE Notify Token is required']);
        }
        
        $message = "✅ ทดสอบระบบแจ้งเตือนผ่าน LINE Notify\nจากระบบจัดการข้อมูลยานพาหนะ";
        $result = sendLineNotify($token, $message);
        
        if ($result === true) {
            sendJson(200, ['success' => true]);
        } else {
            sendJson(400, ['error' => 'เกิดข้อผิดพลาดในการส่ง LINE Notify: ' . $result]);
        }
    }
    elseif ($action === 'test_telegram') {
        $token = $data['token'] ?? '';
        $chat_id = $data['chat_id'] ?? '';
        
        if (empty($token) || empty($chat_id)) {
            sendJson(400, ['error' => 'Telegram Bot Token and Chat ID are required']);
        }
        
        $message = "✅ ทดสอบระบบแจ้งเตือนผ่าน Telegram\nจากระบบจัดการข้อมูลยานพาหนะ";
        $result = sendTelegramMessage($token, $chat_id, $message);
        
        if ($result === true) {
            sendJson(200, ['success' => true]);
        } else {
            sendJson(400, ['error' => 'เกิดข้อผิดพลาดในการส่ง Telegram: ' . $result]);
        }
    }
    else {
        sendJson(400, ['error' => 'Invalid action']);
    }
} else {
    sendJson(405, ['error' => 'Method Not Allowed']);
}