<?php
session_start();
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/PurchaseRequestManager.php';
require_once '../../../assets/utils/classes/UsageGuard.php';
require_role($user_role, ['owner', 'admin', 'staff']);

$action = $data['action'] ?? '';
$id     = (int)($data['id'] ?? 0);
$items  = json_decode($data['items'] ?? '[]', true) ?: [];

$prm = new PurchaseRequestManager($pdo2, $company_id);

try {
    if ($action === 'create') {
        $new_id = $prm->save(array_merge($data, ['id' => 0, 'items' => $items]), $logging);
        $answer['success'] = 1;
        $answer['message'] = 'Purchase request created.';
        $answer['new_id']  = $new_id;
        (new UsageGuard($pdo1, $company_id, $packages))->increment();
    } elseif ($action === 'update') {
        $prm->save(array_merge($data, ['id' => $id, 'items' => $items]), $logging);
        $answer['success'] = 1;
        $answer['message'] = 'Purchase request updated.';
    } else {
        throw new Exception('Unknown action.');
    }
} catch (PDOException $e) {
    $answer['message'] = 'Database error, please try again.';
    http_response_code(500);
} catch (Exception $e) {
    $answer['message'] = $e->getMessage();
    http_response_code(400);
}

exit(json_encode($answer));