<?php
require_once __DIR__ . '/../../../session.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/OperationLockManager.php';

// Batch GL posting takes this lock; posting itself is owner/admin only.
require_role($user_role, ['owner', 'admin']);

try {
    $lock_manager = new OperationLockManager($pdo2, $company_id, $user_id);
    $result = $lock_manager->acquire(
        trim((string)($data['operation_type'] ?? '')),
        (int)($data['ttl_minutes'] ?? 120)
    );
    $answer = array_merge($answer, $result);
    if (empty($result['success'])) {
        http_response_code(409); // another tab or user holds the lock
    }
} catch (PDOException $e) {
    error_log('[acquire_op_lock] ' . $e->getMessage());
    http_response_code(500);
    $answer['message'] = 'Database error, please try again.';
} catch (Exception $e) {
    http_response_code(400);
    $answer['message'] = $e->getMessage();
}

exit(json_encode($answer));