<?php
    session_start();
    require '../../../assets/utils/db_auth.php';
    require '../../../assets/utils/classes/UserManager.php';

    require_role($user_role, ['owner', 'admin']);

    $action = $data['action'] ?? '';
    $um     = new UserManager($pdo1, $company_id, $user_id);

    try {

        if ($action === 'create') {
            $email = strtolower(trim($data['invite_email'] ?? ''));
            $role  = trim($data['invite_role'] ?? '');

            $invited_email     = $um->inviteUser($email, $role);
            $answer['success'] = 1;
            $answer['message'] = htmlspecialchars($invited_email) . ' has been added to your company.';

        } elseif ($action === 'update') {
            $map_id = (int)($data['map_id'] ?? 0);
            $role   = trim($data['role'] ?? '');

            $um->updateRole($map_id, $role);
            $answer['success'] = 1;
            $answer['message'] = 'Role updated successfully.';

        } elseif ($action === 'delete') {
            $map_id = (int)($data['map_id'] ?? 0);

            $um->removeUser($map_id);
            $answer['success'] = 1;
            $answer['message'] = 'User has been removed from this company.';

        } else {
            $answer['message'] = 'Unknown action.';
            http_response_code(400);
        }

    } catch (Exception $e) {
        $answer['message'] = $e->getMessage();
        http_response_code(400);
    }

    exit(json_encode($answer));
?>