<?php
    session_start();
    require_once '../../../assets/utils/db_auth.php';
    require_role($user_role, ['owner', 'admin', 'staff']);
    require_once '../../../assets/utils/classes/UsageGuard.php';
    require_once '../../../assets/utils/classes/OrderManager.php';
    require_once '../../../assets/utils/notify_node.php';

    // Decode items JSON string back to array
    $data['items'] = json_decode($data['items'] ?? '[]', true) ?: [];

    try {
        $new_id    = null;
        $source    = trim((string)($data['source'] ?? ''));
        $source_id = (int)($data['source_id'] ?? 0);

        dbTransaction($pdo2, function($pdo) use ($data, $company_id, $logging, $source, $source_id, &$new_id) {
            $order  = new OrderManager($pdo, $company_id);
            $new_id = $order->saveOrder($data, $logging);

            // On new order created from a quotation: link both records
            if ($new_id && $source === 'quotation' && $source_id > 0) {
                $order->linkQuotationToOrder($source_id, $new_id);
            }
        });

        $answer['success'] = 1;
        if ($new_id) {
            $answer['new_id'] = $new_id;
            (new UsageGuard($pdo1, $company_id, $packages))->increment();
        }
        notify_node('order_updated', [], $company_id);

    } catch (PDOException $e) {
        $answer['message'] = 'Database error, please try again.';
        http_response_code(500);

    } catch (Exception $e) {
        $answer['message'] = $e->getMessage();
        http_response_code(400);
    }

    exit(json_encode($answer));
?>