<?php
// transit/driver/activate.php — السائق يفعّل حسابه (بدون JWT — قبل الدخول)
// POST: invite_token, phone, otp

require_once __DIR__ . '/../../core/bootstrap.php';
require_once __DIR__ . '/../functions.php';
require_once __DIR__ . '/../../core/Services/OtpService.php';

try { $transit_con = Database::get('transit'); }
catch (Exception $e) { jsonError('Transit service unavailable', 503); }

requireTransitFields(['invite_token','phone','otp']);
$inviteToken = filterRequest('invite_token');
$phone       = normalizePhone(filterRequest('phone'));
$otp         = preg_replace('/\D/', '', filterRequest('otp'));

if (!transitVerifyAdminOtp($phone, $otp)) jsonError('Invalid or expired OTP', 401);

$phoneEnc = $encryptionHelper->encryptData($phone);

$st = $transit_con->prepare(
    "SELECT id, org_id, name, status FROM transit_drivers
     WHERE invite_token=? AND phone=? LIMIT 1"
);
$st->execute([$inviteToken, $phoneEnc]);
$driver = $st->fetch();

if (!$driver)           jsonError('Invalid invite token or phone mismatch', 404);
if ($driver['status'] === 'active')    jsonError('Driver already activated', 409);
if ($driver['status'] === 'suspended') jsonError('Account suspended', 403);

$transit_con->prepare(
    "UPDATE transit_drivers SET status='active', activated_at=NOW(), invite_token=NULL WHERE id=?"
)->execute([$driver['id']]);

jsonSuccess([
    'driver_id' => (int)$driver['id'],
    'org_id'    => (int)$driver['org_id'],
    'name'      => $driver['name'],
    'mode'      => 'bus',
], 'Driver activated. Welcome to مواصلاتي!');