<?php
// food/order/cancel.php — إلغاء الزبون قبل قبول المطعم فقط (بعده يتطلب اتصالاً بالمطعم)
require_once __DIR__ . '/../connect_app.php';

$orderId = filterRequest('order_id', 'int');
$reason  = filterRequest('reason');
if (!$orderId) jsonError('order_id is required');

$order = foodAssertOrderOwnership($orderId, 'customer', $food_passenger_id);
if ($order['status'] !== 'pending') {
    jsonError('Order can no longer be cancelled directly — it has already been accepted by the merchant', 409);
}

food_transition_status($orderId, 'cancelled_by_customer', 'customer', $food_passenger_id, $reason);

if ($order['payment_method'] === 'wallet') {
    $refunded = foodWalletMove(
        $food_passenger_id, (int)$order['grand_total'], 'add',
        "food-refund-{$orderId}", "Food order #{$orderId} cancelled"
    );
    $food_con->prepare(
        "INSERT INTO food_order_payments (order_id, type, amount, status) VALUES (?,'release',?,?)"
    )->execute([$orderId, (int)$order['grand_total'], $refunded ? 'success' : 'failed']);

    if (!$refunded) appLog("[FOOD][ORDER][cancel] refund FAILED for order $orderId — needs manual reconciliation", 'ERROR');
}

jsonSuccess(['order_id' => $orderId, 'status' => 'cancelled_by_customer']);