<?php
// Admin/transit/org/admin_toggle.php — تفعيل/تعليق مشرف مؤسسة (لفريق سيرو)
// POST: admin_id, is_active (1|0)

require_once __DIR__ . '/../../../connect.php';

if ($role !== 'admin' && $role !== 'super_admin') {
    jsonError('Unauthorized: Admin access required', 403);
}

try { $transit_con = Database::get('transit'); }
catch (Exception $e) { jsonError('Transit service unavailable', 503); }

$adminId  = filterRequest('admin_id', 'int');
$isActive = filterRequest('is_active', 'int');

if (!$adminId || $isActive === null) jsonError('admin_id and is_active are required', 400);

$st = $transit_con->prepare("SELECT id, org_id FROM transit_org_admins WHERE id=? LIMIT 1");
$st->execute([$adminId]);
$admin = $st->fetch();
if (!$admin) jsonError('Admin not found', 404);

$transit_con->prepare("UPDATE transit_org_admins SET is_active=? WHERE id=?")
    ->execute([$isActive ? 1 : 0, $adminId]);

// إبطال جلساته الحالية فوراً عند التعليق
if (!$isActive) {
    $sessions = $transit_con->prepare("SELECT token_hash FROM transit_sessions WHERE admin_id=?");
    $sessions->execute([$adminId]);
    foreach ($sessions->fetchAll(PDO::FETCH_COLUMN) as $hash) {
        if ($redis) $redis->del("transit:session:{$hash}");
    }
    $transit_con->prepare("DELETE FROM transit_sessions WHERE admin_id=?")->execute([$adminId]);
}

appLog("[ADMIN][TRANSIT][ORG][admin_toggle] admin={$adminId} is_active={$isActive}");

jsonSuccess(['admin_id' => $adminId, 'is_active' => (bool)$isActive]);