<?php
// Admin/transit/route/approve.php — فريق سيرو يعتمد أو يوقف خطاً
// POST: route_id, action (approve|suspend|reject)

require_once __DIR__ . '/../../../connect.php';

if ($role !== 'admin' && $role !== 'super_admin') {
    jsonError('Unauthorized: Admin access required', 403);
}

try { $transit_con = Database::get('transit'); }
catch (Exception $e) { jsonError('Transit service unavailable', 503); }

require_once __DIR__ . '/../../../transit/functions.php';

$routeId = filterRequest('route_id', 'int');
$action  = filterRequest('action');

if (!$routeId) jsonError('route_id is required', 400);

$allowed = ['approve', 'suspend', 'reject'];
if (!in_array($action, $allowed)) jsonError('Invalid action. Allowed: ' . implode(', ', $allowed), 400);

$st = $transit_con->prepare("SELECT id, org_id, name_ar, status FROM transit_routes WHERE id=? LIMIT 1");
$st->execute([$routeId]);
$route = $st->fetch();
if (!$route) jsonError('Route not found', 404);

$statusMap = [
    'approve' => 'active',
    'suspend' => 'suspended',
    'reject'  => 'rejected',
];
$newStatus = $statusMap[$action];

if ($route['status'] === $newStatus) {
    jsonError("Route is already in status: {$newStatus}", 409);
}

$transit_con->prepare(
    "UPDATE transit_routes
     SET status=?, approved_by=?, approved_at=NOW(), updated_at=NOW()
     WHERE id=?"
)->execute([$newStatus, (string)$user_id, $routeId]);

appLog("[TRANSIT][ROUTE] route #{$routeId} org#{$route['org_id']} → {$newStatus} by admin #{$user_id}", 'INFO');

// كتابة في Redis للسوكيت: transit:route_org:{routeId} → org_id
// يُستخدم في passenger_socket لتحقق العضوية
if (isset($redisLocation) && $redisLocation) {
    $redisLocation->set("transit:route_org:{$routeId}", (string)$route['org_id']);
}

jsonSuccess([
    'route_id'   => $routeId,
    'route_name' => $route['name_ar'],
    'new_status' => $newStatus,
], "Route {$action}d successfully");