<?php
// File: send_otp_driver.php   (إصدار بدون RaseelPlus)
require_once __DIR__ . '/../../../connect.php';

/* 1) توليد رمز التحقق --------------------------------------------------- */
$otp      = rand(10000, 99999);
$receiver = filterRequest("receiver");

if (empty($receiver)) {
    jsonError('Phone number is required.');
    exit();
}

/* 2) نص الرسالة وإرسالها عبر دالتك الجديدة ------------------------------ */
$messageBody = "رمز التحقق الخاص بك لتطبيق انطلق درايفر هو: " . $otp;

/**
 * نفترض أن sendWhatsAppFromServer() تُرجع:
 *   [
 *      'success' => true/false,
 *      'message' => 'Message sent successfully!',
 *      'details' => ['status' => 'PENDING' | 'SENT' | …]
 *   ]
 */
$raw       = sendWhatsAppFromServer($receiver, $messageBody);
$response  = is_string($raw) ? json_decode($raw, true) : (array) $raw;

$sentOK    = $response['success'] ?? false;
$waStatus  = $response['details']['status'] ?? '';

if ($sentOK ) {

    /* 3) تشفير البيانات وحفظها في DB ----------------------------------- */
    $receiver_enc = $encryptionHelper->encryptData($receiver);
    $otp_enc      = $encryptionHelper->encryptData($otp);

    $exp = date('Y-m-d H:i:s', strtotime('+5 minutes'));
    $now = date('Y-m-d H:i:s');

    try {
        // حذف رموز قديمة
        $con->prepare("DELETE FROM token_verification_driver WHERE phone_number = ?")
            ->execute([$receiver_enc]);

        $stmt = $con->prepare("
            INSERT INTO token_verification_driver
                (phone_number, token, expiration_time, verified, created_at)
            VALUES (?, ?, ?, 0, ?)
        ");
        $stmt->execute([$receiver_enc, $otp_enc, $exp, $now]);

        jsonSuccess(null, 'OTP sent and saved successfully');

    } catch (PDOException $e) {
        jsonError('OTP sent but failed to save to database');
    }

} else {
    $errMsg = $response['message'] ?? 'Unknown error';
    jsonError('Failed to send OTP: ' . $errMsg);
}

/* -----------------------------------------------------------------------
 * أبقينا callAPI() فقط إذا كان يُستخدم في ملفات أخرى – احذفه إن شئت.
 * --------------------------------------------------------------------- */
function callAPI($method, $url, $data) { /* … */ }
?>