<?php
/**
 * Tenants List Endpoint (Super Admin Only)
 */

use App\Core\Database;
use App\Middleware\AuthMiddleware;

$decoded = AuthMiddleware::check();

if ($decoded['role'] !== 'super_admin') {
    json_error('Unauthorized', 403);
}

$db = Database::getInstance();

try {
    $stmt = $db->query("SELECT id, name, email, phone, status, created_at FROM tenants ORDER BY created_at DESC");
    $tenants = $stmt->fetchAll();

    foreach ($tenants as &$t) {
        $decName = \App\Core\Encryption::decrypt($t['name']);
        $t['name'] = $decName !== false ? $decName : $t['name'];

        $decEmail = \App\Core\Encryption::decrypt($t['email']);
        $t['email'] = $decEmail !== false ? $decEmail : $t['email'];
    }

    json_success($tenants);

} catch (\Exception $e) {
    json_error('SQL Error in Tenants List: ' . $e->getMessage(), 500);
}