<?php
// Admin/transit/org/create.php — فريق سيرو يضيف مؤسسة جديدة (جامعة/مدرسة/فندق/شركة/ناقل)
// + ينشئ أول مشرف (owner) لها مباشرة
// POST: type, country, city, name_ar, name_en, admin_name, admin_phone, ...

require_once __DIR__ . '/../../../connect.php';

if ($role !== 'admin' && $role !== 'super_admin') {
    jsonError('Unauthorized: Admin access required', 403);
}

try { $transit_con = Database::get('transit'); }
catch (Exception $e) { jsonError('Transit service unavailable', 503); }

require_once __DIR__ . '/../../../transit/functions.php';

requireTransitFields(['type', 'country', 'city', 'name_ar', 'name_en', 'admin_name', 'admin_phone']);

$type       = filterRequest('type');
$country    = strtoupper(substr(filterRequest('country'), 0, 2));
$city       = filterRequest('city');
$nameAr     = filterRequest('name_ar');
$nameEn     = filterRequest('name_en');
$adminName  = filterRequest('admin_name');
$adminPhone = normalizePhone(filterRequest('admin_phone'));
$adminRole  = filterRequest('admin_role') ?: 'owner';
$trialEndsAt = filterRequest('trial_ends_at') ?: date('Y-m-d', strtotime('+90 days'));

$allowedTypes = ['university', 'school', 'hotel', 'company', 'transporter'];
if (!in_array($type, $allowedTypes)) {
    jsonError('Invalid type. Allowed: ' . implode(', ', $allowedTypes));
}

$chk = $transit_con->prepare("SELECT id FROM transit_orgs WHERE name_ar=? AND country=? LIMIT 1");
$chk->execute([$nameAr, $country]);
if ($chk->fetch()) jsonError('Organization already exists', 409);

$adminPhoneEnc   = $encryptionHelper->encryptData($adminPhone);
$contactPhoneRaw = normalizePhone(filterRequest('contact_phone') ?? '');
$contactPhoneEnc = $contactPhoneRaw ? $encryptionHelper->encryptData($contactPhoneRaw) : null;

$transit_con->beginTransaction();
try {
    $transit_con->prepare(
        "INSERT INTO transit_orgs
         (type, country, city, name_ar, name_en, contact_phone, contact_email, website, contract_status, trial_ends_at)
         VALUES (?,?,?,?,?,?,?,?,'active',?)"
    )->execute([
        $type, $country, $city, $nameAr, $nameEn,
        $contactPhoneEnc, filterRequest('contact_email'), filterRequest('website'),
        $trialEndsAt,
    ]);

    $orgId = (int)$transit_con->lastInsertId();

    $transit_con->prepare(
        "INSERT INTO transit_org_admins (org_id, name, phone, role) VALUES (?,?,?,?)"
    )->execute([$orgId, $adminName, $adminPhoneEnc, $adminRole]);

    $transit_con->commit();
} catch (Throwable $e) {
    $transit_con->rollBack();
    appLog('[ADMIN][TRANSIT][ORG][create] ' . $e->getMessage(), 'ERROR');
    jsonError('Failed to create organization', 500);
}

jsonSuccess([
    'org_id'  => $orgId,
    'name_ar' => $nameAr,
    'type'    => $type,
    'country' => $country,
], 'Organization created successfully');