<?php

/**
 * Shopping Plugin: backend.
 *
 * Thin forwarder from the client to the relay's /api/shopping*
 * endpoints. The phone-side view is part of the relay UI; this
 * plugin just pipes hyprcrd's push/pull through the configured
 * relay credentials.
 *
 * Routes:
 *   GET  /api/shopping         — pull active list state from relay
 *   POST /api/shopping         — push active card {uid,title,body}
 *   POST /api/shopping/check   — (mostly phone-only; proxied for
 *                                 completeness/tests — relay will
 *                                 401 for client-auth callers)
 */

function shoppingJson($data, int $code = 200): void {
    http_response_code($code);
    header('Content-Type: application/json');
    echo json_encode($data);
    exit;
}

function shoppingRelay(): array {
    $db = Database::connect();
    return [
        'url'  => $db->query("SELECT value FROM settings WHERE key = 'relay_url'")->fetchColumn() ?: '',
        'user' => $db->query("SELECT value FROM settings WHERE key = 'relay_username'")->fetchColumn() ?: '',
        'key'  => $db->query("SELECT value FROM settings WHERE key = 'relay_key'")->fetchColumn() ?: '',
    ];
}

PluginManager::instance()->onApiRoute(function (string $route, string $method) {
    if ($route !== '/api/shopping' && $route !== '/api/shopping/check') return;
    if (!in_array($method, ['GET', 'POST'], true)) return;

    $r = shoppingRelay();
    if (!$r['url'] || !$r['user'] || !$r['key']) {
        shoppingJson(['ok' => false, 'error' => 'relay not configured']);
    }

    $ch = curl_init(rtrim($r['url'], '/') . $route);
    $opts = [
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_HTTPHEADER => [
            'Content-Type: application/json',
            'X-Relay-User: ' . $r['user'],
            'X-Relay-Key: ' . $r['key'],
        ],
        CURLOPT_TIMEOUT => 10,
    ];
    if ($method === 'POST') {
        $opts[CURLOPT_POST] = true;
        $opts[CURLOPT_POSTFIELDS] = file_get_contents('php://input') ?: '{}';
    }
    curl_setopt_array($ch, $opts);
    $response = curl_exec($ch);
    $status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    curl_close($ch);

    http_response_code($status ?: 502);
    header('Content-Type: application/json');
    echo is_string($response) ? $response : json_encode(['ok' => false, 'error' => 'relay unreachable']);
    exit;
});