<?php
ob_start();
// 1. Session & Auth Control
if (session_status() === PHP_SESSION_NONE) { session_start(); }
if (!isset($_SESSION['user_id'])) { header("Location: login.php"); exit(); }

require_once('../titancore/titanconfig.php');
require_once('../titancore/titanheader.php');

// Fix Database Encoding
mysqli_set_charset($conn, "utf8mb4");
mysqli_query($conn, "SET NAMES 'utf8mb4'");
mysqli_query($conn, "SET CHARACTER SET 'utf8mb4'");

$uid = $_SESSION['user_id'];
$u_name = $_SESSION['user_name'] ?? 'User';

$swal_msg = "";

// 2. Pricing Fetch
$price_check = $conn->query("SELECT price FROM pricing WHERE service_name = 'mp_samagra_details'");
$service_price = ($price_check && $price_check->num_rows > 0) ? $price_check->fetch_assoc()['price'] : 5.00;

// 3. API Config Fetch from TitanPayment
$api_settings = $conn->query("SELECT titanurl, titan_api_key FROM TitanPayment WHERE id = 1")->fetch_assoc();
$TitanApi_Url = $api_settings['titanurl'] ?? '';
$api_key = $api_settings['titan_api_key'] ?? '';

if (empty($TitanApi_Url) || empty($api_key)) {
    echo "<script>alert('System Error: TitanPayment API URL or Key is not configured. Contact Admin.'); window.location.href='titanhome.php';</script>";
    exit();
}

// 4. Handle Verification Logic
if (isset($_POST['verify_btn'])) {
    $input_mobile = mysqli_real_escape_string($conn, trim($_POST['mobile_number']));
    
    // Validate Mobile Number
    if (!preg_match('/^[6-9]\d{9}$/', $input_mobile)) {
        $swal_msg = "Swal.fire('Invalid Input!', 'Please enter a valid 10-digit Indian mobile number.', 'error');";
    } else {
        // Wallet Check
        $user_wallet = $conn->query("SELECT wallet FROM users WHERE id = '$uid'")->fetch_assoc()['wallet'];
        
        if ($user_wallet < $service_price) {
            $swal_msg = "Swal.fire('Low Balance!', 'You need ₹$service_price in your wallet to use this service.', 'warning');";
        } else {
            // Build API URL
            $endpoint = rtrim($TitanApi_Url, '/') . "/api/v1/Mp_Samagra_Details.php?api_key=" . urlencode($api_key) . "&mobile_no=" . urlencode($input_mobile);
            
            $ch = curl_init();
            curl_setopt($ch, CURLOPT_URL, $endpoint);
            curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
            curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
            curl_setopt($ch, CURLOPT_TIMEOUT, 30);
            $api_response = curl_exec($ch);
            $curl_error = curl_error($ch);
            curl_close($ch);
            
            if ($api_response) {
                $data = json_decode($api_response, true);
                
                if (isset($data['result']['status']) && strtolower($data['result']['status']) === 'success') {
                    
                    // Get transaction details
                    $transaction = $data['transaction'] ?? [];
                    $transaction_id = mysqli_real_escape_string($conn, $transaction['transaction_id'] ?? '');
                    $deducted_amount = $transaction['deducted_amount'] ?? $service_price;
                    $old_balance = $transaction['old_balance'] ?? 0;
                    $new_balance = $transaction['new_balance'] ?? 0;
                    
                    // Prepare member data for JSON storage
                    $member_data = $data['result']['data'] ?? [];
                    $member_data_json = mysqli_real_escape_string($conn, json_encode($member_data));
                    
                    // Get family_id from first member (if exists)
                    $family_id = '';
                    if (!empty($member_data) && isset($member_data[0]['family_id'])) {
                        $family_id = mysqli_real_escape_string($conn, $member_data[0]['family_id']);
                    }
                    
                    // Provider & IP
                    $provider = mysqli_real_escape_string($conn, $data['result']['Provider'] ?? 'TitanApi');
                    $ip = mysqli_real_escape_string($conn, $_SERVER['REMOTE_ADDR']);
                    
                    // Deduct Wallet (if not already deducted by API)
                    $conn->query("UPDATE users SET wallet = wallet - $service_price WHERE id = '$uid'");
                    
                    // Save to Database History Table
                    $insert = "INSERT INTO mp_samagra_history 
                               (user_id, mobile_no, family_id, member_data, ip_used, provider, 
                                transaction_id, deducted_amount, old_balance, new_balance, created_at) 
                               VALUES (
                                   '$uid', 
                                   '$input_mobile', 
                                   '$family_id', 
                                   '$member_data_json', 
                                   '$ip', 
                                   '$provider', 
                                   '$transaction_id', 
                                   '$deducted_amount', 
                                   '$old_balance', 
                                   '$new_balance', 
                                   NOW()
                               )";
                    
                    if ($conn->query($insert)) {
                        $swal_msg = "Swal.fire('Success!', 'MP Samagra Details Fetched Successfully!', 'success').then(() => { window.location.href='mp_samagra_history.php'; });";
                    } else {
                        $swal_msg = "Swal.fire('Database Error!', 'Fetched successfully but failed to save history.', 'error');";
                    }
                    
                } else {
                    $err = $data['result']['message'] ?? $data['message'] ?? 'Verification failed or invalid API response.';
                    $swal_msg = "Swal.fire('Failed!', '" . addslashes($err) . "', 'error');";
                }
            } else {
                $error_msg = $curl_error ?: 'Could not connect to the Master API Server.';
                $swal_msg = "Swal.fire('Server Error!', '" . addslashes($error_msg) . "', 'error');";
            }
        }
    }
}
?>

<div class="row mb-3">
    <div class="col">
        <div class="card bg-100 shadow-none border">
            <div class="row gx-0 flex-between-center p-3">
                <div class="col-sm-auto d-flex align-items-center">
                    <div class="icon-item bg-success-subtle shadow-none me-3">
                        <span class="fas fa-users text-success fs-4"></span>
                    </div>
                    <div>
                        <h6 class="text-success fs-10 mb-0">Government Services</h6>
                        <h4 class="text-primary fw-bold mb-0">MP <span class="text-success fw-medium">Samagra</span> Details</h4>
                    </div>
                </div>
                <div class="col-md-auto mt-3 mt-md-0">
                    <a href="mp_samagra_history.php" class="btn btn-sm btn-outline-success shadow-none fw-bold"><i class="fas fa-list me-1"></i> View History List</a>
                </div>
            </div>
        </div>
    </div>
</div>

<div class="row justify-content-center">
    <div class="col-lg-6">
        <div class="card h-100">
            <div class="card-header bg-light border-bottom">
                <h5 class="mb-0 text-primary fw-bold text-center"><i class="fas fa-phone me-2"></i>Verify Family Details</h5>
            </div>
            <div class="card-body bg-body-tertiary p-4">
                <div class="alert alert-success border-0 d-flex align-items-center mb-4">
                    <i class="fas fa-rupee-sign fs-3 me-3 text-success"></i>
                    <p class="mb-0 fs-11">Verification charge: <strong>₹<?php echo number_format($service_price, 2); ?></strong> will be deducted from your wallet upon success.</p>
                </div>
                
                <form method="POST">
                    <div class="mb-4">
                        <label class="form-label fw-bold text-900">Mobile Number <span class="text-danger">*</span></label>
                        <div class="input-group">
                            <span class="input-group-text bg-white"><i class="fas fa-mobile-alt"></i></span>
                            <input type="text" class="form-control shadow-none" name="mobile_number" placeholder="Enter 10-digit mobile number" maxlength="10" pattern="[6-9]\d{9}" required>
                        </div>
                        <small class="text-muted">Enter the mobile number registered with MP Samagra</small>
                    </div>
                    
                    <button class="btn btn-success w-100 fw-bold shadow-none py-2" type="submit" name="verify_btn">
                        <i class="fas fa-search me-2"></i> Fetch Family Details
                    </button>
                </form>
            </div>
        </div>
    </div>
</div>

<script src="https://cdn.jsdelivr.net/npm/sweetalert2@11"></script>
<script>
    <?php echo $swal_msg; ?>
</script>

<?php 
require_once('../titancore/TitanFooter.php'); 
ob_end_flush();
?>