<?php
/**
 * PACK BEACON – SECURE API
 * Get Today's Packing Items
 * Path: /api-secure/get_today_items.php
 */

require_once __DIR__ . "/config-secure.php";
require_once __DIR__ . "/auth-secure.php";

require_method("POST");

// ตรวจสอบ Token + Signature
list($raw, $input) = require_secure_json();

/* ============================================================
   รับค่าที่จำเป็น
============================================================ */
$user_id = intval($input["user_id"] ?? 0);

if ($user_id <= 0) {
    api_json([
        "status" => "error",
        "message" => "Missing user_id"
    ]);
}

/* ============================================================
   ตรวจสอบว่ามีผู้ใช้อยู่จริงไหม
============================================================ */
$stmt = $conn->prepare("SELECT id, fullname FROM users WHERE id=?");
$stmt->bind_param("i", $user_id);
$stmt->execute();
$user = $stmt->get_result()->fetch_assoc();

if (!$user) {
    api_json([
        "status" => "error",
        "message" => "User not found"
    ]);
}

/* ============================================================
   ดึงวันปัจจุบัน (server-based)
============================================================ */
$today = strtolower(date("l")); 
// monday, tuesday, ...

/* ============================================================
   ดึงรายการสิ่งของของผู้ใช้สำหรับวันนี้
============================================================ */
$stmt = $conn->prepare("
    SELECT id, item_name, day
    FROM items
    WHERE user_id = ? AND day = ?
    ORDER BY id ASC
");
$stmt->bind_param("is", $user_id, $today);
$stmt->execute();
$res = $stmt->get_result();

$items = [];
while ($r = $res->fetch_assoc()) {
    $items[] = [
        "item_id" => intval($r["id"]),
        "item_name" => $r["item_name"],
        "day" => $r["day"]
    ];
}

/* ============================================================
   บันทึก Log การดึงรายการ (optional)
============================================================ */
$log_msg = "User $user_id fetched today's items ($today)";
$stmt = $conn->prepare("
    INSERT INTO logs (user_id, beacon_id, message)
    VALUES (?, NULL, ?)
");
$stmt->bind_param("is", $user_id, $log_msg);
$stmt->execute();

/* ============================================================
   ส่งข้อมูลกลับ
============================================================ */
api_json([
    "status" => "success",
    "today" => $today,
    "count" => count($items),
    "items" => $items
]);