KCI-CAMPAIGN-TRACKER/app/Controllers/CustomerTypeController.php

<?php

declare(strict_types=1);

namespace App\Controllers;

use App\Models\CustomerType;
use App\Repositories\CustomerTypeAuditRepository;
use App\Repositories\CustomerTypeRepository;
use App\ViewModels\CustomerTypeViewModel;
use Core\Controller;
use Core\Request;
use Core\Response;
use Core\Validator;

class CustomerTypeController extends Controller
{
    public function index(): Response
    {
        $request = Request::capture();
        $model = new CustomerTypeViewModel();
        $model->saved   = $request->input('saved') === '1';
        $model->deleted = $request->input('deleted') === '1';

        return $this->view('customer-types.index', [
            'model'     => $model,
            'pageTitle' => $model->title,
        ]);
    }

    public function data(): Response
    {
        $rows = $this->repo()->allOrderedByName();

        $data = array_map(static function (array $row): array {
            $attrs = !empty($row['attributes'])
                ? (json_decode((string) $row['attributes'], true) ?? [])
                : [];

            return [
                'id'                 => (int)    $row['id'],
                'name'               => (string) $row['name'],
                'attribute_count'    => count($attrs),
                'attributes_summary' => implode(', ', array_column($attrs, 'name')),
                'created_at'         => (string) $row['created_at'],
            ];
        }, $rows);

        return $this->json($data);
    }

    public function create(): Response
    {
        $model = new CustomerTypeViewModel();
        $model->title = 'New Customer Type';

        return $this->view('customer-types.create', [
            'model'     => $model,
            'pageTitle' => $model->title,
        ]);
    }

    public function store(): Response
    {
        $request = Request::capture();
        [$form, $errors] = $this->validateForm($request);

        if (empty($errors) && $this->repo()->findByName($form['name']) !== null) {
            $errors['name'][] = 'A customer type with that name already exists.';
        }

        if (!empty($errors)) {
            $model = new CustomerTypeViewModel();
            $model->title  = 'New Customer Type';
            $model->form   = $form;
            $model->errors = $errors;

            return $this->view('customer-types.create', [
                'model'     => $model,
                'pageTitle' => $model->title,
            ]);
        }

        $customerType             = new CustomerType();
        $customerType->name       = $form['name'];
        $customerType->attributes = $form['attributes'];

        $this->repo()->create($customerType);

        $inserted = $this->repo()->findByName($form['name']);
        if ($inserted !== null) {
            $this->auditRepo()->log((int) $inserted['id'], 'I', $this->toAuditFields($inserted), $this->currentUsername());
        }

        return $this->redirect('/customer-types?saved=1');
    }

    public function edit(string $id): Response
    {
        $row = $this->repo()->find((int) $id);

        if ($row === null) {
            return $this->redirect('/customer-types');
        }

        $model = new CustomerTypeViewModel();
        $model->title        = 'Edit Customer Type';
        $model->customerType = $row;
        $model->saved        = Request::capture()->input('saved') === '1';
        $model->form         = [
            'name'       => (string) $row['name'],
            'attributes' => json_decode((string) ($row['attributes'] ?? '[]'), true) ?? [],
        ];

        return $this->view('customer-types.edit', [
            'model'     => $model,
            'pageTitle' => $model->title,
        ]);
    }

    public function update(string $id): Response
    {
        $before = $this->repo()->find((int) $id);

        if ($before === null) {
            return $this->redirect('/customer-types');
        }

        $request = Request::capture();
        [$form, $errors] = $this->validateForm($request);

        if (empty($errors)) {
            $existing = $this->repo()->findByName($form['name']);
            if ($existing !== null && (int) $existing['id'] !== (int) $id) {
                $errors['name'][] = 'A customer type with that name already exists.';
            }
        }

        if (!empty($errors)) {
            $model = new CustomerTypeViewModel();
            $model->title        = 'Edit Customer Type';
            $model->customerType = $before;
            $model->form         = $form;
            $model->errors       = $errors;

            return $this->view('customer-types.edit', [
                'model'     => $model,
                'pageTitle' => $model->title,
            ]);
        }

        $customerType             = new CustomerType();
        $customerType->id         = (int) $id;
        $customerType->name       = $form['name'];
        $customerType->attributes = $form['attributes'];

        $this->repo()->update($customerType);

        $after = $this->repo()->find((int) $id);
        $this->auditRepo()->log((int) $id, 'U', [
            'before' => $this->toAuditFields($before),
            'after'  => $this->toAuditFields($after ?? []),
        ], $this->currentUsername());

        return $this->redirect('/customer-types/' . $id . '/edit?saved=1');
    }

    public function destroy(string $id): Response
    {
        $row = $this->repo()->find((int) $id);

        if ($row !== null) {
            $this->repo()->delete((int) $id);
            $this->auditRepo()->log((int) $row['id'], 'D', $this->toAuditFields($row), $this->currentUsername());
        }

        return $this->redirect('/customer-types?deleted=1');
    }

    // ── Helpers ───────────────────────────────────────────────────────────────

    private function toAuditFields(array $row): array
    {
        $attrs = [];
        if (!empty($row['attributes'])) {
            $raw   = $row['attributes'];
            $attrs = is_string($raw) ? (json_decode($raw, true) ?? []) : (array) $raw;
        }

        return [
            'name'       => (string) ($row['name']       ?? ''),
            'attributes' => $attrs,
            'created_at' => (string) ($row['created_at'] ?? ''),
            'updated_at' => (string) ($row['updated_at'] ?? ''),
        ];
    }

    private function currentUsername(): string
    {
        return auth()->user()?->username ?? 'system';
    }

    private function validateForm(Request $request): array
    {
        $name            = trim((string) $request->input('name', ''));
        $attributeNames  = (array) ($request->input('attribute_name')  ?? []);
        $attributeTypes  = (array) ($request->input('attribute_type')  ?? []);
        $attributeOrders = (array) ($request->input('attribute_order') ?? []);
        $errors          = [];

        if (!verify_csrf_token((string) $request->input('_token', ''))) {
            $errors['_token'][] = 'Your form session expired. Please refresh and try again.';
        }

        $errors = array_merge($errors, (new Validator())
            ->required('name', $name, 'Customer type name is required.')
            ->maxLength('name', $name, 255, 'Name must be 255 characters or fewer.')
            ->errors());

        $attributeAliases         = (array) ($request->input('attribute_alias')             ?? []);
        $attributeApiUrls         = (array) ($request->input('attribute_api_url')          ?? []);
        $attributeApiFormats      = (array) ($request->input('attribute_api_format')        ?? []);
        $attributeApiReturnTypes  = (array) ($request->input('attribute_api_return_type')   ?? []);
        $attributeApiMatchFields  = (array) ($request->input('attribute_api_match_field')   ?? []);
        $attributeApiAutoFills    = (array) ($request->input('attribute_api_auto_fill')     ?? []);

        $attributes = [];

        foreach ($attributeNames as $i => $attrName) {
            $attrName = trim((string) $attrName);
            $attrType = trim((string) ($attributeTypes[$i] ?? 'text'));
            if ($attrName === '') continue;

            $validatedType = in_array($attrType, ['text', 'number', 'date', 'boolean', 'api_lookup'], true) ? $attrType : 'text';

            $attr = [
                'name'  => $attrName,
                'type'  => $validatedType,
                'alias' => trim((string) ($attributeAliases[$i] ?? '')),
                'order' => isset($attributeOrders[$i]) && (string) $attributeOrders[$i] !== ''
                    ? max(1, (int) $attributeOrders[$i])
                    : count($attributes) + 1,
            ];

            if ($validatedType === 'api_lookup') {
                $rawFormat     = trim((string) ($attributeApiFormats[$i]     ?? ''));
                $rawReturnType = trim((string) ($attributeApiReturnTypes[$i] ?? ''));
                $attr['api_url']         = trim((string) ($attributeApiUrls[$i]        ?? ''));
                $attr['api_format']      = in_array($rawFormat, ['json', 'xml'], true) ? $rawFormat : 'json';
                $attr['api_return_type'] = in_array($rawReturnType, ['text', 'number', 'date', 'boolean'], true) ? $rawReturnType : 'text';
                $attr['api_match_field'] = trim((string) ($attributeApiMatchFields[$i]  ?? ''));
                $attr['api_auto_fill']   = trim((string) ($attributeApiAutoFills[$i]    ?? ''));
            }

            $attributes[] = $attr;
        }

        usort($attributes, static fn(array $a, array $b): int => $a['order'] <=> $b['order']);
        foreach ($attributes as $seq => &$attr) {
            $attr['order'] = $seq + 1;
        }
        unset($attr);

        return [['name' => $name, 'attributes' => $attributes], $errors];
    }

    private function repo(): CustomerTypeRepository
    {
        return new CustomerTypeRepository(database());
    }

    private function auditRepo(): CustomerTypeAuditRepository
    {
        return new CustomerTypeAuditRepository(database());
    }
}