<?php
declare(strict_types=1);

require_once __DIR__ . '/../includes/bootstrap.php';

dbnToolsRequireMethod('POST');
dbnToolsRequireAuth();

if (!dbnToolsIsFreeTier()) {
    dbnToolsError('Main Do Better Norge account profile is available for SSO users.', 403, 'sso_required');
}

$userId = (int)($_SESSION['dbn_tools_sso_uid'] ?? 0);
if ($userId <= 0) {
    dbnToolsError('Session user is missing.', 401, 'session_required');
}

$input = dbnToolsJsonInput(20000);
$currentProfile = dbnToolsMainUserProfile($userId) ?: [];

function profileString(array $input, string $key, int $maxChars, array $currentProfile): string
{
    $raw = array_key_exists($key, $input) ? $input[$key] : ($currentProfile[$key] ?? '');
    $value = trim((string)$raw);
    if (mb_strlen($value, 'UTF-8') > $maxChars) {
        dbnToolsError("Field {$key} is too long.", 422, 'field_too_long');
    }
    return $value;
}

$displayName = profileString($input, 'display_name', 100, $currentProfile);
$phone = profileString($input, 'phone', 40, $currentProfile);
$addressLine1 = profileString($input, 'address_line1', 180, $currentProfile);
$addressLine2 = profileString($input, 'address_line2', 180, $currentProfile);
$postalCode = profileString($input, 'postal_code', 32, $currentProfile);
$city = profileString($input, 'city', 100, $currentProfile);
$addressRegion = profileString($input, 'address_region', 100, $currentProfile);
$country = strtoupper(profileString($input, 'country', 2, $currentProfile));
$preferredLanguage = dbnToolsNormalizeUiLanguage($input['preferred_language'] ?? ($_SESSION['lang'] ?? 'en'));
$dismissPrompt = !empty($input['dismiss_prompt']);

try {
    $db = dbnmDb();
    $stmt = $db->prepare(
        'UPDATE users
            SET display_name = NULLIF(?, ""),
                phone = NULLIF(?, ""),
                address_line1 = NULLIF(?, ""),
                address_line2 = NULLIF(?, ""),
                postal_code = NULLIF(?, ""),
                city = NULLIF(?, ""),
                address_region = NULLIF(?, ""),
                country = NULLIF(?, ""),
                preferred_language = ?,
                profile_prompt_dismissed_at = CASE
                    WHEN ? = 1 THEN COALESCE(profile_prompt_dismissed_at, NOW())
                    ELSE profile_prompt_dismissed_at
                END
          WHERE id = ?'
    );
    $stmt->execute([
        $displayName,
        $phone,
        $addressLine1,
        $addressLine2,
        $postalCode,
        $city,
        $addressRegion,
        $country,
        $preferredLanguage,
        $dismissPrompt ? 1 : 0,
        $userId,
    ]);

    if ($displayName !== '') {
        $_SESSION['dbn_tools_user_name'] = $displayName;
        $_SESSION['dbn_tools_sso_name'] = $displayName;
    }
    $_SESSION['lang'] = $preferredLanguage;

    dbnToolsRespond([
        'ok' => true,
        'profile' => dbnToolsMainUserProfile($userId),
    ]);
} catch (Throwable $e) {
    error_log('[profile] ' . $e->getMessage());
    dbnToolsError('Could not save profile details.', 500, 'profile_save_failed');
}