<?php
declare(strict_types=1);

require_once __DIR__ . '/../../includes/bootstrap.php';
require_once __DIR__ . '/../../includes/FreeTier.php';
require_once __DIR__ . '/../../includes/CaseStore.php';

dbnToolsRequireMethod('POST');
dbnToolsRequireAuth();

$userId = (int)($_SESSION['dbn_tools_sso_uid'] ?? 0);
if ($userId <= 0) {
    dbnToolsError('Auth required.', 401, 'auth_required');
}

if (empty($_FILES['file']) || ($_FILES['file']['error'] ?? UPLOAD_ERR_NO_FILE) !== UPLOAD_ERR_OK) {
    dbnToolsError('No file uploaded or upload error.', 400, 'no_file');
}

$file = $_FILES['file'];
$size = (int)$file['size'];
$tmp  = (string)$file['tmp_name'];
$name = (string)$file['name'];

if ($size <= 0 || $size > 25 * 1024 * 1024) {
    dbnToolsError('Filen må være mellom 1 byte og 25 MB.', 413, 'bad_size');
}

// Validate it's actually a PDF (magic number check)
$fh = @fopen($tmp, 'rb');
if ($fh === false) {
    dbnToolsError('Kunne ikke lese filen.', 500, 'read_fail');
}
$head = (string)fread($fh, 5);
fclose($fh);
if (strncmp($head, '%PDF-', 5) !== 0) {
    dbnToolsError('Filen er ikke en gyldig PDF.', 415, 'not_pdf');
}

try {
    $doc = CaseStore::registerUpload($userId, $name, $tmp, $size);
    CaseStore::caseEnqueueIngest((int)$doc['doc_id'], $userId);
    dbnToolsRespond([
        'ok' => true,
        'doc_id' => $doc['doc_id'],
        'filename' => $doc['filename'],
    ]);
} catch (Throwable $e) {
    dbnToolsError($e->getMessage(), 400, 'upload_failed');
}