karczma-aplikacja-stoliki/api/guest_action_queue.php

<?php
header('Content-Type: application/json; charset=utf-8');

require_once __DIR__ . '/../config/database.php';
require_once __DIR__ . '/get_table_name.php';
require_once __DIR__ . '/resolve_table_operator.php';

$kdsSecret = 'karczma_kuchnia';

function verifyKdsSecret(): bool
{
    global $kdsSecret;
    $secret = isset($_GET['kds_secret']) ? trim((string) $_GET['kds_secret']) : '';
    return $secret === $kdsSecret;
}

if ($_SERVER['REQUEST_METHOD'] === 'GET') {
    if (!verifyKdsSecret()) {
        http_response_code(403);
        echo json_encode([
            'status' => 'error',
            'message' => 'Forbidden',
        ], JSON_UNESCAPED_UNICODE);
        exit;
    }

    try {
        $pdo = getAnalyticsPdo();
        $stmt = $pdo->query("
            SELECT
                id,
                table_id,
                message_type,
                message_text,
                otwierajacy_imie,
                otwierajacy_nazwisko,
                created_at,
                updated_at
            FROM guest_action_queue
            WHERE status_kds = 0
            ORDER BY created_at ASC
            LIMIT 100
        ");
        $rows = $stmt->fetchAll();

        foreach ($rows as &$row) {
            $row['id'] = (int) $row['id'];
        }
        unset($row);

        echo json_encode([
            'status' => 'success',
            'count' => count($rows),
            'polled_at' => date('Y-m-d H:i:s'),
            'poll_interval_seconds' => 30,
            'data' => $rows,
        ], JSON_UNESCAPED_UNICODE);
    } catch (Throwable $e) {
        http_response_code(500);
        echo json_encode([
            'status' => 'error',
            'message' => 'Queue fetch failed',
        ], JSON_UNESCAPED_UNICODE);
    }
    exit;
}

if ($_SERVER['REQUEST_METHOD'] === 'PATCH') {
    if (!verifyKdsSecret()) {
        http_response_code(403);
        echo json_encode([
            'status' => 'error',
            'message' => 'Forbidden',
        ], JSON_UNESCAPED_UNICODE);
        exit;
    }

    $rawBody = file_get_contents('php://input');
    $data = json_decode($rawBody, true);
    if (!is_array($data)) {
        http_response_code(400);
        echo json_encode([
            'status' => 'error',
            'message' => 'Invalid JSON payload',
        ], JSON_UNESCAPED_UNICODE);
        exit;
    }

    $id = isset($data['id']) ? (int) $data['id'] : 0;
    if ($id < 1) {
        http_response_code(422);
        echo json_encode([
            'status' => 'error',
            'message' => 'id is required',
        ], JSON_UNESCAPED_UNICODE);
        exit;
    }

    try {
        $pdo = getAnalyticsPdo();
        $stmt = $pdo->prepare("
            UPDATE guest_action_queue
            SET status_kds = 1
            WHERE id = :id
              AND status_kds = 0
        ");
        $stmt->execute([':id' => $id]);

        if ($stmt->rowCount() === 0) {
            http_response_code(404);
            echo json_encode([
                'status' => 'error',
                'message' => 'Queue item not found or already dismissed',
            ], JSON_UNESCAPED_UNICODE);
            exit;
        }

        echo json_encode([
            'status' => 'success',
            'id' => $id,
        ], JSON_UNESCAPED_UNICODE);
    } catch (Throwable $e) {
        http_response_code(500);
        echo json_encode([
            'status' => 'error',
            'message' => 'Queue dismiss failed',
        ], JSON_UNESCAPED_UNICODE);
    }
    exit;
}

if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    http_response_code(405);
    echo json_encode([
        'status' => 'error',
        'message' => 'Method not allowed',
    ], JSON_UNESCAPED_UNICODE);
    exit;
}

$rawBody = file_get_contents('php://input');
$data = json_decode($rawBody, true);
if (!is_array($data)) {
    http_response_code(400);
    echo json_encode([
        'status' => 'error',
        'message' => 'Invalid JSON payload',
    ], JSON_UNESCAPED_UNICODE);
    exit;
}

$tableId = isset($data['tableId']) ? trim((string) $data['tableId']) : '';
$messageType = isset($data['messageType']) ? trim((string) $data['messageType']) : '';
$messageText = isset($data['messageText']) ? trim((string) $data['messageText']) : '';
$qrHash = isset($data['qrHash']) ? trim((string) $data['qrHash']) : '';
$otwierajacyImie = isset($data['otwierajacyImie']) ? trim((string) $data['otwierajacyImie']) : '';
$otwierajacyNazwisko = isset($data['otwierajacyNazwisko']) ? trim((string) $data['otwierajacyNazwisko']) : '';

$allowedTypes = ['waiter_call', 'bill_request'];
if ($messageType === '' || !in_array($messageType, $allowedTypes, true)) {
    http_response_code(422);
    echo json_encode([
        'status' => 'error',
        'message' => 'Invalid messageType',
    ], JSON_UNESCAPED_UNICODE);
    exit;
}

if ($tableId === '' && $qrHash !== '' && isset($conn)) {
    $resolved = getTableNameByHash($conn, $qrHash);
    if ($resolved !== '') {
        $tableId = $resolved;
    }
}

if ($tableId === '') {
    http_response_code(422);
    echo json_encode([
        'status' => 'error',
        'message' => 'tableId is required',
    ], JSON_UNESCAPED_UNICODE);
    exit;
}

if ($messageText === '') {
    http_response_code(422);
    echo json_encode([
        'status' => 'error',
        'message' => 'messageText is required',
    ], JSON_UNESCAPED_UNICODE);
    exit;
}

if ($otwierajacyImie === '' && $otwierajacyNazwisko === '' && isset($conn)) {
    $operator = resolveOperatorForTable($conn, strtolower($tableId));
    if ($otwierajacyImie === '' && $operator['imie'] !== '') {
        $otwierajacyImie = $operator['imie'];
    }
    if ($otwierajacyNazwisko === '' && $operator['nazwisko'] !== '') {
        $otwierajacyNazwisko = $operator['nazwisko'];
    }
    if ($otwierajacyImie === '' && $otwierajacyNazwisko === '' && $operator['nick'] !== '') {
        $otwierajacyImie = $operator['nick'];
    }
}

if (strlen($tableId) > 32) {
    $tableId = substr($tableId, 0, 32);
}
if (strlen($otwierajacyImie) > 100) {
    $otwierajacyImie = substr($otwierajacyImie, 0, 100);
}
if (strlen($otwierajacyNazwisko) > 100) {
    $otwierajacyNazwisko = substr($otwierajacyNazwisko, 0, 100);
}

try {
    $pdo = getAnalyticsPdo();
    $stmt = $pdo->prepare("
        INSERT INTO guest_action_queue (
            table_id,
            message_type,
            message_text,
            otwierajacy_imie,
            otwierajacy_nazwisko,
            api_sent,
            status_kds,
            created_at
        ) VALUES (
            :table_id,
            :message_type,
            :message_text,
            :otwierajacy_imie,
            :otwierajacy_nazwisko,
            0,
            0,
            NOW(3)
        )
    ");

    $stmt->execute([
        ':table_id' => $tableId,
        ':message_type' => $messageType,
        ':message_text' => $messageText,
        ':otwierajacy_imie' => $otwierajacyImie !== '' ? $otwierajacyImie : null,
        ':otwierajacy_nazwisko' => $otwierajacyNazwisko !== '' ? $otwierajacyNazwisko : null,
    ]);

    echo json_encode([
        'status' => 'success',
        'id' => (int) $pdo->lastInsertId(),
    ], JSON_UNESCAPED_UNICODE);
} catch (Throwable $e) {
    http_response_code(500);
    echo json_encode([
        'status' => 'error',
        'message' => 'Queue insert failed',
    ], JSON_UNESCAPED_UNICODE);
}