<?php

declare(strict_types=1);

require_once dirname(__DIR__, 3) . '/src/App/bootstrap.php';
require_once __DIR__ . '/GiteaDeployStatusService.php';

use App\ConfigLoader;
use SystemAddons\GiteaDeployStatus\GiteaDeployStatusService;

session_start();

$authUser = is_array($_SESSION['desktop_auth']['user'] ?? null) ? $_SESSION['desktop_auth']['user'] : [];
$groups = array_values(array_map('strval', (array) ($authUser['groups'] ?? [])));
$isAdmin = in_array('administrators', $groups, true);

$projectRoot = dirname(__DIR__, 3);
$currentEnvironment = ConfigLoader::currentEnvironment();
$service = new GiteaDeployStatusService(ConfigLoader::load($projectRoot, 'gitea'));

if (!$service->shouldShowInTray($isAdmin)) {
    respond([
        'error' => 'forbidden',
        'message' => 'Kein Zugriff auf den Gitea-Deploy-Status.',
    ], 403);
}

$status = $service->status();
$diagnostics = is_array($status['diagnostics'] ?? null) ? $status['diagnostics'] : [];
$diagnostics['environment'] = $currentEnvironment;
$diagnostics['host'] = (string) ($_SERVER['HTTP_HOST'] ?? $_SERVER['SERVER_NAME'] ?? '');
$status['diagnostics'] = $diagnostics;

respond([
    'data' => $status,
]);

/**
 * @param array<string, mixed> $payload
 */
function respond(array $payload, int $statusCode = 200): never
{
    http_response_code($statusCode);
    header('Content-Type: application/json; charset=utf-8');
    echo json_encode($payload, JSON_THROW_ON_ERROR | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
    exit;
}