<?php
declare(strict_types=1);

require_once dirname(__DIR__) . '/includes/functions.php';
require_once dirname(__DIR__) . '/includes/polana_docx_export.php';
require_login();

// Export any saved draft or published card. Never expose drafts publicly.
$user = admin_user();
if (in_array((string)($user['role'] ?? ''), ['manager', 'waiter', 'kitchen'], true)) {
    http_response_code(403);
    exit('Brak uprawnień do eksportu kart menu.');
}

$id = filter_input(INPUT_GET, 'id', FILTER_VALIDATE_INT);
$lang = (string)($_GET['lang'] ?? 'pl');
if (!in_array($lang,['pl','en','es','de'],true)) $lang='pl';
$format = strtolower(trim((string)($_GET['format'] ?? 'docx')));
if (!$id || $id < 1 || $format !== 'docx') {
    http_response_code(400);
    exit('Podaj numer karty i format docx.');
}
$stmt = db()->prepare('SELECT * FROM menus WHERE id = ? LIMIT 1');
$stmt->execute([$id]);
$menu = $stmt->fetch(PDO::FETCH_ASSOC);
if (!$menu) {
    http_response_code(404);
    exit('Karta menu nie istnieje.');
}
$categories = menu_categories_with_items((int)$id, true);
$kind = polana_menu_type((string)($menu['menu_type'] ?? 'food'));
$filename = 'polana-' . $kind . '-' . $lang . '-karta-' . (int)$id . '.docx';
try {
    $bytes = polana_build_menu_docx($categories, $lang, $kind, dirname(__DIR__));
} catch (Throwable $e) {
    error_log('[POLANA_WORD_EXPORT] ' . $e->getMessage());
    http_response_code(500);
    exit('Nie udało się utworzyć pliku DOCX. Skontaktuj się z administratorem strony.');
}
header('Content-Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document');
header('Content-Disposition: attachment; filename="' . $filename . '"');
header('Content-Length: ' . strlen($bytes));
header('X-Content-Type-Options: nosniff');
header('Cache-Control: private, no-store, max-age=0');
header('X-Robots-Tag: noindex, nofollow');
echo $bytes;