<?php
require_once '../../core/config.php';
require_once '../../core/session.php';
require_once '../../core/database.php';
require_once '../../core/auth.php';
require_once '../../core/permissions.php';
require_once '../../services/billing/BillingReceivablesService.php';

require_login();
header('Content-Type: application/json; charset=utf-8');

if (!user_can('billing.receivables') && !user_can('billing.payments') && !user_can('module.billing') && current_user_role() !== 'admin') {
    http_response_code(403);
    echo json_encode(array('success' => false, 'message' => 'No tienes permisos para ver este documento.'));
    exit;
}

try {
    $id = $_GET['id'] ?? '';
    $env = $_GET['env'] ?? (defined('FACTO_DEFAULT_ENVIRONMENT') ? FACTO_DEFAULT_ENVIRONMENT : 'production');
    $service = new BillingReceivablesService(db());
    $options = $service->getOptions($env);
    $isBillingAdmin = user_can('billing.admin') || current_user_role() === 'admin';
    $options['can_void_payments'] = $isBillingAdmin || user_can('billing.payments.reverse');
    $options['can_repair_origin'] = $isBillingAdmin || user_can('billing.issue.production');
    $options['can_reopen_receivable'] = $isBillingAdmin || user_can('billing.receivables.manage');
    echo json_encode(array(
        'success' => true,
        'document' => $service->getDocument($id, $env),
        'payments' => $service->getPaymentHistory($id, $env),
        'options' => $options,
    ), JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
} catch (Throwable $e) {
    http_response_code(400);
    echo json_encode(array('success' => false, 'message' => $e->getMessage()), JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
}
