<?php
/**
 * pnr.php — PNR status check (irctc1 / RapidAPI).
 * Public page. Validates a 10-digit PNR, caches briefly (status changes over
 * time), counts each live call against the shared monthly budget, and logs the
 * check to analytics. Renders inside the site header/footer.
 */
require __DIR__ . '/app/config.php';

const PNR_HOST      = 'irctc1.p.rapidapi.com';
const PNR_ENDPOINT  = 'https://irctc1.p.rapidapi.com/api/v3/getPNRStatus';
const PNR_CACHE_TTL = 300;     // 5 min — fresh enough, avoids refresh hammering
const PNR_BUDGET    = 29000;   // soft monthly guard (Ultra cap is 30k)

$pnr   = preg_replace('/[^0-9]/', '', $_GET['pnr'] ?? '');
$error = '';
$data  = null;
$fromCache = false;

/** pick the first non-empty value among candidate keys */
function pv(array $a, array $keys, string $def = ''): string {
    foreach ($keys as $k) {
        if (isset($a[$k]) && $a[$k] !== '' && $a[$k] !== null) return (string) $a[$k];
    }
    return $def;
}

if ($pnr !== '') {
    if (strlen($pnr) !== 10) {
        $error = 'A PNR is exactly 10 digits. Please check and try again.';
    } else {
        $pdo = db();
        $pdo->exec("CREATE TABLE IF NOT EXISTS avail_cache (ckey CHAR(40) PRIMARY KEY, payload MEDIUMTEXT, created_at INT)");
        $pdo->exec("CREATE TABLE IF NOT EXISTS rapidapi_usage (ym CHAR(6) PRIMARY KEY, calls INT NOT NULL DEFAULT 0)");

        // analytics: count this PNR check (cached ones too)
        $__an = __DIR__ . '/app/analytics.php';
        if (is_file($__an)) { require_once $__an; rr_track('pnr', ['note' => 'check']); }

        $ckey = sha1('pnr|' . $pnr);
        $cr = $pdo->prepare("SELECT payload, created_at FROM avail_cache WHERE ckey = ?");
        $cr->execute([$ckey]);
        $c = $cr->fetch(PDO::FETCH_ASSOC);

        if ($c && (time() - (int) $c['created_at'] < PNR_CACHE_TTL)) {
            $p = json_decode($c['payload'], true);
            if (!empty($p['ok'])) { $data = $p['data']; $fromCache = true; }
            else { $error = $p['err'] ?? 'Could not fetch this PNR right now.'; }
        } else {
            // monthly budget guard
            $uq = $pdo->prepare("SELECT calls FROM rapidapi_usage WHERE ym = ?");
            $uq->execute([date('Ym')]);
            $used = (int) ($uq->fetchColumn() ?: 0);

            if ($used >= PNR_BUDGET) {
                $error = 'Live PNR lookup is temporarily unavailable. Please check on the IRCTC / RailOne app.';
            } else {
                $apiKey = defined('RAPIDAPI_KEY') ? RAPIDAPI_KEY : (getenv('RAPIDAPI_KEY') ?: '');
                $ch = curl_init(PNR_ENDPOINT . '?pnrNumber=' . urlencode($pnr));
                curl_setopt_array($ch, [
                    CURLOPT_RETURNTRANSFER => true,
                    CURLOPT_TIMEOUT        => 20,
                    CURLOPT_CONNECTTIMEOUT => 10,
                    CURLOPT_HTTPHEADER     => ['x-rapidapi-key: ' . $apiKey, 'x-rapidapi-host: ' . PNR_HOST],
                ]);
                $resp = curl_exec($ch);
                $code = (int) curl_getinfo($ch, CURLINFO_HTTP_CODE);
                curl_close($ch);

                if ($resp === false || $code === 0) {
                    $error = 'Network issue reaching the railway server. Please try again.';
                } elseif ($code === 429) {
                    $error = 'Live PNR lookup is busy right now. Please try again shortly or check on the IRCTC / RailOne app.';
                } else {
                    // billed call
                    $pdo->prepare("INSERT INTO rapidapi_usage (ym, calls) VALUES (?,1) ON DUPLICATE KEY UPDATE calls = calls + 1")
                        ->execute([date('Ym')]);
                    $j = json_decode($resp, true);
                    if (is_array($j) && !empty($j['status']) && !empty($j['data']) && is_array($j['data'])) {
                        $data = $j['data'];
                        $pdo->prepare("REPLACE INTO avail_cache (ckey, payload, created_at) VALUES (?,?,?)")
                            ->execute([$ckey, json_encode(['ok' => 1, 'data' => $data]), time()]);
                    } else {
                        $msg = is_array($j) ? ($j['message'] ?? '') : '';
                        $error = $msg !== '' ? $msg : 'PNR not found, or the details are not available yet. Newly booked or flushed PNRs may not show.';
                        $pdo->prepare("REPLACE INTO avail_cache (ckey, payload, created_at) VALUES (?,?,?)")
                            ->execute([$ckey, json_encode(['ok' => 0, 'err' => $error]), time()]);
                    }
                }
            }
        }
    }
}

$page_title = 'PNR status';
$meta_description = 'Check Indian Railways PNR status — confirmation chance, coach and berth, and chart status.';
require APP_DIR . '/header.php';
?>
<style>
.pnr-wrap{max-width:560px;margin:0 auto}
.pnr-form{display:flex;gap:8px;margin-top:6px}
.pnr-form input{flex:1;font:inherit;font-size:1.1rem;letter-spacing:.12em;padding:12px 14px;border:1px solid #cde0e0;border-radius:10px}
.pnr-note{color:#5b7373;font-size:.82rem;margin-top:8px}
.pnr-err{background:#fef2f2;border:1px solid #fca5a5;color:#991b1b;border-radius:10px;padding:12px 14px;margin-top:14px}
.pnr-head{display:flex;justify-content:space-between;align-items:baseline;flex-wrap:wrap;gap:6px;margin-top:6px}
.pnr-train{font-weight:700;font-size:1.05rem}
.pnr-meta{display:grid;grid-template-columns:1fr 1fr;gap:10px;margin-top:12px}
.pnr-meta .b{background:#f6fafa;border:1px solid #e3ecec;border-radius:10px;padding:9px 11px}
.pnr-meta .k{font-size:.7rem;color:#5b7373;text-transform:uppercase;letter-spacing:.4px}
.pnr-meta .v{font-weight:600;margin-top:2px}
.pnr-chart{display:inline-block;font-size:.8rem;font-weight:700;padding:3px 10px;border-radius:999px;margin-top:10px}
.pnr-chart.yes{background:#dcfce7;color:#166534}
.pnr-chart.no{background:#fef9c3;color:#854d0e}
table.pnr-pax{width:100%;border-collapse:collapse;margin-top:14px;border:1px solid #e3ecec;border-radius:10px;overflow:hidden}
table.pnr-pax th,table.pnr-pax td{padding:8px 10px;border-bottom:1px solid #e3ecec;font-size:.9rem;text-align:left}
table.pnr-pax th{background:#eef5f5;color:#5b7373;font-size:.72rem;text-transform:uppercase;letter-spacing:.3px}
table.pnr-pax tr:last-child td{border-bottom:0}
.pnr-cnf{color:#166534;font-weight:700}.pnr-wl{color:#b45309;font-weight:700}.pnr-rac{color:#1d4ed8;font-weight:700}
.pnr-book{background:#eff6ff;border:1px solid #bfdbfe;color:#1e3a8a;border-radius:10px;padding:11px 13px;margin-top:16px;font-size:.9rem}
</style>

<div class="pnr-wrap">
  <h1>PNR status</h1>
  <form method="get" class="pnr-form" autocomplete="off">
    <input name="pnr" inputmode="numeric" pattern="[0-9]*" maxlength="10" placeholder="10-digit PNR number" value="<?= e($pnr) ?>" required>
    <button class="btn" type="submit">Check</button>
  </form>
  <p class="pnr-note">Status updates as the chart is prepared. We show the latest from Indian Railways — <strong>booking is done on the IRCTC / RailOne app</strong>.</p>

  <?php if ($error !== ''): ?>
    <div class="pnr-err"><?= e($error) ?></div>
  <?php elseif ($data !== null): ?>
    <?php
      $trainNo  = pv($data, ['trainNumber', 'TrainNo']);
      $trainNm  = pv($data, ['trainName', 'TrainName']);
      $doj      = pv($data, ['dateOfJourney', 'Doj', 'date']);
      $src      = pv($data, ['sourceStation', 'boardingPoint', 'From']);
      $dst      = pv($data, ['destinationStation', 'reservationUpto', 'To']);
      $board    = pv($data, ['boardingPoint', 'BoardingPoint']);
      $resUpto  = pv($data, ['reservationUpto', 'ReservationUpto']);
      $cls      = pv($data, ['journeyClass', 'class', 'Class']);
      $quota    = pv($data, ['quota', 'Quota']);
      $chart    = pv($data, ['chartStatus', 'ChartPrepared', 'chartPrepared']);
      $chartYes = (stripos($chart, 'prepared') !== false && stripos($chart, 'not') === false) || $chart === '1' || $chart === 'true';
      $pax      = $data['passengerList'] ?? ($data['PassengerStatus'] ?? []);
      if (!is_array($pax)) $pax = [];
      $statusClass = function (string $s): string {
          $s = strtoupper($s);
          if (strpos($s, 'CNF') !== false || strpos($s, 'CONFIRM') !== false) return 'pnr-cnf';
          if (strpos($s, 'RAC') !== false) return 'pnr-rac';
          if (strpos($s, 'WL') !== false || strpos($s, 'WAIT') !== false) return 'pnr-wl';
          return '';
      };
    ?>
    <div class="card" style="margin-top:16px">
      <div class="pnr-head">
        <span class="pnr-train"><?= e($trainNo) ?><?= $trainNm !== '' ? ' · ' . e($trainNm) : '' ?></span>
        <?php if ($doj !== ''): ?><span class="muted"><?= e($doj) ?></span><?php endif; ?>
      </div>
      <?php if ($src !== '' || $dst !== ''): ?>
        <div style="margin-top:4px"><?= e($src) ?> &rarr; <?= e($dst) ?></div>
      <?php endif; ?>

      <div class="pnr-meta">
        <?php if ($board !== ''):  ?><div class="b"><div class="k">Boarding</div><div class="v"><?= e($board) ?></div></div><?php endif; ?>
        <?php if ($resUpto !== ''): ?><div class="b"><div class="k">Up to</div><div class="v"><?= e($resUpto) ?></div></div><?php endif; ?>
        <?php if ($cls !== ''):    ?><div class="b"><div class="k">Class</div><div class="v"><?= e($cls) ?></div></div><?php endif; ?>
        <?php if ($quota !== ''):  ?><div class="b"><div class="k">Quota</div><div class="v"><?= e($quota) ?></div></div><?php endif; ?>
      </div>

      <?php if ($chart !== ''): ?>
        <div class="pnr-chart <?= $chartYes ? 'yes' : 'no' ?>"><?= $chartYes ? 'Chart prepared' : 'Chart not prepared' ?></div>
      <?php endif; ?>

      <?php if ($pax): ?>
      <table class="pnr-pax">
        <tr><th>#</th><th>Booking status</th><th>Current status</th></tr>
        <?php foreach ($pax as $i => $px): if (!is_array($px)) continue;
            $bk  = pv($px, ['bookingStatusDetails', 'bookingStatus', 'BookingStatus']);
            if ($bk === '') $bk = trim(pv($px, ['bookingCoachId', 'bookingBerthCode']) . ' ' . pv($px, ['bookingBerthNo']));
            $cu  = pv($px, ['currentStatusDetails', 'currentStatus', 'CurrentStatus']);
            if ($cu === '') $cu = trim(pv($px, ['currentCoachId', 'currentBerthCode']) . ' ' . pv($px, ['currentBerthNo']));
            $sno = pv($px, ['passengerSerialNumber', 'Number'], (string) ($i + 1));
        ?>
          <tr>
            <td><?= e($sno) ?></td>
            <td><?= e($bk !== '' ? $bk : '—') ?></td>
            <td class="<?= $statusClass($cu) ?>"><?= e($cu !== '' ? $cu : '—') ?></td>
          </tr>
        <?php endforeach; ?>
      </table>
      <?php endif; ?>
    </div>

    <div class="pnr-book">
      🎫 To book or manage this ticket, use Indian Railways' official <strong>IRCTC</strong> / <strong>RailOne</strong> app. Rails and Routes shows status only.
    </div>
  <?php endif; ?>
</div>
<?php require APP_DIR . '/footer.php'; ?>