alrahma_sunday_school/app/Controllers/View/ExpenseController.php

<?php

namespace App\Controllers\View;
use App\Controllers\BaseController;
use App\Models\ExpenseModel;
use App\Models\UserModel;
use App\Models\ConfigurationModel;
use CodeIgniter\Exceptions\PageNotFoundException;

class ExpenseController extends BaseController
{
    protected $expenseModel;
    protected $userModel;
    protected $configModel;
    protected $schoolYear;
    protected $semester;
    protected $retailors;

    public function __construct()
    {
        $this->expenseModel = new ExpenseModel();
        $this->userModel    = new UserModel();
        $this->configModel  = new ConfigurationModel();

        $this->schoolYear = $this->configModel->getConfig('school_year');
        $this->semester   = $this->configModel->getConfig('semester');

        // Default list of common retailors; adjust as needed
        $this->retailors = [
            'Amazon',
            'Walmart',
            'Costco',
            'BJ\'s',
            'Market Basket',
            'Aldi',
            'Hannaford',
            'Sam\'s Club',
            'HomeGoods',
            'Hostinger',
            'Wicked Cheesy',
            'Shatila',
            'Brothers Pizzeria',
            'Paradise Biryani Pointe',
            'Emad Leiman',
            'Nova Trampoline Park',
            'Lubin\'s Awards',
            'Dollar Tree',
            'Stop & Shop',
            'Dunkin\' Donuts',
            'Giovanni\'s Pizza',
            'Trader Joes'
        ];
    }

    /**
     * Return staff users (admins/teachers/etc.) excluding parents/guests.
     */
    private function staffUsers(): array
    {
        $rows = $this->userModel
            ->select('users.id, users.firstname, users.lastname, roles.name AS role_name')
            ->join('user_roles', 'user_roles.user_id = users.id', 'left')
            ->join('roles', 'roles.id = user_roles.role_id', 'left')
            ->where('roles.name IS NOT NULL', null, false)
            ->findAll();

        $excludedRoles = array_map('strtolower', ['parent', 'student', 'guest']);
        $staff = [];

        foreach ($rows as $row) {
            $roleName = strtolower((string) ($row['role_name'] ?? ''));
            $id       = (int) ($row['id'] ?? 0);
            if ($id <= 0 || in_array($roleName, $excludedRoles, true)) {
                continue;
            }
            if (!isset($staff[$id])) {
                $staff[$id] = [
                    'id'        => $id,
                    'firstname' => $row['firstname'] ?? '',
                    'lastname'  => $row['lastname'] ?? '',
                ];
            }
        }

        uasort($staff, static function ($a, $b) {
            $nameA = trim(($a['firstname'] ?? '') . ' ' . ($a['lastname'] ?? ''));
            $nameB = trim(($b['firstname'] ?? '') . ' ' . ($b['lastname'] ?? ''));
            return strcasecmp($nameA, $nameB);
        });

        return array_values($staff);
    }

    public function index()
    {
        $expenses = $this->expenseModel
            ->select("
                expenses.*,
                u.firstname AS purchaser_firstname, u.lastname AS purchaser_lastname,
                approver.firstname AS approver_firstname, approver.lastname AS approver_lastname
            ")
            ->join('users u', 'u.id = expenses.purchased_by', 'left')
            ->join('users approver', 'approver.id = expenses.approved_by', 'left')
            ->orderBy('expenses.created_at', 'DESC')
            ->findAll();

        // Enrich each row with a URL that goes through Files::receipt($name)
        // We store only the filename in 'receipt_path' (e.g., "1759...f62.png")
        $expenses = array_map(function ($row) {
            $name = $row['receipt_path'] ?? null;
            $row['receipt_url'] = $this->receiptUrl($name);
            return $row;
        }, $expenses);

        return view('expenses/index', ['expenses' => $expenses]);
    }

    public function create()
    {
        $users = $this->staffUsers();

        return view('expenses/create', [
            'users'     => $users,
            'retailors' => $this->retailors,
        ]);
    }

    public function store()
    {
        $rules = [
            'category'     => 'required|in_list[Expense,Purchase,Reimbursement,Donation]',
            'amount'       => 'required|decimal|greater_than[0]',
            // Frontend sends purchased_by as "id|Full Name"
            'purchased_by' => 'required',
            // Optional extra fields
            'retailor'         => 'permit_empty|max_length[255]',
            'date_of_purchase' => 'permit_empty',
            // allow JPG/JPEG/PNG/WEBP/GIF and PDF up to 2MB
            'receipt'      => 'uploaded[receipt]'
                . '|max_size[receipt,2048]'
                . '|ext_in[receipt,jpg,jpeg,png,webp,gif,pdf]'
                . '|mime_in[receipt,image/jpg,image/jpeg,image/png,image/webp,image/gif,application/pdf]',
        ];

        $messages = [
            'receipt' => [
                'uploaded' => 'Receipt file is required.',
                'max_size' => 'Maximum file size is 2MB.',
                'ext_in'   => 'Allowed formats: JPG, JPEG, PNG, WEBP, GIF, or PDF.',
                'mime_in'  => 'Allowed formats: JPG, JPEG, PNG, WEBP, GIF, or PDF.',
            ]
        ];

        if (!$this->validate($rules, $messages)) {
            return redirect()->back()->withInput()->with('error', $this->validator->listErrors());
        }

        // Safe values
        $category    = (string) $this->request->getPost('category');
        $amount      = (string) $this->request->getPost('amount');
        $description = (string) $this->request->getPost('description');
        $retailor    = trim((string) $this->request->getPost('retailor'));
        $datePurchase = (string) $this->request->getPost('date_of_purchase');
        $userId      = (int) (session()->get('user_id') ?? 0);
        $isDonation  = ($category === 'Donation');

        // Parse "purchased_by" as "7|John Doe"
        $purchasedInfo = (string) $this->request->getPost('purchased_by');
        [$purchasedById, $purchasedByName] = array_pad(explode('|', $purchasedInfo, 2), 2, null);
        $purchasedById = (int) $purchasedById;

        // School context
        $schoolYear = $this->schoolYear ?: date('Y');
        $semester   = $this->semester ?: 'Fall';

        // Handle upload: store under writable/uploads/receipts and save only the filename
        $receiptName = null;
        $file = $this->request->getFile('receipt');
        if ($file && $file->isValid() && !$file->hasMoved()) {
            $stored      = $file->store('receipts'); // -> writable/uploads/receipts/<randomname>.ext
            $receiptName = basename($stored);
        }

        $status       = $isDonation ? 'approved' : 'pending';
        $statusReason = $isDonation ? 'Marked as Donation (non-reimbursable).' : null;

        $this->expenseModel->insert([
            'category'     => $category,
            'amount'       => $amount,
            'receipt_path' => $receiptName, // filename only
            'description'  => $description,
            'retailor'     => ($retailor !== '') ? $retailor : null,
            'date_of_purchase' => ($datePurchase !== '') ? $datePurchase : null,
            'purchased_by' => $purchasedById,
            'added_by'     => $userId,
            'status'       => $status,
            'status_reason'=> $statusReason,
            'approved_by'  => $isDonation ? $userId : null,
            'school_year'  => $schoolYear,
            'semester'     => $semester,
        ]);

        return redirect()->to('/expenses/index')->with('success', 'Record added successfully!');
    }


    public function updateStatus()
    {
        $data   = $this->request->getJSON(true);
        $id     = isset($data['id']) ? (int)$data['id'] : null;
        $status = $data['status'] ?? null;
        $reason = $data['reason'] ?? '';
        $userId = (int) (session()->get('user_id') ?? 0);

        if (!$id || !in_array($status, ['approved', 'denied'], true)) {
            log_message('error', 'Invalid status or ID');
            return $this->response->setJSON(['error' => 'Invalid data']);
        }

        $expense = $this->expenseModel->find($id);
        if (!$expense) {
            log_message('error', 'Expense not found for ID ' . $id);
            return $this->response->setJSON(['error' => 'Expense not found']);
        }

        $success = $this->expenseModel->update($id, [
            'status'        => $status,
            'status_reason' => $reason,
            'approved_by'   => $userId,
            'updated_by'    => $userId
        ]);

        if (!$success) {
            log_message('error', 'Expense update failed for ID ' . $id);
            return $this->response->setJSON(['error' => 'Update failed']);
        }

        return $this->response->setJSON(['success' => true]);
    }

    /**
     * Build a public URL for a receipt filename through Files::receipt($name).
     * Expects just the filename (e.g., "1759113425_1c443e607e1900f92f62.png").
     */
    private function receiptUrl(?string $filename): ?string
    {
        if (!$filename) {
            return null;
        }
        // Route should be defined as: $routes->get('receipts/(:any)', 'Files::receipt/$1');
        return site_url('receipts/' . $filename);
    }



    public function edit(int $id)
    {
        $expense = $this->expenseModel->find($id);
        if (!$expense) {
            throw PageNotFoundException::forPageNotFound("Expense #$id not found");
        }

        // same user list you use in create()
        $users = $this->staffUsers();

        return view('expenses/edit', [
            'expense'     => $expense,
            'users'       => $users,
            'retailors'   => $this->retailors,
            'receipt_url' => $expense['receipt_path'] ? site_url('receipts/' . basename($expense['receipt_path'])) : null,
        ]);
    }

    public function update(int $id)
    {
        helper(['form']);

        $expense = $this->expenseModel->find($id);
        if (!$expense) {
            throw PageNotFoundException::forPageNotFound("Expense #$id not found");
        }

        // Base rules
        $rules = [
            'category'     => 'required|in_list[Expense,Purchase,Reimbursement,Donation]',
            'amount'       => 'required|decimal|greater_than[0]',
            'purchased_by' => 'required', // still "id|Full Name"
            'retailor'         => 'permit_empty|max_length[255]',
            'date_of_purchase' => 'permit_empty',
        ];

        // Optional new receipt validation (only if provided)
        $file = $this->request->getFile('receipt');
        if ($file && $file->isValid() && ($file->getSize() ?? 0) > 0) {
            $rules['receipt'] = 'max_size[receipt,2048]'
                . '|ext_in[receipt,jpg,jpeg,png,webp,gif,pdf]'
                . '|mime_in[receipt,image/jpg,image/jpeg,image/png,image/webp,image/gif,application/pdf]';
        }

        if (!$this->validate($rules)) {
            return redirect()->back()->withInput()->with('errors', $this->validator->getErrors());
        }

        // Parse "id|Name"
        [$purchasedById] = array_pad(explode('|', (string) $this->request->getPost('purchased_by'), 2), 2, null);
        $purchasedById = (int) $purchasedById;
        $category   = (string) $this->request->getPost('category');
        $isDonation = ($category === 'Donation');
        $userId     = (int) (session()->get('user_id') ?? 0);

        // Keep old receipt unless replaced or removed
        $receiptName = $expense['receipt_path'];
        if ($file && $file->isValid() && !$file->hasMoved() && ($file->getSize() ?? 0) > 0) {
            $stored      = $file->store('receipts');
            $receiptName = basename($stored);
        }
        if ($this->request->getPost('remove_receipt') === '1') {
            $receiptName = null;
        }

        $updateData = [
            'category'     => $category,
            'amount'       => (string) $this->request->getPost('amount'),
            'description'  => (string) $this->request->getPost('description'),
            'retailor'     => trim((string) $this->request->getPost('retailor')) ?: null,
            'date_of_purchase' => (string) $this->request->getPost('date_of_purchase') ?: null,
            'purchased_by' => $purchasedById,
            'receipt_path' => $receiptName,
            'updated_by'   => $userId,
        ];

        if ($isDonation) {
            $updateData['status']           = 'approved';
            $updateData['status_reason']    = 'Marked as Donation (non-reimbursable).';
            $updateData['approved_by']      = $userId ?: null;
            $updateData['reimbursement_id'] = null;
        } elseif (($expense['category'] ?? '') === 'Donation') {
            // Moving a donation back to a reimbursable category: clear the marker.
            $updateData['status_reason'] = null;
            $updateData['approved_by']   = $expense['approved_by'] ?? null;
            $updateData['status']        = $expense['status'] ?? 'pending';
        }

        $this->expenseModel->update($id, $updateData);

        return redirect()->to('/expenses/index')->with('success', 'Expense updated.');
    }
}