<?php
require_once '../../core/config.php';
require_once '../../core/session.php';
require_once '../../core/database.php';
require_once '../../core/auth.php';
require_once '../../core/permissions.php';
require_once '../../services/billing/BillingPayablesService.php';

require_login();
header('Content-Type: application/json; charset=utf-8');

if (!user_can('billing.inbox') && !user_can('billing.payables') && !user_can('module.billing') && current_user_role() !== 'admin') {
    http_response_code(403);
    echo json_encode(array('success' => false, 'message' => 'No tienes permisos para ver cuentas por pagar.'));
    exit;
}

try {
    $service = new BillingPayablesService(db());
    $result = $service->listPayables(array(
        'environment' => $_GET['env'] ?? 'sandbox',
        'status' => $_GET['status'] ?? 'open',
        'search' => $_GET['search'] ?? '',
        'date_from' => $_GET['date_from'] ?? '',
        'date_to' => $_GET['date_to'] ?? '',
        'limit' => $_GET['limit'] ?? 100
    ));
    $result['options'] = $service->getOptions($_GET['env'] ?? 'sandbox');
    echo json_encode(array('success' => true, 'data' => $result), JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
} catch (Throwable $e) {
    http_response_code(400);
    echo json_encode(array('success' => false, 'message' => $e->getMessage()), JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
}
