<?php

require_once __DIR__ . '/../lib/submissions.php';

$tokenRec = require_valid_token_web();

if ($method !== 'GET') {
    json_error('METHOD_NOT_ALLOWED', 'Method not allowed', 405);
}

if (!empty($_GET['bundle'])) {
    require_role(['admin', 'supervisor'], $tokenRec);
    [$pdo, $tmpDb, $lockFp] = qdb_open(false);
    $bundle = qdb_export_all_questionnaires_bundle($pdo);
    qdb_discard($tmpDb, $lockFp);

    $filename = 'questionnaires_bundle_' . date('Y-m-d_His') . '.json';
    header('Content-Type: application/json; charset=UTF-8');
    header('Content-Disposition: attachment; filename="' . $filename . '"');
    echo json_encode($bundle, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);
    exit;
}

if (!empty($_GET['exportAll'])) {
    require_role(['admin'], $tokenRec);
    [$pdo, $tmpDb, $lockFp] = qdb_open(false);
    $allVersions = !empty($_GET['allVersions']);
    $zipPath = qdb_build_server_export_zip($pdo, $tokenRec, $allVersions);
    qdb_discard($tmpDb, $lockFp);

    $label = $allVersions ? 'all_versions' : 'current';
    $filename = 'responses_export_' . $label . '_' . date('Y-m-d_His') . '.zip';

    header('Content-Type: application/zip');
    header('Content-Disposition: attachment; filename="' . $filename . '"');
    header('Content-Length: ' . (string)filesize($zipPath));
    readfile($zipPath);
    @unlink($zipPath);
    exit;
}

$qnID = $_GET['questionnaireID'] ?? '';
if (!$qnID) {
    json_error('MISSING_PARAM', 'questionnaireID query param required', 400);
}

$allVersions = !empty($_GET['allVersions']);

[$pdo, $tmpDb, $lockFp] = qdb_open(false);

$qn = $pdo->prepare('SELECT * FROM questionnaire WHERE questionnaireID = :id');
$qn->execute([':id' => $qnID]);
$questionnaire = $qn->fetch(PDO::FETCH_ASSOC);
if (!$questionnaire) {
    qdb_discard($tmpDb, $lockFp);
    json_error('NOT_FOUND', 'Questionnaire not found', 404);
}

$ctx = qdb_export_questionnaire_context($pdo, $qnID);
$questions = $ctx['questions'];
$resultColumns = $ctx['resultColumns'];
$optionTextMap = $ctx['optionTextMap'];

if ($allVersions) {
    $rows = qdb_export_all_versions_rows($pdo, $qnID, $questions, $resultColumns, $optionTextMap, $tokenRec);
    qdb_discard($tmpDb, $lockFp);

    $safeName = qdb_export_safe_basename($questionnaire['name']);
    $filename = $safeName . '_all_versions_' . date('Y-m-d') . '.csv';

    header('Content-Type: text/csv; charset=UTF-8');
    header('Content-Disposition: attachment; filename="' . $filename . '"');
    echo qdb_export_rows_to_csv_string($rows, qdb_export_all_versions_csv_fallback_header($resultColumns));
    exit;
}

$rows = qdb_export_current_rows($pdo, $qnID, $questions, $resultColumns, $optionTextMap, $tokenRec);
qdb_discard($tmpDb, $lockFp);

$safeName = qdb_export_safe_basename($questionnaire['name']);
$filename = $safeName . '_v' . $questionnaire['version'] . '.csv';

header('Content-Type: text/csv; charset=UTF-8');
header('Content-Disposition: attachment; filename="' . $filename . '"');
echo qdb_export_rows_to_csv_string($rows, qdb_export_current_csv_fallback_header($resultColumns));