<?php
// ─── POST /api/teams/create.php ──────────────────────────────────────────
define('ROOT', dirname(__DIR__, 2));
require_once ROOT . '/core/DB.php';
require_once ROOT . '/core/Response.php';
require_once ROOT . '/core/Auth.php';

Auth::require();
$db = DB::get();

$name    = trim($_POST['name']            ?? '');
$assets  = trim($_POST['assigned_assets'] ?? '');
$members = trim($_POST['team_members']    ?? '');
$status  = trim($_POST['status']          ?? 'ACTIVE');

if (!$name) Response::error('Team name is required.');

// Check name is unique
$exists = $db->scalar("SELECT COUNT(*) FROM teams WHERE name = ?", [$name]);
if ($exists) Response::error("A team named '$name' already exists.");

$db->run(
    "INSERT INTO teams (name, assigned_assets, team_members, status)
     VALUES (?, ?, ?, ?)",
    [$name, $assets, $members, $status]
);

$id = (int) $db->lastId();

// Update team_id on each named member
if ($members) {
    foreach (array_map('trim', explode(',', $members)) as $username) {
        if ($username) {
            $db->run("UPDATE users SET team_id = ? WHERE username = ?", [$name, $username]);
        }
    }
}

Response::ok(['record_id' => $id], 'Team created.');