<?php
$db   = DB::getInstance();
$body = json_decode(file_get_contents('php://input'), true) ?? [];
require_once NOVACPX_LIB . '/FTPManager.php';

$user      = Auth::getInstance()->user();
if ($user['role'] === 'user') {
    $accountId = (int)($db->fetchOne("SELECT id FROM accounts WHERE user_id = ?", [$user['uid']])['id'] ?? 0);
} else {
    $accountId = (int)($body['account_id'] ?? $_GET['account_id'] ?? 0);
    if ($accountId && $user['role'] === 'reseller') assert_account_access($accountId);
}

match ($action) {
    'list' => (function() use ($db, $accountId) {
        Response::success($db->fetchAll("SELECT id, username, home_dir, quota_mb, status, created_at FROM ftp_accounts WHERE account_id = ?", [$accountId]));
    })(),

    'create' => (function() use ($db, $body, $accountId) {
        if (!$accountId) Response::error("account_id required");
        // Package limit check
        $acctPkg = $db->fetchOne("SELECT p.max_ftp FROM accounts a LEFT JOIN packages p ON p.id=a.package_id WHERE a.id=?", [$accountId]);
        if ($acctPkg && $acctPkg['max_ftp'] > 0) {
            $count = (int)$db->fetchOne("SELECT COUNT(*) c FROM ftp_accounts WHERE account_id=?", [$accountId])['c'];
            if ($count >= (int)$acctPkg['max_ftp']) Response::error("FTP account limit ({$acctPkg['max_ftp']}) reached for this package", 403);
        }
        $username = trim($body['username'] ?? '');
        $password = $body['password'] ?? bin2hex(random_bytes(6));
        $acct     = $db->fetchOne("SELECT home_dir FROM accounts WHERE id = ?", [$accountId]);
        $homeDir  = $body['home_dir'] ?? ($acct['home_dir'] . '/public_html');
        if (!$username) Response::error("username required");
        $id = FTPManager::createAccount($accountId, $username, $password, $homeDir, (int)($body['quota_mb'] ?? 0));
        audit('ftp.create', $username);
        Response::success(['id' => $id, 'password' => $password], 'FTP account created');
    })(),

    'delete' => (function() use ($body) {
        FTPManager::deleteAccount((int)($body['id'] ?? 0));
        audit('ftp.delete', "ftp:{$body['id']}");
        Response::success(null, 'FTP account deleted');
    })(),

    'change-password' => (function() use ($body) {
        FTPManager::changePassword((int)($body['id'] ?? 0), $body['password'] ?? '');
        Response::success(null, 'FTP password updated');
    })(),

    default => Response::error("Unknown ftp action: $action", 404),
};