<?php
require_once 'auth.php';
require_role('receptionist'); // Or a new 'lab_technician' role
require_once 'db/config.php';

header('Content-Type: application/json');
$response = ['success' => false, 'message' => 'Invalid request.'];

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $order_id = $_POST['order_id'] ?? null;
    $results = $_POST['results'] ?? null;

    if ($order_id && $results) {
        try {
            $pdo = db();
            $stmt = $pdo->prepare("UPDATE ordered_tests SET results = ?, status = 'Completed' WHERE order_id = ?");
            
            if ($stmt->execute([$results, $order_id])) {
                $response = ['success' => true, 'message' => 'Results submitted successfully.'];
            } else {
                $response['message'] = 'Failed to submit results.';
            }
        } catch (PDOException $e) {
            $response['message'] = 'Database error: ' . $e->getMessage();
        }
    } else {
        $response['message'] = 'Missing order ID or results.';
    }
}

echo json_encode($response);
?>