<?php
require_once __DIR__ . '/../includes/app.php';
$user = require_permission('suppliers', 'add');

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    header('Content-Type: application/json');
    $name = trim($_POST['name'] ?? '');
    $phone = trim($_POST['phone'] ?? '');
    
    if (!$name) {
        echo json_encode(['success' => false, 'error' => tr('الاسم مطلوب', 'Name is required')]);
        exit;
    }
    
    try {
        $pdo = db();
        $stmt = $pdo->prepare('INSERT INTO suppliers (name, phone) VALUES (?, ?)');
        $stmt->execute([$name, $phone]);
        $id = $pdo->lastInsertId();
        
        echo json_encode(['success' => true, 'supplier' => ['id' => $id, 'name' => $name, 'phone' => $phone]]);
    } catch (Throwable $e) {
        echo json_encode(['success' => false, 'error' => $e->getMessage()]);
    }
    exit;
}