<?php
/**
 * 清單 API
 * 帳密驗證由 auth.php 處理（對應 SYSUSER：USR_CODE / USR_PASSWORD）
 * 呼叫方式：GET/POST 帶 usr_code、usr_password 參數
 *   例：customer_list.php?usr_code=TSPAPI&usr_password=xxxx
 * 回傳：{"success":true,"count":n,"data":[{CUS_CODE,CUS_NAME,CUS_IDNO,CUS_TEL1,CUS_ADDR1}, ...]}
 */

// 驗證帳密；通過後可使用 $pdo，失敗會自動回傳 401 並結束
require __DIR__ . '/auth.php';

$sql = "SELECT CUS_CODE,
               (CASE WHEN ISNULL(CUS_ABBR,'') <> '' THEN CUS_ABBR ELSE CUS_NAME END) AS CUS_NAME,
               CUS_CONTACT,
               CUS_IDNO,
               CUS_TEL1,
               CUS_ADDR1,
               CUS_TAX,
               CUS_TAXRATE
          FROM CUSTOMER
         WHERE CUS_KIND = :kind
           AND DEL_YN   = 'N'
         ORDER BY ORDER_SEQ";

try {
    $stmt = $pdo->prepare($sql);
    $stmt->execute([':kind' => 'M']);
    $rows = $stmt->fetchAll();

    echo json_encode([
        'success' => true,
        'count'   => count($rows),
        'data'    => $rows,
    ], JSON_UNESCAPED_UNICODE);

} catch (PDOException $e) {
    json_exit(500, ['success' => false, 'message' => $e->getMessage()]);
}
