<?php
require_once __DIR__.'/../../config.php';
require_once __DIR__ . '/../../engine/Kernel.php';
require_once __DIR__.'/../../engine/Logger.php';
require_once __DIR__.'/../../engine/InvestmentEngine.php';
if ($_SERVER['REQUEST_METHOD']!=='POST'){http_response_code(405);exit;}
$ctx = Kernel::handle(['auth' => true]);
$u   = $ctx['user'];
$b = json_decode(file_get_contents('php://input'),true)??[];
$projectId = (int)($b['project_id']??0);
$amount    = (float)($b['amount_sdg']??0);
$pin       = trim($b['pin']??'');
if(!$projectId||$amount<5000||!$pin){http_response_code(400);die(json_encode(['error'=>'invalid_input','min'=>5000]));}
$result = InvestmentEngine::invest((int)$u['id'], $projectId, $amount, $pin);
http_response_code(($result['ok']??false)?200:400);
echo json_encode($result, JSON_UNESCAPED_UNICODE);
