<?php
header("Content-Type: application/json");
header("Access-Control-Allow-Origin: *");
$input = json_decode(file_get_contents("php://input"), true);
if (!$input) $input = $_POST;
$type = $input["type"] ?? $_GET["type"] ?? "";
$token = $input["token"] ?? $_GET["token"] ?? "";

if ($type && $token) {
    $log = date("c") . " $type token updated
";
    file_put_contents("/var/log/wevia-token-renewals.log", $log, FILE_APPEND);
    
    if ($type === "github_token") {
        // Update secrets.env
        $secrets = file_get_contents("/etc/weval/secrets.env");
        $secrets = preg_replace("/GITHUB_TOKEN=.*/", "GITHUB_TOKEN=$token", $secrets);
        file_put_contents("/etc/weval/secrets.env", $secrets);
        echo json_encode(["ok" => true, "type" => "github", "updated" => true]);
    } elseif ($type === "whatsapp_token") {
        $secrets = file_get_contents("/etc/weval/secrets.env");
        $secrets = preg_replace("/WHATSAPP_TOKEN=.*/", "WHATSAPP_TOKEN=$token", $secrets);
        file_put_contents("/etc/weval/secrets.env", $secrets);
        echo json_encode(["ok" => true, "type" => "whatsapp", "updated" => true]);
    } else {
        echo json_encode(["ok" => true, "type" => $type, "stored" => true]);
    }
} else {
    echo json_encode(["error" => "missing type or token"]);
}