<?php
declare(strict_types=1);

require_once dirname(dirname(__DIR__)) . '/bootstrap.php';

function task_cert_admin_approval_queue_action(): array
{
    $auth = TaskCertAuthContext::fromGlobals();
    if (!$auth->hasPermission('r-task-cert-admin')) {
        return [
            'error' => 'Keine Berechtigung für die Aufgaben-Administration.',
            'submissions' => [],
        ];
    }

    $taskIdFilter = TaskCertRequest::queryInt('task_id', 0);
    $searchQuery = TaskCertRequest::queryString('q', '');

    $services = task_cert_services();
    $submissions = $services['submissionRepo']->listPendingApprovals($taskIdFilter, $searchQuery);

    return [
        'error' => null,
        'submissions' => $submissions,
        'task_id_filter' => $taskIdFilter,
        'search_query' => $searchQuery,
        'csrf_token' => TaskCertCsrf::token(),
    ];
}