<?php
// save-evaluation-field.php - Auto-save de campos medicos (AJAX)
include __DIR__ . '/core/autoload.php';

header('Content-Type: application/json');

if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    echo json_encode(['success' => false, 'error' => 'Metodo no permitido']);
    exit;
}

$evaluationId = intval($_POST['evaluation_id'] ?? 0);
$field = $_POST['field'] ?? '';
$value = $_POST['value'] ?? '';

// Whitelist de campos permitidos
$allowed_fields = [
    'chief_complaint', 'subjective', 'objective',
    'plan', 'prescription', 'icd10_diagnosis', 'next_appointment', 'notes'
];

if (!$evaluationId || !in_array($field, $allowed_fields)) {
    echo json_encode(['success' => false, 'error' => 'Parametros invalidos']);
    exit;
}

$con = Database::getCon();
$field_safe = $con->real_escape_string($value);
$sql = "UPDATE specialty_evaluation SET `$field` = '$field_safe' WHERE id = $evaluationId";

if ($con->query($sql)) {
    echo json_encode([
        'success' => true,
        'field' => $field,
        'saved_at' => date('H:i:s')
    ]);
} else {
    echo json_encode(['success' => false, 'error' => $con->error]);
}