<?php

declare(strict_types=1);

namespace AetosSeo\Security;

if (!defined('ABSPATH')) {
    exit;
}

class RateLimiter
{
    /**
     * Simple rate limiter using transients.
     */
    public static function allow(string $action, string $subject, int $limit, int $window_seconds): bool
    {
        $limit = max(1, $limit);
        $window_seconds = max(10, $window_seconds);

        $key = 'aetos_seo_rl_' . sanitize_key($action) . '_' . md5($subject);
        $data = get_transient($key);
        if (!is_array($data) || empty($data['start']) || empty($data['count'])) {
            set_transient($key, ['start' => time(), 'count' => 1], $window_seconds);
            return true;
        }

        $start = (int) ($data['start'] ?? 0);
        $count = (int) ($data['count'] ?? 0);

        if ((time() - $start) > $window_seconds) {
            set_transient($key, ['start' => time(), 'count' => 1], $window_seconds);
            return true;
        }

        if ($count >= $limit) {
            return false;
        }

        $data['count'] = $count + 1;
        set_transient($key, $data, $window_seconds);
        return true;
    }
}