<?php

/**
 * Sanitization Utility
 *
 * @package Aisentic\Api\Util
 */

namespace Aisentic\Util;

/**
 * Input sanitization helpers
 */
class Sanitization {

    /**
     * Sanitize chat message
     *
     * @param string $message Message to sanitize.
     * @return string
     */
    public static function sanitizeMessage( string $message ): string {
        return sanitize_textarea_field( $message );
    }

    /**
     * Sanitize conversation ID (UUID format)
     *
     * @param string $conversationId Conversation ID.
     * @return string
     */
    public static function sanitizeConversationId( string $conversationId ): string {
        // UUID format: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx.
        return preg_match( '/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/i', $conversationId ) ? $conversationId : '';
    }

    /**
     * Sanitize channel
     *
     * @param string $channel Channel name.
     * @return string
     */
    public static function sanitizeChannel( string $channel ): string {
        return in_array( $channel, [ 'admin', 'public' ], true ) ? $channel : 'admin';
    }

    /**
     * Sanitize settings JSON
     *
     * @param string $json JSON string.
     * @return array{valid: bool, data: array|null, error: string|null}
     */
    public static function sanitizeSettingsJson( string $json ): array {
        $decoded = json_decode( $json, true );

        if ( json_last_error() !== JSON_ERROR_NONE ) {
            return [
                'valid' => false,
                'data'  => null,
                'error' => json_last_error_msg(),
            ];
        }

        // Required top-level keys
        $requiredKeys = [ 'llmProviders', 'vectorDBProviders', 'adminAssistant', 'publicChat' ];
        foreach ( $requiredKeys as $key ) {
            if ( ! isset( $decoded[ $key ] ) || ! is_array( $decoded[ $key ] ) ) {
                return [
                    'valid' => false,
                    'data'  => null,
                    'error' => sprintf( 'Missing or invalid key: %s', $key ),
                ];
            }
        }

        // Validate LLM providers structure
        $llm = $decoded['llmProviders'];
        if ( ! isset( $llm['google'] ) || ! is_array( $llm['google'] ) || ! array_key_exists( 'apiKey', $llm['google'] ) ) {
            return [
                'valid' => false,
                'data'  => null,
                'error' => 'Missing llmProviders.google.apiKey',
            ];
        }
        if ( ! isset( $llm['openai'] ) || ! is_array( $llm['openai'] ) || ! array_key_exists( 'apiKey', $llm['openai'] ) ) {
            return [
                'valid' => false,
                'data'  => null,
                'error' => 'Missing llmProviders.openai.apiKey',
            ];
        }

        // Validate vector DB providers structure
        $vectorDB = $decoded['vectorDBProviders'];
        if ( ! isset( $vectorDB['pinecone'] ) || ! is_array( $vectorDB['pinecone'] ) ) {
            return [
                'valid' => false,
                'data'  => null,
                'error' => 'Missing vectorDBProviders.pinecone',
            ];
        }

        return [
            'valid' => true,
            'data'  => $decoded,
            'error' => null,
        ];
    }
}