<?php
namespace ToDownload\Hosted;

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

final class HostedClient {
	private static function normalize_base_url(string $base_url): string {
		$base_url = trim($base_url);
		if ($base_url === '') {
			$base_url = 'https://2dl.app';
		}
		$base_url = rtrim($base_url, '/');

		$scheme = strtolower((string) (wp_parse_url($base_url, PHP_URL_SCHEME) ?? ''));
		$host = strtolower((string) (wp_parse_url($base_url, PHP_URL_HOST) ?? ''));

		if ($scheme !== 'https' && $scheme !== 'http') {
			return 'https://2dl.app';
		}
		if ($host === '') {
			return 'https://2dl.app';
		}
		if (
			$host === 'localhost'
			|| $host === '127.0.0.1'
			|| $host === '0.0.0.0'
			|| $host === '::1'
			|| filter_var($host, FILTER_VALIDATE_IP)
		) {
			return 'https://2dl.app';
		}

		// Prevent accidentally pointing the plugin at a WordPress host.
		if ($host === 'wp.2dl.app' || str_ends_with($host, '.wp.2dl.app')) {
			return 'https://2dl.app';
		}

		// Normalize canonical bases.
		if ($host === 'www.2dl.app' || $host === '2dl.app') {
			return 'https://2dl.app';
		}
		if ($host === 'staging.2dl.app') {
			return 'https://staging.2dl.app';
		}

		// Custom hosts are allowed for dev/test, but must be a non-IP http(s) URL.
		return $base_url;
	}

	/**
	 * @return array{ok:bool,data?:array<string,mixed>,error?:array<string,mixed>,status?:int,message?:string}
	 */
	public static function get_json(string $base_url, string $path, string $api_key, string $request_id): array {
		$base_url = self::normalize_base_url($base_url);
		$path = '/' . ltrim($path, '/');

		$url = $base_url . $path;

		$args = [
			'timeout' => 20,
			'headers' => [
				'Accept' => 'application/json',
				'Authorization' => 'Bearer ' . $api_key,
				'X-Request-Id' => $request_id,
				'X-2DL-Request-Id' => $request_id,
			],
		];

		$res = wp_remote_get($url, $args);
		if (is_wp_error($res)) {
			return [
				'ok' => false,
				'status' => 0,
				'error' => [
					'code' => 'WP_ERROR',
					'message' => $res->get_error_message(),
				],
				'message' => $res->get_error_message(),
			];
		}

		$status = (int) wp_remote_retrieve_response_code($res);
		$raw = (string) wp_remote_retrieve_body($res);
		$json = json_decode($raw, true);
		if (!is_array($json)) {
			return [
				'ok' => false,
				'status' => $status,
				'error' => [
					'code' => 'BAD_RESPONSE',
					'message' => 'Invalid JSON from hosted platform',
				],
				'message' => 'Invalid JSON from hosted platform',
			];
		}

		$json['status'] = $status;
		return $json;
	}

	/**
	 * @param array<string,mixed> $payload
	 * @return array{ok:bool,data?:array<string,mixed>,error?:array<string,mixed>,status?:int,message?:string}
	 */
	public static function post_json(string $base_url, string $path, array $payload, string $api_key, string $request_id): array {
		$base_url = self::normalize_base_url($base_url);
		$path = '/' . ltrim($path, '/');

		$url = $base_url . $path;

		$args = [
			'timeout' => 20,
			'headers' => [
				'Content-Type' => 'application/json',
				'Accept' => 'application/json',
				'Authorization' => 'Bearer ' . $api_key,
				'X-Request-Id' => $request_id,
				'X-2DL-Request-Id' => $request_id,
			],
			'body' => wp_json_encode($payload),
		];

		$res = wp_remote_post($url, $args);
		if (is_wp_error($res)) {
			return [
				'ok' => false,
				'status' => 0,
				'error' => [
					'code' => 'WP_ERROR',
					'message' => $res->get_error_message(),
				],
				'message' => $res->get_error_message(),
			];
		}

		$status = (int) wp_remote_retrieve_response_code($res);
		$raw = (string) wp_remote_retrieve_body($res);
		$json = json_decode($raw, true);
		if (!is_array($json)) {
			return [
				'ok' => false,
				'status' => $status,
				'error' => [
					'code' => 'BAD_RESPONSE',
					'message' => 'Invalid JSON from hosted platform',
				],
				'message' => 'Invalid JSON from hosted platform',
			];
		}

		// Hosted API already returns { ok, data?, error? }
		$json['status'] = $status;
		return $json;
	}
}