<?php
/**
 * JSON helpers.
 *
 * @package AdminPowerups
 */

namespace SmartWP\AdminPowerups\Support;

defined( 'ABSPATH' ) || exit;

/**
 * Decoding for settings stored as JSON in a hidden field.
 *
 * @since 1.0.0
 */
final class Json {

	/**
	 * Decode a JSON hidden-field setting from the REST settings save.
	 *
	 * REST JSON bodies are not slashed, so the string is decoded as-is: running `wp_unslash()` first
	 * would strip real backslashes (Windows paths, escaped quotes inside values) and break the JSON.
	 * Invalid JSON returns the stored value, so bad input never wipes a merchant's settings.
	 *
	 * @since 1.0.0
	 * @param mixed               $value   Submitted value: an array, or a JSON string.
	 * @param array<mixed, mixed> $current Stored value, returned when $value can't be used.
	 * @return array<mixed, mixed>
	 */
	public static function decode_setting( $value, array $current ): array {
		if ( is_array( $value ) ) {
			return $value;
		}
		if ( ! is_string( $value ) ) {
			return $current;
		}
		$decoded = json_decode( $value, true );
		return is_array( $decoded ) ? $decoded : $current;
	}
}