<?php
/**
 * Bulk Endpoint
 *
 * A single server-to-server route the SaaS backend calls the moment it
 * creates a bulk job from the dashboard, so the job starts within seconds
 * instead of waiting for Schema_AI_Bulk_Generator's 5-minute poll.
 *
 * Auth is a per-site kick token (Schema_AI_Bulk_Generator::get_kick_token),
 * not a WordPress login or nonce: the caller is our backend, not a browser.
 * The token is minted on this site and handed to the backend inside the
 * sync payload. The route takes no input and returns no data: the only
 * thing it can do is make this site re-check the backend for its own
 * pending work, which is exactly what the 5-minute poll already does.
 *
 * @package    Schema_AI
 * @subpackage Schema_AI/includes/api/endpoints
 * @since      1.0.33
 */

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

class Schema_AI_Bulk_Endpoint extends Schema_AI_REST_Controller {

	/**
	 * Route base.
	 *
	 * @var string
	 */
	protected $rest_base = 'bulk';

	/**
	 * Register REST API routes.
	 */
	public function register_routes() {
		// POST /ai-schema-gen/v1/bulk/poll - backend "start now" kick.
		register_rest_route(
			$this->namespace,
			'/' . $this->rest_base . '/poll',
			array(
				array(
					'methods'             => WP_REST_Server::CREATABLE,
					'callback'            => array( $this, 'poll' ),
					'permission_callback' => array( $this, 'kick_permissions_check' ),
				),
			)
		);
	}

	/**
	 * Permission check: a valid X-Kick-Token header, compared in constant time.
	 *
	 * @param WP_REST_Request $request Full details about the request.
	 * @return true|WP_Error True when the token matches.
	 */
	public function kick_permissions_check( $request ) {
		if ( Schema_AI_Bulk_Generator::verify_kick_token( $request->get_header( 'X-Kick-Token' ) ) ) {
			return true;
		}

		return new WP_Error(
			'schema_ai_bad_kick_token',
			__( 'Invalid or missing kick token.', 'ai-schema-gen' ),
			array( 'status' => 403 )
		);
	}

	/**
	 * Queue an immediate next-page run. No input, no meaningful output.
	 *
	 * @param WP_REST_Request $request Full details about the request.
	 * @return WP_REST_Response
	 */
	public function poll( $request ) {
		$result = Schema_AI_Bulk_Generator::handle_kick();

		return $this->success_response( array( 'result' => $result ), 202 );
	}
}