<?php
/**
 * Settings registration + sanitize. The UI lives in the React dashboard
 * (AICL_Dashboard); this class only registers the option and provides the
 * shared sanitize callback that the dashboard's REST save reuses.
 *
 * @package AIM_Transparency
 * @since 1.0.0
 */

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/**
 * Registers the plugin option and sanitizes its incoming values.
 *
 * @since 1.0.0
 */
class AICL_Settings {

	/**
	 * Registers the settings hooks.
	 *
	 * @since 1.0.0
	 *
	 * @return void
	 */
	public function hooks() {
		add_action( 'admin_init', array( $this, 'register' ) );
	}

	/**
	 * Registers the plugin setting with its sanitize callback.
	 *
	 * @since 1.0.0
	 *
	 * @return void
	 */
	public function register() {
		register_setting( 'aicl', AICL_Plugin::OPTION, array( __CLASS__, 'sanitize' ) );
	}

	/**
	 * Sanitizes the submitted settings into a clean, storable option array.
	 *
	 * @since 1.0.0
	 *
	 * @param array $input Raw, unslashed settings values submitted from the dashboard.
	 * @return array The sanitized settings values keyed by option name.
	 */
	public static function sanitize( $input ) {
		$d   = AICL_Plugin::defaults();
		$out = array();

		$out['badge_enabled']  = empty( $input['badge_enabled'] ) ? 0 : 1;
		$out['embed_metadata'] = empty( $input['embed_metadata'] ) ? 0 : 1;
		$out['jsonld_enabled'] = empty( $input['jsonld_enabled'] ) ? 0 : 1;
		$out['scan_all']       = empty( $input['scan_all'] ) ? 0 : 1;
		$out['auto_flag']      = empty( $input['auto_flag'] ) ? 0 : 1;

		$out['badge_text'] = isset( $input['badge_text'] ) ? sanitize_text_field( wp_unslash( $input['badge_text'] ) ) : '';

		$styles             = array( 'eu', 'eu_basic', 'aim', 'custom' );
		$out['badge_style'] = ( isset( $input['badge_style'] ) && in_array( wp_unslash( $input['badge_style'] ), $styles, true ) )
			? wp_unslash( $input['badge_style'] ) : $d['badge_style'];

		$positions             = array( 'top-left', 'top-right', 'bottom-left', 'bottom-right' );
		$out['badge_position'] = ( isset( $input['badge_position'] ) && in_array( wp_unslash( $input['badge_position'] ), $positions, true ) )
			? wp_unslash( $input['badge_position'] ) : $d['badge_position'];

		$shapes             = array( 'pill', 'soft', 'square', 'sharp', 'banner', 'tag', 'ribbon', 'corner', 'outline', 'ticket', 'underline', 'double' );
		$out['badge_shape'] = ( isset( $input['badge_shape'] ) && in_array( wp_unslash( $input['badge_shape'] ), $shapes, true ) )
			? wp_unslash( $input['badge_shape'] ) : $d['badge_shape'];

		$out['badge_modal'] = empty( $input['badge_modal'] ) ? 0 : 1;

		$types               = array_keys( AICL_Plugin::SOURCE_TYPES );
		$out['badge_labels'] = array();
		$out['badge_show']   = array();

		foreach ( $types as $t ) {
			$out['badge_labels'][ $t ] = isset( $input['badge_labels'][ $t ] ) ? sanitize_text_field( wp_unslash( $input['badge_labels'][ $t ] ) ) : '';

			$shown                   = isset( $input['badge_show'] ) ? ! empty( $input['badge_show'][ $t ] ) : ! empty( $d['badge_show'][ $t ] );
			$out['badge_show'][ $t ] = $shown ? 1 : 0;
		}

		$out['badge_radius']       = min( 2, max( 0, (int) ( isset( $input['badge_radius'] ) ? $input['badge_radius'] : $d['badge_radius'] ) ) );
		$out['badge_border']       = min( 4, max( 0, (int) ( isset( $input['badge_border'] ) ? $input['badge_border'] : 0 ) ) );
		$out['badge_border_color'] = self::color( isset( $input['badge_border_color'] ) ? $input['badge_border_color'] : '', $d['badge_border_color'] );
		$out['badge_shadow']       = min( 2, max( 0, (int) ( isset( $input['badge_shadow'] ) ? $input['badge_shadow'] : $d['badge_shadow'] ) ) );
		$out['badge_modal_title']  = isset( $input['badge_modal_title'] ) ? sanitize_text_field( wp_unslash( $input['badge_modal_title'] ) ) : '';
		$out['badge_modal_text']   = isset( $input['badge_modal_text'] ) ? wp_kses( trim( wp_unslash( $input['badge_modal_text'] ) ), self::modal_allowed_html() ) : '';

		if ( '' === trim( wp_strip_all_tags( $out['badge_modal_text'] ) ) ) {
			$out['badge_modal_text'] = '';
		}

		$out['badge_logo'] = isset( $input['badge_logo'] ) ? esc_url_raw( wp_unslash( $input['badge_logo'] ) ) : '';

		$out['badge_bg']    = self::color( isset( $input['badge_bg'] ) ? $input['badge_bg'] : '', $d['badge_bg'] );
		$out['badge_color'] = self::color( isset( $input['badge_color'] ) ? $input['badge_color'] : '', $d['badge_color'] );

		$out['chatbot_notice']           = empty( $input['chatbot_notice'] ) ? 0 : 1;
		$out['chatbot_notice_text']      = isset( $input['chatbot_notice_text'] ) ? sanitize_text_field( wp_unslash( $input['chatbot_notice_text'] ) ) : $d['chatbot_notice_text'];
		$out['chatbot_notice_position']  = ( isset( $input['chatbot_notice_position'] ) && in_array( wp_unslash( $input['chatbot_notice_position'] ), $positions, true ) )
			? wp_unslash( $input['chatbot_notice_position'] ) : $d['chatbot_notice_position'];
		$out['chatbot_notice_selectors'] = isset( $input['chatbot_notice_selectors'] ) ? sanitize_textarea_field( wp_unslash( $input['chatbot_notice_selectors'] ) ) : '';

		return $out;
	}

	/**
	 * Validates a hex color value, falling back to a default when invalid.
	 *
	 * @since 1.0.0
	 *
	 * @param string $value    The raw color value to validate.
	 * @param string $fallback The default color returned when the value is not a valid hex color.
	 * @return string The sanitized hex color, or the fallback when the value is invalid.
	 */
	protected static function color( $value, $fallback ) {
		$value = sanitize_hex_color( $value );

		return $value ? $value : $fallback;
	}

	/**
	 * Allowed HTML for the click-to-disclose modal body.
	 *
	 * A deliberately tight subset: inline emphasis, line breaks, links and simple
	 * lists. No script, style, event handlers or media. wp_kses also strips unsafe
	 * URL protocols (javascript:, data:) from href, so links are safe.
	 *
	 * @since 1.1.0
	 *
	 * @return array Allowed tags map for wp_kses().
	 */
	protected static function modal_allowed_html() {
		return array(
			'a'      => array(
				'href'   => true,
				'title'  => true,
				'target' => true,
				'rel'    => true,
			),
			'strong' => array(),
			'b'      => array(),
			'em'     => array(),
			'i'      => array(),
			'u'      => array(),
			'code'   => array(),
			'br'     => array(),
			'p'      => array(),
			'span'   => array(),
			'h3'     => array(),
			'ul'     => array(),
			'ol'     => array(),
			'li'     => array(),
		);
	}
}