<?php

/**
 * Timetics Get Settings Tool
 *
 * @package Aisentic\Integrations\Timetics
 */

declare(strict_types=1);

namespace Aisentic\Integrations\Timetics;

use Aisentic\Util\Log;

defined( 'ABSPATH' ) || exit;

/**
 * Tool to read Timetics global settings. Administrator only.
 *
 * Timetics stores every setting as a flat key in a single option and its REST
 * reader returns the raw array (secrets included), so this reads the settings
 * directly and redacts them: API keys, tokens, webhook URLs, and OAuth redirect
 * URIs are never returned as values — only whether each is configured. All other
 * settings are returned read-only; note that only a small set of cosmetic
 * settings can be changed via timetics-update-settings.
 */
class Timetics_Get_Settings_Tool extends Timetics_Base_Tool {

	/**
	 * Setting keys whose values are secret or security-sensitive.
	 *
	 * Mirrors Timetics' own customer-exclusion list. Their values are never
	 * returned; the tool reports only whether each is configured.
	 */
	private const SECRET_KEYS = [
		'stripe_pub_key',
		'stripe_secret_key',
		'paypal_client_id',
		'paypal_client_secret',
		'google_app_client_id',
		'google_app_client_secret',
		'google_auth_redirect_uri',
		'zoom_client_id',
		'zoom_client_secret',
		'zoom_auth_redirect_uri',
		'outlook_app_client_id',
		'outlook_app_client_secret',
		'outlook_auth_redirect_uri',
		'twillo_account_id',
		'twillo_token',
		'twillo_phone_number',
		'fluentcrm_webhook',
		'zapier_webhook',
		'pabbly_webhook',
		'flowmattic_webhook',
	];

	/**
	 * Any other key named like a secret is hidden too, so a key Timetics adds
	 * later does not reach the model before this list catches up.
	 */
	private const SECRET_PATTERN = '/secret|token|webhook|password|api_key|_key$/i';

	public function __construct() {
		parent::__construct(
			'timetics-get-settings',
			'Read the Timetics global settings (business name, colors, currency, default booking status, ' .
			'payment/integration on-off flags, email notification settings, and more). API keys, tokens, and ' .
			'webhook URLs are never shown — only whether each is configured. Most settings are read-only here; ' .
			'only cosmetic branding can be changed via timetics-update-settings.'
		);
	}

	protected function properties(): array {
		return [];
	}

	public function __invoke(): array {
		$check = $this->guard_admin();
		if ( $check ) {
			return $check;
		}

		if ( ! function_exists( 'timetics_get_settings' ) ) {
			return [ 'error' => 'Timetics settings are unavailable.' ];
		}

		try {
			$raw      = timetics_get_settings();
			$raw      = is_array( $raw ) ? $raw : [];
			$secrets  = array_fill_keys( self::SECRET_KEYS, false );
			$settings = [];

			foreach ( $raw as $key => $value ) {
				if ( in_array( $key, self::SECRET_KEYS, true ) || preg_match( self::SECRET_PATTERN, (string) $key ) ) {
					$secrets[ $key ] = ! empty( $value );
					continue;
				}
				$settings[ $key ] = $this->preview_setting( $value );
			}

			ksort( $settings );

			return [
				'settings'           => $settings,
				'secrets_configured' => $secrets,
				'note'               => 'Secret keys (API keys, tokens, webhook URLs) are shown only as configured true/false. '
					. 'Payment, integration, currency, timezone, booking-status, and email-notification settings are '
					. 'read-only here; change them in Timetics → Settings. Only business name and brand colors are '
					. 'editable via timetics-update-settings.',
			];
		} catch ( \Throwable $e ) {
			Log::error( 'Timetics_Get_Settings_Tool error', [ 'error' => $e->getMessage() ] );
			return [ 'error' => 'Failed to read settings: ' . $e->getMessage() ];
		}
	}

	/**
	 * Reduce a setting value to a compact, model-friendly preview.
	 *
	 * Long free-text settings (e.g. email templates) are capped without stripping
	 * their markup so the admin still sees roughly what they contain; scalars and
	 * short arrays pass through unchanged.
	 */
	private function preview_setting( $value ) {
		if ( is_string( $value ) && strlen( $value ) > 300 ) {
			return substr( $value, 0, 300 ) . '…';
		}
		return $value;
	}
}