<?php

declare(strict_types=1);

namespace Aivie\WooCommerce\Mapper;

use Aivie\WooCommerce\Support\Options;

class MetaSanitizer
{
    private const EXACT_DENYLIST = ['password', 'passwd', 'nonce', 'session'];

    private const SUBSTRING_DENYLIST = [
        'password',
        'passwd',
        'secret',
        'token',
        'authorization',
        'api_key',
        'apikey',
        'private_key',
        'client_secret',
        'card_number',
        'cvv',
        'cvc',
        'iban',
        'account_number',
    ];

    public static function isSensitiveKey(string $key): bool
    {
        // Plugin own prefix.
        if (str_starts_with($key, '_aivie_wc_') || str_starts_with($key, 'aivie_wc_')) {
            return true;
        }

        $lower = strtolower($key);

        // Exact match.
        if (in_array($lower, self::EXACT_DENYLIST, true)) {
            return true;
        }

        // Substring match.
        foreach (self::SUBSTRING_DENYLIST as $pattern) {
            if (str_contains($lower, $pattern)) {
                return true;
            }
        }

        return false;
    }

    public static function sanitizeValue(mixed $value, int $maxLength): mixed
    {
        if (is_string($value)) {
            $value = mb_convert_encoding($value, 'UTF-8', 'UTF-8');
            return mb_substr($value, 0, $maxLength);
        }

        if (is_array($value) || is_object($value)) {
            return json_decode(wp_json_encode($value), true) ?? [];
        }

        return $value;
    }

    public static function filterMeta(array $rawMeta, bool $includePrivate = false): array
    {
        $maxLength = Options::getInt(Options::MAX_META_VALUE_LENGTH) ?: 1000;
        $result    = [];

        foreach ($rawMeta as $key => $value) {
            $key = (string) $key;

            if (self::isSensitiveKey($key)) {
                continue;
            }

            if (! $includePrivate && str_starts_with($key, '_')) {
                continue;
            }

            $result[$key] = self::sanitizeValue($value, $maxLength);
        }

        return $result;
    }
}