<?php

/**
 * @copyright © TMS-Plugins. All rights reserved.
 * @licence   See COPYING.md for license details.
 */

namespace IvyForms\Controllers\Form;

// phpcs:disable PSR1.Files.SideEffects
if (!defined('ABSPATH')) {
    exit; // Exit if accessed directly
}

use IvyForms\Common\Exceptions\ForbiddenException;
use IvyForms\Common\Exceptions\InvalidArgumentException;
use IvyForms\Common\Exceptions\NotFoundException;
use IvyForms\Common\Sanitizer\Sanitizer;
use IvyForms\Controllers\Controller;
use IvyForms\Services\Field\FieldService;
use IvyForms\Services\Form\FormService;
use WP_REST_Request;
use WP_REST_Response;

/**
 * Class DeleteFormController
 *
 * @package IvyForms\Application\Controllers\Form
 */
class DeleteFormController extends Controller
{
    private FormService $formService;
    private FieldService $fieldService;

    public function __construct(
        FormService $formService,
        FieldService $fieldService
    ) {
        $this->formService = $formService;
        $this->fieldService = $fieldService;
    }

    /**
     * @param WP_REST_Request $data
     *
     * @return WP_REST_Response
     *
     * @throws NotFoundException
     * @throws InvalidArgumentException
     * @throws ForbiddenException
     */
    public function handle(WP_REST_Request $data): WP_REST_Response
    {
        // Verify the nonce
        Sanitizer::verifyNonce($data->get_header('X-WP-Nonce'));

        // Check if the form ID is provided
        if (empty($data->get_param('id'))) {
            throw new InvalidArgumentException('Form ID is required.');
        }

        // Sanitize the input data
        $formId = Sanitizer::sanitizeId($data->get_param('id'));

        $this->formService->deleteForm($formId);

        $this->fieldService->deleteFieldsByFormId($formId);

        return new WP_REST_Response([
            'message' => 'Successfully deleted form.',
            'data'    => []
        ], 200);
    }
}