<?php
/**
 * Entry Parser Trait.
 *
 * Shared entry parsing logic for abilities that need to transform
 * raw entry data into structured output with decoded field labels.
 *
 * @package sureforms
 * @since 2.5.2
 */

namespace SRFM\Inc\Abilities\Entries;

use SRFM\Inc\Helper;

if ( ! defined( 'ABSPATH' ) ) {
	exit; // Exit if accessed directly.
}

/**
 * Entry_Parser trait.
 *
 * Provides the shared parse_entry() method used by
 * Get_Entry and Bulk_Get_Entries abilities.
 *
 * @since 2.5.2
 */
trait Entry_Parser {
	/**
	 * Parse a raw entry array into the standard response shape.
	 *
	 * Handles form data decoding, form title lookup,
	 * submission info building (with IP masking), and user info.
	 *
	 * @param array<string,mixed> $entry Raw entry from the database.
	 * @since 2.5.2
	 * @return array<string,mixed> Parsed entry data (without entry_id — caller prepends it).
	 */
	protected function parse_entry( array $entry ) {
		// Parse form data with decoded labels (submitter-controlled; escape at the sink).
		$form_data       = [];
		$excluded_fields = Helper::get_excluded_fields();
		$entry_form_data = $entry['form_data'] ?? [];

		if ( is_array( $entry_form_data ) ) {
			foreach ( $entry_form_data as $field_name => $value ) {
				if ( ! is_string( $field_name ) || in_array( $field_name, $excluded_fields, true ) ) {
					continue;
				}
				if ( false === str_contains( $field_name, '-lbl-' ) ) {
					continue;
				}

				$label_parts      = explode( '-lbl-', $field_name );
				$label            = isset( $label_parts[1] ) ? explode( '-', $label_parts[1] )[0] : '';
				$label            = $label ? Helper::decode( $label ) : '';
				$field_block_name = Helper::get_block_name_from_field( $field_name );

				$form_data[] = [
					'label'      => $label,
					'value'      => $value,
					'block_name' => $field_block_name,
				];
			}
		}

		// Get form info.
		$raw_form_id = $entry['form_id'] ?? 0;
		$form_id     = absint( is_numeric( $raw_form_id ) ? (int) $raw_form_id : 0 );
		$form_title  = get_post_field( 'post_title', $form_id );
		// Translators: %d is the form ID.
		$form_name = ! empty( $form_title ) ? $form_title : sprintf( __( 'SureForms Form #%d', 'sureforms' ), $form_id );

		// Build submission info with IP masking.
		$submission_info_raw = is_array( $entry['submission_info'] ?? null ) ? $entry['submission_info'] : [];
		$ip                  = (string) ( $submission_info_raw['user_ip'] ?? '' );
		if ( ! empty( $ip ) ) {
			if ( str_contains( $ip, ':' ) ) {
				// IPv6: keep first segment, mask rest.
				$parts = explode( ':', $ip );
				$ip    = count( $parts ) > 1 ? $parts[0] . ':*:*:*:*:*:*:*' : '***';
			} else {
				// IPv4: keep first octet, mask rest.
				$parts = explode( '.', $ip );
				$ip    = count( $parts ) === 4 ? $parts[0] . '.*.*.*' : '***';
			}
		}

		$submission_info = [
			'user_ip'        => $ip,
			'browser_name'   => (string) ( $submission_info_raw['browser_name'] ?? '' ),
			'device_name'    => (string) ( $submission_info_raw['device_name'] ?? '' ),
			// Re-sanitize at the exposure boundary in case the stored value
			// was written by a future code path that bypasses form-submit.php.
			'submission_url' => esc_url_raw( (string) ( $submission_info_raw['submission_url'] ?? '' ), [ 'http', 'https' ] ),
		];

		// Build user info.
		$user_id   = Helper::get_integer_value( $entry['user_id'] ?? 0 );
		$user_info = null;

		if ( 0 !== $user_id ) {
			$user_data = get_userdata( $user_id );

			if ( $user_data ) {
				$user_info = [
					'id'           => $user_id,
					'display_name' => $user_data->display_name,
					'profile_url'  => get_author_posts_url( $user_id ),
				];
			}
		}

		return [
			'form_id'         => $form_id,
			'form_name'       => $form_name,
			'status'          => $entry['status'] ?? '',
			'created_at'      => $entry['created_at'] ?? '',
			'form_data'       => $form_data,
			'submission_info' => $submission_info,
			'user'            => $user_info,
		];
	}
}