<?php

namespace ArrayFunnel\Supports;

defined('ABSPATH') || exit;

/**
 * Shared REST response and permission behavior.
 */
abstract class BaseRestController extends \WP_REST_Controller
{
    protected $namespace = 'arrayfunnel/v1';

    public function __construct()
    {
        add_action('rest_api_init', [$this, 'registerRoutes']);
    }

    abstract public function registerRoutes(): void;

    /**
     * Every ArrayFunnel route is a shop-management route, so the same gate applies to all of them.
     *
     * @param \WP_REST_Request $request Unused; the routes are not scoped to a per-user resource.
     */
    public function checkPermission(\WP_REST_Request $request): bool|\WP_Error
    {
        unset($request);

        if (!is_user_logged_in() || !current_user_can('manage_woocommerce')) {
            return new \WP_Error(
                'arrayfunnel_unauthorized',
                __('You do not have permission to access this resource.', 'arrayfunnel'),
                ['status' => 403]
            );
        }

        return true;
    }

    protected function success(mixed $data, int $status = 200, array $meta = []): \WP_REST_Response
    {
        $payload = [
            'success' => true,
            'data' => $data,
        ];

        if (!empty($meta)) {
            $payload['meta'] = $meta;
        }

        return new \WP_REST_Response($payload, $status);
    }

    protected function error(string $message, int $status = 400, string $code = 'arrayfunnel_error', array $details = []): \WP_REST_Response
    {
        $error = [
            'code' => $code,
            'message' => $message,
            'status' => $status,
        ];

        if (!empty($details)) {
            $error['details'] = $details;
        }

        return new \WP_REST_Response([
            'success' => false,
            'error' => $error,
        ], $status);
    }
}