<?php
/**
 * Custom webhook: the raw alert as JSON, for Zapier, Make, n8n or your own code.
 *
 * @package ProfitEngine
 */

declare( strict_types=1 );

namespace ProfitEngine\Notifications\Channels;

defined( 'ABSPATH' ) || exit;

/**
 * Posts the alert as JSON, optionally signed with HMAC-SHA256.
 */
class WebhookChannel extends Channel {

	/**
	 * Send a message.
	 *
	 * @param array<string,mixed> $message Message.
	 * @param array<string,mixed> $config  Channel config.
	 * @return true|\WP_Error
	 */
	public function send( array $message, array $config ) {
		$body = (string) wp_json_encode(
			array(
				'event'   => (string) $message['event'],
				'title'   => (string) $message['title'],
				'intro'   => (string) ( $message['intro'] ?? '' ),
				'items'   => array_values( (array) ( $message['items'] ?? array() ) ),
				'more'    => (int) ( $message['more'] ?? 0 ),
				'url'     => (string) $message['url'],
				'site'    => (string) $message['site'],
				'sent_at' => gmdate( 'c' ),
			)
		);

		$headers = array(
			'User-Agent'           => 'ProfitEngine/' . PROFIT_ENGINE_VERSION,
			'X-ProfitEngine-Event' => (string) $message['event'],
		);
		// Lets the receiver verify the request really came from this store.
		if ( '' !== (string) $config['secret'] ) {
			$headers['X-ProfitEngine-Signature'] = 'sha256=' . hash_hmac( 'sha256', $body, (string) $config['secret'] );
		}

		return $this->post_raw( (string) $config['url'], $body, $headers );
	}
}