<?php

declare(strict_types=1);

namespace App\Controllers\Api;

use CodeIgniter\Controller;

/**
 * Analytics beacon: POST /api/events {name, tool, format, meta}.
 * Accepts only the whitelisted event names; everything is anonymized
 * server-side before storage.
 */
final class Events extends Controller
{
    public function track(): \CodeIgniter\HTTP\ResponseInterface
    {
        $payload = $this->request->getJSON(true) ?: $this->request->getPost();
        $name    = (string) ($payload['name'] ?? '');

        if (! in_array($name, \App\Libraries\Analytics::EVENTS, true)) {
            return response()->setStatusCode(422)->setJSON(['ok' => false]);
        }

        service('analytics')->track($name, [
            'tool'   => mb_substr((string) ($payload['tool'] ?? ''), 0, 120),
            'format' => isset($payload['format']) ? (string) $payload['format'] : null,
            'value'  => (int) ($payload['value'] ?? 0),
            'meta'   => is_array($payload['meta'] ?? null) ? array_slice($payload['meta'], 0, 5) : [],
        ]);

        return response()->setJSON(['ok' => true]);
    }
}