<?php
/**
 * scripts/sample_decrypt.php
 *
 * يفكّ تشفير عيّنة عشوائية من الجداول المرحَّلة ويطبعها مقنَّعة جزئياً،
 * للتأكد بالعين أن ما وراء GCM: هو فعلاً القيمة الصحيحة لا قمامة.
 *
 *   php sample_decrypt.php              # 5 صفوف من كل جدول
 *   php sample_decrypt.php --n=10
 *   php sample_decrypt.php --table=driver
 */
declare(strict_types=1);
if (PHP_SAPI !== 'cli') { exit("CLI only\n"); }

require_once __DIR__ . '/../core/bootstrap.php';

$opt   = getopt('', ['n::', 'table::']);
$n     = max(1, (int) ($opt['n'] ?? 5));
$only  = $opt['table'] ?? null;

global $encryptionHelper;
$con = Database::get('main');

function mask(?string $s): string
{
    if ($s === null || $s === '') return '(empty)';
    $len = mb_strlen($s);
    if ($len <= 4) return str_repeat('*', $len);
    return mb_substr($s, 0, 2) . str_repeat('*', $len - 3) . mb_substr($s, -1);
}

function dec($v)
{
    global $encryptionHelper;
    if ($v === null || $v === '') return '(null)';
    $p = $encryptionHelper->decryptData($v);
    if ($p === false) return '‼️ DECRYPT FAILED';
    $prefix = str_starts_with((string) $v, 'GCM:') ? 'GCM' : 'legacy/plain';
    return "[$prefix] " . mask($p);
}

$targets = [
    'driver'          => ['phone','email','gender','national_number','first_name','last_name','birthdate'],
    'passengers'      => ['phone','email','gender','first_name','last_name'],
    'users'           => ['phone','email','fingerprint','first_name'],
    'CarRegistration' => ['vin','car_plate','owner'],
];

foreach ($targets as $t => $fields) {
    if ($only && $only !== $t) continue;
    echo "\n=== $t ===\n";
    $rows = $con->query("SELECT * FROM `$t` ORDER BY RAND() LIMIT $n")->fetchAll(PDO::FETCH_ASSOC);
    if (!$rows) { echo "  (no rows)\n"; continue; }

    foreach ($rows as $r) {
        $pk = $r['id'] ?? $r['idn'] ?? '?';
        echo "  row [$pk]\n";
        foreach ($fields as $f) {
            if (!array_key_exists($f, $r)) continue;
            printf("    %-16s %s\n", $f, dec($r[$f]));
        }
        // فهارس البحث موجودة؟
        foreach (['phone_bidx','email_bidx','name_bidx'] as $idx) {
            if (array_key_exists($idx, $r)) {
                printf("    %-16s %s\n", $idx, empty($r[$idx]) ? '(missing!)' : substr($r[$idx], 0, 12) . '…');
            }
        }
    }
}
echo "\nDone.\n";