<?php
declare(strict_types=1);

// 수집 거부 출처 로그 헬퍼 회귀 (DB/파일 없이 순수 로직만).
//   ingest_sanitize_token(): 로그 인젝션 방지(제어문자 제거·절단)
//   ingest_client_ip():      REMOTE_ADDR 형식검증(부재/위조형식 → '?')
//   함수/상수 존재: record_ingest_reject_event / read_ingest_reject_events / INGEST_REJECT_EVENTS_MAX

$root = dirname(__DIR__);
require_once $root . '/php/config.php';

$failures = [];
function check(bool $cond, string $msg): void { global $failures; if (!$cond) { $failures[] = $msg; } }
function eq($a, $b, string $msg): void {
    check($a === $b, $msg . ' (expected ' . var_export($b, true) . ', got ' . var_export($a, true) . ')');
}

// ── 함수/상수 존재 ──────────────────────────────────────────
check(function_exists('ingest_sanitize_token'), 'ingest_sanitize_token() should exist.');
check(function_exists('ingest_client_ip'), 'ingest_client_ip() should exist.');
check(function_exists('record_ingest_reject_event'), 'record_ingest_reject_event() should exist.');
check(function_exists('read_ingest_reject_events'), 'read_ingest_reject_events() should exist.');
check(defined('INGEST_REJECT_EVENTS_MAX'), 'INGEST_REJECT_EVENTS_MAX should be defined.');

// ── ingest_sanitize_token: 로그 인젝션/제어문자 방지 ────────
eq(ingest_sanitize_token('rpi4-leak-02', 32), 'rpi4-leak-02', 'plain token unchanged');
// 개행/캐리지리턴 → 위조 로그줄 주입 차단(제어문자는 공백 처리)
check(strpos(ingest_sanitize_token("rpi\n[API] 서명 불일치 from evil", 64), "\n") === false,
    'newline stripped (log injection blocked)');
check(strpos(ingest_sanitize_token("a\r\nb", 64), "\r") === false, 'carriage return stripped');
check(strpos(ingest_sanitize_token("a\tb", 64), "\t") === false, 'tab stripped');
// 길이 절단
check(mb_strlen(ingest_sanitize_token(str_repeat('x', 100), 32)) === 32, 'truncated to max length');
eq(ingest_sanitize_token('  spaced  ', 32), 'spaced', 'trimmed');
eq(ingest_sanitize_token('abc', 0), 'abc', 'max 0 -> no truncation');

// ── ingest_client_ip: REMOTE_ADDR 형식검증 ──────────────────
$_SERVER['REMOTE_ADDR'] = '203.0.113.9';
eq(ingest_client_ip(), '203.0.113.9', 'valid IPv4 returned');
$_SERVER['REMOTE_ADDR'] = '2001:db8::1';
eq(ingest_client_ip(), '2001:db8::1', 'valid IPv6 returned');
$_SERVER['REMOTE_ADDR'] = 'not-an-ip';
eq(ingest_client_ip(), '?', 'invalid IP format -> ?');
unset($_SERVER['REMOTE_ADDR']);
eq(ingest_client_ip(), '?', 'missing REMOTE_ADDR -> ?');

if ($failures) {
    fwrite(STDERR, "Ingest reject-log test failures:\n");
    foreach ($failures as $f) {
        fwrite(STDERR, "- {$f}\n");
    }
    exit(1);
}

echo "Ingest reject-log checks passed.\n";