<?php
namespace ABeCe\Booking\Integration;
use ABeCe\Booking\Repository\PrivacyRepository;
use ABeCe\Booking\Service\PrivacyIdentityService;
use ABeCe\Booking\Service\PrivacyExportService;
use ABeCe\Booking\Service\PrivacyErasureService;
use ABeCe\Booking\Service\PrivacyRetentionService;
/** WordPress-native privacy integration; core in every physical edition. */
final class Privacy {
 private array $databaseScopes=[];
 private function services():array {global $wpdb;$r=new PrivacyRepository($wpdb);$identity=new PrivacyIdentityService($r);$eraser=new PrivacyErasureService($r,$identity);return [$r,$identity,$eraser,new PrivacyRetentionService($r,$eraser)];}
 public function register():void {
  // Scope WordPress's raw SQL logging to ASB callbacks only; preserve domain errors and restore foreign requests.
  add_filter('rest_request_before_callbacks',function($response,$handler,$request){if(str_starts_with($request->get_route(),'/abece-booking/v1/')){global $wpdb;$this->databaseScopes[spl_object_id($request)][]=$wpdb->suppress_errors(true);}return $response;},PHP_INT_MIN,3);
  add_filter('rest_request_after_callbacks',function($response,$handler,$request){$key=spl_object_id($request);if(!empty($this->databaseScopes[$key])){global $wpdb;$wpdb->suppress_errors(array_pop($this->databaseScopes[$key]));if(!$this->databaseScopes[$key])unset($this->databaseScopes[$key]);}return $response;},PHP_INT_MAX,3);
  add_action('admin_init',function(){if(function_exists('wp_add_privacy_policy_content'))wp_add_privacy_policy_content('ABeCe Booking',wpautop(esc_html(self::policyText())));});
  add_filter('wp_privacy_personal_data_exporters',function($items){$items['abece-booking']=['exporter_friendly_name'=>'ABeCe Booking','callback'=>[$this,'export']];return $items;});
  add_filter('wp_privacy_personal_data_erasers',function($items){$items['abece-booking']=['eraser_friendly_name'=>'ABeCe Booking','callback'=>[$this,'erase']];return $items;});
  add_action('rest_api_init',function(){[, $identity,, $retention]=$this->services();(new \ABeCe\Booking\Api\PrivacyController($retention,$identity))->register();global $wpdb;(new \ABeCe\Booking\Api\PrivacyRequestsController(new \ABeCe\Booking\Service\PrivacyRequestsService(new \ABeCe\Booking\Repository\PrivacyRequestsRepository($wpdb),$identity)))->register();});
  // Check self-service identity before ANY core/plugin exporter or eraser runs.
  // A reassigned mailbox must never turn an old request into authority over a new person.
  foreach(['export','erase'] as $kind)add_action('wp_ajax_wp-privacy-'.$kind.'-personal-data',function()use($kind){
   $id=is_string($_POST['id']??null)?filter_var(wp_unslash($_POST['id']),FILTER_VALIDATE_INT):false;$cap=$kind==='export'?'export_others_personal_data':'erase_others_personal_data';
   if(!$id||!current_user_can($cap)||!wp_verify_nonce(is_string($_POST['security']??null)?sanitize_text_field(wp_unslash($_POST['security'])):'','wp-privacy-'.$kind.'-personal-data-'.$id))return;
   global $wpdb;[, $identity]=$this->services();$service=new \ABeCe\Booking\Service\PrivacyRequestsService(new \ABeCe\Booking\Repository\PrivacyRequestsRepository($wpdb),$identity);
   if(!$service->nativeIdentityValid((int)$id)){update_post_meta($id,'abece_booking_privacy_review_required',true);wp_send_json_error(__('Your identity requires individual verification. Please contact the operator.','abece-booking'),403);}
  },0);
  add_action('abece_booking_privacy_retention',function(){try{[,,, $retention]=$this->services();$retention->run(true,true);}catch(\Throwable){error_log('ABeCe Booking: privacy cleanup deferred; no personal details logged.');}});
  add_action('abece_booking_privacy_plan_expire',static function($request){foreach(['abece_booking_privacy_export_plan','abece_booking_privacy_identity'] as $key){$value=get_post_meta((int)$request,$key,true);if(!is_array($value)||($value['expires']??0)<=time())delete_post_meta((int)$request,$key);}});
  add_action('admin_notices',function(){if(!current_user_can('manage_privacy_options')||get_privacy_policy_url()||!str_starts_with((is_string($_GET['page']??null)?sanitize_key(wp_unslash($_GET['page'])):''),'abece-booking'))return;echo '<div class="notice notice-info"><p>'.esc_html__('Set a WordPress privacy-policy page so customers can read it before booking.','abece-booking').' <a href="'.esc_url(admin_url('options-privacy.php')).'">'.esc_html__('Privacy settings','abece-booking').'</a></p></div>';});
 }
 public function export(string $email,int $page=1):array {global $wpdb;$previous=$wpdb->suppress_errors(true);try{[$r,$i]=$this->services();$request=PrivacyIdentityService::requestId($email);$result=(new PrivacyExportService($r,$i))->export($email,$page,$request);if($request)foreach($result['data'] as $item)if(($item['group_id']??'')==='abece-review')update_post_meta($request,'abece_booking_privacy_review_required',true);return $result;}catch(\Throwable){return ['data'=>[['group_id'=>'abece-review','group_label'=>'ABeCe Booking','item_id'=>'processing-error','data'=>[['name'=>__('Review required','abece-booking'),'value'=>__('Privacy processing could not be completed. Restart the request or contact the operator.','abece-booking')]]]],'done'=>true];}finally{$wpdb->suppress_errors($previous);}}
 public function erase(string $email,int $page=1):array {global $wpdb;$previous=$wpdb->suppress_errors(true);try{[,, $eraser]=$this->services();$request=PrivacyIdentityService::requestId($email);$result=$eraser->erase($email,$page,$request);if($request&&$result['items_retained'])update_post_meta($request,'abece_booking_privacy_retained',true);return $result;}catch(\Throwable){return ['items_removed'=>false,'items_retained'=>true,'messages'=>[__('Privacy processing could not be completed. Restart the request or contact the operator.','abece-booking')],'done'=>true];}finally{$wpdb->suppress_errors($previous);}}
 public static function policyText():string {return __('Operator: [ADD LEGAL NAME, ADDRESS AND PRIVACY CONTACT]. Describe your purposes and legal bases; installing this plugin does not determine them.','abece-booking')."\n\n".__('This site uses ABeCe Booking for venue reservations. We process contact details, bookings and participants, optional club membership and date of birth for member identification, payments, amounts due and credit history where used, customer restrictions, operational audit records and transactional emails. A guest booking does not require a date of birth. Do not put unnecessary sensitive information in notes.','abece-booking')."\n\n".__('Operator: specify which fields are required, who may access them, your retention periods and reasons for exceptions, recipients, hosting, email delivery and backup arrangements. Explain rights to access, correction and erasure, how to verify a request and how to contact the competent supervisory authority. Assess children’s data and representative authority individually.','abece-booking')."\n\n".__('WordPress privacy tools provide personal-data export and erasure. Shared email addresses, mixed notes and historical snapshots may require individual verification or a reviewed supplement to protect other people. Active bookings, memberships, unresolved restrictions and financial evidence may be retained for a documented purpose with a later review. Remaining linked records are not automatically anonymous. The operator also manages backups and copies already sent by email.','abece-booking')."\n\n".__('Club records remain in this WordPress installation. Freemius handles the site operator’s licensing, purchases and optional installation diagnostics; our integration does not send club customer, member, booking or payment databases to Freemius. Lite can be used after skipping optional sharing. Address lookup sends the entered venue address to OpenStreetMap/Nominatim only on request; coordinates can be entered manually. QR generation and translations run locally. Hosting and email providers are selected by the operator. Add the actual providers, transfer safeguards and legal details for your installation.','abece-booking');}
}