<?php
/**
 * Activation, upgrade and cleanup.
 *
 * @package Aslansheed\OTP
 */

namespace Aslansheed\OTP\Database;

use Aslansheed\OTP\Security\Audit_Log;

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/**
 * Creates tables on activation, upgrades them when the schema version
 * changes, and runs the daily cleanup job.
 */
final class Installer {

	const DB_VERSION_OPTION = 'aslansheed_otp_db_version';
	const CRON_HOOK         = 'aslansheed_otp_daily_cleanup';

	/**
	 * Activation callback.
	 *
	 * @return void
	 */
	public static function activate() {
		Schema::create_tables();
		update_option( self::DB_VERSION_OPTION, ASLANSHEED_OTP_DB_VERSION, false );

		if ( ! wp_next_scheduled( self::CRON_HOOK ) ) {
			wp_schedule_event( time() + HOUR_IN_SECONDS, 'daily', self::CRON_HOOK );
		}
	}

	/**
	 * Deactivation callback. Data is kept.
	 *
	 * @return void
	 */
	public static function deactivate() {
		wp_clear_scheduled_hook( self::CRON_HOOK );
	}

	/**
	 * Upgrades the schema when the stored version is older than the code.
	 *
	 * @return void
	 */
	public static function maybe_upgrade() {
		if ( get_option( self::DB_VERSION_OPTION ) === ASLANSHEED_OTP_DB_VERSION ) {
			return;
		}

		self::activate();
	}

	/**
	 * Removes expired codes and old log rows.
	 *
	 * @return void
	 */
	public static function run_cleanup() {
		global $wpdb;

		$now = gmdate( 'Y-m-d H:i:s' );

		// phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Custom tables, maintenance job.
		$jobs = array(
			'otp_codes'   => $now,
			'attempts'    => gmdate( 'Y-m-d H:i:s', time() - DAY_IN_SECONDS ),
			'message_log' => gmdate( 'Y-m-d H:i:s', time() - 90 * DAY_IN_SECONDS ),
		);

		foreach ( $jobs as $short => $cutoff ) {
			$table = esc_sql( Schema::table( $short ) );
			$col   = 'otp_codes' === $short ? 'expires_at' : 'created_at';

			$wpdb->query( $wpdb->prepare( "DELETE FROM `{$table}` WHERE {$col} < %s", $cutoff ) ); // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- Table and column names are fixed internal values.
		}
		// phpcs:enable

		Audit_Log::purge_expired();
	}
}