<?php
/**
 * What the plugin reports about the site: whether file changes are allowed, and
 * which plugin and theme updates WordPress already knows about.
 *
 * Read-only. Nothing here installs, updates, activates, switches or deletes
 * anything, and nothing takes an address from the caller.
 *
 * @package Automatio_Connect
 */

defined( 'ABSPATH' ) || exit;

class Automatio_Connect_Updates {

	/**
	 * Can this site change its own files at all (DISALLOW_FILE_MODS, or a filter)?
	 * A real boolean: a site filter may return 1 or 0, and the app reads the status
	 * field as a boolean.
	 */
	public static function file_mods_allowed() {
		return (bool) wp_is_file_mod_allowed( 'automatio_connect' );
	}

	private static function load_includes() {
		require_once ABSPATH . 'wp-admin/includes/plugin.php';
		require_once ABSPATH . 'wp-includes/update.php';
	}

	/**
	 * Ask WordPress.org again, instead of trusting a transient that may be a day
	 * old. wp_update_plugins() and wp_update_themes() return early inside a request
	 * when their last check is under 12 hours old and no installed version changed,
	 * so without this a refresh asked nobody on a live site, where WP-cron checks
	 * twice a day, and an update WordPress.org already had stayed invisible.
	 *
	 * The cache is NOT cleared: WordPress records "checked just now" before it sends
	 * the request and returns when the request fails, so clearing it first would
	 * turn a slow or unreachable api.wordpress.org into "no updates waiting" on the
	 * Updates screen for hours. Instead the cached check is marked old (its list is
	 * kept) and WordPress runs its own check: if the request fails the list stays,
	 * as with WordPress's own twice-daily check, and if it answers, WordPress saves
	 * what comes back. The only thing written here is WordPress's own record of when
	 * it last checked, which WordPress overwrites itself a moment later.
	 */
	public static function refresh_updates() {
		self::load_includes();
		foreach ( array( 'update_plugins', 'update_themes' ) as $name ) {
			$cached = get_site_transient( $name );
			if ( is_object( $cached ) ) {
				$cached->last_checked = 0;
				set_site_transient( $name, $cached );
			}
		}
		wp_update_plugins();
		wp_update_themes();
	}

	/**
	 * The updates WordPress already knows about, as it shows them on its own
	 * Updates screen: which plugin or theme, the version it has and the version
	 * on offer. No download address is returned.
	 *
	 * @return array{plugins: array<int,array<string,string>>, themes: array<int,array<string,string>>}
	 */
	public static function pending_updates() {
		self::load_includes();
		$out = array(
			'plugins' => array(),
			'themes'  => array(),
		);

		$plugin_updates = get_site_transient( 'update_plugins' );
		if ( $plugin_updates && ! empty( $plugin_updates->response ) ) {
			$installed = get_plugins();
			foreach ( $plugin_updates->response as $file => $data ) {
				if ( ! isset( $installed[ $file ] ) ) {
					continue;
				}
				$out['plugins'][] = array(
					'plugin'    => (string) $file,
					'name'      => (string) $installed[ $file ]['Name'],
					'current'   => (string) $installed[ $file ]['Version'],
					'available' => isset( $data->new_version ) ? (string) $data->new_version : '',
				);
			}
		}

		$theme_updates = get_site_transient( 'update_themes' );
		if ( $theme_updates && ! empty( $theme_updates->response ) ) {
			foreach ( $theme_updates->response as $slug => $data ) {
				$theme = wp_get_theme( $slug );
				if ( ! $theme->exists() ) {
					continue;
				}
				$out['themes'][] = array(
					'theme'     => (string) $slug,
					'name'      => (string) $theme->get( 'Name' ),
					'current'   => (string) $theme->get( 'Version' ),
					'available' => isset( $data['new_version'] ) ? (string) $data['new_version'] : '',
				);
			}
		}
		return $out;
	}
}