<?php
/**
 * Uninstall handler (§9.7, Part A step 7).
 *
 * Calling DELETE on every uninstall is deliberate and confirmed by the backend (Part A as implemented,
 * 29 Sep 2026): it revokes tokens and deactivates the site but never touches consent records, scan
 * findings or evidence, so the account and evidence are kept by default as §9.7 intends. Deleting the
 * account stays an explicit opt-in (deletion request below).
 *
 * For each site (every site on a multisite network), tells Consiva the plugin is gone
 * (DELETE /installations/{id}): Consiva revokes the tokens and pauses the
 * banner, but keeps every consent record, scan result and evidence artefact. Then removes local options
 * and transients. The Consiva call is best effort; local cleanup happens whether or not it succeeds.
 *
 * @package Consiva\Consent
 */

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

if ( ! defined( 'WP_UNINSTALL_PLUGIN' ) ) {
	exit;
}

// WP-CLI (`wp plugin uninstall`) runs with no user; it is already an administrator's command.
if ( ! ( defined( 'WP_CLI' ) && WP_CLI ) && ! current_user_can( 'activate_plugins' ) ) {
	return;
}

// The plugin is inactive during uninstall, so load its constants and autoloader to reuse the API client.
if ( ! defined( 'CONSIVA_CONSENT_VERSION' ) ) {
	require_once __DIR__ . '/consiva-consent.php';
}

/**
 * Uninstalls the plugin for the current site: tells Consiva, then removes local data.
 *
 * @return void
 */
function consiva_consent_uninstall_site() {
	global $wpdb;

	if ( \Consiva\Consent\Api\TokenStore::is_connected() ) {
		// Queued form/checkout consent is evidence: send it before the credentials go (§9.7).
		\Consiva\Consent\Consent\LocalBuffer::flush();
		$consiva_consent_client = new \Consiva\Consent\Api\ConsivaClient();
		// WP-F18: the admin chose, when deactivating, to have their Consiva account deleted too.
		if ( 'delete' === get_option( 'consiva_consent_uninstall_choice' ) && \Consiva\Consent\Api\Availability::has( \Consiva\Consent\Api\Availability::UNINSTALL_FEEDBACK ) ) {
			$consiva_consent_client->request_account_deletion();
		}
		$consiva_consent_client->delete_installation();
	}
	foreach ( array( 'consiva_consent_heartbeat', 'consiva_consent_refresh_runtime', 'consiva_consent_flush_events' ) as $consiva_consent_hook ) {
		wp_clear_scheduled_hook( $consiva_consent_hook );
	}

	foreach ( array(
		'consiva_consent_connection',
		'consiva_consent_disclosure',
		'consiva_consent_state',
		'consiva_consent_reconnect_required',
		'consiva_consent_refresh_lock',
		'consiva_consent_runtime',
		'consiva_consent_server_consent',
		'consiva_consent_form_activity',
		'consiva_consent_forms_seen',
		'consiva_consent_event_stats',
		'consiva_consent_flush_lock',
		'consiva_consent_recent_requests',
		'consiva_consent_uninstall_choice',
		'consiva_consent_buffer_conflict',
		'consiva_consent_log',
	) as $consiva_consent_option ) {
		delete_option( $consiva_consent_option );
	}
	// By name too, so sites with a persistent object cache (where transients are not in wp_options) are
	// cleaned. Per-user and per-attempt transients (notices, connect state) expire within minutes.
	foreach ( array(
		'consiva_consent_verify_token',
		'consiva_consent_access_token',
		'consiva_consent_installation_cache',
		'consiva_consent_dashboard_summary',
		'consiva_consent_recommendations',
		'consiva_consent_verification_view',
		'consiva_consent_scan_view',
		'consiva_consent_activation_redirect',
	) as $consiva_consent_transient ) {
		delete_transient( $consiva_consent_transient );
	}
	\Consiva\Consent\Support\Capabilities::remove_from_roles();

	// Unsent consent events, and short-lived per-attempt and per-user transients (names with a random suffix).
	$consiva_consent_like = array(
		$wpdb->esc_like( 'consiva_consent_evt_' ) . '%',
		$wpdb->esc_like( '_transient_consiva_consent_' ) . '%',
		$wpdb->esc_like( '_transient_timeout_consiva_consent_' ) . '%',
	);
	foreach ( $consiva_consent_like as $consiva_consent_pattern ) {
		// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching -- one-off cleanup on uninstall.
		$wpdb->query( $wpdb->prepare( "DELETE FROM {$wpdb->options} WHERE option_name LIKE %s", $consiva_consent_pattern ) );
	}
}

if ( is_multisite() ) {
	// Per-site tenancy (Plugin §8.5): every site in the network has its own connection and data.
	foreach ( get_sites(
		array(
			'fields' => 'ids',
			'number' => 0,
		)
	) as $consiva_consent_site_id ) {
		switch_to_blog( $consiva_consent_site_id );
		consiva_consent_uninstall_site();
		restore_current_blog();
	}
} else {
	consiva_consent_uninstall_site();
}

// User meta is shared by every site in a network: once.
delete_metadata( 'user', 0, 'consiva_consent_conflict_dismissed', '', true );