<?php
/**
 * Activation, deactivation and capability setup.
 *
 * @package TFlexForms
 */

declare( strict_types = 1 );

namespace TFlexForms;

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/**
 * Handles one-time setup tasks.
 */
final class Installer {

	public const VERSION_OPTION = 'tflexforms_version';

	/**
	 * Primitive capabilities generated by the form post type
	 * (capability_type tflexforms_form / tflexforms_forms with map_meta_cap).
	 *
	 * @return string[]
	 */
	public static function capabilities(): array {
		return array(
			'edit_tflexforms_forms',
			'edit_others_tflexforms_forms',
			'edit_published_tflexforms_forms',
			'edit_private_tflexforms_forms',
			'publish_tflexforms_forms',
			'read_private_tflexforms_forms',
			'delete_tflexforms_forms',
			'delete_others_tflexforms_forms',
			'delete_published_tflexforms_forms',
			'delete_private_tflexforms_forms',
			// Stored entries contain personal data, so they have their own capabilities.
			'read_tflexforms_entries',
			'edit_tflexforms_entries', // Notes, tags and changing submitted values.
			'delete_tflexforms_entries',
		);
	}

	/**
	 * Runs on plugin activation.
	 */
	public static function activate(): void {
		// Only administrators manage forms by default. Site owners can grant the
		// capabilities to other roles with any role editor.
		$role = get_role( 'administrator' );
		if ( $role instanceof \WP_Role ) {
			foreach ( self::capabilities() as $cap ) {
				$role->add_cap( $cap );
			}
		}
		Database::install();
		Maintenance::schedule();
		Jobs::schedule_next();
		update_option( self::VERSION_OPTION, VERSION, false );
	}

	/**
	 * Runs on plugin deactivation. Data and capabilities are kept so that
	 * reactivating restores everything; uninstall.php removes them.
	 */
	public static function deactivate(): void {
		Maintenance::unschedule();
	}

	/**
	 * Re-applies setup after a plugin update (activation hooks do not run on update),
	 * or when the database schema is behind the code, then continues converting
	 * forms to schemas and encrypting files stored unencrypted by earlier builds until all are done.
	 */
	public static function maybe_upgrade(): void {
		if ( get_option( self::VERSION_OPTION ) !== VERSION || get_option( Database::VERSION_OPTION ) !== Database::SCHEMA_VERSION ) {
			self::activate();
		}
		Schema_Migration::maybe_run();
		Uploads::encrypt_existing();
	}
}