<?php
/**
 * Plugin Name: FormArmor
 * Description: Connect supported WordPress contact forms to FormArmor for AI-assisted sales and spam filtering. A FormArmor account is required.
 * Version: 0.2.6
 * Requires at least: 7.1
 * Requires PHP: 8.2
 * Author: FormArmor
 * Author URI: https://jevguard.jp/
 * License: GPLv2 or later
 * License URI: https://www.gnu.org/licenses/old-licenses/gpl-2.0.html
 * Text Domain: formarmor
 * Plugin URI: https://jevguard.jp/wordpress
 */
/*
 * Copyright (C) 2026 FormArmor
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 2 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See LICENSE.txt.
 */
defined('ABSPATH') || exit;
if (!defined('FORMGUARD_API_ORIGIN')) {
    define('FORMGUARD_API_ORIGIN', 'https://api.jevguard.jp');
}
if (!defined('FORMGUARD_CONSOLE_ORIGIN')) {
    define('FORMGUARD_CONSOLE_ORIGIN', 'https://app.jevguard.jp');
}

// No public REST routes, stored submissions, or global wp_mail filtering.
final class FormGuard_Client {
    public function decide(string $form_ref, array $fields): ?array {
        $config = get_option('formguard_connection', []);
        // A successful settings sync provisions this site's credentials locally.
        if (!defined('FORMGUARD_API_ORIGIN') || empty($config['site_id']) || empty($config['secret']) || empty($config['key_id'])) {
            return null;
        }
        $origin = FORMGUARD_API_ORIGIN;
        if (!is_string($origin) || !str_starts_with($origin, 'https://')) {
            return null;
        }
        $request_id = wp_generate_uuid4();
        $body = wp_json_encode([
            'request_id' => $request_id,
            'site_id' => $config['site_id'],
            'form_ref' => $form_ref,
            'delivery_protocol' => 'receipt_v1',
            'payload' => ['text_fields' => $fields],
        ]);
        if (!is_string($body) || strlen($body) > 65536) {
            return null;
        }
        $timestamp = (string) time();
        $path = '/v1/decisions';
        $signature = hash_hmac('sha256', implode("\n", ['POST', $path, $timestamp, $request_id, hash('sha256', $body)]), $config['secret']);
        $response = wp_remote_post(rtrim($origin, '/') . $path, [
            'timeout' => 5,
            'redirection' => 0,
            'headers' => [
                'Content-Type' => 'application/json',
                'X-FormGuard-Key-Id' => $config['key_id'],
                'X-FormGuard-Timestamp' => $timestamp,
                'X-FormGuard-Signature' => $signature,
            ],
            'body' => $body,
            'limit_response_size' => 16384,
        ]);
        if (is_wp_error($response) || wp_remote_retrieve_response_code($response) !== 200) {
            update_option('formguard_status', ['state' => 'degraded', 'at' => time()], false);
            return null; // Continue the existing form flow on infrastructure failure.
        }
        $result = json_decode(wp_remote_retrieve_body($response), true);
        if (!is_array($result) || ($result['request_id'] ?? '') !== $request_id || !in_array($result['decision']['action'] ?? '', ['allow', 'block', 'review'], true)) {
            return null;
        }
        // Review can only hold a submission that was durably captured.
        if ($result['decision']['action'] === 'review' && ($result['capture']['status'] ?? '') !== 'stored') {
            return null;
        }
        update_option('formguard_status', ['state' => $result['enforcement']['status'] ?? 'unknown', 'at' => time()], false);
        return $result;
    }
}

require_once __DIR__ . '/includes/fluentforms.php';
require_once __DIR__ . '/includes/forminator.php';
require_once __DIR__ . '/includes/forms.php';
require_once __DIR__ . '/includes/releases.php';
require_once __DIR__ . '/includes/receipts.php';
require_once __DIR__ . '/includes/settings.php';
FormGuard_Settings::register();
// Enable only after a successful connection or an explicit development opt-in.
// WordPress returns persisted boolean options as "1"/"" on later requests.
if ((defined('FORMGUARD_ENABLE_ADAPTERS') && FORMGUARD_ENABLE_ADAPTERS === true) || (bool) get_option('formguard_enabled', false)) {
    FormGuard_Forms::register();
    FormGuard_Releases::register();
    FormGuard_Receipts::register();
}
register_deactivation_hook(__FILE__, static function (): void {
    wp_clear_scheduled_hook('formguard_release_poll');
});