<?php
/**
 * Uninstall Script
 *
 * Fired when the plugin is uninstalled.
 * Cleans up all plugin data, options, and custom directories.
 *
 * @package Gatewell
 * @since 1.0.0
 */

// If uninstall not called from WordPress, exit.
if ( ! defined( 'WP_UNINSTALL_PLUGIN' ) ) {
	exit;
}

/**
 * Delete all plugin options.
 */
function gatewell_delete_plugin_options() {
	delete_option( 'gatewell_upload_count' );
	delete_option( 'gatewell_installed_at' );
	delete_metadata( 'user', 0, 'gatewell_feedback_dismissed', '', true );
	delete_option( 'gatewell_form_fields' );
	delete_option( 'gatewell_field_minimums' );
	delete_option( 'gatewell_size_limits' );
	delete_option( 'gatewell_compression_quality' );
	delete_option( 'gatewell_format_conversion' );
	delete_option( 'gatewell_original_storage' );
	delete_option( 'gatewell_allowed_formats' );
	delete_option( 'gatewell_ui_options' );
	delete_option( 'gatewell_access_roles' );
	delete_option( 'gatewell_post_types' );
	delete_option( 'gatewell_db_version' );
	delete_option( 'gatewell_analytics_cache_version' );

	// Delete File Type Controls options (Phase 3 & 4)
	delete_option( 'gatewell_file_type_enabled' );
	delete_option( 'gatewell_mime_mode' );
	delete_option( 'gatewell_mime_whitelist' );
	delete_option( 'gatewell_mime_blacklist' );
	delete_option( 'gatewell_role_file_access' );
	delete_option( 'gatewell_posttype_upload_rules' );
	delete_option( 'gatewell_posttype_file_restrictions' ); // Legacy cleanup
	delete_option( 'gatewell_location_format_rules' );
	delete_option( 'gatewell_type_metadata_overrides' );
	delete_option( 'gatewell_conditional_metadata_rules' );
	delete_option( 'gatewell_naming_conventions' );

	// Upload/metadata options.
	delete_option( 'gatewell_metadata_preservation' );
	delete_option( 'gatewell_enable_non_images' );
	delete_option( 'gatewell_file_type_size_limits' );
	delete_option( 'gatewell_require_unique_fields' );
	delete_option( 'gatewell_uniqueness_threshold' );
	delete_option( 'gatewell_plugin_cooperation' );

	// Rules System data set.
	delete_option( 'gatewell_upload_rules' );

	// Feature flags.
	delete_option( 'gatewell_join_beta_program' );
	delete_option( 'gatewell_rules_admin_only' );
	delete_option( 'gatewell_rules_stable_release' );
	delete_option( 'gatewell_show_branding' );
	delete_option( 'gatewell_agency_plan' );

	// AI alt-text options (PRO). Removed here too so an uninstall after a
	// downgrade from PRO does not leave the API key behind in the database.
	delete_option( 'gatewell_ai_api_key' );
	delete_option( 'gatewell_ai_model' );
	delete_option( 'gatewell_ai_char_limit' );
	delete_option( 'gatewell_ai_language' );
	delete_option( 'gatewell_ai_auto_detect' );
	delete_option( 'gatewell_ai_all_languages' );

	// White-label / Agency options (PRO).
	delete_option( 'gatewell_agency_logo' );
	delete_option( 'gatewell_agency_name' );
	delete_option( 'gatewell_agency_url' );
	delete_option( 'gatewell_primary_color' );
	delete_option( 'gatewell_accent_color' );
	delete_option( 'gatewell_support_url' );
	delete_option( 'gatewell_documentation_url' );
	delete_option( 'gatewell_hide_powered_by' );
	delete_option( 'gatewell_hide_upgrade_notices' );
	delete_option( 'gatewell_custom_footer_text' );

	// Remote storage OAuth state (PRO).
	delete_option( 'gatewell_dropbox_oauth_state' );

	// Delete transients.
	delete_transient( 'gatewell_heic_support_check' );
}

/**
 * Delete per-month AI usage counters (gatewell_ai_usage_YYYY-MM).
 *
 * These option names are generated at runtime, so they cannot be removed with
 * a fixed list of delete_option() calls.
 */
function gatewell_delete_usage_counters() {
	global $wpdb;

	// phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery
	// phpcs:disable WordPress.DB.DirectDatabaseQuery.NoCaching
	$option_names = $wpdb->get_col(
		$wpdb->prepare(
			"SELECT option_name FROM {$wpdb->options} WHERE option_name LIKE %s",
			$wpdb->esc_like( 'gatewell_ai_usage_' ) . '%'
		)
	);
	// phpcs:enable WordPress.DB.DirectDatabaseQuery.NoCaching
	// phpcs:enable WordPress.DB.DirectDatabaseQuery.DirectQuery

	foreach ( $option_names as $option_name ) {
		delete_option( $option_name );
	}
}

/**
 * Delete any surviving pre-rename imagelock_* options.
 *
 * Normally the 1.6.0 upgrade migration has already moved these to gatewell_*,
 * but an install that was never loaded in wp-admin between upgrading and being
 * deleted would still have them, and the fixed delete_option() list above only
 * knows the new names.
 */
function gatewell_delete_legacy_options() {
	global $wpdb;

	// phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery
	// phpcs:disable WordPress.DB.DirectDatabaseQuery.NoCaching
	$option_names = $wpdb->get_col(
		$wpdb->prepare(
			"SELECT option_name FROM {$wpdb->options} WHERE option_name LIKE %s",
			$wpdb->esc_like( 'imagelock_' ) . '%'
		)
	);
	// phpcs:enable WordPress.DB.DirectDatabaseQuery.NoCaching
	// phpcs:enable WordPress.DB.DirectDatabaseQuery.DirectQuery

	foreach ( $option_names as $option_name ) {
		delete_option( $option_name );
	}
}

/**
 * Drop custom database tables.
 */
function gatewell_drop_custom_tables() {
	global $wpdb;

	// Still `image_lock_audit_bridge` after the Gatewell rename: this table is
	// the shared ImageAudit integration surface, not private plugin state, and
	// renaming it here without a matching change in ImageAudit would split the
	// two plugins across two table names. See Migration::get_bridge_table_name().
	$bridge_table = $wpdb->prefix . 'image_lock_audit_bridge';

	// Only delete table if ImageAudit plugin is not active.
	// This preserves optimization history if user still has ImageAudit installed.
	if ( ! defined( 'IMAGE_AUDIT_VERSION' ) ) {
		// phpcs:disable WordPress.DB.PreparedSQL.InterpolatedNotPrepared, PluginCheck.Security.DirectDB.UnescapedDBParameter -- $bridge_table is $wpdb->prefix plus a hard-coded literal, never request data, and a table name cannot be bound with prepare().
		// phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.DirectDatabaseQuery.SchemaChange -- Uninstall-time DROP TABLE for a plugin-owned table; WordPress has no API for dropping a custom table, and there is nothing to cache.
		$wpdb->query( "DROP TABLE IF EXISTS {$bridge_table}" );
		// phpcs:enable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.DirectDatabaseQuery.SchemaChange
		// phpcs:enable WordPress.DB.PreparedSQL.InterpolatedNotPrepared, PluginCheck.Security.DirectDB.UnescapedDBParameter
	}

	// Analytics tables are plugin-private, so they always go. Both prefixes are
	// listed: an install that upgraded from ImageLock but never reached
	// wp-admin still has the imagelock_* tables under their original names.
	$analytics_tables = array(
		$wpdb->prefix . 'gatewell_upload_events',
		$wpdb->prefix . 'gatewell_analytics_daily',
		$wpdb->prefix . 'gatewell_analytics_monthly',
		$wpdb->prefix . 'imagelock_upload_events',
		$wpdb->prefix . 'imagelock_analytics_daily',
		$wpdb->prefix . 'imagelock_analytics_monthly',
	);

	// phpcs:disable WordPress.DB.PreparedSQL.InterpolatedNotPrepared, PluginCheck.Security.DirectDB.UnescapedDBParameter -- Each name is $wpdb->prefix plus a hard-coded literal from the array above, never request data, and additionally passed through esc_sql(). A table name cannot be bound with prepare().
	// phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.DirectDatabaseQuery.SchemaChange -- Uninstall-time DROP TABLE for plugin-owned tables; WordPress has no API for dropping a custom table, and there is nothing to cache.
	foreach ( $analytics_tables as $analytics_table ) {
		$safe_table = esc_sql( $analytics_table );
		$wpdb->query( "DROP TABLE IF EXISTS {$safe_table}" );
	}
	// phpcs:enable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.DirectDatabaseQuery.SchemaChange
	// phpcs:enable WordPress.DB.PreparedSQL.InterpolatedNotPrepared, PluginCheck.Security.DirectDB.UnescapedDBParameter
}

/**
 * Clean up custom upload directories.
 *
 * Uses the WordPress filesystem API. WP_Filesystem::rmdir() with $recursive = true
 * removes the directory and everything under it, so no hand-rolled recursion is
 * needed. (A previous version called wp_delete_dir(), which is not a WordPress
 * function and fatalled here, aborting the uninstall.)
 *
 * @since 1.0.0
 */
function gatewell_cleanup_directories() {
	$upload_dir = wp_upload_dir();
	$base_dir   = $upload_dir['basedir'];

	// Directories to clean up. The imagelock-* names are the pre-rename
	// directories: an install upgraded from ImageLock keeps writing new files
	// to the gatewell-* folders but leaves the old ones in place on disk, so
	// uninstall has to remove both or the originals are orphaned in uploads.
	$directories = array(
		$base_dir . '/gatewell-temp',
		$base_dir . '/gatewell-originals',
		$base_dir . '/imagelock-temp',
		$base_dir . '/imagelock-originals',
	);

	global $wp_filesystem;
	if ( empty( $wp_filesystem ) ) {
		require_once ABSPATH . 'wp-admin/includes/file.php';
		WP_Filesystem();
	}

	if ( empty( $wp_filesystem ) ) {
		return;
	}

	foreach ( $directories as $directory ) {
		if ( $wp_filesystem->is_dir( $directory ) ) {
			$wp_filesystem->rmdir( $directory, true );
		}
	}
}

/**
 * Clear the plugin's scheduled cron events.
 *
 * Deactivation does not always run before deletion, so uninstall repeats what
 * gatewell_deactivate() does. wp_clear_scheduled_hook() is a no-op when nothing
 * is scheduled.
 *
 * @since 1.6.0
 */
function gatewell_clear_scheduled_events() {
	$hooks = array(
		'gatewell_aggregate_daily',
		'gatewell_aggregate_monthly',
		'gatewell_prune_analytics',
	);

	foreach ( $hooks as $hook ) {
		wp_clear_scheduled_hook( $hook );
	}
}

/**
 * Execute uninstall cleanup.
 */
gatewell_delete_plugin_options();
gatewell_delete_usage_counters();
gatewell_delete_legacy_options();
gatewell_drop_custom_tables();
gatewell_cleanup_directories();
gatewell_clear_scheduled_events();