<?php

namespace GemSecurity;

use SE_License_SDK_Client;

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/**
 * StoreEngine SDK bootstrap for GemSecurity (free).
 *
 * The SDK is composer-managed (`storeengine/wordpress-sdk`) and lives in the
 * FREE plugin only — GemSecurity Pro no longer ships its own copy and instead
 * relies on the global `se_license_init()` this plugin loads. We defer the
 * init until plugins_loaded and bridge the SDK's frontend params into the
 * `gemsecurity/assets/script_data` filter so the shared React dashboard can
 * read `SeSdk` from the localized `GemSecurityGlobal` payload.
 *
 * Free and Pro are two separate StoreEngine products (427 / 428). This free
 * client runs `is_free: true` with only the insights/deactivation-feedback
 * subsystem enabled: no store-served update channel (`use_update` off) and no
 * SDK license REST routes (`init_restapi` off, since those call `license()`
 * which throws for a free product). The real license/activation client — with
 * REST routes and the update channel — is Pro's, configured in
 * `GemSecurityPro\StoreLicense`.
 *
 * Mirrors ZenCommunity's `ZenCommunity\StoreLicense` integration.
 */
final class StoreLicense {

	protected static ?SE_License_SDK_Client $sdk_client = null;

	private function __construct() {}

	public static function init(): void {
		if ( ! did_action( 'plugins_loaded' ) ) {
			add_action( 'plugins_loaded', [ __CLASS__, 'load_sdk' ] );
		} else {
			self::load_sdk();
		}
	}

	public static function load_sdk(): void {
		if ( null !== self::$sdk_client ) {
			return;
		}

		if ( ! function_exists( 'se_license_init' ) ) {
			_doing_it_wrong(
				__METHOD__,
				'StoreEngine SDK is missing. Run `composer install` in the gemsecurity plugin directory.',
				'1.0.0'
			);
			return;
		}

		self::$sdk_client = se_license_init( [
			'package_file'        => GEMSECURITY_PLUGIN_FILE,
			'package_name'        => 'GemSecurity', // no translation — runs too early for the textdomain.
			// Free and Pro are separate StoreEngine products (427 / 428).
			'product_id'          => 427,
			'is_free'             => true,
			'slug'                => GEMSECURITY_PLUGIN_SLUG,
			'basename'            => GEMSECURITY_PLUGIN_BASENAME,
			'package_type'        => 'plugin',
			'package_version'     => GEMSECURITY_VERSION,
			'allow_local'         => true,
			// Free is distributed on WordPress.org, so WP core owns updates —
			// we deliberately leave `use_update` off (no store-served update
			// channel). What we DO want from the SDK is the anonymous, opt-in
			// usage tracking + deactivation feedback popup, which is what
			// `init_insights` boots. We intentionally do NOT set `init_restapi`:
			// the SDK's own license routes call `license()`, which throws for
			// free products — activation belongs to the Pro client.
			'init_insights'       => true,
			// No promotional notices fetched from the license server: a
			// WordPress.org plugin must not show remotely loaded admin content.
			'init_promotions'     => false,
			'license_server'      => 'https://store.kodezen.com/',
			'purchase_url'        => 'https://kodezen.com/',
			'product_logo'        => defined( 'GEMSECURITY_ASSETS_URI' ) ? GEMSECURITY_ASSETS_URI . 'images/icon_logo.svg' : '',
			'store_dashboard_url' => 'https://store.kodezen.com/dashboard/license-keys/',
			'terms_url'           => 'https://kodezen.com/terms-and-conditions/',
			'privacy_policy_url'  => 'https://kodezen.com/privacy-policy/',
			'ticket_recipient'    => 'contact@kodezen.com',
			'primary_color'       => '#2A3BEE',
			'first_install_time'  => \GemSecurity\OptionStore::get_meta( 'first_install_time' ),
			'optin_notice_delay'  => 3 * DAY_IN_SECONDS,
		] );

		add_filter( 'gemsecurity/assets/script_data', [ __CLASS__, 'add_script_data' ] );
	}

	/**
	 * Bridge the SDK's frontend params into GemSecurity's localized React data.
	 *
	 * When GemSecurity Pro is active, its SDK client owns the `SeSdk` payload:
	 * it carries `is_free = false`, the `storeengine-sdk/v1` REST
	 * `rest_url`/`nonce`, and the real license object the settings "License"
	 * tab needs to activate a key. Both free and pro hook this same filter and
	 * the run order is not guaranteed — so the free client must explicitly yield
	 * to Pro instead of clobbering Pro's payload with free (`is_free = true`)
	 * data, which would force the read-only "Free Edition" UI even on a Pro site
	 * and hide the activation form.
	 *
	 * @param array $data
	 * @return array
	 */
	public static function add_script_data( array $data ): array {
		if (
			class_exists( '\GemSecurityPro\StoreLicense' ) &&
			method_exists( '\GemSecurityPro\StoreLicense', 'get_client' ) &&
			\GemSecurityPro\StoreLicense::get_client()
		) {
			return $data;
		}

		if ( self::$sdk_client && method_exists( self::$sdk_client, 'get_js_params' ) ) {
			$params            = self::$sdk_client->get_js_params();
			$params['is_free'] = self::$sdk_client->isFree();

			if ( empty( $params['license'] ) || ! is_array( $params['license'] ) ) {
				$params['license'] = [
					'license'     => '',
					'status'      => self::$sdk_client->isFree() ? 'free' : 'inactive',
					'device_id'   => self::$sdk_client->get_device_id(),
					'slug'        => self::$sdk_client->getSlug(),
					'product_id'  => self::$sdk_client->getProductId(),
					'remaining'   => 0,
					'activations' => 0,
					'limit'       => 1,
					'unlimited'   => self::$sdk_client->isFree(),
					'expires'     => 0,
					'updated_at'  => '',
				];
			}

			$data['SeSdk'] = $params;
		}
		return $data;
	}

	public static function get_client(): ?SE_License_SDK_Client {
		return self::$sdk_client;
	}
}