<?php
/**
 * Holds the Google Maps JavaScript API (and Maps image endpoints) until the visitor
 * clicks "Load map" or accepts all cookies.
 *
 * Runs inside the output-buffer callback: string building only (no ob_start / echo).
 * Scripts that inject the API later (e.g. from a data attribute) are held by the
 * browser guard in consent-head.js; this class covers tags already in the HTML.
 *
 * @package GoConsent
 */

namespace GoConsent\Frontend;

use GoConsent\Scanner\Classifier;

defined( 'ABSPATH' ) || exit;

/**
 * Google Maps gate.
 */
class MapsGate {

	/**
	 * URL needles for Google Maps resources that contact Google (lower case).
	 * Shared with the browser guard.
	 *
	 * @return string[]
	 */
	public static function needles() {
		/**
		 * Filter the URL fragments treated as Google Maps loads.
		 *
		 * @param string[] $needles Needles.
		 */
		return array_values(
			array_map(
				'strtolower',
				(array) apply_filters(
					'goconsent_maps_needles',
					array(
						'maps.googleapis.com/maps/api/js',
						'maps.google.com/maps/api/js',
						'www.google.com/maps/api/js',
						'maps.googleapis.com/maps-api-v3',
						'maps.googleapis.com/maps/api/staticmap',
						'maps.googleapis.com/maps/api/streetview',
						// Street View panoramas and map tiles loaded by the Maps API. Without these,
						// "streetviewpixels" matched the tracker words ("pixel") and waited for ad consent.
						'streetviewpixels-pa.googleapis.com',
						'googleapis.com/cbk',
						'ggpht.com/cbk',
						'maps.googleapis.com/maps/vt',
						'maps.gstatic.com', // phpcs:ignore PluginCheck.CodeAnalysis.Offloading.OffloadedContent -- host name used to recognise map embeds; nothing is loaded from it.
						'google.com/maps/embed/v1/streetview',
					)
				)
			)
		);
	}

	/**
	 * Map containers that get a "Load map" placeholder (CSS selectors).
	 *
	 * @return string[]
	 */
	public static function selectors() {
		/**
		 * Filter the map containers that show a "Load map" placeholder.
		 *
		 * @param string[] $selectors CSS selectors.
		 */
		return array_values(
			(array) apply_filters(
				'goconsent_map_selectors',
				array(
					'[data-goconsent-map]',
					'[data-mlsg-maps-src]',
					'[data-mlsg-gb-single-map]',
					'#houzez-single-listing-map',
					'#houzez-single-listing-map-address',
					'#houzez-overview-listing-map',
					'#houzez-agent-sidebar-map',
					'#houzez-properties-map',
					'#houzez-map-properties',
					'.houzez-map-wrap',
					'.wpgmza_map',
					'.acf-map',
					'.gmw-map',
				)
			)
		);
	}

	/**
	 * Map buttons inside wider components (a listing gallery with Map and Street
	 * View tabs, say). Before consent, clicking one shows the Google Maps notice
	 * over the component's stage; after "Load map" the click is replayed.
	 *
	 * Each rule: trigger (the buttons), root (the component), stage (where the
	 * notice goes, inside root).
	 *
	 * @return array[]
	 */
	public static function triggers() {
		/**
		 * Filter the map buttons that ask for consent when clicked.
		 *
		 * @param array[] $rules [ 'trigger' => css, 'root' => css, 'stage' => css ].
		 */
		$rules = (array) apply_filters(
			'goconsent_map_triggers',
			array(
				array(
					'trigger' => '[data-goconsent-map-trigger]',
					'root'    => '[data-goconsent-map-root]',
					'stage'   => '[data-goconsent-map-stage]',
				),
				array(
					'trigger' => '[data-mlsg-gb-gallery-views] [data-view="map"], [data-mlsg-gb-gallery-views] [data-view="sat"], [data-mlsg-gb-gallery-views] [data-view="street"]',
					'root'    => '[data-mlsg-gb-gallery-views]',
					'stage'   => '.mlsg-gb-gallery-views__stage',
				),
			)
		);
		$out   = array();
		foreach ( $rules as $r ) {
			if ( is_array( $r ) && ! empty( $r['trigger'] ) ) {
				$out[] = array(
					'trigger' => (string) $r['trigger'],
					'root'    => isset( $r['root'] ) ? (string) $r['root'] : '',
					'stage'   => isset( $r['stage'] ) ? (string) $r['stage'] : '',
				);
			}
		}
		return $out;
	}

	/**
	 * Whether the gate is on.
	 *
	 * @return bool
	 */
	public static function enabled() {
		/**
		 * Filter whether Google Maps waits for a click or consent.
		 *
		 * @param bool $on Default true.
		 */
		return (bool) apply_filters( 'goconsent_gate_maps', true );
	}

	/**
	 * Hold Maps scripts and images in a document.
	 *
	 * @param string $html HTML.
	 * @return string
	 */
	public static function rewrite( $html ) {
		if ( ! self::enabled() || ! self::mentions( $html ) ) {
			return $html;
		}
		$out = preg_replace_callback( '#<script\b([^>]*)>(.*?)</script>#is', array( __CLASS__, 'script' ), $html );
		$out = null === $out ? $html : $out;
		$img = preg_replace_callback( '#<img\b([^>]*)>#i', array( __CLASS__, 'image' ), $out );
		return null === $img ? $out : $img;
	}

	/**
	 * Quick check before running the regexes.
	 *
	 * @param string $html HTML.
	 * @return bool
	 */
	private static function mentions( $html ) {
		return false !== stripos( $html, '/maps/api/' ) || false !== stripos( $html, 'maps-api-v3' );
	}

	/**
	 * Whether a URL is a Google Maps load.
	 *
	 * @param string $url URL.
	 * @return bool
	 */
	public static function is_maps_url( $url ) {
		$u = strtolower( html_entity_decode( (string) $url, ENT_QUOTES | ENT_HTML5 ) );
		foreach ( self::needles() as $n ) {
			if ( false !== strpos( $u, $n ) ) {
				return true;
			}
		}
		return false;
	}

	/**
	 * Hold one script tag.
	 *
	 * @param array $m Regex match.
	 * @return string
	 */
	public static function script( $m ) {
		$attrs = $m[1];
		if ( false !== stripos( $attrs, 'data-goconsent' ) ) {
			return $m[0];
		}
		$src = Classifier::attr( $attrs, 'src' );
		if ( ! $src || ! self::is_maps_url( $src ) ) {
			return $m[0];
		}
		$type = '';
		if ( preg_match( '#\btype\s*=\s*(["\']?)([^"\'\s>]+)\1#i', $attrs, $tm ) ) {
			$type = strtolower( $tm[2] );
		}
		if ( '' !== $type && ! in_array( $type, array( 'text/javascript', 'application/javascript', 'module' ), true ) ) {
			return $m[0];
		}
		$attrs = preg_replace( '#\s*\btype\s*=\s*(["\']?)[^"\'\s>]+\1#i', '', $attrs );
		$extra = ' type="text/plain" data-goconsent="maps"' . ( 'module' === $type ? ' data-goconsent-type="module"' : '' );
		return '<script' . $extra . $attrs . '>' . $m[2] . '</script>';
	}

	/**
	 * Hold one Static Maps / Street View image.
	 *
	 * @param array $m Regex match.
	 * @return string
	 */
	public static function image( $m ) {
		$attrs = $m[1];
		if ( false !== stripos( $attrs, 'data-goconsent' ) ) {
			return $m[0];
		}
		$src = Classifier::attr( $attrs, 'src' );
		if ( ! $src || ! self::is_maps_url( $src ) ) {
			return $m[0];
		}
		$attrs = preg_replace( '#\s(src|srcset)\s*=\s*("[^"]*"|\'[^\']*\'|[^\s>]+)#i', ' data-goconsent-$1=$2', $attrs );
		return '<img data-goconsent="maps"' . $attrs . '>';
	}
}