<?php
/**
 * Requests GoConsent leaves alone: no output buffering, no script rewriting, no banner.
 *
 * 1. Back-office request types: wp-admin, AJAX, REST and cron.
 * 2. People who work in the back office: anyone who can edit content, plus staff roles
 *    (any CRM: MLS Genie, Jetpack CRM, WP ERP, Groundhogg, FluentCRM… or any role whose
 *    capabilities mention "crm"). Admins can change the role list under Consent.
 *    Visitors and clients with accounts still get the banner.
 * 3. Integrations: the goconsent_skip_request filter (e.g. a standalone CRM page that
 *    never loads the theme head, so a held script could never be released there).
 *
 * @package GoConsent
 */

namespace GoConsent\Frontend;

defined( 'ABSPATH' ) || exit;

/**
 * Skip rules.
 */
class Skip {

	/**
	 * Query flag that lets back-office users preview the banner on the live site.
	 */
	const PREVIEW = 'goconsent_preview';

	/**
	 * Staff roles of known CRMs and back-office tools.
	 */
	const KNOWN_ROLES = array(
		// MLS Genie.
		'mlsg_agent',
		'mlsg_manager',
		'mlsg_team_admin',
		'mlsg_team_lead',
		// Jetpack CRM.
		'zerobs_admin',
		'zerobs_customermgr',
		'zerobs_quotemgr',
		'zerobs_invoicemgr',
		'zerobs_transactionmgr',
		'zerobs_mailmgr',
		// WP ERP CRM.
		'erp_crm_manager',
		'erp_crm_agent',
		// Groundhogg.
		'sales_manager',
		'sales_rep',
		'marketer',
		// WooCommerce.
		'shop_manager',
	);

	/**
	 * Capabilities that mean back-office CRM access (besides any containing "crm").
	 */
	const KNOWN_CAPS = array( 'view_contacts', 'edit_contacts', 'admin_zerobs_customers', 'manage_woocommerce' );

	/**
	 * Whether GoConsent should leave this request untouched.
	 *
	 * @return bool
	 */
	public static function request() {
		// 1. Back-office request types.
		if ( is_admin() || wp_doing_ajax() || wp_doing_cron() || ( defined( 'REST_REQUEST' ) && REST_REQUEST ) ) {
			return true;
		}

		// 2. People who work in the back office.
		if ( self::is_staff() && ! self::previewing() ) {
			return true;
		}

		/**
		 * 3. Return true to leave this request alone (no blocking, no banner).
		 *
		 * @param bool $skip Default false.
		 */
		return (bool) apply_filters( 'goconsent_skip_request', false );
	}

	/**
	 * Whether the current user works in the back office.
	 *
	 * @return bool
	 */
	public static function is_staff() {
		$staff = false;
		if ( is_user_logged_in() ) {
			$user  = wp_get_current_user();
			$staff = current_user_can( 'edit_posts' ) || (bool) array_intersect( self::roles(), (array) $user->roles );
			// Until an admin picks roles, CRM access granted to a single user counts too.
			if ( ! $staff && ! self::configured() ) {
				$staff = self::has_crm_caps( (array) $user->allcaps );
			}
		}
		/**
		 * Filter whether the current user counts as back-office staff.
		 *
		 * @param bool $staff Staff.
		 */
		return (bool) apply_filters( 'goconsent_is_staff', $staff );
	}

	/**
	 * Staff roles in effect: the admin's choice, or auto-detected.
	 *
	 * @return string[]
	 */
	public static function roles() {
		$roles = self::configured() ? (array) goconsent()->settings->get( 'staff_roles' ) : self::detected_roles();
		/**
		 * Roles treated as back-office staff (in addition to anyone who can edit posts).
		 *
		 * @param string[] $roles Role slugs.
		 */
		return array_values( array_unique( array_map( 'strval', (array) apply_filters( 'goconsent_staff_roles', $roles ) ) ) );
	}

	/**
	 * Roles on this site that look like back-office or CRM roles.
	 *
	 * @return string[]
	 */
	public static function detected_roles() {
		$out = array();
		foreach ( self::site_roles() as $slug => $role ) {
			$caps = isset( $role['capabilities'] ) ? (array) $role['capabilities'] : array();
			if ( ! empty( $caps['edit_posts'] ) || in_array( $slug, self::KNOWN_ROLES, true ) || false !== stripos( $slug, 'crm' ) || self::has_crm_caps( $caps ) ) {
				$out[] = (string) $slug;
			}
		}
		return $out;
	}

	/**
	 * Roles that can edit content (always staff).
	 *
	 * @return string[]
	 */
	public static function editor_roles() {
		$out = array();
		foreach ( self::site_roles() as $slug => $role ) {
			if ( ! empty( $role['capabilities']['edit_posts'] ) ) {
				$out[] = (string) $slug;
			}
		}
		return $out;
	}

	/**
	 * All roles on the site: slug => [ name, capabilities ].
	 *
	 * @return array
	 */
	public static function site_roles() {
		$wp_roles = function_exists( 'wp_roles' ) ? wp_roles() : null;
		return ( $wp_roles && is_array( $wp_roles->roles ) ) ? $wp_roles->roles : array();
	}

	/**
	 * Whether a capability set grants CRM access.
	 *
	 * @param array $caps cap => granted.
	 * @return bool
	 */
	private static function has_crm_caps( array $caps ) {
		foreach ( $caps as $cap => $granted ) {
			if ( $granted && ( false !== stripos( (string) $cap, 'crm' ) || in_array( $cap, self::KNOWN_CAPS, true ) ) ) {
				return true;
			}
		}
		return false;
	}

	/**
	 * Whether an admin has chosen the staff roles.
	 *
	 * @return bool
	 */
	private static function configured() {
		return (bool) goconsent()->settings->get( 'staff_roles_set' );
	}

	/**
	 * Staff previewing the banner from GoConsent's "Open site" button.
	 *
	 * @return bool
	 */
	private static function previewing() {
		return isset( $_GET[ self::PREVIEW ] ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- presence check only; it only turns the banner on for the viewer.
	}
}