<?php
/**
 * Local filesystem access through WordPress's direct filesystem class.
 *
 * Used for the plugin's own working files: removing draft themes and moving
 * staged uploads. The direct class needs no credentials, which matters because
 * these run inside a request where nobody can answer an FTP prompt.
 *
 * @package GripMCP
 */

declare( strict_types=1 );

namespace GripMCP\Filesystem;

defined( 'ABSPATH' ) || exit;

final class Local_Fs {

	private static ?\WP_Filesystem_Direct $fs = null;

	/**
	 * The shared direct filesystem instance.
	 */
	public static function get(): \WP_Filesystem_Direct {
		if ( null === self::$fs ) {
			require_once ABSPATH . 'wp-admin/includes/class-wp-filesystem-base.php';
			require_once ABSPATH . 'wp-admin/includes/class-wp-filesystem-direct.php';
			self::$fs = new \WP_Filesystem_Direct( null );
		}

		return self::$fs;
	}

	/**
	 * Delete a directory and everything in it. Symbolic links are removed as
	 * links and never followed, so nothing outside $dir can be touched. The
	 * caller is responsible for confining $dir.
	 *
	 * @param string $dir Absolute directory path.
	 */
	public static function remove_tree( string $dir ): void {
		$fs    = self::get();
		$items = new \RecursiveIteratorIterator(
			new \RecursiveDirectoryIterator( $dir, \FilesystemIterator::SKIP_DOTS ),
			\RecursiveIteratorIterator::CHILD_FIRST
		);

		foreach ( $items as $item ) {
			/** @var \SplFileInfo $item */
			if ( $item->isDir() && ! $item->isLink() ) {
				$fs->rmdir( $item->getPathname() );
			} else {
				$fs->delete( $item->getPathname(), false, 'f' );
			}
		}

		$fs->rmdir( $dir );
	}
}