<?php
/**
 * Roles and capabilities.
 *
 * @package HostKhata
 */

namespace HostKhata\Core;

defined( 'ABSPATH' ) || exit;

/**
 * Defines the custom capabilities and the two roles HostKhata adds.
 *
 * Administrators and the `hostkhata_manager` role receive every staff
 * capability. The `hostkhata_customer` role can only open the portal.
 *
 * @since 0.1.0
 */
final class Capabilities {

	const ACCESS_APP       = 'hostkhata_access_app';
	const MANAGE_CUSTOMERS = 'hostkhata_manage_customers';
	const MANAGE_ORDERS    = 'hostkhata_manage_orders';
	const MANAGE_INVOICES  = 'hostkhata_manage_invoices';
	const MANAGE_PAYMENTS  = 'hostkhata_manage_payments';
	const MANAGE_SETTINGS  = 'hostkhata_manage_settings';
	const VIEW_REPORTS     = 'hostkhata_view_reports';
	const ACCESS_PORTAL    = 'hostkhata_access_portal';

	const ROLE_MANAGER  = 'hostkhata_manager';
	const ROLE_CUSTOMER = 'hostkhata_customer';

	/**
	 * Capabilities held by staff (administrators and managers).
	 *
	 * @since 0.1.0
	 *
	 * @return string[]
	 */
	public static function staff_caps(): array {
		return array(
			self::ACCESS_APP,
			self::MANAGE_CUSTOMERS,
			self::MANAGE_ORDERS,
			self::MANAGE_INVOICES,
			self::MANAGE_PAYMENTS,
			self::MANAGE_SETTINGS,
			self::VIEW_REPORTS,
		);
	}

	/**
	 * Creates the roles and grants the capabilities. Safe to run repeatedly.
	 *
	 * @since 0.1.0
	 *
	 * @return void
	 */
	public function install(): void {
		$manager_caps = array( 'read' => true );

		foreach ( self::staff_caps() as $cap ) {
			$manager_caps[ $cap ] = true;
		}

		$this->sync_role(
			self::ROLE_MANAGER,
			__( 'HostKhata Manager', 'hostkhata' ),
			$manager_caps
		);

		$this->sync_role(
			self::ROLE_CUSTOMER,
			__( 'HostKhata Customer', 'hostkhata' ),
			array(
				'read'              => true,
				self::ACCESS_PORTAL => true,
			)
		);

		$administrator = get_role( 'administrator' );

		if ( $administrator ) {
			foreach ( self::staff_caps() as $cap ) {
				$administrator->add_cap( $cap );
			}
		}
	}

	/**
	 * Removes the roles and capabilities. Used on uninstall.
	 *
	 * @since 0.1.0
	 *
	 * @return void
	 */
	public function uninstall(): void {
		remove_role( self::ROLE_MANAGER );
		remove_role( self::ROLE_CUSTOMER );

		$administrator = get_role( 'administrator' );

		if ( $administrator ) {
			foreach ( self::staff_caps() as $cap ) {
				$administrator->remove_cap( $cap );
			}
		}
	}

	/**
	 * Creates a role, or tops up an existing role with the given capabilities.
	 *
	 * @param string              $role         Role slug.
	 * @param string              $display_name Role label.
	 * @param array<string, bool> $caps         Capabilities.
	 * @return void
	 */
	private function sync_role( string $role, string $display_name, array $caps ): void {
		$existing = get_role( $role );

		if ( ! $existing ) {
			add_role( $role, $display_name, $caps );
			return;
		}

		foreach ( $caps as $cap => $grant ) {
			$existing->add_cap( $cap, $grant );
		}
	}
}