<?php
declare(strict_types=1);
defined('ABSPATH') || exit;
require_once __DIR__.'/native-core-client.php';
require_once __DIR__.'/native-core-secret.php';

/** Internal authorized caller only. Claim/send/settle in one PHP request.
 * No scheduling, cleanup, restart or completion. Never return proof/secret.
 */
final class OG_Native_Core_Sender {
    public static function once(OG_Privacy_Case_Store $writer,array $context,int $id,string $store,OG_Native_Core_Client $transport,array $keys,string $environment='production',array $history=array(),array $revoked=array()): array {
        $refuse=array('status'=>'core_external_secret_unavailable','erasure_complete'=>false,'local_cleanup_authorized'=>false,'restart_authorized'=>false,'automatic_retry'=>false);
        try{$secret=OG_Native_Core_Secret::fromWordPress($context);}
        catch(Throwable $e){return $refuse;}
        try{$preflight=$transport->preflight();}catch(Throwable $e){$preflight=array();}
        if(($preflight['status']??null)!=='transport_preflight_ready'){return array_merge($refuse,array('status'=>'core_transport_unavailable'));}
        $claim=$writer->nativeCoreJournal($context,$id,$store,$secret,'claim','',null,null,$keys,$history,$revoked,$environment);
        if(($claim['status']??null)!=='core_claimed'){return $claim;}
        // Journal commits and closes its lock connection before returning.
        $proof=null;$http=null;
        try{$proof=$transport->coreProof($claim['request'],$claim['nonce']);$metadata=$transport->result();$http=$metadata['http_status']??null;
            if(($metadata['reason']??null)==='transport_error'){$http=null;$proof=null;}
        }
        catch(Throwable $e){$proof=null;$http=null;}
        if(!is_int($http)||$http<0||$http>599){$http=null;}
        return $writer->nativeCoreJournal($context,$id,$store,$secret,'settle',$claim['nonce'],$proof,$http,$keys,$history,$revoked,$environment);
    }
}