<?php
/**
 * @package PlugixaCrm
 */

declare( strict_types = 1 );

namespace PlugixaCrm\Core\Http;

use WP_REST_Request;
use WP_REST_Response;
use WP_User_Query;

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/**
 * The people a record can point at: assignees and attendees.
 *
 * Deliberately not the site's whole user table — only holders of `plugixa_crm_manage`, because
 * assigning a call to a subscriber who cannot open the CRM is a row nobody can act on. And
 * deliberately minimal: id and display name, which is everything a picker needs and nothing a
 * privacy audit has to think about.
 */
final class UsersController extends RestController {

	/** A picker, not a directory: one screenful, narrowed by typing. */
	private const LIMIT = 50;

	protected function entity_type(): string {
		return 'core';
	}

	public function register_routes(): void {
		register_rest_route(
			$this->namespace,
			'/users',
			array(
				array(
					'methods'             => 'GET',
					'callback'            => array( $this, 'index' ),
					'permission_callback' => array( $this, 'can_read' ),
					'args'                => array(
						'search' => array( 'type' => 'string' ),
					),
				),
			)
		);
	}

	/**
	 * @param WP_REST_Request $request The request.
	 */
	public function index( WP_REST_Request $request ): WP_REST_Response {
		$search = sanitize_text_field( (string) ( $request->get_param( 'search' ) ?? '' ) );

		$query = new WP_User_Query(
			array(
				'capability' => 'plugixa_crm_manage',
				'number'     => self::LIMIT,
				'orderby'    => 'display_name',
				'order'      => 'ASC',
				'fields'     => array( 'ID', 'display_name' ),
				'search'     => '' !== $search ? '*' . $search . '*' : '',
				// Search by the name a picker displays, not by login or email.
				'search_columns' => array( 'display_name' ),
			)
		);

		$users = array_map(
			static fn( $user ): array => array(
				'id'   => (int) $user->ID,
				'name' => (string) $user->display_name,
			),
			(array) $query->get_results()
		);

		return $this->ok( $users );
	}
}