<?php
/**
 * @package PlugixaCrm
 */

declare( strict_types = 1 );

namespace PlugixaCrm\Core;

use PlugixaCrm\Core\Examples\Seeder;
use PlugixaCrm\Core\Security\Capabilities;

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/**
 * Uninstall cleanup.
 *
 * Registered through an after_uninstall action rather than a root uninstall.php.
 */
final class Uninstaller {

	/**
	 * The prefix every option, transient and cron hook this plugin writes starts with.
	 */
	private const PREFIX = 'plugixa_crm_';

	public static function uninstall(): void {
		global $wpdb;

		if ( ! current_user_can( 'activate_plugins' ) ) {
			return;
		}

		/*
		 * MODULE HOOKS FIRST, OR NOTHING BELOW HEARS `plugixa_crm_uninstall`.
		 *
		 * Uninstall runs in a request that never booted the plugin, so the modules that clean up after
		 * themselves on that action — Documents deleting the private uploads directory, Portal removing its
		 * role, Integrations sweeping stored credentials — had no listeners registered. Deleting the plugin
		 * through wp-admin on 2026-09-11 dropped every table and left 24 uploaded customer files on disk,
		 * the portal role on three users, and the connector switch option behind.
		 */
		Activator::ensure_module_hooks();

		/*
		 * Add-on plugins clean up after THEMSELVES, in their own uninstall.php, when the customer
		 * deletes them.
		 *
		 * The prefix sweep below still takes an add-on's tables with it, and that is deliberate: this
		 * plugin is the base an add-on stands on, so removing it removes the CRM entirely. It is
		 * also why an ADD-ON must never sweep by prefix.
		 */
		/**
		 * Fires during uninstall, before core tables are dropped.
		 */
		do_action( 'plugixa_crm_uninstall' );

		// Drop by prefix rather than by a hard-coded list, so a table created by a
		// module that has since been removed still gets cleaned up.
		$like   = $wpdb->esc_like( $wpdb->prefix . 'plugixacrm_' ) . '%';
		// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching -- custom table, no object cache to read from.
		$tables = $wpdb->get_col( $wpdb->prepare( 'SHOW TABLES LIKE %s', $like ) );

		foreach ( $tables as $table ) {
			// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.DirectDatabaseQuery.SchemaChange -- uninstall drops the plugin's own tables; nothing to cache.
			$wpdb->query( $wpdb->prepare( 'DROP TABLE IF EXISTS %i', $table ) );
		}

		delete_option( Settings::OPTION );
		delete_option( Activator::VERSION_OPTION );
		delete_option( Activator::MODULES_OPTION );

		// The example key => id map. It points at rows in tables that have just been dropped, so
		// leaving it behind would make a later reinstall believe every example is already present
		// and seed nothing at all.
		delete_option( Seeder::OPTION );

		self::delete_prefixed_options();
		self::clear_cron_hooks();

		Capabilities::revoke_all();
	}

	/**
	 * Delete every option and transient carrying the plugin's prefix.
	 *
	 * BY PREFIX, FOR THE REASON TABLES ARE: a module that stored an option and has since been removed, or a
	 * listener that did not run, still leaves nothing behind. Each name goes through delete_option() rather
	 * than one DELETE so the options cache agrees with the table afterwards.
	 */
	public static function delete_prefixed_options(): void {
		global $wpdb;

		$patterns = array(
			$wpdb->esc_like( self::PREFIX ) . '%',
			$wpdb->esc_like( '_transient_' . self::PREFIX ) . '%',
			$wpdb->esc_like( '_transient_timeout_' . self::PREFIX ) . '%',
			$wpdb->esc_like( '_site_transient_' . self::PREFIX ) . '%',
			$wpdb->esc_like( '_site_transient_timeout_' . self::PREFIX ) . '%',
		);

		foreach ( $patterns as $pattern ) {
			// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching -- enumerating our own option names for deletion; the cache is updated by delete_option().
			$names = $wpdb->get_col( $wpdb->prepare( 'SELECT option_name FROM %i WHERE option_name LIKE %s', $wpdb->options, $pattern ) );

			foreach ( $names as $name ) {
				delete_option( (string) $name );
			}
		}
	}

	/**
	 * Unschedule every cron hook carrying the plugin's prefix, whatever arguments it was scheduled with.
	 *
	 * Also run on deactivation. Modules schedule their own events and each used to clear only its own on
	 * `plugixa_crm_deactivated` — two of seven did, so four events outlived the plugin.
	 */
	public static function clear_cron_hooks(): void {
		$crons = _get_cron_array();

		if ( ! is_array( $crons ) ) {
			return;
		}

		$hooks = array();

		foreach ( $crons as $events ) {
			foreach ( array_keys( (array) $events ) as $hook ) {
				if ( str_starts_with( (string) $hook, self::PREFIX ) ) {
					$hooks[ (string) $hook ] = true;
				}
			}
		}

		foreach ( array_keys( $hooks ) as $hook ) {
			wp_unschedule_hook( $hook );
		}
	}
}