<?php
/**
 * Activity log: the last 50 admin actions taken through this plugin's
 * own UI (who did what, when) — separate from the MCP request log in
 * class-mcp-server.php, which records connector traffic, not admin
 * clicks. Never logs a token or key value, only that one was generated
 * or revoked.
 *
 * @package MIINTG
 */

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

define( 'MIINTG_ACTIVITY_LOG_CAP', 50 );

/**
 * @param string $action Short action label, e.g. "Generated access token".
 * @param string $detail Optional extra context, e.g. "Run #12".
 */
function miintg_log_activity( $action, $detail = '' ) {
	$log = get_option( 'miintg_activity_log', array() );
	if ( ! is_array( $log ) ) {
		$log = array();
	}

	$user = wp_get_current_user();

	array_unshift(
		$log,
		array(
			'time'   => current_time( 'mysql', true ),
			'user'   => ( $user && $user->exists() ) ? $user->user_login : 'system',
			'action' => $action,
			'detail' => $detail,
		)
	);

	$log = array_slice( $log, 0, MIINTG_ACTIVITY_LOG_CAP );
	update_option( 'miintg_activity_log', $log, false );
}

/**
 * @return array
 */
function miintg_get_activity_log() {
	$log = get_option( 'miintg_activity_log', array() );
	return is_array( $log ) ? $log : array();
}