<?php
/**
 * Activation, deactivation, and upgrade handling.
 *
 * @package Rahkar\WP
 */

declare( strict_types = 1 );

namespace Rahkar\WP;

use Rahkar\WP\Database\Schema;
use Rahkar\WP\Support\Manifest;
use Rahkar\WP\Support\Profiler;

defined( 'ABSPATH' ) || exit;

/**
 * Everything that runs once rather than per request.
 *
 * Deliberately not part of {@see Plugin}: the boot path should never have a
 * reason to load this file, so activation logic lives apart from it.
 */
final class Lifecycle {

	public const WORKER_KEY_OPTION = 'rahkar_wp_worker_key';

	/**
	 * Plugin activation.
	 */
	public static function activate(): void {
		Schema::install();

		self::ensureWorkerKey();

		// A fresh install starts with everything off. Shipping modules pre-enabled
		// would hand every site the cost of features it never asked for, which is
		// the failure mode this plugin exists to avoid.
		if ( false === get_option( 'rahkar_wp_enabled_modules' ) ) {
			add_option( 'rahkar_wp_enabled_modules', [], '', false );
		}

		Manifest::rebuild();

		update_option( 'rahkar_wp_version', RAHKAR_WP_VERSION, false );

		// Arm the log retention job. Without it the table only ever grows, and a
		// store notices that when the database is already the problem.
		Support\LogPurger::schedule();
	}

	/**
	 * Plugin deactivation.
	 *
	 * Data is left intact — deactivating is not uninstalling. Only the scheduled
	 * fallback event is cleared so a disabled plugin cannot keep waking WP-Cron.
	 */
	public static function deactivate(): void {
		wp_clear_scheduled_hook( 'rahkar_wp_queue_tick' );
	}

	/**
	 * Run pending upgrades.
	 *
	 * Hooked rather than called at boot: the version comparison is one autoloaded
	 * option read, but running it on `admin_init` keeps DDL off the front end
	 * entirely.
	 *
	 * @internal Hooked callback.
	 */
	public static function maybeUpgrade(): void {
		$stored = (string) get_option( 'rahkar_wp_version', '0.0.0' );

		if ( version_compare( $stored, RAHKAR_WP_VERSION, '>=' ) && ! Schema::needsUpgrade() ) {
			return;
		}

		Schema::install();
		Support\Migrations::run( $stored );
		Manifest::rebuild();

		update_option( 'rahkar_wp_version', RAHKAR_WP_VERSION, false );
	}

	/**
	 * The shared secret the queue worker endpoint authenticates with.
	 *
	 * Generated once and stored non-autoloaded. Rotating it means updating the
	 * server cron line, which the health screen spells out.
	 */
	public static function workerKey(): string {
		$key = get_option( self::WORKER_KEY_OPTION );

		if ( ! is_string( $key ) || '' === $key ) {
			$key = self::ensureWorkerKey();
		}

		return $key;
	}

	/**
	 * Generate the worker key when it is missing.
	 */
	public static function ensureWorkerKey(): string {
		$existing = get_option( self::WORKER_KEY_OPTION );

		if ( is_string( $existing ) && '' !== $existing ) {
			return $existing;
		}

		$key = wp_generate_password( 40, false, false );

		update_option( self::WORKER_KEY_OPTION, $key, false );

		return $key;
	}

	/**
	 * Attach the profiler output when profiling is switched on.
	 *
	 * @internal Hooked callback.
	 */
	public static function maybeProfile(): void {
		if ( Profiler::enabled() ) {
			add_action( 'shutdown', [ Profiler::class, 'emit' ], 999 );
		}
	}
}