<?php
/**
 * Dynamic capabilities.
 *
 * @package Recast\WCS
 */

namespace Recast\WCS;

use Recast\WCS\Rest\Auth;

defined( 'ABSPATH' ) || exit;

/**
 * Grants recast_read at runtime (nothing is stored in roles).
 */
final class Capabilities {

	const READ = 'recast_read';

	/**
	 * Hooks the filter.
	 *
	 * @return void
	 */
	public static function register() {
		add_filter( 'user_has_cap', array( __CLASS__, 'grant' ), 10, 3 );
	}

	/**
	 * Filters user capabilities (user_has_cap).
	 *
	 * @param array<string, bool> $allcaps Capabilities.
	 * @param string[]            $caps    Required primitive caps.
	 * @param array<int, mixed>   $args    [cap, user_id, ...].
	 * @return array<string, bool>
	 */
	public static function grant( $allcaps, $caps, $args ) {
		$requested = isset( $args[0] ) ? $args[0] : '';
		if ( self::READ !== $requested ) {
			return $allcaps;
		}
		$allcaps[ self::READ ] = ! empty( $allcaps[ Auth::read_capability() ] );
		return $allcaps;
	}
}