<?php
namespace Relay\Security;

use Relay\Support\RelayError;

/**
 * Which incoming operations this site accepts (spec §2.1). define('RELAY_MODE', '…') in wp-config.php
 * overrides the stored mode and locks it; an invalid constant counts as "locked".
 */
final class SiteMode
{
    public const OPTION = 'relay_mode';
    public const AUTO_LOCK_OPTION = 'relay_auto_lock';

    public static function current(): string
    {
        if (defined('RELAY_MODE')) {
            return in_array(RELAY_MODE, Permissions::MODES, true) ? RELAY_MODE : 'locked';
        }
        $mode = get_site_option(self::OPTION, 'locked');
        return in_array($mode, Permissions::MODES, true) ? $mode : 'locked';
    }

    /** null: not set in wp-config; "valid" / "invalid" otherwise. */
    public static function constant_state(): ?string
    {
        if (!defined('RELAY_MODE')) {
            return null;
        }
        return in_array(RELAY_MODE, Permissions::MODES, true) ? 'valid' : 'invalid';
    }

    public static function set(string $mode): void
    {
        if (defined('RELAY_MODE')) {
            throw new RelayError('mode.locked_by_config', esc_html__('The site mode is set in wp-config.php (RELAY_MODE) and cannot be changed here.', 'siterelay'));
        }
        if (!in_array($mode, Permissions::MODES, true)) {
            /* translators: %s: mode name */
            throw new RelayError('mode.invalid', esc_html(sprintf(__('Unknown site mode: %s', 'siterelay'), $mode)));
        }
        update_site_option(self::OPTION, $mode);
    }

    public static function auto_lock(): bool
    {
        return (bool) get_site_option(self::AUTO_LOCK_OPTION, false);
    }

    public static function set_auto_lock(bool $on): void
    {
        update_site_option(self::AUTO_LOCK_OPTION, $on);
    }

    /** After a successful incoming push: lock the site when auto-lock is on (ignored when RELAY_MODE is defined). */
    public static function after_incoming_push(): bool
    {
        if (!defined('RELAY_MODE') && self::auto_lock()) {
            update_site_option(self::OPTION, 'locked');
            return true;
        }
        return false;
    }

    public static function to_api(): array
    {
        return ['mode' => self::current(), 'constant' => self::constant_state(), 'auto_lock' => self::auto_lock()];
    }
}