<?php
/**
 * What the plugin stores: a hash of the key Suiko uses to talk to this site (never the key itself), the site id on Suiko's
 * side, the organisation name shown in the settings page, the publication mode, the user who connected the site (author of new
 * articles), and a short-lived pairing code.
 */
if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/** 'draft' (default): an update arrives as a draft to review and apply in one click. 'direct': the live article is replaced. */
function suiko_mode() {
	$m = get_option( 'suiko_mode', 'draft' );
	return 'direct' === $m ? 'direct' : 'draft';
}

function suiko_is_connected() {
	return (bool) get_option( 'suiko_key_hash' );
}

/** Constant-time check of the key sent by Suiko against the stored hash. */
function suiko_key_matches( $key ) {
	$hash = get_option( 'suiko_key_hash' );
	if ( ! $hash || ! is_string( $key ) || '' === $key ) {
		return false;
	}
	return hash_equals( $hash, hash( 'sha256', $key ) );
}

/** A fresh pairing code, valid ten minutes, that Suiko exchanges server-to-server for the permanent key. */
function suiko_new_pairing_code() {
	$code = bin2hex( random_bytes( 20 ) );
	set_transient( 'suiko_pairing', hash( 'sha256', $code ), 10 * MINUTE_IN_SECONDS );
	return $code;
}

/** Consumes the pairing code: valid once, then gone. Returns the new permanent key (returned to Suiko, stored here as a hash). */
function suiko_consume_pairing_code( $code ) {
	$stored = get_transient( 'suiko_pairing' );
	if ( ! $stored || ! is_string( $code ) || ! hash_equals( $stored, hash( 'sha256', $code ) ) ) {
		return null;
	}
	delete_transient( 'suiko_pairing' );
	$key = bin2hex( random_bytes( 32 ) );
	update_option( 'suiko_key_hash', hash( 'sha256', $key ), false );
	update_option( 'suiko_connected_at', gmdate( 'c' ), false );
	return $key;
}

function suiko_disconnect() {
	delete_option( 'suiko_key_hash' );
	delete_option( 'suiko_site_id' );
	delete_option( 'suiko_connected_at' );
	delete_option( 'suiko_organisation' );
	delete_option( 'suiko_author' );
	delete_transient( 'suiko_pairing' );
}

/** Site facts Suiko needs at pairing and on ping. Nothing secret. */
function suiko_site_info() {
	global $wp_version;
	return array(
		'name'         => get_bloginfo( 'name' ),
		'url'          => home_url( '/' ),
		'language'     => get_locale(),
		'wp_version'   => $wp_version,
		'plugin'       => SUIKO_VERSION,
		'seo_plugin'   => suiko_seo_plugin(),
		'mode'         => suiko_mode(),
		'post_types'   => array( 'post', 'page' ),
		'timezone'     => wp_timezone_string(),
	);
}