<?php
/**
 * Removes what Web-Engine Graph stored in WordPress (Redmine #26314).
 *
 * WordPress runs this file on Delete without loading the plugin, so it uses
 * WordPress functions only.
 *
 * The graph's own options always go. The account options are shared with
 * Web-Engine Sentry (one cloud token per site serves every Web-Engine plugin),
 * so they go only when Sentry is not active. In that case the graph was the
 * only product using the connection, and the cloud is told the site is leaving
 * before the token is deleted.
 */

if (!defined('WP_UNINSTALL_PLUGIN')) {
	exit;
}

// Development-only wiring, absent from a release: the cloud URL from the
// environment, and the local cloud's option for the list below.
if (is_readable(__DIR__ . '/lib/weGraph-wp-plugin-libs/src/Dev/bootstrap.php')) {
	require __DIR__ . '/lib/weGraph-wp-plugin-libs/src/Dev/bootstrap.php';
}

// Options only the graph writes: ButtercupWP::OPTION_DOMAIN.
const WE360CLOUD_GRAPH_OWN_OPTIONS = [
	'we360cloud_buttercup_domain',
];

// Account options, written by WebEngine\WordPress\Auth\Account and shared with
// every Web-Engine plugin on the site.
const WE360CLOUD_GRAPH_SHARED_OPTIONS = [
	'we360cloud_account_access_token',
	'we360cloud_tier',
	'we360cloud_balance',
	'we360cloud_reset-expires',
	'we360cloud_registered-email',
	'we360cloud_registered-name',
	'we360cloud_authenticated-email',
];

const WE360CLOUD_GRAPH_TOKEN_OPTION = 'we360cloud_account_access_token';

// Account::CONNECT_TRANSIENT.
const WE360CLOUD_GRAPH_CONNECT_TRANSIENT = 'we360cloud_connect_pending';

// Other plugins that use the shared account options.
const WE360CLOUD_GRAPH_SIBLING_PLUGINS = [
	'web-engine-sentry/web-engine-sentry.php',
];

/**
 * Whether another Web-Engine plugin is active on the current site.
 *
 * Checks the site's own active plugins and, on multisite, the network-active
 * ones.
 */
function we360cloud_graph_sibling_present() {
	$active = (array) get_option('active_plugins', []);
	$network = is_multisite() ? (array) get_site_option('active_sitewide_plugins', []) : [];

	foreach (WE360CLOUD_GRAPH_SIBLING_PLUGINS as $plugin) {
		if (in_array($plugin, $active, true) || isset($network[$plugin])) {
			return true;
		}
		// A deactivated sibling keeps the account token on purpose so that it
		// works again on reactivation, so an installed sibling counts too.
		if (file_exists(WP_PLUGIN_DIR . '/' . $plugin)) {
			return true;
		}
	}
	return false;
}

/**
 * The cloud API base, as Account::getBaseUrl() builds it.
 *
 * The plugin defines WE360CLOUD_BASE_URL on load, which has not happened here,
 * so the same fallback is repeated: wp-config (or, in development, the
 * environment), then the live cloud.
 */
function we360cloud_graph_api_base() {
	$base = defined('WE360CLOUD_BASE_URL') ? WE360CLOUD_BASE_URL : 'https://www.we360.cloud';
	return $base . '/api/';
}

/**
 * Tell the cloud this site is disconnecting. Best effort: the result is ignored
 * and the local clean-up runs whatever happens.
 *
 * Mirrors the account library's 'goodbye' route: a POST carrying the site's
 * host as `domain`, authenticated with the site's bearer token. The cloud
 * revokes that token.
 */
function we360cloud_graph_goodbye($token) {
	$parsed = wp_parse_url(get_site_url());
	$domain = is_array($parsed) && isset($parsed['host'])
		? $parsed['host']
		: (is_array($parsed) && isset($parsed['path']) ? $parsed['path'] : '');

	wp_remote_post(we360cloud_graph_api_base() . 'goodbye', [
		'timeout' => 5,
		'httpversion' => '1.1',
		'headers' => [
			'Authorization' => 'Bearer ' . $token,
			'Accept' => 'application/json',
		],
		'body' => ['domain' => $domain],
	]);
}

/**
 * Remove the graph's data from the current site.
 */
function we360cloud_graph_uninstall_site() {
	foreach (apply_filters('we360cloud_graph_uninstall_options', WE360CLOUD_GRAPH_OWN_OPTIONS) as $option) {
		delete_option($option);
	}
	delete_transient(WE360CLOUD_GRAPH_CONNECT_TRANSIENT);

	if (we360cloud_graph_sibling_present()) {
		return;
	}

	$token = (string) get_option(WE360CLOUD_GRAPH_TOKEN_OPTION, '');
	if ($token !== '') {
		we360cloud_graph_goodbye($token);
	}

	foreach (WE360CLOUD_GRAPH_SHARED_OPTIONS as $option) {
		delete_option($option);
	}
}

if (is_multisite()) {
	$we360cloud_graph_site_ids = get_sites(['fields' => 'ids', 'number' => 0]);
	foreach ($we360cloud_graph_site_ids as $we360cloud_graph_site_id) {
		switch_to_blog($we360cloud_graph_site_id);
		we360cloud_graph_uninstall_site();
		restore_current_blog();
	}
} else {
	we360cloud_graph_uninstall_site();
}