<?php
/**
 * Adapter for WordPress core's Secrets API (WordPress 7.2+).
 *
 * @package admin-optimizer
 */

namespace Yipresser\AdminOptimizer\Support;

// Exit if accessed directly.
if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/**
 * Thin pass-through to wp_set_secret() and friends. Core owns encryption, key
 * custody and rotation; this class only translates its return shapes.
 */
final class AO_Secrets_Core_Backend implements AO_Secrets_Backend {

	/**
	 * Whether this WordPress ships the Secrets API.
	 *
	 * @return bool
	 */
	public static function is_available(): bool {
		return function_exists( 'wp_set_secret' ) && function_exists( 'wp_get_secret' ) && function_exists( 'wp_delete_secret' );
	}

	/**
	 * Read a secret.
	 *
	 * @param string $name Secret name.
	 *
	 * @return string|null|\WP_Error
	 */
	public function get( string $name ) {
		$secret = wp_get_secret( $name );
		if ( null === $secret || is_wp_error( $secret ) ) {
			return $secret;
		}

		// A provider may refuse to release the value to PHP; reveal() then returns a WP_Error.
		return $secret->reveal();
	}

	/**
	 * Store a secret.
	 *
	 * @param string $name  Secret name.
	 * @param string $value Plaintext value.
	 *
	 * @return true|\WP_Error
	 */
	public function set( string $name, string $value ) {
		return wp_set_secret( $name, $value );
	}

	/**
	 * Delete a secret.
	 *
	 * @param string $name Secret name.
	 *
	 * @return true|\WP_Error
	 */
	public function delete( string $name ) {
		return wp_delete_secret( $name );
	}

	/**
	 * Names of this plugin's secrets.
	 *
	 * @return string[]
	 */
	public function list_names(): array {
		$listing = wp_list_secrets( AO_Secrets::NAMESPACE_PREFIX );
		if ( is_wp_error( $listing ) || ! is_array( $listing ) ) {
			return [];
		}

		// Each entry is ['name' => ..., 'fingerprint' => ..., ...]; a corrupted record is still listed.
		$names = array_column( $listing, 'name' );

		return array_values( array_filter( array_map( 'strval', $names ) ) );
	}

	/**
	 * Whether the active provider accepts writes.
	 *
	 * @return bool
	 */
	public function is_writable(): bool {
		return ! function_exists( 'wp_secrets_provider_is_writable' ) || wp_secrets_provider_is_writable();
	}

	/**
	 * Description of the active provider.
	 *
	 * @return string
	 */
	public function label(): string {
		return function_exists( 'wp_secrets_provider_label' ) ? wp_secrets_provider_label() : 'WordPress Secrets API';
	}
}