<?php
if ( ! defined( 'ABSPATH' ) ) {
	exit;
}
/**
 * Retrieves the required WordPress capability for a specific AdPresso action.
 * This function serves as the central, filterable entry point for all permission checks.
 * The Pro plugin can hook into this function to implement granular permissions.
 *
 * @param string $action The action to be checked (e.g., ‘edit_placement’, ‘view_analytics’).
 *
 * @return string The WordPress capability (e.g., ‘manage_options’ or ‘adpresso_edit_placement’).
 */
function adpresso_get_capability( string $action = 'manage_settings' ): string {

	switch ( $action ) {
		// Actions that an editor is typically allowed to perform
		case 'edit_ad':
		case 'edit_group':
		case 'edit_placement':
		case 'delete_ad':
		case 'delete_group':
		case 'delete_placement':
		case 'duplicate_ad':
		case 'duplicate_group':
		case 'duplicate_placement':
			$default_cap = 'edit_posts'; // Default-Fallback for CPTs
			break;

		// Touching entities of other users.
		case 'edit_others_ad':
		case 'edit_others_group':
		case 'edit_others_placement':
			$default_cap = 'edit_others_posts';
			break;

		// Running PHP inside an ad - Free relies on WordPress' own trust level.
		case 'allow_php_execution':
			$default_cap = 'unfiltered_html';
			break;

		// Actions that only an administrator is allowed to perform
		case 'view_analytics':
		case 'manage_settings':
		case 'use_tools':
		case 'create_debug_token':
		case 'view_debug':
		default:
			$default_cap = 'manage_options';
			break;
	}

	/**
	 * Filters the required capability for an AdPresso action.
	 *
	 * @param string $default_cap The standard capability (e.g., ‘manage_options’).
	 * @param string $action      The action being checked (e.g., ‘edit_placement’).
	 */

	return apply_filters( 'adpresso_get_capability', $default_cap, $action );
}

/**
 * Builds the primitive capability map for an AdPresso post type (used with map_meta_cap => true).
 *
 * @param string $entity 'ad', 'group' or 'placement'.
 *
 * @return array<string, string>
 */
function adpresso_get_post_type_capabilities( string $entity ): array {
	$edit   = adpresso_get_capability( 'edit_' . $entity );
	$delete = adpresso_get_capability( 'delete_' . $entity );
	$others = adpresso_get_capability( 'edit_others_' . $entity );

	return [
		'edit_posts'             => $edit,
		'edit_others_posts'      => $others,
		'edit_private_posts'     => $edit,
		'edit_published_posts'   => $edit,
		'publish_posts'          => $edit,
		'create_posts'           => $edit,
		'read_private_posts'     => $edit,
		'delete_posts'           => $delete,
		'delete_others_posts'    => $others,
		'delete_private_posts'   => $delete,
		'delete_published_posts' => $delete,
		'read'                   => 'read',
	];
}