<?php
/**
 * WordPress options tools.
 *
 * @package AgentdeskSiteOperations
 */

defined( 'ABSPATH' ) || exit;

add_action(
	'agentdesk_register_tools',
	function ( $registry ) {
		// Deliberately excludes siteurl, home and admin_email: changing those can
		// point the site at another origin or hijack account recovery.
		$allowlist = array(
			'blogname',
			'blogdescription',
			'posts_per_page',
			'permalink_structure',
			'default_comment_status',
			'timezone_string',
			'date_format',
			'time_format',
			'woocommerce_coming_soon',
			'woocommerce_store_pages_only',
		);

		$registry->register(
			'options_get',
			array(
				'description' => 'Get an allowlisted WordPress option.',
				'domain'      => 'core',
				'capability'  => 'manage_options',
				'inputSchema' => array(
					'type'       => 'object',
					'properties' => array( 'name' => array( 'type' => 'string' ) ),
					'required'   => array( 'name' ),
				),
			),
			function ( $args ) use ( $allowlist ) {
				$name = sanitize_key( $args['name'] );
				if ( ! in_array( $name, $allowlist, true ) ) {
					return new WP_Error( 'agentdesk_option_forbidden', 'Option not in allowlist' );
				}
				return array( 'name' => $name, 'value' => get_option( $name ) );
			}
		);

		$registry->register(
			'options_update',
			array(
				'description' => 'Update an allowlisted WordPress option.',
				'domain'      => 'core',
				'capability'  => 'manage_options',
				'power_mode'  => true,
				'inputSchema' => array(
					'type'       => 'object',
					'properties' => array(
						'name'  => array( 'type' => 'string' ),
						'value' => array(),
					),
					'required'   => array( 'name', 'value' ),
				),
			),
			function ( $args ) use ( $allowlist ) {
				$name = sanitize_key( $args['name'] );
				if ( ! in_array( $name, $allowlist, true ) ) {
					return new WP_Error( 'agentdesk_option_forbidden', 'Option not in allowlist' );
				}

				if ( ! is_scalar( $args['value'] ) ) {
					return new WP_Error( 'agentdesk_option_invalid', 'Option value must be a scalar.' );
				}

				update_option( $name, sanitize_text_field( (string) $args['value'] ) );
				return array( 'name' => $name, 'value' => get_option( $name ) );
			}
		);
	}
);