<?php
/**
 * Uninstall handler.
 *
 * Data is preserved by default (ADR-6). Deletion happens only when the site
 * owner explicitly opted in via the adaf_delete_data_on_uninstall option
 * (see readme.txt FAQ); defaulting to delete-on-uninstall is a
 * WordPress.org rejection reason (checklist §10).
 *
 * @package AgentFirewall
 */

declare(strict_types=1);

if ( ! defined( 'WP_UNINSTALL_PLUGIN' ) ) {
	exit;
}

$adaf_delete_data = get_option( 'adaf_delete_data_on_uninstall', '' );
if ( '1' !== (string) $adaf_delete_data ) {
	return;
}

global $wpdb;

// phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.DirectDatabaseQuery.SchemaChange, WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- Opt-in uninstall of plugin-owned tables; names are literals on the trusted prefix.
$wpdb->query( "DROP TABLE IF EXISTS {$wpdb->prefix}adaf_agents" );
$wpdb->query( "DROP TABLE IF EXISTS {$wpdb->prefix}adaf_policies" );
$wpdb->query( "DROP TABLE IF EXISTS {$wpdb->prefix}adaf_ledger" );
$wpdb->query( "DROP TABLE IF EXISTS {$wpdb->prefix}adaf_pending" );
$wpdb->query( "DROP TABLE IF EXISTS {$wpdb->prefix}adaf_snapshots" );
// phpcs:enable

$adaf_options = array(
	'adaf_db_version',
	'adaf_pending_ttl',
	'adaf_delete_data_on_uninstall',
	'adaf_anomaly_email',
	'adaf_ability_fingerprints',
	'adaf_ledger_retention_days',
	'adaf_ledger_anchor',
	'adaf_block_app_password_writes',
	'adaf_lockdown',
);
foreach ( $adaf_options as $adaf_option ) {
	delete_option( $adaf_option );
}

wp_clear_scheduled_hook( 'adaf_expire_pending' );
wp_clear_scheduled_hook( 'adaf_prune_ledger' );