<?php
/**
 * Pending-action expiry cron.
 *
 * @package AgentFirewall
 */

declare(strict_types=1);

namespace AgentFirewall\Pending;

defined( 'ABSPATH' ) || exit; // @codeCoverageIgnore

/**
 * Hourly WP-Cron sweep transitioning overdue pending actions to expired
 * (PRD STORY-5.3).
 */
final class ExpiryCron {

	/**
	 * Cron hook name.
	 */
	public const HOOK = 'adaf_expire_pending';

	/**
	 * Constructor.
	 *
	 * @param PendingActionService $service Pending action service.
	 */
	public function __construct( private readonly PendingActionService $service ) {
	}

	/**
	 * Schedule the sweep and hook the runner.
	 */
	public function register(): void {
		// Scheduling is deferred to init, never done here. wp_schedule_event()
		// asks wp_get_schedules(), which runs the cron_schedules filter, and
		// plugins routinely build their entries with
		// __( 'Every 15 minutes', 'their-domain' ). Running that from
		// plugins_loaded is before init, so WordPress emits "translation
		// loading was triggered too early" - naming their text domain, caused
		// by our call. On a first activation those notices print before the
		// redirect header and the activation fails outright with "headers
		// already sent"; every later request finds the event scheduled and
		// skips the call, which is why it only ever bit a fresh install.
		add_action( 'init', array( $this, 'schedule' ) );

		add_action( self::HOOK, array( $this, 'run' ) );
	}

	/**
	 * Schedule the sweep unless it already is.
	 */
	public function schedule(): void {
		if ( false === wp_next_scheduled( self::HOOK ) ) {
			wp_schedule_event( time(), 'hourly', self::HOOK );
		}
	}

	/**
	 * Run one sweep.
	 */
	public function run(): void {
		$this->service->expire_overdue();
		$this->service->close_stale_approvals( new \DateTimeImmutable( 'now' ) );
	}

	/**
	 * Unschedule the sweep (deactivation).
	 */
	public static function unschedule(): void {
		wp_clear_scheduled_hook( self::HOOK );
	}
}