<?php

use WP_CLI\Fetchers\User as UserFetcher;

/**
 * Lists, adds, or removes super admin users on a multisite installation.
 *
 * ## EXAMPLES
 *
 *     # List user with super-admin capabilities.
 *     $ wp super-admin list
 *     supervisor
 *     administrator
 *
 *     # Grant super-admin privileges to the user.
 *     $ wp super-admin add superadmin2
 *     Success: Granted super-admin capabilities to 1 user.
 *
 *     # Revoke super-admin privileges from the user.
 *     $ wp super-admin remove superadmin2
 *     Success: Revoked super-admin capabilities from 1 user.
 *
 * @package wp-cli
 */
class Super_Admin_Command extends WP_CLI_Command {

    private $fields = [
        'user_login',
    ];

    private $fetcher;

    public function __construct() {
        $this->fetcher = new UserFetcher();
    }

    /**
     * Lists users with super admin capabilities.
     *
     * ## OPTIONS
     *
     * [--format=<format>]
     * : Render output in a particular format.
     * ---
     * default: list
     * options:
     *   - list
     *   - table
     *   - csv
     *   - json
     *   - count
     *   - ids
     *   - yaml
     * ---
     *
     * ## EXAMPLES
     *
     *     # List user with super-admin capabilities.
     *     $ wp super-admin list
     *     supervisor
     *     administrator
     *
     * @subcommand list
     */
    public function list_subcommand( $_, $assoc_args ) {
        $super_admins = self::get_admins();

        if ( 'list' === $assoc_args['format'] ) {
            foreach ( $super_admins as $user_login ) {
                WP_CLI::line( $user_login );
            }
        } else {
            $output_users = [];
            foreach ( $super_admins as $user_login ) {
                $output_user = new stdClass();

                $output_user->user_login = $user_login;

                $output_users[] = $output_user;
            }

            if ( ! empty( $assoc_args['format'] ) && 'ids' === $assoc_args['format'] ) {
                $formatter = new \WP_CLI\Formatter( $assoc_args );

                $user_ids = [];
                foreach ( $super_admins as $user_login ) {
                    $user_obj   = get_user_by( 'login', $user_login );
                    $user_ids[] = $user_obj->ID;
                }
                $formatter->display_items( $user_ids );
            } else {
                $formatter = new \WP_CLI\Formatter( $assoc_args, $this->fields );
                $formatter->display_items( $output_users );
            }
        }
    }

    /**
     * Grants super admin privileges to one or more users.
     *
     * ## OPTIONS
     *
     * <user>...
     * : One or more user IDs, user emails, or user logins.
     *
     * ## EXAMPLES
     *
     *     # Grant super-admin privileges to the user.
     *     $ wp super-admin add superadmin2
     *     Success: Granted super-admin capabilities to 1 user.
     */
    public function add( $args, $_ ) {

        $successes = 0;
        $errors    = 0;
        $users     = $this->fetcher->get_many( $args );

        if ( count( $users ) !== count( $args ) ) {
            $errors = count( $args ) - count( $users );
        }

        $super_admins     = self::get_admins();
        $num_super_admins = count( $super_admins );

        $new_super_admins = [];
        foreach ( $users as $user ) {
            do_action( 'grant_super_admin', (int) $user->ID ); // phpcs:ignore WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

            if ( in_array( $user->user_login, $super_admins, true ) ) {
                WP_CLI::warning( "User '{$user->user_login}' already has super-admin capabilities." );
                continue;
            }

            $new_super_admins[] = $user->ID;
            $super_admins[]     = $user->user_login;
            ++$successes;
        }

        if ( count( $super_admins ) === $num_super_admins ) {
            if ( $errors ) {
                $user_count = count( $args );
                WP_CLI::error( "Couldn't grant super-admin capabilities to {$errors} of {$user_count} users." );
            } else {
                WP_CLI::success( 'Super admins remain unchanged.' );
            }
        } elseif ( update_site_option( 'site_admins', $super_admins ) ) {
            if ( $errors ) {
                $user_count = count( $args );
                WP_CLI::error( "Only granted super-admin capabilities to {$successes} of {$user_count} users." );
            } else {
                $message = $successes > 1 ? 'users' : 'user';
                WP_CLI::success( "Granted super-admin capabilities to {$successes} {$message}." );
            }
        } else {
            WP_CLI::error( 'Site options update failed.' );
        }

        foreach ( $new_super_admins as $user_id ) {
            do_action( 'granted_super_admin', (int) $user_id ); // phpcs:ignore WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
        }
    }

    /**
     * Removes super admin privileges from one or more users.
     *
     * ## OPTIONS
     *
     * <user>...
     * : One or more user IDs, user emails, or user logins.
     *
     * ## EXAMPLES
     *
     *     # Revoke super-admin privileges from the user.
     *     $ wp super-admin remove superadmin2
     *     Success: Revoked super-admin capabilities from 1 user.
     */
    public function remove( $args, $_ ) {
        $users             = $this->fetcher->get_many( $args );
        $user_logins       = $users ? array_values( array_unique( wp_list_pluck( $users, 'user_login' ) ) ) : [];
        $user_logins_count = count( $user_logins );

        $user_ids = [];
        foreach ( $users as $user ) {
            $user_ids[ $user->user_login ] = $user->ID;

            do_action( 'revoke_super_admin', (int) $user->ID ); // phpcs:ignore WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
        }

        $super_admins = self::get_admins();
        if ( ! $super_admins ) {
            WP_CLI::error( 'No super admins to revoke super-admin privileges from.' );
        }

        if ( $user_logins_count < count( $args ) ) {
            $flipped_user_logins = array_flip( $user_logins );
            // Fetcher has already warned so don't bother here, but continue with any args that are possible login names to cater for invalid users in the site options meta.

            $user_logins       = array_merge(
                $user_logins,
                array_unique(
                    array_filter(
                        $args,
                        static function ( $v ) use ( $flipped_user_logins ) {
                            // Exclude numeric and email-like logins (login names can be email-like but ignore this given the circumstances).
                            return ! isset( $flipped_user_logins[ $v ] ) && ! is_numeric( $v ) && ! is_email( $v );
                        }
                    )
                )
            );
            $user_logins_count = count( $user_logins );
        }
        if ( ! $user_logins ) {
            WP_CLI::error( 'No valid user logins given to revoke super-admin privileges from.' );
        }

        $update_super_admins = array_diff( $super_admins, $user_logins );
        if ( $update_super_admins === $super_admins ) {
            WP_CLI::error( $user_logins_count > 1 ? 'None of the given users is a super admin.' : 'The given user is not a super admin.' );
        }

        update_site_option( 'site_admins', $update_super_admins );

        $successes = count( $super_admins ) - count( $update_super_admins );
        if ( $successes === $user_logins_count ) {
            $message = $user_logins_count > 1 ? 'users' : 'user';
            $msg     = "Revoked super-admin capabilities from {$user_logins_count} {$message}.";
        } else {
            $msg = "Revoked super-admin capabilities from {$successes} of {$user_logins_count} users.";
        }
        if ( ! $update_super_admins ) {
            $msg .= ' There are no remaining super admins.';
        }
        WP_CLI::success( $msg );

        $removed_logins = array_intersect( $user_logins, $super_admins );

        foreach ( $removed_logins as $user_login ) {
            $user_id = null;

            if ( array_key_exists( $user_login, $user_ids ) ) {
                $user_id = $user_ids[ $user_login ];
            } else {
                $user = get_user_by( 'login', $user_login );
                if ( $user instanceof WP_User ) {
                    $user_id = $user->ID;
                }
            }

            if ( null !== $user_id ) {
                do_action( 'revoked_super_admin', (int) $user_ids[ $user_login ] ); // phpcs:ignore WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
            }
        }
    }

    private static function get_admins() {
        // We don't use get_super_admins() because we don't want to mess with the global
        return (array) get_site_option( 'site_admins', [ 'admin' ] );
    }
}