<?php
/**
 * Migration for the connected proxy URL setting.
 *
 * @package   Google\Site_Kit\Core\Util
 * @copyright 2026 Google LLC
 * @license   https://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
 * @link      https://sitekit.withgoogle.com
 */

namespace Google\Site_Kit\Core\Util;

use Google\Site_Kit\Context;
use Google\Site_Kit\Core\Authentication\Connected_Proxy_URL;
use Google\Site_Kit\Core\Storage\Options;

/**
 * Class Migration_1_185_0.
 *
 * @since 1.185.0
 * @access private
 * @ignore
 */
class Migration_1_185_0 {
	/**
	 * Target DB version.
	 */
	const DB_VERSION = '1.185.0';

	/**
	 * DB version option name.
	 */
	const DB_VERSION_OPTION = 'googlesitekit_db_version';

	/**
	 * Options instance.
	 *
	 * @since 1.185.0
	 * @var Options
	 */
	protected Options $options;

	/**
	 * Connected_Proxy_URL instance.
	 *
	 * @since 1.185.0
	 * @var Connected_Proxy_URL
	 */
	protected Connected_Proxy_URL $connected_proxy_url;

	/**
	 * Constructor.
	 *
	 * @since 1.185.0
	 *
	 * @param Context $context Plugin context instance.
	 * @param Options $options Optional. Options instance.
	 */
	public function __construct(
		Context $context,
		?Options $options = null
	) {
		$this->options             = $options ?: new Options( $context );
		$this->connected_proxy_url = new Connected_Proxy_URL( $this->options );
	}

	/**
	 * Registers hooks.
	 *
	 * The migration runs at priority 0, so it runs before
	 * `Authentication::check_connected_proxy_url()` at priority 10. That check
	 * reads a plain text value as a URL change, so it needs the stored value
	 * already encoded.
	 *
	 * @since 1.185.0
	 */
	public function register() {
		add_action( 'admin_init', array( $this, 'migrate' ), 0 );
	}

	/**
	 * Migrates the DB.
	 *
	 * @since 1.185.0
	 */
	public function migrate() {
		$db_version = $this->options->get( self::DB_VERSION_OPTION );

		if ( ! $db_version || version_compare( $db_version, self::DB_VERSION, '<' ) ) {
			$this->migrate_connected_proxy_url();

			$this->options->set( self::DB_VERSION_OPTION, self::DB_VERSION );
		}
	}

	/**
	 * Migrates a plain text connected proxy URL to the encoded format.
	 *
	 * Earlier plugin versions stored the URL in plain text, which could cause
	 * issues when users/other plugins would search + replace the site URL.
	 * If the user's site URL hasn't been encoded, we encode it as part of
	 * this migration.
	 *
	 * @since 1.185.0
	 */
	protected function migrate_connected_proxy_url() {
		$stored_url = $this->options->get( Connected_Proxy_URL::OPTION );

		// A plain text URL starts with `http`, so the migration encodes it.
		// A base64 value never starts with `http`, and base64 values won't
		// include a colon, so the migration skips it.
		// Anything else never came from this plugin, so we don't encode it.
		if ( ! is_string( $stored_url ) || 0 !== strpos( $stored_url, 'http' ) ) {
			return;
		}

		$this->connected_proxy_url->set( $stored_url );
	}
}