<?php
/**
 * Remove Capability from Role Tool.
 *
 * Removes a capability from an existing role. Changes persist to database
 * and affect all users with that role.
 *
 * @package   Agenistrator
 * @since     1.0.0
 * @author    Alex Ruban <alex@maximum.guru>
 * @author    Maximum Software Inc <contact@maximum.software>
 * @license   GPL-3.0-only
 * @link      https://maximum.software/
 *
 * SPDX-FileCopyrightText: 2025-2026 Alex Ruban <alex@maximum.guru>
 * SPDX-FileCopyrightText: 2025-2026 Maximum Software Inc <contact@maximum.software>
 * SPDX-License-Identifier: GPL-3.0-only
 */

namespace Agenistrator;

// Direct access prevention
if ( ! defined( 'ABSPATH' ) ) {
	return;
}

/**
 * Remove_Capability_From_Role_Tool class.
 */
class Remove_Capability_From_Role_Tool extends Tool {

	/**
	 * Get the tool ID.
	 *
	 * @return string The tool ID.
	 * @since     1.0.0
	 */
	public function get_id() {
		return 'remove_capability_from_role';
	}

	/**
	 * Get the tool name.
	 *
	 * @return string The tool name.
	 * @since     1.0.0
	 */
	public function get_name() {
		return __( 'Remove Capability from Role', 'agenistrator' );
	}

	/**
	 * Get the tool description.
	 *
	 * @return string The tool description.
	 * @since     1.0.0
	 */
	public function get_description() {
		return 'Remove a capability from an existing role.';
	}

	/**
	 * Get the parameters schema for this tool.
	 *
	 * @return array Parameters schema in JSON Schema format.
	 * @since     1.0.0
	 */
	public function get_parameters() {
		return array(
			'type'       => 'object',
			'properties' => array(
				'role'       => array(
					'type'        => 'string',
					'description' => 'The role slug to modify',
				),
				'capability' => array(
					'type'        => 'string',
					'description' => 'The capability to remove',
				),
			),
			'required'   => array( 'role', 'capability' ),
		);
	}

	/**
	 * Check if the current user can execute this tool.
	 *
	 * @return bool True if the current user has permission.
	 * @since     1.0.0
	 */
	public function current_user_can_execute() {
		return current_user_can( 'manage_options' );
	}

	/**
	 * Check if this tool is read-only.
	 *
	 * @return bool True if the tool only reads data.
	 * @since     1.0.0
	 */
	public function is_read_only() {
		return false;
	}

	/**
	 * Execute the tool with the given arguments.
	 *
	 * @param array $args The tool arguments.
	 *
	 * @return array The tool execution result.
	 * @since     1.0.0
	 */
	protected function execute( $args ) {
		$role_slug  = sanitize_key( $args['role'] );
		$capability = sanitize_key( $args['capability'] );

		$role = get_role( $role_slug );
		if ( ! $role ) {
			return $this->error_response( 'Role not found: ' . $role_slug );
		}

		if ( ! $role->has_cap( $capability ) ) {
			return $this->success_response(
				'Role does not have this capability',
				array(
					'role'           => $role_slug,
					'capability'     => $capability,
					'had_capability' => false,
				)
			);
		}

		$role->remove_cap( $capability );

		// Verify the capability was removed
		$role = get_role( $role_slug );
		if ( $role->has_cap( $capability ) ) {
			return $this->error_response( 'Failed to remove capability from role' );
		}

		return $this->success_response(
			'Capability removed from role successfully',
			array(
				'role'           => $role_slug,
				'capability'     => $capability,
				'had_capability' => true,
			)
		);
	}
}
