<?php
/**
 * Send Password Reset Tool.
 *
 * Send password reset emails to users by ID, login, or email using
 * retrieve_password() which generates a reset key and sends notification.
 *
 * @package   Agenistrator
 * @since     1.0.0
 * @author    Alex Ruban <alex@maximum.guru>
 * @author    Maximum Software Inc <contact@maximum.software>
 * @license   GPL-3.0-only
 * @link      https://maximum.software/
 *
 * SPDX-FileCopyrightText: 2025-2026 Alex Ruban <alex@maximum.guru>
 * SPDX-FileCopyrightText: 2025-2026 Maximum Software Inc <contact@maximum.software>
 * SPDX-License-Identifier: GPL-3.0-only
 */

namespace Agenistrator;

// Direct access prevention
if ( ! defined( 'ABSPATH' ) ) {
	return;
}

/**
 * Send_Password_Reset_Tool class.
 */
class Send_Password_Reset_Tool extends Tool {

	/**
	 * Get the tool ID.
	 *
	 * @return string The tool ID.
	 * @since     1.0.0
	 */
	public function get_id() {
		return 'send_password_reset';
	}

	/**
	 * Get the tool name.
	 *
	 * @return string The tool name.
	 * @since     1.0.0
	 */
	public function get_name() {
		return __( 'Send Password Reset', 'agenistrator' );
	}

	/**
	 * Get the tool description.
	 *
	 * @return string The tool description.
	 * @since     1.0.0
	 */
	public function get_description() {
		return 'Send a password reset email to a user.';
	}

	/**
	 * Get the parameters schema for this tool.
	 *
	 * @return array Parameters schema in JSON Schema format.
	 * @since     1.0.0
	 */
	public function get_parameters() {
		return array(
			'type'       => 'object',
			'properties' => array(
				'id'       => array(
					'type'        => 'integer',
					'description' => 'The user ID',
				),
				'username' => array(
					'type'        => 'string',
					'description' => 'The username',
				),
				'email'    => array(
					'type'        => 'string',
					'description' => 'The user email address',
				),
			),
			'required'   => array(),
		);
	}

	/**
	 * Check if the current user can execute this tool.
	 *
	 * @return bool True if the current user has permission.
	 * @since     1.0.0
	 */
	public function current_user_can_execute() {
		return current_user_can( 'edit_users' );
	}

	/**
	 * Check if this tool is read-only.
	 *
	 * @return bool True if the tool only reads data.
	 * @since     1.0.0
	 */
	public function is_read_only() {
		return false;
	}

	/**
	 * Execute the tool with the given arguments.
	 *
	 * @param array $args The tool arguments.
	 *
	 * @return array The tool execution result.
	 * @since     1.0.0
	 */
	protected function execute( $args ) {
		$user = null;

		if ( isset( $args['id'] ) && ! empty( $args['id'] ) ) {
			$user = get_user_by( 'ID', intval( $args['id'] ) );
		} elseif ( isset( $args['username'] ) && ! empty( $args['username'] ) ) {
			$user = get_user_by( 'login', sanitize_user( $args['username'] ) );
		} elseif ( isset( $args['email'] ) && ! empty( $args['email'] ) ) {
			$user = get_user_by( 'email', sanitize_email( $args['email'] ) );
		} else {
			return $this->error_response( 'Please provide id, username, or email' );
		}

		if ( ! $user ) {
			return $this->error_response( 'User not found' );
		}

		$result = retrieve_password( $user->user_login );

		if ( is_wp_error( $result ) ) {
			return $this->error_response( 'Failed to send password reset: ' . $result->get_error_message() );
		}

		return $this->success_response(
			'Password reset email sent successfully',
			array(
				'user_id'  => $user->ID,
				'username' => $user->user_login,
				'email'    => $user->user_email,
			)
		);
	}
}
