<?php

/**
 * Copyright 2024-2025 Simply.IN Sp. z o.o.
 *
 * NOTICE OF LICENSE
 *
 * Licensed under the EUPL-1.2 or later.
 * You may not use this work except in compliance with the Licence.
 *
 * Copy of the Licence is available at:
 * https://joinup.ec.europa.eu/software/page/eupl
 * It is bundled with this package in the file LICENSE.txt
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the Licence is distributed on an as is basis,
 * without warranties or conditions of any kind, either express or implied.
 * Check the Licence for the specific language governing permissions
 * and limitations under the License.
 *
 * @author   Simply.IN Sp. z o.o.
 * @copyright 2024-2025 Simply.IN Sp. z o.o.
 * @license   https://joinup.ec.europa.eu/software/page/eupl
 */

declare(strict_types=1);

namespace SimplyIn\Payment;

use Order;
use OrderHistory;
use SimplyInOrder;
use SimplyInPayments;

if (!defined('_PS_VERSION_')) {
    exit;
}

final class OrderStateUpdater implements OrderStateUpdaterInterface
{
    public function update(Order $order, int $newState, string $callback): void
    {
        if ((int) $order->current_state !== $newState) {
            $history = new OrderHistory();
            $history->id_order = (int) $order->id;
            $history->id_employee = 0;
            $history->changeIdOrderState($newState, (int) $order->id);
            $history->add();
            // Kept in step with what was just persisted, so anything else this same request still
            // does with $order - {@see clearAuthorizationIfDone()} below included - reads the state the
            // order is actually in rather than the one it was in before this call.
            $order->current_state = $newState;
        }

        if (method_exists('SimplyInPayments', $callback)) {
            SimplyInPayments::$callback($order->id_cart);
        }

        $this->clearAuthorizationIfDone($order);
    }

    /**
     * The order-bound authorization exists only to serve a retry - once none can ever happen again
     * (the order is paid, or the shop closed it), keeping it around is pure liability with no
     * remaining upside. {@see OrderPaymentRetry::decisionFor()} is the single source of truth for
     * both facts already, so this asks it rather than re-deriving "settled" or "closed" here.
     *
     * Deliberately NOT reached for the module's own "payment canceled" state - that is the normal
     * resting state a retry exists for, and {@see OrderPaymentRetry} already treats it as such.
     */
    private function clearAuthorizationIfDone(Order $order): void
    {
        $decision = OrderPaymentRetry::decisionFor($order);
        if ($decision !== PaymentRetryPolicy::ALREADY_SETTLED && $decision !== PaymentRetryPolicy::ORDER_CLOSED) {
            return;
        }

        $simplyInOrder = SimplyInOrder::getByIdOrder((int) $order->id);
        if ($simplyInOrder instanceof SimplyInOrder) {
            // Self-healing: a shop that has not yet run the auth_token upgrade must not have this
            // write fail outright on a payment-status transition. Same guard SimplyInPayments takes
            // before its own writes.
            SimplyInOrder::ensureSchema();
            $simplyInOrder->auth_token = '';
            $simplyInOrder->save();
        }
    }
}
