<?php
namespace Grav\Plugin\EntryActions;

use Grav\Common\Filesystem\Folder;
use Grav\Plugin\Api\Controllers\AbstractApiController;
use Grav\Plugin\Api\Exceptions\ApiException;
use Grav\Plugin\Api\Exceptions\ForbiddenException;
use Grav\Plugin\Api\Exceptions\NotFoundException;
use Grav\Plugin\Api\Response\ApiResponse;
use Grav\Plugin\Shared\EntryScopeGuard;
use Psr\Http\Message\ResponseInterface;
use Psr\Http\Message\ServerRequestInterface;

// Shared R6 guard lives in cache-on-save (the always-present custom plugin);
// require it so save and delete enforce scope identically (KTD5).
require_once dirname(__DIR__, 2) . '/cache-on-save/classes/EntryScopeGuard.php';

/**
 * DELETE /api/v1/entry/{slug}
 *
 * Deletes a journal entry folder, but only when ALL hold:
 *   - the request is the authenticated site OWNER (not merely any login/admin);
 *   - {slug} is a safe single segment (no '/', no '..');
 *   - it resolves through the page tree to a DIRECT child of the ACTIVE trip's
 *     dailies container.
 * Otherwise: 401 (anon), 403 (non-owner), 400 (bad slug), 404 (out of scope /
 * not found). On success the folder is removed and the page-tree cache cleared.
 */
class EntryActionsApiController extends AbstractApiController
{
    public function deleteEntry(ServerRequestInterface $request): ResponseInterface
    {
        // Authenticated OWNER only (KTD8). getUser() throws 401 for anonymous.
        $user = $this->getUser($request);
        if (!EntryScopeGuard::isOwnerUser($this->grav, $user)) {
            throw new ForbiddenException('Only the site owner can delete journal entries.');
        }

        $slug = $this->getRouteParam($request, 'slug');
        if (!is_string($slug) || !EntryScopeGuard::isSafeSegment($slug)) {
            throw new ApiException(400, 'Bad Request', 'Invalid entry slug.');
        }

        // Resolve via $pages->find() + parent-route assertion (never raw path
        // concatenation) — same shared check the save path uses.
        $page = EntryScopeGuard::resolveActiveDailyChild($this->grav, $slug);
        if ($page === null) {
            throw new NotFoundException('Entry not found in the active trip.');
        }

        $path = $page->path();
        if (!is_string($path) || $path === '' || !is_dir($path)) {
            throw new NotFoundException('Entry folder not found.');
        }

        Folder::delete($path);
        $this->grav['cache']->deleteAll();

        return ApiResponse::noContent();
    }
}