<?php
/**
 * Tier gate helper for REST endpoint permission callbacks.
 *
 * Provides static methods that return true or WP_Error based on the current
 * user's capability. Use in register_rest_route() permission_callback.
 *
 * @package AICommerce\API
 */

declare(strict_types=1);

namespace AICommerce\API;

/**
 * REST endpoint tier gate checks.
 */
class TierGate {

	/**
	 * Require manage_woocommerce capability only (no license check).
	 *
	 * @return bool|\WP_Error
	 */
	public static function admin_only() {
		if ( ! current_user_can( 'manage_options' ) ) {
			return new \WP_Error(
				'insufficient_permissions',
				__( 'You do not have permission.', 'ai-discoverability-kit' ),
				array( 'status' => 403 )
			);
		}
		return true;
	}

	/**
	 * Require Pro-level access.
	 *
	 * This is the free WordPress.org edition where every feature is available,
	 * so this is now simply a capability check. Retained for API stability.
	 *
	 * @param string $feature Feature name (unused; kept for signature stability).
	 *
	 * @return bool|\WP_Error
	 */
	public static function require_pro( string $feature = '' ) {
		unset( $feature );
		return self::admin_only();
	}

	/**
	 * Require Business-level access.
	 *
	 * @param string $feature Feature name (unused; kept for signature stability).
	 *
	 * @return bool|\WP_Error
	 */
	public static function require_business( string $feature = '' ) {
		unset( $feature );
		return self::admin_only();
	}

	/**
	 * Require Agency-level access.
	 *
	 * @param string $feature Feature name (unused; kept for signature stability).
	 *
	 * @return bool|\WP_Error
	 */
	public static function require_agency( string $feature = '' ) {
		unset( $feature );
		return self::admin_only();
	}
}