unsupervised-scheduler/src/ShortcodeRegistrar.php

<?php
declare(strict_types=1);

namespace Unsupervised\Schedular;

use Unsupervised\Schedular\Auth\AccountPage;
use Unsupervised\Schedular\Auth\LoginPage;
use Unsupervised\Schedular\Auth\RegistrationPage;
use Unsupervised\Schedular\Booking\BookingPage;
use Unsupervised\Schedular\GroupClass\GroupClassPage;
use Unsupervised\Schedular\Guardian\FamilyPage;
use Unsupervised\Schedular\Payment\StudioSettings;

class ShortcodeRegistrar {

	public function __construct(
		private BookingPage $bookingPage,
		private LoginPage $loginPage,
		private RegistrationPage $registrationPage,
		private GroupClassPage $groupClassPage,
		private FamilyPage $familyPage,
		private AccountPage $accountPage,
	) {}

	public function register(): void {
		add_shortcode( 'us_booking', self::shortcode( [ $this->bookingPage, 'render' ] ) );
		add_shortcode( 'us_student_login', self::shortcode( [ $this->loginPage, 'render' ] ) );
		add_shortcode( 'us_student_register', self::shortcode( [ $this->registrationPage, 'render' ] ) );
		add_shortcode( 'us_group_classes', self::shortcode( [ $this->groupClassPage, 'render' ] ) );
		add_shortcode( 'us_family', self::shortcode( [ $this->familyPage, 'render' ] ) );
		add_shortcode( 'us_account', self::shortcode( [ $this->accountPage, 'render' ] ) );
		// Process registration submissions before output so the invite branch's
		// auth cookie is actually sent (render() runs too late, during the_content).
		add_action( 'template_redirect', [ $this->registrationPage, 'maybeHandleSubmit' ] );
		add_action( 'template_redirect', [ $this->registrationPage, 'maybeRedirectToRegistrationPage' ] );
		// Same reason as registration: the family form redirects after handling,
		// which render() (running during the_content) is too late to do.
		add_action( 'template_redirect', [ $this->familyPage, 'maybeHandleSubmit' ] );
		add_action( 'wp_enqueue_scripts', [ $this, 'enqueueAssets' ] );
	}

	/**
	 * Wraps a page renderer so bare shortcode usage is safe: WordPress passes
	 * an empty string, not an array, to the callback when a shortcode is used
	 * without attributes (`shortcode_parse_atts( '' )` returns `''`).
	 *
	 * @param callable(array<int|string, mixed>): string $render
	 * @return \Closure(mixed): string
	 */
	private static function shortcode( callable $render ): \Closure {
		return static fn( mixed $atts ): string => $render( is_array( $atts ) ? $atts : [] );
	}

	public function enqueueAssets(): void {
		wp_register_style( 'us-scheduler', USC_PLUGIN_URL . 'assets/css/frontend.css', [], USC_VERSION );

		$settings = new StudioSettings();

		// Stripe.js (loaded from Stripe's CDN per their terms) only when card billing
		// is available; the payment helper degrades to e-transfer messaging without it.
		$paymentDeps = [];
		if ( $settings->isStripeConfigured() ) {
			// Stripe pins the version in the URL path (/v3/) and forbids self-hosting,
			// so no query-string version applies here.
			wp_register_script( 'us-scheduler-stripe', 'https://js.stripe.com/v3/', [], null, true ); // phpcs:ignore WordPress.WP.EnqueuedResourceParameters.MissingVersion
			$paymentDeps[] = 'us-scheduler-stripe';
		}

		wp_register_script( 'us-scheduler-payment', USC_PLUGIN_URL . 'assets/js/payment.js', $paymentDeps, USC_VERSION, true );

		$data = [
			'restUrl'     => rest_url( 'us-scheduler/v1/' ),
			'nonce'       => wp_create_nonce( 'wp_rest' ),
			'stripeKey'   => $settings->publishableKey(),
			'startOfWeek' => Val::int( get_option( 'start_of_week', 1 ) ),
			// The studio HST rate, so a price quoted to a student on the way in
			// matches the total they are actually billed.
			'taxRate'     => $settings->hstRate(),
		];

		// Attach the shared config to the payment helper so it is defined before the
		// booking/group scripts (which depend on it) run.
		wp_localize_script( 'us-scheduler-payment', 'usScheduler', $data );

		// Price formatting and the pay agreement, shared by booking and enrolment.
		wp_register_script( 'us-scheduler-pricing', USC_PLUGIN_URL . 'assets/js/pricing.js', [ 'us-scheduler-payment' ], USC_VERSION, true );

		// The "who is this for?" picker, shared by booking and enrolment.
		wp_register_script( 'us-scheduler-guardian', USC_PLUGIN_URL . 'assets/js/guardian.js', [], USC_VERSION, true );

		wp_register_script( 'us-scheduler', USC_PLUGIN_URL . 'assets/js/booking.js', [ 'us-scheduler-pricing', 'us-scheduler-guardian' ], USC_VERSION, true );
		wp_register_script( 'us-scheduler-group', USC_PLUGIN_URL . 'assets/js/group-classes.js', [ 'us-scheduler-pricing', 'us-scheduler-guardian' ], USC_VERSION, true );

		/*
		 * Progressive enhancement for the registration form.
		 *
		 * `password-strength-meter` is WordPress's own wrapper around zxcvbn, so
		 * the signup form scores a password exactly the way wp-admin does rather
		 * than inventing a second opinion. It pulls in `zxcvbn-async`, which
		 * fetches the (large) dictionary only once the page has loaded — hence
		 * the guard in register.js for the window where it is not there yet.
		 */
		wp_register_script(
			'us-scheduler-register',
			USC_PLUGIN_URL . 'assets/js/register.js',
			[ 'password-strength-meter' ],
			USC_VERSION,
			true
		);
	}
}