5, 'title' => 'Team', 'post_type' => 'page', 'where' => 'featured', 'certainty' => 'sicher']]; private const POSSIBLE = [['post_id' => 7, 'title' => 'Blog', 'post_type' => 'post', 'where' => 'content', 'certainty' => 'möglicherweise']]; protected function setUp(): void { parent::setUp(); Functions\when('get_post')->justReturn(new WP_Post(['ID' => 33, 'post_type' => 'attachment', 'post_status' => 'inherit', 'post_title' => 'Foto'])); Functions\when('current_user_can')->justReturn(true); Functions\when('get_post_meta')->justReturn('2026/09/foto.jpg'); } private function ability(array $usages, ChangeLog $log, bool $trash = false): MediaDeleteAbility { $finder = Mockery::mock(MediaUsageFinder::class); $finder->allows('usages')->with(33)->andReturn($usages); return new MediaDeleteAbility($finder, $log, static fn (): bool => $trash); } public function testConfirmationIsRequiredAndMentionsUsages(): void { Functions\expect('wp_delete_attachment')->never(); $result = $this->ability(self::USAGE, FakeChangeLog::forbidden())->execute(['id' => 33]); self::assertSame('lit_confirm_required', $result->get_error_code()); self::assertStringContainsString('endgültig', $result->get_error_message()); self::assertStringContainsString('1 Stelle', $result->get_error_message()); self::assertSame(self::USAGE, $result->get_error_data()['usages']); } public function testConfirmationMentionsTheTrashWhenMediaTrashIsOn(): void { $result = $this->ability([], FakeChangeLog::forbidden(), true)->execute(['id' => 33, 'confirm' => false]); self::assertSame('lit_confirm_required', $result->get_error_code()); self::assertStringContainsString('Papierkorb', $result->get_error_message()); } public function testUsedMediaNeedsForce(): void { Functions\expect('wp_delete_attachment')->never(); $result = $this->ability(self::USAGE, FakeChangeLog::forbidden())->execute(['id' => 33, 'confirm' => true]); self::assertSame('lit_in_use', $result->get_error_code()); self::assertSame(self::USAGE, $result->get_error_data()['usages']); } public function testPossibleUsageAlsoNeedsForce(): void { Functions\expect('wp_delete_attachment')->never(); $result = $this->ability(self::POSSIBLE, FakeChangeLog::forbidden())->execute(['id' => 33, 'confirm' => true]); self::assertSame('lit_in_use', $result->get_error_code()); } public function testForceDeletesUsedMedia(): void { Functions\expect('wp_delete_attachment')->once()->with(33, false)->andReturn(new WP_Post(['ID' => 33])); $log = new FakeChangeLog(50); $result = $this->ability(self::USAGE, $log)->execute(['id' => 33, 'confirm' => true, 'force' => true]); self::assertSame(['id' => '33', 'type' => 'attachment', 'action' => 'deleted', 'label' => 'Foto'], $result['changed'][0]); self::assertSame(50, $result['log_id']); self::assertSame(self::USAGE, $result['usages']); $log->assertRecorded([ 'ability' => 'lit/media-delete', 'object_type' => 'attachment', 'object_id' => '33', 'summary' => 'Medium "Foto" gelöscht', ]); } public function testUnusedMediaGoesToTheTrashWhenMediaTrashIsOn(): void { Functions\expect('wp_delete_attachment')->once()->with(33, false)->andReturn(new WP_Post(['ID' => 33])); $log = new FakeChangeLog(51); $result = $this->ability([], $log, true)->execute(['id' => 33, 'confirm' => true]); self::assertSame('trashed', $result['changed'][0]['action']); $log->assertRecorded([ 'ability' => 'lit/media-delete', 'object_type' => 'attachment', 'object_id' => '33', 'summary' => 'Medium "Foto" in den Papierkorb gelegt', ]); } public function testRefusedDeleteWithTheAttachmentIntactIsAWriteFailure(): void { Functions\when('get_post_meta')->justReturn('2026/09/foto.jpg'); Functions\expect('wp_delete_attachment')->once()->andReturn(false); $result = $this->ability([], FakeChangeLog::forbidden())->execute(['id' => 33, 'confirm' => true]); self::assertSame('lit_write_failed', $result->get_error_code()); } public function testRefusedDeleteThatRemovedDataIsAPartialWrite(): void { $meta = '2026/09/foto.jpg'; Functions\when('get_post_meta')->alias(static function () use (&$meta): string { return $meta; }); Functions\expect('wp_delete_attachment')->once()->andReturnUsing(static function () use (&$meta) { $meta = ''; return null; }); $log = FakeChangeLog::partialsOnly(); $result = $this->ability([], $log)->execute(['id' => 33, 'confirm' => true]); self::assertSame('lit_partial_write', $result->get_error_code()); self::assertSame(33, $result->get_error_data()['attachment_id']); $log->assertPartials(['ability' => 'lit/media-delete', 'object_type' => 'attachment', 'object_id' => '33']); } public function testADatabaseErrorInTheUsageCheckRefusesWithoutForce(): void { Functions\when('get_post_meta')->justReturn('2026/09/foto.jpg'); Functions\when('get_option')->justReturn(false); Functions\when('get_theme_mod')->justReturn(false); Functions\expect('wp_delete_attachment')->never(); /** @var \Mockery\MockInterface&\wpdb $db */ $db = Mockery::mock(\wpdb::class)->makePartial(); $db->allows('get_results')->andReturn(null); $ability = new MediaDeleteAbility( new MediaUsageFinder(static fn (): array => [], $db), FakeChangeLog::forbidden(), static fn (): bool => false ); $file = (string) tempnam(sys_get_temp_dir(), 'lit-mcp-log'); $previous = ini_set('error_log', $file); try { $result = $ability->execute(['id' => 33, 'confirm' => true]); } finally { ini_set('error_log', (string) $previous); unlink($file); } self::assertSame('lit_in_use', $result->get_error_code()); self::assertSame(MediaUsageFinder::FAILED_TITLE, $result->get_error_data()['usages'][0]['title']); } public function testChangeLogFailureIsOnlyAWarning(): void { Functions\expect('wp_delete_attachment')->once()->andReturn(new WP_Post(['ID' => 33])); $log = new FakeChangeLog(1, new RuntimeException('db down')); $file = (string) tempnam(sys_get_temp_dir(), 'lit-mcp-log'); $previous = ini_set('error_log', $file); try { $result = $this->ability([], $log)->execute(['id' => 33, 'confirm' => true]); } finally { ini_set('error_log', (string) $previous); unlink($file); } self::assertSame('deleted', $result['changed'][0]['action']); self::assertNull($result['log_id']); self::assertCount(1, $result['warnings']); $log->assertRecorded([]); } public function testTrashedAttachmentIsRefused(): void { Functions\when('get_post')->justReturn(new WP_Post(['ID' => 33, 'post_type' => 'attachment', 'post_status' => 'trash'])); Functions\expect('wp_delete_attachment')->never(); $ability = $this->ability([], FakeChangeLog::forbidden()); self::assertSame('lit_validation_failed', $ability->permission(['id' => 33])->get_error_code()); self::assertSame('lit_validation_failed', $ability->execute(['id' => 33, 'confirm' => true])->get_error_code()); } public function testChecksDeletePostOnTheAttachment(): void { Functions\when('current_user_can')->alias(static fn (string $cap, int $id): bool => ! ($cap === 'delete_post' && $id === 33)); $result = $this->ability([], FakeChangeLog::forbidden())->permission(['id' => 33]); self::assertSame('lit_forbidden', $result->get_error_code()); } public function testIsDestructiveAndDescribesWhatTheUsageCheckMisses(): void { $ability = $this->ability([], FakeChangeLog::forbidden()); self::assertSame(['readonly' => false, 'destructive' => true, 'idempotent' => false], $ability->annotations()); self::assertFalse($ability->isDirect()); foreach (['endgültig', 'Term-Meta', 'Benutzer-Meta', 'Pods', 'ACF', 'kommagetrennt', 'Optionen anderer Plugins'] as $needle) { self::assertStringContainsString($needle, $ability->description()); } } }