Code Coverage
 
Lines
Functions and Methods
Classes and Traits
Total
91.58% covered (success)
91.58%
642 / 701
65.52% covered (warning)
65.52%
19 / 29
CRAP
0.00% covered (danger)
0.00%
0 / 1
Initializer
91.58% covered (success)
91.58%
642 / 701
65.52% covered (warning)
65.52%
19 / 29
260.27
0.00% covered (danger)
0.00%
0 / 1
 init
100.00% covered (success)
100.00%
7 / 7
100.00% covered (success)
100.00%
1 / 1
4
 update_init_options
66.67% covered (warning)
66.67%
2 / 3
0.00% covered (danger)
0.00%
0 / 1
3.33
 should_initialize_admin_ui
100.00% covered (success)
100.00%
1 / 1
100.00% covered (success)
100.00%
1 / 1
2
 unconditional_initialization
91.30% covered (success)
91.30%
21 / 23
0.00% covered (danger)
0.00%
0 / 1
4.01
 should_include_utilities
66.67% covered (warning)
66.67%
2 / 3
0.00% covered (danger)
0.00%
0 / 1
3.33
 prepare_poster_url_for_inline_style
100.00% covered (success)
100.00%
6 / 6
100.00% covered (success)
100.00%
1 / 1
4
 active_initialization
96.00% covered (success)
96.00%
24 / 25
0.00% covered (danger)
0.00%
0 / 1
3
 register_oembed_providers
100.00% covered (success)
100.00%
4 / 4
100.00% covered (success)
100.00%
1 / 1
1
 video_enqueue_bridge_when_oembed_present
100.00% covered (success)
100.00%
3 / 3
100.00% covered (success)
100.00%
1 / 1
2
 register_videopress_blocks
0.00% covered (danger)
0.00%
0 / 5
0.00% covered (danger)
0.00%
0 / 1
2
 register_videopress_all_playlists_block
100.00% covered (success)
100.00%
1 / 1
100.00% covered (success)
100.00%
1 / 1
1
 render_videopress_video_block
92.74% covered (success)
92.74%
115 / 124
0.00% covered (danger)
0.00%
0 / 1
33.42
 register_videopress_video_block
0.00% covered (danger)
0.00%
0 / 29
0.00% covered (danger)
0.00%
0 / 1
90
 register_videopress_playlist_block
100.00% covered (success)
100.00%
20 / 20
100.00% covered (success)
100.00%
1 / 1
7
 register_videopress_latest_videos_playlist_block
95.00% covered (success)
95.00%
19 / 20
0.00% covered (danger)
0.00%
0 / 1
6
 latest_videos_playlist_query
100.00% covered (success)
100.00%
11 / 11
100.00% covered (success)
100.00%
1 / 1
7
 render_videopress_latest_videos_playlist_block
97.30% covered (success)
97.30%
36 / 37
0.00% covered (danger)
0.00%
0 / 1
15
 render_video_browser_controls
100.00% covered (success)
100.00%
63 / 63
100.00% covered (success)
100.00%
1 / 1
12
 render_video_browser_pagination
100.00% covered (success)
100.00%
19 / 19
100.00% covered (success)
100.00%
1 / 1
5
 sanitize_playlist_entries
100.00% covered (success)
100.00%
18 / 18
100.00% covered (success)
100.00%
1 / 1
14
 playlist_embed_url
100.00% covered (success)
100.00%
11 / 11
100.00% covered (success)
100.00%
1 / 1
4
 playlist_timecode
100.00% covered (success)
100.00%
9 / 9
100.00% covered (success)
100.00%
1 / 1
3
 playlist_runtime_label
100.00% covered (success)
100.00%
10 / 10
100.00% covered (success)
100.00%
1 / 1
5
 playlist_resolution_label
100.00% covered (success)
100.00%
3 / 3
100.00% covered (success)
100.00%
1 / 1
3
 render_videopress_playlist_block
100.00% covered (success)
100.00%
219 / 219
100.00% covered (success)
100.00%
1 / 1
66
 enqueue_videopress_iframe_api_script
0.00% covered (danger)
0.00%
0 / 9
0.00% covered (danger)
0.00%
0 / 1
12
 maybe_pre_oembed_inline_player
100.00% covered (success)
100.00%
2 / 2
100.00% covered (success)
100.00%
1 / 1
2
 maybe_render_oembed_inline_player
100.00% covered (success)
100.00%
4 / 4
100.00% covered (success)
100.00%
1 / 1
4
 render_inline_player_for_url
100.00% covered (success)
100.00%
12 / 12
100.00% covered (success)
100.00%
1 / 1
3
1<?php
2/**
3 * The initializer class for the videopress package
4 *
5 * @package automattic/jetpack-videopress
6 */
7
8namespace Automattic\Jetpack\VideoPress;
9
10/**
11 * Initialized the VideoPress package
12 */
13class Initializer {
14
15    /**
16     * Bounds of the Latest Videos Playlist block's "Number of videos" setting;
17     * the editor control uses the same range.
18     */
19    const LATEST_VIDEOS_PLAYLIST_MIN_COUNT     = 1;
20    const LATEST_VIDEOS_PLAYLIST_MAX_COUNT     = 20;
21    const LATEST_VIDEOS_PLAYLIST_DEFAULT_COUNT = 5;
22    const LATEST_VIDEOS_PLAYLIST_MAX_PAGED     = 48;
23
24    const JETPACK_VIDEOPRESS_IFRAME_API_HANDLER = 'jetpack-videopress-iframe-api';
25
26    /**
27     * Initialization optinos
28     *
29     * @var array
30     */
31    protected static $init_options = array();
32
33    /**
34     * Initializes the VideoPress package
35     *
36     * This method is called by Config::ensure.
37     *
38     * @return void
39     */
40    public static function init() {
41        if ( ! did_action( 'videopress_init' ) ) {
42
43            self::unconditional_initialization();
44
45            if ( Status::is_active() ) {
46                self::active_initialization();
47            } elseif ( self::should_initialize_admin_ui() ) {
48                // Keep "Jetpack > VideoPress" in the menu when the module is not
49                // active, linking to the My Jetpack interstitial to activate it.
50                Admin_UI::init_inactive_menu();
51            }
52        }
53
54        /**
55         * Fires after the VideoPress package is initialized
56         *
57         * @since 0.1.1
58         */
59        do_action( 'videopress_init' );
60    }
61
62    /**
63     * Update the initialization options
64     *
65     * This method is called by the Config class
66     *
67     * @param array $options The initialization options.
68     * @return void
69     */
70    public static function update_init_options( array $options ) {
71        if ( empty( $options['admin_ui'] ) || self::should_initialize_admin_ui() ) { // do not overwrite if already set to true.
72            return;
73        }
74
75        self::$init_options['admin_ui'] = $options['admin_ui'];
76    }
77
78    /**
79     * Checks the initialization options and returns whether the admin_ui should be initialized or not
80     *
81     * @return boolean
82     */
83    public static function should_initialize_admin_ui() {
84        return isset( self::$init_options['admin_ui'] ) && true === self::$init_options['admin_ui'];
85    }
86
87    /**
88     * Initialize VideoPress features that should be initialized whenever VideoPress is present, even if the module is not active
89     *
90     * @return void
91     */
92    private static function unconditional_initialization() {
93        if ( self::should_include_utilities() ) {
94            require_once __DIR__ . '/utility-functions.php';
95        }
96
97        // Set up package version hook.
98        add_filter( 'jetpack_package_versions', __NAMESPACE__ . '\Package_Version::send_package_version_to_tracker' );
99
100        /*
101         * Keep the videopress_guid attachment meta out of reach of the
102         * user-facing meta write APIs (Custom Fields, XML-RPC set_custom_fields,
103         * the WordPress.com JSON API metadata op, REST). The post <-> guid
104         * mapping is what the VideoPress meta and poster endpoints authorize
105         * against, so a writable guid would let a caller point an object they
106         * can edit at somebody else's video and still pass the edit_post check.
107         *
108         * These auth_* filters are consulted by map_meta_cap() for the
109         * add/edit/delete_post_meta capabilities only, so unlike marking the key
110         * protected they leave is_protected_meta() false and meta_key queries
111         * against the WordPress.com JSON API keep working. VideoPress writes the
112         * mapping itself with update_post_meta(), which does not consult
113         * capabilities, so uploads and transcoding are unaffected.
114         *
115         * The subtype-specific filter covers attachments; the generic one covers
116         * calls made before a subtype can be resolved.
117         */
118        add_filter( 'auth_post_meta_videopress_guid_for_attachment', '__return_false' );
119        add_filter( 'auth_post_meta_videopress_guid', '__return_false' );
120
121        Module_Control::init();
122
123        /*
124         * The WPCOM REST API v2 endpoints only register routes/fields on REST
125         * init, so defer constructing them (and autoloading their classes) until
126         * a REST request is actually served. Registered on both REST init hooks
127         * so the routes remain available in every context they were before, and
128         * guarded so the endpoints are instantiated only once per request.
129         */
130        $register_rest_api_v2_endpoints = static function () {
131            static $registered = false;
132            if ( $registered ) {
133                return;
134            }
135            $registered = true;
136            new WPCOM_REST_API_V2_Endpoint_VideoPress();
137            new WPCOM_REST_API_V2_Endpoint_VideoPress_Caption_Tracks();
138            new WPCOM_REST_API_V2_Attachment_VideoPress_Field();
139            new WPCOM_REST_API_V2_Attachment_VideoPress_Data();
140            new WPCOM_REST_API_V2_Endpoint_VideoPress_Edits();
141        };
142        add_action( 'rest_api_init', $register_rest_api_v2_endpoints, 0 );
143        add_action( 'restapi_theme_init', $register_rest_api_v2_endpoints, 0 );
144
145        if ( is_admin() ) {
146            AJAX::init();
147        } else {
148            require_once __DIR__ . '/class-block-replacement.php';
149            Block_Replacement::init();
150        }
151    }
152
153    /**
154     * This avoids conflicts when running VideoPress plugin with older versions of the Jetpack plugin
155     *
156     * On version 11.3-a.7 utility functions include were removed from the plugin and it is safe to include it from the package
157     *
158     * @return boolean
159     */
160    private static function should_include_utilities() {
161        if ( ! class_exists( 'Jetpack' ) || ! defined( 'JETPACK__VERSION' ) ) {
162            return true;
163        }
164
165        return version_compare( JETPACK__VERSION, '11.3-a.7', '>=' );
166    }
167
168    /**
169     * Prepare a poster URL for a quoted CSS url() inside an HTML attribute.
170     *
171     * @param mixed $poster Poster URL.
172     * @return string Sanitized and HTML-encoded poster URL, or an empty string.
173     */
174    private static function prepare_poster_url_for_inline_style( $poster ) {
175        if ( ! is_string( $poster ) || '' === $poster ) {
176            return '';
177        }
178
179        /*
180         * Decode one layer so ordinarily encoded URLs retain their semantics. Any
181         * remaining entities are encoded again below and stay inert after the HTML
182         * parser performs its single decoding pass.
183         */
184        $poster_url = esc_url_raw( html_entity_decode( $poster, ENT_QUOTES | ENT_HTML5, 'UTF-8' ) );
185        if ( '' === $poster_url ) {
186            return '';
187        }
188
189        /*
190         * Force existing character references to be encoded. esc_attr() preserves
191         * them, but this value crosses from an HTML attribute into a CSS string.
192         */
193        return htmlspecialchars( $poster_url, ENT_QUOTES | ENT_SUBSTITUTE | ENT_HTML5, 'UTF-8', true );
194    }
195
196    /**
197     * Initialize VideoPress features that should be initialized only when the module is active
198     *
199     * @return void
200     */
201    private static function active_initialization() {
202        Attachment_Handler::init();
203        Jwt_Token_Bridge::init();
204        Caption_Tracks::init();
205        Initial_State::init();
206        XMLRPC::init();
207        Block_Editor_Content::init();
208        Channel::init();
209        Playlist_Index::init();
210        Analytics_Dashboard::init();
211
212        /*
213         * These endpoints only add their routes on REST init, so defer calling
214         * init() (and autoloading the endpoint classes) until a REST request is
215         * served. Priority 0 ensures the routes still register before the
216         * default-priority rest_api_init handlers run. Class-name strings are
217         * used so the classes are not autoloaded on non-REST requests.
218         */
219        foreach (
220            array(
221                Uploader_Rest_Endpoints::class,
222                Rest_Controller::class,
223                VideoPress_Rest_Api_V1_Stats::class,
224                VideoPress_Rest_Api_V1_Site::class,
225                VideoPress_Rest_Api_V1_Settings::class,
226                VideoPress_Rest_Api_V1_Features::class,
227            ) as $rest_endpoint
228        ) {
229            add_action( 'rest_api_init', array( $rest_endpoint, 'init' ), 0 );
230        }
231        self::register_oembed_providers();
232
233        // In inline mode a VideoPress URL never needs the oEmbed round trip: skip
234        // the fetch, and swap iframes already cached in post meta for a placeholder.
235        add_filter( 'pre_oembed_result', array( __CLASS__, 'maybe_pre_oembed_inline_player' ), 10, 2 );
236        add_filter( 'embed_oembed_html', array( __CLASS__, 'maybe_render_oembed_inline_player' ), 5, 4 );
237
238        // Enqueuethe VideoPress Iframe API script in the front-end.
239        add_filter( 'embed_oembed_html', array( __CLASS__, 'enqueue_videopress_iframe_api_script' ), 10, 4 );
240
241        if ( self::should_initialize_admin_ui() ) {
242            Admin_UI::init();
243        }
244
245        Divi::init();
246    }
247
248    /**
249     * Explicitly register VideoPress oembed provider for patterns not supported by core
250     *
251     * @return void
252     */
253    public static function register_oembed_providers() {
254        $host = rawurlencode( home_url() );
255        // videopress.com/v is already registered in core.
256        // By explicitly declaring the provider here, we can speed things up by not relying on oEmbed discovery.
257        wp_oembed_add_provider( '#^https?://video.wordpress.com/v/.*#', 'https://public-api.wordpress.com/oembed/?for=' . $host, true );
258        // This is needed as it's not supported in oEmbed discovery.
259        wp_oembed_add_provider( '|^https?://v\.wordpress\.com/([a-zA-Z\d]{8})(.+)?$|i', 'https://public-api.wordpress.com/oembed/?for=' . $host, true ); // phpcs:ignore WordPress.WP.CapitalPDangit.MisspelledInText
260
261        add_filter( 'embed_oembed_html', array( __CLASS__, 'video_enqueue_bridge_when_oembed_present' ), 10, 4 );
262    }
263
264    /**
265     * Enqueues VideoPress token bridge when a VideoPress oembed is present on the current page.
266     *
267     * @param string|false $cache   The cached HTML result, stored in post meta.
268     * @param string       $url     The attempted embed URL.
269     * @param array        $attr    An array of shortcode attributes.
270     * @param int          $post_ID Post ID.
271     *
272     * @return string|false
273     */
274    public static function video_enqueue_bridge_when_oembed_present( $cache, $url, $attr, $post_ID = null ) { // phpcs:ignore VariableAnalysis.CodeAnalysis.VariableAnalysis.UnusedVariable
275        if ( Utils::is_videopress_url( $url ) ) {
276            Jwt_Token_Bridge::enqueue_jwt_token_bridge();
277        }
278
279        return $cache;
280    }
281
282    /**
283     * Register all VideoPress blocks
284     *
285     * @return void
286     */
287    public static function register_videopress_blocks() {
288        // Register VideoPress Video block.
289        self::register_videopress_video_block();
290
291        // Register Video Playlist block.
292        self::register_videopress_playlist_block();
293
294        // Register Latest Videos Playlist block.
295        self::register_videopress_latest_videos_playlist_block();
296
297        // Register All Playlists block.
298        self::register_videopress_all_playlists_block();
299
300        // Register the playlist block's `source` and, where the channel feature is enabled, the channel blocks.
301        Channel_Blocks::register();
302    }
303
304    /**
305     * Register the All Playlists block, which lists the site's Video Playlist
306     * blocks from the playlist index.
307     *
308     * @param string|null $metadata_file Path to the block.json metadata file. Defaults to the
309     *                                   package build output; tests can point it at a fixture.
310     *
311     * @return void
312     */
313    public static function register_videopress_all_playlists_block( $metadata_file = null ) {
314        All_Playlists_Block::register( $metadata_file );
315    }
316
317    /**
318     * VideoPress video block render method
319     *
320     * @global \WP_Embed $wp_embed WordPress embed handler.
321     *
322     * @param array     $block_attributes Block attributes.
323     * @param string    $content          Current block markup.
324     * @param \WP_Block $block            Current block.
325     *
326     * @return string Block markup.
327     */
328    public static function render_videopress_video_block( $block_attributes, $content, $block ) {
329        global $wp_embed;
330
331        // Pre-build and cache the GUID list for this post to optimize authorization checks,
332        // and record the GUID actually being rendered: by render time WordPress has expanded
333        // synced patterns, templates, and template parts, so this covers embedding contexts
334        // the static content scan cannot see.
335        $post_id = $block->context['postId'] ?? get_the_ID();
336        if ( ! empty( $post_id ) && isset( $block_attributes['guid'] ) && is_string( $block_attributes['guid'] ) ) {
337            Access_Control::ensure_post_guids_cached( absint( $post_id ), $block_attributes['guid'] );
338        } elseif ( ! empty( $post_id ) ) {
339            Access_Control::build_and_cache_post_guids( absint( $post_id ) );
340        }
341
342        // CSS classes.
343        $align        = $block_attributes['align'] ?? null;
344        $align_class  = $align ? ' align' . $align : '';
345        $custom_class = isset( $block_attributes['className'] ) ? ' ' . $block_attributes['className'] : '';
346        $classes      = 'wp-block-jetpack-videopress jetpack-videopress-player' . $custom_class . $align_class;
347
348        // Inline style.
349        $style     = '';
350        $max_width = isset( $block_attributes['maxWidth'] ) && is_string( $block_attributes['maxWidth'] )
351            ? trim( $block_attributes['maxWidth'] )
352            : '';
353
354        // maxWidth is rendered into an inline style. Accept only a plain CSS length
355        // or percentage so the value stays a single, well-formed declaration;
356        // anything else is dropped and the block renders at full width (as with the
357        // "100%" default).
358        if ( '' !== $max_width && '100%' !== $max_width
359            && preg_match( '/^\d+(\.\d+)?(px|%|em|rem|vw|vh|vmin|vmax|ch|ex|cm|mm|in|pt|pc|q)$/i', $max_width )
360        ) {
361            $style    = sprintf( 'max-width: %s;', $max_width );
362            $classes .= ' wp-block-jetpack-videopress--has-max-width';
363        }
364
365        /*
366         * <figcaption /> element
367         * Caption is stored into the block attributes,
368         * but also it was stored into the <figcaption /> element,
369         * meaning that it could be stored in two different places.
370         */
371        $figcaption = '';
372
373        // Caption from block attributes.
374        $caption = $block_attributes['caption'] ?? null;
375
376        /*
377         * If the caption is not stored into the block attributes,
378         * try to get it from the <figcaption /> element.
379         */
380        if ( null === $caption ) {
381            preg_match( '/<figcaption>(.*?)<\/figcaption>/', $content, $matches );
382            $caption = $matches[1] ?? null;
383        }
384
385        // If we have a caption, create the <figcaption /> element.
386        if ( null !== $caption ) {
387            $figcaption = sprintf( '<figcaption>%s</figcaption>', wp_kses_post( $caption ) );
388        }
389
390        // Custom anchor from block content.
391        $id_attribute = '';
392
393        // Try to get the custom anchor from the block attributes.
394        if ( isset( $block_attributes['anchor'] ) && $block_attributes['anchor'] ) {
395            $id_attribute = sprintf( 'id="%s"', esc_attr( $block_attributes['anchor'] ) );
396        } elseif ( preg_match( '/<figure[^>]*id="([^"]+)"/', $content, $matches ) ) {
397            // Otherwise, try to get the custom anchor from the <figure /> element.
398            $id_attribute = sprintf( 'id="%s"', esc_attr( $matches[1] ) );
399        }
400
401        // Preview On Hover data.
402        $is_poh_enabled =
403            isset( $block_attributes['posterData']['previewOnHover'] ) &&
404            $block_attributes['posterData']['previewOnHover'];
405
406        $autoplay = $block_attributes['autoplay'] ?? false;
407        $controls = $block_attributes['controls'] ?? false;
408        $poster   = $block_attributes['posterData']['url'] ?? null;
409
410        $preview_on_hover = '';
411
412        if ( $is_poh_enabled ) {
413            $preview_on_hover = array(
414                'previewAtTime'       => $block_attributes['posterData']['previewAtTime'],
415                'previewLoopDuration' => $block_attributes['posterData']['previewLoopDuration'],
416                'autoplay'            => $autoplay,
417                'showControls'        => $controls,
418            );
419
420            // Create inline style in case video has a custom poster.
421            $inline_style = '';
422            $poster_url   = self::prepare_poster_url_for_inline_style( $poster );
423            if ( $poster_url ) {
424                // Emit the poster URL as a double-quoted CSS string so it stays
425                // contained within url() and cannot affect the surrounding style.
426                $inline_style = sprintf(
427                    'style="background-image: url(&quot;%s&quot;); background-size: cover; background-position: center center;"',
428                    $poster_url
429                );
430            }
431
432            // Expose the preview on hover data to the client.
433            $preview_on_hover = sprintf(
434                '<div class="jetpack-videopress-player__overlay" %s></div><script type="application/json">%s</script>',
435                $inline_style,
436                wp_json_encode( $preview_on_hover, JSON_UNESCAPED_SLASHES | JSON_HEX_TAG | JSON_HEX_AMP )
437            );
438
439            // Set `autoplay` and `muted` attributes to the video element.
440            $block_attributes['autoplay'] = true;
441            $block_attributes['muted']    = true;
442        }
443
444        $figure_template = '
445        <figure class="%1$s" style="%2$s" %3$s>
446            %4$s
447            %5$s
448            %6$s
449        </figure>
450        ';
451
452        // VideoPress URL.
453        $guid           = $block_attributes['guid'] ?? null;
454        $videopress_url = Utils::get_video_press_url( $guid, $block_attributes );
455
456        $video_wrapper         = '';
457        $video_wrapper_classes = 'jetpack-videopress-player__wrapper';
458
459        // Preview on hover drives the player through the iframe API, so it keeps the iframe.
460        if ( $guid && ! $is_poh_enabled && Inline_Player::is_enabled() ) {
461            $video_wrapper = sprintf(
462                '<div class="%s">%s</div>',
463                $video_wrapper_classes,
464                Inline_Player::render(
465                    $guid,
466                    Inline_Player::get_player_options( $block_attributes ),
467                    $block_attributes['videoRatio'] ?? null,
468                    array(
469                        'poster' => Inline_Player::get_poster_url( $guid, $block_attributes ),
470                        'title'  => $block_attributes['title'] ?? '',
471                    )
472                )
473            );
474        } elseif ( $videopress_url ) {
475            $videopress_url = wp_kses_post( $videopress_url );
476
477            /*
478             * Provide a fallback iframe for when the oEmbed endpoint fails, e.g.
479             * when the VideoPress backend isn't ready for a freshly uploaded video.
480             * This prevents the published page from showing a bare link.
481             */
482            $fallback = function ( $output, $url ) use ( $videopress_url ) {
483                $decoded_url = html_entity_decode( $videopress_url, ENT_QUOTES | ENT_SUBSTITUTE | ENT_HTML401 );
484                if ( $decoded_url !== $url ) {
485                    return $output;
486                }
487
488                return sprintf(
489                    '<iframe title="%1$s" aria-label="%1$s" src="%2$s" width="640" height="360" allowfullscreen data-resize-to-parent="true" allow="clipboard-write; presentation"></iframe>',
490                    esc_attr__( 'VideoPress Video Player', 'jetpack-videopress-pkg' ),
491                    esc_url( preg_replace( '#/v/#', '/embed/', $url, 1 ) )
492                );
493            };
494
495            add_filter( 'embed_maybe_make_link', $fallback, 10, 2 );
496            $oembed_html = apply_filters( 'video_embed_html', $wp_embed->shortcode( array(), $videopress_url ) );
497            remove_filter( 'embed_maybe_make_link', $fallback );
498
499            $video_wrapper = sprintf(
500                '<div class="%s">%s %s</div>',
501                $video_wrapper_classes,
502                $preview_on_hover,
503                $oembed_html
504            );
505
506            /*
507             * Self-heal failed oEmbed cache for VideoPress URLs.
508             *
509             * When the VideoPress backend isn't ready for a freshly uploaded video,
510             * WordPress caches '{{unknown}}' in post meta with a TTL that is too long
511             * for this use case. Clear recent failures so the next page render retries
512             * oEmbed discovery, keeping the fallback iframe above temporary.
513             */
514            $post_id = $block->context['postId'] ?? get_the_ID();
515
516            if ( $post_id ) {
517                $key_suffix   = md5( $videopress_url . serialize( wp_embed_defaults( $videopress_url ) ) ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.serialize_serialize -- Matching WP_Embed cache key format.
518                $oembed_value = get_post_meta( $post_id, '_oembed_' . $key_suffix, true );
519                $oembed_time  = (int) get_post_meta( $post_id, '_oembed_time_' . $key_suffix, true );
520
521                /*
522                 * Only clear the '{{unknown}}' cache entry when it is recent, to avoid
523                 * disabling WordPress's oEmbed backoff for persistent provider failures.
524                 */
525                if (
526                    '{{unknown}}' === $oembed_value
527                    && ( ! $oembed_time || ( time() - $oembed_time ) < MINUTE_IN_SECONDS )
528                ) {
529                    delete_post_meta( $post_id, '_oembed_' . $key_suffix );
530                    delete_post_meta( $post_id, '_oembed_time_' . $key_suffix );
531                }
532            }
533        }
534
535        // Get premium content from block context.
536        $premium_block_plan_id    = isset( $block->context['premium-content/planId'] ) ? intval( $block->context['premium-content/planId'] ) : 0;
537        $is_premium_content_child = isset( $block->context['isPremiumContentChild'] ) ? (bool) $block->context['isPremiumContentChild'] : false;
538        $maybe_premium_script     = '';
539        if ( $is_premium_content_child && is_string( $guid ) ) {
540            Access_Control::instance()->set_guid_subscription( $guid, $premium_block_plan_id );
541            $escaped_guid         = wp_json_encode( $guid, JSON_UNESCAPED_SLASHES | JSON_HEX_TAG | JSON_HEX_AMP );
542            $script_content       = "if ( ! window.__guidsToPlanIds ) { window.__guidsToPlanIds = {}; }; window.__guidsToPlanIds[$escaped_guid] = $premium_block_plan_id;";
543            $maybe_premium_script = '<script>' . $script_content . '</script>';
544        }
545
546        // $id_attribute, $video_wrapper, $figcaption properly escaped earlier in the code.
547        return sprintf(
548            $figure_template,
549            esc_attr( $classes ),
550            esc_attr( $style ),
551            $id_attribute,
552            $video_wrapper,
553            $figcaption,
554            $maybe_premium_script
555        );
556    }
557
558    /**
559     * Register the VideoPress block editor block,
560     * AKA "VideoPress Block v6".
561     *
562     * @return void
563     */
564    public static function register_videopress_video_block() {
565        /*
566         * If only Jetpack is active, and if the VideoPress module is not active,
567         * we can register the block just to display a placeholder to turn on the module.
568         * That invitation is only useful for admins though.
569         */
570        if (
571            Status::is_jetpack_plugin_without_videopress_module_active()
572            && ! Status::is_standalone_plugin_active()
573            && ! current_user_can( 'jetpack_activate_modules' )
574        ) {
575            return;
576        }
577
578        $videopress_video_metadata_file        = __DIR__ . '/../build/block-editor/blocks/video/block.json';
579        $videopress_video_metadata_file_exists = file_exists( $videopress_video_metadata_file );
580        if ( ! $videopress_video_metadata_file_exists ) {
581            return;
582        }
583
584        $videopress_video_metadata = json_decode(
585            // phpcs:ignore WordPress.WP.AlternativeFunctions.file_get_contents_file_get_contents
586            file_get_contents( $videopress_video_metadata_file )
587        );
588
589        // Pick the block name straight from the block metadata .json file.
590        $videopress_video_block_name = $videopress_video_metadata->name;
591
592        // Is the block already registered?
593        $is_block_registered = \WP_Block_Type_Registry::get_instance()->is_registered( $videopress_video_block_name );
594
595        // Do not register if the block is already registered.
596        if ( $is_block_registered ) {
597            return;
598        }
599
600        $registration = register_block_type(
601            $videopress_video_metadata_file,
602            array(
603                'render_callback'       => array( __CLASS__, 'render_videopress_video_block' ),
604                'render_email_callback' => array( Video_Block_Email_Renderer::class, 'render' ),
605                'uses_context'          => array( 'premium-content/planId', 'isPremiumContentChild', 'selectedPlanId' ),
606            )
607        );
608
609        // Do not enqueue scripts if the block could not be registered.
610        if ( empty( $registration ) || empty( $registration->editor_script_handles ) ) {
611            return;
612        }
613
614        // Extensions use Connection_Initial_State::render_script with script handle as parameter.
615        if ( is_array( $registration->editor_script_handles ) ) {
616            $script_handle = $registration->editor_script_handles[0];
617        } else {
618            $script_handle = $registration->editor_script_handles;
619        }
620
621        // Register and enqueue scripts used by the VideoPress video block.
622        Block_Editor_Extensions::init( $script_handle );
623    }
624
625    /**
626     * Register the Video Playlist block.
627     *
628     * @param string|null $metadata_file Path to the block.json metadata file. Defaults to the
629     *                                   package build output; tests can point it at a fixture.
630     *
631     * @return void
632     */
633    public static function register_videopress_playlist_block( $metadata_file = null ) {
634        /*
635         * Unlike the video block, the playlist block has no "activate the module"
636         * placeholder, so it is only registered where VideoPress can play videos.
637         */
638        if (
639            Status::is_jetpack_plugin_without_videopress_module_active()
640            && ! Status::is_standalone_plugin_active()
641        ) {
642            return;
643        }
644
645        if ( null === $metadata_file ) {
646            $metadata_file = __DIR__ . '/../build/block-editor/blocks/playlist/block.json';
647        }
648
649        if ( ! file_exists( $metadata_file ) ) {
650            return;
651        }
652
653        $metadata = json_decode(
654            // phpcs:ignore WordPress.WP.AlternativeFunctions.file_get_contents_file_get_contents
655            file_get_contents( $metadata_file )
656        );
657
658        if ( empty( $metadata->name )
659            || \WP_Block_Type_Registry::get_instance()->is_registered( $metadata->name )
660        ) {
661            return;
662        }
663
664        register_block_type(
665            $metadata_file,
666            array(
667                'render_callback'       => array( __CLASS__, 'render_videopress_playlist_block' ),
668                'render_email_callback' => array( Playlist_Block_Email_Renderer::class, 'render' ),
669            )
670        );
671    }
672
673    /**
674     * Register the Latest Videos Playlist block.
675     *
676     * It reuses the Video Playlist block's registered view script and styles, so
677     * it is only registered once that block is. Its inner Video Playlist block is
678     * the editor canvas only: the front end renders the newest videos fresh.
679     *
680     * @param string|null $metadata_file Path to the block.json metadata file. Defaults to the
681     *                                   package build output; tests can point it at a fixture.
682     *
683     * @return void
684     */
685    public static function register_videopress_latest_videos_playlist_block( $metadata_file = null ) {
686        if ( ! \WP_Block_Type_Registry::get_instance()->is_registered( 'videopress/playlist' ) ) {
687            return;
688        }
689
690        if ( null === $metadata_file ) {
691            $metadata_file = __DIR__ . '/../build/block-editor/blocks/latest-videos-playlist/block.json';
692        }
693
694        if ( ! file_exists( $metadata_file ) ) {
695            return;
696        }
697
698        $metadata = json_decode(
699            // phpcs:ignore WordPress.WP.AlternativeFunctions.file_get_contents_file_get_contents
700            file_get_contents( $metadata_file )
701        );
702
703        if ( empty( $metadata->name )
704            || \WP_Block_Type_Registry::get_instance()->is_registered( $metadata->name )
705        ) {
706            return;
707        }
708
709        register_block_type(
710            $metadata_file,
711            array(
712                'render_callback'       => array( __CLASS__, 'render_videopress_latest_videos_playlist_block' ),
713                'render_email_callback' => array( Playlist_Block_Email_Renderer::class, 'render_latest_videos' ),
714                'skip_inner_blocks'     => true,
715            )
716        );
717    }
718
719    /**
720     * The sort order, page size and pagination a Latest Videos Playlist block asks for, clamped to what it allows.
721     *
722     * @since $$next-version$$
723     *
724     * @param array $block_attributes Block attributes.
725     *
726     * @return array{order: string, count: int, paginated: bool} Order is one of Channel_Data::BROWSE_SORTS.
727     */
728    public static function latest_videos_playlist_query( $block_attributes ) {
729        $order     = isset( $block_attributes['orderBy'] ) && in_array( $block_attributes['orderBy'], Channel_Data::BROWSE_SORTS, true ) ? $block_attributes['orderBy'] : 'newest';
730        $paginated = isset( $block_attributes['pagination'] ) && 'numbered' === $block_attributes['pagination'];
731        $max_count = $paginated ? self::LATEST_VIDEOS_PLAYLIST_MAX_PAGED : self::LATEST_VIDEOS_PLAYLIST_MAX_COUNT;
732        $count     = isset( $block_attributes['count'] ) && is_numeric( $block_attributes['count'] )
733            ? (int) $block_attributes['count']
734            : self::LATEST_VIDEOS_PLAYLIST_DEFAULT_COUNT;
735
736        return array(
737            'order'     => $order,
738            'count'     => max( self::LATEST_VIDEOS_PLAYLIST_MIN_COUNT, min( $max_count, $count ) ),
739            'paginated' => $paginated,
740        );
741    }
742
743    /**
744     * Latest Videos Playlist block render callback: the newest VideoPress videos
745     * on the site, rendered by the Video Playlist block's callback.
746     *
747     * @param array          $block_attributes Block attributes.
748     * @param string         $content          Current block markup, unused: the inner block is never rendered.
749     * @param \WP_Block|null $block            Current block.
750     *
751     * @return string Block markup, or an empty string when the site has no VideoPress videos.
752     */
753    public static function render_videopress_latest_videos_playlist_block( $block_attributes, $content = '', $block = null ) {
754        $query      = self::latest_videos_playlist_query( $block_attributes );
755        $order      = $query['order'];
756        $count      = $query['count'];
757        $paginated  = $query['paginated'];
758        $controls   = ! empty( $block_attributes['showBrowseControls'] );
759        $exclude    = ! empty( $block_attributes['excludeCurrent'] ) ? array_filter( array( Channel::queried_guid() ) ) : array();
760        $show_meta  = ! empty( $block_attributes['showMeta'] );
761        $is_browsed = 'newest' !== $order || $controls || $paginated || $exclude || $show_meta;
762
763        // Dynamic playlists have no title of their own, so no heading either.
764        unset( $block_attributes['playlistTitle'], $block_attributes['showPlaylistTitle'] );
765
766        if ( ! $is_browsed ) {
767            $block_attributes['videos'] = Data::get_latest_videopress_playlist_entries( $count );
768            if ( ! $block_attributes['videos'] ) {
769                return Channel_Blocks::render_empty_state( 'videos', $block_attributes );
770            }
771            return self::render_videopress_playlist_block( $block_attributes, '', $block );
772        }
773
774        // A site without videos gets the empty state, not filters with nothing to filter.
775        if ( ! Channel_Data::videos() ) {
776            return Channel_Blocks::render_empty_state( 'videos', $block_attributes );
777        }
778
779        $state   = Channel_Data::browse_request( $controls, $paginated, $order );
780        $results = Channel_Data::browse( $state, $count, $exclude, $show_meta );
781
782        $block_attributes['videos'] = $show_meta
783            ? $results['entries']
784            : array_map(
785                function ( $entry ) {
786                    return array_diff_key( $entry, array_flip( array( 'views', 'publishedAt' ) ) );
787                },
788                $results['entries']
789            );
790        $before                     = $controls ? self::render_video_browser_controls( $state, $results, $count ) : '';
791        $after                      = $paginated && $results['pages'] > 1 ? self::render_video_browser_pagination( $results['page'], $results['pages'] ) : '';
792        $markup                     = self::render_videopress_playlist_block( $block_attributes, '', $block, $before, $after );
793
794        if ( '' === $markup && $controls ) {
795            // Keep the controls when nothing matches, so the filters can be changed back.
796            $markup = sprintf(
797                '<figure %1$s>%2$s<p class="videopress-video-browser__empty">%3$s</p></figure>',
798                get_block_wrapper_attributes( array( 'class' => 'videopress-playlist is-layout-' . esc_attr( $block_attributes['layout'] ?? 'grid' ) . ' is-empty' ) ),
799                $before,
800                esc_html__( 'No videos match these filters.', 'jetpack-videopress-pkg' )
801            );
802        }
803
804        return $markup;
805    }
806
807    /**
808     * The Videos page controls: search, sort and length, submitted as a GET form.
809     *
810     * @param array $state    Browsing state from Channel_Data::browse_request().
811     * @param array $results  Page from Channel_Data::browse().
812     * @param int   $per_page Page size.
813     *
814     * @return string Markup.
815     */
816    private static function render_video_browser_controls( array $state, array $results, $per_page ) {
817        $own_args = array( Channel_Data::QUERY_ARG_SEARCH, Channel_Data::QUERY_ARG_SORT, Channel_Data::QUERY_ARG_LENGTH, Channel_Data::QUERY_ARG_PAGE );
818        $action   = strtok( remove_query_arg( $own_args ), '?' );
819
820        // A GET form drops the action's query string, so the page's other arguments ride along as fields.
821        $hidden = '';
822        // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Only echoed back as hidden fields.
823        foreach ( $_GET as $name => $value ) {
824            if ( is_string( $name ) && is_string( $value ) && ! in_array( $name, $own_args, true ) ) {
825                $hidden .= sprintf( '<input type="hidden" name="%1$s" value="%2$s" />', esc_attr( $name ), esc_attr( sanitize_text_field( wp_unslash( $value ) ) ) );
826            }
827        }
828
829        $sorts        = array(
830            'newest'  => __( 'Latest', 'jetpack-videopress-pkg' ),
831            'popular' => __( 'Popular', 'jetpack-videopress-pkg' ),
832            'oldest'  => __( 'Oldest', 'jetpack-videopress-pkg' ),
833        );
834        $sort_buttons = '';
835        foreach ( $sorts as $value => $label ) {
836            $is_current    = $value === $state['sort'];
837            $sort_buttons .= sprintf(
838                '<button type="submit" class="videopress-video-browser__sort%1$s" name="%2$s" value="%3$s" aria-pressed="%4$s">%5$s</button>',
839                $is_current ? ' is-current' : '',
840                esc_attr( Channel_Data::QUERY_ARG_SORT ),
841                esc_attr( 'newest' === $value ? 'latest' : $value ),
842                $is_current ? 'true' : 'false',
843                esc_html( $label )
844            );
845        }
846
847        $lengths = array(
848            'any'   => __( 'Any length', 'jetpack-videopress-pkg' ),
849            'short' => __( 'Under 20 min', 'jetpack-videopress-pkg' ),
850            'mid'   => __( '20 to 45 min', 'jetpack-videopress-pkg' ),
851            'long'  => __( 'Over 45 min', 'jetpack-videopress-pkg' ),
852        );
853        $options = '';
854        foreach ( $lengths as $value => $label ) {
855            $options .= sprintf( '<option value="%1$s"%2$s>%3$s</option>', esc_attr( $value ), selected( $value, $state['length'], false ), esc_html( $label ) );
856        }
857
858        if ( $results['total'] > 0 ) {
859            $summary = sprintf(
860                /* translators: 1: first video shown. 2: last video shown. 3: number of matching videos. */
861                _n( 'Showing %1$s–%2$s of %3$s video', 'Showing %1$s–%2$s of %3$s videos', $results['total'], 'jetpack-videopress-pkg' ),
862                number_format_i18n( $results['start'] + 1 ),
863                number_format_i18n( min( $results['start'] + $per_page, $results['total'] ) ),
864                number_format_i18n( $results['total'] )
865            );
866        } else {
867            $summary = __( '0 videos', 'jetpack-videopress-pkg' );
868        }
869
870        return sprintf(
871            '<form class="videopress-video-browser" method="get" action="%1$s" role="search">%2$s' .
872                '<input type="hidden" name="%3$s" value="%4$s" />' .
873                '<input type="search" class="videopress-video-browser__search" name="%5$s" value="%6$s" placeholder="%7$s" aria-label="%7$s" />' .
874                '<button type="submit" class="videopress-video-browser__submit">%8$s</button>' .
875                '<div class="videopress-video-browser__sorts" role="group" aria-label="%9$s">%10$s</div>' .
876                '<select class="videopress-video-browser__length" name="%11$s" aria-label="%12$s">%13$s</select>' .
877            '</form>' .
878            '<p class="videopress-video-browser__summary">%14$s</p>',
879            esc_url( $action ),
880            $hidden,
881            esc_attr( Channel_Data::QUERY_ARG_SORT ),
882            esc_attr( 'newest' === $state['sort'] ? 'latest' : $state['sort'] ),
883            esc_attr( Channel_Data::QUERY_ARG_SEARCH ),
884            esc_attr( $state['search'] ),
885            esc_attr__( 'Search this channel', 'jetpack-videopress-pkg' ),
886            esc_html__( 'Search', 'jetpack-videopress-pkg' ),
887            esc_attr__( 'Sort videos', 'jetpack-videopress-pkg' ),
888            $sort_buttons,
889            esc_attr( Channel_Data::QUERY_ARG_LENGTH ),
890            esc_attr__( 'Video length', 'jetpack-videopress-pkg' ),
891            $options,
892            esc_html( $summary )
893        );
894    }
895
896    /**
897     * The Videos page's numbered pagination.
898     *
899     * @param int $current Current page.
900     * @param int $pages   Number of pages.
901     *
902     * @return string Markup.
903     */
904    private static function render_video_browser_pagination( $current, $pages ) {
905        $url_for = function ( $page ) {
906            return 1 === $page ? remove_query_arg( Channel_Data::QUERY_ARG_PAGE ) : add_query_arg( Channel_Data::QUERY_ARG_PAGE, $page );
907        };
908        $step    = function ( $page, $enabled, $modifier, $label ) use ( $url_for ) {
909            return $enabled
910                ? sprintf( '<a class="videopress-video-browser__page videopress-video-browser__page--%1$s" href="%2$s">%3$s</a>', $modifier, esc_url( $url_for( $page ) ), esc_html( $label ) )
911                : sprintf( '<span class="videopress-video-browser__page videopress-video-browser__page--%1$s is-disabled" aria-disabled="true">%2$s</span>', $modifier, esc_html( $label ) );
912        };
913
914        $links = $step( $current - 1, $current > 1, 'prev', __( '← Previous', 'jetpack-videopress-pkg' ) );
915        for ( $page = 1; $page <= $pages; $page++ ) {
916            $links .= $page === $current
917                ? sprintf( '<span class="videopress-video-browser__page videopress-video-browser__page--number is-current" aria-current="page">%d</span>', $page )
918                : sprintf( '<a class="videopress-video-browser__page videopress-video-browser__page--number" href="%1$s">%2$d</a>', esc_url( $url_for( $page ) ), $page );
919        }
920        $links .= $step( $current + 1, $current < $pages, 'next', __( 'Next →', 'jetpack-videopress-pkg' ) );
921
922        return sprintf(
923            '<nav class="videopress-video-browser__pagination" aria-label="%1$s">%2$s</nav>',
924            esc_attr__( 'Videos pagination', 'jetpack-videopress-pkg' ),
925            $links
926        );
927    }
928
929    /**
930     * Sanitize the playlist block's videos attribute into rendering-ready entries.
931     *
932     * @param mixed $videos Raw attribute value.
933     *
934     * @return array Entries with guid, title, durationMs, height and poster keys.
935     */
936    public static function sanitize_playlist_entries( $videos ) {
937        if ( ! is_array( $videos ) ) {
938            return array();
939        }
940
941        $entries = array();
942        foreach ( $videos as $video ) {
943            if ( ! is_array( $video ) || empty( $video['guid'] ) || ! is_string( $video['guid'] ) ) {
944                continue;
945            }
946
947            // VideoPress GUIDs are 8 alphanumeric characters; drop anything else.
948            if ( ! preg_match( '/^[a-zA-Z0-9]{8}$/', $video['guid'] ) ) {
949                continue;
950            }
951
952            /*
953             * Only the video reference and numeric metadata are stored. Display
954             * metadata (title, poster) is always live: the view script reads it
955             * from the video data after the page loads.
956             */
957            $entry = array(
958                'guid'       => $video['guid'],
959                'durationMs' => isset( $video['durationMs'] ) && is_numeric( $video['durationMs'] ) ? max( 0, (int) $video['durationMs'] ) : 0,
960                'height'     => isset( $video['height'] ) && is_numeric( $video['height'] ) ? max( 0, (int) $video['height'] ) : 0,
961            );
962            // Render-time extras for the meta line; never saved with the block.
963            foreach ( array( 'views', 'publishedAt' ) as $extra ) {
964                if ( isset( $video[ $extra ] ) && is_numeric( $video[ $extra ] ) ) {
965                    $entry[ $extra ] = max( 0, (int) $video[ $extra ] );
966                }
967            }
968            $entries[] = $entry;
969        }
970
971        return $entries;
972    }
973
974    /**
975     * Build the VideoPress embed URL for a playlist entry.
976     *
977     * @param string $guid     Video GUID.
978     * @param bool   $autoplay Whether the video should start playing once loaded.
979     * @param bool   $muted    Whether playback should start muted.
980     *
981     * @return string Embed URL.
982     */
983    private static function playlist_embed_url( $guid, $autoplay, $muted = false ) {
984        $args = array(
985            'cover'          => 1,
986            'preloadContent' => Data::get_videopress_player_preload_disabled() ? 'none' : 'metadata',
987            'autoPlay'       => $autoplay ? 1 : 0,
988        );
989        if ( $muted ) {
990            $args['muted'] = 1;
991        }
992
993        return add_query_arg(
994            $args,
995            'https://videopress.com/embed/' . rawurlencode( $guid )
996        );
997    }
998
999    /**
1000     * Format a duration in milliseconds as a timecode, m:ss or h:mm:ss.
1001     *
1002     * @param int $duration_ms Duration in milliseconds.
1003     *
1004     * @return string Timecode, or an empty string when the duration is unknown.
1005     */
1006    private static function playlist_timecode( $duration_ms ) {
1007        if ( $duration_ms <= 0 ) {
1008            return '';
1009        }
1010
1011        $total_seconds = (int) round( $duration_ms / 1000 );
1012        $hours         = intdiv( $total_seconds, 3600 );
1013        $minutes       = intdiv( $total_seconds % 3600, 60 );
1014        $seconds       = $total_seconds % 60;
1015
1016        if ( $hours > 0 ) {
1017            return sprintf( '%d:%02d:%02d', $hours, $minutes, $seconds );
1018        }
1019
1020        return sprintf( '%d:%02d', $minutes, $seconds );
1021    }
1022
1023    /**
1024     * Format a duration in milliseconds as a long runtime, e.g. "1 hr 13 min".
1025     *
1026     * @param int $duration_ms Duration in milliseconds.
1027     *
1028     * @return string Runtime label, or an empty string when the duration is unknown.
1029     */
1030    public static function playlist_runtime_label( $duration_ms ) {
1031        if ( $duration_ms <= 0 ) {
1032            return '';
1033        }
1034
1035        $total_minutes = max( 1, (int) round( $duration_ms / 60000 ) );
1036        $hours         = intdiv( $total_minutes, 60 );
1037        $minutes       = $total_minutes % 60;
1038
1039        if ( $hours > 0 && $minutes > 0 ) {
1040            /* translators: 1: number of hours. 2: number of minutes. */
1041            return sprintf( __( '%1$d hr %2$d min', 'jetpack-videopress-pkg' ), $hours, $minutes );
1042        }
1043
1044        if ( $hours > 0 ) {
1045            /* translators: %d: number of hours. */
1046            return sprintf( __( '%d hr', 'jetpack-videopress-pkg' ), $hours );
1047        }
1048
1049        /* translators: %d: number of minutes. */
1050        return sprintf( __( '%d min', 'jetpack-videopress-pkg' ), $minutes );
1051    }
1052
1053    /**
1054     * Map a video's pixel height to a resolution label, e.g. "1080p" or "4K".
1055     *
1056     * @param int $height Video height in pixels.
1057     *
1058     * @return string Resolution label, or an empty string when the height is unknown.
1059     */
1060    private static function playlist_resolution_label( $height ) {
1061        if ( $height <= 0 ) {
1062            return '';
1063        }
1064
1065        return $height >= 2160 ? '4K' : $height . 'p';
1066    }
1067
1068    /**
1069     * Video Playlist block render callback.
1070     *
1071     * @param array          $block_attributes Block attributes.
1072     * @param string         $content          Rendered inner blocks: the title heading, when there is one.
1073     * @param \WP_Block|null $block            Current block.
1074     * @param string         $before           Markup placed above the playlist body, e.g. browse controls.
1075     * @param string         $after            Markup placed below the playlist body, e.g. pagination.
1076     *
1077     * @return string Block markup, or an empty string when the playlist has no playable entries.
1078     */
1079    public static function render_videopress_playlist_block( $block_attributes, $content = '', $block = null, $before = '', $after = '' ) {
1080        $entries = self::sanitize_playlist_entries( $block_attributes['videos'] ?? null );
1081
1082        if ( ! $entries ) {
1083            // A playlist picked from the index shows the empty state while the site has none.
1084            return isset( $block_attributes['source'] ) && 'index' === $block_attributes['source'] && ! Channel::playlists()
1085                ? Channel_Blocks::render_empty_state( 'playlists', $block_attributes )
1086                : '';
1087        }
1088
1089        // Record the rendered GUIDs in the post's cached GUID list so private playlist
1090        // entries pass the playback authorization check, including when the playlist
1091        // sits inside a synced pattern, template, or template part.
1092        $post_id = $block->context['postId'] ?? get_the_ID();
1093        if ( ! empty( $post_id ) ) {
1094            Access_Control::ensure_post_guids_cached( absint( $post_id ), array_column( $entries, 'guid' ) );
1095        }
1096
1097        $enabled = function ( $key, $default_value = true ) use ( $block_attributes ) {
1098            return isset( $block_attributes[ $key ] ) ? (bool) $block_attributes[ $key ] : $default_value;
1099        };
1100
1101        $layout = isset( $block_attributes['layout'] ) && in_array( $block_attributes['layout'], array( 'side-rail', 'grid', 'strip' ), true )
1102            ? $block_attributes['layout']
1103            : 'side-rail';
1104
1105        $show_player = $enabled( 'showPlayer' );
1106        // A hidden player can still be revealed by the first click on an entry.
1107        $reveal_player  = ! $show_player
1108            && isset( $block_attributes['entryClickAction'] )
1109            && 'show-player' === $block_attributes['entryClickAction'];
1110        $has_player     = $show_player || $reveal_player;
1111        $show_thumbnail = $enabled( 'showThumbnail' );
1112        $show_title     = $enabled( 'showTitle' );
1113        $show_res       = $enabled( 'showResolution' );
1114        $show_duration  = $enabled( 'showDuration' );
1115        $show_number    = $enabled( 'showPositionNumber', false );
1116        $show_runtime   = $enabled( 'showTotalRuntime' );
1117        $muted          = $enabled( 'muteByDefault', false );
1118        $list_key       = isset( $block_attributes['videopressListKey'] ) && is_string( $block_attributes['videopressListKey'] ) ? sanitize_key( $block_attributes['videopressListKey'] ) : '';
1119        $current_guid   = Channel::is_enabled() ? Channel::queried_guid() : '';
1120
1121        $classes = array( 'videopress-playlist', 'is-layout-' . $layout );
1122        if ( $enabled( 'darkPlayer', false ) ) {
1123            $classes[] = 'is-dark';
1124        }
1125        if ( ! $show_player ) {
1126            $classes[] = 'hide-player';
1127        }
1128        if ( ! $show_thumbnail ) {
1129            $classes[] = 'hide-thumbnails';
1130        }
1131        if ( ! $show_title ) {
1132            $classes[] = 'hide-titles';
1133        }
1134        if ( ! $show_res ) {
1135            $classes[] = 'hide-resolutions';
1136        }
1137        if ( ! $show_duration ) {
1138            $classes[] = 'hide-durations';
1139        }
1140        if ( ! $show_runtime ) {
1141            $classes[] = 'hide-runtime';
1142        }
1143
1144        // Lets the embed play private videos for authorized viewers.
1145        Jwt_Token_Bridge::enqueue_jwt_token_bridge();
1146
1147        $count    = count( $entries );
1148        $total_ms = 0;
1149        foreach ( $entries as $entry ) {
1150            $total_ms += $entry['durationMs'];
1151        }
1152
1153        $total_timecode = self::playlist_timecode( $total_ms );
1154        /* translators: %d: number of videos in the playlist. */
1155        $count_label = sprintf( _n( '%d video', '%d videos', $count, 'jetpack-videopress-pkg' ), $count );
1156
1157        /*
1158         * Hidden placeholder shown (via the button's is-locked class) when the view
1159         * script cannot authorize a private video's thumbnail for the viewer.
1160         */
1161        $lock_markup = '<span class="videopress-playlist__entry-lock">'
1162            . '<svg viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false"><path d="M17 10h-1.2V7.3c0-2.1-1.7-3.8-3.8-3.8-2.1 0-3.8 1.7-3.8 3.8V10H7c-.6 0-1 .4-1 1v8c0 .6.4 1 1 1h10c.6 0 1-.4 1-1v-8c0-.6-.4-1-1-1Zm-2.7 0H9.7V7.3c0-1.3 1-2.3 2.3-2.3 1.3 0 2.3 1 2.3 2.3V10Z"/></svg>'
1163            . '<span class="videopress-playlist__entry-lock-label">' . esc_html__( 'Private video', 'jetpack-videopress-pkg' ) . '</span>'
1164            . '</span>';
1165
1166        $items = '';
1167        foreach ( $entries as $index => $entry ) {
1168            /*
1169             * Positional fallback only: the view script replaces titles (and
1170             * adds posters) with live video data once the page loads.
1171             */
1172            /* translators: %d: position of the video in the playlist. */
1173            $title = sprintf( __( 'Video %d', 'jetpack-videopress-pkg' ), $index + 1 );
1174
1175            $timecode   = self::playlist_timecode( $entry['durationMs'] );
1176            $resolution = self::playlist_resolution_label( $entry['height'] );
1177            /* translators: 1: position of the video in the playlist. 2: number of videos in the playlist. */
1178            $position = sprintf( __( '%1$d of %2$d', 'jetpack-videopress-pkg' ), $index + 1, $count );
1179            $details  = implode( ' · ', array_filter( array( $resolution, $timecode ) ) );
1180            $progress = '' !== $total_timecode
1181                /* translators: 1: position of the video in the playlist. 2: number of videos. 3: total playlist timecode. */
1182                ? sprintf( __( '%1$d / %2$d · %3$s total', 'jetpack-videopress-pkg' ), $index + 1, $count, $total_timecode )
1183                /* translators: 1: position of the video in the playlist. 2: number of videos. */
1184                : sprintf( __( '%1$d / %2$d', 'jetpack-videopress-pkg' ), $index + 1, $count );
1185
1186            $number_markup = $show_number
1187                ? sprintf(
1188                    '<span class="videopress-playlist__entry-number">%s</span>',
1189                    esc_html( str_pad( (string) ( $index + 1 ), 2, '0', STR_PAD_LEFT ) )
1190                )
1191                : '';
1192
1193            $time_markup = '' !== $timecode
1194                ? sprintf( '<span class="videopress-playlist__entry-time">%s</span>', esc_html( $timecode ) )
1195                : '';
1196
1197            $resolution_markup = '' !== $resolution
1198                ? sprintf( '<span class="videopress-playlist__entry-resolution">%s</span>', esc_html( $resolution ) )
1199                : '';
1200
1201            $duration_markup = '' !== $timecode
1202                ? sprintf( '<span class="videopress-playlist__entry-duration">%s</span>', esc_html( $timecode ) )
1203                : '';
1204
1205            $stats_label  = Channel_Data::views_and_age( array_intersect_key( $entry, array_flip( array( 'views', 'publishedAt' ) ) ) );
1206            $stats_markup = '' !== $stats_label
1207                ? sprintf( '<span class="videopress-playlist__entry-stats">%s</span>', esc_html( $stats_label ) )
1208                : '';
1209
1210            if ( $has_player ) {
1211                $is_current  = $show_player && 0 === $index;
1212                $entry_open  = sprintf(
1213                    '<button type="button" class="videopress-playlist__select%1$s"%2$s data-guid="%3$s" data-embed-url="%4$s" data-title="%5$s" data-position="%6$s" data-details="%7$s" data-progress="%8$s">',
1214                    $is_current ? ' is-current' : '',
1215                    $is_current ? ' aria-current="true"' : '',
1216                    esc_attr( $entry['guid'] ),
1217                    esc_url( self::playlist_embed_url( $entry['guid'], true, $muted ) ),
1218                    esc_attr( $title ),
1219                    esc_attr( $position ),
1220                    esc_attr( $details ),
1221                    esc_attr( $progress )
1222                );
1223                $entry_close = '</button>';
1224            } else {
1225                // No player to load the video into: the entry opens the video's page instead.
1226                /**
1227                 * Filters where a playlist entry opens when the block has no player.
1228                 *
1229                 * @since 0.55.0
1230                 *
1231                 * @param string $url  The video's page on videopress.com.
1232                 * @param string $guid The video GUID.
1233                 */
1234                $entry_url = apply_filters( 'videopress_playlist_entry_url', 'https://videopress.com/v/' . $entry['guid'], $entry['guid'] );
1235                $on_site   = Channel::is_site_url( $entry_url );
1236                if ( $on_site && '' !== $list_key ) {
1237                    $entry_url = add_query_arg( Channel::LIST_VAR, $list_key, $entry_url );
1238                }
1239                $is_current = '' !== $current_guid && $entry['guid'] === $current_guid;
1240                $entry_open = sprintf(
1241                    '<a class="videopress-playlist__select%1$s" href="%2$s"%3$s%4$s data-guid="%5$s" data-title="%6$s" data-position="%7$s" data-details="%8$s">',
1242                    $is_current ? ' is-current' : '',
1243                    esc_url( $entry_url ),
1244                    // Channel pages stay in the tab; videopress.com opens a new one.
1245                    $on_site ? '' : ' target="_blank" rel="noopener noreferrer"',
1246                    $is_current ? ' aria-current="true"' : '',
1247                    esc_attr( $entry['guid'] ),
1248                    esc_attr( $title ),
1249                    esc_attr( $position ),
1250                    esc_attr( $details )
1251                );
1252                $entry_close = '</a>';
1253            }
1254
1255            $items .= sprintf(
1256                '<li class="videopress-playlist__entry%10$s">%1$s' .
1257                    '%2$s<span class="videopress-playlist__entry-thumb"><span class="videopress-playlist__entry-flag">%3$s</span>%4$s%5$s</span>' .
1258                    '<span class="videopress-playlist__entry-body"><span class="videopress-playlist__entry-title">%6$s</span><span class="videopress-playlist__entry-meta">%7$s%8$s</span>%11$s</span>' .
1259                    '%9$s</li>',
1260                $entry_open,
1261                $number_markup,
1262                esc_html__( 'Playing', 'jetpack-videopress-pkg' ),
1263                $lock_markup,
1264                $time_markup,
1265                esc_html( $title ),
1266                $resolution_markup,
1267                $duration_markup,
1268                $entry_close,
1269                ! $has_player && '' !== $current_guid && $entry['guid'] === $current_guid ? ' is-current' : '',
1270                $stats_markup
1271            );
1272        }
1273
1274        $first          = $entries[0];
1275        $first_title    = __( 'Video 1', 'jetpack-videopress-pkg' );
1276        $runtime_label  = self::playlist_runtime_label( $total_ms );
1277        $runtime_markup = $show_runtime && '' !== $runtime_label
1278            ? sprintf( '<span class="videopress-playlist__runtime">%s</span>', esc_html( $runtime_label ) )
1279            : '';
1280
1281        // Count · runtime meta line, shown by the side-rail layout in the list header.
1282        $list_meta_markup = sprintf(
1283            '<span class="videopress-playlist__list-meta"><span class="videopress-playlist__count">%s</span>%s</span>',
1284            esc_html( $count_label ),
1285            $runtime_markup
1286        );
1287
1288        /*
1289         * The player renders its own title overlay, so the stage carries no
1290         * duplicate now-playing text — only the grid layout's runtime line.
1291         */
1292        $now_markup = $show_runtime && '' !== $runtime_label
1293            ? sprintf(
1294                '<div class="videopress-playlist__now"><span class="videopress-playlist__now-runtime">%s</span></div>',
1295                esc_html( $count_label . ' · ' . $runtime_label )
1296            )
1297            : '';
1298
1299        if ( $show_player ) {
1300            $stage_markup = sprintf(
1301                '<div class="videopress-playlist__stage">' .
1302                    '<div class="videopress-playlist__player"><iframe class="videopress-playlist__iframe" title="%1$s" src="%2$s" allowfullscreen allow="clipboard-write"></iframe></div>%3$s</div>',
1303                esc_attr( $first_title ),
1304                esc_url( self::playlist_embed_url( $first['guid'], false, $muted ) ),
1305                $now_markup
1306            );
1307        } elseif ( $reveal_player ) {
1308            // No src: nothing loads until the view script reveals the stage on a click.
1309            $stage_markup = sprintf(
1310                '<div class="videopress-playlist__stage" hidden>' .
1311                    '<div class="videopress-playlist__player"><iframe class="videopress-playlist__iframe" title="%1$s" allowfullscreen allow="clipboard-write"></iframe></div></div>%2$s',
1312                esc_attr( $first_title ),
1313                $now_markup
1314            );
1315        } else {
1316            // Without a player only the grid layout's runtime line remains of the stage.
1317            $stage_markup = $now_markup;
1318        }
1319
1320        $progress_markup = $has_player && '' !== $total_timecode
1321            ? sprintf(
1322                '<span class="videopress-playlist__list-progress">%s</span>',
1323                /* translators: 1: position of the current video. 2: number of videos. 3: total playlist timecode. */
1324                esc_html( sprintf( __( '%1$d / %2$d · %3$s total', 'jetpack-videopress-pkg' ), 1, $count, $total_timecode ) )
1325            )
1326            : '';
1327
1328        $list_markup = sprintf(
1329            '<div class="videopress-playlist__list">' .
1330                '<div class="videopress-playlist__list-header">' .
1331                '<span class="videopress-playlist__list-label videopress-playlist__list-label--rail">%1$s</span>' .
1332                '<span class="videopress-playlist__list-label videopress-playlist__list-label--strip">%2$s</span>%3$s%4$s</div>' .
1333                '<ol class="videopress-playlist__entries">%5$s</ol></div>',
1334            $show_player
1335                ? esc_html__( 'Up next', 'jetpack-videopress-pkg' )
1336                : esc_html__( 'Playlist', 'jetpack-videopress-pkg' ),
1337            /* translators: %s: number of videos in the playlist, e.g. "5 videos". */
1338            esc_html( sprintf( __( 'Playlist — %s', 'jetpack-videopress-pkg' ), $count_label ) ),
1339            $list_meta_markup,
1340            $progress_markup,
1341            $items
1342        );
1343
1344        /*
1345         * User-selected theme font presets (theme.json slugs) for the
1346         * customizable titles, exposed as CSS custom properties the
1347         * stylesheet reads. Anything but a plain preset slug is dropped.
1348         */
1349        $font_style = '';
1350        foreach ( array(
1351            'entryTitleFontFamily' => '--vpp-entry-title-font',
1352        ) as $font_attribute => $css_variable ) {
1353            if ( ! empty( $block_attributes[ $font_attribute ] )
1354                && is_string( $block_attributes[ $font_attribute ] )
1355                && preg_match( '/^[a-zA-Z0-9-]+$/', $block_attributes[ $font_attribute ] )
1356            ) {
1357                $font_style .= $css_variable . ':var(--wp--preset--font-family--' . $block_attributes[ $font_attribute ] . ');';
1358            }
1359        }
1360
1361        // Looping implies auto-advancing, so it forces the autoplay-next flag on.
1362        $loop_playlist = $enabled( 'loopPlaylist', false );
1363
1364        $wrapper_extra_attributes = array(
1365            'class'              => implode( ' ', $classes ),
1366            'data-autoplay-next' => $enabled( 'autoplayNext', false ) || $loop_playlist ? '1' : '0',
1367            'data-loop'          => $loop_playlist ? '1' : '0',
1368        );
1369        if ( '' !== $font_style ) {
1370            $wrapper_extra_attributes['style'] = $font_style;
1371        }
1372
1373        $wrapper_attributes = get_block_wrapper_attributes( $wrapper_extra_attributes );
1374
1375        // The Heading inner block saved with the post; an empty title renders none.
1376        $playlist_title = isset( $block_attributes['playlistTitle'] ) && is_string( $block_attributes['playlistTitle'] )
1377            ? trim( $block_attributes['playlistTitle'] )
1378            : '';
1379        $content        = is_string( $content ) ? trim( $content ) : '';
1380        $heading_markup = $enabled( 'showPlaylistTitle' ) && '' !== $playlist_title && '' !== $content
1381            ? '<div class="videopress-playlist__heading">' . $content . '</div>'
1382            : '';
1383
1384        return sprintf(
1385            '<figure %1$s>%2$s%5$s<div class="videopress-playlist__body">%3$s%4$s</div>%6$s</figure>',
1386            $wrapper_attributes,
1387            $heading_markup,
1388            $stage_markup,
1389            $list_markup,
1390            $before,
1391            $after
1392        );
1393    }
1394
1395    /**
1396     * Enqueue the VideoPress Iframe API script
1397     * when the URL of oEmbed HTML is a VideoPress URL.
1398     *
1399     * @param string|false $cache   The cached HTML result, stored in post meta.
1400     * @param string       $url     The attempted embed URL.
1401     * @param array        $attr    An array of shortcode attributes.
1402     * @param int          $post_ID Post ID.
1403     *
1404     * @return string|false
1405     */
1406    public static function enqueue_videopress_iframe_api_script( $cache, $url, $attr, $post_ID ) { // phpcs:ignore VariableAnalysis.CodeAnalysis.VariableAnalysis.UnusedVariable
1407        if ( Utils::is_videopress_url( $url ) && ! Inline_Player::is_enabled() ) {
1408            // Enqueue the VideoPress IFrame API in the front-end.
1409            wp_enqueue_script(
1410                self::JETPACK_VIDEOPRESS_IFRAME_API_HANDLER,
1411                'https://s0.wp.com/wp-content/plugins/video/assets/js/videojs/videopress-iframe-api.js',
1412                array(),
1413                gmdate( 'YW' ),
1414                false
1415            );
1416        }
1417
1418        return $cache;
1419    }
1420
1421    /**
1422     * Short-circuit the oEmbed request for VideoPress URLs when the inline player is on.
1423     *
1424     * @param null|string $result The oEmbed result, null to let WordPress fetch it.
1425     * @param string      $url    The URL being embedded.
1426     * @return null|string Inline player markup, or the untouched result.
1427     */
1428    public static function maybe_pre_oembed_inline_player( $result, $url ) {
1429        $inline = self::render_inline_player_for_url( $url );
1430
1431        return null === $inline ? $result : $inline;
1432    }
1433
1434    /**
1435     * Replace a VideoPress oEmbed iframe (fresh or cached) with an inline player when the inline player is on.
1436     *
1437     * @param string|false $cache   The oEmbed HTML.
1438     * @param string       $url     The URL being embedded.
1439     * @param array        $attr    Shortcode attributes.
1440     * @param int          $post_ID Post ID.
1441     * @return string|false Inline player markup, or the untouched HTML.
1442     */
1443    public static function maybe_render_oembed_inline_player( $cache, $url, $attr, $post_ID = null ) { // phpcs:ignore VariableAnalysis.CodeAnalysis.VariableAnalysis.UnusedVariable
1444        if ( ! is_string( $cache ) || false === strpos( $cache, '<iframe' ) ) {
1445            return $cache;
1446        }
1447
1448        $inline = self::render_inline_player_for_url( $url );
1449
1450        return null === $inline ? $cache : $inline;
1451    }
1452
1453    /**
1454     * Build inline player markup for a videopress.com URL, honoring the player parameters in its query string.
1455     *
1456     * @param string $url The URL being embedded.
1457     * @return string|null Markup, or null when the URL is not a VideoPress video or the inline player is off.
1458     */
1459    private static function render_inline_player_for_url( $url ) {
1460        if ( ! Inline_Player::is_enabled() ) {
1461            return null;
1462        }
1463
1464        $guid = Utils::extract_videopress_guid_from_url( $url );
1465        if ( null === $guid ) {
1466            return null;
1467        }
1468
1469        $attributes = Inline_Player::get_attributes_from_embed_url( $url );
1470
1471        return Inline_Player::render(
1472            $guid,
1473            Inline_Player::get_player_options( $attributes ),
1474            null,
1475            array( 'poster' => Inline_Player::get_poster_url( $guid, $attributes ) )
1476        );
1477    }
1478}