<?php
/**
 * Reports: filterable, paginated content-score report + CSV export, plus the
 * module reports (content gaps, rank tracking, local SEO, backlinks, competitor,
 * internal links, decay, heatmaps, popups) — each its own bento card (Stage
 * 7.6) rather than one continuous canvas of tables.
 *
 * The content-score report renders server-side from the same ABDS_SEO_Reports
 * query the REST endpoint and the CSV export use, via classic GET filters (not
 * JS fetch) — reloading this page with different query args is the filter UI;
 * "Експорт CSV" is a plain link to admin-post.php with those same args plus a
 * nonce.
 *
 * @package ABDS_SEO
 */

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/**
 * Wrapped in an immediately-invoked closure so every variable below is a
 * genuine function-local, not a top-level "global" one — see
 * dashboard-page.php's identical docblock for why.
 */
( function () {
	// phpcs:disable WordPress.Security.NonceVerification.Recommended -- read-only filter/pagination GET params for an admin-only report screen; nothing here writes data, and every value is re-validated/clamped by ABDS_SEO_Reports::normalize_args() regardless of what's in the query string.
	$filters = array(
		'date_from' => isset( $_GET['date_from'] ) ? sanitize_text_field( wp_unslash( $_GET['date_from'] ) ) : '',
		'date_to'   => isset( $_GET['date_to'] ) ? sanitize_text_field( wp_unslash( $_GET['date_to'] ) ) : '',
		// GET key is 'abds_type', not 'post_type': WordPress's own admin
		// router treats a real post_type GET value as "this is an edit.php
		// screen for that type" and calls wp_die("Cannot load %s.") because
		// this settings page isn't registered under that type's parent slug
		// (confirmed 2026-09-21: choosing a type and clicking Filter broke
		// the page). Only the URL param name changed -- $filters['post_type']
		// (this array's own key) and ABDS_SEO_Reports's expected arg name
		// are unchanged.
		'post_type' => isset( $_GET['abds_type'] ) ? sanitize_key( wp_unslash( $_GET['abds_type'] ) ) : '',
		'min_score' => isset( $_GET['min_score'] ) ? sanitize_text_field( wp_unslash( $_GET['min_score'] ) ) : '',
		'max_score' => isset( $_GET['max_score'] ) ? sanitize_text_field( wp_unslash( $_GET['max_score'] ) ) : '',
		'orderby'   => isset( $_GET['orderby'] ) ? sanitize_key( wp_unslash( $_GET['orderby'] ) ) : 'content_score',
		'order'     => isset( $_GET['order'] ) ? sanitize_key( wp_unslash( $_GET['order'] ) ) : 'asc',
		'page'      => isset( $_GET['paged'] ) ? absint( $_GET['paged'] ) : 1,
	);
	// phpcs:enable

	$report = ( new ABDS_SEO_Reports() )->query( $filters );

	$status_labels = array(
		'good'         => __( 'Good', 'abds-seo' ),
		'ok'           => __( 'OK', 'abds-seo' ),
		'poor'         => __( 'Poor', 'abds-seo' ),
		'not_analyzed' => __( 'Not analyzed', 'abds-seo' ),
	);

	$export_url = wp_nonce_url(
		add_query_arg(
			array_merge(
				array_filter(
					array(
						'date_from' => $filters['date_from'],
						'date_to'   => $filters['date_to'],
						// Key here is the URL param the export link carries;
						// abds_type, not post_type -- see the read side above.
						'abds_type' => $filters['post_type'],
						'min_score' => $filters['min_score'],
						'max_score' => $filters['max_score'],
						'orderby'   => $filters['orderby'],
						'order'     => $filters['order'],
					)
				),
				array( 'action' => 'abds_seo_export_csv' )
			),
			admin_url( 'admin-post.php' )
		),
		'abds_seo_export_csv'
	);

	// Content-gap analysis is a Pro feature (shipped by the ABDS SEO Pro add-on).
	// When the add-on is absent its classes aren't loaded, so guard every use and
	// fall back to a locked teaser rather than fatally instantiating them. The
	// license check (2026-09-23 fix) matters just as much as the class_exists()
	// one: without it, an unlicensed site with the add-on merely INSTALLED saw
	// the real form instead of the blurred teaser -- the functional leak (the
	// form's own submit handler actually running the analysis for free) is now
	// closed at its source (ABDS_SEO_Content_Gaps::schedule()), but this gate
	// keeps the VISIBLE state honest too, matching what the REST/admin-post
	// layer will actually do when submitted.
	$gaps_available = class_exists( 'ABDS_SEO_Content_Gaps' )
		&& ABDS_SEO_License_Accessor::gate()->allows( ABDS_SEO_Feature_Map::FEATURE_CONTENT_GAPS );
	if ( $gaps_available ) {
		$gaps        = new ABDS_SEO_Content_Gaps();
		$gaps_status = $gaps->get_status();
		$gaps_result = $gaps->get_result();
	} else {
		$gaps_status = array( 'status' => 'idle' );
		$gaps_result = null;
	}
	$serp_ready = class_exists( 'ABDS_SEO_AI_Key_Vault' )
		? ( new ABDS_SEO_AI_Key_Vault( ABDS_SEO_AI_Key_Vault::TYPE_SERP ) )->has_key()
		: false;

		// Stage 9.6, Block 3.4: a "blurred preview" upsell — this ONE card, as
		// the brief's own example, not a pattern rolled out everywhere. Same
		// direct-to-buy-page contract every other CTA in the plugin uses (see
		// admin.js's buildBuyUrl()), built by hand here since this template
		// has no access to the React bundle's helper.
		$abds_seo_gaps_buy_url = 'https://license.abds-seo.com/buy/?tier=pro&period=monthly&currency=usd&utm_source=plugin&utm_medium=software&utm_content=reports-content-gaps-blur';
	?>
	<div class="wrap abds-seo-wrap">
		<h1><?php esc_html_e( 'ABDS SEO — Reports', 'abds-seo' ); ?></h1>

		<div class="abds-seo-bento abds-seo-bento--reports">
			<?php // Content-score report: filters + table + pagination. ?>
			<section class="abds-seo-bento-card abds-seo-bento-card--full">
				<h2 class="abds-seo-bento-card__title"><?php esc_html_e( 'Page content scores', 'abds-seo' ); ?></h2>
				<p class="abds-seo-bento-card__desc">
					<?php esc_html_e( 'Rule-based content quality score for each page (no AI). Filter by date, type, and score; export to CSV.', 'abds-seo' ); ?>
				</p>

				<form method="get" class="abds-seo-report-filters">
					<input type="hidden" name="page" value="abds-seo-reports" />

					<label>
						<?php esc_html_e( 'Date from', 'abds-seo' ); ?>
						<input type="date" name="date_from" value="<?php echo esc_attr( $filters['date_from'] ); ?>" />
					</label>

					<label>
						<?php esc_html_e( 'Date to', 'abds-seo' ); ?>
						<input type="date" name="date_to" value="<?php echo esc_attr( $filters['date_to'] ); ?>" />
					</label>

					<label>
						<?php esc_html_e( 'Post type', 'abds-seo' ); ?>
						<select name="abds_type">
							<option value=""><?php esc_html_e( 'All', 'abds-seo' ); ?></option>
							<?php foreach ( get_post_types( array( 'public' => true ) ) as $post_type ) : ?>
								<option value="<?php echo esc_attr( $post_type ); ?>" <?php selected( $filters['post_type'], $post_type ); ?>>
									<?php echo esc_html( $post_type ); ?>
								</option>
							<?php endforeach; ?>
						</select>
					</label>

					<label>
						<?php esc_html_e( 'Score from', 'abds-seo' ); ?>
						<input type="number" name="min_score" min="0" max="100" value="<?php echo esc_attr( $filters['min_score'] ); ?>" />
					</label>

					<label>
						<?php esc_html_e( 'Score to', 'abds-seo' ); ?>
						<input type="number" name="max_score" min="0" max="100" value="<?php echo esc_attr( $filters['max_score'] ); ?>" />
					</label>

					<button type="submit" class="button"><?php esc_html_e( 'Filter', 'abds-seo' ); ?></button>
					<a href="<?php echo esc_url( $export_url ); ?>" class="button button-secondary">
						<?php esc_html_e( 'Export CSV', 'abds-seo' ); ?>
					</a>
				</form>

				<p>
					<?php
					printf(
						/* translators: %d: total number of matching rows. */
						esc_html__( 'Found: %d', 'abds-seo' ),
						(int) $report['total']
					);
					?>
				</p>

				<table class="widefat striped">
					<thead>
						<tr>
							<th><?php esc_html_e( 'Page', 'abds-seo' ); ?></th>
							<th><?php esc_html_e( 'Type', 'abds-seo' ); ?></th>
							<th><?php esc_html_e( 'Date', 'abds-seo' ); ?></th>
							<th><?php esc_html_e( 'Content score', 'abds-seo' ); ?></th>
							<th><?php esc_html_e( 'Status', 'abds-seo' ); ?></th>
						</tr>
					</thead>
					<tbody>
						<?php if ( empty( $report['items'] ) ) : ?>
							<tr>
								<td colspan="5"><?php esc_html_e( 'No records match these filters.', 'abds-seo' ); ?></td>
							</tr>
						<?php else : ?>
							<?php foreach ( $report['items'] as $item ) : ?>
								<tr>
									<td>
										<a href="<?php echo esc_url( get_edit_post_link( $item['post_id'] ) ); ?>">
											<?php echo esc_html( $item['title'] ); ?>
										</a>
									</td>
									<td><?php echo esc_html( $item['post_type'] ); ?></td>
									<td><?php echo esc_html( mysql2date( get_option( 'date_format' ), $item['date'] ) ); ?></td>
									<td><?php echo null !== $item['content_score'] ? esc_html( (string) $item['content_score'] ) : '—'; ?></td>
									<td>
										<span class="abds-seo-status abds-seo-status-<?php echo esc_attr( $item['status'] ); ?>">
											<?php echo esc_html( $status_labels[ $item['status'] ] ?? $item['status'] ); ?>
										</span>
									</td>
								</tr>
							<?php endforeach; ?>
						<?php endif; ?>
					</tbody>
				</table>

				<?php if ( $report['total_pages'] > 1 ) : ?>
					<div class="tablenav">
						<div class="tablenav-pages">
							<?php
							echo wp_kses_post(
								paginate_links(
									array(
										'base'    => add_query_arg( 'paged', '%#%' ),
										'format'  => '',
										'current' => $report['page'],
										'total'   => $report['total_pages'],
									)
								)
							);
							?>
						</div>
					</div>
				<?php endif; ?>
			</section>

			<?php // Content gaps. ?>
			<section class="abds-seo-bento-card abds-seo-bento-card--full">
				<h2 class="abds-seo-bento-card__title"><?php esc_html_e( 'Content gaps', 'abds-seo' ); ?></h2>
				<p class="abds-seo-bento-card__desc">
					<?php esc_html_e( 'Topics competitors cover in search results that your site does not. The analysis runs in the background and needs a configured AI provider; without a SERP key it works in a simplified mode (related topics without search-results data).', 'abds-seo' ); ?>
				</p>

				<?php
				// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only flash flag, not used for any state change.
				if ( isset( $_GET['abds-seo-gaps-error'] ) ) :
					?>
					<div class="notice notice-error inline">
						<p><?php echo esc_html( rawurldecode( wp_unslash( $_GET['abds-seo-gaps-error'] ) ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- read-only flash message rendered as plain escaped text, not used for any state change; the value only ever comes from our own redirect (ABDS_SEO_License_Accessor's own translated error strings), never directly from a third party. ?></p>
					</div>
				<?php endif; ?>

				<?php if ( ! $gaps_available ) : ?>
					<div class="abds-seo-blur-preview">
						<table class="widefat striped abds-seo-gaps-table abds-seo-blur-preview__content" aria-hidden="true">
							<thead>
								<tr>
									<th><?php esc_html_e( 'Uncovered topic', 'abds-seo' ); ?></th>
									<th><?php esc_html_e( 'Suggested keyword', 'abds-seo' ); ?></th>
								</tr>
							</thead>
							<tbody>
								<tr>
									<td><?php esc_html_e( 'Example: "how to choose a CMS in 2026"', 'abds-seo' ); ?></td>
									<td><?php esc_html_e( 'best cms 2026', 'abds-seo' ); ?></td>
								</tr>
								<tr>
									<td><?php esc_html_e( 'Example: "WordPress vs. static site generators"', 'abds-seo' ); ?></td>
									<td><?php esc_html_e( 'WordPress alternatives', 'abds-seo' ); ?></td>
								</tr>
								<tr>
									<td><?php esc_html_e( 'Example: "SEO checklist for small business blogs"', 'abds-seo' ); ?></td>
									<td><?php esc_html_e( 'small business seo tips', 'abds-seo' ); ?></td>
								</tr>
							</tbody>
						</table>
						<div class="abds-seo-blur-preview__overlay">
							<p class="abds-seo-blur-preview__label"><?php esc_html_e( 'Example preview — not your real data', 'abds-seo' ); ?></p>
							<p class="description"><?php esc_html_e( 'Content-gap analysis is a Pro feature: it finds topics competitors cover in search results that your site does not.', 'abds-seo' ); ?></p>
							<a class="components-button is-primary" href="<?php echo esc_url( $abds_seo_gaps_buy_url ); ?>">
								<?php esc_html_e( 'Upgrade plan', 'abds-seo' ); ?>
							</a>
						</div>
					</div>
				<?php else : ?>
					<?php
				// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only flash flag, not used for any state change.
					if ( isset( $_GET['abds-seo-gaps-queued'] ) ) :
						?>
					<div class="notice notice-success is-dismissible">
						<p><?php esc_html_e( 'Content-gap analysis has been queued. Refresh the page in a minute or two to see the result.', 'abds-seo' ); ?></p>
					</div>
					<?php endif; ?>

					<?php if ( ! $serp_ready ) : ?>
					<div class="notice notice-info inline">
						<p>
							<?php esc_html_e( 'No SERP key configured — the analysis will rely on AI only, without real search-results data.', 'abds-seo' ); ?>
							<a href="<?php echo esc_url( admin_url( 'admin.php?page=abds-seo-settings' ) ); ?>">
								<?php esc_html_e( 'Configure the search-results data source', 'abds-seo' ); ?>
							</a>
						</p>
					</div>
				<?php endif; ?>

					<?php if ( 'queued' === $gaps_status['status'] || 'running' === $gaps_status['status'] ) : ?>
					<p>
						<strong><?php esc_html_e( 'Analysis is running in the background…', 'abds-seo' ); ?></strong>
						<?php echo esc_html( $gaps_status['updated_at'] ); ?>
					</p>
				<?php elseif ( 'failed' === $gaps_status['status'] ) : ?>
					<div class="notice notice-error inline">
						<p><?php echo esc_html( $gaps_status['error_message'] ?? __( 'The analysis failed.', 'abds-seo' ) ); ?></p>
					</div>
				<?php endif; ?>

					<?php if ( $gaps_result ) : ?>
					<p>
						<?php
						printf(
							/* translators: 1: local datetime the analysis finished, 2: data source description. */
							esc_html__( 'Last analysis: %1$s (%2$s)', 'abds-seo' ),
							esc_html( $gaps_result['generated_at'] ),
							$gaps_result['used_serp']
								? esc_html__( 'with search-results data', 'abds-seo' )
								: esc_html__( 'AI only, without search-results data', 'abds-seo' )
						);
						?>
					</p>
					<table class="widefat striped abds-seo-gaps-table">
						<thead>
							<tr>
								<th><?php esc_html_e( 'Uncovered topic', 'abds-seo' ); ?></th>
								<th><?php esc_html_e( 'Suggested keyword', 'abds-seo' ); ?></th>
							</tr>
						</thead>
						<tbody>
							<?php foreach ( $gaps_result['gaps'] as $gap ) : ?>
								<tr>
									<td><?php echo esc_html( $gap['topic'] ); ?></td>
									<td><?php echo esc_html( $gap['suggested_keyword'] ); ?></td>
								</tr>
							<?php endforeach; ?>
						</tbody>
					</table>
				<?php elseif ( 'idle' === $gaps_status['status'] ) : ?>
					<p><?php esc_html_e( 'The analysis has not run yet.', 'abds-seo' ); ?></p>
				<?php endif; ?>

				<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>">
					<?php wp_nonce_field( 'abds_seo_run_content_gaps' ); ?>
					<input type="hidden" name="action" value="abds_seo_run_content_gaps" />
					<?php submit_button( __( 'Run content-gap analysis', 'abds-seo' ), 'secondary' ); ?>
				</form>
				<?php endif; ?>
			</section>

			<?php // Rank tracking (React). ?>
			<section class="abds-seo-bento-card abds-seo-bento-card--full">
				<h2 class="abds-seo-bento-card__title"><?php esc_html_e( 'Rank tracking', 'abds-seo' ); ?></h2>
				<p class="abds-seo-bento-card__desc">
					<?php esc_html_e( 'Scheduled regular rank checks. Each check of each keyword is a paid SERP request on your key; a cost estimate is shown before you enable it.', 'abds-seo' ); ?>
				</p>
				<div id="abds-seo-rank-tracker-root">
					<p class="description"><?php esc_html_e( 'This section requires JavaScript.', 'abds-seo' ); ?></p>
				</div>
			</section>

			<?php // Local SEO (React). ?>
			<section class="abds-seo-bento-card abds-seo-bento-card--full">
				<h2 class="abds-seo-bento-card__title"><?php esc_html_e( 'Local SEO', 'abds-seo' ); ?></h2>
				<p class="abds-seo-bento-card__desc">
					<?php esc_html_e( 'NAP (name/address/phone) consistency across the site and LocalBusiness schema validity.', 'abds-seo' ); ?>
				</p>
				<div id="abds-seo-local-seo-root">
					<p class="description"><?php esc_html_e( 'This section requires JavaScript.', 'abds-seo' ); ?></p>
				</div>
			</section>

			<?php // Backlinks (React). ?>
			<section class="abds-seo-bento-card abds-seo-bento-card--full">
				<h2 class="abds-seo-bento-card__title"><?php esc_html_e( 'Backlinks', 'abds-seo' ); ?></h2>
				<p class="abds-seo-bento-card__desc">
					<?php esc_html_e( 'Referring domains and new/lost backlinks from your DataForSEO account. Each new request spends your balance, so the result is cached for a week and fetched only on demand.', 'abds-seo' ); ?>
				</p>
				<div id="abds-seo-backlinks-root">
					<p class="description"><?php esc_html_e( 'This section requires JavaScript.', 'abds-seo' ); ?></p>
				</div>
			</section>

			<?php // Competitor (React). ?>
			<section class="abds-seo-bento-card abds-seo-bento-card--full">
				<h2 class="abds-seo-bento-card__title"><?php esc_html_e( 'Competitor: site vs site', 'abds-seo' ); ?></h2>
				<p class="abds-seo-bento-card__desc">
					<?php esc_html_e( 'Compares your domain with a specific competitor by backlinks, organic keywords, and traffic estimate, plus shared queries where the competitor ranks higher. The traffic estimate is a DataForSEO calculation, not measured data. Each comparison is several paid requests, so the result is cached for a week.', 'abds-seo' ); ?>
				</p>
				<div id="abds-seo-competitor-root">
					<p class="description"><?php esc_html_e( 'This section requires JavaScript.', 'abds-seo' ); ?></p>
				</div>
			</section>

			<?php // Internal links (React). ?>
			<section class="abds-seo-bento-card abds-seo-bento-card--full">
				<h2 class="abds-seo-bento-card__title"><?php esc_html_e( 'Internal linking', 'abds-seo' ); ?></h2>
				<p class="abds-seo-bento-card__desc">
					<?php esc_html_e( 'Orphan pages (nothing links to them) and link suggestions where a focus keyword is already mentioned in another page\'s text. These are suggestions only — the plugin changes nothing in your content.', 'abds-seo' ); ?>
				</p>
				<div id="abds-seo-internal-links-root">
					<p class="description"><?php esc_html_e( 'This section requires JavaScript.', 'abds-seo' ); ?></p>
				</div>
			</section>

			<?php // Content decay (React). ?>
			<section class="abds-seo-bento-card abds-seo-bento-card--full">
				<h2 class="abds-seo-bento-card__title"><?php esc_html_e( 'Content at risk', 'abds-seo' ); ?></h2>
				<p class="abds-seo-bento-card__desc">
					<?php esc_html_e( 'Posts whose tracked keywords show a sustained downward position trend. This is a report only — no automatic actions.', 'abds-seo' ); ?>
				</p>
				<div id="abds-seo-decay-root">
					<p class="description"><?php esc_html_e( 'This section requires JavaScript.', 'abds-seo' ); ?></p>
				</div>
			</section>

			<?php // Heatmaps (React). ?>
			<section class="abds-seo-bento-card abds-seo-bento-card--full">
				<h2 class="abds-seo-bento-card__title"><?php esc_html_e( 'Heatmaps (clicks and scrolling)', 'abds-seo' ); ?></h2>
				<p class="abds-seo-bento-card__desc">
					<?php esc_html_e( 'Aggregated, anonymized interaction maps: which areas of the page get clicked and how far it is scrolled. Data is bucketed into a 20×20 grid and four depth levels — no session recording and no visitor identification.', 'abds-seo' ); ?>
				</p>
				<div id="abds-seo-cro-heatmap-root">
					<p class="description"><?php esc_html_e( 'This section requires JavaScript.', 'abds-seo' ); ?></p>
				</div>
			</section>

			<?php // Popups (React). ?>
			<section class="abds-seo-bento-card abds-seo-bento-card--full">
				<h2 class="abds-seo-bento-card__title"><?php esc_html_e( 'Popups (CRO)', 'abds-seo' ); ?></h2>
				<p class="abds-seo-bento-card__desc">
					<?php esc_html_e( 'A limited popup builder with mandatory safeguards: no fullscreen popups on mobile, a minimum delay before showing, a frequency cap, and an always-present close button. They appear only when CRO tracking and the popups feature are enabled in settings.', 'abds-seo' ); ?>
				</p>
				<div id="abds-seo-cro-popups-root">
					<p class="description"><?php esc_html_e( 'This section requires JavaScript.', 'abds-seo' ); ?></p>
				</div>
			</section>
		</div>
	</div>
	<?php
} )();