<?php
/**
 * Workflow primitives: acknowledge / resolve / assign / comment.
 *
 * Status changes update the row in-place and emit a meta event (so
 * the timeline shows "Jane acknowledged event #142"). Comments live
 * in their own table to keep the activity table append-friendly.
 *
 * @package ActivityPilot
 */

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

final class APWPM_Workflow {

	const ALLOWED_STATUSES = array( 'open', 'acknowledged', 'resolved', 'snoozed' );

	public static function comments_table() {
		return APWPM_DB::comments_table();
	}

	public static function set_status( $log_id, $status, $user_id = 0 ) {
		if ( ! in_array( $status, self::ALLOWED_STATUSES, true ) ) {
			return new WP_Error( 'apwpm_bad_status', __( 'Invalid status.', 'activitypilot' ) );
		}
		$user_id = $user_id ?: get_current_user_id();

		$row = APWPM_DB::get_row( $log_id );
		if ( ! $row ) {
			return new WP_Error( 'apwpm_not_found', __( 'Event not found.', 'activitypilot' ) );
		}

		APWPM_DB::update_log_fields( (int) $log_id, array( 'status' => $status ), array( '%s' ) );

		// Emit a meta event so the change shows up in the timeline.
		APWPM_Logger::log( array(
			'action_type'  => 'workflow_status_changed',
			'object_type'  => 'log_entry',
			'object_id'    => (int) $log_id,
			'object_title' => '#' . (int) $log_id,
			'description'  => sprintf(
				/* translators: 1: log id 2: status */
				__( 'Event #%1$d marked as %2$s.', 'activitypilot' ),
				$log_id,
				$status
			),
			'severity'     => 'info',
			'context'      => array(
				'log_id'   => (int) $log_id,
				'status'   => $status,
				'changed_by' => (int) $user_id,
			),
			'user_id'      => $user_id,
		) );

		return true;
	}

	public static function assign( $log_id, $assignee_id, $user_id = 0 ) {
		$user_id = $user_id ?: get_current_user_id();
		$row     = APWPM_DB::get_row( $log_id );
		if ( ! $row ) {
			return new WP_Error( 'apwpm_not_found', __( 'Event not found.', 'activitypilot' ) );
		}
		$assignee = $assignee_id ? get_userdata( (int) $assignee_id ) : null;
		APWPM_DB::update_log_fields( (int) $log_id, array( 'assignee_id' => (int) $assignee_id ), array( '%d' ) );

		APWPM_Logger::log( array(
			'action_type'  => 'workflow_assigned',
			'object_type'  => 'log_entry',
			'object_id'    => (int) $log_id,
			'object_title' => '#' . (int) $log_id,
			'description'  => $assignee
				? sprintf(
					/* translators: 1: event ID, 2: assignee login */
					__( 'Event #%1$d assigned to %2$s.', 'activitypilot' ),
					$log_id,
					$assignee->user_login
				)
				: sprintf(
					/* translators: %d: event ID */
					__( 'Event #%d unassigned.', 'activitypilot' ),
					$log_id
				),
			'severity'     => 'info',
			'context'      => array( 'log_id' => (int) $log_id, 'assignee_id' => (int) $assignee_id ),
		) );
		return true;
	}

	public static function add_comment( $log_id, $body, $user_id = 0 ) {
		$body = wp_kses_post( trim( (string) $body ) );
		if ( '' === $body ) {
			return new WP_Error( 'apwpm_empty', __( 'Comment cannot be empty.', 'activitypilot' ) );
		}
		$user_id = $user_id ?: get_current_user_id();
		$user    = $user_id ? get_userdata( $user_id ) : null;

		APWPM_DB::insert_into(
			self::comments_table(),
			array(
				'log_id'     => (int) $log_id,
				'user_id'    => (int) $user_id,
				'user_login' => $user ? $user->user_login : '',
				'body'       => $body,
				'created_at' => current_time( 'mysql' ),
			),
			array( '%d', '%d', '%s', '%s', '%s' )
		);
		$comment_id = APWPM_DB::insert_id();

		// Fire notifications for any @mentioned users.
		self::notify_mentions( $body, (int) $log_id, $comment_id, $user );

		return $comment_id;
	}

	/**
	 * Detect `@username` tokens in a comment body and emit a notification
	 * event per mentioned user. The event flows through the regular
	 * logger so webhooks / email digests pick it up automatically.
	 */
	protected static function notify_mentions( $body, $log_id, $comment_id, $author ) {
		if ( ! preg_match_all( '/@([A-Za-z0-9_.\-]{1,60})/', (string) $body, $matches ) ) {
			return;
		}
		$logins = array_unique( $matches[1] );
		foreach ( $logins as $login ) {
			$mentioned = get_user_by( 'login', $login );
			if ( ! $mentioned ) {
				continue;
			}
			// Don't notify the author for self-mentions.
			if ( $author && (int) $author->ID === (int) $mentioned->ID ) {
				continue;
			}

			APWPM_Logger::log( array(
				'action_type'  => 'user_mentioned',
				'object_type'  => 'comment',
				'object_id'    => (int) $comment_id,
				'object_title' => '@' . $mentioned->user_login,
				'description'  => sprintf(
					/* translators: 1: mentioned user, 2: author, 3: event id */
					__( '%1$s was mentioned by %2$s on event #%3$d.', 'activitypilot' ),
					'@' . $mentioned->user_login,
					$author ? '@' . $author->user_login : 'system',
					$log_id
				),
				'severity'     => 'info',
				'context'      => array(
					'log_id'     => (int) $log_id,
					'comment_id' => (int) $comment_id,
					'mentioned'  => (int) $mentioned->ID,
					'author'     => $author ? (int) $author->ID : 0,
				),
			) );

			// Per-user counter so the bell can show an unread badge.
			$key   = 'apwpm_mention_unread';
			$count = (int) get_user_meta( $mentioned->ID, $key, true );
			update_user_meta( $mentioned->ID, $key, $count + 1 );

			// Email the mentioned user (best-effort, respects opt-outs).
			self::send_mention_email( $mentioned, $author, $body, (int) $log_id, (int) $comment_id );
		}
	}

	/**
	 * Send a rich HTML mention notification email.
	 */
	protected static function send_mention_email( $mentioned, $author, $body, $log_id, $comment_id ) {
		$settings = (array) get_option( 'apwpm_settings', array() );
		if ( isset( $settings['enable_mention_email'] ) && empty( $settings['enable_mention_email'] ) ) {
			return; // globally disabled
		}
		if ( get_user_meta( $mentioned->ID, 'apwpm_no_mention_email', true ) ) {
			return; // user opted out
		}
		if ( empty( $mentioned->user_email ) || ! is_email( $mentioned->user_email ) ) {
			return;
		}

		$event   = APWPM_DB::get_row( $log_id );
		$site    = get_bloginfo( 'name' );
		$subject = sprintf(
			/* translators: 1: site name, 2: author login */
			__( '[%1$s] %2$s mentioned you in an activity comment', 'activitypilot' ),
			$site,
			$author ? '@' . $author->user_login : 'system'
		);

		$html = self::render_mention_email( array(
			'site'           => $site,
			'site_url'       => home_url(),
			'mentioned'      => $mentioned,
			'author'         => $author,
			'body'           => $body,
			'event'          => $event,
			'log_id'         => $log_id,
			'comment_id'     => $comment_id,
			'link'           => APWPM_Admin::timeline_url( (int) $log_id ),
			'profile_link'   => admin_url( 'profile.php#apwpm-notifications' ),
		) );

		$headers   = array();
		$headers[] = 'Content-Type: text/html; charset=UTF-8';
		$from_name = sprintf( '%s · Activity Timeline', $site );
		$headers[] = 'From: ' . $from_name . ' <' . get_option( 'admin_email' ) . '>';

		// Filter so site owners can customise body/subject/headers.
		$payload = APWPM_Compat::filter(
			'apwpm_mention_email',
			'ap_mention_email',
			array(
				'to'      => $mentioned->user_email,
				'subject' => $subject,
				'body'    => $html,
				'headers' => $headers,
			),
			$mentioned,
			$author,
			$event,
			$log_id,
			$comment_id
		);

		if ( empty( $payload['to'] ) || empty( $payload['body'] ) ) {
			return;
		}
		wp_mail( $payload['to'], $payload['subject'], $payload['body'], $payload['headers'] );
	}

	/**
	 * Build the HTML body for the mention email.
	 */
	protected static function render_mention_email( array $args ) {
		$mentioned   = $args['mentioned'];
		$author      = $args['author'];
		$event       = $args['event'];
		$body        = (string) $args['body'];
		$site        = (string) $args['site'];
		$link        = (string) $args['link'];
		$profile     = (string) $args['profile_link'];

		// Render the comment body with @mentions highlighted but the rest escaped.
		$comment_html = preg_replace_callback(
			'/@([A-Za-z0-9_.\-]{1,60})/',
			function ( $m ) {
				return '<span style="display:inline-block;padding:1px 6px;font-weight:600;color:#4f46e5;background:#eef2ff;border-radius:4px;">' . esc_html( $m[0] ) . '</span>';
			},
			esc_html( $body )
		);
		$comment_html = nl2br( $comment_html );

		$sev_colors = array(
			'critical' => array( 'bg' => '#fee2e2', 'fg' => '#7f1d1d' ),
			'error'    => array( 'bg' => '#fef2f2', 'fg' => '#b91c1c' ),
			'warning'  => array( 'bg' => '#fffbeb', 'fg' => '#92400e' ),
			'success'  => array( 'bg' => '#ecfdf5', 'fg' => '#065f46' ),
			'info'     => array( 'bg' => '#eff6ff', 'fg' => '#1d4ed8' ),
		);
		$sev   = $event && ! empty( $event->severity ) ? $event->severity : 'info';
		$sev_c = isset( $sev_colors[ $sev ] ) ? $sev_colors[ $sev ] : $sev_colors['info'];

		$author_login = $author ? '@' . $author->user_login : 'system';
		$author_name  = $author ? ( $author->display_name ?: $author->user_login ) : 'System';
		$avatar_url   = $author ? get_avatar_url( $author->ID, array( 'size' => 64 ) ) : '';

		$mentioned_first = preg_split( '/\s+/', (string) $mentioned->display_name )[0] ?: $mentioned->user_login;

		ob_start(); ?>
<!doctype html>
<html><head><meta charset="utf-8"><title><?php echo esc_html( $site ); ?></title></head>
<body style="margin:0;background:#f5f7fb;color:#1f2433;font:14px/1.5 -apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif;">
<div style="max-width:600px;margin:24px auto;padding:0 16px;">
	<div style="background:#fff;border:1px solid #e6e8ef;border-radius:14px;overflow:hidden;box-shadow:0 4px 14px rgba(15,23,42,.06);">
		<!-- Header -->
		<div style="padding:24px 28px 0;">
			<div style="display:inline-block;padding:6px 12px;background:#eef2ff;color:#4f46e5;border-radius:999px;font-size:11px;font-weight:700;letter-spacing:.05em;text-transform:uppercase;">
				@ mention
			</div>
			<h1 style="margin:14px 0 4px;font-size:20px;font-weight:700;letter-spacing:-0.01em;color:#1f2433;">
				<?php
				echo esc_html(
					sprintf(
						/* translators: %s: recipient first name */
						__( 'Hi %s, you were mentioned', 'activitypilot' ),
						$mentioned_first
					)
				);
				?>
			</h1>
			<p style="margin:0;color:#6b7384;font-size:13px;">
				<?php
				echo esc_html(
					sprintf(
						/* translators: 1: comment author login, 2: site name */
						__( '%1$s tagged you in a comment on %2$s.', 'activitypilot' ),
						$author_login,
						$site
					)
				);
				?>
			</p>
		</div>

		<!-- Author / Comment block -->
		<div style="padding:18px 28px 0;">
			<table style="width:100%;border-collapse:collapse;">
				<tr>
					<?php if ( $avatar_url ) : ?>
					<td valign="top" style="width:48px;padding-right:12px;">
						<img src="<?php echo esc_url( $avatar_url ); ?>" alt="" width="44" height="44" style="border-radius:50%;display:block;">
					</td>
					<?php endif; ?>
					<td valign="top">
						<div style="font-weight:600;color:#1f2433;"><?php echo esc_html( $author_name ); ?></div>
						<div style="color:#6b7384;font-size:12px;">
							<?php echo esc_html( $author_login ); ?>
							<?php if ( $event ) : ?>
								· <?php echo esc_html( mysql2date( get_option( 'date_format' ) . ' ' . get_option( 'time_format' ), $event->created_at ) ); ?>
							<?php endif; ?>
						</div>
						<div style="margin-top:10px;padding:12px 14px;background:#f6f7fb;border-left:3px solid #4f46e5;border-radius:8px;color:#1f2433;font-size:14px;">
							<?php
							echo wp_kses(
								$comment_html,
								array(
									'span' => array( 'style' => true ),
									'br'   => array(),
								)
							);
							?>
						</div>
					</td>
				</tr>
			</table>
		</div>

		<?php if ( $event ) : ?>
		<!-- Event card -->
		<div style="padding:20px 28px 0;">
			<div style="font-size:11px;font-weight:700;color:#9099ad;letter-spacing:.06em;text-transform:uppercase;margin-bottom:8px;">
				<?php esc_html_e( 'Activity event', 'activitypilot' ); ?>
			</div>
			<div style="border:1px solid #e6e8ef;border-radius:10px;padding:14px 16px;">
				<div style="display:flex;align-items:center;gap:8px;margin-bottom:8px;">
					<span style="display:inline-block;padding:3px 10px;border-radius:999px;font-size:11px;font-weight:700;text-transform:uppercase;background:<?php echo esc_attr( $sev_c['bg'] ); ?>;color:<?php echo esc_attr( $sev_c['fg'] ); ?>;">
						<?php echo esc_html( $sev ); ?>
					</span>
					<span style="display:inline-block;padding:3px 10px;border-radius:999px;font-size:11px;font-weight:600;background:#eef2ff;color:#4f46e5;">
						<?php echo esc_html( $event->action_type ); ?>
					</span>
				</div>
				<div style="font-size:14px;color:#1f2433;margin-bottom:8px;">
					<?php echo esc_html( wp_strip_all_tags( (string) $event->description ) ); ?>
				</div>
				<table style="width:100%;font-size:12px;color:#6b7384;border-collapse:collapse;">
					<?php if ( ! empty( $event->user_login ) ) : ?>
					<tr><td style="padding:3px 0;width:120px;">Triggered by</td><td style="padding:3px 0;color:#1f2433;font-weight:500;">@<?php echo esc_html( $event->user_login ); ?> <?php echo $event->user_role ? '<span style="color:#9099ad;">(' . esc_html( $event->user_role ) . ')</span>' : ''; ?></td></tr>
					<?php endif; ?>
					<?php if ( ! empty( $event->object_type ) || ! empty( $event->object_title ) ) : ?>
					<tr><td style="padding:3px 0;">Object</td><td style="padding:3px 0;color:#1f2433;"><?php echo esc_html( trim( $event->object_type . ' ' . $event->object_title ) ); ?></td></tr>
					<?php endif; ?>
					<?php if ( ! empty( $event->ip_address ) ) : ?>
					<tr><td style="padding:3px 0;">IP</td><td style="padding:3px 0;color:#1f2433;"><?php echo esc_html( $event->ip_address ); ?><?php echo ! empty( $event->country ) ? ' · ' . esc_html( $event->country . ( $event->city ? ' / ' . $event->city : '' ) ) : ''; ?></td></tr>
					<?php endif; ?>
					<?php if ( ! empty( $event->created_at ) ) : ?>
					<tr><td style="padding:3px 0;">When</td><td style="padding:3px 0;color:#1f2433;"><?php echo esc_html( $event->created_at ); ?></td></tr>
					<?php endif; ?>
				</table>
			</div>
		</div>
		<?php endif; ?>

		<!-- CTA -->
		<div style="padding:24px 28px 28px;text-align:center;">
			<a href="<?php echo esc_url( $link ); ?>" style="display:inline-block;padding:12px 22px;background:#4f46e5;color:#fff;border-radius:10px;text-decoration:none;font-weight:600;font-size:14px;">
				<?php esc_html_e( 'Open in Activity Timeline →', 'activitypilot' ); ?>
			</a>
			<div style="margin-top:12px;color:#9099ad;font-size:12px;">
				<?php
				echo esc_html(
					sprintf(
						/* translators: 1: event ID, 2: comment ID */
						__( 'Event #%1$d · Comment #%2$d', 'activitypilot' ),
						(int) $args['log_id'],
						(int) $args['comment_id']
					)
				);
				?>
			</div>
		</div>
	</div>

	<!-- Footer -->
	<div style="padding:16px 8px;color:#9099ad;font-size:11px;text-align:center;line-height:1.6;">
		<?php
		echo esc_html(
			sprintf(
				/* translators: %s: site name */
				__( 'You received this email because you were @mentioned in an activity comment on %s.', 'activitypilot' ),
				$site
			)
		);
		?>
		<br>
		<a href="<?php echo esc_url( $profile ); ?>" style="color:#6b7384;">
			<?php esc_html_e( 'Manage notification preferences', 'activitypilot' ); ?>
		</a>
		· <?php echo esc_html( $site ); ?>
	</div>
</div>
</body></html>
		<?php
		return (string) ob_get_clean();
	}

	/**
	 * Clear the unread-mention badge for the current user.
	 */
	public static function clear_mention_count( $user_id = 0 ) {
		$user_id = $user_id ?: get_current_user_id();
		return delete_user_meta( $user_id, 'apwpm_mention_unread' );
	}

	public static function unread_mentions( $user_id = 0 ) {
		$user_id = $user_id ?: get_current_user_id();
		return (int) get_user_meta( $user_id, 'apwpm_mention_unread', true );
	}

	/**
	 * Render an opt-out checkbox on the WP user profile page.
	 */
	public static function profile_fields( $user ) {
		if ( ! ( $user instanceof WP_User ) ) {
			return;
		}
		$opted_out = (bool) get_user_meta( $user->ID, 'apwpm_no_mention_email', true );
		?>
		<h2 id="apwpm-notifications"><?php esc_html_e( 'Activity Timeline notifications', 'activitypilot' ); ?></h2>
		<table class="form-table" role="presentation">
			<tr>
				<th scope="row"><?php esc_html_e( 'Email me when @mentioned', 'activitypilot' ); ?></th>
				<td>
					<label>
						<input type="checkbox" name="apwpm_no_mention_email" value="1" <?php checked( ! $opted_out ); ?> />
						<?php esc_html_e( 'Send me an email whenever someone tags me in an activity comment.', 'activitypilot' ); ?>
					</label>
				</td>
			</tr>
		</table>
		<?php
	}

	public static function save_profile_fields( $user_id ) {
		if ( ! current_user_can( 'edit_user', $user_id ) ) {
			return;
		}
		if (
			empty( $_POST['_wpnonce'] )
			|| ! wp_verify_nonce(
				sanitize_text_field( wp_unslash( (string) $_POST['_wpnonce'] ) ),
				'update-user_' . (int) $user_id
			)
		) {
			return;
		}
		// Checkbox checked = opted IN, so opt-out meta should be deleted.
		if ( isset( $_POST['apwpm_no_mention_email'] ) ) {
			delete_user_meta( $user_id, 'apwpm_no_mention_email' );
		} else {
			update_user_meta( $user_id, 'apwpm_no_mention_email', 1 );
		}
	}

	public static function get_comments( $log_id ) {
		return APWPM_DB::get_comments_for_log( (int) $log_id );
	}

	/**
	 * Bulk-fetch comment counts for an arbitrary set of log IDs.
	 * Returns an associative map: [ log_id => count ].
	 */
	public static function counts_for_logs( array $log_ids ) {
		$log_ids = array_filter( array_map( 'intval', $log_ids ) );
		if ( empty( $log_ids ) ) {
			return array();
		}
		return APWPM_DB::comment_counts_for_logs( $log_ids );
	}

	public static function delete_comment( $comment_id, $user_id = 0 ) {
		$user_id = $user_id ?: get_current_user_id();
		$args    = array( 'id' => (int) $comment_id );
		$format  = array( '%d' );
		// Non-admins can only delete their own comments.
		if ( ! current_user_can( 'manage_options' ) ) {
			$args['user_id'] = (int) $user_id;
			$format[]        = '%d';
		}
		return (bool) APWPM_DB::delete_from( self::comments_table(), $args, $format );
	}
}