<?php
/**
 * Admin settings page: Settings → AdMetric.
 *
 * @package AdMetric
 */

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/**
 * Settings.
 */
class AdMetric_Settings {

	const OPTION_PUBLISHING  = 'admetric_publishing_enabled';
	const OPTION_POST_STATUS = 'admetric_default_post_status';
	const OPTION_AUTHOR      = 'admetric_default_author';
	const OPTION_CATEGORY    = 'admetric_default_category';
	const OPTION_TRACKER     = 'admetric_tracker_enabled';
	const OPTION_TRACKING_ID = 'admetric_tracking_id';

	/**
	 * Hook admin pieces.
	 */
	public function register() {
		add_action( 'admin_menu', array( $this, 'add_menu' ) );
		add_action( 'admin_init', array( $this, 'register_settings' ) );
		add_action( 'admin_post_admetric_save_token', array( $this, 'handle_save_token' ) );
		add_action( 'admin_post_admetric_disconnect', array( $this, 'handle_disconnect' ) );
	}

	// -------------------------------------------------------------------
	// Option accessors (used across modules).
	// -------------------------------------------------------------------

	/**
	 * Whether the publishing module is enabled.
	 *
	 * @return bool
	 */
	public static function publishing_enabled() {
		return '1' === get_option( self::OPTION_PUBLISHING, '1' );
	}

	/**
	 * Default status for incoming articles: 'publish' or 'draft'.
	 *
	 * @return string
	 */
	public static function default_post_status() {
		$status = get_option( self::OPTION_POST_STATUS, 'publish' );
		return ( 'draft' === $status ) ? 'draft' : 'publish';
	}

	/**
	 * Author ID for incoming articles.
	 *
	 * @return int
	 */
	public static function default_author() {
		$author = (int) get_option( self::OPTION_AUTHOR, 0 );
		if ( $author > 0 && user_can( $author, 'publish_posts' ) ) {
			return $author;
		}
		// Fallback: the oldest administrator.
		$admins = get_users(
			array(
				'role'    => 'administrator',
				'orderby' => 'ID',
				'order'   => 'ASC',
				'number'  => 1,
				'fields'  => 'ID',
			)
		);
		return $admins ? (int) $admins[0] : 0;
	}

	/**
	 * Default category ID (0 = none).
	 *
	 * @return int
	 */
	public static function default_category() {
		return (int) get_option( self::OPTION_CATEGORY, 0 );
	}

	/**
	 * Whether the tracker module is enabled.
	 *
	 * @return bool
	 */
	public static function tracker_enabled() {
		return '1' === get_option( self::OPTION_TRACKER, '0' );
	}

	/**
	 * AdMetric Tracking ID.
	 *
	 * @return string
	 */
	public static function tracking_id() {
		return (string) get_option( self::OPTION_TRACKING_ID, '' );
	}

	// -------------------------------------------------------------------
	// Admin UI.
	// -------------------------------------------------------------------

	/**
	 * Add the options page.
	 */
	public function add_menu() {
		add_options_page(
			__( 'AdMetric', 'admetric' ),
			__( 'AdMetric', 'admetric' ),
			'manage_options',
			'admetric',
			array( $this, 'render_page' )
		);
	}

	/**
	 * Register module settings (token is handled separately, write-only).
	 */
	public function register_settings() {
		register_setting(
			'admetric_modules',
			self::OPTION_PUBLISHING,
			array(
				'type'              => 'string',
				'sanitize_callback' => array( $this, 'sanitize_checkbox' ),
				'default'           => '1',
			)
		);
		register_setting(
			'admetric_modules',
			self::OPTION_POST_STATUS,
			array(
				'type'              => 'string',
				'sanitize_callback' => array( $this, 'sanitize_post_status' ),
				'default'           => 'publish',
			)
		);
		register_setting(
			'admetric_modules',
			self::OPTION_AUTHOR,
			array(
				'type'              => 'integer',
				'sanitize_callback' => 'absint',
				'default'           => 0,
			)
		);
		register_setting(
			'admetric_modules',
			self::OPTION_CATEGORY,
			array(
				'type'              => 'integer',
				'sanitize_callback' => 'absint',
				'default'           => 0,
			)
		);
		register_setting(
			'admetric_modules',
			self::OPTION_TRACKER,
			array(
				'type'              => 'string',
				'sanitize_callback' => array( $this, 'sanitize_checkbox' ),
				'default'           => '0',
			)
		);
		register_setting(
			'admetric_modules',
			self::OPTION_TRACKING_ID,
			array(
				'type'              => 'string',
				'sanitize_callback' => array( $this, 'sanitize_tracking_id' ),
				'default'           => '',
			)
		);
	}

	/**
	 * Checkbox sanitizer.
	 *
	 * @param mixed $value Raw value.
	 * @return string '1' or '0'.
	 */
	public function sanitize_checkbox( $value ) {
		return ( '1' === (string) $value ) ? '1' : '0';
	}

	/**
	 * Post status sanitizer.
	 *
	 * @param mixed $value Raw value.
	 * @return string 'publish' or 'draft'.
	 */
	public function sanitize_post_status( $value ) {
		return ( 'draft' === (string) $value ) ? 'draft' : 'publish';
	}

	/**
	 * Tracking ID sanitizer: alphanumeric, dash, underscore.
	 *
	 * @param mixed $value Raw value.
	 * @return string
	 */
	public function sanitize_tracking_id( $value ) {
		return preg_replace( '/[^A-Za-z0-9_\-]/', '', (string) $value );
	}

	/**
	 * Handle the "save token" form (admin-post).
	 */
	public function handle_save_token() {
		if ( ! current_user_can( 'manage_options' ) ) {
			wp_die( esc_html__( 'You are not allowed to manage this plugin.', 'admetric' ) );
		}
		check_admin_referer( 'admetric_save_token' );

		$token = isset( $_POST['admetric_token'] ) ? sanitize_text_field( wp_unslash( $_POST['admetric_token'] ) ) : '';
		if ( '' !== $token ) {
			AdMetric_Token::save( $token );
		}
		wp_safe_redirect( add_query_arg( 'admetric-connected', '1', $this->page_url() ) );
		exit;
	}

	/**
	 * Handle the "disconnect" form (admin-post).
	 */
	public function handle_disconnect() {
		if ( ! current_user_can( 'manage_options' ) ) {
			wp_die( esc_html__( 'You are not allowed to manage this plugin.', 'admetric' ) );
		}
		check_admin_referer( 'admetric_disconnect' );

		AdMetric_Token::clear();
		AdMetric_Connect::clear_connection_metadata();
		wp_safe_redirect( add_query_arg( 'admetric-disconnected', '1', $this->page_url() ) );
		exit;
	}

	/**
	 * Settings page URL.
	 *
	 * @return string
	 */
	private function page_url() {
		return admin_url( 'options-general.php?page=admetric' );
	}

	/**
	 * Render the settings page.
	 */
	public function render_page() {
		if ( ! current_user_can( 'manage_options' ) ) {
			return;
		}
		$connected = AdMetric_Token::is_connected();
		$result    = isset( $_GET['admetric-connect-result'] ) ? sanitize_key( wp_unslash( $_GET['admetric-connect-result'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
		$messages  = array(
			'connected'           => array( 'success', 'Сайт успешно подключён к AdMetric.' ),
			'invalid_address'     => array( 'error', 'Не удалось подтвердить адрес сайта. Начните подключение заново из плагина.' ),
			'expired'             => array( 'error', 'Ссылка подключения устарела. Нажмите «Подключить к AdMetric» ещё раз.' ),
			'invalid_request'     => array( 'error', 'Не удалось подтвердить запрос. Попробуйте подключить сайт заново.' ),
			'activation_expired'  => array( 'error', 'Подключение не завершено. Повторите попытку из плагина.' ),
			'verification_failed' => array( 'error', 'Сайт не отвечает на проверку подключения. Убедитесь, что сайт доступен из интернета, и повторите.' ),
			'rate_limited'        => array( 'warning', 'Слишком много попыток подключения. Повторите через несколько минут.' ),
			'service_error'       => array( 'error', 'Не удалось завершить подключение. Повторите попытку позже.' ),
		);
		?>
		<div class="wrap">
			<h1><?php esc_html_e( 'AdMetric', 'admetric' ); ?></h1>

			<?php if ( isset( $_GET['admetric-connected'] ) ) : // phpcs:ignore WordPress.Security.NonceVerification.Recommended ?>
				<div class="notice notice-success is-dismissible"><p><?php esc_html_e( 'Connection token saved. Finish the check from your AdMetric account.', 'admetric' ); ?></p></div>
			<?php endif; ?>
			<?php if ( isset( $_GET['admetric-disconnected'] ) ) : // phpcs:ignore WordPress.Security.NonceVerification.Recommended ?>
				<div class="notice notice-success is-dismissible"><p><?php esc_html_e( 'Site disconnected from AdMetric.', 'admetric' ); ?></p></div>
			<?php endif; ?>
			<?php if ( isset( $messages[ $result ] ) ) : ?>
				<div class="notice notice-<?php echo esc_attr( $messages[ $result ][0] ); ?> is-dismissible"><p><?php echo esc_html( $messages[ $result ][1] ); ?></p></div>
			<?php endif; ?>

			<h2><?php esc_html_e( 'Connection', 'admetric' ); ?></h2>
			<?php if ( $connected ) : ?>
				<?php $connection_status = (string) get_option( AdMetric_Connect::OPTION_STATUS, 'active' ); ?>
				<table class="widefat striped" style="max-width:640px"><tbody>
					<tr><th><?php esc_html_e( 'Домен', 'admetric' ); ?></th><td><?php echo esc_html( get_option( AdMetric_Connect::OPTION_DOMAIN, wp_parse_url( get_site_url(), PHP_URL_HOST ) ) ); ?></td></tr>
					<tr><th><?php esc_html_e( 'Статус', 'admetric' ); ?></th><td><?php echo esc_html( 'active' === $connection_status ? 'Подключён' : 'Ошибка проверки' ); ?></td></tr>
					<tr><th><?php esc_html_e( 'Дата подключения', 'admetric' ); ?></th><td><?php echo esc_html( wp_date( get_option( 'date_format' ) . ' ' . get_option( 'time_format' ), AdMetric_Token::connected_at() ) ); ?></td></tr>
				</tbody></table>
				<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>">
					<?php wp_nonce_field( 'admetric_disconnect' ); ?>
					<input type="hidden" name="action" value="admetric_disconnect" />
					<?php submit_button( __( 'Отключить', 'admetric' ), 'delete', 'submit', false ); ?>
				</form>
			<?php else : ?>
				<p><?php esc_html_e( 'Подключите сайт к AdMetric без копирования адреса или токена.', 'admetric' ); ?></p>
				<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>">
					<?php wp_nonce_field( 'admetric_connect' ); ?>
					<input type="hidden" name="action" value="admetric_connect" />
					<?php submit_button( __( 'Подключить к AdMetric', 'admetric' ), 'primary', 'submit', false ); ?>
				</form>
				<details style="margin-top:16px"><summary><a href="#admetric-manual"><?php esc_html_e( 'Подключить вручную', 'admetric' ); ?></a></summary>
				<p><?php esc_html_e( 'Вставьте токен подключения из кабинета AdMetric (Интеграции → WordPress).', 'admetric' ); ?></p>
				<form id="admetric-manual" method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>">
					<?php wp_nonce_field( 'admetric_save_token' ); ?>
					<input type="hidden" name="action" value="admetric_save_token" />
					<table class="form-table" role="presentation">
						<tr>
							<th scope="row"><label for="admetric_token"><?php esc_html_e( 'Connection token', 'admetric' ); ?></label></th>
							<td><input type="password" id="admetric_token" name="admetric_token" class="regular-text" autocomplete="off" required /></td>
						</tr>
					</table>
					<?php submit_button( __( 'Save token', 'admetric' ) ); ?>
				</form>
				</details>
			<?php endif; ?>

			<hr />

			<form method="post" action="options.php">
				<?php settings_fields( 'admetric_modules' ); ?>

				<h2><?php esc_html_e( 'Publishing', 'admetric' ); ?></h2>
				<table class="form-table" role="presentation">
					<tr>
						<th scope="row"><?php esc_html_e( 'Accept articles from AdMetric', 'admetric' ); ?></th>
						<td>
							<label>
								<input type="hidden" name="<?php echo esc_attr( self::OPTION_PUBLISHING ); ?>" value="0" />
								<input type="checkbox" name="<?php echo esc_attr( self::OPTION_PUBLISHING ); ?>" value="1" <?php checked( self::publishing_enabled() ); ?> />
								<?php esc_html_e( 'Allow your AdMetric autopilot to create posts on this site', 'admetric' ); ?>
							</label>
						</td>
					</tr>
					<tr>
						<th scope="row"><?php esc_html_e( 'New articles arrive as', 'admetric' ); ?></th>
						<td>
							<select name="<?php echo esc_attr( self::OPTION_POST_STATUS ); ?>">
								<option value="publish" <?php selected( self::default_post_status(), 'publish' ); ?>><?php esc_html_e( 'Published immediately', 'admetric' ); ?></option>
								<option value="draft" <?php selected( self::default_post_status(), 'draft' ); ?>><?php esc_html_e( 'Drafts (I review before publishing)', 'admetric' ); ?></option>
							</select>
						</td>
					</tr>
					<tr>
						<th scope="row"><label for="admetric_author"><?php esc_html_e( 'Post author', 'admetric' ); ?></label></th>
						<td>
							<?php
							wp_dropdown_users(
								array(
									'name'             => self::OPTION_AUTHOR,
									'id'               => 'admetric_author',
									'selected'         => self::default_author(),
									'capability'       => 'publish_posts',
									'show_option_none' => __( '— Default administrator —', 'admetric' ),
								)
							);
							?>
						</td>
					</tr>
					<tr>
						<th scope="row"><label for="admetric_category"><?php esc_html_e( 'Default category', 'admetric' ); ?></label></th>
						<td>
							<?php
							wp_dropdown_categories(
								array(
									'name'             => self::OPTION_CATEGORY,
									'id'               => 'admetric_category',
									'selected'         => self::default_category(),
									'hide_empty'       => false,
									'show_option_none' => __( '— None —', 'admetric' ),
									'option_none_value' => 0,
								)
							);
							?>
						</td>
					</tr>
				</table>

				<h2><?php esc_html_e( 'Analytics tracker', 'admetric' ); ?></h2>
				<p class="description"><?php esc_html_e( 'When enabled, your site loads the AdMetric tracker script and sends visitor analytics to AdMetric. See the plugin description for details on what is collected.', 'admetric' ); ?></p>
				<table class="form-table" role="presentation">
					<tr>
						<th scope="row"><?php esc_html_e( 'Enable tracker', 'admetric' ); ?></th>
						<td>
							<label>
								<input type="hidden" name="<?php echo esc_attr( self::OPTION_TRACKER ); ?>" value="0" />
								<input type="checkbox" name="<?php echo esc_attr( self::OPTION_TRACKER ); ?>" value="1" <?php checked( self::tracker_enabled() ); ?> />
								<?php esc_html_e( 'Embed the AdMetric analytics snippet on the public site', 'admetric' ); ?>
							</label>
						</td>
					</tr>
					<tr>
						<th scope="row"><label for="admetric_tracking_id"><?php esc_html_e( 'Tracking ID', 'admetric' ); ?></label></th>
						<td><input type="text" id="admetric_tracking_id" name="<?php echo esc_attr( self::OPTION_TRACKING_ID ); ?>" class="regular-text" value="<?php echo esc_attr( self::tracking_id() ); ?>" /></td>
					</tr>
				</table>

				<?php submit_button(); ?>
			</form>
		</div>
		<?php
	}
}