<?php
/**
 * Admin Area Sub-Controller
 *
 * @package    AdX-Ad-Inserter
 * @subpackage Admin
 */

defined( 'ABSPATH' ) || exit;

class Adx_Admin {

	/**
	 * Constructor.
	 */
	public function __construct() {
		add_action( 'admin_init', array( $this, 'register_settings' ) );
		add_action( 'admin_menu', array( $this, 'add_settings_menu' ) );
		add_action( 'admin_enqueue_scripts', array( $this, 'enqueue_admin_assets' ) );
		add_action( 'admin_enqueue_scripts', array( $this, 'suppress_third_party_overlays' ), 100 );
		add_action( 'admin_init', array( $this, 'handle_setup_registration' ) );
		// Suppress ALL third-party admin notices on our page using output buffering.
		// notices_buffer_end discards everything, then directly outputs our own notice.
		add_action( 'admin_notices', array( $this, 'notices_buffer_start' ), -100 );
		add_action( 'admin_notices', array( $this, 'notices_buffer_end' ), PHP_INT_MAX );
		add_action( 'wp_ajax_ms_setup_remind_later', array( $this, 'ajax_remind_later' ) );
		add_action( 'wp_ajax_ms_setup_already_registered', array( $this, 'ajax_already_registered' ) );
	}


	/**
	 * Register the plugin settings.
	 */
	public function register_settings() {
		// Central settings
		$central_settings = array(
			'adxbyms_popup_enabled',
			'adxbyms_popup_network_code',
			'adxbyms_popup_option',
			'adxbyms_popup_scroll_trigger',
			'adxbyms_ad2_enabled',
			'adxbyms_ad2_network_code',
			'adxbyms_ad2_keywords',
			'adxbyms_anchor_enabled',
			'adxbyms_anchor_network_code',
			'adxbyms_anchor_position',
			'adxbyms_offerwall_onscroll_enabled',
			'adxbyms_offerwall_onscroll_network_code',
			'adxbyms_offerwall_onscroll_logo_url',
			'adxbyms_interstitial_enabled',
			'adxbyms_interstitial_network_code',
			'adxbyms_custom_enabled',
			'adxbyms_footer_custom_enabled',
			'adxbyms_ads_txt_enabled',
			'adxbyms_slot_enabled',
			
			// New features central toggles
			'adxbyms_custom_adsense_enabled',
			'adxbyms_responsive_ads_enabled',
			'adxbyms_flying_carpet_enabled',
			'adxbyms_side_rail_enabled',
			'adxbyms_exclude_links',
			
			// Setup onboarding
			'ms_setup_completed',
			'ms_setup_remind_later_time',
			
			// Central performance
			'adxbyms_lazy_load',
			
			// Popup specific settings updates
			'adxbyms_popup_frequency',
			'adxbyms_popup_pages',
			'adxbyms_popup_devices',

			// Side rail specifics
			'adxbyms_side_rail_network_code',
			'adxbyms_side_rail_left_network_code',
			'adxbyms_side_rail_right_network_code',
			'adxbyms_side_rail_refresh_enabled',
			'adxbyms_side_rail_refresh_interval',

			// Offerwall trigger depth
			'adxbyms_offerwall_onscroll_trigger',
		);

		foreach ( $central_settings as $opt ) {
			if ( 'adxbyms_exclude_links' === $opt ) {
				register_setting( 'adxbyms_settings', $opt, array( 'sanitize_callback' => 'sanitize_textarea_field' ) );
			} else {
				register_setting( 'adxbyms_settings', $opt, array( 'sanitize_callback' => array( $this, 'sanitize_option' ) ) );
			}
		}

		// Header/Footer textareas custom sanitization
		register_setting( 'adxbyms_settings', 'adxbyms_header_code', array( 'sanitize_callback' => array( $this, 'sanitize_raw_code' ) ) );
		register_setting( 'adxbyms_settings', 'adxbyms_footer_code', array( 'sanitize_callback' => array( $this, 'sanitize_raw_code' ) ) );
		register_setting( 'adxbyms_settings', 'adxbyms_ads_txt_code', array( 'sanitize_callback' => 'sanitize_textarea_field' ) );

		// Register 10 standard display slots
		for ( $i = 1; $i <= 10; $i++ ) {
			register_setting( 'adxbyms_settings', "adxbyms_slot_{$i}_enabled", array( 'sanitize_callback' => array( $this, 'sanitize_option' ) ) );
			register_setting( 'adxbyms_settings', "adxbyms_slot_{$i}_network_code", array( 'sanitize_callback' => 'sanitize_text_field' ) );
			register_setting( 'adxbyms_settings', "adxbyms_slot_{$i}_sizes", array( 'sanitize_callback' => array( $this, 'sanitize_option' ) ) );
			register_setting( 'adxbyms_settings', "adxbyms_slot_{$i}_pages", array( 'sanitize_callback' => array( $this, 'sanitize_option' ) ) );
			register_setting( 'adxbyms_settings', "adxbyms_slot_{$i}_insertion", array( 'sanitize_callback' => 'sanitize_text_field' ) );
			register_setting( 'adxbyms_settings', "adxbyms_slot_{$i}_alignment", array( 'sanitize_callback' => 'sanitize_text_field' ) );
			register_setting( 'adxbyms_settings', "adxbyms_slot_{$i}_text", array( 'sanitize_callback' => 'sanitize_text_field' ) );
			register_setting( 'adxbyms_settings', "adxbyms_slot_{$i}_offset", array( 'sanitize_callback' => 'sanitize_text_field' ) );
			register_setting( 'adxbyms_settings', "adxbyms_slot_{$i}_devices", array( 'sanitize_callback' => array( $this, 'sanitize_option' ) ) );
			register_setting( 'adxbyms_settings', "adxbyms_slot_{$i}_show_label", array( 'sanitize_callback' => array( $this, 'sanitize_option' ) ) );
		}

		// Register 10 custom adsense blocks
		for ( $i = 1; $i <= 10; $i++ ) {
			register_setting( 'adxbyms_settings', "adxbyms_custom_adsense_block_{$i}_enabled", array( 'sanitize_callback' => array( $this, 'sanitize_option' ) ) );
			register_setting( 'adxbyms_settings', "adxbyms_custom_adsense_block_{$i}_code", array( 'sanitize_callback' => array( $this, 'sanitize_raw_code' ) ) );
			register_setting( 'adxbyms_settings', "adxbyms_custom_adsense_block_{$i}_insertion", array( 'sanitize_callback' => 'sanitize_text_field' ) );
			register_setting( 'adxbyms_settings', "adxbyms_custom_adsense_block_{$i}_offset", array( 'sanitize_callback' => 'sanitize_text_field' ) );
			register_setting( 'adxbyms_settings', "adxbyms_custom_adsense_block_{$i}_alignment", array( 'sanitize_callback' => 'sanitize_text_field' ) );
			register_setting( 'adxbyms_settings', "adxbyms_custom_adsense_block_{$i}_pages", array( 'sanitize_callback' => array( $this, 'sanitize_option' ) ) );
			register_setting( 'adxbyms_settings', "adxbyms_custom_adsense_block_{$i}_devices", array( 'sanitize_callback' => array( $this, 'sanitize_option' ) ) );
		}

		// Register 5 responsive ad blocks
		for ( $i = 1; $i <= 5; $i++ ) {
			register_setting( 'adxbyms_settings', "adxbyms_responsive_block_{$i}_enabled", array( 'sanitize_callback' => array( $this, 'sanitize_option' ) ) );
			register_setting( 'adxbyms_settings', "adxbyms_responsive_block_{$i}_network_code", array( 'sanitize_callback' => 'sanitize_text_field' ) );
			register_setting( 'adxbyms_settings', "adxbyms_responsive_block_{$i}_insertion", array( 'sanitize_callback' => 'sanitize_text_field' ) );
			register_setting( 'adxbyms_settings', "adxbyms_responsive_block_{$i}_offset", array( 'sanitize_callback' => 'sanitize_text_field' ) );
			register_setting( 'adxbyms_settings', "adxbyms_responsive_block_{$i}_alignment", array( 'sanitize_callback' => 'sanitize_text_field' ) );
			register_setting( 'adxbyms_settings', "adxbyms_responsive_block_{$i}_pages", array( 'sanitize_callback' => array( $this, 'sanitize_option' ) ) );
			register_setting( 'adxbyms_settings', "adxbyms_responsive_block_{$i}_devices", array( 'sanitize_callback' => array( $this, 'sanitize_option' ) ) );
			register_setting( 'adxbyms_settings', "adxbyms_responsive_block_{$i}_show_label", array( 'sanitize_callback' => array( $this, 'sanitize_option' ) ) );
		}

		// Register 5 flying carpet ad blocks
		for ( $i = 1; $i <= 5; $i++ ) {
			register_setting( 'adxbyms_settings', "adxbyms_flying_carpet_block_{$i}_enabled", array( 'sanitize_callback' => array( $this, 'sanitize_option' ) ) );
			register_setting( 'adxbyms_settings', "adxbyms_flying_carpet_block_{$i}_network_code", array( 'sanitize_callback' => 'sanitize_text_field' ) );
			register_setting( 'adxbyms_settings', "adxbyms_flying_carpet_block_{$i}_insertion", array( 'sanitize_callback' => 'sanitize_text_field' ) );
			register_setting( 'adxbyms_settings', "adxbyms_flying_carpet_block_{$i}_offset", array( 'sanitize_callback' => 'sanitize_text_field' ) );
			register_setting( 'adxbyms_settings', "adxbyms_flying_carpet_block_{$i}_alignment", array( 'sanitize_callback' => 'sanitize_text_field' ) );
			register_setting( 'adxbyms_settings', "adxbyms_flying_carpet_block_{$i}_pages", array( 'sanitize_callback' => array( $this, 'sanitize_option' ) ) );
			register_setting( 'adxbyms_settings', "adxbyms_flying_carpet_block_{$i}_devices", array( 'sanitize_callback' => array( $this, 'sanitize_option' ) ) );
		}
	}

	/**
	 * Safe default settings values helper.
	 */
	public function sanitize_option( $value ) {
		if ( is_array( $value ) ) {
			return array_map( 'sanitize_text_field', $value );
		}
		if ( 'true' === $value || 'false' === $value ) {
			return $value;
		}
		return sanitize_text_field( $value );
	}

	/**
	 * Sanitize raw custom HTML/JS ad codes safely.
	 */
	public function sanitize_raw_code( $value ) {
		if ( current_user_can( 'unfiltered_html' ) ) {
			return $value; // Administrators with unrestricted HTML can paste raw codes directly
		}

		// Strict security sandbox: strip unsafe nodes, allow only essential elements
		$allowed = array(
			'div'      => array(
				'id'     => true,
				'class'  => true,
				'style'  => true,
				'data-*' => true,
			),
			'span'     => array(
				'id'     => true,
				'class'  => true,
				'style'  => true,
				'data-*' => true,
			),
			'ins'      => array(
				'class'  => true,
				'style'  => true,
				'data-*' => true,
				'id'     => true,
			),
			'noscript' => array(),
		);

		return wp_kses( $value, $allowed );
	}

	/**
	 * Add Settings Page to WordPress Admin.
	 */
	public function add_settings_menu() {
		add_menu_page(
			__( 'AdX Ad Inserter', 'adx-ad-inserter' ),
			__( 'AdX Ad Inserter', 'adx-ad-inserter' ),
			'manage_options',
			'adx-ad-inserter',
			array( $this, 'render_settings_page' ),
			'dashicons-megaphone',
			59
		);
	}

	/**
	 * Render the settings template page.
	 */
	public function render_settings_page() {
		// Double check capabilities
		if ( ! current_user_can( 'manage_options' ) ) {
			wp_die( esc_html__( 'You do not have sufficient permissions to access this page.', 'adx-ad-inserter' ) );
		}

		require_once ADXBYMS_PATH . 'templates/settings-page.php';
	}

	/**
	 * Handle incoming registration callback from Monetiscope.
	 */
	public function handle_setup_registration() {
		if ( ! current_user_can( 'manage_options' ) ) {
			return;
		}

		if ( isset( $_GET['page'] ) && 'adx-ad-inserter' === $_GET['page'] && isset( $_GET['registered'] ) && '1' === $_GET['registered'] ) {
			update_option( 'ms_setup_completed', '1' );
			set_transient( 'ms_setup_success_notice', '1', 60 );
			wp_safe_redirect( admin_url( 'admin.php?page=adx-ad-inserter' ) );
			exit;
		}
	}

	/**
	 * Start output buffer to capture all third-party admin notices on our plugin page.
	 * Runs at priority -100 (before any notice is output).
	 */
	public function notices_buffer_start() {
		if ( ! isset( $_GET['page'] ) || 'adx-ad-inserter' !== $_GET['page'] ) {
			return;
		}
		ob_start();
	}

	/**
	 * Discard the buffered third-party notices on our plugin page.
	 * Runs at priority PHP_INT_MAX (after all notices have been output).
	 */
	public function notices_buffer_end() {
		if ( ! isset( $_GET['page'] ) || 'adx-ad-inserter' !== $_GET['page'] ) {
			return;
		}
		ob_end_clean(); // Discard ALL captured third-party notices.
		// Now output our own notice directly, outside the buffer scope.
		$this->display_setup_notices();
	}

	/**
	 * Display success notice after registration.
	 */
	public function display_setup_notices() {
		if ( get_transient( 'ms_setup_success_notice' ) ) {
			?>
			<div class="notice notice-success is-dismissible ms-admin-notice">
				<p><strong><?php esc_html_e( 'Thanks for registering with Monetiscope.', 'adx-ad-inserter' ); ?></strong></p>
			</div>
			<?php
			delete_transient( 'ms_setup_success_notice' );
		}
	}

	/**
	 * Suppress third-party plugin pointer popups and overlays on our plugin page.
	 * Other plugins (e.g. SureForms, Rank Math) inject floating overlays into every
	 * admin page. We dequeue their pointer scripts on our own page to keep the UI clean.
	 *
	 * @param string $hook Current admin page hook.
	 */
	public function suppress_third_party_overlays( $hook ) {
		$our_page    = 'toplevel_page_adx-ad-inserter';
		$is_our_page = ( $our_page === $hook ) ||
		               ( isset( $_GET['page'] ) && 'adx-ad-inserter' === $_GET['page'] );

		if ( ! $is_our_page ) {
			return;
		}

		// Dequeue WordPress core admin pointer scripts (used by many plugins for overlays).
		wp_dequeue_script( 'wp-pointer' );
		wp_dequeue_style( 'wp-pointer' );
	}

	/**
	 * Handle "Remind Me Later" AJAX action.
	 */
	public function ajax_remind_later() {
		check_ajax_referer( 'ms_setup_nonce', 'nonce' );
		
		if ( ! current_user_can( 'manage_options' ) ) {
			wp_send_json_error( array( 'message' => 'Unauthorized' ) );
		}

		update_option( 'ms_setup_remind_later_time', time() );
		wp_send_json_success();
	}

	/**
	 * Handle "Already Registered" AJAX action.
	 */
	public function ajax_already_registered() {
		check_ajax_referer( 'ms_setup_nonce', 'nonce' );
		
		if ( ! current_user_can( 'manage_options' ) ) {
			wp_send_json_error( array( 'message' => 'Unauthorized' ) );
		}

		update_option( 'ms_setup_completed', '1' );
		wp_send_json_success();
	}

	/**
	 * Enqueue Admin Scripts and CSS Assets.
	 */
	public function enqueue_admin_assets( $hook ) {
		if ( 'toplevel_page_adx-ad-inserter' !== $hook && 'adx-ad-inserter' !== $hook ) {
			if ( ! isset( $_GET['page'] ) || 'adx-ad-inserter' !== $_GET['page'] ) {
				return;
			}
		}

		$css_version = ADXBYMS_VERSION . '.' . ( file_exists( ADXBYMS_PATH . 'assets/css/admin.css' ) ? filemtime( ADXBYMS_PATH . 'assets/css/admin.css' ) : time() );
		$js_version  = ADXBYMS_VERSION . '.' . ( file_exists( ADXBYMS_PATH . 'assets/js/admin.js' ) ? filemtime( ADXBYMS_PATH . 'assets/js/admin.js' ) : time() );

		wp_enqueue_style(
			'adxbyms-admin-css',
			ADXBYMS_URL_MODULAR . 'assets/css/admin.css',
			array(),
			$css_version
		);

		wp_enqueue_script(
			'adxbyms-admin-js',
			ADXBYMS_URL_MODULAR . 'assets/js/admin.js',
			array( 'jquery' ),
			$js_version,
			true
		);

		wp_localize_script(
			'adxbyms-admin-js',
			'adxbyms_strings',
			array(
				'pluginActive'   => __( 'Plugin Active', 'adx-ad-inserter' ),
				'pluginInactive' => __( 'Plugin Inactive', 'adx-ad-inserter' ),
				'setupNonce'     => wp_create_nonce( 'ms_setup_nonce' ),
				'ajaxUrl'        => admin_url( 'admin-ajax.php' ),
			)
		);
	}
}