<?php
/**
 * wp-admin settings page.
 *
 * Renders the "Connect aisthetix" button, the status line, placement options,
 * and the privacy disclosure. Uses the WordPress Settings API for the
 * configurable options and nonce-protected admin-post actions for Connect.
 *
 * @package Aisthetix\TryOn
 */

namespace Aisthetix\TryOn;

defined( 'ABSPATH' ) || exit;

/**
 * Admin settings page.
 */
class Settings {

	/**
	 * Menu/page slug.
	 *
	 * @var string
	 */
	const PAGE_SLUG = 'aisthetix-tryon';

	/**
	 * Settings group / option name.
	 *
	 * @var string
	 */
	const OPTION_GROUP = 'aisthetix_tryon_settings_group';

	/**
	 * Status component.
	 *
	 * @var Status
	 */
	private $status;

	/**
	 * Connect component.
	 *
	 * @var Connect
	 */
	private $connect;

	/**
	 * Constructor.
	 *
	 * @param Status  $status  Status component.
	 * @param Connect $connect Connect component.
	 */
	public function __construct( Status $status, Connect $connect ) {
		$this->status  = $status;
		$this->connect = $connect;
	}

	/**
	 * Register hooks.
	 *
	 * @return void
	 */
	public function init() {
		add_action( 'admin_menu', array( $this, 'register_menu' ) );
		add_action( 'admin_init', array( $this, 'register_settings' ) );
		add_action( 'admin_notices', array( $this, 'render_notices' ) );
	}

	/**
	 * Add the settings page under the WooCommerce menu.
	 *
	 * @return void
	 */
	public function register_menu() {
		add_submenu_page(
			'woocommerce',
			__( 'aisthetix Try-On', 'aisthetix-virtual-try-on' ),
			__( 'aisthetix Try-On', 'aisthetix-virtual-try-on' ),
			'manage_woocommerce',
			self::PAGE_SLUG,
			array( $this, 'render_page' )
		);
	}

	/**
	 * Register the settings field group with sanitisation.
	 *
	 * @return void
	 */
	public function register_settings() {
		register_setting(
			self::OPTION_GROUP,
			Plugin::OPTION_SETTINGS,
			array(
				'type'              => 'array',
				'sanitize_callback' => array( $this, 'sanitize_settings' ),
				'default'           => array(
					'placement'               => 'after_add_to_cart',
					'button_text'             => '',
					'unavailable_title'       => '',
					'unavailable_message'     => '',
					'unavailable_button_text' => '',
					'unavailable_button_url'  => '',
					'enable_analytics'        => false,
					'enable_session_replay'   => false,
				),
			)
		);
	}

	/**
	 * Sanitise the settings array on save.
	 *
	 * @param array $input Raw input.
	 * @return array Clean settings.
	 */
	public function sanitize_settings( $input ) {
		$clean = array();

		$allowed_placements = array( 'after_add_to_cart', 'manual' );
		$placement          = isset( $input['placement'] ) ? sanitize_text_field( $input['placement'] ) : 'after_add_to_cart';
		$clean['placement'] = in_array( $placement, $allowed_placements, true ) ? $placement : 'after_add_to_cart';

		$clean['button_text'] = isset( $input['button_text'] ) ? sanitize_text_field( $input['button_text'] ) : '';

		$clean['unavailable_title'] = isset( $input['unavailable_title'] )
			? wp_html_excerpt( sanitize_text_field( $input['unavailable_title'] ), 80, '' )
			: '';
		$clean['unavailable_message'] = isset( $input['unavailable_message'] )
			? wp_html_excerpt( sanitize_textarea_field( $input['unavailable_message'] ), 240, '' )
			: '';
		$clean['unavailable_button_text'] = isset( $input['unavailable_button_text'] )
			? wp_html_excerpt( sanitize_text_field( $input['unavailable_button_text'] ), 40, '' )
			: '';

		// The shopper CTA may only remain on this merchant's own site. This prevents
		// a compromised/admin-pasted setting from turning the widget into an open redirect.
		$url = isset( $input['unavailable_button_url'] ) ? esc_url_raw( $input['unavailable_button_url'] ) : '';
		if ( $url ) {
			$home_host = wp_parse_url( home_url(), PHP_URL_HOST );
			$url_host  = wp_parse_url( $url, PHP_URL_HOST );
			if ( ! $url_host || strtolower( $url_host ) !== strtolower( $home_host ) ) {
				$url = '';
			}
		}
		$clean['unavailable_button_url'] = $url;

		$clean['enable_analytics'] = ! empty( $input['enable_analytics'] );
		$clean['enable_session_replay'] = ! empty( $input['enable_session_replay'] );

		return $clean;
	}

	/**
	 * Render queued admin notices from the Connect flow.
	 *
	 * @return void
	 */
	public function render_notices() {
		// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only notice flag set by our own redirect.
		$notice = isset( $_GET['aisthetix_notice'] ) ? sanitize_text_field( wp_unslash( $_GET['aisthetix_notice'] ) ) : '';
		$map    = array(
			'connect_success'        => array( 'success', __( 'Connected to aisthetix successfully.', 'aisthetix-virtual-try-on' ) ),
			'disconnected'           => array( 'success', __( 'Disconnected from aisthetix.', 'aisthetix-virtual-try-on' ) ),
			'connect_state_error'    => array( 'error', __( 'Connect failed: the security check did not match. Please try again.', 'aisthetix-virtual-try-on' ) ),
			'connect_exchange_error' => array( 'error', __( 'Connect failed: could not exchange the code for keys. Please try again.', 'aisthetix-virtual-try-on' ) ),
		);

		if ( isset( $map[ $notice ] ) ) {
			list( $type, $message ) = $map[ $notice ];
			printf(
				'<div class="notice notice-%1$s is-dismissible"><p>%2$s</p></div>',
				esc_attr( $type ),
				esc_html( $message )
			);
		}

		if ( ! current_user_can( 'manage_woocommerce' ) || ! Plugin::is_connected() ) {
			return;
		}
		$status = $this->status->get();
		if ( empty( $status['trial'] ) || ! is_array( $status['trial'] ) ) {
			return;
		}

		$remaining = isset( $status['trial']['remaining'] ) ? (int) $status['trial']['remaining'] : 0;
		if ( $remaining > 10 ) {
			return;
		}

		$plan     = ! empty( $status['plan'] ) ? $status['plan'] : __( 'paid plan', 'aisthetix-virtual-try-on' );
		$included = isset( $status['includedTryOns'] ) ? (int) $status['includedTryOns'] : 0;
		$url      = Plugin::brain_url() . '/dashboard/billing';
		if ( $remaining > 0 ) {
			$message = sprintf(
				/* translators: 1: remaining trial try-ons, 2: plan name. */
				__( 'Your aisthetix trial has %1$d try-ons remaining. Start %2$s now to keep virtual try-on available without interruption.', 'aisthetix-virtual-try-on' ),
				$remaining,
				$plan
			);
			$type = 'warning';
		} else {
			$message = sprintf(
				/* translators: 1: plan name, 2: monthly try-on allowance. */
				__( 'Virtual try-on is currently paused. Your 50 trial try-ons have been used. Start %1$s now to restore it and receive %2$d monthly try-ons.', 'aisthetix-virtual-try-on' ),
				$plan,
				$included
			);
			$type = 'error';
		}

		printf(
			'<div class="notice notice-%1$s"><p><strong>%2$s</strong> <a class="button button-primary" style="margin-left:8px" href="%3$s" target="_blank" rel="noopener noreferrer">%4$s</a></p></div>',
			esc_attr( $type ),
			esc_html( $message ),
			esc_url( $url ),
			esc_html( sprintf( __( 'Start %s now', 'aisthetix-virtual-try-on' ), $plan ) )
		);
	}

	/**
	 * Render the settings page.
	 *
	 * @return void
	 */
	public function render_page() {
		if ( ! current_user_can( 'manage_woocommerce' ) ) {
			return;
		}

		$connected = Plugin::is_connected();
		// On the admin page, force-refresh so plan state is current right after a
		// plan change; the storefront keeps its cached ~10-min read.
		$status    = $connected ? $this->status->refresh() : $this->status->get();
		?>
		<div class="wrap">
			<h1><?php echo esc_html__( 'aisthetix Virtual Try-On', 'aisthetix-virtual-try-on' ); ?></h1>

			<h2><?php echo esc_html__( 'Connection', 'aisthetix-virtual-try-on' ); ?></h2>
			<table class="form-table" role="presentation">
				<tr>
					<th scope="row"><?php echo esc_html__( 'Status', 'aisthetix-virtual-try-on' ); ?></th>
					<td><?php $this->render_status_line( $connected, $status ); ?></td>
				</tr>
				<tr>
					<th scope="row"><?php echo esc_html__( 'Account', 'aisthetix-virtual-try-on' ); ?></th>
					<td>
						<?php if ( $connected ) : ?>
							<a href="<?php echo esc_url( $this->connect->disconnect_url() ); ?>" class="button button-secondary">
								<?php echo esc_html__( 'Disconnect', 'aisthetix-virtual-try-on' ); ?>
							</a>
							<p class="description">
								<?php echo esc_html__( 'Your store is linked to aisthetix. Keys are stored securely on your server.', 'aisthetix-virtual-try-on' ); ?>
							</p>
						<?php else : ?>
							<a href="<?php echo esc_url( $this->connect->start_url() ); ?>" class="button button-primary button-hero">
								<?php echo esc_html__( 'Connect aisthetix', 'aisthetix-virtual-try-on' ); ?>
							</a>
							<p class="description">
								<?php echo esc_html__( 'One click to link your store. You will sign in (Google or email code) and approve — keys are provisioned automatically; you never copy or paste them.', 'aisthetix-virtual-try-on' ); ?>
							</p>
						<?php endif; ?>
					</td>
				</tr>
			</table>

			<?php if ( $connected ) : ?>
				<?php $this->render_plan_section( $status ); ?>

				<form method="post" action="options.php">
					<?php settings_fields( self::OPTION_GROUP ); ?>
					<h2><?php echo esc_html__( 'Placement', 'aisthetix-virtual-try-on' ); ?></h2>
					<table class="form-table" role="presentation">
						<tr>
							<th scope="row"><?php echo esc_html__( 'Button placement', 'aisthetix-virtual-try-on' ); ?></th>
							<td>
								<?php $placement = Plugin::get_setting( 'placement', 'after_add_to_cart' ); ?>
								<fieldset>
									<label>
										<input type="radio" name="<?php echo esc_attr( Plugin::OPTION_SETTINGS ); ?>[placement]" value="after_add_to_cart" <?php checked( 'after_add_to_cart', $placement ); ?> />
										<?php echo esc_html__( 'Automatic — after the Add to cart button (recommended)', 'aisthetix-virtual-try-on' ); ?>
									</label>
									<br />
									<label>
										<input type="radio" name="<?php echo esc_attr( Plugin::OPTION_SETTINGS ); ?>[placement]" value="manual" <?php checked( 'manual', $placement ); ?> />
										<?php echo esc_html__( 'Manual — I will place it myself (shortcode, block, or Elementor widget)', 'aisthetix-virtual-try-on' ); ?>
									</label>
								</fieldset>
								<p class="description">
									<?php
									echo wp_kses_post(
										sprintf(
											/* translators: %s: shortcode example. */
											__( 'Universal fallback: paste %s anywhere on a product page.', 'aisthetix-virtual-try-on' ),
											'<code>[aisthetix_tryon]</code>'
										)
									);
									?>
								</p>
							</td>
						</tr>
						<tr>
							<th scope="row">
								<label for="aisthetix_button_text"><?php echo esc_html__( 'Button label', 'aisthetix-virtual-try-on' ); ?></label>
							</th>
							<td>
								<input
									type="text"
									id="aisthetix_button_text"
									name="<?php echo esc_attr( Plugin::OPTION_SETTINGS ); ?>[button_text]"
									class="regular-text"
									value="<?php echo esc_attr( Plugin::get_setting( 'button_text', '' ) ); ?>"
									placeholder="<?php echo esc_attr__( 'Try it on', 'aisthetix-virtual-try-on' ); ?>"
								/>
								<p class="description"><?php echo esc_html__( 'Leave empty to use the default localized label.', 'aisthetix-virtual-try-on' ); ?></p>
							</td>
						</tr>
					</table>

					<h2><?php echo esc_html__( 'When virtual try-on is unavailable', 'aisthetix-virtual-try-on' ); ?></h2>
					<p class="description" style="max-width:640px;">
						<?php echo esc_html__( 'The try-on button is normally hidden when access is paused. If a shopper opened it just before the status refreshed, this friendly message is shown instead. Leave fields empty to use the defaults.', 'aisthetix-virtual-try-on' ); ?>
					</p>
					<table class="form-table" role="presentation">
						<tr>
							<th scope="row"><label for="aisthetix_unavailable_title"><?php echo esc_html__( 'Heading', 'aisthetix-virtual-try-on' ); ?></label></th>
							<td>
								<input type="text" maxlength="80" id="aisthetix_unavailable_title" name="<?php echo esc_attr( Plugin::OPTION_SETTINGS ); ?>[unavailable_title]" class="regular-text" value="<?php echo esc_attr( Plugin::get_setting( 'unavailable_title', '' ) ); ?>" placeholder="<?php echo esc_attr__( 'Virtual try-on will be back soon', 'aisthetix-virtual-try-on' ); ?>" />
							</td>
						</tr>
						<tr>
							<th scope="row"><label for="aisthetix_unavailable_message"><?php echo esc_html__( 'Message', 'aisthetix-virtual-try-on' ); ?></label></th>
							<td>
								<textarea maxlength="240" rows="3" id="aisthetix_unavailable_message" name="<?php echo esc_attr( Plugin::OPTION_SETTINGS ); ?>[unavailable_message]" class="large-text" placeholder="<?php echo esc_attr__( 'We’re refreshing the virtual fitting room. Please continue browsing and check back shortly.', 'aisthetix-virtual-try-on' ); ?>"><?php echo esc_textarea( Plugin::get_setting( 'unavailable_message', '' ) ); ?></textarea>
							</td>
						</tr>
						<tr>
							<th scope="row"><label for="aisthetix_unavailable_button_text"><?php echo esc_html__( 'Button label', 'aisthetix-virtual-try-on' ); ?></label></th>
							<td>
								<input type="text" maxlength="40" id="aisthetix_unavailable_button_text" name="<?php echo esc_attr( Plugin::OPTION_SETTINGS ); ?>[unavailable_button_text]" class="regular-text" value="<?php echo esc_attr( Plugin::get_setting( 'unavailable_button_text', '' ) ); ?>" placeholder="<?php echo esc_attr__( 'Continue shopping', 'aisthetix-virtual-try-on' ); ?>" />
							</td>
						</tr>
						<tr>
							<th scope="row"><label for="aisthetix_unavailable_button_url"><?php echo esc_html__( 'Button URL', 'aisthetix-virtual-try-on' ); ?></label></th>
							<td>
								<input type="url" id="aisthetix_unavailable_button_url" name="<?php echo esc_attr( Plugin::OPTION_SETTINGS ); ?>[unavailable_button_url]" class="regular-text" value="<?php echo esc_attr( Plugin::get_setting( 'unavailable_button_url', '' ) ); ?>" placeholder="<?php echo esc_attr( home_url( '/shop/' ) ); ?>" />
								<p class="description"><?php echo esc_html__( 'Optional. Must point to this website. When empty, the button simply closes the message.', 'aisthetix-virtual-try-on' ); ?></p>
							</td>
						</tr>
					</table>

					<h2><?php echo esc_html__( 'Analytics &amp; consent', 'aisthetix-virtual-try-on' ); ?></h2>
					<table class="form-table" role="presentation">
						<tr>
							<th scope="row"><?php echo esc_html__( 'Anonymous analytics', 'aisthetix-virtual-try-on' ); ?></th>
							<td>
								<label>
									<input
										type="checkbox"
										name="<?php echo esc_attr( Plugin::OPTION_SETTINGS ); ?>[enable_analytics]"
										value="1"
										<?php checked( true, Plugin::analytics_enabled() ); ?>
									/>
									<?php echo esc_html__( 'Enable anonymous analytics (off by default)', 'aisthetix-virtual-try-on' ); ?>
								</label>
								<p class="description" style="max-width:640px;">
									<?php
									echo esc_html__(
										'When on, the plugin sets a first-party visitor cookie (aisthetix_vid, ~13 months) and sends anonymous view, add-to-cart, try-on, and order events to the aisthetix service to measure try-on performance. Off by default: nothing is sent beyond the shopper-initiated try-on. If your site uses a consent banner (Cookiebot, Complianz, or Google Consent Mode), the shopper\'s analytics choice is also honored for the browser-side events.',
										'aisthetix-virtual-try-on'
									);
									?>
								</p>
							</td>
						</tr>
						<tr>
							<th scope="row"><?php echo esc_html__( 'Session replay', 'aisthetix-virtual-try-on' ); ?></th>
							<td>
								<label>
									<input
										type="checkbox"
										name="<?php echo esc_attr( Plugin::OPTION_SETTINGS ); ?>[enable_session_replay]"
										value="1"
										<?php checked( true, (bool) Plugin::get_setting( 'enable_session_replay', false ) ); ?>
									/>
									<?php echo esc_html__( 'Allow aisthetix to record the try-on window (off by default)', 'aisthetix-virtual-try-on' ); ?>
								</label>
								<p class="description" style="max-width:640px;">
									<?php
									echo esc_html__(
										'When on, aisthetix records what happens inside the try-on window so it can see where shoppers get stuck. Recording covers only that window, never the rest of your page, and it starts only after a consent banner on your site explicitly grants analytics consent — the setting above does not enable it. Every image and every form field is masked before recording, so the shopper\'s photo and their try-on result are never captured. Recordings are processed by PostHog in the European Union on aisthetix\'s behalf.',
										'aisthetix-virtual-try-on'
									);
									?>
								</p>
							</td>
						</tr>
					</table>
					<?php submit_button(); ?>
				</form>
			<?php endif; ?>

			<h2><?php echo esc_html__( 'Privacy', 'aisthetix-virtual-try-on' ); ?></h2>
			<p class="description" style="max-width:640px;">
				<?php
				echo esc_html__(
					'Shopper photos are uploaded directly from the browser to the aisthetix service for processing and are never stored on your WordPress server. The try-on engine processes images transiently and does not persist them; the shopper\'s photo and results live only in their own browser storage.',
					'aisthetix-virtual-try-on'
				);
				?>
			</p>
		</div>
		<?php
	}

	/**
	 * Render the "Plan & usage" section: plan state + calls to action.
	 *
	 * Only shown when connected. Uses the already-fetched status (active/plan) to
	 * pick the messaging; the buttons deep-link to the aisthetix dashboard where
	 * the merchant picks a plan or manages billing. No plan means the storefront
	 * trigger is hidden (the brain reports active=false), so we surface that
	 * plainly and route them to pick one.
	 *
	 * @param array $status Normalised status payload from {@see Status::get()}.
	 * @return void
	 */
	private function render_plan_section( $status ) {
		$billing_url   = Plugin::brain_url() . '/dashboard/billing';
		$dashboard_url = Plugin::brain_url() . '/dashboard';

		$has_error = ! empty( $status['error'] );
		$active    = ! $has_error && ! empty( $status['active'] );
		?>
		<h2><?php echo esc_html__( 'Plan & usage', 'aisthetix-virtual-try-on' ); ?></h2>

		<?php if ( $has_error ) : ?>
			<p class="description" style="max-width:640px;">
				<?php echo esc_html__( 'Could not reach the aisthetix service to check your plan — please try again shortly.', 'aisthetix-virtual-try-on' ); ?>
			</p>
			<p>
				<a href="<?php echo esc_url( $dashboard_url ); ?>" class="button button-secondary" target="_blank" rel="noopener noreferrer">
					<?php echo esc_html__( 'Open dashboard', 'aisthetix-virtual-try-on' ); ?>
				</a>
			</p>
		<?php elseif ( $active ) : ?>
			<p><?php echo esc_html__( 'Your plan is active. Manage billing or review usage and uplift on your dashboard.', 'aisthetix-virtual-try-on' ); ?></p>
			<p>
				<a href="<?php echo esc_url( $billing_url ); ?>" class="button button-primary" target="_blank" rel="noopener noreferrer">
					<?php echo esc_html__( 'Manage plan', 'aisthetix-virtual-try-on' ); ?>
				</a>
				<a href="<?php echo esc_url( $dashboard_url ); ?>" class="button button-secondary" target="_blank" rel="noopener noreferrer">
					<?php echo esc_html__( 'Open dashboard', 'aisthetix-virtual-try-on' ); ?>
				</a>
			</p>
		<?php else : ?>
			<div class="notice notice-warning inline" style="margin:8px 0;max-width:640px;">
				<p>
					<strong><?php echo esc_html__( 'No active plan.', 'aisthetix-virtual-try-on' ); ?></strong>
					<?php echo esc_html__( 'The “Try it on” button stays hidden on your store until you start a plan.', 'aisthetix-virtual-try-on' ); ?>
				</p>
			</div>
			<p>
				<a href="<?php echo esc_url( $billing_url ); ?>" class="button button-primary" target="_blank" rel="noopener noreferrer">
					<?php echo esc_html__( 'Pick a plan', 'aisthetix-virtual-try-on' ); ?>
				</a>
				<a href="<?php echo esc_url( $dashboard_url ); ?>" class="button button-secondary" target="_blank" rel="noopener noreferrer">
					<?php echo esc_html__( 'Open dashboard', 'aisthetix-virtual-try-on' ); ?>
				</a>
			</p>
		<?php endif; ?>

		<p class="description" style="max-width:640px;">
			<?php echo esc_html__( 'Card required to start, but you are in control — we email you before your trial ends, and you can cancel anytime from your dashboard. No surprise charges.', 'aisthetix-virtual-try-on' ); ?>
		</p>
		<?php
	}

	/**
	 * Render the human-readable status line.
	 *
	 * Example: "Try-on: active — 240/300, resets Jul 1".
	 *
	 * @param bool  $connected Whether keys are present.
	 * @param array $status    Normalised status payload from {@see Status::get()}.
	 * @return void
	 */
	private function render_status_line( $connected, $status ) {
		if ( ! $connected ) {
			printf(
				'<span style="color:#646970;">%s</span>',
				esc_html__( 'Not connected', 'aisthetix-virtual-try-on' )
			);
			return;
		}

		if ( ! empty( $status['error'] ) ) {
			printf(
				'<span style="color:#b32d2e;">%s</span> <span class="description">(%s)</span>',
				esc_html__( 'Connected, but could not reach the service.', 'aisthetix-virtual-try-on' ),
				esc_html( $status['error'] )
			);
			return;
		}

		$active = ! empty( $status['active'] ) && ! empty( $status['withinQuota'] );
		$dot    = $active ? '#46b450' : '#dba617';
		$label  = $active ? __( 'active', 'aisthetix-virtual-try-on' ) : __( 'paused (quota reached)', 'aisthetix-virtual-try-on' );

		$resets = '';
		if ( ! empty( $status['resetsAt'] ) ) {
			$ts = strtotime( $status['resetsAt'] );
			if ( $ts ) {
				$resets = date_i18n( get_option( 'date_format' ), $ts );
			}
		}

		// "Try-on: active — 240/300, resets Jul 1".
		$line = sprintf(
			/* translators: 1: state label, 2: remaining count, 3: reset date. */
			__( 'Try-on: %1$s — %2$s remaining%3$s', 'aisthetix-virtual-try-on' ),
			$label,
			number_format_i18n( (int) $status['remaining'] ),
			$resets ? sprintf(
				/* translators: %s: reset date. */
				__( ', resets %s', 'aisthetix-virtual-try-on' ),
				$resets
			) : ''
		);

		printf(
			'<span style="display:inline-block;width:10px;height:10px;border-radius:50%%;background:%1$s;margin-right:6px;vertical-align:middle;"></span><strong>%2$s</strong>',
			esc_attr( $dot ),
			esc_html( $line )
		);

		if ( ! empty( $status['plan'] ) ) {
			printf(
				' <span class="description">(%s)</span>',
				esc_html( $status['plan'] )
			);
		}
	}
}