<?php
// Exit if accessed directly
if ( ! defined( 'ABSPATH' ) ) exit;

/**
 * Public Gift Voucher page (?myvoucher={uuid}) for the addon_gift_cards flow.
 *
 * It is both the purchase-confirmation page AND the return target every payment
 * gateway redirects the buyer to after paying. On load it processes any gateway
 * return present in the query (idempotent + server-side verified), issues the
 * voucher (markPaid), and renders a confirmation. This is a separate interceptor
 * from front-view-booking.php — the booking payment flow is untouched.
 *
 * TRUST MODEL (a voucher is bearer money, so we are stricter than bookings):
 *  - Stripe       : PaymentIntent re-read from the API; must be `succeeded`, be
 *                   the intent we created for THIS voucher, and match amount+currency.
 *  - PayPal       : validated + issued in the ajax handler (amount+currency checked).
 *  - Mollie/Square: driver re-reads the payment from the API.
 *  - Mercadopago  : payment re-read from the API (status approved, reference, amount).
 *  - Xendit       : invoice re-read from the API (PAID).
 *  - Upayments    : API status check when possible; anti-replay token otherwise.
 *  - Redsys       : HMAC signature of the response verified with the merchant key,
 *                   on the URLOK redirect (when Redsys sends the params) or on the
 *                   server-to-server notification (always sent). The token alone
 *                   is NOT enough: it is visible inside Ds_MerchantParameters.
 */
class ALEXR_View_voucher {

	public function __construct() {
		add_action( 'template_redirect', array( $this, 'redirect_view' ) );
		// Server-to-server gateway notifications routed by PRO's payment hook
		// (?ar_payment_hook=alexr_gateway_xxx&booking=gv...).
		add_action( 'alexr_voucher_gateway_notification', array( $this, 'gateway_notification' ), 10, 2 );
	}

	public function redirect_view() {
		if ( ! isset( $_GET[ ALEXR_GET_VIEW_VOUCHER ] ) ) {
			return;
		}

		$uuid    = sanitize_text_field( $_GET[ ALEXR_GET_VIEW_VOUCHER ] );
		$voucher = \Alexr\Models\Voucher::where( 'uuid', $uuid )->first();

		if ( ! $voucher ) {
			wp_redirect( '/' );
			exit;
		}

		// Close the payment cycle if this is a gateway return.
		$this->processGatewayReturn( $voucher );

		ob_start();
		$this->renderConfirmation( $voucher );
		die( ob_get_clean() );
	}

	/**
	 * Server-to-server notification for a voucher (PRO routes it here when the
	 * `booking` uuid starts with 'gv'). Redsys posts the signed response params.
	 */
	public function gateway_notification( $gateway_param, $uuid ) {
		$voucher = \Alexr\Models\Voucher::where( 'uuid', sanitize_text_field( $uuid ) )->first();
		if ( ! $voucher || $voucher->status !== \Alexr\Enums\VoucherStatus::PENDING_PAYMENT ) {
			return;
		}
		if ( ! alexr_gift_cards_enabled( $voucher->restaurant_id ) ) {
			return;
		}
		if ( $gateway_param === 'alexr_gateway_redsys' ) {
			$this->processRedsysSigned( $voucher, $_POST );
		}
	}

	/**
	 * Dispatch to the matching gateway return processor. Stripe returns with a
	 * ?payment_intent; the redirect gateways come back with
	 * ?alexr_gateway_{gw}=...&token=... (PayPal is issued in its ajax handler).
	 */
	protected function processGatewayReturn( $voucher ) {
		if ( $voucher->status !== \Alexr\Enums\VoucherStatus::PENDING_PAYMENT ) {
			return; // already issued / cancelled — nothing to process (idempotent)
		}
		if ( ! alexr_gift_cards_enabled( $voucher->restaurant_id ) ) {
			return; // addon not active: never issue
		}

		if ( isset( $_GET['payment_intent'] ) ) {
			$this->processStripe( $voucher, sanitize_text_field( $_GET['payment_intent'] ) );
			return;
		}

		if ( isset( $_GET['alexr_gateway_mercadopago'] ) ) { $this->processMercadopago( $voucher ); return; }
		if ( isset( $_GET['alexr_gateway_mollie'] ) )      { $this->processMollie( $voucher ); return; }
		if ( isset( $_GET['alexr_gateway_square'] ) )      { $this->processSquare( $voucher ); return; }
		if ( isset( $_GET['alexr_gateway_xendit'] ) )      { $this->processXendit( $voucher ); return; }
		if ( isset( $_GET['alexr_gateway_upayments'] ) )   { $this->processUpayments( $voucher ); return; }
		if ( isset( $_GET['alexr_gateway_redsys'] ) )      { $this->processRedsys( $voucher ); return; }
	}

	/**
	 * Stripe return: re-read the PaymentIntent from Stripe and require that it
	 * (a) succeeded, (b) is the intent persisted for THIS voucher, and (c) carries
	 * the voucher's amount and currency. Only then issue. Idempotent.
	 */
	protected function processStripe( $voucher, $intentId ) {
		if ( ! defined( 'ALEXR_PRO_VERSION' ) || ! class_exists( '\Alexr\Payments\GatewayStripe' ) ) {
			return;
		}

		// (b) the intent must be ours, for this voucher.
		$payment = \Alexr\Models\Payment::where( 'stripe_payment_intent_id', $intentId )
			->where( 'voucher_id', $voucher->id )
			->where( 'payment_type', 'stripe' )
			->first();
		if ( ! $payment ) {
			return;
		}

		try {
			$gateway = new \Alexr\Payments\GatewayStripe( $voucher->restaurant_id );
			\Stripe\Stripe::setApiKey( $gateway->getPrivateKey() );
			$intent = \Stripe\PaymentIntent::retrieve( $intentId );

			if ( ! $intent ) {
				return;
			}

			$payment->stripe_payment_status = $intent->status;

			if ( $intent->status !== 'succeeded' ) {
				// canceled / requires_payment_method → failed attempt, voucher stays pending
				if ( in_array( $intent->status, array( 'canceled' ), true ) ) {
					$payment->status = \Alexr\Enums\PaymentStatus::CANCELLED;
				}
				$payment->save();
				return;
			}

			// (c) amount + currency must match what the voucher costs.
			$expectedCents    = intval( $voucher->initial_amount );
			$expectedCurrency = strtolower( $voucher->currency ?: ( $voucher->restaurant ? $voucher->restaurant->currency : '' ) );
			$metaUuid         = isset( $intent->metadata['voucher_uuid'] ) ? (string) $intent->metadata['voucher_uuid'] : '';

			if ( intval( $intent->amount_received ) !== $expectedCents
			     || strtolower( (string) $intent->currency ) !== $expectedCurrency
			     || ( $metaUuid !== '' && $metaUuid !== $voucher->uuid ) ) {
				$this->storeCallback( $payment, 'verification_failed', array(
					'amount_received' => $intent->amount_received,
					'currency'        => $intent->currency,
					'metadata_uuid'   => $metaUuid,
				) );
				$payment->save();
				return;
			}

			$payment->status = \Alexr\Enums\PaymentStatus::SUCCEEDED;
			$payment->save();

			$this->issue( $voucher, $payment );
		} catch ( \Exception $e ) {
			// Leave the voucher pending; the buyer sees the pending message.
		}
	}

	/**
	 * Mercadopago return: the back_url carries the Mercadopago payment id. We
	 * re-read it from the API and require status=approved, external_reference =
	 * voucher uuid, and amount + currency equal to the voucher's. The anti-replay
	 * token is still a first gate.
	 */
	protected function processMercadopago( $voucher ) {
		if ( ! $this->tokenMatches( $voucher ) ) return;
		if ( ! class_exists( '\Alexr\Payments\GatewayMercadopago' ) ) return;

		$payment = $this->voucherPayment( $voucher, 'mercadopago' );
		if ( ! $payment ) return;

		$status = sanitize_text_field( $_GET['alexr_gateway_mercadopago'] );
		$mpId   = sanitize_text_field( $_GET['payment_id'] ?? ( $_GET['collection_id'] ?? '' ) );

		if ( $status === 'failure' ) {
			$payment->status = \Alexr\Enums\PaymentStatus::CANCELLED;
			$payment->save();
			$this->clearToken( $voucher );
			$this->cancel( $voucher );
			return;
		}

		if ( ! $mpId ) return; // pending without an id: keep waiting

		try {
			$gateway = new \Alexr\Payments\GatewayMercadopago( $voucher->restaurant_id );
			$mp      = $gateway->get_pago( $mpId );
			if ( ! $mp ) return;

			$mpStatus    = strtolower( (string) ( $mp->status ?? '' ) );
			$mpReference = (string) ( $mp->external_reference ?? '' );
			$mpAmount    = intval( round( floatval( $mp->transaction_amount ?? 0 ) * 100 ) );
			$mpCurrency  = strtoupper( (string) ( $mp->currency_id ?? '' ) );

			$expectedCurrency = strtoupper( $gateway->currency ?: $voucher->currency );
			$ok = $mpStatus === 'approved'
				&& $mpReference === $voucher->uuid
				&& $mpAmount === intval( $voucher->initial_amount )
				&& ( $mpCurrency === '' || $mpCurrency === $expectedCurrency );

			$this->storeCallback( $payment, 'mercadopago_result', array(
				'payment_id' => $mpId, 'status' => $mpStatus, 'amount' => $mpAmount, 'currency' => $mpCurrency,
			) );

			if ( $ok ) {
				$payment->status = \Alexr\Enums\PaymentStatus::SUCCEEDED;
				$payment->save();
				$this->clearToken( $voucher );
				$this->issue( $voucher, $payment );
			} elseif ( in_array( $mpStatus, array( 'rejected', 'cancelled', 'refunded', 'charged_back' ), true ) ) {
				$payment->status = \Alexr\Enums\PaymentStatus::CANCELLED;
				$payment->save();
				$this->clearToken( $voucher );
				$this->cancel( $voucher );
			} else {
				$payment->save(); // in_process / pending: keep waiting
			}
		} catch ( \Exception $e ) {}
	}

	/**
	 * Mollie return: re-verifies against the Mollie API by passing the voucher's
	 * Payment to the driver's get_gateway_payment (optional $payment param).
	 */
	protected function processMollie( $voucher ) {
		if ( ! $this->tokenMatches( $voucher ) ) return;
		if ( ! class_exists( '\Alexr\Payments\GatewayMollie' ) ) return;

		$payment = $this->voucherPayment( $voucher, 'mollie' );
		if ( ! $payment ) return;

		try {
			$gateway = new \Alexr\Payments\GatewayMollie( $voucher->restaurant_id );
			$gp      = $gateway->get_gateway_payment( $voucher, $payment );
			if ( ! $gp ) return;

			if ( $gp->isPaid() ) {
				$payment->status = \Alexr\Enums\PaymentStatus::SUCCEEDED;
				$this->storeCallback( $payment, 'payment', json_decode( json_encode( $gp ), true ) );
				$payment->save();
				$this->clearToken( $voucher );
				$this->issue( $voucher, $payment );
			} elseif ( $gp->isPending() ) {
				// leave pending
			} else {
				$payment->status = \Alexr\Enums\PaymentStatus::CANCELLED;
				$payment->save();
				$this->clearToken( $voucher );
				$this->cancel( $voucher );
			}
		} catch ( \Exception $e ) {}
	}

	/**
	 * Square return: re-verifies via the driver's get_gateway_payment (passing the
	 * voucher's Payment) and checks the order status.
	 */
	protected function processSquare( $voucher ) {
		if ( ! $this->tokenMatches( $voucher ) ) return;
		if ( ! class_exists( '\Alexr\Payments\GatewaySquare' ) ) return;

		$payment = $this->voucherPayment( $voucher, 'square' );
		if ( ! $payment ) return;

		try {
			$gateway = new \Alexr\Payments\GatewaySquare( $voucher->restaurant_id );
			$gp      = $gateway->get_gateway_payment( $voucher, $payment );
			if ( ! $gp ) return;

			$status = isset( $gp['status'] ) ? $gp['status'] : '';
			if ( $status === 'COMPLETED' || $status === 'PAID' ) {
				$payment->status = \Alexr\Enums\PaymentStatus::SUCCEEDED;
				$payment->save();
				$this->clearToken( $voucher );
				$this->issue( $voucher, $payment );
			} else {
				$payment->status = \Alexr\Enums\PaymentStatus::CANCELLED;
				$payment->save();
				$this->clearToken( $voucher );
				$this->cancel( $voucher );
			}
		} catch ( \Exception $e ) {}
	}

	/**
	 * Xendit return: re-verifies against the Xendit API (getInvoice must report
	 * PAID) — authoritative, so no token is needed. Finds the voucher's Payment by
	 * the external_id echoed in the return URL. (The Xendit webhook also issues
	 * the voucher — see ajax-xendit-actions.php — whichever arrives first wins.)
	 */
	protected function processXendit( $voucher ) {
		if ( ! class_exists( '\Alexr\Payments\GatewayXendit' ) ) return;

		$externalId = sanitize_text_field( $_GET['xendit_external_id'] ?? '' );
		$status     = strtolower( sanitize_text_field( $_GET['xendit_status'] ?? '' ) );
		if ( ! $externalId ) return;

		$payment = \Alexr\Models\Payment::where( 'payment_type', 'xendit' )
			->where( 'xendit_external_id', $externalId )
			->where( 'voucher_id', $voucher->id )
			->first();
		if ( ! $payment ) return;

		if ( $status === 'success' || $status === 'paid' ) {
			try {
				$gateway = new \Alexr\Payments\GatewayXendit( $voucher->restaurant_id );
				$invoice = $gateway->getInvoice( $payment->xendit_invoice_id );
				if ( $invoice && strtoupper( $invoice['status'] ?? '' ) === 'PAID'
				     && intval( round( floatval( $invoice['amount'] ?? 0 ) * 100 ) ) === intval( $payment->amount ) ) {
					$payment->status = \Alexr\Enums\PaymentStatus::SUCCEEDED;
					$payment->xendit_invoice_status = 'PAID';
					$this->storeCallback( $payment, 'callback', array( 'external_id' => $externalId, 'status' => $status ) );
					$payment->save();
					$this->issue( $voucher, $payment );
				}
			} catch ( \Exception $e ) {}
		} elseif ( $status === 'failed' || $status === 'failure' ) {
			$payment->status = \Alexr\Enums\PaymentStatus::FAILED;
			$payment->xendit_invoice_status = 'FAILED';
			$payment->save();
			$this->cancel( $voucher );
		}
	}

	/**
	 * Upayments return: gated by our anti-replay token (carried in the return
	 * URL given to the gateway) and, when Upayments echoes a payment_id, verified
	 * through the API (check-payment-status). Without an API answer we fall back
	 * to the token-gated `result` param, as the booking flow does.
	 */
	protected function processUpayments( $voucher ) {
		if ( ! $this->tokenMatches( $voucher ) ) return;

		$orderId   = sanitize_text_field( $_GET['upayments_order_id'] ?? '' );
		$result    = strtoupper( sanitize_text_field( $_GET['result'] ?? '' ) );
		$paymentId = sanitize_text_field( $_GET['payment_id'] ?? ( $_GET['paymentId'] ?? '' ) );

		$payment = null;
		if ( $orderId ) {
			$payment = \Alexr\Models\Payment::where( 'payment_type', 'upayments' )
				->where( 'upayments_order_id', $orderId )
				->where( 'voucher_id', $voucher->id )
				->first();
		}
		if ( ! $payment ) {
			$payment = \Alexr\Models\Payment::where( 'payment_type', 'upayments' )
				->where( 'voucher_id', $voucher->id )
				->last();
		}
		if ( ! $payment ) return;

		// API verification (best effort: the response shape is searched for a result/status).
		$apiResult = '';
		if ( $paymentId && class_exists( '\Alexr\Payments\GatewayUpayments' ) ) {
			try {
				$gateway  = new \Alexr\Payments\GatewayUpayments( $voucher->restaurant_id );
				$response = $gateway->checkPaymentStatus( $paymentId );
				$apiResult = strtoupper( (string) $this->findKeyDeep( $response, array( 'result', 'status', 'payment_status' ) ) );
				$this->storeCallback( $payment, 'check_payment_status', $response );
			} catch ( \Exception $e ) {}
		}

		$effective = $apiResult !== '' ? $apiResult : $result;

		if ( in_array( $effective, array( 'CAPTURED', 'SUCCESS', 'PAID', 'TRUE' ), true ) ) {
			$payment->status = \Alexr\Enums\PaymentStatus::SUCCEEDED;
			$payment->upayments_status = $effective;
			if ( $paymentId ) $payment->upayments_payment_id = $paymentId;
			$this->storeCallback( $payment, 'callback', array( 'order_id' => $orderId, 'result' => $result, 'api_result' => $apiResult ) );
			$payment->save();
			$this->clearToken( $voucher );
			$this->issue( $voucher, $payment );
		} elseif ( in_array( $effective, array( 'NOT CAPTURED', 'NOT_CAPTURED', 'FAILED', 'FAILURE', 'CANCELED', 'CANCELLED', 'FALSE' ), true ) ) {
			$payment->status = \Alexr\Enums\PaymentStatus::FAILED;
			$payment->upayments_status = $effective;
			$payment->save();
			$this->clearToken( $voucher );
			$this->cancel( $voucher );
		}
	}

	/**
	 * Redsys browser return (URLOK/URLKO). If Redsys appended the signed response
	 * parameters we verify them right here and issue; otherwise we only record the
	 * ko and leave the voucher pending for the signed server notification. The
	 * anti-replay token is a first gate but never sufficient on its own.
	 */
	protected function processRedsys( $voucher ) {
		if ( ! $this->tokenMatches( $voucher ) ) return;

		$result = sanitize_text_field( $_GET['alexr_gateway_redsys'] ?? '' );

		if ( isset( $_GET['Ds_MerchantParameters'] ) && isset( $_GET['Ds_Signature'] ) ) {
			$this->processRedsysSigned( $voucher, $_GET );
			return;
		}

		if ( $result === 'ko' ) {
			$payment = $this->voucherPayment( $voucher, 'redsys' );
			if ( $payment ) {
				$payment->status = \Alexr\Enums\PaymentStatus::CANCELLED;
				$payment->save();
			}
			$this->clearToken( $voucher );
			$this->cancel( $voucher );
		}
		// 'ok' without signed params: wait for the server notification.
	}

	/**
	 * Verify a signed Redsys response (redirect params or server notification)
	 * and issue / cancel accordingly. Checks signature, authorisation code,
	 * amount, and that the order belongs to the voucher's Redsys payment.
	 */
	protected function processRedsysSigned( $voucher, $source ) {
		if ( ! class_exists( '\Alexr\Payments\GatewayRedsys' ) ) return;

		$params    = isset( $source['Ds_MerchantParameters'] ) ? trim( wp_unslash( $source['Ds_MerchantParameters'] ) ) : '';
		$signature = isset( $source['Ds_Signature'] ) ? trim( wp_unslash( $source['Ds_Signature'] ) ) : '';
		if ( $params === '' || $signature === '' ) return;

		$payment = $this->voucherPayment( $voucher, 'redsys' );
		if ( ! $payment ) return;

		try {
			$gateway = new \Alexr\Payments\GatewayRedsys( $voucher->restaurant_id );
			$data    = $gateway->verify_response( $params, $signature );
		} catch ( \Exception $e ) {
			return;
		}
		if ( ! $data ) {
			$this->storeCallback( $payment, 'redsys_invalid_signature', array( 'at' => current_time( 'mysql' ) ) );
			$payment->save();
			return;
		}

		$this->storeCallback( $payment, 'redsys_response', $data );

		// The response must be for the order we sent.
		$settings  = is_array( $payment->settings ) ? $payment->settings : array();
		$sentOrder = isset( $settings['redsys']['vars']['DS_MERCHANT_ORDER'] ) ? (string) $settings['redsys']['vars']['DS_MERCHANT_ORDER'] : '';
		$gotOrder  = (string) ( $data['Ds_Order'] ?? '' );
		$gotAmount = intval( $data['Ds_Amount'] ?? -1 );
		$authorised = \Alexr\Payments\GatewayRedsys::is_response_authorised( $data['Ds_Response'] ?? '' );

		if ( $authorised && $gotAmount === intval( $payment->amount ) && ( $sentOrder === '' || $sentOrder === $gotOrder ) ) {
			$payment->status = \Alexr\Enums\PaymentStatus::SUCCEEDED;
			$payment->save();
			$this->clearToken( $voucher );
			$this->issue( $voucher, $payment );
		} elseif ( ! $authorised ) {
			$payment->status = \Alexr\Enums\PaymentStatus::CANCELLED;
			$payment->save();
			$this->clearToken( $voucher );
			$this->cancel( $voucher );
		} else {
			$payment->save(); // authorised but amount/order mismatch: keep pending for review
		}
	}

	protected function voucherPayment( $voucher, $type ) {
		return \Alexr\Models\Payment::where( 'voucher_id', $voucher->id )
			->where( 'payment_type', $type )
			->last();
	}

	/** First value found for any of $keys in a (nested) array / object. */
	protected function findKeyDeep( $data, array $keys ) {
		if ( is_object( $data ) ) $data = json_decode( json_encode( $data ), true );
		if ( ! is_array( $data ) ) return '';
		foreach ( $keys as $key ) {
			if ( isset( $data[ $key ] ) && is_scalar( $data[ $key ] ) ) {
				return (string) ( is_bool( $data[ $key ] ) ? ( $data[ $key ] ? 'TRUE' : 'FALSE' ) : $data[ $key ] );
			}
		}
		foreach ( $data as $value ) {
			if ( is_array( $value ) || is_object( $value ) ) {
				$found = $this->findKeyDeep( $value, $keys );
				if ( $found !== '' ) return $found;
			}
		}
		return '';
	}

	/**
	 * Anti-replay: the return URL carries &token=..., compared (constant-time)
	 * against the token stashed on the voucher when the payment was created.
	 */
	protected function tokenMatches( $voucher ) {
		$token    = isset( $_GET['token'] ) ? sanitize_text_field( $_GET['token'] ) : '';
		$settings = is_array( $voucher->settings ) ? $voucher->settings : [];
		$stored   = isset( $settings['gateway_token'] ) ? $settings['gateway_token'] : '';
		return $token !== '' && $stored !== '' && hash_equals( (string) $stored, (string) $token );
	}

	protected function clearToken( $voucher ) {
		$settings = is_array( $voucher->settings ) ? $voucher->settings : [];
		$settings['gateway_token'] = null;
		$voucher->settings = $settings;
		$voucher->save();
	}

	protected function cancel( $voucher ) {
		$voucher->status = \Alexr\Enums\VoucherStatus::CANCELLED;
		$voucher->save();
	}

	protected function storeCallback( $payment, $key, $value ) {
		$settings = is_array( $payment->settings ) ? $payment->settings : [];
		$settings[ $key ] = $value;
		$payment->settings = $settings;
	}

	/**
	 * Mark the voucher paid/active and fire the issued hook (the delivery phase
	 * listens to it to email the buyer / recipient). markPaid() flips the row
	 * atomically, so concurrent returns can never issue twice.
	 */
	protected function issue( $voucher, $payment = null ) {
		$activated = $voucher->markPaid( $payment );
		if ( $activated ) {
			do_action( 'alexr_voucher_issued', $voucher );
		}
	}

	/**
	 * Standalone confirmation + printable gift voucher page. Active vouchers show
	 * a print-ready certificate (code, amount, to/from, message, expiry, terms);
	 * pending (payment still being confirmed by the gateway) auto-refreshes a few
	 * times; cancelled/expired show a short status message.
	 */
	protected function renderConfirmation( $voucher ) {
		// Translate into the voucher's language (the buyer's, not the site's).
		// NOTE: __eva() is only an extractor marker — it does NOT translate.
		$lang = $voucher->language ?: 'en';
		$t    = function ( $string ) use ( $lang ) {
			return function_exists( 'alexr_translate_x' ) ? alexr_translate_x( $string, $lang ) : $string;
		};

		$restaurant = $voucher->restaurant;
		$symbol     = \Alexr\Enums\CurrencyType::symbolFor( $voucher->currency );
		$isActive   = in_array( $voucher->status, array( \Alexr\Enums\VoucherStatus::ACTIVE, \Alexr\Enums\VoucherStatus::REDEEMED ), true );
		$isPending  = $voucher->status === \Alexr\Enums\VoucherStatus::PENDING_PAYMENT;
		$amount     = $symbol . number_format( 0.01 * intval( $voucher->initial_amount ), 2 );

		$settings     = is_array( $voucher->settings ) ? $voucher->settings : [];
		$product_name = isset( $settings['product_name'] ) ? $settings['product_name'] : '';

		// Fetch the product for its terms (not snapshotted on the voucher).
		$terms = '';
		if ( $voucher->product_id ) {
			$product = \Alexr\Settings\GiftCard::find( $voucher->product_id );
			if ( $product ) {
				$terms = (string) $product->terms;
			}
		}

		$expires = $voucher->expires_at
			? date_i18n( get_option( 'date_format' ), strtotime( $voucher->expires_at ) )
			: $t( __eva( 'No expiry' ) );

		$title = $isActive
			? $t( __eva( 'Your gift voucher is ready!' ) )
			: ( $isPending ? $t( __eva( 'Completing your payment…' ) ) : $t( __eva( 'Gift voucher' ) ) );

		// Pending: poll the page a few times while the gateway confirms (without
		// re-sending the gateway params, so nothing is re-processed).
		$refreshUrl = '';
		if ( $isPending ) {
			$tries = intval( $_GET['r'] ?? 0 );
			if ( $tries < 6 ) {
				$refreshUrl = add_query_arg( array( 'r' => $tries + 1 ), alexr_view_voucher_url( $voucher->uuid ) );
			}
		}

		?><!doctype html>
<html lang="<?php echo esc_attr( $voucher->language ?: 'en' ); ?>">
<head>
	<meta charset="utf-8">
	<meta name="viewport" content="width=device-width, initial-scale=1">
	<meta name="robots" content="noindex,nofollow">
	<?php if ( $refreshUrl ) : ?><meta http-equiv="refresh" content="5;url=<?php echo esc_attr( $refreshUrl ); ?>"><?php endif; ?>
	<title><?php echo esc_html( $title ); ?></title>
	<style>
		*{box-sizing:border-box;}
		body{margin:0;background:#eef2f7;color:#0f172a;font-family:-apple-system,Segoe UI,Roboto,Arial,sans-serif;-webkit-print-color-adjust:exact;print-color-adjust:exact;}
		.page{max-width:640px;margin:0 auto;padding:24px 16px 40px;}
		.bar{display:flex;justify-content:space-between;align-items:center;margin-bottom:18px;}
		.bar h1{font-size:18px;margin:0;}
		.btn{border:0;border-radius:10px;background:#0f172a;color:#fff;font-size:14px;font-weight:600;padding:10px 18px;cursor:pointer;}
		.voucher{position:relative;background:#fff;border-radius:20px;overflow:hidden;box-shadow:0 10px 40px rgba(15,23,42,.12);}
		.voucher__top{background:linear-gradient(135deg,#111827,#334155);color:#fff;padding:28px 32px;}
		.voucher__brand{font-size:13px;letter-spacing:.14em;text-transform:uppercase;opacity:.8;}
		.voucher__title{font-size:26px;font-weight:800;margin:6px 0 0;}
		.voucher__product{font-size:15px;opacity:.9;margin-top:4px;}
		.voucher__body{padding:28px 32px;}
		.amount{font-size:44px;font-weight:800;line-height:1;margin:0 0 20px;}
		.code-label{font-size:12px;letter-spacing:.1em;text-transform:uppercase;color:#64748b;margin-bottom:6px;}
		.code{display:inline-block;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:26px;font-weight:800;letter-spacing:4px;background:#f8fafc;border:2px dashed #cbd5e1;border-radius:12px;padding:14px 22px;}
		.rows{margin-top:22px;border-top:1px solid #e2e8f0;padding-top:18px;font-size:14px;color:#334155;}
		.rows div{margin:5px 0;}
		.rows .k{color:#94a3b8;display:inline-block;min-width:110px;}
		.msg{margin-top:16px;font-style:italic;color:#475569;background:#f8fafc;border-radius:10px;padding:12px 14px;}
		.terms{margin-top:20px;font-size:11px;line-height:1.5;color:#94a3b8;white-space:pre-wrap;}
		.foot{text-align:center;color:#94a3b8;font-size:12px;margin-top:18px;}
		.status{background:#fff;border-radius:16px;box-shadow:0 6px 30px rgba(15,23,42,.1);padding:36px;text-align:center;}
		.status .big{font-size:20px;font-weight:700;margin:0 0 8px;}
		.status .pending{color:#a16207;}
		.status .muted{color:#64748b;font-size:14px;}
		@media print{
			body{background:#fff;}
			.no-print{display:none !important;}
			.voucher{box-shadow:none;border:1px solid #cbd5e1;}
			@page{margin:14mm;}
		}
	</style>
</head>
<body>
	<div class="page">
	<?php if ( $isActive ) : ?>
		<div class="bar no-print">
			<h1><?php echo esc_html( $t( __eva( 'Your gift voucher' ) ) ); ?></h1>
			<button type="button" class="btn" onclick="window.print()"><?php echo esc_html( $t( __eva( 'Print / Save as PDF' ) ) ); ?></button>
		</div>

		<div class="voucher">
			<div class="voucher__top">
				<div class="voucher__brand"><?php echo esc_html( $restaurant ? $restaurant->name : '' ); ?></div>
				<div class="voucher__title"><?php echo esc_html( $t( __eva( 'Gift Voucher' ) ) ); ?></div>
				<?php if ( $product_name ) : ?><div class="voucher__product"><?php echo esc_html( $product_name ); ?></div><?php endif; ?>
			</div>
			<div class="voucher__body">
				<div class="amount"><?php echo esc_html( $amount ); ?></div>

				<div class="code-label"><?php echo esc_html( $t( __eva( 'Redemption code' ) ) ); ?></div>
				<div class="code"><?php echo esc_html( $voucher->code ); ?></div>

				<div class="rows">
					<?php if ( $voucher->recipient_name ) : ?><div><span class="k"><?php echo esc_html( $t( __eva( 'To' ) ) ); ?></span><?php echo esc_html( $voucher->recipient_name ); ?></div><?php endif; ?>
					<?php if ( $voucher->buyer_name ) : ?><div><span class="k"><?php echo esc_html( $t( __eva( 'From' ) ) ); ?></span><?php echo esc_html( $voucher->buyer_name ); ?></div><?php endif; ?>
					<div><span class="k"><?php echo esc_html( $t( __eva( 'Valid until' ) ) ); ?></span><?php echo esc_html( $expires ); ?></div>
				</div>

				<?php if ( $voucher->message ) : ?>
					<div class="msg"><?php echo nl2br( esc_html( $voucher->message ) ); ?></div>
				<?php endif; ?>

				<?php if ( $terms ) : ?>
					<div class="terms"><?php echo esc_html( $terms ); ?></div>
				<?php endif; ?>
			</div>
		</div>

		<p class="foot"><?php echo esc_html( $t( __eva( 'Keep this page or print it: the code above is what you need to redeem the voucher.' ) ) ); ?></p>
	<?php elseif ( $isPending ) : ?>
		<div class="status">
			<p class="big"><?php echo esc_html( $title ); ?></p>
			<p class="pending"><?php echo esc_html( $t( __eva( 'Your payment is being processed. This page will update shortly.' ) ) ); ?></p>
			<?php if ( ! $refreshUrl ) : ?>
				<p class="muted"><?php echo esc_html( $t( __eva( 'If you completed the payment and this page does not update, please contact the restaurant.' ) ) ); ?></p>
			<?php endif; ?>
		</div>
	<?php else : ?>
		<div class="status">
			<p class="big"><?php echo esc_html( $restaurant ? $restaurant->name : '' ); ?></p>
			<p class="muted"><?php echo esc_html( $t( \Alexr\Enums\VoucherStatus::label( $voucher->status ) ) ); ?></p>
		</div>
	<?php endif; ?>
	</div>
</body>
</html><?php
	}
}

new ALEXR_View_voucher();