<?php
namespace ABeCe\Booking\Service;
use ABeCe\Booking\Repository\PrivacyRepository as R;
/** Stable ID snapshots, bounded output pages, explicit field projections; shared records are minimized. */
final class PrivacyExportService {
 public const PAGE=50;
 public function __construct(private readonly R $r,private readonly PrivacyIdentityService $identities){}
 public function export(string $email,int $page,int $request=0):array {
  if(!current_user_can('export_others_personal_data')||!is_email($email)||$page<1)return ['data'=>[],'done'=>true];
  $i=$this->identities->resolve($email,$request);
  if($i['ambiguous'])return ['data'=>[$this->item('review','identity',[__('Review required','abece-booking')=>__('This email matches independent identities. The operator must verify one person through the confirmed WordPress request before exporting records.','abece-booking')])],'done'=>true];
  $u=R::in($i['users']);$m=R::in($i['members']);$e=R::in($i['contacts']);$own=$this->r->own($i);$related=$this->r->related($i);$p=$this->r->prefix;
  $groups=[
   'members'=>['id,wp_user_id,member_number,first_name,last_name,email,phone,date_of_birth,is_active,created_at,updated_at',"id IN ($m)"],
   'memberships'=>['id,member_id,season_id,membership_type_id,valid_from,valid_to,status,membership_fee_amount,membership_fee_currency,paid_at,created_at,updated_at',"member_id IN ($m)"],
   'external_contacts'=>['id,display_name,email,phone,is_active,created_at,updated_at',"id IN ($e)"],
   'bookings'=>['id,booking_reference,resource_id,series_id,series_occurrence_key,starts_at,ends_at,status,base_amount,discount_amount,final_amount,currency,payment_status,payment_method,cancellation_fee,no_show_fee,created_at,updated_at',$own],
   'booking_participants'=>['id,booking_id,member_id,participant_type,name,price_adjustment,created_at',"member_id IN ($m)"],
   'booking_series'=>['id,parent_series_id,status,resource_id,season_id,recurrence_type,recurrence_interval,starts_on,ends_on,local_start_time,duration_seconds,timezone_id,created_at,updated_at',"id IN (SELECT series_id FROM {$p}bookings WHERE $related)"],
   'credit_accounts'=>['id,user_id,currency,is_active,created_at,updated_at',"user_id IN ($u)"],
   'credit_transactions'=>['id,account_id,booking_id,transaction_type,amount,created_at',"account_id IN (SELECT id FROM {$p}credit_accounts WHERE user_id IN ($u))"],
   'payment_transactions'=>['id,booking_id,provider,provider_transaction_id,transaction_type,amount,currency,status,created_at,updated_at',"user_id IN ($u) OR booking_id IN (SELECT id FROM {$p}bookings WHERE $own)"],
   'customer_restrictions'=>['id,restriction_type,starts_at,ends_at,created_at,revoked_at',"wp_user_id IN ($u) OR member_id IN ($m) OR external_contact_id IN ($e)"],
   'notifications'=>['id,booking_id,user_id,notification_type,channel,recipient,status,attempts,scheduled_at,sent_at,created_at,updated_at',"user_id IN ($u) OR (user_id IS NULL AND recipient=%s AND booking_id IN (SELECT id FROM {$p}bookings WHERE $own))",[$email]],
   // Do not expose another actor identity or mixed free-text / JSON audit payloads.
   'booking_history'=>['id,booking_id,event_type,old_status,new_status,created_at',"performed_by_user_id IN ($u) OR booking_id IN (SELECT id FROM {$p}bookings WHERE $own)"],
  ];
  $fingerprint=hash('sha256',wp_json_encode([$i,$email]));$key='abece_booking_privacy_export_'.hash_hmac('sha256',$fingerprint.'|'.$request.'|'.get_current_user_id(),wp_salt('auth'));
  $plan=$request?get_post_meta($request,'abece_booking_privacy_export_plan',true):get_transient($key);
  if(!is_array($plan)||($plan['fingerprint']??'')!==$fingerprint||($plan['expires']??0)<=time()){
   if($page!==1)return ['data'=>[$this->item('review','expired',[__('Review required','abece-booking')=>__('The export snapshot expired. Restart the WordPress export from the first page.','abece-booking')])],'done'=>true];
   $ids=[];foreach($groups as $table=>$spec){$rows=$this->r->rows($spec['table']??$table,$spec[1],$spec[2]??[],'id',100001);if(count($rows)>100000)throw new \RuntimeException('Privacy export requires operator-assisted batching');foreach($rows as $row)$ids[]=[$table,(int)$row['id']];}
   $plan=['fingerprint'=>$fingerprint,'expires'=>time()+DAY_IN_SECONDS,'ids'=>$ids];if($request){update_post_meta($request,'abece_booking_privacy_export_plan',$plan);wp_schedule_single_event($plan['expires'],'abece_booking_privacy_plan_expire',[$request]);}else set_transient($key,$plan,DAY_IN_SECONDS);
  }
  $data=[];
  foreach(array_slice($plan['ids'],($page-1)*self::PAGE,self::PAGE) as [$table,$id]){
   // Recheck ownership on every page, even if an administrator relinks an identity during export.
   $spec=$groups[$table];$rows=$this->r->rows($spec['table']??$table,'id=%d AND ('.$spec[1].')',array_merge([$id],$spec[2]??[]),$spec[0]);
   if(!$rows){$data[]=$this->item($table,(string)$id,[__('Review required','abece-booking')=>__('This record was removed or its ownership changed during export. Restart the request for a fresh snapshot.','abece-booking')]);continue;}
   $row=$rows[0];if($table==='credit_transactions'){$account=$this->r->rows('credit_accounts','id=%d',[(int)$row['account_id']],'currency');$row['currency']=$account[0]['currency']??'';}if($table==='memberships')$row['currency']=$row['membership_fee_currency'];$values=[];foreach($row as $field=>$value)$values[$this->label($field)]=$this->value($field,$value,$row);
   if($table==='booking_participants'){$b=$this->r->rows('bookings','id=%d',[(int)$row['booking_id']],'booking_reference,resource_id,starts_at,ends_at,status');foreach($b[0]??[] as $field=>$value)$values[$this->label($field)]=$this->value($field,$value,$b[0]);}
   if($table==='credit_accounts'){$balance=$this->r->rows('credit_transactions','account_id=%d',[$id],'id,amount');$values[__('Credit balance','abece-booking')]=\ABeCe\Booking\Support\LocalizedFormat::money(array_sum(array_column($balance,'amount')),$row['currency']);}
   $data[]=$this->item($table,(string)$id,$values);
  }
  if($page===1){foreach($i['users'] as $uid){$user=get_userdata($uid);if($user)$data[]=$this->item('profile',(string)$uid,[__('First name','abece-booking')=>$user->first_name,__('Last name','abece-booking')=>$user->last_name,__('Email','abece-booking')=>$user->user_email,__('Phone','abece-booking')=>implode('; ', array_unique(array_filter(\ABeCe\Booking\Support\LegacyIdentifiers::user_metadata($uid,'abece_booking_phone'),'is_string')))]);$ack=get_user_meta($uid,'abece_booking_privacy_acknowledgement',true);if(is_array($ack))$data[]=$this->item('profile','acknowledgement-'.$uid,[__('Privacy-policy acknowledgement','abece-booking')=>wp_json_encode($ack)]);foreach(\ABeCe\Booking\Support\LegacyIdentifiers::user_metadata($uid,'abece_booking_membership_link_audit') as $index=>$audit){if(!is_array($audit))continue;$safe=array_intersect_key($audit,array_flip(['member_id','wp_user_id','timestamp','method']));$data[]=$this->item('booking_history','link-'.$uid.'-'.$index,$safe);}}
   if($plan['ids'])$data[]=$this->item('review','mixed-content',[__('Review required','abece-booking')=>__('Mixed notes, audit payloads and historical snapshots require operator review to protect other people’s data. These are not automatically included. Contact the operator for a reviewed supplement.','abece-booking')]);
  }
  return ['data'=>$data,'done'=>$page*self::PAGE>=count($plan['ids'])];
 }
 private function value(string $field,mixed $value,array $row):string {
  if($value===null)return '';
  if(in_array($field,['starts_at','ends_at','created_at','updated_at','paid_at','sent_at','scheduled_at','revoked_at'],true)&&$value!=='')return \ABeCe\Booking\Support\Time::iso(\ABeCe\Booking\Support\Time::fromSql($value));
  if(in_array($field,['base_amount','discount_amount','final_amount','cancellation_fee','no_show_fee','amount','membership_fee_amount'],true)&&isset($row['currency']))return \ABeCe\Booking\Support\LocalizedFormat::money((int)$value,$row['currency']);
  return (string)$value;
 }
 private function item(string $group,string $id,array $values):array {
  $labels=['members'=>__('Members','abece-booking'),'memberships'=>__('Memberships','abece-booking'),'external_contacts'=>__('External contacts','abece-booking'),'bookings'=>__('Bookings','abece-booking'),'booking_participants'=>__('Participants','abece-booking'),'booking_series'=>__('Recurring bookings','abece-booking'),'credit_accounts'=>__('Credits','abece-booking'),'credit_transactions'=>__('Credit history','abece-booking'),'payment_transactions'=>__('Payments','abece-booking'),'customer_restrictions'=>__('Customer restrictions','abece-booking'),'notifications'=>__('Notifications','abece-booking'),'booking_history'=>__('Booking history','abece-booking'),'profile'=>__('Profile','abece-booking'),'review'=>__('Privacy review','abece-booking')];
  $data=[];foreach($values as $name=>$value)$data[]=['name'=>esc_html($name),'value'=>esc_html((string)$value)];return ['group_id'=>'abece-'.$group,'group_label'=>'ABeCe Booking — '.($labels[$group]??$group),'item_id'=>$group.'-'.$id,'data'=>$data];
 }
 private function label(string $field):string {
  // Translatable common labels; precise identifiers remain useful in downloaded records.
  $labels=['id'=>__('ID','abece-booking'),'first_name'=>__('First name','abece-booking'),'last_name'=>__('Last name','abece-booking'),'display_name'=>__('Name','abece-booking'),'email'=>__('Email','abece-booking'),'phone'=>__('Phone','abece-booking'),'date_of_birth'=>__('Date of birth','abece-booking'),'member_number'=>__('Member number','abece-booking'),'starts_at'=>__('Starts at','abece-booking'),'ends_at'=>__('Ends at','abece-booking'),'status'=>__('Status','abece-booking'),'currency'=>__('Currency','abece-booking'),'final_amount'=>__('Final price','abece-booking'),'amount'=>__('Amount','abece-booking'),'payment_status'=>__('Payment status','abece-booking'),'payment_method'=>__('Payment method','abece-booking'),'name'=>__('Name','abece-booking')];return $labels[$field]??$field;
 }
}