<?php
/**
 * Admin orders list view.
 *
 * @package BoxCart
 */

// If this file is called directly, abort.
if ( ! defined( 'ABSPATH' ) ) {
	exit;
}
// phpcs:disable WordPress.Security.NonceVerification.Recommended -- Read-only list/filter parameters are sanitised on read; they do not mutate state.
// phpcs:disable WordPress.Security.NonceVerification.Missing -- Form POSTs in this file are nonce-verified by the caller (admin_post / admin-ajax handler) before this view/handler is reached.

// phpcs:disable WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound -- Include-scope locals inside a view partial. Not globals; they exist only for the duration of the include.

// Authorization gate: the WordPress admin menu already requires the
// `manage_options` capability to load this view (see BoxCart_Admin_Menus),
// but we double-check here so the view itself cannot be reached by an
// unprivileged user even if it's ever included directly.
if ( ! current_user_can( 'manage_options' ) ) {
	wp_die( esc_html__( 'You do not have permission to access this page.', 'boxcart' ) );
}

// Get orders handler.
$orders_handler = new BoxCart_Admin_Orders();

// Get filter values from the admin list-view URL. These are read-only
// filter / pagination / sort parameters — the capability check above gates
// access; state-changing operations (bulk actions, status updates) have
// their own nonces verified in BoxCart_Admin_Orders.
$current_status  = isset( $_GET['status'] ) ? sanitize_text_field( wp_unslash( $_GET['status'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only admin list filter; capability-gated above.
$boxcart_search  = isset( $_GET['s'] ) ? sanitize_text_field( wp_unslash( $_GET['s'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only admin list search; capability-gated above.
$location_filter = isset( $_GET['location'] ) ? absint( $_GET['location'] ) : 0; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only admin list filter; capability-gated above.
$date_from       = isset( $_GET['date_from'] ) ? sanitize_text_field( wp_unslash( $_GET['date_from'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only admin list filter; capability-gated above.
$date_to         = isset( $_GET['date_to'] ) ? sanitize_text_field( wp_unslash( $_GET['date_to'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only admin list filter; capability-gated above.
$current_page    = isset( $_GET['paged'] ) ? max( 1, absint( $_GET['paged'] ) ) : 1; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only admin pagination; capability-gated above.
$boxcart_orderby = isset( $_GET['orderby'] ) ? sanitize_text_field( wp_unslash( $_GET['orderby'] ) ) : 'created_at'; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only admin sort; capability-gated above.
$boxcart_order   = isset( $_GET['order'] ) ? sanitize_text_field( wp_unslash( $_GET['order'] ) ) : 'DESC'; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only admin sort; capability-gated above.

// Get status counts.
$status_counts = $orders_handler->get_status_counts();

// Get orders.
$result = $orders_handler->get_orders(
	array(
		'status'    => $current_status,
		'search'    => $boxcart_search,
		'location'  => $location_filter,
		'date_from' => $date_from,
		'date_to'   => $date_to,
		'orderby'   => $boxcart_orderby,
		'order'     => $boxcart_order,
		'page'      => $current_page,
		'per_page'  => 20,
	)
);

$orders      = $result['items'];
$total       = $result['total'];
$total_pages = $result['total_pages'];

// Get locations for filter.
$locations = $orders_handler->get_locations_for_filter();

// Settings for currency.
$settings        = get_option( 'boxcart_settings', array() );
$currency_symbol = isset( $settings['currency_symbol'] ) ? $settings['currency_symbol'] : '£';
$prices_enabled  = isset( $settings['prices_enabled'] ) ? (bool) $settings['prices_enabled'] : true;
// Show prices if pricing is enabled, or if any order on this page has a total (historical priced orders).
$has_priced_orders = false;
if ( ! $prices_enabled ) {
	foreach ( $orders as $order_check ) {
		if ( ! empty( $order_check['total'] ) && (float) $order_check['total'] > 0 ) {
			$has_priced_orders = true;
			break;
		}
	}
}
$show_prices = $prices_enabled || $has_priced_orders;

// Check if payments are enabled — determines whether to show a separate Payment Status column.
$payments_enabled = isset( $settings['payments_enabled'] ) ? (bool) $settings['payments_enabled'] : false;

// Status labels and colors.
$status_labels = BoxCart_Order::STATUSES;
$status_colors = array(
	'pending'    => '#f0ad4e',
	'processing' => '#5bc0de',
	'ready'      => '#5cb85c',
	'completed'  => '#777',
	'cancelled'  => '#d9534f',
);

/**
 * Build pagination URL.
 *
 * @param int $page Page number.
 * @return string URL.
 */
function boxcart_orders_page_url( $page ) {
	$args = array(
		'page'  => 'boxcart-orders',
		'paged' => $page,
	);

	if ( ! empty( $_GET['status'] ) ) {
		$args['status'] = sanitize_text_field( wp_unslash( $_GET['status'] ) );
	}
	if ( ! empty( $_GET['s'] ) ) {
		$args['s'] = sanitize_text_field( wp_unslash( $_GET['s'] ) );
	}
	if ( ! empty( $_GET['location'] ) ) {
		$args['location'] = absint( $_GET['location'] );
	}
	if ( ! empty( $_GET['date_from'] ) ) {
		$args['date_from'] = sanitize_text_field( wp_unslash( $_GET['date_from'] ) );
	}
	if ( ! empty( $_GET['date_to'] ) ) {
		$args['date_to'] = sanitize_text_field( wp_unslash( $_GET['date_to'] ) );
	}
	if ( ! empty( $_GET['orderby'] ) ) {
		$args['orderby'] = sanitize_text_field( wp_unslash( $_GET['orderby'] ) );
	}
	if ( ! empty( $_GET['order'] ) ) {
		$args['order'] = sanitize_text_field( wp_unslash( $_GET['order'] ) );
	}

	return add_query_arg( $args, admin_url( 'admin.php' ) );
}
?>
<div class="boxcart-admin boxcart-admin--orders">
	<div class="boxcart-page-header">
		<h1 class="boxcart-page-title"><?php esc_html_e( 'Orders', 'boxcart' ); ?></h1>
		<div class="boxcart-page-header__actions">
			<button type="button" class="boxcart-btn boxcart-btn--secondary" data-toggle-export>
				<span class="dashicons dashicons-download"></span>
				<?php esc_html_e( 'Export', 'boxcart' ); ?>
			</button>
			<?php BoxCart_Admin_Help::render_help_button( 'orders' ); ?>
		</div>
	</div>

	<?php if ( ! empty( $_GET['deleted'] ) ) : // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only notice flag after a redirect. ?>
		<div class="boxcart-notice boxcart-notice--success">
			<span class="dashicons dashicons-yes-alt"></span>
			<p><?php esc_html_e( 'Order deleted.', 'boxcart' ); ?></p>
		</div>
	<?php endif; ?>

	<!-- Export Modal -->
	<div class="boxcart-export-modal" style="display: none;">
		<div class="boxcart-export-modal__backdrop"></div>
		<div class="boxcart-export-modal__content">
			<div class="boxcart-export-modal__header">
				<h2><?php esc_html_e( 'Export Orders', 'boxcart' ); ?></h2>
				<button type="button" class="boxcart-export-modal__close" data-close-export>&times;</button>
			</div>
			<form method="get" action="<?php echo esc_url( admin_url( 'admin.php' ) ); ?>" class="boxcart-export-form">
				<input type="hidden" name="page" value="boxcart-orders">
				<input type="hidden" name="action" value="export">
				<?php wp_nonce_field( 'boxcart_export_orders', 'export_nonce' ); ?>

				<div class="boxcart-export-form__row">
					<label for="export-date-from"><?php esc_html_e( 'Date Range', 'boxcart' ); ?></label>
					<div class="boxcart-export-form__dates">
						<input type="date" id="export-date-from" name="export_date_from" value="<?php echo esc_attr( gmdate( 'Y-m-01' ) ); ?>" class="boxcart-input">
						<span><?php esc_html_e( 'to', 'boxcart' ); ?></span>
						<input type="date" id="export-date-to" name="export_date_to" value="<?php echo esc_attr( gmdate( 'Y-m-d' ) ); ?>" class="boxcart-input">
					</div>
				</div>

				<div class="boxcart-export-form__row">
					<label for="export-status"><?php esc_html_e( 'Order Status', 'boxcart' ); ?></label>
					<select id="export-status" name="export_status" class="boxcart-select">
						<option value=""><?php esc_html_e( 'All Statuses', 'boxcart' ); ?></option>
						<?php foreach ( $status_labels as $status_key => $status_label ) : ?>
							<option value="<?php echo esc_attr( $status_key ); ?>">
								<?php echo esc_html( $status_label ); ?>
							</option>
						<?php endforeach; ?>
					</select>
				</div>

				<?php if ( ! empty( $locations ) ) : ?>
					<div class="boxcart-export-form__row">
						<label for="export-location"><?php esc_html_e( 'Location', 'boxcart' ); ?></label>
						<select id="export-location" name="export_location" class="boxcart-select">
							<option value=""><?php esc_html_e( 'All Locations', 'boxcart' ); ?></option>
							<?php foreach ( $locations as $location ) : ?>
								<option value="<?php echo esc_attr( $location['id'] ); ?>">
									<?php echo esc_html( $location['name'] ); ?>
								</option>
							<?php endforeach; ?>
						</select>
					</div>
				<?php endif; ?>

				<div class="boxcart-export-form__row">
					<label for="export-format"><?php esc_html_e( 'Format', 'boxcart' ); ?></label>
					<select id="export-format" name="export_format" class="boxcart-select">
						<option value="csv"><?php esc_html_e( 'CSV', 'boxcart' ); ?></option>
						<option value="excel"><?php esc_html_e( 'Excel (XLSX)', 'boxcart' ); ?></option>
					</select>
				</div>

				<div class="boxcart-export-form__actions">
					<button type="button" class="boxcart-btn boxcart-btn--secondary" data-close-export><?php esc_html_e( 'Cancel', 'boxcart' ); ?></button>
					<button type="submit" class="boxcart-btn boxcart-btn--primary">
						<span class="dashicons dashicons-download"></span>
						<?php esc_html_e( 'Export Orders', 'boxcart' ); ?>
					</button>
				</div>
			</form>
		</div>
	</div>

	<!-- Status Tabs -->
	<ul class="boxcart-status-tabs">
		<li>
			<a href="<?php echo esc_url( admin_url( 'admin.php?page=boxcart-orders' ) ); ?>" class="<?php echo esc_attr( empty( $current_status ) ? 'current' : '' ); ?>">
				<?php esc_html_e( 'All', 'boxcart' ); ?>
				<span class="count">(<?php echo esc_html( $status_counts['all'] ); ?>)</span>
			</a>
		</li>
		<?php foreach ( $status_labels as $status_key => $status_label ) : ?>
			<?php if ( $status_counts[ $status_key ] > 0 || $current_status === $status_key ) : ?>
				<li>
					<a href="<?php echo esc_url( admin_url( 'admin.php?page=boxcart-orders&status=' . $status_key ) ); ?>" class="<?php echo esc_attr( $current_status === $status_key ? 'current' : '' ); ?>">
						<?php echo esc_html( $status_label ); ?>
						<span class="count">(<?php echo esc_html( $status_counts[ $status_key ] ); ?>)</span>
					</a>
				</li>
			<?php endif; ?>
		<?php endforeach; ?>
	</ul>

	<!-- Filters -->
	<div class="boxcart-filters-bar">
		<form method="get" action="<?php echo esc_url( admin_url( 'admin.php' ) ); ?>" class="boxcart-filters-form">
			<input type="hidden" name="page" value="boxcart-orders">
			<?php if ( $current_status ) : ?>
				<input type="hidden" name="status" value="<?php echo esc_attr( $current_status ); ?>">
			<?php endif; ?>

			<div class="boxcart-filters-row">
				<div class="boxcart-filter-group">
					<label for="boxcart-search" class="screen-reader-text"><?php esc_html_e( 'Search orders', 'boxcart' ); ?></label>
					<input type="search" id="boxcart-search" name="s" value="<?php echo esc_attr( $boxcart_search ); ?>" placeholder="<?php esc_attr_e( 'Search orders...', 'boxcart' ); ?>" class="boxcart-input">
				</div>

				<?php if ( ! empty( $locations ) ) : ?>
					<div class="boxcart-filter-group">
						<select name="location" class="boxcart-select">
							<option value=""><?php esc_html_e( 'All Locations', 'boxcart' ); ?></option>
							<?php foreach ( $locations as $location ) : ?>
								<option value="<?php echo esc_attr( $location['id'] ); ?>" <?php selected( $location_filter, $location['id'] ); ?>>
									<?php echo esc_html( $location['name'] ); ?>
								</option>
							<?php endforeach; ?>
						</select>
					</div>
				<?php endif; ?>

				<div class="boxcart-filter-group boxcart-filter-group--dates">
					<input type="date" name="date_from" value="<?php echo esc_attr( $date_from ); ?>" class="boxcart-input boxcart-input--date">
					<span class="boxcart-date-separator"><?php esc_html_e( 'to', 'boxcart' ); ?></span>
					<input type="date" name="date_to" value="<?php echo esc_attr( $date_to ); ?>" class="boxcart-input boxcart-input--date">
				</div>

				<button type="submit" class="boxcart-btn boxcart-btn--primary"><?php esc_html_e( 'Filter', 'boxcart' ); ?></button>

				<?php if ( $boxcart_search || $location_filter || $date_from || $date_to ) : ?>
					<a href="<?php echo esc_url( admin_url( 'admin.php?page=boxcart-orders' . ( $current_status ? '&status=' . $current_status : '' ) ) ); ?>" class="boxcart-btn boxcart-btn--text">
						<?php esc_html_e( 'Clear filters', 'boxcart' ); ?>
					</a>
				<?php endif; ?>
			</div>
		</form>

		<!-- Bulk Actions -->
		<div class="boxcart-bulk-actions" style="display: none;">
			<span class="boxcart-bulk-actions__count">
				<strong class="boxcart-bulk-actions__selected">0</strong> <?php esc_html_e( 'selected', 'boxcart' ); ?>
			</span>
			<?php
			/**
			 * Bulk action buttons for the orders list. Pro extensions hook in
			 * here to render the "Print Pick Lists" bulk-print action; Free
			 * emits nothing (no bulk actions in the Free build beyond the
			 * select-row UI itself).
			 */
			do_action( 'boxcart_admin_orders_bulk_actions' );
			?>
		</div>
	</div>

	<!-- Orders Table -->
	<?php if ( empty( $orders ) ) : ?>
		<div class="boxcart-empty-state">
			<div class="boxcart-empty-state__icon">
				<span class="dashicons dashicons-clipboard"></span>
			</div>
			<h2><?php esc_html_e( 'No orders found', 'boxcart' ); ?></h2>
			<p>
				<?php if ( $boxcart_search || $location_filter || $date_from || $date_to || $current_status ) : ?>
					<?php esc_html_e( 'Try adjusting your filters or search terms.', 'boxcart' ); ?>
				<?php else : ?>
					<?php esc_html_e( 'Orders will appear here once customers start placing them.', 'boxcart' ); ?>
				<?php endif; ?>
			</p>
		</div>
	<?php else : ?>
		<table class="boxcart-table boxcart-orders-table" data-print-url="<?php echo esc_url( admin_url( 'admin.php?page=boxcart-orders&action=print-pick-list' ) ); ?>">
			<thead>
				<tr>
					<th class="column-checkbox">
						<input type="checkbox" class="boxcart-checkbox boxcart-select-all" title="<?php esc_attr_e( 'Select all', 'boxcart' ); ?>">
					</th>
					<th class="column-order"><?php esc_html_e( 'Order', 'boxcart' ); ?></th>
					<th class="column-customer"><?php esc_html_e( 'Customer', 'boxcart' ); ?></th>
					<th class="column-collection"><?php esc_html_e( 'Collection', 'boxcart' ); ?></th>
					<th class="column-items"><?php esc_html_e( 'Items', 'boxcart' ); ?></th>
					<?php if ( $show_prices ) : ?>
						<th class="column-total"><?php esc_html_e( 'Total', 'boxcart' ); ?></th>
					<?php endif; ?>
					<th class="column-status"><?php echo $payments_enabled ? esc_html__( 'Order Status', 'boxcart' ) : esc_html__( 'Status', 'boxcart' ); ?></th>
					<?php if ( $payments_enabled ) : ?>
						<th class="column-payment-status"><?php esc_html_e( 'Payment Status', 'boxcart' ); ?></th>
					<?php endif; ?>
					<th class="column-date"><?php esc_html_e( 'Placed', 'boxcart' ); ?></th>
				</tr>
			</thead>
			<tbody>
				<?php foreach ( $orders as $order_data ) : ?>
					<?php
					$boxcart_order  = new BoxCart_Order( $order_data['id'] );
					$view_url       = admin_url( 'admin.php?page=boxcart-orders&action=view&id=' . $order_data['id'] );
					$location       = BoxCart_Location::get( $order_data['location_id'] );
					$slot_date      = strtotime( $order_data['slot_date'] );
					$created_at     = strtotime( $order_data['created_at'] );
					$boxcart_status = $order_data['status'];
					$status_color   = isset( $status_colors[ $boxcart_status ] ) ? $status_colors[ $boxcart_status ] : '#777';
					?>
					<tr>
						<td class="column-checkbox">
							<input type="checkbox" class="boxcart-checkbox boxcart-order-checkbox" value="<?php echo esc_attr( $order_data['id'] ); ?>">
						</td>
						<td class="column-order">
							<a href="<?php echo esc_url( $view_url ); ?>" class="boxcart-order-link">
								<strong><?php echo esc_html( $order_data['order_number'] ); ?></strong>
							</a>
						</td>
						<td class="column-customer">
							<div class="boxcart-customer-info">
								<span class="boxcart-customer-name">
									<?php echo esc_html( $order_data['customer_first_name'] . ' ' . $order_data['customer_last_name'] ); ?>
								</span>
								<span class="boxcart-customer-email">
									<?php echo esc_html( $order_data['customer_email'] ); ?>
								</span>
							</div>
						</td>
						<td class="column-collection">
							<div class="boxcart-collection-info">
								<?php if ( $location ) : ?>
									<span class="boxcart-location-name"><?php echo esc_html( $location->get_name() ); ?></span>
								<?php endif; ?>
								<span class="boxcart-slot-date"><?php echo esc_html( gmdate( 'D j M', $slot_date ) ); ?></span>
								<span class="boxcart-slot-time">
									<?php echo esc_html( gmdate( 'g:ia', strtotime( $order_data['slot_time_start'] ) ) ); ?> - <?php echo esc_html( gmdate( 'g:ia', strtotime( $order_data['slot_time_end'] ) ) ); ?>
								</span>
							</div>
						</td>
						<td class="column-items">
							<?php echo esc_html( $order_data['item_count'] ); ?>
						</td>
						<?php if ( $show_prices ) : ?>
							<td class="column-total">
								<?php if ( $order_data['total'] ) : ?>
									<?php echo esc_html( BoxCart_Helpers::format_price_plain( (float) $order_data['total'], false ) ); ?>
								<?php else : ?>
									&mdash;
								<?php endif; ?>
							</td>
						<?php endif; ?>
						<td class="column-status">
							<span class="boxcart-status-badge" style="background-color: <?php echo esc_attr( $status_color ); ?>;">
								<?php echo esc_html( $status_labels[ $boxcart_status ] ); ?>
							</span>
						</td>
						<?php if ( $payments_enabled ) : ?>
							<?php
							$payment_method = isset( $order_data['payment_method'] ) ? $order_data['payment_method'] : '';
							$payment_status = isset( $order_data['payment_status'] ) ? $order_data['payment_status'] : '';
							$ps_colors      = array(
								'pending'          => '#f0ad4e',
								'awaiting_payment' => '#ff9800',
								'processing'       => '#5bc0de',
								'paid'             => '#4caf50',
								'part_paid'        => '#ff9800',
								'failed'           => '#d9534f',
								'refunded'         => '#9c27b0',
								'cancelled'        => '#d9534f',
							);
							?>
							<td class="column-payment-status">
								<?php if ( $payment_method && BoxCart_Payment::METHOD_NONE !== $payment_method && BoxCart_Payment::STATUS_NOT_REQUIRED !== $payment_status ) : ?>
									<?php $ps_color = isset( $ps_colors[ $payment_status ] ) ? $ps_colors[ $payment_status ] : '#777'; ?>
									<span class="boxcart-status-badge" style="background-color: <?php echo esc_attr( $ps_color ); ?>;">
										<?php echo esc_html( BoxCart_Payment::get_status_label( $payment_status ) ); ?>
									</span>
								<?php else : ?>
									<span class="boxcart-status-badge" style="background-color: #ccc;">
										<?php esc_html_e( 'N/A', 'boxcart' ); ?>
									</span>
								<?php endif; ?>
							</td>
						<?php endif; ?>
						<td class="column-date">
							<span class="boxcart-date" title="<?php echo esc_attr( gmdate( 'Y-m-d H:i:s', $created_at ) ); ?>">
								<?php echo esc_html( human_time_diff( $created_at, time() ) ); ?> <?php esc_html_e( 'ago', 'boxcart' ); ?>
							</span>
						</td>
					</tr>
				<?php endforeach; ?>
			</tbody>
		</table>

		<!-- Pagination -->
		<?php if ( $total_pages > 1 ) : ?>
			<div class="boxcart-pagination">
				<span class="boxcart-pagination__info">
					<?php
					printf(
						/* translators: 1: start count, 2: end count, 3: total count */
						esc_html__( 'Showing %1$d-%2$d of %3$d orders', 'boxcart' ),
						(int) ( ( $current_page - 1 ) * 20 ) + 1,
						(int) min( $current_page * 20, $total ),
						(int) $total
					);
					?>
				</span>
				<div class="boxcart-pagination__links">
					<?php if ( $current_page > 1 ) : ?>
						<a href="<?php echo esc_url( boxcart_orders_page_url( 1 ) ); ?>" class="boxcart-pagination__link">&laquo;</a>
						<a href="<?php echo esc_url( boxcart_orders_page_url( $current_page - 1 ) ); ?>" class="boxcart-pagination__link">&lsaquo;</a>
					<?php endif; ?>

					<?php
					$start = max( 1, $current_page - 2 );
					$end   = min( $total_pages, $current_page + 2 );

					for ( $i = $start; $i <= $end; $i++ ) :
						?>
						<a href="<?php echo esc_url( boxcart_orders_page_url( $i ) ); ?>" class="boxcart-pagination__link <?php echo esc_attr( $i === $current_page ? 'current' : '' ); ?>">
							<?php echo esc_html( $i ); ?>
						</a>
					<?php endfor; ?>

					<?php if ( $current_page < $total_pages ) : ?>
						<a href="<?php echo esc_url( boxcart_orders_page_url( $current_page + 1 ) ); ?>" class="boxcart-pagination__link">&rsaquo;</a>
						<a href="<?php echo esc_url( boxcart_orders_page_url( $total_pages ) ); ?>" class="boxcart-pagination__link">&raquo;</a>
					<?php endif; ?>
				</div>
			</div>
		<?php endif; ?>
	<?php endif; ?>
</div>

<!-- Styles consolidated into boxcart-admin.css -->