<?php

namespace ChargeForms\Admin;

use ChargeForms\Includes\Activity_Log;
use ChargeForms\Includes\Entry;
use ChargeForms\Includes\Form;
use ChargeForms\Includes\Gateway_Manager;
use ChargeForms\Includes\Icon;
use ChargeForms\Includes\Settings;
use ChargeForms\Includes\Subscription;
use ChargeForms\Includes\Subscription_Portal;

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/**
 * ChargeForms > Payments — "Transactions", a dedicated top-level screen for
 * every captured payment (Stripe or PayPal), separate from Global Settings
 * > Payment Methods (which only holds gateway API keys — linked from the
 * "Payment Settings" button here). Every transaction row is really just an
 * entry with payment meta attached by SubmissionHandler::verify_payment()
 * at submission time — this page is a read-only view over that, not a
 * second source of truth.
 *
 * The filter row's Payment Methods dropdown is real now that a second
 * gateway exists; Status/Types still only ever have one real value each
 * (Succeeded / One-time) since ChargeForms doesn't yet track failed attempts
 * or subscriptions for either gateway — those two stay honestly disabled
 * rather than offering options that would never do anything.
 */
class Payments_Page {

	public function __construct() {
		add_action( 'admin_menu', [ $this, 'register' ] );
		add_action( 'admin_post_chargeforms_bulk_delete_payments', [ $this, 'handle_bulk_delete' ] );
		add_action( 'admin_post_chargeforms_cancel_subscription', [ $this, 'handle_cancel_subscription' ] );
	}

	/**
	 * The one admin-facing way to cancel a subscription (satisfies the
	 * feature's cancellation requirement) — deliberately minimal: a single
	 * confirm-and-cancel link, immediate cancellation only (not "at period
	 * end"; an admin wanting that finer control can offer their own
	 * subscriber-facing self-service flow against the REST endpoint,
	 * RestApi::cancel_subscription(), which does support it — out of
	 * scope for this admin screen per "no unnecessary UI polish"). Cancels
	 * at Stripe FIRST and only updates the local row if that succeeds —
	 * same ordering RestApi::cancel_subscription() uses and for the same
	 * reason (a local-only cancellation the gateway never heard about
	 * would keep billing the subscriber while this site thinks it's done).
	 */
	public function handle_cancel_subscription() {
		$id = isset( $_GET['subscription_id'] ) ? (int) $_GET['subscription_id'] : 0;

		if ( ! current_user_can( 'chargeforms_manage_forms' ) || ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ?? '' ) ), 'chargeforms_cancel_subscription_' . $id ) ) {
			wp_die( esc_html__( 'Not allowed.', 'chargeforms' ), 403 );
		}

		$row = Subscription::get( $id );
		if ( $row && in_array( $row['status'], Subscription::CANCELABLE_STATUSES, true ) && Gateway_Manager::supports_subscriptions( $row['gateway'] ) ) {
			$gateway_class = Gateway_Manager::get( $row['gateway'] );
			$result        = $gateway_class::cancel_subscription( $row['gateway_subscription_id'], false );

			if ( ! is_wp_error( $result ) ) {
				Subscription::update( $id, [ 'status' => 'canceled' ] );
				Entry::log_activity( $row['entry_id'], __( 'Subscription canceled immediately by an admin.', 'chargeforms' ) );
				Activity_Log::log( 'subscription_canceled', 'subscription', $id, __( 'Subscription canceled from the Payments screen.', 'chargeforms' ) );
			}
		}

		wp_safe_redirect( admin_url( 'admin.php?page=chargeforms-payments&chargeforms_notice=subscription_canceled' ) );
		exit;
	}

	/**
	 * A transaction row IS an entry (see this class's own doc comment) —
	 * deleting a payment record means deleting the entry it's attached to,
	 * same as the row-checkbox column on Entries. Previously these
	 * checkboxes were wired up (see the "check all" toggle below) with no
	 * action behind them at all.
	 */
	public function handle_bulk_delete() {
		$payment_ids = isset( $_POST['payment_ids'] ) ? array_map( 'intval', (array) $_POST['payment_ids'] ) : [];

		if ( ! current_user_can( 'chargeforms_manage_forms' ) || ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_POST['_wpnonce'] ?? '' ) ), 'chargeforms_bulk_delete_payments' ) ) {
			wp_die( esc_html__( 'Not allowed.', 'chargeforms' ), 403 );
		}

		foreach ( $payment_ids as $entry_id ) {
			if ( $entry_id > 0 ) {
				Entry::delete( $entry_id );
			}
		}

		wp_safe_redirect( admin_url( 'admin.php?page=chargeforms-payments&chargeforms_notice=payments_deleted' ) );
		exit;
	}

	public function register() {
		add_submenu_page(
			'chargeforms',
			__( 'Payments', 'chargeforms' ),
			__( 'Payments', 'chargeforms' ),
			'chargeforms_manage_forms',
			'chargeforms-payments',
			[ $this, 'render' ]
		);
	}

	/** Best-effort "who paid" — the first Name/Email field value found on the entry, matching how notification emails already identify a submitter. */
	private function customer_label( array $form, array $values ) {
		$name  = '';
		$email = '';
		foreach ( $form['fields'] ?? [] as $field ) {
			if ( 'name' === $field['type'] && '' === $name && ! empty( $values[ $field['id'] ] ) ) {
				$name = $values[ $field['id'] ];
			}
			if ( 'email' === $field['type'] && '' === $email && ! empty( $values[ $field['id'] ] ) ) {
				$email = $values[ $field['id'] ];
			}
		}
		if ( $name && $email ) {
			return $name . ' (' . $email . ')';
		}
		return $name ?: ( $email ?: __( '—', 'chargeforms' ) );
	}

	public function render() {
		$currencies = [
			'stripe' => strtoupper( Settings::get( 'stripe_currency', 'usd' ) ),
			'paypal' => strtoupper( Settings::get( 'paypal_currency', 'usd' ) ),
		];
		$page     = isset( $_GET['paged'] ) ? max( 1, (int) $_GET['paged'] ) : 1; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
		$per_page = isset( $_GET['per_page'] ) ? min( 200, max( 1, (int) $_GET['per_page'] ) ) : 20; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
		$form_id  = isset( $_GET['form_id'] ) ? (int) $_GET['form_id'] : 0; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
		$gateway  = isset( $_GET['gateway'] ) ? sanitize_key( $_GET['gateway'] ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended

		$forms       = Form::all();
		$forms_by_id = [];
		foreach ( $forms as $form ) {
			$forms_by_id[ $form['id'] ] = $form;
		}

		$result = Entry::payment_transactions( array_filter( [
			'page'     => $page,
			'per_page' => $per_page,
			'gateway'  => $gateway,
		] ) );
		if ( $form_id ) {
			$result['items'] = array_values( array_filter( $result['items'], fn( $row ) => (int) $row['form_id'] === $form_id ) );
		}

		// Stat-card row (design_handoff_chargeforms's Payments screen: a
		// 4-tile KPI row under the header). Stripe/PayPal revenue are kept
		// as SEPARATE tiles rather than summed — Entry::payment_total()'s
		// own doc comment warns against combining different-currency
		// totals into one meaningless figure.
		$month_start   = gmdate( 'Y-m-01' );
		$month_count   = Entry::payment_transactions( [ 'date_from' => $month_start, 'per_page' => 1 ] )['total'];
		$stripe_total  = Entry::payment_total( '', '', 'stripe' );
		$paypal_total  = Entry::payment_total( '', '', 'paypal' );
		$payment_stats = [
			[ 'label' => __( 'Total Transactions', 'chargeforms' ), 'value' => number_format_i18n( $result['total'] ), 'sub' => __( 'All time', 'chargeforms' ) ],
			[ 'label' => __( 'This Month', 'chargeforms' ), 'value' => number_format_i18n( $month_count ), 'sub' => __( 'Since the 1st', 'chargeforms' ) ],
			[ 'label' => __( 'Stripe Revenue', 'chargeforms' ), 'value' => $stripe_total > 0 ? $currencies['stripe'] . ' ' . number_format_i18n( $stripe_total, 2 ) : '—', 'sub' => __( 'Captured, all time', 'chargeforms' ) ],
			[ 'label' => __( 'PayPal Revenue', 'chargeforms' ), 'value' => $paypal_total > 0 ? $currencies['paypal'] . ' ' . number_format_i18n( $paypal_total, 2 ) : '—', 'sub' => __( 'Captured, all time', 'chargeforms' ) ],
		];
		?>
		<div class="wrap chargeforms-wrap">
			<?php Page_Header::render( 'chargeforms-payments' ); ?>

			<div class="chargeforms-payments-topbar">
				<div>
					<h1><?php esc_html_e( 'Payments', 'chargeforms' ); ?></h1>
					<div class="chargeforms-payments-subtitle"><?php esc_html_e( 'Every captured transaction across Stripe and PayPal.', 'chargeforms' ); ?></div>
				</div>
				<a href="<?php echo esc_url( admin_url( 'admin.php?page=chargeforms-settings&section=payment-settings' ) ); ?>" class="button button-primary">
					<?php Icon::render( 'admin-generic' ); ?> <?php esc_html_e( 'Payment Settings', 'chargeforms' ); ?>
				</a>
			</div>

			<div class="chargeforms-entries-stats chargeforms-payments-stats">
				<?php foreach ( $payment_stats as $stat ) : ?>
					<div class="chargeforms-entries-stat-card">
						<div class="chargeforms-entries-stat-label"><?php echo esc_html( $stat['label'] ); ?></div>
						<div class="chargeforms-entries-stat-value"><?php echo esc_html( $stat['value'] ); ?></div>
						<div class="chargeforms-entries-stat-delta"><?php echo esc_html( $stat['sub'] ); ?></div>
					</div>
				<?php endforeach; ?>
			</div>

			<?php if ( ! Settings::get( 'stripe_secret_key' ) && ! Settings::get( 'paypal_client_id' ) ) : ?>
				<div class="notice notice-warning"><p>
					<?php
					printf(
						wp_kses_post(
							/* translators: %s: link to the Payment Methods settings section */
							__( 'No payment gateway is configured yet — add your Stripe or PayPal API keys under <a href="%s">Global Settings &gt; Payment Methods</a> to start accepting payments.', 'chargeforms' )
						),
						esc_url( admin_url( 'admin.php?page=chargeforms-settings&section=payment-methods' ) )
					);
					?>
				</p></div>
			<?php endif; ?>

			<?php if ( isset( $_GET['chargeforms_notice'] ) && 'payments_deleted' === $_GET['chargeforms_notice'] ) : // phpcs:ignore WordPress.Security.NonceVerification.Recommended ?>
				<div class="notice notice-success is-dismissible"><p><?php esc_html_e( 'Selected transactions deleted.', 'chargeforms' ); ?></p></div>
			<?php endif; ?>
			<?php if ( isset( $_GET['chargeforms_notice'] ) && 'subscription_canceled' === $_GET['chargeforms_notice'] ) : // phpcs:ignore WordPress.Security.NonceVerification.Recommended ?>
				<div class="notice notice-success is-dismissible"><p><?php esc_html_e( 'Subscription canceled.', 'chargeforms' ); ?></p></div>
			<?php endif; ?>

			<?php
			// One unified panel — filters strip, table and pagination inside
			// a single bordered card, exactly as the design source draws it
			// (design_handoff_chargeforms/ChargeForms Screens.dc.html,
			// `isPayments`: a 13px 16px filter strip with a bottom rule, then
			// the table, all inside one 8px-radius card). Same treatment
			// Entries got — these were separate free-floating blocks.
			?>
			<div class="chargeforms-entries-panel chargeforms-payments-panel">

			<form method="get" class="chargeforms-payments-filters">
				<input type="hidden" name="page" value="chargeforms-payments">
				<div>
					<label for="chargeforms-pf-form"><?php esc_html_e( 'Form', 'chargeforms' ); ?></label>
					<select id="chargeforms-pf-form" name="form_id" onchange="this.form.submit()">
						<option value="0"><?php esc_html_e( 'Select Form', 'chargeforms' ); ?></option>
						<?php foreach ( $forms as $form ) : ?>
							<option value="<?php echo (int) $form['id']; ?>" <?php selected( $form_id, $form['id'] ); ?>><?php echo esc_html( $form['title'] ); ?></option>
						<?php endforeach; ?>
					</select>
				</div>
				<div>
					<label for="chargeforms-pf-method"><?php esc_html_e( 'Payment Methods', 'chargeforms' ); ?></label>
					<select id="chargeforms-pf-method" name="gateway" onchange="this.form.submit()">
						<option value=""><?php esc_html_e( 'All Methods', 'chargeforms' ); ?></option>
						<option value="stripe" <?php selected( $gateway, 'stripe' ); ?>><?php esc_html_e( 'Stripe', 'chargeforms' ); ?></option>
						<option value="paypal" <?php selected( $gateway, 'paypal' ); ?>><?php esc_html_e( 'PayPal', 'chargeforms' ); ?></option>
					</select>
				</div>
				<div class="chargeforms-payments-filter-static" title="<?php esc_attr_e( 'Only successful, one-time payments are recorded today — this will become a real filter once failed attempts or subscriptions are tracked.', 'chargeforms' ); ?>">
					<span class="chargeforms-payments-filter-static-label"><?php esc_html_e( 'Status', 'chargeforms' ); ?></span>
					<span class="chargeforms-payments-filter-static-value"><?php esc_html_e( 'Succeeded', 'chargeforms' ); ?></span>
				</div>
				<div class="chargeforms-payments-filter-static" title="<?php esc_attr_e( 'Only successful, one-time payments are recorded today — this will become a real filter once failed attempts or subscriptions are tracked.', 'chargeforms' ); ?>">
					<span class="chargeforms-payments-filter-static-label"><?php esc_html_e( 'Payment Type', 'chargeforms' ); ?></span>
					<span class="chargeforms-payments-filter-static-value"><?php esc_html_e( 'One-time', 'chargeforms' ); ?></span>
				</div>
			</form>

			<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" id="chargeforms-payments-bulk-form" class="chargeforms-bulk-bar" hidden>
				<input type="hidden" name="action" value="chargeforms_bulk_delete_payments">
				<?php wp_nonce_field( 'chargeforms_bulk_delete_payments' ); ?>
				<span
					class="chargeforms-bulk-bar-count"
					id="chargeforms-payments-bulk-count"
					data-label-singular="<?php esc_attr_e( 'transaction selected', 'chargeforms' ); ?>"
					data-label-plural="<?php esc_attr_e( 'transactions selected', 'chargeforms' ); ?>"
				></span>
				<button
					type="submit"
					class="button chargeforms-bulk-delete-btn chargeforms-confirm-action"
					data-confirm-message="<?php echo esc_attr__( 'Delete the selected transactions? This cannot be undone.', 'chargeforms' ); ?>"
					data-confirm-yes-label="<?php echo esc_attr__( 'Yes, Delete', 'chargeforms' ); ?>"
				><?php Icon::render( 'trash' ); ?> <?php esc_html_e( 'Delete Selected', 'chargeforms' ); ?></button>
			</form>

			<?php if ( empty( $result['items'] ) ) : ?>
				<div class="chargeforms-empty-state">
					<?php Icon::render( 'money-alt' ); ?>
					<p><?php esc_html_e( 'No payments captured yet. Add a Payment Item, Custom Amount, or Payment Method field to a form to start collecting them.', 'chargeforms' ); ?></p>
				</div>
			<?php else : ?>
				<table class="wp-list-table widefat fixed striped chargeforms-payments-table">
					<thead>
						<tr>
							<th class="check-column"><input type="checkbox" id="chargeforms-payments-check-all"></th>
							<th><?php esc_html_e( 'Submission ID', 'chargeforms' ); ?></th>
							<th><?php esc_html_e( 'Form', 'chargeforms' ); ?></th>
							<th><?php esc_html_e( 'Type', 'chargeforms' ); ?></th>
							<th><?php esc_html_e( 'Customer', 'chargeforms' ); ?></th>
							<th><?php esc_html_e( 'Amount', 'chargeforms' ); ?></th>
							<th><?php esc_html_e( 'Source', 'chargeforms' ); ?></th>
							<th><?php esc_html_e( 'Status', 'chargeforms' ); ?></th>
							<th><?php esc_html_e( 'Time', 'chargeforms' ); ?></th>
						</tr>
					</thead>
					<tbody>
						<?php foreach ( $result['items'] as $row ) : ?>
							<?php
							$form         = $forms_by_id[ $row['form_id'] ] ?? null;
							$entry        = Entry::get( $row['id'] );
							$values       = $entry['values'] ?? [];
							$subscription = Subscription::for_entry( $row['id'] );
							$cancel_url   = $subscription ? wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_cancel_subscription&subscription_id=' . $subscription['id'] ), 'chargeforms_cancel_subscription_' . $subscription['id'] ) : '';
							?>
							<tr>
								<td class="check-column"><input type="checkbox" name="payment_ids[]" value="<?php echo (int) $row['id']; ?>"></td>
								<td>
									<a href="<?php echo esc_url( admin_url( 'admin.php?page=chargeforms-entries&entry_id=' . $row['id'] . '&form_id=' . $row['form_id'] ) ); ?>">#<?php echo (int) $row['id']; ?></a>
								</td>
								<td>
									<?php if ( $form ) : ?>
										<a href="<?php echo esc_url( admin_url( 'admin.php?page=chargeforms-entries&form_id=' . $form['id'] ) ); ?>"><?php echo esc_html( $form['title'] ); ?></a>
									<?php else : ?>
										<?php esc_html_e( '(deleted form)', 'chargeforms' ); ?>
									<?php endif; ?>
								</td>
								<td>
									<?php if ( $subscription ) : ?>
										<?php echo esc_html( 'year' === $subscription['plan_interval'] ? __( 'Recurring (Yearly)', 'chargeforms' ) : __( 'Recurring (Monthly)', 'chargeforms' ) ); ?>
									<?php else : ?>
										<?php esc_html_e( 'One-time', 'chargeforms' ); ?>
									<?php endif; ?>
								</td>
								<td><?php echo esc_html( $form ? $this->customer_label( $form, $values ) : '—' ); ?></td>
								<td><?php echo esc_html( ( $currencies[ $row['payment_gateway'] ] ?? $currencies['stripe'] ) . ' ' . number_format_i18n( (float) $row['amount'], 2 ) ); ?></td>
								<td>
									<?php $is_paypal = 'paypal' === $row['payment_gateway']; ?>
									<span class="chargeforms-gateway-badge <?php echo $is_paypal ? 'is-paypal' : 'is-stripe'; ?>"><?php echo esc_html( $is_paypal ? __( 'PayPal', 'chargeforms' ) : __( 'Stripe', 'chargeforms' ) ); ?></span>
								</td>
								<td>
									<?php if ( $subscription ) : ?>
										<span class="chargeforms-status"><?php echo esc_html( ucfirst( str_replace( '_', ' ', $subscription['status'] ) ) ); ?></span>
										<?php if ( in_array( $subscription['status'], Subscription::CANCELABLE_STATUSES, true ) ) : ?>
											<a
												href="<?php echo esc_url( $cancel_url ); ?>"
												class="chargeforms-cancel-subscription-link chargeforms-confirm-action"
												data-confirm-message="<?php echo esc_attr__( 'Cancel this subscription immediately? The subscriber will not be billed again.', 'chargeforms' ); ?>"
												data-confirm-yes-label="<?php echo esc_attr__( 'Yes, Cancel', 'chargeforms' ); ?>"
											><?php esc_html_e( 'Cancel', 'chargeforms' ); ?></a>
										<?php endif; ?>
										<?php if ( 'stripe' === $subscription['gateway'] && ! empty( $subscription['gateway_customer_id'] ) ) : ?>
											<a href="<?php echo esc_url( Subscription_Portal::manage_url( $subscription['id'] ) ); ?>" target="_blank" rel="noopener noreferrer">
												<?php esc_html_e( 'Manage in Stripe', 'chargeforms' ); ?>
											</a>
										<?php endif; ?>
									<?php else : ?>
										<span class="chargeforms-status chargeforms-status-succeeded"><?php esc_html_e( 'Succeeded', 'chargeforms' ); ?></span>
									<?php endif; ?>
								</td>
								<td><?php echo esc_html( mysql2date( 'M j, Y g:ia', get_date_from_gmt( $row['created_at'], 'Y-m-d H:i:s' ) ) ); // created_at is GMT (roadmap issue #27) — convert to site-local before display. ?></td>
							</tr>
						<?php endforeach; ?>
					</tbody>
				</table>
				<?php
				wp_add_inline_script( 'chargeforms-admin', '				( function () {
					var checkAll  = document.getElementById( \'chargeforms-payments-check-all\' );
					var rowChecks = function () { return document.querySelectorAll( \'input[name="payment_ids[]"]\' ); };
					var bulkForm  = document.getElementById( \'chargeforms-payments-bulk-form\' );
					var bulkCount = document.getElementById( \'chargeforms-payments-bulk-count\' );

					function updateBulkBar() {
						var checked = document.querySelectorAll( \'input[name="payment_ids[]"]:checked\' );
						bulkForm.hidden = checked.length === 0;
						bulkCount.textContent = checked.length + \' \' + ( checked.length === 1 ? bulkCount.getAttribute( \'data-label-singular\' ) : bulkCount.getAttribute( \'data-label-plural\' ) );
					}

					checkAll.addEventListener( \'change\', function () {
						var checked = this.checked;
						rowChecks().forEach( function ( cb ) { cb.checked = checked; } );
						updateBulkBar();
					} );
					rowChecks().forEach( function ( cb ) { cb.addEventListener( \'change\', updateBulkBar ); } );
					bulkForm.addEventListener( \'submit\', function () {
						bulkForm.querySelectorAll( \'input[name="payment_ids[]"]\' ).forEach( function ( input ) { input.remove(); } );
						document.querySelectorAll( \'input[name="payment_ids[]"]:checked\' ).forEach( function ( box ) {
							var input = document.createElement( \'input\' );
							input.type  = \'hidden\';
							input.name  = \'payment_ids[]\';
							input.value = box.value;
							bulkForm.appendChild( input );
						} );
					} );
				} )();'
				);

				?>
				// Matches the numbered pager (with jumper + per-page selector) already
				// shipped for Entries — the reference product's own real pagination pattern
				// (total/sizes/prev/pager/next/jumper), see the plugin's internal design-fidelity research doc.
				// Payments' own $result already comes from Entry::payment_transactions()
				// with a fixed per_page=20 (line ~145 above); the per-page selector is
				// still offered here since the helper wires it through the normal
				// 'per_page' query arg, same as every other paginated screen.
				$pagination_base_args = array_filter( [
					'page'     => 'chargeforms-payments',
					'form_id'  => $form_id ?: null,
					'gateway'  => $gateway ?: null,
					'per_page' => $result['per_page'],
				] );
				\ChargeForms\Includes\Pagination_Helper::render( $result, $pagination_base_args, [ 'jumper_id' => 'chargeforms-payments-jumper' ] );
				?>
			<?php endif; ?>

			</div><?php // .chargeforms-payments-panel ?>
		</div>
		<?php
	}
}