<?php
/**
 * Configurable recognition levels and independent decorative badges.
 *
 * @package DevoynxRewards
 */

namespace Devoynx\Rewards\Programs;

use Devoynx\Rewards\Database\LedgerRepository;

defined( 'ABSPATH' ) || exit;

/** Read-only qualification avoids secondary balances and duplicate badge awards. */
final class Recognition {

	const OPTION = 'devoynx_rewards_recognition';

	/** Register merchant configuration and owner-only customer display. */
	public function register() {
		add_filter( 'devoynx_rewards_admin_tabs', array( $this, 'tabs' ) );
		add_action( 'devoynx_rewards_admin_tab', array( $this, 'render_admin' ) );
		add_action( 'admin_post_devoynx_rewards_recognition', array( $this, 'save' ) );
		add_action( 'devoynx_rewards_wallet_after_activity', array( $this, 'render_wallet' ), 12 );
	}

	/**
	 * Add recognition configuration to the merchant navigation.
	 *
	 * @param array $tabs Existing tabs.
	 * @return array
	 */
	public function tabs( $tabs ) {
		$tabs['recognition'] = __( 'Levels and badges', 'devoynx-rewards' );
		return $tabs;
	}

	/**
	 * Read safe configuration; the program is disabled by default.
	 *
	 * @return array
	 */
	public function settings() {
		$result = $this->sanitize( get_option( self::OPTION, array() ) );
		return is_wp_error( $result ) ? array(
			'enabled' => 0,
			'levels'  => array(),
			'badges'  => array(),
		) : $result;
	}

	/**
	 * Validate every submitted definition and allowlisted merchant field.
	 *
	 * @param mixed $input Submitted configuration.
	 * @return array|\WP_Error
	 */
	public function sanitize( $input ) {
		$error = new \WP_Error( 'devoynx_recognition_invalid', __( 'Use a name and a whole-number threshold from 1 to 1,000,000,000. Membership level thresholds must be unique.', 'devoynx-rewards' ) );
		if ( ! is_array( $input ) ) {
			return $error;
		}
		$result = array(
			'enabled' => empty( $input['enabled'] ) ? 0 : 1,
			'levels'  => array(),
			'badges'  => array(),
		);
		foreach ( array( 'levels', 'badges' ) as $kind ) {
			$rows = $input[ $kind ] ?? array();
			if ( ! is_array( $rows ) ) {
				return $error;
			}
			foreach ( $rows as $row ) {
				if ( ! is_array( $row ) || ! is_scalar( $row['name'] ?? '' ) || ! is_scalar( $row['description'] ?? '' ) || ! is_scalar( $row['threshold'] ?? '' ) ) {
					return $error;
				}
				$name = sanitize_text_field( (string) ( $row['name'] ?? '' ) );
				if ( '' === $name ) {
					continue;
				}
				$threshold = filter_var(
					$row['threshold'] ?? '',
					FILTER_VALIDATE_INT,
					array(
						'options' => array(
							'min_range' => 1,
							'max_range' => 1000000000,
						),
					)
				);
				$metric    = 'levels' === $kind ? 'net_earned' : ( $row['metric'] ?? 'net_earned' );
				if ( false === $threshold || ! in_array( $metric, array( 'net_earned', 'net_redeemed' ), true ) ) {
					return $error;
				}
				$result[ $kind ][] = array(
					'name'        => mb_substr( $name, 0, 80 ),
					'description' => mb_substr( sanitize_text_field( (string) ( $row['description'] ?? '' ) ), 0, 240 ),
					'threshold'   => $threshold,
					'metric'      => $metric,
				);
			}
		}
		$thresholds = array();
		foreach ( $result['levels'] as $level ) {
			if ( isset( $thresholds[ $level['threshold'] ] ) ) {
				return $error;
			}
			$thresholds[ $level['threshold'] ] = true;
		}
		return $result;
	}

	/** Save only authorized, nonce-protected POST configuration. */
	public function save() {
		if ( 'POST' !== sanitize_text_field( wp_unslash( $_SERVER['REQUEST_METHOD'] ?? '' ) ) || ! current_user_can( 'manage_devoynx_rewards' ) ) {
			wp_die( esc_html__( 'Permission denied.', 'devoynx-rewards' ), 403 );
		}
		check_admin_referer( 'devoynx_rewards_recognition' );
		// The validator checks every scalar, bounds and supported fields before persistence.
		$settings = $this->sanitize( isset( $_POST['recognition'] ) ? wp_unslash( $_POST['recognition'] ) : array() ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- Strict allowlist validation in sanitize() directly above persistence.
		if ( ! is_wp_error( $settings ) ) {
			update_option( self::OPTION, $settings, false );
		}
		wp_safe_redirect(
			add_query_arg(
				array(
					'page'               => 'devoynx-rewards',
					'tab'                => 'recognition',
					'recognition_result' => is_wp_error( $settings ) ? 'invalid' : 'saved',
				),
				admin_url( 'admin.php' )
			)
		);
		exit;
	}

	/**
	 * Derive progress from the immutable ledger, subtracting outstanding correction debt.
	 *
	 * Spending and expiry do not revoke earned recognition. Reversals and refund
	 * debt do. Redeemed progress is net of returned redemptions. No read awards points.
	 *
	 * @param int $user_id Customer ID.
	 * @return array
	 */
	public function progress( $user_id ) {
		global $wpdb;
		// phpcs:ignore WordPress.DB.DirectDatabaseQuery -- Fresh indexed customer aggregate from the canonical ledger; no alternate balance is stored.
		$earned   = (int) $wpdb->get_var( $wpdb->prepare( "SELECT COALESCE(SUM(CASE WHEN from_bucket = '' THEN points ELSE 0 END),0) - COALESCE(SUM(CASE WHEN to_bucket = 'reversed' THEN points ELSE 0 END),0) FROM %i WHERE user_id = %d", $wpdb->prefix . 'devoynx_rewards_ledger', absint( $user_id ) ) );
		$balance  = ( new LedgerRepository() )->get_balance( $user_id );
		$settings = $this->settings();
		$result   = array(
			'net_earned'   => max( 0, $earned - absint( get_user_meta( $user_id, '_devoynx_rewards_reversal_due', true ) ) ),
			'net_redeemed' => $balance['redeemed'],
			'current'      => null,
			'levels'       => array(),
			'badges'       => array(),
		);
		foreach ( array( 'levels', 'badges' ) as $kind ) {
			foreach ( $settings[ $kind ] as $definition ) {
				$definition['value']     = $result[ $definition['metric'] ];
				$definition['qualified'] = $definition['value'] >= $definition['threshold'];
				$definition['remaining'] = max( 0, $definition['threshold'] - $definition['value'] );
				$result[ $kind ][]       = $definition;
				if ( 'levels' === $kind && $definition['qualified'] && ( ! $result['current'] || $definition['threshold'] > $result['current']['threshold'] ) ) {
					$result['current'] = $definition;
				}
			}
		}
		return $result;
	}

	/**
	 * Render only the signed-in owner's Free recognition progress.
	 *
	 * @param int $user_id Wallet owner.
	 */
	public function render_wallet( $user_id ) {
		$settings = $this->settings();
		if ( ! $settings['enabled'] || ! $user_id || get_current_user_id() !== (int) $user_id ) {
			return;
		}
		$progress = $this->progress( $user_id );
		?>
		<div class="devoynx-recognition">
		<section aria-labelledby="devoynx-levels-title"><p class="devoynx-wallet__eyebrow"><?php esc_html_e( 'Your membership', 'devoynx-rewards' ); ?></p><h3 id="devoynx-levels-title"><?php esc_html_e( 'Membership levels', 'devoynx-rewards' ); ?></h3>
		<p><?php esc_html_e( 'Current level:', 'devoynx-rewards' ); ?> <strong><?php echo esc_html( $progress['current'] ? $progress['current']['name'] : __( 'Getting started', 'devoynx-rewards' ) ); ?></strong></p>
		<p><?php esc_html_e( 'Levels recognize your net lifetime points earned. Spending or expiry does not lower a level; refunds and corrections can. Levels do not change earning rates or prices.', 'devoynx-rewards' ); ?></p>
		<?php $this->cards( $progress['levels'], 'levels' ); ?>
		</section>
		<section aria-labelledby="devoynx-badges-title"><p class="devoynx-wallet__eyebrow"><?php esc_html_e( 'Milestones, not membership ranks', 'devoynx-rewards' ); ?></p><h3 id="devoynx-badges-title"><?php esc_html_e( 'Achievement badges', 'devoynx-rewards' ); ?></h3>
		<p><?php esc_html_e( 'Each badge is a separate achievement. Badges have no cash or points value and reflect current qualification after refunds and corrections.', 'devoynx-rewards' ); ?></p>
		<?php $this->cards( $progress['badges'], 'badges' ); ?>
		</section></div>
		<?php
	}

	/**
	 * Render accessible metric cards without color-only status or interactive decoration.
	 *
	 * @param array  $items Definitions with current progress.
	 * @param string $kind Definition kind.
	 */
	private function cards( $items, $kind ) {
		if ( ! $items ) {
			echo '<p class="devoynx-wallet__empty">' . esc_html__( 'The store has not configured milestones here yet.', 'devoynx-rewards' ) . '</p>';
			return;
		}
		echo '<div class="devoynx-milestone-grid">';
		foreach ( $items as $item ) {
			$metric = 'net_redeemed' === $item['metric'] ? __( 'Net points used', 'devoynx-rewards' ) : __( 'Net lifetime points earned', 'devoynx-rewards' );
			?>
			<article class="devoynx-milestone <?php echo $item['qualified'] ? 'devoynx-milestone--qualified' : ''; ?>">
			<span class="devoynx-milestone__symbol" aria-hidden="true"><?php echo 'badges' === $kind ? '&#10022;' : '&#9670;'; ?></span>
			<h4><?php echo esc_html( $item['name'] ); ?></h4><span class="devoynx-milestone__status"><?php echo esc_html( $item['qualified'] ? __( 'Achieved', 'devoynx-rewards' ) : __( 'In progress', 'devoynx-rewards' ) ); ?></span>
			<?php
			if ( $item['description'] ) :
				?>
				<p><?php echo esc_html( $item['description'] ); ?></p><?php endif; ?>
			<p><?php echo esc_html( $metric ); ?>: <strong><?php echo esc_html( number_format_i18n( $item['value'] ) . ' / ' . number_format_i18n( $item['threshold'] ) ); ?></strong></p>
			<progress max="<?php echo esc_attr( $item['threshold'] ); ?>" value="<?php echo esc_attr( min( $item['value'], $item['threshold'] ) ); ?>" aria-label="<?php echo esc_attr( $item['name'] . ': ' . $metric ); ?>"></progress>
			<?php
			if ( $item['remaining'] ) :
				?>
				<p class="devoynx-milestone__remaining">
				<?php
				/* translators: %s: localized remaining point count. */
				echo esc_html( sprintf( __( '%s more points to reach this milestone.', 'devoynx-rewards' ), number_format_i18n( $item['remaining'] ) ) );
				?>
			</p><?php endif; ?>
			</article>
			<?php
		}
		echo '</div>';
	}

	/**
	 * Render all saved definitions with accessible repeatable controls.
	 *
	 * @param string $tab Current admin tab.
	 */
	public function render_admin( $tab ) {
		if ( 'recognition' !== $tab || ! current_user_can( 'manage_devoynx_rewards' ) ) {
			return;
		}
		$settings = $this->settings();
		// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only result notice after the capability check.
		$result = isset( $_GET['recognition_result'] ) ? sanitize_key( wp_unslash( $_GET['recognition_result'] ) ) : '';
		?>
		<section class="devoynx-panel"><h2><?php esc_html_e( 'Recognition that customers can follow', 'devoynx-rewards' ); ?></h2><p><?php esc_html_e( 'Configure membership levels and independent achievement badges in the order customers should see them. These are recognition milestones, not earning multipliers or spendable rewards.', 'devoynx-rewards' ); ?></p>
		<?php
		if ( 'invalid' === $result ) :
			?>
			<p role="alert" class="devoynx-status--bad"><?php esc_html_e( 'Nothing was saved. Use different level thresholds, supported badge metrics and whole-number thresholds between 1 and 1,000,000,000.', 'devoynx-rewards' ); ?></p>
			<?php
elseif ( 'saved' === $result ) :
	?>
			<p role="status" class="devoynx-status--ok"><?php esc_html_e( 'Recognition settings saved.', 'devoynx-rewards' ); ?></p><?php endif; ?>
		<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>">
		<input type="hidden" name="action" value="devoynx_rewards_recognition" /><?php wp_nonce_field( 'devoynx_rewards_recognition' ); ?>
		<label class="devoynx-form__check"><input type="checkbox" name="recognition[enabled]" value="1" <?php checked( $settings['enabled'], 1 ); ?> /><?php esc_html_e( 'Show recognition in customer wallets', 'devoynx-rewards' ); ?></label>
		<?php
		foreach ( array(
			'levels' => __( 'Membership levels', 'devoynx-rewards' ),
			'badges' => __( 'Achievement badges', 'devoynx-rewards' ),
		) as $kind => $title ) :
			?>
			<h3><?php echo esc_html( $title ); ?></h3>
			<div class="devoynx-definition-grid" data-dyr-repeat="recognition" data-dyr-list="recognition-<?php echo esc_attr( $kind ); ?>">
			<?php
			$items = $settings[ $kind ];
			foreach ( $items as $index => $item ) {
				$this->definition_fields( $kind, $title, $index, $item );
			}
			?>
			</div>
			<template data-dyr-template="recognition-<?php echo esc_attr( $kind ); ?>"><?php $this->definition_fields( $kind, $title, 0, array() ); ?></template>
			<p><button type="button" class="button" data-dyr-add="recognition-<?php echo esc_attr( $kind ); ?>" data-dyr-list="recognition-<?php echo esc_attr( $kind ); ?>"><?php echo esc_html( sprintf( /* translators: %s: definition type. */ __( 'Add %s', 'devoynx-rewards' ), strtolower( $title ) ) ); ?></button></p>
		<?php endforeach; ?>
		<?php submit_button( __( 'Save recognition settings', 'devoynx-rewards' ) ); ?></form></section>
		<?php
	}

	/**
	 * Render one repeatable recognition definition.
	 *
	 * @param string $kind Definition type.
	 * @param string $title Visible type label.
	 * @param int    $index Row index.
	 * @param array  $item Saved definition.
	 */
	private function definition_fields( $kind, $title, $index, $item ) {
		$item   = wp_parse_args(
			$item,
			array(
				'name'        => '',
				'description' => '',
				'threshold'   => '',
				'metric'      => 'net_earned',
			)
		);
		$prefix = 'recognition[' . $kind . '][' . absint( $index ) . ']';
		?>
		<fieldset class="devoynx-definition" data-dyr-row><legend><?php echo esc_html( $title ); ?> <span data-dyr-row-number><?php echo esc_html( absint( $index ) + 1 ); ?></span></legend>
		<label><?php esc_html_e( 'Name', 'devoynx-rewards' ); ?><input name="<?php echo esc_attr( $prefix . '[name]' ); ?>" value="<?php echo esc_attr( $item['name'] ); ?>" maxlength="80" /></label>
		<label><?php esc_html_e( 'Short description', 'devoynx-rewards' ); ?><input name="<?php echo esc_attr( $prefix . '[description]' ); ?>" value="<?php echo esc_attr( $item['description'] ); ?>" maxlength="240" /></label>
		<label><?php esc_html_e( 'Required points', 'devoynx-rewards' ); ?><input type="number" min="1" max="1000000000" step="1" name="<?php echo esc_attr( $prefix . '[threshold]' ); ?>" value="<?php echo esc_attr( $item['threshold'] ); ?>" /></label>
		<?php if ( 'badges' === $kind ) : ?>
		<label><?php esc_html_e( 'Achievement metric', 'devoynx-rewards' ); ?><select name="<?php echo esc_attr( $prefix . '[metric]' ); ?>"><option value="net_earned" <?php selected( $item['metric'], 'net_earned' ); ?>><?php esc_html_e( 'Net lifetime points earned', 'devoynx-rewards' ); ?></option><option value="net_redeemed" <?php selected( $item['metric'], 'net_redeemed' ); ?>><?php esc_html_e( 'Net points used', 'devoynx-rewards' ); ?></option></select></label>
		<?php endif; ?>
		<div class="devoynx-repeat-actions"><button type="button" class="button" data-dyr-move="up"><?php esc_html_e( 'Move up', 'devoynx-rewards' ); ?></button><button type="button" class="button" data-dyr-move="down"><?php esc_html_e( 'Move down', 'devoynx-rewards' ); ?></button><button type="button" class="button button-link-delete" data-dyr-remove><?php esc_html_e( 'Remove', 'devoynx-rewards' ); ?></button></div>
		</fieldset>
		<?php
	}
}