<?php
/**
 * Setup checklist screen.
 *
 * @package DocsInOrder
 */

defined( 'ABSPATH' ) || exit;

/**
 * A checklist that makes sure DocsInOrder will work on this site:
 * branding, email delivery, private storage, HTTPS and server features.
 * Opens once after the first activation (never during bulk activation),
 * and stays under DocsInOrder → Setup. Administrators only.
 */
class DOCSINO_Admin_Setup {

	/**
	 * Hook the redirect and form handlers.
	 */
	public function __construct() {
		add_action( 'admin_init', array( $this, 'maybe_redirect_after_activation' ) );
		add_action( 'admin_post_docsino_send_test_email', array( $this, 'handle_send_test_email' ) );
		add_action( 'admin_post_docsino_confirm_email', array( $this, 'handle_confirm_email' ) );
		add_action( 'admin_post_docsino_check_storage', array( $this, 'handle_check_storage' ) );
		add_action( 'admin_post_docsino_check_links', array( $this, 'handle_check_links' ) );
		add_action( 'admin_post_docsino_setup_branding', array( $this, 'handle_branding' ) );
	}

	/**
	 * Save the firm name and logo from the Setup screen and come straight back.
	 */
	public function handle_branding() {
		DOCSINO_Admin::authorize( 'docsino_setup_branding', 'manage_options' );
		// phpcs:disable WordPress.Security.NonceVerification.Missing -- Verified in authorize().
		DOCSINO_Settings::save(
			array(
				'firm_name'    => isset( $_POST['firm_name'] ) ? sanitize_text_field( wp_unslash( $_POST['firm_name'] ) ) : '',
				'firm_logo_id' => isset( $_POST['firm_logo_id'] ) ? absint( $_POST['firm_logo_id'] ) : 0,
			)
		);
		// phpcs:enable
		DOCSINO_Admin::redirect( DOCSINO_Admin::page_url( 'docs-in-order-setup' ) . '#dio-setup-list', 'setup_branding_saved' );
	}

	/**
	 * Why the next step matters, shown in the "Next" line.
	 *
	 * @param string $key Check key.
	 * @return string
	 */
	private function next_reason( $key ) {
		$reasons = array(
			'branding'   => __( 'so clients know who is asking for their documents.', 'docs-in-order' ),
			'email'      => __( 'so you know client emails will arrive.', 'docs-in-order' ),
			'links'      => __( 'so client links open DocsInOrder, not a "page not found" error.', 'docs-in-order' ),
			'storage'    => __( 'so client files can be saved.', 'docs-in-order' ),
			'private'    => __( 'so nobody can open client files from the web.', 'docs-in-order' ),
			'https'      => __( 'so documents travel over a secure connection.', 'docs-in-order' ),
			'permalinks' => __( 'so client links look clean and work reliably.', 'docs-in-order' ),
		);
		return isset( $reasons[ $key ] ) ? $reasons[ $key ] : '';
	}

	/**
	 * Test that a client link reaches DocsInOrder.
	 */
	public function handle_check_links() {
		DOCSINO_Admin::authorize( 'docsino_check_links', 'manage_options' );
		DOCSINO_Portal::check_links();
		DOCSINO_Admin::redirect( DOCSINO_Admin::page_url( 'docs-in-order-setup', array( 'docsino_done' => 1 ) ) . '#dio-setup-list' );
	}

	/**
	 * Open Setup once after the first activation.
	 */
	public function maybe_redirect_after_activation() {
		if ( ! get_transient( 'docsino_activation_redirect' ) ) {
			return;
		}
		delete_transient( 'docsino_activation_redirect' );

		// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Only checking how the plugin was activated.
		$bulk = isset( $_GET['activate-multi'] );
		if ( $bulk || wp_doing_ajax() || is_network_admin() || ! current_user_can( 'manage_options' ) ) {
			return;
		}
		wp_safe_redirect( DOCSINO_Admin::page_url( 'docs-in-order-setup' ) );
		exit;
	}

	/**
	 * Send a test email to the current user.
	 */
	public function handle_send_test_email() {
		DOCSINO_Admin::authorize( 'docsino_send_test_email', 'manage_options' );
		$user = wp_get_current_user();
		// phpcs:ignore WordPress.Security.NonceVerification.Missing -- Verified in authorize().
		$to   = isset( $_POST['send_to'] ) ? sanitize_email( wp_unslash( $_POST['send_to'] ) ) : '';
		$sent = DOCSINO_Emails::send_test( is_email( $to ) ? $to : $user->user_email );
		if ( is_email( $to ) ) {
			update_option( 'docsino_email_check_to', $to, false );
		}
		$url  = DOCSINO_Admin::page_url( 'docs-in-order-setup' ) . '#dio-check-email';
		if ( is_wp_error( $sent ) ) {
			update_option( 'docsino_email_check', 'failed', false );
			DOCSINO_Admin::fail( $sent->get_error_message(), $url );
		}
		update_option( 'docsino_email_check', 'sent', false );
		DOCSINO_Admin::redirect( $url, 'test_email_sent' );
	}

	/**
	 * Record whether the test email arrived.
	 */
	public function handle_confirm_email() {
		DOCSINO_Admin::authorize( 'docsino_confirm_email', 'manage_options' );
		// phpcs:ignore WordPress.Security.NonceVerification.Missing -- Verified in authorize().
		$arrived = isset( $_POST['arrived'] ) && 'yes' === $_POST['arrived'];
		update_option( 'docsino_email_check', $arrived ? 'confirmed' : 'failed', false );
		DOCSINO_Admin::redirect( $arrived ? DOCSINO_Admin::page_url( 'docs-in-order-setup', array( 'docsino_done' => 1 ) ) . '#dio-setup-list' : DOCSINO_Admin::page_url( 'docs-in-order-setup' ) . '#dio-check-email' );
	}

	/**
	 * Run the storage web-access check.
	 */
	public function handle_check_storage() {
		DOCSINO_Admin::authorize( 'docsino_check_storage', 'manage_options' );
		DOCSINO_Storage::check_web_access();
		DOCSINO_Admin::redirect( DOCSINO_Admin::page_url( 'docs-in-order-setup', array( 'docsino_done' => 1 ) ) . '#dio-setup-list' );
	}

	/**
	 * The checklist.
	 */
	public function render_page() {
		/**
		 * Checks shown on the Setup screen (key => check).
		 *
		 * @param array $checks Checks.
		 */
		$checks = (array) apply_filters( 'docsino_setup_checks', DOCSINO_Health::checks() );
		$done   = DOCSINO_Health::passed( $checks );
		$total  = count( $checks );
		$email  = get_option( 'docsino_email_check' );
		$next   = '';
		foreach ( $checks as $key => $check ) {
			if ( 'good' !== $check['status'] ) {
				$next = $key; // The first unfinished step is opened and highlighted.
				break;
			}
		}
		// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Only reading which notice to show.
		$just_did = ( isset( $_GET['docsino_notice'] ) && false !== strpos( sanitize_text_field( wp_unslash( $_GET['docsino_notice'] ) ), 'setup_branding_saved' ) ) || ! empty( $_GET['docsino_done'] );
		?>
		<div class="wrap dio-setup">
			<h1><?php esc_html_e( 'Set up DocsInOrder', 'docs-in-order' ); ?></h1>
			<p class="dio-lead"><?php esc_html_e( 'A few quick checks so that collecting documents works smoothly and safely on this site.', 'docs-in-order' ); ?></p>
			<?php DOCSINO_Admin::render_notices(); ?>

			<div class="dio-setup__progress">
				<?php echo DOCSINO_Admin::progress_bar( $done, $total ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- Escaped in progress_bar(). ?>
				<span>
					<?php
					/* translators: 1: checks passed, 2: total checks. */
					echo esc_html( sprintf( __( '%1$d of %2$d ready', 'docs-in-order' ), $done, $total ) );
					?>
				</span>
			</div>

			<?php if ( $done === $total ) : ?>
				<div class="dio-setup-done">
					<span class="dio-setup-done__icon" aria-hidden="true">&#10003;</span>
					<div class="dio-setup-done__text">
						<p class="dio-setup-done__title"><?php esc_html_e( 'You\'re all set', 'docs-in-order' ); ?></p>
						<p><?php esc_html_e( 'DocsInOrder is ready to collect documents safely on this site.', 'docs-in-order' ); ?></p>
					</div>
					<a class="dio-setup-done__button" href="<?php echo esc_url( DOCSINO_Admin::page_url( 'docs-in-order', array( 'view' => 'new' ) ) ); ?>"><?php esc_html_e( 'Create your first request', 'docs-in-order' ); ?> &rarr;</a>
				</div>
			<?php endif; ?>

			<?php if ( $done === $total ) : ?>
				<details class="dio-setup-details">
					<summary>
						<?php
						/* translators: %d: number of checks. */
						echo esc_html( sprintf( _n( '%d check passed', '%d checks passed', $total, 'docs-in-order' ), $total ) );
						?>
						<span class="dio-setup-details__show"><?php esc_html_e( 'Show details', 'docs-in-order' ); ?></span>
					</summary>
			<?php endif; ?>

			<ol class="dio-checks" id="dio-setup-list">
				<?php foreach ( $checks as $key => $check ) : ?>
					<?php
					$is_next = $key === $next;
					$compact = 'good' === $check['status'];
					?>
					<?php if ( $is_next && $done > 0 ) : ?>
						<li class="dio-setup-nextline" aria-live="polite">
							<span aria-hidden="true">&rarr;</span>
							<span>
								<strong>
									<?php
									echo $just_did
										/* translators: %s: name of the next setup step. */
										? esc_html( sprintf( __( 'Nice. Next: %s', 'docs-in-order' ), $check['label'] ) )
										/* translators: %s: name of the next setup step. */
										: esc_html( sprintf( __( 'Next: %s', 'docs-in-order' ), $check['label'] ) );
									?>
								</strong>
								<?php echo esc_html( $this->next_reason( $key ) ); ?>
							</span>
						</li>
					<?php endif; ?>
					<li class="dio-check dio-check--<?php echo esc_attr( $check['status'] ); ?><?php echo $is_next ? ' dio-check--next' : ''; ?><?php echo $compact ? ' dio-check--compact' : ''; ?>" id="dio-check-<?php echo esc_attr( $key ); ?>">
						<span class="dio-check__icon" aria-hidden="true"><?php echo 'good' === $check['status'] ? '&#10003;' : ( 'critical' === $check['status'] ? '!' : '&bull;' ); ?></span>
						<div class="dio-check__body">
							<h2>
								<?php echo esc_html( $check['label'] ); ?>
								<?php if ( 'branding' === $key && $compact ) : ?>
									<span class="dio-check__value">&middot; <?php echo esc_html( DOCSINO_Settings::firm_name() ); ?><?php echo ! empty( $check['hint'] ) ? ' &middot; ' . esc_html( $check['hint'] ) : ''; ?></span>
								<?php endif; ?>
								<span class="screen-reader-text">
									<?php
									echo 'good' === $check['status'] ? esc_html__( '(done)', 'docs-in-order' )
										: ( 'critical' === $check['status'] ? esc_html__( '(needs fixing)', 'docs-in-order' ) : esc_html__( '(recommended)', 'docs-in-order' ) );
									?>
								</span>
							</h2>
							<?php if ( ! $compact ) : ?>
								<p><?php echo esc_html( $check['description'] ); ?></p>
								<?php if ( ! empty( $check['code'] ) ) : ?>
									<pre class="dio-code"><?php echo esc_html( $check['code'] ); ?></pre>
								<?php endif; ?>
							<?php endif; ?>
							<?php $this->render_action( isset( $check['action'] ) ? $check['action'] : '', $check['status'], $email, $is_next ); ?>
						</div>
					</li>
				<?php endforeach; ?>
			</ol>

			<?php if ( $done === $total ) : ?>
				</details>
			<?php endif; ?>

			<?php if ( docsino_freemius_ready() && docsino_fs()->is_anonymous() ) : ?>
				<section class="dio-optin" aria-labelledby="dio-optin-title">
					<h2 id="dio-optin-title"><?php esc_html_e( 'Never miss an important update', 'docs-in-order' ); ?></h2>
					<p><?php esc_html_e( 'Optional: get emails about security and feature updates, helpful guides and occasional offers, and share basic WordPress details (versions, plugins and theme) so we can make DocsInOrder work better on sites like yours.', 'docs-in-order' ); ?></p>
					<p><strong><?php esc_html_e( 'Your clients\' names, emails and documents are never shared.', 'docs-in-order' ); ?></strong> <?php esc_html_e( 'You can change your mind any time from the Account page.', 'docs-in-order' ); ?></p>
					<p class="dio-button-row">
						<a class="button" href="<?php echo esc_url( docsino_fs()->get_reconnect_url() ); ?>"><?php esc_html_e( 'Yes, keep me updated', 'docs-in-order' ); ?></a>
					</p>
				</section>
			<?php endif; ?>

			<p class="dio-setup__next">
				<?php if ( $done !== $total ) : // When everything is done, the banner above has this button. ?>
					<a class="button button-primary button-hero" href="<?php echo esc_url( DOCSINO_Admin::page_url( 'docs-in-order', array( 'view' => 'new' ) ) ); ?>"><?php esc_html_e( 'Create your first request', 'docs-in-order' ); ?></a>
				<?php endif; ?>
				<a class="button button-hero" href="<?php echo esc_url( DOCSINO_Admin::page_url() ); ?>"><?php esc_html_e( 'Go to requests', 'docs-in-order' ); ?></a>
			</p>
			<p class="description"><?php esc_html_e( 'You can come back to this checklist any time under DocsInOrder → Setup.', 'docs-in-order' ); ?></p>
		</div>
		<?php
	}

	/**
	 * Button or link for a check.
	 *
	 * @param string       $action Action key.
	 * @param string       $status Check status.
	 * @param string|false $email  Email check state.
	 */
	private function render_action( $action, $status, $email, $open = false ) {
		switch ( $action ) {
			case 'settings':
				$this->render_branding_form( 'good' !== $status || $open );
				break;

			case 'email_test':
				if ( 'sent' === $email ) {
					$user = wp_get_current_user();
					echo '<p><strong>';
					/* translators: %s: email address. */
					echo esc_html( sprintf( __( 'We sent a test email to %s. Did it arrive? Check your spam folder too.', 'docs-in-order' ), $this->test_email_to() ) );
					echo '</strong></p>';
					DOCSINO_Admin::form_open( 'docsino_confirm_email', 'docsino_confirm_email', array(), 'dio-button-row' );
					echo '<button type="submit" name="arrived" value="yes" class="button button-primary">' . esc_html__( 'Yes, I got it', 'docs-in-order' ) . '</button>';
					echo '<button type="submit" name="arrived" value="no" class="button">' . esc_html__( 'No, it didn\'t arrive', 'docs-in-order' ) . '</button>';
					echo '</form>';
				}
				DOCSINO_Admin::form_open( 'docsino_send_test_email', 'docsino_send_test_email', array(), 'dio-setup-form dio-setup-form--inline' );
				echo '<label for="dio-test-to">' . esc_html__( 'Send to', 'docs-in-order' ) . '</label> ';
				echo '<input type="email" id="dio-test-to" name="send_to" class="regular-text" value="' . esc_attr( $this->test_email_to() ) . '" required> ';
				echo '<button type="submit" class="button' . ( $email ? '' : ' button-primary' ) . '">' . esc_html( $email ? __( 'Send another test email', 'docs-in-order' ) : __( 'Send test email', 'docs-in-order' ) ) . '</button>';
				echo '</form>';
				break;

			case 'storage_check':
				DOCSINO_Admin::form_open( 'docsino_check_storage', 'docsino_check_storage', array(), 'dio-inline-form' );
				echo '<button type="submit" class="button">' . esc_html( 'good' === $status ? __( 'Check again', 'docs-in-order' ) : __( 'Check now', 'docs-in-order' ) ) . '</button>';
				echo '</form>';
				break;

			case 'link_check':
				DOCSINO_Admin::form_open( 'docsino_check_links', 'docsino_check_links', array(), 'dio-inline-form' );
				echo '<button type="submit" class="button">' . esc_html( 'good' === $status ? __( 'Check again', 'docs-in-order' ) : __( 'Test now', 'docs-in-order' ) ) . '</button>';
				echo '</form>';
				break;

			case 'permalinks':
				printf(
					'<a class="button" href="%1$s" target="_blank" rel="noopener" data-dio-recheck>%2$s<span class="screen-reader-text"> %3$s</span></a> <span class="description">%4$s</span>',
					esc_url( admin_url( 'options-permalink.php' ) ),
					esc_html__( 'Open permalink settings', 'docs-in-order' ),
					esc_html__( '(opens in a new tab)', 'docs-in-order' ),
					esc_html__( 'Choose "Post name", save, then come back to this tab. It updates by itself.', 'docs-in-order' )
				);
				break;
		}
	}

	/**
	 * Where the test email goes: the address used last time, or the current user's.
	 *
	 * @return string
	 */
	private function test_email_to() {
		$to = (string) get_option( 'docsino_email_check_to' );
		return is_email( $to ) ? $to : (string) wp_get_current_user()->user_email;
	}

	/**
	 * Firm name and logo, edited right on the Setup screen.
	 *
	 * @param bool $open Show the form open (otherwise behind an "Edit" toggle).
	 */
	private function render_branding_form( $open ) {
		$s       = DOCSINO_Settings::all();
		$logo_id = (int) $s['firm_logo_id'];
		$logo    = $logo_id ? wp_get_attachment_image_url( $logo_id, 'medium' ) : '';
		$name    = '' !== trim( (string) $s['firm_name'] ) ? $s['firm_name'] : wp_specialchars_decode( get_bloginfo( 'name' ), ENT_QUOTES );
		?>
		<details class="dio-setup-branding"<?php echo $open ? ' open' : ''; ?>>
			<summary class="button<?php echo $open ? '' : ' button-small'; ?>"><?php echo $open ? esc_html__( 'Firm name and logo', 'docs-in-order' ) : esc_html__( 'Edit', 'docs-in-order' ); ?></summary>
			<?php DOCSINO_Admin::form_open( 'docsino_setup_branding', 'docsino_setup_branding', array(), 'dio-setup-form' ); ?>
				<p>
					<label for="dio-setup-firm"><?php esc_html_e( 'Firm name', 'docs-in-order' ); ?></label>
					<input id="dio-setup-firm" name="firm_name" type="text" class="regular-text" value="<?php echo esc_attr( $name ); ?>" required>
				</p>
				<div class="dio-logo-field" data-dio-logo>
					<span class="dio-setup-form__label"><?php esc_html_e( 'Logo', 'docs-in-order' ); ?></span>
					<img class="dio-logo-preview" src="<?php echo esc_url( (string) $logo ); ?>" alt=""<?php echo $logo ? '' : ' hidden'; ?>>
					<input type="hidden" name="firm_logo_id" value="<?php echo esc_attr( (string) $logo_id ); ?>">
					<button type="button" class="button" data-dio-logo-choose data-title="<?php esc_attr_e( 'Choose your firm logo', 'docs-in-order' ); ?>" data-button="<?php esc_attr_e( 'Use this logo', 'docs-in-order' ); ?>" data-unavailable="<?php esc_attr_e( 'The Media Library could not be loaded. Please reload the page and try again.', 'docs-in-order' ); ?>"><?php esc_html_e( 'Choose logo', 'docs-in-order' ); ?></button>
					<button type="button" class="button-link button-link-delete" data-dio-logo-remove<?php echo $logo ? '' : ' hidden'; ?>><?php esc_html_e( 'Remove', 'docs-in-order' ); ?></button>
					<span class="description"><?php esc_html_e( 'Wide logos look best. Without one, your site icon is used.', 'docs-in-order' ); ?></span>
				</div>
				<p class="dio-setup-form__actions">
					<button type="submit" class="button button-primary"><?php esc_html_e( 'Save', 'docs-in-order' ); ?></button>
					<span class="description">
						<?php
						printf(
							/* translators: %s: link to the Settings page. */
							esc_html__( 'Reply-to email and more: %s', 'docs-in-order' ),
							'<a href="' . esc_url( DOCSINO_Admin::page_url( 'docs-in-order-settings' ) ) . '">' . esc_html__( 'Settings', 'docs-in-order' ) . '</a>'
						);
						?>
					</span>
				</p>
			</form>
		</details>
		<?php
	}
}