<?php
/**
 * EquaSign content prise (one of the EquaSuite prises) — the ONLY EquaSign-side
 * code that wires the embeddable content client (socle `EquaSuite_Content_Client`,
 * bundled under client/). It displays the EquaSuite admin banner and showcase
 * page over HTTPS. Kept isolated in this one class so the wiring replicates
 * cleanly across the consumer plugins.
 *
 * Boundaries (per the content-consumer contract v2):
 *   - HTTPS only; standalone; does NOT require any other EquaSuite plugin.
 *   - Never reads a right, never tracks, never sends the tier — only an opaque slot.
 *   - Server absent / opted-out / timeout ⇒ banner shows nothing, showcase shows
 *     the local gettext fallback. A permanent, legitimate state, never an error.
 *
 * @package EquaSign
 */

defined( 'ABSPATH' ) || exit;

class EquaSign_Content {

	/** Host product id (must be registered in the EquaSuite content referential). */
	const PRODUCT = 'equasign';

	/**
	 * Conservative default content slot. The slot is an OPAQUE content key aligned
	 * with the content-server vocabulary ('free' | 'pro') — NOT the internal licence
	 * tier. Non-Pro installs request the 'free' slot; 'pro' is only
	 * requested when the licence prise positively resolves it via the
	 * `equasign_content_slot` filter (fed by the licence client in the Pro build).
	 */
	const DEFAULT_SLOT = 'free';

	/** Capability gating the prise UI and its handlers (aligned with EquaSign_Admin::CAP). */
	const CAP = 'manage_equasign';

	/** Option storing the content-server opt-in (authorise contacting the server). Default OFF. */
	const OPT_OPTIN = 'equasign_content_optin';

	/** Per-user meta storing the last dismissal time of the welcome banner. */
	const META_DISMISSED = 'equasign_incite_dismissed_at';

	/**
	 * Wires the prise. Filters are registered unconditionally because the socle's
	 * REST proxy runs outside is_admin(); the UI hooks are admin-only.
	 *
	 * @return void
	 */
	public static function init() {
		add_filter( 'equasuite_cc_optin', array( __CLASS__, 'filter_optin' ), 10, 2 );
		add_filter( 'equasuite_cc_fallback_text', array( __CLASS__, 'filter_fallback_text' ), 10, 2 );
		add_filter( 'equasuite_cc_capability', array( __CLASS__, 'filter_capability' ) );

		if ( is_admin() ) {
			add_action( 'admin_enqueue_scripts', array( __CLASS__, 'enqueue' ) );
			add_action( 'admin_menu', array( __CLASS__, 'register_showcase_menu' ), 99 );
			add_action( 'admin_post_equasign_content_optin_enable', array( __CLASS__, 'h_content_enable' ) );
			add_action( 'wp_ajax_equasign_dismiss_incite', array( __CLASS__, 'ajax_dismiss_incite' ) );
		}
	}

	/* ---------------------------------------------------------------------- */
	/* Local opt-in state (no other EquaSuite plugin required).               */
	/* ---------------------------------------------------------------------- */

	/**
	 * Whether the merchant has authorised contacting the content server. Default OFF.
	 *
	 * @return bool
	 */
	public static function content_optin() {
		return (bool) get_option( self::OPT_OPTIN, false );
	}

	/* ---------------------------------------------------------------------- */
	/* Socle host-integration points (filters).                              */
	/* ---------------------------------------------------------------------- */

	/**
	 * Opt-in for EquaSign's own product — reads the local setting (default off).
	 *
	 * @param bool   $optin      Incoming value.
	 * @param string $product_id Product being rendered.
	 * @return bool
	 */
	public static function filter_optin( $optin, $product_id ) {
		return ( self::PRODUCT === $product_id ) ? self::content_optin() : $optin;
	}

	/**
	 * Locally-translated (gettext) showcase fallback for EquaSign's own product.
	 *
	 * @param string $text       Incoming value.
	 * @param string $product_id Product being rendered.
	 * @return string
	 */
	public static function filter_fallback_text( $text, $product_id ) {
		return ( self::PRODUCT === $product_id )
			? __( 'EquaSuite presentation unavailable right now.', 'equasign' )
			: $text;
	}

	/**
	 * Capability gating the socle's local proxy — aligned with EquaSign's own cap.
	 *
	 * @param string $cap Incoming.
	 * @return string
	 */
	public static function filter_capability( $cap ) {
		return self::CAP;
	}

	/* ---------------------------------------------------------------------- */
	/* Slot = tier (single isolated resolver).                                */
	/* ---------------------------------------------------------------------- */

	/**
	 * The opaque content slot sent to the server. Pro vs non-Pro is decided HERE
	 * (upstream), and only the resulting slot key travels — the licence tier itself
	 * never circulates. The slot vocabulary is the server's ('free' | 'pro'), which is
	 * not the internal licence tier.
	 *
	 * Defaults conservatively to DEFAULT_SLOT ('free'). The licence prise wires the
	 * `equasign_content_slot` filter (fed by the licence client, Pro build) to
	 * resolve the real tier, returning 'pro' only on a positively-verified Pro
	 * entitlement, else 'free'. The value must match the slot key authored
	 * server-side (verified by real test: content exists for free/pro).
	 *
	 * @return string
	 */
	public static function slot() {
		return (string) apply_filters( 'equasign_content_slot', self::DEFAULT_SLOT );
	}

	/* ---------------------------------------------------------------------- */
	/* Assets + banner + showcase.                                            */
	/* ---------------------------------------------------------------------- */

	/**
	 * Enqueues the socle assets on EquaSign admin screens.
	 *
	 * @param string $hook Current admin page hook.
	 * @return void
	 */
	public static function enqueue( $hook ) {
		if ( false !== strpos( (string) $hook, 'equasign' ) && class_exists( 'EquaSuite_Content_Client' ) ) {
			EquaSuite_Content_Client::enqueue();
		}
	}

	/**
	 * Echoes the top-of-screen banner on every EquaSign screen.
	 *
	 * While the content opt-in is OFF, the local welcome banner takes this slot
	 * (except on the showcase screen, whose body already carries it — the welcome
	 * banner guards that case itself). Once the opt-in is ON, the server banner is
	 * rendered instead. Admin only, never on the front.
	 *
	 * @return void
	 */
	public static function admin_banner() {
		if ( ! self::content_optin() ) {
			// OFF → the local welcome banner fills this slot (it skips the showcase screen).
			self::welcome_banner( true );
			return;
		}
		if ( ! class_exists( 'EquaSuite_Content_Client' ) ) {
			return;
		}
		// phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- built/escaped inside the socle.
		echo EquaSuite_Content_Client::render_banner(
			array(
				'product_id' => self::PRODUCT,
				'slot'       => self::slot(),
				'locale'     => get_user_locale(),
			)
		);
	}

	/**
	 * Local, no-network WELCOME banner shown while the content opt-in is OFF, in the
	 * slot the (empty) server banner would occupy. Same thin-bar format as the
	 * "Upgrade to Pro" bar, stacked just above it. It greets the merchant and offers
	 * a one-click activation:
	 *   - « Yes »  → posts the opt-in handler with content_optin=1 (one click,
	 *     nonce + capability) → the server content shows, this banner is gone.
	 *   - « Hide » → per-user 4h dismissal (AJAX), top banner only.
	 * No email is ever collected. All copy is gettext (overridable via filters,
	 * English fallback). Never contacts any server.
	 *
	 * @param bool $dismissible Render the « Hide » control and honour the per-user 4h
	 *                          dismissal (top banner). False on the showcase body,
	 *                          where the welcome banner IS the page content.
	 * @return void
	 */
	public static function welcome_banner( $dismissible = true ) {
		if ( ! current_user_can( self::CAP ) ) {
			return;
		}
		if ( self::content_optin() ) {
			return; // ON → the server banner (admin_banner) takes this slot.
		}
		if ( $dismissible ) {
			$screen = function_exists( 'get_current_screen' ) ? get_current_screen() : null;
			if ( $screen && false !== strpos( (string) $screen->id, 'equasign-suite' ) ) {
				return; // showcase page: its body carries the welcome banner (non-dismissible).
			}
			$at = (int) get_user_meta( get_current_user_id(), self::META_DISMISSED, true );
			if ( $at > 0 && ( time() - $at ) < 4 * HOUR_IN_SECONDS ) {
				return; // hidden less than 4 hours ago.
			}
		}

		$text = (string) apply_filters( 'equasign_welcome_text', __( 'Thank you for installing EquaSign. Would you like to display EquaSuite offers and news here?', 'equasign' ) );
		$yes  = (string) apply_filters( 'equasign_welcome_yes_label', __( 'Yes', 'equasign' ) );
		$hide = (string) apply_filters( 'equasign_welcome_hide_label', __( 'Hide', 'equasign' ) );

		echo '<div class="equasign-welcomebar" role="region" aria-label="' . esc_attr( $text ) . '">';
		echo '<span class="equasign-welcomebar__text">' . esc_html( $text ) . '</span>';
		echo '<form class="equasign-welcomebar__form" method="post" action="' . esc_url( admin_url( 'admin-post.php' ) ) . '">';
		echo '<input type="hidden" name="action" value="equasign_content_optin_enable" />';
		echo '<input type="hidden" name="content_optin" value="1" />';
		wp_nonce_field( 'equasign_content_optin_enable' );
		echo '<button type="submit" class="equasign-welcomebar__yes">' . esc_html( $yes ) . '</button>';
		echo '</form>';

		if ( $dismissible ) {
			printf(
				'<button type="button" class="equasign-welcomebar__hide" data-equasign-dismiss="%s" data-nonce="%s">%s</button>',
				esc_url( admin_url( 'admin-ajax.php' ) ),
				esc_attr( wp_create_nonce( 'equasign_dismiss_incite' ) ),
				esc_html( $hide )
			);
		}

		echo '</div>'; // .equasign-welcomebar

		if ( $dismissible ) {
			// Self-contained per-user dismissal (server-stored, 4h). No dependency on
			// bundled scripts; one delegated listener per page.
			wp_print_inline_script_tag( '(function(){if(window.equasignWelcome){return;}window.equasignWelcome=1;document.addEventListener("click",function(e){var b=e.target.closest(".equasign-welcomebar__hide[data-equasign-dismiss]");if(!b){return;}e.preventDefault();var box=b.closest(".equasign-welcomebar");var f=new FormData();f.append("action","equasign_dismiss_incite");f.append("_ajax_nonce",b.getAttribute("data-nonce"));fetch(b.getAttribute("data-equasign-dismiss"),{method:"POST",credentials:"same-origin",body:f});if(box){box.style.display="none";}});})();' ); // Native emitter (not a raw tag).
		}
	}

	/**
	 * Registers the "EquaSuite" showcase submenu in LAST position (priority 99),
	 * but ONLY while the content opt-in is ON. When OFF the page would only show the
	 * local fallback, so we hide the entry entirely (no dead/empty menu item); the
	 * welcome banner + its "Yes" button are the entry point to enable it.
	 *
	 * @return void
	 */
	public static function register_showcase_menu() {
		if ( ! self::content_optin() ) {
			return;
		}
		add_submenu_page(
			'equasign',
			__( 'EquaSuite', 'equasign' ),
			__( 'EquaSuite', 'equasign' ),
			self::CAP,
			'equasign-suite',
			array( __CLASS__, 'page_showcase' )
		);
	}

	/**
	 * Renders the "EquaSuite" showcase page.
	 *
	 * @return void
	 */
	public static function page_showcase() {
		if ( ! current_user_can( self::CAP ) ) {
			wp_die( esc_html__( 'You are not allowed to access this page.', 'equasign' ) );
		}
		echo '<div class="wrap equasign-wrap">';
		echo '<h1>' . esc_html__( 'EquaSuite', 'equasign' ) . '</h1>';
		if ( self::content_optin() ) {
			if ( class_exists( 'EquaSuite_Content_Client' ) ) {
				// phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- built/escaped inside the socle.
				echo EquaSuite_Content_Client::render_showcase(
					array(
						'product_id' => self::PRODUCT,
						'slot'       => self::slot(),
						'locale'     => get_user_locale(),
					)
				);
			}
		} else {
			// Opt-in OFF: local welcome banner in place of the server showcase (no
			// network, no error). Non-dismissible here — it IS the page content.
			self::welcome_banner( false );
		}
		echo '</div>';
	}

	/* ---------------------------------------------------------------------- */
	/* Opt-in handler (self-contained).                                       */
	/* ---------------------------------------------------------------------- */

	/**
	 * Persists the content-server opt-in, driven by the `content_optin` checkbox.
	 * Serves both the one-click "Yes" of the welcome banner and the isolated opt-in
	 * section of the settings page, then returns the merchant to the page they came
	 * from. RGPD: the box is unchecked by default — nothing is enabled unless it is
	 * actively ticked.
	 *
	 * @return void
	 */
	public static function h_content_enable() {
		if ( ! current_user_can( self::CAP ) ) {
			wp_die( esc_html__( 'You are not allowed to access this page.', 'equasign' ) );
		}
		check_admin_referer( 'equasign_content_optin_enable' );
		update_option( self::OPT_OPTIN, ! empty( $_POST['content_optin'] ) ? 1 : 0, false );
		$back = wp_get_referer();
		wp_safe_redirect( $back ? $back : admin_url( 'admin.php?page=equasign-settings' ) );
		exit;
	}

	/**
	 * AJAX: remember (per user, server-side) that the welcome banner was dismissed,
	 * so it stays hidden for 4 hours. No page output.
	 *
	 * @return void
	 */
	public static function ajax_dismiss_incite() {
		check_ajax_referer( 'equasign_dismiss_incite' );
		if ( ! current_user_can( self::CAP ) ) {
			wp_send_json_error( array( 'error' => 'forbidden' ), 403 );
		}
		update_user_meta( get_current_user_id(), self::META_DISMISSED, time() );
		wp_send_json_success();
	}
}