<?php
/**
 * Free/Core admin UX for Setup, Audit and Diagnostics.
 *
 * @package Leanmerce\CommerceCompliance
 */

namespace Leanmerce\CommerceCompliance\Admin;

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

use Leanmerce\CommerceCompliance\Application\Audit\AuditReport;
use Leanmerce\CommerceCompliance\Application\Audit\AuditRuntime;
use Leanmerce\CommerceCompliance\Application\Setup\LanguageCatalog;
use Leanmerce\CommerceCompliance\Application\Setup\SetupService;
use Leanmerce\CommerceCompliance\Core\Capabilities;
use Leanmerce\CommerceCompliance\Domain\Rules\ValidationResult;
use Leanmerce\CommerceCompliance\Infrastructure\WordPress\RequestGuard;

final class AdminController {
	private const MENU_SLUG  = 'leanmerce-commerce-compliance';
	private const SETUP_SLUG = 'leanmerce-commerce-compliance-setup';
	private const TOOLS_SLUG = 'leanmerce-commerce-compliance-tools';
	/** @var bool */
	private static $menu_registered = false;

	public static function register(): void {
		add_action( 'admin_menu', array( SharedAdminMenu::class, 'schedule' ), 0 );
		add_action( 'admin_enqueue_scripts', array( self::class, 'enqueue_assets' ) );
		add_filter( 'submenu_file', array( self::class, 'active_submenu' ) );
		add_filter( 'parent_file', array( self::class, 'active_parent' ) );
		add_filter( 'admin_title', array( self::class, 'page_title' ) );
		add_action( 'admin_post_lmcc_run_audit', array( self::class, 'handle_run_audit' ) );
		add_action( 'admin_post_lmcc_export_diagnostics', array( self::class, 'handle_export_diagnostics' ) );
		SetupWizardController::register();
	}

	public static function enqueue_assets(): void {
		if ( ! AdminScreen::is_leanmerce_page() ) {
			return;
		}
		wp_enqueue_style( 'lmcc-setup-wizard', plugin_dir_url( LMCC_PLUGIN_FILE ) . 'assets/css/setup-wizard.css', array(), LMCC_VERSION );
	}

	public static function register_menu(): void {
		global $pagenow;
		if ( self::$menu_registered ) {
			return;
		}
		self::$menu_registered = true;
		if ( ! SharedAdminMenu::routes_available( array( self::MENU_SLUG, self::SETUP_SLUG, self::TOOLS_SLUG ) ) || ! SharedAdminMenu::ensure_parent() ) {
			return;
		}
		$language = SetupWizardController::current_language();
		$visible  = current_user_can( Capabilities::MANAGE_SETTINGS ) ? self::MENU_SLUG : self::TOOLS_SLUG;
		$pages    = array(
			self::MENU_SLUG  => array( 'menu_dashboard', Capabilities::MANAGE_SETTINGS, array( self::class, 'render_dashboard' ) ),
			self::SETUP_SLUG => array( 'menu_setup', Capabilities::MANAGE_SETTINGS, array( SetupWizardController::class, 'render' ) ),
			self::TOOLS_SLUG => array( 'menu_tools', Capabilities::RUN_DIAGNOSTICS, array( self::class, 'render_tools' ) ),
		);
		foreach ( $pages as $slug => $page ) {
			if ( $visible !== $slug && 'admin.php' !== $pagenow ) {
				continue;
			}
			$title = SetupWizardController::text( $language, $page[0] );
			$label = $visible === $slug ? __( 'Commerce Assistant', 'leanmerce-commerce-assistant' ) : $title;
			// Empty parent registers a hidden WordPress page with its real admin_page suffix.
			$hook = add_submenu_page( $visible === $slug ? SharedAdminMenu::PARENT_SLUG : '', $title, $label, $page[1], $slug, $page[2] );
			AdminScreen::remember( $slug, $hook );
		}
		SharedAdminMenu::remove_own_duplicate();
	}

	public static function active_parent( $parent_file ) {
		return AdminScreen::is_leanmerce_page() ? SharedAdminMenu::PARENT_SLUG : $parent_file;
	}

	public static function page_title( string $admin_title ): string {
		if ( ! AdminScreen::is_leanmerce_page() ) {
			return $admin_title;
		}
		$key = AdminScreen::is_leanmerce_page( self::SETUP_SLUG ) ? 'menu_setup' : ( AdminScreen::is_leanmerce_page( self::TOOLS_SLUG ) ? 'menu_tools' : 'menu_dashboard' );
		return SetupWizardController::text( SetupWizardController::current_language(), $key ) . ' ‹ ' . get_bloginfo( 'name' ) . ' — WordPress';
	}

	public static function active_submenu( $submenu_file ) {
		if ( AdminScreen::is_leanmerce_page() ) {
			return current_user_can( Capabilities::MANAGE_SETTINGS ) ? self::MENU_SLUG : self::TOOLS_SLUG;
		}
		return $submenu_file;
	}

	public static function render_navigation( string $active, string $language ): void {
		$pages = array(
			self::MENU_SLUG  => array( 'menu_dashboard', Capabilities::MANAGE_SETTINGS ),
			self::SETUP_SLUG => array( 'menu_setup', Capabilities::MANAGE_SETTINGS ),
			self::TOOLS_SLUG => array( 'menu_tools', Capabilities::RUN_DIAGNOSTICS ),
		);
		echo '<nav class="nav-tab-wrapper lmcc-page-navigation">';
		foreach ( $pages as $slug => $page ) {
			if ( current_user_can( $page[1] ) ) {
				$class = 'nav-tab' . ( $active === $slug ? ' nav-tab-active' : '' );
				echo '<a class="' . esc_attr( $class ) . '" href="' . esc_url( add_query_arg( 'page', $slug, admin_url( 'admin.php' ) ) ) . '"' . ( $active === $slug ? ' aria-current="page"' : '' ) . '>' . esc_html( SetupWizardController::text( $language, $page[0] ) ) . '</a>';
			}
		}
		echo '</nav>';
	}

	public static function handle_save_setup_step(): void {
		SetupWizardController::handle_save();
	}

	public static function handle_run_audit(): void {
		self::require_capability( Capabilities::RUN_DIAGNOSTICS );
		RequestGuard::require_post();
		if ( ! wp_verify_nonce( RequestGuard::nonce( 'lmcc_run_audit' ), 'lmcc_run_audit' ) ) {
			RequestGuard::reject( 403 );
		}
		// phpcs:ignore WordPress.Security.ValidatedSanitizedInput.MissingUnslash,WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- Type/byte boundary before scalar unslash and sanitize_key below; malformed input must not be recursively processed.
		if ( isset( $_POST['redirect_page'] ) && ( ! is_string( $_POST['redirect_page'] ) || strlen( $_POST['redirect_page'] ) > 64 ) ) {
			RequestGuard::reject( 400 );
		}

		$redirect_page = isset( $_POST['redirect_page'] ) ? sanitize_key( wp_unslash( $_POST['redirect_page'] ) ) : self::MENU_SLUG;
		if ( ! in_array( $redirect_page, array( self::MENU_SLUG, self::SETUP_SLUG, self::TOOLS_SLUG ), true ) ) {
			$redirect_page = self::MENU_SLUG;
		}
		AuditRuntime::run_audit( true );
		$args = array(
			'page'         => $redirect_page,
			'lmcc_audited' => 1,
		);
		if ( self::SETUP_SLUG === $redirect_page ) {
			$args['step'] = 7;
		}
		wp_safe_redirect( add_query_arg( $args, admin_url( 'admin.php' ) ) );
		exit;
	}

	public static function handle_export_diagnostics(): void {
		self::require_capability( Capabilities::RUN_DIAGNOSTICS );
		if ( ! wp_verify_nonce( RequestGuard::nonce( 'lmcc_export_diagnostics' ), 'lmcc_export_diagnostics' ) ) {
			RequestGuard::reject( 403 );
		}
		$data = AuditRuntime::diagnostics();

		if ( function_exists( 'nocache_headers' ) ) {
			nocache_headers();
		}
		header( 'Content-Type: application/json; charset=utf-8' );
		header( 'Content-Disposition: attachment; filename="leanmerce-commerce-compliance-diagnostics-' . gmdate( 'Ymd-His' ) . '.json"' );
		echo wp_json_encode( $data, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- JSON download response.
		exit;
	}

	public static function render_dashboard(): void {
		self::require_capability( Capabilities::MANAGE_SETTINGS );
		$state    = AuditRuntime::setup()->get_state();
		$report   = AuditRuntime::last_report();
		$facts    = AuditRuntime::environment();
		$language = SetupWizardController::current_language();
		?>
		<div class="wrap lmcc-wizard lmcc-dashboard">
			<h1><?php echo wp_kses_post( SetupWizardController::brand_text( 'Leanmerce Commerce Assistant' ) ); ?></h1>
			<?php self::render_navigation( self::MENU_SLUG, $language ); ?>
			<p><?php echo esc_html( SetupWizardController::text( $language, 'dashboard_intro' ) ); ?></p>
			<div class="lmcc-edition-note" role="note"><strong><?php echo esc_html( SetupWizardController::text( $language, ! empty( $facts['pro_active'] ) ? 'edition_pro_title' : 'edition_free_title' ) ); ?></strong><p><?php echo esc_html( SetupWizardController::text( $language, ! empty( $facts['pro_active'] ) ? 'edition_pro_active' : 'edition_free_only' ) ); ?></p></div>
			<?php self::render_notices(); ?>
			<p>
				<a class="button button-primary" href="<?php echo esc_url( self::setup_url( (int) $state['current_step'] ) ); ?>"><?php echo esc_html( SetupWizardController::text( $language, ! empty( $state['completed'] ) ? 'edit_setup' : 'open_setup' ) ); ?></a>
			</p>
			<?php if ( null === $report ) : ?>
				<div class="notice notice-info inline"><p><?php echo esc_html( SetupWizardController::text( $language, 'audit_not_run' ) ); ?></p></div>
			<?php else : ?>
				<?php SetupWizardController::render_audit_report( $report, $language ); ?>
			<?php endif; ?>
		</div>
		<?php
	}

	public static function render_setup(): void {
		SetupWizardController::render();
	}

	public static function render_tools(): void {
		self::require_capability( Capabilities::RUN_DIAGNOSTICS );
		$report   = AuditRuntime::last_report();
		$language = SetupWizardController::current_language();
		?>
		<div class="wrap lmcc-wizard">
			<h1><?php echo esc_html( SetupWizardController::text( $language, 'menu_tools' ) ); ?></h1>
			<?php self::render_navigation( self::TOOLS_SLUG, $language ); ?>
			<?php self::render_notices(); ?>
			<h2><?php echo esc_html( SetupWizardController::text( $language, 'audit_title' ) ); ?></h2>
			<?php self::audit_form( self::TOOLS_SLUG, $language ); ?>
			<?php
			if ( null !== $report ) {
				SetupWizardController::render_audit_report( $report, $language ); }
			?>
			<hr />
			<h2><?php echo esc_html( SetupWizardController::text( $language, 'raw_diagnostics_title' ) ); ?></h2>
			<p><?php echo esc_html( SetupWizardController::text( $language, 'raw_diagnostics_help' ) ); ?></p>
			<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>">
				<input type="hidden" name="action" value="lmcc_export_diagnostics" />
				<?php wp_nonce_field( 'lmcc_export_diagnostics' ); ?>
				<?php submit_button( SetupWizardController::text( $language, 'export_raw_diagnostics' ), 'secondary' ); ?>
			</form>
		</div>
		<?php
	}

	/** @param array<string,mixed> $settings @param array<string,mixed> $facts */
	private static function render_step( int $step, array $settings, array $facts ): void {
		switch ( $step ) {
			case 1:
				self::step_languages( $settings, $facts );
				break;
			case 2:
				self::step_business( $settings );
				break;
			case 3:
				self::step_sales( $settings );
				break;
			case 4:
				self::step_terms( $settings, $facts );
				break;
			case 5:
				self::step_delivery( $settings, $facts );
				break;
			case 6:
				self::step_documents( $settings, $facts );
				break;
		}
	}

	/** @param array<string,mixed> $settings @param array<string,mixed> $facts */
	private static function step_languages( array $settings, array $facts ): void {
		$languages = (array) $settings['languages'];
		?>
		<h2><?php echo esc_html__( '1. Language and store', 'leanmerce-commerce-assistant' ); ?></h2>
		<table class="widefat striped" style="max-width:900px"><tbody>
		<tr><td><?php echo esc_html__( 'WooCommerce', 'leanmerce-commerce-assistant' ); ?></td><td><?php echo esc_html( (string) ( $facts['woocommerce_version'] ?? '' ) ); ?></td></tr>
		<tr><td><?php echo esc_html__( 'Order storage', 'leanmerce-commerce-assistant' ); ?></td><td><?php echo esc_html( ! empty( $facts['hpos_enabled'] ) ? 'HPOS' : 'Legacy/CRUD-compatible' ); ?></td></tr>
		<tr><td><?php echo esc_html__( 'Checkout', 'leanmerce-commerce-assistant' ); ?></td><td><?php echo esc_html( (string) ( $facts['checkout_mode'] ?? '' ) ); ?></td></tr>
		<tr><td><?php echo esc_html__( 'Currency', 'leanmerce-commerce-assistant' ); ?></td><td><?php echo esc_html( (string) ( $facts['currency'] ?? '' ) ); ?></td></tr>
		<tr><td><?php echo esc_html__( 'Site locale', 'leanmerce-commerce-assistant' ); ?></td><td><?php echo esc_html( (string) ( $facts['site_locale'] ?? '' ) ); ?></td></tr>
		</tbody></table>
		<?php self::language_select( 'admin_language', __( 'Plugin admin language preference', 'leanmerce-commerce-assistant' ), (string) $languages['admin_language'] ); ?>
		<?php self::language_select( 'default_document_language', __( 'Default document language', 'leanmerce-commerce-assistant' ), (string) $languages['default_document_language'] ); ?>
		<h3><?php echo esc_html__( 'Enabled customer languages', 'leanmerce-commerce-assistant' ); ?></h3>
		<?php foreach ( LanguageCatalog::supported() as $code => $label ) : ?>
			<label><input type="checkbox" name="lmcc[enabled_customer_languages][]" value="<?php echo esc_attr( $code ); ?>" <?php checked( in_array( $code, (array) $languages['enabled_customer_languages'], true ) ); ?> /> <?php echo esc_html( $label ); ?></label><br />
		<?php endforeach; ?>
		<p class="description"><?php echo esc_html__( 'For a BiH production workflow, English cannot silently replace missing Bosnian/Croatian/Serbian legal content.', 'leanmerce-commerce-assistant' ); ?></p>
		<?php
	}

	/** @param array<string,mixed> $settings */
	private static function step_business( array $settings ): void {
		$m = (array) $settings['merchant'];
		?>
		<h2><?php echo esc_html__( '2. Business details', 'leanmerce-commerce-assistant' ); ?></h2>
		<p><?php echo esc_html__( 'WooCommerce values may be prefilled for convenience, but legal identity fields must be confirmed by the merchant.', 'leanmerce-commerce-assistant' ); ?></p>
		<?php
		self::text_field( 'legal_name', __( 'Legal name', 'leanmerce-commerce-assistant' ), $m['legal_name'] );
		self::text_field( 'registered_name', __( 'Short registered name (optional)', 'leanmerce-commerce-assistant' ), $m['registered_name'] );
		self::text_field( 'registration_number', __( 'Registration / matični number', 'leanmerce-commerce-assistant' ), $m['registration_number'] );
		self::text_field( 'registration_authority', __( 'Registration authority', 'leanmerce-commerce-assistant' ), $m['registration_authority'] );
		self::text_field( 'tax_id', __( 'JIB / tax ID', 'leanmerce-commerce-assistant' ), $m['tax_id'] );
		?>
		<p><label><input type="checkbox" name="lmcc[vat_registered]" value="1" <?php checked( ! empty( $m['vat_registered'] ) ); ?> /> <?php echo esc_html__( 'VAT registered', 'leanmerce-commerce-assistant' ); ?></label></p>
		<?php
		self::text_field( 'vat_number', __( 'VAT number', 'leanmerce-commerce-assistant' ), $m['vat_number'] );
		self::text_field( 'address', __( 'Seat address', 'leanmerce-commerce-assistant' ), $m['address'] );
		self::text_field( 'city', __( 'City', 'leanmerce-commerce-assistant' ), $m['city'] );
		self::text_field( 'postcode', __( 'Postcode', 'leanmerce-commerce-assistant' ), $m['postcode'] );
		self::text_field( 'phone', __( 'Phone', 'leanmerce-commerce-assistant' ), $m['phone'] );
		self::text_field( 'email', __( 'Email', 'leanmerce-commerce-assistant' ), $m['email'], 'email' );
		self::text_field( 'site', __( 'Website', 'leanmerce-commerce-assistant' ), $m['site'], 'url' );
		?>
		<p><label><?php echo esc_html__( 'Merchant establishment', 'leanmerce-commerce-assistant' ); ?><br />
		<select name="lmcc[establishment]">
		<option value=""><?php echo esc_html__( 'Select…', 'leanmerce-commerce-assistant' ); ?></option>
		<option value="FBIH" <?php selected( $m['establishment'], 'FBIH' ); ?>>FBiH</option>
		<option value="RS" <?php selected( $m['establishment'], 'RS' ); ?>>RS</option>
		<option value="BD" <?php selected( $m['establishment'], 'BD' ); ?>>Brčko District</option>
		</select></label></p>
		<?php
	}

	/** @param array<string,mixed> $settings */
	private static function step_sales( array $settings ): void {
		$s = (array) $settings['sales'];
		$m = (array) $settings['merchant'];
		?>
		<h2><?php echo esc_html__( '3. Sales and legal setup', 'leanmerce-commerce-assistant' ); ?></h2>
		<?php self::checkbox( 'distance_sale_registration_confirmed', __( 'I confirmed the store’s applicable internet/distance-sale registration status.', 'leanmerce-commerce-assistant' ), $s['distance_sale_registration_confirmed'] ); ?>
		<?php self::checkbox( 'physical_goods_scope_confirmed', __( 'Use BiH v1 only for B2C physical-goods distance sales.', 'leanmerce-commerce-assistant' ), $s['physical_goods_scope_confirmed'] ); ?>
		<?php self::text_field( 'complaints_contact', __( 'Complaints contact', 'leanmerce-commerce-assistant' ), $s['complaints_contact'] ); ?>
		<?php self::text_field( 'returns_contact', __( 'Returns contact', 'leanmerce-commerce-assistant' ), $s['returns_contact'] ); ?>
		<?php self::checkbox( 'offer_validity_configured', __( 'Offer-validity information has been reviewed/configured.', 'leanmerce-commerce-assistant' ), $s['offer_validity_configured'] ); ?>
		<?php self::checkbox( 'warranty_information_configured', __( 'Warranty/after-sales information has been reviewed/configured.', 'leanmerce-commerce-assistant' ), $s['warranty_information_configured'] ); ?>
		<?php self::checkbox( 'sells_across_bih', __( 'The store sells across BiH entity lines.', 'leanmerce-commerce-assistant' ), $s['sells_across_bih'] ); ?>
		<p class="description"><?php echo esc_html__( 'Cross-entity audit uses PRECAUTIONARY_UNION where compatible rules can be satisfied together. Incompatible rules become LEGAL_REVIEW_REQUIRED; the plugin does not guess.', 'leanmerce-commerce-assistant' ); ?></p>
		<h3><?php echo esc_html__( 'Supplier relationship', 'leanmerce-commerce-assistant' ); ?></h3>
		<p><select name="lmcc[supplier_relationship]">
		<option value="SAME_AS_MERCHANT" <?php selected( $m['supplier_relationship'], 'SAME_AS_MERCHANT' ); ?>><?php echo esc_html__( 'Same as merchant (normal retailer)', 'leanmerce-commerce-assistant' ); ?></option>
		<option value="SEPARATE_CONTRACT_SUPPLIER" <?php selected( $m['supplier_relationship'], 'SEPARATE_CONTRACT_SUPPLIER' ); ?>><?php echo esc_html__( 'Separate supplier/seller is relevant to the consumer contract', 'leanmerce-commerce-assistant' ); ?></option>
		</select></p>
		<p class="description"><?php echo esc_html__( 'The normal retailer default does not require upstream wholesaler/distributor data for every WooCommerce product.', 'leanmerce-commerce-assistant' ); ?></p>
		<?php self::text_field( 'separate_supplier_name', __( 'Separate supplier/seller name (if applicable)', 'leanmerce-commerce-assistant' ), $m['separate_supplier_name'] ); ?>
		<?php self::text_field( 'separate_supplier_email', __( 'Separate supplier/seller email (if applicable)', 'leanmerce-commerce-assistant' ), $m['separate_supplier_email'], 'email' ); ?>
		<?php
	}

	/** @param array<string,mixed> $settings @param array<string,mixed> $facts */
	private static function step_terms( array $settings, array $facts ): void {
		$t = (array) $settings['terms'];
		?>
		<h2><?php echo esc_html__( '4. Terms and contract', 'leanmerce-commerce-assistant' ); ?></h2>
		<p>
		<?php
		/* translators: 1: WooCommerce Terms page ID, 2: WordPress page status. */
		echo esc_html( sprintf( __( 'Detected WooCommerce Terms page ID: %1$d; status: %2$s.', 'leanmerce-commerce-assistant' ), (int) ( $facts['terms_page_id'] ?? 0 ), (string) ( $facts['terms_page_status'] ?? 'not detected' ) ) );
		?>
		</p>
		<p><strong><?php echo esc_html__( 'Leanmerce uses the existing WooCommerce Terms acknowledgement. No second checkbox is added.', 'leanmerce-commerce-assistant' ); ?></strong></p>
		<p><label><?php echo esc_html__( 'When is a purchase considered accepted under your Terms?', 'leanmerce-commerce-assistant' ); ?><br />
		<select name="lmcc[contract_formation_mode]">
		<option value="ORDER_CREATED" <?php selected( $t['contract_formation_mode'], 'ORDER_CREATED' ); ?>><?php echo esc_html__( 'Order submitted', 'leanmerce-commerce-assistant' ); ?></option>
		<option value="PAYMENT_COMPLETED" <?php selected( $t['contract_formation_mode'], 'PAYMENT_COMPLETED' ); ?>><?php echo esc_html__( 'Payment successful', 'leanmerce-commerce-assistant' ); ?></option>
		<option value="ORDER_STATUS" <?php selected( $t['contract_formation_mode'], 'ORDER_STATUS' ); ?>><?php echo esc_html__( 'Order reaches selected status', 'leanmerce-commerce-assistant' ); ?></option>
		<option value="CUSTOM_PROVIDER" <?php selected( $t['contract_formation_mode'], 'CUSTOM_PROVIDER' ); ?>><?php echo esc_html__( 'Advanced provider', 'leanmerce-commerce-assistant' ); ?></option>
		</select></label></p>
		<?php self::text_field( 'contract_formation_status', __( 'Woo status slug (only for selected-status mode)', 'leanmerce-commerce-assistant' ), $t['contract_formation_status'] ); ?>
		<?php self::text_field( 'contract_formation_provider', __( 'Advanced provider ID (only for Advanced provider mode)', 'leanmerce-commerce-assistant' ), $t['contract_formation_provider'] ?? '' ); ?>
		<?php self::checkbox( 'order_process_information_confirmed', __( 'Required order-process information has been reviewed/presented (purchase steps, correction of errors, storage/access, languages as applicable).', 'leanmerce-commerce-assistant' ), $t['order_process_information_confirmed'] ); ?>
		<?php self::checkbox( 'terms_accessible_saveable_confirmed', __( 'Terms are accessible and can be retained/reproduced by the customer.', 'leanmerce-commerce-assistant' ), $t['terms_accessible_saveable_confirmed'] ); ?>
		<?php self::checkbox( 'rs_payment_obligation_confirmed', __( 'RS payment-obligation checkout-control requirement has been reviewed and satisfied for the applicable/candidate path.', 'leanmerce-commerce-assistant' ), $t['rs_payment_obligation_confirmed'] ); ?>
		<?php
	}

	/** @param array<string,mixed> $settings @param array<string,mixed> $facts */
	private static function step_delivery( array $settings, array $facts ): void {
		$d = (array) $settings['delivery'];
		$s = (array) $settings['sales'];
		?>
		<h2><?php echo esc_html__( '5. Delivery, returns and emails', 'leanmerce-commerce-assistant' ); ?></h2>
		<p>
		<?php
		/* translators: 1: number of enabled payment methods, 2: number of enabled shipping methods. */
		echo esc_html( sprintf( __( 'Detected enabled payment methods: %1$d; shipping methods: %2$d.', 'leanmerce-commerce-assistant' ), self::count_enabled( (array) ( $facts['payment_gateways'] ?? array() ) ), self::count_enabled( (array) ( $facts['shipping_methods'] ?? array() ) ) ) );
		?>
		</p>
		<?php self::checkbox( 'payment_delivery_information_confirmed', __( 'Customer-facing payment and delivery terms have been reviewed/presented.', 'leanmerce-commerce-assistant' ), $s['payment_delivery_information_confirmed'] ); ?>
		<?php self::checkbox( 'completed_means_dispatched', __( 'For this store, WooCommerce Completed means the order was handed to the carrier/dispatched.', 'leanmerce-commerce-assistant' ), $d['completed_means_dispatched'] ); ?>
		<p class="description"><?php echo esc_html__( 'Completed is not treated as dispatch unless you explicitly configure that meaning.', 'leanmerce-commerce-assistant' ); ?></p>
		<?php self::email_select( 'customer_email_id', __( 'Existing Woo customer email to use for Leanmerce customer documents', 'leanmerce-commerce-assistant' ), (string) $d['customer_email_id'], (array) ( $facts['customer_emails'] ?? array() ) ); ?>
		<?php
	}

	/** @param array<string,mixed> $settings @param array<string,mixed> $facts */
	private static function step_documents( array $settings, array $facts ): void {
		$d = (array) $settings['documents'];
		?>
		<h2><?php echo esc_html__( '6. Documents and appearance', 'leanmerce-commerce-assistant' ); ?></h2>
		<p><strong><?php echo esc_html__( 'Free document: PDF potvrda narudžbe', 'leanmerce-commerce-assistant' ); ?></strong></p>
		<p><?php echo esc_html__( 'The Free PDF is an order confirmation only. It is not an Ugovor o prodaji na daljinu, compliance certificate, fiscal receipt or proof of legal compliance.', 'leanmerce-commerce-assistant' ); ?></p>
		<?php self::checkbox( 'basic_pdf_enabled', __( 'Enable the Free Basic PDF order-confirmation module.', 'leanmerce-commerce-assistant' ), $d['basic_pdf_enabled'] ); ?>
		<?php self::email_select( 'basic_pdf_email_id', __( 'Existing Woo customer email for the Basic PDF', 'leanmerce-commerce-assistant' ), (string) $d['basic_pdf_email_id'], (array) ( $facts['customer_emails'] ?? array() ) ); ?>
		<p class="description"><?php echo esc_html__( 'This setup stage does not create Terms evidence, a sealed CommerceSnapshot, a legal contract or a production Evidence Store.', 'leanmerce-commerce-assistant' ); ?></p>
		<p class="description"><?php echo esc_html__( 'The full BiH contract and evidence workflow is available as a separate add-on.', 'leanmerce-commerce-assistant' ); ?> <a href="<?php echo esc_url( 'https://leanmerce.com/' ); ?>" target="_blank" rel="noopener noreferrer"><?php echo esc_html__( 'Learn more at Leanmerce', 'leanmerce-commerce-assistant' ); ?></a>.</p>
		<?php
	}

	private static function render_step_seven(): void {
		$report = AuditRuntime::last_report();
		?>
		<h2><?php echo esc_html__( '7. Audit / activation', 'leanmerce-commerce-assistant' ); ?></h2>
		<p><?php echo esc_html__( 'Run the BiH audit after completing the previous steps.', 'leanmerce-commerce-assistant' ); ?></p>
		<?php self::audit_form( self::SETUP_SLUG ); ?>
		<?php if ( null !== $report ) : ?>
			<?php self::render_report( $report ); ?>
			<div class="notice notice-info inline"><p><?php echo esc_html__( 'Free/Core provides Audit and, in the document module, the Basic PDF order confirmation. The production BiH contract/evidence workflow is a separate Pro add-on.', 'leanmerce-commerce-assistant' ); ?></p></div>
		<?php endif; ?>
		<?php
	}

	private static function audit_form( string $redirect_page, string $language = '' ): void {
		?>
		<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>">
			<input type="hidden" name="action" value="lmcc_run_audit" />
			<input type="hidden" name="redirect_page" value="<?php echo esc_attr( $redirect_page ); ?>" />
			<?php wp_nonce_field( 'lmcc_run_audit' ); ?>
			<?php submit_button( '' !== $language ? SetupWizardController::text( $language, 'run_audit' ) : __( 'Run Audit', 'leanmerce-commerce-assistant' ), 'primary', 'submit', false ); ?>
		</form>
		<?php
	}

	private static function render_report( AuditReport $report ): void {
		$counts = $report->counts();
		?>
		<h2><?php echo esc_html__( 'Audit result', 'leanmerce-commerce-assistant' ); ?></h2>
		<p><strong>
		<?php
		/* translators: 1: pass count, 2: warning count, 3: blocker count. */
		echo esc_html( sprintf( __( 'PASS %1$d · WARNING %2$d · BLOCKER %3$d', 'leanmerce-commerce-assistant' ), $counts['pass'], $counts['warning'], $counts['blocker'] ) );
		?>
		</strong></p>
		<p>
		<?php
		/* translators: 1: jurisdiction resolution mode, 2: comma-separated applied rule-pack IDs. */
		echo esc_html( sprintf( __( 'Resolution mode: %1$s. Packs: %2$s.', 'leanmerce-commerce-assistant' ), $report->resolution_mode(), implode( ', ', $report->pack_ids() ) ) );
		?>
		</p>
		<?php if ( ! $report->has_blockers() && 0 === $counts['warning'] ) : ?>
			<div class="notice notice-success inline"><p><?php echo esc_html__( 'All checks defined by the installed BiH Compliance Pack have passed.', 'leanmerce-commerce-assistant' ); ?></p></div>
		<?php elseif ( ! $report->has_blockers() ) : ?>
			<div class="notice notice-warning inline"><p><?php echo esc_html__( 'No blockers were found, but warnings remain and should be reviewed.', 'leanmerce-commerce-assistant' ); ?></p></div>
		<?php else : ?>
			<div class="notice notice-error inline"><p><?php echo esc_html__( 'The audit has blockers. Resolve them before treating the configured workflow as ready.', 'leanmerce-commerce-assistant' ); ?></p></div>
		<?php endif; ?>
		<table class="widefat striped"><thead><tr><th><?php echo esc_html__( 'Status', 'leanmerce-commerce-assistant' ); ?></th><th><?php echo esc_html__( 'Check', 'leanmerce-commerce-assistant' ); ?></th><th><?php echo esc_html__( 'Result', 'leanmerce-commerce-assistant' ); ?></th><th><?php echo esc_html__( 'Remediation', 'leanmerce-commerce-assistant' ); ?></th></tr></thead><tbody>
		<?php foreach ( $report->results() as $result ) : ?>
			<?php self::report_row( $result ); ?>
		<?php endforeach; ?>
		</tbody></table>
		<p class="description"><?php echo esc_html__( 'This audit does not certify the merchant’s complete legal compliance.', 'leanmerce-commerce-assistant' ); ?></p>
		<?php
	}

	private static function report_row( ValidationResult $result ): void {
		echo '<tr><td><strong>' . esc_html( strtoupper( $result->get_status() ) ) . '</strong></td><td><code>' . esc_html( $result->get_code() ) . '</code></td><td>' . esc_html( $result->get_message() ) . '</td><td>' . esc_html( $result->get_remediation() ) . '</td></tr>';
	}

	private static function render_step_navigation( int $current ): void {
		$labels = array(
			1 => __( 'Language and store', 'leanmerce-commerce-assistant' ),
			2 => __( 'Business details', 'leanmerce-commerce-assistant' ),
			3 => __( 'Sales/legal', 'leanmerce-commerce-assistant' ),
			4 => __( 'Terms/contract', 'leanmerce-commerce-assistant' ),
			5 => __( 'Delivery/emails', 'leanmerce-commerce-assistant' ),
			6 => __( 'Documents', 'leanmerce-commerce-assistant' ),
			7 => __( 'Audit', 'leanmerce-commerce-assistant' ),
		);
		echo '<p>';
		foreach ( $labels as $step => $label ) {
			$link = '<a href="' . esc_url( self::setup_url( $step ) ) . '">' . esc_html( $step . '. ' . $label ) . '</a>';
			echo ( $step === $current ? '<strong>' . $link . '</strong>' : $link ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- link components escaped above.
			if ( $step < 7 ) {
				echo ' &nbsp;|&nbsp; '; }
		}
		echo '</p>';
	}

	private static function render_notices(): void {
		$saved     = isset( $_GET['lmcc_saved'] ) ? absint( wp_unslash( $_GET['lmcc_saved'] ) ) : 0; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only display flag; no state change.
		$audited   = isset( $_GET['lmcc_audited'] ) ? absint( wp_unslash( $_GET['lmcc_audited'] ) ) : 0; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only display flag; no state change.
		$completed = isset( $_GET['lmcc_completed'] ) ? absint( wp_unslash( $_GET['lmcc_completed'] ) ) : 0; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only display flag; no state change.
		$language  = SetupWizardController::current_language();
		if ( $saved ) {
			echo '<div class="notice notice-success is-dismissible"><p>' . esc_html( SetupWizardController::text( $language, 'step_saved' ) ) . '</p></div>'; }
		if ( $audited ) {
			echo '<div class="notice notice-info is-dismissible"><p>' . esc_html( SetupWizardController::text( $language, 'audit_saved' ) ) . '</p></div>'; }
		if ( $completed ) {
			echo '<div class="notice notice-success is-dismissible"><p>' . esc_html( SetupWizardController::text( $language, 'setup_completed' ) ) . '</p></div>'; }
	}

	private static function requested_step( int $fallback ): int {
		$requested = isset( $_GET['step'] ) ? absint( wp_unslash( $_GET['step'] ) ) : $fallback; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only navigation value; no state change.
		return max( 1, min( SetupService::TOTAL_STEPS, $requested ) );
	}

	private static function setup_url( int $step ): string {
		return add_query_arg(
			array(
				'page' => self::SETUP_SLUG,
				'step' => $step,
			),
			admin_url( 'admin.php' )
		);
	}

	private static function require_capability( string $capability ): void {
		if ( ! current_user_can( $capability ) ) {
			$language = SetupWizardController::current_language();
			wp_die( esc_html( SetupWizardController::text( $language, 'error_permission' ) ), '', array( 'response' => 403 ) );
		}
	}

	private static function text_field( string $name, string $label, $value, string $type = 'text' ): void {
		printf( '<p><label>%1$s<br /><input class="regular-text" type="%2$s" name="lmcc[%3$s]" value="%4$s" /></label></p>', esc_html( $label ), esc_attr( $type ), esc_attr( $name ), esc_attr( (string) $value ) );
	}

	private static function checkbox( string $name, string $label, $value ): void {
		printf( '<p><label><input type="checkbox" name="lmcc[%1$s]" value="1" %2$s /> %3$s</label></p>', esc_attr( $name ), checked( ! empty( $value ), true, false ), esc_html( $label ) );
	}

	private static function language_select( string $name, string $label, string $current ): void {
		echo '<p><label>' . esc_html( $label ) . '<br /><select name="lmcc[' . esc_attr( $name ) . ']">';
		foreach ( LanguageCatalog::supported() as $code => $language_label ) {
			echo '<option value="' . esc_attr( $code ) . '" ' . selected( $current, $code, false ) . '>' . esc_html( $language_label ) . '</option>';
		}
		echo '</select></label></p>';
	}

	private static function email_select( string $name, string $label, string $current, array $emails ): void {
		echo '<p><label>' . esc_html( $label ) . '<br /><select name="lmcc[' . esc_attr( $name ) . ']">';
		if ( empty( $emails ) ) {
			echo '<option value="' . esc_attr( $current ) . '">' . esc_html( $current ) . '</option>';
		} else {
			foreach ( $emails as $email ) {
				if ( ! is_array( $email ) || empty( $email['id'] ) ) {
					continue; }
				$id      = (string) $email['id'];
				$title   = (string) ( $email['title'] ?? $id );
				$enabled = ! empty( $email['enabled'] );
				echo '<option value="' . esc_attr( $id ) . '" ' . selected( $current, $id, false ) . '>' . esc_html( $title . ( $enabled ? '' : ' — disabled' ) ) . '</option>';
			}
		}
		echo '</select></label></p>';
	}

	private static function count_enabled( array $items ): int {
		$count = 0;
		foreach ( $items as $item ) {
			if ( is_array( $item ) && ! empty( $item['enabled'] ) ) {
				++$count;
			}
		} return $count;
	}

	private function __construct() {}
}