<?php
/**
 * Step-by-step setup assistant.
 *
 * @package Maintained_Log
 */

namespace Maintained_Log\Admin;

use Maintained_Log\Backups;
use Maintained_Log\Health_Checks;
use Maintained_Log\Log;
use Maintained_Log\Plugin;
use Maintained_Log\Reporter;
use Maintained_Log\Settings;

defined( 'ABSPATH' ) || exit;

/**
 * Guides the first configuration one decision at a time. Each step explains
 * in plain words what it is for, asks only what is needed, and is saved when
 * moving on, so the assistant can be left and resumed at the same point.
 * Everything not asked here keeps a sensible default and can be changed later
 * in the settings.
 */
class Onboarding {

	const SLUG     = 'maintained-log-setup';
	const OPTION   = 'maintained_log_onboarding';
	const REDIRECT = 'maintained_log_activation_redirect';

	/**
	 * Registers hooks.
	 */
	public static function register() {
		add_action( 'admin_menu', array( __CLASS__, 'menu' ), 20 );
		add_action( 'admin_init', array( __CLASS__, 'maybe_redirect' ) );
		add_action( 'admin_notices', array( __CLASS__, 'resume_notice' ) );
		add_action( 'admin_enqueue_scripts', array( __CLASS__, 'assets' ) );
		add_action( 'admin_post_maintained_log_onboarding', array( __CLASS__, 'handle' ) );
	}

	/**
	 * Steps in order: key => [short title used in the progress bar].
	 *
	 * @return array<string,string>
	 */
	public static function steps() {
		return array(
			'welcome'    => __( 'Welcome', 'maintained-log' ),
			'brand'      => __( 'Your agency', 'maintained-log' ),
			'report'     => __( 'Client report', 'maintained-log' ),
			'alerts'     => __( 'Your alerts', 'maintained-log' ),
			'checks'     => __( 'Site checks', 'maintained-log' ),
			'backups'    => __( 'Backups', 'maintained-log' ),
			'visibility' => __( 'Visibility', 'maintained-log' ),
			'modules'    => __( 'Extras', 'maintained-log' ),
			'done'       => __( 'Ready', 'maintained-log' ),
		);
	}

	/**
	 * Saved progress.
	 *
	 * @return array{step:string,completed:string[],done:bool,dismissed:bool}
	 */
	public static function state() {
		$state = get_option( self::OPTION );
		return array_merge(
			array(
				'step'      => 'welcome',
				'completed' => array(),
				'done'      => false,
				'dismissed' => false,
			),
			is_array( $state ) ? $state : array()
		);
	}

	/**
	 * URL of a step.
	 *
	 * @param string $step Step key.
	 * @return string
	 */
	public static function url( $step = '' ) {
		$args = array( 'page' => self::SLUG );
		if ( $step ) {
			$args['step'] = $step;
		}
		return add_query_arg( $args, admin_url( 'admin.php' ) );
	}

	/**
	 * Adds the page: visible in the menu until the setup is finished, then
	 * reachable only from the settings screen.
	 */
	public static function menu() {
		// Once finished, it hangs from a parent that is not in the menu: hidden, but still reachable
		// (remove_submenu_page() would make WordPress deny access to the page).
		$parent = self::state()['done'] ? 'options.php' : Admin::SLUG;
		add_submenu_page( $parent, __( 'Setup assistant', 'maintained-log' ), __( 'Setup assistant', 'maintained-log' ), Plugin::user_can_manage() ? Plugin::capability() : 'do_not_allow', self::SLUG, array( __CLASS__, 'render' ) );
	}

	/**
	 * Opens the assistant right after the plugin is activated by hand.
	 */
	public static function maybe_redirect() {
		if ( ! get_transient( self::REDIRECT ) ) {
			return;
		}
		delete_transient( self::REDIRECT );
		// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Only reads whether several plugins were activated at once.
		if ( wp_doing_ajax() || is_network_admin() || isset( $_GET['activate-multi'] ) || self::state()['done'] || ! Plugin::user_can_manage() ) {
			return;
		}
		wp_safe_redirect( self::url() );
		exit;
	}

	/**
	 * Reminds to finish the setup on the plugin screens.
	 */
	public static function resume_notice() {
		$screen = get_current_screen();
		$state  = self::state();
		if ( ! $screen || $state['done'] || $state['dismissed'] || false === strpos( $screen->id, Admin::SLUG ) || false !== strpos( $screen->id, self::SLUG ) || ! Plugin::user_can_manage() ) {
			return;
		}
		$keys   = array_keys( self::steps() );
		$number = array_search( $state['step'], $keys, true ) + 1;
		?>
		<div class="notice notice-info">
			<p>
				<strong><?php esc_html_e( 'Finish setting up Maintained.log.', 'maintained-log' ); ?></strong>
				<?php
				/* translators: 1: current step number, 2: total steps. */
				echo esc_html( sprintf( __( 'The setup assistant explains each option in a few words. You are on step %1$d of %2$d.', 'maintained-log' ), $number, count( $keys ) ) );
				?>
			</p>
			<p>
				<a class="button button-primary" href="<?php echo esc_url( self::url( $state['step'] ) ); ?>"><?php esc_html_e( 'Continue the setup', 'maintained-log' ); ?></a>
				<a class="button-link" href="<?php echo esc_url( self::nav_url( 'dismiss' ) ); ?>"><?php esc_html_e( 'I will configure it myself', 'maintained-log' ); ?></a>
			</p>
		</div>
		<?php
	}

	/**
	 * Styles, media library (logo) and color picker on the assistant.
	 *
	 * @param string $hook Screen hook.
	 */
	public static function assets( $hook ) {
		if ( false === strpos( $hook, self::SLUG ) ) {
			return;
		}
		wp_enqueue_media();
		wp_enqueue_style( 'wp-color-picker' );
		wp_enqueue_style( 'maintained-log-onboarding', MAINTAINED_LOG_URL . 'admin/onboarding.css', array(), MAINTAINED_LOG_VERSION );
		wp_enqueue_script( 'maintained-log-onboarding', MAINTAINED_LOG_URL . 'admin/onboarding.js', array( 'jquery', 'wp-color-picker' ), MAINTAINED_LOG_VERSION, true );
		wp_localize_script(
			'maintained-log-onboarding',
			'maintainedLogOnboarding',
			array(
				'chooseLogo' => __( 'Choose your logo', 'maintained-log' ),
				'useLogo'    => __( 'Use this logo', 'maintained-log' ),
			)
		);
	}

	/**
	 * Signed link to leave the assistant.
	 *
	 * @param string $nav dismiss (configure it myself) or skip_all (use the defaults).
	 * @return string
	 */
	private static function nav_url( $nav ) {
		$url = add_query_arg(
			array(
				'action' => 'maintained_log_onboarding',
				'nav'    => $nav,
			),
			admin_url( 'admin-post.php' )
		);
		return wp_nonce_url( $url, 'maintained_log_onboarding' );
	}

	/**
	 * Renders the current step.
	 */
	public static function render() {
		if ( ! Plugin::user_can_manage() ) {
			wp_die( esc_html__( 'You are not allowed to access this page.', 'maintained-log' ), 403 );
		}

		$steps = self::steps();
		$state = self::state();
		// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Navigation only.
		$step  = isset( $_GET['step'] ) ? sanitize_key( wp_unslash( $_GET['step'] ) ) : $state['step'];
		$step  = isset( $steps[ $step ] ) ? $step : 'welcome';
		$keys  = array_keys( $steps );
		$index = array_search( $step, $keys, true );
		$s     = Settings::all();
		?>
		<div class="wrap ml-setup">
			<h1 class="screen-reader-text"><?php esc_html_e( 'Setup assistant', 'maintained-log' ); ?></h1>

			<ol class="ml-setup__progress">
				<?php foreach ( $steps as $key => $label ) : ?>
					<?php
					$classes = array( 'ml-setup__dot' );
					if ( $key === $step ) {
						$classes[] = 'is-current';
					} elseif ( in_array( $key, $state['completed'], true ) ) {
						$classes[] = 'is-done';
					}
					$reachable = in_array( $key, $state['completed'], true ) || $key === $state['step'];
					?>
					<li class="<?php echo esc_attr( implode( ' ', $classes ) ); ?>">
						<?php if ( $reachable && $key !== $step ) : ?>
							<a href="<?php echo esc_url( self::url( $key ) ); ?>"><span class="ml-setup__num"><?php echo esc_html( array_search( $key, $keys, true ) + 1 ); ?></span><span class="ml-setup__label"><?php echo esc_html( $label ); ?></span></a>
						<?php else : ?>
							<span class="ml-setup__num"><?php echo esc_html( array_search( $key, $keys, true ) + 1 ); ?></span><span class="ml-setup__label"><?php echo esc_html( $label ); ?></span>
						<?php endif; ?>
					</li>
				<?php endforeach; ?>
			</ol>

			<form class="ml-setup__card" method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>">
				<?php wp_nonce_field( 'maintained_log_onboarding' ); ?>
				<input type="hidden" name="action" value="maintained_log_onboarding">
				<input type="hidden" name="step" value="<?php echo esc_attr( $step ); ?>">

				<?php self::notice(); ?>
				<?php call_user_func( array( __CLASS__, 'step_' . $step ), $s ); ?>

				<div class="ml-setup__nav">
					<?php if ( $index > 0 && 'done' !== $step ) : ?>
						<button class="button button-large" name="nav" value="back"><?php esc_html_e( 'Back', 'maintained-log' ); ?></button>
					<?php else : ?>
						<span></span>
					<?php endif; ?>

					<?php if ( 'welcome' === $step ) : ?>
						<button class="button button-primary button-hero" name="nav" value="next"><?php esc_html_e( 'Let\'s start', 'maintained-log' ); ?></button>
					<?php elseif ( 'done' === $step ) : ?>
						<button class="button button-primary button-hero" name="nav" value="finish"><?php esc_html_e( 'Go to the maintenance log', 'maintained-log' ); ?></button>
					<?php else : ?>
						<button class="button button-primary button-large" name="nav" value="next"><?php esc_html_e( 'Save and continue', 'maintained-log' ); ?></button>
					<?php endif; ?>
				</div>
			</form>

			<?php if ( 'done' !== $step ) : ?>
				<p class="ml-setup__skip">
					<a href="<?php echo esc_url( self::nav_url( 'skip_all' ) ); ?>"><?php esc_html_e( 'Skip the assistant and use the default settings', 'maintained-log' ); ?></a>
				</p>
			<?php endif; ?>
		</div>
		<?php
	}

	/**
	 * Saves the submitted step and moves on.
	 */
	public static function handle() {
		if ( ! Plugin::user_can_manage() ) {
			wp_die( esc_html__( 'You are not allowed to do this.', 'maintained-log' ), 403 );
		}
		check_admin_referer( 'maintained_log_onboarding' );

		// phpcs:disable WordPress.Security.NonceVerification -- Verified above.
		$nav   = isset( $_REQUEST['nav'] ) ? sanitize_key( wp_unslash( $_REQUEST['nav'] ) ) : 'next';
		$step  = isset( $_POST['step'] ) ? sanitize_key( wp_unslash( $_POST['step'] ) ) : 'welcome';
		$input = isset( $_POST['ml'] ) && is_array( $_POST['ml'] ) ? wp_unslash( $_POST['ml'] ) : array(); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- Sanitized by Settings::sanitize().
		// phpcs:enable

		$state = self::state();
		$steps = array_keys( self::steps() );

		if ( 'dismiss' === $nav ) {
			$state['dismissed'] = true;
			update_option( self::OPTION, $state, false );
			wp_safe_redirect( admin_url( 'admin.php?page=' . Admin::SETTINGS_SLUG ) );
			exit;
		}
		if ( 'skip_all' === $nav || 'finish' === $nav ) {
			$state['done'] = true;
			update_option( self::OPTION, $state, false );
			if ( 'skip_all' === $nav ) {
				Log::add(
					array(
						'type'   => Log::TYPE_SYSTEM,
						'title'  => __( 'Setup assistant skipped: default settings in use', 'maintained-log' ),
						'source' => Log::SOURCE_MANUAL,
					)
				);
			}
			wp_safe_redirect( admin_url( 'admin.php?page=' . Admin::SLUG ) );
			exit;
		}
		if ( ! in_array( $step, $steps, true ) ) {
			wp_safe_redirect( self::url() );
			exit;
		}

		if ( 'back' !== $nav ) {
			$message = self::save_step( $step, $input, $nav );
			if ( 'test_checks' === $nav || 'test_report' === $nav ) {
				self::flash( $message['type'], $message['text'] );
				wp_safe_redirect( self::url( $step ) );
				exit;
			}
			if ( ! in_array( $step, $state['completed'], true ) ) {
				$state['completed'][] = $step;
			}
		}

		$index = array_search( $step, $steps, true );
		$next  = 'back' === $nav ? $steps[ max( 0, $index - 1 ) ] : $steps[ min( count( $steps ) - 1, $index + 1 ) ];
		// The saved step is the furthest one reached, so going back does not lose progress.
		if ( array_search( $next, $steps, true ) > array_search( $state['step'], $steps, true ) ) {
			$state['step'] = $next;
		}
		update_option( self::OPTION, $state, false );

		wp_safe_redirect( self::url( $next ) );
		exit;
	}

	/**
	 * Applies the fields of one step.
	 *
	 * @param string $step  Step key.
	 * @param array  $input Submitted fields.
	 * @param string $nav   next, test_checks or test_report.
	 * @return array{type:string,text:string}
	 */
	private static function save_step( $step, array $input, $nav ) {
		$text = static function ( $key ) use ( $input ) {
			return isset( $input[ $key ] ) ? (string) $input[ $key ] : '';
		};
		$flag = static function ( $key ) use ( $input ) {
			return empty( $input[ $key ] ) ? 0 : 1;
		};

		switch ( $step ) {
			case 'brand':
				Settings::update(
					array(
						'agency_name' => $text( 'agency_name' ),
						'agency_url'  => $text( 'agency_url' ),
						'logo_url'    => $text( 'logo_url' ),
						'brand_color' => $text( 'brand_color' ),
					)
				);
				break;

			case 'report':
				Settings::update(
					array(
						'client_name'       => $text( 'client_name' ),
						'report_recipients' => $text( 'report_recipients' ),
						'report_frequency'  => $text( 'report_frequency' ),
					)
				);
				break;

			case 'alerts':
				Settings::update(
					array(
						'admin_recipients' => $text( 'admin_recipients' ),
						'maintainers'      => isset( $input['maintainers'] ) && is_array( $input['maintainers'] ) ? $input['maintainers'] : array(),
						'pending_alert'    => $text( 'pending_alert' ),
						'alert_on_failure' => $flag( 'alert_on_failure' ),
						'tech_alert'       => $flag( 'tech_alert' ),
					)
				);
				break;

			case 'checks':
				$lines = array();
				$pages = isset( $input['pages'] ) && is_array( $input['pages'] ) ? $input['pages'] : array();
				foreach ( $pages as $page ) {
					if ( empty( $page['on'] ) || empty( $page['url'] ) ) {
						continue;
					}
					$expected = isset( $page['text'] ) ? trim( str_replace( '|', '', (string) $page['text'] ) ) : '';
					$lines[]  = trim( (string) $page['url'] ) . ( '' !== $expected ? ' | ' . $expected : '' );
				}
				Settings::update(
					array(
						'check_urls'          => implode( "\n", $lines ),
						'checks_after_update' => $flag( 'checks_after_update' ),
					)
				);
				if ( 'test_checks' === $nav ) {
					if ( ! Health_Checks::targets() ) {
						return array(
							'type' => 'warning',
							'text' => __( 'Choose at least one page to check.', 'maintained-log' ),
						);
					}
					$run = Health_Checks::run( 'manual', false );
					set_transient( 'maintained_log_setup_checks_' . get_current_user_id(), $run['results'], HOUR_IN_SECONDS );
					return $run['ok']
						? array(
							'type' => 'success',
							'text' => __( 'All the pages respond correctly. This test is already in the log.', 'maintained-log' ),
						)
						: array(
							'type' => 'warning',
							'text' => __( 'Some pages did not pass. Check the details below: maybe the expected text is not exactly as it appears on the page.', 'maintained-log' ),
						);
				}
				break;

			case 'backups':
				$who      = $text( 'backup_who' );
				$provider = '';
				if ( 'hosting' === $who ) {
					$provider = __( 'the hosting provider', 'maintained-log' );
				} elseif ( 'other' === $who ) {
					$provider = $text( 'backup_other' );
				}
				Settings::update(
					array(
						'backup_provider'  => $provider,
						'backup_frequency' => $text( 'backup_frequency' ),
						'backup_retention' => $text( 'backup_retention' ),
						'backup_reminder'  => $text( 'backup_reminder' ),
					)
				);
				break;

			case 'visibility':
				Settings::update(
					array(
						'dashboard_widget'      => $flag( 'dashboard_widget' ),
						'public_report_enabled' => $flag( 'public_report_enabled' ),
					)
				);
				break;

			case 'modules':
				Settings::update(
					array(
						'vuln_enabled' => $flag( 'vuln_enabled' ),
						'vuln_api_key' => $text( 'vuln_api_key' ),
						'perf_enabled' => $flag( 'perf_enabled' ),
						'perf_api_key' => $text( 'perf_api_key' ),
					)
				);
				break;

			case 'done':
				if ( 'test_report' === $nav ) {
					$period = Reporter::manual_period();
					$result = Reporter::send( Reporter::build( $period['from'], $period['to'] ), wp_get_current_user()->user_email );
					return is_wp_error( $result )
						? array(
							'type' => 'error',
							'text' => $result->get_error_message(),
						)
						: array(
							'type' => 'success',
							/* translators: %s: email address. */
							'text' => sprintf( __( 'Test report sent to %s. Check your inbox (and the spam folder, just in case).', 'maintained-log' ), wp_get_current_user()->user_email ),
						);
				}
				break;
		}

		return array(
			'type' => 'success',
			'text' => '',
		);
	}

	/**
	 * Step 1.
	 */
	private static function step_welcome() {
		?>
		<p class="ml-setup__eyebrow"><?php esc_html_e( 'Setup assistant · about 5 minutes', 'maintained-log' ); ?></p>
		<h2><?php esc_html_e( 'Let\'s make your maintenance work visible', 'maintained-log' ); ?></h2>
		<p class="ml-setup__lead"><?php esc_html_e( 'When maintenance is done well, nothing happens, and that is why clients rarely see it. Maintained.log records everything you do on this site and turns it into a clear report for your client.', 'maintained-log' ); ?></p>
		<ul class="ml-setup__features">
			<li><strong><?php esc_html_e( 'It records everything on its own.', 'maintained-log' ); ?></strong> <?php esc_html_e( 'Every update of WordPress, plugins and themes is written down with its date and who did it. You do not need to do anything.', 'maintained-log' ); ?></li>
			<li><strong><?php esc_html_e( 'It checks that the site still works.', 'maintained-log' ); ?></strong> <?php esc_html_e( 'After each update it opens the most important pages and tells you if something broke.', 'maintained-log' ); ?></li>
			<li><strong><?php esc_html_e( 'It tells your client.', 'maintained-log' ); ?></strong> <?php esc_html_e( 'Every month (or week) your client receives a simple report with your branding.', 'maintained-log' ); ?></li>
		</ul>
		<p class="ml-setup__hint"><?php esc_html_e( 'We will go step by step. Everything is saved as you go, so you can stop and continue later. And you can change anything afterwards in the settings.', 'maintained-log' ); ?></p>
		<?php
	}

	/**
	 * Step 2.
	 *
	 * @param array $s Settings.
	 */
	private static function step_brand( array $s ) {
		self::heading( __( 'Your agency', 'maintained-log' ), __( 'This is how your client will recognize who takes care of their website. Your name, logo and color appear in the report and in the box on their WordPress dashboard.', 'maintained-log' ) );
		self::text( 'agency_name', __( 'Agency or professional name', 'maintained-log' ), $s['agency_name'], __( 'As your client knows you.', 'maintained-log' ) );
		self::text( 'agency_url', __( 'Your website', 'maintained-log' ), $s['agency_url'], __( 'Optional. Your name will link to it.', 'maintained-log' ), 'url', 'https://' );
		?>
		<div class="ml-setup__field">
			<label for="ml-logo_url"><?php esc_html_e( 'Logo', 'maintained-log' ); ?></label>
			<div class="ml-setup__logo">
				<img src="<?php echo esc_url( $s['logo_url'] ); ?>" alt="" class="ml-setup__logo-preview" style="background: <?php echo esc_attr( $s['brand_color'] ); ?>;<?php echo $s['logo_url'] ? '' : 'display:none;'; ?>">
				<input type="url" id="ml-logo_url" name="ml[logo_url]" value="<?php echo esc_attr( $s['logo_url'] ); ?>" class="regular-text" placeholder="https://">
				<button type="button" class="button ml-setup__pick-logo"><?php esc_html_e( 'Choose from the media library', 'maintained-log' ); ?></button>
			</div>
			<p class="description"><?php esc_html_e( 'Optional. It is shown on top of your brand color, so a white or transparent logo looks best.', 'maintained-log' ); ?></p>
		</div>
		<div class="ml-setup__field">
			<label for="ml-brand_color"><?php esc_html_e( 'Brand color', 'maintained-log' ); ?></label>
			<input type="text" id="ml-brand_color" name="ml[brand_color]" value="<?php echo esc_attr( $s['brand_color'] ); ?>" class="ml-setup__color" data-default-color="#2271b1">
			<p class="description"><?php esc_html_e( 'Used for the report header and highlights.', 'maintained-log' ); ?></p>
		</div>
		<?php
	}

	/**
	 * Step 3.
	 *
	 * @param array $s Settings.
	 */
	private static function step_report( array $s ) {
		self::heading( __( 'The client report', 'maintained-log' ), __( 'It is an email that summarizes what you did: updates, checks, tasks and time. It is the moment your client sees the value of the maintenance.', 'maintained-log' ) );
		self::text( 'client_name', __( 'Name of the person who receives it', 'maintained-log' ), $s['client_name'], __( 'The report will greet them by name ("Hello Ana,"). A first name is enough.', 'maintained-log' ), 'text', __( 'e.g. Ana', 'maintained-log' ) );
		self::text( 'report_recipients', __( 'Their email', 'maintained-log' ), $s['report_recipients'], __( 'Your client\'s email. You can add several, separated by commas. If you leave it empty, nothing is sent to the client until you add one.', 'maintained-log' ), 'text', 'client@example.com' );
		self::choice(
			'report_frequency',
			__( 'How often', 'maintained-log' ),
			$s['report_frequency'],
			array(
				'monthly'    => array( __( 'Monthly', 'maintained-log' ), __( 'Recommended. On the 1st of each month, with everything from the previous month.', 'maintained-log' ) ),
				'weekly'     => array( __( 'Weekly', 'maintained-log' ), __( 'Every Monday. For clients who want closer follow-up.', 'maintained-log' ) ),
				'bimonthly'  => array( __( 'Every two months', 'maintained-log' ), __( 'In January, March, May, July, September and November, with the previous two months.', 'maintained-log' ) ),
				'quarterly'  => array( __( 'Quarterly', 'maintained-log' ), __( 'In January, April, July and October, with the previous three months. For sites with little activity.', 'maintained-log' ) ),
				'semiannual' => array( __( 'Every six months', 'maintained-log' ), __( 'In January and July, with the previous six months.', 'maintained-log' ) ),
				'never'      => array( __( 'Only when I send it', 'maintained-log' ), __( 'Nothing is sent automatically; you send it from the "Client report" screen.', 'maintained-log' ) ),
			)
		);
		self::hint( __( 'Before each automatic report, the site is checked again. If something fails, the report waits until it is fixed and you get an email, so the client never receives bad news you have not seen first.', 'maintained-log' ) );
	}

	/**
	 * Step 4.
	 *
	 * @param array $s Settings.
	 */
	private static function step_alerts( array $s ) {
		self::heading( __( 'Your alerts', 'maintained-log' ), __( 'These emails are for you, not for the client. They warn you when there is something to do, so you do not have to remember to check.', 'maintained-log' ) );
		self::text( 'admin_recipients', __( 'Where should we warn you', 'maintained-log' ), $s['admin_recipients'], __( 'Your email or your team\'s. Client replies to the report will also arrive here.', 'maintained-log' ) );
		$maintainers = Settings::maintainers() ? Settings::maintainers() : array( get_current_user_id() );
		?>
		<div class="ml-setup__field">
			<label><?php esc_html_e( 'Who maintains this site', 'maintained-log' ); ?></label>
			<p class="description"><?php esc_html_e( 'Only these users will see the Maintained.log menu and, on the WordPress dashboard, a summary of pending tasks and what to do before the next report. Your client will not see them even if they are an administrator, as long as they are not checked.', 'maintained-log' ); ?></p>
			<div class="ml-setup__choices">
				<?php foreach ( Settings::maintainer_candidates() as $user ) : ?>
					<label class="ml-setup__choice">
						<input type="checkbox" name="ml[maintainers][]" value="<?php echo esc_attr( $user->ID ); ?>" <?php checked( in_array( (int) $user->ID, $maintainers, true ) ); ?>>
						<span><strong><?php echo esc_html( $user->display_name ); ?></strong><small><?php echo esc_html( $user->user_email ); ?></small></span>
					</label>
				<?php endforeach; ?>
			</div>
		</div>
		<?php
		self::choice(
			'pending_alert',
			__( 'Remind me about pending updates', 'maintained-log' ),
			$s['pending_alert'],
			array(
				'weekly' => array( __( 'Weekly', 'maintained-log' ), __( 'Recommended. One summary a week with what is waiting to be updated.', 'maintained-log' ) ),
				'daily'  => array( __( 'Daily', 'maintained-log' ), __( 'For sites where you want to update as soon as possible.', 'maintained-log' ) ),
				'never'  => array( __( 'Never', 'maintained-log' ), __( 'If you already track updates another way.', 'maintained-log' ) ),
			)
		);
		self::toggle( 'alert_on_failure', __( 'Warn me right away if something breaks', 'maintained-log' ), $s['alert_on_failure'], __( 'If a page stops working after an update, you get an email at once.', 'maintained-log' ) );
		self::toggle( 'tech_alert', __( 'Warn me about technical problems', 'maintained-log' ), $s['tech_alert'], __( 'For example, when the security certificate is about to expire or the PHP version stops receiving security updates.', 'maintained-log' ) );
	}

	/**
	 * Step 5.
	 *
	 * @param array $s Settings.
	 */
	private static function step_checks( array $s ) {
		self::heading( __( 'Site checks', 'maintained-log' ), __( 'After each update, Maintained.log opens the pages you choose here, as a visitor would, and checks that they load. It is the proof that the site still works.', 'maintained-log' ) );

		$current = array();
		foreach ( Health_Checks::targets() as $target ) {
			$current[ untrailingslashit( $target['url'] ) ] = $target['expected'];
		}

		$candidates = array( home_url( '/' ) => __( 'Home page', 'maintained-log' ) );
		$pages      = get_pages(
			array(
				'sort_column' => 'menu_order,post_title',
				'number'      => 25,
			)
		);
		foreach ( $pages as $page ) {
			$candidates[ get_permalink( $page ) ] = $page->post_title ? $page->post_title : __( '(no title)', 'maintained-log' );
		}
		foreach ( $current as $url => $expected ) {
			$found = false;
			foreach ( array_keys( $candidates ) as $candidate ) {
				if ( untrailingslashit( $candidate ) === $url ) {
					$found = true;
				}
			}
			if ( ! $found ) {
				$candidates[ $url ] = $url;
			}
		}
		?>
		<div class="ml-setup__field">
			<label><?php esc_html_e( 'Which pages should be checked', 'maintained-log' ); ?></label>
			<p class="description"><?php esc_html_e( 'Choose the most important ones: home, contact, shop or checkout. Three to five is usually enough.', 'maintained-log' ); ?></p>
			<table class="ml-setup__pages">
				<thead>
					<tr>
						<th></th>
						<th><?php esc_html_e( 'Page', 'maintained-log' ); ?></th>
						<th>
							<?php esc_html_e( 'Text that must appear (optional)', 'maintained-log' ); ?>
							<span class="ml-setup__tip" title="<?php esc_attr_e( 'For example the button of a form, "Add to cart" or your phone number. If that text disappears, something is wrong even if the page loads.', 'maintained-log' ); ?>">?</span>
						</th>
					</tr>
				</thead>
				<tbody>
					<?php
					$i = 0;
					foreach ( $candidates as $url => $title ) :
						$key     = untrailingslashit( $url );
						$checked = isset( $current[ $key ] ) || ( ! $current && 0 === $i );
						?>
						<tr>
							<td><input type="checkbox" id="ml-page-<?php echo esc_attr( $i ); ?>" name="ml[pages][<?php echo esc_attr( $i ); ?>][on]" value="1" <?php checked( $checked ); ?>></td>
							<td>
								<label for="ml-page-<?php echo esc_attr( $i ); ?>"><?php echo esc_html( $title ); ?></label>
								<div class="ml-setup__url"><?php echo esc_html( preg_replace( '#^https?://#', '', $url ) ); ?></div>
								<input type="hidden" name="ml[pages][<?php echo esc_attr( $i ); ?>][url]" value="<?php echo esc_attr( $url ); ?>">
							</td>
							<td><input type="text" name="ml[pages][<?php echo esc_attr( $i ); ?>][text]" value="<?php echo esc_attr( isset( $current[ $key ] ) ? $current[ $key ] : '' ); ?>" class="regular-text"></td>
						</tr>
						<?php
						++$i;
					endforeach;
					?>
				</tbody>
			</table>
		</div>
		<?php
		self::toggle( 'checks_after_update', __( 'Check automatically after every update', 'maintained-log' ), $s['checks_after_update'], __( 'Recommended. About a minute after each update, the pages are checked and the result is saved in the log.', 'maintained-log' ) );

		$results = get_transient( 'maintained_log_setup_checks_' . get_current_user_id() );
		if ( is_array( $results ) ) :
			?>
			<ul class="ml-setup__results">
				<?php foreach ( $results as $result ) : ?>
					<li class="is-<?php echo esc_attr( $result['status'] ); ?>">
						<span><?php echo 'error' === $result['status'] ? '✗' : '✓'; ?></span>
						<?php echo esc_html( preg_replace( '#^https?://#', '', $result['url'] ) ); ?>
						<em><?php echo esc_html( $result['message'] ? $result['message'] : $result['ms'] . ' ms' ); ?></em>
					</li>
				<?php endforeach; ?>
			</ul>
			<?php
		endif;
		?>
		<p><button class="button" name="nav" value="test_checks"><?php esc_html_e( 'Save and test now', 'maintained-log' ); ?></button></p>
		<?php
	}

	/**
	 * Step 6.
	 *
	 * @param array $s Settings.
	 */
	private static function step_backups( array $s ) {
		self::heading( __( 'Backups', 'maintained-log' ), __( 'A backup is a copy of the whole website to recover it if something serious happens. Clients find it reassuring to know it exists, so the report mentions it.', 'maintained-log' ) );

		$hosting = __( 'the hosting provider', 'maintained-log' );
		$who     = '' === $s['backup_provider'] ? 'none' : ( $hosting === $s['backup_provider'] ? 'hosting' : 'other' );
		?>
		<div class="ml-setup__field">
			<label><?php esc_html_e( 'Who makes the backups of this site', 'maintained-log' ); ?></label>
			<div class="ml-setup__choices">
				<label class="ml-setup__choice"><input type="radio" name="ml[backup_who]" value="hosting" <?php checked( 'hosting', $who ); ?>><span><strong><?php esc_html_e( 'The hosting provider', 'maintained-log' ); ?></strong><small><?php esc_html_e( 'Most hosting plans include automatic copies.', 'maintained-log' ); ?></small></span></label>
				<label class="ml-setup__choice"><input type="radio" name="ml[backup_who]" value="other" <?php checked( 'other', $who ); ?>><span><strong><?php esc_html_e( 'A plugin or another service', 'maintained-log' ); ?></strong><small><input type="text" name="ml[backup_other]" value="<?php echo esc_attr( 'other' === $who ? $s['backup_provider'] : '' ); ?>" placeholder="<?php esc_attr_e( 'e.g. UpdraftPlus', 'maintained-log' ); ?>"></small></span></label>
				<label class="ml-setup__choice"><input type="radio" name="ml[backup_who]" value="none" <?php checked( 'none', $who ); ?>><span><strong><?php esc_html_e( 'I prefer not to mention them', 'maintained-log' ); ?></strong><small><?php esc_html_e( 'The report will not include a backups section.', 'maintained-log' ); ?></small></span></label>
			</div>
		</div>
		<div class="ml-setup__row">
			<div class="ml-setup__field">
				<label for="ml-backup_frequency"><?php esc_html_e( 'How often', 'maintained-log' ); ?></label>
				<select id="ml-backup_frequency" name="ml[backup_frequency]">
					<?php foreach ( Backups::frequencies() as $value => $label ) : ?>
						<option value="<?php echo esc_attr( $value ); ?>" <?php selected( $s['backup_frequency'], $value ); ?>><?php echo esc_html( $label ); ?></option>
					<?php endforeach; ?>
				</select>
			</div>
			<div class="ml-setup__field">
				<label for="ml-backup_retention"><?php esc_html_e( 'Kept for (days)', 'maintained-log' ); ?></label>
				<input type="number" min="0" id="ml-backup_retention" name="ml[backup_retention]" value="<?php echo esc_attr( $s['backup_retention'] ); ?>" class="small-text">
			</div>
		</div>
		<?php
		self::choice(
			'backup_reminder',
			__( 'Remind me to check that they exist', 'maintained-log' ),
			$s['backup_reminder'],
			array(
				'30' => array( __( 'Monthly', 'maintained-log' ), __( 'Recommended. You get an email; checking takes one minute in the hosting panel and one click here.', 'maintained-log' ) ),
				'90' => array( __( 'Quarterly', 'maintained-log' ), '' ),
				'0'  => array( __( 'Never', 'maintained-log' ), '' ),
			)
		);
		self::hint( __( 'WordPress cannot see the copies made by the hosting, so the plugin does not check them by itself. Confirming them now and then is what lets the report say "backups checked on…" with a real date.', 'maintained-log' ) );
	}

	/**
	 * Step 7.
	 *
	 * @param array $s Settings.
	 */
	private static function step_visibility( array $s ) {
		self::heading( __( 'Visibility for your client', 'maintained-log' ), __( 'Besides the email, your client can see the maintenance every day, without asking you.', 'maintained-log' ) );
		self::toggle( 'dashboard_widget', __( 'A "Website maintenance" box on the WordPress dashboard', 'maintained-log' ), $s['dashboard_widget'], __( 'Recommended. When your client logs in to WordPress, they see at the top that the site is maintained by you, when it was last reviewed and whether everything works.', 'maintained-log' ) );
		self::toggle( 'public_report_enabled', __( 'A private link to each report', 'maintained-log' ), $s['public_report_enabled'], __( 'The report can also be opened in a browser, saved as PDF and forwarded. The link is secret but anyone who has it can see the report (which lists the installed plugins), and you can cancel it at any time.', 'maintained-log' ) );
	}

	/**
	 * Step 8.
	 *
	 * @param array $s Settings.
	 */
	private static function step_modules( array $s ) {
		self::heading( __( 'Extras (optional)', 'maintained-log' ), __( 'Two features that add a lot to the report. Each one needs a free key from an external service, so you can leave them for later without any problem.', 'maintained-log' ) );
		?>
		<div class="ml-setup__module">
			<?php self::toggle( 'vuln_enabled', __( 'Explain security updates', 'maintained-log' ), $s['vuln_enabled'], __( 'Detects which updates fixed a known security flaw and explains it to the client in simple words ("the previous version could let someone…"). It also warns you if a plugin has a flaw without a fix. Uses the free Wordfence Intelligence database; nothing about this site is sent to Wordfence.', 'maintained-log' ) ); ?>
			<?php self::text( 'vuln_api_key', __( 'Wordfence Intelligence key', 'maintained-log' ), $s['vuln_api_key'], __( 'Create a free account at wordfence.com and generate the key in the Integrations section.', 'maintained-log' ) ); ?>
		</div>
		<div class="ml-setup__module">
			<?php self::toggle( 'perf_enabled', __( 'Measure the speed', 'maintained-log' ), $s['perf_enabled'], __( 'Measures the home page with Google PageSpeed Insights every week and shows the client a simple rating (Excellent, Good or Could be improved) with its trend and what could make it faster.', 'maintained-log' ) ); ?>
			<?php self::text( 'perf_api_key', __( 'Google API key', 'maintained-log' ), $s['perf_api_key'], __( 'Free, from Google Cloud: enable the PageSpeed Insights API and create a key.', 'maintained-log' ) ); ?>
		</div>
		<?php
		self::hint( __( 'If you enable one without its key, it simply stays off until you add the key in the settings.', 'maintained-log' ) );
	}

	/**
	 * Step 9.
	 *
	 * @param array $s Settings.
	 */
	private static function step_done( array $s ) {
		$frequencies = Settings::report_frequencies();
		$items       = array(
			array( '' !== $s['agency_name'], __( 'Your branding', 'maintained-log' ), $s['agency_name'], 'brand' ),
			array( '' !== $s['report_recipients'], __( 'Client report', 'maintained-log' ), $s['report_recipients'] ? $frequencies[ $s['report_frequency'] ] . ' · ' . ( $s['client_name'] ? $s['client_name'] . ' · ' : '' ) . $s['report_recipients'] : __( 'No client email yet', 'maintained-log' ), 'report' ),
			array( '' !== $s['admin_recipients'], __( 'Your alerts', 'maintained-log' ), $s['admin_recipients'], 'alerts' ),
			/* translators: %d: number of pages. */
			array( (bool) Health_Checks::targets(), __( 'Site checks', 'maintained-log' ), sprintf( _n( '%d page', '%d pages', count( Health_Checks::targets() ), 'maintained-log' ), count( Health_Checks::targets() ) ), 'checks' ),
			array( Backups::has_policy(), __( 'Backups', 'maintained-log' ), Backups::has_policy() ? Backups::policy_sentence() : __( 'Not mentioned in the report', 'maintained-log' ), 'backups' ),
			array( (bool) $s['dashboard_widget'], __( 'Dashboard box', 'maintained-log' ), $s['dashboard_widget'] ? __( 'On', 'maintained-log' ) : __( 'Off', 'maintained-log' ), 'visibility' ),
			array( $s['vuln_enabled'] && $s['vuln_api_key'], __( 'Security updates explained', 'maintained-log' ), $s['vuln_enabled'] && $s['vuln_api_key'] ? __( 'On', 'maintained-log' ) : __( 'Off (optional)', 'maintained-log' ), 'modules' ),
			array( $s['perf_enabled'] && $s['perf_api_key'], __( 'Speed', 'maintained-log' ), $s['perf_enabled'] && $s['perf_api_key'] ? __( 'On', 'maintained-log' ) : __( 'Off (optional)', 'maintained-log' ), 'modules' ),
		);
		?>
		<p class="ml-setup__eyebrow"><?php esc_html_e( 'All set', 'maintained-log' ); ?></p>
		<h2><?php esc_html_e( 'Maintained.log is working', 'maintained-log' ); ?></h2>
		<p class="ml-setup__lead"><?php esc_html_e( 'From now on every update is recorded and checked automatically. This is what you configured:', 'maintained-log' ); ?></p>
		<ul class="ml-setup__summary">
			<?php foreach ( $items as $item ) : ?>
				<li class="<?php echo $item[0] ? 'is-on' : 'is-off'; ?>">
					<span class="ml-setup__mark"><?php echo $item[0] ? '✓' : '–'; ?></span>
					<strong><?php echo esc_html( $item[1] ); ?></strong>
					<span class="ml-setup__value"><?php echo esc_html( $item[2] ); ?></span>
					<a href="<?php echo esc_url( self::url( $item[3] ) ); ?>"><?php esc_html_e( 'Change', 'maintained-log' ); ?></a>
				</li>
			<?php endforeach; ?>
		</ul>
		<?php self::hint( __( 'Tip: send yourself a test report to see exactly what your client will receive. It will be fairly empty today, and it fills up as you work.', 'maintained-log' ) ); ?>
		<p><button class="button button-large" name="nav" value="test_report"><?php esc_html_e( 'Send me a test report', 'maintained-log' ); ?></button></p>
		<?php
	}

	/**
	 * Step heading with its plain explanation.
	 *
	 * @param string $title Title.
	 * @param string $what  What this step is for.
	 */
	private static function heading( $title, $what ) {
		?>
		<h2><?php echo esc_html( $title ); ?></h2>
		<div class="ml-setup__what">
			<span class="ml-setup__what-label"><?php esc_html_e( 'What is this?', 'maintained-log' ); ?></span>
			<p><?php echo esc_html( $what ); ?></p>
		</div>
		<?php
	}

	/**
	 * Text field.
	 *
	 * @param string $key         Field key.
	 * @param string $label       Label.
	 * @param string $value       Value.
	 * @param string $help        Help text.
	 * @param string $type        Input type.
	 * @param string $placeholder Placeholder.
	 */
	private static function text( $key, $label, $value, $help = '', $type = 'text', $placeholder = '' ) {
		?>
		<div class="ml-setup__field">
			<label for="ml-<?php echo esc_attr( $key ); ?>"><?php echo esc_html( $label ); ?></label>
			<input type="<?php echo esc_attr( $type ); ?>" id="ml-<?php echo esc_attr( $key ); ?>" name="ml[<?php echo esc_attr( $key ); ?>]" value="<?php echo esc_attr( $value ); ?>" class="regular-text" placeholder="<?php echo esc_attr( $placeholder ); ?>">
			<?php if ( $help ) : ?>
				<p class="description"><?php echo esc_html( $help ); ?></p>
			<?php endif; ?>
		</div>
		<?php
	}

	/**
	 * Switch with an explanation.
	 *
	 * @param string $key   Field key.
	 * @param string $label Label.
	 * @param mixed  $value Current value.
	 * @param string $help  What it does.
	 */
	private static function toggle( $key, $label, $value, $help ) {
		?>
		<label class="ml-setup__toggle">
			<input type="checkbox" name="ml[<?php echo esc_attr( $key ); ?>]" value="1" <?php checked( ! empty( $value ) ); ?>>
			<span class="ml-setup__switch" aria-hidden="true"></span>
			<span>
				<strong><?php echo esc_html( $label ); ?></strong>
				<small><?php echo esc_html( $help ); ?></small>
			</span>
		</label>
		<?php
	}

	/**
	 * Radio cards.
	 *
	 * @param string $key     Field key.
	 * @param string $label   Label.
	 * @param string $value   Current value.
	 * @param array  $options Value => [title, explanation].
	 */
	private static function choice( $key, $label, $value, array $options ) {
		?>
		<div class="ml-setup__field">
			<label><?php echo esc_html( $label ); ?></label>
			<div class="ml-setup__choices">
				<?php foreach ( $options as $option => $texts ) : ?>
					<label class="ml-setup__choice">
						<input type="radio" name="ml[<?php echo esc_attr( $key ); ?>]" value="<?php echo esc_attr( $option ); ?>" <?php checked( (string) $value, (string) $option ); ?>>
						<span><strong><?php echo esc_html( $texts[0] ); ?></strong><?php if ( $texts[1] ) : ?><small><?php echo esc_html( $texts[1] ); ?></small><?php endif; ?></span>
					</label>
				<?php endforeach; ?>
			</div>
		</div>
		<?php
	}

	/**
	 * Tip box.
	 *
	 * @param string $text Text.
	 */
	private static function hint( $text ) {
		echo '<p class="ml-setup__hint">' . esc_html( $text ) . '</p>';
	}

	/**
	 * Stores a one-time message for the next screen.
	 *
	 * @param string $type success|warning|error.
	 * @param string $text Message.
	 */
	private static function flash( $type, $text ) {
		if ( '' !== $text ) {
			set_transient(
				'maintained_log_setup_notice_' . get_current_user_id(),
				array(
					'type' => $type,
					'text' => $text,
				),
				MINUTE_IN_SECONDS
			);
		}
	}

	/**
	 * Prints and clears the one-time message.
	 */
	private static function notice() {
		$key    = 'maintained_log_setup_notice_' . get_current_user_id();
		$notice = get_transient( $key );
		if ( $notice ) {
			delete_transient( $key );
			printf( '<div class="ml-setup__notice is-%1$s">%2$s</div>', esc_attr( $notice['type'] ), esc_html( $notice['text'] ) );
		}
	}
}