<?php
/**
 * Admin UI: menu, pages, scripts and styles.
 */

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

class EWPM_Admin {

	public static function init() {
		// On `init`, not here: the page titles are translated, and WordPress 6.7
		// warns when a text domain loads before `init`. admin_menu runs later
		// still, so the registry is always populated in time.
		add_action( 'init', array( __CLASS__, 'register_core_pages' ), 4 );
		add_action( 'init', array( __CLASS__, 'register_core_settings_sections' ), 4 );

		// On a network the screens live in Network Admin only. Every operation
		// spans the whole network, so putting them on each subsite's menu would
		// advertise them to administrators who (correctly) cannot use them.
		if ( is_multisite() ) {
			add_action( 'network_admin_menu', array( __CLASS__, 'menu' ) );
			// A bookmark, an old alert email or a subsite admin's guess lands on
			// /wp-admin/admin.php?page=ewpm-* where nothing is registered, and
			// WordPress answers "Sorry, you are not allowed to access this page."
			// Send a Network Administrator to the real screen instead.
			// `admin_page_access_denied`, not `admin_init`. WordPress requires
			// wp-admin/menu.php at admin.php:163 and that file wp_die()s with
			// "Sorry, you are not allowed to access this page." from
			// wp-admin/includes/menu.php:384 — before admin_init fires at :180.
			// An admin_init hook therefore never runs for the very case this
			// exists to catch. admin_page_access_denied fires immediately
			// before that wp_die() and is the last point we can intervene.
			add_action( 'admin_page_access_denied', array( __CLASS__, 'redirect_to_network' ) );
			// Kept as well: reachable when the page resolves but the request
			// still belongs in Network Admin.
			add_action( 'admin_init', array( __CLASS__, 'redirect_to_network' ) );
			add_action( 'network_admin_notices', array( __CLASS__, 'verify_notice' ) );
			add_action( 'network_admin_notices', array( __CLASS__, 'multisite_notice' ) );
			add_filter( 'network_admin_plugin_action_links_' . EWPM_BASENAME, array( __CLASS__, 'action_links' ) );
		} else {
			add_action( 'admin_menu', array( __CLASS__, 'menu' ) );
			add_action( 'admin_notices', array( __CLASS__, 'verify_notice' ) );
			add_filter( 'plugin_action_links_' . EWPM_BASENAME, array( __CLASS__, 'action_links' ) );
		}
		// A core-only install has no local License screen. WordPress
		// refuses an unregistered admin slug before admin_init, so catch direct
		// links and old bookmarks at the same last-chance hook used above.
		add_action( 'admin_page_access_denied', array( __CLASS__, 'redirect_missing_commercial_page' ), 20 );
		add_action( 'admin_enqueue_scripts', array( __CLASS__, 'assets' ) );
		add_action( 'admin_enqueue_scripts', array( __CLASS__, 'menu_styles' ) );
	}

	/**
	 * The screens this plugin ships on its own. Anything else — the Sync and
	 * Licence screens today — is registered by an add-on through
	 * EWPM_Modules::register_page(). See decision 0002.
	 */
	public static function register_core_pages() {
		$pages = array(
			'ewpm-dashboard' => array( __( 'Dashboard', 'migratenest' ), 'page_dashboard', 10 ),
			'ewpm-export'    => array( __( 'Migrate out', 'migratenest' ), 'page_export', 20 ),
			'ewpm-import'    => array( __( 'Migrate in', 'migratenest' ), 'page_import', 30 ),
			'ewpm-sync'      => array( __( 'Sync', 'migratenest' ), 'page_sync_preview', 40, 'sync' ),
			'ewpm-backups'   => array( __( 'Backups', 'migratenest' ), 'page_backups', 50 ),
			'ewpm-settings'  => array( __( 'Settings', 'migratenest' ), 'page_settings', 70 ),
		);
		foreach ( $pages as $slug => $def ) {
			EWPM_Modules::register_page( $slug, array(
				'title'    => $def[0],
				'callback' => array( __CLASS__, $def[1] ),
				'position' => $def[2],
				'feature'  => isset( $def[3] ) ? $def[3] : '',
			) );
		}
	}

	/**
	 * Multisite only: forward /wp-admin/admin.php?page=ewpm-* to the same screen
	 * under /wp-admin/network/. Runs on admin_init, which fires before WordPress
	 * resolves the (non-existent) page hook and dies. Users without the network
	 * capability are left alone — they get the standard refusal, which is right.
	 */
	public static function redirect_to_network() {
		if ( is_network_admin() || wp_doing_ajax() ) {
			return;
		}
		if ( empty( $_GET['page'] ) || 0 !== strpos( sanitize_text_field( wp_unslash( $_GET['page'] ) ), 'ewpm-' ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Reading which admin screen was requested so it can be redirected. No state changes, and ordinary admin navigation carries no nonce.
			return;
		}
		$query = isset( $_SERVER['QUERY_STRING'] ) ? (string) wp_unslash( $_SERVER['QUERY_STRING'] ) : ''; // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- Appended to a wp_safe_redirect() target, which runs wp_sanitize_redirect() and strips control characters; the host is validated separately.

		if ( ! EWPM_Multisite::user_can() ) {
			// Returning here hands the request back to wp-admin/admin.php, which
			// finds nothing registered for this slug and answers "Sorry, you are
			// not allowed to access this page." — true, but it names neither the
			// plugin nor the reason, and an OAuth round-trip lands here after
			// the connection has already succeeded. Say what actually happened.
			wp_die(
				sprintf(
					'<h1>%s</h1><p>%s</p><p>%s</p>',
					esc_html__( 'Network Administrator required', 'migratenest' ),
					esc_html__( 'MigrateNest runs across the whole network, so its screens live in Network Admin and only a Network Administrator can open them.', 'migratenest' ),
					esc_html__( 'You are signed in without that capability. Sign in as a Network Administrator, then open the plugin from Network Admin.', 'migratenest' )
				),
				esc_html__( 'Network Administrator required', 'migratenest' ),
				array( 'response' => 403, 'link_url' => esc_url( network_admin_url( 'admin.php?page=ewpm-dashboard' ) ), 'link_text' => esc_html__( 'Go to Network Admin', 'migratenest' ) )
			);
		}

		wp_safe_redirect( network_admin_url( 'admin.php' . ( '' !== $query ? '?' . $query : '' ) ) );
		exit;
	}

	/**
	 * Send a capable user from an unregistered paid screen to public pricing.
	 *
	 * Installed modules keep their local screen even before licence activation;
	 * only a genuinely absent page is redirected.
	 */
	public static function redirect_missing_commercial_page() {
		if ( wp_doing_ajax() || empty( $_GET['page'] ) || ! EWPM_Multisite::user_can() ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Reading which admin screen was requested so it can be redirected. No state changes, and ordinary admin navigation carries no nonce.
			return;
		}

		$page = sanitize_key( wp_unslash( $_GET['page'] ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Reading which admin screen was requested so it can be redirected. No state changes, and ordinary admin navigation carries no nonce.
		if ( 'ewpm-license' !== $page || self::has_page( $page ) ) {
			return;
		}

		$url = esc_url_raw( EWPM_Features::pricing_url() );
		if ( '' === $url ) {
			return;
		}

		wp_redirect( $url, 302, 'MigrateNest' ); // phpcs:ignore WordPress.Security.SafeRedirect.wp_redirect_wp_redirect
		exit;
	}

	/**
	 * Tell a Network Administrator, once per network, exactly what this build
	 * covers on a network and what it does not. Better they read it here than
	 * discover the gap after a migration.
	 */
	public static function multisite_notice() {
		if ( ! is_multisite() || ! EWPM_Multisite::user_can() ) {
			return;
		}
		$screen = get_current_screen();
		if ( ! $screen || false === strpos( $screen->id, 'ewpm-' ) ) {
			return;
		}
		if ( get_site_option( 'ewpm_multisite_notice_dismissed' ) ) {
			return;
		}
		echo '<div class="notice notice-info"><p><strong>'
			. esc_html( EWPM_Multisite::describe() )
			. '</strong></p><ul style="margin:6px 0 6px 22px;list-style:disc;">';
		foreach ( EWPM_Multisite::caveats() as $line ) {
			echo '<li>' . esc_html( $line ) . '</li>';
		}
		$dismiss = wp_nonce_url(
			add_query_arg( 'ewpm_ms_notice', 'dismiss', network_admin_url( 'admin.php?page=ewpm-dashboard' ) ),
			'ewpm_ms_notice_dismiss'
		);
		echo '</ul><p><a href="' . esc_url( $dismiss ) . '">' . esc_html__( 'Got it, hide this', 'migratenest' ) . '</a></p></div>';
	}

	/**
	 * After a restore the browser session is reset, so the in-modal
	 * verification report is easily missed. Surface a dismissible notice
	 * linking to the full report whenever a recent report has warnings or
	 * failures. Pro-only (the report is only generated for Pro).
	 */
	public static function verify_notice() {
		if ( ! EWPM_Multisite::user_can() ) {
			return;
		}
		// This plugin's screens and the main Dashboard only — not every admin
		// page. Guideline 11 asks that notices stay limited in scope, and being
		// dismissible is not on its own a licence to appear everywhere. Same
		// test the health notice already applies, so the two
		// notices behave alike.
		$screen = function_exists( 'get_current_screen' ) ? get_current_screen() : null;
		$sid    = $screen ? $screen->id : '';
		if ( 'dashboard' !== $sid && false === strpos( $sid, 'ewpm-' ) && false === strpos( $sid, 'page_ewpm' ) ) {
			return;
		}
		$report = EWPM_Features::verify_last_report();
		if ( ! is_array( $report ) || empty( $report['checks'] ) ) {
			return;
		}
		// Only nag for < 48h-old reports that actually have something to see.
		$age = isset( $report['created'] ) ? ( time() - (int) strtotime( $report['created'] . ' UTC' ) ) : 0;
		if ( $age > 2 * DAY_IN_SECONDS ) {
			return;
		}
		if ( empty( $report['overall'] ) || 'pass' === $report['overall'] ) {
			return;
		}

		$class = 'fail' === $report['overall'] ? 'notice-error' : 'notice-warning';
		$link  = EWPM_Multisite::admin_url( 'admin.php?page=ewpm-import#ewpm-verify-report' );
		echo '<div class="notice ' . esc_attr( $class ) . ' is-dismissible"><p>'
			. '<strong>' . esc_html__( 'MigrateNest:', 'migratenest' ) . '</strong> '
			. esc_html__( 'Your last migration finished with items worth reviewing.', 'migratenest' )
			. ' <a href="' . esc_url( $link ) . '">' . esc_html__( 'View the verification report', 'migratenest' ) . '</a>'
			. '</p></div>';
	}

	public static function action_links( $links ) {
		$extra = array(
			'<a href="' . esc_url( EWPM_Multisite::admin_url( 'admin.php?page=ewpm-settings' ) ) . '">' . esc_html__( 'Settings', 'migratenest' ) . '</a>',
		);
		if ( ! EWPM_Features::is_pro() ) {
			$extra[] = '<a href="' . esc_url( EWPM_Features::pricing_url() ) . '" target="_blank" rel="noopener" style="color:#0c7a66;font-weight:700;">' . esc_html__( 'Upgrade to Pro', 'migratenest' ) . '</a>';
		}
		return array_merge( $extra, $links );
	}

	/**
	 * Whether an installed module provides the local License screen.
	 *
	 * A valid licence is deliberately not the test here: an installed but not
	 * yet activated Pro add-on still needs its screen so the key can be entered.
	 */
	public static function has_page( $slug ) {
		$pages = EWPM_Modules::pages();
		return isset( $pages[ sanitize_key( $slug ) ] );
	}

	public static function has_license_page() {
		return self::has_page( 'ewpm-license' );
	}

	/** Local module page when installed, otherwise the public pricing page. */
	public static function page_url( $slug ) {
		$slug = sanitize_key( $slug );
		return self::has_page( $slug )
			? EWPM_Multisite::admin_url( 'admin.php?page=' . $slug )
			: EWPM_Features::pricing_url();
	}

	/** Where the plan control should send the current installation. */
	public static function plan_url() {
		return self::page_url( 'ewpm-license' );
	}

	/**
	 * Settings sections core ships. Remote Access, Scheduled Backups and
	 * Privacy belong to the paid module and are registered by it; positions
	 * are spaced so the combined screen keeps its established order.
	 */
	public static function register_core_settings_sections() {
		$sections = array(
			'language'    => array( __( 'Language', 'migratenest' ), 'language.php', 30 ),
			'diagnostics' => array( __( 'Diagnostics Log', 'migratenest' ), 'diagnostics.php', 50 ),
			'environment' => array( __( 'Environment', 'migratenest' ), 'environment.php', 60 ),
		);
		foreach ( $sections as $id => $def ) {
			EWPM_Modules::register_settings_section( $id, array(
				'title'    => $def[0],
				'render'   => EWPM_PATH . 'admin/views/settings/' . $def[1],
				'position' => $def[2],
			) );
		}
	}

	public static function menu() {
		// 'manage_network_options' on a network, 'manage_options' otherwise —
		// see EWPM_Multisite::capability() for why a network needs the stricter
		// one. Registering the pages with it also means a site administrator
		// never sees a menu entry they would only be refused at.
		$cap = EWPM_Multisite::capability();

		add_menu_page(
			__( 'MigrateNest', 'migratenest' ),
			__( 'MigrateNest', 'migratenest' ),
			$cap,
			'ewpm-dashboard',
			array( __CLASS__, 'page_dashboard' ),
			// White artwork: the wp-admin sidebar is near-black, and WordPress does
			// not recolour an icon loaded from a file URL — it only greyscales it.
			EWPM_URL . 'assets/branding/migratenest-admin-menu.png',
			76
		);

		foreach ( EWPM_Modules::pages() as $slug => $def ) {
			$menu_title = $def['menu_title'];
			if ( ! empty( $def['feature'] ) && ! EWPM_Features::can( $def['feature'] ) ) {
				$required_tier = EWPM_Features::feature_tier( $def['feature'] );
				$badge_label   = EWPM_Features::is_pro() && $required_tier
					? EWPM_Features::tier_label( $required_tier )
					: __( 'Pro', 'migratenest' );
				$menu_title   .= ' <span class="ewpm-menu-badge" aria-hidden="true">' . esc_html( $badge_label ) . '</span>';
				$menu_title   .= '<span class="screen-reader-text"> ' . esc_html(
					sprintf(
						/* translators: %s: paid plan name, for example Pro or Freelancer. */
						__( '%s plan required', 'migratenest' ),
						$badge_label
					)
				) . '</span>';
			}
			add_submenu_page( 'ewpm-dashboard', $def['title'], $menu_title, $cap, $slug, $def['callback'] );
		}
	}

	/**
	 * Styles for this plugin's admin MENU entry, which is present on every
	 * admin screen — not just ours — so they cannot ride on the product
	 * stylesheet enqueued by assets() below.
	 *
	 * Registered against a src-less handle and attached with
	 * wp_add_inline_style() rather than echoed into admin_head: WordPress then
	 * owns the <style> tag, its position in the dependency graph, and its
	 * escaping. Two rules only, so a separate HTTP request would cost more
	 * than it saves.
	 *
	 * The icon rule is unconditional; the badge rules are added only when
	 * something is actually locked, so a fully licensed install ships neither
	 * the markup nor the CSS for it.
	 */
	public static function menu_styles() {
		wp_register_style( 'ewpm-admin-menu', false, array(), EWPM_VERSION );
		wp_enqueue_style( 'ewpm-admin-menu' );

		/*
		 * Sit the menu mark correctly in WordPress's icon slot. Core sets
		 * `padding: 8px 0 0` on every admin menu icon, which is tuned for a
		 * dashicon glyph; our mark fills more of its canvas and reads as
		 * sitting low with that much above it.
		 *
		 * Scoped to this plugin's own menu item on purpose: `#adminmenu
		 * .wp-menu-image img` on its own would re-pad every other plugin's
		 * icon too, which is not ours to change.
		 */
		wp_add_inline_style(
			'ewpm-admin-menu',
			'#adminmenu #toplevel_page_ewpm-dashboard .wp-menu-image img{padding:5px 0 0;}'
		);

		// Keep paid-feature labels compact and readable in both expanded and
		// flyout menus. The badge markup is added only to locked features.
		$badged = false;
		foreach ( EWPM_Modules::pages() as $def ) {
			if ( ! empty( $def['feature'] ) && ! EWPM_Features::can( $def['feature'] ) ) {
				$badged = true;
				break;
			}
		}
		if ( ! $badged ) {
			return;
		}

		wp_add_inline_style(
			'ewpm-admin-menu',
			'#adminmenu .wp-submenu a .ewpm-menu-badge{float:right;margin-left:8px;color:#f0c33c;font-size:9px;line-height:1.9;font-weight:700;letter-spacing:.055em;text-transform:uppercase;}'
			. '.rtl #adminmenu .wp-submenu a .ewpm-menu-badge{float:left;margin-right:8px;margin-left:0;}'
		);
	}

	public static function assets( $hook ) {
		$screen = get_current_screen();
		// Only product screens (ewpm-dashboard / ewpm-export / …). Skip the
		// license-hub operator UI (ewpm-hub*), which shares the ewpm- prefix.
		if ( ! $screen || false === strpos( $screen->id, 'ewpm-' ) || false !== strpos( $screen->id, 'ewpm-hub' ) ) {
			return;
		}
		wp_enqueue_style( 'ewpm-admin', EWPM_URL . 'assets/css/admin.css', array(), EWPM_VERSION );
		wp_enqueue_script( 'ewpm-admin', EWPM_URL . 'assets/js/admin.js', array( 'jquery', 'wp-i18n' ), EWPM_VERSION, true );
		// Script translations come from the same text domain as the PHP side, so
		// one .pot covers the whole plugin. This is what lets the several dozen
		// runtime messages in admin.js (progress labels, failure explanations,
		// confirmations) be translated at all — EWPM.strings below stays for the
		// handful of values the markup and the server decide.
		if ( function_exists( 'wp_set_script_translations' ) ) {
			wp_set_script_translations( 'ewpm-admin', 'migratenest', EWPM_PATH . 'languages' );
		}
		$data = array(
			'ajaxurl'  => admin_url( 'admin-ajax.php' ),
			'loginUrl' => wp_login_url( EWPM_Multisite::admin_url( 'admin.php?page=ewpm-backups' ) ),
			'nonce'    => wp_create_nonce( 'ewpm_nonce' ),
			'ext'        => EWPM_ARCHIVE_EXT,
			'archiveExts' => ewpm_archive_extensions(),
			'isPro'      => EWPM_Features::is_pro(),
			// Per-feature entitlement, so the browser gates on the same answer
			// the server will give rather than on "has any licence".
			'can'        => EWPM_Features::entitlements(),
			'pricingUrl' => EWPM_Features::pricing_url(),
			// Filled in by the add-on, which owns the licence screen.
			'licenseUrl' => '',
			// Chunked uploads bypass PHP upload limits, so there is no total
			// file size cap.
			'chunk'      => EWPM_Upload::max_chunk_size(),
			'maxRetries' => 10,
			'strings'  => array(
				'exporting' => __( 'Exporting…', 'migratenest' ),
				'importing' => __( 'Importing…', 'migratenest' ),
				'done'      => __( 'Done!', 'migratenest' ),
				'error'     => __( 'Error', 'migratenest' ),
				'cancel'    => __( 'Cancel', 'migratenest' ),
				'canceling' => __( 'Canceling…', 'migratenest' ),
				'cancelTitle'   => __( 'Cancel backup?', 'migratenest' ),
				'cancelConfirm' => __( 'Cancel backup', 'migratenest' ),
				'keepGoing'     => __( 'Keep going', 'migratenest' ),
				'selectAll' => __( 'Select all', 'migratenest' ),
				'clearAll'  => __( 'Clear all', 'migratenest' ),
				'proCtaLead'       => __( 'Backups are safest on autopilot.', 'migratenest' ),
				'proCtaLeadImport' => __( 'Keep this site protected from now on.', 'migratenest' ),
				'proCta'       => __( 'Automate backups & verify they restore →', 'migratenest' ),
				'proCtaImport' => __( 'Schedule automatic backups →', 'migratenest' ),
				'preflight'    => __( 'Pre-flight checks', 'migratenest' ),
				'proceedAnyway'=> __( 'Proceed anyway', 'migratenest' ),
				'proceedWarn'  => __( 'Continue', 'migratenest' ),
				'cancelCheck'  => __( 'Cancel', 'migratenest' ),
				'preflightReview'  => __( 'Review before continuing', 'migratenest' ),
				'preflightWaiting' => __( 'Waiting for you, nothing has started yet.', 'migratenest' ),
				'preparing'    => __( 'Preparing the archive…', 'migratenest' ),
				'working'      => __( 'Working…', 'migratenest' ),
				'retrying'     => __( 'Connection problem, retrying…', 'migratenest' ),
				'localeSaving' => __( 'Applying…', 'migratenest' ),
				'localeFailed' => __( 'Could not change the language.', 'migratenest' ),
			),
		);

		/**
		 * Data handed to the admin bundle.
		 *
		 * Modules add their own keys — destination connect URLs, sync ignore
		 * rules, the licence screen URL — rather than core reaching into
		 * classes it may not have.
		 *
		 * @param array $data
		 */
		$data = apply_filters( 'ewpm_admin_js_data', $data );

		wp_localize_script( 'ewpm-admin', 'EWPM', $data );
	}

	public static function page_dashboard() {
		// Handle onboarding dismissal (no-JS, nonce-guarded) before rendering.
		if ( isset( $_GET['ewpm_onboard'] ) && 'dismiss' === $_GET['ewpm_onboard']
			&& isset( $_GET['_wpnonce'] ) && wp_verify_nonce( sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ) ), 'ewpm_onboard_dismiss' ) ) {
			update_option( 'ewpm_onboarding_dismissed', 1, false );
			wp_safe_redirect( EWPM_Multisite::admin_url( 'admin.php?page=ewpm-dashboard' ) );
			exit;
		}
		// Dismissal of the network capability/coverage notice. Stored per network
		// (not per blog) so a super admin only reads it once.
		if ( is_multisite() && isset( $_GET['ewpm_ms_notice'] ) && 'dismiss' === $_GET['ewpm_ms_notice']
			&& isset( $_GET['_wpnonce'] ) && wp_verify_nonce( sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ) ), 'ewpm_ms_notice_dismiss' ) ) {
			update_site_option( 'ewpm_multisite_notice_dismissed', 1 );
			wp_safe_redirect( EWPM_Multisite::admin_url( 'admin.php?page=ewpm-dashboard' ) );
			exit;
		}
		if ( class_exists( 'EWPM_Funnel' ) ) {
			EWPM_Funnel::stamp( 'viewed_dashboard' );
		}
		include EWPM_PATH . 'admin/views/dashboard.php';
	}

	public static function page_export() {
		include EWPM_PATH . 'admin/views/export.php';
	}

	public static function page_import() {
		include EWPM_PATH . 'admin/views/import.php';
	}

	/** Read-only showcase used when the commercial Sync module is absent. */
	public static function page_sync_preview() {
		include EWPM_PATH . 'admin/views/sync-preview.php';
	}

	public static function page_backups() {
		include EWPM_PATH . 'admin/views/backups.php';
	}

	public static function page_settings() {
		include EWPM_PATH . 'admin/views/settings.php';
	}
}