<?php
namespace Patchwork\Core;

if ( ! defined( 'ABSPATH' ) ) exit;

/**
 * "Get support" page in the Patchwork menu: a simple ticket form that emails
 * Patchwork support (with optional attachments and system info) through the
 * site's own mail. Nothing is sent unless the user submits the form.
 */
final class Support {

    const PAGE      = 'patchwork-support';
    const MAX_FILES = 3;
    const MAX_BYTES = 5 * MB_IN_BYTES;
    const ALLOWED   = [ 'jpg', 'jpeg', 'png', 'gif', 'webp', 'pdf', 'txt', 'log', 'csv', 'json', 'zip' ];

    /** @var Core */
    private $core;

    public function __construct( Core $core ) {
        $this->core = $core;
        add_action( 'admin_init', [ $this, 'maybe_send' ] );
    }

    /** Allowed attachment types for wp_handle_upload(). */
    private static function mimes(): array {
        return [
            'jpg|jpeg' => 'image/jpeg',
            'png'      => 'image/png',
            'gif'      => 'image/gif',
            'webp'     => 'image/webp',
            'pdf'      => 'application/pdf',
            'txt|log'  => 'text/plain',
            'csv'      => 'text/csv',
            'json'     => 'application/json',
            'zip'      => 'application/zip',
        ];
    }

    public static function email(): string {
        return (string) apply_filters( 'patchwork_core_support_email', 'support@patchwork.guru' );
    }

    public static function url( array $args = [] ): string {
        return add_query_arg( array_merge( [ 'page' => self::PAGE ], $args ), admin_url( 'admin.php' ) );
    }

    // ─── System info ──────────────────────────────────────────────────────────

    /** What "Include system info" sends — shown to the user before sending. */
    public function system_info(): array {
        global $wp_version;
        $info = [
            'Site'          => home_url(),
            'WordPress'     => $wp_version . ( is_multisite() ? ' (multisite)' : '' ),
            'PHP'           => PHP_VERSION,
            'Language'      => get_locale(),
            'Theme'         => wp_get_theme()->get( 'Name' ) . ' ' . wp_get_theme()->get( 'Version' ),
            'Patchwork Core'=> PATCHWORK_CORE_VERSION,
        ];
        if ( defined( 'WC_VERSION' ) ) {
            $info['WooCommerce'] = WC_VERSION;
            if ( class_exists( '\Automattic\WooCommerce\Utilities\OrderUtil' ) ) {
                $info['Order storage'] = \Automattic\WooCommerce\Utilities\OrderUtil::custom_orders_table_usage_is_enabled() ? 'HPOS' : 'Posts (legacy)';
            }
        }
        foreach ( $this->core->modules() as $module ) {
            $info[ $module->name() ] = $module->version() . ( $module->is_pro() ? ' (Pro)' : ' (Free)' );
        }
        return $info;
    }

    // ─── Send ─────────────────────────────────────────────────────────────────

    public function maybe_send(): void {
        if ( empty( $_POST['patchwork_support_send'] ) ) return;

        check_admin_referer( 'patchwork_support', 'patchwork_support_nonce' );
        if ( ! Admin::current_user_can_menu( $this->core ) ) {
            wp_die( esc_html__( 'You are not allowed to send support requests from this site.', 'patchwork-order-split' ), 403 );
        }

        $result = $this->send();
        // Keep what they typed if sending failed, so nothing is lost.
        set_transient( 'patchwork_support_result_' . get_current_user_id(), $result, 10 * MINUTE_IN_SECONDS );
        wp_safe_redirect( self::url( [ 'sent' => $result['ok'] ? 1 : 0 ] ) );
        exit;
    }

    /**
     * @return array{ok: bool, message: string, form?: array}
     */
    private function send(): array {
        // phpcs:disable WordPress.Security.NonceVerification.Missing -- verified in maybe_send()
        $form = [
            'plugin'      => isset( $_POST['plugin'] ) ? sanitize_key( wp_unslash( $_POST['plugin'] ) ) : '',
            'subject'     => isset( $_POST['subject'] ) ? sanitize_text_field( wp_unslash( $_POST['subject'] ) ) : '',
            'message'     => isset( $_POST['message'] ) ? sanitize_textarea_field( wp_unslash( $_POST['message'] ) ) : '',
            'email'       => isset( $_POST['email'] ) ? sanitize_email( wp_unslash( $_POST['email'] ) ) : '',
            'system_info' => ! empty( $_POST['system_info'] ),
        ];
        // phpcs:enable
        $fail = function( string $message ) use ( $form ) { return [ 'ok' => false, 'message' => $message, 'form' => $form ]; };

        $modules = $this->core->modules();
        if ( $form['plugin'] !== 'other' && ! isset( $modules[ $form['plugin'] ] ) ) return $fail( __( 'Choose which plugin this is about.', 'patchwork-order-split' ) );
        if ( $form['subject'] === '' )                return $fail( __( 'Add a short subject.', 'patchwork-order-split' ) );
        if ( mb_strlen( $form['message'] ) < 10 )    return $fail( __( 'Describe the issue in a little more detail.', 'patchwork-order-split' ) );
        if ( ! is_email( $form['email'] ) )          return $fail( __( 'Enter an email address we can reply to.', 'patchwork-order-split' ) );

        // One request a minute per user, so a double-click doesn't send twice.
        $throttle = 'patchwork_support_sent_' . get_current_user_id();
        if ( get_transient( $throttle ) ) return $fail( __( 'You just sent a request — please wait a minute before sending another.', 'patchwork-order-split' ) );

        $files = $this->collect_files();
        if ( is_wp_error( $files ) ) return $fail( $files->get_error_message() );

        $plugin_name = $form['plugin'] === 'other' ? __( 'Something else', 'patchwork-order-split' ) : $modules[ $form['plugin'] ]->name();
        $user        = wp_get_current_user();

        $body  = sprintf( "Plugin: %s\nFrom: %s <%s>\nSite: %s\n\n", $plugin_name, $user->display_name, $form['email'], home_url() );
        $body .= $form['message'] . "\n";
        if ( $form['system_info'] ) {
            $body .= "\n— System info —\n";
            foreach ( $this->system_info() as $label => $value ) $body .= "$label: $value\n";
        }
        if ( $files ) {
            $body .= "\nAttachments: " . implode( ', ', array_map( 'basename', $files ) ) . "\n";
        }

        $subject = sprintf( '[%s] %s', $plugin_name, $form['subject'] );
        $headers = [ 'Reply-To: ' . ( $user->display_name ? '"' . str_replace( '"', '', $user->display_name ) . '" ' : '' ) . '<' . $form['email'] . '>' ];

        $sent = wp_mail( self::email(), $subject, $body, $headers, $files );

        // Temporary copies are removed whatever happened.
        foreach ( $files as $file ) {
            wp_delete_file( $file );
            @rmdir( dirname( $file ) ); // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged,WordPress.WP.AlternativeFunctions.file_system_operations_rmdir -- our own empty temp folder
        }

        if ( ! $sent ) {
            return $fail( sprintf(
                /* translators: %s: support email address */
                __( 'This site couldn\'t send the email (its mail setup may need attention). Please email us directly at %s.', 'patchwork-order-split' ),
                self::email()
            ) );
        }

        set_transient( $throttle, 1, MINUTE_IN_SECONDS );
        Activity::log( 'core', 'support', sprintf( 'Support request sent: [%s] %s', $plugin_name, $form['subject'] ) );

        return [
            'ok'      => true,
            /* translators: %s: email address */
            'message' => sprintf( __( 'Thanks — your request has been sent. We\'ll reply to %s.', 'patchwork-order-split' ), $form['email'] ),
        ];
    }

    /**
     * Validate uploads and copy them to a private temp folder under their
     * original (sanitised) names, so the email shows proper file names.
     *
     * @return string[]|\WP_Error Paths to attach.
     */
    private function collect_files() {
        require_once ABSPATH . 'wp-admin/includes/file.php';
        // phpcs:disable WordPress.Security.NonceVerification.Missing,WordPress.Security.ValidatedSanitizedInput -- verified in maybe_send(); each file is validated below
        if ( empty( $_FILES['attachments']['name'] ) || ! is_array( $_FILES['attachments']['name'] ) ) return [];
        $f = $_FILES['attachments'];
        // phpcs:enable

        $paths = [];
        $count = 0;
        foreach ( $f['name'] as $i => $name ) {
            if ( (int) ( $f['error'][ $i ] ?? UPLOAD_ERR_NO_FILE ) === UPLOAD_ERR_NO_FILE || $name === '' ) continue;
            if ( ++$count > self::MAX_FILES ) {
                /* translators: %d: number of files */
                return new \WP_Error( 'too_many', sprintf( __( 'Attach up to %d files.', 'patchwork-order-split' ), self::MAX_FILES ) );
            }
            if ( (int) $f['error'][ $i ] !== UPLOAD_ERR_OK ) {
                return new \WP_Error( 'upload', __( 'One of the files didn\'t upload. Try again, or attach a smaller file.', 'patchwork-order-split' ) );
            }
            if ( (int) $f['size'][ $i ] > self::MAX_BYTES ) {
                /* translators: 1: file name, 2: size limit */
                return new \WP_Error( 'size', sprintf( __( '%1$s is too large — the limit is %2$s per file.', 'patchwork-order-split' ), sanitize_file_name( $name ), size_format( self::MAX_BYTES ) ) );
            }
            $type_error = new \WP_Error( 'type', sprintf(
                /* translators: 1: file name, 2: allowed types */
                __( '%1$s isn\'t an allowed file type. Allowed: %2$s.', 'patchwork-order-split' ),
                sanitize_file_name( $name ), implode( ', ', self::ALLOWED )
            ) );
            if ( ! in_array( strtolower( pathinfo( $name, PATHINFO_EXTENSION ) ), self::ALLOWED, true ) ) {
                return $type_error;
            }

            // WordPress's own upload handling (type checks included), into a private
            // temp folder rather than the public uploads directory.
            $dir = trailingslashit( get_temp_dir() ) . 'patchwork-support-' . wp_generate_password( 12, false );
            wp_mkdir_p( $dir );
            $to_temp = function( $uploads ) use ( $dir ) {
                return array_merge( $uploads, [ 'path' => $dir, 'url' => '', 'subdir' => '', 'basedir' => $dir, 'baseurl' => '', 'error' => false ] );
            };
            add_filter( 'upload_dir', $to_temp );
            $upload  = [ 'name' => $name, 'type' => $f['type'][ $i ], 'tmp_name' => $f['tmp_name'][ $i ], 'error' => $f['error'][ $i ], 'size' => $f['size'][ $i ] ];
            $handled = wp_handle_upload( $upload, [ 'test_form' => false, 'mimes' => self::mimes() ] ); // takes $upload by reference
            remove_filter( 'upload_dir', $to_temp );

            if ( empty( $handled['file'] ) ) {
                @rmdir( $dir ); // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged,WordPress.WP.AlternativeFunctions.file_system_operations_rmdir -- our own empty temp folder
                foreach ( $paths as $p ) { wp_delete_file( $p ); }
                return $type_error;
            }
            $paths[] = $handled['file'];
        }
        return $paths;
    }

    // ─── Page ─────────────────────────────────────────────────────────────────

    public function render(): void {
        $key    = 'patchwork_support_result_' . get_current_user_id();
        $result = get_transient( $key );
        if ( $result ) delete_transient( $key );
        $form    = is_array( $result ) && ! empty( $result['form'] ) ? $result['form'] : [];
        $modules = $this->core->modules();
        $user    = wp_get_current_user();
        // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- preselect only
        $pre     = $form['plugin'] ?? ( isset( $_GET['plugin'] ) ? sanitize_key( $_GET['plugin'] ) : '' );
        ?>
        <div class="wrap pwc-wrap">
            <?php Admin::page_header( __( 'Get support', 'patchwork-order-split' ), __( 'Tell us what\'s going on and we\'ll get back to you by email.', 'patchwork-order-split' ) ); ?>

            <?php if ( is_array( $result ) ) : ?>
                <div class="notice pwc-support-result <?php echo $result['ok'] ? 'notice-success' : 'notice-error'; ?>"><p><?php echo esc_html( $result['message'] ); ?></p></div>
            <?php endif; ?>

            <form method="post" enctype="multipart/form-data" class="pwc-support" action="<?php echo esc_url( self::url() ); ?>">
                <?php wp_nonce_field( 'patchwork_support', 'patchwork_support_nonce' ); ?>
                <input type="hidden" name="patchwork_support_send" value="1">

                <div class="pwc-card">
                    <table class="form-table" role="presentation">
                        <tr>
                            <th scope="row"><label for="pwc-support-plugin"><?php esc_html_e( 'Which plugin?', 'patchwork-order-split' ); ?></label></th>
                            <td>
                                <select id="pwc-support-plugin" name="plugin" required>
                                    <option value=""><?php esc_html_e( 'Choose…', 'patchwork-order-split' ); ?></option>
                                    <?php foreach ( $modules as $id => $module ) : ?>
                                        <option value="<?php echo esc_attr( $id ); ?>" <?php selected( $pre, $id ); ?>><?php echo esc_html( $module->name() ); ?></option>
                                    <?php endforeach; ?>
                                    <option value="other" <?php selected( $pre, 'other' ); ?>><?php esc_html_e( 'Something else', 'patchwork-order-split' ); ?></option>
                                </select>
                            </td>
                        </tr>
                        <tr>
                            <th scope="row"><label for="pwc-support-subject"><?php esc_html_e( 'Subject', 'patchwork-order-split' ); ?></label></th>
                            <td><input type="text" id="pwc-support-subject" name="subject" class="large-text" maxlength="150" required value="<?php echo esc_attr( $form['subject'] ?? '' ); ?>" placeholder="<?php esc_attr_e( 'e.g. Split order shows the wrong shipping', 'patchwork-order-split' ); ?>"></td>
                        </tr>
                        <tr>
                            <th scope="row"><label for="pwc-support-message"><?php esc_html_e( 'What\'s happening?', 'patchwork-order-split' ); ?></label></th>
                            <td>
                                <textarea id="pwc-support-message" name="message" rows="8" class="large-text" required placeholder="<?php esc_attr_e( 'What did you do, what did you expect, and what happened instead? Order numbers help.', 'patchwork-order-split' ); ?>"><?php echo esc_textarea( $form['message'] ?? '' ); ?></textarea>
                            </td>
                        </tr>
                        <tr>
                            <th scope="row"><label for="pwc-support-files"><?php esc_html_e( 'Attachments', 'patchwork-order-split' ); ?></label></th>
                            <td>
                                <input type="file" id="pwc-support-files" name="attachments[]" multiple accept=".<?php echo esc_attr( implode( ',.', self::ALLOWED ) ); ?>">
                                <p class="description"><?php
                                    /* translators: 1: max files, 2: max size, 3: allowed types */
                                    echo esc_html( sprintf( __( 'Optional. Up to %1$d files, %2$s each (%3$s). Screenshots are very helpful.', 'patchwork-order-split' ), self::MAX_FILES, size_format( self::MAX_BYTES ), implode( ', ', self::ALLOWED ) ) );
                                ?></p>
                            </td>
                        </tr>
                        <tr>
                            <th scope="row"><label for="pwc-support-email"><?php esc_html_e( 'Reply to', 'patchwork-order-split' ); ?></label></th>
                            <td><input type="email" id="pwc-support-email" name="email" class="regular-text" required value="<?php echo esc_attr( $form['email'] ?? $user->user_email ); ?>"></td>
                        </tr>
                        <tr>
                            <th scope="row"><?php esc_html_e( 'System info', 'patchwork-order-split' ); ?></th>
                            <td>
                                <label><input type="checkbox" name="system_info" value="1" <?php checked( $form['system_info'] ?? true ); ?>> <?php esc_html_e( 'Include versions and setup details (no order or customer data)', 'patchwork-order-split' ); ?></label>
                                <details class="pwc-sysinfo"><summary><?php esc_html_e( 'See exactly what\'s included', 'patchwork-order-split' ); ?></summary>
                                    <table class="widefat striped"><tbody>
                                        <?php foreach ( $this->system_info() as $label => $value ) : ?>
                                            <tr><th><?php echo esc_html( $label ); ?></th><td><?php echo esc_html( $value ); ?></td></tr>
                                        <?php endforeach; ?>
                                    </tbody></table>
                                </details>
                            </td>
                        </tr>
                    </table>
                    <p class="pwc-muted pwc-support-privacy"><?php
                        /* translators: %s: support email address */
                        echo esc_html( sprintf( __( 'Sending emails this form to %s from your site. Nothing is sent until you click Send.', 'patchwork-order-split' ), self::email() ) );
                    ?></p>
                    <?php submit_button( __( 'Send', 'patchwork-order-split' ), 'primary', 'submit', false ); ?>
                </div>
            </form>
        </div>
        <?php
    }
}