<?php
/**
 * Post types, taxonomies, meta fields and meta boxes for sermons & events.
 *
 * @package PulpitKit
 */

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/**
 * Class PulpitKit_Post_Types
 */
class PulpitKit_Post_Types {

	/**
	 * Register the sermon and event post types.
	 */
	public static function register_post_types() {
		register_post_type(
			'pulpitkit_sermon',
			array(
				'labels'       => array(
					'name'               => __( 'Sermons', 'pulpitkit' ),
					'singular_name'      => __( 'Sermon', 'pulpitkit' ),
					'add_new_item'       => __( 'Add New Sermon', 'pulpitkit' ),
					'edit_item'          => __( 'Edit Sermon', 'pulpitkit' ),
					'new_item'           => __( 'New Sermon', 'pulpitkit' ),
					'view_item'          => __( 'View Sermon', 'pulpitkit' ),
					'search_items'       => __( 'Search Sermons', 'pulpitkit' ),
					'not_found'          => __( 'No sermons found', 'pulpitkit' ),
					'not_found_in_trash' => __( 'No sermons found in Trash', 'pulpitkit' ),
				),
				'public'       => true,
				'show_in_rest' => true,
				'has_archive'  => true,
				'rewrite'      => array( 'slug' => 'sermons' ),
				'menu_icon'    => 'dashicons-book-alt',
				'supports'     => array( 'title', 'editor', 'excerpt', 'thumbnail', 'author' ),
			)
		);

		register_post_type(
			'pulpitkit_event',
			array(
				'labels'       => array(
					'name'               => __( 'Events', 'pulpitkit' ),
					'singular_name'      => __( 'Event', 'pulpitkit' ),
					'add_new_item'       => __( 'Add New Event', 'pulpitkit' ),
					'edit_item'          => __( 'Edit Event', 'pulpitkit' ),
					'new_item'           => __( 'New Event', 'pulpitkit' ),
					'view_item'          => __( 'View Event', 'pulpitkit' ),
					'search_items'       => __( 'Search Events', 'pulpitkit' ),
					'not_found'          => __( 'No events found', 'pulpitkit' ),
					'not_found_in_trash' => __( 'No events found in Trash', 'pulpitkit' ),
				),
				'public'       => true,
				'show_in_rest' => true,
				'has_archive'  => true,
				'rewrite'      => array( 'slug' => 'events' ),
				'menu_icon'    => 'dashicons-calendar-alt',
				'supports'     => array( 'title', 'editor', 'excerpt', 'thumbnail' ),
			)
		);
	}

	/**
	 * Register sermon taxonomies.
	 */
	public static function register_taxonomies() {
		register_taxonomy(
			'pulpitkit_sermon_series',
			array( 'pulpitkit_sermon' ),
			array(
				'labels'       => array(
					'name'          => __( 'Sermon Series', 'pulpitkit' ),
					'singular_name' => __( 'Series', 'pulpitkit' ),
					'search_items'  => __( 'Search Series', 'pulpitkit' ),
					'all_items'     => __( 'All Series', 'pulpitkit' ),
					'edit_item'     => __( 'Edit Series', 'pulpitkit' ),
					'add_new_item'  => __( 'Add New Series', 'pulpitkit' ),
				),
				'hierarchical' => true,
				'public'       => true,
				'show_in_rest' => true,
				'rewrite'      => array( 'slug' => 'sermon-series' ),
			)
		);

		register_taxonomy(
			'pulpitkit_sermon_speaker',
			array( 'pulpitkit_sermon' ),
			array(
				'labels'       => array(
					'name'          => __( 'Speakers', 'pulpitkit' ),
					'singular_name' => __( 'Speaker', 'pulpitkit' ),
					'search_items'  => __( 'Search Speakers', 'pulpitkit' ),
					'all_items'     => __( 'All Speakers', 'pulpitkit' ),
					'edit_item'     => __( 'Edit Speaker', 'pulpitkit' ),
					'add_new_item'  => __( 'Add New Speaker', 'pulpitkit' ),
				),
				'hierarchical' => false,
				'public'       => true,
				'show_in_rest' => true,
				'rewrite'      => array( 'slug' => 'speaker' ),
			)
		);

		register_taxonomy(
			'pulpitkit_sermon_topic',
			array( 'pulpitkit_sermon' ),
			array(
				'labels'       => array(
					'name'          => __( 'Topics', 'pulpitkit' ),
					'singular_name' => __( 'Topic', 'pulpitkit' ),
					'search_items'  => __( 'Search Topics', 'pulpitkit' ),
					'all_items'     => __( 'All Topics', 'pulpitkit' ),
					'edit_item'     => __( 'Edit Topic', 'pulpitkit' ),
					'add_new_item'  => __( 'Add New Topic', 'pulpitkit' ),
				),
				'hierarchical' => false,
				'public'       => true,
				'show_in_rest' => true,
				'rewrite'      => array( 'slug' => 'sermon-topic' ),
			)
		);
	}

	/**
	 * Constructor: meta boxes + save handlers.
	 */
	public function __construct() {
		add_action( 'add_meta_boxes', array( $this, 'add_meta_boxes' ) );
		add_action( 'save_post_pulpitkit_sermon', array( $this, 'save_sermon_meta' ), 10, 2 );
		add_action( 'save_post_pulpitkit_event', array( $this, 'save_event_meta' ), 10, 2 );
	}

	/**
	 * Add meta boxes.
	 */
	public function add_meta_boxes() {
		add_meta_box(
			'pulpitkit_sermon_details',
			__( 'Sermon Details', 'pulpitkit' ),
			array( $this, 'render_sermon_meta_box' ),
			'pulpitkit_sermon',
			'normal',
			'high'
		);

		add_meta_box(
			'pulpitkit_event_details',
			__( 'Event Details', 'pulpitkit' ),
			array( $this, 'render_event_meta_box' ),
			'pulpitkit_event',
			'normal',
			'high'
		);
	}

	/**
	 * Render the sermon meta box.
	 *
	 * @param WP_Post $post Current post.
	 */
	public function render_sermon_meta_box( $post ) {
		wp_nonce_field( 'pulpitkit_save_sermon_meta', 'pulpitkit_sermon_meta_nonce' );

		$scripture   = get_post_meta( $post->ID, '_pulpitkit_scripture', true );
		$date        = get_post_meta( $post->ID, '_pulpitkit_date_preached', true );
		$audio_url   = get_post_meta( $post->ID, '_pulpitkit_audio_url', true );
		$audio_id    = (int) get_post_meta( $post->ID, '_pulpitkit_audio_id', true );
		$video_url   = get_post_meta( $post->ID, '_pulpitkit_video_url', true );
		$notes_url   = get_post_meta( $post->ID, '_pulpitkit_notes_url', true );
		$notes_id    = (int) get_post_meta( $post->ID, '_pulpitkit_notes_id', true );

		if ( '' === $date ) {
			$date = get_the_date( 'Y-m-d', $post );
		}
		?>
		<table class="form-table" role="presentation">
			<tr>
				<th scope="row"><label for="pulpitkit_scripture"><?php esc_html_e( 'Scripture', 'pulpitkit' ); ?></label></th>
				<td>
					<input type="text" class="regular-text" id="pulpitkit_scripture" name="pulpitkit_scripture" value="<?php echo esc_attr( $scripture ); ?>" placeholder="<?php esc_attr_e( 'e.g. John 3:16-21', 'pulpitkit' ); ?>" />
				</td>
			</tr>
			<tr>
				<th scope="row"><label for="pulpitkit_date_preached"><?php esc_html_e( 'Date Preached', 'pulpitkit' ); ?></label></th>
				<td>
					<input type="date" id="pulpitkit_date_preached" name="pulpitkit_date_preached" value="<?php echo esc_attr( $date ); ?>" />
					<p class="description"><?php esc_html_e( 'Used for sorting and the podcast feed date.', 'pulpitkit' ); ?></p>
				</td>
			</tr>
			<tr>
				<th scope="row"><label for="pulpitkit_audio_url"><?php esc_html_e( 'Audio URL', 'pulpitkit' ); ?></label></th>
				<td>
					<input type="url" class="regular-text" id="pulpitkit_audio_url" name="pulpitkit_audio_url" value="<?php echo esc_url( $audio_url ); ?>" placeholder="https://…" />
					<p class="description"><?php esc_html_e( 'Link to an MP3 hosted anywhere, or upload a file below. The podcast feed uses the uploaded file first.', 'pulpitkit' ); ?></p>
				</td>
			</tr>
			<tr>
				<th scope="row"><?php esc_html_e( 'Audio File', 'pulpitkit' ); ?></th>
				<td>
					<input type="hidden" id="pulpitkit_audio_id" name="pulpitkit_audio_id" value="<?php echo esc_attr( $audio_id ); ?>" />
					<span id="pulpitkit_audio_id_label"><?php echo $audio_id ? esc_html( basename( (string) get_attached_file( $audio_id ) ) ) : esc_html__( 'No file selected', 'pulpitkit' ); ?></span>
					<button type="button" class="button pk-media-button" data-target="pulpitkit_audio_id"><?php esc_html_e( 'Select Audio', 'pulpitkit' ); ?></button>
					<button type="button" class="button pk-media-clear" data-target="pulpitkit_audio_id"><?php esc_html_e( 'Clear', 'pulpitkit' ); ?></button>
				</td>
			</tr>
			<tr>
				<th scope="row"><label for="pulpitkit_video_url"><?php esc_html_e( 'Video URL', 'pulpitkit' ); ?></label></th>
				<td>
					<input type="url" class="regular-text" id="pulpitkit_video_url" name="pulpitkit_video_url" value="<?php echo esc_url( $video_url ); ?>" placeholder="<?php esc_attr_e( 'YouTube or Vimeo URL', 'pulpitkit' ); ?>" />
				</td>
			</tr>
			<tr>
				<th scope="row"><label for="pulpitkit_notes_url"><?php esc_html_e( 'Notes / Bulletin URL', 'pulpitkit' ); ?></label></th>
				<td>
					<input type="url" class="regular-text" id="pulpitkit_notes_url" name="pulpitkit_notes_url" value="<?php echo esc_url( $notes_url ); ?>" placeholder="https://… (.pdf)" />
				</td>
			</tr>
			<tr>
				<th scope="row"><?php esc_html_e( 'Notes PDF File', 'pulpitkit' ); ?></th>
				<td>
					<input type="hidden" id="pulpitkit_notes_id" name="pulpitkit_notes_id" value="<?php echo esc_attr( $notes_id ); ?>" />
					<span id="pulpitkit_notes_id_label"><?php echo $notes_id ? esc_html( basename( (string) get_attached_file( $notes_id ) ) ) : esc_html__( 'No file selected', 'pulpitkit' ); ?></span>
					<button type="button" class="button pk-media-button" data-target="pulpitkit_notes_id"><?php esc_html_e( 'Select PDF', 'pulpitkit' ); ?></button>
					<button type="button" class="button pk-media-clear" data-target="pulpitkit_notes_id"><?php esc_html_e( 'Clear', 'pulpitkit' ); ?></button>
				</td>
			</tr>
		</table>
		<?php
	}

	/**
	 * Save sermon meta.
	 *
	 * @param int     $post_id Post ID.
	 * @param WP_Post $post    Post object.
	 */
	public function save_sermon_meta( $post_id, $post ) {
		if ( ! $this->can_save( $post_id, 'pulpitkit_sermon_meta_nonce', 'pulpitkit_save_sermon_meta' ) ) {
			return;
		}
		// phpcs:disable WordPress.Security.NonceVerification.Missing -- Nonce + capability verified in can_save() above; the sniff cannot follow the helper.

		if ( isset( $_POST['pulpitkit_scripture'] ) ) {
			update_post_meta( $post_id, '_pulpitkit_scripture', sanitize_text_field( wp_unslash( $_POST['pulpitkit_scripture'] ) ) );
		}
		if ( isset( $_POST['pulpitkit_date_preached'] ) ) {
			$date = sanitize_text_field( wp_unslash( $_POST['pulpitkit_date_preached'] ) );
			update_post_meta( $post_id, '_pulpitkit_date_preached', preg_match( '/^\d{4}-\d{2}-\d{2}$/', $date ) ? $date : '' );
		}
		if ( isset( $_POST['pulpitkit_audio_url'] ) ) {
			update_post_meta( $post_id, '_pulpitkit_audio_url', esc_url_raw( wp_unslash( $_POST['pulpitkit_audio_url'] ) ) );
		}
		if ( isset( $_POST['pulpitkit_audio_id'] ) ) {
			update_post_meta( $post_id, '_pulpitkit_audio_id', absint( wp_unslash( $_POST['pulpitkit_audio_id'] ) ) );
		}
		if ( isset( $_POST['pulpitkit_video_url'] ) ) {
			update_post_meta( $post_id, '_pulpitkit_video_url', esc_url_raw( wp_unslash( $_POST['pulpitkit_video_url'] ) ) );
		}
		if ( isset( $_POST['pulpitkit_notes_url'] ) ) {
			update_post_meta( $post_id, '_pulpitkit_notes_url', esc_url_raw( wp_unslash( $_POST['pulpitkit_notes_url'] ) ) );
		}
		if ( isset( $_POST['pulpitkit_notes_id'] ) ) {
			update_post_meta( $post_id, '_pulpitkit_notes_id', absint( wp_unslash( $_POST['pulpitkit_notes_id'] ) ) );
		}
		// phpcs:enable WordPress.Security.NonceVerification.Missing
	}

	/**
	 * Render the event meta box.
	 *
	 * @param WP_Post $post Current post.
	 */
	public function render_event_meta_box( $post ) {
		wp_nonce_field( 'pulpitkit_save_event_meta', 'pulpitkit_event_meta_nonce' );

		$start        = get_post_meta( $post->ID, '_pulpitkit_event_start', true );
		$end          = get_post_meta( $post->ID, '_pulpitkit_event_end', true );
		$location     = get_post_meta( $post->ID, '_pulpitkit_location', true );
		$recurrence   = get_post_meta( $post->ID, '_pulpitkit_recurrence', true );
		$recur_end    = get_post_meta( $post->ID, '_pulpitkit_recurrence_end', true );

		$start_input = $start ? str_replace( ' ', 'T', substr( (string) $start, 0, 16 ) ) : '';
		$end_input   = $end ? str_replace( ' ', 'T', substr( (string) $end, 0, 16 ) ) : '';
		?>
		<table class="form-table" role="presentation">
			<tr>
				<th scope="row"><label for="pulpitkit_event_start"><?php esc_html_e( 'Starts', 'pulpitkit' ); ?></label></th>
				<td><input type="datetime-local" id="pulpitkit_event_start" name="pulpitkit_event_start" value="<?php echo esc_attr( $start_input ); ?>" /></td>
			</tr>
			<tr>
				<th scope="row"><label for="pulpitkit_event_end"><?php esc_html_e( 'Ends', 'pulpitkit' ); ?></label></th>
				<td><input type="datetime-local" id="pulpitkit_event_end" name="pulpitkit_event_end" value="<?php echo esc_attr( $end_input ); ?>" /></td>
			</tr>
			<tr>
				<th scope="row"><label for="pulpitkit_location"><?php esc_html_e( 'Location', 'pulpitkit' ); ?></label></th>
				<td><input type="text" class="regular-text" id="pulpitkit_location" name="pulpitkit_location" value="<?php echo esc_attr( $location ); ?>" /></td>
			</tr>
			<tr>
				<th scope="row"><label for="pulpitkit_recurrence"><?php esc_html_e( 'Repeats', 'pulpitkit' ); ?></label></th>
				<td>
					<select id="pulpitkit_recurrence" name="pulpitkit_recurrence">
						<?php foreach ( PulpitKit_Events::recurrence_options() as $value => $label ) : ?>
							<option value="<?php echo esc_attr( $value ); ?>" <?php selected( $recurrence, $value ); ?>><?php echo esc_html( $label ); ?></option>
						<?php endforeach; ?>
					</select>
				</td>
			</tr>
			<tr>
				<th scope="row"><label for="pulpitkit_recurrence_end"><?php esc_html_e( 'Repeat Until', 'pulpitkit' ); ?></label></th>
				<td>
					<input type="date" id="pulpitkit_recurrence_end" name="pulpitkit_recurrence_end" value="<?php echo esc_attr( $recur_end ); ?>" />
					<p class="description"><?php esc_html_e( 'Leave blank for no end date (occurrences are computed up to 12 months ahead for display).', 'pulpitkit' ); ?></p>
				</td>
			</tr>
		</table>
		<?php
	}

	/**
	 * Save event meta.
	 *
	 * @param int     $post_id Post ID.
	 * @param WP_Post $post    Post object.
	 */
	public function save_event_meta( $post_id, $post ) {
		if ( ! $this->can_save( $post_id, 'pulpitkit_event_meta_nonce', 'pulpitkit_save_event_meta' ) ) {
			return;
		}
		// phpcs:disable WordPress.Security.NonceVerification.Missing -- Nonce + capability verified in can_save() above; the sniff cannot follow the helper.

		if ( isset( $_POST['pulpitkit_event_start'] ) ) {
			update_post_meta( $post_id, '_pulpitkit_event_start', $this->sanitize_datetime( wp_unslash( $_POST['pulpitkit_event_start'] ) ) ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- sanitized inside sanitize_datetime().
		}
		if ( isset( $_POST['pulpitkit_event_end'] ) ) {
			update_post_meta( $post_id, '_pulpitkit_event_end', $this->sanitize_datetime( wp_unslash( $_POST['pulpitkit_event_end'] ) ) ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- sanitized inside sanitize_datetime().
		}
		if ( isset( $_POST['pulpitkit_location'] ) ) {
			update_post_meta( $post_id, '_pulpitkit_location', sanitize_text_field( wp_unslash( $_POST['pulpitkit_location'] ) ) );
		}
		if ( isset( $_POST['pulpitkit_recurrence'] ) ) {
			$recurrence = sanitize_key( wp_unslash( $_POST['pulpitkit_recurrence'] ) );
			if ( ! array_key_exists( $recurrence, PulpitKit_Events::recurrence_options() ) ) {
				$recurrence = 'none';
			}
			update_post_meta( $post_id, '_pulpitkit_recurrence', $recurrence );
		}
		if ( isset( $_POST['pulpitkit_recurrence_end'] ) ) {
			$end = sanitize_text_field( wp_unslash( $_POST['pulpitkit_recurrence_end'] ) );
			update_post_meta( $post_id, '_pulpitkit_recurrence_end', preg_match( '/^\d{4}-\d{2}-\d{2}$/', $end ) ? $end : '' );
		}
		// phpcs:enable WordPress.Security.NonceVerification.Missing
	}

	/**
	 * Nonce + capability + autosave guard shared by save handlers.
	 *
	 * @param int    $post_id      Post being saved.
	 * @param string $nonce_field  POST field name.
	 * @param string $nonce_action Nonce action.
	 * @return bool
	 */
	private function can_save( $post_id, $nonce_field, $nonce_action ) {
		if ( defined( 'DOING_AUTOSAVE' ) && DOING_AUTOSAVE ) {
			return false;
		}
		if ( ! isset( $_POST[ $nonce_field ] ) || ! wp_verify_nonce( sanitize_key( wp_unslash( $_POST[ $nonce_field ] ) ), $nonce_action ) ) {
			return false;
		}
		return current_user_can( 'edit_post', $post_id );
	}

	/**
	 * Sanitize a datetime-local input ("2026-10-13T10:30") to "Y-m-d H:i".
	 *
	 * @param string $raw Raw input.
	 * @return string Sanitized datetime or empty string.
	 */
	private function sanitize_datetime( $raw ) {
		$raw = trim( sanitize_text_field( (string) $raw ) );
		if ( '' === $raw ) {
			return '';
		}
		$raw = str_replace( 'T', ' ', $raw );
		$dt  = date_create( $raw, wp_timezone() );
		if ( false === $dt ) {
			return '';
		}
		return $dt->format( 'Y-m-d H:i' );
	}
}