<?php
/**
 * Plugin Name:       Rollora – Made-to-Measure Roller Blinds
 * Description:       Roller blinds only. Configurator, server-side matrix/band/per-m2 pricing, controlled CSV price-book import, immutable order snapshots, and workshop production sheets. Engine prices are tax-exclusive; WooCommerce calculates applicable taxes. Default data is SYNTHETIC until an admin replaces it with real supplier rules.
 * Version:           1.0.1
 * Requires at least: 7.1
 * Requires PHP:      8.3
 * WC requires at least: 11.2
 * WC tested up to:   11.2
 * License:           GPL-2.0-or-later
 * License URI:       https://www.gnu.org/licenses/gpl-2.0.html
 * Text Domain:       rollora
 */

declare(strict_types=1);

if ( ! defined( 'ABSPATH' ) ) {
    exit;
}

define('BLINDS_PROTO_DIR', plugin_dir_path(__FILE__));
define('BLINDS_PROTO_URL', plugin_dir_url(__FILE__));

require_once BLINDS_PROTO_DIR . 'includes/class-blinds-pricing-engine.php';
require_once BLINDS_PROTO_DIR . 'includes/class-blinds-csv-importer.php';
require_once BLINDS_PROTO_DIR . 'includes/class-blinds-currency.php';
require_once BLINDS_PROTO_DIR . 'includes/class-blinds-entitlements.php';
require_once BLINDS_PROTO_DIR . 'includes/class-blinds-price-books.php';
require_once BLINDS_PROTO_DIR . 'includes/class-blinds-snapshot.php';
require_once BLINDS_PROTO_DIR . 'includes/class-blinds-admin.php';
require_once BLINDS_PROTO_DIR . 'includes/class-blinds-lifecycle.php';
require_once BLINDS_PROTO_DIR . 'includes/class-blinds-import-admin.php';

register_activation_hook(__FILE__, 'blinds_lifecycle_activate');
register_deactivation_hook(__FILE__, 'blinds_lifecycle_deactivate');

/** Enqueue the responsive configurator/workshop stylesheet on the frontend. */
add_action('wp_enqueue_scripts', function () {
    wp_enqueue_style('blinds-configurator', BLINDS_PROTO_URL . 'assets/configurator.css', [], '1.0.1');
});

/** HPOS compatibility declaration. HPOS on and off were both tested in
 *  staging (WP 7.1.4 / WC 11.2.1): order meta uses WooCommerce CRUD only. */
add_action('before_woocommerce_init', function () {
    if (class_exists(\Automattic\WooCommerce\Utilities\FeaturesUtil::class)) {
        \Automattic\WooCommerce\Utilities\FeaturesUtil::declare_compatibility('custom_order_tables', __FILE__, true);
    }
});

function blinds_proto_load_config(): array
{
    // Admin config (wp_option) wins when present; otherwise JSON defaults.
    // The admin module never calls this function, so load order is safe.
    $config = function_exists('blinds_get_supplier_config') ? blinds_get_supplier_config() : [];
    if ($config === []) {
        $json = file_get_contents(BLINDS_PROTO_DIR . 'data/synthetic-supplier.json');
        $decoded = json_decode($json, true);
        $config = is_array($decoded) ? $decoded : [];
    }
    // Active price book (matrix mode only): its mapped rows replace the
    // covered matrix cells; uncovered cells keep the config's values.
    // Approval blocks unmapped rows, so a properly approved book has none.
    if (function_exists('blinds_price_book_get_active') && function_exists('blinds_price_book_apply_to_config')) {
        $activeBook = blinds_price_book_get_active();
        if ($activeBook !== null) {
            $config = blinds_price_book_apply_to_config($config, $activeBook);
        }
    }
    return $config;
}

function blinds_proto_format_minor(int $minor, string $currency = 'GBP'): string
{
    // Currency-aware formatting (zero-decimal guard included); falls back
    // to the old /100 rendering only if the currency module is absent.
    if (function_exists('blinds_format_money')) {
        return blinds_format_money($minor, $currency);
    }
    return $currency . ' ' . number_format($minor / 100, 2);
}

/**
 * Roller-blind configurator shortcode: [blinds_roller_configurator product_id="123"]
 * Renders width/drop (mm), fit, and options. The submitted measurements are
 * stored as cart item data; the price is RECALCULATED server-side in
 * blinds_proto_before_calculate_totals() — a browser-submitted price is never used.
 * The product ID is bound by a wp_hash token (see the POST handler), so a
 * visitor cannot reprice an arbitrary store product as a blind.
 */
add_shortcode('blinds_roller_configurator', function ($atts) {
    $atts = shortcode_atts(['product_id' => 0], $atts, 'blinds_roller_configurator');
    $config = blinds_proto_load_config();
    $html = '<form method="post" class="blinds-proto-configurator">';
    $html .= wp_nonce_field('blinds_proto_add', 'blinds_proto_nonce', true, false);
    $html .= '<input type="hidden" name="blinds_proto_product_id" value="' . esc_attr((string) $atts['product_id']) . '">';
    // Product binding token: wp_hash() uses the server salt, so a visitor
    // cannot forge a token for a different product ID. The POST handler
    // refuses any product ID whose token does not match — this is what
    // stops a guest repricing an arbitrary store product as a blind.
    // (Stage 10 security fix D1.)
    $html .= '<input type="hidden" name="blinds_proto_product_token" value="' . esc_attr(wp_hash((string) $atts['product_id'])) . '">';
    $html .= '<label>Width (mm, recess or exact measurement) <input type="number" name="blinds_width_mm" min="1" required></label>';
    $html .= '<label>Drop (mm) <input type="number" name="blinds_drop_mm" min="1" required></label>';
    $html .= '<label>Fit <select name="blinds_fit"><option value="recess">Recess</option><option value="exact">Exact</option><option value="outside">Outside mount</option></select></label>';
    $html .= '<label>Recess depth (mm, recess only; minimum ' . esc_html((string) ($config['recess_depth_min_mm'] ?? '')) . ' mm if configured) <input type="number" name="blinds_recess_depth_mm" min="1"></label>';
    $fabrics = array_keys($config['roll_widths_by_fabric'] ?? []);
    if (!empty($fabrics)) {
        $html .= '<label>Fabric <select name="blinds_fabric">';
        foreach ($fabrics as $fab) {
            $html .= '<option value="' . esc_attr($fab) . '">' . esc_html($fab) . '</option>';
        }
        $html .= '</select></label>';
    }
    $html .= '<label><input type="checkbox" name="blinds_corner_fit" value="1"> Corner fit (corner deduction applies only when drop exceeds the configured threshold)</label>';
    $html .= '<label>Control side <select name="blinds_control_side"><option value="right">Right</option><option value="left">Left</option></select></label>';
    $html .= '<label>Bracket <select name="blinds_bracket"><option value="top-fix">Top-fix</option><option value="face-fix">Face-fix</option></select></label>';
    foreach ($config['options'] ?? [] as $opt) {
        $html .= '<label><input type="checkbox" name="blinds_options[]" value="' . esc_attr($opt['code']) . '"> ' . esc_html($opt['label']) . '</label>';
    }
    $html .= '<label>Quantity <input type="number" name="blinds_quantity" value="1" min="1"></label>';
    $html .= '<button type="submit" name="blinds_proto_submit" value="1">Add roller blind to cart (price calculated server-side)</button>';
    $html .= '<p><strong>Data label: ' . esc_html((string) ($config['data_label'] ?? 'SYNTHETIC')) . '.</strong> Prices are calculated server-side from the active supplier configuration; a browser-submitted price is never used.</p></form>';
    return $html;
});

/** Handle the configurator POST: validate, calculate server-side, add to cart with measurements only. */
add_action('template_redirect', function () {
    if (empty($_POST['blinds_proto_submit']) || !function_exists('WC')) {
        return;
    }
    if (!isset($_POST['blinds_proto_nonce']) || !wp_verify_nonce(sanitize_text_field(wp_unslash($_POST['blinds_proto_nonce'])), 'blinds_proto_add')) {
        return;
    }
    $productId = absint($_POST['blinds_proto_product_id'] ?? 0);
    if ($productId <= 0) {
        return;
    }
    // D1: refuse any product ID that was not rendered by this shortcode.
    // The token is wp_hash(product_id) with the server salt; a guest can
    // copy a token from a rendered form but cannot mint one for another
    // product, so arbitrary store products cannot be repriced as blinds.
    $token = isset($_POST['blinds_proto_product_token']) ? sanitize_text_field(wp_unslash($_POST['blinds_proto_product_token'])) : '';
    if (!hash_equals(wp_hash((string) $productId), $token)) {
        return;
    }
    $postedOptions = isset($_POST['blinds_options']) && is_array($_POST['blinds_options']) ? wp_unslash($_POST['blinds_options']) : [];
    $input = [
        'width_mm' => absint($_POST['blinds_width_mm'] ?? 0),
        'drop_mm' => absint($_POST['blinds_drop_mm'] ?? 0),
        'fit' => sanitize_text_field(wp_unslash($_POST['blinds_fit'] ?? 'recess')),
        'quantity' => max(1, absint($_POST['blinds_quantity'] ?? 1)),
        'options' => array_map('sanitize_text_field', $postedOptions),
        'control_side' => sanitize_text_field(wp_unslash($_POST['blinds_control_side'] ?? 'right')),
        'bracket' => sanitize_text_field(wp_unslash($_POST['blinds_bracket'] ?? 'top-fix')),
        'fabric' => sanitize_text_field(wp_unslash($_POST['blinds_fabric'] ?? '')),
        'corner_fit' => !empty($_POST['blinds_corner_fit']),
        'outside_mount' => (sanitize_text_field(wp_unslash($_POST['blinds_fit'] ?? '')) === 'outside'),
    ];
    $depth = absint($_POST['blinds_recess_depth_mm'] ?? 0);
    if ($depth > 0) {
        $input['recess_depth_mm'] = $depth;
    }
    try {
        $result = (new Blinds_Pricing_Engine(blinds_proto_load_config()))->calculate($input);
    } catch (Blinds_Pricing_Exception $e) {
        wc_add_notice('Rollora: ' . implode(' ', $e->errors), 'error');
        return;
    }
    // Store measurements + snapshot only; price is set again in before_calculate_totals.
    WC()->cart->add_to_cart($productId, $result['quantity'], 0, [], ['blinds_proto' => $result]);
});

/** Server-side price: recalculate from stored measurements on every totals run. */
add_action('woocommerce_before_calculate_totals', function ($cart) {
    if (is_admin() && !defined('DOING_AJAX')) {
        return;
    }
    foreach ($cart->get_cart() as $key => $item) {
        if (empty($item['blinds_proto']['input_width_mm'])) {
            continue;
        }
        $snap = $item['blinds_proto'];
        try {
            // Sprint 6 fix: recalculation must use the FULL stored snapshot
            // input, not a subset. Previously fabric, corner fit, recess
            // depth, and outside mount were dropped here, so a recalculated
            // price could differ from the price at add-to-cart time.
            $recalc = [
                'width_mm' => $snap['input_width_mm'],
                'drop_mm' => $snap['input_drop_mm'],
                'fit' => $snap['fit'],
                'quantity' => (int) ($item['quantity'] ?? 1),
                'options' => $snap['options'] ?? [],
                'control_side' => $snap['control_side'] ?? 'right',
                'bracket' => $snap['bracket'] ?? 'top-fix',
                'fabric' => $snap['fabric'] ?? '',
                'fabric_group' => $snap['fabric_group'] ?? '',
                'corner_fit' => !empty($snap['corner_fit']),
                'outside_mount' => !empty($snap['outside_mount']),
            ];
            if (!empty($snap['recess_depth_mm'])) {
                $recalc['recess_depth_mm'] = $snap['recess_depth_mm'];
            }
            $result = (new Blinds_Pricing_Engine(blinds_proto_load_config()))->calculate($recalc);
        } catch (Blinds_Pricing_Exception $e) {
            continue;
        }
        // Per-blind price (base + per-blind surcharges); per-order surcharges
        // are added once per order by the woocommerce_cart_calculate_fees hook below.
        $perBlind = $result['base_price_minor_per_blind'] + $result['per_blind_surcharges_minor'];
        $item['data']->set_price($perBlind / 100);
        // Stage 10 fix D5: refresh the stored snapshot from the
        // recalculated result (same add-time semantics, current config),
        // so a price-book activation or config edit between add-to-cart
        // and checkout reaches the order snapshot and workshop sheet
        // instead of leaving them on stale add-time prices. The
        // finaliser at checkout still applies its fee-exclusion rule.
        $cart->cart_contents[$key]['blinds_proto'] = $result;
    }
}, 10, 1);

/** Per-order surcharges as a WooCommerce fee, once per order, not per blind.
 *  Dedupe by option code across cart items, so two blinds sharing a
 *  remote pay for one remote. */
add_action('woocommerce_cart_calculate_fees', function ($cart) {
    if (is_admin() && !defined('DOING_AJAX')) {
        return;
    }
    $config = blinds_proto_load_config();
    $defs = [];
    foreach ($config['options'] ?? [] as $opt) {
        $defs[$opt['code']] = $opt;
    }
    $seen = [];
    $feeMinor = 0;
    foreach ($cart->get_cart() as $item) {
        if (empty($item['blinds_proto']['options'])) {
            continue;
        }
        foreach ((array) $item['blinds_proto']['options'] as $code) {
            if (isset($defs[$code]) && ($defs[$code]['shape'] ?? '') === 'flat_per_order' && !isset($seen[$code])) {
                $seen[$code] = true;
                $feeMinor += (int) ($defs[$code]['amount_minor'] ?? 0);
            }
        }
    }
    if ($feeMinor > 0) {
        $cart->add_fee('Blinds per-order options (' . (string) ($config['data_label'] ?? 'SYNTHETIC') . ')', $feeMinor / 100);
    }
}, 10, 1);

/** Order meta via WooCommerce CRUD only — no direct order-table queries. */
add_action('woocommerce_checkout_create_order_line_item', function ($item, $cartKey, $values) {
    if (empty($values['blinds_proto']) || !is_array($values['blinds_proto'])) {
        return;
    }
    $item->update_meta_data('_blinds_proto_snapshot', $values['blinds_proto']);
    // Stage 10 fix D3: carry the effective config's data label, not a
    // hardcoded SYNTHETIC, so real supplier rules produce real labels.
    $config = blinds_proto_load_config();
    $item->update_meta_data('_blinds_proto_data_label', (string) ($config['data_label'] ?? $values['blinds_proto']['data_label'] ?? 'SYNTHETIC'));
}, 10, 3);

/** Printable workshop sheet from an order-item snapshot array. */
function blinds_proto_workshop_sheet_html(array $snap): string
{
    $price = blinds_proto_format_minor((int) ($snap['total_minor'] ?? 0), (string) ($snap['currency'] ?? 'GBP'));
    $html = '<div class="blinds-workshop-sheet"><h2>Workshop Production Sheet</h2>';
    $html .= '<p>Supplier: ' . esc_html((string) ($snap['supplier_label'] ?? 'SYNTHETIC')) . '</p><table>';
    $rows = [
        ['Input width (mm)', $snap['input_width_mm'] ?? ''],
        ['Input drop (mm)', $snap['input_drop_mm'] ?? ''],
        ['Fit', $snap['fit'] ?? ''],
        ['Outside mount', !empty($snap['outside_mount']) ? 'Yes' : 'No'],
        ['Order width (mm, after outside-mount additions)', $snap['order_width_mm'] ?? ''],
        ['Order drop (mm, after outside-mount additions)', $snap['order_drop_mm'] ?? ''],
        ['Deduction applied width (mm)', $snap['deduction_width_mm'] ?? ''],
        ['Deduction applied drop (mm)', $snap['deduction_drop_mm'] ?? ''],
        ['Corner fit', !empty($snap['corner_fit']) ? 'Yes' : 'No'],
        ['Corner deduction applied (mm)', is_array($snap['corner_deduction_applied_mm'] ?? null) ? ($snap['corner_deduction_applied_mm']['width_mm'] ?? '') . ' width / ' . ($snap['corner_deduction_applied_mm']['drop_mm'] ?? '') . ' drop' : ''],
        ['Recess depth supplied (mm)', $snap['recess_depth_mm'] ?? 'not supplied'],
        ['Recess depth minimum (mm)', $snap['recess_depth_min_mm'] ?? 'none configured'],
        ['Overall width (mm)', $snap['overall_width_mm'] ?? ''],
        ['Cloth width (mm)', $snap['cloth_width_mm'] ?? ''],
        ['Overall drop (mm)', $snap['overall_drop_mm'] ?? ''],
        ['Band matched', $snap['band_matched'] ?? ''],
        ['Fabric', $snap['fabric'] ?? ''],
        ['Fabric group', $snap['fabric_group'] ?? ''],
        ['Mechanism', $snap['mechanism'] ?? ''],
        ['Roll width (mm)', $snap['roll_width_mm'] ?? ''],
        ['Join required', !empty($snap['join_required']) ? 'YES — width exceeds roll width' : 'No'],
        ['Option parts', implode(', ', $snap['option_parts'] ?? [])],
        ['Control side', $snap['control_side'] ?? ''],
        ['Bracket', $snap['bracket'] ?? ''],
        ['Quantity', $snap['quantity'] ?? ''],
        ['Line total (engine, tax-exclusive)', $price],
    ];
    $feeMinor = (int) ($snap['per_order_surcharges_minor'] ?? 0);
    if ($feeMinor === 0) {
        $feeMinor = (int) ($snap['per_order_fee_minor'] ?? 0);
    }
    if ($feeMinor > 0) {
        $rows[] = ['Per-order options fee (order-level, not in line total)', blinds_proto_format_minor($feeMinor, (string) ($snap['currency'] ?? 'GBP'))];
    }
    foreach ($rows as [$label, $value]) {
        $html .= '<tr><th>' . esc_html((string) $label) . '</th><td>' . esc_html((string) $value) . '</td></tr>';
    }
    $html .= '</table>';
    if (!empty($snap['warnings'])) {
        $html .= '<h3>Manufacturing warnings</h3><ul>';
        foreach ((array) $snap['warnings'] as $w) {
            $html .= '<li>' . esc_html((string) $w) . '</li>';
        }
        $html .= '</ul>';
    }
    if (!empty($snap['tolerance_mm'])) {
        $html .= '<p>Manufacturing tolerance: +/-' . esc_html((string) $snap['tolerance_mm']['width_mm'] ?? '') . ' mm width, +/-' . esc_html((string) $snap['tolerance_mm']['drop_mm'] ?? '') . ' mm drop. This is an acceptance range, not a price adjustment.</p>';
    }
    $sheetLabel = (string) ($snap['data_label'] ?? 'SYNTHETIC');
    $html .= '<p>Data label: ' . esc_html((string) $sheetLabel) . '. '
        . ($sheetLabel === 'SYNTHETIC' ? 'Do not manufacture from this sheet.' : 'Use only if this sheet has been approved for production.') . '</p></div>';
    return $html;
}

add_shortcode('blinds_workshop_sheet', function ($atts) {
    // Real workshop sheet from a saved order snapshot. Read-only: the
    // snapshot is never modified here. Access is restricted to users who
    // can manage WooCommerce (shop managers / admins in staging); other
    // visitors get no order data at all, not even an order-exists signal
    // beyond the generic message.
    if (!function_exists('wc_get_order') || !current_user_can('manage_woocommerce')) {
        return '<p>Workshop sheet unavailable.</p>';
    }
    $atts = shortcode_atts(['order_id' => 0, 'item_id' => 0], $atts, 'blinds_workshop_sheet');
    $order = wc_get_order(absint($atts['order_id']));
    if (!$order) {
        return '<p>Workshop sheet unavailable.</p>';
    }
    $itemId = absint($atts['item_id']);
    foreach ($order->get_items() as $item) {
        if ($itemId > 0 && (int) $item->get_id() !== $itemId) {
            continue;
        }
        $snap = $item->get_meta('_blinds_proto_snapshot', true);
        if (is_array($snap) && !empty($snap)) {
            $label = $item->get_meta('_blinds_proto_data_label', true);
            $html = '<p>Workshop sheet for order #' . esc_html((string) $order->get_id()) . ', item: ' . esc_html($item->get_name()) . '. Data label: ' . esc_html((string) ($label ?: ($snap['data_label'] ?? 'SYNTHETIC'))) . '.</p>';
            return $html . blinds_proto_workshop_sheet_html($snap);
        }
    }
    return '<p>Workshop sheet unavailable: no blinds snapshot on this order.</p>';
});

/** Admin importer page: preview + diff + errors only. Live promotion is disabled on this page; use the Price Books page to approve a book. */
add_action('admin_menu', function () {
    add_menu_page('Rollora — Import Preview', 'Rollora', 'manage_options', 'blinds-proto-import', function () {
        if (!current_user_can('manage_options')) {
            return;
        }
        echo '<div class="wrap"><h1>Rollora — CSV Import Preview</h1>';
        echo '<p><strong>SYNTHETIC DATA.</strong> Upload a CSV to see staging, diff, and row-level errors. Nothing is written to live pricing tables. XLSX: convert to CSV first — XLSX parsing is not implemented or tested.</p>';
        echo '<form method="post" enctype="multipart/form-data">';
        wp_nonce_field('blinds_proto_import', 'blinds_proto_import_nonce');
        echo '<input type="file" name="blinds_csv" accept=".csv" required> ';
        echo '<button type="submit" name="blinds_proto_import" value="1">Preview import (staging only)</button></form>';
        if (!empty($_POST['blinds_proto_import']) && isset($_FILES['blinds_csv']['tmp_name']) && isset($_POST['blinds_proto_import_nonce']) && wp_verify_nonce(sanitize_text_field(wp_unslash($_POST['blinds_proto_import_nonce'])), 'blinds_proto_import')) {
            // Sprint 6 hardening: only accept a genuinely uploaded file,
            // with a successful upload status. The tmp_name is server-
            // generated, so it is checked with is_uploaded_file, not
            // treated as user text. No file is written to live pricing.
            if (!empty($_FILES['blinds_csv']['error']) || !is_uploaded_file(wp_unslash($_FILES['blinds_csv']['tmp_name']))) {
                echo '<p>Import failed: no valid uploaded file.</p>';
            } else {
            $csv = file_get_contents(wp_unslash($_FILES['blinds_csv']['tmp_name']));
            $mapping = ['width_min_mm' => 'width_min', 'width_max_mm' => 'width_max', 'drop_min_mm' => 'drop_min', 'drop_max_mm' => 'drop_max', 'price_pence' => 'price', 'option_code' => 'option_code'];
            $config = blinds_proto_load_config();
            $known = array_column($config['options'] ?? [], 'code');
            $parsed = (new Blinds_Csv_Importer())->parse((string) $csv, $mapping, $known);
            echo '<h2>Errors</h2><pre style="overflow-x:auto;max-width:100%">' . esc_html(print_r($parsed['errors'], true)) . '</pre>';
            echo '<h2>Staged rows</h2><pre style="overflow-x:auto;max-width:100%">' . esc_html(print_r($parsed['rows'], true)) . '</pre>';
            echo '<p>Live promotion is disabled on this preview page. Approve a price book from the Price Books page.</p>';
            }
        }
        echo '</div>';
    });
});