<?php
if ( ! defined( 'ABSPATH' ) ) exit;

/**
 * Admin "Activity Log" screen — the FULL history of what happened to
 * bookings for an event (created, paid, checked in — by QR or
 * manually — and cancelled), not just "who most recently checked this
 * guest in" the way bookings.checked_in_by/checked_in_at alone could
 * show. Read-only: this page only ever displays SEATT_DB::get_activity_log(),
 * never writes anything itself.
 */
class SEATT_Activity_Log {

	public function __construct() {
		add_action( 'admin_menu', array( $this, 'register_menu' ) );
		add_action( 'admin_enqueue_scripts', array( $this, 'enqueue' ) );
	}

	public function register_menu() {
		add_submenu_page(
			'seatt-main',
			__( 'Activity Log', 'seathive' ),
			__( 'Activity Log', 'seathive' ),
			'seatt_sell_seats', // same access level as Bookings/Waitlist — this is the same operational data
			'seatt-activity-log',
			array( $this, 'render_page' )
		);
	}

	public function enqueue() {
		if ( ! isset( $_GET['page'] ) || 'seatt-activity-log' !== $_GET['page'] ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only: chooses what to display
			return;
		}
		wp_enqueue_style( 'seatt-bookings', SEATT_PLUGIN_URL . 'admin/css/bookings.css', array(), seatt_asset_ver( 'admin/css/bookings.css' ) );
	}

	/** Turns a raw action string ('checked_in', details 'qr') into a
	 * short human sentence — kept separate from the DB layer, which
	 * only ever needs the raw values, not their English phrasing. */
	private function describe( $action, $details ) {
		switch ( $action ) {
			case 'booking_created':
				return $details ? sprintf( /* translators: %s: value */ __( 'Booking placed (%s)', 'seathive' ), $details ) : __( 'Booking placed', 'seathive' );
			case 'paid':
				if ( 'free' === $details ) {
					return __( 'Marked paid (free booking)', 'seathive' );
				}
				$gateway_names = array( 'ipaymu' => 'iPaymu', 'xendit' => 'Xendit', 'stripe' => 'Stripe', 'paypal' => 'PayPal', 'doku' => 'DOKU', 'cash' => 'cash', 'onsite' => 'cash at the venue', 'comp' => 'complimentary' );
				$gateway_label = $gateway_names[ strtolower( $details ) ] ?? ucfirst( $details );
				return sprintf( /* translators: %s: value */ __( 'Payment confirmed via %s', 'seathive' ), $gateway_label );
			case 'checked_in':
				return 'qr' === $details
					? __( 'Checked in — QR scan', 'seathive' )
					: __( 'Checked in — marked manually', 'seathive' );
			case 'payment_failed':
				return $details
					/* translators: %s: the gateway's own error message */
					? sprintf( __( 'Payment could not be started — %s', 'seathive' ), $details )
					: __( 'Payment could not be started', 'seathive' );
			case 'login':
				return $details
					/* translators: %s: the account's WordPress role(s) */
					? sprintf( __( 'Signed in (%s)', 'seathive' ), $details )
					: __( 'Signed in', 'seathive' );
			case 'logout':
				return __( 'Signed out', 'seathive' );
			case 'login_failed':
				return __( 'Failed sign-in attempt', 'seathive' );
			case 'cancelled':
				return __( 'Booking cancelled', 'seathive' );
			case 'duplicate_order_blocked':
				return __( 'Same order sent again — no second order was made', 'seathive' );
			case 'payment_webhook':
				/* translators: %s: what the payment gateway reported */
				return sprintf( __( 'Payment gateway: %s', 'seathive' ), $details );
			case 'refunded':
				return sprintf( /* translators: %s: value */ __( 'Refunded: %s', 'seathive' ), $details );
			case 'seat_moved':
				return sprintf( /* translators: %s: value */ __( 'Seat moved: %s', 'seathive' ), $details );
			case 'transferred':
				return sprintf( /* translators: %s: value */ __( 'Ticket transferred: %s', 'seathive' ), $details );
			case 'reminder_sent':
				return sprintf( /* translators: %s: value */ __( 'Reminder sent: %s', 'seathive' ), $details );
			case 'auto_cancelled':
				/* translators: %s: reason */
				return sprintf( __( 'Booking auto-cancelled: %s', 'seathive' ), $details );
			case 'booking_deleted':
				/* translators: %s: booking number, buyer, status and seats */
				return sprintf( __( 'Booking deleted: %s', 'seathive' ), $details );
			case 'email_sent':
				/* translators: %s: which email and the recipient */
				return sprintf( __( 'Email sent: %s', 'seathive' ), $details );
			case 'email_failed':
				/* translators: %s: the mailer's error message */
				return sprintf( __( 'Email FAILED: %s', 'seathive' ), $details );
			case 'seat_conflict':
				return '⚠ ' . $details;
			default:
				// Escaped once, at output (render_page) — escaping here too
				// showed "&amp;" instead of "&" in the log.
				return ucfirst( str_replace( '_', ' ', $action ) ) . ( $details ? ' — ' . $details : '' );
		}
	}

	public function render_page() {
		$events   = get_posts( array( 'post_type' => 'seatt_event', 'numberposts' => -1 ) );
		// 0 = "nothing picked yet" — matches Chart Builder's "select an
		// event first" screen, so this page doesn't silently default to
		// whichever event happens to be most recently created.
		$selected = isset( $_GET['event_id'] ) ? intval( $_GET['event_id'] ) : 0; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only: chooses what to display

		if ( ! $selected ) {
			?>
			<div class="wrap esm-bookings-wrap" id="esm-shared-wrap">
				<div class="esm-shared-header">
					<h1><?php esc_html_e( 'Activity Log', 'seathive' ); ?></h1>
				</div>
				<form method="get" class="esm-event-switcher">
					<input type="hidden" name="page" value="seatt-activity-log" />
					<label for="esm-log-event"><?php esc_html_e( 'Event:', 'seathive' ); ?></label>
					<select id="esm-log-event" name="event_id" data-seatt-autosubmit>
						<option value="" disabled selected><?php esc_html_e( '— Select an event —', 'seathive' ); ?></option>
						<?php foreach ( $events as $e ) : ?>
							<option value="<?php echo esc_attr( $e->ID ); ?>"><?php echo esc_html( $e->post_title ); ?></option>
						<?php endforeach; ?>
					</select>
				</form>
				<p class="description" style="margin-top:16px"><?php esc_html_e( 'Pick an event above to view its activity log.', 'seathive' ); ?></p>
			</div>
			<?php
			return;
		}

		$entries = SEATT_DB::get_activity_log( $selected );
		?>
		<div class="wrap esm-bookings-wrap" id="esm-shared-wrap">
			<div class="esm-shared-header">
				<h1><?php esc_html_e( 'Activity Log', 'seathive' ); ?></h1>
			</div>
			<p class="description"><?php esc_html_e( 'A running history of everything that happened to bookings for this event — not just the latest check-in state.', 'seathive' ); ?></p>

			<form method="get" class="esm-event-switcher">
				<input type="hidden" name="page" value="seatt-activity-log" />
				<label for="esm-log-event"><?php esc_html_e( 'Event:', 'seathive' ); ?></label>
				<select id="esm-log-event" name="event_id" data-seatt-autosubmit>
					<?php foreach ( $events as $e ) : ?>
						<option value="<?php echo esc_attr( $e->ID ); ?>" <?php selected( $selected, $e->ID ); ?>><?php echo esc_html( $e->post_title ); ?></option>
					<?php endforeach; ?>
				</select>
			</form>

			<?php if ( ! $entries ) : ?>
				<p class="esm-analytics-empty"><?php esc_html_e( 'No activity recorded for this event yet.', 'seathive' ); ?></p>
			<?php else : ?>
				<table class="widefat">
					<thead><tr>
						<th style="width:150px"><?php esc_html_e( 'When', 'seathive' ); ?></th>
						<th style="width:160px"><?php esc_html_e( 'Booking', 'seathive' ); ?></th>
						<th style="width:160px"><?php esc_html_e( 'By', 'seathive' ); ?></th>
						<th style="width:130px"><?php esc_html_e( 'IP address', 'seathive' ); ?></th>
						<th style="width:150px"><?php esc_html_e( 'Device', 'seathive' ); ?></th>
						<th><?php esc_html_e( 'What happened', 'seathive' ); ?></th>
					</tr></thead>
					<tbody>
						<?php foreach ( $entries as $row ) : ?>
							<tr>
								<td><?php echo esc_html( mysql2date( 'j M Y, H:i', $row->created_at ) ); ?></td>
								<td>
									<?php if ( $row->booking_id ) : ?>
										#<?php echo esc_html( $row->booking_id ); ?>
									<?php else : ?>
										<span style="color:#999">—</span>
									<?php endif; ?>
								</td>
								<td>
									<?php
									if ( $row->user_id ) {
										echo esc_html( seatt_staff_name( $row->user_id ) );
									} else {
										esc_html_e( 'Customer / automated', 'seathive' );
									}
									?>
								</td>
								<td>
								<?php if ( ! empty( $row->ip_address ) ) : ?>
									<?php
									// An IPv6 address is 39 characters and would
									// otherwise stretch the column and squeeze
									// everything else. Shown in full but allowed
									// to wrap, and never truncated: a partial
									// address is useless in an audit trail.
									?>
									<code class="esm-log-ip" title="<?php echo esc_attr( $row->ip_address ); ?>"><?php echo esc_html( $row->ip_address ); ?></code>
								<?php else : ?>
									<span style="color:#999" title="<?php esc_attr_e( 'No request behind this entry — a scheduled task or command-line action.', 'seathive' ); ?>">—</span>
								<?php endif; ?>
							</td>
							<td>
								<?php
								$ua = $row->user_agent ?? '';
								if ( $ua ) :
									// Summary for reading; the full string on
									// hover, because the summary is a guess
									// and the raw value is the evidence.
									?>
									<span title="<?php echo esc_attr( $ua ); ?>" style="cursor:help; border-bottom:1px dotted #c3c4c7">
										<?php echo esc_html( seatt_describe_user_agent( $ua ) ); ?>
									</span>
								<?php else : ?>
									<span style="color:#999">—</span>
								<?php endif; ?>
							</td>
							<td><?php echo esc_html( $this->describe( $row->action, $row->details ) ); ?></td>
							</tr>
						<?php endforeach; ?>
					</tbody>
				</table>
				<p class="description"><?php printf( /* translators: %d: number */ esc_html__( 'Showing the most recent %d entries.', 'seathive' ), count( $entries ) ); ?></p>
			<?php endif; ?>
		</div>
		<?php
	}
}