<?php
if ( ! defined( 'ABSPATH' ) ) exit;
// phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching -- the plugin's own custom tables (bookings, seats, tickets…) have no WordPress API; booking and seat data must always be read live, so it is not cached.

/** SeatHive → Promo Codes: create, pause, delete, and see usage. */
class SEATT_Promos_Admin {

	public function __construct() {
		add_action( 'admin_menu', array( $this, 'menu' ), 25 );
		add_action( 'admin_menu', array( $this, 'move_above_settings' ), 999 );
		add_action( 'admin_post_seatt_promo_save', array( $this, 'save' ) );
		add_action( 'admin_post_seatt_promo_action', array( $this, 'action' ) );
	}

	public function menu() {
		add_submenu_page( 'seatt-main', __( 'Promo Codes', 'seathive' ), __( 'Promo Codes', 'seathive' ), 'manage_options', 'seatt-promos', array( $this, 'render' ) );
	}

	/** Menu order at the bottom: … Promo Codes, Activity Log, Refunds, Settings. */
	/** Category choices for promo codes: every event's categories (by id). */
	public static function category_choices( $events ) {
		$out = array();
		foreach ( (array) $events as $e ) {
			foreach ( SEATT_Categories::for_event( $e->ID ) as $c ) {
				if ( ! isset( $out[ $c['id'] ] ) ) {
					$out[ $c['id'] ] = $c['name'];
				} elseif ( false === strpos( $out[ $c['id'] ], $c['name'] ) ) {
					$out[ $c['id'] ] .= ' / ' . $c['name'];
				}
			}
		}
		return $out ?: array( 'standard' => __( 'Standard', 'seathive' ), 'vip' => __( 'VIP', 'seathive' ) );
	}

	public function move_above_settings() {
		global $submenu;
		if ( empty( $submenu['seatt-main'] ) ) {
			return;
		}
		$submenu['seatt-main'] = self::reorder( $submenu['seatt-main'], array( 'seatt-promos', 'seatt-activity-log', 'seatt-refunds' ) ); // phpcs:ignore WordPress.WP.GlobalVariablesOverride
	}

	/** Moves the given slugs (in that order) directly above Settings. */
	public static function reorder( array $items, array $slugs ) {
		$items = array_values( $items );
		$moved = array();
		foreach ( $slugs as $slug ) {
			foreach ( $items as $i => $it ) {
				if ( $slug === ( $it[2] ?? '' ) ) {
					$moved[] = $it;
					unset( $items[ $i ] );
				}
			}
		}
		$out    = array();
		$placed = false;
		foreach ( $items as $it ) {
			if ( ! $placed && 'seatt-settings' === ( $it[2] ?? '' ) ) {
				$out    = array_merge( $out, $moved );
				$placed = true;
			}
			$out[] = $it;
		}
		return $placed ? $out : array_merge( $out, $moved );
	}

	private function back( $args = array() ) {
		wp_safe_redirect( add_query_arg( $args, admin_url( 'admin.php?page=seatt-promos' ) ) );
		exit;
	}

	public function save() {
		global $wpdb;
		if ( ! current_user_can( 'manage_options' ) || ! check_admin_referer( 'seatt_promo' ) ) {
			wp_die( esc_html__( 'Not allowed.', 'seathive' ) );
		}
		$code = SEATT_Pricing::normalize_code( sanitize_text_field( wp_unslash( $_POST['code'] ?? '' ) ) );
		if ( strlen( $code ) < 3 ) {
			$this->back( array( 'seatt_err' => rawurlencode( __( 'Use at least 3 letters/numbers for the code.', 'seathive' ) ) ) );
		}
		$type  = 'amount' === sanitize_key( wp_unslash( $_POST['type'] ?? '' ) ) ? 'amount' : 'percent';
		$value = max( 0, floatval( $_POST['value'] ?? 0 ) );
		if ( 'percent' === $type ) {
			$value = min( 100, $value );
		}
		$date = function ( $k ) {
			$v = sanitize_text_field( wp_unslash( $_POST[ $k ] ?? '' ) ); // phpcs:ignore WordPress.Security.NonceVerification.Missing -- nonce checked by the caller (save_post / admin-post handler)
			return preg_match( '/^\d{4}-\d{2}-\d{2}$/', $v ) ? $v . ( 'ends_at' === $k ? ' 23:59:59' : ' 00:00:00' ) : null;
		};
		$data = array(
			'code'        => $code,
			'type'        => $type,
			'value'       => $value,
			'event_id'    => max( 0, intval( $_POST['event_id'] ?? 0 ) ),
			'category'    => sanitize_key( $_POST['category'] ?? '' ),
			'max_uses'    => max( 0, intval( $_POST['max_uses'] ?? 0 ) ),
			'per_email'   => max( 0, intval( $_POST['per_email'] ?? 0 ) ),
			'min_tickets' => max( 0, intval( $_POST['min_tickets'] ?? 0 ) ),
			'starts_at'   => $date( 'starts_at' ),
			'ends_at'     => $date( 'ends_at' ),
		);
		$id = intval( $_POST['id'] ?? 0 );
		if ( $id ) {
			$wpdb->update( $wpdb->seatt_promos, $data, array( 'id' => $id ) );
		} else {
			if ( SEATT_Pricing::get_promo( $code ) ) {
				$this->back( array( 'seatt_err' => rawurlencode( __( 'That code already exists.', 'seathive' ) ) ) );
			}
			$data['active']     = 1;
			$data['created_at'] = current_time( 'mysql' );
			$wpdb->insert( $wpdb->seatt_promos, $data );
		}
		$this->back( array( 'seatt_ok' => 1 ) );
	}

	public function action() {
		global $wpdb;
		if ( ! current_user_can( 'manage_options' ) || ! check_admin_referer( 'seatt_promo_action' ) ) {
			wp_die( esc_html__( 'Not allowed.', 'seathive' ) );
		}
		$id = intval( $_GET['id'] ?? 0 );
		switch ( sanitize_key( $_GET['op'] ?? '' ) ) {
			case 'pause':
				$wpdb->update( $wpdb->seatt_promos, array( 'active' => 0 ), array( 'id' => $id ) );
				break;
			case 'resume':
				$wpdb->update( $wpdb->seatt_promos, array( 'active' => 1 ), array( 'id' => $id ) );
				break;
			case 'delete':
				$wpdb->delete( $wpdb->seatt_promos, array( 'id' => $id ) );
				break;
		}
		$this->back( array( 'seatt_ok' => 1 ) );
	}

	public function render() {
		global $wpdb;
		$promos = $wpdb->get_results( $wpdb->prepare( 'SELECT * FROM %i ORDER BY id DESC', $wpdb->seatt_promos ) );
		$events = get_posts( array( 'post_type' => 'seatt_event', 'numberposts' => 200, 'post_status' => 'any' ) );
		$edit   = null;
		if ( ! empty( $_GET['edit'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only: chooses what to display
			$edit = $wpdb->get_row( $wpdb->prepare( 'SELECT * FROM %i WHERE id = %d', $wpdb->seatt_promos, intval( $_GET['edit'] ) ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only: chooses what to display
		}
		$v = function ( $k, $d = '' ) use ( $edit ) { return $edit ? $edit->$k : $d; };
		?>
		<div class="wrap">
			<h1><?php esc_html_e( 'Promo Codes', 'seathive' ); ?></h1>
			<?php if ( ! empty( $_GET['seatt_err'] ) ) : ?><div class="notice notice-error"><p><?php echo esc_html( sanitize_text_field( wp_unslash( $_GET['seatt_err'] ) ) ); ?></p></div><?php endif; /* phpcs:ignore WordPress.Security.NonceVerification.Recommended */ ?>
			<?php if ( ! empty( $_GET['seatt_ok'] ) ) : ?><div class="notice notice-success is-dismissible"><p><?php esc_html_e( 'Saved.', 'seathive' ); ?></p></div><?php endif; /* phpcs:ignore WordPress.Security.NonceVerification.Recommended */ ?>
			<p class="description"><?php esc_html_e( 'Early-bird prices (automatic, no code) are set per event, in the event\'s edit screen.', 'seathive' ); ?></p>

			<h2><?php echo $edit ? esc_html__( 'Edit code', 'seathive' ) : esc_html__( 'New code', 'seathive' ); ?></h2>
			<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" class="esm-promo-form">
				<?php wp_nonce_field( 'seatt_promo' ); ?>
				<input type="hidden" name="action" value="seatt_promo_save" />
				<input type="hidden" name="id" value="<?php echo (int) $v( 'id', 0 ); ?>" />
				<table class="form-table" role="presentation">
					<tr><th><label for="esm-p-code"><?php esc_html_e( 'Code', 'seathive' ); ?></label></th><td><input id="esm-p-code" name="code" class="regular-text code" required value="<?php echo esc_attr( $v( 'code' ) ); ?>" placeholder="<?php esc_attr_e( 'Name Promo Codes', 'seathive' ); ?>" data-seatt-upper /></td></tr>
					<tr><th><?php esc_html_e( 'Discount', 'seathive' ); ?></th><td>
						<input type="number" name="value" min="0" step="any" class="small-text" required value="<?php echo esc_attr( $v( 'value', 10 ) + 0 ); ?>" />
						<select name="type"><option value="percent" <?php selected( $v( 'type', 'percent' ), 'percent' ); ?>>%</option><option value="amount" <?php selected( $v( 'type' ), 'amount' ); ?>><?php echo esc_html( get_option( 'seatt_currency_symbol', 'Rp' ) ); ?> <?php esc_html_e( '(per order)', 'seathive' ); ?></option></select>
					</td></tr>
					<tr><th><?php esc_html_e( 'Event', 'seathive' ); ?></th><td><select name="event_id"><option value="0"><?php esc_html_e( 'All events', 'seathive' ); ?></option><?php foreach ( $events as $e ) : ?><option value="<?php echo (int) $e->ID; ?>" <?php selected( (int) $v( 'event_id', 0 ), $e->ID ); ?>><?php echo esc_html( $e->post_title ); ?></option><?php endforeach; ?></select></td></tr>
					<tr><th><?php esc_html_e( 'Only for category', 'seathive' ); ?></th><td><select name="category"><option value=""><?php esc_html_e( 'Any ticket', 'seathive' ); ?></option><?php foreach ( self::category_choices( $events ) as $ck => $cl ) : ?><option value="<?php echo esc_attr( $ck ); ?>" <?php selected( $v( 'category' ), $ck ); ?>><?php echo esc_html( $cl ); ?></option><?php endforeach; ?></select></td></tr>
					<tr><th><?php esc_html_e( 'Limits', 'seathive' ); ?></th><td>
						<label><?php esc_html_e( 'Total uses', 'seathive' ); ?> <input type="number" name="max_uses" min="0" class="small-text" value="<?php echo (int) $v( 'max_uses', 0 ); ?>" /></label>
						&nbsp; <label><?php esc_html_e( 'Per buyer (email)', 'seathive' ); ?> <input type="number" name="per_email" min="0" class="small-text" value="<?php echo (int) $v( 'per_email', 1 ); ?>" /></label>
						&nbsp; <label><?php esc_html_e( 'Min. tickets', 'seathive' ); ?> <input type="number" name="min_tickets" min="0" class="small-text" value="<?php echo (int) $v( 'min_tickets', 0 ); ?>" /></label>
						<p class="description"><?php esc_html_e( '0 = no limit.', 'seathive' ); ?></p>
					</td></tr>
					<tr><th><?php esc_html_e( 'Valid', 'seathive' ); ?></th><td>
						<input type="date" name="starts_at" value="<?php echo esc_attr( $v( 'starts_at' ) ? substr( $v( 'starts_at' ), 0, 10 ) : '' ); ?>" /> → <input type="date" name="ends_at" value="<?php echo esc_attr( $v( 'ends_at' ) ? substr( $v( 'ends_at' ), 0, 10 ) : '' ); ?>" />
						<p class="description"><?php esc_html_e( 'Leave empty for no start / end date.', 'seathive' ); ?></p>
					</td></tr>
				</table>
				<?php submit_button( $edit ? __( 'Save code', 'seathive' ) : __( 'Create code', 'seathive' ), 'primary', 'submit', false ); ?>
				<?php if ( $edit ) : ?> <a class="button" href="<?php echo esc_url( admin_url( 'admin.php?page=seatt-promos' ) ); ?>"><?php esc_html_e( 'Cancel', 'seathive' ); ?></a><?php endif; ?>
			</form>

			<h2 style="margin-top:28px"><?php esc_html_e( 'Codes', 'seathive' ); ?></h2>
			<table class="widefat striped">
				<thead><tr><th><?php esc_html_e( 'Code', 'seathive' ); ?></th><th><?php esc_html_e( 'Discount', 'seathive' ); ?></th><th><?php esc_html_e( 'Applies to', 'seathive' ); ?></th><th><?php esc_html_e( 'Used', 'seathive' ); ?></th><th><?php esc_html_e( 'Valid', 'seathive' ); ?></th><th><?php esc_html_e( 'Status', 'seathive' ); ?></th><th></th></tr></thead>
				<tbody>
				<?php if ( ! $promos ) : ?><tr><td colspan="7"><?php esc_html_e( 'No promo codes yet.', 'seathive' ); ?></td></tr><?php endif; ?>
				<?php foreach ( $promos as $p ) :
					$used = SEATT_Pricing::promo_uses( $p->code );
					$act  = function ( $op ) use ( $p ) { return wp_nonce_url( admin_url( 'admin-post.php?action=seatt_promo_action&op=' . $op . '&id=' . (int) $p->id ), 'seatt_promo_action' ); };
					?>
					<tr>
						<td><code style="font-size:14px"><?php echo esc_html( $p->code ); ?></code></td>
						<td><?php echo 'percent' === $p->type ? esc_html( ( $p->value + 0 ) . '%' ) : esc_html( seatt_format_price( $p->value ) ); ?></td>
						<td><?php echo (int) $p->event_id ? esc_html( get_the_title( $p->event_id ) ) : esc_html__( 'All events', 'seathive' ); ?><?php if ( $p->category ) : ?> · <?php echo esc_html( ucfirst( $p->category ) ); ?><?php endif; ?><?php if ( (int) $p->min_tickets ) : ?> · ≥<?php echo (int) $p->min_tickets; ?> <?php esc_html_e( 'tickets', 'seathive' ); ?><?php endif; ?></td>
						<td><?php echo (int) $used; ?><?php echo (int) $p->max_uses ? ' / ' . (int) $p->max_uses : ''; ?></td>
						<td><?php echo esc_html( ( $p->starts_at ? mysql2date( 'j M Y', $p->starts_at ) : '—' ) . ' → ' . ( $p->ends_at ? mysql2date( 'j M Y', $p->ends_at ) : '—' ) ); ?></td>
						<td><?php echo (int) $p->active ? '<span style="color:#008a20">' . esc_html__( 'Active', 'seathive' ) . '</span>' : '<span style="color:#996800">' . esc_html__( 'Paused', 'seathive' ) . '</span>'; ?></td>
						<td style="white-space:nowrap">
							<a href="<?php echo esc_url( admin_url( 'admin.php?page=seatt-promos&edit=' . (int) $p->id ) ); ?>"><?php esc_html_e( 'Edit', 'seathive' ); ?></a> |
							<?php if ( (int) $p->active ) : ?><a href="<?php echo esc_url( $act( 'pause' ) ); ?>"><?php esc_html_e( 'Pause', 'seathive' ); ?></a><?php else : ?><a href="<?php echo esc_url( $act( 'resume' ) ); ?>"><?php esc_html_e( 'Resume', 'seathive' ); ?></a><?php endif; ?> |
							<a href="<?php echo esc_url( $act( 'delete' ) ); ?>" data-seatt-confirm="<?php echo esc_attr( __( 'Delete this code? Bookings that used it keep their discount.', 'seathive' ) ); ?>" style="color:#b32d2e"><?php esc_html_e( 'Delete', 'seathive' ); ?></a>
						</td>
					</tr>
				<?php endforeach; ?>
				</tbody>
			</table>
		</div>
		<?php
	}
}