<?php
if ( ! defined( 'ABSPATH' ) ) exit;

/**
 * Email notifications. Hooked onto the SAME 'seatt_booking_paid' action
 * that both the free-booking path and mark_booking_paid() already fire
 * — a booking's DB logic doesn't need to know or care that an email
 * gets sent as a side effect of it; this class is the only place that
 * decides that.
 */
class SEATT_Notifications {

	/** @var SEATT_Notifications|null Set on construction so the REST
	 * "Resend receipt" endpoint can reach the one live instance. */
	public static $instance = null;

	/** Booking id whose email is being sent right now — lets the
	 * wp_mail_failed listener attribute a failure to it. */
	private $sending_for = 0;

	public function __construct() {
		self::$instance = $this;
		add_action( 'wp_mail_failed', array( $this, 'log_mail_failure' ) );
		// Booking emails are QUEUED and sent after the buyer already has
		// their page (SEATT_Mail_Queue) — checkout no longer waits for SMTP.
		// Ticket holders are not emailed separately: the buyer receives
		// every ticket (one QR per person, all in one PDF).
		add_action( 'seatt_booking_paid', function ( $id ) { SEATT_Mail_Queue::add( 'receipt', $id ); } );
		add_action( 'seatt_booking_created', function ( $id ) { SEATT_Mail_Queue::add( 'order_placed', $id ); SEATT_Mail_Queue::add( 'admin_order', $id ); } );
	}

	public static function instance() {
		return self::$instance;
	}

	/**
	 * Sends one queued email. Returns false only when sending failed (so
	 * the queue can retry), true/null otherwise.
	 *
	 * "Order placed" is skipped when the booking is already paid by the
	 * time it would go out (free / complimentary orders are paid within
	 * the same request) — the receipt right behind it says it all.
	 */
	public function dispatch( $type, $booking_id ) {
		$this->last_ok = true;
		switch ( $type ) {
			case 'receipt':
				$this->send_confirmation_email( $booking_id );
				break;
			case 'order_placed':
				$b = SEATT_DB::get_booking( $booking_id );
				if ( $b && 'paid' === $b->status ) {
					return true;
				}
				$this->send_client_order_placed_email( $booking_id );
				break;
			case 'admin_order':
				$this->send_admin_order_placed_email( $booking_id );
				break;
		}
		return $this->last_ok;
	}

	/** @var bool result of the last send() (for the queue's retry). */
	private $last_ok = true;

	/**
	 * THE bug behind "paid, but no receipt email": every email here
	 * called SEATT_DB::get_booking_with_seats() and then read
	 * $booking->buyer_email — but that function returns an ARRAY
	 * ( 'booking' => row, 'seats' => [...], 'zones' => [...] ), not an
	 * object. Property access on an array is null, so the "no email on
	 * file" guard returned early on every single booking and nothing
	 * was ever sent — silently, since that early return is the normal
	 * path for walk-up bookings without an email. This flattens it
	 * into the object shape all three emails were written against.
	 */
	private function load_booking( $booking_id ) {
		$data = SEATT_DB::get_booking_with_seats( $booking_id );
		if ( ! $data || empty( $data['booking'] ) ) {
			return null;
		}
		$booking        = clone $data['booking'];
		$booking->seats = (array) $data['seats'];
		$booking->zones = (array) $data['zones'];
		return $booking;
	}

	/** wp_mail() fails quietly (wrong SMTP password, blocked port). This
	 * puts the reason in the Activity Log next to the booking. */
	public function log_mail_failure( $error ) {
		if ( ! $this->sending_for ) {
			return;
		}
		$booking = SEATT_DB::get_booking( $this->sending_for );
		$msg     = is_wp_error( $error ) ? $error->get_error_message() : 'unknown error';
		SEATT_DB::log_activity( $booking ? $booking->event_id : 0, $this->sending_for, null, 'email_failed', $msg );
	}

	/** wp_mail wrapper that records the outcome for this booking. */
	private function send( $booking, $to, $subject, $body, $label, $headers = array() ) {
		$this->sending_for = intval( $booking->id );
		// A mail/SMTP failure must never break the booking flow that
		// triggered it (it used to abort complimentary tickets half-way).
		try {
			$ok = wp_mail( $to, $subject, $body, array_merge( array( 'Content-Type: text/html; charset=UTF-8' ), $headers ) );
		} catch ( \Throwable $e ) {
			$ok = false;
			SEATT_DB::log_activity( $booking->event_id ?? null, $booking->id ?? null, null, 'email_failed', $label . ': ' . $e->getMessage() );
		}
		if ( ! $ok ) {
			$this->last_ok = false;
		}
		$this->sending_for = 0;
		if ( $ok ) {
			SEATT_DB::log_activity( $booking->event_id, $booking->id, null, 'email_sent', $label . ' → ' . $to );
		}
		return $ok;
	}

	/** Shared by both "Order Placed" emails below — turns a booking's
	 * seats/zones into a plain-text line list for the ORDER_DETAILS
	 * placeholder, since both the client and admin version of this
	 * email want the same summary. */
	private function order_details_text( $booking ) {
		$lines = array();
		foreach ( $booking->seats as $seat ) {
			$lines[] = seatt_seat_label( $seat->row_name, $seat->seat_label ) . ' — ' . seatt_format_price( $seat->price );
		}
		foreach ( $booking->zones as $zone ) {
			$lines[] = $zone->zone_name . ' × ' . $zone->quantity . ' — ' . seatt_format_price( $zone->price_each * $zone->quantity );
		}
		$answers = class_exists( 'SEATT_Checkout_Fields' ) ? SEATT_Checkout_Fields::answers_text( $booking->id ) : '';
		if ( '' !== $answers ) {
			$lines[] = '';
			$lines[] = $answers;
		}
		return implode( "\n", $lines );
	}

	/** Replaces the Tickera-style placeholders in a custom email
	 * template with real booking values — shared by both new email
	 * types since they use the same placeholder vocabulary (with
	 * ORDER_ADMIN_URL only meaningful for the admin version). */
	private function fill_placeholders( $template, $booking, $event_name ) {
		return str_replace(
			array( '{ORDER_ID}', '{ORDER_TOTAL}', '{BUYER_NAME}', '{EVENT_NAME}', '{ORDER_DETAILS}', '{ORDER_ADMIN_URL}' ),
			array(
				$booking->id,
				seatt_format_price( $booking->total ),
				$booking->buyer_name,
				$event_name,
				$this->order_details_text( $booking ),
				admin_url( 'admin.php?page=seatt-bookings&event_id=' . $booking->event_id ),
			),
			$template
		);
	}

	/**
	 * "Client Order Placed Email" (Settings → Email) — an immediate
	 * acknowledgment to the BUYER the moment their booking is created,
	 * regardless of payment status yet. Deliberately separate from
	 * send_confirmation_email() above (which only fires once PAID) —
	 * a still-pending order and a confirmed one are different moments
	 * a site owner may want to word differently, or only send one of.
	 */
	public function send_client_order_placed_email( $booking_id ) {
		if ( ! get_option( 'seatt_client_order_placed_enabled' ) ) {
			return;
		}
		$booking = $this->load_booking( $booking_id );
		if ( ! $booking || empty( $booking->buyer_email ) || ! is_email( $booking->buyer_email ) ) {
			return;
		}

		$event      = get_post( $booking->event_id );
		$event_name = $event ? $event->post_title : __( 'Your Event', 'seathive' );

		$subject = $this->fill_placeholders(
			(string) get_option( 'seatt_client_order_placed_subject', __( 'Order Received', 'seathive' ) ),
			$booking, $event_name
		);
		$content = trim( (string) get_option( 'seatt_client_order_placed_content' ) );
		if ( '' === $content ) {
			$content = "Hello,\n\nWe've received your order ({ORDER_ID}) totalling {ORDER_TOTAL} for {EVENT_NAME}.\n\n{ORDER_DETAILS}";
		}
		$body = nl2br( esc_html( $this->fill_placeholders( $content, $booking, $event_name ) ) );

		$this->send( $booking, $booking->buyer_email, $subject, $body, 'Order placed (buyer)' );
	}

	/**
	 * "Admin Order Placed Email" (Settings → Email) — notifies the
	 * SITE OWNER (not the buyer) that a new order came in, so a real
	 * person doesn't have to keep the Bookings page open to notice new
	 * sales as they happen.
	 */
	public function send_admin_order_placed_email( $booking_id ) {
		if ( ! get_option( 'seatt_admin_order_placed_enabled' ) ) {
			return;
		}
		$booking = $this->load_booking( $booking_id );
		if ( ! $booking ) {
			return;
		}

		$to_email = trim( (string) get_option( 'seatt_admin_order_placed_to_email' ) );
		if ( '' === $to_email || ! is_email( $to_email ) ) {
			$to_email = get_option( 'admin_email' ); // sensible default — a site that hasn't set a specific "To" yet still gets notified somewhere
		}

		$event      = get_post( $booking->event_id );
		$event_name = $event ? $event->post_title : __( 'Your Event', 'seathive' );

		$subject = $this->fill_placeholders(
			(string) get_option( 'seatt_admin_order_placed_subject', __( 'New Order Placed', 'seathive' ) ),
			$booking, $event_name
		);
		$content = trim( (string) get_option( 'seatt_admin_order_placed_content' ) );
		if ( '' === $content ) {
			$content = "Hello,\n\nA new order ({ORDER_ID}) totalling {ORDER_TOTAL} has been placed by {BUYER_NAME} for {EVENT_NAME}.\n\n{ORDER_DETAILS}\n\nView it here: {ORDER_ADMIN_URL}";
		}
		$body = nl2br( esc_html( $this->fill_placeholders( $content, $booking, $event_name ) ) );

		$this->send( $booking, $to_email, $subject, $body, 'Order placed (admin)' );
	}

	/**
	 * Receipt email, sent once a booking is PAID: event image on top,
	 * the entry QR code right under it, then the order summary and a
	 * button to the full receipt page.
	 *
	 * The QR is generated on this server and embedded in the email
	 * itself (inline CID attachment): Outlook and many mobile mail apps
	 * block remote images by default — exactly the moment someone is
	 * standing at the door trying to open their ticket.
	 *
	 * Returns true when wp_mail accepted the message.
	 */
	public function send_confirmation_email( $booking_id ) {
		$booking = $this->load_booking( $booking_id );
		if ( ! $booking || empty( $booking->buyer_email ) || ! is_email( $booking->buyer_email ) ) {
			// No email on file (e.g. an usher-sold walk-up booking with only
			// a name/phone) — nothing to send, and that's an expected,
			// ordinary case rather than something to warn about.
			return false;
		}

		// The Email tab's "Send Receipt Email" toggle — defaults ON.
		if ( ! get_option( 'seatt_send_receipt_email', 1 ) ) {
			return false;
		}

		$event      = get_post( $booking->event_id );
		$event_name = $event ? $event->post_title : __( 'Your Event', 'seathive' );
		$event_date = $event ? get_post_meta( $event->ID, '_seatt_event_date', true ) : '';

		$banner_url = '';
		$banner_h   = 0;
		if ( $event && has_post_thumbnail( $event->ID ) ) {
			$img = wp_get_attachment_image_src( get_post_thumbnail_id( $event->ID ), 'large' );
			if ( $img ) {
				$banner_url = $img[0];
				// Explicit height for Outlook, which ignores height:auto.
				$banner_h = ( ! empty( $img[1] ) && ! empty( $img[2] ) ) ? (int) round( 520 * $img[2] / $img[1] ) : 0;
			}
		}

		$confirmation_url = $this->find_confirmation_page_url( $booking );
		$page_base        = $this->find_confirmation_page_base( $booking );
		$qr_src           = '';
		$qr_png           = '';
		$qr_list          = array(); // one QR per ticket: array( cid, png, ticket row )
		if ( $page_base && 'paid' === $booking->status ) {
			// Drawn locally (SEATT_QR + GD) and embedded as inline
			// attachments. The check-in token is never sent to an outside
			// QR service. Without GD on the server there's simply no
			// image, and the "View my ticket" button shows the QRs instead.
			$qr_list = self::ticket_qrs( $booking, $page_base );
			if ( ! $qr_list ) {
				try {
					$qr_png = SEATT_QR::png( self::checkin_url( $booking, $page_base ), 8 );
				} catch ( \Exception $e ) {
					$qr_png = '';
				}
				$qr_src = $qr_png ? 'cid:esm-qr-' . intval( $booking->id ) : '';
			}
		}

		$subject  = sprintf( /* translators: %s: value */ __( 'Your tickets for %s — booking confirmed', 'seathive' ), $event_name );
		$is_comp  = 'comp' === $booking->payment_method;
		$ev_time  = $event ? (string) get_post_meta( $event->ID, '_seatt_event_time', true ) : '';
		$ev_end   = $event ? (string) get_post_meta( $event->ID, '_seatt_event_end_time', true ) : '';
		$ev_venue = $event ? trim( (string) get_post_meta( $event->ID, '_seatt_venue_address', true ) ) : '';
		$n_tix    = $qr_list ? count( $qr_list ) : 0;

		$custom_text = trim( (string) get_option( 'seatt_receipt_email_text', '' ) );
		if ( '' !== $custom_text ) {
			$intro_text = str_replace( array( '{name}', '{event}' ), array( $booking->buyer_name, $event_name ), $custom_text );
		} else {
			$intro_text = $is_comp
				? sprintf( /* translators: %s: value */ __( 'Hi %s, you have received complimentary tickets. Your booking is confirmed — everything you need for the day is below.', 'seathive' ), $booking->buyer_name )
				: sprintf( __( 'Hi %s, thank you for your order! Your payment has been received and your booking is confirmed. Everything you need for the day is below.', 'seathive' ), $booking->buyer_name );
		}

		ob_start();
		?>
		<div style="background:#f3f4f6;padding:24px 12px">
		<div style="font-family:-apple-system,Helvetica,Arial,sans-serif;max-width:520px;margin:0 auto;color:#222;background:#fff;border-radius:12px;overflow:hidden;border:1px solid #e5e7eb">
			<?php if ( $banner_url ) : ?>
				<img src="<?php echo esc_url( $banner_url ); ?>" alt="<?php echo esc_attr( $event_name ); ?>" width="520"<?php if ( $banner_h ) : ?> height="<?php echo (int) $banner_h; ?>"<?php endif; ?> style="display:block;width:100%;max-width:520px;height:auto;border:0">
			<?php endif; ?>
			<div style="padding:22px 24px 8px">
				<h2 style="margin:0 0 4px;font-size:22px"><?php echo esc_html( $event_name ); ?></h2>
				<?php if ( $event_date ) : ?>
					<p style="color:#666;margin:0"><?php echo esc_html( mysql2date( 'l, j F Y', $event_date ) ); ?></p>
				<?php endif; ?>
				<p style="color:#888;margin:6px 0 0;font-size:13px"><?php printf( /* translators: %d: number */ esc_html__( 'Booking #%d', 'seathive' ), intval( $booking->id ) ); ?> · <?php esc_html_e( 'Invoice', 'seathive' ); ?>: <strong style="font-family:monospace;color:#333"><?php echo esc_html( SEATT_DB::invoice_number( $booking ) ); ?></strong></p>
			</div>

			<?php if ( $qr_list ) : ?>
				<?php echo wp_kses( self::qr_cards_html( $qr_list, count( $qr_list ) > 1 ? sprintf( /* translators: %d: number of QR codes */ __( 'Your %d entry QR codes', 'seathive' ), count( $qr_list ) ) : __( 'Your entry QR code', 'seathive' ), count( $qr_list ) > 1 ? __( 'One QR per person — each holder can scan in on their own.', 'seathive' ) : '' ), 'post', array_merge( wp_allowed_protocols(), array( 'cid' ) ) ); ?>
			<?php endif; ?>
			<?php if ( $qr_src ) : ?>
				<div style="text-align:center;padding:18px 24px 6px">
					<p style="margin:0 0 10px;font-weight:700;font-size:15px"><?php esc_html_e( 'Your entry QR code', 'seathive' ); ?></p>
					<img src="<?php echo esc_attr( $qr_src ); ?>" alt="<?php esc_attr_e( 'Entry QR code', 'seathive' ); ?>" width="220" height="220" style="display:inline-block;width:220px;height:220px;border:8px solid #fff;box-shadow:0 0 0 1px #e5e7eb;border-radius:8px">
					<p style="margin:10px 0 0;font-size:12px;color:#666"><?php esc_html_e( 'Show this at the door — staff will scan it to confirm your arrival.', 'seathive' ); ?></p>
				</div>
			<?php endif; ?>

			<div style="padding:12px 24px 20px">
				<p><?php echo esc_html( $intro_text ); ?></p>

				<table role="presentation" cellpadding="0" cellspacing="0" style="width:100%;background:#f7f9fa;border-radius:10px;margin:12px 0">
					<tr><td style="padding:12px 14px;font-size:14px;line-height:1.6;color:#333">
						<?php if ( $event_date ) : ?><div><strong><?php esc_html_e( 'Date', 'seathive' ); ?>:</strong> <?php echo esc_html( mysql2date( 'l, j F Y', $event_date ) ); ?></div><?php endif; ?>
						<?php if ( $ev_time ) : ?><div><strong><?php esc_html_e( 'Time', 'seathive' ); ?>:</strong> <?php echo esc_html( $ev_time . ( $ev_end ? ' – ' . $ev_end : '' ) ); ?></div><?php endif; ?>
						<?php if ( $ev_venue ) : ?><div><strong><?php esc_html_e( 'Venue', 'seathive' ); ?>:</strong> <?php echo esc_html( $ev_venue ); ?></div><?php endif; ?>
						<?php if ( class_exists( 'SEATT_Online' ) && SEATT_Online::is_online( $booking->event_id ) ) : ?><div><strong><?php esc_html_e( 'Where', 'seathive' ); ?>:</strong> <?php echo esc_html( SEATT_Online::public_label( $booking->event_id ) ); ?></div><?php endif; ?>
						<?php if ( $n_tix ) : ?><div><strong><?php esc_html_e( 'Tickets', 'seathive' ); ?>:</strong> <?php echo (int) $n_tix; ?></div><?php endif; ?>
					</td></tr>
				</table>
				<?php if ( $n_tix ) : ?>
					<p style="margin:10px 0;font-size:14px;color:#333">📎 <?php echo esc_html( 1 === $n_tix ? __( 'Your e-ticket is attached as a PDF. Print it or simply show it on your phone at the entrance.', 'seathive' ) : sprintf( /* translators: %d: number */ __( 'Your %d e-tickets are attached as one PDF (one page per person). Print them or show them on your phone at the entrance.', 'seathive' ), $n_tix ) ); ?></p>
					<?php if ( $n_tix > 1 ) : ?><p style="margin:0 0 10px;font-size:13px;color:#555"><?php esc_html_e( 'Each ticket has its own QR code and admits one person — forward each page to the person it belongs to, or show them all at the door.', 'seathive' ); ?></p><?php endif; ?>
				<?php endif; ?>

				<?php $seatt_admin_pay = SEATT_DB::admin_ticket_label( $booking ); if ( $seatt_admin_pay ) : ?>
					<p style="margin:8px 0;color:#444"><strong><?php esc_html_e( 'Payment', 'seathive' ); ?>:</strong> <?php echo esc_html( $seatt_admin_pay ); ?></p>
				<?php endif; ?>
				<table style="width:100%;border-collapse:collapse;margin:12px 0">
					<?php foreach ( $booking->seats as $seat ) : ?>
						<tr>
							<td style="padding:7px 0;border-bottom:1px solid #eee"><?php echo esc_html( seatt_seat_label( $seat->row_name, $seat->seat_label ) ); ?><?php if ( ! empty( $seat->attendee_name ) ) : ?> <span style="color:#888">— <?php echo esc_html( $seat->attendee_name ); ?></span><?php endif; ?></td>
							<td style="padding:7px 0;border-bottom:1px solid #eee;text-align:right"><?php echo 'comp' === $booking->payment_method ? esc_html__( 'Complimentary', 'seathive' ) : esc_html( seatt_format_price( $seat->price ) ); ?></td>
						</tr>
					<?php endforeach; ?>
					<?php foreach ( $booking->zones as $zone ) : ?>
						<tr>
							<td style="padding:7px 0;border-bottom:1px solid #eee"><?php echo esc_html( $zone->zone_name . ' × ' . $zone->quantity ); ?></td>
							<td style="padding:7px 0;border-bottom:1px solid #eee;text-align:right"><?php echo $is_comp ? esc_html__( 'Complimentary', 'seathive' ) : esc_html( seatt_format_price( $zone->price_each * $zone->quantity ) ); ?></td>
						</tr>
					<?php endforeach; ?>
					<?php foreach ( array_filter( array(
						__( 'Subtotal', 'seathive' ) => ( (float) $booking->discount > 0 || (float) $booking->fee > 0 || (float) $booking->tax > 0 ) && null !== $booking->subtotal ? seatt_format_price( $booking->subtotal ) : '',
						( $booking->promo_code ? sprintf( /* translators: %s: value */ __( 'Discount (%s)', 'seathive' ), $booking->promo_code ) : __( 'Discount', 'seathive' ) ) => (float) $booking->discount > 0 ? '− ' . seatt_format_price( $booking->discount ) : '',
						( get_option( 'seatt_fee_label', '' ) ?: __( 'Service fee', 'seathive' ) ) => (float) $booking->fee > 0 ? seatt_format_price( $booking->fee ) : '',
						__( 'Tax', 'seathive' ) => (float) $booking->tax > 0 ? seatt_format_price( $booking->tax ) : '',
					) ) as $lbl => $amt ) : ?>
						<tr><td style="padding:4px 0;color:#666"><?php echo esc_html( $lbl ); ?></td><td style="padding:4px 0;color:#666;text-align:right"><?php echo esc_html( $amt ); ?></td></tr>
					<?php endforeach; ?>
					<tr>
						<td style="padding:10px 0;font-weight:700"><?php esc_html_e( 'Total', 'seathive' ); ?></td>
						<td style="padding:10px 0;font-weight:700;text-align:right"><?php echo esc_html( seatt_format_price( $booking->total ) ); ?><?php if ( $is_comp ) : ?> <span style="font-weight:400;color:#666">(<?php esc_html_e( 'Complimentary', 'seathive' ); ?>)</span><?php endif; ?></td>
					</tr>
				</table>

				<?php echo class_exists( 'SEATT_Online' ) ? wp_kses_post( SEATT_Online::email_html( $booking ) ) : ''; ?>
				<?php echo class_exists( 'SEATT_Operations' ) ? wp_kses_post( SEATT_Operations::calendar_links_html( $booking->event_id, true ) ) : ''; ?>
				<?php if ( $confirmation_url ) : ?>
					<p style="text-align:center;margin:20px 0 8px">
						<a href="<?php echo esc_url( $confirmation_url ); ?>" style="background:#2271b1;color:#fff;padding:11px 22px;border-radius:6px;text-decoration:none;font-weight:600;display:inline-block">
							<?php esc_html_e( 'View my booking & QR codes online', 'seathive' ); ?>
						</a>
					</p>
					<p style="font-size:12px;color:#888;text-align:center"><?php esc_html_e( 'Please keep this email. The button above always opens your booking, even if you closed the page after checkout.', 'seathive' ); ?></p>
					<?php $seatt_mt = class_exists( 'SEATT_My_Tickets' ) ? SEATT_My_Tickets::url() : ''; if ( $seatt_mt ) : ?>
						<p style="font-size:12px;color:#888;text-align:center"><?php esc_html_e( 'All your orders in one place:', 'seathive' ); ?> <a href="<?php echo esc_url( $seatt_mt ); ?>" style="color:#2271b1"><?php esc_html_e( 'My tickets', 'seathive' ); ?></a></p>
					<?php endif; ?>
				<?php endif; ?>
			</div>
		</div>
		</div>
		<?php
		$body = ob_get_clean();

		$embed = null;
		$pdf   = ( $qr_list && class_exists( 'SEATT_Ticket_PDF' ) ) ? SEATT_Ticket_PDF::for_tickets( $booking, wp_list_pluck( $qr_list, 'ticket' ), $page_base ) : '';
		$pdf_name = sanitize_file_name( 'e-tickets-' . SEATT_DB::invoice_number( $booking ) . '.pdf' );
		if ( $qr_list ) {
			$embed = function ( $phpmailer ) use ( $qr_list, $pdf, $pdf_name ) {
				if ( $pdf ) {
					try {
						$phpmailer->addStringAttachment( $pdf, $pdf_name, 'base64', 'application/pdf' );
					} catch ( \Exception $e ) {
						// Sent without the attachment; the QR codes are inline anyway.
					}
				}
				foreach ( $qr_list as $q ) {
					if ( ! $q['png'] ) {
						continue;
					}
					try {
						$phpmailer->addStringEmbeddedImage( $q['png'], $q['cid'], 'ticket-' . (int) $q['ticket']->ticket_no . '.png', 'base64', 'image/png' );
					} catch ( \Exception $e ) {
						// The <img> just won't resolve.
					}
				}
			};
			add_action( 'phpmailer_init', $embed );
		} elseif ( $qr_png ) {
			$cid   = 'esm-qr-' . intval( $booking->id );
			$embed = function ( $phpmailer ) use ( $qr_png, $cid ) {
				try {
					$phpmailer->addStringEmbeddedImage( $qr_png, $cid, 'ticket-qr.png', 'base64', 'image/png' );
				} catch ( \Exception $e ) {
					// Falls through: the <img> just won't resolve.
				}
			};
			add_action( 'phpmailer_init', $embed );
		}
		$ok = $this->send( $booking, $booking->buyer_email, $subject, $body, 'Receipt' );
		if ( $embed ) {
			remove_action( 'phpmailer_init', $embed );
		}
		return $ok;
	}

	/** PNG QR per ticket of a paid booking (empty without GD / tickets). */
	public static function ticket_qrs( $booking, $page_base, $only_email = '' ) {
		if ( ! class_exists( 'SEATT_Ticket_Codes' ) ) {
			return array();
		}
		$out = array();
		foreach ( SEATT_Ticket_Codes::ensure( $booking->id ) as $t ) {
			if ( '' !== $only_email && 0 !== strcasecmp( (string) $t->holder_email, $only_email ) ) {
				continue;
			}
			try {
				$png = SEATT_QR::png( SEATT_Ticket_Codes::url( $t, $page_base ), 7 );
			} catch ( \Exception $e ) {
				$png = '';
			}
			// Kept even without an image (no GD): the PDF still carries the QR.
			$out[] = array( 'cid' => 'esm-qr-t' . (int) $t->id, 'png' => $png, 'ticket' => $t );
		}
		return $out;
	}

	/** Email-safe block of QR cards (tables, inline styles). */
	public static function qr_cards_html( $qr_list, $title, $note = '' ) {
		$h  = '<div style="text-align:center;padding:18px 24px 6px">';
		$h .= '<p style="margin:0 0 6px;font-weight:700;font-size:15px">' . esc_html( $title ) . '</p>';
		if ( $note ) {
			$h .= '<p style="margin:0 0 12px;font-size:12px;color:#666">' . esc_html( $note ) . '</p>';
		}
		foreach ( $qr_list as $q ) {
			$t  = $q['ticket'];
			$h .= '<table role="presentation" cellpadding="0" cellspacing="0" style="margin:0 auto 14px;border:1px solid #e5e7eb;border-radius:10px;width:100%;max-width:300px"><tr><td style="padding:12px;text-align:center">';
			$h .= '<p style="margin:0;font-weight:700;font-size:14px">' . esc_html( $t->holder_name ) . '</p>';
			$h .= '<p style="margin:2px 0 8px;font-size:12px;color:#666">' . esc_html( sprintf( /* translators: %1$d: number, %2$s: value */ __( 'Ticket %1$d · %2$s', 'seathive' ), (int) $t->ticket_no, $t->label ) ) . '</p>';
			if ( $q['png'] ) {
				$h .= '<img src="cid:' . esc_attr( $q['cid'] ) . '" alt="' . esc_attr__( 'Entry QR code', 'seathive' ) . '" width="200" height="200" style="display:inline-block;width:200px;height:200px;border:0">';
			} else {
				$h .= '<p style="margin:6px 0;font-size:12px;color:#666">' . esc_html__( 'QR code in the attached PDF', 'seathive' ) . '</p>';
			}
			$h .= '</td></tr></table>';
		}
		$h .= '<p style="margin:4px 0 0;font-size:12px;color:#666">' . esc_html__( 'Show this at the door — staff will scan it to confirm your arrival.', 'seathive' ) . '</p></div>';
		return $h;
	}

	/** The door-scan URL a ticket's QR encodes — identical to what the
	 * receipt page renders, so both QRs scan to the same screen. */
	public static function checkin_url( $booking, $page_base ) {
		return add_query_arg(
			array( 'seatt_checkin_id' => intval( $booking->id ), 'seatt_checkin_token' => $booking->checkin_token ),
			$page_base
		);
	}

	/** Permalink of the page carrying this event's booking shortcode. */
	private function find_confirmation_page_base( $booking ) {
		return seatt_event_booking_url( $booking->event_id );
	}

	/**
	 * The confirmation page is whatever page has the [seatt_booking ...]
	 * shortcode for THIS event — same lookup pattern the portals already
	 * use to find their own page, just keyed by event_id instead of
	 * just the shortcode's presence, since the booking shortcode takes
	 * an event_id attribute that varies per event/page.
	 */
	private function find_confirmation_page_url( $booking ) {
		$base = seatt_event_booking_url( $booking->event_id );
		if ( ! $base ) {
			return '';
		}
		// IMPORTANT: seatt_booking_id, NOT seatt_checkin_id/seatt_checkin_token
		// — those two params trigger a COMPLETELY DIFFERENT screen
		// (SEATT_Public::render_checkin(), the staff-only "confirm this
		// guest's arrival" view a door usher sees after scanning a
		// ticket's QR code). A buyer clicking this link with the checkin
		// params instead sees "Staff Login Required", never their
		// receipt — a real bug that shipped in this email's very first
		// version and only surfaced once another feature (the "Complete
		// Payment" button, in class-esm-payment.php) copied the same
		// wrong pattern and made it visibly hit a dead end.
		$b = isset( $booking->checkin_token ) ? $booking : SEATT_DB::get_booking( $booking->id );
		return add_query_arg( SEATT_DB::receipt_args( $b ), $base );
	}
}