<?php

defined( 'ABSPATH' ) || exit;
/**
 * Monatlicher E-Mail-Bericht (Opt-in).
 *
 * Versendet einmal im Monat die wichtigsten Kennzahlen aus dem Dashboard
 * (Anfrage-Quote, Verweildauer, Seiten pro Besuch bzw. Fortschritt der
 * Datenerfassung) an die hinterlegte Adresse. Standardmäßig aus.
 */
class ADSEC_Report {
    const HOOK = 'adsec_monthly_report';

    const SEND_DAY = 5;

    // Versand jeweils am 5. des Monats
    const LAST_SENT = 'adsec_report_last';

    // 'Y-m' des letzten erfolgreichen Versands
    public function __construct() {
        add_action( self::HOOK, array(__CLASS__, 'maybe_send') );
        add_action( 'init', array($this, 'sync_schedule') );
    }

    /**
     * Täglicher Check statt „alle 30 Tage ab Einschalten": so kommt der Bericht
     * verlässlich am SEND_DAY. Fällt ein Tag aus (kein Seitenaufruf, Cron hängt),
     * holt der nächste Lauf den Versand nach — höchstens einmal pro Monat.
     */
    public function sync_schedule() {
        $s = get_option( 'adsec_settings', array() );
        $enabled = !empty( $s['report_enabled'] ) && '' !== trim( (string) ($s['report_email'] ?? '') );
        $event = wp_get_scheduled_event( self::HOOK );
        if ( $enabled && (!$event || 'daily' !== $event->schedule) ) {
            wp_clear_scheduled_hook( self::HOOK );
            // altes 30-Tage-Intervall ablösen
            $next = strtotime( 'tomorrow 08:00', current_time( 'timestamp' ) ) - (current_time( 'timestamp' ) - time());
            wp_schedule_event( $next, 'daily', self::HOOK );
        } elseif ( !$enabled && $event ) {
            wp_clear_scheduled_hook( self::HOOK );
        }
    }

    /** Reine Entscheidung (testbar): heute senden? */
    public static function is_due( $day_of_month, $month, $last_sent ) {
        return (int) $day_of_month >= self::SEND_DAY && (string) $last_sent !== (string) $month;
    }

    /** Vom täglichen Cron aufgerufen: sendet am SEND_DAY (oder danach nachholend). */
    public static function maybe_send() {
        $s = get_option( 'adsec_settings', array() );
        if ( empty( $s['report_enabled'] ) ) {
            return;
        }
        $month = wp_date( 'Y-m' );
        $last = get_option( self::LAST_SENT, false );
        // Allererster Lauf nach dem Einschalten: nur den Startpunkt merken. Sonst käme
        // der erste Bericht sofort am nächsten Morgen statt am kommenden SEND_DAY.
        if ( false === $last ) {
            update_option( self::LAST_SENT, ( (int) wp_date( 'j' ) >= self::SEND_DAY ? $month : '' ), false );
            return;
        }
        if ( !self::is_due( wp_date( 'j' ), $month, $last ) ) {
            return;
        }
        $to = trim( (string) ($s['report_email'] ?? '') );
        // Nur ein tatsächlich verschickter Bericht zählt. Wartet die Adresse noch auf
        // Bestätigung, versucht es der nächste Tageslauf erneut (der Dienst schickt die
        // Bestätigung höchstens alle 3 Tage und den Bericht selbst direkt nach dem Klick).
        if ( '' !== $to && is_email( $to ) && 'sent' === self::send_now( $to ) ) {
            update_option( self::LAST_SENT, $month, false );
        }
    }

    /**
     * Bericht sofort an $to senden (auch für „Bericht jetzt senden").
     *
     * Seit 0.41.0 über den Sectivio-Dienst und unseren eigenen Mailserver: vom
     * Kundenserver mit Absender @sectivio.com fehlte der Echtheitsnachweis (Spam).
     * Neue Empfänger bestätigen einmal per Link (Schutz vor Missbrauch).
     *
     * @return string sent | confirm_sent | confirm_pending | stopped | error
     */
    public static function send_now( $to ) {
        $site = (string) wp_parse_url( home_url(), PHP_URL_HOST );
        /* translators: %s: website domain. */
        $subject = sprintf( __( 'Your Sectivio monthly report for %s', 'sectivio' ), $site );
        $html = self::build_html( self::collect(), $site );
        $base = ADSEC_AI::service_url();
        // Ohne Zustimmung zum AV-Vertrag nicht über unseren Mailserver (Art. 28 DSGVO).
        if ( '' === $base || !ADSEC_Plugin::terms_accepted() ) {
            return ( self::send_local( $to, $subject, $html ) ? 'sent' : 'error' );
        }
        $res = wp_remote_post( trailingslashit( $base ) . 'v1/report/send', array(
            'timeout' => 30,
            'headers' => array(
                'content-type'    => 'application/json',
                'x-adsec-mailkey' => self::mail_key(),
            ),
            'body'    => wp_json_encode( array(
                'site'    => ADSEC_AI::site_id(),
                'host'    => preg_replace( '#^www\\.#', '', strtolower( $site ) ),
                'to'      => strtolower( $to ),
                'subject' => $subject,
                'html'    => $html,
                'lang'    => ( 0 === strpos( (string) get_locale(), 'de' ) ? 'de' : 'en' ),
            ) ),
        ) );
        if ( is_wp_error( $res ) ) {
            return 'error';
        }
        $body = json_decode( (string) wp_remote_retrieve_body( $res ), true );
        $status = ( is_array( $body ) ? (string) ($body['status'] ?? '') : '' );
        if ( 'not_configured' === $status ) {
            // Dienst ohne Mailserver-Zugang (Übergangszeit): wie bisher über die Website selbst.
            return ( self::send_local( $to, $subject, $html ) ? 'sent' : 'error' );
        }
        return ( in_array( $status, array(
            'sent',
            'confirm_sent',
            'confirm_pending',
            'stopped'
        ), true ) ? $status : 'error' );
    }

    /**
     * Geheimer Schlüssel dieser Website für den Berichtsversand. Bindet die
     * Empfänger-Bestätigung an genau diese Installation: Wer nur Domain und Adresse
     * kennt, kann über den Dienst keinen Bericht an sie schicken.
     */
    private static function mail_key() {
        $key = (string) get_option( 'adsec_mail_key', '' );
        if ( !preg_match( '/^[A-Za-z0-9]{32}$/', $key ) ) {
            $key = wp_generate_password( 32, false, false );
            update_option( 'adsec_mail_key', $key, false );
        }
        return $key;
    }

    /** Nur ohne Sectivio-Dienst: Versand über die Website selbst, Absender auf der eigenen Domain. */
    private static function send_local( $to, $subject, $html ) {
        $domain = preg_replace( '/^www\\./', '', (string) wp_parse_url( home_url(), PHP_URL_HOST ) );
        $logo = ADSEC_PLUGIN_DIR . 'assets/img/sectivio-logo-light-2x.png';
        $embed = static function ( $mailer ) use($logo) {
            if ( is_readable( $logo ) ) {
                $mailer->AddEmbeddedImage(
                    $logo,
                    'sectivio-logo',
                    'sectivio-logo.png',
                    'base64',
                    'image/png'
                );
            }
        };
        add_action( 'phpmailer_init', $embed );
        $ok = wp_mail(
            $to,
            $subject,
            $html,
            array('Content-Type: text/html; charset=UTF-8', 'From: Sectivio <noreply@' . $domain . '>')
        );
        remove_action( 'phpmailer_init', $embed );
        return (bool) $ok;
    }

    /** Rückwärtskompatibel (älterer Cron-Hook rief send() auf). */
    public static function send() {
        self::maybe_send();
    }

    /** Alle Zahlen für den Bericht: Status, letzte 30 Tage, Monatsverlauf und Empfehlungen. */
    private static function collect() {
        global $wpdb;
        $t = ADSEC_Database::events_table();
        $sec = ADSEC_Database::sections_table();
        $d = ADSEC_Dashboard::quick_summary();
        $d['all'] = ADSEC_Dashboard::group_metrics( null, gmdate( 'Y-m-d', time() - 30 * DAY_IN_SECONDS ) );
        $d['goals'] = (int) $d['all']['goal_sessions'];
        $d['first'] = ADSEC_Daily::first_day();
        $d['months'] = ADSEC_Daily::monthly( 6 );
        $d['hints'] = ADSEC_Hints::for_context( 'report', 20 );
        // alle Empfehlungen für diese Website
        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching -- custom plugin table.
        $d['pages'] = (int) $wpdb->get_var( $wpdb->prepare( 'SELECT COUNT(DISTINCT page_id) FROM %i WHERE excluded = 0', $sec ) );
        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching -- custom plugin table.
        $d['secs'] = (int) $wpdb->get_var( $wpdb->prepare( 'SELECT COUNT(*) FROM %i WHERE excluded = 0', $sec ) );
        $d['top'] = array();
        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching -- custom plugin table.
        $rows = $wpdb->get_results( $wpdb->prepare( 
            // Durchschnitt als eigene Spalte: MariaDB erlaubt keine Rechnung mit
            // Aggregat-Aliasen in ORDER BY („Reference 'dwell' not supported").
            "SELECT section_id, page_id, SUM(value) AS dwell, COUNT(DISTINCT session_key) AS seen,\n\t\t\t        SUM(value) / COUNT(DISTINCT session_key) AS avg_dwell\n\t\t\t   FROM %i WHERE event_type = 'dwell'\n\t\t\t  GROUP BY section_id, page_id HAVING seen >= 3\n\t\t\t  ORDER BY avg_dwell DESC LIMIT 3",
            $t
         ), ARRAY_A );
        foreach ( (array) $rows as $r ) {
            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching -- custom plugin table.
            $info = $wpdb->get_row( $wpdb->prepare(
                'SELECT heading, ai_label, excerpt FROM %i WHERE uid = %s AND page_id = %d',
                $sec,
                $r['section_id'],
                $r['page_id']
            ), ARRAY_A );
            $name = '';
            foreach ( array('heading', 'ai_label', 'excerpt') as $k ) {
                if ( !empty( $info[$k] ) ) {
                    $name = wp_html_excerpt( $info[$k], 60, '…' );
                    break;
                }
            }
            $d['top'][] = array(
                'name' => ( '' !== $name ? $name : __( 'Section without heading', 'sectivio' ) ),
                'page' => ( (int) $r['page_id'] ? get_the_title( (int) $r['page_id'] ) : __( 'Home page', 'sectivio' ) ),
                'secs' => (float) $r['dwell'] / max( 1, (int) $r['seen'] ),
            );
        }
        return $d;
    }

    /** Sekunden lesbar: „45 s", „2 Min 10 s". */
    private static function duration( $sec ) {
        $sec = (int) round( $sec );
        if ( $sec < 60 ) {
            /* translators: %d: number of seconds. */
            return sprintf( __( '%d s', 'sectivio' ), $sec );
        }
        $m = intdiv( $sec, 60 );
        $r = $sec % 60;
        /* translators: 1: minutes, 2: seconds (or %d: minutes). */
        return ( $r ? sprintf( __( '%1$d min %2$d s', 'sectivio' ), $m, $r ) : sprintf( __( '%d min', 'sectivio' ), $m ) );
    }

    /** Farbiges Delta (▲ +x % grün / ▼ −x % rot / „neu" / „—"). */
    private static function delta_badge( $before, $after ) {
        if ( $before > 0 ) {
            $pct = ($after / $before - 1) * 100;
            $up = $pct >= 0;
            $color = ( $up ? '#0a7d4d' : '#b42318' );
            $txt = (( $up ? '▲ +' : '▼ −' )) . ADSEC_Plugin::pct( number_format_i18n( abs( $pct ), 1 ) );
        } elseif ( $after > 0 ) {
            $color = '#0a7d4d';
            $txt = __( 'new', 'sectivio' );
        } else {
            $color = '#9aa3b2';
            $txt = '—';
        }
        return '<span style="display:inline-block;font-weight:600;font-size:14px;color:' . esc_attr( $color ) . '">' . esc_html( $txt ) . '</span>';
    }

    /** Vergleichszeile vorher → jetzt + Delta. */
    private static function compare_row(
        $label,
        $before,
        $after,
        $badge
    ) {
        return '<tr><td style="padding:12px 16px;border-top:1px solid #eef0f5;font-size:14px;color:#374151">' . esc_html( $label ) . '</td>' . '<td style="padding:12px 8px;border-top:1px solid #eef0f5;font-size:14px;color:#6b7280;white-space:nowrap">' . esc_html( $before ) . ' &rarr; <strong style="color:#111827">' . esc_html( $after ) . '</strong></td>' . '<td align="right" style="padding:12px 16px;border-top:1px solid #eef0f5;white-space:nowrap">' . $badge . '</td></tr>';
    }

    /** Kachel für die Kennzahlen-Übersicht. */
    private static function tile( $value, $label, $left ) {
        return '<td width="50%" valign="top" style="padding:' . (( $left ? '0 6px 12px 0' : '0 0 12px 6px' )) . '">' . '<table role="presentation" width="100%" cellpadding="0" cellspacing="0" style="background:#f7f8fc;border:1px solid #e6e8f0;border-radius:10px"><tr><td style="padding:14px 16px">' . '<div style="font-size:24px;font-weight:700;color:#111827;line-height:1.2">' . esc_html( $value ) . '</div>' . '<div style="font-size:13px;color:#6b7280;margin-top:2px">' . esc_html( $label ) . '</div>' . '</td></tr></table></td>';
    }

    /** Überschrift eines Berichtsteils. */
    private static function h2( $text ) {
        return '<h2 style="margin:26px 0 10px;font-size:16px;color:#111827;font-weight:700">' . esc_html( $text ) . '</h2>';
    }

    /** Kompletter HTML-Body des Berichts. */
    private static function build_html( $d, $site ) {
        $dash = admin_url( 'admin.php?page=adaptive-sections' );
        $settings = admin_url( 'admin.php?page=adsec-settings' );
        $all = $d['all'];
        $from = wp_date( _x( 'F j', 'report date without year', 'sectivio' ), time() - 30 * DAY_IN_SECONDS );
        $to = wp_date( _x( 'F j, Y', 'report date', 'sectivio' ) );
        // Status in einem Satz + passende Farbe.
        $status = ( empty( $d['enabled'] ) ? array(
            '#b45309',
            '#fff7ed',
            __( 'Paused', 'sectivio' ),
            __( 'Measurement is turned off. Turn it on in the settings to see which content your visitors read.', 'sectivio' )
        ) : array(
            '#0a7d4d',
            '#ecfdf3',
            __( 'Measuring', 'sectivio' ),
            __( 'Sectivio measures which content your visitors read and which leads to an enquiry. Your pages stay unchanged.', 'sectivio' )
        ) );
        $progress = '';
        $compare = '';
        $html = '<table role="presentation" width="100%" cellpadding="0" cellspacing="0" style="background:' . $status[1] . ';border-radius:10px"><tr><td style="padding:14px 16px">' . '<div style="font-size:12px;font-weight:700;letter-spacing:.5px;text-transform:uppercase;color:' . $status[0] . '">' . esc_html( $status[2] ) . '</div>' . '<div style="font-size:15px;color:#1f2937;margin-top:4px;line-height:1.5">' . esc_html( $status[3] ) . '</div>';
        $html .= $progress;
        $html .= '</td></tr></table>';
        // Kennzahlen der letzten 30 Tage.
        $html .= self::h2( __( 'Your visitors in the last 30 days', 'sectivio' ) );
        $html .= '<table role="presentation" width="100%" cellpadding="0" cellspacing="0" ><tr>' . self::tile( number_format_i18n( $all['sessions'] ), __( 'Visits', 'sectivio' ), true ) . self::tile( number_format_i18n( $d['goals'] ), __( 'Enquiries', 'sectivio' ), false ) . '</tr><tr>' . self::tile( self::duration( $all['dwell_avg'] ), __( 'Reading time per visit', 'sectivio' ), true ) . self::tile( number_format_i18n( $all['pages_per_session'], 1 ), __( 'Pages per visit', 'sectivio' ), false ) . '</tr></table>';
        $html .= $compare;
        // Entwicklung über die letzten Monate (aus den Tageszusammenfassungen).
        if ( count( $d['months'] ) >= 2 ) {
            $max = max( 1, max( array_map( 'intval', array_column( $d['months'], 'visits' ) ) ) );
            $html .= self::h2( __( 'Development over the last few months', 'sectivio' ) );
            $html .= '<table role="presentation" width="100%" cellpadding="0" cellspacing="0" style="border:1px solid #e6e8f0;border-radius:10px">' . '<tr><td style="padding:10px 16px;font-size:12px;color:#6b7280">' . esc_html__( 'Month', 'sectivio' ) . '</td><td style="padding:10px 8px;font-size:12px;color:#6b7280">' . esc_html__( 'Visits', 'sectivio' ) . '</td><td align="right" style="padding:10px 16px;font-size:12px;color:#6b7280">' . esc_html__( 'Enquiries', 'sectivio' ) . '</td></tr>';
            $cur = gmdate( 'Y-m' );
            foreach ( $d['months'] as $m ) {
                $label = wp_date( 'F Y', strtotime( $m['ym'] . '-15 12:00 UTC' ) ) . (( $m['ym'] === $cur ? ' ' . __( '(so far)', 'sectivio' ) : '' ));
                $w = max( 2, (int) round( (int) $m['visits'] / $max * 100 ) );
                $html .= '<tr><td style="padding:8px 16px;border-top:1px solid #eef0f5;font-size:14px;color:#374151;white-space:nowrap">' . esc_html( $label ) . '</td>' . '<td style="padding:8px 8px;border-top:1px solid #eef0f5;width:55%"><table role="presentation" width="100%" cellpadding="0" cellspacing="0"><tr>' . '<td width="' . $w . '%" style="background:#4f46e5;height:8px;border-radius:4px;font-size:0;line-height:8px">&nbsp;</td><td style="padding-left:8px;font-size:13px;color:#111827;white-space:nowrap">' . esc_html( number_format_i18n( (int) $m['visits'] ) ) . '</td></tr></table></td>' . '<td align="right" style="padding:8px 16px;border-top:1px solid #eef0f5;font-size:14px;color:#111827">' . esc_html( number_format_i18n( (int) $m['goals'] ) ) . '</td></tr>';
            }
            $html .= '</table>';
        }
        // Meistgelesene Abschnitte.
        if ( !empty( $d['top'] ) ) {
            $html .= self::h2( __( 'Your visitors read this content the longest', 'sectivio' ) );
            $html .= '<table role="presentation" width="100%" cellpadding="0" cellspacing="0" style="border:1px solid #e6e8f0;border-radius:10px">';
            // Translator comment on its own statement: Freemius' code formatter drops comments inside expressions.
            /* translators: %s: page title. */
            $on_page = __( 'on the page “%s”', 'sectivio' );
            foreach ( $d['top'] as $i => $row ) {
                $html .= '<tr><td style="padding:12px 16px;' . (( $i ? 'border-top:1px solid #eef0f5;' : '' )) . '">' . '<div style="font-size:14px;color:#111827;font-weight:600">' . esc_html( $row['name'] ) . '</div>' . '<div style="font-size:13px;color:#6b7280">' . esc_html( sprintf( $on_page, $row['page'] ) ) . '</div></td>' . '<td align="right" style="padding:12px 16px;white-space:nowrap;font-size:14px;color:#111827;' . (( $i ? 'border-top:1px solid #eef0f5;' : '' )) . '">' . esc_html( self::duration( $row['secs'] ) ) . '</td></tr>';
            }
            $html .= '</table>';
        }
        $html .= self::h2( __( 'Your content', 'sectivio' ) );
        $html .= '<p style="margin:0;font-size:14px;color:#374151;line-height:1.6">' . esc_html( sprintf( 
            /* translators: 1: number of sections, 2: number of pages. */
            __( 'Sectivio knows %1$s sections on %2$s pages of your website.', 'sectivio' ),
            number_format_i18n( $d['secs'] ),
            number_format_i18n( $d['pages'] )
         ) ) . '</p>';
        // Empfehlungen (dieselben wie im Dashboard, dort per Klick umsetzbar).
        if ( !empty( $d['hints'] ) ) {
            $html .= self::h2( __( 'Our recommendations', 'sectivio' ) );
            foreach ( $d['hints'] as $h ) {
                $html .= '<table role="presentation" width="100%" cellpadding="0" cellspacing="0" style="margin-top:10px;background:#fff7ed;border-radius:10px"><tr><td style="padding:12px 16px;font-size:14px;color:#7c2d12;line-height:1.5">' . esc_html( $h['text'] ) . '</td></tr></table>';
            }
            $html .= '<p style="margin:10px 0 0;font-size:13px;color:#6b7280">' . esc_html__( 'In the dashboard, you can apply any recommendation with one click.', 'sectivio' ) . '</p>';
        }
        ob_start();
        ?>
<table role="presentation" width="100%" cellpadding="0" cellspacing="0" style="background:#f4f5fb;margin:0;padding:24px 0"><tr><td align="center">
	<table role="presentation" width="600" cellpadding="0" cellspacing="0" style="width:600px;max-width:600px;background:#ffffff;border:1px solid #e6e8f0;border-radius:14px;overflow:hidden;font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,Helvetica,Arial,sans-serif">
		<tr><td style="background:#ffffff;padding:22px 28px;border-bottom:4px solid #4f46e5">
			<img src="cid:sectivio-logo" width="176" height="43" alt="Sectivio" style="display:block;border:0;height:43px;width:176px;color:#0f172a;font-size:22px;font-weight:800">
		</td></tr>
		<tr><td style="padding:26px 28px 8px">
			<h1 style="margin:0 0 4px;font-size:21px;color:#111827;font-weight:700"><?php 
        /* translators: %s: website domain. */
        echo esc_html( sprintf( __( 'Monthly report for %s', 'sectivio' ), $site ) );
        ?></h1>
			<p style="margin:0 0 18px;font-size:14px;color:#6b7280"><?php 
        /* translators: 1: start date, 2: end date. */
        echo esc_html( sprintf( __( '%1$s to %2$s', 'sectivio' ), $from, $to ) );
        ?></p>
			<!--ADSEC_REPORT_BODY-->
		</td></tr>
		<tr><td style="padding:24px 28px 30px">
			<a href="<?php 
        echo esc_url( $dash );
        ?>" style="display:inline-block;background:#4f46e5;color:#ffffff;text-decoration:none;font-weight:600;font-size:15px;padding:12px 22px;border-radius:8px"><?php 
        esc_html_e( 'Open dashboard', 'sectivio' );
        ?></a>
		</td></tr>
		<tr><td style="background:#f7f8fc;border-top:1px solid #e6e8f0;padding:18px 28px">
			<p style="margin:0;font-size:12px;color:#9aa3b2;line-height:1.5">
				<?php 
        esc_html_e( 'You are receiving this email because you turned on the monthly report.', 'sectivio' );
        ?>
				<a href="<?php 
        echo esc_url( $settings );
        ?>" style="color:#6b7280"><?php 
        esc_html_e( 'Unsubscribe from report', 'sectivio' );
        ?></a>
			</p>
		</td></tr>
	</table>
</td></tr></table>
		<?php 
        // Den intern gebauten (einzeln escapten) Inhalt erst nach dem Puffern einsetzen.
        return str_replace( '<!--ADSEC_REPORT_BODY-->', $html, (string) ob_get_clean() );
    }

}