<?php
/**
 * Administrator-only connection setup and diagnostics.
 *
 * @package Selectika
 */

defined( 'ABSPATH' ) || exit;

/** Selectika Connection Admin integration. */
final class Selectika_Connection_Admin {
	/**
	 * Register WordPress and WooCommerce integration hooks.
	 */
	public function __construct() {
		add_action( 'admin_menu', array( $this, 'menu' ) );
		add_action( 'admin_post_selectika_connection', array( $this, 'save' ) );
		add_action( 'admin_enqueue_scripts', array( $this, 'enqueue_assets' ), 10, 1 );
	}

	/**
	 * Load shared admin styles on the connection screen.
	 *
	 * @param string $hook_suffix Current admin page hook.
	 */
	public function enqueue_assets( $hook_suffix ) {
		if ( 'settings_page_selectika-connection' !== $hook_suffix ) {
			return;
		}
		wp_enqueue_style(
			'selectika-admin',
			SELECTIKA_PLUGIN_URL . 'admin/css/selectika-admin.css',
			array(),
			SELECTIKA_VERSION
		);
	}
	/**
	 * Register the administrator-only connection settings page.
	 */
	public function menu() {
		add_options_page( __( 'Selectika connection', 'selectika' ), __( 'Selectika connection', 'selectika' ), 'manage_options', 'selectika-connection', array( $this, 'render' ) );
	}
	/**
	 * Validate the administrator nonce and persist connection settings.
	 */
	public function save() {
		if ( ! current_user_can( 'manage_options' ) ) {
			wp_die( esc_html__( 'Administrator access is required.', 'selectika' ) ); }
		check_admin_referer( 'selectika_connection' );
		$operation = isset( $_POST['operation'] ) ? sanitize_key( wp_unslash( $_POST['operation'] ) ) : 'save';
		$c         = Selectika_Connection::get();
		if ( 'rotate' === $operation ) {
			$token                = bin2hex( random_bytes( 32 ) );
			$c['feed_token_hash'] = hash( 'sha256', $token );
			set_transient( 'selectika_token_' . get_current_user_id(), Selectika_Connection::encrypt( $token ), MINUTE_IN_SECONDS );
		} elseif ( 'disconnect' === $operation ) {
			$c['service_opt_in']  = false;
			$c['generation']      = wp_generate_uuid4();
			$c['feed_token_hash'] = '';
			$c['order_secret']    = '';
			wp_clear_scheduled_hook( 'selectika_catalog_continue' );
			wp_clear_scheduled_hook( 'selectika_orders_send' );
			delete_option( 'selectika_catalog_job' );
		} elseif ( 'rebuild' === $operation ) {
			Selectika_Catalog::request_build();
		} elseif ( 'save' === $operation ) {
			$input = isset( $_POST['connection'] ) && is_array( $_POST['connection'] ) ? map_deep( wp_unslash( $_POST['connection'] ), 'sanitize_text_field' ) : array();
			foreach ( $input as $value ) {
				if ( ! is_scalar( $value ) ) {
					wp_die( esc_html__( 'Connection fields must contain scalar values.', 'selectika' ) );
				}
			}
			$retailer = sanitize_text_field( $input['retailer'] ?? '' );
			$site_url = untrailingslashit( home_url() );
			$identity = 'product_id' === ( $input['identity_field'] ?? '' ) ? 'product_id' : 'slug';
			if ( $retailer !== $c['retailer'] || $site_url !== $c['site_url'] || $identity !== $c['identity_field'] || ( ! empty( $c['service_opt_in'] ) && empty( $input['service_opt_in'] ) ) || empty( $c['generation'] ) ) {
				$c['generation']      = wp_generate_uuid4();
				$c['feed_token_hash'] = '';
				$c['order_secret']    = '';
			}
			$c['site_id']  = $c['site_id'] ? $c['site_id'] : wp_generate_uuid4();
			$c['site_url'] = $site_url;
			$c['retailer'] = $retailer;
			foreach ( array( 'service_opt_in', 'catalog_enabled', 'widgets_enabled', 'tracking_enabled', 'orders_enabled' ) as $key ) {
				$c[ $key ] = ! empty( $input[ $key ] );
			}
			$c['identity_field'] = 'product_id' === ( $input['identity_field'] ?? '' ) ? 'product_id' : 'slug';
			$c['publisher_id']   = sanitize_text_field( $input['publisher_id'] ?? '' );
			$endpoint            = esc_url_raw( $input['order_endpoint'] ?? '', array( 'https' ) );
			$parts               = wp_parse_url( $endpoint );
			$c['order_endpoint'] = $parts && 'https' === ( $parts['scheme'] ?? '' ) && 'retailers.selectika.com' === ( $parts['host'] ?? '' ) && empty( $parts['user'] ) && empty( $parts['pass'] ) && empty( $parts['query'] ) && empty( $parts['fragment'] ) ? $endpoint : '';
			$secret              = trim( (string) ( $input['order_secret'] ?? '' ) );
			if ( '' !== $secret ) {
				if ( strlen( $secret ) < 32 || strlen( $secret ) > 256 ) {
					wp_die( esc_html__( 'The order signing secret must contain 32 to 256 characters.', 'selectika' ) ); }
				$c['order_secret'] = Selectika_Connection::encrypt( $secret );
			}
			if ( $c['orders_enabled'] && ( '' === $c['order_endpoint'] || '' === $c['order_secret'] ) ) {
				$c['orders_enabled'] = false;
			}
			if ( is_multisite() ) {
				$c['service_opt_in'] = false;
			}
		} else {
			wp_die( esc_html__( 'Unknown Selectika action.', 'selectika' ) );
		}
		update_option( Selectika_Connection::OPTION, $c, false );
		Selectika_Catalog::schedule();
		Selectika_Orders::schedule();
		wp_safe_redirect( admin_url( 'options-general.php?page=selectika-connection' ) );
		exit;
	}
	/**
	 * Render the existing integration surface using current connection settings.
	 */
	public function render() {
		if ( ! current_user_can( 'manage_options' ) ) {
			return; }
		$c      = Selectika_Connection::get();
		$sealed = get_transient( 'selectika_token_' . get_current_user_id() );
		$token  = $sealed ? Selectika_Connection::decrypt( $sealed ) : '';
		nocache_headers();
		delete_transient( 'selectika_token_' . get_current_user_id() );
		?>
		<div class="wrap selectika-settings-wrap">
		<?php
		Selectika_Admin::render_brand_header(
			__( 'Selectika AI Commerce connection', 'selectika' ),
			__( 'Connect WooCommerce to your Selectika retailer for catalog sync, widgets and consent-aware analytics.', 'selectika' )
		);
		?>
		<p><?php esc_html_e( 'Connect this site to your existing Selectika retailer. Description-only updates need no Selectika plugin: configure a native WooCommerce REST Consumer Key and Consumer Secret in Selectika. The plugin feed token below is separate and read-only.', 'selectika' ); ?></p>
		<p><a href="https://selectika.com/privacy-policy/#connected-stores" target="_blank" rel="noopener noreferrer"><?php esc_html_e( 'Connected-store privacy information', 'selectika' ); ?></a> · <a href="https://selectika.com/privacy-policy/#service-terms" target="_blank" rel="noopener noreferrer"><?php esc_html_e( 'Selectika service terms', 'selectika' ); ?></a></p>
		<?php
		if ( is_multisite() ) :
			?>
			<div class="notice notice-error"><p><?php esc_html_e( 'Network/multisite commerce connections are not supported in this version. External capabilities are disabled.', 'selectika' ); ?></p></div><?php endif; ?>
		<?php
		if ( $token ) :
			?>
			<div class="notice notice-warning"><p><?php esc_html_e( 'Copy this feed token into Selectika now. It is shown once; only its hash is retained.', 'selectika' ); ?></p><code><?php echo esc_html( $token ); ?></code></div><?php endif; ?>
		<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>">
		<?php wp_nonce_field( 'selectika_connection' ); ?><input type="hidden" name="action" value="selectika_connection"><input type="hidden" name="operation" value="save">
		<table class="form-table" role="presentation"><tbody>
		<?php
		foreach ( array(
			'retailer'       => __( 'Selectika retailer ID', 'selectika' ),
			'publisher_id'   => __( 'Analytics publisher ID', 'selectika' ),
			'order_endpoint' => __( 'Selectika order event endpoint', 'selectika' ),
		) as $key => $label ) :
			?>
		<tr><th scope="row"><label for="selectika-<?php echo esc_attr( $key ); ?>"><?php echo esc_html( $label ); ?></label></th><td><input class="regular-text" id="selectika-<?php echo esc_attr( $key ); ?>" name="connection[<?php echo esc_attr( $key ); ?>]" value="<?php echo esc_attr( $c[ $key ] ); ?>"></td></tr>
		<?php endforeach; ?>
		<tr><th scope="row"><label for="selectika-order-secret"><?php esc_html_e( 'Order signing secret', 'selectika' ); ?></label></th><td><input type="password" autocomplete="new-password" id="selectika-order-secret" name="connection[order_secret]" value=""><p class="description"><?php esc_html_e( 'Leave blank to keep the existing secret. Obtain the secret and endpoint from the Selectika connection settings.', 'selectika' ); ?></p></td></tr>
		<tr><th scope="row"><label for="selectika-identity"><?php esc_html_e( 'Catalog item identity', 'selectika' ); ?></label></th><td><select id="selectika-identity" name="connection[identity_field]"><option value="slug" <?php selected( $c['identity_field'], 'slug' ); ?>><?php esc_html_e( 'Existing product slug mapping', 'selectika' ); ?></option><option value="product_id" <?php selected( $c['identity_field'], 'product_id' ); ?>><?php esc_html_e( 'Native product ID (requires matching Selectika mapping)', 'selectika' ); ?></option></select></td></tr>
		<?php
		foreach ( array(
			'service_opt_in'   => array(
				__( 'Service authorization', 'selectika' ),
				__( 'I connect this site to Selectika and authorize the documented external service communication.', 'selectika' ),
			),
			'catalog_enabled'  => array(
				__( 'Catalog export', 'selectika' ),
				__( 'Enable authenticated catalog export', 'selectika' ),
			),
			'widgets_enabled'  => array(
				__( 'Storefront widgets', 'selectika' ),
				__( 'Enable storefront widgets after visitor consent', 'selectika' ),
			),
			'tracking_enabled' => array(
				__( 'Commerce analytics', 'selectika' ),
				__( 'Enable native commerce analytics after visitor consent', 'selectika' ),
			),
			'orders_enabled'   => array(
				__( 'Signed order delivery', 'selectika' ),
				__( 'Enable signed paid/cancelled/refunded order delivery when analytics consent was recorded', 'selectika' ),
			),
		) as $key => $labels ) :
			?>
		<tr><th scope="row"><?php echo esc_html( $labels[0] ); ?></th><td><label><input type="checkbox" name="connection[<?php echo esc_attr( $key ); ?>]" value="1" <?php checked( $c[ $key ] ); ?>> <?php echo esc_html( $labels[1] ); ?></label></td></tr>
		<?php endforeach; ?>
		</tbody></table><?php submit_button(); ?></form>
		<p><?php esc_html_e( 'Visitor consent defaults to denied/unknown. Connect your consent manager through selectikaConsent or the WordPress Consent API. No tracking script is loaded until consent is granted.', 'selectika' ); ?></p>
		<p><a href="<?php echo esc_url( admin_url( 'options-general.php?page=selectika' ) ); ?>"><?php esc_html_e( 'Widget placement settings', 'selectika' ); ?></a></p>
		<h2><?php esc_html_e( 'Connection and feed status', 'selectika' ); ?></h2>
		<pre><?php echo esc_html( wp_json_encode( Selectika_Connection::descriptor(), JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES ) ); ?></pre>
		<p><?php esc_html_e( 'Feed URL:', 'selectika' ); ?> <code><?php echo esc_url( rest_url( 'selectika/v1/catalog' ) ); ?></code></p>
		<p><?php esc_html_e( 'Feed token configured:', 'selectika' ); ?> <?php echo esc_html( $c['feed_token_hash'] ? __( 'Yes', 'selectika' ) : __( 'No', 'selectika' ) ); ?></p>
		<?php
		foreach ( array(
			'rotate'     => __( 'Generate / rotate read-only feed token', 'selectika' ),
			'rebuild'    => __( 'Build catalog snapshot', 'selectika' ),
			'disconnect' => __( 'Disconnect and revoke owned credentials', 'selectika' ),
		) as $action => $label ) :
			?>
		<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>"><?php wp_nonce_field( 'selectika_connection' ); ?><input type="hidden" name="action" value="selectika_connection"><input type="hidden" name="operation" value="<?php echo esc_attr( $action ); ?>"><?php submit_button( $label, 'secondary', 'submit', false ); ?></form><br>
		<?php endforeach; ?>
		</div>
		<?php
	}
}