<?php
/**
 * The admin-post.php handlers behind the Settings forms and the recovery notice.
 *
 * @package Shiftora\Admin
 */

declare(strict_types=1);

namespace Shiftora\Admin;

use Shiftora\Backup\BackupSettings;
use Shiftora\Core\ServiceFactory;
use Shiftora\Logging\DebugToggle;
use Shiftora\Migration\TransferSettings;

// Prevent direct file access.
if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/**
 * Each handler checks its own nonce and capability before it reads anything else,
 * then hands the service only fields it has cleaned. The services check both again,
 * so a handler cannot be the one place a mistake hides.
 */
final class AdminPostHandlers {

	public static function register(): void {
		add_action( 'admin_post_shiftora_debug_toggle', [ self::class, 'debug_toggle' ] );
		add_action( 'admin_post_shiftora_transfer_settings', [ self::class, 'transfer_settings' ] );
		add_action( 'admin_post_shiftora_backup_settings', [ self::class, 'backup_settings' ] );
		add_action( 'admin_post_shiftora_recovery_restore', [ self::class, 'recovery_restore' ] );
		add_action( 'admin_post_shiftora_dismiss_recovery_notice', [ self::class, 'dismiss_recovery_notice' ] );
	}

	/** Nonce action for the "dismiss" link on the recovery notice. */
	public static function dismiss_action( int $migration_id ): string {
		return 'shiftora_dismiss_recovery_' . $migration_id;
	}

	/** Detailed-logging switch on Settings. */
	public static function debug_toggle(): void {
		check_admin_referer( DebugToggle::NONCE_ACTION );
		self::require_manage_options();

		$result = ( new DebugToggle() )->toggle(
			[ '_wpnonce' => isset( $_POST['_wpnonce'] ) && is_string( $_POST['_wpnonce'] ) ? sanitize_text_field( wp_unslash( $_POST['_wpnonce'] ) ) : '' ]
		);
		self::finish( $result, admin_url( 'admin.php?page=shiftora-settings' ) );
	}

	/** Transfer-tuning fields on Settings. */
	public static function transfer_settings(): void {
		check_admin_referer( TransferSettings::NONCE_ACTION );
		self::require_manage_options();

		$fields = [ '_wpnonce' => isset( $_POST['_wpnonce'] ) && is_string( $_POST['_wpnonce'] ) ? sanitize_text_field( wp_unslash( $_POST['_wpnonce'] ) ) : '' ];
		foreach ( TransferSettings::field_names() as $name ) {
			if ( isset( $_POST[ $name ] ) && is_string( $_POST[ $name ] ) ) {
				$fields[ $name ] = sanitize_text_field( wp_unslash( $_POST[ $name ] ) );
			}
		}

		self::finish( ( new TransferSettings() )->save( $fields ), admin_url( 'admin.php?page=shiftora-settings&transfer_settings_updated=1' ) );
	}

	/** Backups-to-keep on Settings, its own form so it cannot reset the transfer fields. */
	public static function backup_settings(): void {
		check_admin_referer( BackupSettings::NONCE_ACTION );
		self::require_manage_options();

		$fields = [ '_wpnonce' => isset( $_POST['_wpnonce'] ) && is_string( $_POST['_wpnonce'] ) ? sanitize_text_field( wp_unslash( $_POST['_wpnonce'] ) ) : '' ];
		if ( isset( $_POST['shiftora_backup_retention'] ) && is_string( $_POST['shiftora_backup_retention'] ) ) {
			$fields['shiftora_backup_retention'] = sanitize_text_field( wp_unslash( $_POST['shiftora_backup_retention'] ) );
		}

		self::finish( ( new BackupSettings() )->save( $fields ), admin_url( 'admin.php?page=shiftora-settings&transfer_settings_updated=1' ) );
	}

	/** One-click restore from the recovery notice. */
	public static function recovery_restore(): void {
		$migration_id = isset( $_GET['migration_id'] ) && is_string( $_GET['migration_id'] ) ? absint( wp_unslash( $_GET['migration_id'] ) ) : 0;
		check_admin_referer( 'shiftora_recovery_' . $migration_id );
		self::require_manage_options();

		if ( $migration_id > 0 ) {
			ServiceFactory::recovery_manager()->run_auto_recovery( $migration_id );
		}

		wp_safe_redirect( admin_url( 'admin.php?page=shiftora-backups' ) );
		exit;
	}

	/** Hides the recovery notice for a week; the next unfinished migration shows its own. */
	public static function dismiss_recovery_notice(): void {
		$migration_id = isset( $_GET['migration_id'] ) && is_string( $_GET['migration_id'] ) ? absint( wp_unslash( $_GET['migration_id'] ) ) : 0;
		check_admin_referer( self::dismiss_action( $migration_id ) );
		self::require_manage_options();

		if ( $migration_id > 0 ) {
			set_transient( 'shiftora_recovery_' . $migration_id . '_dismissed', 1, WEEK_IN_SECONDS );
		}

		wp_safe_redirect( wp_get_referer() ?: admin_url( 'admin.php?page=shiftora-backups' ) );
		exit;
	}

	private static function require_manage_options(): void {
		if ( ! current_user_can( 'manage_options' ) ) {
			wp_die( esc_html__( 'You do not have permission to perform this action.', 'shiftora' ), 403 );
		}
	}

	/** Redirects on success; a refusal from a service ends the request with its message. */
	private static function finish( bool|\WP_Error $result, string $location ): void {
		if ( is_wp_error( $result ) ) {
			wp_die( esc_html( $result->get_error_message() ), 403 );
		}

		wp_safe_redirect( $location );
		exit;
	}
}