<?php
/**
 * Settings → TrackPluse: whose plugins and themes to show.
 *
 * @package TrackPluse
 */

defined( 'ABSPATH' ) || exit;

/**
 * The settings page and the stored choices: a WordPress.org username and
 * any other plugin or theme slugs.
 */
class TrackPluse_Settings {

	/**
	 * Option name.
	 */
	const OPTION = 'trackpluse_settings';

	/**
	 * Slugs kept of each kind.
	 */
	const MAX_SLUGS = 25;

	/**
	 * Plugins and themes the dashboard widget shows unless the site chooses otherwise.
	 */
	const DEFAULT_SHOWN = 5;

	/**
	 * The most the widget can show: everything TrackWP returns for one request.
	 */
	const MAX_SHOWN = 50;

	/**
	 * Hook in.
	 */
	public static function init() {
		add_action( 'admin_init', array( __CLASS__, 'register' ) );
		add_action( 'admin_menu', array( __CLASS__, 'menu' ) );
		add_action( 'admin_enqueue_scripts', array( __CLASS__, 'assets' ) );
		add_action( 'admin_post_trackpluse_refresh', array( __CLASS__, 'refresh' ) );
		add_action( 'update_option_' . self::OPTION, array( 'TrackPluse_Api', 'flush' ) );
		add_filter( 'plugin_action_links_' . plugin_basename( TRACKPLUSE_FILE ), array( __CLASS__, 'action_links' ) );
	}

	/**
	 * The stored choices, with defaults.
	 *
	 * @return array{author: string, plugins: string[], themes: string[], shown: int}
	 */
	public static function get() {
		$settings = get_option( self::OPTION, array() );
		$settings = is_array( $settings ) ? $settings : array();

		return array(
			'author'  => isset( $settings['author'] ) ? (string) $settings['author'] : '',
			'plugins' => isset( $settings['plugins'] ) ? array_values( (array) $settings['plugins'] ) : array(),
			'themes'  => isset( $settings['themes'] ) ? array_values( (array) $settings['themes'] ) : array(),
			'shown'   => isset( $settings['shown'] ) ? self::shown( $settings['shown'] ) : self::DEFAULT_SHOWN,
		);
	}

	/**
	 * How many listings the widget shows, between 1 and MAX_SHOWN.
	 *
	 * @param mixed $value The stored or submitted number.
	 * @return int
	 */
	public static function shown( $value ) {
		$value = absint( $value );

		return $value < 1 ? self::DEFAULT_SHOWN : min( $value, self::MAX_SHOWN );
	}

	/**
	 * Whether anything has been chosen yet.
	 *
	 * @return bool
	 */
	public static function chosen() {
		$settings = self::get();

		return '' !== $settings['author'] || array() !== $settings['plugins'] || array() !== $settings['themes'];
	}

	/**
	 * Register the option with its sanitizer.
	 */
	public static function register() {
		register_setting(
			'trackpluse',
			self::OPTION,
			array(
				'type'              => 'array',
				'sanitize_callback' => array( __CLASS__, 'sanitize' ),
				'default'           => array(
					'author'  => '',
					'plugins' => array(),
					'themes'  => array(),
					'shown'   => self::DEFAULT_SHOWN,
				),
			)
		);
	}

	/**
	 * Keep only a valid username and valid slugs.
	 *
	 * @param mixed $input The submitted values.
	 * @return array{author: string, plugins: string[], themes: string[], shown: int}
	 */
	public static function sanitize( $input ) {
		$input = is_array( $input ) ? $input : array();

		return array(
			'author'  => self::username( isset( $input['author'] ) ? (string) $input['author'] : '' ),
			'plugins' => self::slugs( isset( $input['plugins'] ) ? $input['plugins'] : '' ),
			'themes'  => self::slugs( isset( $input['themes'] ) ? $input['themes'] : '' ),
			'shown'   => self::shown( isset( $input['shown'] ) ? $input['shown'] : self::DEFAULT_SHOWN ),
		);
	}

	/**
	 * "@jordan", "jordan" or a profiles.wordpress.org address → "jordan".
	 *
	 * @param string $input What was typed.
	 * @return string The username, or '' when it isn't one.
	 */
	public static function username( $input ) {
		$input = strtolower( trim( $input ) );

		// phpcs:ignore WordPress.WP.CapitalPDangit.MisspelledInText -- a lowercase address, not the name.
		if ( preg_match( '#profiles\.wordpress\.org/([^/?\#\s]+)#', $input, $match ) ) {
			$input = $match[1];
		}

		$input = ltrim( $input, '@' );

		return preg_match( '/^[a-z0-9][a-z0-9._-]{0,59}$/', $input ) ? $input : '';
	}

	/**
	 * Slugs from a list typed one per line or separated by commas or spaces,
	 * or pasted as WordPress.org addresses.
	 *
	 * @param mixed $input What was typed, or a list.
	 * @return string[]
	 */
	public static function slugs( $input ) {
		$parts = is_array( $input ) ? $input : preg_split( '/[\s,]+/', (string) $input );
		$slugs = array();

		foreach ( (array) $parts as $part ) {
			$part = strtolower( trim( (string) $part ) );

			// phpcs:ignore WordPress.WP.CapitalPDangit.MisspelledInText -- a lowercase address, not the name.
			if ( preg_match( '#wordpress\.org/(?:plugins|themes)/([a-z0-9-]+)#', $part, $match ) ) {
				$part = $match[1];
			}

			if ( preg_match( '/^[a-z0-9-]{1,200}$/', $part ) && ! in_array( $part, $slugs, true ) ) {
				$slugs[] = $part;
			}
		}

		return array_slice( $slugs, 0, self::MAX_SLUGS );
	}

	/**
	 * Settings → TrackPluse.
	 */
	public static function menu() {
		add_options_page(
			__( 'TrackPluse', 'trackpluse' ),
			__( 'TrackPluse', 'trackpluse' ),
			'manage_options',
			'trackpluse',
			array( __CLASS__, 'page' )
		);
	}

	/**
	 * A Settings link on the Plugins screen.
	 *
	 * @param string[] $links The plugin's links.
	 * @return string[]
	 */
	public static function action_links( $links ) {
		array_unshift( $links, '<a href="' . esc_url( admin_url( 'options-general.php?page=trackpluse' ) ) . '">' . esc_html__( 'Settings', 'trackpluse' ) . '</a>' );

		return $links;
	}

	/**
	 * Forget the kept figures and go back.
	 */
	public static function refresh() {
		if ( ! current_user_can( 'manage_options' ) ) {
			wp_die( esc_html__( 'Sorry, you are not allowed to do that.', 'trackpluse' ), 403 );
		}

		check_admin_referer( 'trackpluse_refresh' );
		TrackPluse_Api::flush();

		wp_safe_redirect( wp_get_referer() ? wp_get_referer() : admin_url() );
		exit;
	}

	/**
	 * The address of the "Refresh now" action.
	 *
	 * @return string
	 */
	public static function refresh_url() {
		return wp_nonce_url( admin_url( 'admin-post.php?action=trackpluse_refresh' ), 'trackpluse_refresh' );
	}

	/**
	 * The settings page's styles and pickers, on that page only.
	 *
	 * @param string $hook The admin screen.
	 */
	public static function assets( $hook ) {
		if ( 'settings_page_trackpluse' !== $hook ) {
			return;
		}

		wp_enqueue_style( 'trackpluse-settings', TRACKPLUSE_URL . 'assets/settings.css', array(), TRACKPLUSE_VERSION );
		wp_enqueue_script( 'trackpluse-settings', TRACKPLUSE_URL . 'assets/settings.js', array( 'wp-a11y', 'wp-api-fetch', 'wp-i18n', 'wp-url' ), TRACKPLUSE_VERSION, array( 'in_footer' => true ) );
		wp_set_script_translations( 'trackpluse-settings', 'trackpluse' );
	}

	/**
	 * The settings page.
	 */
	public static function page() {
		if ( ! current_user_can( 'manage_options' ) ) {
			return;
		}

		$settings = self::get();
		?>
		<div class="wrap trackpluse-settings">
			<div class="trackpluse-hero">
				<svg class="trackpluse-mark" viewBox="0 0 64 64" width="48" height="48" aria-hidden="true" focusable="false">
					<rect width="64" height="64" rx="16" fill="#131922" />
					<rect x="15" y="17" width="34" height="8" rx="4" fill="#fbb040" />
					<rect x="15" y="29" width="26" height="8" rx="4" fill="#ffffff" />
					<rect x="15" y="41" width="17" height="8" rx="4" fill="#7b8cff" />
				</svg>
				<div>
					<h1><?php esc_html_e( 'TrackPluse', 'trackpluse' ); ?></h1>
					<p><?php esc_html_e( 'Your plugins’ and themes’ WordPress.org figures, on your dashboard and on your site.', 'trackpluse' ); ?></p>
				</div>
			</div>
			<?php // WordPress moves notices ("Settings saved.") here, below the header. ?>
			<hr class="wp-header-end" />

			<div class="trackpluse-layout">
				<form class="trackpluse-card trackpluse-main" action="options.php" method="post">
					<?php settings_fields( 'trackpluse' ); ?>
					<h2><?php esc_html_e( 'What the dashboard shows', 'trackpluse' ); ?></h2>
					<p class="trackpluse-lead"><?php esc_html_e( 'Rank, active installs, downloads, rating, “Tested up to” and known vulnerabilities for each plugin and theme you choose.', 'trackpluse' ); ?></p>

					<div class="trackpluse-field">
						<label for="trackpluse-author"><?php esc_html_e( 'WordPress.org username', 'trackpluse' ); ?></label>
						<div class="trackpluse-prefixed">
							<span aria-hidden="true">profiles.wordpress.org/</span>
							<input type="text" id="trackpluse-author" name="<?php echo esc_attr( self::OPTION ); ?>[author]" value="<?php echo esc_attr( $settings['author'] ); ?>" placeholder="<?php esc_attr_e( 'jordanlee', 'trackpluse' ); ?>" autocomplete="off" />
						</div>
						<p class="description"><?php esc_html_e( 'Every plugin and theme published under this profile. Leave it empty to list slugs only.', 'trackpluse' ); ?></p>
					</div>

					<div class="trackpluse-columns">
						<div class="trackpluse-field">
							<label for="trackpluse-plugins"><?php esc_html_e( 'Other plugins', 'trackpluse' ); ?></label>
							<textarea id="trackpluse-plugins" class="code" rows="4" name="<?php echo esc_attr( self::OPTION ); ?>[plugins]" placeholder="contact-form-7" data-trackpluse-picker="plugin" data-max="<?php echo esc_attr( (string) self::MAX_SLUGS ); ?>"><?php echo esc_textarea( implode( "\n", $settings['plugins'] ) ); ?></textarea>
							<p class="description" data-trackpluse-hint="<?php esc_attr_e( 'Search by name, or paste a slug or WordPress.org address and press Enter: a rival, or one published under another profile.', 'trackpluse' ); ?>"><?php esc_html_e( 'Slugs or WordPress.org addresses, one per line: a rival, or one published under another profile.', 'trackpluse' ); ?></p>
						</div>
						<div class="trackpluse-field">
							<label for="trackpluse-themes"><?php esc_html_e( 'Other themes', 'trackpluse' ); ?></label>
							<textarea id="trackpluse-themes" class="code" rows="4" name="<?php echo esc_attr( self::OPTION ); ?>[themes]" placeholder="twentytwentyfive" data-trackpluse-picker="theme" data-max="<?php echo esc_attr( (string) self::MAX_SLUGS ); ?>"><?php echo esc_textarea( implode( "\n", $settings['themes'] ) ); ?></textarea>
							<p class="description" data-trackpluse-hint="<?php esc_attr_e( 'Search by name, or paste a slug or address and press Enter.', 'trackpluse' ); ?>"><?php esc_html_e( 'Theme slugs or addresses, one per line.', 'trackpluse' ); ?></p>
						</div>
					</div>

					<div class="trackpluse-field">
						<label for="trackpluse-shown"><?php esc_html_e( 'On the dashboard', 'trackpluse' ); ?></label>
						<div class="trackpluse-inline">
							<input type="number" id="trackpluse-shown" min="1" max="<?php echo esc_attr( (string) self::MAX_SHOWN ); ?>" name="<?php echo esc_attr( self::OPTION ); ?>[shown]" value="<?php echo esc_attr( (string) $settings['shown'] ); ?>" />
							<span><?php esc_html_e( 'plugins and themes, the most installed first', 'trackpluse' ); ?></span>
						</div>
						<p class="description"><?php esc_html_e( 'Raise it to see them all in the widget. With fewer, the widget links to the full list on TrackWP.', 'trackpluse' ); ?></p>
					</div>

					<div class="trackpluse-actions">
						<?php submit_button( __( 'Save changes', 'trackpluse' ), 'primary', 'submit', false ); ?>
						<a class="button" href="<?php echo esc_url( self::refresh_url() ); ?>"><?php esc_html_e( 'Refresh figures now', 'trackpluse' ); ?></a>
					</div>
				</form>

				<aside class="trackpluse-side">
					<div class="trackpluse-card">
						<h2><?php esc_html_e( 'On your site', 'trackpluse' ); ?></h2>
						<p>
							<?php
							printf(
								/* translators: %s: the block's name. */
								esc_html__( 'Add the %s block to any page, or use the shortcode:', 'trackpluse' ),
								'<strong>' . esc_html__( 'WordPress.org stats', 'trackpluse' ) . '</strong>'
							);
							?>
						</p>
						<code class="trackpluse-code">[trackpluse_stats slug="your-plugin"]</code>
						<p class="description"><?php esc_html_e( 'Your server fetches the figures; visitors never contact TrackWP.', 'trackpluse' ); ?></p>
					</div>

					<div class="trackpluse-card">
						<h2><?php esc_html_e( 'Where the figures come from', 'trackpluse' ); ?></h2>
						<p><?php esc_html_e( 'TrackWP records the whole WordPress.org directory every day. Figures are kept here for six hours, then fetched again.', 'trackpluse' ); ?></p>
					</div>

					<div class="trackpluse-card trackpluse-card-accent">
						<h2><?php esc_html_e( 'Want the full picture?', 'trackpluse' ); ?></h2>
						<p><?php esc_html_e( 'TrackWP also tracks where you rank for each search, alerts you when anything changes, and shows what would move you up.', 'trackpluse' ); ?></p>
						<a class="button" href="https://trackwp.com/" target="_blank" rel="noopener"><?php esc_html_e( 'Visit TrackWP', 'trackpluse' ); ?></a>
					</div>
				</aside>
			</div>
		</div>
		<?php
	}
}