<?php
/**
 * User Activity Logger (Feature 5)
 *
 * @package User_ID
 */

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

class User_ID_Activity_Logger {

	/**
	 * Constructor.
	 */
	public function __construct() {
		// Public log function
		add_action( 'user_id_activity', array( $this, 'log_activity' ), 10, 3 );

		// Core hooks to track
		add_action( 'wp_login', array( $this, 'log_login' ), 10, 2 );
		add_action( 'wp_logout', array( $this, 'log_logout' ) );
		add_action( 'profile_update', array( $this, 'log_profile_update' ), 10, 2 );
		add_action( 'set_user_role', array( $this, 'log_set_user_role' ), 10, 3 );
		add_action( 'after_password_reset', array( $this, 'log_password_reset' ) );

		// Scheduled DB Cleanup Routine
		add_action( 'user_id_daily_cleanup', array( $this, 'cleanup_old_logs' ) );
		if ( ! wp_next_scheduled( 'user_id_daily_cleanup' ) ) {
			wp_schedule_event( time(), 'daily', 'user_id_daily_cleanup' );
		}

		// Content modifications
		add_action( 'transition_post_status', array( $this, 'log_post_transition' ), 10, 3 );
		add_action( 'deleted_post', array( $this, 'log_post_deleted' ), 10, 2 );
		add_action( 'add_attachment', array( $this, 'log_attachment_added' ) );
		add_action( 'delete_attachment', array( $this, 'log_attachment_deleted' ) );

		// Plugins, Themes, and Core Updates
		add_action( 'activated_plugin', array( $this, 'log_plugin_activated' ), 10, 2 );
		add_action( 'deactivated_plugin', array( $this, 'log_plugin_deactivated' ), 10, 2 );
		add_action( 'switch_theme', array( $this, 'log_theme_switched' ), 10, 3 );
		add_action( 'upgrader_process_complete', array( $this, 'log_upgrader_process' ), 10, 2 );

		// Settings and Options
		add_action( 'updated_option', array( $this, 'log_option_updated' ), 10, 3 );

		// UI display hooked into User Debug Page pane
		add_action( 'user_id_debug_user_panes', array( $this, 'render_activity_log_pane' ), 20 );
	}

	/**
	 * Logged events in current request to prevent duplicates.
	 *
	 * @var array
	 */
	private $logged_events = array();

	/**
	 * Log a generic activity.
	 *
	 * @param int    $user_id       The user ID.
	 * @param string $event_type    The type of event (e.g., login, password_reset).
	 * @param string $event_details Detailed description context.
	 */
	public function log_activity( $user_id, $event_type, $event_details = '' ) {
		global $wpdb;

		if ( ! $user_id ) {
			return; // Can't log an activity without a user context
		}

		$event_hash = md5( $user_id . '_' . $event_type . '_' . $event_details );
		if ( isset( $this->logged_events[ $event_hash ] ) ) {
			return; // Already logged this exact event in this request
		}
		$this->logged_events[ $event_hash ] = true;

		$table_name_activity = $wpdb->prefix . 'user_id_activity';
		// Skip logging if table doesn't exist yet (e.g., initial activation issues)
		// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
		if ( $wpdb->get_var( $wpdb->prepare( "SHOW TABLES LIKE %s", $table_name_activity ) ) !== $table_name_activity ) {
			return;
		}

		// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery
		$wpdb->insert(
			$table_name_activity,
			array(
				'user_id'       => $user_id,
				'event_type'    => sanitize_text_field( $event_type ),
				'event_details' => sanitize_text_field( wp_unslash( $event_details ) ),
			),
			array( '%d', '%s', '%s' )
		);
	}

	// --- Hook Handlers ---

	public function log_login( $user_login, $user ) {
		// Distinguish from impersonation: If currently impersonating during wp_login hook?
		// Note wp_login usually fires for standard logins, but wp_set_auth_cookie also handles impersonation.
		// Actually, our impersonation logic clears cookies, sets them, but doesn't call `wp_login` natively, handled via standard flows if required.
		// So this is isolated standard login correctly.
		$this->log_activity( $user->ID, 'login', 'User logged in' );
	}

	public function log_logout() {
		$user_id = get_current_user_id();
		if ( $user_id ) {
			$this->log_activity( $user_id, 'logout', 'User logged out' );
		}
	}

	public function log_profile_update( $user_id, $old_userdata ) {
		$this->log_activity( $user_id, 'profile_update', 'User profile was updated' );
	}

	public function log_set_user_role( $user_id, $role, $old_roles ) {
		$this->log_activity( $user_id, 'role_change', sprintf( 'Role changed from %s to %s', implode( ',', $old_roles ), $role ) );
	}

	public function log_password_reset( $user ) {
		$this->log_activity( $user->ID, 'password_reset', 'User password was reset' );
	}

	/**
	 * Deletes activity logs older than 30 days.
	 */
	public function cleanup_old_logs() {
		global $wpdb;

		$table_name_activity = $wpdb->prefix . 'user_id_activity';
		// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
		if ( $wpdb->get_var( $wpdb->prepare( "SHOW TABLES LIKE %s", $table_name_activity ) ) === $table_name_activity ) {
			// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.NotPrepared, PluginCheck.Security.DirectDB.UnescapedDBParameter
			$wpdb->query( "DELETE FROM " . $table_name_activity . " WHERE created_at < DATE_SUB(NOW(), INTERVAL 30 DAY)" );
		}
	}

	// --- Comprehensive Hook Handlers ---

	public function log_post_transition( $new_status, $old_status, $post ) {
		$user_id = get_current_user_id();
		if ( ! $user_id || ( defined( 'DOING_AUTOSAVE' ) && DOING_AUTOSAVE ) || 'revision' === $post->post_type ) {
			return;
		}

		if ( $new_status === $old_status ) {
			if ( 'publish' === $new_status ) {
				$this->log_activity( $user_id, 'post_updated', sprintf( 'Updated %s: "%s" (ID: %d)', $post->post_type, $post->post_title, $post->ID ) );
			}
			return;
		}

		if ( 'publish' === $new_status && 'publish' !== $old_status ) {
			$this->log_activity( $user_id, 'post_published', sprintf( 'Published %s: "%s" (ID: %d)', $post->post_type, $post->post_title, $post->ID ) );
		} elseif ( 'trash' === $new_status ) {
			$this->log_activity( $user_id, 'post_trashed', sprintf( 'Trashed %s: "%s" (ID: %d)', $post->post_type, $post->post_title, $post->ID ) );
		} elseif ( 'trash' === $old_status && 'publish' === $new_status ) {
			$this->log_activity( $user_id, 'post_restored', sprintf( 'Restored %s: "%s" (ID: %d)', $post->post_type, $post->post_title, $post->ID ) );
		}
	}

	public function log_post_deleted( $post_id, $post ) {
		$user_id = get_current_user_id();
		if ( ! $user_id || 'revision' === $post->post_type ) {
			return;
		}
		$this->log_activity( $user_id, 'post_deleted', sprintf( 'Permanently deleted %s: "%s" (ID: %d)', $post->post_type, $post->post_title, $post_id ) );
	}

	public function log_attachment_added( $post_id ) {
		$user_id = get_current_user_id();
		if ( ! $user_id ) return;
		$title = get_the_title( $post_id );
		$this->log_activity( $user_id, 'attachment_uploaded', sprintf( 'Uploaded media: "%s" (ID: %d)', $title, $post_id ) );
	}

	public function log_attachment_deleted( $post_id ) {
		$user_id = get_current_user_id();
		if ( ! $user_id ) return;
		$post = get_post( $post_id );
		$title = $post ? $post->post_title : 'Unknown';
		$this->log_activity( $user_id, 'attachment_deleted', sprintf( 'Deleted media: "%s" (ID: %d)', $title, $post_id ) );
	}

	public function log_plugin_activated( $plugin, $network_wide ) {
		$user_id = get_current_user_id();
		if ( ! $user_id ) return;
		$this->log_activity( $user_id, 'plugin_activated', sprintf( 'Activated plugin: %s%s', $plugin, $network_wide ? ' (Network wide)' : '' ) );
	}

	public function log_plugin_deactivated( $plugin, $network_wide ) {
		$user_id = get_current_user_id();
		if ( ! $user_id ) return;
		$this->log_activity( $user_id, 'plugin_deactivated', sprintf( 'Deactivated plugin: %s%s', $plugin, $network_wide ? ' (Network wide)' : '' ) );
	}

	public function log_theme_switched( $new_name, $new_theme, $old_theme ) {
		$user_id = get_current_user_id();
		if ( ! $user_id ) return;
		$this->log_activity( $user_id, 'theme_switched', sprintf( 'Switched theme to: %s', $new_name ) );
	}

	public function log_upgrader_process( $upgrader_object, $options ) {
		$user_id = get_current_user_id();
		if ( ! $user_id || empty( $options['action'] ) || empty( $options['type'] ) ) return;
		
		$action = $options['action'];
		$type = $options['type'];
		$details = sprintf( 'Performed %s on %s', $action, $type );

		if ( isset( $options['plugins'] ) && is_array( $options['plugins'] ) ) {
			$details .= ': ' . implode( ', ', $options['plugins'] );
		} elseif ( isset( $options['plugin'] ) ) {
			$details .= ': ' . $options['plugin'];
		} elseif ( isset( $options['themes'] ) && is_array( $options['themes'] ) ) {
			$details .= ': ' . implode( ', ', $options['themes'] );
		} elseif ( isset( $options['theme'] ) ) {
			$details .= ': ' . $options['theme'];
		}

		$this->log_activity( $user_id, 'system_update', $details );
	}

	public function log_option_updated( $option, $old_value, $value ) {
		$user_id = get_current_user_id();
		if ( ! $user_id ) return;
		
		// Filter out noisy, temporary, or plugin-internal options
		if ( 
			strpos( $option, '_transient' ) === 0 || 
			strpos( $option, '_site_transient' ) === 0 || 
			strpos( $option, 'cron' ) === 0 || 
			strpos( $option, 'auto_updater' ) === 0 || 
			strpos( $option, 'recently_edited' ) === 0 || 
			strpos( $option, 'wdp_un_' ) === 0 || 
			$option === 'rewrite_rules' || 
			$option === 'user_id_db_version' ||
			$option === 'active_plugins' ||
			$option === 'recently_activated' ||
			$option === 'uninstall_plugins'
		) {
			return;
		}
		
		$this->log_activity( $user_id, 'setting_updated', sprintf( 'Updated setting: %s', $option ) );
	}

	// --- UI Display ---

	/**
	 * Render timeline pane for user.
	 *
	 * @param int $user_id The user ID.
	 */
	public function render_activity_log_pane( $user_id ) {
		global $wpdb;
		$table_name_activity = $wpdb->prefix . 'user_id_activity';

		// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
		if ( $wpdb->get_var( $wpdb->prepare( "SHOW TABLES LIKE %s", $table_name_activity ) ) !== $table_name_activity ) {
			return;
		}

		// phpcs:disable WordPress.DB.PreparedSQL.NotPrepared
		// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, PluginCheck.Security.DirectDB.UnescapedDBParameter
		$activities = $wpdb->get_results( $wpdb->prepare( "
			SELECT * FROM " . $table_name_activity . " 
			WHERE user_id = %d 
			ORDER BY created_at DESC 
			LIMIT 50
		", $user_id ) );
		// phpcs:enable

		?>
		<div class="user-id-card">
			<h3 class="user-id-card-header"><?php esc_html_e( 'User Activity Log (Last 50)', 'user-id' ); ?></h3>
			<div class="user-id-card-body">
				<?php if ( empty( $activities ) ) : ?>
					<p><?php esc_html_e( 'No recent activity recorded.', 'user-id' ); ?></p>
				<?php else : ?>
					<ul class="user-id-timeline">
						<?php foreach ( $activities as $activity ) : ?>
							<li>
								<div class="user-id-timeline-date">
									<?php echo esc_html( wp_date( get_option( 'date_format' ) . ' ' . get_option( 'time_format' ), strtotime( get_date_from_gmt( $activity->created_at ) ) ) ); ?>
									- <strong><?php echo esc_html( ucfirst( str_replace( '_', ' ', $activity->event_type ) ) ); ?></strong>
								</div>
								<div class="user-id-timeline-content">
									<?php echo esc_html( $activity->event_details ); ?>
								</div>
							</li>
						<?php endforeach; ?>
					</ul>
				<?php endif; ?>
			</div>
		</div>
		<?php
	}
}

new User_ID_Activity_Logger();