<?php
/**
 * Advanced Settings Fields file.
 *
 * @package Activitypub
 */

namespace Activitypub\WP_Admin;

use Activitypub\Options;

/**
 * Advanced Settings Fields class.
 */
class Advanced_Settings_Fields {

	/**
	 * Initialize.
	 *
	 * @return void
	 */
	public static function init() {
		\add_action( 'load-settings_page_activitypub', array( self::class, 'register_advanced_fields' ) );
	}

	/**
	 * Register settings.
	 *
	 * @return void
	 */
	public static function register_advanced_fields() {
		\add_settings_section(
			'activitypub_advanced_settings',
			\__( 'Advanced Settings', 'activitypub' ),
			array( self::class, 'render_advanced_settings_section' ),
			'activitypub_advanced_settings'
		);

		if ( ! Options::is_distribution_mode_locked() ) {
			\add_settings_field(
				'activitypub_distribution_mode',
				\__( 'Distribution Mode', 'activitypub' ),
				array( self::class, 'render_distribution_mode_field' ),
				'activitypub_advanced_settings',
				'activitypub_advanced_settings'
			);

			// phpcs:ignore WordPress.Security.NonceVerification.Recommended
			$current_tab = isset( $_GET['tab'] ) ? \sanitize_key( \wp_unslash( $_GET['tab'] ) ) : '';
			if ( 'advanced' === $current_tab ) {
				\wp_enqueue_script(
					'activitypub-distribution-mode',
					\plugins_url( 'assets/js/activitypub-distribution-mode.js', ACTIVITYPUB_PLUGIN_FILE ),
					array(),
					ACTIVITYPUB_PLUGIN_VERSION,
					true
				);
			}
		}

		if ( ! \defined( 'ACTIVITYPUB_SEND_VARY_HEADER' ) ) {
			\add_settings_field(
				'activitypub_vary_header',
				\__( 'Vary Header', 'activitypub' ),
				array( self::class, 'render_vary_header_field' ),
				'activitypub_advanced_settings',
				'activitypub_advanced_settings',
				array( 'label_for' => 'activitypub_vary_header' )
			);
		}

		\add_settings_field(
			'activitypub_content_negotiation',
			\__( 'Content Negotiation', 'activitypub' ),
			array( self::class, 'render_content_negotiation_field' ),
			'activitypub_advanced_settings',
			'activitypub_advanced_settings',
			array( 'label_for' => 'activitypub_content_negotiation' )
		);

		if ( ! \defined( 'ACTIVITYPUB_AUTHORIZED_FETCH' ) ) {
			\add_settings_field(
				'activitypub_authorized_fetch',
				\__( 'Authorized Fetch', 'activitypub' ),
				array( self::class, 'render_authorized_fetch_field' ),
				'activitypub_advanced_settings',
				'activitypub_advanced_settings',
				array( 'label_for' => 'activitypub_authorized_fetch' )
			);
		}

		\add_settings_field(
			'activitypub_rfc9421_signature',
			\__( 'Modern Signature Format', 'activitypub' ),
			array( self::class, 'render_rfc9421_signature_field' ),
			'activitypub_advanced_settings',
			'activitypub_advanced_settings',
			array( 'label_for' => 'activitypub_rfc9421_signature' )
		);

		\add_settings_field(
			'activitypub_following_ui',
			\__( 'Following User Interface', 'activitypub' ),
			array( self::class, 'render_following_ui_field' ),
			'activitypub_advanced_settings',
			'activitypub_advanced_settings',
			array( 'label_for' => 'activitypub_following_ui' )
		);

		// Only offer the Reader opt-in where the app can actually boot (WordPress 7.0+).
		if ( App::is_supported() ) {
			\add_settings_field(
				'activitypub_reader_ui',
				\__( 'Reader', 'activitypub' ),
				array( self::class, 'render_reader_field' ),
				'activitypub_advanced_settings',
				'activitypub_advanced_settings',
				array( 'label_for' => 'activitypub_reader_ui' )
			);
		}

		\add_settings_field(
			'activitypub_api',
			\__( 'ActivityPub API', 'activitypub' ),
			array( self::class, 'render_api_field' ),
			'activitypub_advanced_settings',
			'activitypub_advanced_settings',
			array( 'label_for' => 'activitypub_api' )
		);

		\add_settings_field(
			'activitypub_object_type',
			\__( 'Activity-Object-Type', 'activitypub' ),
			array( self::class, 'render_object_type_field' ),
			'activitypub_advanced_settings',
			'activitypub_advanced_settings',
			array( 'label_for' => 'activitypub_object_type' )
		);
	}

	/**
	 * Render Advanced Settings Section.
	 *
	 * @return void
	 */
	public static function render_advanced_settings_section() {
		?>
		<p>
			<?php
			$allowed_html = array(
				'a' => array(
					'href'   => true,
					'target' => true,
				),
			);
			echo \wp_kses( \__( 'Advanced settings allow deep customization but can affect your site&#8217;s functionality, security, or performance if misconfigured. Only proceed if you fully understand the changes, and always back up your site beforehand. If unsure, consult <a href="https://github.com/Automattic/wordpress-activitypub/tree/trunk/docs" target="_blank">documentation</a> or seek <a href="https://wordpress.org/support/plugin/activitypub/" target="_blank">expert advice</a>.', 'activitypub' ), $allowed_html );
			?>
		</p>
		<?php
	}

	/**
	 * Render vary header field.
	 *
	 * @return void
	 */
	public static function render_vary_header_field() {
		$value = \get_option( 'activitypub_vary_header', '1' );
		?>
		<p>
			<label>
				<input type="checkbox" id="activitypub_vary_header" name="activitypub_vary_header" value="1" <?php \checked( '1', $value ); ?> />
				<?php echo \wp_kses( \__( 'Help prevent incorrect caching of ActivityPub responses.', 'activitypub' ), array( 'code' => array() ) ); ?>
			</label>
		</p>
		<p class="description">
			<?php \esc_html_e( 'Enable this if you notice your site showing technical content instead of normal web pages, or if your ActivityPub connections seem unreliable. This setting helps your site deliver the right format of content to different services automatically.', 'activitypub' ); ?>
		</p>
		<?php
	}

	/**
	 * Render content negotiation field.
	 *
	 * @return void
	 */
	public static function render_content_negotiation_field() {
		$value = \get_option( 'activitypub_content_negotiation', '1' );
		?>
		<p>
			<label>
				<input type="checkbox" id="activitypub_content_negotiation" name="activitypub_content_negotiation" value="1" <?php \checked( '1', $value ); ?> />
				<?php \esc_html_e( 'Enable content negotiation for browsers and Fediverse services.', 'activitypub' ); ?>
			</label>
		</p>
		<p class="description">
			<?php \esc_html_e( 'Content negotiation ensures your site displays regular web pages to browsers and machine-readable data to Fediverse services. Disable this if your site shows raw technical data to visitors or if ActivityPub connections have issues.', 'activitypub' ); ?>
		</p>
		<?php
	}

	/**
	 * Render use Authorized Fetch field.
	 *
	 * @return void
	 */
	public static function render_authorized_fetch_field() {
		$value = \get_option( 'activitypub_authorized_fetch', '0' );
		?>
		<p>
			<label>
				<input type="checkbox" id="activitypub_authorized_fetch" name="activitypub_authorized_fetch" value="1" <?php \checked( '1', $value ); ?> />
				<?php \esc_html_e( 'Require HTTP signature authentication on ActivityPub representations of public posts and profiles.', 'activitypub' ); ?>
			</label>
		</p>
		<p class="description">
			<?php \esc_html_e( '⚠ Secure mode has its limitations, which is why it is not enabled by default. It is not fully supported by all software in the fediverse, and some features may break, especially when interacting with Mastodon servers older than version 3.0. Additionally, since it requires authentication for public content, caching is not possible, leading to higher computational costs.', 'activitypub' ); ?>
		</p>
		<p class="description">
			<?php \esc_html_e( '⚠ Secure mode does not hide the HTML representations of public posts and profiles. While HTML is a less consistent format (that potentially changes often) compared to first-class ActivityPub representations or the REST API, it still poses a potential risk for content scraping.', 'activitypub' ); ?>
		</p>
		<?php
	}

	/**
	 * Render RFC-9421 signature field.
	 *
	 * @return void
	 */
	public static function render_rfc9421_signature_field() {
		$value = \get_option( 'activitypub_rfc9421_signature', '1' );
		?>
		<p>
			<label>
				<input type="checkbox" id="activitypub_rfc9421_signature" name="activitypub_rfc9421_signature" value="1" <?php \checked( '1', $value ); ?> />
				<?php \esc_html_e( 'Use modern signature format for Fediverse communications.', 'activitypub' ); ?>
			</label>
		</p>
		<p class="description">
			<?php \esc_html_e( 'Enables a newer standard (RFC-9421) for verifying your site&#8217;s identity when communicating with other Fediverse platforms. This alternative signature format may cause compatibility issues with platforms that do not support it. Keep disabled if you experience connection problems with certain Fediverse servers.', 'activitypub' ); ?>
		</p>
		<?php
	}

	/**
	 * Render show following UI field.
	 *
	 * @return void
	 */
	public static function render_following_ui_field() {
		$value = \get_option( 'activitypub_following_ui', '0' );
		?>
		<p>
			<label>
				<input type="checkbox" id="activitypub_following_ui" name="activitypub_following_ui" value="1" <?php \checked( '1', $value ); ?> />
				Display the "Following" interface in the admin menus and settings.
			</label>
		</p>
		<p class="description">
			Activates the Following feature, letting you follow other ActivityPub accounts directly from your WordPress site. Adds a "Following" menu and tab to manage followed accounts.
		</p>
		<p class="description">
			⚠ A reader interface is not available yet. Please follow accounts sparingly—you won't be able to see their posts or shares. This feature is intended for testing the follow functionality. Once fully implemented, it will be enabled by default.
		</p>
		<?php
	}

	/**
	 * Render reader field.
	 *
	 * @return void
	 */
	public static function render_reader_field() {
		$value = \get_option( 'activitypub_reader_ui', '0' );
		?>
		<p>
			<label>
				<input type="checkbox" id="activitypub_reader_ui" name="activitypub_reader_ui" value="1" <?php \checked( '1', $value ); ?> />
				Enable the Reader to view posts from accounts you follow.
			</label>
		</p>
		<p class="description">
			Adds a "Social Web" interface where you can read posts and shares from accounts you follow. Also enables the Following feature. Look for it in Dashboard > Social Web.
		</p>
		<p class="description">
			⚠ This feature is experimental and may change significantly in future updates.
		</p>
		<?php
	}

	/**
	 * Render ActivityPub API field.
	 *
	 * @return void
	 */
	public static function render_api_field() {
		$value = \get_option( 'activitypub_api', '0' );
		?>
		<p>
			<label>
				<input type="checkbox" id="activitypub_api" name="activitypub_api" value="1" <?php \checked( '1', $value ); ?> />
				<?php \esc_html_e( 'Enable the ActivityPub API to connect third-party clients.', 'activitypub' ); ?>
			</label>
		</p>
		<p class="description">
			<?php \esc_html_e( 'Enables OAuth 2.0 authentication so third-party ActivityPub clients (like Mastodon apps) can post, follow, and interact on your behalf. You can manage connected apps from your profile page.', 'activitypub' ); ?>
		</p>
		<p class="description">
			<?php
			echo \wp_kses(
				\__( '⚠ This feature is experimental and may change significantly in future updates.', 'activitypub' ),
				'data'
			);
			?>
		</p>
		<?php
	}

	/**
	 * Render object type field.
	 *
	 * @return void
	 */
	public static function render_object_type_field() {
		$value = \get_option( 'activitypub_object_type', ACTIVITYPUB_DEFAULT_OBJECT_TYPE );
		?>
		<p>
			<label>
				<input type="checkbox" name="activitypub_object_type" value="note" <?php \checked( 'note', $value ); ?> />
				<?php \esc_html_e( 'Use Template Tags instead of letting the plugin choose the best possible format for you.', 'activitypub' ); ?>
			</label>
		</p>
		<p class="description">
			<?php \esc_html_e( 'This is mainly for backwards compatibility. It is not recommended to use the Template Tags, because it might not be supported in future versions.', 'activitypub' ); ?>
		</p>
		<?php
	}

	/**
	 * Render distribution mode field.
	 *
	 * @since 9.0.0
	 *
	 * @return void
	 */
	public static function render_distribution_mode_field() {
		$mode = \get_option( 'activitypub_distribution_mode', 'default' );

		// Use centralized presets and add the custom option for the UI.
		$modes           = Options::get_distribution_modes();
		$modes['custom'] = array(
			'label'       => \__( 'Custom', 'activitypub' ),
			'description' => \__( 'Configure batch size and delay manually.', 'activitypub' ),
		);

		// Custom fields fall back to the default preset values when unset.
		$custom_batch = \get_option( 'activitypub_custom_batch_size', $modes['default']['batch_size'] );
		$custom_pause = \get_option( 'activitypub_custom_batch_pause', $modes['default']['pause'] );

		?>
		<fieldset>
			<legend class="screen-reader-text"><span><?php \esc_html_e( 'Distribution Mode', 'activitypub' ); ?></span></legend>
			<p class="description">
				<?php \esc_html_e( 'Controls how quickly the plugin sends posts to followers. Slower modes reduce server load but delay delivery.', 'activitypub' ); ?>
			</p>
			<?php
			foreach ( $modes as $key => $data ) {
				?>
				<p>
					<label>
						<input type="radio" name="activitypub_distribution_mode" value="<?php echo \esc_attr( $key ); ?>" <?php \checked( $key, $mode ); ?> />
						<strong><?php echo \esc_html( $data['label'] ); ?></strong>
					</label>
					<br />
					<?php echo \wp_kses( $data['description'], array( 'code' => array() ) ); ?>
				</p>
				<?php
			}

			/*
			 * The custom fields are rendered visible so they remain usable when
			 * JavaScript is disabled. The accompanying script collapses them on
			 * page load when the active mode is not "custom" and toggles them
			 * as the radio changes.
			 */
			?>
			<ul id="activitypub-custom-distribution-fields">
				<li>
					<label>
						<?php \esc_html_e( 'Batch size:', 'activitypub' ); ?>
						<input type="number" name="activitypub_custom_batch_size" value="<?php echo \esc_attr( $custom_batch ); ?>" min="1" step="1" class="small-text" />
					</label>
				</li>
				<li>
					<label>
						<?php \esc_html_e( 'Pause between batches (seconds):', 'activitypub' ); ?>
						<input type="number" name="activitypub_custom_batch_pause" value="<?php echo \esc_attr( $custom_pause ); ?>" min="0" step="1" class="small-text" />
					</label>
				</li>
			</ul>
			<p class="description">
				<?php \esc_html_e( 'With many followers, slower modes may delay delivery. For example, Eco Mode with 1,000 followers takes approximately 25 minutes per post.', 'activitypub' ); ?>
			</p>
		</fieldset>
		<?php
	}
}