<?php

declare(strict_types=1);

namespace AdsDestroyer\Settings;

use AdsDestroyer\Security\NonceService;
use AdsDestroyer\Security\CapabilitiesService;
use AdsDestroyer\Security\SanitizerService;
use AdsDestroyer\Logging\Logger;
use AdsDestroyer\Admin\RulesListTable;

/**
 * Settings Page for AdsDestroyer plugin.
 * 
 * This class handles the admin settings page, including
 * form rendering, data processing, and rule management.
 * 
 * @since 1.0.0
 */
final class SettingsPage {
    
    private OptionsRepository $options_repository;
    private NonceService $nonce_service;
    private CapabilitiesService $capabilities_service;
    private Logger $logger;
    
    private string $menu_slug = 'ads-destroyer';
    
    public function __construct(
        OptionsRepository $options_repository,
        NonceService $nonce_service,
        CapabilitiesService $capabilities_service,
        Logger $logger
    ) {
        $this->options_repository = $options_repository;
        $this->nonce_service = $nonce_service;
        $this->capabilities_service = $capabilities_service;
        $this->logger = $logger;
    }
    
    /**
     * Initialize settings page.
     */
    public function init(): void {
        add_action('admin_menu', [$this, 'add_admin_menu']);
        add_action('admin_enqueue_scripts', [$this, 'enqueue_admin_assets']);
        add_action('admin_post_adsd_update_general', [$this, 'handle_update_general']);
        add_action('admin_post_adsd_reset_rules', [$this, 'handle_reset_rules']);
        add_action('wp_ajax_adsd_update_rule', [$this, 'handle_ajax_update_rule']);
        add_action('wp_ajax_adsd_delete_rule', [$this, 'handle_ajax_delete_rule']);
        add_action('wp_ajax_adsd_toggle_rule', [$this, 'handle_ajax_toggle_rule']);
        add_action('wp_ajax_adsd_get_latest_log', [$this, 'handle_get_latest_log']);
        add_action('wp_ajax_adsd_download_latest_log', [$this, 'handle_download_latest_log']);
        add_action('wp_ajax_adsd_clear_all_logs', [$this, 'handle_clear_all_logs']);
        add_action('wp_ajax_adsd_log_js_message', [$this, 'handle_log_js_message']);
    }
    
    /**
     * Add admin menu item.
     */
    public function add_admin_menu(): void {
        add_options_page(
            __('AdsDestroyer', 'ads-destroyer'),
            __('AdsDestroyer', 'ads-destroyer'),
            'manage_options',
            $this->menu_slug,
            [$this, 'render_settings_page']
        );
    }
    
    /**
     * Enqueue admin scripts and styles for settings page.
     */
    public function enqueue_admin_assets(): void {
        // Only load on our settings page
        $screen = get_current_screen();
        if (!$screen || $screen->id !== 'settings_page_' . $this->menu_slug) {
            return;
        }

        // Enqueue admin settings CSS
        wp_enqueue_style(
            'adsd-admin-settings-style',
            plugin_dir_url(\ADSD_PLUGIN_FILE) . 'build/css/admin-settings-style.min.css',
            [],
            ADSD_PLUGIN_VERSION
        );

        // Enqueue admin settings JavaScript
        wp_enqueue_script(
            'adsd-admin-settings',
            plugin_dir_url(\ADSD_PLUGIN_FILE) . 'build/js/admin-settings.js',
            ['jquery'],
            ADSD_PLUGIN_VERSION,
            true
        );
        
        // Localize script with AJAX URL
        wp_localize_script('adsd-admin-settings', 'adsd_ajax', [
            'ajaxurl' => admin_url('admin-ajax.php'),
            'nonce' => wp_create_nonce('adsd_update_rule_ajax'),
        ]);
    }
    
    /**
     * Render settings page.
     */
    public function render_settings_page(): void {
        if (!current_user_can('manage_options')) {
            wp_die(esc_html__('You do not have sufficient permissions to access this page.', 'ads-destroyer'));
        }
        
        $opts = $this->options_repository->get_all();
        
        // Sanitize tab parameter with allowed values
        $allowed_tabs = ['rules', 'settings', 'logs'];
        // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- URL parameter, not form submission
        $active_tab = isset($_GET['tab']) ? sanitize_text_field(wp_unslash($_GET['tab'])) : 'rules';
        if (!in_array($active_tab, $allowed_tabs, true)) {
            $active_tab = 'rules';
        }
        ?>
        <div class="wrap">
            <h1><?php echo esc_html__('AdsDestroyer', 'ads-destroyer'); ?></h1>
            <?php $this->render_admin_notices(); ?>
            
            <!-- Tab Navigation -->
            <nav class="nav-tab-wrapper wp-clearfix">
                <a href="<?php echo esc_url(admin_url('admin.php?page=ads-destroyer&tab=rules')); ?>" 
                   class="nav-tab <?php echo $active_tab === 'rules' ? 'nav-tab-active' : ''; ?>">
                    <?php echo esc_html__('Rules', 'ads-destroyer'); ?>
                </a>
                <a href="<?php echo esc_url(admin_url('admin.php?page=ads-destroyer&tab=settings')); ?>" 
                   class="nav-tab <?php echo $active_tab === 'settings' ? 'nav-tab-active' : ''; ?>">
                    <?php echo esc_html__('Settings', 'ads-destroyer'); ?>
                </a>
                <?php if (!empty($opts['logging']['enabled'])): ?>
                <a href="<?php echo esc_url(admin_url('admin.php?page=ads-destroyer&tab=logs')); ?>" 
                   class="nav-tab <?php echo $active_tab === 'logs' ? 'nav-tab-active' : ''; ?>">
                    <?php echo esc_html__('Logs', 'ads-destroyer'); ?>
                </a>
                <?php endif; ?>
            </nav>
            
            <!-- Tab Content -->
            <?php if ($active_tab === 'rules'): ?>
                <?php $this->render_rules_tab(); ?>
            <?php elseif ($active_tab === 'settings'): ?>
                <?php $this->render_settings_tab(); ?>
            <?php elseif ($active_tab === 'logs' && !empty($opts['logging']['enabled'])): ?>
                <?php $this->render_logs_tab(); ?>
            <?php endif; ?>
        </div>
        <?php
    }
    
    /**
     * Render rules tab content.
     */
    private function render_rules_tab(): void {
        // Show success message if rules were reset
        // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- URL parameter check, not form submission
        if (isset($_GET['updated']) && sanitize_text_field(wp_unslash($_GET['updated'])) === '1') {
            echo '<div class="notice notice-success is-dismissible"><p>' . esc_html__('All rules have been reset successfully.', 'ads-destroyer') . '</p></div>';
        }
        ?>
        <div class="adsd-tab-content">
            <h2><?php echo esc_html__('XPath Rules', 'ads-destroyer'); ?></h2>
            <p><?php echo esc_html__('Manage XPath rules for hiding elements on your website.', 'ads-destroyer'); ?></p>
            
            <?php $this->render_rules_table(); ?>
            
            <?php $this->render_instructions(); ?>
        </div>
        <?php
    }
    
    /**
     * Render settings tab content.
     */
    private function render_settings_tab(): void {
        $opts = $this->options_repository->get_all();
        
        // Show success message if settings were updated
        // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- URL parameter check, not form submission
        if (isset($_GET['updated']) && sanitize_text_field(wp_unslash($_GET['updated'])) === '1') {
            echo '<div class="notice notice-success is-dismissible"><p>' . esc_html__('Settings saved successfully.', 'ads-destroyer') . '</p></div>';
        }
        ?>
        <div class="adsd-tab-content">
            <h2><?php echo esc_html__('General Settings', 'ads-destroyer'); ?></h2>
            
            <form method="post" action="<?php echo esc_url(admin_url('admin-post.php')); ?>" 
                  class="adsd-settings-form">
                <?php wp_nonce_field('adsd_update_general'); ?>
                <input type="hidden" name="action" value="adsd_update_general"/>
                
                <table class="form-table" role="presentation">
                    <tbody>
                        <tr>
                            <th scope="row"><?php echo esc_html__('Admin Bar Button', 'ads-destroyer'); ?></th>
                            <td>
                                <label>
                                    <input type="checkbox" name="show_admin_bar_button" value="1" 
                                           <?php checked(empty($opts['ui']['show_admin_bar_button']) ? true : (bool)$opts['ui']['show_admin_bar_button']); ?> />
                                    <?php echo esc_html__('Show "Disable ad" button in the admin bar', 'ads-destroyer'); ?>
                                </label>
                                <p class="description">
                                    <?php echo esc_html__('Show the selector button in the admin bar for allowed roles.', 'ads-destroyer'); ?>
                                </p>
                            </td>
                        </tr>
                        
                        <tr>
                            <th scope="row"><?php echo esc_html__('Available Roles', 'ads-destroyer'); ?></th>
                            <td>
                                <div class="adsd-roles-box">
                                    <?php
                                    $editable_roles = function_exists('get_editable_roles') ? get_editable_roles() : [];
                                    $allowed_roles = (array)($opts['access']['roles_allowed'] ?? ['administrator']);
                                    foreach ($editable_roles as $role_key => $role_data) {
                                        $checked = in_array($role_key, $allowed_roles, true);
                                        $name = translate_user_role($role_data['name']);
                                        echo '<label class="adsd-role-item"><input type="checkbox" name="roles_allowed[]" value="' . esc_attr($role_key) . '" ' . checked($checked, true, false) . ' />' . esc_html($name) . '</label>';
                                    }
                                    ?>
                                </div>
                                <p class="description">
                                    <?php echo esc_html__('Choose which user roles can hide blocks and manage rules.', 'ads-destroyer'); ?>
                                </p>
                            </td>
                        </tr>
                        
                        <tr>
                            <th scope="row"><?php echo esc_html__('Logging', 'ads-destroyer'); ?></th>
                            <td>
                                <label>
                                    <input type="checkbox" name="logging_enabled" value="1" 
                                           <?php checked(!empty($opts['logging']['enabled'])); ?> />
                                    <?php echo esc_html__('Enable logging', 'ads-destroyer'); ?>
                                </label>
                                <p class="description">
                                    <?php echo esc_html__('Enable or disable writing plugin events to the log.', 'ads-destroyer'); ?>
                                </p>
                            </td>
                        </tr>
                        
                        <tr class="adsd-log-level-row" style="<?php echo empty($opts['logging']['enabled']) ? 'display: none;' : ''; ?>">
                            <th scope="row"><?php echo esc_html__('Log Levels', 'ads-destroyer'); ?></th>
                            <td>
                                <div class="adsd-log-levels-box">
                                    <?php
                                    $selected_levels = (array)($opts['logging']['levels'] ?? ['error']);
                                    $log_levels = [
                                        'debug' => __('Debug', 'ads-destroyer'),
                                        'info' => __('Info', 'ads-destroyer'),
                                        'warning' => __('Warning', 'ads-destroyer'),
                                        'error' => __('Error', 'ads-destroyer')
                                    ];
                                    
                                    foreach ($log_levels as $level => $label) {
                                        $checked = in_array($level, $selected_levels, true);
                                        echo '<label class="adsd-log-level-item"><input type="checkbox" name="log_levels[]" value="' . esc_attr($level) . '" ' . checked($checked, true, false) . ' />' . esc_html($label) . '</label>';
                                    }
                                    ?>
                                </div>
                                <p class="description">
                                    <?php echo esc_html__('Choose which log levels to record. Multiple levels can be selected.', 'ads-destroyer'); ?>
                                </p>
                            </td>
                        </tr>
                    </tbody>
                </table>
                
                <?php submit_button(esc_html__('Save Settings', 'ads-destroyer')); ?>
            </form>
        </div>
        <?php
    }
    
    /**
     * Render logs tab content.
     */
    private function render_logs_tab(): void {
        ?>
        <div class="adsd-tab-content">
            <h2><?php echo esc_html__('Plugin Logs', 'ads-destroyer'); ?></h2>
            <p><?php echo esc_html__('View and manage plugin log files.', 'ads-destroyer'); ?></p>
            
            <div class="adsd-logs-container">
                <div class="adsd-logs-actions">
                    <button type="button" class="button" id="adsd-refresh-logs">
                        <?php echo esc_html__('Refresh', 'ads-destroyer'); ?>
                    </button>
                    <button type="button" class="button" id="adsd-download-latest-log">
                        <?php echo esc_html__('Download Latest Log', 'ads-destroyer'); ?>
                    </button>
                    <button type="button" class="button button-secondary" id="adsd-clear-all-logs">
                        <?php echo esc_html__('Clear All Logs', 'ads-destroyer'); ?>
                    </button>
                </div>
                
                <div class="adsd-logs-content">
                    <div class="adsd-log-viewer">
                        <pre id="adsd-log-content"><?php echo esc_html__('Loading logs...', 'ads-destroyer'); ?></pre>
                    </div>
                </div>
            </div>
        </div>
        <?php
    }
    
    /**
     * Render instructions section.
     */
    private function render_instructions(): void {
        ?>
        <div class="adsd-instructions">
            <h3><?php echo esc_html__('Usage Instructions', 'ads-destroyer'); ?></h3>
            <ol>
                <li><?php echo esc_html__('Make sure your role is checked in "Available roles" and the "Disable ad" button is enabled in the admin bar.', 'ads-destroyer'); ?></li>
                <li><?php echo esc_html__('In the admin area, click the "Disable ad" button in the top toolbar.', 'ads-destroyer'); ?></li>
                <li><?php echo esc_html__('Hover to highlight the block you want to hide, click it, then confirm creating a rule.', 'ads-destroyer'); ?></li>
                <li><?php echo esc_html__('The rule will appear in the table below. Click "Edit" to modify XPath inline and save.', 'ads-destroyer'); ?></li>
                <li><?php echo esc_html__('Use "Activate/Deactivate" to toggle a rule, "Delete" to remove it, and "Reset all rules" to clear all rules.', 'ads-destroyer'); ?></li>
            </ol>
            <p class="description">
                <?php echo esc_html__('Tooltips are available when hovering over settings elements.', 'ads-destroyer'); ?>
            </p>
        </div>
        <?php
    }
    
    /**
     * Handle general settings update.
     */
    public function handle_update_general(): void {
        // Check nonce
        $nonce = sanitize_text_field(wp_unslash($_POST['_wpnonce'] ?? ''));
        if (!wp_verify_nonce($nonce, 'adsd_update_general')) {
            wp_die(esc_html__('Security check failed', 'ads-destroyer'));
        }
        
        // Check permissions
        if (!current_user_can('manage_options')) {
            wp_die(esc_html__('Insufficient permissions', 'ads-destroyer'));
        }
        
        $opts = $this->options_repository->get_all();
        
        // Update UI settings
        $opts['ui']['show_admin_bar_button'] = !empty($_POST['show_admin_bar_button']);
        
        // Update access settings
        // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- Array is sanitized via array_map
        $roles_allowed = isset($_POST['roles_allowed']) ? wp_unslash($_POST['roles_allowed']) : ['administrator'];
        $opts['access']['roles_allowed'] = array_map('sanitize_text_field', $roles_allowed);
        
        // Update logging settings
        $opts['logging']['enabled'] = !empty($_POST['logging_enabled']);
        // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- Array is sanitized via array_map
        $log_levels = isset($_POST['log_levels']) ? wp_unslash($_POST['log_levels']) : ['error'];
        $opts['logging']['levels'] = array_map('sanitize_text_field', $log_levels);
        
        $this->options_repository->save_all($opts);
        
        // Update logger settings
        if ($this->logger) {
            if ($opts['logging']['enabled']) {
                $this->logger->enable();
                $this->logger->set_log_levels($opts['logging']['levels']);
            } else {
                $this->logger->disable();
            }
        }
        
        // Add admin notice
        add_action('admin_notices', function() {
            echo '<div class="notice notice-success is-dismissible"><p>' . esc_html__('Settings saved successfully.', 'ads-destroyer') . '</p></div>';
        });
        
        wp_safe_redirect(add_query_arg(['updated' => '1'], admin_url('admin.php?page=ads-destroyer&tab=settings')));
        exit;
    }
    
    /**
     * Handle get latest log AJAX request.
     */
    public function handle_get_latest_log(): void {
        $nonce = sanitize_text_field(wp_unslash($_POST['_wpnonce'] ?? ''));
        if (!wp_verify_nonce($nonce, 'adsd_get_latest_log')) {
            wp_die(esc_html__('Security check failed', 'ads-destroyer'));
        }
        
        $latest_file = $this->logger->get_latest_log_file();
        
        if ($latest_file) {
            $content = $this->logger->read_log_file($latest_file, 1000);
            echo esc_html($content);
        } else {
            echo esc_html__('No log files found.', 'ads-destroyer');
        }
        
        wp_die();
    }
    
    /**
     * Handle download latest log AJAX request.
     */
    public function handle_download_latest_log(): void {
        $nonce = sanitize_text_field(wp_unslash($_POST['_wpnonce'] ?? ''));
        if (!wp_verify_nonce($nonce, 'adsd_download_latest_log')) {
            wp_die(esc_html__('Security check failed', 'ads-destroyer'));
        }
        
        $latest_file = $this->logger->get_latest_log_file();
        
        if ($latest_file && file_exists($latest_file)) {
            $content = file_get_contents($latest_file);
            
            header('Content-Type: text/plain');
            header('Content-Disposition: attachment; filename="ads-destroyer-latest.log"');
            header('Content-Length: ' . strlen($content));
            
            // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- Binary file content
            echo $content;
        } else {
            wp_die(esc_html__('No log files found.', 'ads-destroyer'));
        }
        
        exit;
    }
    
    /**
     * Handle clear all logs AJAX request.
     */
    public function handle_clear_all_logs(): void {
        $nonce = sanitize_text_field(wp_unslash($_POST['_wpnonce'] ?? ''));
        if (!wp_verify_nonce($nonce, 'adsd_clear_all_logs')) {
            wp_send_json_error(__('Security check failed', 'ads-destroyer'));
        }
        
        $deleted_count = $this->logger->clear_all_logs();
        
        wp_send_json_success([
            'count' => $deleted_count,
            // translators: %d: Number of deleted log files
            'message' => sprintf(__('Cleared %d log files.', 'ads-destroyer'), $deleted_count)
        ]);
    }
    
    /**
     * Handle JavaScript log message AJAX request.
     */
    public function handle_log_js_message(): void {
        $nonce = sanitize_text_field(wp_unslash($_POST['_wpnonce'] ?? ''));
        if (!wp_verify_nonce($nonce, 'adsd_log_js_message')) {
            wp_die(esc_html__('Security check failed', 'ads-destroyer'));
        }
        
        // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- JSON data is validated and sanitized after decode
        $log_entry_json = isset($_POST['log_entry']) ? wp_unslash($_POST['log_entry']) : '';
        $log_entry = json_decode($log_entry_json, true);
        
        if (!$log_entry) {
            wp_die(esc_html__('Invalid log entry', 'ads-destroyer'));
        }
        
        // Sanitize decoded JSON data recursively
        $log_entry = $this->sanitize_array($log_entry);
        
        // Log the JavaScript message using PHP logger
        $message = sprintf('[JS] %s', $log_entry['message'] ?? '');
        $context = array_merge($log_entry['context'] ?? [], [
            'source' => 'javascript',
            'user_agent' => $log_entry['userAgent'] ?? '',
            'url' => $log_entry['url'] ?? ''
        ]);
        
        $this->logger->log($log_entry['level'], $message, $context);
        
        wp_die();
    }
    
    /**
     * Render admin notices.
     */
    private function render_admin_notices(): void {
        $notice_code = isset($_GET['adsd_notice']) ? sanitize_key((string) $_GET['adsd_notice']) : '';
        $nonce = isset($_GET['_wpnonce']) ? sanitize_text_field(wp_unslash($_GET['_wpnonce'])) : '';
        if ($notice_code && $nonce && wp_verify_nonce($nonce, 'adsd_notice_' . $notice_code)) {
            $messages = [
                'general_ok' => __('Settings saved.', 'ads-destroyer'),
                'logging_ok' => __('Settings saved.', 'ads-destroyer'),
                'reset_ok'   => __('All rules have been reset.', 'ads-destroyer'),
                'delete_ok'  => __('Rule deleted.', 'ads-destroyer'),
                'update_ok'  => __('Rule updated.', 'ads-destroyer'),
                'toggle_ok'  => __('Rule status updated.', 'ads-destroyer'),
            ];
            $msg = $messages[$notice_code] ?? '';
            if ($msg) {
                echo '<div class="notice notice-success is-dismissible"><p>' . esc_html($msg) . '</p></div>';
            }
        }
    }
    
    /**
     * Render rules table using WP_List_Table.
     */
    private function render_rules_table(): void {
        $rules_table = new RulesListTable($this->options_repository);
        $rules_table->display();
        
        // Add modal for editing rules
        $this->render_edit_modal();
    }
    
    /**
     * Render modal for editing rules.
     */
    private function render_edit_modal(): void {
        ?>
        <div id="adsd-edit-modal" class="adsd-modal" style="display: none;">
            <div class="adsd-modal-content">
                <div class="adsd-modal-header">
                    <h2><?php echo esc_html__('Edit Rule', 'ads-destroyer'); ?></h2>
                    <span class="adsd-modal-close">&times;</span>
                </div>
                <div class="adsd-modal-body">
                    <form id="adsd-edit-form">
                        <input type="hidden" id="adsd-rule-id" name="rule_id" value="">
                        
                        <table class="form-table">
                            <tr>
                                <th scope="row">
                                    <label for="adsd-xpath"><?php echo esc_html__('XPath Rule', 'ads-destroyer'); ?></label>
                                </th>
                                <td>
                                    <textarea id="adsd-xpath" name="xpath" rows="6" cols="50" 
                                              class="large-text code" 
                                              placeholder="<?php echo esc_attr__('Enter XPath rule...', 'ads-destroyer'); ?>"></textarea>
                                    <p class="description">
                                        <?php echo esc_html__('XPath expression to select elements that should be hidden.', 'ads-destroyer'); ?>
                                    </p>
                                </td>
                            </tr>
                            <tr>
                                <th scope="row">
                                    <label for="adsd-description"><?php echo esc_html__('Description', 'ads-destroyer'); ?></label>
                                </th>
                                <td>
                                    <textarea id="adsd-description" name="description" rows="3" cols="50" 
                                              class="large-text" 
                                              placeholder="<?php echo esc_attr__('Enter rule description...', 'ads-destroyer'); ?>"></textarea>
                                    <p class="description">
                                        <?php echo esc_html__('Optional description of what this rule does.', 'ads-destroyer'); ?>
                                    </p>
                                </td>
                            </tr>
                            <tr>
                                <th scope="row">
                                    <label for="adsd-expiration"><?php echo esc_html__('Expiration', 'ads-destroyer'); ?></label>
                                </th>
                                <td>
                                    <select id="adsd-expiration" name="expiration" class="regular-text">
                                        <option value="forever"><?php echo esc_html__('Forever', 'ads-destroyer'); ?></option>
                                        <option value="1hour"><?php echo esc_html__('1 Hour', 'ads-destroyer'); ?></option>
                                        <option value="1day"><?php echo esc_html__('1 Day', 'ads-destroyer'); ?></option>
                                        <option value="1week"><?php echo esc_html__('1 Week', 'ads-destroyer'); ?></option>
                                        <option value="1month"><?php echo esc_html__('1 Month', 'ads-destroyer'); ?></option>
                                        <option value="3months"><?php echo esc_html__('3 Months', 'ads-destroyer'); ?></option>
                                        <option value="6months"><?php echo esc_html__('6 Months', 'ads-destroyer'); ?></option>
                                        <option value="1year"><?php echo esc_html__('1 Year', 'ads-destroyer'); ?></option>
                                    </select>
                                    <p class="description">
                                        <?php echo esc_html__('How long should this rule be active?', 'ads-destroyer'); ?>
                                    </p>
                                </td>
                            </tr>
                        </table>
                    </form>
                </div>
                <div class="adsd-modal-footer">
                    <button type="button" id="adsd-save-rule" class="button button-primary">
                        <?php echo esc_html__('Save', 'ads-destroyer'); ?>
                    </button>
                    <button type="button" id="adsd-cancel-edit" class="button">
                        <?php echo esc_html__('Cancel', 'ads-destroyer'); ?>
                    </button>
                </div>
            </div>
        </div>
        <?php
    }
    
    
    /**
     * Handle reset rules form submission.
     */
    public function handle_reset_rules(): void {
        // Check nonce
        $nonce = sanitize_text_field(wp_unslash($_POST['_wpnonce'] ?? ''));
        if (!wp_verify_nonce($nonce, 'adsd_reset_rules')) {
            wp_die(esc_html__('Security check failed', 'ads-destroyer'));
        }
        
        // Check permissions
        if (!current_user_can('manage_options')) {
            wp_die(esc_html__('Insufficient permissions', 'ads-destroyer'));
        }
        
        $opts = $this->options_repository->get_all();
        $opts['rules'] = [];
        $this->options_repository->save_all($opts);
        
        if ($this->logger) {
            $this->logger->info('All rules reset by user: ' . wp_get_current_user()->user_login);
        }
        
        wp_safe_redirect(add_query_arg(['updated' => '1'], admin_url('admin.php?page=ads-destroyer&tab=rules')));
        exit;
    }
    
    /**
     * Handle AJAX update rule.
     */
    public function handle_ajax_update_rule(): void {
        // phpcs:ignore WordPress.Security.NonceVerification.Missing -- Nonce is verified in verify_nonce call below
        $nonce = isset($_POST['nonce']) ? sanitize_text_field(wp_unslash($_POST['nonce'])) : '';
        if (!$this->nonce_service->verify_nonce($nonce, 'adsd_update_rule_ajax')) {
            wp_die(esc_html__('Security check failed', 'ads-destroyer'));
        }
        
        if (!$this->capabilities_service->can_access_settings()) {
            wp_die(esc_html__('Insufficient permissions', 'ads-destroyer'));
        }
        
        // phpcs:ignore WordPress.Security.NonceVerification.Missing -- Nonce verified above
        $rule_id = isset($_POST['rule_id']) ? sanitize_text_field(wp_unslash($_POST['rule_id'])) : '';
        // phpcs:ignore WordPress.Security.NonceVerification.Missing,WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- Nonce verified above, xpath sanitized via SanitizerService
        $xpath_raw = isset($_POST['xpath']) ? wp_unslash($_POST['xpath']) : '';
        $xpath = SanitizerService::sanitize_xpath($xpath_raw);
        // phpcs:ignore WordPress.Security.NonceVerification.Missing -- Nonce verified above
        $page_info = isset($_POST['page_info']) ? sanitize_text_field(wp_unslash($_POST['page_info'])) : '';
        // phpcs:ignore WordPress.Security.NonceVerification.Missing -- Nonce verified above
        $enabled = isset($_POST['enabled']);
        
        if (empty($rule_id) || empty($xpath)) {
            wp_send_json_error(['message' => __('Invalid data', 'ads-destroyer')]);
        }
        
        $opts = $this->options_repository->get_all();
        $rules = $opts['rules'] ?? [];
        
        foreach ($rules as &$rule) {
            if (($rule['id'] ?? '') === $rule_id) {
                $rule['xpath'] = $xpath;
                $rule['page_info'] = $page_info;
                $rule['enabled'] = $enabled;
                break;
            }
        }
        
        $opts['rules'] = $rules;
        $this->options_repository->save_all($opts);
        
        $this->logger->info('Rule updated by user: ' . wp_get_current_user()->user_login . ' - Rule ID: ' . $rule_id);
        
        wp_send_json_success(['message' => __('Rule updated successfully', 'ads-destroyer')]);
    }
    
    /**
     * Handle AJAX delete rule.
     */
    public function handle_ajax_delete_rule(): void {
        // phpcs:ignore WordPress.Security.NonceVerification.Missing -- Nonce is verified in verify_nonce call below
        $nonce = isset($_POST['nonce']) ? sanitize_text_field(wp_unslash($_POST['nonce'])) : '';
        if (!$this->nonce_service->verify_nonce($nonce, 'adsd_update_rule_ajax')) {
            wp_die(esc_html__('Security check failed', 'ads-destroyer'));
        }
        
        if (!$this->capabilities_service->can_access_settings()) {
            wp_die(esc_html__('Insufficient permissions', 'ads-destroyer'));
        }
        
        // phpcs:ignore WordPress.Security.NonceVerification.Missing,WordPress.Security.ValidatedSanitizedInput.MissingUnslash -- Nonce verified above
        $rule_id = isset($_POST['rule_id']) ? sanitize_text_field(wp_unslash($_POST['rule_id'])) : '';
        
        if (empty($rule_id)) {
            wp_send_json_error(['message' => __('Invalid rule ID', 'ads-destroyer')]);
        }
        
        $opts = $this->options_repository->get_all();
        $rules = $opts['rules'] ?? [];
        
        $rules = array_filter($rules, function($rule) use ($rule_id) {
            return ($rule['id'] ?? '') !== $rule_id;
        });
        
        $opts['rules'] = array_values($rules);
        $this->options_repository->save_all($opts);
        
        $this->logger->info('Rule deleted by user: ' . wp_get_current_user()->user_login . ' - Rule ID: ' . $rule_id);
        
        wp_send_json_success(['message' => __('Rule deleted successfully', 'ads-destroyer')]);
    }
    
    /**
     * Handle AJAX toggle rule.
     */
    public function handle_ajax_toggle_rule(): void {
        // phpcs:ignore WordPress.Security.NonceVerification.Missing -- Nonce is verified in verify_nonce call below
        $nonce = isset($_POST['nonce']) ? sanitize_text_field(wp_unslash($_POST['nonce'])) : '';
        if (!$this->nonce_service->verify_nonce($nonce, 'adsd_update_rule_ajax')) {
            wp_die(esc_html__('Security check failed', 'ads-destroyer'));
        }
        
        if (!$this->capabilities_service->can_access_settings()) {
            wp_die(esc_html__('Insufficient permissions', 'ads-destroyer'));
        }
        
        // phpcs:ignore WordPress.Security.NonceVerification.Missing,WordPress.Security.ValidatedSanitizedInput.MissingUnslash -- Nonce verified above
        $rule_id = isset($_POST['rule_id']) ? sanitize_text_field(wp_unslash($_POST['rule_id'])) : '';
        // phpcs:ignore WordPress.Security.NonceVerification.Missing,WordPress.Security.ValidatedSanitizedInput.MissingUnslash -- Nonce verified above
        $enabled = isset($_POST['enabled']) ? filter_var(wp_unslash($_POST['enabled']), FILTER_VALIDATE_BOOLEAN) : false;
        
        if (empty($rule_id)) {
            wp_send_json_error(['message' => __('Invalid rule ID', 'ads-destroyer')]);
        }
        
        $opts = $this->options_repository->get_all();
        $rules = $opts['rules'] ?? [];
        
        foreach ($rules as &$rule) {
            if (($rule['id'] ?? '') === $rule_id) {
                $rule['enabled'] = $enabled;
                break;
            }
        }
        
        $opts['rules'] = $rules;
        $this->options_repository->save_all($opts);
        
        $this->logger->info('Rule toggled by user: ' . wp_get_current_user()->user_login . ' - Rule ID: ' . $rule_id . ' - Enabled: ' . ($enabled ? 'true' : 'false'));
        
        wp_send_json_success(['message' => __('Rule status updated', 'ads-destroyer')]);
    }
    
    /**
     * Recursively sanitize array data.
     * 
     * @param mixed $data Data to sanitize.
     * @return mixed Sanitized data.
     */
    private function sanitize_array($data) {
        if (is_array($data)) {
            return array_map([$this, 'sanitize_array'], $data);
        } elseif (is_string($data)) {
            return sanitize_text_field($data);
        } elseif (is_int($data)) {
            return absint($data);
        } elseif (is_float($data)) {
            return filter_var($data, FILTER_SANITIZE_NUMBER_FLOAT, FILTER_FLAG_ALLOW_FRACTION);
        } else {
            return $data;
        }
    }
}