<?php

if ( ! defined( 'ABSPATH' ) ) {
    exit;
} // Exit if accessed directly

require_once __DIR__ . '/../Enemy_Definition.php';

use Adventurebook\Enemy_Definition;
use Adventurebook\Enemy_Spawn;
use Adventurebook\Item_Definition;

// menu entry
function adventurebook_admin_menu_enemies() {
    add_submenu_page(
            'adventurebook_main',
            __( 'Enemies', 'adventurebook' ),
            __( 'Enemies', 'adventurebook' ),
            'manage_options',
            'adventurebook-enemies',
            'adventurebook_enemies_page'
    );
}

add_action( 'admin_menu', 'adventurebook_admin_menu_enemies' );
add_action( 'admin_post_adventurebook_save_enemy', 'adventurebook_handle_save_enemy' );

function adventurebook_handle_save_enemy() {
    if ( ! current_user_can( 'manage_options' ) ) {
        wp_die( esc_html__( 'You do not have permission to do that.', 'adventurebook' ) );
    }

    check_admin_referer( 'adventurebook_save_enemy' );
    global $wpdb;

    // Speichern
    if ( isset( $_POST['adventurebook_save_enemy'] ) ) {
        $nonce = isset( $_POST['_wpnonce'] ) ? sanitize_text_field( wp_unslash( $_POST['_wpnonce'] ) ) : '';
        if ( $nonce && wp_verify_nonce( $nonce, 'adventurebook_save_enemy' ) ) {
            $id              = isset( $_POST['id'] ) ? intval( $_POST['id'] ) : 0;
            $code            = isset( $_POST['code'] ) ? sanitize_text_field( wp_unslash( $_POST['code'] ) ) : '';
            $name            = isset( $_POST['name'] ) ? sanitize_text_field( wp_unslash( $_POST['name'] ) ) : '';
            $description     = isset( $_POST['description'] ) ? sanitize_textarea_field( wp_unslash( $_POST['description'] ) ) : '';
            $is_hostile      = isset( $_POST['is_hostile'] ) ? 1 : 0;
            $can_be_attacked = isset( $_POST['can_be_attacked'] ) ? 1 : 0;
            $xp_value        = isset( $_POST['xp_value'] ) ? intval( $_POST['xp_value'] ) : 0;

            $stats = [];
            if ( isset( $_POST['enemy_stats_keys'] ) && isset( $_POST['enemy_stats_values'] ) ) {

                if ( is_array( $_POST['enemy_stats_keys'] ) ) {
                    $keys = array_map( 'sanitize_text_field', wp_unslash( $_POST['enemy_stats_keys'] ) );
                } else {
                    $keys = [];
                }
                if ( is_array( $_POST['enemy_stats_values'] ) ) {
                    $values = array_map( 'sanitize_text_field', wp_unslash( $_POST['enemy_stats_values'] ) );
                } else {
                    $values = [];
                }

                for ( $i = 0; $i < count( $keys ); $i ++ ) {
                    $key   = sanitize_text_field( $keys[ $i ] );
                    $value = $values[ $i ]; // value can be of any type, so no sanitization here
                    //  only save stats if key AND value is set
                    if ( $key !== '' && $value !== '' ) {
                        $stats[ $key ] = $value;
                    }
                }
            }
            $stats = json_encode( $stats );

            $inventory = isset( $_POST['inventory'] ) ? sanitize_text_field( wp_unslash( $_POST['inventory'] ) ) : '';
            // inventory is a comma separated list of code:chance:min:max
            // we convert it to a json array of values, no need for keys
            $inventory = json_encode( explode( ',', $inventory ) );

            $image_url = isset( $_POST['image_url'] ) ? esc_url_raw( wp_unslash( $_POST['image_url'] ) ) : '';

            if ( $id > 0 ) {
                $wpdb->update( "{$wpdb->prefix}adventurebook_enemy_definitions",// phpcs:ignore WordPress.DB.DirectDatabaseQuery
                        compact( 'code', 'name', 'description', 'is_hostile', 'can_be_attacked', 'xp_value', 'stats', 'inventory', 'image_url' ),
                        [ 'id' => $id ]
                );
                $message = __( 'Enemy updated.', 'adventurebook' );
            } else {
                $wpdb->insert( "{$wpdb->prefix}adventurebook_enemy_definitions",// phpcs:ignore WordPress.DB.DirectDatabaseQuery
                        compact( 'code', 'name', 'description', 'is_hostile', 'can_be_attacked', 'xp_value', 'stats', 'inventory', 'image_url' )
                );
                $message = __( 'Enemy created.', 'adventurebook' );
            }
        } else {
            $message = __( 'Invalid nonce.', 'adventurebook' );
        }
    }


    $type_filter = isset( $_POST['enemy_type_filter'] )
            ? '&enemy_type_filter=' . urlencode( sanitize_text_field( $_POST['enemy_type_filter'] ) )
            : '';

    wp_safe_redirect(
            admin_url( 'admin.php?page=adventurebook-enemies' . $type_filter . '&message=' . urlencode( $message ) )
    );
    exit;
}


if ( ! class_exists( 'WP_List_Table' ) ) {
    require_once ABSPATH . 'wp-admin/includes/class-wp-list-table.php';
}


class Adventurebook_Enemy_List_Table extends WP_List_Table {

    private array $enemies_data = [];
    private string $message = '';

    function __construct() {
        parent::__construct( [
                'singular' => 'Enemy',
                'plural'   => 'Enemies',
                'ajax'     => false
        ] );
    }


    function pagination($which) {
        if (isset($_GET['enemy_type_filter']) && $_GET['enemy_type_filter'] !== '') {
            $this->_pagination_args['add_args']['enemy_type_filter'] = sanitize_text_field($_GET['enemy_type_filter']);
        }
        parent::pagination($which);
    }

    function get_columns(): array {
        return [
                'cb'        => '<input type="checkbox" />',
                'name'      => __( 'Name', 'adventurebook' ),
                'lvl'       => __( 'Might', 'adventurebook' ),
                'id'        => 'ID',
                'code'      => __( 'Code', 'adventurebook' ),
                'type'      => __( 'Type', 'adventurebook' ),
                'stats'     => __( 'Stats', 'adventurebook' ),
                'inventory' => __( 'Loottable', 'adventurebook' ),
                'image_url' => __( 'Image', 'adventurebook' ),
        ];
    }

    function get_sortable_columns(): array {
        return [
                'id'   => [ 'id', false ],
                'lvl'  => [ 'lvl', false ],
                'code' => [ 'code', false ],
                'type' => [ 'type', false ],
                'name' => [ 'name', false ],
        ];
    }

    function column_lvl( $item ) {
        /** @var Enemy_Definition $item */
        return $item->get_combat_strength();
    }

    function column_type( $item ) {
        /** @var Enemy_Definition $item */
        return isset( $item->stats['Type'] ) ? esc_html( $item->stats['Type'] ) : '';
    }

    function column_cb( $item ) {
        /** @var Enemy_Definition $item */
        return sprintf( '<input type="checkbox" name="enemy_ids[]" value="%d" />', $item->id );
    }

    function column_default( $item, $column_name ) {
        /** @var Enemy_Definition $item */
        switch ( $column_name ) {
            case 'id':
                return intval( $item->id );
            case 'code':
                return esc_html( $item->code );
            case 'lvl':
                return $this->column_lvl( $item );
            case 'type':
                return $this->column_type( $item );
            case 'name':
                return $this->column_name( $item );
            case 'stats':
                // Stats als lesbare Liste anzeigen
                if ( empty( $item->stats ) ) {
                    return __( 'No stats', 'adventurebook' );
                }
                $stats = $item->stats;
                if ( is_array( $stats ) && ! empty( $stats ) ) {
                    $stats_list = [];
                    foreach ( $stats as $key => $value ) {
                        $stats_list[] = esc_html( $key ) . ': ' . esc_html( $value );
                    }

                    //  return as list embedded in "<li>" and "</li>"
                    return '<li>' . implode( '</li><li>', $stats_list ) . '</li>';
                } else {
                    return __( 'No stats', 'adventurebook' );
                }
            case 'inventory':
                // the inventory (= loot table) is a comma separated list of code:chance:min:max
                if ( empty( $item->inventory ) ) {
                    return __( 'No loottable', 'adventurebook' );
                }

                return $item->getInventoryAsHTML();
            case 'image_url':
                return $item->image_url ? '<img src="' . esc_url( $item->image_url ) . '" width="40" />' : '';
            default:
                return '';
        }
    }

    function column_name( Enemy_Definition $enemy ): string {
        $type_filter = isset($_GET['enemy_type_filter']) ? '&enemy_type_filter=' . urlencode(sanitize_text_field($_GET['enemy_type_filter'])) : '';

        $actions = [
                'edit'   => sprintf(
                        '<a href="?page=adventurebook-enemies&action=edit&id=%d%s">%s</a>',
                        $enemy->id,
                        $type_filter,
                        __('Edit', 'adventurebook')
                ),
                'copy'   => sprintf(
                        '<a href="?page=adventurebook-enemies&action=copy&enemy_id=%d&_wpnonce=%s%s">%s</a>',
                        $enemy->id,
                        wp_create_nonce('adventurebook_copy_enemy_' . $enemy->id),
                        $type_filter,
                        __('Copy', 'adventurebook')
                ),
                'delete' => sprintf(
                        '<a href="?page=adventurebook-enemies&action=delete&id=%d&_wpnonce=%s%s" onclick="return confirm(\'%s\')">%s</a>',
                        $enemy->id,
                        wp_create_nonce('adventurebook_delete_enemy_' . $enemy->id),
                        $type_filter,
                        __('Really delete?', 'adventurebook'),
                        __('Delete', 'adventurebook')
                ),
        ];


        return sprintf( '%s %s', esc_html( $enemy->name ), $this->row_actions( $actions ) );
    }

    function get_bulk_actions(): array {
        return [ 'bulk-delete' => __( 'Delete', 'adventurebook' ) ];
    }

    function process_bulk_action() {

        //  check for admin permissions
        if ( ! current_user_can( 'manage_options' ) ) {
            return;
        }

        global $wpdb;

        $action = $this->current_action();
        if ( $action === 'bulk-delete' ) {

            // WP-Standard Bulk-Nonce for Enemies
            if ( ! isset( $_POST['_wpnonce'] ) || ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_POST['_wpnonce'] ) ), 'bulk-enemies' ) ) {
                $this->message = __( 'Nonce invalid.', 'adventurebook' );

                return;
            }

            $enemy_ids = isset( $_POST['enemy_ids'] ) ? array_map( 'intval', wp_unslash( $_POST['enemy_ids'] ) ) : [];
            if ( $enemy_ids ) {
                foreach ( $enemy_ids as $id ) {
                    Enemy_Definition::delete_enemy_definition( $id );
                }
                $this->message = sprintf( '%d Enemies deleted.', count( $enemy_ids ) );
            }
        }
    }

    function prepare_enemies() {

        if ( isset ( $_REQUEST['s'] )
        ) {
            //  did we get ANY search request? If yes, check the nonce
            check_admin_referer( 'adventurebook_search_item' );
        }

        global $wpdb;
        $enemy_type_filter = isset($_GET['enemy_type_filter']) ? sanitize_text_field($_GET['enemy_type_filter']) : '';

        $this->process_bulk_action();

        $per_page     = 10;
        $current_page = $this->get_pagenum();
        $offset       = ( $current_page - 1 ) * $per_page;

        $allowed_orderby = [ 'id', 'code', 'name' ];
        // phpcs:ignore WordPress.Security.NonceVerification.Recommended
        $orderby = isset( $_GET['orderby'] ) ? sanitize_text_field( wp_unslash( $_GET['orderby'] ) ) : 'id';
        if ( ! in_array( $orderby, $allowed_orderby, true ) ) {
            $orderby = 'id';
        }

        $allowed_order = [ 'ASC', 'DESC' ];
        // phpcs:ignore WordPress.Security.NonceVerification.Recommended
        $order = isset( $_GET['order'] ) ? strtoupper( sanitize_text_field( wp_unslash( $_GET['order'] ) ) ) : 'DESC';
        if ( ! in_array( $order, $allowed_order, true ) ) {
            $order = 'DESC';
        }

        // phpcs:ignore WordPress.Security.NonceVerification.Recommended
        $search = isset( $_REQUEST['s'] ) ? sanitize_text_field( wp_unslash( $_REQUEST['s'] ) ) : '';

        if ($search !== '') {
            // Suchmodus
            $like = '%' . $wpdb->esc_like($search) . '%';
            $where = "WHERE (code LIKE %s OR name LIKE %s)";
            $params = [$like, $like];

            if ($enemy_type_filter !== '') {
                //  check for filter "Undefined": we need to find all entries where the Type is either NULL or an empty string
                if ($enemy_type_filter === '__undefined__') {
                    $where .= " AND (JSON_EXTRACT(stats, '$.Type') IS NULL OR JSON_EXTRACT(stats, '$.Type') = '')";
                } else {
                    $where .= " AND JSON_EXTRACT(stats, '$.Type') LIKE %s";
                    $params[] = '%' . $wpdb->esc_like($enemy_type_filter) . '%';
                }
            }

            $total_enemies = (int) $wpdb->get_var(
                    $wpdb->prepare("SELECT COUNT(*) FROM {$wpdb->prefix}adventurebook_enemy_definitions $where", ...$params)
            );

            $params[] = $per_page;
            $params[] = $offset;
            $raw_data = $wpdb->get_results(
                    $wpdb->prepare(
                            "SELECT * FROM {$wpdb->prefix}adventurebook_enemy_definitions $where ORDER BY $orderby $order LIMIT %d OFFSET %d",
                            ...$params
                    ),
                    ARRAY_A
            );

        } else {
            // Kein Suchbegriff
            if ($enemy_type_filter !== '') {
                // check for filter "Undefined": we need to find all entries where the Type is either NULL or an empty string
                if( $enemy_type_filter === '__undefined__' ) {
                    $total_enemies = (int) $wpdb->get_var(
                            "SELECT COUNT(*) FROM {$wpdb->prefix}adventurebook_enemy_definitions WHERE JSON_EXTRACT(stats, '$.Type') IS NULL OR JSON_EXTRACT(stats, '$.Type') = ''"
                    );
                    $raw_data = $wpdb->get_results(
                            $wpdb->prepare(
                                    "SELECT * FROM {$wpdb->prefix}adventurebook_enemy_definitions
                 WHERE JSON_EXTRACT(stats, '$.Type') IS NULL OR JSON_EXTRACT(stats, '$.Type') = ''
                 ORDER BY $orderby $order
                 LIMIT %d OFFSET %d",
                                    $per_page, $offset
                            ),
                            ARRAY_A
                    );
                    $this->set_pagination_args( [
                            'total_items' => $total_enemies,
                            'per_page'    => $per_page,
                            'total_pages' => ceil( $total_enemies / $per_page ),
                    ] );
                    $this->_column_headers = [ $this->get_columns(), [], $this->get_sortable_columns() ];
                    $this->items           = $this->enemies_data;
                    //  jetzt: Enemy_Definition Objekte bauen
                    $this->enemies_data = [];
                    foreach ( $raw_data as $row ) {
                        $this->enemies_data[] = Enemy_Definition::get_enemy_definition_by_id( $row['id'] );
                    }

                    $this->set_pagination_args( [
                            'total_items' => $total_enemies,
                            'per_page'    => $per_page,
                            'total_pages' => ceil( $total_enemies / $per_page ),
                    ] );

                    $this->_column_headers = [ $this->get_columns(), [], $this->get_sortable_columns() ];
                    $this->items           = $this->enemies_data;
                    return;
                }

                $like_type = '%' . $wpdb->esc_like($enemy_type_filter) . '%';
                $total_enemies = (int) $wpdb->get_var(
                        $wpdb->prepare(
                                "SELECT COUNT(*) FROM {$wpdb->prefix}adventurebook_enemy_definitions WHERE JSON_EXTRACT(stats, '$.Type') LIKE %s",
                                $like_type
                        )
                );
                $raw_data = $wpdb->get_results(
                        $wpdb->prepare(
                                "SELECT * FROM {$wpdb->prefix}adventurebook_enemy_definitions
                 WHERE JSON_EXTRACT(stats, '$.Type') LIKE %s
                 ORDER BY $orderby $order
                 LIMIT %d OFFSET %d",
                                $like_type, $per_page, $offset
                        ),
                        ARRAY_A
                );
            } else {
                // Kein Filter
                $total_enemies = (int) $wpdb->get_var("SELECT COUNT(*) FROM {$wpdb->prefix}adventurebook_enemy_definitions");
                $raw_data = $wpdb->get_results(
                        $wpdb->prepare(
                                "SELECT * FROM {$wpdb->prefix}adventurebook_enemy_definitions ORDER BY $orderby $order LIMIT %d OFFSET %d",
                                $per_page, $offset
                        ),
                        ARRAY_A
                );
            }
        }


        //  now convert all $raw_data entries to Enemy_Definition objects
        $this->enemies_data = [];
        foreach ( $raw_data as $row ) {
            $this->enemies_data[] = Enemy_Definition::get_enemy_definition_by_id( $row['id'] );
        }

        if ( ab_get( 'orderby' ) === 'lvl' ) {
            usort( $this->enemies_data, function ( $a, $b ) use ( $order ) {
                $a_lvl = $a->get_combat_strength();
                $b_lvl = $b->get_combat_strength();

                if ( ab_get( 'order' ) === 'asc' ) {
                    return $a_lvl <=> $b_lvl;
                } else {
                    return $b_lvl <=> $a_lvl;
                }
            } );
        }

        $this->set_pagination_args( [
                'total_items' => $total_enemies,
                'per_page'    => $per_page,
                'total_pages' => ceil( $total_enemies / $per_page ),
        ] );

        $this->_column_headers = [ $this->get_columns(), [], $this->get_sortable_columns() ];
        $this->items           = $this->enemies_data;
    }

    public function get_message() {
        return $this->message;
    }
}

// Admin page
function adventurebook_enemies_page() {

    //  check for admin permissions
    if ( ! current_user_can( 'manage_options' ) ) {
        return;
    }

    global $wpdb;


    // single delete
    if ( isset( $_GET['action'], $_GET['id'] ) && $_GET['action'] === 'delete' ) {
        //  check nonce
        $id    = intval( sanitize_text_field( wp_unslash( $_GET['id'] ) ) );
        $nonce = isset( $_GET['_wpnonce'] ) ? sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ) ) : '';
        if ( $nonce && wp_verify_nonce( $nonce, 'adventurebook_delete_enemy_' . $id ) ) {
            $wpdb->delete( "{$wpdb->prefix}adventurebook_enemy_definitions", [ 'id' => $id ] );// phpcs:ignore WordPress.DB.DirectDatabaseQuery
            $message = __( 'Enemy deleted.', 'adventurebook' );
        }
    }

    // copy the enemy definition and set the code to <code>_copy
    if ( isset( $_GET['action'], $_GET['enemy_id'] ) && $_GET['action'] === 'copy' ) {
        //  check nonce
        $copy_id = intval( ab_get( 'enemy_id' ) );
        $nonce   = isset( $_GET['_wpnonce'] ) ? sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ) ) : '';
        do_log('Copying enemy with id ' . $copy_id);
        if ( $nonce && wp_verify_nonce( $nonce, 'adventurebook_copy_enemy_' . $copy_id ) ) {
            do_log('Nonce verified');
            $enemy_to_copy = Enemy_Definition::get_enemy_definition_by_id( $copy_id );
            if ( $enemy_to_copy ) {
                $new_code = $enemy_to_copy->code . '_copy';
                // ensure unique code
                $existing_enemy = $wpdb->get_row( $wpdb->prepare(
                        "SELECT * FROM {$wpdb->prefix}adventurebook_enemy_definitions WHERE code = %s",
                        $new_code
                ), ARRAY_A );
                if ( $existing_enemy ) {
                    $new_code .= '_' . time();
                }

                $wpdb->insert( "{$wpdb->prefix}adventurebook_enemy_definitions",// phpcs:ignore WordPress.DB.DirectDatabaseQuery
                        [
                                'code'            => $new_code,
                                'name'            => $enemy_to_copy->name . ' (Copy)',
                                'description'     => $enemy_to_copy->description,
                                'is_hostile'      => $enemy_to_copy->is_hostile,
                                'can_be_attacked' => $enemy_to_copy->can_be_attacked,
                                'xp_value'        => $enemy_to_copy->xp_value,
                                'stats'           => json_encode( $enemy_to_copy->stats ),
                                'inventory'       => json_encode( $enemy_to_copy->inventory ),
                                'image_url'       => $enemy_to_copy->image_url,
                        ]
                );
                $message = __( 'Enemy copied.', 'adventurebook' );
            } else {
                $message = __( 'Enemy to copy not found.', 'adventurebook' );
            }
        }
    }


    $message      = '';
    $is_list_view = ! isset( $_GET['action'] ) || ! in_array( $_GET['action'], [ 'new', 'edit' ], true );


    echo '<div class="wrap">';
    if ( $is_list_view ) {
        $type_filter = isset($_GET['type_filter']) ? '&type_filter=' . urlencode(sanitize_text_field($_GET['type_filter'])) : '';
        echo '<h1>Adventurebook Enemies <a href="?page=adventurebook-enemies&action=new' . esc_html($type_filter) . '" class="page-title-action">' . esc_html(__("New Enemy", "adventurebook")) . '</a></h1>';
    } else {
        echo '<h1>' . ( ( isset( $_GET['action'] ) && $_GET['action'] === 'edit' ) ? 'Edit Enemy' : 'New Enemy' ) . '</h1>';
    }

    if ( $message ) {
        echo '<div class="updated notice"><p>' . esc_html( $message ) . '</p>';
        if ( ! $is_list_view ) {
            $type_filter = isset($_GET['type_filter']) ? '&type_filter=' . urlencode(sanitize_text_field($_GET['type_filter'])) : '';
            echo '<p><a href="' . esc_url( admin_url( 'admin.php?page=adventurebook-enemies' . $type_filter ) ) . '">Back to Enemy-List</a></p>';

        }
        echo '</div>';
    }

    // form new/edit
    if ( ! $is_list_view ) {
        /** @var Enemy_Definition $enemy */
        $enemy = null;
        if ( isset( $_GET['action'], $_GET['id'] ) && $_GET['action'] === 'edit' ) {
            $id    = intval( $_GET['id'] );
            $enemy = Enemy_Definition::get_enemy_definition_by_id( $id );
        } else {
            $enemy = new Enemy_Definition( 0, '', '', 0, 0, 0, '', '{}', '{}', '' );
        }
        ?>
        <form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>">
            <input type="hidden" name="action" value="adventurebook_save_enemy">
            <?php if ( isset( $_GET['enemy_type_filter'] ) && $_GET['enemy_type_filter'] !== '' ) : ?>
                <input type="hidden" name="enemy_type_filter"
                       value="<?php echo esc_attr( sanitize_text_field( $_GET['enemy_type_filter'] ) ); ?>">
            <?php endif; ?>
            <?php wp_nonce_field( 'adventurebook_save_enemy' ); ?>
            <input type="hidden" name="id" value="<?php echo esc_attr( $enemy->id ?? 0 ); ?>">
            <table class="form-table">
                <tr>
                    <th><label for="code"><?php esc_html_e( 'Code', 'adventurebook' ); ?></label></th>
                    <td><input name="code" type="text" id="code" value="<?php echo esc_attr( $enemy->code ?? '' ); ?>"
                               class="regular-text" required></td>
                </tr>
                <tr>
                    <th><label for="name"><?php esc_html_e( 'Name', 'adventurebook' ); ?></label></th>
                    <td><input name="name" type="text" id="name" value="<?php echo esc_attr( $enemy->name ?? '' ); ?>"
                               class="regular-text" required></td>
                </tr>
                <tr>
                    <th><label for="description"><?php esc_html_e( 'Description', 'adventurebook' ); ?></label></th>
                    <td><textarea name="description" id="description" rows="5"
                                  class="large-text"><?php echo esc_textarea( $enemy->description ?? '' ); ?></textarea>
                    </td>
                </tr>
                <!-- add checkboxes for is_hostile and can_be_attacked -->
                <tr>
                    <th><label for="is_hostile"><?php esc_html_e( 'Is Hostile', 'adventurebook' ); ?></label></th>
                    <td><input name="is_hostile" type="checkbox" id="is_hostile"
                               value="1" <?php checked( $enemy->is_hostile ?? false, true ); ?>></td>
                </tr>
                <tr>
                    <th><label for="can_be_attacked"><?php esc_html_e( 'Can be Attacked', 'adventurebook' ); ?></label>
                    </th>
                    <td><input name="can_be_attacked" type="checkbox" id="can_be_attacked"
                               value="1" <?php checked( $enemy->can_be_attacked ?? false, true ); ?>></td>
                </tr>

                <!-- add input field for xp_value -->
                <tr>
                    <th><label for="xp_value"><?php esc_html_e( 'XP Value', 'adventurebook' ); ?></label></th>
                    <td><input name="xp_value" type="number" id="xp_value"
                               value="<?php echo esc_attr( $enemy->xp_value ?? 0 ); ?>" class="small-text" min="0"></td>
                </tr>

                <tr>
                    <th><label for="enemy_stats"><?php esc_html_e( 'Stats', 'adventurebook' ); ?></label></th>
                    <td>
                        <div id="enemy-stats-container">
                            <?php
                            if ( ! isset( $id ) ) {
                                //  new enemy, show predefined stats
                                $predefined_stats = [
                                        'Type'                    => '',
                                        'Initiative'              => '0',
                                        'Attack'                  => '0',
                                        'Defense'                 => '0',
                                        'Damage'                  => '0',
                                        'Armor'                   => '0',
                                        'Health'                  => '0',
                                        'StressDiceMultiplicator' => '0'
                                ];
                                foreach ( $predefined_stats as $key => $value ) : ?>
                                    <div class="enemy-stat">
                                        <label>
                                            <input type="text" name="enemy_stats_keys[]"
                                                   value="<?php echo esc_attr( $key ); ?>" placeholder="Key">
                                        </label>
                                        <label>
                                            <input type="text" name="enemy_stats_values[]"
                                                   value="<?php echo esc_attr( $value ); ?>" placeholder="Value">
                                        </label>
                                        <button class="remove-stat">-</button>
                                    </div>
                                <?php endforeach;
                            }
                            foreach ( $enemy->stats as $key => $value ) : ?>
                                <div class="enemy-stat">
                                    <label>
                                        <input type="text" name="enemy_stats_keys[]"
                                               value="<?php echo esc_attr( $key ); ?>" placeholder="Key">
                                    </label>
                                    <label>
                                        <input type="text" name="enemy_stats_values[]"
                                               value="<?php echo esc_attr( $value ); ?>" placeholder="Value">
                                    </label>
                                    <button class="remove-stat">-</button>
                                </div>
                            <?php endforeach; ?>
                        </div>
                        <button id="add-stat"><?php esc_html_e( 'Add Stat', 'adventurebook' ); ?></button>
                    </td>
                </tr>

                <?php
                // fetch all item definitions
                $items = Item_Definition::get_all_item_definitions(); // Array mit ['code' => ..., 'name' => ...]

                // for easier use in JS, create an array with code and name only
                $item_defs = array_map(
                        static function ( $item ) {
                            return [
                                    'code' => $item->code,
                                    'name' => $item->name ?? $item->code,
                            ];
                        },
                        $items
                );

                // Loot Entries as array
                $loottable = $enemy->get_inventory_as_array(); // [['item_code'=>'rusty_key','percent'=>25,'min'=>1,'max'=>1], ...]
                ?>

                <tr>
                    <th><label for="inventory"><?php esc_html_e( 'Loottable', 'adventurebook' ); ?></label></th>
                    <td>
                        <table id="adventurebook_loottable"
                               class="widefat striped"
                               data-items="<?php echo esc_attr( wp_json_encode( $item_defs ) ); ?>">
                            <thead>
                            <tr>
                                <th><?php esc_html_e( 'Item', 'adventurebook' ); ?></th>
                                <th><?php esc_html_e( 'Chance (%)', 'adventurebook' ); ?></th>
                                <th><?php esc_html_e( 'Min', 'adventurebook' ); ?></th>
                                <th><?php esc_html_e( 'Max', 'adventurebook' ); ?></th>
                                <th></th>
                            </tr>
                            </thead>
                            <tbody>
                            <?php if ( ! empty( $loottable ) ) : ?>
                                <?php foreach ( $loottable as $entry ) : ?>
                                    <tr>
                                        <td>
                                            <select name="loottable_item_code[]">
                                                <?php foreach ( $item_defs as $item ) : ?>
                                                    <option value="<?php echo esc_attr( $item['code'] ); ?>"
                                                            <?php selected( $item['code'], $entry['item_code'] ); ?>>
                                                        <?php echo esc_html( $item['name'] ); ?>
                                                    </option>
                                                <?php endforeach; ?>
                                            </select>
                                        </td>
                                        <td><input type="number" name="loottable_percent[]"
                                                   value="<?php echo esc_attr( $entry['percent'] ?? 0 ); ?>" min="0"
                                                   max="100"></td>
                                        <td><input type="number" name="loottable_min[]"
                                                   value="<?php echo esc_attr( $entry['min'] ?? 1 ); ?>" min="0"></td>
                                        <td><input type="number" name="loottable_max[]"
                                                   value="<?php echo esc_attr( $entry['max'] ?? 1 ); ?>" min="1"></td>
                                        <td>
                                            <button type="button" class="button remove-loot-row">×</button>
                                        </td>
                                    </tr>
                                <?php endforeach; ?>
                            <?php endif; ?>
                            </tbody>
                        </table>

                        <p>
                            <button type="button" class="button" id="add_loot_row">
                                <?php esc_html_e( 'Add Loot Item', 'adventurebook' ); ?>
                            </button>
                        </p>

                        <!-- verstecktes Feld für den finalen String -->
                        <input type="hidden" name="inventory" id="inventory"
                               value="<?php echo esc_attr( $enemy->get_inventory_as_string() ?? '' ); ?>">
                    </td>
                </tr>


                <tr>
                    <th><label for="image_url"><?php esc_html_e( 'Image URL', 'adventurebook' ); ?></label></th>
                    <td>
                        <input name="image_url" type="text" id="image_url"
                               value="<?php echo esc_attr( $enemy->image_url ?? '' ); ?>" class="regular-text">
                        <button type="button" class="button"
                                id="upload_image_button"><?php esc_html_e( 'Select Image', 'adventurebook' ); ?></button>
                    </td>
                </tr>

                <!-- show all pages that have an enemy_spawn with this enemy->code -->
                <?php if ( isset( $enemy->code ) && $enemy->code !== '' ) : ?>
                    <tr>
                        <th><?php esc_html_e( 'Spawn Point on Pages', 'adventurebook' ); ?></th>
                        <td>
                            <?php
                            $pages = Enemy_Spawn::get_all_pages_for_enemy_spawn_code( $enemy->code );
                            adventurebook_show_page_links( $pages );
                            ?>
                        </td>
                    </tr>
                <?php endif; ?>

            </table>
            <?php submit_button( __( 'Save', 'adventurebook' ), 'primary', 'adventurebook_save_enemy' ); ?>
        </form>

        <?php
    }

    // Übersichtsliste
    if ( $is_list_view ) {
        $list_table = new Adventurebook_Enemy_List_Table();
        $list_table->prepare_enemies();

        if ( $list_table->get_message() ) {
            echo '<div class="updated notice"><p>' . esc_html( $list_table->get_message() ) . '</p></div>';
        }

        echo '<form method="get">';
        echo '<input type="hidden" name="page" value="adventurebook-enemies" />';

        $current_filter = isset($_GET['enemy_type_filter']) ? sanitize_text_field($_GET['enemy_type_filter']) : '';

        // Dropdown für Type
        echo '<label for="enemy_type_filter" style="margin-left:10px;">' . esc_html__('Type:', 'adventurebook') . '</label>';
        echo '<select name="enemy_type_filter" id="enemy_type_filter">';
        echo '<option value="">' . esc_html__('All', 'adventurebook') . '</option>';
        //  add option "Undefined"
        echo '<option value="__undefined__"' . selected( $current_filter, '__undefined__', false ) . '>' . esc_html__( 'Undefined', 'adventurebook' ) . '</option>';
        // Alle vorhandenen Typen aus DB
        global $wpdb;
        $types = $wpdb->get_col("
            SELECT DISTINCT JSON_UNQUOTE(JSON_EXTRACT(stats, '$.Type'))
            FROM {$wpdb->prefix}adventurebook_enemy_definitions
            WHERE JSON_EXTRACT(stats, '$.Type') IS NOT NULL AND JSON_EXTRACT(stats, '$.Type') != ''
        ");
        sort($types, SORT_NATURAL | SORT_FLAG_CASE);

        foreach ($types as $type) {
            $selected = selected($current_filter, $type, false);
            echo '<option value="' . esc_attr($type) . '"' . esc_html($selected) . '>' . esc_html($type) . '</option>';
        }

        echo '</select>';

        $list_table->search_box(__('Search Enemy', 'adventurebook'), 'enemy-search');
        wp_nonce_field('adventurebook_search_item');
        echo '</form>';

        // --- Ende Filter-Dropdown ---

        wp_nonce_field( 'adventurebook_search_item' );
        echo '</form>';

        echo '<form method="post">';
        $list_table->display();
        echo '</form>';
    }

    echo '</div>';
}