<?php
/**
 * Settings screen: connect the site to an AffKeeper account (base URL + API key) and confirm it.
 *
 * @package AffKeeper
 */

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

class AffKeeper_Settings {

	const MENU_SLUG = 'affkeeper-settings';   // sits UNDER Links (the top-level 'affkeeper' menu)
	const NONCE     = 'affkeeper_settings';

	private static $instance = null;

	public static function instance() {
		if ( null === self::$instance ) {
			self::$instance = new self();
		}
		return self::$instance;
	}

	public function hooks() {
		// Priority 20 (after Links at 9) so Settings is the last submenu item.
		add_action( 'admin_menu', array( $this, 'register_menu' ), 20 );
		add_action( 'admin_post_affkeeper_save_settings', array( $this, 'handle_save' ) );
		add_action( 'admin_post_affkeeper_sync_now', array( $this, 'handle_sync' ) );
		add_action( 'admin_enqueue_scripts', array( $this, 'enqueue' ) );
	}

	/**
	 * Settings subpage under the Links top-level menu (Links owns the top level).
	 */
	public function register_menu() {
		add_submenu_page(
			AffKeeper_Links_Page::MENU_SLUG,
			__( 'Settings', 'affkeeper' ),
			__( 'Settings', 'affkeeper' ),
			'manage_options',
			self::MENU_SLUG,
			array( $this, 'render' )
		);
	}

	public function enqueue( $hook ) {
		if ( false === strpos( (string) $hook, self::MENU_SLUG ) ) {
			return;
		}
		wp_enqueue_style( 'affkeeper-admin', AFFKEEPER_URL . 'assets/admin.css', array(), affkeeper_asset_ver( 'assets/admin.css' ) );
	}

	/**
	 * Persist settings, then run a live /me check so the user sees immediately whether it worked.
	 */
	public function handle_save() {
		if ( ! current_user_can( 'manage_options' ) ) {
			wp_die( esc_html__( 'You are not allowed to do this.', 'affkeeper' ) );
		}
		check_admin_referer( self::NONCE );

		$status = 'saved';

		// Explicit disconnect: the key goes, the LINKS STAY — local redirects are untouched and
		// remote_ids are kept, so reconnecting the SAME account resumes without duplicates.
		if ( isset( $_POST['affkeeper_disconnect'] ) ) {
			// Say goodbye first (best-effort): the account instantly badges this site's links
			// "Not reporting" and stops monitoring them, instead of discovering it a week later.
			if ( AffKeeper_API::is_configured() ) {
				wp_remote_post(
					untrailingslashit( AffKeeper_API::base_url() ) . '/api/v1/wp/disconnect',
					array(
						'timeout' => 3,
						'headers' => array(
							'Authorization' => 'Bearer ' . AffKeeper_API::api_key(),
							'Content-Type'  => 'application/json',
						),
						'body'    => wp_json_encode( array( 'host' => (string) wp_parse_url( home_url(), PHP_URL_HOST ) ) ),
					)
				);
			}
			update_option( AFFKEEPER_OPT_KEY, '' );
			delete_option( 'affkeeper_account' );
			AffKeeper_API::flush_cache();
			wp_safe_redirect( add_query_arg( array( 'page' => self::MENU_SLUG, 'affkeeper_status' => 'disconnected' ), admin_url( 'admin.php' ) ) );
			exit;
		}

		// Connection form — only touch the key when that form was the one submitted, so saving the
		// prefix form (which has no key field) can't accidentally disconnect the account.
		if ( isset( $_POST['affkeeper_api_key'] ) ) {
			$key = sanitize_text_field( wp_unslash( $_POST['affkeeper_api_key'] ) );
			$prev = get_option( 'affkeeper_account', array() );
			$prev_user = is_array( $prev ) && ! empty( $prev['username'] ) ? (string) $prev['username'] : '';
			update_option( AFFKEEPER_OPT_KEY, $key );
			AffKeeper_API::flush_cache();
			if ( '' === $key ) {
				// Key removed = disconnected; drop the remembered account so no stale "Connected" badge.
				delete_option( 'affkeeper_account' );
			}
			if ( '' !== $key ) {
				$me = AffKeeper_API::me();
				AffKeeper_API::remember_connection( $me );
				$status = is_wp_error( $me ) ? 'error' : 'connected';
				if ( is_wp_error( $me ) ) {
					set_transient( 'affkeeper_connect_error', $me->get_error_message(), 60 );
				} else {
					// DIFFERENT account than this site was synced to before → deliberate migration:
					// drop the old tenant's pointers so the sync below creates fresh records on the
					// new account (the old one keeps its own copies until removed there).
					$new_user = isset( $me['username'] ) ? (string) $me['username'] : '';
					if ( '' !== $prev_user && '' !== $new_user && $prev_user !== $new_user ) {
						AffKeeper_Local::clear_remote_ids();
						set_transient( 'affkeeper_switch_notice', array( 'from' => $prev_user, 'to' => $new_user ), 120 );
					}
					// Just connected: push any links made locally so the account starts monitoring them.
					$res = AffKeeper_Sync::push_unsynced();
					if ( $res['synced'] > 0 || $res['failed'] > 0 || ! empty( $res['quota'] ) ) {
						set_transient( 'affkeeper_sync_result', $res, 60 );
					}
				}
			}
		}

		// Local link prefix (free tier). Changing it moves every local short link, so re-flush the
		// rewrite rules on the next request (when the new prefix's rule is registered — see add_rewrite).
		if ( isset( $_POST['affkeeper_local_prefix'] ) ) {
			$new = sanitize_title( wp_unslash( $_POST['affkeeper_local_prefix'] ) );
			if ( '' === $new ) {
				$new = AffKeeper_Local::DEFAULT_PREFIX;
			}
			$old = AffKeeper_Local::prefix();
			if ( $new !== $old ) {
				// Refuse a prefix that would hijack an existing page, product archive, or another
				// plugin's URLs — keep the old one and tell the user why.
				$conflict = AffKeeper_Local::prefix_conflict( $new );
				if ( '' !== $conflict ) {
					set_transient( 'affkeeper_prefix_error', $conflict, 60 );
					$status = 'prefix_conflict';
				} else {
					update_option( 'affkeeper_local_prefix', $new );
					update_option( 'affkeeper_flush_needed', 1 );
					$status = 'prefix_saved';
				}
			}
		}

		wp_safe_redirect( add_query_arg( array( 'page' => self::MENU_SLUG, 'affkeeper_status' => $status ), admin_url( 'admin.php' ) ) );
		exit;
	}

	/**
	 * "Sync now" — push any not-yet-synced local links up to the connected account.
	 */
	public function handle_sync() {
		if ( ! current_user_can( 'manage_options' ) ) {
			wp_die( esc_html__( 'You are not allowed to do this.', 'affkeeper' ) );
		}
		check_admin_referer( 'affkeeper_sync' );
		$res = AffKeeper_Sync::push_unsynced();
		set_transient( 'affkeeper_sync_result', $res, 60 );
		wp_safe_redirect( add_query_arg( array( 'page' => self::MENU_SLUG, 'affkeeper_status' => 'synced' ), admin_url( 'admin.php' ) ) );
		exit;
	}

	public function render() {
		if ( ! current_user_can( 'manage_options' ) ) {
			return;
		}
		$base    = AffKeeper_API::base_url();
		$key     = AffKeeper_API::api_key();
		// The remembered account only counts while a key is actually stored — a leftover option
		// without a key must never render a "Connected" badge.
		$account = ( '' !== $key ) ? get_option( 'affkeeper_account', array() ) : array();
		$status  = isset( $_GET['affkeeper_status'] ) ? sanitize_key( wp_unslash( $_GET['affkeeper_status'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only status flag.
		?>
		<div class="wrap affkeeper-wrap">
			<div class="affkeeper-head">
				<?php
				affkeeper_brand_header(
					__( 'Settings', 'affkeeper' ),
					__( 'Connect this site to your AffKeeper account and set up local short links.', 'affkeeper' )
				);
				?>
			</div>
			<?php // WP core JS relocates admin notices after this marker (instead of inside our h1 block). ?>
			<hr class="wp-header-end" />

			<?php if ( 'connected' === $status ) : ?>
				<div class="notice notice-success is-dismissible"><p><?php esc_html_e( 'Connected. Your affiliate links and their availability are now available in WordPress.', 'affkeeper' ); ?></p></div>
			<?php elseif ( 'error' === $status ) : ?>
				<div class="notice notice-error is-dismissible"><p>
					<?php
					$err = get_transient( 'affkeeper_connect_error' );
					delete_transient( 'affkeeper_connect_error' );
					echo esc_html( $err ? $err : __( 'Could not connect — check the URL and API key.', 'affkeeper' ) );
					?>
				</p></div>
			<?php elseif ( 'saved' === $status ) : ?>
				<div class="notice notice-info is-dismissible"><p><?php esc_html_e( 'Settings saved.', 'affkeeper' ); ?></p></div>
			<?php elseif ( 'prefix_conflict' === $status ) : ?>
				<div class="notice notice-error is-dismissible"><p>
					<?php
					$perr = get_transient( 'affkeeper_prefix_error' );
					delete_transient( 'affkeeper_prefix_error' );
					echo esc_html( $perr ? $perr : __( 'That prefix conflicts with something on your site — it was not changed.', 'affkeeper' ) );
					?>
				</p></div>
			<?php elseif ( 'disconnected' === $status ) : ?>
				<div class="notice notice-info is-dismissible"><p><?php esc_html_e( 'Disconnected. Your links keep redirecting from this site. Reconnect the same account any time and monitoring resumes exactly where it left off — the account still holds its records for previously synced links until you remove them there.', 'affkeeper' ); ?></p></div>
			<?php elseif ( 'prefix_saved' === $status ) : ?>
				<div class="notice notice-success is-dismissible"><p><?php esc_html_e( 'Link prefix updated.', 'affkeeper' ); ?></p></div>
			<?php endif; ?>

			<?php
			$switch = get_transient( 'affkeeper_switch_notice' );
			if ( is_array( $switch ) ) :
				delete_transient( 'affkeeper_switch_notice' );
				?>
				<div class="notice notice-warning is-dismissible"><p>
					<?php
					/* translators: 1: previous account name, 2: new account name. */
					echo esc_html( sprintf( __( 'This site was previously synced to "%1$s" — your links have been re-linked to "%2$s". The old account still holds its monitoring records; remove them there if you no longer need them.', 'affkeeper' ), $switch['from'], $switch['to'] ) );
					?>
				</p></div>
			<?php endif; ?>
			<?php
			// Result of a sync (auto after connect, or the "Sync now" button).
			$sync_res = get_transient( 'affkeeper_sync_result' );
			if ( is_array( $sync_res ) ) :
				delete_transient( 'affkeeper_sync_result' );
				$s = (int) ( $sync_res['synced'] ?? 0 );
				$f = (int) ( $sync_res['failed'] ?? 0 );
				$q = (int) ( $sync_res['quota'] ?? 0 );
				?>
				<div class="notice notice-<?php echo ( $f > 0 || $q > 0 ) ? 'warning' : 'success'; ?> is-dismissible"><p>
					<?php
					/* translators: %d: number of links synced to the account. */
					echo esc_html( sprintf( _n( 'Synced %d local link to your account.', 'Synced %d local links to your account.', $s, 'affkeeper' ), $s ) );
					if ( $q > 0 ) {
						echo ' ';
						/* translators: %d: number of links over the plan's monitored-link limit. */
						echo esc_html( sprintf( _n( '%d link stayed local-only — your plan\'s monitored-link limit is reached. It keeps redirecting from this site.', '%d links stayed local-only — your plan\'s monitored-link limit is reached. They keep redirecting from this site.', $q, 'affkeeper' ), $q ) );
						echo ' <a href="' . esc_url( AffKeeper_API::base_url() . '/settings#account' ) . '" target="_blank" rel="noopener">' . esc_html__( 'Upgrade to monitor them', 'affkeeper' ) . ' ↗</a>';
					}
					if ( $f > 0 ) {
						echo ' ';
						/* translators: %d: number of links that failed to sync. */
						echo esc_html( sprintf( _n( '%d could not be synced — try again.', '%d could not be synced — try again.', $f, 'affkeeper' ), $f ) );
					}
					?>
				</p></div>
			<?php endif; ?>

			<?php
			// Whatever the prefix is right now (e.g. set on activation, or by another means) might clash.
			$cur_conflict = AffKeeper_Local::prefix_conflict( AffKeeper_Local::prefix() );
			if ( '' !== $cur_conflict ) :
				?>
				<div class="notice notice-warning"><p>
					<strong><?php esc_html_e( 'Heads up:', 'affkeeper' ); ?></strong>
					<?php echo esc_html( $cur_conflict ); ?>
					<?php esc_html_e( 'Your local links here may clash with it — change the prefix below.', 'affkeeper' ); ?>
				</p></div>
			<?php endif; ?>

			<?php if ( ! empty( $account['username'] ) ) : ?>
				<div class="affkeeper-card affkeeper-connected">
					<span class="affkeeper-dot"></span>
					<strong><?php esc_html_e( 'Connected', 'affkeeper' ); ?></strong>
					<span class="affkeeper-muted">
						<?php
						echo esc_html( $account['username'] );
						if ( ! empty( $account['plan'] ) ) {
							echo ' · ' . esc_html( $account['plan'] );
						}
						echo empty( $account['monitoring'] )
							? ' · ' . esc_html__( 'monitoring off', 'affkeeper' )
							: ' · ' . esc_html__( 'monitoring on', 'affkeeper' );
						?>
					</span>
				</div>
			<?php endif; ?>

			<?php if ( empty( $account['username'] ) ) : ?>
				<div class="affkeeper-card affkeeper-signup">
					<div>
						<h2><?php esc_html_e( 'Connect your account', 'affkeeper' ); ?></h2>
						<p class="affkeeper-muted"><?php esc_html_e( 'Don\'t have one yet? Create a free account first, then paste an API key below and hit Save & connect. Managing links, availability and stats all works from here — the full panel on the web has the deeper details.', 'affkeeper' ); ?></p>
					</div>
					<a class="button button-primary affkeeper-signup-btn" href="<?php echo esc_url( untrailingslashit( $base ) . '/register' ); ?>" target="_blank" rel="noopener"><?php esc_html_e( 'Create free account', 'affkeeper' ); ?></a>
				</div>
			<?php endif; ?>

			<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" class="affkeeper-card">
				<input type="hidden" name="action" value="affkeeper_save_settings" />
				<?php wp_nonce_field( self::NONCE ); ?>

				<h2><?php esc_html_e( 'Connection', 'affkeeper' ); ?></h2>
				<table class="form-table" role="presentation">
					<tr>
						<th scope="row"><label for="affkeeper_api_key"><?php esc_html_e( 'API key', 'affkeeper' ); ?></label></th>
						<td>
							<input name="affkeeper_api_key" id="affkeeper_api_key" type="password" class="regular-text" value="<?php echo esc_attr( $key ); ?>" autocomplete="off" placeholder="ak_live_…" />
							<p class="description">
								<?php
								printf(
									/* translators: %s: link to create an API key in the account. */
									esc_html__( 'Paste the API key from your AffKeeper account (Settings → API keys). %s', 'affkeeper' ),
									'<a href="' . esc_url( untrailingslashit( $base ) . '/settings' ) . '" target="_blank" rel="noopener">' . esc_html__( 'Open your account', 'affkeeper' ) . '</a>'
								);
								?>
							</p>
						</td>
					</tr>
				</table>
				<p class="submit" style="display:flex;gap:10px;align-items:center">
					<?php submit_button( __( 'Save & connect', 'affkeeper' ), 'primary', 'submit', false ); ?>
					<?php if ( AffKeeper_API::is_configured() ) : ?>
						<button type="submit" name="affkeeper_disconnect" value="1" class="button"><?php esc_html_e( 'Disconnect', 'affkeeper' ); ?></button>
					<?php endif; ?>
				</p>
			</form>

			<?php
			if ( AffKeeper_API::is_configured() ) :
				$total_local = AffKeeper_Local::count();
				if ( $total_local > 0 ) :
					$unsynced = AffKeeper_Sync::unsynced_count();
					?>
					<div class="affkeeper-card">
						<h2><?php esc_html_e( 'Sync local links', 'affkeeper' ); ?></h2>
						<?php if ( $unsynced > 0 ) : ?>
							<p class="affkeeper-muted">
								<?php
								/* translators: %d: number of local links not yet on the account. */
								echo esc_html( sprintf( _n( '%d link you created here in WordPress isn\'t on your account yet.', '%d links you created here in WordPress aren\'t on your account yet.', $unsynced, 'affkeeper' ), $unsynced ) );
								echo ' ';
								esc_html_e( 'Sync them to start monitoring stock and broken links. The short links keep working on your own site.', 'affkeeper' );
								?>
							</p>
							<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>">
								<input type="hidden" name="action" value="affkeeper_sync_now" />
								<?php wp_nonce_field( 'affkeeper_sync' ); ?>
								<?php submit_button( __( 'Sync now', 'affkeeper' ), 'primary', 'submit', false ); ?>
							</form>
						<?php else : ?>
							<p class="affkeeper-muted">
								<?php
								/* translators: %d: number of local links, all already synced. */
								echo esc_html( sprintf( _n( 'Your %d local link is synced with your account and monitored.', 'All %d local links are synced with your account and monitored.', $total_local, 'affkeeper' ), $total_local ) );
								?>
							</p>
						<?php endif; ?>
					</div>
					<?php
				endif;
			endif;
			?>

			<?php $host = wp_parse_url( home_url(), PHP_URL_HOST ); ?>
			<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" class="affkeeper-card">
				<input type="hidden" name="action" value="affkeeper_save_settings" />
				<?php wp_nonce_field( self::NONCE ); ?>

				<h2><?php esc_html_e( 'Local short links', 'affkeeper' ); ?></h2>
				<table class="form-table" role="presentation">
					<tr>
						<th scope="row"><label for="affkeeper_local_prefix"><?php esc_html_e( 'Link prefix', 'affkeeper' ); ?></label></th>
						<td>
							<span class="affkeeper-prefix-preview">
								<span class="affkeeper-muted"><?php echo esc_html( $host ); ?>/</span>
								<input name="affkeeper_local_prefix" id="affkeeper_local_prefix" type="text" class="small-text" value="<?php echo esc_attr( AffKeeper_Local::prefix() ); ?>" />
								<span class="affkeeper-muted">/<?php esc_html_e( 'your-slug', 'affkeeper' ); ?></span>
							</span>
							<p class="description">
								<?php esc_html_e( 'The path your links on this site use — e.g. go, aff, out, recommends.', 'affkeeper' ); ?>
							</p>
							<p class="description">
								<strong><?php esc_html_e( 'Changing it moves every local link, so pick it before placing links in posts.', 'affkeeper' ); ?></strong>
							</p>
						</td>
					</tr>
				</table>
				<?php submit_button( __( 'Save prefix', 'affkeeper' ) ); ?>
			</form>

			<div class="affkeeper-card">
				<h2><?php esc_html_e( 'Click analytics', 'affkeeper' ); ?></h2>
				<p class="affkeeper-muted"><?php esc_html_e( 'Each click is reported to your account with its referrer and device type, so the panel shows real breakdowns. Country statistics appear automatically when your server provides a geo header (Cloudflare and many hosts do) — only the two-letter country code is sent; the visitor\'s IP never leaves this site.', 'affkeeper' ); ?></p>
			</div>

			<div class="affkeeper-card">
				<h2><?php esc_html_e( 'Product availability (AliExpress)', 'affkeeper' ); ?></h2>
				<p class="affkeeper-muted">
					<?php esc_html_e( 'To monitor whether affiliate products are in stock, connect your AliExpress account once in the full panel — Settings → AliExpress connection. Plain redirect links are checked automatically without it.', 'affkeeper' ); ?>
				</p>
				<p><a class="affkeeper-panel-link" href="<?php echo esc_url( untrailingslashit( $base ) . '/settings' ); ?>" target="_blank" rel="noopener"><?php esc_html_e( 'Open AliExpress connection', 'affkeeper' ); ?> ↗</a></p>
			</div>

			<div class="affkeeper-card">
				<h2><?php esc_html_e( 'Need help?', 'affkeeper' ); ?></h2>
				<p class="affkeeper-muted"><?php esc_html_e( 'Found a bug or something isn\'t working as expected? Tell us — we read everything.', 'affkeeper' ); ?></p>
				<p><a class="affkeeper-panel-link" href="<?php echo esc_url( untrailingslashit( $base ) . '/contact/' ); ?>" target="_blank" rel="noopener"><?php esc_html_e( 'Contact support', 'affkeeper' ); ?></a>
				&nbsp;·&nbsp; <a class="affkeeper-panel-link" href="mailto:hello@affkeeper.com">hello@affkeeper.com</a></p>
			</div>

			<div class="affkeeper-card">
				<h2><?php esc_html_e( 'Using your links', 'affkeeper' ); ?></h2>
				<p><?php esc_html_e( 'Two ways to place a link in your posts:', 'affkeeper' ); ?></p>
				<p>
					<strong><?php esc_html_e( 'Paste the short URL.', 'affkeeper' ); ?></strong>
					<?php
					printf(
						/* translators: %s: example short URL on this site. */
						esc_html__( 'Every link is a normal URL on your own site (e.g. %s) — paste it anywhere a link goes.', 'affkeeper' ),
						'<code>' . esc_html( $host . '/' . AffKeeper_Local::prefix() . '/your-slug' ) . '</code>'
					);
					?>
				</p>
				<p>
					<strong><?php esc_html_e( 'Or use the shortcode.', 'affkeeper' ); ?></strong>
					<?php
					printf(
						/* translators: %s: link to the Links screen. */
						esc_html__( 'You don\'t have to type it: on the %s list, the copy icon next to each short link copies that link\'s ready-made shortcode. Paste it into a post and add your own link text:', 'affkeeper' ),
						'<a href="' . esc_url( admin_url( 'admin.php?page=' . AffKeeper_Links_Page::MENU_SLUG ) ) . '">' . esc_html__( 'Links', 'affkeeper' ) . '</a>'
					);
					?>
				</p>
				<p><code>[affkeeper slug="your-slug"]Buy on the marketplace[/affkeeper]</code></p>
				<p class="affkeeper-muted"><?php esc_html_e( 'The shortcode adds the right SEO attributes for you: affiliate links render with rel="sponsored", plain redirects with rel="nofollow".', 'affkeeper' ); ?></p>
				<p class="affkeeper-muted">
					<?php esc_html_e( 'Same slug on more than one of your domains? Add the domain so the shortcode picks the right link:', 'affkeeper' ); ?>
				</p>
				<p><code>[affkeeper slug="your-slug" domain="affk.cc"]Buy on the marketplace[/affkeeper]</code></p>
			</div>
		</div>
		<?php
	}
}