<?php

declare(strict_types=1);

if (!defined('ABSPATH')) {
    exit;
}

final class TheDotDevAgenticBridge_Onboarding_Wizard
{
    public const NONCE_ACTION = 'thedotdev_agentic_bridge_onboarding_complete';

    public const POST_ACTION = 'thedotdev_agentic_bridge_complete_onboarding';

    public const LEGACY_POST_ACTION = 'thedotdev_agentic_bridge_onboarding_complete';

    public const TRANSIENT_KEY = 'thedotdev_agentic_bridge_onboarding_complete';

    public static function init(): void
    {
        add_action('admin_menu', [self::class, 'add_admin_page']);
        add_action('admin_post_' . self::POST_ACTION, [self::class, 'handle_form_submission']);
        add_action('admin_post_' . self::LEGACY_POST_ACTION, [self::class, 'handle_form_submission']);
    }

    public static function add_admin_page(): void
    {
        add_submenu_page(
            TheDotDevAgenticBridge_Admin::MENU_SLUG,
            'Setup',
            'Setup',
            'manage_options',
            TheDotDevAgenticBridge_Admin::SETUP_WIZARD_SLUG,
            [self::class, 'render_wizard']
        );
    }

    public static function render_wizard(): void
    {
        if (!current_user_can('manage_options')) {
            wp_die(esc_html__('You do not have sufficient permissions to access this page.', 'agentic-bridge'));
        }

        $onboarding_complete = self::is_setup_confirmed();
        $scan = TheDotDevAgenticBridge_Readiness_Store::latest();
        $scan = is_array($scan) ? $scan : [];
        $findings = is_array($scan['findings'] ?? null) ? $scan['findings'] : [];
        // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only, sanitized flash notice; no state change.
        $thedotdev_agentic_bridge_notice = isset($_GET['thedotdev_agentic_bridge_notice']) ? sanitize_text_field(wp_unslash((string) $_GET['thedotdev_agentic_bridge_notice'])) : '';
        // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only, allowlisted notice type; no state change.
        $thedotdev_agentic_bridge_notice_type = isset($_GET['thedotdev_agentic_bridge_notice_type']) ? sanitize_key((string) wp_unslash($_GET['thedotdev_agentic_bridge_notice_type'])) : 'success';

        if (TheDotDevAgenticBridge_V2_Presentation::is_enabled()) {
            TheDotDevAgenticBridge_V2_Presentation::render_setup(get_defined_vars());

            return;
        }

        include THEDOTDEV_AGENTIC_BRIDGE_PLUGIN_DIR . 'views/onboarding-wizard.php';
    }

    public static function handle_form_submission(): void
    {
        self::process_submission(true);
    }

    public static function is_setup_confirmed(): bool
    {
        if (TheDotDevAgenticBridge_Storage::is_onboarding_complete()) {
            return true;
        }

        return (bool) get_transient(self::TRANSIENT_KEY);
    }

    private static function process_submission(bool $strict_admin_post): void
    {
        if (!current_user_can('manage_options')) {
            self::redirect_setup(
                __('You do not have permission to confirm setup.', 'agentic-bridge'),
                'error'
            );
        }
        // phpcs:ignore WordPress.Security.NonceVerification.Missing,WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- verified via wp_verify_nonce below; sanitized immediately.
        $raw_nonce = isset($_POST['_wpnonce']) ? wp_unslash($_POST['_wpnonce']) : '';
        $nonce = is_string($raw_nonce) ? sanitize_text_field($raw_nonce) : '';
        if ($nonce === '' || !wp_verify_nonce($nonce, self::NONCE_ACTION)) {
            self::redirect_setup(
                __('Setup could not be confirmed. Refresh the page and try again.', 'agentic-bridge'),
                'error'
            );
        }

        if (!TheDotDevAgenticBridge_Storage::mark_onboarding_complete()) {
            self::redirect_setup(
                __('Setup could not be saved. Try again or contact your host if this keeps happening.', 'agentic-bridge'),
                'error'
            );
        }

        set_transient(self::TRANSIENT_KEY, true, 7 * 24 * HOUR_IN_SECONDS);
        self::redirect_setup(
            __('Local setup confirmed. You can now run a readiness check or open any Agentic Bridge screen.', 'agentic-bridge'),
            'success'
        );
    }

    private static function redirect_setup(string $message, string $type): void
    {
        wp_safe_redirect(add_query_arg(
            [
                'thedotdev_agentic_bridge_notice' => $message,
                'thedotdev_agentic_bridge_notice_type' => $type === 'error' ? 'error' : 'success',
            ],
            TheDotDevAgenticBridge_Admin::setup_url()
        ));
        exit;
    }
}