<?php

class AIBUI_Ajax_Handler
{
    public function __construct()
    {
        add_action('wp_ajax_aibui_save_token', array($this, 'save_token'));
        add_action('wp_ajax_aibui_set_signup_success', array($this, 'set_signup_success'));
        add_action('wp_ajax_aibui_signout', array($this, 'signout'));
        add_action('wp_ajax_aibui_get_token', array($this, 'get_token'));
        add_action('wp_ajax_aibui_save_post_css', array($this, 'save_post_css'));
        add_action('wp_ajax_aibui_get_post_css', array($this, 'get_post_css'));
        add_action('wp_ajax_nopriv_aibui_submit_contact_form', array($this, 'submit_contact_form'));
        add_action('wp_ajax_aibui_submit_contact_form', array($this, 'submit_contact_form'));
        add_action('wp_mail_failed', array($this, 'capture_mail_error'));
    }

    public function save_token()
    {
        // Vérifier que les données POST existent
        if (!isset($_POST['nonce']) || !isset($_POST['token'])) {
            wp_send_json_error('Missing required data');
        }

        // Déséchapper et assainir les données
        $nonce = sanitize_text_field(wp_unslash($_POST['nonce']));
        $token = sanitize_text_field(wp_unslash($_POST['token']));

        // Vérifier le nonce
        if (!wp_verify_nonce($nonce, 'aibui_nonce')) {
            wp_die('Security check failed');
        }

        if (empty($token)) {
            wp_send_json_error('Token is required');
        }

        // Sauvegarder le token JWT
        update_option('aibui_jwt_token', $token);

        wp_send_json_success('Token saved successfully');
    }

    public function set_signup_success()
    {
        // Vérifier que les données POST existent
        if (!isset($_POST['nonce'])) {
            wp_send_json_error('Missing required data');
        }

        // Déséchapper et assainir les données
        $nonce = sanitize_text_field(wp_unslash($_POST['nonce']));

        // Vérifier le nonce
        if (!wp_verify_nonce($nonce, 'aibui_nonce')) {
            wp_die('Security check failed');
        }

        // Marquer l'inscription comme réussie
        update_option('aibui_user_successful_signup', true);

        wp_send_json_success('Signup success flag set');
    }

    public function signout()
    {
        // Vérifier que les données POST existent
        if (!isset($_POST['nonce'])) {
            wp_send_json_error('Missing required data');
        }

        // Déséchapper et assainir les données
        $nonce = sanitize_text_field(wp_unslash($_POST['nonce']));

        // Vérifier le nonce
        if (!wp_verify_nonce($nonce, 'aibui_nonce')) {
            wp_die('Security check failed');
        }

        // Supprimer le token JWT
        delete_option('aibui_jwt_token');

        wp_send_json_success('Signed out successfully');
    }

    public function get_token()
    {
        // Vérifier que les données POST existent
        if (!isset($_POST['nonce'])) {
            wp_send_json_error('Missing required data');
        }

        // Déséchapper et assainir les données
        $nonce = sanitize_text_field(wp_unslash($_POST['nonce']));

        // Vérifier le nonce
        if (!wp_verify_nonce($nonce, 'aibui_nonce')) {
            wp_die('Security check failed');
        }

        // Récupérer le token JWT
        $token = get_option('aibui_jwt_token', '');

        if (empty($token)) {
            wp_send_json_error('No token found');
        }

        wp_send_json_success(array('token' => $token));
    }

    public function save_post_css()
    {
        // Vérifier que les données POST existent
        if (!isset($_POST['nonce']) || !isset($_POST['post_id']) || !isset($_POST['css_content'])) {
            wp_send_json_error('Missing required data');
        }

        // Déséchapper et assainir les données
        $nonce = sanitize_text_field(wp_unslash($_POST['nonce']));
        $post_id = intval($_POST['post_id']);
        $css_content = wp_unslash($_POST['css_content']);

        // Vérifier le nonce
        if (!wp_verify_nonce($nonce, 'aibui_nonce')) {
            wp_die('Security check failed');
        }

        // Vérifier que l'utilisateur peut éditer ce post
        if (!current_user_can('edit_post', $post_id)) {
            wp_send_json_error('Insufficient permissions');
        }

        // Sauvegarder le CSS dans les meta du post
        update_post_meta($post_id, 'ai_builder_css_content', $css_content);

        wp_send_json_success('CSS saved successfully');
    }

    public function get_post_css()
    {
        // Vérifier que les données POST existent
        if (!isset($_POST['nonce']) || !isset($_POST['post_id'])) {
            wp_send_json_error('Missing required data');
        }

        // Déséchapper et assainir les données
        $nonce = sanitize_text_field(wp_unslash($_POST['nonce']));
        $post_id = intval($_POST['post_id']);

        // Vérifier le nonce
        if (!wp_verify_nonce($nonce, 'aibui_nonce')) {
            wp_die('Security check failed');
        }

        // Vérifier que l'utilisateur peut lire ce post
        if (!current_user_can('read_post', $post_id)) {
            wp_send_json_error('Insufficient permissions');
        }

        // Récupérer le CSS depuis les meta du post
        $css_content = get_post_meta($post_id, 'ai_builder_css_content', true);

        wp_send_json_success(array('cssContent' => $css_content));
    }

    // Capture wp_mail() errors and store briefly to surface via AJAX
    public function capture_mail_error($wp_error)
    {
        $ip = $_SERVER['REMOTE_ADDR'] ?? 'unknown';
        $key = 'aibui_cf_mailerr_' . md5($ip);
        set_transient($key, $wp_error instanceof WP_Error ? $wp_error->get_error_message() : 'Unknown mail error', 120);
        if (defined('WP_DEBUG') && WP_DEBUG) {
            error_log('[AIBUI] wp_mail_failed: ' . (is_object($wp_error) && method_exists($wp_error, 'get_error_message') ? $wp_error->get_error_message() : print_r($wp_error, true)));
        }
    }

    public function submit_contact_form()
    {
        if (!isset($_POST['nonce']) || !wp_verify_nonce(sanitize_text_field(wp_unslash($_POST['nonce'])), 'aibui_contact_form')) {
            wp_send_json_error('Invalid nonce');
        }

        // Rate limiting per IP: 1 submission per 30 seconds
        $ip = $_SERVER['REMOTE_ADDR'] ?? 'unknown';
        $key = 'aibui_cf_rl_' . md5($ip);
        $last = get_transient($key);
        if ($last) {
            wp_send_json_error('Too many requests. Please wait.');
        }
        set_transient($key, time(), 30);

        $recipient = isset($_POST['recipient']) ? sanitize_email(wp_unslash($_POST['recipient'])) : '';
        if (empty($recipient) || !is_email($recipient)) {
            $recipient = sanitize_email(get_option('admin_email'));
        }
        if (empty($recipient) || !is_email($recipient)) {
            wp_send_json_error('No valid recipient configured');
        }

        $subject = sprintf('[%s] Nouveau message de contact', get_bloginfo('name'));

        $fields = [];
        $sender_email = '';
        foreach ($_POST as $key => $value) {
            if (strpos($key, 'field_') === 0) {
                $label_key = 'label_' . $key;
                $type_key = 'type_' . $key;
                $req_key = 'required_' . $key;
                $label = isset($_POST[$label_key]) ? sanitize_text_field(wp_unslash($_POST[$label_key])) : 'Champ';
                $type = isset($_POST[$type_key]) ? sanitize_text_field(wp_unslash($_POST[$type_key])) : 'text';
                $is_required = isset($_POST[$req_key]) && wp_unslash($_POST[$req_key]) === '1';
                $raw = wp_unslash($value);
                switch ($type) {
                    case 'email':
                        $san = sanitize_email($raw);
                        if (!$sender_email && is_email($san)) {
                            $sender_email = $san;
                        }
                        break;
                    case 'number':
                        $san = is_numeric($raw) ? $raw : '';
                        break;
                    case 'date':
                        $san = preg_match('/^\\d{4}-\\d{2}-\\d{2}$/', $raw) ? $raw : '';
                        break;
                    case 'textarea':
                        $san = sanitize_textarea_field($raw);
                        break;
                    default:
                        $san = sanitize_text_field($raw);
                }
                if ($is_required && $san === '') {
                    wp_send_json_error(sprintf('%s est requis', $label ? $label : 'Ce champ'));
                }
                $fields[] = ['label' => $label, 'type' => $type, 'value' => $san];
            }
        }

        if (empty($fields)) {
            wp_send_json_error('No fields provided');
        }

        // Build HTML email content
        $rows = '';
        foreach ($fields as $f) {
            $val = $f['type'] === 'textarea' ? nl2br(esc_html($f['value'])) : esc_html($f['value']);
            $rows .= '<tr><td style="padding:8px 12px;border:1px solid #e5e7eb;font-weight:600;">' . esc_html($f['label']) . '</td><td style="padding:8px 12px;border:1px solid #e5e7eb;">' . $val . '</td></tr>';
        }
        $message = '<div style="font-family:Arial,Helvetica,sans-serif;font-size:14px;color:#111827;">'
            . '<h3 style="margin:0 0 12px;">' . esc_html__('Nouveau message de contact', 'ai-builder') . '</h3>'
            . '<table cellpadding="0" cellspacing="0" style="border-collapse:collapse;border:1px solid #e5e7eb;width:100%;max-width:720px;">'
            . $rows
            . '</table>'
            . '</div>';

        $headers = [];
        $headers[] = 'Content-Type: text/html; charset=UTF-8';
        $domain = parse_url(home_url(), PHP_URL_HOST);
        $default_from = 'no-reply@' . $domain;
        $user_from = isset($_POST['from_email']) ? sanitize_email(wp_unslash($_POST['from_email'])) : '';
        $from_email = $default_from;
        if ($user_from && is_email($user_from)) {
            // Use as From only if same domain (avoid SPF/DMARC issues)
            $user_domain = substr(strrchr($user_from, '@'), 1);
            if ($user_domain && strtolower($user_domain) === strtolower($domain)) {
                $from_email = $user_from;
            }
        }
        $headers[] = 'From: ' . get_bloginfo('name') . ' <' . $from_email . '>';
        if ($sender_email && is_email($sender_email)) {
            $headers[] = 'Reply-To: ' . $sender_email;
        }

        $sent = wp_mail($recipient, $subject, $message, $headers);
        if (!$sent) {
            $ip = $_SERVER['REMOTE_ADDR'] ?? 'unknown';
            $key_err = 'aibui_cf_mailerr_' . md5($ip);
            $last_err = get_transient($key_err);
            wp_send_json_error($last_err ? $last_err : 'Failed to send');
        }
        wp_send_json_success('Sent');
    }
}