<?php
/**
 * The Visibility Dash feature cards: what this site is recording, and switches.
 *
 * The Dash opened straight into charts, so nothing on it reported what the
 * plugin was actually doing on the site's behalf. The five tracking features a
 * site can switch on lived only in Settings, several sections deep, and a
 * reader had no way to know a scan was off short of going to look.
 *
 * WHY THIS IS THE ONLY LANDING WITH A COUNT
 *
 * The count reads "N of M on" and totals switch cards only. These five are the
 * plugin's only switch cards: everything else is either a workflow that runs
 * rather than sits on, or a feature this build does not contain. A landing
 * with no switches carries no count line, because "0 of 4 on" over four
 * absent features would be false about the state and about the denominator
 * both. See CARD-LANDING-DECISIONS.md.
 *
 * NO SCRIPT
 *
 * Each switch is a real form posting to admin-post.php with its own nonce, so
 * it works with the plugin's admin JavaScript blocked, stripped by an
 * optimisation plugin, or simply never reached. Three rounds of "messy,
 * jumpy, disjointed" reports came from a screen that only worked where its
 * script ran; a control that silently does nothing would be the same bug
 * wearing a nicer coat.
 *
 * @package AI_O_Optimiser
 */

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

class AI_O_Optimiser_Feature_Cards {

	/** Nonce action for a card's switch. */
	const NONCE = 'ai_o_optimiser_toggle_feature';

	/** Where the row is anchored, so a toggle returns to it rather than the top. */
	const ANCHOR = 'ai-o-optimiser-feature-cards';

	/** Register the switch handler. */
	public static function boot() {
		add_action( 'admin_post_ai_o_optimiser_toggle_feature', array( __CLASS__, 'handle_toggle' ) );
	}

	/**
	 * The five switches, in the order they are shown.
	 *
	 * Descriptions are the Settings copy for the same control, trimmed to one
	 * line: two names for one switch is how a plugin teaches somebody that two
	 * unrelated things exist.
	 *
	 * Every icon is one the admin shell already uses. A second icon system for
	 * the same screens is ruled out by the shell contract in AGENTS.md.
	 *
	 * @return array
	 */
	public static function cards() {
		return array(
			'enabled'                   => array(
				'label'       => __( 'Crawler tracking', 'ai-o-optimiser' ),
				'description' => __( 'Logs visits from known AI crawlers and assistants.', 'ai-o-optimiser' ),
				'icon'        => 'dashicons-search',
				'screen'      => 'tracking',
			),
			'enable_referrals'          => array(
				'label'       => __( 'AI referral tracking', 'ai-o-optimiser' ),
				'description' => __( 'Logs visits referred by ChatGPT, Perplexity, Claude, Gemini and Copilot.', 'ai-o-optimiser' ),
				'icon'        => 'dashicons-admin-links',
				'screen'      => 'tracking',
			),
			'llms_generate_enabled'     => array(
				'label'       => __( 'AI guidance files', 'ai-o-optimiser' ),
				'description' => __( 'Publishes the guidance files AI assistants read instead of crawling every page.', 'ai-o-optimiser' ),
				'icon'        => 'dashicons-media-document',
				'screen'      => 'ai-o-optimiser-guidance',
			),
			'verify_bot_identity'       => array(
				'label'       => __( 'Verify crawler identity', 'ai-o-optimiser' ),
				'description' => __( 'Checks that a request claiming to be an AI crawler really came from that company.', 'ai-o-optimiser' ),
				'icon'        => 'dashicons-shield',
				'screen'      => 'tracking',
			),
			'near_miss_capture_enabled' => array(
				'label'       => __( 'Near-miss capture', 'ai-o-optimiser' ),
				'description' => __( 'Stores requests that resemble an AI platform but match no known signature.', 'ai-o-optimiser' ),
				'icon'        => 'dashicons-filter',
				'screen'      => 'tracking',
			),
		);
	}

	/**
	 * Settings with every default this row depends on already applied.
	 *
	 * Four of the five keys default through AI_O_Optimiser_Settings; the
	 * guidance switch defaults through the guidance module, which merges into
	 * the same option. Reading the option alone would show a site that has
	 * never saved settings as having everything switched off, which is the
	 * opposite of what it ships as.
	 *
	 * @return array
	 */
	public static function settings() {
		if ( class_exists( 'AI_O_Optimiser_LLMS' ) ) {
			return AI_O_Optimiser_LLMS::settings();
		}

		return wp_parse_args( get_option( 'ai_o_optimiser_settings', array() ), AI_O_Optimiser_Settings::defaults() );
	}

	/**
	 * The state one card is in.
	 *
	 * "needs_setup" is a modifier on a switch that is on, never a third switch
	 * position: it means the feature is enabled and still cannot do its job.
	 * Only the guidance files can report it, and only from an audit that has
	 * actually run -- a fresh site has never audited anything, and calling that
	 * a setup problem would greet every new install with a warning it did not
	 * earn.
	 *
	 * @param string $key      Card key.
	 * @param array  $settings Plugin settings.
	 * @return string on|off|needs_setup
	 */
	public static function state( $key, array $settings ) {
		if ( empty( $settings[ $key ] ) ) {
			return 'off';
		}

		if ( 'llms_generate_enabled' === $key ) {
			$audit = get_option( 'ai_o_optimiser_llms_audit_cache', array() );
			if ( is_array( $audit ) && ! empty( $audit['checked_at'] ) && isset( $audit['overall_status'] ) && 'fail' === $audit['overall_status'] ) {
				return 'needs_setup';
			}
		}

		return 'on';
	}

	/**
	 * How many switches are on, out of how many there are.
	 *
	 * A card that needs setup is counted as on, because the switch is on: the
	 * count answers "what have I turned on", and the badge answers "is it
	 * working". Counting it as off would make the line disagree with the
	 * switch sitting next to it.
	 *
	 * @param array $settings Plugin settings.
	 * @return array on and total
	 */
	public static function counts( array $settings ) {
		$on = 0;
		foreach ( array_keys( self::cards() ) as $key ) {
			if ( 'off' !== self::state( $key, $settings ) ) {
				$on++;
			}
		}

		return array(
			'on'    => $on,
			'total' => count( self::cards() ),
		);
	}

	/** The badge word for a state. */
	private static function badge_label( $state ) {
		if ( 'needs_setup' === $state ) {
			return __( 'Needs setup', 'ai-o-optimiser' );
		}
		if ( 'on' === $state ) {
			return __( 'On', 'ai-o-optimiser' );
		}
		return __( 'Off', 'ai-o-optimiser' );
	}

	/**
	 * Where a card's own settings live.
	 *
	 * Four of them are one Settings section; the guidance files have a screen
	 * of their own. Neither link carries a fragment: an anchor that names an id
	 * the page does not have is a link that quietly does nothing.
	 *
	 * @param array $card One card definition.
	 * @return string
	 */
	private static function settings_url( array $card ) {
		if ( 'tracking' === $card['screen'] ) {
			return admin_url( 'admin.php?page=ai-o-optimiser-settings&section=tracking' );
		}

		return admin_url( 'admin.php?page=' . rawurlencode( $card['screen'] ) );
	}

	/** Where a switch returns to. */
	private static function return_url() {
		return admin_url( 'admin.php?page=ai-o-optimiser-dashboard' ) . '#' . self::ANCHOR;
	}

	/**
	 * Print the row.
	 *
	 * The Dash is readable by editors through the dashboard capability filter,
	 * but changing what a site records is an administrator's decision: a reader
	 * without the sensitive capability gets the same cards with a link to
	 * Settings where the switch would be, rather than a control that would
	 * refuse them at the other end.
	 *
	 * @return void
	 */
	public static function render() {
		$settings = self::settings();
		$counts   = self::counts( $settings );
		$can_edit = current_user_can( AI_O_Optimiser_SENSITIVE_CAPABILITY );
		?>
		<section id="<?php echo esc_attr( self::ANCHOR ); ?>" class="ai-o-optimiser-feature-cards">
			<p class="ai-o-optimiser-feature-cards-eyebrow"><?php esc_html_e( 'Tracking', 'ai-o-optimiser' ); ?></p>
			<div class="ai-o-optimiser-feature-cards-head">
				<h2><?php esc_html_e( 'What this site is recording about AI crawlers and assistant referrals', 'ai-o-optimiser' ); ?></h2>
				<span class="ai-o-optimiser-feature-cards-count"><?php
					echo esc_html( sprintf(
						/* translators: 1: number of features switched on, 2: total number of features. */
						__( '%1$s of %2$s on', 'ai-o-optimiser' ),
						number_format_i18n( $counts['on'] ),
						number_format_i18n( $counts['total'] )
					) );
				?></span>
			</div>
			<div class="ai-o-optimiser-feature-cards-grid">
				<?php foreach ( self::cards() as $key => $card ) : ?>
					<?php
					$state = self::state( $key, $settings );
					$is_on = 'off' !== $state;
					?>
					<div class="ai-o-optimiser-feature-card ai-o-optimiser-feature-card-<?php echo esc_attr( str_replace( '_', '-', $state ) ); ?>">
						<span class="dashicons <?php echo esc_attr( $card['icon'] ); ?>" aria-hidden="true"></span>
						<div class="ai-o-optimiser-feature-card-body">
							<div class="ai-o-optimiser-feature-card-head">
								<span class="ai-o-optimiser-feature-card-title"><?php echo esc_html( $card['label'] ); ?></span>
								<span class="ai-o-optimiser-feature-badge"><?php echo esc_html( self::badge_label( $state ) ); ?></span>
							</div>
							<p><?php echo esc_html( $card['description'] ); ?></p>
							<?php if ( $can_edit ) : ?>
								<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" class="ai-o-optimiser-feature-card-actions">
									<?php wp_nonce_field( self::NONCE ); ?>
									<input type="hidden" name="action" value="ai_o_optimiser_toggle_feature" />
									<input type="hidden" name="feature" value="<?php echo esc_attr( $key ); ?>" />
									<input type="hidden" name="feature_on" value="<?php echo $is_on ? '0' : '1'; ?>" />
									<button type="submit" class="ai-o-optimiser-feature-switch" role="switch" aria-checked="<?php echo $is_on ? 'true' : 'false'; ?>">
										<span class="ai-o-optimiser-feature-switch-track" aria-hidden="true"><span class="ai-o-optimiser-feature-switch-knob"></span></span>
										<span class="screen-reader-text"><?php
											echo esc_html( $is_on
												/* translators: %s: feature name. */
												? sprintf( __( 'Turn off %s', 'ai-o-optimiser' ), $card['label'] )
												/* translators: %s: feature name. */
												: sprintf( __( 'Turn on %s', 'ai-o-optimiser' ), $card['label'] ) );
										?></span>
									</button>
									<a href="<?php echo esc_url( self::settings_url( $card ) ); ?>"><?php esc_html_e( 'Settings', 'ai-o-optimiser' ); ?></a>
								</form>
							<?php else : ?>
								<p class="ai-o-optimiser-feature-card-actions"><a href="<?php echo esc_url( self::settings_url( $card ) ); ?>"><?php esc_html_e( 'Settings', 'ai-o-optimiser' ); ?></a></p>
							<?php endif; ?>
						</div>
					</div>
				<?php endforeach; ?>
			</div>
		</section>
		<?php
	}

	/**
	 * Flip one switch.
	 *
	 * Only the five keys above can be written, and only ever to a boolean, so
	 * a posted key that is not one of them writes nothing at all rather than
	 * adding a setting the plugin does not have.
	 *
	 * The guidance switch carries the two side effects its own save screen
	 * performs. Without them, switching generation off would leave the cached
	 * file being served by the site it was just switched off on, and the stored
	 * audit would keep describing files that no longer exist -- which is the
	 * badge on this very card.
	 *
	 * @return void
	 */
	public static function handle_toggle() {
		if ( ! current_user_can( AI_O_Optimiser_SENSITIVE_CAPABILITY ) || ! check_admin_referer( self::NONCE ) ) {
			wp_die( esc_html__( 'You are not allowed to do that.', 'ai-o-optimiser' ) );
		}

		$feature = isset( $_POST['feature'] ) ? sanitize_key( wp_unslash( $_POST['feature'] ) ) : '';
		if ( ! array_key_exists( $feature, self::cards() ) ) {
			wp_safe_redirect( self::return_url() );
			exit;
		}

		$settings             = self::settings();
		$settings[ $feature ] = ! empty( $_POST['feature_on'] );
		update_option( 'ai_o_optimiser_settings', $settings );

		if ( 'llms_generate_enabled' === $feature ) {
			if ( class_exists( 'AI_O_Optimiser_LLMS' ) ) {
				AI_O_Optimiser_LLMS::flush_guidance_cache();
			}
			delete_option( 'ai_o_optimiser_llms_audit_cache' );
		}

		wp_safe_redirect( self::return_url() );
		exit;
	}
}