<?php
/**
 * Notifications Page for ABMsense
 * 
 * @package ABMsense
 */

if (!defined('ABSPATH')) {
    exit; // Exit if accessed directly
}

/**
 * Add Notifications submenu page to WordPress admin
 */
function abmsense_add_notifications_submenu() {
    add_submenu_page(
        'abmsense_dashboard',
        __('Notifications', 'abmsense'),
        __('Notifications', 'abmsense'),
        'manage_options',
        'abmsense_notifications',
        'abmsense_notifications_page',
        3
    );
}
add_action('admin_menu', 'abmsense_add_notifications_submenu', 11);

/**
 * Enqueue admin scripts and styles
 */
function abmsense_notifications_admin_scripts() {
    $screen = get_current_screen();
    if ($screen && $screen->id === 'abmsense_page_abmsense_notifications') {
        wp_enqueue_style('abmsense-notifications', plugins_url('css/notifications.css', __FILE__));
        wp_enqueue_script('abmsense-admin-notifications', plugins_url('js/notifications-admin.js', __FILE__), array('jquery'), '1.0.0', true);
    }
}
add_action('admin_enqueue_scripts', 'abmsense_notifications_admin_scripts');

/**
 * AJAX handler for deleting users
 */
function abmsense_toggle_user_state() {
    // Check nonce
    check_ajax_referer('abmsense_add_user', 'nonce');
    
    // Check user permissions
    if (!current_user_can('manage_options')) {
        wp_send_json_error(array('message' => __('You do not have permission to perform this action.', 'abmsense')));
    }
    
    // Validate required fields
    if (empty($_POST['uid'])) {
        wp_send_json_error(array('message' => __('User ID is required.', 'abmsense')));
    }
    
    // Get API configuration
    $config = include(plugin_dir_path(__FILE__) . 'db_config.php');
    $public_key = $config['public_key'];
    
    // Prepare data for API
    $data = array(
        'uid' => intval($_POST['uid'])
    );
    
    // Encrypt the data
    $encrypted_data = abmsense_encrypt_data($data, $public_key);
    if (is_wp_error($encrypted_data)) {
        wp_send_json_error(array('message' => $encrypted_data->get_error_message()));
    }
    
    // Make API request to delete (mark as deleted) user
    $args = abmsense_get_api_request_args(wp_json_encode($encrypted_data));
    $response = abmsense_safe_api_request($config['delete_abmsense_user'], $args);
    
    if (is_wp_error($response)) {
        wp_send_json_error(array('message' => $response->get_error_message()));
    }
    
    $response_data = json_decode(wp_remote_retrieve_body($response), true);
    
    if (!$response_data || !isset($response_data['success']) || !$response_data['success']) {
        $error_message = isset($response_data['error']) ? $response_data['error'] : __('Failed to delete user.', 'abmsense');
        wp_send_json_error(array('message' => $error_message));
    }
    
    wp_send_json_success(array('message' => __('User deleted successfully.', 'abmsense')));
}
add_action('wp_ajax_abmsense_toggle_user_state', 'abmsense_toggle_user_state');

/**
 * AJAX handler for adding a new user
 */
function abmsense_add_user_ajax() {
    // Check nonce
    check_ajax_referer('abmsense_add_user', 'nonce');
    
    // Check user permissions
    if (!current_user_can('manage_options')) {
        wp_send_json_error(array('message' => __('You do not have permission to perform this action.', 'abmsense')));
    }
    
    $required_fields = array('customer_cid', 'full_name', 'email', 'real_time_alert', 'scheduled_report');
    foreach ($required_fields as $field) {
        if (empty($_POST[$field])) {
            // translators: %s: field name
            wp_send_json_error(array('message' => sprintf(__('Field %s is required.', 'abmsense'), $field)));
        }
    }
    
    // Get API configuration
    $config = include(plugin_dir_path(__FILE__) . 'db_config.php');
    $public_key = $config['public_key'];
    
    // Get current customer name (domain)
    $customer_name = isset($_SERVER['SERVER_NAME']) ? $_SERVER['SERVER_NAME'] : '';
    
    // Prepare data for API
    $user_data = array(
        'customer_name' => $customer_name,
        'full_name' => sanitize_text_field($_POST['full_name']),
        'email' => sanitize_email($_POST['email']),
        'real_time_alert' => sanitize_text_field($_POST['real_time_alert']),
        'scheduled_report' => sanitize_text_field($_POST['scheduled_report'])
    );
    
    // Encrypt the data
    $encrypted_data = abmsense_encrypt_data($user_data, $public_key);
    if (is_wp_error($encrypted_data)) {
        wp_send_json_error(array('message' => $encrypted_data->get_error_message()));
    }
    
    // Make API request to add user
    $args = abmsense_get_api_request_args(wp_json_encode($encrypted_data));
    $response = abmsense_safe_api_request($config['add_abmsense_user'], $args);
    
    if (is_wp_error($response)) {
        wp_send_json_error(array('message' => $response->get_error_message()));
    }
    
    $response_data = json_decode(wp_remote_retrieve_body($response), true);
    
    if (!$response_data || !isset($response_data['success']) || !$response_data['success']) {
        $error_message = isset($response_data['error']) ? $response_data['error'] : __('Failed to add user.', 'abmsense');
        wp_send_json_error(array('message' => $error_message));
    }
    
    wp_send_json_success(array('message' => __('User added successfully.', 'abmsense')));
}
add_action('wp_ajax_abmsense_add_user_ajax', 'abmsense_add_user_ajax');

/**
 * AJAX handler for editing a user
 */
function abmsense_edit_user_ajax() {
    try {
        // Check nonce
        check_ajax_referer('abmsense_add_user', 'nonce');
        
        // Check user permissions
        if (!current_user_can('manage_options')) {
            throw new Exception(__('You do not have permission to perform this action.', 'abmsense'));
        }
        
        $required_fields = array('uid', 'full_name', 'email', 'real_time_alert', 'scheduled_report');
        foreach ($required_fields as $field) {
            if (empty($_POST[$field])) {
                // translators: %s: field name
                throw new Exception(sprintf(__('Field %s is required.', 'abmsense'), $field));
            }
        }
        
        // Get API configuration
        $config = include(plugin_dir_path(__FILE__) . 'db_config.php');
        if (!isset($config['update_abmsense_user'])) {
            throw new Exception('API endpoint for updating user is not configured.');
        }
        $public_key = $config['public_key'];
        
        // Prepare data for API
        $user_data = array(
            'uid' => intval($_POST['uid']),
            'full_name' => sanitize_text_field($_POST['full_name']),
            'email' => sanitize_email($_POST['email']),
            'real_time_alert' => sanitize_text_field($_POST['real_time_alert']),
            'scheduled_report' => sanitize_text_field($_POST['scheduled_report'])
        );
                
        // Encrypt the data
        $encrypted_data = abmsense_encrypt_data($user_data, $public_key);
        if (is_wp_error($encrypted_data)) {
            throw new Exception('Encryption failed: ' . $encrypted_data->get_error_message());
        }
        
        // Make API request to update user
        $args = abmsense_get_api_request_args(wp_json_encode($encrypted_data));
        
        $response = abmsense_safe_api_request($config['update_abmsense_user'], $args);
        if (is_wp_error($response)) {
            throw new Exception('API request failed: ' . $response->get_error_message());
        }
        
        $response_body = wp_remote_retrieve_body($response);
        
        $response_data = json_decode($response_body, true);
        if (!$response_data) {
            throw new Exception('Invalid JSON response from API');
        }
        
        if (!isset($response_data['success']) || !$response_data['success']) {
            $error_message = isset($response_data['error']) ? $response_data['error'] : 'Unknown error occurred';
            throw new Exception('API returned error: ' . $error_message);
        }
        
        wp_send_json_success(array('message' => __('User updated successfully.', 'abmsense')));
        
    } catch (Exception $e) {
        abmsense_log('Edit User Error: ' . $e->getMessage(), 'error');
        abmsense_log('Edit User Error Trace: ' . $e->getTraceAsString(), 'error');
        wp_send_json_error(array(
            'message' => $e->getMessage(),
            'debug' => WP_DEBUG ? array(
                'error' => $e->getMessage(),
                'trace' => $e->getTraceAsString()
            ) : null
        ));
    }
}
add_action('wp_ajax_abmsense_edit_user_ajax', 'abmsense_edit_user_ajax');

/**
 * Get current customer's users and their notification settings via API
 */
function abmsense_get_customer_users() {
    try {
        // Get API configuration
        $config = include(plugin_dir_path(__FILE__) . 'db_config.php');
        $public_key = $config['public_key'];

        // Get current customer name (domain)
        $customer_name = isset($_SERVER['SERVER_NAME']) ? $_SERVER['SERVER_NAME'] : '';

        // First get the CID using the existing endpoint
        $cid_data = array(
            'customer_name' => $customer_name
        );

        // Encrypt the data
        $encrypted_cid_data = abmsense_encrypt_data($cid_data, $public_key);
        if (is_wp_error($encrypted_cid_data)) {
            throw new Exception($encrypted_cid_data->get_error_message());
        }

        // Make API request to get CID
        $args = abmsense_get_api_request_args(wp_json_encode($encrypted_cid_data));
        $cid_response = abmsense_safe_api_request($config['get_customer_cid'], $args);

        if (is_wp_error($cid_response)) {
            throw new Exception($cid_response->get_error_message());
        }

        $cid_response_data = json_decode(wp_remote_retrieve_body($cid_response), true);
        
        if (!$cid_response_data || !isset($cid_response_data['success']) || !$cid_response_data['success']) {
            throw new Exception('Failed to get customer ID: ' . ($cid_response_data['error'] ?? 'Unknown error'));
        }

        $customer = $cid_response_data['data'];

        // Now get users for this CID
        $users_data = array(
            'cid' => $customer['cid']
        );

        // Encrypt the users request data
        $encrypted_users_data = abmsense_encrypt_data($users_data, $public_key);
        if (is_wp_error($encrypted_users_data)) {
            throw new Exception($encrypted_users_data->get_error_message());
        }

        // Make API request to get users
        $args = abmsense_get_api_request_args(wp_json_encode($encrypted_users_data));
        $users_response = abmsense_safe_api_request($config['get_abmsense_users'], $args);

        if (is_wp_error($users_response)) {
            throw new Exception($users_response->get_error_message());
        }

        $users_response_data = json_decode(wp_remote_retrieve_body($users_response), true);

        if (!$users_response_data || !isset($users_response_data['success']) || !$users_response_data['success']) {
            throw new Exception('Failed to get users: ' . ($users_response_data['error'] ?? 'Unknown error'));
        }

        return array(
            'customer' => (object)$customer,
            'users' => isset($users_response_data['data']) ? $users_response_data['data'] : array()
        );

    } catch (Exception $e) {
        abmsense_log('Error: ' . $e->getMessage(), 'error');
        return false;
    }
}

/**
 * Callback function to display the Notifications page
 */
function abmsense_notifications_page() {
    if (!current_user_can('manage_options')) {
        wp_die(esc_html__('You do not have sufficient permissions to access this page.', 'abmsense'));
    }

    $data = abmsense_get_customer_users();
    ?>
    <div class="abmsense-notifications">
        <div class="abmsense-main-title" style="margin-bottom: 24px;">
            <h1>
                <?php echo esc_html__('ABMsense Notifications', 'abmsense'); ?>
                <span class="abmsense-beta-badge">BETA</span>
            </h1>
        </div>
        
        <?php if ($data === false): ?>
            <div class="abmsense-notice notice-error">
                <p><?php echo esc_html__('Could not retrieve customer information. Please check your API connection or contact support.', 'abmsense'); ?></p>
            </div>
        <?php else: ?>
            <div class="abmsense-card">
                <div class="abmsense-card-header">
                    <h2><?php echo esc_html__('User Notification Settings', 'abmsense'); ?></h2>
                    <div class="abmsense-card-actions">
                        <button id="add-user" class="button button-primary">
                            <?php echo esc_html__('Add New User', 'abmsense'); ?>
                        </button>
                    </div>
                </div>
                
                <div class="abmsense-card-body">
                    <?php if (empty($data['users'])): ?>
                        <p><?php echo esc_html__('No users found for the notifications.', 'abmsense'); ?></p>
                    <?php else: ?>
                        <div class="table-container">
                            <table class="abmsense-table">
                                <thead>
                                    <tr>
                                        <th><?php echo esc_html__('Name', 'abmsense'); ?></th>
                                        <th><?php echo esc_html__('Email', 'abmsense'); ?></th>
                                        <th><?php echo esc_html__('Hot Lead Alert', 'abmsense'); ?></th>
                                        <th><?php echo esc_html__('Report Schedule', 'abmsense'); ?></th>
                                        <th><?php echo esc_html__('Created', 'abmsense'); ?></th>
                                        <th><?php echo esc_html__('Last Updated', 'abmsense'); ?></th>
                                        <th><?php echo esc_html__('State', 'abmsense'); ?></th>
                                        <th><?php echo esc_html__('Actions', 'abmsense'); ?></th>
                                    </tr>
                                </thead>
                                <tbody>
                                    <?php foreach ($data['users'] as $user): ?>
                                        <tr>
                                            <td><?php echo esc_html($user['full_name']); ?></td>
                                            <td><?php echo esc_html($user['email']); ?></td>
                                            <td><?php echo esc_html($user['real_time_alert'] ?? 'No'); ?></td>
                                            <td><?php echo esc_html($user['scheduled_report']); ?></td>
                                            <td><?php echo esc_html(gmdate('Y-m-d', strtotime($user['created_date']))); ?></td>
                                            <td><?php echo isset($user['updated_date']) && $user['updated_date'] ? esc_html(gmdate('Y-m-d', strtotime($user['updated_date']))) : '-'; ?></td>
                                            <td>
                                                <span class="abmsense-state-badge <?php echo esc_attr(strtolower($user['state'] ?? 'active')); ?>">
                                                    <?php echo esc_html($user['state'] ?? 'active'); ?>
                                                </span>
                                            </td>
                                            <td>
                                                <?php if (($user['state'] ?? 'active') === 'active'): ?>
                                                    <div class="abmsense-button-group">
                                                        <button class="button button-small abmsense-edit-user" 
                                                                data-uid="<?php echo esc_attr($user['uid']); ?>"
                                                                data-name="<?php echo esc_attr($user['full_name']); ?>"
                                                                data-email="<?php echo esc_attr($user['email']); ?>"
                                                                data-real_time_alert="<?php echo esc_attr($user['real_time_alert']); ?>"
                                                                data-schedule="<?php echo esc_attr($user['scheduled_report']); ?>">
                                                            <?php echo esc_html__('Edit', 'abmsense'); ?>
                                                        </button>
                                                        <button class="button button-small abmsense-toggle-state" 
                                                                data-uid="<?php echo esc_attr($user['uid']); ?>">
                                                            <?php echo esc_html__('Delete', 'abmsense'); ?>
                                                        </button>
                                                    </div>
                                                <?php endif; ?>
                                            </td>
                                        </tr>
                                    <?php endforeach; ?>
                                </tbody>
                            </table>
                        </div>
                    <?php endif; ?>
                </div>
            </div>
        <?php endif; ?>
        <!-- Info legend for Hot Lead Alert and Report Schedule, now outside the card -->
        <div class="abmsense-notice" style="margin-top: 24px;">
            <strong>Info:</strong>
            <ul style="margin: 8px 0 0 18px;">
                <li><b>Hot Lead Alert:</b> When set to <b>Yes</b>, the user receives immediate email notifications whenever ABMsense detects a high-priority (hot) lead visiting the website. This helps them act quickly on the most valuable opportunities.</li>
                <li><b>Report Schedule:</b> Specifies how often the user receives a summary email report of the website's visitor activity and leads. Options include <b>Daily</b>, <b>Weekly</b>, or <b>Monthly</b>.</li>
            </ul>
        </div>
    </div>
    
    <!-- Add User Modal -->
    <div id="user-modal" class="abmsense-modal">
        <div class="abmsense-modal-content">
            <div class="abmsense-modal-header">
                <h2><?php echo esc_html__('Add New User', 'abmsense'); ?></h2>
                <span class="abmsense-modal-close">&times;</span>
            </div>
            <div class="abmsense-modal-body">
                <form id="add-user-form">
                    <?php wp_nonce_field('abmsense_add_user', 'abmsense_add_user_nonce'); ?>
                    <?php if (isset($data['customer']) && $data['customer']): ?>
                        <input type="hidden" name="customer_cid" id="customer_cid" value="<?php echo esc_attr($data['customer']->cid); ?>">
                    <?php else: ?>
                        <div class="notice notice-error">
                            <p><?php echo esc_html__('Could not retrieve customer information. Please try again later or contact support.', 'abmsense'); ?></p>
                        </div>
                    <?php endif; ?>
                    
                    <div class="abmsense-form-group">
                        <label for="full_name"><?php echo esc_html__('Full Name', 'abmsense'); ?></label>
                        <input type="text" name="full_name" id="full_name" required>
                    </div>
                    
                    <div class="abmsense-form-group">
                        <label for="email"><?php echo esc_html__('Email', 'abmsense'); ?></label>
                        <input type="email" name="email" id="email" required 
                               pattern="[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$"
                               title="Please enter a valid email address (e.g., user@domain.com)"
                               oninvalid="this.setCustomValidity('Please enter a valid email address')"
                               oninput="this.setCustomValidity('')">
                    </div>
                    
                    <div class="abmsense-form-group">
                        <label for="real_time_alert"><?php echo esc_html__('Hot Lead Alert', 'abmsense'); ?></label>
                        <select name="real_time_alert" id="real_time_alert">
                            <option value="No"><?php echo esc_html__('No', 'abmsense'); ?></option>
                            <option value="Yes"><?php echo esc_html__('Yes', 'abmsense'); ?></option>
                        </select>
                    </div>
                    
                    <div class="abmsense-form-group">
                        <label for="scheduled_report"><?php echo esc_html__('Report Schedule', 'abmsense'); ?></label>
                        <select name="scheduled_report" id="scheduled_report">
                            <option value="Daily"><?php echo esc_html__('Daily', 'abmsense'); ?></option>
                            <option value="Weekly"><?php echo esc_html__('Weekly', 'abmsense'); ?></option>
                            <option value="Monthly"><?php echo esc_html__('Monthly', 'abmsense'); ?></option>
                        </select>
                    </div>
                    
                    <div class="abmsense-form-group">
                        <button type="submit" class="button button-primary"><?php echo esc_html__('Submit', 'abmsense'); ?></button>
                        <div id="abmsense-form-message"></div>
                    </div>
                </form>
            </div>
        </div>
    </div>

    <!-- Edit User Modal -->
    <div id="edit-user-modal" class="abmsense-modal">
        <div class="abmsense-modal-content">
            <div class="abmsense-modal-header">
                <h2><?php echo esc_html__('Edit User', 'abmsense'); ?></h2>
                <span class="abmsense-modal-close">&times;</span>
            </div>
            <div class="abmsense-modal-body">
                <form id="edit-user-form">
                    <?php wp_nonce_field('abmsense_add_user', 'abmsense_add_user_nonce'); ?>
                    <input type="hidden" name="uid" id="edit_uid">
                    
                    <div class="abmsense-form-group">
                        <label for="edit_full_name"><?php echo esc_html__('Full Name', 'abmsense'); ?></label>
                        <input type="text" name="full_name" id="edit_full_name" required>
                    </div>
                    
                    <div class="abmsense-form-group">
                        <label for="edit_email"><?php echo esc_html__('Email', 'abmsense'); ?></label>
                        <input type="email" name="email" id="edit_email" required
                               pattern="[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$"
                               title="Please enter a valid email address (e.g., user@domain.com)"
                               oninvalid="this.setCustomValidity('Please enter a valid email address')"
                               oninput="this.setCustomValidity('')">
                    </div>
                    
                    <div class="abmsense-form-group">
                        <label for="edit_real_time_alert"><?php echo esc_html__('Hot Lead Alert', 'abmsense'); ?></label>
                        <select name="real_time_alert" id="edit_real_time_alert">
                            <option value="No"><?php echo esc_html__('No', 'abmsense'); ?></option>
                            <option value="Yes"><?php echo esc_html__('Yes', 'abmsense'); ?></option>
                        </select>
                    </div>
                    
                    <div class="abmsense-form-group">
                        <label for="edit_scheduled_report"><?php echo esc_html__('Report Schedule', 'abmsense'); ?></label>
                        <select name="scheduled_report" id="edit_scheduled_report">
                            <option value="Daily"><?php echo esc_html__('Daily', 'abmsense'); ?></option>
                            <option value="Weekly"><?php echo esc_html__('Weekly', 'abmsense'); ?></option>
                            <option value="Monthly"><?php echo esc_html__('Monthly', 'abmsense'); ?></option>
                        </select>
                    </div>
                    
                    <div class="abmsense-form-group">
                        <button type="submit" class="button button-primary"><?php echo esc_html__('Update', 'abmsense'); ?></button>
                        <div id="edit-form-message"></div>
                    </div>
                </form>
            </div>
        </div>
    </div>
    <?php
}