<?php
/**
 * AKSRT Balance Service — recharge packages + transfer REST.
 *
 * Zibll parity targets:
 * - balance charge packages (pay_balance_product)
 * - balance/points transfer
 * - credit wallet after paid recharge orders
 *
 * @package AKSRT
 */

defined('ABSPATH') || exit;

class AKSRT_Balance_Service {

	private static $instance = null;

	public static function get_instance(): self {
		if (null === self::$instance) {
			self::$instance = new self();
		}
		return self::$instance;
	}

	public function init(): void {
		add_action('rest_api_init', [$this, 'register_routes']);
		add_action('aksrt_order_paid', [$this, 'on_order_paid'], 20, 2);
	}

	public function register_routes(): void {
		register_rest_route('aksrt/v1', '/pay/balance/charge', [
			[
				'methods'             => WP_REST_Server::READABLE,
				'callback'            => [$this, 'rest_charge_options'],
				'permission_callback' => static function () {
					return is_user_logged_in();
				},
			],
			[
				'methods'             => WP_REST_Server::CREATABLE,
				'callback'            => [$this, 'rest_charge_create'],
				'permission_callback' => static function () {
					return is_user_logged_in();
				},
			],
		]);

		register_rest_route('aksrt/v1', '/pay/transfer', [
			[
				'methods'             => WP_REST_Server::CREATABLE,
				'callback'            => [$this, 'rest_transfer'],
				'permission_callback' => static function () {
					return is_user_logged_in();
				},
			],
		]);

		register_rest_route('aksrt/v1', '/pay/transfer/search', [
			[
				'methods'             => WP_REST_Server::READABLE,
				'callback'            => [$this, 'rest_transfer_search'],
				'permission_callback' => static function () {
					return is_user_logged_in();
				},
			],
		]);

		register_rest_route('aksrt/v1', '/pay/balance/exchange', [
			[
				'methods'             => WP_REST_Server::CREATABLE,
				'callback'            => [$this, 'rest_exchange_from_credits'],
				'permission_callback' => static function () {
					return is_user_logged_in();
				},
			],
		]);

		register_rest_route('aksrt/v1', '/pay/points/buy', [
			[
				'methods'             => WP_REST_Server::READABLE,
				'callback'            => [$this, 'rest_points_buy_options'],
				'permission_callback' => static function () {
					return is_user_logged_in();
				},
			],
			[
				'methods'             => WP_REST_Server::CREATABLE,
				'callback'            => [$this, 'rest_points_buy_create'],
				'permission_callback' => static function () {
					return is_user_logged_in();
				},
			],
		]);

		register_rest_route('aksrt/v1', '/pay/balance/withdraw', [
			[
				'methods'             => WP_REST_Server::CREATABLE,
				'callback'            => [$this, 'rest_balance_withdraw'],
				'permission_callback' => static function () {
					return is_user_logged_in();
				},
			],
		]);
	}

	/**
	 * GET charge options (packages + methods + limits).
	 */
	public function rest_charge_options(WP_REST_Request $request) {
		if (!class_exists('AKSRT_Balance') || !AKSRT_Balance::enabled()) {
			return new WP_Error('aksrt_balance_disabled', __('余额功能未启用', 'aksrt'), ['status' => 403]);
		}
		$user_id = get_current_user_id();
		return rest_ensure_response([
			'success' => true,
			'data'    => $this->get_charge_view($user_id),
		]);
	}

	/**
	 * POST create recharge order and initiate payment.
	 */
	public function rest_charge_create(WP_REST_Request $request) {
		if (!class_exists('AKSRT_Balance') || !AKSRT_Balance::enabled()) {
			return new WP_Error('aksrt_balance_disabled', __('余额功能未启用', 'aksrt'), ['status' => 403]);
		}
		$user_id = get_current_user_id();
		$params  = $request->get_json_params();
		if (!is_array($params)) {
			$params = $request->get_params();
		}
		$package_key    = sanitize_text_field((string) ($params['package'] ?? 'custom'));
		$custom_price   = isset($params['custom_price']) ? (float) $params['custom_price'] : 0.0;
		$payment_method = sanitize_key((string) ($params['payment_method'] ?? 'alipay'));

		$result = $this->create_charge_order($user_id, $package_key, $custom_price, $payment_method);
		if (is_wp_error($result)) {
			return $result;
		}
		return rest_ensure_response(['success' => true, 'data' => $result]);
	}

	/**
	 * Transfer balance or points between users.
	 */
	public function rest_transfer(WP_REST_Request $request) {
		$params = $request->get_json_params();
		if (!is_array($params)) {
			$params = $request->get_params();
		}
		$type        = sanitize_key((string) ($params['type'] ?? 'balance'));
		$recipient   = (int) ($params['recipient'] ?? 0);
		$amount_raw  = $params['amount'] ?? $params['price'] ?? 0;
		$from_id     = get_current_user_id();

		if (!in_array($type, ['balance', 'points'], true)) {
			return new WP_Error('aksrt_transfer_type', __('转账类型无效', 'aksrt'), ['status' => 400]);
		}
		if ($from_id <= 0) {
			return new WP_Error('aksrt_need_login', __('请先登录', 'aksrt'), ['status' => 401]);
		}
		if ($recipient <= 0 || $recipient === $from_id) {
			return new WP_Error('aksrt_transfer_user', __('请选择有效的收款用户', 'aksrt'), ['status' => 400]);
		}
		if (!get_userdata($recipient)) {
			return new WP_Error('aksrt_transfer_user', __('收款用户不存在', 'aksrt'), ['status' => 404]);
		}

		$cfg = class_exists('AKSRT_Settings') ? AKSRT_Settings::get_payment_recharge_settings() : [];
		if ($type === 'balance') {
			if (empty($cfg['enabled']) || empty($cfg['transfer']['enabled'])) {
				return new WP_Error('aksrt_transfer_closed', __('余额转账未开启', 'aksrt'), ['status' => 403]);
			}
			if (class_exists('AKSRT_Settings_Capabilities') && !AKSRT_Settings_Capabilities::user_can('balance_transfer', $from_id)) {
				return new WP_Error('aksrt_transfer_forbidden', __('当前账号无权转账余额', 'aksrt'), ['status' => 403]);
			}
			$amount = round((float) $amount_raw, 2);
			if ($amount <= 0) {
				return new WP_Error('aksrt_transfer_amount', __('请输入有效金额', 'aksrt'), ['status' => 400]);
			}
			if (!class_exists('AKSRT_Balance')) {
				return new WP_Error('aksrt_balance_unavailable', __('余额系统不可用', 'aksrt'), ['status' => 500]);
			}
			$from_bal = AKSRT_Balance::balance($from_id);
			if ($from_bal < $amount) {
				return new WP_Error('aksrt_balance_insufficient', __('余额不足', 'aksrt'), ['status' => 402]);
			}
			$fee_rate = max(0, min(50, (int) ($cfg['transfer']['service_charge'] ?? 0)));
			$credit   = $fee_rate > 0 ? round($amount * (100 - $fee_rate) / 100, 2) : $amount;

			$from_user = wp_get_current_user();
			$to_user   = get_userdata($recipient);
			$deduct = AKSRT_Balance::deduct(
				$from_id,
				$amount,
				'transfer_out',
				['type' => 'user', 'id' => $recipient],
				sprintf(__('转账给用户[%s]', 'aksrt'), $to_user ? $to_user->display_name : (string) $recipient)
			);
			if (is_wp_error($deduct)) {
				return $deduct;
			}
			AKSRT_Balance::add(
				$recipient,
				$credit,
				'transfer_in',
				['type' => 'user', 'id' => $from_id],
				sprintf(__('来自用户[%s]的转账', 'aksrt'), $from_user->display_name ?: (string) $from_id)
			);
			return rest_ensure_response([
				'success' => true,
				'data'    => [
					'message' => __('转账成功', 'aksrt'),
					'reload'  => true,
					'balance' => AKSRT_Balance::balance($from_id),
				],
			]);
		}

		// points transfer
		$points_transfer_on = !empty(AKSRT_Settings::get_all()['points_transfer_s']);
		if (!class_exists('AKSRT_Settings') || !AKSRT_Settings::credits_enabled() || !$points_transfer_on) {
			return new WP_Error('aksrt_transfer_closed', __('积分转账未开启', 'aksrt'), ['status' => 403]);
		}
		if (class_exists('AKSRT_Settings_Capabilities') && !AKSRT_Settings_Capabilities::user_can('points_transfer', $from_id)) {
			return new WP_Error('aksrt_transfer_forbidden', __('当前账号无权转账积分', 'aksrt'), ['status' => 403]);
		}
		$amount = (int) $amount_raw;
		if ($amount <= 0) {
			return new WP_Error('aksrt_transfer_amount', __('请输入有效积分', 'aksrt'), ['status' => 400]);
		}
		if (!class_exists('AKSRT_Credits')) {
			return new WP_Error('aksrt_credits_unavailable', __('积分系统不可用', 'aksrt'), ['status' => 500]);
		}
		$fee_rate = max(0, min(50, (int) (AKSRT_Settings::get_all()['points_service_charge'] ?? 0)));
		$credit   = $fee_rate > 0 ? (int) floor($amount * (100 - $fee_rate) / 100) : $amount;
		$from_user = wp_get_current_user();
		$to_user   = get_userdata($recipient);
		$deduct = AKSRT_Credits::deduct(
			$from_id,
			$amount,
			'transfer_out',
			['type' => 'user', 'id' => $recipient],
			sprintf(__('转账给用户[%s]', 'aksrt'), $to_user ? $to_user->display_name : (string) $recipient)
		);
		if (is_wp_error($deduct)) {
			return $deduct;
		}
		AKSRT_Credits::add(
			$recipient,
			$credit,
			'transfer_in',
			['type' => 'user', 'id' => $from_id],
			sprintf(__('来自用户[%s]的转账', 'aksrt'), $from_user->display_name ?: (string) $from_id)
		);
		return rest_ensure_response([
			'success' => true,
			'data'    => [
				'message' => __('转账成功', 'aksrt'),
				'reload'  => true,
				'balance' => AKSRT_Credits::balance($from_id),
			],
		]);
	}

	public function rest_transfer_search(WP_REST_Request $request) {
		$s = sanitize_text_field((string) $request->get_param('s'));
		if (mb_strlen($s) < 1) {
			return rest_ensure_response(['success' => true, 'data' => ['users' => []]]);
		}
		$exclude = [get_current_user_id()];
		$q = new WP_User_Query([
			'search'         => '*' . $s . '*',
			'search_columns' => ['user_login', 'user_nicename', 'display_name', 'user_email'],
			'exclude'        => $exclude,
			'number'         => 20,
			'fields'         => ['ID', 'display_name', 'user_login'],
		]);
		$users = [];
		foreach ((array) $q->get_results() as $u) {
			$users[] = [
				'id'           => (int) $u->ID,
				'display_name' => (string) $u->display_name,
				'user_login'   => (string) $u->user_login,
				'avatar'       => get_avatar_url((int) $u->ID, ['size' => 48]),
			];
		}
		return rest_ensure_response(['success' => true, 'data' => ['users' => $users]]);
	}

	/**
	 * Exchange points → cash wallet (pay_balance_exchange_*).
	 */
	public function rest_exchange_from_credits(WP_REST_Request $request) {
		if (!class_exists('AKSRT_Balance') || !AKSRT_Balance::enabled()) {
			return new WP_Error('aksrt_balance_disabled', __('余额功能未启用', 'aksrt'), ['status' => 403]);
		}
		$cfg = class_exists('AKSRT_Settings') ? AKSRT_Settings::get_payment_recharge_settings() : [];
		if (empty($cfg['exchange']['enabled'])) {
			return new WP_Error('aksrt_exchange_closed', __('积分兑换余额未开启', 'aksrt'), ['status' => 403]);
		}
		if (!class_exists('AKSRT_Credits') || !AKSRT_Settings::credits_enabled()) {
			return new WP_Error('aksrt_credits_disabled', __('积分功能未启用', 'aksrt'), ['status' => 403]);
		}
		$params = $request->get_json_params();
		if (!is_array($params)) {
			$params = $request->get_params();
		}
		$points = (int) ($params['points'] ?? 0);
		$rate   = max(1, (int) ($cfg['exchange']['rate'] ?? 100)); // N points = 1 yuan
		if ($points < $rate) {
			return new WP_Error('aksrt_exchange_min', sprintf(__('最少兑换 %d 积分', 'aksrt'), $rate), ['status' => 400]);
		}
		// Floor to whole yuan.
		$yuan = (int) floor($points / $rate);
		$cost = $yuan * $rate;
		if ($yuan <= 0 || $cost <= 0) {
			return new WP_Error('aksrt_exchange_amount', __('兑换数量无效', 'aksrt'), ['status' => 400]);
		}
		$user_id = get_current_user_id();
		$deduct  = AKSRT_Credits::deduct(
			$user_id,
			$cost,
			'exchange_to_balance',
			['type' => 'balance'],
			sprintf(__('积分兑换余额 %d 元', 'aksrt'), $yuan)
		);
		if (is_wp_error($deduct)) {
			return $deduct;
		}
		$add = AKSRT_Balance::add(
			$user_id,
			(float) $yuan,
			'exchange_from_credits',
			['type' => 'credits'],
			sprintf(__('积分兑换：消耗 %d 积分', 'aksrt'), $cost)
		);
		if (is_wp_error($add)) {
			// best-effort refund points
			AKSRT_Credits::add($user_id, $cost, 'exchange_refund', [], __('兑换失败退回积分', 'aksrt'));
			return $add;
		}
		return rest_ensure_response([
			'success' => true,
			'data'    => [
				'message'        => sprintf(__('兑换成功：+%d 元', 'aksrt'), $yuan),
				'wallet_balance' => AKSRT_Balance::balance($user_id),
				'credit_balance' => AKSRT_Credits::balance($user_id),
				'reload'         => true,
			],
		]);
	}

	/**
	 * When a recharge order is paid, credit the wallet.
	 *
	 * @param string               $order_number Order number.
	 * @param array<string,mixed>  $order        Order row.
	 */
	public function on_order_paid(string $order_number, array $order = []): void {
		if ($order === [] && class_exists('AKSRT_Order_Repository')) {
			$order = AKSRT_Order_Repository::get_instance()->get($order_number) ?: [];
		}
		if (!$order) {
			return;
		}
		$type = sanitize_key((string) ($order['product_type'] ?? ''));
		$user_id = (int) ($order['user_id'] ?? 0);
		if ($user_id <= 0) {
			return;
		}

		// Points purchase fulfill (zibll order_type=9).
		if ($type === AKSRT_Domain_Model::ORDER_PRODUCT_POINTS_BUY) {
			if (!class_exists('AKSRT_Credits')) {
				return;
			}
			$note = json_decode((string) ($order['note'] ?? ''), true);
			if (!is_array($note)) {
				$note = [];
			}
			if (!empty($note['points_credited'])) {
				return;
			}
			$rate = 100;
			if (class_exists('AKSRT_Settings')) {
				$rate = max(1, (int) (AKSRT_Settings::get_all()['points_rate'] ?? 100));
			}
			$points = isset($note['points_amount'])
				? (int) $note['points_amount']
				: (int) round((float) ($order['amount'] ?? 0) * $rate);
			if ($points <= 0) {
				return;
			}
			$add = AKSRT_Credits::add(
				$user_id,
				$points,
				'points_buy',
				['type' => 'order', 'order' => $order_number],
				sprintf(__('购买积分订单 %s', 'aksrt'), $order_number)
			);
			if (is_wp_error($add)) {
				return;
			}
			$note['points_credited'] = 1;
			$note['credited_points'] = $points;
			global $wpdb;
			$wpdb->update(
				$wpdb->prefix . 'aksrt_order',
				['note' => wp_json_encode($note, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES)],
				['order_number' => $order_number],
				['%s'],
				['%s']
			);
			return;
		}

		if ($type !== AKSRT_Domain_Model::ORDER_PRODUCT_RECHARGE) {
			return;
		}
		if (!class_exists('AKSRT_Balance')) {
			return;
		}
		$note = json_decode((string) ($order['note'] ?? ''), true);
		if (!is_array($note)) {
			$note = [];
		}
		if (!empty($note['balance_credited'])) {
			return;
		}
		$credit_amount = isset($note['credit_amount'])
			? round((float) $note['credit_amount'], 2)
			: round((float) ($order['amount'] ?? 0), 2);
		if ($credit_amount <= 0) {
			return;
		}
		$result = AKSRT_Balance::add(
			$user_id,
			$credit_amount,
			'recharge',
			['type' => 'order', 'order' => $order_number],
			sprintf(__('余额充值订单 %s', 'aksrt'), $order_number)
		);
		if (is_wp_error($result)) {
			return;
		}
		$note['balance_credited'] = 1;
		$note['credited_amount']  = $credit_amount;
		global $wpdb;
		$wpdb->update(
			$wpdb->prefix . 'aksrt_order',
			['note' => wp_json_encode($note, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES)],
			['order_number' => $order_number],
			['%s'],
			['%s']
		);
	}

	/**
	 * @return array<string,mixed>
	 */
	public function get_charge_view(int $user_id): array {
		$cfg = class_exists('AKSRT_Settings') ? AKSRT_Settings::get_payment_recharge_settings() : [];
		$packages = $this->parse_packages((string) ($cfg['packages_raw'] ?? ''));
		$custom_s = !isset($cfg['product']['custom_s']) || !empty($cfg['product']['custom_s']);
		$custom_limit = max(1, (int) ($cfg['product']['custom_limit'] ?? 9999));
		$methods = [];
		if (function_exists('aksrt_list_cash_payment_methods')) {
			// Exclude balance gateway for recharge (cannot pay wallet with wallet).
			foreach (aksrt_list_cash_payment_methods(true) as $m) {
				$id = is_array($m) ? (string) ($m['id'] ?? '') : (string) $m;
				if ($id === '' || $id === 'balance') {
					continue;
				}
				$methods[] = is_array($m) ? $m : ['id' => $id, 'name' => $id];
			}
		}
		return [
			'enabled'       => !empty($cfg['enabled']),
			'desc'          => (string) ($cfg['desc'] ?? ''),
			'wallet'        => class_exists('AKSRT_Balance') ? AKSRT_Balance::balance($user_id) : 0.0,
			'packages'      => $packages,
			'custom_s'      => $custom_s,
			'custom_limit'  => $custom_limit,
			'currency_mark' => (string) ($cfg['product']['tag'] ?? '元'),
			'payment_methods' => $methods,
			'transfer'      => [
				'enabled'        => !empty($cfg['transfer']['enabled']),
				'service_charge' => (int) ($cfg['transfer']['service_charge'] ?? 0),
				'desc'           => (string) ($cfg['transfer']['desc'] ?? ''),
			],
			'exchange'      => [
				'enabled' => !empty($cfg['exchange']['enabled']),
				'rate'    => (int) ($cfg['exchange']['rate'] ?? 100),
				'desc'    => (string) ($cfg['exchange']['desc'] ?? ''),
			],
			'pass_charge'   => is_array($cfg['pass_charge'] ?? null) ? $cfg['pass_charge'] : [],
		];
	}

	/**
	 * @return array<int,array{key:string,price:float,pay_price:float,title:string,tag:string}>
	 */
	public function parse_packages(string $raw): array {
		$out = [];
		$lines = preg_split('/\r\n|\r|\n/', $raw) ?: [];
		$i = 0;
		foreach ($lines as $line) {
			$line = trim((string) $line);
			if ($line === '') {
				continue;
			}
			// pay|credit|title  OR  credit|pay|title  — Zibll uses price(credit)|pay_price|tag
			// Admin help: 支付金额|到账金额|标题
			$parts = array_map('trim', explode('|', $line));
			if (count($parts) < 2) {
				continue;
			}
			$pay    = (float) $parts[0];
			$credit = (float) $parts[1];
			$title  = $parts[2] ?? '';
			if ($pay <= 0 || $credit <= 0) {
				continue;
			}
			$out[] = [
				'key'       => (string) $i,
				'pay_price' => round($pay, 2),
				'price'     => round($credit, 2),
				'title'     => $title !== '' ? $title : sprintf(__('充值 %s 元', 'aksrt'), (string) $credit),
				'tag'       => $title,
			];
			$i++;
		}
		return $out;
	}

	/**
	 * @return array<string,mixed>|WP_Error
	 */
	public function create_charge_order(int $user_id, string $package_key, float $custom_price, string $payment_method) {
		if ($user_id <= 0) {
			return new WP_Error('aksrt_need_login', __('请先登录', 'aksrt'), ['status' => 401]);
		}
		if (!class_exists('AKSRT_Order_Repository') || !class_exists('AKSRT_Order')) {
			return new WP_Error('aksrt_pay_unavailable', __('订单系统不可用', 'aksrt'), ['status' => 500]);
		}
		$view = $this->get_charge_view($user_id);
		$credit_amount = 0.0;
		$pay_amount    = 0.0;
		$title         = __('余额充值', 'aksrt');

		if ($package_key === 'custom' || $package_key === '') {
			if (empty($view['custom_s'])) {
				return new WP_Error('aksrt_custom_closed', __('未开放自定义金额', 'aksrt'), ['status' => 400]);
			}
			$custom_price = round($custom_price, 2);
			$min = 1.0;
			$max = (float) $view['custom_limit'];
			if ($custom_price < $min || $custom_price > $max) {
				return new WP_Error('aksrt_custom_limit', sprintf(__('充值金额需在 %s ~ %s 之间', 'aksrt'), (string) $min, (string) $max), ['status' => 400]);
			}
			$pay_amount    = $custom_price;
			$credit_amount = $custom_price;
			$title         = sprintf(__('自定义充值 %s 元', 'aksrt'), (string) $custom_price);
			$package_key   = 'custom';
		} else {
			$found = null;
			foreach ((array) $view['packages'] as $pkg) {
				if ((string) ($pkg['key'] ?? '') === (string) $package_key) {
					$found = $pkg;
					break;
				}
			}
			if (!$found) {
				return new WP_Error('aksrt_invalid_package', __('充值套餐无效', 'aksrt'), ['status' => 400]);
			}
			$pay_amount    = (float) $found['pay_price'];
			$credit_amount = (float) $found['price'];
			$title         = (string) $found['title'];
		}

		if ($pay_amount <= 0 || $credit_amount <= 0) {
			return new WP_Error('aksrt_invalid_price', __('金额无效', 'aksrt'), ['status' => 400]);
		}

		$payment_method = sanitize_key($payment_method);
		if ($payment_method === '' || $payment_method === 'balance') {
			// Prefer first non-balance method.
			$methods = $view['payment_methods'] ?? [];
			$payment_method = !empty($methods[0]['id']) ? (string) $methods[0]['id'] : 'alipay';
		}

		$note = wp_json_encode([
			'balance_recharge' => 1,
			'package'          => $package_key,
			'credit_amount'    => $credit_amount,
			'pay_amount'       => $pay_amount,
			'title'            => $title,
		], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);

		$order_number = AKSRT_Order_Repository::get_instance()->create([
			'user_id'        => $user_id,
			'product_type'   => AKSRT_Domain_Model::ORDER_PRODUCT_RECHARGE,
			'product_id'     => 0,
			'amount'         => $pay_amount,
			'currency'       => 'CNY',
			'status'         => AKSRT_Order::STATUS_PENDING,
			'payment_method' => $payment_method,
			'note'           => is_string($note) ? $note : '',
			'expires_at'     => gmdate('Y-m-d H:i:s', time() + 30 * MINUTE_IN_SECONDS),
		]);
		if ($order_number === '') {
			return new WP_Error('aksrt_order_create_failed', __('创建订单失败', 'aksrt'), ['status' => 500]);
		}

		$order = AKSRT_Order_Repository::get_instance()->get($order_number);
		if (!$order) {
			return new WP_Error('aksrt_order_create_failed', __('创建订单失败', 'aksrt'), ['status' => 500]);
		}
		$order['subject'] = $title;
		$order['payment_method'] = $payment_method;

		if (!class_exists('AKSRT_Payment_Gateway')) {
			return new WP_Error('aksrt_pay_unavailable', __('支付网关不可用', 'aksrt'), ['status' => 500]);
		}
		$gateway = AKSRT_Payment_Gateway::get_instance()->get_gateway($payment_method);
		if (!$gateway) {
			return new WP_Error('aksrt_gateway_unavailable', __('当前支付方式不可用', 'aksrt'), [
				'status' => 400,
				'order_number' => $order_number,
			]);
		}
		if (method_exists($gateway, 'is_configured') && !$gateway->is_configured()) {
			return new WP_Error('aksrt_gateway_unconfigured', __('该支付方式尚未配置，请联系站长。', 'aksrt'), [
				'status' => 400,
				'order_number' => $order_number,
			]);
		}

		$payment_result = $gateway->create_payment($order);
		if (empty($payment_result['success'])) {
			return new WP_Error(
				'aksrt_pay_failed',
				(string) ($payment_result['message'] ?? __('支付失败', 'aksrt')),
				['status' => 402, 'order_number' => $order_number]
			);
		}

		$code_url = (string) ($payment_result['payment_data']['code_url'] ?? '');
		$payment_url = (string) ($payment_result['payment_url'] ?? '');
		if ($payment_url !== '' || $code_url !== '') {
			return [
				'redirect'      => true,
				'payment_url'   => $payment_url,
				'qr_content'    => $code_url,
				'order_number'  => $order_number,
				'amount'        => $pay_amount,
				'credit_amount' => $credit_amount,
				'message'       => $payment_result['message'] ?? __('请在新页面完成支付。', 'aksrt'),
				'reload'        => false,
				'poll'          => true,
			];
		}

		// Synchronous gateway (rare for recharge): mark paid → on_order_paid credits wallet.
		$paid = AKSRT_Order::get_instance()->update_status($order_number, AKSRT_Order::STATUS_PAID, [
			'payment_method'         => $payment_method,
			'payment_transaction_id' => sanitize_text_field((string) ($payment_result['transaction_id'] ?? '')),
			'note'                   => __('余额充值支付完成', 'aksrt'),
		]);
		if (!$paid) {
			return new WP_Error('aksrt_order_confirm_failed', __('支付确认失败', 'aksrt'), ['status' => 500]);
		}
		// Ensure credit even if status hook shape differs.
		$this->on_order_paid($order_number, AKSRT_Order_Repository::get_instance()->get($order_number) ?: $order);

		return [
			'redirect'      => false,
			'order_number'  => $order_number,
			'amount'        => $pay_amount,
			'credit_amount' => $credit_amount,
			'wallet'        => AKSRT_Balance::balance($user_id),
			'message'       => __('充值成功', 'aksrt'),
			'reload'        => true,
		];
	}

	public function rest_points_buy_options(WP_REST_Request $request) {
		if (!$this->points_buy_enabled()) {
			return new WP_Error('aksrt_points_buy_disabled', __('购买积分未开启', 'aksrt'), ['status' => 403]);
		}
		return rest_ensure_response([
			'success' => true,
			'data'    => $this->get_points_buy_view(get_current_user_id()),
		]);
	}

	public function rest_points_buy_create(WP_REST_Request $request) {
		if (!$this->points_buy_enabled()) {
			return new WP_Error('aksrt_points_buy_disabled', __('购买积分未开启', 'aksrt'), ['status' => 403]);
		}
		$params = $request->get_json_params();
		if (!is_array($params)) {
			$params = $request->get_params();
		}
		$package_key    = sanitize_text_field((string) ($params['package'] ?? 'custom'));
		$custom_points  = (int) ($params['custom_points'] ?? $params['points'] ?? 0);
		$payment_method = sanitize_key((string) ($params['payment_method'] ?? 'alipay'));
		$result = $this->create_points_buy_order(get_current_user_id(), $package_key, $custom_points, $payment_method);
		if (is_wp_error($result)) {
			return $result;
		}
		return rest_ensure_response(['success' => true, 'data' => $result]);
	}

	public function rest_balance_withdraw(WP_REST_Request $request) {
		if (!class_exists('AKSRT_Balance') || !AKSRT_Balance::enabled()) {
			return new WP_Error('aksrt_balance_disabled', __('余额功能未启用', 'aksrt'), ['status' => 403]);
		}
		$settings = class_exists('AKSRT_Settings') ? AKSRT_Settings::get_all() : [];
		if (empty($settings['pay_balance_withdraw_s'])) {
			return new WP_Error('aksrt_withdraw_closed', __('余额提现未开启', 'aksrt'), ['status' => 403]);
		}
		if (!class_exists('AKSRT_Withdrawal')) {
			return new WP_Error('aksrt_withdraw_unavailable', __('提现系统不可用', 'aksrt'), ['status' => 500]);
		}
		$params = $request->get_json_params();
		if (!is_array($params)) {
			$params = $request->get_params();
		}
		$user_id = get_current_user_id();
		if (class_exists('AKSRT_Settings_Capabilities') && !AKSRT_Settings_Capabilities::user_can('balance_withdraw', $user_id)) {
			return new WP_Error('aksrt_withdraw_forbidden', __('当前账号无权提现', 'aksrt'), ['status' => 403]);
		}
		$amount  = round((float) ($params['amount'] ?? 0), 2);
		$method  = sanitize_key((string) ($params['method'] ?? 'alipay'));
		$account = sanitize_textarea_field((string) ($params['account_info'] ?? $params['account'] ?? ''));
		$lowest  = max(1, (float) ($settings['pay_balance_withdraw_lowest_money'] ?? $settings['pay_rebate_withdraw_lowest_money'] ?? 50));
		if ($amount < $lowest) {
			return new WP_Error('aksrt_withdraw_min', sprintf(__('最低提现 %s 元', 'aksrt'), (string) $lowest), ['status' => 400]);
		}
		if ($account === '') {
			return new WP_Error('aksrt_withdraw_account', __('请填写收款账号信息', 'aksrt'), ['status' => 400]);
		}
		// One open balance withdrawal at a time (Zibll parity).
		if (AKSRT_Withdrawal::get_instance()->has_open_withdrawal($user_id)) {
			return new WP_Error('aksrt_withdraw_pending', __('您有处理中的提现申请，请等待完成后再申请', 'aksrt'), ['status' => 409]);
		}
		$wallet = AKSRT_Balance::balance($user_id);
		if ($wallet < $amount) {
			return new WP_Error('aksrt_balance_insufficient', __('余额不足', 'aksrt'), ['status' => 402]);
		}
		$deduct = AKSRT_Balance::deduct($user_id, $amount, 'withdraw_hold', ['type' => 'withdraw'], __('余额提现申请冻结', 'aksrt'));
		if (is_wp_error($deduct)) {
			return $deduct;
		}
		$fee_rate = max(0, min(50, (int) ($settings['withdraw_service_charge'] ?? 0)));
		$net = $fee_rate > 0 ? round($amount * (100 - $fee_rate) / 100, 2) : $amount;
		$account_payload = wp_json_encode([
			'account' => $account,
			'gross_amount' => $amount,
			'fee_rate' => $fee_rate,
			'source' => 'balance',
		], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES) ?: $account;
		$wid = AKSRT_Withdrawal::get_instance()->create($user_id, $net, $method !== '' ? $method : 'alipay', $account_payload);
		if ($wid <= 0) {
			AKSRT_Balance::add($user_id, $amount, 'withdraw_refund', [], __('提现申请失败退回', 'aksrt'));
			return new WP_Error('aksrt_withdraw_failed', __('提现申请失败', 'aksrt'), ['status' => 500]);
		}
		return rest_ensure_response([
			'success' => true,
			'data' => [
				'message' => __('提现申请已提交，请等待处理', 'aksrt'),
				'withdrawal_id' => $wid,
				'amount' => $amount,
				'net_amount' => $net,
				'wallet_balance' => AKSRT_Balance::balance($user_id),
				'reload' => true,
			],
		]);
	}

	public function points_buy_enabled(): bool {
		if (!class_exists('AKSRT_Settings') || !AKSRT_Settings::credits_enabled()) {
			return false;
		}
		$all = AKSRT_Settings::get_all();
		return !empty($all['points_pay_s']);
	}

	/**
	 * @return array<string,mixed>
	 */
	public function get_points_buy_view(int $user_id): array {
		$all = class_exists('AKSRT_Settings') ? AKSRT_Settings::get_all() : [];
		$rate = max(1, (int) ($all['points_rate'] ?? 100));
		$packages_raw = (string) ($all['pay_points_product'] ?? '');
		$packages = $this->parse_points_packages($packages_raw);
		$custom_s = !isset($all['pay_points_product_custom_s']) || !empty($all['pay_points_product_custom_s']);
		$custom_limit = max(1, (int) ($all['pay_points_product_custom_limit'] ?? 99999));
		$methods = [];
		if (function_exists('aksrt_list_cash_payment_methods')) {
			foreach (aksrt_list_cash_payment_methods(true) as $m) {
				$id = is_array($m) ? (string) ($m['id'] ?? '') : (string) $m;
				if ($id === '') {
					continue;
				}
				if ($id === 'balance' && !(class_exists('AKSRT_Balance') && AKSRT_Balance::enabled())) {
					continue;
				}
				$methods[] = is_array($m) ? $m : ['id' => $id, 'name' => $id];
			}
		}
		if (class_exists('AKSRT_Balance') && AKSRT_Balance::enabled()) {
			$has_bal = false;
			foreach ($methods as $m) {
				if (($m['id'] ?? '') === 'balance') {
					$has_bal = true;
					break;
				}
			}
			if (!$has_bal) {
				array_unshift($methods, ['id' => 'balance', 'name' => __('站内余额', 'aksrt')]);
			}
		}
		return [
			'enabled' => $this->points_buy_enabled(),
			'desc' => (string) ($all['pay_points_desc'] ?? ''),
			'rate' => $rate,
			'points' => class_exists('AKSRT_Credits') ? AKSRT_Credits::balance($user_id) : 0,
			'packages' => $packages,
			'custom_s' => $custom_s,
			'custom_limit' => $custom_limit,
			'payment_methods' => $methods,
		];
	}

	/**
	 * @return array<int,array{key:string,points:int,pay_price:float,title:string}>
	 */
	public function parse_points_packages(string $raw): array {
		$out = [];
		$lines = preg_split('/\r\n|\r|\n/', $raw) ?: [];
		$i = 0;
		foreach ($lines as $line) {
			$line = trim((string) $line);
			if ($line === '') {
				continue;
			}
			// 支付金额|积分数量|标题
			$parts = array_map('trim', explode('|', $line));
			if (count($parts) < 2) {
				continue;
			}
			$pay = (float) $parts[0];
			$points = (int) $parts[1];
			$title = $parts[2] ?? '';
			if ($pay <= 0 || $points <= 0) {
				continue;
			}
			$out[] = [
				'key' => (string) $i,
				'pay_price' => round($pay, 2),
				'points' => $points,
				'title' => $title !== '' ? $title : sprintf(__('%d 积分', 'aksrt'), $points),
			];
			$i++;
		}
		return $out;
	}

	/**
	 * @return array<string,mixed>|WP_Error
	 */
	public function create_points_buy_order(int $user_id, string $package_key, int $custom_points, string $payment_method) {
		if ($user_id <= 0) {
			return new WP_Error('aksrt_need_login', __('请先登录', 'aksrt'), ['status' => 401]);
		}
		if (!class_exists('AKSRT_Order_Repository') || !class_exists('AKSRT_Order')) {
			return new WP_Error('aksrt_pay_unavailable', __('订单系统不可用', 'aksrt'), ['status' => 500]);
		}
		$view = $this->get_points_buy_view($user_id);
		$rate = max(1, (int) ($view['rate'] ?? 100));
		$points_amount = 0;
		$pay_amount = 0.0;
		$title = __('购买积分', 'aksrt');

		if ($package_key === 'custom' || $package_key === '') {
			if (empty($view['custom_s'])) {
				return new WP_Error('aksrt_custom_closed', __('未开放自定义数量', 'aksrt'), ['status' => 400]);
			}
			$custom_points = max(0, $custom_points);
			$max = (int) ($view['custom_limit'] ?? 99999);
			if ($custom_points < $rate || $custom_points > $max) {
				return new WP_Error('aksrt_custom_limit', sprintf(__('购买积分需在 %d ~ %d 之间', 'aksrt'), $rate, $max), ['status' => 400]);
			}
			$points_amount = $custom_points;
			$pay_amount = round($custom_points / $rate, 2);
			if ($pay_amount <= 0) {
				$pay_amount = 0.01;
			}
			$title = sprintf(__('购买 %d 积分', 'aksrt'), $points_amount);
			$package_key = 'custom';
		} else {
			$found = null;
			foreach ((array) $view['packages'] as $pkg) {
				if ((string) ($pkg['key'] ?? '') === (string) $package_key) {
					$found = $pkg;
					break;
				}
			}
			if (!$found) {
				return new WP_Error('aksrt_invalid_package', __('积分套餐无效', 'aksrt'), ['status' => 400]);
			}
			$points_amount = (int) $found['points'];
			$pay_amount = (float) $found['pay_price'];
			$title = (string) $found['title'];
		}
		if ($points_amount <= 0 || $pay_amount <= 0) {
			return new WP_Error('aksrt_invalid_price', __('金额无效', 'aksrt'), ['status' => 400]);
		}

		$payment_method = sanitize_key($payment_method);
		if ($payment_method === '') {
			$methods = $view['payment_methods'] ?? [];
			$payment_method = !empty($methods[0]['id']) ? (string) $methods[0]['id'] : 'alipay';
		}

		$note = wp_json_encode([
			'points_buy' => 1,
			'package' => $package_key,
			'points_amount' => $points_amount,
			'pay_amount' => $pay_amount,
			'title' => $title,
		], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);

		$order_number = AKSRT_Order_Repository::get_instance()->create([
			'user_id' => $user_id,
			'product_type' => AKSRT_Domain_Model::ORDER_PRODUCT_POINTS_BUY,
			'product_id' => 0,
			'amount' => $pay_amount,
			'currency' => 'CNY',
			'status' => AKSRT_Order::STATUS_PENDING,
			'payment_method' => $payment_method,
			'note' => is_string($note) ? $note : '',
			'expires_at' => gmdate('Y-m-d H:i:s', time() + 30 * MINUTE_IN_SECONDS),
		]);
		if ($order_number === '') {
			return new WP_Error('aksrt_order_create_failed', __('创建订单失败', 'aksrt'), ['status' => 500]);
		}
		$order = AKSRT_Order_Repository::get_instance()->get($order_number);
		if (!$order) {
			return new WP_Error('aksrt_order_create_failed', __('创建订单失败', 'aksrt'), ['status' => 500]);
		}
		$order['subject'] = $title;
		$order['payment_method'] = $payment_method;

		if (!class_exists('AKSRT_Payment_Gateway')) {
			return new WP_Error('aksrt_pay_unavailable', __('支付网关不可用', 'aksrt'), ['status' => 500]);
		}
		$gateway = AKSRT_Payment_Gateway::get_instance()->get_gateway($payment_method);
		if (!$gateway) {
			return new WP_Error('aksrt_gateway_unavailable', __('当前支付方式不可用', 'aksrt'), ['status' => 400, 'order_number' => $order_number]);
		}
		if (method_exists($gateway, 'is_configured') && !$gateway->is_configured()) {
			return new WP_Error('aksrt_gateway_unconfigured', __('该支付方式尚未配置，请联系站长。', 'aksrt'), ['status' => 400, 'order_number' => $order_number]);
		}
		$payment_result = $gateway->create_payment($order);
		if (empty($payment_result['success'])) {
			return new WP_Error('aksrt_pay_failed', (string) ($payment_result['message'] ?? __('支付失败', 'aksrt')), ['status' => 402, 'order_number' => $order_number]);
		}
		$code_url = (string) ($payment_result['payment_data']['code_url'] ?? '');
		$payment_url = (string) ($payment_result['payment_url'] ?? '');
		if ($payment_url !== '' || $code_url !== '') {
			return [
				'redirect' => true,
				'payment_url' => $payment_url,
				'qr_content' => $code_url,
				'order_number' => $order_number,
				'amount' => $pay_amount,
				'points_amount' => $points_amount,
				'message' => $payment_result['message'] ?? __('请在新页面完成支付。', 'aksrt'),
				'reload' => false,
				'poll' => true,
			];
		}
		$paid = AKSRT_Order::get_instance()->update_status($order_number, AKSRT_Order::STATUS_PAID, [
			'payment_method' => $payment_method,
			'payment_transaction_id' => sanitize_text_field((string) ($payment_result['transaction_id'] ?? '')),
			'note' => __('购买积分支付完成', 'aksrt'),
		]);
		if (!$paid) {
			return new WP_Error('aksrt_order_confirm_failed', __('支付确认失败', 'aksrt'), ['status' => 500]);
		}
		$this->on_order_paid($order_number, AKSRT_Order_Repository::get_instance()->get($order_number) ?: $order);
		return [
			'redirect' => false,
			'order_number' => $order_number,
			'amount' => $pay_amount,
			'points_amount' => $points_amount,
			'points' => AKSRT_Credits::balance($user_id),
			'message' => __('购买成功', 'aksrt'),
			'reload' => true,
		];
	}

}