<?php
/**
 * AKSRT admin verify and messaging integrations support.
 *
 * @package AKSRT
 */

defined('ABSPATH') || exit;

trait AKSRT_Admin_User_Controller_Verify_Integrations {

    public function get_verify_pending(): WP_REST_Response {
        $response = $this->get_verify_requests(new WP_REST_Request('GET', '/'));
        $data     = $response->get_data();
        $items    = isset($data['data']['items']) && is_array($data['data']['items']) ? $data['data']['items'] : [];
        $pending  = array_values(array_filter($items, static function ($item) {
            return ($item['status'] ?? '') === 'pending';
        }));

        return $this->success([
            'data' => [
                'requests' => array_slice($pending, 0, 50),
                'total'    => count($pending),
            ],
        ]);
    }

    public function get_verify_requests(WP_REST_Request $request): WP_REST_Response {
        global $wpdb;

        $page      = max(1, (int) ($request->get_param('page') ?: 1));
        $per_page  = max(1, min(100, (int) ($request->get_param('per_page') ?: 20)));
        $keyword   = trim(sanitize_text_field((string) $request->get_param('keyword')));
        $status    = sanitize_key((string) $request->get_param('status'));
        $date_from = sanitize_text_field((string) $request->get_param('date_from'));
        $date_to   = sanitize_text_field((string) $request->get_param('date_to'));

        $sql = "
            SELECT u.ID, u.display_name, u.user_email, u.user_registered,
                   status.meta_value AS verify_status,
                   reason.meta_value AS verify_reason,
                   reviewed_at.meta_value AS reviewed_at,
                   reviewer.meta_value AS reviewer_id
            FROM {$wpdb->users} u
            INNER JOIN {$wpdb->usermeta} status
                ON status.user_id = u.ID AND status.meta_key = 'aksrt_user_verify_status'
            LEFT JOIN {$wpdb->usermeta} reason
                ON reason.user_id = u.ID AND reason.meta_key = 'aksrt_user_verify_reason'
            LEFT JOIN {$wpdb->usermeta} reviewed_at
                ON reviewed_at.user_id = u.ID AND reviewed_at.meta_key = 'aksrt_user_verify_reviewed_at'
            LEFT JOIN {$wpdb->usermeta} reviewer
                ON reviewer.user_id = u.ID AND reviewer.meta_key = 'aksrt_user_verify_reviewer'
            ORDER BY u.user_registered DESC
            LIMIT 500
        ";

        $rows = $wpdb->get_results($sql, ARRAY_A);

        $items  = [];
        $counts = ['pending' => 0, 'verified' => 0, 'rejected' => 0, 'total' => 0];

        foreach ((array) $rows as $row) {
            $item = $this->build_verify_request_item($row);
            $item_status = $item['status'];
            if (isset($counts[$item_status])) {
                $counts[$item_status]++;
            }
            $counts['total']++;

            if ($status !== '' && $item_status !== $status) {
                continue;
            }

            if ($date_from !== '' && strcmp((string) $item['requested_at'], $date_from . ' 00:00:00') < 0) {
                continue;
            }
            if ($date_to !== '' && strcmp((string) $item['requested_at'], $date_to . ' 23:59:59') > 0) {
                continue;
            }
            if ($keyword !== '' && mb_stripos(implode(' ', [
                (string) ($item['display_name'] ?? ''),
                (string) ($item['email'] ?? ''),
                (string) ($item['reason'] ?? ''),
            ]), $keyword) === false) {
                continue;
            }

            $items[] = $item;
        }

        $total  = count($items);
        $offset = ($page - 1) * $per_page;

        return $this->success([
            'data' => [
                'items'    => array_values(array_slice($items, $offset, $per_page)),
                'total'    => $total,
                'page'     => $page,
                'per_page' => $per_page,
                'counts'   => $counts,
                'options'  => [
                    'statuses' => [
                        ['label' => __('待审核', 'aksrt'), 'value' => 'pending'],
                        ['label' => __('已通过', 'aksrt'), 'value' => 'verified'],
                        ['label' => __('已驳回', 'aksrt'), 'value' => 'rejected'],
                    ],
                ],
            ],
        ]);
    }

    public function get_verify_request_detail(WP_REST_Request $request): WP_REST_Response {
        $user_id = (int) $request->get_param('id');
        if ($user_id <= 0) {
            return $this->error(__('认证申请不存在', 'aksrt'), 404);
        }

        $user = get_userdata($user_id);
        if (!$user) {
            return $this->error(__('用户不存在', 'aksrt'), 404);
        }

        $detail = $this->build_verify_request_item([
            'ID'              => $user->ID,
            'display_name'    => $user->display_name,
            'user_email'      => $user->user_email,
            'user_registered' => $user->user_registered,
            'verify_status'   => get_user_meta($user_id, 'aksrt_user_verify_status', true),
            'verify_reason'   => get_user_meta($user_id, 'aksrt_user_verify_reason', true),
            'reviewed_at'     => get_user_meta($user_id, 'aksrt_user_verify_reviewed_at', true),
            'reviewer_id'     => get_user_meta($user_id, 'aksrt_user_verify_reviewer', true),
        ]);

        return $this->success([
            'data' => [
                'request' => $detail,
                'history' => $this->get_verify_history_for_user($user_id),
                'options' => [
                    'statuses' => [
                        ['label' => __('通过认证', 'aksrt'), 'value' => 'verified'],
                        ['label' => __('驳回申请', 'aksrt'), 'value' => 'rejected'],
                    ],
                ],
            ],
        ]);
    }

    /**
     * POST /verify/review — approve or reject a verification request.
     */
    public function review_verify_request(WP_REST_Request $request): WP_REST_Response {
        $params  = $this->get_json_params($request);
        $user_id = (int) ($params['user_id'] ?? 0);
        if ($user_id <= 0) {
            return $this->error(__('参数无效', 'aksrt'));
        }

        return $this->perform_verify_review($user_id, $params);
    }

    public function review_verify_request_by_id(WP_REST_Request $request): WP_REST_Response {
        $user_id = (int) $request->get_param('id');
        if ($user_id <= 0) {
            return $this->error(__('参数无效', 'aksrt'));
        }

        return $this->perform_verify_review($user_id, $this->get_json_params($request));
    }

    private function perform_verify_review(int $user_id, array $payload): WP_REST_Response {
        $status = sanitize_key((string) ($payload['status'] ?? ''));
        $note   = sanitize_textarea_field((string) ($payload['note'] ?? ($payload['reason'] ?? '')));

        if (!in_array($status, ['verified', 'rejected'], true)) {
            return $this->error(__('审核状态无效', 'aksrt'));
        }

        $user = get_userdata($user_id);
        if (!$user) {
            return $this->error(__('用户不存在', 'aksrt'), 404);
        }

        update_user_meta($user_id, 'aksrt_user_verify_status', $status);
        update_user_meta($user_id, 'aksrt_user_verify_reviewed_at', current_time('mysql'));
        update_user_meta($user_id, 'aksrt_user_verify_reviewer', get_current_user_id());

        if ($note !== '') {
            update_user_meta($user_id, 'aksrt_user_verify_reason', $note);
        } elseif ($status === 'verified') {
            delete_user_meta($user_id, 'aksrt_user_verify_reason');
        }

        $log = get_option('aksrt_verify_review_log', []);
        if (!is_array($log)) {
            $log = [];
        }
        $log[] = [
            'user_id'  => $user_id,
            'reviewer' => get_current_user_id(),
            'status'   => $status,
            'reason'   => $note,
            'time'     => current_time('mysql'),
        ];
        if (count($log) > 500) {
            $log = array_slice($log, -500);
        }
        update_option('aksrt_verify_review_log', $log, false);

        return $this->success([
            'message' => $status === 'verified'
                ? __('已通过认证', 'aksrt')
                : __('已驳回申请', 'aksrt'),
        ]);
    }

    private function build_verify_request_item(array $row): array {
        $user_id        = (int) ($row['ID'] ?? 0);
        $reviewer_id    = (int) ($row['reviewer_id'] ?? 0);
        $reviewer       = $reviewer_id > 0 ? get_userdata($reviewer_id) : null;
        $status         = sanitize_key((string) ($row['verify_status'] ?? 'pending'));
        $email_verified = (bool) get_user_meta($user_id, 'aksrt_email_verified', true);

        return [
            'user_id'        => $user_id,
            'display_name'   => (string) ($row['display_name'] ?? ''),
            'email'          => (string) ($row['user_email'] ?? ''),
            'status'         => $status,
            'reason'         => (string) ($row['verify_reason'] ?? ''),
            'requested_at'   => (string) ($row['user_registered'] ?? ''),
            'reviewed_at'    => (string) ($row['reviewed_at'] ?? ''),
            'email_verified' => $email_verified,
            'reviewer'       => $this->build_admin_user_summary($reviewer_id, $reviewer),
            'history_count'  => count($this->get_verify_history_for_user($user_id)),
        ];
    }

    private function get_verify_history_for_user(int $user_id): array {
        $log = get_option('aksrt_verify_review_log', []);
        if (!is_array($log)) {
            return [];
        }

        $history = [];
        foreach ($log as $entry) {
            if ((int) ($entry['user_id'] ?? 0) !== $user_id) {
                continue;
            }

            $reviewer_id = (int) ($entry['reviewer'] ?? 0);
            $history[] = [
                'status'        => sanitize_key((string) ($entry['status'] ?? '')),
                'reason'        => (string) ($entry['reason'] ?? ''),
                'time'          => (string) ($entry['time'] ?? ''),
                'reviewer'      => $reviewer_id,
                'reviewer_name' => $reviewer_id > 0 && ($user = get_userdata($reviewer_id)) ? $user->display_name : '',
            ];
        }

        usort($history, static function ($left, $right) {
            return strcmp((string) ($right['time'] ?? ''), (string) ($left['time'] ?? ''));
        });

        return $history;
    }

    private function build_admin_user_summary(int $user_id, $user = null): ?array {
        if ($user_id <= 0 && !$user instanceof WP_User) {
            return null;
        }

        if (!$user instanceof WP_User) {
            $user = get_userdata($user_id);
        }
        if (!$user instanceof WP_User) {
            return null;
        }

        return [
            'id'           => (int) $user->ID,
            'display_name' => (string) $user->display_name,
            'email'        => (string) $user->user_email,
            'avatar_url'   => get_avatar_url((int) $user->ID, ['size' => 64]),
        ];
    }

    /**
     * GET /sms/status — SMS provider connection status.
     */
    public function get_sms_status(): WP_REST_Response {
        if (class_exists('AKSRT_SMS')) {
            return $this->success(['data' => AKSRT_SMS::get_instance()->get_provider_status()]);
        }

        return $this->success([
            'data' => [
                'enabled'        => false,
                'provider'       => 'none',
                'configured'     => false,
                'available'      => false,
                'verified'       => false,
                'transport'      => '',
                'missing_fields' => [],
                'code_length'    => 6,
                'code_expire'    => 300,
                'rate_limit'     => 60,
                'daily_limit'    => 10,
                'notify_bind'    => true,
                'notify_login'   => false,
            ],
        ]);
    }

    /**
     * POST /sms/test — Send a test SMS to verify provider configuration.
     */
    public function test_sms_send(WP_REST_Request $request): WP_REST_Response {
        if (!class_exists('AKSRT_SMS')) {
            return $this->error('短信服务不可用');
        }

        $params = $this->get_json_params($request);
        $phone  = sanitize_text_field((string) ($params['phone'] ?? ''));

        if (!preg_match('/^1[3-9]\d{9}$/', $phone)) {
            return $this->error('手机号格式不正确');
        }

        $result = AKSRT_SMS::get_instance()->test_provider($phone);

        if (!empty($result['success'])) {
            return $this->success(['message' => $result['message'] ?? '发送成功']);
        }

        return $this->error($result['message'] ?? '发送失败');
    }

    /**
     * GET /wechat/status — WeChat notification service status.
     */
    public function get_wechat_status(): WP_REST_Response {
        if (class_exists('AKSRT_WeChat_Notify')) {
            return $this->success(['data' => AKSRT_WeChat_Notify::get_instance()->get_status()]);
        }

        return $this->success([
            'data' => [
                'appid'      => '',
                'configured' => false,
                'has_token'  => false,
                'available'  => false,
            ],
        ]);
    }

    /**
     * POST /wechat/settings — 更新微信通知设置
     */
    public function update_wechat_settings(WP_REST_Request $request): WP_REST_Response {
        $params = $this->get_json_params($request);

        $settings = [
            'enabled'     => !empty($params['enabled']),
            'app_id'      => sanitize_text_field((string) ($params['app_id'] ?? '')),
            'app_secret'  => sanitize_text_field((string) ($params['app_secret'] ?? '')),
            'template_id' => sanitize_text_field((string) ($params['template_id'] ?? '')),
        ];

        $existing = AKSRT_Settings::get_wechat_settings();
        if ($settings['app_secret'] === '***') {
            $settings['app_secret'] = $existing['app_secret'] ?? '';
        }

        $merged = array_merge($existing, $settings);
        AKSRT_Settings::update_wechat_settings($merged);
        delete_transient('aksrt_wechat_token');

        return $this->success(['message' => __('微信设置已保存', 'aksrt')]);
    }
}