<?php
declare(strict_types=1);
require __DIR__ . '/lib/Auth.php';
require __DIR__ . '/lib/Layout.php';
require __DIR__ . '/lib/Channels.php';
require __DIR__ . '/../api/lib/Db.php';

use PSLauncher\Admin\Auth;
use PSLauncher\Admin\Layout;
use PSLauncher\Admin\Channels;
use PSLauncher\Db;

Auth::requireLogin();
$config = require __DIR__ . '/../api/config.php';
$db = Db::get($config);

$message = null; $messageType = 'success';
$newKey = null;

function generateLicenseKey(): string
{
    $alphabet = 'ABCDEFGHJKLMNPQRSTUVWXYZ23456789';
    $groups = [];
    for ($g = 0; $g < 4; $g++) {
        $s = '';
        for ($i = 0; $i < 4; $i++) $s .= $alphabet[random_int(0, strlen($alphabet) - 1)];
        $groups[] = $s;
    }
    return 'PRSRV-' . implode('-', $groups);
}

/**
 * Liste les channels disponibles depuis le registre channels.json. Le channel
 * « default » apparaît avec une clé vide (= NULL en DB → comportement legacy
 * « pas de tag, voit que default »).
 */
function listAvailableChannels(): array
{
    $manifestDir = dirname(__DIR__) . '/manifest';
    $registry    = Channels::load($manifestDir);
    $out = ['' => '(aucun — voit uniquement « default »)'];
    foreach ($registry['channels'] as $c) {
        $name = (string)($c['name'] ?? '');
        if ($name === '' || $name === 'default') continue; // default est l'option implicite (clé vide)
        $label = $c['label'] ?? $name;
        $out[$name] = "{$name} — {$label}";
    }
    return $out;
}

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    Auth::checkCsrf();
    $action = $_POST['action'] ?? '';

    try {
        if ($action === 'create') {
            $owner = trim($_POST['owner'] ?? '');
            $until = trim($_POST['until'] ?? '');
            $maxMachines = max(1, (int)($_POST['max_machines'] ?? 1));
            $notes = trim($_POST['notes'] ?? '') ?: null;
            // Channel = '' ↦ NULL en DB (default manifest). Whitelist regex anti-injection.
            $channel = trim((string)($_POST['channel'] ?? ''));
            if ($channel === '') {
                $channel = null;
            } elseif (!preg_match('/^[a-z0-9_-]{1,64}$/', $channel)) {
                throw new Exception('Channel invalide : seules les lettres minuscules, chiffres, _ et - sont autorisés (max 64 caractères).');
            }
            $canSeeBetas = isset($_POST['can_see_betas']) ? 1 : 0;

            if ($owner === '' || !preg_match('/^\d{4}-\d{2}-\d{2}$/', $until)) {
                throw new Exception('Nom du client et date d\'expiration sont requis (date au format YYYY-MM-DD).');
            }

            for ($attempts = 0; $attempts < 5; $attempts++) {
                $newKey = generateLicenseKey();
                try {
                    $db->prepare('INSERT INTO licenses (license_key, owner_name, issued_at, download_entitlement_until, max_machines, channel, can_see_betas, notes) VALUES (?, ?, NOW(), ?, ?, ?, ?, ?)')
                       ->execute([$newKey, $owner, $until . ' 23:59:59', $maxMachines, $channel, $canSeeBetas, $notes]);
                    $message = "License émise avec succès. Note la clé maintenant — elle ne sera plus jamais affichée.";
                    break;
                } catch (PDOException $e) {
                    if (str_contains($e->getMessage(), 'Duplicate')) { continue; }
                    throw $e;
                }
            }
        }
        elseif ($action === 'revoke') {
            $id = (int)($_POST['id'] ?? 0);
            $db->prepare('UPDATE licenses SET revoked_at = NOW() WHERE id = ?')->execute([$id]);
            $message = "License #{$id} révoquée.";
        }
        elseif ($action === 'unrevoke') {
            $id = (int)($_POST['id'] ?? 0);
            $db->prepare('UPDATE licenses SET revoked_at = NULL WHERE id = ?')->execute([$id]);
            $message = "License #{$id} réactivée.";
        }
        elseif ($action === 'extend') {
            $id = (int)($_POST['id'] ?? 0);
            $newUntil = trim($_POST['new_until'] ?? '');
            if (!preg_match('/^\d{4}-\d{2}-\d{2}$/', $newUntil)) {
                throw new Exception('Date invalide.');
            }
            $db->prepare('UPDATE licenses SET download_entitlement_until = ? WHERE id = ?')
               ->execute([$newUntil . ' 23:59:59', $id]);
            $message = "License #{$id} prolongée jusqu'au {$newUntil}.";
        }
        elseif ($action === 'set_channel') {
            $id = (int)($_POST['id'] ?? 0);
            $channel = trim((string)($_POST['channel'] ?? ''));
            if ($channel === '') {
                $channel = null; // default manifest
            } elseif (!preg_match('/^[a-z0-9_-]{1,64}$/', $channel)) {
                throw new Exception('Channel invalide.');
            }
            $db->prepare('UPDATE licenses SET channel = ? WHERE id = ?')->execute([$channel, $id]);
            $label = $channel ?? 'default';
            $message = "License #{$id} : channel passé à « {$label} ». Le client devra rouvrir le launcher pour prendre en compte le changement (revalidation license).";
        }
        elseif ($action === 'toggle_betas') {
            $id = (int)($_POST['id'] ?? 0);
            $stmt = $db->prepare('UPDATE licenses SET can_see_betas = 1 - can_see_betas WHERE id = ?');
            $stmt->execute([$id]);
            $row = $db->prepare('SELECT can_see_betas FROM licenses WHERE id = ?');
            $row->execute([$id]);
            $now = (int)$row->fetchColumn();
            $message = $now
                ? "License #{$id} : accès aux versions BÊTA activé."
                : "License #{$id} : accès aux versions BÊTA désactivé.";
        }
        elseif ($action === 'set_max_machines') {
            $id = (int)($_POST['id'] ?? 0);
            $newMax = (int)($_POST['max_machines'] ?? 0);
            if ($id <= 0 || $newMax < 1 || $newMax > 100) {
                throw new Exception('Nombre de machines invalide (1–100).');
            }
            // Refus de descendre sous le nombre de machines déjà activées —
            // sinon état incohérent (machines_count > max_machines). L'admin doit
            // d'abord libérer des slots via "Libérer" individuel ou "Libérer toutes".
            $stmt = $db->prepare('SELECT COUNT(*) FROM license_machines WHERE license_id = ?');
            $stmt->execute([$id]);
            $current = (int)$stmt->fetchColumn();
            if ($newMax < $current) {
                throw new Exception("Impossible : {$current} machines sont déjà actives. Libère des slots d'abord ou choisis ≥ {$current}.");
            }
            $db->prepare('UPDATE licenses SET max_machines = ? WHERE id = ?')->execute([$newMax, $id]);
            $message = "License #{$id} : limite passée à {$newMax} machine(s).";
        }
        elseif ($action === 'reset_machines') {
            $id = (int)($_POST['id'] ?? 0);
            $db->prepare('DELETE FROM license_machines WHERE license_id = ?')->execute([$id]);
            $message = "Toutes les machines libérées pour la license #{$id}.";
        }
        elseif ($action === 'remove_machine') {
            $licenseId = (int)($_POST['license_id'] ?? 0);
            $machineId = trim((string)($_POST['machine_id'] ?? ''));
            if ($licenseId <= 0 || $machineId === '') {
                throw new Exception('license_id et machine_id requis');
            }
            $stmt = $db->prepare('DELETE FROM license_machines WHERE license_id = ? AND machine_id = ?');
            $stmt->execute([$licenseId, $machineId]);
            $count = $stmt->rowCount();
            $shortId = substr($machineId, 0, 12);
            $message = $count > 0
                ? "Machine {$shortId}… libérée pour la license #{$licenseId}."
                : "Aucune machine correspondante trouvée pour license #{$licenseId}.";
        }
    } catch (Exception $e) {
        $message = $e->getMessage();
        $messageType = 'error';
    }
}

$availableChannels = listAvailableChannels();

$licenses = $db->query(
    'SELECT l.*,
            (SELECT COUNT(*) FROM license_machines m WHERE m.license_id = l.id) AS machines_count
     FROM licenses l
     ORDER BY l.id DESC'
)->fetchAll();

// Pré-fetch toutes les machines de toutes les licenses en une seule requête,
// indexées par license_id pour l'affichage par-row sans N+1.
$allMachines = $db->query(
    'SELECT license_id, machine_id, machine_label, first_seen, last_seen
     FROM license_machines
     ORDER BY last_seen DESC'
)->fetchAll();
$machinesByLicense = [];
foreach ($allMachines as $m) {
    $machinesByLicense[(int)$m['license_id']][] = $m;
}

Layout::header('Licenses', 'licenses');
?>
<h1>Licenses</h1>

<?php Layout::flash($message, $messageType); ?>

<?php if ($newKey): ?>
<div class="card" style="border-color: var(--installed); background: var(--installed-bg);">
    <h2 style="color: #6EE7B7; margin-top:0">⚡ Nouvelle clé — copie-la dès maintenant</h2>
    <pre style="font-size: 18px; font-weight: bold; color: white; background: rgba(0,0,0,0.3); margin: 0;"><?= htmlspecialchars($newKey) ?></pre>
    <p class="muted" style="margin-bottom: 0; margin-top: 12px;">Elle est stockée hashée — la prochaine fois que tu rechargeras cette page elle ne sera plus visible.</p>
</div>
<?php endif; ?>

<div class="card">
    <h2>Émettre une license</h2>
    <form method="post">
        <?= Layout::csrfField() ?>
        <input type="hidden" name="action" value="create">
        <div class="row">
            <div class="col field">
                <label>Nom du client</label>
                <input type="text" name="owner" required placeholder="ACME Corp">
            </div>
            <div class="col field">
                <label>Date d'expiration des téléchargements</label>
                <input type="date" name="until" required>
            </div>
            <div class="col field" style="flex: 0 0 140px">
                <label>Max machines</label>
                <input type="number" name="max_machines" value="1" min="1" max="100">
            </div>
        </div>
        <div class="row">
            <div class="col field">
                <label>Channel <span class="muted" style="font-weight: normal; font-size: 11px;">(quel manifest sert le client ?)</span></label>
                <select name="channel">
                    <?php foreach ($availableChannels as $value => $label): ?>
                        <option value="<?= htmlspecialchars($value) ?>"><?= htmlspecialchars($label) ?></option>
                    <?php endforeach; ?>
                </select>
            </div>
            <div class="col field">
                <label style="display: flex; align-items: center; gap: 8px;">
                    <input type="checkbox" name="can_see_betas" value="1" style="width: auto; margin: 0;">
                    Accès aux versions BÊTA
                </label>
                <span class="muted" style="font-size: 11px;">Coche pour les testeurs internes / clients pilotes.</span>
            </div>
        </div>
        <div class="field">
            <label>Notes internes (optionnel)</label>
            <input type="text" name="notes" placeholder="Contact : jean@acme.com">
        </div>
        <button class="btn btn-success" type="submit">Émettre la license</button>
    </form>
</div>

<div class="card">
    <table>
        <thead>
            <tr>
                <th>ID</th>
                <th>Client</th>
                <th>Émise</th>
                <th>Expire</th>
                <th>Machines</th>
                <th>Channel / Bêta</th>
                <th>Statut</th>
                <th style="text-align:right">Actions</th>
            </tr>
        </thead>
        <tbody>
        <?php foreach ($licenses as $l):
            $isExpired = strtotime($l['download_entitlement_until']) < time();
            $isRevoked = $l['revoked_at'] !== null;
            if ($isRevoked)      { $status = 'révoquée'; $cls = 'badge-danger'; }
            elseif ($isExpired)  { $status = 'expirée';  $cls = 'badge-warning'; }
            else                 { $status = 'active';   $cls = 'badge-success'; }
        ?>
            <tr>
                <td>#<?= $l['id'] ?></td>
                <td>
                    <strong><?= htmlspecialchars($l['owner_name']) ?></strong>
                    <?php if (!empty($l['notes'])): ?>
                        <div class="muted" style="font-size: 11px;"><?= htmlspecialchars($l['notes']) ?></div>
                    <?php endif; ?>
                </td>
                <td class="muted"><?= date('d/m/Y', strtotime($l['issued_at'])) ?></td>
                <td><?= date('d/m/Y', strtotime($l['download_entitlement_until'])) ?></td>
                <td>
                    <?php if ($l['machines_count'] > 0): ?>
                        <a href="#" onclick="document.getElementById('machines-<?= $l['id'] ?>').open = !document.getElementById('machines-<?= $l['id'] ?>').open; return false;"
                           style="color: var(--text); text-decoration: none; cursor: pointer;"
                           title="Cliquer pour voir les machines">
                            <strong><?= $l['machines_count'] ?></strong> / <?= $l['max_machines'] ?> ▾
                        </a>
                    <?php else: ?>
                        0 / <?= $l['max_machines'] ?>
                    <?php endif; ?>
                </td>
                <td>
                    <details style="display: inline-block;">
                        <summary style="cursor: pointer; list-style: none;">
                            <code style="background: rgba(0,0,0,0.3); padding: 2px 6px; border-radius: 4px; font-size: 11px;">
                                <?= htmlspecialchars($l['channel'] ?? 'default') ?>
                            </code>
                            <?php if ((int)($l['can_see_betas'] ?? 0) === 1): ?>
                                <span class="badge badge-warning" style="margin-left: 4px;" title="Voit les versions taggées beta">β</span>
                            <?php endif; ?>
                        </summary>
                        <div style="margin-top: 8px; min-width: 220px;">
                            <form method="post" style="display: flex; gap: 4px; align-items: center; margin-bottom: 6px;">
                                <?= Layout::csrfField() ?>
                                <input type="hidden" name="action" value="set_channel">
                                <input type="hidden" name="id" value="<?= $l['id'] ?>">
                                <select name="channel" style="flex: 1;">
                                    <?php foreach ($availableChannels as $value => $label):
                                        $selected = ($l['channel'] ?? '') === $value ? 'selected' : '';
                                    ?>
                                        <option value="<?= htmlspecialchars($value) ?>" <?= $selected ?>><?= htmlspecialchars($label) ?></option>
                                    <?php endforeach; ?>
                                </select>
                                <button class="btn btn-primary" type="submit">OK</button>
                            </form>
                            <form method="post">
                                <?= Layout::csrfField() ?>
                                <input type="hidden" name="action" value="toggle_betas">
                                <input type="hidden" name="id" value="<?= $l['id'] ?>">
                                <button class="btn btn-secondary" type="submit" style="width: 100%;">
                                    <?= (int)($l['can_see_betas'] ?? 0) === 1 ? 'Retirer accès BÊTA' : 'Activer accès BÊTA' ?>
                                </button>
                            </form>
                        </div>
                    </details>
                </td>
                <td><span class="badge <?= $cls ?>"><?= $status ?></span></td>
                <td style="text-align:right; white-space: nowrap;">
                    <details style="display: inline-block; margin: 0 4px;">
                        <summary class="btn btn-secondary">Prolonger</summary>
                        <form method="post" style="margin-top: 8px; display: flex; gap: 4px; align-items: center;">
                            <?= Layout::csrfField() ?>
                            <input type="hidden" name="action" value="extend">
                            <input type="hidden" name="id" value="<?= $l['id'] ?>">
                            <input type="date" name="new_until" required style="width: 150px;">
                            <button class="btn btn-primary" type="submit">OK</button>
                        </form>
                    </details>
                    <details style="display: inline-block; margin: 0 4px;">
                        <summary class="btn btn-secondary">Slots</summary>
                        <form method="post" style="margin-top: 8px; display: flex; gap: 4px; align-items: center;">
                            <?= Layout::csrfField() ?>
                            <input type="hidden" name="action" value="set_max_machines">
                            <input type="hidden" name="id" value="<?= $l['id'] ?>">
                            <input type="number" name="max_machines" min="1" max="100"
                                   value="<?= (int)$l['max_machines'] ?>" required
                                   style="width: 70px;"
                                   title="Nombre max de machines (≥ <?= (int)$l['machines_count'] ?> actuellement actives)">
                            <button class="btn btn-primary" type="submit">OK</button>
                        </form>
                    </details>
                    <?php if ($l['machines_count'] > 0): ?>
                    <form method="post" style="display:inline" onsubmit="return confirm('Libérer TOUTES les machines de cette license ?\n\nUtilise plutôt « Voir machines » ci-dessous pour libérer un slot précis.')">
                        <?= Layout::csrfField() ?>
                        <input type="hidden" name="action" value="reset_machines">
                        <input type="hidden" name="id" value="<?= $l['id'] ?>">
                        <button class="btn btn-secondary" type="submit" title="Libère TOUS les slots machines de cette license d'un coup">Libérer toutes</button>
                    </form>
                    <?php endif; ?>
                    <?php if (!$isRevoked): ?>
                    <form method="post" style="display:inline" onsubmit="return confirm('Révoquer définitivement cette license ?')">
                        <?= Layout::csrfField() ?>
                        <input type="hidden" name="action" value="revoke">
                        <input type="hidden" name="id" value="<?= $l['id'] ?>">
                        <button class="btn btn-danger" type="submit">Révoquer</button>
                    </form>
                    <?php else: ?>
                    <form method="post" style="display:inline">
                        <?= Layout::csrfField() ?>
                        <input type="hidden" name="action" value="unrevoke">
                        <input type="hidden" name="id" value="<?= $l['id'] ?>">
                        <button class="btn btn-secondary" type="submit">Réactiver</button>
                    </form>
                    <?php endif; ?>
                </td>
            </tr>

            <?php
            // Sous-row dépliable : liste des machines avec remove individuel.
            // Le <details> est piloté par le clic sur la cellule "X / Y" ci-dessus.
            $machines = $machinesByLicense[(int)$l['id']] ?? [];
            if (!empty($machines)):
            ?>
            <tr>
                <td colspan="8" style="padding: 0;">
                    <details id="machines-<?= $l['id'] ?>" style="margin: 0;">
                        <summary style="display: none;"></summary>
                        <div style="background: rgba(0,0,0,0.2); padding: 12px 16px; border-top: 1px solid var(--border);">
                            <div style="font-size: 12px; color: var(--text-secondary); margin-bottom: 8px;">
                                Machines actives sur la license #<?= $l['id'] ?> (<?= htmlspecialchars($l['owner_name']) ?>) :
                            </div>
                            <table style="width: 100%; font-size: 12px; margin: 0;">
                                <thead>
                                    <tr>
                                        <th style="width: 280px;">Machine ID (SHA-256)</th>
                                        <th>Label</th>
                                        <th style="width: 130px;">1ère activation</th>
                                        <th style="width: 130px;">Dernière vue</th>
                                        <th style="width: 110px; text-align:right;">Action</th>
                                    </tr>
                                </thead>
                                <tbody>
                                <?php foreach ($machines as $m):
                                    $mid = $m['machine_id'];
                                    $isStale = strtotime($m['last_seen']) < time() - 86400 * 30;
                                ?>
                                    <tr>
                                        <td>
                                            <code title="<?= htmlspecialchars($mid) ?>"
                                                  style="font-family: 'Cascadia Code', Consolas, monospace;">
                                                <?= htmlspecialchars(substr($mid, 0, 16)) ?>…<?= htmlspecialchars(substr($mid, -8)) ?>
                                            </code>
                                        </td>
                                        <td><?= htmlspecialchars($m['machine_label'] ?? '—') ?></td>
                                        <td class="muted"><?= date('d/m/Y H:i', strtotime($m['first_seen'])) ?></td>
                                        <td class="muted">
                                            <?= date('d/m/Y H:i', strtotime($m['last_seen'])) ?>
                                            <?php if ($isStale): ?>
                                                <span class="badge badge-warning" title="Pas vu depuis &gt; 30 jours, candidat à libération">stale</span>
                                            <?php endif; ?>
                                        </td>
                                        <td style="text-align:right;">
                                            <form method="post" style="display:inline"
                                                  onsubmit="return confirm('Libérer cette machine de la license ?\n\nLe slot redeviendra disponible pour une autre activation.')">
                                                <?= Layout::csrfField() ?>
                                                <input type="hidden" name="action" value="remove_machine">
                                                <input type="hidden" name="license_id" value="<?= $l['id'] ?>">
                                                <input type="hidden" name="machine_id" value="<?= htmlspecialchars($mid) ?>">
                                                <button class="btn btn-danger" type="submit"
                                                        style="font-size: 11px; padding: 4px 10px;">
                                                    Libérer
                                                </button>
                                            </form>
                                        </td>
                                    </tr>
                                <?php endforeach; ?>
                                </tbody>
                            </table>
                        </div>
                    </details>
                </td>
            </tr>
            <?php endif; ?>
        <?php endforeach; ?>
        <?php if (empty($licenses)): ?>
            <tr><td colspan="7" class="muted" style="text-align:center; padding: 32px;">Aucune license émise.</td></tr>
        <?php endif; ?>
        </tbody>
    </table>
</div>
<?php Layout::footer();