<?php

require_once __DIR__ . '/../includes/auth.php';

require_once __DIR__ . '/../includes/db.php';

require_once __DIR__ . '/../includes/helpers.php';

require_login();

$notice = '';

$error  = '';

if ($_SERVER['REQUEST_METHOD'] === 'POST') {

    csrf_verify();

    $action = $_POST['action'] ?? '';

    if ($action === 'logout') {

        logout();

        header('Location: ' . url('/admin/login.php'));

        exit;

    }

    // Remove the installer — only after the admin explicitly confirms the site

    // works. We never auto-delete: the confirmation checkbox is required.

    if ($action === 'remove_installer') {

        $installFile = dirname(__DIR__) . '/install.php';

        if (empty($_POST['confirm_works'])) {

            $error = 'Please tick the confirmation box first, so we know your site is working before removing the installer.';

        } elseif (!is_file($installFile)) {

            $notice = 'install.php is already gone — nothing to remove. You are all set.';

        } elseif (@unlink($installFile)) {

            $notice = 'install.php was deleted. Your setup is now locked down.';

        } else {

            $error = 'Could not delete install.php automatically (likely a file-permission restriction). '

                   . 'Please remove it by hand via FTP or your host\'s File Manager.';

        }

    }

    if ($action === 'create') {

        $slug = normalize_slug($_POST['slug'] ?? '');

        $name = trim($_POST['name'] ?? '');

        $desc = trim($_POST['description'] ?? '');

        $lang = trim($_POST['language'] ?? '');

        if (!valid_slug($slug) || $name === '') {

            $error = 'A valid slug and a name are required.';

        } elseif (get_repository_by_slug($slug)) {

            $error = 'That slug is already taken.';

        } else {

            create_repository($slug, $name, $desc, $lang);

            @mkdir(UPLOAD_DIR . '/' . $slug, 0775, true);

            header('Location: ' . url('/admin/dashboard.php?created=1'));

            exit;

        }

    }

    if ($action === 'update') {

        $id      = (int) ($_POST['id'] ?? 0);

        $name    = trim($_POST['name'] ?? '');

        $desc    = trim($_POST['description'] ?? '');

        $lang    = trim($_POST['language'] ?? '');

        $newSlug = normalize_slug($_POST['slug'] ?? '');

        $repo    = $id ? get_repository($id) : null;

        if (!$repo || $name === '') {

            $error = 'A name is required.';

        } elseif (!valid_slug($newSlug)) {

            $error = 'A valid slug is required.';

        } else {

            $slugTaken = get_repository_by_slug($newSlug);

            if ($newSlug !== $repo['slug'] && $slugTaken && (int) $slugTaken['id'] !== $id) {

                $error = 'That slug is already taken.';

            } elseif ($newSlug !== $repo['slug'] && is_dir(UPLOAD_DIR . '/' . $newSlug)) {

                $error = 'An uploads folder for that slug already exists.';

            } else {

                // Rename the slug (disk + DB) before saving the other fields.

                if ($newSlug !== $repo['slug']) {

                    $oldDir = UPLOAD_DIR . '/' . $repo['slug'];

                    $newDir = UPLOAD_DIR . '/' . $newSlug;

                    if (is_dir($oldDir) && !@rename($oldDir, $newDir)) {

                        $error = 'Could not rename the uploads folder on disk.';

                    } else {

                        rename_repository($id, $repo['slug'], $newSlug);

                    }

                }

                if (!$error) {

                    update_repository($id, $name, $desc, $lang);

                    header('Location: ' . url('/admin/dashboard.php?updated=1'));

                    exit;

                }

            }

        }

    }

}

if (isset($_GET['created'])) { $notice = 'Repository created.'; }

if (isset($_GET['updated'])) { $notice = 'Repository updated.'; }

if (isset($_GET['deleted'])) { $notice = 'Deleted.'; }

if (isset($_GET['uploaded'])) { $notice = 'Files uploaded.'; }

$editing = null;

if (isset($_GET['edit'])) {

    $editing = get_repository((int) $_GET['edit']);

}

$repos = get_repositories();

$page_title = 'Dashboard';

require __DIR__ . '/../includes/header.php';

?>

<div class="admin-bar">

    <h1>Dashboard</h1>

    <form method="post" class="inline">

        <?= csrf_field() ?>

        <input type="hidden" name="action" value="logout">

        <button type="submit" class="link-btn">Log out</button>

    </form>

</div>

<?php if ($notice): ?><p class="notice"><?= e($notice) ?></p><?php endif; ?>

<?php if ($error): ?><p class="error"><?= e($error) ?></p><?php endif; ?>

<?php if (is_file(dirname(__DIR__) . '/install.php')): ?>

    <div class="warn-banner">

        <h3>&#9888; Installer still present</h3>

        <p><strong>install.php</strong> is still on your server. It can rewrite your configuration and

        reveal setup details, so it should be deleted once your site is working. Walk through the

        post-launch checklist (create a repo, upload a file, view it publicly), then remove it here.</p>

        <form method="post" onsubmit="return confirm('Delete install.php now? This cannot be undone from here.');">

            <?= csrf_field() ?>

            <input type="hidden" name="action" value="remove_installer">

            <label class="confirm">

                <input type="checkbox" name="confirm_works" value="1">

                <span>I have verified my site works correctly (login, upload, and public browsing).</span>

            </label>

            <button type="submit">Delete install.php</button>

        </form>

    </div>

<?php endif; ?>

<?php if ($editing):

    $editFiles     = get_files_by_repo((int) $editing['id']);

    $editBreakdown = language_breakdown($editFiles);

    $editDetected  = $editBreakdown ? (string) array_key_first($editBreakdown) : '';

?>

    <section class="card">

        <h2>Edit repository</h2>

        <form method="post" class="form">

            <?= csrf_field() ?>

            <input type="hidden" name="action" value="update">

            <input type="hidden" name="id" value="<?= (int) $editing['id'] ?>">

            <label>Slug <input type="text" name="slug" value="<?= e($editing['slug']) ?>" required></label>

            <p class="muted">Renaming the slug also moves its uploaded files and changes its public URL.</p>

            <label>Name <input type="text" name="name" value="<?= e($editing['name']) ?>" required></label>

            <label>Language

                <input type="text" name="language" value="<?= e($editing['language']) ?>"

                       placeholder="<?= $editDetected !== '' ? e('Auto: ' . $editDetected) : 'Auto-detect' ?>">

            </label>

            <p class="muted">

                Leave blank to auto-detect from the code files.

                <?php if ($editBreakdown): ?>

                    Detected:

                    <?php $parts = [];

                        foreach ($editBreakdown as $langName => $n) { $parts[] = $langName . ' (' . $n . ')'; }

                        echo e(implode(', ', $parts)); ?>.

                <?php else: ?>

                    No code files detected yet.

                <?php endif; ?>

            </p>

            <label>Description <textarea name="description" rows="3"><?= e($editing['description']) ?></textarea></label>

            <div class="row">

                <button type="submit">Save</button>

                <a class="btn-secondary" href="<?= e(url('/admin/dashboard.php')) ?>">Cancel</a>

            </div>

        </form>

    </section>

<?php else: ?>

    <section class="card">

        <h2>New repository</h2>

        <form method="post" class="form">

            <?= csrf_field() ?>

            <input type="hidden" name="action" value="create">

            <label>Slug <input type="text" name="slug" placeholder="save-utils" required></label>

            <label>Name <input type="text" name="name" placeholder="SaveUtils" required></label>

            <label>Language <input type="text" name="language" placeholder="Auto-detect"></label>

            <p class="muted">Leave blank to auto-detect from the files after you upload them.</p>

            <label>Description <textarea name="description" rows="3"></textarea></label>

            <button type="submit">Create</button>

        </form>

    </section>

<?php endif; ?>

<section>

    <h2>Repositories</h2>

    <?php if (empty($repos)): ?>

        <p class="empty">None yet.</p>

    <?php else: ?>

        <table class="file-table">

            <thead><tr><th>Name</th><th>Slug</th><th>Lang</th><th>Actions</th></tr></thead>

            <tbody>

            <?php foreach ($repos as $r): ?>

                <tr>

                    <td><a href="<?= e(url('/' . $r['slug'])) ?>"><?= e($r['name']) ?></a></td>

                    <td class="muted">/<?= e($r['slug']) ?></td>

                    <td class="muted"><?= e(repo_language_display($r)) ?></td>

                    <td class="actions">

                        <a href="<?= e(url('/admin/upload.php?repo=' . urlencode($r['slug']))) ?>">Upload</a>

                        <a href="<?= e(url('/admin/dashboard.php?edit=' . (int) $r['id'])) ?>">Edit</a>

                        <form method="post" action="<?= e(url('/admin/delete.php')) ?>" class="inline"

                              onsubmit="return confirm('Delete repository &quot;<?= e($r['slug']) ?>&quot; and all its files?');">

                            <?= csrf_field() ?>

                            <input type="hidden" name="type" value="repo">

                            <input type="hidden" name="id" value="<?= (int) $r['id'] ?>">

                            <button type="submit" class="link-btn danger">Delete</button>

                        </form>

                    </td>

                </tr>

            <?php endforeach; ?>

            </tbody>

        </table>

    <?php endif; ?>

</section>

<?php

require __DIR__ . '/../includes/footer.php';