<?php
require_once __DIR__ . '/../includes/auth.php';
require_once __DIR__ . '/../includes/db.php';
require_once __DIR__ . '/../includes/helpers.php';

require_login();

$notice = '';
$error  = '';

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    csrf_verify();
    $action = $_POST['action'] ?? '';

    if ($action === 'logout') {
        logout();
        header('Location: ' . url('/admin/login.php'));
        exit;
    }

    // Remove the installer — only after the admin explicitly confirms the site
    // works. We never auto-delete: the confirmation checkbox is required.
    if ($action === 'remove_installer') {
        $installFile = dirname(__DIR__) . '/install.php';
        if (empty($_POST['confirm_works'])) {
            $error = 'Please tick the confirmation box first, so we know your site is working before removing the installer.';
        } elseif (!is_file($installFile)) {
            $notice = 'install.php is already gone — nothing to remove. You are all set.';
        } elseif (@unlink($installFile)) {
            $notice = 'install.php was deleted. Your setup is now locked down.';
        } else {
            $error = 'Could not delete install.php automatically (likely a file-permission restriction). '
                   . 'Please remove it by hand via FTP or your host\'s File Manager.';
        }
    }

    if ($action === 'create') {
        $slug = normalize_slug($_POST['slug'] ?? '');
        $name = trim($_POST['name'] ?? '');
        $desc = trim($_POST['description'] ?? '');
        $lang = trim($_POST['language'] ?? '');

        if (!valid_slug($slug) || $name === '') {
            $error = 'A valid slug and a name are required.';
        } elseif (get_repository_by_slug($slug)) {
            $error = 'That slug is already taken.';
        } else {
            create_repository($slug, $name, $desc, $lang);
            @mkdir(UPLOAD_DIR . '/' . $slug, 0775, true);
            header('Location: ' . url('/admin/dashboard.php?created=1'));
            exit;
        }
    }

    if ($action === 'update') {
        $id      = (int) ($_POST['id'] ?? 0);
        $name    = trim($_POST['name'] ?? '');
        $desc    = trim($_POST['description'] ?? '');
        $lang    = trim($_POST['language'] ?? '');
        $newSlug = normalize_slug($_POST['slug'] ?? '');
        $repo    = $id ? get_repository($id) : null;

        if (!$repo || $name === '') {
            $error = 'A name is required.';
        } elseif (!valid_slug($newSlug)) {
            $error = 'A valid slug is required.';
        } else {
            $slugTaken = get_repository_by_slug($newSlug);
            if ($newSlug !== $repo['slug'] && $slugTaken && (int) $slugTaken['id'] !== $id) {
                $error = 'That slug is already taken.';
            } elseif ($newSlug !== $repo['slug'] && is_dir(UPLOAD_DIR . '/' . $newSlug)) {
                $error = 'An uploads folder for that slug already exists.';
            } else {
                // Rename the slug (disk + DB) before saving the other fields.
                if ($newSlug !== $repo['slug']) {
                    $oldDir = UPLOAD_DIR . '/' . $repo['slug'];
                    $newDir = UPLOAD_DIR . '/' . $newSlug;
                    if (is_dir($oldDir) && !@rename($oldDir, $newDir)) {
                        $error = 'Could not rename the uploads folder on disk.';
                    } else {
                        rename_repository($id, $repo['slug'], $newSlug);
                    }
                }
                if (!$error) {
                    update_repository($id, $name, $desc, $lang);
                    header('Location: ' . url('/admin/dashboard.php?updated=1'));
                    exit;
                }
            }
        }
    }
}

if (isset($_GET['created'])) { $notice = 'Repository created.'; }
if (isset($_GET['updated'])) { $notice = 'Repository updated.'; }
if (isset($_GET['deleted'])) { $notice = 'Deleted.'; }
if (isset($_GET['uploaded'])) { $notice = 'Files uploaded.'; }

$editing = null;
if (isset($_GET['edit'])) {
    $editing = get_repository((int) $_GET['edit']);
}

$repos = get_repositories();

$page_title = 'Dashboard';
require __DIR__ . '/../includes/header.php';
?>
<div class="admin-bar">
    <h1>Dashboard</h1>
    <form method="post" class="inline">
        <?= csrf_field() ?>
        <input type="hidden" name="action" value="logout">
        <button type="submit" class="link-btn">Log out</button>
    </form>
</div>

<?php if ($notice): ?><p class="notice"><?= e($notice) ?></p><?php endif; ?>
<?php if ($error): ?><p class="error"><?= e($error) ?></p><?php endif; ?>

<?php if (is_file(dirname(__DIR__) . '/install.php')): ?>
    <div class="warn-banner">
        <h3>&#9888; Installer still present</h3>
        <p><strong>install.php</strong> is still on your server. It can rewrite your configuration and
        reveal setup details, so it should be deleted once your site is working. Walk through the
        post-launch checklist (create a repo, upload a file, view it publicly), then remove it here.</p>
        <form method="post" onsubmit="return confirm('Delete install.php now? This cannot be undone from here.');">
            <?= csrf_field() ?>
            <input type="hidden" name="action" value="remove_installer">
            <label class="confirm">
                <input type="checkbox" name="confirm_works" value="1">
                <span>I have verified my site works correctly (login, upload, and public browsing).</span>
            </label>
            <button type="submit">Delete install.php</button>
        </form>
    </div>
<?php endif; ?>

<?php if ($editing):
    $editFiles     = get_files_by_repo((int) $editing['id']);
    $editBreakdown = language_breakdown($editFiles);
    $editDetected  = $editBreakdown ? (string) array_key_first($editBreakdown) : '';
?>
    <section class="card">
        <h2>Edit repository</h2>
        <form method="post" class="form">
            <?= csrf_field() ?>
            <input type="hidden" name="action" value="update">
            <input type="hidden" name="id" value="<?= (int) $editing['id'] ?>">
            <label>Slug <input type="text" name="slug" value="<?= e($editing['slug']) ?>" required></label>
            <p class="muted">Renaming the slug also moves its uploaded files and changes its public URL.</p>
            <label>Name <input type="text" name="name" value="<?= e($editing['name']) ?>" required></label>
            <label>Language
                <input type="text" name="language" value="<?= e($editing['language']) ?>"
                       placeholder="<?= $editDetected !== '' ? e('Auto: ' . $editDetected) : 'Auto-detect' ?>">
            </label>
            <p class="muted">
                Leave blank to auto-detect from the code files.
                <?php if ($editBreakdown): ?>
                    Detected:
                    <?php $parts = [];
                        foreach ($editBreakdown as $langName => $n) { $parts[] = $langName . ' (' . $n . ')'; }
                        echo e(implode(', ', $parts)); ?>.
                <?php else: ?>
                    No code files detected yet.
                <?php endif; ?>
            </p>
            <label>Description <textarea name="description" rows="3"><?= e($editing['description']) ?></textarea></label>
            <div class="row">
                <button type="submit">Save</button>
                <a class="btn-secondary" href="<?= e(url('/admin/dashboard.php')) ?>">Cancel</a>
            </div>
        </form>
    </section>
<?php else: ?>
    <section class="card">
        <h2>New repository</h2>
        <form method="post" class="form">
            <?= csrf_field() ?>
            <input type="hidden" name="action" value="create">
            <label>Slug <input type="text" name="slug" placeholder="save-utils" required></label>
            <label>Name <input type="text" name="name" placeholder="SaveUtils" required></label>
            <label>Language <input type="text" name="language" placeholder="Auto-detect"></label>
            <p class="muted">Leave blank to auto-detect from the files after you upload them.</p>
            <label>Description <textarea name="description" rows="3"></textarea></label>
            <button type="submit">Create</button>
        </form>
    </section>
<?php endif; ?>

<section>
    <h2>Repositories</h2>
    <?php if (empty($repos)): ?>
        <p class="empty">None yet.</p>
    <?php else: ?>
        <table class="file-table">
            <thead><tr><th>Name</th><th>Slug</th><th>Lang</th><th>Actions</th></tr></thead>
            <tbody>
            <?php foreach ($repos as $r): ?>
                <tr>
                    <td><a href="<?= e(url('/' . $r['slug'])) ?>"><?= e($r['name']) ?></a></td>
                    <td class="muted">/<?= e($r['slug']) ?></td>
                    <td class="muted"><?= e(repo_language_display($r)) ?></td>
                    <td class="actions">
                        <a href="<?= e(url('/admin/upload.php?repo=' . urlencode($r['slug']))) ?>">Upload</a>
                        <a href="<?= e(url('/admin/dashboard.php?edit=' . (int) $r['id'])) ?>">Edit</a>
                        <form method="post" action="<?= e(url('/admin/delete.php')) ?>" class="inline"
                              onsubmit="return confirm('Delete repository &quot;<?= e($r['slug']) ?>&quot; and all its files?');">
                            <?= csrf_field() ?>
                            <input type="hidden" name="type" value="repo">
                            <input type="hidden" name="id" value="<?= (int) $r['id'] ?>">
                            <button type="submit" class="link-btn danger">Delete</button>
                        </form>
                    </td>
                </tr>
            <?php endforeach; ?>
            </tbody>
        </table>
    <?php endif; ?>
</section>
<?php
require __DIR__ . '/../includes/footer.php';