<?php
/**
 * The Jetpack Settings admin page.
 *
 * @package automattic/jetpack
 */

use Automattic\Jetpack\Admin_UI\Admin_Menu;
use Automattic\Jetpack\Connection\Initial_State as Connection_Initial_State;
use Automattic\Jetpack\Connection\Manager as Connection_Manager;
use Automattic\Jetpack\Feature_Flags\Feature_Flags;
use Automattic\Jetpack\Status;

require_once __DIR__ . '/class.jetpack-admin-page.php';
require_once __DIR__ . '/class-jetpack-redux-state-helper.php';
require_once __DIR__ . '/class-jetpack-wp-build-page.php';
require_once dirname( __DIR__ ) . '/class-jetpack-settings-feature-flags.php';

/**
 * Renders the Settings app, whose connection screens also serve unconnected sites.
 *
 * @since 16.3
 */
class Jetpack_Settings_React_Page extends Jetpack_Admin_Page {
	/**
	 * Register the page before the site connects, for the connection screen.
	 *
	 * @var bool
	 */
	protected $dont_show_if_not_active = false;

	/**
	 * Whether the REST API is off and the page falls back to the modules list.
	 *
	 * @var bool
	 */
	protected $is_redirecting = false;

	/**
	 * The wp-build route's page id, which must not be the `jetpack-settings` menu slug.
	 *
	 * @var string
	 */
	const WP_BUILD_PAGE_ID = 'jetpack-settings-dashboard';

	/**
	 * Whether this request loaded the wp-build route.
	 *
	 * @var bool
	 */
	private $is_wp_build_loaded = false;

	/**
	 * Whether Settings renders through wp-build; off serves the webpack page at the same address.
	 *
	 * @since 16.3
	 *
	 * @return bool
	 */
	public static function is_wp_build_enabled() {
		return Feature_Flags::is_enabled( Jetpack_Settings_Feature_Flags::WP_BUILD );
	}

	/**
	 * Whether this request should load wp-build.
	 *
	 * An IDC-blocked page shows only the IDC banner, which the wp-build template would hide.
	 *
	 * @since 16.3
	 *
	 * @return bool
	 */
	public function should_load_wp_build() {
		if ( ! is_admin() || ! self::is_wp_build_enabled() ) {
			return false;
		}

		// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Reading the page slug only.
		if ( ! isset( $_GET['page'] ) || 'jetpack-settings' !== sanitize_text_field( wp_unslash( $_GET['page'] ) ) ) {
			return false;
		}

		return ! $this->block_page_rendering_for_idc();
	}

	/**
	 * Load wp-build before the admin menu is built, on the Settings request only.
	 *
	 * @since 16.3
	 *
	 * @return void
	 */
	public function maybe_load_wp_build() {
		if ( $this->should_load_wp_build() ) {
			$this->is_wp_build_loaded = Jetpack_WP_Build_Page::load( self::WP_BUILD_PAGE_ID );
		}
	}

	/**
	 * Whether this request renders through wp-build.
	 *
	 * @since 16.3
	 *
	 * @return bool
	 */
	public function should_render_wp_build() {
		return $this->is_wp_build_loaded && function_exists( 'jetpack_plugin_jetpack_settings_dashboard_wp_admin_render_page' );
	}

	/**
	 * The route bundle's classic script dependencies (e.g. `lodash`), which wp-build registers
	 * as a script module without them, leaving globals like `window.lodash` undefined.
	 *
	 * @since 16.3
	 *
	 * @return string[]
	 */
	protected function get_wp_build_script_dependencies() {
		$asset_path = JETPACK__PLUGIN_DIR . 'build/routes/settings/content.min.asset.php';
		if ( ! file_exists( $asset_path ) ) {
			return array();
		}

		$asset = include $asset_path;
		return $asset['dependencies'] ?? array();
	}

	/**
	 * Register the page; only its sidebar entry keeps the Settings access gate.
	 *
	 * Shares the bottom tier with Beta Tester so it lands below the alphabetical run;
	 * the upsell still renders underneath because Admin_Menu appends it after sorting.
	 *
	 * @return string The page hook.
	 */
	public function get_page_hook() {
		if ( ! $this->can_access_settings() ) {
			add_filter( 'jetpack_admin_menu_visibility', array( __CLASS__, 'hide_menu_item' ) );
		}

		$position = defined( Admin_Menu::class . '::POSITION_LAST' ) ? Admin_Menu::POSITION_LAST : 998;

		$hook = Admin_Menu::add_menu(
			__( 'Settings', 'jetpack' ),
			__( 'Settings', 'jetpack' ),
			'jetpack_admin_page',
			'jetpack-settings',
			array( $this, 'render' ),
			$position,
			array( 'key' => 'jetpack-settings' )
		);

		// The IDC banner is a core-style notice, and during IDC it is all this page shows.
		remove_action( "load-$hook", array( Admin_Menu::class, 'hide_core_admin_notices' ) );

		return $hook;
	}

	/**
	 * Hide the sidebar entry from users who cannot use Settings.
	 *
	 * @param array $states Menu item key to visibility state.
	 * @return array
	 */
	public static function hide_menu_item( $states ) {
		$states['jetpack-settings'] = 'hidden';
		return $states;
	}

	/**
	 * Add page actions.
	 *
	 * @param string $hook Hook of current page.
	 * @return void
	 */
	public function add_page_actions( $hook ) {
		add_action( "load-$hook", array( $this, 'add_fallback_redirects' ) );
	}

	/**
	 * Send browsers that cannot run the app to the modules list.
	 *
	 * @return void
	 */
	public function add_fallback_redirects() {
		if ( ! $this->is_rest_api_enabled() ) {
			$this->is_redirecting = true;
			add_action( 'admin_head', array( $this, 'add_fallback_head_meta' ) );
		}

		add_action( 'admin_head', array( $this, 'add_noscript_head_meta' ) );
	}

	/**
	 * Determine whether a user can access the Jetpack Settings page.
	 *
	 * Rules are:
	 * - user is allowed to see the Jetpack Admin
	 * - site is connected or in offline mode
	 * - non-admins only need access to the settings when there are modules they can manage.
	 *
	 * @return bool $can_access_settings Can the user access settings.
	 */
	private function can_access_settings() {
		$connection = new Connection_Manager( 'jetpack' );
		$status     = new Status();

		// User must have the necessary permissions to see the Jetpack settings pages.
		if ( ! current_user_can( 'edit_posts' ) ) {
			return false;
		}

		// In offline mode, allow access to admins.
		if ( $status->is_offline_mode() && current_user_can( 'manage_options' ) ) {
			return true;
		}

		// If not in offline mode but site is not connected, bail.
		if ( ! Jetpack::is_connection_ready() ) {
			return false;
		}

		/*
		 * Additional checks for non-admins.
		*/
		if ( ! current_user_can( 'manage_options' ) ) {
			// If the site isn't connected at all, bail.
			if ( ! $connection->has_connected_owner() ) {
				return false;
			}

			/*
			 * If they haven't connected their own account yet,
			 * they have no use for the settings page.
			 * They will not be able to manage any settings.
			 */
			if ( ! $connection->is_user_connected() ) {
				return false;
			}

			/*
			 * Non-admins only have access to settings
			 * for the following modules:
			 * - Publicize
			 * - Post By Email
			 * If those modules are not available, bail.
			 */
			if (
				! Jetpack::is_module_active( 'post-by-email' )
					&& (
						! Jetpack::is_module_active( 'publicize' ) ||
						! current_user_can( 'publish_posts' )
					)
			) {
				return false;
			}
		}

		// fallback.
		return true;
	}

	/**
	 * Add action to render page specific HTML.
	 *
	 * @return void
	 */
	public function page_render() {
		/** This action is already documented in class.jetpack-admin-page.php */
		do_action( 'jetpack_notices' );

		if ( $this->should_render_wp_build() ) {
			jetpack_plugin_jetpack_settings_dashboard_wp_admin_render_page(); // @phan-suppress-current-line PhanUndeclaredFunction -- should_render_wp_build() checks function_exists(); defined in the generated build/pages/, which Phan excludes.
			return;
		}

		// Fetch static.html.
		$static_html = @file_get_contents( JETPACK__PLUGIN_DIR . '_inc/build/static.html' ); //phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged, WordPress.WP.AlternativeFunctions.file_get_contents_file_get_contents, Not fetching a remote file.

		if ( false === $static_html ) {

			// If we still have nothing, display an error.
			echo '<p>';
			esc_html_e( 'Error fetching static.html. Try running: ', 'jetpack' );
			echo '<code>pnpm run distclean && pnpm jetpack build plugins/jetpack</code>';
			echo '</p>';
		} else {
			// We got the static.html so let's display it.
			echo $static_html; //phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
		}
	}

	/**
	 * Load styles for static page.
	 */
	public function additional_styles() {
		// The route bundle carries these styles.
		if ( $this->should_render_wp_build() ) {
			return;
		}

		Jetpack_Admin_Page::load_wrapper_styles();
	}

	/**
	 * Load admin page scripts.
	 */
	public function page_admin_scripts() {
		if ( $this->is_redirecting ) {
			return; // No need for scripts on a fallback page.
		}

		$status          = new Status();
		$is_offline_mode = $status->is_offline_mode();
		$site_suffix     = $status->get_site_suffix();

		if ( $this->should_render_wp_build() ) {
			// wp-build enqueues the route bundle; this handle carries the inline state and classic dependencies.
			wp_register_script( 'react-plugin', false, $this->get_wp_build_script_dependencies(), JETPACK__VERSION, true );
			wp_enqueue_script( 'react-plugin' );
		} else {
			$script_deps_path    = JETPACK__PLUGIN_DIR . '_inc/build/admin.asset.php';
			$script_dependencies = array( 'jquery', 'wp-polyfill' );
			$version             = JETPACK__VERSION;
			if ( file_exists( $script_deps_path ) ) {
				$asset_manifest      = include $script_deps_path;
				$script_dependencies = $asset_manifest['dependencies'];
				$version             = $asset_manifest['version'];
			}

			wp_enqueue_script(
				'react-plugin',
				plugins_url( '_inc/build/admin.js', JETPACK__PLUGIN_FILE ),
				$script_dependencies,
				$version,
				true
			);

			wp_set_script_translations( 'react-plugin', 'jetpack' );
		}

		$blog_id_prop = '';
		if ( ! defined( 'IS_WPCOM' ) || ! IS_WPCOM ) {
			$blog_id = Connection_Manager::get_site_id( true );
			if ( $blog_id ) {
				$blog_id_prop = ', currentBlogID: "' . (int) $blog_id . '"';
			}
		}

		if ( ! $is_offline_mode && Jetpack::is_connection_ready() ) {
			// Required for Analytics.
			wp_enqueue_script( 'jp-tracks', '//stats.wp.com/w.js', array(), gmdate( 'YW' ), true );
		}

		// Add objects to be passed to the initial state of the app.
		// Use wp_add_inline_script instead of wp_localize_script, see https://core.trac.wordpress.org/ticket/25280.
		wp_add_inline_script( 'react-plugin', 'var Initial_State=' . wp_json_encode( Jetpack_Redux_State_Helper::get_initial_state(), JSON_UNESCAPED_SLASHES | JSON_HEX_TAG | JSON_HEX_AMP ) . ';', 'before' );

		// This will set the default URL of the jp_redirects lib.
		wp_add_inline_script( 'react-plugin', 'var jetpack_redirects = { currentSiteRawUrl: "' . $site_suffix . '"' . $blog_id_prop . ' };', 'before' );

		// Adds Connection package initial state.
		Connection_Initial_State::render_script( 'react-plugin' );
	}
}