import { formatDate, formatDateTime, toLocalInput } from '../booking-ui/dateTime';
import * as React from 'react';
import { __ } from '@wordpress/i18n';
import type { BookingApi } from '../booking-ui/api';
interface Settings {
    automatic: boolean;
    days: Record<string, number | null>;
}
interface Review {
    key: string;
    identity: {
        users: number[];
        members: number[];
        contacts: number[];
    };
    reasons: string[];
    review_after: number;
    checked_at: number;
}
interface Registration {
    acknowledgement_required: boolean;
    acknowledgement_effective: boolean;
    registration_enabled: boolean;
    registration_url: string;
    policy_available: boolean;
}
interface Overview {
    registration: Registration;
    require_phone: boolean;
    settings: Settings;
    policy_url: string;
    policy_settings_url: string;
    export_url: string;
    erase_url: string;
    reviews: Review[];
    audit: {
        at: number;
        actor: number;
        removed: number;
        retained: number;
    }[];
    next_run: number | null;
}
interface Preview {
    categories: Record<string, {
        candidates: number;
        checked: number;
        eligible: number;
        retained: number;
        reasons: Record<string, number>;
    }>;
    removed: number;
    retained: number;
    applied: boolean;
}
const reasons = () => ({ active_booking: __('Active bookings', 'abece-booking'), membership: __('Membership', 'abece-booking'), financial: __('Financial records', 'abece-booking'), restriction: __('Unresolved restrictions', 'abece-booking'), audit: __('Audit review', 'abece-booking'), account: __('WordPress account', 'abece-booking'), ambiguous: __('Identity verification', 'abece-booking') });
const categories = () => ({ historical_bookings: __('Historical bookings', 'abece-booking'), cancelled_bookings: __('Cancelled bookings', 'abece-booking'), inactive_contacts: __('Inactive external contacts', 'abece-booking'), inactive_members: __('Inactive member profiles', 'abece-booking'), booking_notes: __('Old booking notes', 'abece-booking'), notification_logs: __('Notification logs', 'abece-booking') });
export function PrivacySettings({ api }: {
    api: BookingApi;
}) {
    const [data, setData] = React.useState<Overview | null>(null), [settings, setSettings] = React.useState<Settings | null>(null), [busy, setBusy] = React.useState(false), [error, setError] = React.useState(''), [message, setMessage] = React.useState(''), [preview, setPreview] = React.useState<Preview | null>(null);
    const [request, setRequest] = React.useState(''), [uid, setUid] = React.useState(''), [member, setMember] = React.useState(''), [contact, setContact] = React.useState(''), [confirmed, setConfirmed] = React.useState(false);
    React.useEffect(() => { let live = true; api.request<Overview>('admin/privacy').then(v => { if (live) {
        setData(v);
        setSettings(v.settings);
    } }).catch(e => { if (live)
        setError(e.message); }); return () => { live = false; }; }, [api]);
    async function action(task: () => Promise<unknown>) { setBusy(true); setError(''); setMessage(''); try {
        await task();
    }
    catch (e) {
        setError((e as Error).message);
    }
    finally {
        setBusy(false);
    } }
    async function save(e: React.FormEvent) { e.preventDefault(); if (!settings)
        return; if (settings.automatic && !window.confirm(__('Enable the configured automatic minimization? Review retention periods and the dry run first.', 'abece-booking')))
        return; await action(async () => { setSettings(await api.request<Settings>('admin/privacy/retention', 'PATCH', { ...settings, confirmed: settings.automatic })); setPreview(null); setMessage(__('Changes saved.', 'abece-booking')); }); }
    async function cleanup() { if (!window.confirm(__('Apply the saved retention settings to this batch? Financial records and blocked identities will be retained.', 'abece-booking')))
        return; await action(async () => { setPreview(await api.request<Preview>('admin/privacy/cleanup', 'POST', { confirmed: true })); setMessage(__('Cleanup batch completed. Review retained records before deciding on further action.', 'abece-booking')); }); }
    return <div className="asb-privacy-settings"><h2>{__('Privacy and personal data', 'abece-booking')}</h2><p>{__('Use WordPress personal-data tools for verified individual requests. Privacy tools are included in every edition. The operator determines purposes, legal bases and retention periods.', 'abece-booking')}</p>{error && <p role="alert">{error}</p>}{message && <p role="status">{message}</p>}{!data || !settings ? <p role="status">{__('Loading…', 'abece-booking')}</p> : <>
 <section className="asb-form-section"><h3>{__('Privacy policy', 'abece-booking')}</h3>{data.policy_url ? <a href={data.policy_url}>{__('Privacy policy', 'abece-booking')}</a> : <p>{__('Set a WordPress privacy-policy page so customers can read it before booking.', 'abece-booking')}</p>}<p className="asb-buttons"><a className="button" href={data.policy_settings_url}>{__('Privacy settings', 'abece-booking')}</a><a className="button" href={data.export_url}>{__('Export personal data', 'abece-booking')}</a><a className="button" href={data.erase_url}>{__('Erase personal data', 'abece-booking')}</a></p></section>
 <section className="asb-form-section"><h3>{__('Registration and customer information', 'abece-booking')}</h3><p>{data.registration.registration_enabled ? __('Public WordPress registration is enabled.', 'abece-booking') : __('Public WordPress registration is disabled. Existing accounts can still sign in.', 'abece-booking')}</p><p>{data.registration.policy_available ? __('The native registration form displays a link to your published privacy policy.', 'abece-booking') : __('Publish a WordPress privacy-policy page to display registration information. Acknowledgement is not enforced without a published policy.', 'abece-booking')}</p><label className="asb-checkbox"><input type="checkbox" disabled={busy} checked={data.registration.acknowledgement_required} onChange={e => { const required = e.target.checked; setData({ ...data, registration: { ...data.registration, acknowledgement_required: required } }); void action(async () => { try {
            const registration = await api.request<Registration>('admin/privacy/registration', 'PATCH', { acknowledgement_required: required });
            setData({ ...data, registration });
            setMessage(__('Changes saved.', 'abece-booking'));
        }
        catch (e) {
            setData(data);
            throw e;
        } }); }}/>{__('Require acknowledgement of the privacy policy during registration', 'abece-booking')}</label><p>{__('Off by default. Acknowledgement is not marketing consent or a legal basis for all processing. Administrator-created accounts and unsupported registration plugins are not forced through this checkbox.', 'abece-booking')}</p><p>{__('Signed-in customers can request export and account closure review in My personal data. Confirmation and processing use native WordPress tools; bookings, debts and accounts are not deleted on submission.', 'abece-booking')}</p>{data.registration.registration_enabled && <a href={data.registration.registration_url}>{__('Open registration form', 'abece-booking')}</a>}</section>
 <section className="asb-form-section"><h3>{__('Data minimization', 'abece-booking')}</h3><label className="asb-checkbox"><input type="checkbox" checked={data.require_phone} disabled={busy} onChange={e => { const required = e.target.checked; void action(async () => { await api.request('admin/privacy/minimization', 'PATCH', { require_phone: required }); setData({ ...data, require_phone: required }); }); }}/>{__('Require a phone number for booking', 'abece-booking')}</label><p>{__('Require a phone number only for a defined operational purpose. Guest bookings do not require a date of birth.', 'abece-booking')}</p></section>
 <section className="asb-form-section"><h3>{__('Retention and minimization', 'abece-booking')}</h3><p>{__('Automatic cleanup is off by default. Blank periods keep the category in manual review. Days are chosen by the operator, not a statutory retention recommendation. Saved settings apply to batches of at most 25 records per category.', 'abece-booking')}</p>
 <form onSubmit={save}><fieldset disabled={busy}><label className="asb-checkbox"><input type="checkbox" checked={settings.automatic} onChange={e => setSettings({ ...settings, automatic: e.target.checked })}/>{__('Enable automatic cleanup', 'abece-booking')}</label><div className="asb-form-grid">{Object.entries(categories()).map(([key, label]) => <label key={key}>{label}<input type="number" min={1} max={36500} step={1} value={settings.days[key] ?? ''} onChange={e => setSettings({ ...settings, days: { ...settings.days, [key]: e.target.value ? Number(e.target.value) : null } })}/><small>{__('Age in days; blank means manual review.', 'abece-booking')}</small></label>)}</div><button className="button button-primary">{__('Save retention settings', 'abece-booking')}</button></fieldset></form>
 <p>{__('Expired member-import previews are removed after one hour. WordPress manages expiry of its protected personal-data exports. Hosting backups and delivered emails require the operator’s separate policy.', 'abece-booking')}</p>
 <p className="asb-buttons"><button className="button" disabled={busy} onClick={() => void action(async () => setPreview(await api.request<Preview>('admin/privacy/preview', 'POST', {})))}>{__('Preview saved settings without changes', 'abece-booking')}</button><button className="button" disabled={busy || !preview} onClick={() => void cleanup()}>{__('Run cleanup batch', 'abece-booking')}</button></p>
 {preview && <div className="asb-table-scroll"><table className="widefat"><thead><tr>{[__('Category', 'abece-booking'), __('Candidates', 'abece-booking'), __('Checked', 'abece-booking'), __('Eligible', 'abece-booking'), __('Retained', 'abece-booking'), __('Reasons', 'abece-booking')].map(h => <th key={h}>{h}</th>)}</tr></thead><tbody>{Object.entries(preview.categories).map(([key, row]) => <tr key={key}><td>{categories()[key as keyof ReturnType<typeof categories>]}</td><td>{row.candidates}</td><td>{row.checked}</td><td>{row.eligible}</td><td>{row.retained}</td><td>{Object.entries(row.reasons).map(([reason, count]) => `${reasons()[reason as keyof ReturnType<typeof reasons>] ?? __('Retained', 'abece-booking')}: ${count}`).join(', ') || '—'}</td></tr>)}</tbody></table></div>}
 </section>
 <section className="asb-form-section"><h3>{__('Verified identity for a WordPress request', 'abece-booking')}</h3><p>{__('Manual verification is only needed when records cannot be unambiguously linked to a person, for example with a shared email address or a member without a WordPress account. Standard requests use WordPress email confirmation.', 'abece-booking')}</p><p>{__('Use this only after checking identity and authority, especially for shared family emails, children or an old email address. Confirm the request in WordPress first. Select only records proven to belong to that person; names alone are not evidence. Approval expires after one day.', 'abece-booking')}</p><form onSubmit={e => { e.preventDefault(); void action(async () => { await api.request(`admin/privacy/identity/${request}`, 'POST', { users: uid ? [Number(uid)] : [], members: member ? [Number(member)] : [], contacts: contact ? [Number(contact)] : [], confirmed }); setMessage(__('Identity selection saved for the confirmed request. Restart its export or erasure in WordPress.', 'abece-booking')); }); }}><fieldset disabled={busy}><div className="asb-form-grid">{[[__('WordPress privacy request ID', 'abece-booking'), request, setRequest], [__('WordPress user ID', 'abece-booking'), uid, setUid], [__('Member ID', 'abece-booking'), member, setMember], [__('External contact ID', 'abece-booking'), contact, setContact]].map(([label, value, setter], i) => <label key={i}>{label as string}<input type="number" min={1} step={1} required={i === 0} value={value as string} onChange={e => (setter as React.Dispatch<React.SetStateAction<string>>)(e.target.value)}/></label>)}</div><label className="asb-checkbox"><input type="checkbox" required checked={confirmed} onChange={e => setConfirmed(e.target.checked)}/>{__('I verified this person’s identity, authority and selected records.', 'abece-booking')}</label><button className="button">{__('Save verified identity', 'abece-booking')}</button></fieldset></form></section>
 <section className="asb-form-section"><h3>{__('Retained records and review', 'abece-booking')}</h3><p>{__('Financial evidence, active bookings and memberships, unresolved restrictions, mixed notes and audit links need individual decisions. Pseudonymized records are not necessarily anonymous. Review dates are reminders, not legal retention deadlines.', 'abece-booking')}</p><p>{__('Retained identity reviews', 'abece-booking')}: {data.reviews.length}</p>{data.reviews.length > 0 && <p>{__('Use the request’s documented identifiers and reasons to review records. Record an individual purpose and next review date before extending retention.', 'abece-booking')}</p>}{data.reviews.map(review => <PrivacyReview key={review.key} review={review} api={api} disabled={busy}/>)}<p>{__('Recent cleanup batches', 'abece-booking')}: {data.audit.length}</p><ul>{data.audit.slice(0, 5).map((row, i) => <li key={i}>{formatDateTime(new Date(row.at * 1000).toISOString())} · {__('Removed', 'abece-booking')}: {row.removed} · {__('Retained', 'abece-booking')}: {row.retained}</li>)}</ul></section>
 </>}</div>;
}
function PrivacyReview({ review, api, disabled }: {
    review: Review;
    api: BookingApi;
    disabled: boolean;
}) {
    const [purpose, setPurpose] = React.useState('active_operations'), [days, setDays] = React.useState('90'), [status, setStatus] = React.useState(''), [busy, setBusy] = React.useState(false);
    return <details className="asb-form-section"><summary>{__('Review retained records', 'abece-booking')} · {formatDate(toLocalInput(new Date(review.review_after * 1000).toISOString()))}</summary><p>{review.reasons.map(code => reasons()[code as keyof ReturnType<typeof reasons>] ?? __('Retained', 'abece-booking')).join(', ')}</p><p>{__('WordPress user ID', 'abece-booking')}: {review.identity.users.join(', ') || '—'} · {__('Member ID', 'abece-booking')}: {review.identity.members.join(', ') || '—'} · {__('External contact ID', 'abece-booking')}: {review.identity.contacts.join(', ') || '—'}</p><form onSubmit={e => { e.preventDefault(); if (!window.confirm(__('Confirm the individual retention review.', 'abece-booking')))
        return; setBusy(true); setStatus(''); api.request(`admin/privacy/reviews/${review.key}`, 'POST', { reason: purpose, review_days: Number(days), confirmed: true }).then(() => setStatus(__('Review recorded.', 'abece-booking'))).catch(e => setStatus(e.message)).finally(() => setBusy(false)); }}><fieldset disabled={disabled || busy}><label className="asb-stacked">{__('Retention purpose', 'abece-booking')}<select value={purpose} onChange={e => setPurpose(e.target.value)}><option value="active_operations">{__('Active operations', 'abece-booking')}</option><option value="financial_records">{__('Financial records', 'abece-booking')}</option><option value="legal_claim">{__('Legal claim', 'abece-booking')}</option><option value="identity_review">{__('Identity verification', 'abece-booking')}</option></select></label><label className="asb-stacked">{__('Review again in days', 'abece-booking')}<input type="number" min={1} max={3650} required value={days} onChange={e => setDays(e.target.value)}/></label><button className="button">{__('Record review', 'abece-booking')}</button></fieldset></form>{status && <p role="status">{status}</p>}</details>;
}