<?php

declare(strict_types=1);

namespace Evomedien\FeComment\Middleware;

use Evomedien\FeComment\Service\ExtensionSettings;
use Psr\Http\Message\ResponseInterface;
use Psr\Http\Message\ServerRequestInterface;
use Psr\Http\Server\MiddlewareInterface;
use Psr\Http\Server\RequestHandlerInterface;
use TYPO3\CMS\Core\Http\JsonResponse;
use TYPO3\CMS\Core\Mail\MailMessage;
use TYPO3\CMS\Core\Utility\GeneralUtility;

/**
 * POST /api/fe-comment/submit - sends the note pad by mail.
 *
 * Payload: {"entries": [{"url": "/product/hx4", "comment": "..."}]}
 * Response: {"success": true} or {"success": false, "error": "..."}
 *
 * Recipients (to/cc/bcc) and subject come from the extension configuration;
 * without a configured "to" the endpoint refuses, so feedback can never
 * silently vanish. The sender is the system default mail-from.
 */
final class SubmitMiddleware implements MiddlewareInterface
{
    private const PATH = '/api/fe-comment/submit';
    private const MAX_ENTRIES = 100;
    private const MAX_URL_LENGTH = 2000;
    private const MAX_COMMENT_LENGTH = 10000;

    public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface
    {
        if (rtrim($request->getUri()->getPath(), '/') !== self::PATH) {
            return $handler->handle($request);
        }
        if (strtoupper($request->getMethod()) !== 'POST') {
            return new JsonResponse(['success' => false, 'error' => 'POST only'], 405);
        }

        try {
            $settings = GeneralUtility::makeInstance(ExtensionSettings::class);
            if (!$settings->enabled()) {
                return new JsonResponse(['success' => false, 'error' => 'Feedback is disabled'], 403);
            }
            if ($settings->mailTo() === []) {
                return new JsonResponse(['success' => false, 'error' => 'No recipient configured (extension configuration fe_comment)'], 503);
            }

            $payload = json_decode((string)$request->getBody(), true);
            $entries = is_array($payload['entries'] ?? null) ? $payload['entries'] : [];
            $clean = [];
            foreach (array_slice($entries, 0, self::MAX_ENTRIES) as $entry) {
                $url = mb_substr(trim((string)($entry['url'] ?? '')), 0, self::MAX_URL_LENGTH);
                $comment = mb_substr(trim((string)($entry['comment'] ?? '')), 0, self::MAX_COMMENT_LENGTH);
                if ($comment !== '') {
                    $clean[] = ['url' => $url, 'comment' => $comment];
                }
            }
            if ($clean === []) {
                return new JsonResponse(['success' => false, 'error' => 'No entries'], 400);
            }

            $host = $request->getUri()->getHost();
            $lines = ['Page feedback from ' . $host, 'Submitted: ' . date('Y-m-d H:i'), str_repeat('-', 60), ''];
            foreach ($clean as $i => $entry) {
                $lines[] = ($i + 1) . ') ' . ($entry['url'] !== '' ? $entry['url'] : '(no url)');
                $lines[] = $entry['comment'];
                $lines[] = '';
            }

            $mail = GeneralUtility::makeInstance(MailMessage::class);
            $mail->to(...$settings->mailTo())
                ->subject($settings->subject() . ' — ' . $host . ' (' . count($clean) . ')')
                ->text(implode("\n", $lines));
            if ($settings->mailCc() !== []) {
                $mail->cc(...$settings->mailCc());
            }
            if ($settings->mailBcc() !== []) {
                $mail->bcc(...$settings->mailBcc());
            }
            // v14: MailMessage no longer has send() - the Mailer service does.
            GeneralUtility::makeInstance(\TYPO3\CMS\Core\Mail\Mailer::class)->send($mail);

            return new JsonResponse(['success' => true, 'sent' => count($clean)]);
        } catch (\Throwable $e) {
            return new JsonResponse(['success' => false, 'error' => 'Send failed: ' . $e->getMessage()], 500);
        }
    }
}