<?php
declare(strict_types=1);

/**
 * Prüft Wiedervorlage (Ticket auf später legen, Rückholen, Kundenantwort), Beobachter, ähnliche Tickets und Artikel sowie die
 * Erinnerung an Kunden vor dem automatischen Schließen.
 */

date_default_timezone_set('Europe/Berlin'); // wie in der Test-Installation
$root = dirname(__DIR__);
$work = sys_get_temp_dir() . '/deskhub-extras-' . bin2hex(random_bytes(4));
$tmp = $work . '/inst';
mkdir($tmp, 0755, true);
$webPort = random_int(35500, 35999);
$skip = '#^(config/config\.php|database/[^/]+\.sqlite[^/]*|backups|uploads|tests|plugins/[^/]+|\.git)(/|$)#';
foreach (new RecursiveIteratorIterator(new RecursiveDirectoryIterator($root, FilesystemIterator::SKIP_DOTS), RecursiveIteratorIterator::SELF_FIRST) as $f) {
    $rel = str_replace(chr(92), '/', substr($f->getPathname(), strlen($root) + 1));
    if (preg_match($skip, $rel) && !preg_match('#^(backups|uploads|plugins)/(\.htaccess|README\.md)$#', $rel)) continue;
    if ($f->isDir()) { @mkdir($tmp . '/' . $rel, 0755, true); continue; }
    @mkdir(dirname($tmp . '/' . $rel), 0755, true);
    copy($f->getPathname(), $tmp . '/' . $rel);
}
@mkdir($tmp . '/uploads');
@mkdir($tmp . '/config');
file_put_contents($tmp . '/config/config.php', '<?php return ' . var_export([
    'app_key' => bin2hex(random_bytes(32)),
    'db' => ['driver' => 'sqlite', 'sqlite_path' => $tmp . '/database/deskhub.sqlite'],
    'site' => ['name' => 'Test', 'url' => 'http://127.0.0.1', 'admin_email' => 'a@test.de', 'timezone' => 'Europe/Berlin'],
    'uploads' => ['max_size_bytes' => 10485760, 'allowed_extensions' => ['png'], 'path' => $tmp . '/uploads'],
], true) . ';');

putenv('DESKHUB_CONFIG_JSON');
putenv('DESKHUB_SQLITE_PATH');
putenv('DESKHUB_TESTING');
putenv('DESKHUB_API_ALLOW_INSECURE=1');
require_once $root . '/database/sqlite_schema.php';
require_once $root . '/database/migrate.php';
$db = new PDO('sqlite:' . $tmp . '/database/deskhub.sqlite');
$db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
$db->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC);
$db->exec('PRAGMA foreign_keys = ON');
$db->exec(convert_schema_to_sqlite((string) file_get_contents($root . '/database/schema.sql')));
$mig = run_migrations($db, true);
$now = date('Y-m-d H:i:s');
$dept = (int) $db->query('SELECT id FROM departments ORDER BY id LIMIT 1')->fetchColumn();
$db->exec('DELETE FROM staff');
$ins = $db->prepare('INSERT INTO staff (name, email, password_hash, role, department_id, is_active, created_at) VALUES (?,?,?,?,?,1,?)');
$ids = [];
foreach ([['Chef', 'chef@test.de', 'admin'], ['Agent', 'agent@test.de', 'agent']] as [$n, $e, $r]) {
    $ins->execute([$n, $e, password_hash('Sehr-Sicher-1234', PASSWORD_DEFAULT), $r, $dept, $now]);
    $ids[$n] = (int) $db->lastInsertId();
}
$db = null;

$failures = [];
$total = 0;
$check = function (bool $ok, string $what) use (&$failures, &$total): void { $total++; if (!$ok) $failures[] = $what; };
$webProc = proc_open([PHP_BINARY, '-S', "127.0.0.1:$webPort", '-t', $tmp], [['pipe', 'r'], ['file', $work . '/web.out', 'w'], ['file', $work . '/web.out', 'a']], $wp, $tmp);

try {
    for ($i = 0; $i < 50; $i++) { if (@fsockopen('127.0.0.1', $webPort)) break; usleep(100000); }
    putenv('DESKHUB_SQLITE_PATH=' . $tmp . '/database/deskhub.sqlite');   // nur für die Kommandozeilen-Aufrufe unten (der Webserver läuft schon)
    $pdo = function () use ($tmp): PDO {
        $p = new PDO('sqlite:' . $tmp . '/database/deskhub.sqlite');
        $p->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
        $p->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC);
        return $p;
    };
    $call = function (string $method, string $path, string $jar, array $form = []) use ($webPort): array {
        $ch = curl_init("http://127.0.0.1:$webPort$path");
        curl_setopt_array($ch, [CURLOPT_RETURNTRANSFER => true, CURLOPT_FOLLOWLOCATION => false, CURLOPT_TIMEOUT => 60, CURLOPT_COOKIEJAR => $jar, CURLOPT_COOKIEFILE => $jar, CURLOPT_HTTPHEADER => ['Sec-Fetch-Mode: navigate', 'Sec-Fetch-User: ?1']]);
        if ($method === 'POST') { curl_setopt($ch, CURLOPT_POST, true); curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($form)); }
        $b = (string) curl_exec($ch);
        $s = (int) curl_getinfo($ch, CURLINFO_RESPONSE_CODE);
        curl_close($ch);
        return [$s, $b];
    };
    $login = function (string $email) use ($call): string {
        $jar = tempnam(sys_get_temp_dir(), 'tex');
        [, $lp] = $call('GET', '/staff/login.php', $jar);
        preg_match('/name="csrf_token" value="([a-f0-9]+)"/', $lp, $m);
        $call('POST', '/staff/login.php', $jar, ['csrf_token' => $m[1] ?? '', 'email' => $email, 'password' => 'Sehr-Sicher-1234']);
        return $jar;
    };
    $tokenOf = function (string $jar, string $path) use ($call): string {
        [, $p] = $call('GET', $path, $jar);
        preg_match('/name="csrf_token" value="([a-f0-9]+)"/', $p, $mm);
        return $mm[1] ?? '';
    };
    $cli = function (string $script) use ($tmp, $work): string {
        $file = $work . '/run_' . bin2hex(random_bytes(3)) . '.php';
        file_put_contents($file, "<?php\nrequire " . var_export($tmp . '/includes/bootstrap.php', true) . ";\n" . $script);
        return (string) shell_exec(escapeshellarg(PHP_BINARY) . ' ' . escapeshellarg($file) . ' 2>&1');
    };
    $cron = fn(string $name): string => (string) shell_exec(escapeshellarg(PHP_BINARY) . ' ' . escapeshellarg($tmp . '/cron/' . $name) . ' 2>&1');

    $db = $pdo();
    $now = date('Y-m-d H:i:s');
    $dept = (int) $db->query('SELECT id FROM departments ORDER BY id LIMIT 1')->fetchColumn();
    $prio = (int) $db->query('SELECT id FROM priorities ORDER BY sort_order LIMIT 1')->fetchColumn();
    $mk = function (string $number, string $subject, string $status, string $updated, string $email = 'kunde@example.org') use ($pdo, $dept, $prio): int {
        $d = $pdo();
        $d->prepare('INSERT INTO tickets (ticket_number, subject, requester_name, requester_email, department_id, priority_id, status, source, created_at, updated_at) VALUES (?,?,?,?,?,?,?,?,?,?)')
            ->execute([$number, $subject, 'Kunde', $email, $dept, $prio, $status, 'web', $updated, $updated]);
        return (int) $d->lastInsertId();
    };
    $t1 = $mk('T9001', 'Passwort zurücksetzen funktioniert nicht', 'open', $now);
    $t2 = $mk('T9002', 'Passwort zurücksetzen Problem', 'closed', date('Y-m-d H:i:s', time() - 86400 * 20));
    $db->exec("INSERT INTO kb_categories (name, slug, sort_order) VALUES ('Konto', 'konto', 1)");
    $db->prepare('INSERT INTO kb_articles (category_id, title, slug, body, is_published, created_at, updated_at) VALUES (?,?,?,?,?,?,?)')
        ->execute([(int) $db->lastInsertId(), 'Passwort zurücksetzen', 'passwort-zuruecksetzen', '<p>Klicken Sie auf Passwort vergessen.</p>', 1, $now, $now]);

    $jarA = $login('chef@test.de');
    $jarB = $login('agent@test.de');

    // ── Wiedervorlage ──────────────────────────────────────────────────────
    [$s, $page] = $call('GET', '/staff/ticket_view.php?n=T9001', $jarA);
    $check($s === 200 && str_contains($page, 'Wiedervorlage') && str_contains($page, 'Auf später legen') && str_contains($page, 'Ticket beobachten'), 'Ticketseite zeigt Wiedervorlage und Beobachten (HTTP ' . $s . ')');
    [$s, $list] = $call('GET', '/staff/tickets.php?tab=open', $jarA);
    $check(str_contains($list, 'T9001'), 'Vorher: Ticket steht in der Liste „Offen“');
    $tok = $tokenOf($jarA, '/staff/ticket_view.php?n=T9001');
    $call('POST', '/staff/ticket_view.php?n=T9001', $jarA, ['csrf_token' => $tok, 'action' => 'snooze', 'snooze_choice' => 'custom', 'snooze_custom' => date('Y-m-d\TH:i', time() - 3600)]);
    $check($pdo()->query("SELECT snoozed_until FROM tickets WHERE id = $t1")->fetchColumn() === null, 'Ein Zeitpunkt in der Vergangenheit wird abgelehnt');
    $tok = $tokenOf($jarA, '/staff/ticket_view.php?n=T9001');
    $call('POST', '/staff/ticket_view.php?n=T9001', $jarA, ['csrf_token' => $tok, 'action' => 'snooze', 'snooze_choice' => '3h']);
    $until = (string) $pdo()->query("SELECT snoozed_until FROM tickets WHERE id = $t1")->fetchColumn();
    $check($until !== '' && strtotime($until) > time() + 2 * 3600 && strtotime($until) < time() + 4 * 3600, 'Wiedervorlage in 3 Stunden wird gespeichert');
    [, $list] = $call('GET', '/staff/tickets.php?tab=open', $jarA);
    $check(!str_contains($list, 'T9001'), 'In der Wiedervorlage: Ticket verschwindet aus „Offen“');
    [, $list] = $call('GET', '/staff/tickets.php?tab=all', $jarA);
    $check(!str_contains($list, 'T9001'), '… und aus „Alle“');
    [, $list] = $call('GET', '/staff/tickets.php?tab=snoozed', $jarA);
    $check(str_contains($list, 'T9001') && str_contains($list, 'Wiedervorlage'), '… und steht im Tab „Wiedervorlage“');
    $tok = $tokenOf($jarA, '/staff/ticket_view.php?n=T9001');
    $call('POST', '/staff/ticket_view.php?n=T9001', $jarA, ['csrf_token' => $tok, 'action' => 'unsnooze']);
    [, $list] = $call('GET', '/staff/tickets.php?tab=open', $jarA);
    $check(str_contains($list, 'T9001'), 'Zurückholen: Ticket ist wieder in der Liste');

    // fällig: Cron holt zurück
    $pdo()->prepare('UPDATE tickets SET snoozed_until = ?, snoozed_by = ? WHERE id = ?')->execute([date('Y-m-d H:i:s', time() - 60), 1, $t1]);
    $out = $cron('process_snoozes.php');
    $check($pdo()->query("SELECT snoozed_until FROM tickets WHERE id = $t1")->fetchColumn() === null && str_contains($out, '1 Ticket'), 'Fällige Wiedervorlage wird vom Cron zurückgeholt ' . trim($out));
    $act = $pdo()->prepare("SELECT COUNT(*) FROM activity_log WHERE ticket_id = ? AND action = 'Wiedervorlage fällig'");
    $act->execute([$t1]);
    $check((int) $act->fetchColumn() === 1, 'Der Verlauf nennt die fällige Wiedervorlage');

    // Kundenantwort holt sofort zurück
    $pdo()->prepare('UPDATE tickets SET snoozed_until = ?, snoozed_by = 1 WHERE id = ?')->execute([date('Y-m-d H:i:s', time() + 86400), $t1]);
    $out = $cli("\$p = get_db(); \$t = \$p->query('SELECT * FROM tickets WHERE id = $t1')->fetch(); notify_new_reply_channels(\$t, 'Hallo, noch eine Frage');\necho 'fertig';");
    $check(str_contains($out, 'fertig') && $pdo()->query("SELECT snoozed_until FROM tickets WHERE id = $t1")->fetchColumn() === null, 'Antwortet der Kunde, kommt das Ticket sofort zurück ' . trim($out));

    // ── Beobachter ─────────────────────────────────────────────────────────
    $pdo()->exec('UPDATE tickets SET locked_by = NULL, locked_at = NULL');   // der Admin hatte das Ticket geöffnet (Sperre)
    $tok = $tokenOf($jarB, '/staff/ticket_view.php?n=T9001');
    $call('POST', '/staff/ticket_view.php?n=T9001', $jarB, ['csrf_token' => $tok, 'action' => 'follow']);
    $check((int) $pdo()->query("SELECT COUNT(*) FROM ticket_followers WHERE ticket_id = $t1")->fetchColumn() === 1, 'Beobachten: Mitarbeiter wird als Beobachter eingetragen');
    [, $page] = $call('GET', '/staff/ticket_view.php?n=T9001', $jarB);
    $check(str_contains($page, 'Nicht mehr beobachten') && str_contains($page, 'Agent'), 'Die Ticketseite zeigt den Beobachter und „Nicht mehr beobachten“');
    $out = $cli("\$p = get_db(); \$t = \$p->query('SELECT * FROM tickets WHERE id = $t1')->fetch(); ticket_followers_notify(\$t, 'Neue Kundenantwort', null); echo 'fertig';");
    $check(str_contains($out, 'fertig') && !str_contains($out, 'Fatal'), 'Benachrichtigung der Beobachter läuft ohne Fehler ' . trim($out));
    $tok = $tokenOf($jarB, '/staff/ticket_view.php?n=T9001');
    $call('POST', '/staff/ticket_view.php?n=T9001', $jarB, ['csrf_token' => $tok, 'action' => 'unfollow']);
    $check((int) $pdo()->query("SELECT COUNT(*) FROM ticket_followers WHERE ticket_id = $t1")->fetchColumn() === 0, 'Nicht mehr beobachten entfernt den Eintrag');

    // ── Ähnliche Tickets und Artikel ───────────────────────────────────────
    [, $page] = $call('GET', '/staff/ticket_view.php?n=T9001', $jarA);
    $check(str_contains($page, 'Dazu passend') && str_contains($page, '/kb_article.php?slug=passwort-zuruecksetzen') && str_contains($page, 'T9002'), 'Ähnliches: passender Artikel und gelöstes Ticket werden vorgeschlagen');
    [, $page] = $call('GET', '/staff/ticket_view.php?n=T9002', $jarA);
    $check(!str_contains($page, 'href="/staff/ticket_view.php?n=T9002" target'), 'Ähnliches: ein Ticket schlägt sich nicht selbst vor');

    // ── Erinnerung an Kunden ───────────────────────────────────────────────
    $old = date('Y-m-d H:i:s', time() - 5 * 86400);
    $t3 = $mk('T9003', 'Frage zur Lieferung', 'answered', $old);
    $t4 = $mk('T9004', 'Frage zur Rechnung', 'answered', date('Y-m-d H:i:s', time() - 86400));
    $out = $cron('remind_customers.php');
    $check(str_contains($out, 'deaktiviert') && $pdo()->query("SELECT reminder_sent_at FROM tickets WHERE id = $t3")->fetchColumn() === null, 'Erinnerung ist standardmäßig aus');
    [$s, $sp] = $call('GET', '/staff/settings.php', $jarA);
    $check(str_contains($sp, 'Kunden erinnern'), 'Die Einstellung „Kunden erinnern“ steht in den Einstellungen');
    $set = $pdo()->prepare('INSERT OR REPLACE INTO settings (setting_key, setting_value) VALUES (?, ?)');
    foreach (['remind_enabled' => '1', 'remind_after_days' => '3', 'auto_close_enabled' => '1', 'auto_close_days' => '7'] as $k => $v) $set->execute([$k, $v]);
    $out = $cron('remind_customers.php');
    $row = $pdo()->query("SELECT reminder_sent_at, updated_at FROM tickets WHERE id = $t3")->fetch();
    $check(!empty($row['reminder_sent_at']) && $row['updated_at'] === $old, 'Nach 5 Tagen ohne Reaktion geht eine Erinnerung raus, die Frist zum Schließen bleibt unverändert ' . trim($out));
    $check($pdo()->query("SELECT reminder_sent_at FROM tickets WHERE id = $t4")->fetchColumn() === null, 'Ein Ticket mit frischer Antwort wird nicht erinnert');
    $cron('remind_customers.php');
    $act = $pdo()->prepare("SELECT COUNT(*) FROM activity_log WHERE ticket_id = ? AND action = 'Erinnerung an den Kunden gesendet'");
    $act->execute([$t3]);
    $check((int) $act->fetchColumn() === 1, 'Pro Antwort nur eine Erinnerung');
    $cli("\$p = get_db(); \$t = \$p->query('SELECT * FROM tickets WHERE id = $t3')->fetch(); notify_new_reply_channels(\$t, 'Danke');");
    $check($pdo()->query("SELECT reminder_sent_at FROM tickets WHERE id = $t3")->fetchColumn() === null, 'Eine Kundenantwort setzt die Erinnerung zurück');

    // ── Schnittstelle für Android und Windows ──────────────────────────────
    $api = function (string $method, string $path, ?array $json = null, ?string $bearer = null) use ($webPort): array {
        $ch = curl_init("http://127.0.0.1:$webPort$path");
        $h = ['Content-Type: application/json'];
        if ($bearer) $h[] = 'Authorization: Bearer ' . $bearer;
        curl_setopt_array($ch, [CURLOPT_RETURNTRANSFER => true, CURLOPT_TIMEOUT => 60, CURLOPT_HTTPHEADER => $h, CURLOPT_CUSTOMREQUEST => $method]);
        if ($json !== null) curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($json));
        $b = (string) curl_exec($ch);
        $s = (int) curl_getinfo($ch, CURLINFO_RESPONSE_CODE);
        curl_close($ch);
        return [$s, json_decode($b, true) ?? $b];
    };
    [, $lg] = $api('POST', '/api/staff/v1/login.php', ['email' => 'chef@test.de', 'password' => 'Sehr-Sicher-1234', 'deviceName' => 'Test']);
    $bt = (string) ($lg['token'] ?? '');
    $check($bt !== '', 'App-Schnittstelle: Anmeldung klappt');
    $iso = gmdate('Y-m-d\TH:i:s\Z', time() + 2 * 3600);
    [$s, $r] = $api('PATCH', '/api/staff/v1/ticket_update.php', ['number' => 'T9001', 'snoozeUntil' => $iso], $bt);
    $check($s === 200 && !empty($r['ticket']['snoozedUntil']), 'App: Wiedervorlage setzen (ISO-Zeit), Antwort nennt snoozedUntil (HTTP ' . $s . ')');
    [, $r] = $api('GET', '/api/staff/v1/tickets.php?status=open,pending,answered,on_hold,resolved,closed&perPage=50', null, $bt);
    $nums = array_column($r['items'] ?? [], 'number');
    $check(!in_array('T9001', $nums, true) && in_array('T9002', $nums, true), 'App: Ticket in der Wiedervorlage fehlt in der normalen Liste');
    [, $r] = $api('GET', '/api/staff/v1/tickets.php?status=open,pending,answered,on_hold,resolved,closed&snoozed=1', null, $bt);
    $check(array_column($r['items'] ?? [], 'number') === ['T9001'], 'App: ?snoozed=1 liefert nur die Wiedervorlagen');
    [$s, $r] = $api('PATCH', '/api/staff/v1/ticket_update.php', ['number' => 'T9001', 'snoozeUntil' => gmdate('Y-m-d\TH:i:s\Z', time() - 100)], $bt);
    $check($s === 422, 'App: Zeitpunkt in der Vergangenheit wird abgelehnt (HTTP ' . $s . ')');
    [, $r] = $api('PATCH', '/api/staff/v1/ticket_update.php', ['number' => 'T9001', 'snoozeUntil' => null, 'following' => true], $bt);
    $check(empty($r['ticket']['snoozedUntil']) && ($r['ticket']['following'] ?? false) === true, 'App: Wiedervorlage aufheben und beobachten in einem Aufruf');
    [, $r] = $api('GET', '/api/staff/v1/tickets.php?status=open,pending,answered,on_hold,resolved,closed&following=1', null, $bt);
    $check(array_column($r['items'] ?? [], 'number') === ['T9001'], 'App: ?following=1 liefert nur beobachtete Tickets');
    [, $r] = $api('GET', '/api/staff/v1/ticket.php?number=T9001', null, $bt);
    $check(!empty($r['ticket']['similar']['articles']) && !empty($r['ticket']['similar']['tickets']) && ($r['ticket']['following'] ?? false) === true, 'App: Ticketdetail enthält „Dazu passend“ und following');

    @unlink($jarA); @unlink($jarB);
} finally {
    if (isset($webProc) && is_resource($webProc)) { proc_terminate($webProc); proc_close($webProc); }
}

usleep(300000);
$rm = function (string $d) use (&$rm) {
    foreach (scandir($d) ?: [] as $e) { if ($e === '.' || $e === '..') continue; is_dir("$d/$e") && !is_link("$d/$e") ? $rm("$d/$e") : @unlink("$d/$e"); }
    @rmdir($d);
};
if (str_starts_with($work, sys_get_temp_dir() . '/deskhub-extras-')) $rm($work);

if ($failures) {
    fwrite(STDERR, "Fehlgeschlagen:\n - " . implode("\n - ", $failures) . "\n");
    exit(1);
}
echo "Ticket extras checks passed ({$total} Prüfungen).\n";