<?php
/**
 * Fociz Team & Uitnodigingen Beheer (Enkel voor Admin)
 */

require_once __DIR__ . '/includes/auth.php';
require_once __DIR__ . '/includes/mailer.php';
$adminUser = require_admin();
$currentUser = $adminUser;
$db = get_db_connection();

$message = null;
$generatedLink = null;
$error = null;

// POST acties afhandelen met CSRF-bescherming
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $action = $_POST['action'] ?? '';
    $csrfToken = $_POST['csrf_token'] ?? null;

    if (!verify_csrf_token($csrfToken)) {
        $error = "Beveiligingsfout: CSRF-token ongeldig of verlopen. Ververs de pagina en probeer opnieuw.";
    } elseif ($action === 'create_invite') {
        $email = strtolower(trim($_POST['email'] ?? ''));
        $role = in_array($_POST['role'] ?? '', ['ADMIN', 'MEMBER']) ? $_POST['role'] : 'MEMBER';

        if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
            $error = "Voer een geldig e-mailadres in.";
        } else {
            // Controleer of e-mail al bestaat
            $stmtCheck = $db->prepare("SELECT id FROM users WHERE email = ?");
            $stmtCheck->execute([$email]);
            if ($stmtCheck->fetch()) {
                $error = "Er bestaat al een gebruiker met dit e-mailadres.";
            } else {
                $token = create_invite($adminUser['id'], $email, $role);
                $baseUrl = rtrim(APP_URL, '/');
                $generatedLink = "{$baseUrl}/auth/invite.php?token={$token}";

                // Verstuur de gestylede uitnodigingsmail direct via SMTP
                $mailResult = FocizMailer::sendInvitationEmail($email, $adminUser['name'], $role, $generatedLink);
                fociz_log_audit((int)$adminUser['id'], 'USER_INVITED', 'invite', null, ['email' => $email, 'role' => $role], 'SUCCESS', $adminUser['email']);
                if ($mailResult['success']) {
                    $message = "Uitnodigingslink succesvol aangemaakt én per e-mail verzonden naar {$email}!";
                } else {
                    $message = "Uitnodiging aangemaakt! Let op: de e-mail kon niet worden verzonden (" . htmlspecialchars($mailResult['error'] ?? 'serverfout') . "). U kunt de link handmatig kopiëren.";
                }
            }
        }
    } elseif ($action === 'resend_invite') {
        $inviteId = (int)($_POST['invite_id'] ?? 0);
        $stmtInv = $db->prepare("SELECT * FROM invites WHERE id = ? AND used_at IS NULL AND expires_at > NOW()");
        $stmtInv->execute([$inviteId]);
        $inv = $stmtInv->fetch();
        if ($inv) {
            $baseUrl = rtrim(APP_URL, '/');
            $link = "{$baseUrl}/auth/invite.php?token={$inv['token']}";
            $mailResult = FocizMailer::sendInvitationEmail($inv['email'], $adminUser['name'], $inv['role'], $link);
            fociz_log_audit((int)$adminUser['id'], 'INVITE_RESENT', 'invite', $inviteId, ['email' => $inv['email'], 'role' => $inv['role']], 'SUCCESS', $adminUser['email']);
            if ($mailResult['success']) {
                $message = "Uitnodiging succesvol opnieuw per e-mail verzonden naar {$inv['email']}!";
            } else {
                $error = "Fout bij opnieuw verzenden van uitnodiging: " . ($mailResult['error'] ?? 'Onbekende fout');
            }
        } else {
            $error = "Uitnodiging niet gevonden of reeds verlopen/geactiveerd.";
        }
    } elseif ($action === 'delete_invite') {
        $inviteId = (int)($_POST['invite_id'] ?? 0);
        $stmtDel = $db->prepare("DELETE FROM invites WHERE id = ?");
        $stmtDel->execute([$inviteId]);
        fociz_log_audit((int)$adminUser['id'], 'INVITE_REVOKED', 'invite', $inviteId, [], 'SUCCESS', $adminUser['email']);
        header('Location: /users.php');
        exit;
    } elseif ($action === 'delete_user') {
        $delUserId = (int)($_POST['user_id'] ?? 0);
        if ($delUserId !== (int)$adminUser['id']) {
            $stmtUserToDel = $db->prepare("SELECT email, name FROM users WHERE id = ?");
            $stmtUserToDel->execute([$delUserId]);
            $delUser = $stmtUserToDel->fetch();

            $stmtDelUser = $db->prepare("DELETE FROM users WHERE id = ?");
            $stmtDelUser->execute([$delUserId]);

            fociz_log_audit((int)$adminUser['id'], 'USER_DELETED', 'user', $delUserId, ['deleted_email' => $delUser['email'] ?? null, 'deleted_name' => $delUser['name'] ?? null], 'SUCCESS', $adminUser['email']);
        }
        header('Location: /users.php');
        exit;
    }
}

// Haal alle gebruikers op
$users = [];
try {
    $users = $db->query("SELECT * FROM users ORDER BY created_at DESC")->fetchAll() ?: [];
} catch (Throwable $e) {
    error_log("Fout bij ophalen gebruikers: " . $e->getMessage());
}

// Haal alle uitnodigingen op
$invites = [];
try {
    $invites = $db->query("
        SELECT i.*, u.name as inviter_name 
        FROM invites i 
        JOIN users u ON i.created_by_id = u.id 
        ORDER BY i.created_at DESC
    ")->fetchAll() ?: [];
} catch (Throwable $e) {
    error_log("Fout bij ophalen uitnodigingen: " . $e->getMessage());
    ensure_tables_exist($db);
}

$pageTitle = 'Team & Uitnodigingen — Fociz';
require_once __DIR__ . '/includes/header.php';
?>

<div class="space-y-6 max-w-7xl mx-auto pb-12">
    <!-- Header -->
    <div class="fociz-card p-6 sm:p-7">
        <div class="flex items-center space-x-2 text-indigo-600 dark:text-indigo-400 text-xs font-bold uppercase tracking-wider mb-1">
            <i data-lucide="shield" class="w-4 h-4"></i>
            <span>Beheerderspaneel</span>
        </div>
        <h1 class="text-2xl sm:text-3xl font-black text-slate-900 dark:text-white tracking-tight">
            Team & Uitnodigingen
        </h1>
        <p class="text-slate-500 dark:text-slate-400 text-xs sm:text-sm mt-1 max-w-2xl">
            Fociz is strikt afgesloten: nieuwe collega's kunnen enkel toegang krijgen na het ontvangen van een uitnodigingslink en verplichte 2FA-activatie.
        </p>
    </div>

    <?php if ($error): ?>
        <div class="p-4 rounded-2xl bg-red-500/10 border border-red-500/30 text-red-700 dark:text-red-400 text-xs font-semibold flex items-center space-x-2">
            <i data-lucide="alert-triangle" class="w-4 h-4"></i>
            <span><?= htmlspecialchars($error) ?></span>
        </div>
    <?php endif; ?>

    <?php if ($message && $generatedLink): ?>
        <div class="p-5 rounded-2xl bg-teal-50/80 dark:bg-teal-950/30 border border-teal-200 dark:border-teal-800/60 text-slate-900 dark:text-white space-y-2 shadow-xs transition">
            <div class="flex items-center space-x-2 text-teal-700 dark:text-teal-400 font-bold text-xs">
                <i data-lucide="check-circle-2" class="w-4 h-4"></i>
                <span><?= htmlspecialchars($message) ?></span>
            </div>
            <p class="text-xs text-slate-600 dark:text-slate-300">
                Kopieer onderstaande beveiligde registratielink en stuur deze naar de collega:
            </p>
            <div class="flex items-center space-x-2 bg-white dark:bg-[#0c0f17] p-2.5 rounded-xl border border-teal-200 dark:border-slate-800">
                <input type="text" readonly id="inviteLinkInput" value="<?= htmlspecialchars($generatedLink) ?>" class="bg-transparent text-teal-700 dark:text-teal-300 font-mono text-xs flex-1 outline-none">
                <button onclick="copyInviteLink()" class="px-3 py-1.5 bg-indigo-600 hover:bg-indigo-500 text-white font-bold text-xs rounded-xl transition flex items-center space-x-1 cursor-pointer">
                    <i data-lucide="copy" class="w-3.5 h-3.5"></i>
                    <span id="copyBtnText">Kopiëren</span>
                </button>
            </div>
        </div>
    <?php endif; ?>

    <!-- Uitnodiging Genereren Kaart -->
    <div class="fociz-card p-6 sm:p-7">
        <h3 class="text-base font-bold text-slate-900 dark:text-white mb-4 flex items-center space-x-2">
            <i data-lucide="user-plus" class="w-5 h-5 text-indigo-600 dark:text-indigo-400"></i>
            <span>Nieuwe Collega Uitnodigen</span>
        </h3>

        <form method="POST" action="/users.php" class="grid grid-cols-1 md:grid-cols-12 gap-3 items-end">
            <input type="hidden" name="action" value="create_invite">
            <input type="hidden" name="csrf_token" value="<?= htmlspecialchars(get_csrf_token()) ?>">

            <div class="md:col-span-6">
                <label class="block text-xs font-semibold text-slate-700 dark:text-slate-300 mb-1">E-mailadres van collega</label>
                <input type="email" name="email" required placeholder="collega@bedrijf.nl" class="w-full bg-slate-50/70 dark:bg-[#0c0f17]/60 border border-slate-300 dark:border-slate-800 rounded-xl px-4 py-2.5 text-slate-900 dark:text-white placeholder-slate-400 dark:placeholder-slate-500 focus:outline-none focus:ring-1 focus:ring-indigo-500 text-xs shadow-2xs">
            </div>

            <div class="md:col-span-3">
                <label class="block text-xs font-semibold text-slate-700 dark:text-slate-300 mb-1">Rol</label>
                <select name="role" class="w-full bg-slate-50/70 dark:bg-[#0c0f17]/60 border border-slate-300 dark:border-slate-800 rounded-xl px-3 py-2.5 text-slate-900 dark:text-white text-xs focus:outline-none focus:ring-1 focus:ring-indigo-500 shadow-2xs">
                    <option value="MEMBER">Collega (Standaard)</option>
                    <option value="ADMIN">Mede-beheerder</option>
                </select>
            </div>

            <div class="md:col-span-3">
                <button type="submit" class="w-full bg-indigo-600 hover:bg-indigo-500 text-white font-bold py-2.5 px-4 rounded-xl text-xs transition shadow-xs flex items-center justify-center space-x-2 cursor-pointer">
                    <i data-lucide="link" class="w-4 h-4"></i>
                    <span>Genereer Link</span>
                </button>
            </div>
        </form>
    </div>

    <!-- Actieve Gebruikers Tabel -->
    <div class="fociz-card p-6 sm:p-7 space-y-4">
        <div class="flex items-center justify-between pb-3 border-b border-slate-100 dark:border-slate-800">
            <h3 class="text-sm font-bold text-slate-900 dark:text-white uppercase tracking-wider flex items-center space-x-2">
                <i data-lucide="users" class="w-4 h-4 text-indigo-600 dark:text-indigo-400"></i>
                <span>Geregistreerde Teamleden (<?= count($users) ?>)</span>
            </h3>
        </div>

        <div class="overflow-x-auto">
            <table class="w-full text-left text-xs text-slate-700 dark:text-slate-300">
                <thead class="bg-slate-50 dark:bg-[#0c0f17] text-slate-500 dark:text-slate-400 uppercase text-[10px] tracking-wider border-b border-slate-200 dark:border-slate-800">
                    <tr>
                        <th class="p-3">Naam & E-mail</th>
                        <th class="p-3">Rol</th>
                        <th class="p-3">2FA Beveiliging</th>
                        <th class="p-3">Lid sinds</th>
                        <th class="p-3 text-right">Acties</th>
                    </tr>
                </thead>
                <tbody class="divide-y divide-slate-100 dark:divide-slate-800/60">
                    <?php foreach ($users as $u): ?>
                        <tr class="hover:bg-slate-50 dark:hover:bg-slate-800/30 transition">
                            <td class="p-3">
                                <div class="flex items-center space-x-2.5">
                                    <div class="w-8 h-8 rounded-xl bg-gradient-to-tr from-indigo-600 to-sky-500 p-0.5 flex-shrink-0 overflow-hidden shadow-2xs">
                                        <?php if (!empty($u['avatar_url'])): ?>
                                            <img src="<?= htmlspecialchars($u['avatar_url']) ?>" alt="Avatar" class="w-full h-full rounded-[10px] object-cover bg-white dark:bg-slate-900" onerror="this.classList.add('hidden'); if(this.nextElementSibling) this.nextElementSibling.classList.remove('hidden');">
                                            <div class="hidden w-full h-full rounded-[10px] bg-white dark:bg-slate-900 flex items-center justify-center font-bold text-xs text-indigo-600 dark:text-indigo-400 uppercase">
                                                <?= strtoupper(substr($u['name'], 0, 1)) ?>
                                            </div>
                                        <?php else: ?>
                                            <div class="w-full h-full rounded-[10px] bg-white dark:bg-slate-900 flex items-center justify-center font-bold text-xs text-indigo-600 dark:text-indigo-400 uppercase">
                                                <?= strtoupper(substr($u['name'], 0, 1)) ?>
                                            </div>
                                        <?php endif; ?>
                                    </div>
                                    <div>
                                        <div class="font-bold text-slate-900 dark:text-white"><?= htmlspecialchars($u['name']) ?></div>
                                        <div class="text-[11px] text-slate-500 dark:text-slate-400 font-mono"><?= htmlspecialchars($u['email']) ?></div>
                                    </div>
                                </div>
                            </td>
                            <td class="p-3">
                                <span class="px-2 py-0.5 rounded text-[10px] font-bold <?= $u['role'] === 'ADMIN' ? 'bg-indigo-50 dark:bg-indigo-950/40 text-indigo-700 dark:text-indigo-300 border border-indigo-200 dark:border-indigo-800/60' : 'bg-slate-100 dark:bg-slate-800 text-slate-700 dark:text-slate-300' ?>">
                                    <?= $u['role'] === 'ADMIN' ? 'Beheerder' : 'Collega' ?>
                                </span>
                            </td>
                            <td class="p-3">
                                <span class="px-2 py-0.5 rounded-full bg-teal-50 dark:bg-teal-950/30 text-teal-700 dark:text-teal-400 border border-teal-200 dark:border-teal-800/60 text-[10px] font-medium flex items-center space-x-1 w-max">
                                    <i data-lucide="shield-check" class="w-3 h-3"></i>
                                    <span>2FA Actief</span>
                                </span>
                            </td>
                            <td class="p-3 text-slate-500 dark:text-slate-400">
                                <?= date('d-m-Y', strtotime($u['created_at'])) ?>
                            </td>
                            <td class="p-3 text-right">
                                <?php if ($u['id'] !== $adminUser['id']): ?>
                                    <form method="POST" action="/users.php" class="inline" onsubmit="return confirm('Weet u zeker dat u deze gebruiker wilt verwijderen?')">
                                        <input type="hidden" name="action" value="delete_user">
                                        <input type="hidden" name="user_id" value="<?= (int)$u['id'] ?>">
                                        <input type="hidden" name="csrf_token" value="<?= htmlspecialchars(get_csrf_token()) ?>">
                                        <button type="submit" title="Gebruiker verwijderen" class="text-slate-400 hover:text-red-600 dark:text-slate-500 dark:hover:text-red-400 transition p-1 cursor-pointer bg-transparent border-0">
                                            <i data-lucide="trash-2" class="w-4 h-4 inline"></i>
                                        </button>
                                    </form>
                                <?php else: ?>
                                    <span class="text-[10px] text-slate-400 dark:text-slate-600 font-medium">Uzelf</span>
                                <?php endif; ?>
                            </td>
                        </tr>
                    <?php endforeach; ?>
                </tbody>
            </table>
        </div>
    </div>

    <!-- Uitstaande Uitnodigingen Tabel -->
    <div class="fociz-card p-6 sm:p-7 space-y-4">
        <div class="flex items-center justify-between pb-3 border-b border-slate-100 dark:border-slate-800">
            <h3 class="text-sm font-bold text-slate-900 dark:text-white uppercase tracking-wider flex items-center space-x-2">
                <i data-lucide="mail" class="w-4 h-4 text-amber-500"></i>
                <span>Uitnodigingen Status (<?= count($invites) ?>)</span>
            </h3>
        </div>

        <div class="overflow-x-auto">
            <table class="w-full text-left text-xs text-slate-700 dark:text-slate-300">
                <thead class="bg-slate-50 dark:bg-[#0c0f17] text-slate-500 dark:text-slate-400 uppercase text-[10px] tracking-wider border-b border-slate-200 dark:border-slate-800">
                    <tr>
                        <th class="p-3">Uitgenodigd E-mailadres</th>
                        <th class="p-3">Rol</th>
                        <th class="p-3">Status</th>
                        <th class="p-3">Verloopt op</th>
                        <th class="p-3 text-right">Actie</th>
                    </tr>
                </thead>
                <tbody class="divide-y divide-slate-100 dark:divide-slate-800/60">
                    <?php if (empty($invites)): ?>
                        <tr><td colspan="5" class="p-4 text-center text-slate-400 dark:text-slate-500">Nog geen uitnodigingen verstuurd.</td></tr>
                    <?php else: ?>
                        <?php foreach ($invites as $inv): 
                            $isUsed = !empty($inv['used_at']);
                            $isExpired = strtotime($inv['expires_at']) < time();
                        ?>
                            <tr class="hover:bg-slate-50 dark:hover:bg-slate-800/30 transition">
                                <td class="p-3 font-mono text-slate-900 dark:text-white"><?= htmlspecialchars($inv['email']) ?></td>
                                <td class="p-3">
                                    <span class="px-2 py-0.5 rounded text-[10px] font-bold <?= $inv['role'] === 'ADMIN' ? 'bg-indigo-50 dark:bg-indigo-950/40 text-indigo-700 dark:text-indigo-300 border border-indigo-200 dark:border-indigo-800/60' : 'bg-slate-100 dark:bg-slate-800 text-slate-700 dark:text-slate-300' ?>">
                                        <?= $inv['role'] === 'ADMIN' ? 'Beheerder' : 'Collega' ?>
                                    </span>
                                </td>
                                <td class="p-3">
                                    <?php if ($isUsed): ?>
                                        <span class="px-2 py-0.5 rounded text-[10px] font-bold bg-teal-50 dark:bg-teal-950/30 text-teal-700 dark:text-teal-400 border border-teal-200 dark:border-teal-800/60">Geaccepteerd</span>
                                    <?php elseif ($isExpired): ?>
                                        <span class="px-2 py-0.5 rounded text-[10px] font-bold bg-red-500/15 text-red-700 dark:text-red-400 border border-red-500/30">Verlopen</span>
                                    <?php else: ?>
                                        <span class="px-2 py-0.5 rounded text-[10px] font-bold bg-amber-500/15 text-amber-700 dark:text-amber-400 border border-amber-500/30">In afwachting</span>
                                    <?php endif; ?>
                                </td>
                                <td class="p-3 text-slate-500 dark:text-slate-400"><?= date('d-m-Y H:i', strtotime($inv['expires_at'])) ?></td>
                                <td class="p-3 text-right">
                                    <div class="flex items-center justify-end space-x-2">
                                        <?php if (!$isUsed && !$isExpired): ?>
                                            <form method="POST" action="/users.php" class="inline">
                                                <input type="hidden" name="action" value="resend_invite">
                                                <input type="hidden" name="invite_id" value="<?= (int)$inv['id'] ?>">
                                                <input type="hidden" name="csrf_token" value="<?= htmlspecialchars(get_csrf_token()) ?>">
                                                <button type="submit" title="Uitnodigingsmail opnieuw verzenden" class="inline-flex items-center space-x-1 px-2 py-1 bg-indigo-50 hover:bg-indigo-100 dark:bg-indigo-950/40 dark:hover:bg-indigo-900/60 text-indigo-600 dark:text-indigo-400 rounded-lg text-[11px] font-medium transition cursor-pointer border-0">
                                                    <i data-lucide="mail" class="w-3.5 h-3.5"></i>
                                                    <span>Opnieuw mailen</span>
                                                </button>
                                            </form>
                                        <?php endif; ?>
                                        <form method="POST" action="/users.php" class="inline" onsubmit="return confirm('Weet u zeker dat u deze uitnodiging wilt intrekken?')">
                                            <input type="hidden" name="action" value="delete_invite">
                                            <input type="hidden" name="invite_id" value="<?= (int)$inv['id'] ?>">
                                            <input type="hidden" name="csrf_token" value="<?= htmlspecialchars(get_csrf_token()) ?>">
                                            <button type="submit" title="Uitnodiging intrekken" class="text-slate-400 hover:text-red-600 dark:text-slate-500 dark:hover:text-red-400 transition p-1 cursor-pointer bg-transparent border-0">
                                                <i data-lucide="trash-2" class="w-4 h-4 inline"></i>
                                            </button>
                                        </form>
                                    </div>
                                </td>
                            </tr>
                        <?php endforeach; ?>
                    <?php endif; ?>
                </tbody>
            </table>
        </div>
    </div>
</div>

<script>
function copyInviteLink() {
    const input = document.getElementById('inviteLinkInput');
    input.select();
    navigator.clipboard.writeText(input.value);
    document.getElementById('copyBtnText').innerText = 'Gekopieerd!';
    setTimeout(() => {
        document.getElementById('copyBtnText').innerText = 'Kopiëren';
    }, 2000);
}
</script>

<?php require_once __DIR__ . '/includes/footer.php'; ?>