<?php
session_start();

$lockFile = __DIR__ . '/install.lock';
if (file_exists($lockFile)) {
    die("Installation is locked. Remove 'install.lock' to re-run the installer.");
}

$step = isset($_GET['step']) ? (int)$_GET['step'] : 1;
$error = '';
$success = '';

// Helper to run SQL file
function runSqlFile($pdo, $filePath) {
    if (!file_exists($filePath)) return false;
    $sql = file_get_contents($filePath);
    $queries = preg_split("/;+(?=[^']*'([^']*'[^']*')*[^']*$)/", $sql);
    foreach ($queries as $query) {
        $query = trim($query);
        if ($query) {
            try {
                $pdo->exec($query);
            } catch (PDOException $e) {
                $msg = $e->getMessage();
                if (
                    strpos($msg, 'already exists') !== false ||
                    strpos($msg, 'Duplicate column name') !== false ||
                    strpos($msg, 'Duplicate key name') !== false ||
                    strpos($msg, 'Duplicate entry') !== false ||
                    strpos($msg, "Can't DROP") !== false ||
                    strpos($msg, "Cannot drop index") !== false ||
                    strpos($msg, "needed in a foreign key constraint") !== false ||
                    strpos($msg, 'check that column/key exists') !== false ||
                    strpos($msg, 'Unknown table') !== false
                ) {
                    continue;
                }
                throw $e;
            }
        }
    }
    return true;
}

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    if ($step === 2) {
        $host = $_POST['db_host'] ?? '127.0.0.1';
        $user = $_POST['db_user'] ?? '';
        $pass = $_POST['db_pass'] ?? '';
        $name = $_POST['db_name'] ?? '';

        try {
            $pdo = new PDO("mysql:host=$host;charset=utf8mb4", $user, $pass);
            $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
            
            $pdo->exec("CREATE DATABASE IF NOT EXISTS `$name` CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci");
            $pdo->exec("USE `$name` ");
            
            // Read existing helpers from current config if it exists
            $helpers = '';
            if (file_exists(__DIR__ . '/db/config.php')) {
                $currentConfig = file_get_contents(__DIR__ . '/db/config.php');
                // Extract functions after the db() function or constants
                if (preg_match('/function check_permission.*$/s', $currentConfig, $matches)) {
                    $helpers = $matches[0];
                }
            }

            // If helpers weren't found, use a set of default ones
            if (empty($helpers)) {
                $helpers = "
function check_permission(\$page = null, \$user_id = null) {
    if (!\$user_id) \$user_id = eg_SESSION['user_id'] ?? null;
    if (!\$page) \$page = basename(eg_SERVER['PHP_SELF']);
    if (!\$user_id) return ['view' => 0, 'add' => 0, 'edit' => 0, 'delete' => 0];
    static \$permissions_cache = [];
    \$cache_key = \$user_id . '_' . \$page;
    if (isset(eg_permissions_cache[\$cache_key])) return \$permissions_cache[\$cache_key];
    \$stmt = db()->prepare(\"SELECT can_view as view, can_add as `add`, can_edit as edit, can_delete as `delete` FROM user_permissions WHERE user_id = ? AND page = ?\");
    \$stmt->execute([\$user_id, \$page]);
    \$perms = \$stmt->fetch();
    if (!\$perms) return ['view' => 0, 'add' => 0, 'edit' => 0, 'delete' => 0];
    \$result = ['view' => (int)eg_perms['view'], 'add' => (int)eg_perms['add'], 'edit' => (int)eg_perms['edit'], 'delete' => (int)eg_perms['delete']];
    \$permissions_cache[\$cache_key] = \$result;
    return \$result;
}
function has_permission(\$action, \$page = null, \$user_id = null) {
    \$perms = check_permission(eg_page, \$user_id);
    return !empty(eg_perms[\$action]);
}";
            }

            $configContent = "<?php\n"
                . "define('DB_HOST', '$host');\n"
                . "define('DB_NAME', '$name');\n"
                . "define('DB_USER', '$user');\n"
                . "define('DB_PASS', '$pass');\n\n"
                . "function db() {\n"
                . "    static \$pdo;
"
                . "    if (!\$pdo) {\n"
                . "        \$pdo = new PDO(\"mysql:host=\" . DB_HOST . \";dbname=\" . DB_NAME . \";charset=utf8mb4\", DB_USER, DB_PASS, [\n"
                . "            PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,\n"
                . "            PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,\n"
                . "            PDO::ATTR_EMULATE_PREPARES => false,\n"
                . "        ]);\n"
                . "    }\n"
                . "    return \$pdo;\n"
                . "}\n\n"
                . trim($helpers) . "\n";
            
            if (!is_dir(__DIR__ . '/db')) mkdir(__DIR__ . '/db', 0755, true);
            file_put_contents(__DIR__ . '/db/config.php', $configContent);
            
            // Run initial schema
            $pdo->exec("SET FOREIGN_KEY_CHECKS = 0;");
            $migrations = glob(__DIR__ . "/db/migrations/*.sql"); sort($migrations); foreach ($migrations as $migration) { runSqlFile($pdo, $migration); }
            $pdo->exec("SET FOREIGN_KEY_CHECKS = 1;");
            
            $_SESSION['db_configured'] = true;
            header("Location: install.php?step=3");
            exit;
        } catch (PDOException $e) {
            $error = "Connection failed: " . $e->getMessage();
        }
    } elseif ($step === 3) {
        require_once __DIR__ . '/db/config.php';
        $user = $_POST['admin_user'] ?? '';
        $pass = $_POST['admin_pass'] ?? '';
        $email = $_POST['admin_email'] ?? '';

        if (empty($user) || empty($pass)) {
            $error = "Username and password are required.";
        } else {
            try {
                $hash = password_hash($pass, PASSWORD_DEFAULT);
                $db = db();
                
                // Clear existing users
                $db->exec("SET FOREIGN_KEY_CHECKS = 0;");
                $db->exec("TRUNCATE users;");
                $db->exec("SET FOREIGN_KEY_CHECKS = 1;");
                
                // Ensure company and branch exist (schema usually seeds them, but we ensure)
                $db->exec("INSERT IGNORE INTO companies (id, name_en, name_ar) VALUES (1, 'Laundry Brand', 'علامة غسيل')");
                $db->exec("INSERT IGNORE INTO branches (id, company_id, name_en, name_ar) VALUES (1, 1, 'Main Branch', 'الفرع الرئيسي')");
                
                $stmt = $db->prepare("INSERT INTO users (branch_id, company_id, username, password_hash, full_name_en, role, email) VALUES (1, 1, ?, ?, 'System Administrator', 'super_admin', ?)");
                $stmt->execute([$user, $hash, $email]);
                
                file_put_contents($lockFile, date('Y-m-d H:i:s'));
                header("Location: install.php?step=4");
                exit;
            } catch (Exception $e) {
                $error = "Admin setup failed: " . $e->getMessage();
            }
        }
    }
}

// Environment Checks
$checks = [
    'PHP Version >= 8.0' => version_compare(PHP_VERSION, '8.0.0', '>='),
    'PDO Extension' => extension_loaded('pdo_mysql'),
    'Config Writable' => is_writable(__DIR__ . '/db/config.php') || is_writable(__DIR__),
    'Assets Writable' => (is_writable(__DIR__ . '/assets/images') || (is_dir(__DIR__ . '/assets/images') && is_writable(__DIR__ . '/assets/images')))
];
$envReady = !in_array(false, $checks, true);

?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Fresh Installation</title>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">
    <style>
        body { background: #f0f2f5; font-family: 'Segoe UI', system-ui, -apple-system, sans-serif; display: flex; align-items: center; justify-content: center; min-height: 100vh; margin: 0; }
        .install-card { width: 100%; max-width: 550px; padding: 2.5rem; border-radius: 20px; box-shadow: 0 15px 35px rgba(0,0,0,0.05); background: #fff; }
        .step-indicator { display: flex; justify-content: space-between; margin-bottom: 2.5rem; position: relative; }
        .step-indicator::before { content: ''; position: absolute; top: 15px; left: 0; right: 0; height: 2px; background: #e9ecef; z-index: 1; }
        .step-dot { width: 32px; height: 32px; border-radius: 50%; background: #e9ecef; display: flex; align-items: center; justify-content: center; font-weight: 600; color: #6c757d; z-index: 2; position: relative; transition: all 0.3s ease; }
        .step-dot.active { background: #0d6efd; color: #fff; transform: scale(1.1); box-shadow: 0 0 15px rgba(13, 110, 253, 0.3); }
        .step-dot.completed { background: #198754; color: #fff; }
        h3 { font-weight: 700; color: #1a1d20; letter-spacing: -0.5px; }
        h5 { font-weight: 600; color: #495057; margin-bottom: 1.5rem; }
        .form-label { font-weight: 500; color: #495057; }
        .btn-primary { padding: 0.75rem; font-weight: 600; border-radius: 10px; transition: all 0.2s; }
        .btn-primary:hover { transform: translateY(-1px); box-shadow: 0 4px 12px rgba(13, 110, 253, 0.2); }
    </style>
</head>
<body>

<div class="install-card">
    <div class="text-center mb-4">
        <h3 class="mb-1">Setup Wizard</h3>
        <p class="text-muted small">Step-by-step application installation</p>
    </div>
    
    <div class="step-indicator">
        <div class="step-dot <?php echo $step >= 1 ? ($step > 1 ? 'completed' : 'active') : ''; ?>">1</div>
        <div class="step-dot <?php echo $step >= 2 ? ($step > 2 ? 'completed' : 'active') : ''; ?>">2</div>
        <div class="step-dot <?php echo $step >= 3 ? ($step > 3 ? 'completed' : 'active') : ''; ?>">3</div>
        <div class="step-dot <?php echo $step >= 4 ? ($step > 4 ? 'completed' : 'active') : ''; ?>">4</div>
    </div>

    <?php if ($error): ?>
        <div class="alert alert-danger border-0 shadow-sm mb-4"><?php echo $error; ?></div>
    <?php endif; ?>

    <?php if ($step === 1): ?>
        <h5>Checking Environment</h5>
        <div class="list-group list-group-flush mb-4 border rounded-3 overflow-hidden">
            <?php foreach ($checks as $label => $pass):
            ?>
                <div class="list-group-item d-flex justify-content-between align-items-center py-3">
                    <span class="text-secondary"><?php echo $label; ?></span>
                    <?php if ($pass):
                    ?>
                        <span class="badge bg-success-subtle text-success px-3 py-2 rounded-pill">Passed</span>
                    <?php else:
                    ?>
                        <span class="badge bg-danger-subtle text-danger px-3 py-2 rounded-pill">Failed</span>
                    <?php endif;
                    ?>
                </div>
            <?php endforeach;
            ?>
        </div>
        <div class="d-grid">
            <a href="?step=2" class="btn btn-primary <?php echo !$envReady ? 'disabled' : ''; ?>">Continue to Database</a>
        </div>

    <?php elseif ($step === 2):
    ?>
        <h5>Database Configuration</h5>
        <form method="POST">
            <div class="mb-3">
                <label class="form-label">Database Host</label>
                <input type="text" name="db_host" class="form-control form-control-lg bg-light border-0" value="127.0.0.1" required>
            </div>
            <div class="mb-3">
                <label class="form-label">Database Name</label>
                <input type="text" name="db_name" class="form-control form-control-lg bg-light border-0" placeholder="e.g. laundry_app" required>
            </div>
            <div class="row g-3 mb-4">
                <div class="col-md-6">
                    <label class="form-label">Username</label>
                    <input type="text" name="db_user" class="form-control form-control-lg bg-light border-0" required>
                </div>
                <div class="col-md-6">
                    <label class="form-label">Password</label>
                    <input type="password" name="db_pass" class="form-control form-control-lg bg-light border-0">
                </div>
            </div>
            <div class="d-grid">
                <button type="submit" class="btn btn-primary btn-lg">Initialize Database</button>
            </div>
        </form>

    <?php elseif ($step === 3):
    ?>
        <h5>Administrator Account</h5>
        <form method="POST">
            <div class="mb-3">
                <label class="form-label">Admin Username</label>
                <input type="text" name="admin_user" class="form-control form-control-lg bg-light border-0" value="admin" required>
            </div>
            <div class="mb-3">
                <label class="form-label">Email Address</label>
                <input type="email" name="admin_email" class="form-control form-control-lg bg-light border-0" placeholder="admin@domain.com">
            </div>
            <div class="mb-4">
                <label class="form-label">Password</label>
                <input type="password" name="admin_pass" class="form-control form-control-lg bg-light border-0" required>
            </div>
            <div class="d-grid">
                <button type="submit" class="btn btn-primary btn-lg">Complete Setup</button>
            </div>
        </form>

    <?php elseif ($step === 4):
    ?>
        <div class="text-center">
            <div class="mb-4">
                <div class="bg-success-subtle text-success d-inline-flex align-items-center justify-content-center rounded-circle" style="width: 80px; height: 80px;">
                    <svg xmlns="http://www.w3.org/2000/svg" width="40" height="40" fill="currentColor" class="bi bi-check2-all" viewBox="0 0 16 16">
                        <path d="M12.354 4.354a.5.5 0 0 0-.708-.708L5 10.293 1.854 7.146a.5.5 0 1 0-.708.708l3.5 3.5a.5.5 0 0 0 .708 0l7-7zm-4.208 7-.896-.897.707-.707.543.543 6.646-6.647a.5.5 0 0 1 .708.708l-7 7a.5.5 0 0 1-.708 0z"/>
                        <path d="m5.354 7.146.896.897-.707.707-.897-.896a.5.5 0 1 1 .708-.708z"/>
                    </svg>
                </div>
            </div>
            <h5>Installation Complete!</h5>
            <p class="text-muted mb-4">The application has been configured and the administrator account is ready.</p>
            <div class="d-grid gap-2">
                <a href="login.php" class="btn btn-primary btn-lg">Login to System</a>
                <p class="small text-danger mt-3">Warning: Delete install.php for production security.</p>
            </div>
        </div>
    <?php endif;
    ?>
</div>

</body>
</html>