<?php
/**
 * Save handler for apropos contacts.
 * Structure: groups[] with role, each having entries[] of {text, url, email}.
 */
require_once __DIR__ . "/../../../bootstrap.php";
require_once __DIR__ . '/../../../src/AdminAuth.php';
error_log('[apropos.php] ENTRY | method=' . $_SERVER['REQUEST_METHOD'] . ' | key=' . ($_POST['apropos_key'] ?? 'none') . ' | post_keys=' . implode(',', array_keys($_POST)));
AdminAuth::requireLogin();

// CSRF check
if (!isset($_POST['csrf_token']) || !isset($_SESSION['csrf_token']) ||
    !hash_equals($_SESSION['csrf_token'], $_POST['csrf_token'])) {
    die("Erreur de sécurité : token invalide.");
}

$urlKeys  = ['erg_site_url', 'source_code_url'];
$groupKeys = ['contacts'];
$allowedKeys = array_merge($urlKeys, $groupKeys);
$aproposKey  = $_POST['apropos_key'] ?? '';
if (!in_array($aproposKey, $allowedKeys)) {
    die("Clé invalide.");
}

require_once __DIR__ . '/../../../src/Database.php';
require_once __DIR__ . '/../../../src/AdminLogger.php';
require_once __DIR__ . '/../../../src/ErrorHandler.php';

try {
    $db = new Database();

    if (in_array($aproposKey, $urlKeys)) {
        // ── URL-based keys (sidebar links) ──
        $url = trim($_POST['url'] ?? '');
        if ($url !== '' && !filter_var($url, FILTER_VALIDATE_URL)) {
            die("URL invalide.");
        }
        $db->saveAproposContent($aproposKey, $url);
    } else {
        // ── Group-based keys (contacts) ──
        $groups = $_POST['groups'] ?? [];
        $cleaned = [];

        foreach ($groups as $group) {
            $role = trim($group['role'] ?? '');
            $entries = [];
            foreach ($group['entries'] ?? [] as $entry) {
                $text = trim($entry['text'] ?? '');
                if ($text === '') continue;
                $e = [
                    'text'  => $text,
                    'email' => trim($entry['email'] ?? ''),
                ];
                $urlEntry = trim($entry['url'] ?? '');
                if ($urlEntry !== '') $e['url'] = $urlEntry;
                $entries[] = $e;
            }
            // Keep group if it has a role OR at least one entry
            if ($role === '' && empty($entries)) continue;
            $cleaned[] = ['role' => $role, 'entries' => $entries];
        }

        if (empty($cleaned)) {
            die("Au moins un groupe avec des entrées est requis.");
        }

        $db->saveAproposContent($aproposKey, $cleaned);
    }

    AdminLogger::make()->logAproposEdit($aproposKey);
    App::flash('success', "Contenu « $aproposKey » mis à jour avec succès.");
} catch (Exception $e) {
    ErrorHandler::log('apropos', $e);
    die('Erreur lors de la sauvegarde : ' . htmlspecialchars(ErrorHandler::userMessage($e)));
}

header('Location: /admin/contenus.php');
exit;