<?php
/* Copyright (C) 2004-2017	Laurent Destailleur			<eldy@users.sourceforge.net>
 * Copyright (C) 2022		Alice Adminson				<aadminson@example.com>
 * Copyright (C) 2024		MDW							<mdeweerd@users.noreply.github.com>
 * Copyright (C) 2024       Frédéric France             <frederic.france@free.fr>
 * Coryright (C) 2024		Alexandre Spangaro			<alexandre@inovea-conseil.com>
 * Copyright (C) 2026		Nick Fragoulis
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY, without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program. If not, see <https://www.gnu.org/licenses/>.
 */

/**
 * \file htdocs/ai/admin/server_mcp.php
 * \ingroup ai
 * \brief MCP Server & Assistant Configuration Page
 */

require '../../main.inc.php';
/**
 * @var Conf $conf
 * @var DoliDB $db
 * @var HookManager $hookmanager
 * @var Translate $langs
 * @var User $user
 * @var Form $form
 */
require_once DOL_DOCUMENT_ROOT . "/core/lib/admin.lib.php";
require_once DOL_DOCUMENT_ROOT . "/core/class/html.form.class.php";
require_once DOL_DOCUMENT_ROOT . "/core/class/doleditor.class.php";
require_once DOL_DOCUMENT_ROOT . "/ai/lib/ai.lib.php";
require_once DOL_DOCUMENT_ROOT . "/core/lib/functions2.lib.php";
require_once DOL_DOCUMENT_ROOT . "/core/lib/security.lib.php";


$langs->loadLangs(array("admin", "website", "other"));

// Access control
if (!$user->admin) {
	accessforbidden();
}
if (!isModEnabled('ai')) {
	accessforbidden('Module AI not activated.');
}

// Parameters
$action = GETPOST('action', 'aZ09');
$backtopage = GETPOST('backtopage', 'alpha');


/**
 * ACTIONS
 */

// Main Settings
if ($action == 'update') {
	$error = 0;

	if (GETPOSTISSET('AI_ASK_FOR_CONFIRMATION')) {
		$res = dolibarr_set_const($db, "AI_ASK_FOR_CONFIRMATION", GETPOSTINT("AI_ASK_FOR_CONFIRMATION"), 'int', 0, '', $conf->entity);
		if ($res <= 0) $error++;
	}

	if (GETPOSTISSET('AI_LOG_RETENTION')) {
		$res = dolibarr_set_const($db, "AI_LOG_RETENTION", GETPOST("AI_LOG_RETENTION"), 'int', 0, '', $conf->entity);
		if ($res <= 0) {
			$error++;
		}
	}

	if (GETPOSTISSET('AI_DEFAULT_INPUT_MODE')) {
		$res = dolibarr_set_const($db, "AI_DEFAULT_INPUT_MODE", GETPOST("AI_DEFAULT_INPUT_MODE"), 'chaine', 0, '', $conf->entity);
		if ($res <= 0) {
			$error++;
		}
	}

	if (GETPOSTISSET('AI_INTENT_PROMPT')) {
		$res = dolibarr_set_const($db, "AI_INTENT_PROMPT", GETPOST("AI_INTENT_PROMPT"), 'chaine', 0, '', $conf->entity);
		if ($res <= 0) {
			$error++;
		}
	}

	if ($error) {
		setEventMessages($langs->trans("ErrorSavingSettings"), null, 'errors');
	} else {
		setEventMessages($langs->trans("SetupSaved"), null, 'mesgs');
	}

	header("Location: ".$_SERVER["PHP_SELF"]."?mainmenu=home");
	exit;
}

// Test connection
if ($action == 'test_provider') {
	$service = GETPOST('service_key', 'aZ09');
	if ($service) {
		$credential = getDolGlobalString('AI_API_' . strtoupper($service) . '_KEY');
		$url = getDolGlobalString('AI_API_' . strtoupper($service) . '_URL');

		// Decrypt if needed
		if (preg_match('/^crypted:/', $credential)) {
			$credential = dol_decode(substr($credential, 8));
		} elseif (preg_match('/^dolcrypt:/', $credential)) {
			$credential = dolDecrypt($credential, '');
		}

		// Only proceed if the key is valid (decrypted or not encrypted)
		if ($credential !== null) {
			$res = testAIConnection($service, $credential, $url);

			if ($res['success']) {
				setEventMessages($langs->trans("ConnectionSuccessful") . $res['message'], null, 'mesgs');
			} else {
				setEventMessages($langs->trans("ConnectionFailed") . $res['message'], null, 'errors');
			}
		}
	}
}

// External Access Settings
if ($action == 'update_external') {
	$error = 0;

	$user_id = GETPOSTINT("AI_MCP_USER_ID");
	if (GETPOSTISSET('AI_MCP_USER_ID')) {
		$res = dolibarr_set_const($db, "AI_MCP_USER_ID", $user_id,  'int', 0, '', $conf->entity);
		if ($res <= 0) {
			$error++;
		}
	}

	if ($error) {
		setEventMessages($langs->trans("ErrorSavingSettings"), null, 'errors');
	} else {
		setEventMessages($langs->trans("SetupSaved"), null, 'mesgs');
	}

	header("Location: ".$_SERVER["PHP_SELF"]."?mainmenu=home");
	exit;
}

// Generate New API Key
if ($action == 'generate_key') {
	$newKey = dolGetRandomBytes(64);

	if (empty($newKey)) {
		setEventMessages($langs->trans("KeyGenerationFailed"), null, 'errors');
	} else {
		if (dolibarr_set_const($db, 'AI_MCP_API_KEY', $newKey, 'chaine', 0, '', $conf->entity) > 0) {
			setEventMessages($langs->trans("KeyGenerationSuccessfull"), null, 'mesgs');
		} else {
			setEventMessages($langs->trans("KeySaveFailed"), null, 'errors');
		}
	}
}


/*
 * VIEW
 */

$help_url = '';
$title = "AiSetup";

llxHeader('', $langs->trans($title), $help_url, '', 0, 0, '', '', '', 'mod-ai page-admin');

$linkback = '<a href="'.($backtopage ? $backtopage : DOL_URL_ROOT.'/admin/modules.php?restore_lastsearch_values=1').'">'.img_picto($langs->trans("BackToModuleList"), 'back', 'class="pictofixedwidth"').'<span class="hideonsmartphone">'.$langs->trans("BackToModuleList").'</span></a>';

print load_fiche_titre($langs->trans($title), $linkback, 'title_setup');


$head = aiAdminPrepareHead();
print dol_get_fiche_head($head, 'assistant', "MCP Server", -1, "ai");

print '<span class="opacitymedium">' . $langs->trans("ConfigAssistantHelp") . '</span><br><br>';

$form = new Form($db);

// Load Current Values
$apiKey = getDolGlobalString('AI_MCP_API_KEY');

// Default Prompt Logic
$defaultPromptText = " ROLE: Dolibarr ERP AI.
GOAL: Map user intent to specific JSON commands.

CONSTRAINTS:
1. OUTPUT: Single valid JSON object ONLY. No Markdown. No text.
   Format: {\"tool\": \"tool_name\", \"arguments\": {\"argument_name\": \"argument_value\", ...}}
2. TOOLS: Use ONLY provided tools. If no tool or thirdparty fits, you must first use 'respond_to_user' to inform user.
3. ARGS: strict adherence to schema. Do not invent parameters.
4. MISSING INFO: If a required argument (like an ID) is missing, use 'ask_for_clarification'.
5. SAFETY: For DELETE/UPDATE actions, you MUST use 'ask_for_confirmation'.";

$currentPrompt = getDolGlobalString('AI_INTENT_PROMPT', $defaultPromptText);

// Settings
print '<div class="neutral">';
//print '<table class="noborder centpercent">';

// Enable/Disable
//print '<tr class="oddeven">';
//print '<td class="titlefield" width="30%">'
print $form->textwithpicto($langs->trans('EnableAssistant'), $langs->trans('DisableAssistant'));
//print '</td>';
//print '<td>';
print ' &nbsp; ';
print ajax_constantonoff('AI_ASSISTANT_ENABLED', array(), null, 0, 0, 1);
//print ' <span class="opacitymedium">' . $langs->trans('DisableMCPAI') . '</span>';
//print '</td>';
//print '</tr>';

//print '</table>';
print '</div>';

print '<br>';
print '<br>';

if (getDolGlobalString('AI_ASSISTANT_ENABLED')) {
	print load_fiche_titre($langs->trans("PrivateModeTitle"), '', 'fas fa-lock');

	print '<form method="POST" action="'.$_SERVER["PHP_SELF"].'">';
	print '<input type="hidden" name="token" value="'.newToken().'">';
	print '<input type="hidden" name="action" value="update">';

	print '<div class="div-table-responsive-no-min">';
	print '<table class="noborder centpercent">';

	// Input Mode
	print '<tr class="oddeven">';
	print '<td>';
	print $form->textwithpicto('Default Interface', $langs->trans("InputMethodHelp"));
	print '</td>';
	print '<td>';
	$input_modes = [
		'text' => $langs->trans('OptionTextOnly'),
		'native' => $langs->trans('OptionCloudFast') . ' - ' . $langs->trans('OptionCloudFasthelp'),
		'whisper' => $langs->trans('OptionWhisperLocal') . ' - ' . $langs->trans('OptionWhisperLocalhelp')
	];
	print $form->selectarray('AI_DEFAULT_INPUT_MODE', $input_modes, getDolGlobalString('AI_DEFAULT_INPUT_MODE'), 0, 0, 0);
	print '</td>';
	print '</tr>';

	// Enhanced Privacy control
	print '<tr class="oddeven">';
	print '<td>' . $langs->trans('ObfuscatePIIData') . '</td>';
	print '<td>';
	print ajax_constantonoff('AI_PRIVACY_REDACTION');
	print ' &nbsp; <span class="opacitymedium">' . $langs->trans("RedactionHelp") . '</span>';
	print '</td>';
	print '</tr>';

	// Confirmation Level
	print '<tr class="oddeven">';
	print '<td>' . $form->textwithpicto($langs->trans("AskConfirmation"), $langs->trans("AskConfirmationHelp")).'</td>';
	print '<td>';
	$confirmation_options = [
		'0' => $langs->trans("ConfirmNever"),
		'1' => $langs->trans("ConfirmWriteOnly"),
		'2' => $langs->trans("ConfirmAlways")
	];
	print $form->selectarray('AI_ASK_FOR_CONFIRMATION', $confirmation_options, getDolGlobalInt('AI_ASK_FOR_CONFIRMATION', 1), 0, 0, 0);
	print '</td>';
	print '</tr>';

	// Logging
	print '<tr class="oddeven">';
	print '<td>' . $langs->trans('EnableLogging') . '</td>';
	print '<td>';
	print ajax_constantonoff('AI_LOG_REQUESTS');
	print ' &nbsp; <a href="' . DOL_URL_ROOT . '/ai/admin/log_viewer.php" target="_blank" style="padding-top: 4px; padding-bottom: 4px;">'.$langs->trans("ViewLogs").'</a>';
	print '</td>';
	print '</tr>';

	print '<tr class="oddeven">';
	print '<td>' . $langs->trans("LogRetention") . '</td>';
	print '<td><input class="width50" type="number" name="AI_LOG_RETENTION" value="' . getDolGlobalInt('AI_LOG_RETENTION', 30) . '"> (0 = Forever)</td>';
	print '</tr>';

	// System Prompt
	print '<tr class="oddeven">';
	print '<td colspan="2">';
	print $form->textwithpicto($langs->trans("SystemPrompt"), $langs->trans("SystemPromptHelp")) . '<br><br>';
	$doleditor = new DolEditor('AI_INTENT_PROMPT', $currentPrompt, '', 250, 'dolibarr_notes', 'In', false, false, true, ROWS_8, '90%');
	$doleditor->Create();
	print '</td>';
	print '</tr>';

	print '</table>';
	print '</div>';

	print '<div class="center"><input type="submit" class="button" value="'.$langs->trans("Save").'"></div>';
	print '</form>';

	print '<br>';
	print '<br>';


	// AI Provider Config and Connection testing
	$services = getListOfAIServices();
	$currentService = getDolGlobalString('AI_API_SERVICE');

	print load_fiche_titre($langs->trans("AIProviderConfigTitle"), '', 'fa fa-plug');

	if ((string) $currentService == '-1') {
		print '<div class="warning">'.$langs->trans("NoAIProviderSelected").' <a href="'.dol_buildpath('/ai/admin/setup.php', 1).'">'.$langs->trans("ConfigureHere").'</a></div>';
	} else {
		print '<div class="div-table-responsive-no-min">';
		print '<table class="noborder centpercent">';

		print '<tr class="oddeven"><td class="titlefield">'.$langs->trans("AIProvider").'</td><td>'.$services[$currentService]['label'].'</td></tr>';

		$prefix = 'AI_API_'.strtoupper($currentService);
		$modelVal = getDolGlobalString($prefix.'_MODEL_TEXT', $services[$currentService]['textgeneration']['default']);

		print '<tr class="oddeven"><td>'.$langs->trans("AI_API_MODEL").'</td><td>'.$modelVal.'</td></tr>';
		print '</table></div>';

		print '<div class="center">';

		if ($currentService && $currentService !== '-1') {
			print '<a class="reposition button smallpaddingimp" href="'.$_SERVER['PHP_SELF'].'?action=test_provider&token='.newToken().'&service_key='.urlencode($currentService).'">'.$langs->trans('TestConnection').'</a>';
		}

		print '</div>';
	}

	print '<br><br>';

	// External Access Configuration
	/*
	print load_fiche_titre($langs->trans("AiMcpExternalAccess"), '', 'fas fa-lock-open');

	print '<form method="POST" action="'.$_SERVER["PHP_SELF"].'">';
	print '<input type="hidden" name="token" value="'.newToken().'">';
	print '<input type="hidden" name="action" value="update_external">';

	print '<div class="div-table-responsive-no-min">';
	print '<table class="noborder centpercent">';

	// Service User
	print '<tr class="oddeven">';
	print '<td>Service User <span class="fa fa-info-circle" title="' . $langs->trans("UserPermissionsTooltip") . '"></span></td>';
	print '<td>';
	print '<div style="display: flex; align-items: center;">';
	print $form->select_dolusers(getDolGlobalInt('AI_MCP_USER_ID'), 'AI_MCP_USER_ID', 1);
	print ' <input type="submit" class="button" value="'.$langs->trans("Save").'" style="margin-left: 20px;">';
	print '</div>';
	print '<span class="opacitymedium small">' . $langs->trans("DedicatedUserRecommendation") . '</span>';
	print '</td>';
	print '</tr>';

	print '<tr class="oddeven">';
	print '<td width="30%">API Key</td>';
	print '<td>';
	if ($apiKey) {
		print '<input type="text" id="apikey" value="'.$apiKey.'" readonly style="width:400px; padding:6px; background:#f4f4f4; border:1px solid #ccc; color:#555;">';
		print ' <a class="button smallpaddingimp" href="'.$_SERVER["PHP_SELF"].'?action=generate_key&token='.newToken().'">Generate New Key</a>';
	} else {
		print '<span class="opacitymedium">' . $langs->trans("NoKeyWarning") . '</span>';
		print ' <a class="button smallpaddingimp" href="' . $_SERVER["PHP_SELF"] . '?action=generate_key&token=' . newToken() . '">' . $langs->trans("GenerateKey") . '</a>';
	}
	print '</td>';
	print '</tr>';

	$endpoint = dol_buildpath('/ai/server/mcp_server.php', 3);

	print '<tr class="oddeven">';
	print '<td>Endpoint URL</td>';
	print '<td>';
	print '<input type="text" id="endpoint" value="'.$endpoint.'" readonly style="width:600px; border:none; background:transparent;">';
	print '</td>';
	print '</tr>';

	print '</table>';
	print '</div>';

	print '</form>';

	// Configuration Examples
	print '<br>';
	print '<div style="background:#fcfcfc; border:1px solid #eee; padding:15px; border-radius:5px;">';
	print '<strong>' . $langs->trans("ClaudeDesktopConfig") . '</strong><br>';
	print '<pre style="background:#333; color:#fff; padding:10px; border-radius:4px; overflow:auto; margin-top:10px;">';
	echo htmlspecialchars('
	{
	  "mcpServers": {
		"dolibarr": {
		  "command": "node",
		  "args": ["/path/to/mcp-bridge.js"],
		  "env": {
			"DOLIBARR_URL": "'.$endpoint.'",
			"DOLIBARR_API_KEY": "'.($apiKey ? $apiKey : "YOUR_KEY_HERE").'"
		  }
		}
	  }
	}');
	print '</pre>';
	print '</div>';
	*/
}

print dol_get_fiche_end();

llxFooter();
$db->close();
