<?php
ini_set('log_errors', 1);
ini_set('error_log', __DIR__ . '/php_errors.log');
ini_set('display_errors', 0);
set_time_limit(600); // Protection timeout pour les gros imports
error_reporting(E_ALL);

header("Content-Type: application/json; charset=UTF-8");
header("Access-Control-Allow-Origin: *");
header("Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS");
header("Access-Control-Allow-Headers: Content-Type, Authorization");

if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') { http_response_code(200); exit; }

define('ENCRYPTION_KEY', 'MaCleSecreteSuperRobuste123!');

try {
    $pdo = new PDO("mysql:host=localhost;dbname=mon_cinema;charset=utf8mb4", "root", "", [
        PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
        PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC
    ]);
    // Initialisation BDD simplifiée
    $pdo->exec("CREATE TABLE IF NOT EXISTS users (id INT PRIMARY KEY, username VARCHAR(50), password_hash VARCHAR(255))");
    $pdo->exec("CREATE TABLE IF NOT EXISTS config (key_name VARCHAR(50) PRIMARY KEY, key_value TEXT)");
    $pdo->exec("CREATE TABLE IF NOT EXISTS critiques (id BIGINT PRIMARY KEY, title VARCHAR(255), year VARCHAR(10), director VARCHAR(255), poster TEXT, rating DECIMAL(3,1), review TEXT, streaming VARCHAR(255))");
    $pdo->exec("CREATE TABLE IF NOT EXISTS videotheque (id BIGINT PRIMARY KEY, title VARCHAR(255), year VARCHAR(10), director VARCHAR(255), poster TEXT, format VARCHAR(50), length VARCHAR(50), publisher VARCHAR(255), ean_isbn13 VARCHAR(50), number_of_discs INT DEFAULT 1, aspect_ratio VARCHAR(50), description TEXT, actors TEXT)");
} catch (PDOException $e) { die(json_encode(["error" => "Connexion BDD échouée"])); }

// --- Fonctions Utilitaires ---
// Récupère le token d'authentification envoyé par le client, en tolérant les
// configurations Apache/WAMP qui ne transmettent pas HTTP_AUTHORIZATION à PHP
// par défaut (l'en-tête est bien envoyé par le navigateur, mais Apache le
// "mange" avant qu'il n'atteigne $_SERVER, sauf si CGIPassAuth est activé).
function getAuthToken() {
    if (!empty($_SERVER['HTTP_AUTHORIZATION'])) {
        return $_SERVER['HTTP_AUTHORIZATION'];
    }
    // Cas fréquent avec RewriteRule / certains proxys : le header est déplacé ici
    if (!empty($_SERVER['REDIRECT_HTTP_AUTHORIZATION'])) {
        return $_SERVER['REDIRECT_HTTP_AUTHORIZATION'];
    }
    // Filet de sécurité générique : relire les en-têtes bruts de la requête
    if (function_exists('getallheaders')) {
        foreach (getallheaders() as $name => $value) {
            if (strcasecmp($name, 'Authorization') === 0) {
                return $value;
            }
        }
    } elseif (function_exists('apache_request_headers')) {
        foreach (apache_request_headers() as $name => $value) {
            if (strcasecmp($name, 'Authorization') === 0) {
                return $value;
            }
        }
    }
    return '';
}

function checkAuth($pdo) {
    if ($pdo->query("SELECT COUNT(*) FROM users")->fetchColumn() == 0) return true;
    $token = getAuthToken();
    if ($token !== md5(ENCRYPTION_KEY . 'session')) {
        error_log("Auth: ❌ Token invalide ou absent (HTTP_AUTHORIZATION reçu: " . (empty($token) ? "VIDE — vérifier CGIPassAuth/config Apache" : "présent mais différent") . ")");
        http_response_code(403); exit;
    }
}

function encryptData($data) {
    $iv = openssl_random_pseudo_bytes(16);
    return base64_encode(openssl_encrypt($data, 'AES-256-CBC', hash('sha256', ENCRYPTION_KEY, true), OPENSSL_RAW_DATA, $iv) . '::' . $iv);
}

function decryptData($str) {
    $decoded = base64_decode($str);
    if ($decoded === false || strpos($decoded, '::') === false) return null;
    list($enc, $iv) = explode('::', $decoded, 2);
    return openssl_decrypt($enc, 'AES-256-CBC', hash('sha256', ENCRYPTION_KEY, true), OPENSSL_RAW_DATA, substr($iv, 0, 16));
}

function getTmdbApiKey($pdo) {
    $stmt = $pdo->prepare("SELECT key_value FROM config WHERE key_name = 'tmdb_api_key'");
    $stmt->execute();
    $row = $stmt->fetch();
    return $row ? decryptData($row['key_value']) : null;
}

function getUpcmdbApiKey($pdo) {
    $stmt = $pdo->prepare("SELECT key_value FROM config WHERE key_name = 'upcmdb_api_key'");
    $stmt->execute();
    $row = $stmt->fetch();
    return $row ? decryptData($row['key_value']) : null;
}

function httpGet($url, $timeout = 10, $headers = []) {
    $ch = curl_init($url);
    curl_setopt_array($ch, [
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_TIMEOUT => $timeout,
        CURLOPT_SSL_VERIFYPEER => false,
        CURLOPT_USERAGENT => 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0',
        CURLOPT_HTTPHEADER => $headers
    ]);
    $res = curl_exec($ch);
    $code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    curl_close($ch);
    return ($code === 200) ? $res : null;
}

// Vérifie qu'une URL d'image répond bien en 200 (utilisé pour valider les URLs
// de couverture "devinées" à partir d'un ID, sans avoir à parser du HTML fragile)
function urlExists($url) {
    if (empty($url)) return false;
    $ch = curl_init($url);
    curl_setopt_array($ch, [
        CURLOPT_NOBODY => true, // requête HEAD
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_TIMEOUT => 8,
        CURLOPT_CONNECTTIMEOUT => 5,
        CURLOPT_SSL_VERIFYPEER => false,
        CURLOPT_FOLLOWLOCATION => true,
        CURLOPT_USERAGENT => 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0',
    ]);
    curl_exec($ch);
    $code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    curl_close($ch);
    return $code === 200;
}

function removeAccentsForUrl($str) {
    $str = str_replace(['œ', 'Œ'], ['oe', 'OE'], $str);
    $str = str_replace(['æ', 'Æ'], ['ae', 'AE'], $str);
    $transliterated = @iconv('UTF-8', 'ASCII//TRANSLIT//IGNORE', $str);
    if ($transliterated !== false && $transliterated !== '') $str = $transliterated;
    return $str;
}


function cleanTitle($title) {
    $clean = preg_replace('/\s*[\[\(].*?[\]\)]\s*/', '', $title);
    $clean = preg_replace('/\s*-\s*(Édition|Edition|Collector|Simple|Spéciale|Digibook|Ultimate|Intégrale|Combo|SteelBook|Boîtier).*$/i', '', $clean);
    $clean = preg_replace('/(blu-ray|bluray|dvd|4k|ultra hd|combo|vhs|bdrip).*$/i', '', $clean);
    return trim(preg_replace('/\s{2,}/', ' ', $clean));
}

function detectFormat($title, $desc = '') {
    $t = strtoupper($title . ' ' . $desc);
    if (strpos($t, '4K') !== false || strpos($t, 'UHD') !== false) return '4K Ultra HD';
    if (strpos($t, 'BLU-RAY') !== false || strpos($t, 'BLURAY') !== false) return 'Blu-ray';
    if (strpos($t, 'DVD') !== false) return 'DVD';
    if (strpos($t, 'VHS') !== false) return 'VHS';
    if (strpos($t, 'COFFRET') !== false || strpos($t, 'TRILOGIE') !== false) return 'Coffret';
    return 'Blu-ray';
}

function parseDiscCountFromTitle($title) {
    if (preg_match('/(\d+)\s*(?:dvd|blu-?ray|bluray|bd|disc|disque)/i', $title, $m)) {
        return max(1, (int)$m[1]);
    }
    if (preg_match('/(?:coffret|pack|collection|trilogie|anthologie).*?(\d+)/i', $title, $m)) {
        return max(1, (int)$m[1]);
    }
    if (preg_match('/\btrilogie\b/i', $title)) return 3;
    return 1;
}

function cleanUpcTitle($title) {
    // Recherche la position du premier guillemet (")
    $firstQuote = strpos($title, '"');
    // Recherche la position du dernier guillemet (")
    $lastQuote = strrpos($title, '"');

    // Si on a trouvé au moins deux guillemets différents
    if ($firstQuote !== false && $lastQuote !== false && $firstQuote !== $lastQuote) {
        // On extrait et nettoie ce qu'il y a strictement entre les deux
        return trim(substr($title, $firstQuote + 1, $lastQuote - $firstQuote - 1));
    }

    // Si pas de guillemets trouvés, on retourne le titre original (fallback de sécurité)
    return trim($title);
}

function emptyPhysicalResult() {
    return [
        'title' => '', 'publisher' => '', 'format' => '', 'length' => '',
        'number_of_discs' => 1, 'aspect_ratio' => '', 'year' => ''
    ];
}

function makeStableId($type, $title, $year) {
    return (abs(crc32(strtolower(trim($type ?? '')) . '|' . strtolower(trim($title ?? '')) . '|' . trim($year ?? ''))) % 2000000000) + 100000000;
}

// ── FONCTIONS API PHYSIQUE (UPCitemdb → UPCMDB fallback) ──
function throttleUpcLookup() {
    static $last = 0;
    $elapsed = microtime(true) - $last;
    if ($last > 0 && $elapsed < 2) usleep((int)((2 - $elapsed) * 1000000));
    $last = microtime(true);
}

function fetchPhysicalFromUpcitemdb($ean) {
    $empty = ['title'=>'','publisher'=>'','format'=>'','length'=>'','number_of_discs'=>1,'aspect_ratio'=>'','year'=>''];
    $ean = preg_replace('/[^0-9]/', '', (string)$ean);
    if (strlen($ean) < 8) return $empty;
    throttleUpcLookup();
    $res = httpGet("https://api.upcitemdb.com/prod/trial/lookup?upc=" . urlencode($ean), 10);
    if (!$res) return $empty;
    $data = json_decode($res, true);
    if (empty($data['items'][0])) return $empty;
    
    $item = $data['items'][0];
    $raw = $item['title'] ?? '';
    $clean = cleanUpcTitle($raw) ?: $raw;
    
    return [
        'title' => $clean,
        'publisher' => trim($item['brand'] ?? $item['manufacturer'] ?? ''),
        'format' => detectFormat($raw),
        'number_of_discs' => parseDiscCountFromTitle($raw),
        'aspect_ratio' => '',
        'year' => '',
        'length' => ''
    ];
}

function fetchFromUpcIndex($ean) {
    $url = "https://www.upcindex.com/" . urlencode($ean);
    $html = httpGet($url, 15); // Utilise votre fonction curl existante
    
    if ($html && preg_match('/<h1[^>]*>(.*?)<\/h1>/si', $html, $m)) {
        $title = strip_tags($m[1]);
        // Nettoyage spécifique : retire le suffixe "- UPC [chiffres]" souvent présent
        $title = preg_replace('/ - UPC \d+$/', '', $title);
        return trim($title);
    }
    return null;
}

function fetchPhysicalFromUpcmdb($ean, $pdo) {
    $empty = ['title'=>'','publisher'=>'','format'=>'','length'=>'','number_of_discs'=>1,'aspect_ratio'=>'','year'=>''];
    $apiKey = getUpcmdbApiKey($pdo);
    if (!$apiKey) return $empty;
    $ean = preg_replace('/[^0-9]/', '', (string)$ean);
    if (strlen($ean) < 8) return $empty;
    
    $url = "https://upcmdb.com/api/v1/lookup/" . urlencode($ean);
    $res = httpGet($url, 10, 'MonPetitCinema/1.0', ['Accept: application/json', 'X-API-Key: ' . $apiKey]);
    if (!$res || $res[0] === '<') return $empty;
    $data = json_decode($res, true);
    if (($data['status'] ?? '') !== 'success' || empty($data['data'])) return $empty;
    
    $item = $data['data'];
    $raw = trim($item['title'] ?? '');
    if (!$raw) return $empty;
    
    return [
        'title' => cleanUpcTitle($raw) ?: $raw,
        'publisher' => trim($item['studio'] ?? $item['publisher'] ?? ''),
        'format' => trim($item['format'] ?: detectFormat($raw)),
        'length' => trim($item['runtime'] ?? ''),
        'number_of_discs' => (int)($item['discs'] ?? parseDiscCountFromTitle($raw)) ?: 1,
        'aspect_ratio' => trim($item['aspect_ratio'] ?? ''),
        'year' => trim($item['year'] ?? '')
    ];
}

function fetchPhysicalByEan($ean, $pdo = null) {
    // 1. Essayer UPCitemdb
    $res = fetchPhysicalFromUpcitemdb($ean);
    if (!empty($res['title'])) {
        // 2. Chercher sur MovieCovers avec le titre trouvé
        $mc = fetchFromMovieCovers($res['title'], $res['year']);
        if (!empty($mc['poster'])) {
            $res['poster'] = $mc['poster'];
        }
        if (!empty($mc['director'])) {
            $res['director'] = $mc['director'];
        }
        if (!empty($mc['actors'])) {
            $res['actors'] = $mc['actors'];
        }
        if (!empty($mc['description'])) {
            $res['description'] = $mc['description'];
        }
        return $res;
    }
    
    // 3. Fallback UPCMDB
    if ($pdo) {
        $fb = fetchPhysicalFromUpcmdb($ean, $pdo);
        if (!empty($fb['title'])) {
            $mc = fetchFromMovieCovers($fb['title'], $fb['year']);
            if (!empty($mc['poster'])) {
                $fb['poster'] = $mc['poster'];
            }
            return $fb;
        }
    }
    
    return $res;
}

// ── FONCTION POUR RÉCUPÉRER LES AFFICHES DEPUIS TMDB ──
function fetchPosterTMDB($title, $year = '', $pdo = null) {
    $defaultPoster = 'assets/img/default_physical_media.jpg';
    $cleanTitle = cleanTitle($title);
    
    if (empty($cleanTitle)) {
        return ['poster' => $defaultPoster, 'title' => $cleanTitle, 'format' => 'Blu-ray'];
    }
    
    $tmdbKey = getTmdbApiKey($pdo);
    if (!$tmdbKey) {
        error_log("TMDB: ❌ Clé API non configurée");
        return ['poster' => $defaultPoster, 'title' => $cleanTitle, 'format' => 'Blu-ray'];
    }
    
    // ÉTAPE 1 : Recherche du film
    $searchUrl = "https://api.themoviedb.org/3/search/movie?api_key={$tmdbKey}&query=" . urlencode($cleanTitle);
    if (!empty($year)) {
        $searchUrl .= "&year={$year}";
    }
    $searchUrl .= "&language=fr-FR";
    
    $searchRes = httpGet($searchUrl, 5);
    $searchData = $searchRes ? json_decode($searchRes, true) : [];
    
    // Si pas de résultat avec l'année, on réessaie sans
    if (empty($searchData['results']) && !empty($year)) {
        $searchUrl = "https://api.themoviedb.org/3/search/movie?api_key={$tmdbKey}&query=" . urlencode($cleanTitle) . "&language=fr-FR";
        $searchRes = httpGet($searchUrl, 5);
        $searchData = $searchRes ? json_decode($searchRes, true) : [];
    }
    
    if (empty($searchData['results'])) {
        error_log("TMDB: ❌ Film non trouvé pour '{$cleanTitle}'");
        return ['poster' => $defaultPoster, 'title' => $cleanTitle, 'format' => 'Blu-ray'];
    }
    
    // ÉTAPE 2 : Récupérer le poster du premier résultat
    $posterPath = $searchData['results'][0]['poster_path'] ?? '';
    
    if (!empty($posterPath)) {
        $posterUrl = "https://image.tmdb.org/t/p/w500" . $posterPath;
        error_log("TMDB: ✅ Affiche trouvée pour '{$cleanTitle}' → {$posterUrl}");
        return [
            'poster' => $posterUrl,
            'title'  => $cleanTitle,
            'format' => 'Blu-ray'
        ];
    }
    
    error_log("TMDB: ❌ Film trouvé mais pas d'affiche pour '{$cleanTitle}'");
    return ['poster' => $defaultPoster, 'title' => $cleanTitle, 'format' => 'Blu-ray'];
}

// ── FONCTION POUR RÉCUPÉRER LE SYNOPSIS DEPUIS TMDB ──
function fetchTmdbSynopsis($title, $year = '', $pdo = null) {
    $tmdbKey = getTmdbApiKey($pdo);
    if (!$tmdbKey || empty($title)) return '';
    
    $cleanTitle = cleanTitle($title);
    $searchUrl = "https://api.themoviedb.org/3/search/movie?api_key={$tmdbKey}&query=" . urlencode($cleanTitle);
    if (!empty($year)) $searchUrl .= "&year={$year}";
    $searchUrl .= "&language=fr-FR";
    
    $searchRes = httpGet($searchUrl, 5);
    $searchData = $searchRes ? json_decode($searchRes, true) : [];
    
    if (empty($searchData['results'])) {
        // Retry sans l'année
        $searchUrl = "https://api.themoviedb.org/3/search/movie?api_key={$tmdbKey}&query=" . urlencode($cleanTitle) . "&language=fr-FR";
        $searchRes = httpGet($searchUrl, 5);
        $searchData = $searchRes ? json_decode($searchRes, true) : [];
    }
    
    if (!empty($searchData['results'][0]['overview'])) {
        return $searchData['results'][0]['overview'];
    }
    
    return '';
}

// ── FONCTION TMDB COMPLÈTE (Affiche + Métadonnées) ──
function fetchTmdbPosterAndSynopsis($title, $year = '', $pdo = null) {
    $default = ['poster'=>'assets/img/default_physical_media.jpg','title'=>'','description'=>'','director'=>'','actors'=>'','length'=>'','year'=>''];
    if (empty($title)) return $default;
    
    $tmdbKey = getTmdbApiKey($pdo);
    if (!$tmdbKey) return $default;
    
    $clean = cleanTitle($title);
    $searchUrl = "https://api.themoviedb.org/3/search/movie?api_key={$tmdbKey}&query=" . urlencode($clean) . "&language=fr-FR";
    if ($year) $searchUrl .= "&year={$year}";
    
    $res = httpGet($searchUrl, 5);
    $data = $res ? json_decode($res, true) : [];
    
    // Retry sans année si échec
    if (empty($data['results']) && $year) {
        $res = httpGet("https://api.themoviedb.org/3/search/movie?api_key={$tmdbKey}&query=" . urlencode($clean) . "&language=fr-FR", 5);
        $data = $res ? json_decode($res, true) : [];
    }
    if (empty($data['results'])) return $default;
    
    $movie = $data['results'][0];
    $movieId = $movie['id'];
    $default['poster'] = !empty($movie['poster_path']) ? "https://image.tmdb.org/t/p/w500{$movie['poster_path']}" : $default['poster'];
    $default['year'] = !empty($movie['release_date']) ? substr($movie['release_date'], 0, 4) : $year;
    $default['description'] = $movie['overview'] ?? '';
    $default['title'] = $clean;
    
    // Détails supplémentaires (réalisateur, acteurs, durée)
    $detailsUrl = "https://api.themoviedb.org/3/movie/{$movieId}?api_key={$tmdbKey}&append_to_response=credits&language=fr-FR";
    $detRes = httpGet($detailsUrl, 5);
    if ($detRes) {
        $det = json_decode($detRes, true);
        $default['length'] = !empty($det['runtime']) ? "{$det['runtime']} min" : '';
        
        if (!empty($det['credits']['crew'])) {
            $dirs = array_filter($det['credits']['crew'], fn($c) => $c['job'] === 'Director');
            $default['director'] = $dirs ? implode(', ', array_map(fn($c) => $c['name'], array_slice($dirs, 0, 2))) : '';
        }
        if (!empty($det['credits']['cast'])) {
            $default['actors'] = implode(', ', array_map(fn($c) => $c['name'], array_slice($det['credits']['cast'], 0, 5)));
        }
    }
    return $default;
}

function fetchFromBlurayCom($ean) {
    static $lastRequest = 0;
    $empty = [
        'title' => '', 'year' => '', 'director' => '', 'actors' => '',
        'poster' => '', 'description' => '', 'length' => '',
        'publisher' => '', 'format' => 'Blu-ray', 'number_of_discs' => 1,
        'aspect_ratio' => ''
    ];
    $ean = preg_replace('/[^0-9]/', '', (string)$ean);
    if (strlen($ean) < 8) {
        error_log("Blu-ray.com: ❌ EAN invalide: $ean");
        return $empty;
    }
    
    // Throttle: 3 secondes entre chaque requête
    $now = microtime(true);
    if ($lastRequest > 0 && ($now - $lastRequest) < 3) {
        $sleepTime = 3 - ($now - $lastRequest);
        error_log("Blu-ray.com: ⏱️ Attente de " . round($sleepTime, 2) . "s");
        usleep((int)($sleepTime * 1000000));
    }
    $lastRequest = microtime(true);
    
    error_log("Blu-ray.com: 🔍 Recherche EAN $ean");
    $searchUrl = "https://www.blu-ray.com/movies/search.php?ean=" . urlencode($ean) . "&action=search";
    $ch = curl_init($searchUrl);
    curl_setopt_array($ch, [
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_TIMEOUT => 15,
        CURLOPT_CONNECTTIMEOUT => 5,
        CURLOPT_SSL_VERIFYPEER => false,
        CURLOPT_FOLLOWLOCATION => true,
        CURLOPT_USERAGENT => 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36',
        CURLOPT_HTTPHEADER => [
            'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8',
            'Accept-Language: fr-FR,fr;q=0.9',
            'Referer: https://www.blu-ray.com/'
        ]
    ]);
    $searchHtml = curl_exec($ch);
    $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    $curlError = curl_error($ch);
    curl_close($ch);
    
    if (!$searchHtml || $httpCode !== 200) {
        error_log("Blu-ray.com: ❌ Échec recherche EAN $ean (HTTP $httpCode) - Erreur: $curlError");
        return $empty;
    }
    
    // Extraire l'URL du film
    if (!preg_match('/href="(https:\/\/www\.blu-ray\.com\/movies\/[^"]+\/(\d+)\/)"/i', $searchHtml, $matches)) {
        error_log("Blu-ray.com: ❌ Film non trouvé pour EAN $ean");
        return $empty;
    }
    $movieUrl = $matches[1];
    $movieId = $matches[2];
    error_log("Blu-ray.com: ✅ Film trouvé → $movieUrl");
    
    sleep(2); // Délai avant la 2ème requête
    
    $ch2 = curl_init($movieUrl);
    curl_setopt_array($ch2, [
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_TIMEOUT => 15,
        CURLOPT_CONNECTTIMEOUT => 5,
        CURLOPT_SSL_VERIFYPEER => false,
        CURLOPT_FOLLOWLOCATION => true,
        CURLOPT_USERAGENT => 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36',
        CURLOPT_HTTPHEADER => [
            'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8',
            'Referer: https://www.blu-ray.com/'
        ]
    ]);
    $movieHtml = curl_exec($ch2);
    curl_close($ch2);
    
    if (!$movieHtml) {
        error_log("Blu-ray.com: ❌ Impossible de charger la page du film");
        return $empty;
    }
    
    // ── EXTRACTION AVEC LES NOUVELLES REGEX ──
    
    // Titre (dans <h3> inside #movie_info)
    if (preg_match('/<div[^>]*id="movie_info"[^>]*>.*?<h3>([^<]+)<\/h3>/is', $movieHtml, $m)) {
        $empty['title'] = trim($m[1]);
    } elseif (preg_match('/<h1[^>]*>([^<]+)<\/h1>/i', $movieHtml, $m)) {
        $rawTitle = trim(strip_tags($m[1]));
        $empty['title'] = trim(preg_replace('/\s*(Blu-ray|4K|3D|DVD|UHD).*$/i', '', $rawTitle));
    }
    
    // Année (juste après le <h3>)
    if (preg_match('/<h3[^>]*>([^<]+)<\/h3>\s*(?:&nbsp;)?\((\d{4})\)/i', $movieHtml, $m)) {
        $empty['year'] = $m[2];
    }
    
    // Studio/Éditeur
    if (preg_match('/href="[^"]*studioid=\d+[^"]*"[^>]*>([^<]+)<\/a>/i', $movieHtml, $m)) {
        $empty['publisher'] = trim($m[1]);
    }
    
    // Durée (dans un span avant "Rated")
    if (preg_match('/(\d+)\s*min<\/span>/i', $movieHtml, $m)) {
        $empty['length'] = $m[1] . ' min';
    } elseif (preg_match('/(\d+)\s*min\s*\|\s*Rated/i', $movieHtml, $m)) {
        $empty['length'] = $m[1] . ' min';
    }
    
    // Aspect ratio
    if (preg_match('/Aspect[\s-]*ratio:\s*([\d\.]+:[\d\.]+)/i', $movieHtml, $m)) {
        $empty['aspect_ratio'] = trim($m[1]);
    }
    
    // Nombre de disques (gère "Three-disc set" en plus des chiffres)
    if (preg_match('/(\w+)-disc\s+set/i', $movieHtml, $m)) {
        $wordToNum = ['single' => 1, 'one' => 1, 'two' => 2, 'three' => 3, 'four' => 4, 'five' => 5, 'six' => 6];
        $word = strtolower($m[1]);
        $empty['number_of_discs'] = $wordToNum[$word] ?? 1;
    } elseif (preg_match('/(\d+)-disc\s+set/i', $movieHtml, $m)) {
        $empty['number_of_discs'] = (int)$m[1];
    }
    
    // Format
    if (strpos($movieUrl, '/4k/') !== false || stripos($movieHtml, '4K Ultra HD') !== false) {
        $empty['format'] = '4K Ultra HD';
    } elseif (strpos($movieUrl, '/3d/') !== false) {
        $empty['format'] = '3D Blu-ray';
    } else {
        $empty['format'] = 'Blu-ray';
    }
    
    // Affiche HD
    if (preg_match('/src="(https:\/\/images\.static-bluray\.com\/movies\/covers\/\d+_front\.jpg[^"]*)"/i', $movieHtml, $m)) {
        $empty['poster'] = $m[1];
    } elseif (preg_match('/<img[^>]*class="coverfront"[^>]*src="([^"]+)"/i', $movieHtml, $m)) {
        $posterUrl = $m[1];
        $posterUrl = preg_replace('/_large\.jpg/', '_front.jpg', $posterUrl);
        $empty['poster'] = $posterUrl;
    }
    
    // Synopsis, Réalisateur, Acteurs (dans #movie_info)
    if (preg_match('/<div[^>]*id="movie_info"[^>]*>(.*?)<div[^>]*id="movie_review_intro"/is', $movieHtml, $infoBlock)) {
        $infoHtml = $infoBlock[1];
        
        // Synopsis (après la balise <font> vide)
        if (preg_match('/<font[^>]*><br><\/font>\s*(.*?)<br><br><br>Directors:/is', $infoHtml, $m)) {
            $synopsis = trim(strip_tags($m[1]));
            $synopsis = preg_replace('/\s+/', ' ', $synopsis);
            $empty['description'] = $synopsis;
        }
        
        // Réalisateur (extrait depuis les balises <a>)
        if (preg_match('/Directors?:\s*(.*?)(?:<br>|<\/div>)/is', $infoHtml, $m)) {
            preg_match_all('/<a[^>]*>([^<]+)<\/a>/i', $m[1], $dirMatches);
            if (!empty($dirMatches[1])) {
                $empty['director'] = implode(', ', array_map('trim', array_slice($dirMatches[1], 0, 2)));
            }
        }
        
        // Acteurs (extrait depuis les balises <a>)
        if (preg_match('/Starring:\s*(.*?)(?:<br>|<\/div>)/is', $infoHtml, $m)) {
            preg_match_all('/<a[^>]*>([^<]+)<\/a>/i', $m[1], $actorMatches);
            if (!empty($actorMatches[1])) {
                $empty['actors'] = implode(', ', array_map('trim', array_slice($actorMatches[1], 0, 6)));
            }
        }
    }
    
    error_log("Blu-ray.com: ✅ Données récupérées pour EAN $ean → " . $empty['title']);
    return $empty;
}

function fetchFromMovieCovers($title, $year = '') {
    $empty = [
        'title' => '', 'year' => '', 'director' => '', 'actors' => '',
        'poster' => '', 'description' => '', 'length' => '',
        'publisher' => '', 'format' => 'DVD', 'number_of_discs' => 1,
        'aspect_ratio' => ''
    ];
    if (empty($title)) return $empty;
    
    $cleanTitle = removeAccentsForUrl($title);
    $urlTitle = strtoupper(str_replace(' ', '+', $cleanTitle));
    $url = "https://moviecovers.com/film/titre_{$urlTitle}.html";
    
    $html = httpGet($url, 10);
    if (!$html) return $empty;

    if (preg_match('/<TITLE>([^<]+)<\/TITLE>/i', $html, $m)) $empty['title'] = trim($m[1]);
    
    // Récupération IDMC pour HD
    $idmc = '';
    if (preg_match('/IDMC.*?<PRE>([^<]+)<\/PRE>/is', $html, $m)) {
        $idmc = trim($m[1]);
    } elseif (preg_match('/<meta property="og:image" content="[^"]*\/getjpg\.html\/([^"\']+)\.jpg"/i', $html, $m)) {
        $idmc = urldecode($m[1]);
    }
    
    if ($idmc) {
        $idmc_encoded = urlencode($idmc);
        $hd_urls = [
            "https://moviecovers.com/DATA/zipcache/{$idmc_encoded}.jpg",
            "https://moviecovers.com/getjpg.html/{$idmc_encoded}.jpg"
        ];
        foreach ($hd_urls as $hd_url) {
            $img_data = httpGet($hd_url, 5);
            if ($img_data && strlen($img_data) > 5000) {
                $empty['poster'] = $hd_url;
                break;
            }
        }
    }
    
    if (empty($empty['poster'])) {
        if (preg_match('/<img[^>]*title="Recto[^"]*"[^>]*src="([^"]+)"/i', $html, $m)) $empty['poster'] = $m[1];
        elseif (preg_match('/<img[^>]*src="([^"]+)"[^>]*title="Recto/i', $html, $m)) $empty['poster'] = $m[1];
        elseif (preg_match('/<meta[^>]*property="og:image"[^>]*content="([^"]+)"/i', $html, $m)) $empty['poster'] = $m[1];
    }

    if (preg_match('/R&eacute;alisateur<\/TH>\s*<TD[^>]*>.*?<a[^>]*>([^<]+)<\/a>/is', $html, $m)) $empty['director'] = trim($m[1]);
    if (preg_match('/Ann&eacute;e<\/TH>\s*<TD[^>]*>.*?<a[^>]*>(\d{4})<\/a>/is', $html, $m)) $empty['year'] = $m[1];
    if (preg_match('/Dur&eacute;e<\/TH>\s*<TD[^>]*>([\dH]+[\dmin]*)/is', $html, $m)) $empty['length'] = trim($m[1]);
    if (preg_match_all('/<a href="\/multicrit\.html\?acteur=[^"]*">([^<]+)<\/a>/i', $html, $matches)) $empty['actors'] = implode(', ', array_slice($matches[1], 0, 5));
    if (preg_match('/<meta[^>]*property="og:description"[^>]*content="([^"]+)"/i', $html, $m)) $empty['description'] = html_entity_decode($m[1]);

    return $empty;
}


function removeAccents($string) {
    $string = htmlentities($string, ENT_NOQUOTES, 'utf-8');
    $string = preg_replace('#&([A-za-z])(?:acute|cedil|caron|circ|grave|orn|ring|slash|th|tilde|uml);#', '\1', $string);
    $string = preg_replace('#&([A-za-z]{2})(?:lig);#', '\1', $string);
    $string = preg_replace('#&[^;]+;#', '', $string);
    return $string;
}

function fetchAndDownloadMovieCovers($title, $ean) {
    if (empty($title) || empty($ean)) return null;
    
    // Création du dossier d'images s'il n'existe pas
    $dir = __DIR__ . '/../assets/img/covers';
    if (!is_dir($dir)) mkdir($dir, 0777, true);
    
    $localPath = "assets/img/covers/{$ean}.jpg";
    $fullPath = __DIR__ . '/../' . $localPath;
    
    // Si la jaquette a déjà été téléchargée lors d'un précédent import, on la réutilise direct
    if (file_exists($fullPath)) return $localPath;

    // Nettoyage du titre pour la recherche MovieCovers
    $cleanTitle = removeAccents(trim(preg_replace('/(blu-ray|bluray|dvd|4k|ultra hd).*$/i', '', $title)));
    $searchUrl = "https://www.moviecovers.com/multicrit.html?titre=" . urlencode(utf8_decode($cleanTitle));
    
    $html = file_get_contents($searchUrl, false, stream_context_create([
        'http' => ['method' => 'GET', 'header' => "Referer: https://www.moviecovers.com/\r\nUser-Agent: Mozilla/5.0\r\n", 'timeout' => 10]
    ]));
    if (!$html) return null;
    
    $filmHtml = null;
    if (preg_match('/href=["\']?\/?(film\/titre_[^"\']+)\.html["\']?/i', $html, $m)) {
        $filmUrl = "https://www.moviecovers.com/" . $m[1] . ".html";
        usleep(500000); // Pause de 0.5s pour ne pas spammer le serveur
        $filmHtml = file_get_contents($filmUrl, false, stream_context_create([
            'http' => ['method' => 'GET', 'header' => "Referer: https://www.moviecovers.com/\r\nUser-Agent: Mozilla/5.0\r\n", 'timeout' => 10]
        ]));
    } else if (stripos($html, 'IDMC') !== false) {
        $filmHtml = $html; // Accès direct
    }

    if (!$filmHtml) return null;
    
    // Extraction de l'identifiant IDMC
    $idmc = null;
    if (preg_match('/IDMC.*?<PRE>([^<]+)<\/PRE>/is', $filmHtml, $m)) {
        $idmc = trim($m[1]);
    } elseif (preg_match('/<meta property="og:image" content="[^"]*\/getjpg\.html\/([^"\']+)\.jpg"/i', $filmHtml, $m)) {
        $idmc = urldecode($m[1]);
    }
    
    if ($idmc) {
        $idmc_encoded = rawurlencode($idmc);
        $coverUrls = [
            "https://www.moviecovers.com/DATA/zipcache/{$idmc_encoded}.jpg",
            "https://www.moviecovers.com/getjpg.html/{$idmc_encoded}.jpg"
        ];
        
        foreach ($coverUrls as $imgUrl) {
            usleep(1000000); // Pause de 1s avant de télécharger l'image (comme dans le script Python)
            $imgData = @file_get_contents($imgUrl, false, stream_context_create([
                'http' => ['method' => 'GET', 'header' => "Referer: https://www.moviecovers.com/\r\nUser-Agent: Mozilla/5.0\r\n", 'timeout' => 15]
            ]));
            
            // Si l'image est valide et fait plus de 5Ko
            if ($imgData && strlen($imgData) > 5000) {
                file_put_contents($fullPath, $imgData);
                return $localPath;
            }
        }
    }
    return null;
}

// ── ROUTEUR PRINCIPAL ──
$action = $_GET['action'] ?? '';
$data = json_decode(file_get_contents('php://input'), true) ?? [];

switch ($action) {
    case 'check_security_status':
        echo json_encode(["is_blank" => ($pdo->query("SELECT COUNT(*) FROM users")->fetchColumn() == 0)]);
        break;
        
    case 'login':
        if ($pdo->query("SELECT COUNT(*) FROM users")->fetchColumn() == 0) {
            echo json_encode(["success" => true, "token" => md5(ENCRYPTION_KEY . 'session'), "blank" => true]);
        } else {
            $stmt = $pdo->prepare("SELECT password_hash FROM users WHERE username = 'admin'");
            $stmt->execute(); $user = $stmt->fetch();
            if ($user && password_verify($data['password'] ?? '', $user['password_hash'])) {
                echo json_encode(["success" => true, "token" => md5(ENCRYPTION_KEY . 'session'), "blank" => false]);
            } else { http_response_code(401); echo json_encode(["error" => "Mot de passe incorrect."]); }
        }
        break;
        
    case 'setup_admin': case 'update_password':
        checkAuth($pdo);
        $pwd = $data['password'] ?? $data['new_password'] ?? '';
        $stmt = $pdo->prepare("REPLACE INTO users (id, username, password_hash) VALUES (1, 'admin', :pass)");
        $stmt->execute([':pass' => password_hash($pwd, PASSWORD_BCRYPT)]);
        echo json_encode(["success" => true]);
        break;
        
// ── CONFIGURATION ──
case 'get_config_keys':
    $keys = ['tmdb_api_key', 'upcmdb_api_key'];
    $config = [];
    foreach ($keys as $k) {
        $stmt = $pdo->prepare("SELECT key_value FROM config WHERE key_name = ?");
        $stmt->execute([$k]);
        $row = $stmt->fetch();
        $config[$k] = $row ? decryptData($row['key_value']) : '';
    }
    echo json_encode($config);
    break;

case 'save_config':
    checkAuth($pdo);
    $name = $data['key_name'] ?? '';
    $val  = trim($data['key_value'] ?? '');
    if (!in_array($name, ['tmdb_api_key', 'upcmdb_api_key'])) {
        http_response_code(400); echo json_encode(["error" => "Clé invalide."]); break;
    }
    if (empty($val)) break; // Ne rien écraser si vide
    $stmt = $pdo->prepare("REPLACE INTO config (key_name, key_value) VALUES (?, ?)");
    $stmt->execute([$name, encryptData($val)]);
    echo json_encode(["success" => true]);
    break;
    
case 'get_films':
    // 1. Récupération des critiques
    $critiques = $pdo->query("SELECT id, title, year, director, poster, rating, review, NULL AS description, streaming, 'critique' AS type, NULL AS format FROM critiques ORDER BY id DESC")->fetchAll();
    
    // Correction des notes (format entier si rond)
    foreach ($critiques as $row) {
        if ($row['rating'] !== null) {
            $ratingVal = (float)$row['rating'];
            $row['rating'] = ($ratingVal == floor($ratingVal)) ? (int)$ratingVal : $ratingVal;
        }
    }
    unset($row);

    // 2. Récupération de la vidéothèque
    $videotheque = $pdo->query("SELECT id, title, year, director, poster, NULL AS rating, NULL AS review, description, NULL AS streaming, 'videotheque' AS type, format FROM videotheque ORDER BY id DESC")->fetchAll();

    // 3. Retourne les deux listes séparées
    echo json_encode([
        'critiques' => $critiques,
        'videotheque' => $videotheque
    ]);
    break;
    
    case 'save_film':
        checkAuth($pdo);
        $type = $data['type'] ?? 'critique';
        $id = !empty($data['id']) ? $data['id'] : makeStableId($type, $data['title'] ?? '', $data['year'] ?? '0000');
        
        if ($type === 'critique' && (empty($data['director']) || empty($data['poster']))) {
            $tmdbData = fetchTmdbPosterAndSynopsis($data['title'] ?? '', $data['year'] ?? '', $pdo);
            if ($tmdbData) {
                if (empty($data['director'])) $data['director'] = $tmdbData['director'];
                if (empty($data['poster']))   $data['poster']   = $tmdbData['poster'];
            }
        }
        
        if ($type === 'critique') {
            $streaming = $data['streaming'] ?? '';
            if (empty($streaming)) $streaming = 'Support physique / Cinéma';
            $sql = "INSERT INTO critiques (id, title, year, director, poster, rating, review, streaming) VALUES (?, ?, ?, ?, ?, ?, ?, ?) ON DUPLICATE KEY UPDATE title=VALUES(title), year=VALUES(year), director=VALUES(director), poster=VALUES(poster), rating=VALUES(rating), review=VALUES(review), streaming=VALUES(streaming)";
            $stmt = $pdo->prepare($sql);
            $stmt->execute([$id, $data['title'] ?? '', $data['year'] ?? '', $data['director'] ?? '', $data['poster'] ?? '', $data['rating'] ?? 3.0, $data['review'] ?? '', $streaming]);
        } else {
            if (empty($data['poster']) && !empty($data['title'])) {
                $tmdbData = fetchTmdbPosterAndSynopsis($data['title'], $data['year'] ?? '', $pdo);
                
                if ($tmdbData['poster'] !== 'assets/img/default_physical_media.jpg') {
                    $data['poster'] = $tmdbData['poster'];
                }
                if (empty($data['description'])) $data['description'] = $tmdbData['description'];
                if (empty($data['director']))    $data['director'] = $tmdbData['director'];
                if (empty($data['actors']))      $data['actors'] = $tmdbData['actors'];
                if (empty($data['length']))      $data['length'] = $tmdbData['length'];
                if (empty($data['format']))      $data['format'] = detectFormat($data['title'], $data['description'] ?? '');
            }
            
            $sql = "INSERT INTO videotheque (id, title, year, director, poster, format, length, publisher, ean_isbn13, number_of_discs, aspect_ratio, description, actors) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) ON DUPLICATE KEY UPDATE title=VALUES(title), year=VALUES(year), director=IF(VALUES(director)!='', VALUES(director), director), poster=IF(VALUES(poster)!='', VALUES(poster), poster), format=IF(VALUES(format)!='', VALUES(format), format), length=IF(VALUES(length)!='', VALUES(length), length), publisher=IF(VALUES(publisher)!='', VALUES(publisher), publisher), ean_isbn13=IF(VALUES(ean_isbn13)!='', VALUES(ean_isbn13), ean_isbn13), number_of_discs=IF(VALUES(number_of_discs)!=1, VALUES(number_of_discs), number_of_discs), aspect_ratio=IF(VALUES(aspect_ratio)!='', VALUES(aspect_ratio), aspect_ratio), description=IF(VALUES(description)!='', VALUES(description), description), actors=IF(VALUES(actors)!='', VALUES(actors), actors)";
            $stmt = $pdo->prepare($sql);
            $stmt->execute([$id, $data['title'] ?? '', $data['year'] ?? '', $data['director'] ?? '', $data['poster'] ?? '', $data['format'] ?? '', $data['length'] ?? '', $data['publisher'] ?? '', $data['ean_isbn13'] ?? '', $data['number_of_discs'] ?? 1, $data['aspect_ratio'] ?? '', $data['description'] ?? '', $data['actors'] ?? '']);
        }
        echo json_encode(["success" => true]);
        break;
        
    case 'delete_film':
        checkAuth($pdo);
        $type = $_GET['type'] ?? 'critique'; $table = ($type === 'videotheque') ? 'videotheque' : 'critiques';
        $id = $_GET['id'] ?? null;
        if (!$id) { http_response_code(400); echo json_encode(["error" => "ID manquant."]); break; }
        $stmt = $pdo->prepare("DELETE FROM $table WHERE id = ?"); $stmt->execute([$id]);
        echo json_encode(["success" => true]);
        break;
        
    case 'bulk_delete':
        checkAuth($pdo);
        $ids = $data['ids'] ?? []; $type = $data['type'] ?? 'critique'; $table = ($type === 'videotheque') ? 'videotheque' : 'critiques';
        if (!empty($ids)) { $placeholders = implode(',', array_fill(0, count($ids), '?')); $stmt = $pdo->prepare("DELETE FROM $table WHERE id IN ($placeholders)"); $stmt->execute($ids); echo json_encode(["success" => true]); }
        else { http_response_code(400); echo json_encode(["success" => false, "error" => "Aucun élément sélectionné."]); }
        break;

    // ── NOUVELLE ACTION : Recherche par EAN ──
case 'search_by_ean':
    checkAuth($pdo);
    $ean = $_GET['ean'] ?? '';
    $ean = preg_replace('/[^0-9]/', '', $ean);
    
    if (strlen($ean) < 8) {
        echo json_encode(["success" => false, "error" => "EAN invalide"]);
        break;
    }
    
    // 1. Blu-ray.com
    $blurayData = fetchFromBlurayCom($ean);
    
    // 2. MovieCovers pour l'affiche HD
    $mcData = [];
    if (!empty($blurayData['title'])) {
        $mcData = fetchFromMovieCovers($blurayData['title'], $blurayData['year'] ?? '');
    }
    
    // 3. Fallback TMDB
    $tmdbData = [];
    $title = !empty($blurayData['title']) ? $blurayData['title'] : '';
    if ($title) {
        $tmdbData = fetchTmdbPosterAndSynopsis($title, $blurayData['year'] ?? '', $pdo);
    }
    
    // Fusion des données
    $result = [
        'success' => true,
        'title' => $blurayData['title'] ?? '',
        'year' => $blurayData['year'] ?? ($tmdbData['year'] ?? ''),
        'director' => $mcData['director'] ?? ($blurayData['director'] ?? ($tmdbData['director'] ?? '')),
        'poster' => $mcData['poster'] ?? ($blurayData['poster'] ?? ($tmdbData['poster'] ?? '')),
        'format' => $blurayData['format'] ?? 'Blu-ray',
        'length' => $blurayData['length'] ?? ($tmdbData['length'] ?? ''),
        'publisher' => $blurayData['publisher'] ?? '',
        'number_of_discs' => $blurayData['number_of_discs'] ?? 1,
        'aspect_ratio' => $blurayData['aspect_ratio'] ?? '',
        'actors' => $mcData['actors'] ?? ($blurayData['actors'] ?? ($tmdbData['actors'] ?? '')),
        'description' => $mcData['description'] ?? ($blurayData['description'] ?? ($tmdbData['description'] ?? ''))
    ];
    
    echo json_encode($result);
    break;
    
case 'add_item_by_ean':
    $data = json_decode(file_get_contents("php://input"), true);
    $ean = $data['ean'] ?? '';
    
    // LOG : EAN traité
    error_log("--- DÉBUT RECHERCHE EAN : $ean ---");

    // 1. Test UpcIndex
    $titleUpc = fetchFromUpcIndex($ean);
    error_log("UpcIndex a trouvé : " . ($titleUpc ?? 'RIEN'));

    // 2. Test Blu-ray.com
    $blurayData = fetchFromBlurayCom($ean);
    error_log("Blu-ray.com a trouvé : " . ($blurayData['title'] ?? 'RIEN'));
    $ean = $data['ean'] ?? '';
    
    // 1. Récupération via UpcIndex (Priorité 1)
    $title = fetchFromUpcIndex($ean);
    
    // Fallback si UpcIndex échoue
    if (!$title) {
        $blurayData = fetchFromBlurayCom($ean);
        $title = $blurayData['title'] ?? '';
    }

    if (empty($title)) {
        echo json_encode(["success" => false, "error" => "EAN non trouvé sur UpcIndex ni Blu-ray.com"]);
        exit;
    }

    // 2. Recherche sur TMDB (Source de vérité pour le titre FR et infos)
    // On utilise fetchTmdbPosterAndSynopsis pour récupérer le titre français, poster, etc.
    $tmdbData = fetchTmdbPosterAndSynopsis($title, '', $pdo);
    
    // Si TMDB ne trouve rien avec le titre trouvé, on utilise le titre original
    $finalTitle = (!empty($tmdbData['title']) && $tmdbData['title'] !== 'assets/img/default_physical_media.jpg') 
                  ? $tmdbData['title'] 
                  : $title;
                  
    $poster = ($tmdbData['poster'] !== 'assets/img/default_physical_media.jpg') ? $tmdbData['poster'] : '';
    
    // 3. Insertion
    $id = makeStableId('videotheque', $finalTitle, date('Y'));
    
    $stmt = $pdo->prepare("INSERT INTO videotheque 
        (id, title, poster, description, director, actors, ean_isbn13) 
        VALUES (?, ?, ?, ?, ?, ?, ?) 
        ON DUPLICATE KEY UPDATE title=VALUES(title)");
        
    $stmt->execute([
        $id, 
        $finalTitle, 
        $poster, 
        $tmdbData['description'] ?? '', 
        $tmdbData['director'] ?? '', 
        $tmdbData['actors'] ?? '',
        $ean
    ]);

    echo json_encode(["success" => true, "title" => $finalTitle]);
    break;
    
case 'import_batch':
    checkAuth($pdo);
    $data = json_decode(file_get_contents("php://input"), true);
    $type = $data['type'] ?? '';
    $items = $data['items'] ?? [];
    $pdo->beginTransaction();
    $imported = 0; $skipped = 0;
    
    try {
        if ($type === 'videotheque') {
            $stmt = $pdo->prepare("INSERT INTO videotheque (id, title, year, format, poster, ean_isbn13, description, length, number_of_discs, aspect_ratio, actors, publisher, director)
            VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?) ON DUPLICATE KEY UPDATE
            title=VALUES(title), year=VALUES(year), format=VALUES(format),
            poster=IF(VALUES(poster)!='assets/img/default_physical_media.jpg', VALUES(poster), poster),
            ean_isbn13=IF(VALUES(ean_isbn13)!='', VALUES(ean_isbn13), ean_isbn13),
            description=IF(VALUES(description)!='', VALUES(description), description),
            length=IF(VALUES(length)!='', VALUES(length), length),
            number_of_discs=IF(VALUES(number_of_discs)!=1, VALUES(number_of_discs), number_of_discs),
            aspect_ratio=IF(VALUES(aspect_ratio)!='', VALUES(aspect_ratio), aspect_ratio),
            actors=IF(VALUES(actors)!='', VALUES(actors), actors),
            publisher=IF(VALUES(publisher)!='', VALUES(publisher), publisher),
            director=IF(VALUES(director)!='', VALUES(director), director)");
            
            foreach ($items as $item) {
                // ✅ ON NE RÉCUPÈRE QUE L'EAN
                $ean = preg_replace('/[^0-9]/', '', (string)($item['ean'] ?? ''));
                
                if (strlen($ean) < 8) {
                    $skipped++;
                    continue;
                }

                // 1. BLU-RAY.COM (Métadonnées physiques et affiche de base)
                $blurayData = fetchFromBlurayCom($ean);
                if (!is_array($blurayData)) $blurayData = [];
                
                $title = $blurayData['title'] ?? '';
                $year = $blurayData['year'] ?? '';
                $format = $blurayData['format'] ?: detectFormat($title);
                $publisher = $blurayData['publisher'] ?? '';
                $discs = $blurayData['number_of_discs'] ?: 1;
                $aspect = $blurayData['aspect_ratio'] ?? '';
                $length = $blurayData['length'] ?? '';
                $poster = $blurayData['poster'] ?? '';
                $desc = $blurayData['description'] ?? '';
                $director = $blurayData['director'] ?? '';
                $actors = $blurayData['actors'] ?? '';

                // 2. MOVIECOVERS (Pour l'affiche HD physique et complément d'infos)
                if (!empty($title)) {
                    $mcData = fetchFromMovieCovers($title, $year);
                    if (!is_array($mcData)) $mcData = [];
                    
                    // Priorité à l'affiche HD de MovieCovers
                    if (!empty($mcData['poster'])) $poster = $mcData['poster'];
                    if (empty($director) && !empty($mcData['director'])) $director = $mcData['director'];
                    if (empty($actors) && !empty($mcData['actors'])) $actors = $mcData['actors'];
                    if (empty($desc) && !empty($mcData['description'])) $desc = $mcData['description'];
                    if (empty($length) && !empty($mcData['length'])) $length = $mcData['length'];
                    if (empty($year) && !empty($mcData['year'])) $year = $mcData['year'];
                }

                // 3. FALLBACK TMDB (Si des données manquent encore)
                if (empty($poster) || empty($director) || empty($actors) || empty($desc) || empty($title)) {
                    $tmdb = fetchTmdbPosterAndSynopsis($title, $year, $pdo);
                    if (empty($title)) $title = $tmdb['title'] ?? "EAN: $ean";
                    if (empty($poster) || $poster === 'assets/img/default_physical_media.jpg') $poster = $tmdb['poster'];
                    if (empty($director)) $director = $tmdb['director'] ?? '';
                    if (empty($actors)) $actors = $tmdb['actors'] ?? '';
                    if (empty($desc)) $desc = $tmdb['description'] ?? '';
                    if (empty($length) && !empty($tmdb['length'])) $length = $tmdb['length'];
                    if (empty($year) && !empty($tmdb['year'])) $year = $tmdb['year'];
                }

                if (empty($title)) {
                    $skipped++;
                    continue;
                }

                $id = makeStableId('videotheque', $title, $year);
                $stmt->execute([$id, $title, $year, $format, $poster, $ean, $desc, $length, $discs, $aspect, $actors, $publisher, $director]);
                $imported++;
            }
        } else {
            // Import critiques (inchangé)
            $stmtCritiques = $pdo->prepare("INSERT INTO critiques (id, title, year, director, poster, rating, review, streaming)
            VALUES (?, ?, ?, ?, ?, ?, ?, ?)
            ON DUPLICATE KEY UPDATE title=VALUES(title), year=VALUES(year), director=VALUES(director),
            poster=VALUES(poster), rating=VALUES(rating), review=VALUES(review), streaming=VALUES(streaming)");
            
            foreach ($items as $rowData) {
                $title = $rowData['Title'] ?? $rowData['title'] ?? '';
                if (empty($title)) continue;
                
                $year = '';
                if (!empty($rowData['publish_date'])) $year = substr($rowData['publish_date'], 0, 4);
                else $year = $rowData['Year'] ?? $rowData['year'] ?? '';
                
                $id = makeStableId('critique', $title, $year);
                $ratingRaw = $rowData['Rating'] ?? $rowData['rating'] ?? '';
                $rating = ($ratingRaw !== '' && $ratingRaw !== null) ? (float)$ratingRaw : null;
                $review = $rowData['Review'] ?? $rowData['review'] ?? $rowData['description'] ?? '';
                
                $director = '';
                $poster = 'assets/img/default_physical_media.jpg';
                $streaming = 'Support physique / Cinéma';
                
                $tmdbData = fetchTmdbPosterAndSynopsis($title, $year, $pdo);
                if ($tmdbData) {
                    if (!empty($tmdbData['director'])) $director = $tmdbData['director'];
                    if ($tmdbData['poster'] !== 'assets/img/default_physical_media.jpg') $poster = $tmdbData['poster'];
                    if (empty($year) && !empty($tmdbData['year'])) $year = $tmdbData['year'];
                }
                
                $stmtCritiques->execute([$id, $title, $year, $director, $poster, $rating, $review, $streaming]);
                $imported++;
            }
        }
        $pdo->commit();
        echo json_encode(["success" => true, "imported" => $imported, "skipped" => $skipped]);
    } catch (Throwable $e) {
        $pdo->rollBack();
        error_log("import_batch error: " . $e->getMessage());
        http_response_code(500);
        echo json_encode(["success" => false, "error" => $e->getMessage(), "line" => $e->getLine()]);
    }
    break;
}