<?php
ini_set('log_errors', 1);
ini_set('error_log', __DIR__ . '/php_errors.log');
error_reporting(E_ALL);
header("Content-Type: application/json; charset=UTF-8");
header("Access-Control-Allow-Origin: *");
header("Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS");
header("Access-Control-Allow-Headers: Content-Type, Authorization");
header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0");
if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') { http_response_code(200); exit; }

define('ENCRYPTION_KEY', 'MaCleSecreteSuperRobuste123!');

try {
    $pdo = new PDO("mysql:host=localhost;dbname=mon_cinema;charset=utf8mb4", "root", "", [
        PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
        PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC
    ]);
    
    $pdo->exec("CREATE TABLE IF NOT EXISTS users (id INT PRIMARY KEY, username VARCHAR(50) NOT NULL, password_hash VARCHAR(255) NOT NULL)");
    $pdo->exec("CREATE TABLE IF NOT EXISTS config (key_name VARCHAR(50) PRIMARY KEY, key_value TEXT NOT NULL)");
    $pdo->exec("CREATE TABLE IF NOT EXISTS critiques (id BIGINT PRIMARY KEY, title VARCHAR(255) NOT NULL, year VARCHAR(10), director VARCHAR(255), poster TEXT, rating DECIMAL(3,1) DEFAULT 3.0, review TEXT, streaming VARCHAR(255))");
    try { $pdo->exec("ALTER TABLE critiques MODIFY COLUMN rating DECIMAL(3,1) DEFAULT 3.0"); } catch (\Exception $e) {}
    
    $pdo->exec("CREATE TABLE IF NOT EXISTS videotheque (id BIGINT PRIMARY KEY, title VARCHAR(255) NOT NULL, year VARCHAR(10), director VARCHAR(255), poster TEXT, format VARCHAR(50), length VARCHAR(50), publisher VARCHAR(255), ean_isbn13 VARCHAR(50), number_of_discs INT DEFAULT 1, aspect_ratio VARCHAR(50), description TEXT, actors TEXT)");
    try { $pdo->exec("ALTER TABLE videotheque ADD COLUMN actors TEXT AFTER description"); } catch (\Exception $e) {}
    
    try { $pdo->exec("DROP TABLE IF EXISTS cache_api"); } catch (\Exception $e) {}
    
} catch (\PDOException $e) { echo json_encode(["error" => "Erreur BDD : " . $e->getMessage()]); exit; }

// ── FONCTIONS UTILITAIRES ──
function makeStableId($type, $title, $year) {
    return (abs(crc32(strtolower(trim($type ?? '')) . '|' . strtolower(trim($title ?? '')) . '|' . trim($year ?? ''))) % 2000000000) + 100000000;
}

function checkAuth($pdo) {
    if ($pdo->query("SELECT COUNT(*) FROM users")->fetchColumn() == 0) return true;
    $token = $_SERVER['HTTP_AUTHORIZATION'] ?? '';
    if (empty($token) && function_exists('apache_request_headers')) {
        $headers = apache_request_headers();
        $token = $headers['Authorization'] ?? $headers['authorization'] ?? '';
    }
    if ($token !== md5(ENCRYPTION_KEY . 'session')) { http_response_code(403); echo json_encode(["error" => "Accès interdit."]); exit; }
}

function encryptData($data) {
    $iv = openssl_random_pseudo_bytes(16);
    $key = hash('sha256', ENCRYPTION_KEY, true);
    return base64_encode(openssl_encrypt($data, 'AES-256-CBC', $key, OPENSSL_RAW_DATA, $iv) . '::' . $iv);
}

function decryptData($str) {
    $decoded = base64_decode($str);
    if (strpos($decoded, '::') === false) return null;
    list($enc, $iv) = explode('::', $decoded, 2);
    return openssl_decrypt($enc, 'AES-256-CBC', hash('sha256', ENCRYPTION_KEY, true), OPENSSL_RAW_DATA, substr($iv, 0, 16));
}

function getTmdbApiKey($pdo) {
    $stmt = $pdo->prepare("SELECT key_value FROM config WHERE key_name = 'tmdb_api_key'");
    $stmt->execute();
    $row = $stmt->fetch();
    return $row ? decryptData($row['key_value']) : null;
}

function httpGet($url, $timeout = 3, $ua = null) {
    if (!$ua) $ua = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36';
    
    if (!function_exists('curl_init')) {
        $ctx = stream_context_create(['http' => [
            'timeout' => $timeout,
            'user_agent' => $ua,
            'header' => "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: fr-FR,fr;q=0.9\r\n"
        ]]);
        return @file_get_contents($url, false, $ctx);
    }
    $ch = curl_init($url);
    curl_setopt_array($ch, [
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_TIMEOUT => $timeout,
        CURLOPT_CONNECTTIMEOUT => 3,
        CURLOPT_SSL_VERIFYPEER => false,
        CURLOPT_USERAGENT => $ua,
        CURLOPT_FOLLOWLOCATION => true,
        CURLOPT_HTTPHEADER => [
            'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8',
            'Accept-Language: fr-FR,fr;q=0.9,en;q=0.8',
            'Accept-Encoding: identity',
            'Connection: keep-alive',
        ],
    ]);
    $res = curl_exec($ch);
    curl_close($ch);
    return $res ?: null;
}

function cleanTitle($title) {
    $clean = preg_replace('/\s*[\[\(].*?[\]\)]\s*/', '', $title);
    $clean = preg_replace('/\s*-\s*(Édition|Edition|Collector|Simple|Spéciale|Digibook|Ultimate|Intégrale|Combo|SteelBook|Boîtier).*$/i', '', $clean);
    $clean = preg_replace('/(blu-ray|bluray|dvd|4k|ultra hd|combo|vhs|bdrip).*$/i', '', $clean);
    return trim(preg_replace('/\s{2,}/', ' ', $clean));
}

function detectFormat($title, $desc = '') {
    $t = strtoupper($title . ' ' . $desc);
    if (strpos($t, '4K') !== false || strpos($t, 'UHD') !== false) return '4K Ultra HD';
    if (strpos($t, 'BLU-RAY') !== false || strpos($t, 'BLURAY') !== false) return 'Blu-ray';
    if (strpos($t, 'DVD') !== false) return 'DVD';
    if (strpos($t, 'VHS') !== false) return 'VHS';
    if (strpos($t, 'COFFRET') !== false || strpos($t, 'TRILOGIE') !== false) return 'Coffret';
    return 'Blu-ray';
}

function extractYear($dateStr) {
    if (preg_match('/(\d{4})/', $dateStr, $m)) return $m[1];
    return '';
}

// ── Scraping Fnac.com ──
function fetchFnac($ean) {
    if (empty($ean) || strlen($ean) < 8) return null;
    
    $ua = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36';
    
    // Étape 1 : Recherche par EAN
    $searchUrl = "https://www.fnac.com/SearchResult/ResultList.aspx?Search=" . urlencode($ean);
    $html = httpGet($searchUrl, 8, $ua);
    
    if (!$html) {
        error_log("Fnac: Échec recherche HTML pour EAN $ean");
        return null;
    }
    
    // Étape 2 : Extraire le lien vers la fiche produit
    $productUrl = null;
    
    // Chercher un lien vers une fiche produit (format /a12345678/...)
    if (preg_match('/href=["\']([^"\']*\/a\d+\/[^"\'\s]+\.html)["\']/i', $html, $matches)) {
        $productUrl = $matches[1];
        if (strpos($productUrl, 'http') !== 0) {
            $productUrl = 'https://www.fnac.com' . $productUrl;
        }
    }
    
    if (!$productUrl) {
        error_log("Fnac: Aucune fiche trouvée pour EAN $ean");
        return null;
    }
    
    error_log("Fnac: Fiche trouvée - $productUrl");
    
    // Étape 3 : Récupérer la fiche complète
    $ficheHtml = httpGet($productUrl, 8, $ua);
    if (!$ficheHtml) {
        error_log("Fnac: Impossible de charger la fiche");
        return null;
    }
    
    // Étape 4 : Extraire les données depuis le HTML
    $result = [
        'title'       => '',
        'poster'      => '',
        'publisher'   => '',
        'format'      => '',
        'length'      => '',
        'aspect'      => '',
        'discs'       => '',
        'actors'      => '',
        'description' => '',
    ];
    
    // Extraction du titre
    if (preg_match('/<meta[^>]+property=["\']og:title["\'][^>]+content=["\']([^"\']+)["\']/i', $ficheHtml, $m)) {
        $result['title'] = trim($m[1]);
    } elseif (preg_match('/<h1[^>]*class=["\']ProductTitle[^"\']*["\'][^>]*>([^<]+)<\/h1>/i', $ficheHtml, $m)) {
        $result['title'] = trim(strip_tags($m[1]));
    } elseif (preg_match('/<h1[^>]*>([^<]+)<\/h1>/i', $ficheHtml, $m)) {
        $result['title'] = trim(strip_tags($m[1]));
    }
    
    // Extraction de l'affiche (plusieurs méthodes fallback)
    if (preg_match('/<meta[^>]+property=["\']og:image["\'][^>]+content=["\']([^"\']+)["\']/i', $ficheHtml, $m)) {
        $result['poster'] = $m[1];
    } elseif (preg_match('/<link[^>]+rel=["\']image_src["\'][^>]+href=["\']([^"\']+)["\']/i', $ficheHtml, $m)) {
        $result['poster'] = $m[1];
    } elseif (preg_match('/src=["\']([^"\']+(?:cdn\.fnac\.com|fnac\.com)[^"\']*\.(?:jpg|jpeg|png|webp))["\']/i', $ficheHtml, $m)) {
        $result['poster'] = $m[1];
    }
    
    // Extraction des caractéristiques techniques (bloc "Fiche technique")
    // On cherche les paires label/valeur dans le tableau de caractéristiques
    if (preg_match('/<div[^>]*class=["\'][^"\']*fiche-technique[^"\']*["\'][^>]*>(.*?)<\/div>/is', $ficheHtml, $bloc)) {
        $techHtml = $bloc[1];
    } else {
        $techHtml = $ficheHtml;
    }
    
    // Éditeur / Distributeur
    if (preg_match('/(?:Éditeur|Editeur|Distributeur|Studio|Label)\s*<\/[^>]+>\s*<[^>]+>([^<]+)/i', $techHtml, $m)) {
        $result['publisher'] = trim(strip_tags($m[1]));
    } elseif (preg_match('/(?:Éditeur|Editeur|Distributeur|Studio|Label)\s*[:<\/][^>]*>\s*([^<\n]+)/i', $ficheHtml, $m)) {
        $result['publisher'] = trim(strip_tags($m[1]));
    }
    
    // Durée
    if (preg_match('/(?:Durée|Duree|Durata)\s*<\/[^>]+>\s*<[^>]+>(\d+)\s*(?:min|mn|h)/i', $techHtml, $m)) {
        $result['length'] = trim($m[1]) . ' min';
    } elseif (preg_match('/(?:Durée|Duree)\s*[:<\/][^>]*>\s*(\d+)\s*(?:min|mn|h)/i', $ficheHtml, $m)) {
        $result['length'] = trim($m[1]) . ' min';
    }
    
    // Nombre de disques
    if (preg_match('/(?:Nombre\s*de\s*disques?|Nb\s*disques?|Disques?)\s*<\/[^>]+>\s*<[^>]+>(\d+)/i', $techHtml, $m)) {
        $result['discs'] = trim($m[1]);
    } elseif (preg_match('/(?:Nombre\s*de\s*disques?|Nb\s*disques?)\s*[:<\/][^>]*>\s*(\d+)/i', $ficheHtml, $m)) {
        $result['discs'] = trim($m[1]);
    }
    
    // Format image / Aspect ratio
    if (preg_match('/(?:Format\s*(?:image|vidéo|video)|Ratio|Aspect\s*ratio)\s*<\/[^>]+>\s*<[^>]+>([0-9.]+\s*[:\.]\s*[0-9.]+)/i', $techHtml, $m)) {
        $result['aspect'] = trim($m[1]);
    }
    
    // Acteurs / Casting
    if (preg_match('/(?:Acteurs?|Casting|Avec)\s*<\/[^>]+>\s*<[^>]+>([^<]+)/i', $techHtml, $m)) {
        $result['actors'] = trim(strip_tags($m[1]));
    } elseif (preg_match('/(?:Avec|Acteurs?)\s*[:<\/][^>]*>\s*([^<\n]+)/i', $ficheHtml, $m)) {
        $result['actors'] = trim(strip_tags($m[1]));
    }
    
    // Description / Synopsis
    if (preg_match('/<div[^>]*class=["\'][^"\']*product-description[^"\']*["\'][^>]*>(.*?)<\/div>/is', $ficheHtml, $m)) {
        $result['description'] = trim(strip_tags($m[1]));
    } elseif (preg_match('/<meta[^>]+property=["\']og:description["\'][^>]+content=["\']([^"\']+)["\']/i', $ficheHtml, $m)) {
        $result['description'] = trim($m[1]);
    }
    
    // Format (détection depuis le titre ou la fiche)
    $formatText = $result['title'] . ' ' . $ficheHtml;
    if (preg_match('/(4K\s*Ultra\s*HD|Ultra\s*HD|4K|Blu[\s-]?Ray|DVD|Coffret)/i', $formatText, $m)) {
        $fmt = strtoupper(trim($m[1]));
        if (strpos($fmt, '4K') !== false || strpos($fmt, 'ULTRA') !== false) $result['format'] = '4K Ultra HD';
        elseif (strpos($fmt, 'BLU') !== false) $result['format'] = 'Blu-ray';
        elseif (strpos($fmt, 'DVD') !== false) $result['format'] = 'DVD';
        elseif (strpos($fmt, 'COFFRET') !== false) $result['format'] = 'Coffret';
    }
    
    // Nettoyage final
    foreach ($result as $k => $v) {
        $result[$k] = trim(html_entity_decode($v, ENT_QUOTES | ENT_HTML5, 'UTF-8'));
    }
    
    return (!empty($result['title']) || !empty($result['poster'])) ? $result : null;
}

// ── API TMDB (SANS CACHE - TITRE FRANÇAIS) ──
function fetchTMDBFull($title, $year, $apiKey, $pdo) {
    if (empty($apiKey) || empty($title)) return null;
    $cleanTitle = cleanTitle($title);
    
    $searchUrl = "https://api.themoviedb.org/3/search/movie?api_key={$apiKey}&query=" . urlencode($cleanTitle) . "&year={$year}&language=fr-FR";
    $searchRes = httpGet($searchUrl, 5);
    $searchData = $searchRes ? json_decode($searchRes, true) : [];
    
    if (empty($searchData['results'])) {
        $searchUrl = "https://api.themoviedb.org/3/search/movie?api_key={$apiKey}&query=" . urlencode($cleanTitle) . "&language=fr-FR";
        $searchRes = httpGet($searchUrl, 5);
        $searchData = $searchRes ? json_decode($searchRes, true) : [];
    }
    
    if (empty($searchData['results'])) return null;
    $movieId = $searchData['results'][0]['id'];
    
    $detailsUrl = "https://api.themoviedb.org/3/movie/{$movieId}?api_key={$apiKey}&append_to_response=credits,watch/providers,translations&language=fr-FR";
    $detailsRes = httpGet($detailsUrl, 5);
    if (!$detailsRes) return null;
    $details = json_decode($detailsRes, true);
    
    $frenchTitle = $details['title'] ?? '';
    
    if (!empty($details['translations']['translations'])) {
        foreach ($details['translations']['translations'] as $translation) {
            if ($translation['iso_3166_1'] === 'FR' && !empty($translation['data']['title'])) {
                $frenchTitle = $translation['data']['title'];
                break;
            }
        }
    }
    
    $director = '';
    if (!empty($details['credits']['crew'])) {
        $directorsList = [];
        foreach ($details['credits']['crew'] as $crew) {
            if ($crew['job'] === 'Director') $directorsList[] = $crew['name'];
        }
        $director = implode(', ', $directorsList);
    }
    
    $cast = [];
    if (!empty($details['credits']['cast'])) {
        $topCast = array_slice($details['credits']['cast'], 0, 4);
        foreach ($topCast as $actor) $cast[] = $actor['name'];
    }
    
    $overview = $details['overview'] ?? '';
    
    $streaming = '';
    $frProviders = $details['watch/providers']['results']['FR'] ?? [];
    $platforms = [];
    if (!empty($frProviders['flatrate'])) { foreach ($frProviders['flatrate'] as $p) $platforms[] = $p['provider_name']; }
    if (empty($platforms)) {
        if (!empty($frProviders['rent'])) { foreach ($frProviders['rent'] as $p) $platforms[] = $p['provider_name'] . ' (loc.)'; }
        if (!empty($frProviders['buy'])) { foreach ($frProviders['buy'] as $p) $platforms[] = $p['provider_name'] . ' (achat)'; }
    }
    if (!empty($platforms)) $streaming = implode(', ', array_unique($platforms));
    
    $result = [
        'title'     => $frenchTitle,
        'year'      => !empty($details['release_date']) ? substr($details['release_date'], 0, 4) : '',
        'director'  => $director,
        'poster'    => !empty($details['poster_path']) ? "https://image.tmdb.org/t/p/w500" . $details['poster_path'] : '',
        'length'    => !empty($details['runtime']) ? $details['runtime'] . ' min' : '',
        'streaming' => $streaming,
        'overview'  => $overview,
        'cast'      => $cast
    ];
    
    return $result;
}

// ── ROUTEUR PRINCIPAL ──
$action = $_GET['action'] ?? '';
$data = json_decode(file_get_contents('php://input'), true) ?? [];

switch ($action) {
    case 'check_security_status':
        echo json_encode(["is_blank" => ($pdo->query("SELECT COUNT(*) FROM users")->fetchColumn() == 0)]);
        break;
        
    case 'login':
        if ($pdo->query("SELECT COUNT(*) FROM users")->fetchColumn() == 0) {
            echo json_encode(["success" => true, "token" => md5(ENCRYPTION_KEY . 'session'), "blank" => true]);
        } else {
            $stmt = $pdo->prepare("SELECT password_hash FROM users WHERE username = 'admin'");
            $stmt->execute(); $user = $stmt->fetch();
            if ($user && password_verify($data['password'] ?? '', $user['password_hash'])) {
                echo json_encode(["success" => true, "token" => md5(ENCRYPTION_KEY . 'session'), "blank" => false]);
            } else { http_response_code(401); echo json_encode(["error" => "Mot de passe incorrect."]); }
        }
        break;
        
    case 'setup_admin': case 'update_password':
        checkAuth($pdo);
        $pwd = $data['password'] ?? $data['new_password'] ?? '';
        $stmt = $pdo->prepare("REPLACE INTO users (id, username, password_hash) VALUES (1, 'admin', :pass)");
        $stmt->execute([':pass' => password_hash($pwd, PASSWORD_BCRYPT)]);
        echo json_encode(["success" => true]);
        break;
        
    case 'get_config_keys':
        checkAuth($pdo);
        $stmt = $pdo->prepare("SELECT key_value FROM config WHERE key_name = 'tmdb_api_key'");
        $stmt->execute(); $row = $stmt->fetch();
        echo json_encode(['tmdb_api_key' => $row ? '••••••••' : '']);
        break;
        
    case 'save_config':
        checkAuth($pdo);
        $keyName = $data['key_name'] ?? '';
        $keyValue = $data['key_value'] ?? '';
        if ($keyName === 'tmdb_api_key' && !empty($keyValue)) {
            $stmt = $pdo->prepare("REPLACE INTO config (key_name, key_value) VALUES (?, ?)");
            $stmt->execute([$keyName, encryptData($keyValue)]);
            echo json_encode(["success" => true]);
        } else {
            http_response_code(400); echo json_encode(["error" => "Données invalides."]);
        }
        break;
        
    case 'get_films':
        $sql = "
            SELECT id, title, year, director, poster, rating, review, NULL AS description, streaming, 'critique' AS type 
            FROM critiques
            UNION ALL
            SELECT id, title, year, director, poster, NULL AS rating, NULL AS review, description, NULL AS streaming, 'videotheque' AS type 
            FROM videotheque
            ORDER BY id DESC
        ";
        $result = $pdo->query($sql)->fetchAll();
        echo json_encode($result);
        break;
        
    case 'search_ean_full':
        $ean = $_GET['ean'] ?? '';
        if (!$ean) { echo json_encode(['error' => 'EAN manquant']); exit; }
        $result = [
            'ean' => $ean, 'title' => '', 'director' => '', 'year' => '',
            'poster' => '', 'publisher' => '', 'format' => '',
            'length' => '', 'number_of_discs' => 1, 'aspect_ratio' => '', 'actors' => ''
        ];
        
        // Étape 1 : Scraping Fnac
        $fnacData = fetchFnac($ean);
        $titleForTmdb = '';
        if (!empty($fnacData)) {
            if (!empty($fnacData['title']))     $result['title']       = $fnacData['title'];
            if (!empty($fnacData['poster']))    $result['poster']      = $fnacData['poster'];
            if (!empty($fnacData['publisher'])) $result['publisher']   = $fnacData['publisher'];
            if (!empty($fnacData['format']))    $result['format']      = $fnacData['format'];
            if (!empty($fnacData['length']))    $result['length']      = $fnacData['length'];
            if (!empty($fnacData['aspect']))    $result['aspect_ratio'] = $fnacData['aspect'];
            if (!empty($fnacData['discs']))     $result['number_of_discs'] = (int)$fnacData['discs'];
            if (!empty($fnacData['actors']))    $result['actors']      = $fnacData['actors'];
            
            $titleForTmdb = cleanTitle($fnacData['title'] ?? '');
        }
        
        // Étape 2 : TMDB pour métadonnées film (réalisateur, vraie affiche, année)
        $tmdbKey = getTmdbApiKey($pdo);
        if ($tmdbKey && !empty($titleForTmdb)) {
            $tmdbData = fetchTMDBFull($titleForTmdb, '', $tmdbKey, $pdo);
            if ($tmdbData) {
                if (!empty($tmdbData['title']))    $result['title']    = $tmdbData['title'];
                if (!empty($tmdbData['year']))     $result['year']     = $tmdbData['year'];
                if (!empty($tmdbData['director'])) $result['director'] = $tmdbData['director'];
                if (!empty($tmdbData['length']))   $result['length']   = $tmdbData['length'];
                if (!empty($tmdbData['cast']))     $result['actors']   = implode(', ', $tmdbData['cast']);
                if (!empty($tmdbData['poster']))   $result['poster']   = $tmdbData['poster']; // TMDB prioritaire
            }
        }
        echo json_encode(['success' => true, 'data' => $result]);
        break;
        
    case 'save_film':
        checkAuth($pdo);
        $type = $data['type'] ?? 'critique';
        $id = !empty($data['id']) ? $data['id'] : makeStableId($type, $data['title'] ?? '', $data['year'] ?? '0000');
        
        if (empty($data['director']) || empty($data['poster'])) {
            $tmdbData = fetchTMDBFull($data['title'] ?? '', $data['year'] ?? '', getTmdbApiKey($pdo), $pdo);
            if ($tmdbData) {
                if (empty($data['director'])) $data['director'] = $tmdbData['director'];
                if (empty($data['poster']))   $data['poster']   = $tmdbData['poster'];
                if (empty($data['length']) && !empty($tmdbData['length'])) $data['length'] = $tmdbData['length'];
            }
        }
        
        if ($type === 'critique') {
            $streaming = $data['streaming'] ?? '';
            if (empty($streaming)) $streaming = 'Support physique / Cinéma';
            $sql = "INSERT INTO critiques (id, title, year, director, poster, rating, review, streaming) VALUES (?, ?, ?, ?, ?, ?, ?, ?) ON DUPLICATE KEY UPDATE title=VALUES(title), year=VALUES(year), director=VALUES(director), poster=VALUES(poster), rating=VALUES(rating), review=VALUES(review), streaming=VALUES(streaming)";
            $stmt = $pdo->prepare($sql);
            $stmt->execute([$id, $data['title'] ?? '', $data['year'] ?? '', $data['director'] ?? '', $data['poster'] ?? '', $data['rating'] ?? 3.0, $data['review'] ?? '', $streaming]);
        } else {
            $sql = "INSERT INTO videotheque (id, title, year, director, poster, format, length, publisher, ean_isbn13, number_of_discs, aspect_ratio, description, actors) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) ON DUPLICATE KEY UPDATE title=VALUES(title), year=VALUES(year), director=IF(VALUES(director)!='', VALUES(director), director), poster=IF(VALUES(poster)!='', VALUES(poster), poster), format=IF(VALUES(format)!='', VALUES(format), format), length=IF(VALUES(length)!='', VALUES(length), length), publisher=IF(VALUES(publisher)!='', VALUES(publisher), publisher), ean_isbn13=IF(VALUES(ean_isbn13)!='', VALUES(ean_isbn13), ean_isbn13), number_of_discs=IF(VALUES(number_of_discs)!=1, VALUES(number_of_discs), number_of_discs), aspect_ratio=IF(VALUES(aspect_ratio)!='', VALUES(aspect_ratio), aspect_ratio), description=IF(VALUES(description)!='', VALUES(description), description), actors=IF(VALUES(actors)!='', VALUES(actors), actors)";
            $stmt = $pdo->prepare($sql);
            $stmt->execute([$id, $data['title'] ?? '', $data['year'] ?? '', $data['director'] ?? '', $data['poster'] ?? '', $data['format'] ?? '', $data['length'] ?? '', $data['publisher'] ?? '', $data['ean_isbn13'] ?? '', $data['number_of_discs'] ?? 1, $data['aspect_ratio'] ?? '', $data['description'] ?? '', $data['actors'] ?? '']);
        }
        echo json_encode(["success" => true]);
        break;
        
    case 'delete_film':
        checkAuth($pdo);
        $type = $_GET['type'] ?? 'critique'; $table = ($type === 'videotheque') ? 'videotheque' : 'critiques';
        $id = $_GET['id'] ?? null;
        if (!$id) { http_response_code(400); echo json_encode(["error" => "ID manquant."]); break; }
        $stmt = $pdo->prepare("DELETE FROM $table WHERE id = ?"); $stmt->execute([$id]);
        echo json_encode(["success" => true]);
        break;
        
    case 'bulk_delete':
        checkAuth($pdo);
        $ids = $data['ids'] ?? []; $type = $data['type'] ?? 'critique'; $table = ($type === 'videotheque') ? 'videotheque' : 'critiques';
        if (!empty($ids)) { $placeholders = implode(',', array_fill(0, count($ids), '?')); $stmt = $pdo->prepare("DELETE FROM $table WHERE id IN ($placeholders)"); $stmt->execute($ids); echo json_encode(["success" => true]); }
        else { http_response_code(400); echo json_encode(["success" => false, "error" => "Aucun élément sélectionné."]); }
        break;
        
    case 'import_batch':
        checkAuth($pdo);
        set_time_limit(0);
        $items = $data['items'] ?? [];
        $type = $data['type'] ?? 'videotheque';
        $tmdbApiKey = getTmdbApiKey($pdo);
        $imported = 0;
        $debugLog = [];

        $pdo->beginTransaction();
        try {
            foreach ($items as $rowData) {
                $title = $rowData['title'] ?? $rowData['Name'] ?? $rowData['Title'] ?? 'Sans titre';
                $publishDate = $rowData['publish_date'] ?? $rowData['Year'] ?? $rowData['year'] ?? $rowData['Date'] ?? '';
                $year = extractYear($publishDate);
                $id = makeStableId($type, $title, $year);

                if ($type === 'videotheque') {
                    $csvActors = $rowData['ensemble'] ?? $rowData['creators'] ?? '';
                    $actors = '';
                    if (!empty($csvActors)) {
                        $actorsArray = array_map('trim', explode(',', $csvActors));
                        $actors = implode(', ', array_slice($actorsArray, 0, 4));
                    }

                    $ean = $rowData['ean_isbn13'] ?? $rowData['EAN'] ?? '';
                    if (!empty($ean)) {
                        $eanFloat = floatval($ean);
                        if ($eanFloat > 0) $ean = (string) round($eanFloat);
                        $ean = preg_replace('/[^0-9]/', '', $ean);
                    }

                    $lengthRaw = $rowData['length'] ?? '';
                    $length = '';
                    if ($lengthRaw !== '' && $lengthRaw !== null) {
                        $lengthVal = floatval($lengthRaw);
                        if ($lengthVal > 0) $length = (string) round($lengthVal);
                    }

                    $discsRaw = $rowData['number_of_discs'] ?? '';
                    $discs = (is_numeric($discsRaw) && floatval($discsRaw) > 0) ? (int) round(floatval($discsRaw)) : 1;

                    $description = $rowData['description'] ?? $rowData['Description'] ?? '';
                    $publisher = $rowData['publisher'] ?? '';
                    $aspect = $rowData['aspect_ratio'] ?? '';
                    $format = $rowData['format'] ?? detectFormat($title, $description);
                    $poster = $rowData['poster'] ?? '';
                    $director = '';

                    // Enrichissement via Fnac si on a un EAN
                    if (!empty($ean)) {
                        $fnacData = fetchFnac($ean);
                        if (!empty($fnacData)) {
                            if ((empty($title) || $title === 'Sans titre') && !empty($fnacData['title'])) {
                                $title = cleanTitle($fnacData['title']);
                            }
                            if (empty($publisher) && !empty($fnacData['publisher'])) {
                                $publisher = $fnacData['publisher'];
                            }
                            if (empty($format) && !empty($fnacData['format'])) {
                                $format = $fnacData['format'];
                            }
                            if (empty($length) && !empty($fnacData['length'])) {
                                $length = $fnacData['length'];
                            }
                            if (empty($aspect) && !empty($fnacData['aspect'])) {
                                $aspect = $fnacData['aspect'];
                            }
                            if ($discs === 1 && !empty($fnacData['discs'])) {
                                $discs = (int)$fnacData['discs'];
                            }
                            if (empty($actors) && !empty($fnacData['actors'])) {
                                $actors = $fnacData['actors'];
                            }
                            if (empty($poster) && !empty($fnacData['poster'])) {
                                $poster = $fnacData['poster'];
                            }
                            if (empty($description) && !empty($fnacData['description'])) {
                                $description = $fnacData['description'];
                            }
                        }
                    }

                    // Enrichissement via TMDB
                    if ($tmdbApiKey && !empty($title)) {
                        $tmdbTitle = $title;
                        $tmdbTitle = preg_replace('/\s*[\[\(].*?[\]\)]\s*/', '', $tmdbTitle);
                        $tmdbTitle = preg_replace('/\s*-\s*(Édition|Edition|Collector|Simple|Spéciale|Digibook|Ultimate|Intégrale|Combo|SteelBook|Boîtier|Coffret).*$/i', '', $tmdbTitle);
                        $tmdbTitle = preg_replace('/\s*(Blu-ray|Bluray|DVD|4K|Ultra HD|Combo|VHS|BDRip|\[.*\]).*$/i', '', $tmdbTitle);
                        $tmdbTitle = preg_replace('/\s*(Coffret|Trilogie|Quadrilogie|Collection|Anthologie).*$/i', '', $tmdbTitle);
                        $tmdbTitle = preg_split('/\s*(\/|\+|:)\s*/', $tmdbTitle)[0];
                        $tmdbTitle = explode(' - ', $tmdbTitle)[0];
                        $tmdbTitle = trim($tmdbTitle);

                        $tmdbData = fetchTMDBFull($tmdbTitle, $year, $tmdbApiKey, $pdo);
                        if (!$tmdbData && $tmdbTitle !== $title) {
                            $tmdbData = fetchTMDBFull($title, $year, $tmdbApiKey, $pdo);
                        }

                        if ($tmdbData) {
                            if (!empty($tmdbData['title'])) $title = $tmdbData['title'];
                            if (empty($director)) $director = $tmdbData['director'] ?? '';
                            if (empty($year) && !empty($tmdbData['year'])) $year = $tmdbData['year'];
                            if (empty($length) && !empty($tmdbData['length'])) $length = $tmdbData['length'];
                            if (!empty($tmdbData['overview'])) $description = $tmdbData['overview'];
                            if (!empty($tmdbData['cast'])) $actors = implode(', ', $tmdbData['cast']);
                            if (!empty($tmdbData['poster'])) $poster = $tmdbData['poster']; // TMDB prioritaire
                        }
                    }

                    $sql = "INSERT INTO videotheque (id, title, year, director, poster, format, length, publisher, ean_isbn13, number_of_discs, aspect_ratio, description, actors) 
                            VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) 
                            ON DUPLICATE KEY UPDATE 
                            title=VALUES(title), year=VALUES(year), 
                            director=IF(VALUES(director)!='',VALUES(director),director), 
                            poster=IF(VALUES(poster)!='',VALUES(poster),poster), 
                            format=IF(VALUES(format)!='',VALUES(format),format), 
                            length=IF(VALUES(length)!='',VALUES(length),length), 
                            publisher=IF(VALUES(publisher)!='',VALUES(publisher),publisher), 
                            ean_isbn13=IF(VALUES(ean_isbn13)!='',VALUES(ean_isbn13),ean_isbn13), 
                            number_of_discs=IF(VALUES(number_of_discs)!=1,VALUES(number_of_discs),number_of_discs), 
                            aspect_ratio=IF(VALUES(aspect_ratio)!='',VALUES(aspect_ratio),aspect_ratio), 
                            description=IF(VALUES(description)!='',VALUES(description),description), 
                            actors=IF(VALUES(actors)!='',VALUES(actors),actors)";
                    $stmt = $pdo->prepare($sql);
                    $stmt->execute([$id, $title, $year, $director, $poster, $format, $length, $publisher, $ean, $discs, $aspect, $description, $actors]);

                } else {
                    $ratingRaw = $rowData['Rating'] ?? $rowData['rating'] ?? '';
                    $rating = ($ratingRaw !== '' && $ratingRaw !== null) ? (float)$ratingRaw : null;
                    $review = $rowData['Review'] ?? $rowData['review'] ?? '';
                    $director = ''; $poster = ''; $streaming = '';

                    if ($tmdbApiKey && !empty($title)) {
                        $tmdbData = fetchTMDBFull($title, $year, $tmdbApiKey, $pdo);
                        if ($tmdbData) {
                            $director = $tmdbData['director'];
                            $poster = $tmdbData['poster'];
                            $streaming = $tmdbData['streaming'];
                            if (empty($year)) $year = $tmdbData['year'];
                            if (!empty($tmdbData['title'])) $title = $tmdbData['title'];
                        }
                    }
                    if (empty($streaming)) $streaming = 'Support physique / Cinéma';

                    $sql = "INSERT INTO critiques (id, title, year, director, poster, rating, review, streaming) 
                            VALUES (?, ?, ?, ?, ?, ?, ?, ?) 
                            ON DUPLICATE KEY UPDATE 
                            title=VALUES(title), year=VALUES(year), 
                            rating=VALUES(rating), 
                            review=IF(VALUES(review)!='',VALUES(review),review), 
                            director=IF(VALUES(director)!='',VALUES(director),director), 
                            poster=IF(VALUES(poster)!='',VALUES(poster),poster), 
                            streaming=IF(VALUES(streaming)!='',VALUES(streaming),streaming)";
                    $stmt = $pdo->prepare($sql);
                    $stmt->execute([$id, $title, $year, $director, $poster, $rating, $review, $streaming]);
                }
                $imported++;
            }

            $pdo->commit();
            echo json_encode(["success" => true, "imported" => $imported, "debug" => $debugLog]);

        } catch (\Throwable $e) {
            if ($pdo->inTransaction()) {
                $pdo->rollBack();
            }
            http_response_code(500);
            echo json_encode(["success" => false, "error" => "Erreur serveur : " . $e->getMessage(), "debug" => $debugLog]);
        }
        break;

    case 'debug_fnac':
        $ean = $_GET['ean'] ?? '';
        if (!$ean) { echo json_encode(['error' => 'EAN manquant']); exit; }
        
        $result = ['ean' => $ean];
        $data = fetchFnac($ean);
        $result['data'] = $data;
        $result['status'] = $data ? 'OK' : 'AUCUN_RÉSULTAT';
        
        echo json_encode($result, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);
        exit;
    break;
}
?>
<script>
const API_URL = '../api.php';
let allItems = [];
let currentAdminTab = 'critique';
let currentPage = 1;
const itemsPerPage = 12;
let selectedIds = new Set();
let pendingDeleteAction = null;

function getStarsHTML(rating) {
    let r = parseFloat(String(rating).replace(',', '.')) || 0;
    r = Math.min(Math.max(r, 0), 5);
    const full = Math.floor(r);
    const hasHalf = (r - full) >= 0.5;
    const empty = Math.max(0, 5 - Math.ceil(r));
    let html = '★'.repeat(full);
    if (hasHalf) html += '<span class="half-star">★</span>';
    html += `<span class="stars-muted">${'☆'.repeat(empty)}</span>`;
    return html;
}

function parseCSV(text) {
    if (text.charCodeAt(0) === 0xFEFF) text = text.slice(1);
    const rows = [];
    let col = '', row = [], inQuotes = false;
    for (let i = 0; i < text.length; i++) {
        const c = text[i];
        if (inQuotes) {
            if (c === '"') {
                if (text[i+1] === '"') { col += '"'; i++; }
                else inQuotes = false;
            } else col += c;
        } else {
            if (c === '"') inQuotes = true;
            else if (c === ',') { row.push(col); col = ''; }
            else if (c === '\n' || c === '\r') {
                if (c === '\r' && text[i+1] === '\n') i++;
                row.push(col); col = '';
                if (row.length > 1 || row[0].trim() !== '') rows.push(row);
                row = [];
            } else col += c;
        }
    }
    if (col !== '' || row.length > 0) { row.push(col); rows.push(row); }
    if (rows.length === 0) return [];
    const headers = rows[0].map(h => h.trim());
    const data = [];
    for (let i = 1; i < rows.length; i++) {
        if (rows[i].length === 1 && rows[i][0].trim() === '') continue;
        const obj = {};
        headers.forEach((h, idx) => { obj[h] = rows[i][idx] !== undefined ? rows[i][idx] : ''; });
        data.push(obj);
    }
    return data;
}

document.addEventListener('DOMContentLoaded', () => {
    loadDashboardData();
    initEventListeners();
    const confirmBtn = document.getElementById('confirm-btn');
    if (confirmBtn) {
        confirmBtn.addEventListener('click', () => {
            if (pendingDeleteAction) pendingDeleteAction();
            closeConfirmModal();
        });
    }
});

function initEventListeners() {
    const filmForm = document.getElementById('film-form');
    if (filmForm) filmForm.addEventListener('submit', saveFilmForm);
    const csvInput = document.getElementById('csv-file');
    if (csvInput) {
        csvInput.addEventListener('change', (e) => {
            if (currentAdminTab === 'critique') handleCritiqueUpload(e.target);
            else handleVideothequeUpload(e.target);
        });
    }
    const searchInput = document.getElementById('search-input');
    if (searchInput) searchInput.addEventListener('input', () => { currentPage = 1; renderAdminTable(); });
    const selectAll = document.getElementById('select-all-checkbox');
    if (selectAll) selectAll.addEventListener('change', (e) => toggleSelectAll(e.target));
    document.addEventListener('click', (e) => {
        if (e.target.classList.contains('modal-close') || e.target.closest('.modal-close')) {
            const overlay = e.target.closest('.overlay');
            if (overlay) overlay.classList.remove('open');
        }
        if (e.target.classList.contains('overlay')) e.target.classList.remove('open');
    });
    const physicalFilter = document.getElementById('admin-physical-checkbox');
    if (physicalFilter) physicalFilter.addEventListener('change', () => { currentPage = 1; renderAdminTable(); });
}

async function loadDashboardData() {
    try {
        const res = await fetch(`${API_URL}?action=get_films`, { cache: 'no-store' });
        allItems = await res.json();
        const secRes = await fetch(`${API_URL}?action=check_security_status`, { cache: 'no-store' });
        const secData = await secRes.json();
        const banner = document.getElementById('security-banner');
        if (banner) banner.style.display = secData.is_blank ? 'flex' : 'none';
        renderAdminTable();
    } catch (err) { console.error('Erreur chargement :', err); }
}

function renderAdminTable() {
    const tbody = document.getElementById('admin-table-body');
    if (!tbody) return;
    tbody.innerHTML = '';
    const searchInput = document.getElementById('search-input');
    const currentSearch = searchInput ? searchInput.value.toLowerCase() : '';
    const physicalFilter = document.getElementById('admin-physical-checkbox');

    let filtered = allItems.filter(item => item.type === currentAdminTab);

    if (physicalFilter && physicalFilter.checked) {
        filtered = filtered.filter(f => {
            if (f.type === 'critique') {
                return f.streaming && f.streaming.toLowerCase().includes('support physique');
            }
            return true;
        });
    }

    if (currentSearch) {
        filtered = filtered.filter(f => 
            f.title.toLowerCase().includes(currentSearch) || 
            (f.director && f.director.toLowerCase().includes(currentSearch))
        );
    }

    const countLabel = document.getElementById('admin-count-label');
    if (countLabel) countLabel.textContent = `${filtered.length} élément(s)`;

    const totalPages = Math.ceil(filtered.length / itemsPerPage) || 1;
    if (currentPage > totalPages) currentPage = totalPages;
    const startIdx = (currentPage - 1) * itemsPerPage;
    const pageItems = filtered.slice(startIdx, startIdx + itemsPerPage);

    pageItems.forEach(f => {
        const tr = document.createElement('tr');
        const isChecked = selectedIds.has(String(f.id)) ? 'checked' : '';
        tr.innerHTML = `
            <td style="text-align:center;"><input type="checkbox" class="film-checkbox" value="${f.id}" ${isChecked} onclick="toggleSingleSelect('${f.id}', this)"></td>
            <td style="text-align:center;">${f.poster ? `<img src="${f.poster}" class="thumb" alt="Affiche">` : '<div class="thumb-ph"><i class="ti ti-photo"></i></div>'}</td>
            <td><strong>${f.title}</strong></td>
            <td>${f.year || '-'}</td>
            <td>${f.director || '-'}</td>
            <td>${currentAdminTab === 'critique' ? `<span class="tbl-stars">${getStarsHTML(f.rating)}</span>` : `<span class="badge-format">${f.format || '-'}</span>`}</td>
            <td>
                <div class="tbl-actions">
                    <button onclick="openEditModal('${f.id}')" title="Éditer"><i class="ti ti-edit"></i></button>
                    <button class="del" onclick="deleteSingleFilm('${f.id}')" title="Supprimer"><i class="ti ti-trash"></i></button>
                </div>
            </td>`;
        tbody.appendChild(tr);
    });

    renderPagination(totalPages, filtered.length);

    const selectAll = document.getElementById('select-all-checkbox');
    if (selectAll) selectAll.checked = pageItems.length > 0 && pageItems.every(f => selectedIds.has(String(f.id)));
}

function toggleSingleSelect(id, checkbox) {
    if (checkbox.checked) selectedIds.add(String(id));
    else selectedIds.delete(String(id));
    updateBulkBar();
}

function toggleSelectAll(source) {
    const filtered = allItems.filter(item => item.type === currentAdminTab);
    if (source.checked) filtered.forEach(f => selectedIds.add(String(f.id)));
    else filtered.forEach(f => selectedIds.delete(String(f.id)));
    document.querySelectorAll('.film-checkbox').forEach(cb => { cb.checked = selectedIds.has(cb.value); });
    updateBulkBar();
}

function updateBulkBar() {
    const bulkBar = document.getElementById('bulk-actions-bar');
    const bulkCount = document.getElementById('bulk-count');
    if (selectedIds.size > 0) {
        if (bulkBar) bulkBar.style.display = 'flex';
        if (bulkCount) bulkCount.textContent = selectedIds.size;
    } else {
        if (bulkBar) bulkBar.style.display = 'none';
        const selectAll = document.getElementById('select-all-checkbox');
        if (selectAll) selectAll.checked = false;
    }
}

function renderPagination(totalPages, totalItems) {
    const container = document.getElementById('pagination-container');
    if (!container) return;
    container.innerHTML = '';
    if (totalItems === 0) { 
        container.innerHTML = '<p style="color:var(--muted); text-align:center; width:100%;">Aucun élément trouvé.</p>'; 
        return; 
    }
    if (totalPages <= 1) return;

    const info = document.createElement('span');
    info.className = 'pagination-info';
    info.textContent = `Page ${currentPage} sur ${totalPages}`;
    container.appendChild(info);

    const prevBtn = document.createElement('button');
    prevBtn.innerHTML = '<i class="ti ti-chevron-left"></i>';
    prevBtn.disabled = currentPage === 1;
    prevBtn.onclick = () => { currentPage--; renderAdminTable(); };
    container.appendChild(prevBtn);

    let startPage = Math.max(1, currentPage - 2);
    let endPage = Math.min(totalPages, currentPage + 2);

    if (startPage > 1) {
        const firstBtn = document.createElement('button');
        firstBtn.textContent = '1';
        firstBtn.onclick = () => { currentPage = 1; renderAdminTable(); };
        container.appendChild(firstBtn);
        if (startPage > 2) {
            const dots = document.createElement('span');
            dots.textContent = '...';
            container.appendChild(dots);
        }
    }

    for (let i = startPage; i <= endPage; i++) {
        const btn = document.createElement('button');
        btn.textContent = i;
        if (i === currentPage) btn.classList.add('active');
        btn.onclick = () => { currentPage = i; renderAdminTable(); };
        container.appendChild(btn);
    }

    if (endPage < totalPages) {
        if (endPage < totalPages - 1) {
            const dots = document.createElement('span');
            dots.textContent = '...';
            container.appendChild(dots);
        }
        const lastBtn = document.createElement('button');
        lastBtn.textContent = totalPages;
        lastBtn.onclick = () => { currentPage = totalPages; renderAdminTable(); };
        container.appendChild(lastBtn);
    }

    const nextBtn = document.createElement('button');
    nextBtn.innerHTML = '<i class="ti ti-chevron-right"></i>';
    nextBtn.disabled = currentPage === totalPages;
    nextBtn.onclick = () => { currentPage++; renderAdminTable(); };
    container.appendChild(nextBtn);
}

function showConfirmModal(actionFn) { pendingDeleteAction = actionFn; document.getElementById('confirm-modal').classList.add('open'); }
function closeConfirmModal() { document.getElementById('confirm-modal').classList.remove('open'); pendingDeleteAction = null; }

async function executeBulkDelete() {
    const ids = Array.from(selectedIds);
    if (ids.length === 0) return;
    showConfirmModal(async () => {
        try {
            await fetch(`${API_URL}?action=bulk_delete`, { method: 'POST', headers: { 'Authorization': localStorage.getItem('token'), 'Content-Type': 'application/json' }, body: JSON.stringify({ ids, type: currentAdminTab }) });
            selectedIds.clear();
            document.getElementById('bulk-actions-bar').style.display = 'none';
            loadDashboardData();
        } catch (err) { alert("Erreur serveur."); }
    });
}

async function deleteSingleFilm(id) {
    showConfirmModal(async () => {
        try {
            await fetch(`${API_URL}?action=delete_film&id=${id}&type=${currentAdminTab}`, { method: 'DELETE', headers: { 'Authorization': localStorage.getItem('token') } });
            loadDashboardData();
        } catch (err) { alert("Erreur serveur."); }
    });
}

function toggleFormFields() {
    document.getElementById('form-critique-fields').style.display = currentAdminTab === 'critique' ? 'block' : 'none';
    document.getElementById('form-videotheque-fields').style.display = currentAdminTab === 'videotheque' ? 'block' : 'none';
}

function switchAdminTab(tabName) {
    currentAdminTab = tabName;
    currentPage = 1;
    selectedIds.clear();
    document.getElementById('search-input').value = '';
    const physicalFilter = document.getElementById('admin-physical-checkbox');
    if (physicalFilter) physicalFilter.checked = false;
    const wrapper = document.querySelector('.physical-filter-admin');
    if (wrapper) wrapper.style.display = (tabName === 'videotheque') ? 'none' : 'flex';
    document.querySelectorAll('.tab-btn').forEach(b => b.classList.remove('active'));
    document.getElementById(`btn-tab-${tabName}`).classList.add('active');
    updateImportInterface();
    toggleFormFields();
    renderAdminTable();
}

function openAddModal() {
    document.getElementById('film-form').reset();
    document.getElementById('f-id').value = '';
    toggleFormFields();
    document.getElementById('admin-modal').classList.add('open');
}

function openEditModal(id) {
    const item = allItems.find(x => String(x.id) === String(id));
    if (!item) return;
    document.getElementById('f-id').value = item.id;
    document.getElementById('f-title').value = item.title;
    document.getElementById('f-year').value = item.year || '';
    document.getElementById('f-director').value = item.director || '';
    document.getElementById('f-poster').value = item.poster || '';
    toggleFormFields();
    if (currentAdminTab === 'critique') {
        document.getElementById('f-rating').value = item.rating || 3;
        document.getElementById('f-review').value = item.review || '';
        document.getElementById('f-streaming').value = item.streaming || '';
    } else {
        document.getElementById('f-format').value = item.format || '';
        document.getElementById('f-length').value = item.length || '';
        document.getElementById('f-publisher').value = item.publisher || '';
        document.getElementById('f-aspect').value = item.aspect_ratio || '';
        document.getElementById('f-ean').value = item.ean_isbn13 || '';
        document.getElementById('f-discs').value = item.number_of_discs || 1;
        document.getElementById('f-actors').value = item.actors || '';
        document.getElementById('f-description').value = item.description || '';
    }
    document.getElementById('admin-modal').classList.add('open');
}

function closeAdminModal() { document.getElementById('admin-modal').classList.remove('open'); }

async function openConfigModal() {
    document.getElementById('config-modal').classList.add('open');
    try {
        const res = await fetch(`${API_URL}?action=get_config_keys`, { headers: { 'Authorization': localStorage.getItem('token') } });
        const data = await res.json();
        document.getElementById('tmdb-key-input').value = '';
        document.getElementById('tmdb-key-input').placeholder = data.tmdb_api_key ? '✅ Clé configurée (laisser vide pour garder)' : 'Entrez votre clé TMDB';
    } catch(e) { console.error(e); }
}

function closeConfigModal() { document.getElementById('config-modal').classList.remove('open'); }

function openPasswordModal() {
    document.getElementById('pwd-error').style.display = 'none';
    document.getElementById('new-password-input').value = '';
    document.getElementById('new-password-confirm').value = '';
    document.getElementById('password-modal').classList.add('open');
}

function closePasswordModal() { document.getElementById('password-modal').classList.remove('open'); }

function logout() { localStorage.removeItem('token'); window.location.href = 'login.html'; }

async function saveFilmForm(e) {
    e.preventDefault();
    const payload = {
        type: currentAdminTab,
        id: document.getElementById('f-id').value,
        title: document.getElementById('f-title').value,
        year: document.getElementById('f-year').value,
        director: document.getElementById('f-director').value,
        poster: document.getElementById('f-poster').value,
        rating: document.getElementById('f-rating') ? document.getElementById('f-rating').value : '',
        review: document.getElementById('f-review') ? document.getElementById('f-review').value : '',
        streaming: document.getElementById('f-streaming') ? document.getElementById('f-streaming').value : '',
        format: document.getElementById('f-format') ? document.getElementById('f-format').value : '',
        length: document.getElementById('f-length') ? document.getElementById('f-length').value : '',
        publisher: document.getElementById('f-publisher') ? document.getElementById('f-publisher').value : '',
        aspect_ratio: document.getElementById('f-aspect') ? document.getElementById('f-aspect').value : '',
        ean_isbn13: document.getElementById('f-ean') ? document.getElementById('f-ean').value : '',
        number_of_discs: document.getElementById('f-discs') ? document.getElementById('f-discs').value : 1,
        description: document.getElementById('f-description') ? document.getElementById('f-description').value : '',
        actors: document.getElementById('f-actors') ? document.getElementById('f-actors').value : ''
    };
    try {
        await fetch(`${API_URL}?action=save_film`, { method: 'POST', headers: { 'Authorization': localStorage.getItem('token'), 'Content-Type': 'application/json' }, body: JSON.stringify(payload) });
        closeAdminModal(); loadDashboardData();
    } catch (err) { console.error(err); }
}

async function handleCritiqueUpload(input) {
    if (!input.files || input.files.length === 0) return;
    let allData = [];
    for (const file of input.files) { try { allData = allData.concat(parseCSV(await file.text())); } catch(e) {} }
    if (allData.length === 0) { input.value = ''; return alert('❌ Fichier vide.'); }
    showImportModal(allData.length, 'critique');
    let processed = 0;
    for (let i = 0; i < allData.length; i += 3) {
        const batch = allData.slice(i, i + 3);
        try {
            const response = await fetch(`${API_URL}?action=import_batch`, { method: 'POST', headers: { 'Authorization': localStorage.getItem('token'), 'Content-Type': 'application/json' }, body: JSON.stringify({ items: batch, type: 'critique' }) });
            if (!response.ok) throw new Error(`Erreur serveur ${response.status}`);
            const result = await response.json();
            if (!result.success) throw new Error(result.error || "Erreur inconnue.");
        } catch (err) {
            closeImportModal(); alert("❌ Échec de l'import : " + err.message); input.value = ''; return;
        }
        processed += batch.length;
        updateImportModal(processed, allData.length);
    }
    input.value = ''; closeImportModal();
    showSuccessModal(`${allData.length} critique(s) importée(s) avec succès.`);
    loadDashboardData();
}

function normalizeVideothequeRow(row) {
    let ean = row['ean_isbn13'] || row['EAN'] || '';
    if (ean !== '') {
        ean = String(ean).replace(/[^0-9]/g, '');
        ean = ean.replace(/^0+/, '');
    }
    
    let length = row['length'] || '';
    if (length !== '' && length !== null) {
        const l = parseFloat(length);
        length = isNaN(l) ? '' : String(Math.round(l));
    }
    
    let discs = row['number_of_discs'] || '';
    if (discs === '' || discs === null || isNaN(parseFloat(discs))) {
        discs = 1;
    } else {
        discs = Math.round(parseFloat(discs));
    }
    
    return Object.assign({}, row, {
        ean_isbn13: ean,
        length: length,
        number_of_discs: discs
    });
}

async function handleVideothequeUpload(input) {
    if (!input.files || input.files.length === 0) return;
    let allData = [];
    for (const file of input.files) { try { allData = allData.concat(parseCSV(await file.text())); } catch(e) {} }
    if (allData.length === 0) { input.value = ''; return alert('❌ Fichier vide.'); }
    allData = allData.map(normalizeVideothequeRow);
    showImportModal(allData.length, 'videotheque');
    let processed = 0;
    for (let i = 0; i < allData.length; i += 3) {
        const batch = allData.slice(i, i + 3);
        try {
            const response = await fetch(`${API_URL}?action=import_batch`, { method: 'POST', headers: { 'Authorization': localStorage.getItem('token'), 'Content-Type': 'application/json' }, body: JSON.stringify({ items: batch, type: 'videotheque' }) });
            if (!response.ok) throw new Error(`Erreur serveur ${response.status}`);
            const result = await response.json();
            if (!result.success) throw new Error(result.error || "Erreur inconnue.");
        } catch (err) {
            closeImportModal(); alert("❌ Échec de l'import : " + err.message); input.value = ''; return;
        }
        processed += batch.length;
        updateImportModal(processed, allData.length);
    }
    input.value = ''; closeImportModal();
    showSuccessModal(`${allData.length} support(s) importé(s) avec succès.`);
    loadDashboardData();
}

function showImportModal(total, type) {
    document.getElementById('import-modal-title').innerHTML = type === 'critique' ? '<i class="ti ti-star"></i> Import Critiques' : '<i class="ti ti-video"></i> Import Vidéothèque';
    document.getElementById('import-modal-desc').textContent = `Traitement de ${total} élément(s)...`;
    document.getElementById('import-progress-bar').style.width = '0%';
    document.getElementById('import-modal-counter').textContent = '0%';
    document.getElementById('import-progress-modal').classList.add('open');
}

function updateImportModal(current, total) {
    const pct = Math.round((current / total) * 100);
    document.getElementById('import-progress-bar').style.width = pct + '%';
    document.getElementById('import-modal-counter').textContent = `${pct}%`;
}

function closeImportModal() { document.getElementById('import-progress-modal').classList.remove('open'); }

async function saveConfigKeys() {
    const keyValue = document.getElementById('tmdb-key-input').value.trim();
    if (!keyValue) { closeConfigModal(); return; }
    try {
        await fetch(`${API_URL}?action=save_config`, { method: 'POST', headers: { 'Authorization': localStorage.getItem('token'), 'Content-Type': 'application/json' }, body: JSON.stringify({ key_name: 'tmdb_api_key', key_value: keyValue }) });
        alert('✅ Clé sauvegardée !'); closeConfigModal();
    } catch (err) { alert('Erreur serveur.'); }
}

async function saveNewPassword() {
    const pwdInput = document.getElementById('new-password-input');
    const pwdConfirm = document.getElementById('new-password-confirm');
    const errorMsg = document.getElementById('pwd-error');
    if (pwdInput.value !== pwdConfirm.value) { errorMsg.textContent = "Les mots de passe ne correspondent pas."; errorMsg.style.display = "block"; return; }
    if (pwdInput.value.length < 4) { errorMsg.textContent = "4 caractères minimum."; errorMsg.style.display = "block"; return; }
    try {
        const response = await fetch(`${API_URL}?action=update_password`, { method: 'POST', headers: { 'Authorization': localStorage.getItem('token'), 'Content-Type': 'application/json' }, body: JSON.stringify({ new_password: pwdInput.value }) });
        const data = await response.json();
        if (data.success) { alert('Mot de passe mis à jour.'); closePasswordModal(); }
    } catch (err) { console.error(err); }
}

function updateImportInterface() {
    const title = document.getElementById('import-title');
    const desc = document.getElementById('import-desc');
    if (currentAdminTab === 'critique') {
        title.innerHTML = '<strong>Importer Critiques & Notes</strong>';
        desc.textContent = 'Sélectionnez vos fichiers "ratings.csv" et "reviews.csv" (Letterboxd).';
    } else {
        title.innerHTML = '<strong>Importer ma Vidéothèque</strong>';
        desc.textContent = 'Sélectionnez vos listes CSV de supports physiques (Blu-ray, DVD, 4K).';
    }
}

function showSuccessModal(message) {
    const msgEl = document.getElementById('success-modal-message');
    const modalEl = document.getElementById('success-modal');
    if (msgEl) msgEl.textContent = message;
    if (modalEl) modalEl.classList.add('open');
}

function closeSuccessModal() {
    const modalEl = document.getElementById('success-modal');
    if (modalEl) modalEl.classList.remove('open');
}
</script>