source: Klonkt/src/services/AudioEmbedService.js@ 48481cd

/**
 * AudioEmbedService — Parse URLs and return embed HTML
 * Supports: Spotify, Bandcamp, SoundCloud, Apple Music, YouTube, Vimeo
 * 
 * Usage in post content:
 * <p>https://open.spotify.com/track/123abc</p>
 * →
 * <figure class="folio-embed folio-embed--spotify">
 *   <iframe src="..."></iframe>
 * </figure>
 */

// "Open in" icons (brand-colored via CSS .pat-link--).
const OPEN_IN_SVG = {
  spotify: '<svg viewBox="0 0 24 24" fill="currentColor" aria-hidden="true"><path d="M12 2a10 10 0 100 20 10 10 0 000-20zm4.6 14.42a.62.62 0 01-.86.21c-2.35-1.44-5.3-1.76-8.79-.96a.62.62 0 11-.28-1.21c3.8-.87 7.07-.5 9.71 1.11.3.18.39.57.22.85zm1.23-2.73a.78.78 0 01-1.07.26c-2.69-1.66-6.79-2.14-9.97-1.17a.78.78 0 11-.45-1.49c3.63-1.1 8.15-.56 11.24 1.33.36.22.48.7.25 1.07zm.1-2.85C14.66 8.95 9.4 8.78 6.3 9.72a.93.93 0 11-.54-1.79c3.56-1.08 9.37-.87 13.07 1.33a.94.94 0 01-.96 1.61z"/></svg>',
  youtube: '<svg viewBox="0 0 24 24" fill="currentColor" aria-hidden="true"><path d="M23 7.1a3 3 0 00-2.1-2.12C19.04 4.5 12 4.5 12 4.5s-7.04 0-8.9.48A3 3 0 001 7.1 31.2 31.2 0 00.5 12 31.2 31.2 0 001 16.9a3 3 0 002.1 2.12c1.86.48 8.9.48 8.9.48s7.04 0 8.9-.48A3 3 0 0023 16.9 31.2 31.2 0 0023.5 12 31.2 31.2 0 0023 7.1zM9.75 15.5v-7l6 3.5-6 3.5z"/></svg>',
  soundcloud: '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M4 14v4M7.5 11v7M11 9v9"/><path d="M14.5 9.5V18h4a3 3 0 100-6 4 4 0 00-4-2.5z"/></svg>',
};

class AudioEmbedService {
  // Small "open in" links for a track (Spotify/YouTube/SoundCloud). The hrefs
  // are already validated server-side (https + correct host only). Returns ''
  // when no links exist. Placed next to the play button (outside the button →
  // no conflict with playback).
  static openInLinks(t) {
    if (!t) return '';
    const out = [];
    const add = (url, key, label) => {
      if (!url) return;
      out.push(`<a class="pat-link pat-link--${key}" href="${this.escape(url)}" target="_blank" rel="noopener noreferrer" title="Open in ${label}" aria-label="Open in ${label}">${OPEN_IN_SVG[key]}</a>`);
    };
    add(t.link_spotify, 'spotify', 'Spotify');
    add(t.link_youtube, 'youtube', 'YouTube');
    add(t.link_soundcloud, 'soundcloud', 'SoundCloud');
    return out.length ? `<span class="pat-links">${out.join('')}</span>` : '';
  }

  static detectProvider(url) {
    if (!url || typeof url !== 'string') return null;
    url = url.trim();

    // Only embed http(s) URLs. The provider regexes below are NOT anchored,
    // so without this check e.g. `javascript:alert(1)//youtu.be/x` would match
    // and land as an embed URL (stored XSS via an [[embed:...]] shortcode —
    // that text never passes through the HTML sanitizer because it lives in a
    // text node). The scheme guard excludes javascript:/data:/vbscript: etc.
    if (!/^https?:\/\//i.test(url)) return null;

    // Spotify
    if (/open\.spotify\.com\/(track|album|playlist|episode|show)\/([A-Za-z0-9]+)/i.test(url)) {
      const match = url.match(/\/(track|album|playlist|episode|show)\/([A-Za-z0-9]+)/i);
      return { provider: 'spotify', type: match[1], id: match[2], url };
    }

    // Bandcamp
    if (/bandcamp\.com\/(track|album)/i.test(url)) {
      return { provider: 'bandcamp', url };
    }

    // SoundCloud
    if (/soundcloud\.com/i.test(url)) {
      return { provider: 'soundcloud', url };
    }

    // Apple Music
    if (/music\.apple\.com\/([a-z]{2})\/(?:album|playlist|song)\//i.test(url)) {
      return { provider: 'applemusic', url };
    }

    // YouTube — a video id is always exactly 11 characters (aligns with the
    // client-side ytId() in embed-player.js, which also expects {11}).
    //
    // A link may carry a video, a playlist, or both, and until now we kept only
    // the video and threw `list=` away -- so a link to an album played its first
    // song and stopped. The ref now keeps whichever is there, in the same three
    // shapes the Klonkt hub uses, so one ref travels between the two unchanged:
    //
    //   "<video>"           one video
    //   "<video>?list=<L>"  that video, and on through the list
    //   "list:<L>"          the whole playlist (YouTube's `videoseries`)
    //
    // `list` may sit before or after `v=` and is often entity-encoded (&amp;)
    // in a baked href, hence the scan over the whole URL rather than a fixed
    // order. A list id is 10-60 chars: longer and looser than a video id.
    if (/(?:youtube(?:-nocookie)?\.com\/(?:watch\?|playlist\?|embed\/|shorts\/|live\/)|youtu\.be\/)/i.test(url)) {
      const vm = url.match(/(?:[?&](?:amp;)?v=|youtu\.be\/|\/embed\/|\/shorts\/|\/live\/)([A-Za-z0-9_-]{11})(?![A-Za-z0-9_-])/i);
      const lm = url.match(/[?&](?:amp;)?list=([A-Za-z0-9_-]{10,60})/i);
      // `videoseries` is a marker, not a video: a bare playlist embed URL reads
      // /embed/videoseries?list=..., and taking that for an id gives a dead
      // frame. It is EXACTLY eleven characters, so no length rule catches it --
      // it has to be named. (Measured, not assumed: it slipped through a
      // boundary check that looked like it covered this.)
      const id = vm && vm[1] !== 'videoseries' ? vm[1] : null;
      const list = lm ? lm[1] : null;
      if (id || list) {
        const ref = id ? (list ? `${id}?list=${list}` : id) : `list:${list}`;
        // `id` stays exactly what it was for every caller that only wants a
        // video; `list` and `ref` are additions.
        return { provider: 'youtube', id, list, ref, url };
      }
    }

    // Vimeo
    if (/vimeo\.com\/(?:video\/)?(\d+)/i.test(url)) {
      const match = url.match(/\d+/);
      return { provider: 'vimeo', id: match[0], url };
    }

    return null;
  }

  // Direct media files (video/audio) hosted anywhere → a native <video>/<audio>
  // player. Kept OUT of detectProvider() on purpose: the timeline/cover callers
  // switch on provider slugs (youtube/spotify/…) and a bare file has none, so
  // overloading detectProvider would suppress e.g. a PeerTube fallback. Only
  // autoembed() and [[embed:…]] use this.
  static MEDIA_FILE_EXT = {
    video: ['mp4', 'webm', 'm4v', 'mov', 'ogv'],
    audio: ['mp3', 'ogg', 'oga', 'wav', 'm4a', 'flac', 'opus', 'aac'],
  };

  static detectMediaFile(url) {
    if (!url || typeof url !== 'string') return null;
    if (!/^https?:\/\//i.test(url)) return null;
    let pathname;
    try { pathname = new URL(url).pathname.toLowerCase(); } catch { return null; }
    const ext = (pathname.match(/\.([a-z0-9]+)$/) || [])[1];
    if (!ext) return null;
    if (this.MEDIA_FILE_EXT.video.includes(ext)) return { kind: 'video', url };
    if (this.MEDIA_FILE_EXT.audio.includes(ext)) return { kind: 'audio', url };
    return null;
  }

  static mediaFileEmbed(url) {
    const m = this.detectMediaFile(url);
    if (!m) return null;
    const src = this.escape(m.url);
    if (m.kind === 'video') {
      return `<figure class="folio-embed folio-embed--video"><video src="${src}" controls preload="metadata" playsinline></video></figure>`;
    }
    return `<figure class="folio-embed folio-embed--audio"><audio src="${src}" controls preload="metadata"></audio></figure>`;
  }

  static generateIframe(provider, config) {
    switch (provider) {
      // Custom players (client-side via embed-player.js + the real platform APIs).
      // We render a placeholder with data attributes instead of the bare platform
      // iframe, so the embed appears in OUR brand style.
      case 'youtube':
        // The ref carries the list when there is one; `id` alone would drop it
        // and play a single song out of an album.
        return this.embedPlaceholder('youtube', config.ref || config.id, 'video',
          config.url || (config.id ? `https://youtu.be/${config.id}`
                                   : `https://www.youtube.com/playlist?list=${config.list}`));
      case 'soundcloud':
        return this.embedPlaceholder('soundcloud', config.url, 'track', config.url);
      case 'spotify':
        return this.embedPlaceholder('spotify', `spotify:${config.type}:${config.id}`,
          config.type, config.url || `https://open.spotify.com/${config.type}/${config.id}`);
      // No JS API (Bandcamp/Apple) or low priority (Vimeo): remain as iframes;
      // mutual exclusion for these runs via the blur fallback.
      case 'bandcamp':
        return this.bandcampIframe(config);
      case 'applemusic':
        return this.applemusicIframe(config);
      case 'vimeo':
        return this.vimeoIframe(config);
      default:
        return null;
    }
  }

  /**
   * Placeholder for a custom player. embed-player.js picks up
   * .folio-embed[data-embed-provider] and builds the card + player client-side.
   * ALL values go through escape() — post.content_html is executed unescaped.
   */
  static embedPlaceholder(provider, ref, type, url) {
    const attrs = [
      `data-embed-provider="${this.escape(provider)}"`,
      `data-embed-ref="${this.escape(ref)}"`,
      type ? `data-embed-type="${this.escape(type)}"` : '',
      `data-embed-url="${this.escape(url)}"`,
    ].filter(Boolean).join(' ');
    return `<div class="folio-embed folio-embed--${this.escape(provider)} pcms-embed pcms-embed-card pcms-embed-loading" ${attrs}></div>`;
  }

  static spotifyIframe({ type, id }) {
    const src = `https://open.spotify.com/embed/${type}/${id}`;
    return `
      <figure class="folio-embed folio-embed--spotify">
        <iframe src="${this.escape(src)}" 
                style="width:100%;height:152px;border:0;" 
                loading="lazy"
                allow="autoplay; clipboard-write; encrypted-media; fullscreen; picture-in-picture"
                title="Spotify ${type}"></iframe>
      </figure>
    `.trim();
  }

  static bandcampIframe({ url }) {
    const encodedUrl = encodeURIComponent(url);
    const src = `https://bandcamp.com/EmbeddedPlayer/url=${encodedUrl}/size=large/bgcol=faf8f3/linkcol=c2410c/tracklist=false/transparent=true/`;
    return `
      <figure class="folio-embed folio-embed--bandcamp">
        <iframe src="${this.escape(src)}"
                style="width:100%;height:470px;border:0;"
                loading="lazy"
                allow="encrypted-media"
                title="Bandcamp player"></iframe>
      </figure>
    `.trim();
  }

  static soundcloudIframe({ url }) {
    const params = {
      url: url,
      color: '#ff5500',
      auto_play: 'false',
      hide_related: 'true',
      show_comments: 'false',
      show_user: 'true',
      show_reposts: 'false',
      show_teaser: 'false',
      visual: 'true'
    };
    const query = new URLSearchParams(params).toString();
    const src = `https://w.soundcloud.com/player/?${query}`;
    return `
      <figure class="folio-embed folio-embed--soundcloud">
        <iframe src="${this.escape(src)}"
                style="width:100%;height:300px;border:0;"
                loading="lazy"
                allow="autoplay; clipboard-write; encrypted-media"
                title="SoundCloud player"></iframe>
      </figure>
    `.trim();
  }

  static applemusicIframe({ url }) {
    // Een album of nummer heeft een NUMMER als id, een afspeellijst niet: die
    // heet `pl.u-LdbqzVvI3go5g`. Met alleen [0-9]+ viel elke playlist hier af
    // en gaf deze functie null -- waarna de shortcode zelf op de pagina kwam.
    // Barts melding (17-8): het concept "The Mixtape" toonde in preview
    // letterlijk [[embed:https://music.apple.com/nl/playlist/...]].
    //
    // Bewust krap: geen slash, vraagteken of hekje in het id, want wat hier
    // gevangen wordt gaat rechtstreeks achter https://embed.music.apple.com/ aan.
    const match = url.match(
      /music\.apple\.com\/([a-z]{2}\/(album|playlist|song)\/[^/?#]+\/(?:[0-9]+|pl\.[A-Za-z0-9_-]+))/i,
    );
    if (!match) return null;
    const src = `https://embed.music.apple.com/${match[1]}`;
    // De hoogte hangt af van WAT je insluit, en dat stond hier op een vaste
    // 175px -- de maat van een LOS NUMMER. Een album of afspeellijst is 450px,
    // dus daarvan zag je ongeveer een derde, met `overflow:hidden` eroverheen
    // zodat de rest ook niet te bereiken viel. Barts melding (20-8) over
    // boiert.eu/the-mixtape.
    //
    // Nagemeten en niet overgenomen: de embed-pagina van die lijst
    // (pl.u-LdbqzVvI3go5g) geeft zijn <main> EN zijn <body> allebei precies
    // 450px. Dat is ook de hoogte in Apple's eigen insluitcode.
    const hoogte = String(match[2]).toLowerCase() === 'song' ? 175 : 450;
    return `
      <figure class="folio-embed folio-embed--applemusic">
        <iframe src="${this.escape(src)}"
                style="width:100%;height:${hoogte}px;border:0;overflow:hidden;border-radius:8px;"
                loading="lazy"
                allow="autoplay; clipboard-write; encrypted-media"
                title="Apple Music"></iframe>
      </figure>
    `.trim();
  }

  /**
   * The plain provider iframe. Takes the same ref shapes as the placeholder:
   * "<video>", "<video>?list=<L>" and "list:<L>" -- a bare playlist embeds as
   * `videoseries`. Kept in step with the placeholder path on purpose: this is
   * the fallback, and a fallback that silently drops the playlist is the worst
   * kind, because it looks like it worked.
   */
  static youtubeIframe({ id, ref }) {
    const r = ref || id || '';
    const base = 'https://www.youtube-nocookie.com/embed/';
    let src;
    if (r.startsWith('list:')) {
      src = `${base}videoseries?list=${encodeURIComponent(r.slice(5))}`;
    } else if (r.includes('?list=')) {
      const [v, l] = r.split('?list=');
      src = `${base}${encodeURIComponent(v)}?list=${encodeURIComponent(l)}`;
    } else {
      src = base + encodeURIComponent(r);
    }
    return `
      <figure class="folio-embed folio-embed--youtube">
        <iframe src="${this.escape(src)}"
                style="aspect-ratio:16/9;width:100%;height:auto;border:0;"
                loading="lazy"
                allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
                allowfullscreen
                title="YouTube video"></iframe>
      </figure>
    `.trim();
  }

  static vimeoIframe({ id }) {
    const src = `https://player.vimeo.com/video/${id}`;
    return `
      <figure class="folio-embed folio-embed--vimeo">
        <iframe src="${this.escape(src)}"
                style="aspect-ratio:16/9;width:100%;height:auto;border:0;"
                loading="lazy"
                allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
                allowfullscreen
                title="Vimeo video"></iframe>
      </figure>
    `.trim();
  }

  /**
   * Auto-embed: Scan paragraphs containing only a URL.
   * Handles two markdown-rendered shapes:
   *   <p>https://url</p>                      (bare URL — when GFM auto-link is off)
   *   <p><a href="https://url">https://url</a></p>  (marked GFM auto-link — what we get)
   * Either way → <figure class="folio-embed">...
   */
  static autoembed(html) {
    if (!html) return html;
    return html.replace(
      /<p>\s*(?:<a\b[^>]*?\shref="([^"]+)"[^>]*>[^<]*<\/a>|(https?:\/\/[^\s<>"']+))\s*<\/p>/gi,
      (match, hrefUrl, bareUrl) => {
        const url = hrefUrl || bareUrl;
        const detected = this.detectProvider(url);
        if (detected) {
          const iframe = this.generateIframe(detected.provider, detected);
          return iframe || match;
        }
        // Bare media file (…/clip.webm, …/song.mp3) → native player.
        const media = this.mediaFileEmbed(url);
        if (media) return media;
        return match;
      }
    );
  }

  /**
   * Replace [[embed:<url>]] shortcodes with the platform iframe (YouTube, Spotify,
   * SoundCloud, Apple Music, Bandcamp, Vimeo). The editor button inserts this
   * shortcode; bare URL lines also embed automatically via autoembed().
   * Unsupported/invalid URLs get a clean inline notice.
   */
  static embedMediaShortcodes(html) {
    if (!html) return html;
    return html.replace(/\[\[embed:([^\]]+)\]\]/gi, (match, rawUrl) => {
      const url = rawUrl.trim().replace(/&amp;/g, '&');
      const detected = this.detectProvider(url);
      if (!detected) {
        // Bare media file (…/clip.webm, …/song.mp3) → native player.
        const media = this.mediaFileEmbed(url);
        if (media) return media;
        return `<div class="post-embed-missing"><em>Embed: niet-ondersteunde of ongeldige URL.</em></div>`;
      }
      // HERKEND maar niet te bouwen is geen reden om de shortcode zelf te
      // tonen. Dat deed het wel, en dan leest een bezoeker "[[embed:https://...]]"
      // op de pagina en denkt hij dat er iets stuk is. Onherkend gaf hierboven
      // al een nette melding; herkend-maar-mislukt hoort dezelfde te geven,
      // want voor de lezer is het hetzelfde geval.
      return this.generateIframe(detected.provider, detected)
        || `<div class="post-embed-missing"><em>Embed: niet-ondersteunde of ongeldige URL.</em></div>`;
    });
  }

  /**
   * Replace [[track:<id>]] shortcodes with v9-style player markup.
   * Caller passes a lookup function (id) -> { id, title, artist, url, cover }
   * where url is already a signed /audio/stream/... URL. Unknown ids → left as-is.
   */
  static embedTrackShortcodes(html, trackLookup) {
    if (!html || typeof trackLookup !== 'function') return html;
    return html.replace(/\[\[track:([A-Za-z0-9_-]+)\]\]/g, (match, id) => {
      const t = trackLookup(id);
      if (!t) return match;
      const titleH0 = this.escape(t.title || 'Untitled');
      const artistH0 = this.escape(t.artist || '');
      const creditBits0 = [this.escape(t.credit || ''), this.escape(t.license || '')].filter(Boolean).join(' · ');
      // Link-only track (no audio file): no play button, but info + open-in links.
      if (!t.url) {
        const coverH0 = this.escape(t.cover || '');
        const leader0 = coverH0
          ? `<span class="pat-noplay pat-noplay--cover" style="background-image:url('${coverH0}')" aria-hidden="true"></span>`
          : `<span class="pat-noplay" aria-hidden="true"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="M9 18V5l12-2v13"/><circle cx="6" cy="18" r="3"/><circle cx="18" cy="16" r="3"/></svg></span>`;
        return `<div class="post-audio-track post-audio-track--static" id="track-${id}">
  ${leader0}
  <div class="pat-info">
    <div class="pat-title">${titleH0}</div>
    ${artistH0 ? `<div class="pat-artist">${artistH0}</div>` : ''}
    ${creditBits0 ? `<div class="pat-credit">${creditBits0}</div>` : ''}
  </div>
  ${this.openInLinks(t)}
</div>`;
      }
      const trackJson = JSON.stringify({
        id,
        url: t.url,
        title: t.title || 'Untitled',
        artist: t.artist || '',
        cover: t.cover || '',
        credit: t.credit || '',
        license: t.license || '',
      });
      const titleH = this.escape(t.title || 'Untitled');
      const artistH = this.escape(t.artist || '');
      const urlH = this.escape(t.url);
      // Visible owner/license line below the track.
      const creditBits = [this.escape(t.credit || ''), this.escape(t.license || '')].filter(Boolean).join(' · ');
      const dataAttr = trackJson
        .replace(/&/g, '&amp;').replace(/'/g, '&#39;').replace(/</g, '&lt;');
      // id="track-<id>" = anchor so the mini-player can scroll to this element.
      return `<div class="post-audio-track" id="track-${id}" data-pcms-track-id="${id}" data-pcms-track-url="${urlH}" data-pcms-track='${dataAttr}'>
  <button type="button" class="pat-play" aria-label="Play ${titleH}">
    <svg viewBox="0 0 24 24" fill="currentColor" aria-hidden="true"><path d="M8 4l12 8-12 8z"/></svg>
  </button>
  <div class="pat-info">
    <div class="pat-title">${titleH}</div>
    ${artistH ? `<div class="pat-artist">${artistH}</div>` : ''}
    ${creditBits ? `<div class="pat-credit">${creditBits}</div>` : ''}
  </div>
  ${this.openInLinks(t)}
</div>`;
    });
  }

  /**
   * Replace [[album:<name>]] shortcodes with a v9-style album block.
   * Caller passes a lookup function (name) -> { title, artist, cover, tracks: [{url,title,artist,cover}, ...] }
   * Tracks must already have signed URLs. Unknown albums → left as-is.
   * The wrapper carries the full album JSON so audio-player.js can queue it
   * when any track or the album play button is clicked.
   */
  static embedAlbumShortcodes(html, albumLookup) {
    if (!html || typeof albumLookup !== 'function') return html;
    return html.replace(/\[\[album:([^\]]+)\]\]/g, (match, rawName) => {
      const name = rawName.trim();
      const album = albumLookup(name);
      if (!album || !album.tracks || !album.tracks.length) return match;

      // Stable DOM id for this rendering — used as data-pcms-album-id on tracks
      const albumDomId = 'album-' + Math.random().toString(36).slice(2, 10);
      // Only playable tracks (with url) in the queue; link-only tracks appear
      // in the list but not in the playback JSON.
      const albumJson = JSON.stringify(album.tracks.filter((t) => t.url))
        .replace(/&/g, '&amp;').replace(/'/g, '&#39;').replace(/</g, '&lt;');
      const titleH = this.escape(album.title || name);
      const artistH = this.escape(album.artist || '');
      const coverH = album.cover ? this.escape(album.cover) : '';

      const trackItems = album.tracks.map((t, i) => {
        const tTitle = this.escape(t.title || ('Track ' + (i + 1)));
        const tArtist = this.escape(t.artist || '');
        // Link-only track: no play button, but track number + info + open-in links.
        if (!t.url) {
          return `    <li class="post-audio-track post-audio-track--static"${t.id ? ` id="track-${t.id}"` : ''}>
      <span class="pat-track-num">${i + 1}.</span>
      <div class="pat-info">
        <div class="pat-title">${tTitle}</div>
        ${tArtist && tArtist !== artistH ? `<div class="pat-artist">${tArtist}</div>` : ''}
      </div>
      ${this.openInLinks(t)}
    </li>`;
        }
        const tUrl = this.escape(t.url);
        return `    <li class="post-audio-track"${t.id ? ` id="track-${t.id}" data-pcms-track-id="${t.id}"` : ''} data-pcms-track-url="${tUrl}" data-pcms-album-id="${albumDomId}">
      <button type="button" class="pat-play" aria-label="Play ${tTitle}">
        <svg viewBox="0 0 24 24" fill="currentColor" aria-hidden="true"><path d="M8 4l12 8-12 8z"/></svg>
      </button>
      <div class="pat-info">
        <span class="pat-track-num">${i + 1}.</span>
        <div class="pat-title">${tTitle}</div>
        ${tArtist && tArtist !== artistH ? `<div class="pat-artist">${tArtist}</div>` : ''}
      </div>
      ${this.openInLinks(t)}
    </li>`;
      }).join('\n');

      return `<div class="post-album" id="${albumDomId}" data-pcms-album='${albumJson}' data-pcms-album-title="${titleH}">
  <div class="post-album-header">
    <button type="button" class="post-album-cover-btn" data-pcms-album-id="${albumDomId}" aria-label="Play album ${titleH}">
      ${coverH
        ? `<img src="${coverH}" alt="" class="post-album-cover-img">`
        : `<svg class="post-album-cover-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.6"><path d="M9 17V5l12-2v12"/><circle cx="6" cy="17" r="3"/><circle cx="18" cy="15" r="3"/></svg>`}
      <span class="post-album-play-overlay" aria-hidden="true">
        <svg viewBox="0 0 24 24" fill="currentColor"><path d="M8 4l12 8-12 8z"/></svg>
      </span>
    </button>
    <div class="post-album-info">
      <h3 class="post-album-title">${titleH}</h3>
      ${artistH ? `<p class="post-album-artist">${artistH}</p>` : ''}
      <p class="post-album-count">${album.tracks.length} track${album.tracks.length === 1 ? '' : 's'}</p>
    </div>
  </div>
  <ol class="post-album-tracks">
${trackItems}
  </ol>
</div>`;
    });
  }

  /**
   * Replace [[playlist:<id>]] shortcodes with a v9-style album block.
   * Caller passes a lookup function (id) -> hydrated playlist object from
   * PlaylistService.get(), or null. Unknown playlists render an inline
   * "niet gevonden" placeholder so the post still validates as HTML.
   *
   * Shape returned by lookup:
   *   { id, title, artist, year, cover, kind, tracks: [{url,title,artist,cover,duration}, ...] }
   *
   * `kind` is honored:
   *   - 'album'    → ordered list with track numbers
   *   - 'playlist' → list with per-track cover thumbnails (mixtape feel)
   *
   * opts: { isAdmin: boolean } — when true, an edit/delete action overlay
   * is rendered top-right of each card. The handlers are wired up in
   * audio-player.js via event delegation on data-pcms-playlist-delete.
   */
  static embedPlaylistShortcodes(html, playlistLookup, opts = {}) {
    if (!html || typeof playlistLookup !== 'function') return html;
    const isAdmin = !!opts.isAdmin;
    return html.replace(/\[\[playlist:([a-z0-9][a-z0-9-]*)\]\]/gi, (match, rawId) => {
      const id = rawId.toLowerCase();
      const pl = playlistLookup(id);

      if (!pl) {
        return `<div class="post-playlist-missing"><em>Playlist "${this.escape(id)}" niet gevonden.</em></div>`;
      }
      if (!pl.tracks || !pl.tracks.length) {
        return `<div class="post-playlist-empty"><em>Playlist "${this.escape(pl.title)}" heeft geen beschikbare tracks.</em></div>`;
      }

      const albumDomId = 'album-' + id;
      const kind = (pl.kind === 'playlist') ? 'playlist' : 'album';
      const kindLabel = kind === 'playlist' ? '📃 Playlist' : '💿 Album';
      const titleH  = this.escape(pl.title || 'Naamloos');
      const artistH = this.escape(pl.artist || '');
      const coverH  = pl.cover ? this.escape(pl.cover) : '';

      // Audio-player.js reads data-pcms-album for queue. Same shape as
      // embedAlbumShortcodes — keep both in sync.
      // Only playable tracks in the queue; link-only tracks appear in the list
      // but not in the playback JSON.
      const tracksData = pl.tracks.filter(t => t.url).map(t => ({
        id:     t.id,
        url:    t.url,
        title:  t.title,
        artist: t.artist || pl.artist || '',
        cover:  t.cover  || pl.cover  || '',
      }));
      const albumJson = JSON.stringify(tracksData)
        .replace(/&/g, '&amp;').replace(/'/g, '&#39;').replace(/</g, '&lt;');

      // Total duration for the meta line
      const totalSec = pl.tracks.reduce((s, t) => s + (t.duration || 0), 0);
      const metaParts = [];
      if (pl.year) metaParts.push(String(pl.year));
      metaParts.push(pl.tracks.length + (pl.tracks.length === 1 ? ' track' : ' tracks'));
      if (totalSec > 0) {
        const h = Math.floor(totalSec / 3600);
        const m = Math.floor((totalSec % 3600) / 60);
        if (h > 0) metaParts.push(`${h}h ${m}m`);
        else metaParts.push(`${Math.max(1, m)} min`);
      }
      const metaLine = this.escape(metaParts.join(' · '));
      const firstUrl = this.escape((pl.tracks.find(t => t.url) || {}).url || '');

      // Track items — playlist-kind shows per-track cover thumbs, album-kind shows numbers
      const trackItems = pl.tracks.map((t, i) => {
        const tTitleH  = this.escape(t.title || ('Track ' + (i + 1)));
        const tArtistH = this.escape(t.artist || '');
        const tUrl     = this.escape(t.url);
        const showArtist = tArtistH && tArtistH !== artistH;

        // Duration cell — render even when 0 for consistent column layout
        const durHtml = t.duration > 0
          ? `<span class="pat-duration">${Math.floor(t.duration / 60)}:${String(t.duration % 60).padStart(2, '0')}</span>`
          : `<span class="pat-duration pat-duration-empty">—:—</span>`;

        // Leader cell — number for albums, cover thumb for playlists
        const leader = (kind === 'playlist' && t.cover)
          ? `<span class="pat-cover" style="background-image:url(${this.escape(t.cover)})" aria-hidden="true"></span>`
          : `<span class="pat-num">${i + 1}</span>`;

        // Link-only track: no clickable play row (static div), but open-in links.
        if (!t.url) {
          return `    <li class="post-album-track-compact post-album-track-compact--static"${t.id ? ` id="track-${t.id}"` : ''}>
      <div class="pat-row pat-static">
        ${leader}
        <span class="pat-meta">
          <span class="pat-title">${tTitleH}</span>
          ${showArtist ? `<span class="pat-artist">${tArtistH}</span>` : ''}
        </span>
        ${durHtml}
      </div>
      ${this.openInLinks(t)}
    </li>`;
        }
        const trackBase = String(t.url).split('?')[0];
        return `    <li class="post-album-track-compact"${t.id ? ` id="track-${t.id}" data-pcms-track-id="${t.id}"` : ''}>
      <button type="button" class="pat-row"
              data-pcms-track-url="${tUrl}"
              data-pcms-album-id="${albumDomId}"
              data-pcms-track-base="${this.escape(trackBase)}"
              aria-label="Speel ${tTitleH}">
        ${leader}
        <span class="pat-meta">
          <span class="pat-title">${tTitleH}</span>
          ${showArtist ? `<span class="pat-artist">${tArtistH}</span>` : ''}
        </span>
        ${durHtml}
      </button>
      ${this.openInLinks(t)}
    </li>`;
      }).join('\n');

      return `<div class="post-album" id="${albumDomId}"
     data-pcms-album='${albumJson}'
     data-pcms-album-title="${titleH}"
     data-pcms-album-kind="${kind}"
     data-pcms-playlist-id="${this.escape(id)}">
${isAdmin ? `  <div class="post-album-actions" role="group" aria-label="Playlist beheren">
    <a class="post-album-action" href="/admin/playlists?edit=${this.escape(id)}" title="Bewerk playlist" aria-label="Bewerk playlist">
      <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 20h9"/><path d="M16.5 3.5a2.121 2.121 0 0 1 3 3L7 19l-4 1 1-4 12.5-12.5z"/></svg>
    </a>
    <button type="button" class="post-album-action is-danger" data-pcms-playlist-delete="${this.escape(id)}" data-pcms-playlist-title="${titleH}" title="Verwijder playlist" aria-label="Verwijder playlist">
      <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="3 6 5 6 21 6"/><path d="M19 6l-1 14a2 2 0 0 1-2 2H8a2 2 0 0 1-2-2L5 6"/><line x1="10" y1="11" x2="10" y2="17"/><line x1="14" y1="11" x2="14" y2="17"/><path d="M9 6V4a2 2 0 0 1 2-2h2a2 2 0 0 1 2 2v2"/></svg>
    </button>
  </div>
` : ''}  <div class="post-album-header">
    <button type="button" class="post-album-cover-btn"
            data-pcms-track-url="${firstUrl}"
            data-pcms-album-id="${albumDomId}"
            aria-label="Speel ${kind === 'playlist' ? 'playlist' : 'album'}">
      ${coverH
        ? `<span class="post-album-cover" style="background-image:url('${coverH}')"></span>`
        : `<span class="post-album-cover post-album-cover-empty">
             <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M9 17V5l12-2v12"/><circle cx="6" cy="17" r="3" fill="currentColor"/><circle cx="18" cy="15" r="3" fill="currentColor"/></svg>
           </span>`}
      <span class="post-album-cover-play" aria-hidden="true">
        <svg viewBox="0 0 24 24"><path d="M8 4l12 8-12 8z" fill="currentColor"/></svg>
      </span>
    </button>
    <div class="post-album-info">
      <p class="post-album-label">${kindLabel}</p>
      <h3 class="post-album-title">${titleH}</h3>
      ${artistH ? `<p class="post-album-artist">${artistH}</p>` : ''}
      <p class="post-album-meta">${metaLine}</p>
    </div>
  </div>
  <ol class="post-album-tracks post-album-tracks-compact" data-album-kind="${kind}">
${trackItems}
  </ol>
</div>`;
    });
  }

  /**
   * Human-readable label for a provider slug. Used by external-link buttons.
   */
  static platformLabel(provider) {
    return ({
      spotify: 'Spotify',
      bandcamp: 'Bandcamp',
      soundcloud: 'SoundCloud',
      applemusic: 'Apple Music',
      youtube: 'YouTube',
      vimeo: 'Vimeo',
      tidal: 'Tidal',
      deezer: 'Deezer',
      mixcloud: 'Mixcloud',
    })[provider] || 'External link';
  }

  /**
   * Detect platform from URL purely by hostname (covers more services than
   * detectProvider, which is embed-focused). Used for [[link:url]] rendering.
   */
  static detectLinkPlatform(url) {
    try {
      const host = new URL(url).hostname.toLowerCase();
      if (host.includes('open.spotify.com') || host === 'spotify.com') return 'spotify';
      if (host.includes('bandcamp.com')) return 'bandcamp';
      if (host.includes('soundcloud.com')) return 'soundcloud';
      if (host.includes('music.apple.com') || host.includes('itunes.apple.com')) return 'applemusic';
      if (host.includes('youtube.com') || host.includes('youtu.be') || host.includes('music.youtube.com')) return 'youtube';
      if (host.includes('vimeo.com')) return 'vimeo';
      if (host.includes('tidal.com')) return 'tidal';
      if (host.includes('deezer.com')) return 'deezer';
      if (host.includes('mixcloud.com')) return 'mixcloud';
      return 'other';
    } catch (e) {
      return null;
    }
  }

  /**
   * Replace [[link:url]] or [[link:url|Custom Label]] shortcodes with a
   * branded "Open in <Platform>" anchor (no iframe). Opens in new tab.
   * Per Robin's v9: "External link, click = open platform (target _blank)".
   */
  static embedExternalLinkShortcodes(html) {
    if (!html) return html;
    return html.replace(/\[\[link:([^\]|]+)(?:\|([^\]]+))?\]\]/g, (match, rawUrl, customLabel) => {
      const url = rawUrl.trim();
      if (!/^https?:\/\//i.test(url)) return match;
      const platform = this.detectLinkPlatform(url) || 'other';
      const label = (customLabel || '').trim();
      const platformLabel = this.platformLabel(platform);
      const buttonText = label || `Open in ${platformLabel}`;
      const urlH = this.escape(url);
      const textH = this.escape(buttonText);
      return `<a class="post-audio-external post-audio-external--${platform}" href="${urlH}" target="_blank" rel="noopener noreferrer" data-platform="${platform}">
  <span class="pae-icon" aria-hidden="true">▶</span>
  <span class="pae-text">${textH}</span>
  <span class="pae-arrow" aria-hidden="true">↗</span>
</a>`;
    });
  }

  static escape(str) {
    return str
      .replace(/&/g, '&amp;')
      .replace(/</g, '&lt;')
      .replace(/>/g, '&gt;')
      .replace(/"/g, '&quot;')
      .replace(/'/g, '&#39;');
  }
}

export default AudioEmbedService;