<?php
/**
 * 404 Emails → Forms: the workspace's signup forms, made and edited here in
 * WordPress - start from a ready-made form, change the words, fields,
 * colours and thank-you message with a live preview, publish, and put it on
 * the site. Every change is saved straight to 404 Emails
 * (/api/v1/manage/forms), so the app and WordPress always show the same form.
 *
 * Views (the `view` query argument): the list (default), `new`, and
 * `edit&form=PUBLIC_ID`. Changes are POSTed here and handled on admin_init
 * (capability + nonce), then redirected back with a short message.
 *
 * @package Emails404
 */

namespace Emails404;

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

class Forms_Page {

	const ACTION_CREATE  = 'emails404_create_form';
	const ACTION_SAVE    = 'emails404_save_form';
	const ACTION_PUBLISH = 'emails404_publish_form';

	const LIST_TRANSIENT     = 'emails404_managed_forms';
	const STARTERS_TRANSIENT = 'emails404_form_starters_';
	const FLASH_TRANSIENT    = 'emails404_flash_';

	/** Defaults the hosted form uses when a colour isn't set - the preview starts from these. */
	const DEFAULT_COLORS = array(
		'backgroundColor' => '#ffffff',
		'textColor'       => '#111827',
		'accentColor'     => '#2b6f5d',
		'buttonTextColor' => '#ffffff',
	);

	public static function register() {
		add_action( 'admin_init', array( __CLASS__, 'handle_post' ) );
	}

	public static function url( array $args = array() ) {
		return add_query_arg( array_merge( array( 'page' => Admin_Page::MENU_SLUG ), $args ), admin_url( 'admin.php' ) );
	}

	/** The WordPress admin's language as 404 Emails knows it. */
	public static function api_locale() {
		$locale = function_exists( 'get_user_locale' ) ? get_user_locale() : get_locale();
		return 0 === strpos( (string) $locale, 'cs' ) ? 'cs' : 'en';
	}

	/**
	 * The forms (newest first) with sign-up counts, and the workspace's
	 * groups - cached for a minute, dropped after every change made here.
	 *
	 * @return array{ok:bool,forbidden:bool,items:array,groups:array,signups7:int}
	 */
	public static function load_forms() {
		$cached = get_transient( self::LIST_TRANSIENT );
		if ( is_array( $cached ) ) {
			return $cached;
		}
		$empty = array(
			'ok'        => false,
			'forbidden' => false,
			'items'     => array(),
			'groups'    => array(),
			'signups7'  => 0,
		);
		if ( ! Settings::is_connected() ) {
			return $empty;
		}
		$response = Api_Client::from_settings()->manage_list_forms();
		if ( ! $response->success ) {
			$empty['forbidden'] = 'forbidden_scope' === $response->error_category;
			return $empty;
		}
		$result = array(
			'ok'        => true,
			'forbidden' => false,
			'items'     => isset( $response->data['items'] ) && is_array( $response->data['items'] ) ? $response->data['items'] : array(),
			'groups'    => isset( $response->data['groups'] ) && is_array( $response->data['groups'] ) ? $response->data['groups'] : array(),
			'signups7'  => isset( $response->data['signupsLast7Days'] ) ? (int) $response->data['signupsLast7Days'] : 0,
		);
		set_transient( self::LIST_TRANSIENT, $result, MINUTE_IN_SECONDS );
		return $result;
	}

	/** After any change: the lists here, in the block and in "every page" are refreshed. */
	public static function forget_cached_forms() {
		delete_transient( self::LIST_TRANSIENT );
		delete_transient( Admin_Page::FORMS_TRANSIENT );
	}

	// --- Changes ----------------------------------------------------------------

	public static function handle_post() {
		if ( ! isset( $_POST['emails404_forms_action'] ) || ! current_user_can( Admin_Page::CAPABILITY ) ) {
			return;
		}
		$action = sanitize_key( wp_unslash( $_POST['emails404_forms_action'] ) );
		$client = Api_Client::from_settings();

		if ( self::ACTION_CREATE === $action ) {
			check_admin_referer( self::ACTION_CREATE, 'emails404_nonce' );
			$starter = isset( $_POST['emails404_starter'] ) ? sanitize_key( wp_unslash( $_POST['emails404_starter'] ) ) : '';
			$name    = isset( $_POST['emails404_name'] ) ? sanitize_text_field( wp_unslash( $_POST['emails404_name'] ) ) : '';
			$body    = '' !== $starter ? array( 'starterId' => $starter ) : array( 'name' => $name );
			$result  = $client->manage_create_form( $body, self::api_locale() );
			self::forget_cached_forms();
			if ( $result->success && ! empty( $result->data['form']['id'] ) ) {
				self::redirect( array( 'view' => 'edit', 'form' => (string) $result->data['form']['id'], 'emails404_notice' => 'created' ) );
			}
			self::flash( 'error', self::error_message( $result, __( 'The form couldn\'t be created. Please try again.', '404-emails' ) ) );
			self::redirect( array( 'view' => 'new' ) );
		}

		if ( self::ACTION_SAVE === $action ) {
			check_admin_referer( self::ACTION_SAVE, 'emails404_nonce' );
			$form_id = isset( $_POST['emails404_form_id'] ) ? sanitize_text_field( wp_unslash( $_POST['emails404_form_id'] ) ) : '';
			if ( ! Embed::is_valid_form_id( $form_id ) ) {
				self::redirect( array() );
			}
			$raw    = isset( $_POST['emails404_form'] ) && is_array( $_POST['emails404_form'] ) ? wp_unslash( $_POST['emails404_form'] ) : array(); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- each field is cleaned in fields_from_post().
			$fields = self::fields_from_post( $raw );
			$result = $client->manage_update_form( $form_id, $fields );
			self::forget_cached_forms();
			if ( $result->success ) {
				$then = isset( $_POST['emails404_then'] ) ? sanitize_key( wp_unslash( $_POST['emails404_then'] ) ) : '';
				if ( 'publish' === $then ) {
					$published = $client->manage_set_published( $form_id, true );
					if ( ! $published->success ) {
						self::flash( 'error', self::error_message( $published, __( 'Saved, but the form couldn\'t be published.', '404-emails' ) ) );
						self::redirect( array( 'view' => 'edit', 'form' => $form_id ) );
					}
					self::redirect( array( 'view' => 'edit', 'form' => $form_id, 'emails404_notice' => 'published' ) );
				}
				self::redirect( array( 'view' => 'edit', 'form' => $form_id, 'emails404_notice' => 'saved' ) );
			}
			self::flash( 'error', self::error_message( $result, __( 'The form couldn\'t be saved. Please try again.', '404-emails' ) ), $fields );
			self::redirect( array( 'view' => 'edit', 'form' => $form_id ) );
		}

		if ( self::ACTION_PUBLISH === $action ) {
			check_admin_referer( self::ACTION_PUBLISH, 'emails404_nonce' );
			$form_id = isset( $_POST['emails404_form_id'] ) ? sanitize_text_field( wp_unslash( $_POST['emails404_form_id'] ) ) : '';
			$publish = ! empty( $_POST['emails404_publish'] );
			if ( Embed::is_valid_form_id( $form_id ) ) {
				$result = $client->manage_set_published( $form_id, $publish );
				self::forget_cached_forms();
				if ( ! $result->success ) {
					self::flash( 'error', self::error_message( $result, __( 'That didn\'t work. Please try again.', '404-emails' ) ) );
				} else {
					self::flash( 'success', $publish ? __( 'Published. The form can now collect sign-ups on your site.', '404-emails' ) : __( 'Unpublished. The form no longer collects sign-ups.', '404-emails' ) );
				}
			}
			$back = isset( $_POST['emails404_back'] ) && 'edit' === $_POST['emails404_back'] ? array( 'view' => 'edit', 'form' => $form_id ) : array();
			self::redirect( $back );
		}
	}

	/**
	 * The editor's fields as the PATCH body 404 Emails expects. Every field
	 * is sent, so what's saved is exactly what's on screen.
	 *
	 * @param array $raw The unslashed emails404_form[...] fields.
	 * @return array
	 */
	public static function fields_from_post( array $raw ) {
		$text = function ( $key, $multiline = false ) use ( $raw ) {
			if ( ! isset( $raw[ $key ] ) || is_array( $raw[ $key ] ) ) {
				return '';
			}
			return $multiline ? sanitize_textarea_field( (string) $raw[ $key ] ) : sanitize_text_field( (string) $raw[ $key ] );
		};
		$color = function ( $key ) use ( $raw ) {
			$value = isset( $raw[ $key ] ) && is_string( $raw[ $key ] ) ? strtolower( trim( $raw[ $key ] ) ) : '';
			return 1 === preg_match( '/^#[0-9a-f]{6}$/', $value ) ? $value : null;
		};
		$choice = function ( $key, array $allowed ) use ( $raw ) {
			return isset( $raw[ $key ] ) && in_array( $raw[ $key ], $allowed, true ) ? $raw[ $key ] : null;
		};
		$group_ids = array();
		if ( isset( $raw['group_ids'] ) && is_array( $raw['group_ids'] ) ) {
			foreach ( $raw['group_ids'] as $group_id ) {
				if ( is_string( $group_id ) && 1 === preg_match( '/^[A-Za-z0-9_-]{1,64}$/', $group_id ) ) {
					$group_ids[] = $group_id;
				}
			}
		}
		$button = $text( 'button_label' );

		return array(
			'name'               => $text( 'name' ),
			'heading'            => $text( 'heading' ),
			'description'        => $text( 'description', true ),
			'askFirstName'       => ! empty( $raw['ask_first_name'] ),
			'askLastName'        => ! empty( $raw['ask_last_name'] ),
			'consentText'        => $text( 'consent_text' ),
			'successMessage'     => $text( 'success_message', true ),
			'doubleOptInEnabled' => ! empty( $raw['double_opt_in'] ),
			'groupIds'           => array_values( array_unique( $group_ids ) ),
			'style'              => array(
				'buttonLabel'     => '' !== $button ? $button : null,
				'backgroundColor' => $color( 'background_color' ),
				'textColor'       => $color( 'text_color' ),
				'accentColor'     => $color( 'accent_color' ),
				'buttonTextColor' => $color( 'button_text_color' ),
				'borderRadius'    => $choice( 'border_radius', array( 'square', 'subtle', 'rounded' ) ),
				'width'           => $choice( 'width', array( 'narrow', 'standard' ) ),
			),
		);
	}

	/** 404 Emails' own explanation when it gave one, else a general message. */
	private static function error_message( Api_Response $result, $fallback ) {
		if ( 'forbidden_scope' === $result->error_category ) {
			return __( 'This site needs to be connected again before forms can be changed here.', '404-emails' );
		}
		if ( in_array( $result->error_category, array( 'timeout', 'unreachable', 'server_error' ), true ) ) {
			return __( '404 Emails couldn\'t be reached. Please try again in a moment.', '404-emails' );
		}
		$message = is_array( $result->data ) && isset( $result->data['error']['message'] ) ? (string) $result->data['error']['message'] : '';
		if ( is_array( $result->data ) && ! empty( $result->data['error']['fields'] ) && is_array( $result->data['error']['fields'] ) ) {
			$labels = self::field_labels();
			$parts  = array();
			foreach ( $result->data['error']['fields'] as $field => $problem ) {
				$parts[] = ( isset( $labels[ $field ] ) ? $labels[ $field ] : $field ) . ': ' . $problem;
			}
			$message = __( 'Some fields need fixing:', '404-emails' ) . ' ' . implode( '; ', $parts );
		}
		return '' !== $message ? $message : $fallback;
	}

	private static function field_labels() {
		return array(
			'name'           => __( 'Form name', '404-emails' ),
			'heading'        => __( 'Heading', '404-emails' ),
			'description'    => __( 'Text under the heading', '404-emails' ),
			'consentText'    => __( 'Consent line', '404-emails' ),
			'successMessage' => __( 'Thank-you message', '404-emails' ),
			'style'          => __( 'Design', '404-emails' ),
		);
	}

	private static function flash( $type, $message, $values = null ) {
		set_transient(
			self::FLASH_TRANSIENT . get_current_user_id(),
			array(
				'type'    => $type,
				'message' => $message,
				'values'  => $values,
			),
			MINUTE_IN_SECONDS
		);
	}

	private static function take_flash() {
		$key   = self::FLASH_TRANSIENT . get_current_user_id();
		$flash = get_transient( $key );
		delete_transient( $key );
		return is_array( $flash ) ? $flash : null;
	}

	private static function redirect( array $args ) {
		wp_safe_redirect( self::url( $args ) );
		exit;
	}

	// --- Screens ----------------------------------------------------------------

	public static function render() {
		if ( ! current_user_can( Admin_Page::CAPABILITY ) ) {
			wp_die( esc_html__( 'You do not have permission to access this page.', '404-emails' ) );
		}
		// phpcs:disable WordPress.Security.NonceVerification.Recommended -- choosing what to show only.
		$view    = isset( $_GET['view'] ) ? sanitize_key( wp_unslash( $_GET['view'] ) ) : '';
		$form_id = isset( $_GET['form'] ) ? sanitize_text_field( wp_unslash( $_GET['form'] ) ) : '';
		// phpcs:enable
		$flash = self::take_flash();
		?>
		<div class="wrap emails404">
			<h1 class="emails404-title"><img src="<?php echo esc_url( EMAILS404_PLUGIN_URL . 'assets/logo.png' ); ?>" alt="<?php esc_attr_e( '404 Emails', '404-emails' ); ?>" class="emails404-logo" /></h1>
			<?php
			Admin_Page::render_redirect_notice();
			if ( $flash ) {
				printf( '<div class="notice notice-%1$s is-dismissible"><p>%2$s</p></div>', esc_attr( 'success' === $flash['type'] ? 'success' : 'error' ), esc_html( $flash['message'] ) );
			}

			if ( ! Settings::is_connected() ) {
				Admin_Page::render_welcome_card();
				echo '</div>';
				return;
			}

			$forms = self::load_forms();
			if ( $forms['forbidden'] ) {
				self::render_reconnect_card();
			} elseif ( ! $forms['ok'] ) {
				echo '<div class="notice notice-error inline"><p>' . esc_html__( '404 Emails couldn\'t be reached. Please try again in a moment.', '404-emails' ) . '</p></div>';
			} elseif ( 'new' === $view ) {
				self::render_new();
			} elseif ( 'edit' === $view && Embed::is_valid_form_id( $form_id ) ) {
				self::render_edit( $form_id, $forms, $flash && is_array( $flash['values'] ) ? $flash['values'] : null );
			} else {
				self::render_list( $forms );
			}
			?>
		</div>
		<?php
	}

	/** Connected before plugin 1.3.0: the key can't edit forms - one click fixes that. */
	private static function render_reconnect_card() {
		?>
		<div class="emails404-card emails404-welcome">
			<h2><?php esc_html_e( 'Make and edit forms right here', '404-emails' ); ?></h2>
			<p><?php esc_html_e( 'This site was connected before forms could be edited in WordPress. Connect it again to allow it - your settings stay as they are.', '404-emails' ); ?></p>
			<?php Admin_Page::render_connect_button(); ?>
		</div>
		<?php
	}

	private static function render_list( array $forms ) {
		$workspace = Settings::get_workspace_name();
		?>
		<div class="emails404-card emails404-connected">
			<p class="emails404-connected-line">
				<span class="emails404-dot" aria-hidden="true"></span>
				<?php
				if ( '' !== $workspace ) {
					/* translators: %s: the 404 Emails workspace's name */
					printf( esc_html__( 'Connected to %s', '404-emails' ), '<strong>' . esc_html( $workspace ) . '</strong>' );
				} else {
					esc_html_e( 'Connected to 404 Emails', '404-emails' );
				}
				?>
				<span class="emails404-muted">·
				<?php
				/* translators: %s: number of sign-ups */
				echo esc_html( sprintf( _n( '%s sign-up in the last 7 days', '%s sign-ups in the last 7 days', $forms['signups7'], '404-emails' ), number_format_i18n( $forms['signups7'] ) ) );
				?>
				</span>
			</p>
			<a class="button" href="<?php echo esc_url( Settings::get_platform_url() ); ?>" target="_blank" rel="noopener noreferrer"><?php esc_html_e( 'Open 404 Emails', '404-emails' ); ?></a>
		</div>

		<div class="emails404-heading-row">
			<h2 class="emails404-page-title"><?php esc_html_e( 'Forms', '404-emails' ); ?></h2>
			<a class="button button-primary emails404-primary" href="<?php echo esc_url( self::url( array( 'view' => 'new' ) ) ); ?>"><?php esc_html_e( 'New form', '404-emails' ); ?></a>
		</div>

		<?php if ( empty( $forms['items'] ) ) : ?>
			<div class="emails404-card emails404-empty-state">
				<h3><?php esc_html_e( 'Make your first form for this site', '404-emails' ); ?></h3>
				<p><?php esc_html_e( 'Start from a ready-made form in your brand colours - change the words, then show it on your site.', '404-emails' ); ?></p>
				<a class="button button-primary emails404-primary" href="<?php echo esc_url( self::url( array( 'view' => 'new' ) ) ); ?>"><?php esc_html_e( 'Browse ready-made forms', '404-emails' ); ?></a>
			</div>
			<?php return; ?>
		<?php endif; ?>

		<table class="widefat striped emails404-forms">
			<thead>
				<tr>
					<th scope="col"><?php esc_html_e( 'Form', '404-emails' ); ?></th>
					<th scope="col"><?php esc_html_e( 'Status', '404-emails' ); ?></th>
					<th scope="col"><?php esc_html_e( 'Sign-ups', '404-emails' ); ?></th>
					<th scope="col"><?php esc_html_e( 'Shortcode', '404-emails' ); ?></th>
					<th scope="col"><span class="screen-reader-text"><?php esc_html_e( 'Actions', '404-emails' ); ?></span></th>
				</tr>
			</thead>
			<tbody>
				<?php foreach ( $forms['items'] as $form ) : ?>
					<?php
					$published = isset( $form['status'] ) && 'PUBLISHED' === $form['status'];
					$edit_url  = self::url( array( 'view' => 'edit', 'form' => $form['id'] ) );
					?>
					<tr>
						<td>
							<a class="row-title" href="<?php echo esc_url( $edit_url ); ?>"><?php echo esc_html( $form['name'] ); ?></a>
							<?php if ( ! empty( $form['heading'] ) ) : ?>
								<br /><span class="emails404-muted"><?php echo esc_html( $form['heading'] ); ?></span>
							<?php endif; ?>
						</td>
						<td><span class="emails404-badge <?php echo $published ? 'is-published' : 'is-draft'; ?>"><?php echo $published ? esc_html__( 'Published', '404-emails' ) : esc_html__( 'Draft', '404-emails' ); ?></span></td>
						<td>
							<?php
							/* translators: 1: sign-ups in the last 7 days, 2: all sign-ups */
							echo esc_html( sprintf( __( '%1$s this week · %2$s in total', '404-emails' ), number_format_i18n( (int) $form['signups']['last7Days'] ), number_format_i18n( (int) $form['signups']['total'] ) ) );
							?>
						</td>
						<td>
							<?php if ( $published ) : ?>
								<input type="text" readonly class="code emails404-shortcode" value="<?php echo esc_attr( '[404emails form="' . $form['id'] . '"]' ); ?>" aria-label="<?php esc_attr_e( 'Shortcode', '404-emails' ); ?>" />
							<?php else : ?>
								<span class="emails404-muted"><?php esc_html_e( 'Publish it first', '404-emails' ); ?></span>
							<?php endif; ?>
						</td>
						<td class="emails404-row-actions">
							<a href="<?php echo esc_url( $edit_url ); ?>"><?php esc_html_e( 'Edit', '404-emails' ); ?></a>
							<?php self::render_publish_button( $form['id'], ! $published, 'list' ); ?>
						</td>
					</tr>
				<?php endforeach; ?>
			</tbody>
		</table>
		<p class="description"><?php esc_html_e( 'To show a published form: add the "404 Emails form" block to a page, paste its shortcode, or turn on "Show a form on every page" in Settings.', '404-emails' ); ?></p>
		<?php
	}

	private static function render_publish_button( $form_id, $publish, $back ) {
		?>
		<form method="post" class="emails404-inline-form">
			<?php wp_nonce_field( self::ACTION_PUBLISH, 'emails404_nonce' ); ?>
			<input type="hidden" name="emails404_forms_action" value="<?php echo esc_attr( self::ACTION_PUBLISH ); ?>" />
			<input type="hidden" name="emails404_form_id" value="<?php echo esc_attr( $form_id ); ?>" />
			<input type="hidden" name="emails404_publish" value="<?php echo $publish ? '1' : ''; ?>" />
			<input type="hidden" name="emails404_back" value="<?php echo esc_attr( $back ); ?>" />
			<button type="submit" class="button-link"><?php echo $publish ? esc_html__( 'Publish', '404-emails' ) : esc_html__( 'Unpublish', '404-emails' ); ?></button>
		</form>
		<?php
	}

	private static function render_new() {
		$locale   = self::api_locale();
		$starters = get_transient( self::STARTERS_TRANSIENT . $locale );
		if ( ! is_array( $starters ) ) {
			$response = Api_Client::from_settings()->manage_list_starters( $locale );
			$starters = $response->success && isset( $response->data['items'] ) && is_array( $response->data['items'] ) ? $response->data['items'] : array();
			if ( ! empty( $starters ) ) {
				set_transient( self::STARTERS_TRANSIENT . $locale, $starters, HOUR_IN_SECONDS );
			}
		}
		?>
		<p><a href="<?php echo esc_url( self::url() ); ?>">&larr; <?php esc_html_e( 'Forms', '404-emails' ); ?></a></p>
		<h2 class="emails404-page-title"><?php esc_html_e( 'New form', '404-emails' ); ?></h2>
		<p class="emails404-muted"><?php esc_html_e( 'Pick a ready-made form - you can change everything next.', '404-emails' ); ?></p>

		<div class="emails404-starters">
			<?php foreach ( $starters as $starter ) : ?>
				<?php $style = isset( $starter['style'] ) && is_array( $starter['style'] ) ? $starter['style'] : array(); ?>
				<div class="emails404-starter">
					<div class="emails404-starter-art" aria-hidden="true">
						<div class="emails404-mini-form" style="<?php echo esc_attr( self::style_css( $style ) ); ?>">
							<span class="emails404-mini-heading"><?php echo esc_html( isset( $starter['heading'] ) ? $starter['heading'] : '' ); ?></span>
							<span class="emails404-mini-field"></span>
							<span class="emails404-mini-button" style="<?php echo esc_attr( self::button_css( $style ) ); ?>"><?php echo esc_html( isset( $style['buttonLabel'] ) ? $style['buttonLabel'] : __( 'Subscribe', '404-emails' ) ); ?></span>
						</div>
					</div>
					<div class="emails404-starter-body">
						<span class="emails404-kind"><?php echo esc_html( $starter['kind'] ); ?></span>
						<h3><?php echo esc_html( $starter['name'] ); ?></h3>
						<p><?php echo esc_html( $starter['description'] ); ?></p>
						<form method="post">
							<?php wp_nonce_field( self::ACTION_CREATE, 'emails404_nonce' ); ?>
							<input type="hidden" name="emails404_forms_action" value="<?php echo esc_attr( self::ACTION_CREATE ); ?>" />
							<input type="hidden" name="emails404_starter" value="<?php echo esc_attr( $starter['id'] ); ?>" />
							<button type="submit" class="button"><?php esc_html_e( 'Use this form', '404-emails' ); ?></button>
						</form>
					</div>
				</div>
			<?php endforeach; ?>
		</div>

		<div class="emails404-card emails404-blank">
			<h3><?php esc_html_e( 'Or start from a blank form', '404-emails' ); ?></h3>
			<form method="post" class="emails404-blank-form">
				<?php wp_nonce_field( self::ACTION_CREATE, 'emails404_nonce' ); ?>
				<input type="hidden" name="emails404_forms_action" value="<?php echo esc_attr( self::ACTION_CREATE ); ?>" />
				<label for="emails404_name"><?php esc_html_e( 'Form name', '404-emails' ); ?></label>
				<input type="text" id="emails404_name" name="emails404_name" class="regular-text" maxlength="120" required />
				<button type="submit" class="button"><?php esc_html_e( 'Create form', '404-emails' ); ?></button>
				<p class="description"><?php esc_html_e( 'Only you and your team see the name.', '404-emails' ); ?></p>
			</form>
		</div>
		<?php
	}

	/**
	 * The editor: settings on the left, a live preview on the right
	 * (assets/forms-editor.js updates it as you type - and works without
	 * JavaScript too, it just doesn't update until saved).
	 *
	 * @param string     $form_id The form's public id.
	 * @param array      $forms   load_forms().
	 * @param array|null $values  What was submitted, when a save was refused - shown again so nothing is lost.
	 */
	private static function render_edit( $form_id, array $forms, $values ) {
		$form = null;
		foreach ( $forms['items'] as $item ) {
			if ( $item['id'] === $form_id ) {
				$form = $item;
			}
		}
		if ( null === $form ) {
			echo '<div class="notice notice-error inline"><p>' . esc_html__( 'That form wasn\'t found - it may have been archived in 404 Emails.', '404-emails' ) . '</p></div>';
			self::render_list( $forms );
			return;
		}

		$style = isset( $form['style'] ) && is_array( $form['style'] ) ? $form['style'] : array();
		$v     = array(
			'name'               => $form['name'],
			'heading'            => (string) $form['heading'],
			'description'        => (string) $form['description'],
			'askFirstName'       => (bool) $form['askFirstName'],
			'askLastName'        => (bool) $form['askLastName'],
			'consentText'        => $form['consentText'],
			'successMessage'     => (string) $form['successMessage'],
			'doubleOptInEnabled' => (bool) $form['doubleOptInEnabled'],
			'groupIds'           => isset( $form['groupIds'] ) ? (array) $form['groupIds'] : array(),
			'style'              => $style,
		);
		if ( is_array( $values ) ) {
			$v = array_merge( $v, $values );
			$v['style'] = array_merge( $style, array_filter( isset( $values['style'] ) ? (array) $values['style'] : array(), 'is_string' ) );
		}
		$s         = $v['style'];
		$color     = function ( $key ) use ( $s ) {
			return isset( $s[ $key ] ) && is_string( $s[ $key ] ) ? $s[ $key ] : self::DEFAULT_COLORS[ $key ];
		};
		$published = 'PUBLISHED' === $form['status'];
		$button    = isset( $s['buttonLabel'] ) && is_string( $s['buttonLabel'] ) && '' !== $s['buttonLabel'] ? $s['buttonLabel'] : __( 'Subscribe', '404-emails' );
		?>
		<p><a href="<?php echo esc_url( self::url() ); ?>">&larr; <?php esc_html_e( 'Forms', '404-emails' ); ?></a></p>
		<form method="post" class="emails404-editor" id="emails404-editor">
			<?php wp_nonce_field( self::ACTION_SAVE, 'emails404_nonce' ); ?>
			<input type="hidden" name="emails404_forms_action" value="<?php echo esc_attr( self::ACTION_SAVE ); ?>" />
			<input type="hidden" name="emails404_form_id" value="<?php echo esc_attr( $form_id ); ?>" />

			<div class="emails404-editor-bar">
				<h2 class="emails404-page-title"><?php echo esc_html( $form['name'] ); ?></h2>
				<span class="emails404-badge <?php echo $published ? 'is-published' : 'is-draft'; ?>"><?php echo $published ? esc_html__( 'Published', '404-emails' ) : esc_html__( 'Draft', '404-emails' ); ?></span>
				<span class="emails404-bar-actions">
					<button type="submit" class="button"><?php esc_html_e( 'Save', '404-emails' ); ?></button>
					<?php if ( ! $published ) : ?>
						<button type="submit" name="emails404_then" value="publish" class="button button-primary emails404-primary"><?php esc_html_e( 'Save and publish', '404-emails' ); ?></button>
					<?php endif; ?>
				</span>
			</div>

			<div class="emails404-editor-columns">
				<div class="emails404-editor-settings">
					<h3><?php esc_html_e( 'Content', '404-emails' ); ?></h3>
					<p><label for="f-heading"><?php esc_html_e( 'Heading', '404-emails' ); ?></label>
						<input type="text" id="f-heading" name="emails404_form[heading]" class="widefat" maxlength="120" value="<?php echo esc_attr( $v['heading'] ); ?>" data-preview="heading" /></p>
					<p><label for="f-description"><?php esc_html_e( 'Text under the heading', '404-emails' ); ?></label>
						<textarea id="f-description" name="emails404_form[description]" class="widefat" rows="2" maxlength="500" data-preview="description"><?php echo esc_textarea( $v['description'] ); ?></textarea></p>
					<fieldset class="emails404-fieldset">
						<legend><?php esc_html_e( 'Ask for', '404-emails' ); ?></legend>
						<label><input type="checkbox" checked disabled /> <?php esc_html_e( 'Email', '404-emails' ); ?></label>
						<label><input type="checkbox" name="emails404_form[ask_first_name]" value="1" data-preview="firstName" <?php checked( $v['askFirstName'] ); ?> /> <?php esc_html_e( 'First name', '404-emails' ); ?></label>
						<label><input type="checkbox" name="emails404_form[ask_last_name]" value="1" data-preview="lastName" <?php checked( $v['askLastName'] ); ?> /> <?php esc_html_e( 'Surname', '404-emails' ); ?></label>
					</fieldset>
					<p><label for="f-button"><?php esc_html_e( 'Button text', '404-emails' ); ?></label>
						<input type="text" id="f-button" name="emails404_form[button_label]" class="widefat" maxlength="40" value="<?php echo esc_attr( isset( $s['buttonLabel'] ) && is_string( $s['buttonLabel'] ) ? $s['buttonLabel'] : '' ); ?>" placeholder="<?php esc_attr_e( 'Subscribe', '404-emails' ); ?>" data-preview="button" /></p>
					<p><label for="f-consent"><?php esc_html_e( 'Consent line', '404-emails' ); ?></label>
						<input type="text" id="f-consent" name="emails404_form[consent_text]" class="widefat" maxlength="300" required value="<?php echo esc_attr( $v['consentText'] ); ?>" data-preview="consent" />
						<span class="description"><?php esc_html_e( 'Next to the tick box people must tick to subscribe. Changing it starts a new consent version in 404 Emails.', '404-emails' ); ?></span></p>

					<h3><?php esc_html_e( 'After signing up', '404-emails' ); ?></h3>
					<p><label for="f-success"><?php esc_html_e( 'Thank-you message', '404-emails' ); ?></label>
						<textarea id="f-success" name="emails404_form[success_message]" class="widefat" rows="2" maxlength="500" data-preview="success"><?php echo esc_textarea( $v['successMessage'] ); ?></textarea></p>
					<p><label><input type="checkbox" name="emails404_form[double_opt_in]" value="1" <?php checked( $v['doubleOptInEnabled'] ); ?> /> <?php esc_html_e( 'Send a confirmation email first (double opt-in)', '404-emails' ); ?></label>
						<span class="description"><?php esc_html_e( 'Needs your own verified sending domain in 404 Emails.', '404-emails' ); ?></span></p>
					<?php if ( ! empty( $forms['groups'] ) ) : ?>
						<fieldset class="emails404-fieldset emails404-groups">
							<legend><?php esc_html_e( 'Add new subscribers to these groups', '404-emails' ); ?></legend>
							<?php foreach ( $forms['groups'] as $group ) : ?>
								<label><input type="checkbox" name="emails404_form[group_ids][]" value="<?php echo esc_attr( $group['id'] ); ?>" <?php checked( in_array( $group['id'], (array) $v['groupIds'], true ) ); ?> /> <?php echo esc_html( $group['name'] ); ?></label>
							<?php endforeach; ?>
						</fieldset>
					<?php endif; ?>

					<h3><?php esc_html_e( 'Design', '404-emails' ); ?></h3>
					<div class="emails404-colors">
						<label><input type="color" name="emails404_form[background_color]" value="<?php echo esc_attr( $color( 'backgroundColor' ) ); ?>" data-preview="background" /> <?php esc_html_e( 'Background', '404-emails' ); ?></label>
						<label><input type="color" name="emails404_form[text_color]" value="<?php echo esc_attr( $color( 'textColor' ) ); ?>" data-preview="text" /> <?php esc_html_e( 'Text', '404-emails' ); ?></label>
						<label><input type="color" name="emails404_form[accent_color]" value="<?php echo esc_attr( $color( 'accentColor' ) ); ?>" data-preview="accent" /> <?php esc_html_e( 'Button', '404-emails' ); ?></label>
						<label><input type="color" name="emails404_form[button_text_color]" value="<?php echo esc_attr( $color( 'buttonTextColor' ) ); ?>" data-preview="buttonText" /> <?php esc_html_e( 'Button text', '404-emails' ); ?></label>
					</div>
					<p>
						<label for="f-radius"><?php esc_html_e( 'Corners', '404-emails' ); ?></label>
						<select id="f-radius" name="emails404_form[border_radius]" data-preview="radius">
							<?php foreach ( array( 'square' => __( 'Square', '404-emails' ), 'subtle' => __( 'Slightly rounded', '404-emails' ), 'rounded' => __( 'Rounded', '404-emails' ) ) as $value => $label ) : ?>
								<option value="<?php echo esc_attr( $value ); ?>" <?php selected( isset( $s['borderRadius'] ) ? $s['borderRadius'] : 'subtle', $value ); ?>><?php echo esc_html( $label ); ?></option>
							<?php endforeach; ?>
						</select>
						<label for="f-width" class="emails404-inline-field"><?php esc_html_e( 'Width', '404-emails' ); ?></label>
						<select id="f-width" name="emails404_form[width]" data-preview="width">
							<?php foreach ( array( 'narrow' => __( 'Narrow', '404-emails' ), 'standard' => __( 'Standard', '404-emails' ) ) as $value => $label ) : ?>
								<option value="<?php echo esc_attr( $value ); ?>" <?php selected( isset( $s['width'] ) ? $s['width'] : 'standard', $value ); ?>><?php echo esc_html( $label ); ?></option>
							<?php endforeach; ?>
						</select>
					</p>
					<p><a href="<?php echo esc_url( $form['editUrl'] ); ?>" target="_blank" rel="noopener noreferrer"><?php esc_html_e( 'More design options in 404 Emails', '404-emails' ); ?> ↗</a></p>

					<h3><?php esc_html_e( 'Form name', '404-emails' ); ?></h3>
					<p><input type="text" name="emails404_form[name]" class="widefat" maxlength="120" required value="<?php echo esc_attr( $v['name'] ); ?>" aria-label="<?php esc_attr_e( 'Form name', '404-emails' ); ?>" />
						<span class="description"><?php esc_html_e( 'Only you and your team see the name.', '404-emails' ); ?></span></p>
				</div>

				<div class="emails404-editor-preview">
					<div class="emails404-preview-toggle" role="group" aria-label="<?php esc_attr_e( 'Preview', '404-emails' ); ?>">
						<button type="button" class="button is-active" data-preview-show="form"><?php esc_html_e( 'Form', '404-emails' ); ?></button>
						<button type="button" class="button" data-preview-show="success"><?php esc_html_e( 'Thank-you message', '404-emails' ); ?></button>
					</div>
					<div class="emails404-preview-stage">
						<div class="emails404-preview-card" id="emails404-preview" style="<?php echo esc_attr( self::style_css( $s ) ); ?>">
							<div class="emails404-preview-form" data-preview-panel="form">
								<h4 data-preview-target="heading"><?php echo esc_html( $v['heading'] ); ?></h4>
								<p data-preview-target="description"><?php echo esc_html( $v['description'] ); ?></p>
								<span class="emails404-preview-label" data-preview-target="firstName" <?php echo $v['askFirstName'] ? '' : 'hidden'; ?>><?php esc_html_e( 'First name', '404-emails' ); ?><span class="emails404-preview-input"></span></span>
								<span class="emails404-preview-label" data-preview-target="lastName" <?php echo $v['askLastName'] ? '' : 'hidden'; ?>><?php esc_html_e( 'Surname', '404-emails' ); ?><span class="emails404-preview-input"></span></span>
								<span class="emails404-preview-label"><?php esc_html_e( 'Email', '404-emails' ); ?><span class="emails404-preview-input"></span></span>
								<span class="emails404-preview-consent"><span class="emails404-preview-box"></span><span data-preview-target="consent"><?php echo esc_html( $v['consentText'] ); ?></span></span>
								<span class="emails404-preview-button" data-preview-target="button" data-default="<?php esc_attr_e( 'Subscribe', '404-emails' ); ?>" style="<?php echo esc_attr( self::button_css( $s ) ); ?>"><?php echo esc_html( $button ); ?></span>
							</div>
							<div class="emails404-preview-success" data-preview-panel="success" hidden>
								<span class="emails404-preview-tick" style="<?php echo esc_attr( self::button_css( $s ) ); ?>">✓</span>
								<p data-preview-target="success"><?php echo esc_html( $v['successMessage'] ); ?></p>
							</div>
						</div>
					</div>
					<p class="description"><?php esc_html_e( 'A close likeness - the real form uses your brand fonts. See it on your site after publishing.', '404-emails' ); ?></p>

					<div class="emails404-card emails404-show-on-site">
						<h3><?php esc_html_e( 'Show it on your site', '404-emails' ); ?></h3>
						<?php if ( $published ) : ?>
							<p><?php esc_html_e( 'Add the "404 Emails form" block to a page, or paste this shortcode:', '404-emails' ); ?></p>
							<input type="text" readonly class="code widefat emails404-shortcode" value="<?php echo esc_attr( '[404emails form="' . $form_id . '"]' ); ?>" aria-label="<?php esc_attr_e( 'Shortcode', '404-emails' ); ?>" />
							<p><a href="<?php echo esc_url( admin_url( 'admin.php?page=' . Admin_Page::SETTINGS_SLUG . '#emails404-every-page' ) ); ?>"><?php esc_html_e( 'Or show it on every page as a pop-up or corner button', '404-emails' ); ?> →</a></p>
						<?php else : ?>
							<p><?php esc_html_e( 'Publish the form first - then add it to a page with the block or shortcode, or show it on every page.', '404-emails' ); ?></p>
						<?php endif; ?>
					</div>
				</div>
			</div>
		</form>
		<?php if ( $published ) : ?>
			<?php self::render_publish_button( $form_id, false, 'edit' ); ?>
		<?php endif; ?>
		<?php
	}

	/** The preview card's colours, corners and width - the same values the hosted form uses. */
	public static function style_css( array $style ) {
		$get    = function ( $key ) use ( $style ) {
			return isset( $style[ $key ] ) && is_string( $style[ $key ] ) && 1 === preg_match( '/^#[0-9a-fA-F]{6}$/', $style[ $key ] ) ? $style[ $key ] : self::DEFAULT_COLORS[ $key ];
		};
		$radius = array(
			'square'  => 0,
			'subtle'  => 6,
			'rounded' => 12,
		);
		$width  = array(
			'narrow'   => 384,
			'standard' => 448,
		);
		$r      = isset( $style['borderRadius'], $radius[ $style['borderRadius'] ] ) ? $radius[ $style['borderRadius'] ] : 6;
		$w      = isset( $style['width'], $width[ $style['width'] ] ) ? $width[ $style['width'] ] : 448;
		return sprintf( 'background:%s;color:%s;border-radius:%dpx;max-width:%dpx;--emails404-accent:%s;--emails404-button-text:%s;', $get( 'backgroundColor' ), $get( 'textColor' ), $r, $w, $get( 'accentColor' ), $get( 'buttonTextColor' ) );
	}

	private static function button_css( array $style ) {
		$accent = isset( $style['accentColor'] ) && is_string( $style['accentColor'] ) ? $style['accentColor'] : self::DEFAULT_COLORS['accentColor'];
		$text   = isset( $style['buttonTextColor'] ) && is_string( $style['buttonTextColor'] ) ? $style['buttonTextColor'] : self::DEFAULT_COLORS['buttonTextColor'];
		return sprintf( 'background:%s;color:%s;', $accent, $text );
	}
}