<?php
/**
 * Plugin Name: AwoSign
 * Description: All-in-one corporate identity studio in 10 Global Languages (TR, EN, Chinese 中文, Arabic العربية RTL, DE, RU, ES, FR, JA, KO) + Bilingual Mode: multi-template email signatures, digital vCard cards, 85x55mm business cards, CR80 vertical staff ID badges, and company invoice & IBAN bank cards with WooCommerce BACS support.
 * Version: 2.1.0
 * Requires at least: 6.4
 * Requires PHP: 7.4
 * Author: AwoSign
 * License: GPL-2.0-or-later
 * License URI: https://www.gnu.org/licenses/gpl-2.0.html
 * Text Domain: awosign
 * Domain Path: /languages
 */
if ( ! defined( 'ABSPATH' ) ) {
    exit;
}

define( 'AWOSIGN_VERSION', '2.1.0' );
define( 'AWOSIGN_OPTION_KEY', 'awosign_workspace_data_v1' );
define( 'AWOSIGN_BACKUP_OPTION_KEY', 'awosign_workspace_backup_prev' );

/**
 * Supported global card languages (v2.1.0 Global Multi-Language Edition).
 *
 * @return array<int, string>
 */
function awosign_get_supported_languages() {
    return array( 'tr', 'en', 'zh', 'ar', 'de', 'ru', 'es', 'fr', 'ja', 'ko' );
}

/**
 * Resolve WordPress Custom Logo or Site Icon URL if available.
 */
function awosign_get_wp_site_logo_url() {
    $custom_logo_id = get_theme_mod( 'custom_logo' );
    if ( $custom_logo_id ) {
        $url = wp_get_attachment_image_url( $custom_logo_id, 'full' );
        if ( $url ) {
            return $url;
        }
    }
    $site_icon = get_site_icon_url( 512 );
    return $site_icon ? $site_icon : '';
}

/**
 * Format an IBAN into 4-character groups for display.
 *
 * @param string $iban Raw IBAN string.
 * @return string
 */
function awosign_format_iban_display( $iban ) {
    $cleaned = strtoupper( preg_replace( '/\s+/', '', (string) $iban ) );
    if ( '' === $cleaned ) {
        return '';
    }
    return trim( chunk_split( $cleaned, 4, ' ' ) );
}

/**
 * Default workspace state structure (v5: Global 10-Language + Decoupled UI Language + Bilingual Signatures, Business Cards, CR80 Staff Badges & Invoice/IBAN Cards).
 */
function awosign_get_default_workspace() {
    $site_name = get_bloginfo( 'name' );
    $site_url  = home_url( '/' );
    $comp_name = $site_name ? $site_name : 'Example Studio A.Ş.';
    return array(
        'version'         => 5,
        'activeProfileId' => 'prof_1',
        'brand'           => array(
            'company'        => $comp_name,
            'companyAlt'     => '',
            'brand'          => '#172e49',
            'accent'         => '#e7b52e',
            'website'        => $site_url ? $site_url : 'https://example.com',
            'address'        => '123 Example Street, Levent, Istanbul, TR',
            'logo'           => '',
            'logoUrl'        => awosign_get_wp_site_logo_url(),
            'sigTemplate'    => 'classic',
            'uiLanguage'     => 'tr',
            'language'       => 'tr',
            'theme'          => 'auto',
            // Badge (CR80 54x86mm) shared back-side fields
            'emergency'      => '+90 212 444 0 112 (İSG & Güvenlik)',
            'badgeRules'     => 'Bu kimlik kartı kurum mülkiyetindedir. Görev süresince görünür şekilde taşınması zorunludur. Bulunduğunda lütfen güvenlik birimine teslim ediniz.',
            // Billing & Invoice (AwoCard) shared fields
            'taxOffice'      => 'Büyük Mükellefler V.D.',
            'taxId'          => '1234567890',
            'mersis'         => '0123456789000015',
            'kep'            => 'ornek@hs01.kep.tr',
            'billingPhone'   => '+90 212 555 00 00',
            'billingEmail'   => 'muhasebe@example.com',
            'wooBacsEnabled' => false,
        ),
        'profiles'        => array(
            array(
                'id'         => 'prof_1',
                'person'     => 'Alex Morgan',
                'personAlt'  => '',
                'job'        => 'Creative Director',
                'jobAlt'     => '',
                'department' => 'Tasarım & Mühendislik',
                'staffNo'    => 'PER-2026-001',
                'blood'      => 'A Rh (+)',
                'roleBadge'  => 'YETKİLİ / MÜHENDİS',
                'photo'      => '',
                'photoUrl'   => '',
                'phone'      => '+90 555 123 4567',
                'email'      => 'alex@example.com',
                'qrMode'     => 'url',
                'qrUrl'      => '',
                'social'     => array(
                    'LinkedIn'  => array( 'enabled' => true, 'value' => 'example' ),
                    'Instagram' => array( 'enabled' => true, 'value' => 'example' ),
                    'Facebook'  => array( 'enabled' => true, 'value' => 'example' ),
                ),
            ),
        ),
        'banks'           => array(
            array(
                'id'       => 'bank_1',
                'holder'   => $comp_name,
                'bank'     => 'Garanti BBVA',
                'branch'   => 'Levent Ticari (0412)',
                'iban'     => 'TR330006100519786457841326',
                'currency' => 'TRY',
                'swift'    => 'TGBATRISXXX',
            ),
            array(
                'id'       => 'bank_2',
                'holder'   => $comp_name,
                'bank'     => 'Türkiye İş Bankası',
                'branch'   => 'Maslak Kurumsal (1205)',
                'iban'     => 'TR170006400000212050012345',
                'currency' => 'EUR',
                'swift'    => 'ISBKTRISXXX',
            ),
        ),
    );
}

/**
 * Retrieve saved workspace merged with v5 defaults and automatic schema migration backup (AWO-QS-08).
 */
function awosign_get_workspace() {
    $defaults = awosign_get_default_workspace();
    $saved    = get_option( AWOSIGN_OPTION_KEY, null );
    if ( ! is_array( $saved ) || empty( $saved['profiles'] ) || ! is_array( $saved['profiles'] ) ) {
        return $defaults;
    }

    // Automatic non-destructive backup when upgrading from schema version < 5.
    $saved_ver = isset( $saved['version'] ) ? (int) $saved['version'] : 1;
    if ( $saved_ver < 5 ) {
        update_option( AWOSIGN_BACKUP_OPTION_KEY, $saved, false );
        $saved['version'] = 5;
    }

    $saved['brand'] = array_merge( $defaults['brand'], isset( $saved['brand'] ) && is_array( $saved['brand'] ) ? $saved['brand'] : array() );
    if ( empty( $saved['banks'] ) || ! is_array( $saved['banks'] ) ) {
        $saved['banks'] = $defaults['banks'];
    }
    foreach ( $saved['profiles'] as $idx => $p ) {
        $saved['profiles'][ $idx ] = array_merge( $defaults['profiles'][0], is_array( $p ) ? $p : array() );
    }
    return $saved;
}

/**
 * Register WP Admin Menu.
 */
function awosign_register_menu() {
    add_menu_page(
        __( 'AwoSign Corporate Identity Studio', 'awosign' ),
        'AwoSign',
        'manage_options',
        'awosign',
        'awosign_render_page',
        'dashicons-id-alt',
        80
    );
}
add_action( 'admin_menu', 'awosign_register_menu' );

/**
 * Enqueue Admin Designer Assets + WP Media Library + Localize Saved Workspace & Nonce.
 */
function awosign_enqueue_assets( $hook ) {
    if ( 'toplevel_page_awosign' !== $hook || ! current_user_can( 'manage_options' ) ) {
        return;
    }
    wp_enqueue_media();
    wp_enqueue_style( 'awosign-designer', plugins_url( 'assets/designer.css', __FILE__ ), array(), AWOSIGN_VERSION );
    wp_enqueue_script( 'awosign-qrcode', plugins_url( 'assets/qrcode.js', __FILE__ ), array(), '1.4.4', true );
    wp_enqueue_script( 'awosign-designer', plugins_url( 'assets/designer.js', __FILE__ ), array( 'awosign-qrcode' ), AWOSIGN_VERSION, true );

    wp_localize_script(
        'awosign-designer',
        'awosignWpConfig',
        array(
            'ajaxUrl'     => admin_url( 'admin-ajax.php' ),
            'nonce'       => wp_create_nonce( 'awosign_save_workspace_nonce' ),
            'siteLogoUrl' => esc_url_raw( awosign_get_wp_site_logo_url() ),
            'siteName'    => sanitize_text_field( get_bloginfo( 'name' ) ),
            'siteUrl'     => esc_url_raw( home_url( '/' ) ),
            'workspace'   => awosign_get_workspace(),
        )
    );
}
add_action( 'admin_enqueue_scripts', 'awosign_enqueue_assets' );

/**
 * Render Admin Page.
 */
function awosign_render_page() {
    if ( ! current_user_can( 'manage_options' ) ) {
        wp_die( esc_html__( 'You do not have permission to access this page.', 'awosign' ) );
    }
    require __DIR__ . '/designer-view.php';
}

/**
 * Sanitize a data URL or HTTP(S) URL image field.
 *
 * @param string $raw Raw image string.
 * @return string
 */
function awosign_sanitize_image_field( $raw ) {
    $raw = (string) $raw;
    if ( '' === $raw ) {
        return '';
    }
    if ( preg_match( '/^data:image\/(png|jpeg|webp|svg\+xml);base64,[a-zA-Z0-9+\/=]+$/', $raw ) && strlen( $raw ) < 3500000 ) {
        return $raw;
    }
    if ( filter_var( $raw, FILTER_VALIDATE_URL ) ) {
        return esc_url_raw( $raw, array( 'http', 'https' ) );
    }
    return '';
}

/**
 * Strip leading spreadsheet formula triggers (=, +, -, @) from imported text fields (AWO-QS-03).
 *
 * @param string $val Input text.
 * @return string
 */
function awosign_sanitize_safe_text( $val ) {
    $clean = sanitize_text_field( (string) $val );
    return ltrim( $clean, "=+-@\t\r" );
}

/**
 * Sanitize and Save Workspace via AJAX (manage_options + Nonce protected).
 */
function awosign_ajax_save_workspace() {
    if ( ! current_user_can( 'manage_options' ) ) {
        wp_send_json_error( array( 'message' => __( 'Unauthorized operation (manage_options required).', 'awosign' ) ), 403 );
    }
    check_ajax_referer( 'awosign_save_workspace_nonce', 'nonce' );

    $raw_json = isset( $_POST['workspace'] ) ? sanitize_textarea_field( wp_unslash( $_POST['workspace'] ) ) : '';
    $decoded  = json_decode( $raw_json, true );
    if ( ! is_array( $decoded ) || empty( $decoded['profiles'] ) || ! is_array( $decoded['profiles'] ) ) {
        wp_send_json_error( array( 'message' => __( 'Invalid workspace payload format.', 'awosign' ) ), 400 );
    }

    $brand_in     = isset( $decoded['brand'] ) && is_array( $decoded['brand'] ) ? $decoded['brand'] : array();
    $brand_color  = isset( $brand_in['brand'] ) && preg_match( '/^#[0-9a-fA-F]{6}$/', $brand_in['brand'] ) ? $brand_in['brand'] : '#172e49';
    $accent_color = isset( $brand_in['accent'] ) && preg_match( '/^#[0-9a-fA-F]{6}$/', $brand_in['accent'] ) ? $brand_in['accent'] : '#e7b52e';

    $sig_tpl = isset( $brand_in['sigTemplate'] ) && in_array( $brand_in['sigTemplate'], array( 'classic', 'compact', 'banner' ), true )
        ? $brand_in['sigTemplate']
        : 'classic';

    $supported_langs = awosign_get_supported_languages();
    $lang_code       = ( isset( $brand_in['language'] ) && in_array( $brand_in['language'], $supported_langs, true ) )
        ? $brand_in['language']
        : 'tr';
    $ui_lang_code    = ( isset( $brand_in['uiLanguage'] ) && 'en' === $brand_in['uiLanguage'] ) ? 'en' : 'tr';

    $clean_brand = array(
        'company'        => awosign_sanitize_safe_text( isset( $brand_in['company'] ) ? $brand_in['company'] : '' ),
        'companyAlt'     => awosign_sanitize_safe_text( isset( $brand_in['companyAlt'] ) ? $brand_in['companyAlt'] : '' ),
        'brand'          => $brand_color,
        'accent'         => $accent_color,
        'website'        => esc_url_raw( isset( $brand_in['website'] ) ? $brand_in['website'] : '', array( 'http', 'https' ) ),
        'address'        => sanitize_textarea_field( isset( $brand_in['address'] ) ? $brand_in['address'] : '' ),
        'logo'           => awosign_sanitize_image_field( isset( $brand_in['logo'] ) ? $brand_in['logo'] : '' ),
        'logoUrl'        => esc_url_raw( isset( $brand_in['logoUrl'] ) ? $brand_in['logoUrl'] : '', array( 'http', 'https' ) ),
        'sigTemplate'    => $sig_tpl,
        'uiLanguage'     => $ui_lang_code,
        'language'       => $lang_code,
        'theme'          => ( isset( $brand_in['theme'] ) && in_array( $brand_in['theme'], array( 'auto', 'dark', 'light' ), true ) ) ? $brand_in['theme'] : 'auto',
        'emergency'      => awosign_sanitize_safe_text( isset( $brand_in['emergency'] ) ? $brand_in['emergency'] : '' ),
        'badgeRules'     => sanitize_textarea_field( isset( $brand_in['badgeRules'] ) ? $brand_in['badgeRules'] : '' ),
        'taxOffice'      => awosign_sanitize_safe_text( isset( $brand_in['taxOffice'] ) ? $brand_in['taxOffice'] : '' ),
        'taxId'          => awosign_sanitize_safe_text( isset( $brand_in['taxId'] ) ? $brand_in['taxId'] : '' ),
        'mersis'         => awosign_sanitize_safe_text( isset( $brand_in['mersis'] ) ? $brand_in['mersis'] : '' ),
        'kep'            => awosign_sanitize_safe_text( isset( $brand_in['kep'] ) ? $brand_in['kep'] : '' ),
        'billingPhone'   => awosign_sanitize_safe_text( isset( $brand_in['billingPhone'] ) ? $brand_in['billingPhone'] : '' ),
        'billingEmail'   => sanitize_email( isset( $brand_in['billingEmail'] ) ? $brand_in['billingEmail'] : '' ),
        'wooBacsEnabled' => ! empty( $brand_in['wooBacsEnabled'] ),
    );

    $clean_profiles = array();
    foreach ( array_slice( $decoded['profiles'], 0, 150 ) as $idx => $p ) {
        if ( ! is_array( $p ) ) {
            continue;
        }
        $pid = isset( $p['id'] ) ? preg_replace( '/[^a-zA-Z0-9_-]/', '', (string) $p['id'] ) : '';
        if ( ! $pid ) {
            $pid = 'prof_' . ( $idx + 1 );
        }
        $social_in    = isset( $p['social'] ) && is_array( $p['social'] ) ? $p['social'] : array();
        $clean_social = array();
        foreach ( $social_in as $plat => $sdata ) {
            $plat_key = preg_replace( '/[^a-zA-Z0-9]/', '', (string) $plat );
            if ( $plat_key && is_array( $sdata ) ) {
                $clean_social[ $plat_key ] = array(
                    'enabled' => ! empty( $sdata['enabled'] ),
                    'value'   => awosign_sanitize_safe_text( isset( $sdata['value'] ) ? $sdata['value'] : '' ),
                );
            }
        }
        $clean_profiles[] = array(
            'id'         => $pid,
            'person'     => awosign_sanitize_safe_text( isset( $p['person'] ) ? $p['person'] : '' ),
            'personAlt'  => awosign_sanitize_safe_text( isset( $p['personAlt'] ) ? $p['personAlt'] : '' ),
            'job'        => awosign_sanitize_safe_text( isset( $p['job'] ) ? $p['job'] : '' ),
            'jobAlt'     => awosign_sanitize_safe_text( isset( $p['jobAlt'] ) ? $p['jobAlt'] : '' ),
            'department' => awosign_sanitize_safe_text( isset( $p['department'] ) ? $p['department'] : '' ),
            'staffNo'    => awosign_sanitize_safe_text( isset( $p['staffNo'] ) ? $p['staffNo'] : '' ),
            'blood'      => awosign_sanitize_safe_text( isset( $p['blood'] ) ? $p['blood'] : 'A Rh (+)' ),
            'roleBadge'  => awosign_sanitize_safe_text( isset( $p['roleBadge'] ) ? $p['roleBadge'] : 'PERSONEL' ),
            'photo'      => awosign_sanitize_image_field( isset( $p['photo'] ) ? $p['photo'] : '' ),
            'photoUrl'   => esc_url_raw( isset( $p['photoUrl'] ) ? $p['photoUrl'] : '', array( 'http', 'https' ) ),
            'phone'      => awosign_sanitize_safe_text( isset( $p['phone'] ) ? $p['phone'] : '' ),
            'email'      => sanitize_email( isset( $p['email'] ) ? $p['email'] : '' ),
            'qrMode'     => ( isset( $p['qrMode'] ) && 'vcard' === $p['qrMode'] ) ? 'vcard' : 'url',
            'qrUrl'      => esc_url_raw( isset( $p['qrUrl'] ) ? $p['qrUrl'] : '', array( 'http', 'https' ) ),
            'social'     => $clean_social,
        );
    }

    if ( empty( $clean_profiles ) ) {
        $clean_profiles = awosign_get_default_workspace()['profiles'];
    }

    $clean_banks = array();
    $banks_in    = isset( $decoded['banks'] ) && is_array( $decoded['banks'] ) ? array_slice( $decoded['banks'], 0, 20 ) : array();
    foreach ( $banks_in as $b_idx => $b_item ) {
        if ( ! is_array( $b_item ) ) {
            continue;
        }
        $clean_banks[] = array(
            'id'       => awosign_sanitize_safe_text( isset( $b_item['id'] ) ? $b_item['id'] : 'bank_' . ( $b_idx + 1 ) ),
            'holder'   => awosign_sanitize_safe_text( isset( $b_item['holder'] ) ? $b_item['holder'] : '' ),
            'bank'     => awosign_sanitize_safe_text( isset( $b_item['bank'] ) ? $b_item['bank'] : '' ),
            'branch'   => awosign_sanitize_safe_text( isset( $b_item['branch'] ) ? $b_item['branch'] : '' ),
            'iban'     => awosign_sanitize_safe_text( isset( $b_item['iban'] ) ? $b_item['iban'] : '' ),
            'currency' => awosign_sanitize_safe_text( isset( $b_item['currency'] ) ? $b_item['currency'] : 'TRY' ),
            'swift'    => awosign_sanitize_safe_text( isset( $b_item['swift'] ) ? $b_item['swift'] : '' ),
        );
    }

    $active_id = isset( $decoded['activeProfileId'] ) ? preg_replace( '/[^a-zA-Z0-9_-]/', '', (string) $decoded['activeProfileId'] ) : $clean_profiles[0]['id'];

    $to_save = array(
        'version'         => 5,
        'activeProfileId' => $active_id,
        'brand'           => $clean_brand,
        'profiles'        => $clean_profiles,
        'banks'           => $clean_banks,
        'updatedAt'       => current_time( 'mysql' ),
    );

    update_option( AWOSIGN_OPTION_KEY, $to_save, false );

    wp_send_json_success(
        array(
            'message'   => __( 'AwoSign workspace saved to WordPress database.', 'awosign' ),
            'workspace' => $to_save,
        )
    );
}
add_action( 'wp_ajax_awosign_save_workspace', 'awosign_ajax_save_workspace' );

/**
 * Render CR80 Vertical Staff ID Badge via Shortcode ([awosign type="badge" id="prof_1"] or [awobadge]).
 * Privacy-by-Default (AWO-QS-03 / K-01): Health data (blood group) and personal phone are hidden on public pages unless show_blood="1" / show_phone="1" is explicitly set.
 *
 * @param array<string, mixed> $profile    Selected staff profile.
 * @param array<string, mixed> $brand      Brand configuration.
 * @param bool                 $show_blood Whether to display blood type publicly.
 * @param bool                 $show_phone Whether to display phone number publicly.
 * @return string
 */
function awosign_render_badge_shortcode_html( $profile, $brand, $show_blood = false, $show_phone = false ) {
    $company      = isset( $brand['company'] ) ? $brand['company'] : '';
    $company_alt  = isset( $brand['companyAlt'] ) ? $brand['companyAlt'] : '';
    $brand_color  = isset( $brand['brand'] ) ? $brand['brand'] : '#172e49';
    $accent_color = isset( $brand['accent'] ) ? $brand['accent'] : '#e7b52e';
    $logo         = ! empty( $brand['logoUrl'] ) ? $brand['logoUrl'] : ( isset( $brand['logo'] ) ? $brand['logo'] : '' );
    $emergency    = isset( $brand['emergency'] ) ? $brand['emergency'] : '';
    $rules        = isset( $brand['badgeRules'] ) ? $brand['badgeRules'] : '';

    $person     = isset( $profile['person'] ) ? $profile['person'] : '';
    $person_alt = isset( $profile['personAlt'] ) ? $profile['personAlt'] : '';
    $job        = isset( $profile['job'] ) ? $profile['job'] : '';
    $job_alt    = isset( $profile['jobAlt'] ) ? $profile['jobAlt'] : '';
    $department = isset( $profile['department'] ) ? $profile['department'] : '';
    $staff_no   = isset( $profile['staffNo'] ) ? $profile['staffNo'] : 'PER-001';
    $blood      = isset( $profile['blood'] ) ? $profile['blood'] : 'A Rh (+)';
    $role_badge = isset( $profile['roleBadge'] ) ? $profile['roleBadge'] : 'PERSONEL';
    $phone      = isset( $profile['phone'] ) ? $profile['phone'] : '';
    $photo      = ! empty( $profile['photoUrl'] ) ? $profile['photoUrl'] : ( isset( $profile['photo'] ) ? $profile['photo'] : '' );

    $words    = preg_split( '/\s+/', trim( $person ) );
    $initials = '';
    if ( is_array( $words ) ) {
        foreach ( array_slice( $words, 0, 2 ) as $w ) {
            $initials .= mb_strtoupper( mb_substr( $w, 0, 1 ) );
        }
    }
    if ( '' === $initials ) {
        $initials = 'AS';
    }

    $qr_parts   = array(
        'ID:' . $staff_no,
        $person . ( $person_alt ? ' (' . $person_alt . ')' : '' ),
        $job,
        $company,
    );
    if ( $show_blood && $blood ) {
        $qr_parts[] = 'KAN:' . $blood;
    }
    if ( $show_phone && $phone ) {
        $qr_parts[] = 'TEL:' . $phone;
    }
    $qr_payload = implode( ' | ', $qr_parts );
    $uid        = 'awosign-badge-' . wp_unique_id();

    ob_start();
    ?>
    <div id="<?php echo esc_attr( $uid ); ?>" class="awosign-sc-badge-wrap" style="display:flex;gap:20px;flex-wrap:wrap;justify-content:center;margin:18px auto;font-family:'Segoe UI','PingFang SC','Microsoft YaHei','Noto Sans SC','Tahoma',Arial,sans-serif;">
        <div class="as-cr80-card" style="width:54mm;height:86mm;background:#fff;color:#0f172a;border-radius:3mm;overflow:hidden;box-shadow:0 6px 22px rgba(0,0,0,0.18);display:flex;flex-direction:column;justify-content:space-between;text-align:center;border:1px solid #cbd5e1;">
            <div style="background:<?php echo esc_attr( $brand_color ); ?>;color:#fff;padding:2.5mm 3mm 2mm;border-bottom:1.2mm solid <?php echo esc_attr( $accent_color ); ?>;">
                <div style="width:12mm;height:2.2mm;background:#e2e8f0;border-radius:2mm;margin:0 auto 1.5mm;"></div>
                <?php if ( $logo ) : ?>
                    <img src="<?php echo esc_attr( $logo ); ?>" alt="<?php echo esc_attr( $company ); ?>" style="max-height:7mm;max-width:32mm;object-fit:contain;display:block;margin:1mm auto;">
                <?php endif; ?>
                <div style="font-size:7.5pt;font-weight:800;letter-spacing:0.3px;"><?php echo esc_html( $company ); ?></div>
                <?php if ( $company_alt ) : ?>
                    <div style="font-size:6pt;color:<?php echo esc_attr( $accent_color ); ?>;font-weight:700;"><?php echo esc_html( $company_alt ); ?></div>
                <?php endif; ?>
            </div>
            <div style="padding:1mm 3mm;flex:1;display:flex;flex-direction:column;justify-content:center;align-items:center;">
                <div style="width:22mm;height:22mm;border-radius:50%;border:0.8mm solid <?php echo esc_attr( $accent_color ); ?>;background:#e2e8f0;color:<?php echo esc_attr( $brand_color ); ?>;display:flex;align-items:center;justify-content:center;font-weight:800;font-size:14pt;overflow:hidden;margin-bottom:2mm;">
                    <?php if ( $photo ) : ?>
                        <img src="<?php echo esc_attr( $photo ); ?>" alt="<?php echo esc_attr( $person ); ?>" style="width:100%;height:100%;object-fit:cover;">
                    <?php else : ?>
                        <span><?php echo esc_html( $initials ); ?></span>
                    <?php endif; ?>
                </div>
                <div style="font-size:11pt;font-weight:800;color:#0f172a;line-height:1.15;"><?php echo esc_html( $person ); ?></div>
                <?php if ( $person_alt ) : ?>
                    <div style="font-size:7.2pt;font-weight:700;color:#475569;"><?php echo esc_html( $person_alt ); ?></div>
                <?php endif; ?>
                <div style="font-size:7.5pt;font-weight:700;color:#334155;margin-top:0.8mm;"><?php echo esc_html( $job ); ?><?php echo $job_alt ? ' · ' . esc_html( $job_alt ) : ''; ?></div>
                <div style="font-size:6.8pt;color:#64748b;margin-top:0.5mm;"><?php echo esc_html( $department ); ?></div>
                <div style="display:flex;gap:1.5mm;margin-top:2mm;font-size:6.4pt;font-weight:700;flex-wrap:wrap;justify-content:center;">
                    <span style="background:#f1f5f9;border:0.2mm solid #cbd5e1;padding:0.7mm 1.5mm;border-radius:1mm;">ID: <?php echo esc_html( $staff_no ); ?></span>
                    <?php if ( $show_blood && $blood ) : ?>
                        <span style="background:#fee2e2;color:#991b1b;border:0.2mm solid #fca5a5;padding:0.7mm 1.5mm;border-radius:1mm;">🩸 <?php echo esc_html( $blood ); ?></span>
                    <?php endif; ?>
                </div>
            </div>
            <div style="background:<?php echo esc_attr( $accent_color ); ?>;color:#0f172a;font-weight:800;font-size:7.5pt;padding:1.6mm;letter-spacing:0.6px;text-transform:uppercase;">
                <?php echo esc_html( $role_badge ); ?>
            </div>
        </div>

        <div class="as-cr80-card" style="width:54mm;height:86mm;background:#fff;color:#0f172a;border-radius:3mm;overflow:hidden;box-shadow:0 6px 22px rgba(0,0,0,0.18);display:flex;flex-direction:column;justify-content:space-between;text-align:center;border:1px solid #cbd5e1;">
            <div style="background:<?php echo esc_attr( $brand_color ); ?>;color:#fff;padding:2.5mm;border-bottom:1.2mm solid <?php echo esc_attr( $accent_color ); ?>;">
                <div style="width:12mm;height:2.2mm;background:#e2e8f0;border-radius:2mm;margin:0 auto 1.5mm;"></div>
                <div style="font-size:7pt;font-weight:800;">KURUMSAL KİMLİK &amp; GİRİŞ KARTI</div>
            </div>
            <div style="padding:2.5mm 3.5mm;flex:1;display:flex;flex-direction:column;justify-content:space-between;align-items:center;">
                <div class="awosign-sc-qr" data-qr="<?php echo esc_attr( $qr_payload ); ?>" style="width:20mm;height:20mm;display:flex;align-items:center;justify-content:center;"></div>
                <div style="width:100%;text-align:left;font-size:6.4pt;background:#f8fafc;border:0.2mm solid #cbd5e1;border-radius:1.2mm;padding:1.8mm;line-height:1.35;">
                    <?php if ( $show_phone && $phone ) : ?>
                        <div><b>Tel:</b> <?php echo esc_html( $phone ); ?></div>
                    <?php endif; ?>
                    <?php if ( $show_blood && $blood ) : ?>
                        <div><b>Kan Grubu:</b> <span style="color:#b91c1c;font-weight:700;"><?php echo esc_html( $blood ); ?></span></div>
                    <?php endif; ?>
                    <div><b>Acil / İSG:</b> <?php echo esc_html( $emergency ? $emergency : '-' ); ?></div>
                </div>
                <div style="font-size:5.6pt;color:#475569;line-height:1.28;text-align:center;">
                    <?php echo esc_html( $rules ); ?>
                </div>
            </div>
            <div style="background:<?php echo esc_attr( $brand_color ); ?>;color:#fff;font-size:6pt;padding:1.2mm;">
                <?php echo esc_html( $company ); ?>
            </div>
        </div>
    </div>
    <script>
    (function(){
        var wrap = document.getElementById(<?php echo wp_json_encode( $uid ); ?>);
        if (!wrap) return;
        var qrBox = wrap.querySelector('.awosign-sc-qr');
        if (qrBox && typeof qrcode === 'function') {
            try {
                if (qrcode.stringToBytesFuncs && qrcode.stringToBytesFuncs['UTF-8']) {
                    qrcode.stringToBytes = qrcode.stringToBytesFuncs['UTF-8'];
                }
                var q = qrcode(0, 'L');
                q.addData(qrBox.getAttribute('data-qr') || '', 'Byte');
                q.make();
                qrBox.innerHTML = '<img src="' + q.createDataURL(4, 2) + '" alt="QR" style="width:19mm;height:19mm;object-fit:contain;">';
            } catch (e) {}
        }
    })();
    </script>
    <?php
    return (string) ob_get_clean();
}

/**
 * Render Company Billing & Bank / IBAN Cards via Shortcode ([awosign type="billing"] or [awocard mode="all|invoice|bank"]).
 *
 * @param array<string, mixed>              $brand Brand and billing configuration.
 * @param array<int, array<string, string>> $banks Saved bank accounts.
 * @param string                            $mode  Display mode: all | invoice | bank.
 * @return string
 */
function awosign_render_billing_shortcode_html( $brand, $banks, $mode = 'all' ) {
    $lang         = isset( $brand['language'] ) ? $brand['language'] : 'tr';
    $is_tr        = ( 'tr' === $lang );
    $is_rtl       = ( 'ar' === $lang );
    $company      = isset( $brand['company'] ) ? $brand['company'] : '';
    $company_alt  = isset( $brand['companyAlt'] ) ? $brand['companyAlt'] : '';
    $brand_color  = isset( $brand['brand'] ) ? $brand['brand'] : '#172e49';
    $accent_color = isset( $brand['accent'] ) ? $brand['accent'] : '#e7b52e';
    $logo         = ! empty( $brand['logoUrl'] ) ? $brand['logoUrl'] : ( isset( $brand['logo'] ) ? $brand['logo'] : '' );
    $uid          = 'awosign-billing-' . wp_unique_id();

    $invoice_rows = array(
        ( $is_tr ? 'Vergi Dairesi' : 'Tax Office' )          => isset( $brand['taxOffice'] ) ? $brand['taxOffice'] : '',
        ( $is_tr ? 'Vergi / VKN No' : 'Tax ID' )             => isset( $brand['taxId'] ) ? $brand['taxId'] : '',
        ( $is_tr ? 'MERSİS No' : 'MERSIS No' )               => isset( $brand['mersis'] ) ? $brand['mersis'] : '',
        ( $is_tr ? 'KEP / E-Fatura' : 'KEP / E-Invoice' )    => isset( $brand['kep'] ) ? $brand['kep'] : '',
        ( $is_tr ? 'Fatura Adresi' : 'Billing Address' )     => isset( $brand['address'] ) ? $brand['address'] : '',
        ( $is_tr ? 'Muhasebe Tel' : 'Billing Phone' )        => ! empty( $brand['billingPhone'] ) ? $brand['billingPhone'] : '',
        ( $is_tr ? 'Muhasebe E-posta' : 'Billing Email' )    => ! empty( $brand['billingEmail'] ) ? $brand['billingEmail'] : '',
    );

    $inv_qr = $company . ' | VD:' . ( $brand['taxOffice'] ?? '' ) . ' | VKN:' . ( $brand['taxId'] ?? '' ) . ' | MERSIS:' . ( $brand['mersis'] ?? '' );

    ob_start();
    ?>
    <div id="<?php echo esc_attr( $uid ); ?>" class="awosign-billing-public" dir="<?php echo $is_rtl ? 'rtl' : 'ltr'; ?>" style="margin:18px auto;font-family:'Segoe UI','PingFang SC','Microsoft YaHei','Noto Sans SC','Tahoma',Arial,sans-serif;">
        <div style="display:grid;grid-template-columns:repeat(auto-fit,minmax(310px,1fr));gap:18px;">
            <?php if ( 'all' === $mode || 'invoice' === $mode ) : ?>
                <div style="background:<?php echo esc_attr( $brand_color ); ?>;color:#fff;border-top:4px solid <?php echo esc_attr( $accent_color ); ?>;border-radius:12px;padding:18px;box-shadow:0 6px 20px rgba(0,0,0,0.16);display:flex;flex-direction:column;justify-content:space-between;">
                    <div>
                        <div style="display:flex;justify-content:space-between;align-items:flex-start;gap:12px;">
                            <div>
                                <?php if ( $logo ) : ?>
                                    <img src="<?php echo esc_attr( $logo ); ?>" alt="<?php echo esc_attr( $company ); ?>" style="max-height:42px;max-width:120px;object-fit:contain;display:block;margin-bottom:6px;">
                                <?php endif; ?>
                                <strong style="font-size:16px;display:block;"><?php echo esc_html( $company ); ?></strong>
                                <?php if ( $company_alt ) : ?>
                                    <span style="font-size:12px;color:#cbd9ea;display:block;"><?php echo esc_html( $company_alt ); ?></span>
                                <?php endif; ?>
                                <span style="font-size:11px;color:<?php echo esc_attr( $accent_color ); ?>;font-weight:800;letter-spacing:0.5px;"><?php echo esc_html( $is_tr ? 'RESMİ FATURA KÜNYESİ' : 'OFFICIAL INVOICE DETAILS' ); ?></span>
                            </div>
                            <div class="awosign-sc-qr" data-qr="<?php echo esc_attr( $inv_qr ); ?>" style="background:#fff;padding:4px;border-radius:6px;width:68px;height:68px;flex-shrink:0;display:flex;align-items:center;justify-content:center;"></div>
                        </div>
                        <div style="margin-top:12px;font-size:12.5px;line-height:1.55;">
                            <?php foreach ( $invoice_rows as $lbl => $val ) : ?>
                                <?php if ( '' !== trim( (string) $val ) ) : ?>
                                    <div style="display:flex;justify-content:space-between;gap:10px;padding:4px 0;border-bottom:1px solid rgba(255,255,255,0.1);">
                                        <span style="color:#b8c8dc;"><?php echo esc_html( $lbl ); ?></span>
                                        <strong style="text-align:right;"><?php echo esc_html( $val ); ?></strong>
                                    </div>
                                <?php endif; ?>
                            <?php endforeach; ?>
                        </div>
                    </div>
                    <?php if ( ! empty( $brand['taxId'] ) ) : ?>
                        <div style="margin-top:12px;display:flex;gap:8px;">
                            <button type="button" class="awosign-copy-btn" data-copy="<?php echo esc_attr( $brand['taxId'] ); ?>" style="background:<?php echo esc_attr( $accent_color ); ?>;color:#102032;border:none;padding:7px 12px;border-radius:6px;font-weight:700;font-size:12px;cursor:pointer;">
                                📋 <?php echo esc_html( $is_tr ? 'Vergi No Kopyala' : 'Copy Tax ID' ); ?>
                            </button>
                        </div>
                    <?php endif; ?>
                </div>
            <?php endif; ?>

            <?php if ( 'all' === $mode || 'bank' === $mode ) : ?>
                <?php foreach ( $banks as $b ) : ?>
                    <?php
                    $fmt_iban   = awosign_format_iban_display( isset( $b['iban'] ) ? $b['iban'] : '' );
                    $clean_iban = strtoupper( preg_replace( '/\s+/', '', (string) ( $b['iban'] ?? '' ) ) );
                    $bank_qr    = 'IBAN:' . $clean_iban . ' | ' . ( $b['holder'] ?? $company ) . ' | ' . ( $b['bank'] ?? '' );
                    ?>
                    <div style="background:<?php echo esc_attr( $brand_color ); ?>;color:#fff;border-top:4px solid <?php echo esc_attr( $accent_color ); ?>;border-radius:12px;padding:18px;box-shadow:0 6px 20px rgba(0,0,0,0.16);display:flex;flex-direction:column;justify-content:space-between;">
                        <div>
                            <div style="display:flex;justify-content:space-between;align-items:flex-start;gap:12px;">
                                <div>
                                    <span style="background:<?php echo esc_attr( $accent_color ); ?>;color:#102032;font-weight:800;font-size:11px;padding:2px 8px;border-radius:4px;display:inline-block;margin-bottom:6px;"><?php echo esc_html( isset( $b['currency'] ) ? $b['currency'] : 'TRY' ); ?></span>
                                    <strong style="font-size:16px;display:block;"><?php echo esc_html( isset( $b['bank'] ) ? $b['bank'] : '' ); ?></strong>
                                    <span style="font-size:12px;color:#b8c8dc;"><?php echo esc_html( isset( $b['branch'] ) ? $b['branch'] : '' ); ?></span>
                                </div>
                                <div class="awosign-sc-qr" data-qr="<?php echo esc_attr( $bank_qr ); ?>" style="background:#fff;padding:4px;border-radius:6px;width:68px;height:68px;flex-shrink:0;display:flex;align-items:center;justify-content:center;"></div>
                            </div>
                            <div style="margin-top:12px;font-size:12.5px;line-height:1.55;">
                                <div style="color:#b8c8dc;font-size:11px;"><?php echo esc_html( $is_tr ? 'Hesap Sahibi' : 'Account Holder' ); ?></div>
                                <div style="font-weight:700;margin-bottom:8px;"><?php echo esc_html( ! empty( $b['holder'] ) ? $b['holder'] : $company ); ?></div>
                                <div style="color:#b8c8dc;font-size:11px;">IBAN</div>
                                <div dir="ltr" style="font-family:monospace;font-size:13.5px;font-weight:800;color:<?php echo esc_attr( $accent_color ); ?>;letter-spacing:0.5px;background:rgba(0,0,0,0.25);padding:7px 10px;border-radius:6px;text-align:left;"><?php echo esc_html( $fmt_iban ); ?></div>
                                <?php if ( ! empty( $b['swift'] ) ) : ?>
                                    <div style="margin-top:6px;font-size:11.5px;color:#cbd9ea;">SWIFT / BIC: <strong><?php echo esc_html( $b['swift'] ); ?></strong></div>
                                <?php endif; ?>
                            </div>
                        </div>
                        <?php if ( '' !== $fmt_iban ) : ?>
                            <div style="margin-top:12px;display:flex;gap:8px;">
                                <button type="button" class="awosign-copy-btn" data-copy="<?php echo esc_attr( $clean_iban ); ?>" style="background:<?php echo esc_attr( $accent_color ); ?>;color:#102032;border:none;padding:7px 12px;border-radius:6px;font-weight:700;font-size:12px;cursor:pointer;">
                                    📋 <?php echo esc_html( $is_tr ? 'IBAN Kopyala' : 'Copy IBAN' ); ?>
                                </button>
                            </div>
                        <?php endif; ?>
                    </div>
                <?php endforeach; ?>
            <?php endif; ?>
        </div>
    </div>
    <script>
    (function(){
        var wrap = document.getElementById(<?php echo wp_json_encode( $uid ); ?>);
        if (!wrap) return;
        wrap.querySelectorAll('.awosign-sc-qr').forEach(function(qrBox){
            if (typeof qrcode === 'function') {
                try {
                    if (qrcode.stringToBytesFuncs && qrcode.stringToBytesFuncs['UTF-8']) {
                        qrcode.stringToBytes = qrcode.stringToBytesFuncs['UTF-8'];
                    }
                    var q = qrcode(0, 'L');
                    q.addData(qrBox.getAttribute('data-qr') || '', 'Byte');
                    q.make();
                    qrBox.innerHTML = '<img src="' + q.createDataURL(3, 2) + '" alt="QR" style="width:60px;height:60px;object-fit:contain;">';
                } catch (e) {}
            }
        });
        wrap.querySelectorAll('.awosign-copy-btn').forEach(function(btn){
            btn.addEventListener('click', function(){
                var txt = btn.getAttribute('data-copy') || '';
                if (navigator.clipboard && txt) {
                    navigator.clipboard.writeText(txt);
                    var orig = btn.textContent;
                    btn.textContent = '✓ Kopyalandı!';
                    setTimeout(function(){ btn.textContent = orig; }, 1800);
                }
            });
        });
    })();
    </script>
    <?php
    return (string) ob_get_clean();
}

/**
 * Frontend Shortcode: [awosign id="prof_1" type="card|badge|billing|invoice|bank" theme="auto" show_blood="0" show_phone="0"]
 */
function awosign_render_shortcode( $atts ) {
    $atts = shortcode_atts(
        array(
            'id'         => '',
            'type'       => 'card',
            'mode'       => 'all',
            'theme'      => 'auto',
            'show_blood' => '0',
            'show_phone' => '0',
        ),
        $atts,
        'awosign'
    );

    $workspace = awosign_get_workspace();
    $brand     = isset( $workspace['brand'] ) ? $workspace['brand'] : array();
    $profiles  = isset( $workspace['profiles'] ) && is_array( $workspace['profiles'] ) ? $workspace['profiles'] : array();
    $banks     = isset( $workspace['banks'] ) && is_array( $workspace['banks'] ) ? $workspace['banks'] : array();

    wp_enqueue_style( 'awosign-designer', plugins_url( 'assets/designer.css', __FILE__ ), array(), AWOSIGN_VERSION );
    wp_enqueue_script( 'awosign-qrcode', plugins_url( 'assets/qrcode.js', __FILE__ ), array(), '1.4.4', true );

    $type = strtolower( trim( (string) $atts['type'] ) );
    if ( in_array( $type, array( 'billing', 'iban', 'invoice', 'bank' ), true ) ) {
        $b_mode = in_array( $type, array( 'invoice', 'bank' ), true ) ? $type : $atts['mode'];
        return awosign_render_billing_shortcode_html( $brand, $banks, $b_mode );
    }

    if ( empty( $profiles ) ) {
        return '';
    }

    $target_id = $atts['id'] ? $atts['id'] : ( isset( $workspace['activeProfileId'] ) ? $workspace['activeProfileId'] : '' );
    $profile   = $profiles[0];
    foreach ( $profiles as $candidate ) {
        if ( isset( $candidate['id'] ) && $candidate['id'] === $target_id ) {
            $profile = $candidate;
            break;
        }
    }

    if ( 'badge' === $type ) {
        $show_blood = ( '1' === (string) $atts['show_blood'] || 'true' === strtolower( (string) $atts['show_blood'] ) );
        $show_phone = ( '1' === (string) $atts['show_phone'] || 'true' === strtolower( (string) $atts['show_phone'] ) );
        return awosign_render_badge_shortcode_html( $profile, $brand, $show_blood, $show_phone );
    }

    $lang         = isset( $brand['language'] ) ? $brand['language'] : 'tr';
    $is_rtl       = ( 'ar' === $lang );
    $company      = isset( $brand['company'] ) ? $brand['company'] : '';
    $company_alt  = isset( $brand['companyAlt'] ) ? $brand['companyAlt'] : '';
    $brand_color  = isset( $brand['brand'] ) ? $brand['brand'] : '#172e49';
    $accent_color = isset( $brand['accent'] ) ? $brand['accent'] : '#e7b52e';
    $website      = isset( $brand['website'] ) ? $brand['website'] : '';
    $address      = isset( $brand['address'] ) ? $brand['address'] : '';
    $logo         = ! empty( $brand['logoUrl'] ) ? $brand['logoUrl'] : ( isset( $brand['logo'] ) ? $brand['logo'] : '' );

    $person     = isset( $profile['person'] ) ? $profile['person'] : '';
    $person_alt = isset( $profile['personAlt'] ) ? $profile['personAlt'] : '';
    $job        = isset( $profile['job'] ) ? $profile['job'] : '';
    $job_alt    = isset( $profile['jobAlt'] ) ? $profile['jobAlt'] : '';
    $phone      = isset( $profile['phone'] ) ? $profile['phone'] : '';
    $email      = isset( $profile['email'] ) ? $profile['email'] : '';
    $qr_mode    = isset( $profile['qrMode'] ) ? $profile['qrMode'] : 'url';
    $qr_url     = ! empty( $profile['qrUrl'] ) ? $profile['qrUrl'] : $website;

    $full_name = $person . ( $person_alt ? ' (' . $person_alt . ')' : '' );
    $full_org  = $company . ( $company_alt ? ' (' . $company_alt . ')' : '' );
    $full_job  = $job . ( $job_alt ? ' / ' . $job_alt : '' );

    $vcard_lines = array(
        'BEGIN:VCARD',
        'VERSION:3.0',
        'FN;CHARSET=UTF-8:' . $full_name,
        'ORG;CHARSET=UTF-8:' . $full_org,
        'TITLE;CHARSET=UTF-8:' . $full_job,
    );
    if ( $phone ) {
        $vcard_lines[] = 'TEL;TYPE=WORK,VOICE:' . $phone;
    }
    if ( $email ) {
        $vcard_lines[] = 'EMAIL:' . $email;
    }
    if ( $website ) {
        $vcard_lines[] = 'URL:' . $website;
    }
    if ( $address ) {
        $vcard_lines[] = 'ADR;TYPE=WORK;CHARSET=UTF-8:;;' . str_replace( array( "\r\n", "\r", "\n" ), ' ', $address ) . ';;;;';
    }
    $vcard_lines[] = 'END:VCARD';
    $vcard_payload = implode( "\r\n", $vcard_lines );

    $qr_payload = ( 'vcard' === $qr_mode ) ? $vcard_payload : $qr_url;
    $uid        = 'awosign-sc-' . wp_unique_id();
    $theme_attr = in_array( $atts['theme'], array( 'auto', 'dark', 'light' ), true ) ? $atts['theme'] : 'auto';
    $wa_text    = rawurlencode( trim( $full_name . ' — ' . $full_job . ' (' . $full_org . ')' . "\n" . $phone . "\n" . $email . "\n" . $website ) );

    ob_start();
    ?>
    <div id="<?php echo esc_attr( $uid ); ?>" class="awosign-shortcode-card" dir="<?php echo $is_rtl ? 'rtl' : 'ltr'; ?>" data-theme="<?php echo esc_attr( $theme_attr ); ?>" style="--brand:<?php echo esc_attr( $brand_color ); ?>;--accent:<?php echo esc_attr( $accent_color ); ?>;max-width:540px;margin:16px auto;font-family:'Segoe UI','PingFang SC','Microsoft YaHei','Noto Sans SC','Tahoma',Arial,sans-serif;">
        <div class="digital" data-card-dir="<?php echo $is_rtl ? 'rtl' : 'ltr'; ?>" style="width:100%;background:var(--brand);color:#fff;border-top:5px solid var(--accent);padding:24px;border-radius:12px;display:flex;justify-content:space-between;align-items:center;gap:16px;flex-wrap:wrap;box-shadow:0 6px 24px rgba(0,0,0,0.18);">
            <div class="details" style="line-height:1.65;font-size:13px;flex:1;min-width:210px;">
                <?php if ( $logo ) : ?>
                    <img src="<?php echo esc_url( $logo ); ?>" alt="<?php echo esc_attr( $company ); ?>" style="max-width:110px;max-height:70px;object-fit:contain;display:block;margin-bottom:8px;">
                <?php else : ?>
                    <div style="font-size:20px;font-weight:700;margin-bottom:4px;">
                        <?php echo esc_html( $company ); ?>
                        <?php if ( $company_alt ) : ?>
                            <span style="display:block;font-size:13px;color:var(--accent);font-weight:700;"><?php echo esc_html( $company_alt ); ?></span>
                        <?php endif; ?>
                    </div>
                <?php endif; ?>
                <strong style="font-size:20px;display:block;">
                    <?php echo esc_html( $person ); ?>
                    <?php if ( $person_alt ) : ?>
                        <span style="font-size:14px;color:var(--accent);font-weight:700;margin-inline-start:6px;"><?php echo esc_html( $person_alt ); ?></span>
                    <?php endif; ?>
                </strong>
                <span><?php echo esc_html( $job ); ?><?php echo $job_alt ? ' · ' . esc_html( $job_alt ) : ''; ?><?php echo $company ? ' · ' . esc_html( $company ) : ''; ?></span><br>
                <?php if ( $phone ) : ?>
                    <a href="tel:<?php echo esc_attr( preg_replace( '/[^0-9+]/', '', $phone ) ); ?>" dir="ltr" style="color:#fff;text-decoration:none;display:inline-block;"><?php echo esc_html( $phone ); ?></a><br>
                <?php endif; ?>
                <?php if ( $email ) : ?>
                    <a href="mailto:<?php echo esc_attr( $email ); ?>" dir="ltr" style="color:#fff;text-decoration:none;display:inline-block;"><?php echo esc_html( $email ); ?></a><br>
                <?php endif; ?>
                <?php if ( $website ) : ?>
                    <a href="<?php echo esc_url( $website ); ?>" target="_blank" rel="noopener noreferrer" dir="ltr" style="color:#dbe7f5;text-decoration:none;display:inline-block;"><?php echo esc_html( $website ); ?></a><br>
                <?php endif; ?>
                <?php if ( $address ) : ?>
                    <span style="font-size:12px;color:#cbd9ea;"><?php echo esc_html( $address ); ?></span>
                <?php endif; ?>
                <div style="margin-top:12px;display:flex;gap:8px;flex-wrap:wrap;">
                    <button type="button" class="awosign-sc-vcf-btn" style="background:var(--accent);color:#102032;border:none;padding:7px 13px;border-radius:6px;font-weight:700;font-size:12px;cursor:pointer;">
                        📇 vCard (.VCF)
                    </button>
                    <a href="https://wa.me/?text=<?php echo esc_attr( $wa_text ); ?>" target="_blank" rel="noopener noreferrer" style="background:#25D366;color:#fff;text-decoration:none;padding:7px 13px;border-radius:6px;font-weight:700;font-size:12px;display:inline-block;">
                        💬 WhatsApp
                    </a>
                </div>
            </div>
            <div class="awosign-sc-qr" data-qr="<?php echo esc_attr( $qr_payload ); ?>" style="background:#fff;padding:6px;border-radius:8px;width:108px;height:108px;display:flex;align-items:center;justify-content:center;flex-shrink:0;"></div>
        </div>
    </div>
    <script>
    (function(){
        var wrap = document.getElementById(<?php echo wp_json_encode( $uid ); ?>);
        if (!wrap) return;
        var qrBox = wrap.querySelector('.awosign-sc-qr');
        if (qrBox && typeof qrcode === 'function') {
            try {
                if (qrcode.stringToBytesFuncs && qrcode.stringToBytesFuncs['UTF-8']) {
                    qrcode.stringToBytes = qrcode.stringToBytesFuncs['UTF-8'];
                }
                var q = qrcode(0, 'L');
                q.addData(qrBox.getAttribute('data-qr') || '', 'Byte');
                q.make();
                qrBox.innerHTML = '<img src="' + q.createDataURL(4, 4) + '" alt="QR" style="width:96px;height:96px;object-fit:contain;">';
            } catch (e) {}
        }
        var btn = wrap.querySelector('.awosign-sc-vcf-btn');
        if (btn) {
            btn.addEventListener('click', function(){
                var vcfData = <?php echo wp_json_encode( $vcard_payload ); ?>;
                var blob = new Blob([vcfData], {type: 'text/vcard;charset=utf-8'});
                var a = document.createElement('a');
                a.href = URL.createObjectURL(blob);
                a.download = <?php echo wp_json_encode( ( sanitize_title( $person ? $person : 'contact' ) ?: 'contact' ) . '.vcf' ); ?>;
                document.body.appendChild(a);
                a.click();
                a.remove();
            });
        }
    })();
    </script>
    <?php
    return ob_get_clean();
}
add_shortcode( 'awosign', 'awosign_render_shortcode' );

/**
 * Alias Shortcode [awocard mode="all|invoice|bank"] -> renders AwoSign Billing & IBAN Cards.
 */
function awosign_render_awocard_alias( $atts ) {
    $atts = shortcode_atts( array( 'mode' => 'all' ), $atts, 'awocard' );
    return awosign_render_shortcode( array( 'type' => 'billing', 'mode' => $atts['mode'] ) );
}
add_shortcode( 'awocard', 'awosign_render_awocard_alias' );

/**
 * Alias Shortcode [awobadge id="prof_1" show_blood="0" show_phone="0"] -> renders AwoSign CR80 Vertical Staff ID Badge.
 */
function awosign_render_awobadge_alias( $atts ) {
    $atts = shortcode_atts(
        array(
            'id'         => '',
            'show_blood' => '0',
            'show_phone' => '0',
        ),
        $atts,
        'awobadge'
    );
    return awosign_render_shortcode(
        array(
            'type'       => 'badge',
            'id'         => $atts['id'],
            'show_blood' => $atts['show_blood'],
            'show_phone' => $atts['show_phone'],
        )
    );
}
add_shortcode( 'awobadge', 'awosign_render_awobadge_alias' );

/**
 * Automatically display Company Invoice & Bank IBAN cards on WooCommerce Bank Transfer (BACS) Thank-You page when enabled.
 */
function awosign_render_woocommerce_bacs_cards() {
    $workspace = awosign_get_workspace();
    if ( empty( $workspace['brand']['wooBacsEnabled'] ) ) {
        return;
    }
    // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- Escaped inside awosign_render_billing_shortcode_html().
    echo awosign_render_billing_shortcode_html( $workspace['brand'], $workspace['banks'], 'all' );
}
add_action( 'woocommerce_thankyou_bacs', 'awosign_render_woocommerce_bacs_cards', 15 );

/**
 * Register WordPress Privacy Policy Guide & Personal Data Exporter/Eraser (AWO-QS-03 KVKK/GDPR Technical Compliance).
 */
function awosign_register_privacy_policy_content() {
    if ( ! function_exists( 'wp_add_privacy_policy_content' ) ) {
        return;
    }
    $content = '<p>' . esc_html__( 'AwoSign stores staff contact and badge profiles (name, title, department, phone, email, optional portrait photo, and optional blood type for printed HSE badges) locally in the WordPress options table (awosign_workspace_data_v1). QR codes are generated locally in the browser without external HTTP requests. Public [awobadge] shortcodes mask blood group and personal phone numbers by default unless explicitly enabled.', 'awosign' ) . '</p>';
    wp_add_privacy_policy_content( 'AwoSign', wp_kses_post( $content ) );
}
add_action( 'admin_init', 'awosign_register_privacy_policy_content' );

/**
 * Export staff personal data by email address via WordPress Privacy Tools.
 *
 * @param string $email_address Staff email address.
 * @return array<string, mixed>
 */
function awosign_privacy_personal_data_exporter( $email_address ) {
    $email_address = trim( strtolower( (string) $email_address ) );
    $workspace     = awosign_get_workspace();
    $export_items  = array();

    if ( ! empty( $workspace['profiles'] ) && is_array( $workspace['profiles'] ) ) {
        foreach ( $workspace['profiles'] as $p ) {
            $p_email = isset( $p['email'] ) ? trim( strtolower( (string) $p['email'] ) ) : '';
            if ( $p_email && $p_email === $email_address ) {
                $export_items[] = array(
                    'group_id'    => 'awosign-staff-profiles',
                    'group_label' => __( 'AwoSign Staff Profiles & ID Badges', 'awosign' ),
                    'item_id'     => 'awosign-' . ( isset( $p['id'] ) ? $p['id'] : 'profile' ),
                    'data'        => array(
                        array( 'name' => __( 'Full Name', 'awosign' ), 'value' => isset( $p['person'] ) ? $p['person'] : '' ),
                        array( 'name' => __( 'Title', 'awosign' ), 'value' => isset( $p['job'] ) ? $p['job'] : '' ),
                        array( 'name' => __( 'Department', 'awosign' ), 'value' => isset( $p['department'] ) ? $p['department'] : '' ),
                        array( 'name' => __( 'Staff No', 'awosign' ), 'value' => isset( $p['staffNo'] ) ? $p['staffNo'] : '' ),
                        array( 'name' => __( 'Blood Group', 'awosign' ), 'value' => isset( $p['blood'] ) ? $p['blood'] : '' ),
                        array( 'name' => __( 'Phone', 'awosign' ), 'value' => isset( $p['phone'] ) ? $p['phone'] : '' ),
                        array( 'name' => __( 'Email', 'awosign' ), 'value' => isset( $p['email'] ) ? $p['email'] : '' ),
                    ),
                );
            }
        }
    }

    return array(
        'data' => $export_items,
        'done' => true,
    );
}

/**
 * Erase staff personal data by email address via WordPress Privacy Tools.
 *
 * @param string $email_address Staff email address.
 * @return array<string, mixed>
 */
function awosign_privacy_personal_data_eraser( $email_address ) {
    $email_address = trim( strtolower( (string) $email_address ) );
    $workspace     = awosign_get_workspace();
    $items_removed = false;

    if ( ! empty( $workspace['profiles'] ) && is_array( $workspace['profiles'] ) ) {
        $remaining = array();
        foreach ( $workspace['profiles'] as $p ) {
            $p_email = isset( $p['email'] ) ? trim( strtolower( (string) $p['email'] ) ) : '';
            if ( $p_email && $p_email === $email_address ) {
                $items_removed = true;
                continue;
            }
            $remaining[] = $p;
        }
        if ( $items_removed ) {
            $workspace['profiles'] = ! empty( $remaining ) ? $remaining : awosign_get_default_workspace()['profiles'];
            update_option( AWOSIGN_OPTION_KEY, $workspace, false );
        }
    }

    return array(
        'items_removed'  => $items_removed,
        'items_retained' => false,
        'messages'       => array(),
        'done'           => true,
    );
}

/**
 * Register Exporter and Eraser with WordPress Core Privacy API.
 */
function awosign_register_privacy_hooks() {
    add_filter(
        'wp_privacy_personal_data_exporters',
        function ( $exporters ) {
            $exporters['awosign-staff-exporter'] = array(
                'exporter_friendly_name' => __( 'AwoSign Staff Profiles', 'awosign' ),
                'callback'               => 'awosign_privacy_personal_data_exporter',
            );
            return $exporters;
        }
    );
    add_filter(
        'wp_privacy_personal_data_erasers',
        function ( $erasers ) {
            $erasers['awosign-staff-eraser'] = array(
                'eraser_friendly_name' => __( 'AwoSign Staff Profiles', 'awosign' ),
                'callback'             => 'awosign_privacy_personal_data_eraser',
            );
            return $erasers;
        }
    );
}
add_action( 'init', 'awosign_register_privacy_hooks' );

if ( file_exists( __DIR__ . '/includes/awo-ecosystem-hub.php' ) ) {
    require_once __DIR__ . '/includes/awo-ecosystem-hub.php';
}