<?php

namespace ChargeForms\Admin;

use ChargeForms\Includes\Entry;
use ChargeForms\Includes\Entry_Exporter;
use ChargeForms\Includes\Entry_Importer;
use ChargeForms\Includes\Form;
use ChargeForms\Includes\Icon;
use ChargeForms\Includes\Import_Validator;
use ChargeForms\Includes\Settings;
use ChargeForms\Frontend\SubmissionHandler;

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/**
 * ChargeForms > Entries. With no form_id it's a global overview (every form's
 * entry count, plus the most recent submissions across all forms). With a
 * form_id it drills into that form's own entries table. Plain PHP admin
 * tables — no JS bundle needed here, keeps this screen usable even before
 * the builder JS has loaded.
 */
class Entries_Page {

	public function __construct() {
		add_action( 'admin_menu', [ $this, 'register' ] );
		add_action( 'admin_post_chargeforms_delete_entry', [ $this, 'handle_delete' ] );
		add_action( 'admin_post_chargeforms_bulk_entry_action', [ $this, 'handle_bulk_entry_action' ] );
		add_action( 'admin_post_chargeforms_export_entries', [ $this, 'handle_export' ] );
		add_action( 'admin_post_chargeforms_toggle_entry_status', [ $this, 'handle_toggle_status' ] );
		add_action( 'admin_post_chargeforms_print_entry', [ $this, 'handle_print' ] );
		add_action( 'admin_post_chargeforms_import_entries', [ $this, 'handle_import' ] );
		add_action( 'admin_post_chargeforms_update_entry', [ $this, 'handle_update_entry' ] );
		add_action( 'admin_post_chargeforms_toggle_star', [ $this, 'handle_toggle_star' ] );
		add_action( 'admin_post_chargeforms_add_entry_note', [ $this, 'handle_add_note' ] );
		add_action( 'admin_post_chargeforms_resend_notification', [ $this, 'handle_resend_notification' ] );
	}

	/** Admin screens (table columns, detail view, export) show a field's admin-only label when set, since it's meant to be clearer for staff than the public-facing label. */
	/** Public (roadmap issue #31: "Admin Tables Mix Concerns in Large PHP Page Classes") so the extracted Entry_Exporter can reuse the exact same column-labeling this page's own table/detail/print views use, rather than a second copy of the same one-line rule. */
	public static function column_label( array $field ) {
		return ! empty( $field['adminLabel'] ) ? $field['adminLabel'] : $field['label'];
	}

	/**
	 * A stored field value is usually a plain string, but multi-value
	 * fields (checkbox groups, Address's street/city/... sub-fields) are
	 * stored as arrays — see SubmissionHandler::handle(), which only
	 * scalar-sanitizes non-array values and array_maps the rest. Casting
	 * an array straight to (string) produces the literal text "Array"
	 * plus a PHP warning; on a host with display_errors on, that warning
	 * prints inline mid-table and visibly wrecks the row's column
	 * alignment. Every place a value reaches the page (table cell, detail
	 * view, print view, CSV export) must go through this instead of a
	 * raw (string) cast.
	 */
	/** Public — see column_label()'s identical note; Entry_Exporter's CSV/JSON export needs the same array-safe display rule every other view of an entry value uses. */
	public static function display_value( $value ) {
		if ( ! is_array( $value ) ) {
			return (string) $value;
		}

		// A flat array (checkboxes/multi-select: every element already a
		// scalar) keeps its original ", "-joined behavior. A Repeater's
		// value is an array of ROWS, each itself an array of that row's
		// own sub-field values — array_map( 'strval', ... ) on THOSE rows
		// would trigger PHP's "Array to string conversion" and silently
		// render every row as the literal string "Array" instead of its
		// real values (found via live testing against a real submission,
		// not something a fixture built from already-flat sample data
		// would ever exercise). Detected once up front rather than
		// per-element so the common flat case pays zero extra cost.
		$is_nested = false;
		foreach ( $value as $item ) {
			if ( is_array( $item ) ) {
				$is_nested = true;
				break;
			}
		}

		if ( ! $is_nested ) {
			return implode( ', ', array_filter( array_map( 'strval', $value ), fn( $v ) => '' !== trim( $v ) ) );
		}

		$rows = array_map( function ( $row ) {
			if ( ! is_array( $row ) ) {
				return (string) $row;
			}
			return implode( ', ', array_filter( array_map( 'strval', $row ), fn( $v ) => '' !== trim( $v ) ) );
		}, $value );

		return implode( '; ', array_filter( $rows, fn( $r ) => '' !== trim( $r ) ) );
	}

	/**
	 * Global Settings > Miscellaneous > "Date & Time Format" — relative
	 * ("2 hours ago") or WordPress's own configured date/time format,
	 * overriding the older free-form entries_date_format setting when set
	 * to 'relative'.
	 *
	 * `$mysql_datetime` is stored in GMT (roadmap issue #27 —
	 * Entry::create()/add_meta() both now store explicit GMT rather than
	 * relying on the table's own timezone-ambiguous DEFAULT
	 * CURRENT_TIMESTAMP). The relative branch compares against GMT "now"
	 * to match; the absolute branches convert back to the site's
	 * configured timezone via get_date_from_gmt() before formatting, so
	 * an admin sees their OWN local time, not raw UTC.
	 */
	private static function format_entry_date( $mysql_datetime, $fallback_format ) {
		if ( 'relative' === Settings::get( 'date_time_format', 'relative' ) ) {
			/* translators: %s: human-readable time difference, e.g. "2 hours" */
			return sprintf( __( '%s ago', 'chargeforms' ), human_time_diff( strtotime( $mysql_datetime ), current_time( 'timestamp', true ) ) );
		}
		$local_datetime = get_date_from_gmt( $mysql_datetime, 'Y-m-d H:i:s' );
		if ( 'wp_default' === Settings::get( 'date_time_format' ) ) {
			return mysql2date( get_option( 'date_format' ) . ' ' . get_option( 'time_format' ), $local_datetime );
		}
		return mysql2date( $fallback_format, $local_datetime );
	}

	/**
	 * Turns a preset key (or an explicit custom range) into
	 * [ date_from, date_to ] — both '' when no filter applies.
	 *
	 * `$today` must be GMT (roadmap issue #27), not site-local, since the
	 * range this resolves into is compared against `created_at` via
	 * gmdate()-built boundaries elsewhere (Entry::for_form()/query()) —
	 * mixing a site-local "today" with GMT comparison boundaries silently
	 * shifts which entries land in "today"/"this week"/etc. by the site's
	 * UTC offset.
	 */
	private function resolve_date_preset( $preset, $custom_from, $custom_to ) {
		$today = current_time( 'Y-m-d', true );

		switch ( $preset ) {
			case 'today':
				return [ $today, $today ];
			case 'yesterday':
				$y = gmdate( 'Y-m-d', strtotime( $today . ' -1 day' ) );
				return [ $y, $y ];
			case 'last_week':
				return [ gmdate( 'Y-m-d', strtotime( $today . ' -7 days' ) ), $today ];
			case 'last_month':
				return [ gmdate( 'Y-m-d', strtotime( $today . ' -30 days' ) ), $today ];
			case 'custom':
				return [ $custom_from, $custom_to ];
			default:
				return [ '', '' ];
		}
	}

	public function register() {
		add_submenu_page(
			'chargeforms',
			__( 'Entries', 'chargeforms' ),
			__( 'Entries', 'chargeforms' ) . self::unread_badge_html(),
			'chargeforms_manage_forms',
			'chargeforms-entries',
			[ $this, 'render' ]
		);
	}

	/** The blue unread-count bubble next to "Entries" in the WP sidebar submenu and the ChargeForms admin-bar node — WP core menu titles intentionally allow HTML here (see its own Plugins-update bubble), so this isn't escaped. */
	public static function unread_badge_html() {
		$count = Entry::count_unread();
		if ( $count < 1 ) {
			return '';
		}
		return ' <span class="chargeforms-menu-badge">' . esc_html( $count > 99 ? '99+' : $count ) . '</span>';
	}

	public function render() {
		// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only page load, not a state-changing request; both values are (int)-cast immediately.
		$form_id  = isset( $_GET['form_id'] ) ? (int) $_GET['form_id'] : 0;
		$entry_id = isset( $_GET['entry_id'] ) ? (int) $_GET['entry_id'] : 0; // phpcs:ignore WordPress.Security.NonceVerification.Recommended

		if ( $entry_id ) {
			$this->render_single( $entry_id );
			return;
		}

		if ( ! $form_id ) {
			$this->render_overview();
			return;
		}

		$form = Form::get( $form_id );

		if ( ! $form ) {
			echo '<div class="wrap"><p>' . esc_html__( 'Form not found.', 'chargeforms' ) . '</p></div>';
			return;
		}

		$this->render_form_entries( $form );
	}

	/** Field types the Advanced Filter offers as a value <select> instead of a free-text input — anything with a fixed option list. */
	const CHOICE_FIELD_TYPES = [ 'select', 'radio', 'checkbox', 'multi_select', 'multiple_choice' ];

	/**
	 * Field types that never hold a meaningful, displayable per-entry value
	 * — layout markers (section/page breaks, custom HTML), a Hidden field's
	 * technical default, and the three CAPTCHA widgets (their "value" is a
	 * verification token, not something a site owner wants to review).
	 * Excluded from every entries table/export column list; previously only
	 * section_break/page_break/html were excluded, which left Hidden and
	 * CAPTCHA fields rendering as a real column with an effectively-always-
	 * empty cell — visually indistinguishable from a layout bug (an
	 * unexplained gap before the next real column).
	 */
	const NON_DATA_FIELD_TYPES = [ 'section_break', 'page_break', 'html', 'hidden', 'recaptcha', 'hcaptcha', 'turnstile' ];

	/**
	 * The per-form Entries screen — dynamic columns from the form's own
	 * fields (matching the reference product's own per-form Entries screen, not a
	 * fixed generic column set), a real Advanced Filter (AND within a
	 * group, OR between groups — same convention the reference product states in
	 * its own UI), a client-side column-visibility/pin picker, and proper
	 * pagination (the previous version loaded every entry unbounded).
	 */
	private function render_form_entries( array $form ) {
		$form_id      = $form['id'];
		$date_format  = Settings::get( 'entries_date_format', 'M j, Y g:ia' );
		$table_fields = array_values( array_filter( $form['fields'], function ( $field ) {
			return ! in_array( $field['type'], self::NON_DATA_FIELD_TYPES, true );
		} ) );
		$all_forms = Form::all();

		$groups = [];
		if ( isset( $_GET['filter_groups'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
			// phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized, WordPress.Security.NonceVerification.Recommended -- the decoded structure is untrusted, but Entry::build_condition() below whitelists every field name against a fixed column map and binds every value through $wpdb->prepare() placeholders; sanitize_text_field() here would corrupt legitimate operator values (e.g. ">=") without adding any real safety. Read-only list filter, not a state-changing request.
			$decoded = json_decode( wp_unslash( $_GET['filter_groups'] ), true );
			if ( is_array( $decoded ) ) {
				$groups = $decoded;
			}
		}
		$search      = isset( $_GET['s'] ) ? sanitize_text_field( wp_unslash( $_GET['s'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
		$date_preset = isset( $_GET['date_preset'] ) ? sanitize_key( wp_unslash( $_GET['date_preset'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
		list( $date_from, $date_to ) = $this->resolve_date_preset(
			$date_preset,
			isset( $_GET['date_from'] ) ? sanitize_text_field( wp_unslash( $_GET['date_from'] ) ) : '', // phpcs:ignore WordPress.Security.NonceVerification.Recommended
			isset( $_GET['date_to'] ) ? sanitize_text_field( wp_unslash( $_GET['date_to'] ) ) : '' // phpcs:ignore WordPress.Security.NonceVerification.Recommended
		);
		$sort_by  = isset( $_GET['sort_by'] ) ? sanitize_key( wp_unslash( $_GET['sort_by'] ) ) : 'created_at'; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
		$sort_dir = isset( $_GET['sort_dir'] ) && 'asc' === $_GET['sort_dir'] ? 'asc' : 'desc'; // phpcs:ignore WordPress.Security.NonceVerification.Recommended

		$page     = isset( $_GET['paged'] ) ? max( 1, (int) $_GET['paged'] ) : 1; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
		$per_page = isset( $_GET['per_page'] ) ? min( 200, max( 1, (int) $_GET['per_page'] ) ) : 10; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
		$status   = isset( $_GET['status'] ) && 'trashed' === $_GET['status'] ? 'trashed' : 'all'; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
		$result   = Entry::advanced_query( $form_id, $groups, [
			'page'      => $page,
			'per_page'  => $per_page,
			'search'    => $search,
			'date_from' => $date_from,
			'date_to'   => $date_to,
			'sort_by'   => $sort_by,
			'sort_dir'  => $sort_dir,
			'status'    => $status,
		] );
		$trashed_count = Entry::count_trashed_for_form( $form_id );

		$filter_fields = [
			'inputs' => array_map( function ( $field ) {
				return [
					'id'      => 'input:' . $field['id'],
					'label'   => self::column_label( $field ),
					'choices' => in_array( $field['type'], self::CHOICE_FIELD_TYPES, true ) ? array_values( $field['options'] ?? [] ) : null,
				];
			}, $table_fields ),
			'attrs'  => [
				[ 'id' => 'attr:id', 'label' => __( 'Submission ID', 'chargeforms' ), 'choices' => null ],
				[ 'id' => 'attr:status', 'label' => __( 'Status', 'chargeforms' ), 'choices' => [ 'unread', 'read' ] ],
				// Stored as meta '1'/'0' (Entry::set_meta( $id, 'starred', ... )
				// — same flag the Favorite star row-action toggles), so this
				// needs labeled {value, label} choices rather than the raw
				// stored value, unlike attr:status above where 'unread'/'read'
				// already read fine on screen as-is.
				[ 'id' => 'attr:starred', 'label' => __( 'Favorite', 'chargeforms' ), 'choices' => [
					[ 'value' => '1', 'label' => __( 'Favorited', 'chargeforms' ) ],
					[ 'value' => '0', 'label' => __( 'Not Favorited', 'chargeforms' ) ],
				] ],
				[ 'id' => 'attr:created_at', 'label' => __( 'Submission Date', 'chargeforms' ), 'choices' => null ],
				[ 'id' => 'attr:ip_address', 'label' => __( 'IP Address', 'chargeforms' ), 'choices' => null ],
				[ 'id' => 'attr:source_url', 'label' => __( 'Source URL', 'chargeforms' ), 'choices' => null ],
			],
			'user'   => [
				[ 'id' => 'user:id', 'label' => __( 'User ID', 'chargeforms' ), 'choices' => null ],
				[ 'id' => 'user:user_login', 'label' => __( 'Username', 'chargeforms' ), 'choices' => null ],
				[ 'id' => 'user:display_name', 'label' => __( 'Display Name', 'chargeforms' ), 'choices' => null ],
				[ 'id' => 'user:user_email', 'label' => __( 'Email', 'chargeforms' ), 'choices' => null ],
			],
		];
		$today          = current_time( 'Y-m-d', true );
		$today_count    = Entry::count_by_form( [ $form_id ], $today, $today )[ $form_id ] ?? 0;
		$unread_count   = Entry::count_unread_by_form( [ $form_id ] )[ $form_id ] ?? 0;
		$starred_count  = Entry::count_starred_for_form( $form_id );
		// Stat-card row (design_handoff_chargeforms's Entries screen: a
		// 4-tile KPI row under the header) — Total/Unread/Starred/Today are
		// all real counts already available or one cheap query away; no
		// fabricated percent-change delta, since there's no honest "vs
		// yesterday" comparison the design mockup actually specifies.
		$entry_stats = [
			[ 'label' => __( 'Total Entries', 'chargeforms' ), 'value' => number_format_i18n( $result['total'] ), 'delta' => __( 'All time', 'chargeforms' ) ],
			[ 'label' => __( 'Unread', 'chargeforms' ), 'value' => number_format_i18n( $unread_count ), 'delta' => $unread_count > 0 ? __( 'Needs review', 'chargeforms' ) : __( 'All caught up', 'chargeforms' ) ],
			[ 'label' => __( 'Favorited', 'chargeforms' ), 'value' => number_format_i18n( $starred_count ), 'delta' => __( 'Starred entries', 'chargeforms' ) ],
			[ 'label' => __( 'Today', 'chargeforms' ), 'value' => number_format_i18n( $today_count ), 'delta' => __( 'Since midnight UTC', 'chargeforms' ) ],
		];
		?>
		<div class="wrap chargeforms-wrap chargeforms-entries-wrap">
			<?php Page_Header::render( 'chargeforms-entries' ); ?>

			<div class="chargeforms-entries-form-head">
				<div class="chargeforms-entries-form-head-title">
					<h1 class="wp-heading-inline"><?php esc_html_e( 'Entries', 'chargeforms' ); ?></h1>
					<div class="chargeforms-entries-form-subtitle">
						<?php
						printf(
							/* translators: 1: form title, 2: total entry count, 3: unread entry count */
							esc_html__( '%1$s · %2$s entries · %3$s unread', 'chargeforms' ),
							esc_html( $form['title'] ),
							esc_html( number_format_i18n( $result['total'] ) ),
							esc_html( number_format_i18n( $unread_count ) )
						);
						?>
					</div>
				</div>
				<div class="chargeforms-entries-form-actions">
					<a href="<?php echo esc_url( admin_url( 'admin.php?page=chargeforms-reports&tab=overview&form_id=' . $form_id ) ); ?>" class="button button-primary">
						<?php Icon::render( 'chart-bar' ); ?> <?php esc_html_e( 'Visual Report', 'chargeforms' ); ?>
					</a>
					<div class="chargeforms-export-dropdown">
						<button type="button" class="button chargeforms-export-dropdown-toggle">
							<?php Icon::render( 'download' ); ?> <?php esc_html_e( 'Export', 'chargeforms' ); ?> <?php Icon::render( 'arrow-down-alt2' ); ?>
						</button>
						<div class="chargeforms-export-dropdown-menu" hidden>
							<a href="<?php echo esc_url( wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_export_entries&form_id=' . $form_id . '&format=csv' ), 'chargeforms_export_' . $form_id ) ); ?>"><?php esc_html_e( 'Export as CSV', 'chargeforms' ); ?></a>
							<a href="<?php echo esc_url( wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_export_entries&form_id=' . $form_id . '&format=json' ), 'chargeforms_export_' . $form_id ) ); ?>"><?php esc_html_e( 'Export as JSON', 'chargeforms' ); ?></a>
						</div>
					</div>
					<?php if ( count( $all_forms ) > 1 ) : ?>
						<div class="chargeforms-form-switcher">
							<button type="button" class="button chargeforms-form-switcher-toggle">
								<?php echo esc_html( wp_trim_words( $form['title'], 4 ) ); ?> <?php Icon::render( 'arrow-down-alt2' ); ?>
							</button>
							<div class="chargeforms-form-switcher-menu" hidden>
								<a href="<?php echo esc_url( admin_url( 'admin.php?page=chargeforms-entries' ) ); ?>" class="chargeforms-form-switcher-all">
									<?php Icon::render( 'list-view' ); ?> <?php esc_html_e( 'All Entries', 'chargeforms' ); ?>
								</a>
								<?php foreach ( $all_forms as $other_form ) : ?>
									<a href="<?php echo esc_url( admin_url( 'admin.php?page=chargeforms-entries&form_id=' . $other_form['id'] ) ); ?>" class="<?php echo (int) $other_form['id'] === (int) $form_id ? 'is-active' : ''; ?>">
										<?php echo esc_html( $other_form['title'] ); ?>
									</a>
								<?php endforeach; ?>
							</div>
						</div>
					<?php endif; ?>
					<div class="chargeforms-kebab-menu">
						<button type="button" class="button chargeforms-kebab-toggle" title="<?php esc_attr_e( 'More', 'chargeforms' ); ?>"><?php Icon::render( 'ellipsis' ); ?></button>
						<div class="chargeforms-kebab-panel" hidden>
							<a href="<?php echo esc_url( admin_url( 'admin.php?page=chargeforms-tools&section=import-entries' ) ); ?>"><?php Icon::render( 'upload' ); ?> <?php esc_html_e( 'Import Entries', 'chargeforms' ); ?></a>
							<a href="<?php echo esc_url( admin_url( 'admin.php?page=chargeforms&form_id=' . $form_id ) ); ?>"><?php Icon::render( 'edit' ); ?> <?php esc_html_e( 'Edit Form', 'chargeforms' ); ?></a>
							<a href="<?php echo esc_url( admin_url( 'admin.php?page=chargeforms-settings&section=export-forms' ) ); ?>"><?php Icon::render( 'admin-tools' ); ?> <?php esc_html_e( 'Export Forms', 'chargeforms' ); ?></a>
						</div>
					</div>
				</div>
			</div>

			<div class="chargeforms-entries-stats">
				<?php foreach ( $entry_stats as $stat ) : ?>
					<div class="chargeforms-entries-stat-card">
						<div class="chargeforms-entries-stat-label"><?php echo esc_html( $stat['label'] ); ?></div>
						<div class="chargeforms-entries-stat-value"><?php echo esc_html( $stat['value'] ); ?></div>
						<div class="chargeforms-entries-stat-delta"><?php echo esc_html( $stat['delta'] ); ?></div>
					</div>
				<?php endforeach; ?>
			</div>

			<?php if ( isset( $_GET['chargeforms_notice'] ) && 'entry_deleted' === $_GET['chargeforms_notice'] ) : // phpcs:ignore WordPress.Security.NonceVerification.Recommended ?>
				<div class="notice notice-success is-dismissible"><p><?php esc_html_e( 'Entry deleted.', 'chargeforms' ); ?></p></div>
			<?php endif; ?>
			<?php if ( isset( $_GET['chargeforms_notice'] ) && 'entries_deleted' === $_GET['chargeforms_notice'] ) : // phpcs:ignore WordPress.Security.NonceVerification.Recommended ?>
				<div class="notice notice-success is-dismissible"><p><?php esc_html_e( 'Selected entries deleted.', 'chargeforms' ); ?></p></div>
			<?php endif; ?>
			<?php if ( isset( $_GET['chargeforms_notice'] ) && 'entries_updated' === $_GET['chargeforms_notice'] ) : // phpcs:ignore WordPress.Security.NonceVerification.Recommended ?>
				<div class="notice notice-success is-dismissible"><p><?php esc_html_e( 'Selected entries updated.', 'chargeforms' ); ?></p></div>
			<?php endif; ?>
			<?php if ( isset( $_GET['chargeforms_notice'] ) && 'entries_trashed' === $_GET['chargeforms_notice'] ) : // phpcs:ignore WordPress.Security.NonceVerification.Recommended ?>
				<div class="notice notice-success is-dismissible"><p><?php esc_html_e( 'Selected entries moved to Trash.', 'chargeforms' ); ?></p></div>
			<?php endif; ?>
			<?php if ( isset( $_GET['chargeforms_notice'] ) && 'entries_restored' === $_GET['chargeforms_notice'] ) : // phpcs:ignore WordPress.Security.NonceVerification.Recommended ?>
				<div class="notice notice-success is-dismissible"><p><?php esc_html_e( 'Selected entries restored.', 'chargeforms' ); ?></p></div>
			<?php endif; ?>

			<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" id="chargeforms-bulk-actions-form" class="chargeforms-bulk-bar" hidden>
				<input type="hidden" name="action" value="chargeforms_bulk_entry_action">
				<input type="hidden" name="form_id" value="<?php echo (int) $form_id; ?>">
				<input type="hidden" name="status" value="<?php echo esc_attr( $status ); ?>">
				<?php wp_nonce_field( 'chargeforms_bulk_entry_action_' . $form_id ); ?>
				<span
					class="chargeforms-bulk-bar-count"
					id="chargeforms-bulk-bar-count"
					data-label-singular="<?php esc_attr_e( 'entry selected', 'chargeforms' ); ?>"
					data-label-plural="<?php esc_attr_e( 'entries selected', 'chargeforms' ); ?>"
				></span>
				<label for="chargeforms-bulk-action-select" class="screen-reader-text"><?php esc_html_e( 'Select bulk action', 'chargeforms' ); ?></label>
				<select name="bulk_action" id="chargeforms-bulk-action-select">
					<option value=""><?php esc_html_e( 'Bulk Actions', 'chargeforms' ); ?></option>
					<?php if ( 'trashed' === $status ) : ?>
						<option value="restore"><?php esc_html_e( 'Restore', 'chargeforms' ); ?></option>
						<option value="delete"><?php esc_html_e( 'Delete Permanently', 'chargeforms' ); ?></option>
					<?php else : ?>
						<option value="mark_read"><?php esc_html_e( 'Mark as Read', 'chargeforms' ); ?></option>
						<option value="mark_unread"><?php esc_html_e( 'Mark as Unread', 'chargeforms' ); ?></option>
						<option value="mark_favorite"><?php esc_html_e( 'Mark as Favorites', 'chargeforms' ); ?></option>
						<option value="unmark_favorite"><?php esc_html_e( 'Remove from Favorites', 'chargeforms' ); ?></option>
						<option value="trash"><?php esc_html_e( 'Move to Trash', 'chargeforms' ); ?></option>
					<?php endif; ?>
				</select>
				<button
					type="submit"
					class="button button-primary"
					id="chargeforms-bulk-apply-btn"
					data-confirm-message="<?php echo esc_attr__( 'Permanently delete the selected entries? This cannot be undone.', 'chargeforms' ); ?>"
					data-confirm-yes-label="<?php echo esc_attr__( 'Yes, Delete', 'chargeforms' ); ?>"
				><?php esc_html_e( 'Apply', 'chargeforms' ); ?></button>
			</form>

			<?php
			// One unified panel — toolbar, status tabs, table and pagination
			// all live inside a single bordered card, exactly as the design
			// source draws it (design_handoff_chargeforms/ChargeForms
			// Screens.dc.html, the Entries screen's own wrapper div). These
			// were previously four separate free-floating blocks each with
			// their own border/shadow, which is what made this screen read
			// as visually different from the design even where the
			// individual colors and spacing already matched.
			?>
			<div class="chargeforms-entries-panel">

			<div class="chargeforms-entries-toolbar">
				<button type="button" class="button chargeforms-filter-toggle-btn" id="chargeforms-adv-filter-toggle" aria-expanded="<?php echo $groups ? 'true' : 'false'; ?>">
					<?php Icon::render( 'filter' ); ?> <?php esc_html_e( 'Advanced Filter', 'chargeforms' ); ?>
					<?php if ( $groups ) : ?><span class="chargeforms-filter-count"><?php echo (int) count( $groups ); ?></span><?php endif; ?>
				</button>
				<div class="chargeforms-entries-toolbar-right">
					<form method="get" class="chargeforms-entries-search-form">
						<input type="hidden" name="page" value="chargeforms-entries">
						<input type="hidden" name="form_id" value="<?php echo (int) $form_id; ?>">
						<?php if ( 'trashed' === $status ) : ?><input type="hidden" name="status" value="trashed"><?php endif; ?>
						<?php if ( $groups ) : ?><input type="hidden" name="filter_groups" value="<?php echo esc_attr( wp_json_encode( $groups ) ); ?>"><?php endif; ?>
						<div class="chargeforms-search-box">
							<?php Icon::render( 'search' ); ?>
							<input type="search" name="s" value="<?php echo esc_attr( $search ); ?>" placeholder="<?php echo esc_attr__( 'Search…', 'chargeforms' ); ?>" aria-label="<?php esc_attr_e( 'Search entries', 'chargeforms' ); ?>">
						</div>
					</form>
					<div class="chargeforms-columns-picker">
						<button type="button" class="button" id="chargeforms-columns-toggle"><?php Icon::render( 'columns' ); ?> <?php esc_html_e( 'Columns', 'chargeforms' ); ?></button>
						<div class="chargeforms-columns-panel" id="chargeforms-columns-panel" hidden>
							<label class="chargeforms-columns-pin-row">
								<?php esc_html_e( 'Pin ID column', 'chargeforms' ); ?>
								<input type="checkbox" id="chargeforms-pin-id-column">
							</label>
							<div class="chargeforms-columns-list" id="chargeforms-columns-list">
								<?php foreach ( $table_fields as $field ) : ?>
									<label>
										<input type="checkbox" class="chargeforms-column-toggle" data-column="col-<?php echo esc_attr( $field['id'] ); ?>" checked>
										<?php echo esc_html( self::column_label( $field ) ); ?>
									</label>
								<?php endforeach; ?>
							</div>
						</div>
					</div>
					<div class="chargeforms-filter-dropdown">
						<button type="button" class="button chargeforms-filter-btn" id="chargeforms-entries-date-toggle"><?php Icon::render( 'calendar-alt' ); ?> <?php esc_html_e( 'Date Filter', 'chargeforms' ); ?></button>
						<div class="chargeforms-filter-panel" id="chargeforms-entries-date-panel" style="display:none;">
							<form method="get">
								<input type="hidden" name="page" value="chargeforms-entries">
								<input type="hidden" name="form_id" value="<?php echo (int) $form_id; ?>">
								<?php if ( 'trashed' === $status ) : ?><input type="hidden" name="status" value="trashed"><?php endif; ?>
								<?php if ( $search ) : ?><input type="hidden" name="s" value="<?php echo esc_attr( $search ); ?>"><?php endif; ?>
								<?php foreach ( [ '' => __( 'All time', 'chargeforms' ), 'today' => __( 'Today', 'chargeforms' ), 'yesterday' => __( 'Yesterday', 'chargeforms' ), 'last_week' => __( 'Last Week', 'chargeforms' ), 'last_month' => __( 'Last Month', 'chargeforms' ) ] as $preset_key => $preset_label ) : ?>
									<label class="chargeforms-filter-radio">
										<input type="radio" name="date_preset" value="<?php echo esc_attr( $preset_key ); ?>" <?php checked( $date_preset, $preset_key ); ?>>
										<?php echo esc_html( $preset_label ); ?>
									</label>
								<?php endforeach; ?>
								<button type="submit" class="button button-primary"><?php esc_html_e( 'Apply', 'chargeforms' ); ?></button>
								<a class="button" href="<?php echo esc_url( remove_query_arg( [ 'date_preset', 'date_from', 'date_to' ] ) ); ?>"><?php esc_html_e( 'Clear', 'chargeforms' ); ?></a>
							</form>
						</div>
					</div>
					<a class="button" href="<?php echo esc_url( admin_url( 'admin.php?page=chargeforms-entries&form_id=' . $form_id ) ); ?>" title="<?php esc_attr_e( 'Reset', 'chargeforms' ); ?>"><?php Icon::render( 'image-rotate' ); ?></a>
				</div>
			</div>

			<?php $this->render_advanced_filter( $form_id, $filter_fields, $groups, $status ); ?>

			<?php
			// Status tabs sit inside the panel, directly under the toolbar —
			// the design's own placement (a row of pill tabs on its own
			// bordered strip), not WP's `.subsubsub` "All | Trash (n)" text
			// links up beside the page title where these used to render.
			?>
			<div class="chargeforms-entries-tabs">
				<a href="<?php echo esc_url( remove_query_arg( 'status' ) ); ?>" class="<?php echo 'trashed' !== $status ? 'is-active' : ''; ?>">
					<?php esc_html_e( 'All', 'chargeforms' ); ?>
					<span class="chargeforms-entries-tab-count"><?php echo esc_html( number_format_i18n( $result['total'] ) ); ?></span>
				</a>
				<a href="<?php echo esc_url( add_query_arg( 'status', 'trashed' ) ); ?>" class="<?php echo 'trashed' === $status ? 'is-active' : ''; ?>">
					<?php esc_html_e( 'Trash', 'chargeforms' ); ?>
					<span class="chargeforms-entries-tab-count"><?php echo esc_html( number_format_i18n( $trashed_count ) ); ?></span>
				</a>
			</div>

			<?php if ( empty( $result['items'] ) ) : ?>
				<div class="chargeforms-empty-state"><?php Icon::render( 'trashed' === $status ? 'trash-2' : 'info' ); ?><p>
				<?php
				if ( 'trashed' === $status ) {
					esc_html_e( 'Trash is empty.', 'chargeforms' );
				} elseif ( $groups ) {
					esc_html_e( 'No entries match your filters.', 'chargeforms' );
				} else {
					esc_html_e( 'No submissions yet.', 'chargeforms' );
				}
				?>
			</p></div>
			<?php else : ?>
				<div class="chargeforms-table-scroll">
				<table class="wp-list-table widefat striped chargeforms-entries-table" id="chargeforms-entries-table">
					<thead>
						<tr>
							<td class="check-column"><input type="checkbox" id="chargeforms-select-all-rows"></td>
							<th class="chargeforms-col-id"><?php $this->render_sort_header( __( '#', 'chargeforms' ), 'id', $sort_by, $sort_dir ); ?></th>
							<?php foreach ( $table_fields as $field ) : ?>
								<th data-column="col-<?php echo esc_attr( $field['id'] ); ?>" class="chargeforms-entries-sort-th" data-sort-type="<?php echo in_array( $field['type'], [ 'number', 'range_slider', 'nps' ], true ) ? 'number' : 'text'; ?>">
									<?php echo esc_html( self::column_label( $field ) ); ?> <?php Icon::render( 'sort', 16, 'chargeforms-sort-icon' ); ?>
								</th>
							<?php endforeach; ?>
							<th><?php esc_html_e( 'Entry Status', 'chargeforms' ); ?></th>
							<th><?php $this->render_sort_header( __( 'Submitted at', 'chargeforms' ), 'created_at', $sort_by, $sort_dir ); ?></th>
							<th class="chargeforms-col-actions"><?php esc_html_e( 'Actions', 'chargeforms' ); ?></th>
						</tr>
					</thead>
					<tbody>
						<?php $starred_map = Entry::get_meta_bulk( array_map( fn( $e ) => $e['id'], $result['items'] ), 'starred' ); ?>
						<?php foreach ( $result['items'] as $entry ) : ?>
							<?php
							$is_starred    = '1' === (string) ( $starred_map[ $entry['id'] ] ?? '' );
							$status_toggle = 'read' === $entry['status'] ? 'unread' : 'read';
							?>
							<tr<?php echo 'unread' === $entry['status'] ? ' class="chargeforms-row-unread"' : ''; ?>>
								<td class="check-column"><input type="checkbox" class="chargeforms-row-check" value="<?php echo (int) $entry['id']; ?>"></td>
								<td class="chargeforms-col-id">
									<span class="chargeforms-status-dot-inline <?php echo 'unread' === $entry['status'] ? 'is-unread' : 'is-read'; ?>" title="<?php echo esc_attr( 'unread' === $entry['status'] ? __( 'Unread', 'chargeforms' ) : __( 'Read', 'chargeforms' ) ); ?>"></span>
									<?php echo (int) $entry['id']; ?>
								</td>
								<?php foreach ( $table_fields as $field ) : ?>
									<?php $val = self::display_value( $entry['values'][ $field['id'] ] ?? '' ); ?>
									<td class="chargeforms-truncate" data-column="col-<?php echo esc_attr( $field['id'] ); ?>" title="<?php echo esc_attr( $val ); ?>"><?php echo esc_html( $val ); ?></td>
								<?php endforeach; ?>
								<td><span class="chargeforms-status chargeforms-status-<?php echo esc_attr( $entry['status'] ); ?>"><?php echo esc_html( ucfirst( $entry['status'] ) ); ?></span></td>
								<td title="<?php echo esc_attr( self::format_entry_date( $entry['created_at'], $date_format ) ); ?>"><?php echo esc_html( human_time_diff( strtotime( $entry['created_at'] ), current_time( 'timestamp', true ) ) . ' ' . __( 'ago', 'chargeforms' ) ); // created_at is GMT (roadmap issue #27) — compare against GMT "now", not site-local. ?></td>
								<td class="chargeforms-col-actions">
									<div class="chargeforms-row-actions-icons">
										<a class="chargeforms-icon-action is-view" href="<?php echo esc_url( admin_url( 'admin.php?page=chargeforms-entries&entry_id=' . $entry['id'] . '&form_id=' . $form_id ) ); ?>" data-tooltip="<?php esc_attr_e( 'View', 'chargeforms' ); ?>" aria-label="<?php esc_attr_e( 'View', 'chargeforms' ); ?>" title="<?php esc_attr_e( 'View', 'chargeforms' ); ?>">
											<?php Icon::render( 'visibility' ); ?>
										</a>
										<?php if ( 'trashed' === $entry['status'] ) : ?>
											<a
												class="chargeforms-icon-action"
												href="<?php echo esc_url( wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_toggle_entry_status&entry_id=' . $entry['id'] . '&to=read' ), 'chargeforms_toggle_status_' . $entry['id'] ) ); ?>"
												data-tooltip="<?php esc_attr_e( 'Restore', 'chargeforms' ); ?>"
														aria-label="<?php esc_attr_e( 'Restore', 'chargeforms' ); ?>"
														title="<?php esc_attr_e( 'Restore', 'chargeforms' ); ?>"
											>
												<?php Icon::render( 'undo' ); ?>
											</a>
											<a
												class="chargeforms-icon-action is-delete chargeforms-confirm-delete"
												href="<?php echo esc_url( wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_delete_entry&entry_id=' . $entry['id'] . '&form_id=' . $form_id ), 'chargeforms_delete_entry_' . $entry['id'] ) ); ?>"
												data-confirm-title="<?php
													/* translators: %d: the entry's numeric id */
													echo esc_attr( sprintf( __( 'entry #%d', 'chargeforms' ), $entry['id'] ) );
												?>"
												data-confirm-message="<?php
													/* translators: %d: the entry's numeric id */
													echo esc_attr( sprintf( __( 'Permanently delete entry #%d? This cannot be undone.', 'chargeforms' ), $entry['id'] ) );
												?>"
												data-tooltip="<?php esc_attr_e( 'Delete Permanently', 'chargeforms' ); ?>"
														aria-label="<?php esc_attr_e( 'Delete Permanently', 'chargeforms' ); ?>"
														title="<?php esc_attr_e( 'Delete Permanently', 'chargeforms' ); ?>"
											>
												<?php Icon::render( 'trash' ); ?>
											</a>
										<?php else : ?>
											<a
												class="chargeforms-icon-action<?php echo $is_starred ? ' is-active' : ''; ?>"
												href="<?php echo esc_url( wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_toggle_star&entry_id=' . $entry['id'] ), 'chargeforms_toggle_star_' . $entry['id'] ) ); ?>"
												data-tooltip="<?php echo $is_starred ? esc_attr__( 'Unstar', 'chargeforms' ) : esc_attr__( 'Mark as Favorite', 'chargeforms' ); ?>"
														aria-label="<?php echo $is_starred ? esc_attr__( 'Unstar', 'chargeforms' ) : esc_attr__( 'Mark as Favorite', 'chargeforms' ); ?>"
														title="<?php echo $is_starred ? esc_attr__( 'Unstar', 'chargeforms' ) : esc_attr__( 'Mark as Favorite', 'chargeforms' ); ?>"
											>
												<?php Icon::render( 'star', 16, $is_starred ? 'chargeforms-icon-star is-starred' : 'chargeforms-icon-star' ); ?>
											</a>
											<a
												class="chargeforms-icon-action"
												href="<?php echo esc_url( wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_toggle_entry_status&entry_id=' . $entry['id'] . '&to=' . $status_toggle ), 'chargeforms_toggle_status_' . $entry['id'] ) ); ?>"
												data-tooltip="<?php echo 'read' === $entry['status'] ? esc_attr__( 'Mark Unread', 'chargeforms' ) : esc_attr__( 'Mark Read', 'chargeforms' ); ?>"
														aria-label="<?php echo 'read' === $entry['status'] ? esc_attr__( 'Mark Unread', 'chargeforms' ) : esc_attr__( 'Mark Read', 'chargeforms' ); ?>"
														title="<?php echo 'read' === $entry['status'] ? esc_attr__( 'Mark Unread', 'chargeforms' ) : esc_attr__( 'Mark Read', 'chargeforms' ); ?>"
											>
												<?php Icon::render( 'read' === $entry['status'] ? 'mail' : 'check-circle' ); ?>
											</a>
											<a
												class="chargeforms-icon-action"
												href="<?php echo esc_url( wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_toggle_entry_status&entry_id=' . $entry['id'] . '&to=trashed' ), 'chargeforms_toggle_status_' . $entry['id'] ) ); ?>"
												data-tooltip="<?php esc_attr_e( 'Move to Trash', 'chargeforms' ); ?>"
														aria-label="<?php esc_attr_e( 'Move to Trash', 'chargeforms' ); ?>"
														title="<?php esc_attr_e( 'Move to Trash', 'chargeforms' ); ?>"
											>
												<?php Icon::render( 'trash' ); ?>
											</a>
										<?php endif; ?>
									</div>
								</td>
							</tr>
						<?php endforeach; ?>
					</tbody>
				</table>
				</div>
				<?php $this->render_simple_pagination_2( $result, $form_id, $groups, $status ); ?>
			<?php endif; ?>

			</div><?php // .chargeforms-entries-panel ?>
		</div>
		<?php
		wp_localize_script( 'chargeforms-admin', 'ChargeFormsEntriesFilterConfig', [
			'fields'     => $filter_fields,
			'operators'  => [
				[ 'value' => 'equal', 'label' => __( 'Equal', 'chargeforms' ) ],
				[ 'value' => 'not_equal', 'label' => __( 'Not Equal', 'chargeforms' ) ],
				[ 'value' => 'equal_in', 'label' => __( 'Equal In', 'chargeforms' ) ],
				[ 'value' => 'not_equal_in', 'label' => __( 'Not Equal In', 'chargeforms' ) ],
				[ 'value' => 'contains', 'label' => __( 'Contains', 'chargeforms' ) ],
				[ 'value' => 'not_contains', 'label' => __( 'Does Not Contain', 'chargeforms' ) ],
				[ 'value' => 'starts_with', 'label' => __( 'Starts With', 'chargeforms' ) ],
				[ 'value' => 'ends_with', 'label' => __( 'Ends With', 'chargeforms' ) ],
				[ 'value' => 'greater_than', 'label' => __( 'Greater Than', 'chargeforms' ) ],
				[ 'value' => 'less_than', 'label' => __( 'Less Than', 'chargeforms' ) ],
				[ 'value' => 'is_empty', 'label' => __( 'Is Empty', 'chargeforms' ) ],
				[ 'value' => 'is_not_empty', 'label' => __( 'Is Not Empty', 'chargeforms' ) ],
			],
			'groups'     => $groups,
			'formId'     => $form_id,
			'baseUrl'    => admin_url( 'admin.php?page=chargeforms-entries&form_id=' . $form_id ),
			'storageKey' => 'chargeforms_entries_columns_' . $form_id,
		] );
		?>
		<?php
	}

	/** A column header that links to toggle server-side sort — real sort on real columns (id/created_at), used for # and Submitted at. */
	private function render_sort_header( $label, $key, $current_sort_by, $current_sort_dir ) {
		$is_active = $current_sort_by === $key;
		$next_dir  = $is_active && 'desc' === $current_sort_dir ? 'asc' : 'desc';
		$url       = add_query_arg( [ 'sort_by' => $key, 'sort_dir' => $next_dir, 'paged' => false ] );
		?>
		<a href="<?php echo esc_url( $url ); ?>" class="chargeforms-sort-link<?php echo $is_active ? ' is-active' : ''; ?>">
			<?php echo esc_html( $label ); ?>
			<?php Icon::render( $is_active ? ( 'asc' === $current_sort_dir ? 'arrow-up' : 'chevron-down' ) : 'arrow-up-down', 13, 'chargeforms-sort-icon' ); ?>
		</a>
		<?php
	}

	/**
	 * Renders the (initially collapsed) Advanced Filter panel — groups of
	 * conditions ANDed within a group, groups ORed together. The actual row
	 * add/remove/duplicate-group interactivity lives in admin.js
	 * (window.ChargeFormsEntriesFilterConfig above feeds it the field list);
	 * this only needs to draw the static shell plus any groups already
	 * present from the current URL, so a page reload with filters applied
	 * shows them pre-filled instead of resetting to blank.
	 */
	private function render_advanced_filter( $form_id, array $filter_fields, array $groups, $status = 'all' ) {
		?>
		<div class="chargeforms-adv-filter" id="chargeforms-adv-filter" <?php echo $groups ? '' : 'hidden'; ?>>
			<div class="chargeforms-adv-filter-notice">
				<?php Icon::render( 'info-outline' ); ?>
				<?php
				printf(
					/* translators: 1: opening strong tag, 2: closing strong tag, 3: opening strong tag, 4: closing strong tag */
					esc_html__( 'Conditions inside a group are joined with %1$sAND%2$s. Multiple groups are joined with %3$sOR%4$s.', 'chargeforms' ),
					'<strong>',
					'</strong>',
					'<strong>',
					'</strong>'
				);
				?>
			</div>
			<form method="get" id="chargeforms-adv-filter-form">
				<input type="hidden" name="page" value="chargeforms-entries">
				<input type="hidden" name="form_id" value="<?php echo (int) $form_id; ?>">
				<?php if ( 'trashed' === $status ) : ?><input type="hidden" name="status" value="trashed"><?php endif; ?>
				<input type="hidden" name="filter_groups" id="chargeforms-filter-groups-input" value="<?php echo esc_attr( wp_json_encode( $groups ) ); ?>">
				<div class="chargeforms-adv-filter-groups" id="chargeforms-adv-filter-groups"></div>
				<div class="chargeforms-adv-filter-footer">
					<button type="submit" class="button button-primary"><?php esc_html_e( 'Filter', 'chargeforms' ); ?></button>
					<a class="button" href="<?php echo esc_url( admin_url( 'admin.php?page=chargeforms-entries&form_id=' . $form_id ) ); ?>"><?php esc_html_e( 'Clear Filters', 'chargeforms' ); ?></a>
				</div>
			</form>
		</div>
		<?php
	}

	private function render_simple_pagination_2( array $result, $form_id, array $groups, $status = 'all' ) {
		$pages = max( 1, (int) $result['pages'] );
		?>
		<div class="chargeforms-entries-footer">
			<label class="chargeforms-compact-view-toggle">
				<input type="checkbox" id="chargeforms-compact-view">
				<?php esc_html_e( 'Compact View', 'chargeforms' ); ?>
			</label>

			<div class="chargeforms-pagination">
				<span class="chargeforms-pagination-total">
					<?php
					printf(
						/* translators: %d: total entries */
						esc_html__( 'Total %d', 'chargeforms' ),
						(int) $result['total']
					);
					?>
				</span>

				<form method="get" class="chargeforms-per-page-form">
					<input type="hidden" name="page" value="chargeforms-entries">
					<input type="hidden" name="form_id" value="<?php echo (int) $form_id; ?>">
					<?php if ( 'trashed' === $status ) : ?><input type="hidden" name="status" value="trashed"><?php endif; ?>
					<?php if ( $groups ) : ?><input type="hidden" name="filter_groups" value="<?php echo esc_attr( wp_json_encode( $groups ) ); ?>"><?php endif; ?>
					<select name="per_page" onchange="this.form.submit()">
						<?php foreach ( [ 10, 20, 50, 100 ] as $size ) : ?>
							<option value="<?php echo (int) $size; ?>" <?php selected( (int) $result['per_page'], $size ); ?>><?php echo (int) $size; ?>/<?php esc_html_e( 'page', 'chargeforms' ); ?></option>
						<?php endforeach; ?>
					</select>
				</form>

				<span class="chargeforms-pagination-links">
					<a class="button<?php echo $result['page'] <= 1 ? ' disabled' : ''; ?>" href="<?php echo $result['page'] > 1 ? esc_url( add_query_arg( [ 'paged' => $result['page'] - 1 ] ) ) : '#'; ?>">&lsaquo;</a>
					<span class="chargeforms-pagination-current"><?php echo (int) $result['page']; ?></span>
					<a class="button<?php echo $result['page'] >= $pages ? ' disabled' : ''; ?>" href="<?php echo $result['page'] < $pages ? esc_url( add_query_arg( [ 'paged' => $result['page'] + 1 ] ) ) : '#'; ?>">&rsaquo;</a>
				</span>

				<form method="get" class="chargeforms-goto-page-form">
					<input type="hidden" name="page" value="chargeforms-entries">
					<input type="hidden" name="form_id" value="<?php echo (int) $form_id; ?>">
					<?php if ( 'trashed' === $status ) : ?><input type="hidden" name="status" value="trashed"><?php endif; ?>
					<?php if ( $groups ) : ?><input type="hidden" name="filter_groups" value="<?php echo esc_attr( wp_json_encode( $groups ) ); ?>"><?php endif; ?>
					<span><?php esc_html_e( 'Go to', 'chargeforms' ); ?></span>
					<input type="number" name="paged" min="1" max="<?php echo (int) $pages; ?>" value="<?php echo (int) $result['page']; ?>">
				</form>
			</div>
		</div>
		<?php
	}

	/**
	 * Single-entry detail view: main submitted data on the left, submission
	 * metadata (date, status, IP, browser) and actions in a right-hand
	 * sidebar — a record-detail layout, not just a table row expanded.
	 */
	private function render_single( $entry_id ) {
		$entry = Entry::get( $entry_id );

		if ( ! $entry ) {
			echo '<div class="wrap"><p>' . esc_html__( 'Entry not found.', 'chargeforms' ) . '</p></div>';
			return;
		}

		$form = Form::get( $entry['form_id'] );
		if ( ! $form ) {
			echo '<div class="wrap"><p>' . esc_html__( 'Form not found.', 'chargeforms' ) . '</p></div>';
			return;
		}

		$date_format  = Settings::get( 'entries_date_format', 'M j, Y g:ia' );
		$table_fields = array_values( array_filter( $form['fields'], function ( $field ) {
			return ! in_array( $field['type'], self::NON_DATA_FIELD_TYPES, true );
		} ) );

		$siblings   = Entry::for_form( $form['id'] );
		$ids        = array_map( fn( $e ) => (int) $e['id'], $siblings );
		$pos        = array_search( (int) $entry_id, $ids, true );
		$prev_id    = false !== $pos && $pos < count( $ids ) - 1 ? $ids[ $pos + 1 ] : null;
		$next_id    = false !== $pos && $pos > 0 ? $ids[ $pos - 1 ] : null;
		$nav_url    = fn( $id ) => admin_url( 'admin.php?page=chargeforms-entries&entry_id=' . $id . '&form_id=' . $form['id'] );
		$view_url   = admin_url( 'admin.php?page=chargeforms-entries&entry_id=' . $entry_id . '&form_id=' . $form['id'] );
		$editing    = isset( $_GET['edit'] ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended

		$starred     = '1' === (string) Entry::get_meta( $entry_id, 'starred' );
		$source_url  = Entry::get_meta( $entry_id, 'source_url' );
		$browser     = Entry::classify_browser( $entry['user_agent'] );
		$device      = $entry['user_agent'] ? Entry::classify_device( $entry['user_agent'] ) : '';
		$submitter_id = (int) Entry::get_meta( $entry_id, 'submitted_by_user_id' );
		$submitter    = $submitter_id ? get_userdata( $submitter_id ) : false;

		$notes = Entry::get_meta_all( $entry_id, 'note' );
		$logs  = Entry::get_meta_all( $entry_id, 'activity_log' );

		$status_options = [
			'unread' => __( 'Unread', 'chargeforms' ),
			'read'   => __( 'Read', 'chargeforms' ),
		];
		?>
		<div class="wrap chargeforms-wrap chargeforms-entry-single">
			<?php Page_Header::render( 'chargeforms-entries' ); ?>

			<?php if ( isset( $_GET['chargeforms_notice'] ) && 'updated' === $_GET['chargeforms_notice'] ) : // phpcs:ignore WordPress.Security.NonceVerification.Recommended ?>
				<div class="notice notice-success is-dismissible"><p><?php esc_html_e( 'Entry updated.', 'chargeforms' ); ?></p></div>
			<?php endif; ?>
			<?php if ( isset( $_GET['chargeforms_notice'] ) && 'notification_sent' === $_GET['chargeforms_notice'] ) : // phpcs:ignore WordPress.Security.NonceVerification.Recommended ?>
				<div class="notice notice-success is-dismissible"><p><?php esc_html_e( 'Notification email sent.', 'chargeforms' ); ?></p></div>
			<?php endif; ?>

			<div class="chargeforms-entry-breadcrumb">
				<a href="<?php echo esc_url( admin_url( 'admin.php?page=chargeforms-entries&form_id=' . $form['id'] ) ); ?>"><?php esc_html_e( 'Entries', 'chargeforms' ); ?></a>
				<span class="chargeforms-breadcrumb-sep">/</span>
				<span class="chargeforms-breadcrumb-current"><?php echo esc_html( $form['title'] ); ?> #<?php echo (int) $entry_id; ?></span>
			</div>

			<div class="chargeforms-entry-single-head">
				<h1 class="wp-heading-inline"><?php echo esc_html( $form['title'] ); ?> — #<?php echo (int) $entry_id; ?></h1>
				<div class="chargeforms-entry-nav">
					<?php if ( $prev_id ) : ?>
						<a class="button" href="<?php echo esc_url( $nav_url( $prev_id ) ); ?>">&lsaquo; <?php esc_html_e( 'Previous', 'chargeforms' ); ?></a>
					<?php else : ?>
						<span class="button disabled">&lsaquo; <?php esc_html_e( 'Previous', 'chargeforms' ); ?></span>
					<?php endif; ?>
					<?php if ( $next_id ) : ?>
						<a class="button" href="<?php echo esc_url( $nav_url( $next_id ) ); ?>"><?php esc_html_e( 'Next', 'chargeforms' ); ?> &rsaquo;</a>
					<?php else : ?>
						<span class="button disabled"><?php esc_html_e( 'Next', 'chargeforms' ); ?> &rsaquo;</span>
					<?php endif; ?>
					<a class="button" href="<?php echo esc_url( admin_url( 'admin.php?page=chargeforms-entries&form_id=' . $form['id'] ) ); ?>"><?php esc_html_e( 'View All', 'chargeforms' ); ?></a>
				</div>
			</div>

			<div class="chargeforms-entry-single-grid">
				<div class="chargeforms-entry-main">
					<div class="chargeforms-card chargeforms-entry-data-card">
						<div class="chargeforms-card-head">
							<h2><?php Icon::render( 'list-view' ); ?> <?php esc_html_e( 'Form Entry Data', 'chargeforms' ); ?></h2>
							<div class="chargeforms-entry-data-controls">
								<?php if ( ! $editing ) : ?>
									<button
										type="button"
										class="chargeforms-icon-action"
										id="chargeforms-toggle-json-view"
										data-tooltip="<?php esc_attr_e( 'View as JSON', 'chargeforms' ); ?>"
										aria-label="<?php esc_attr_e( 'View as JSON', 'chargeforms' ); ?>"
									><?php Icon::render( 'editor-code' ); ?></button>
								<?php endif; ?>
								<a
									href="<?php echo esc_url( wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_toggle_star&entry_id=' . $entry_id ), 'chargeforms_toggle_star_' . $entry_id ) ); ?>"
									class="chargeforms-icon-action<?php echo $starred ? ' is-active' : ''; ?>"
									data-tooltip="<?php echo $starred ? esc_attr__( 'Unstar', 'chargeforms' ) : esc_attr__( 'Star this entry', 'chargeforms' ); ?>"
									aria-label="<?php echo $starred ? esc_attr__( 'Unstar', 'chargeforms' ) : esc_attr__( 'Star this entry', 'chargeforms' ); ?>"
								><?php Icon::render( 'star', 16, $starred ? 'chargeforms-icon-star is-starred' : 'chargeforms-icon-star' ); ?></a>
								<label class="chargeforms-show-empty-toggle">
									<input type="checkbox" id="chargeforms-show-empty-fields">
									<?php esc_html_e( 'Show empty fields', 'chargeforms' ); ?>
								</label>
								<?php if ( ! $editing ) : ?>
									<a class="button button-small" href="<?php echo esc_url( add_query_arg( 'edit', '1', $view_url ) ); ?>"><?php esc_html_e( 'Edit', 'chargeforms' ); ?></a>
								<?php endif; ?>
							</div>
						</div>

						<?php if ( $editing ) : ?>
							<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>">
								<input type="hidden" name="action" value="chargeforms_update_entry">
								<input type="hidden" name="entry_id" value="<?php echo (int) $entry_id; ?>">
								<?php wp_nonce_field( 'chargeforms_update_entry_' . $entry_id ); ?>
								<table class="chargeforms-entry-data-table">
									<tbody>
										<?php foreach ( $table_fields as $field ) : ?>
											<?php if ( 'file' === $field['type'] ) : ?>
												<?php continue; // Re-uploading isn't supported from this form — see render_edit_input(). ?>
											<?php endif; ?>
											<tr>
												<th><label><?php echo esc_html( self::column_label( $field ) ); ?></label></th>
												<td><?php $this->render_edit_input( $field, $entry['values'][ $field['id'] ] ?? '' ); ?></td>
											</tr>
										<?php endforeach; ?>
									</tbody>
								</table>
								<p class="chargeforms-entry-edit-actions">
									<button type="submit" class="button button-primary"><?php esc_html_e( 'Save Changes', 'chargeforms' ); ?></button>
									<a class="button" href="<?php echo esc_url( $view_url ); ?>"><?php esc_html_e( 'Cancel', 'chargeforms' ); ?></a>
								</p>
							</form>
						<?php else : ?>
							<div class="chargeforms-entry-field-list" id="chargeforms-entry-field-list">
								<?php foreach ( $table_fields as $field ) : ?>
									<?php $value = self::display_value( $entry['values'][ $field['id'] ] ?? '' ); ?>
									<div class="chargeforms-entry-field-row<?php echo '' === $value ? ' is-empty' : ''; ?>">
										<div class="chargeforms-entry-field-label"><?php echo esc_html( self::column_label( $field ) ); ?></div>
										<div class="chargeforms-entry-field-value">
											<?php if ( in_array( $field['type'], [ 'image_upload', 'signature' ], true ) && $value ) : ?>
												<a href="<?php echo esc_url( $value ); ?>" target="_blank" rel="noopener"><img src="<?php echo esc_url( $value ); ?>" alt="" class="chargeforms-entry-field-image"></a>
											<?php elseif ( 'file' === $field['type'] && $value ) : ?>
												<a href="<?php echo esc_url( $value ); ?>" target="_blank" rel="noopener"><?php echo esc_html( basename( $value ) ); ?></a>
											<?php elseif ( 'email' === $field['type'] && $value ) : ?>
												<a href="mailto:<?php echo esc_attr( $value ); ?>"><?php echo esc_html( $value ); ?></a>
											<?php else : ?>
												<?php echo '' !== $value ? esc_html( $value ) : '—'; ?>
											<?php endif; ?>
										</div>
									</div>
								<?php endforeach; ?>
							</div>
							<?php
							// Raw, label-keyed values — not the HTML-escaped display
							// strings above (e.g. a mailto: link) — matching the reference product's
							// own "view as JSON" toggle, which dumps the entry's real
							// stored data for a power user to copy/inspect, not the
							// rendered presentation of it.
							$json_payload = [];
							foreach ( $table_fields as $field ) {
								$json_payload[ self::column_label( $field ) ] = $entry['values'][ $field['id'] ] ?? null;
							}
							?>
							<textarea class="chargeforms-entry-json-view" id="chargeforms-entry-json-view" readonly hidden><?php echo esc_textarea( wp_json_encode( $json_payload, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES ) ); ?></textarea>
							<?php
							wp_add_inline_script( 'chargeforms-admin', '							( function () {
								var toggle = document.getElementById( \'chargeforms-show-empty-fields\' );
								var list   = document.getElementById( \'chargeforms-entry-field-list\' );
								if ( toggle && list ) {
									toggle.addEventListener( \'change\', function () {
										list.classList.toggle( \'chargeforms-show-empty\', toggle.checked );
									} );
								}

								var jsonToggle = document.getElementById( \'chargeforms-toggle-json-view\' );
								var jsonView    = document.getElementById( \'chargeforms-entry-json-view\' );
								if ( ! jsonToggle || ! jsonView || ! list ) { return; }
								jsonToggle.addEventListener( \'click\', function () {
									var showingJson = ! jsonView.hidden;
									jsonView.hidden = showingJson;
									list.hidden = ! showingJson;
									jsonToggle.classList.toggle( \'is-active\', ! showingJson );
								} );
							} )();'
							);
							?>
						<?php endif; ?>
					</div>

					<div class="chargeforms-card">
						<div class="chargeforms-card-head">
							<h2><?php esc_html_e( 'Submission Notes', 'chargeforms' ); ?></h2>
						</div>
						<?php if ( empty( $notes ) ) : ?>
							<p class="chargeforms-notes-empty"><?php esc_html_e( 'Sorry, No Notes found!', 'chargeforms' ); ?></p>
						<?php else : ?>
							<ul class="chargeforms-notes-list">
								<?php foreach ( array_reverse( $notes ) as $note_row ) : ?>
									<?php $note = json_decode( $note_row['meta_value'], true ) ?: []; ?>
									<li class="chargeforms-note-item">
										<div class="chargeforms-note-meta">
											<strong><?php echo esc_html( $note['author'] ?? __( 'Unknown', 'chargeforms' ) ); ?></strong>
											<span><?php echo esc_html( self::format_entry_date( $note_row['created_at'], $date_format ) ); ?></span>
										</div>
										<p><?php echo esc_html( $note['text'] ?? '' ); ?></p>
									</li>
								<?php endforeach; ?>
							</ul>
						<?php endif; ?>
						<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" class="chargeforms-add-note-form">
							<input type="hidden" name="action" value="chargeforms_add_entry_note">
							<input type="hidden" name="entry_id" value="<?php echo (int) $entry_id; ?>">
							<?php wp_nonce_field( 'chargeforms_add_entry_note_' . $entry_id ); ?>
							<textarea name="note" class="large-text" rows="2" placeholder="<?php esc_attr_e( 'Add a private note about this submission…', 'chargeforms' ); ?>" required></textarea>
							<button type="submit" class="button button-primary"><?php esc_html_e( 'Add Note', 'chargeforms' ); ?></button>
						</form>
					</div>

					<div class="chargeforms-card">
						<div class="chargeforms-card-head">
							<h2><?php esc_html_e( 'Submission Logs', 'chargeforms' ); ?></h2>
							<div class="chargeforms-toggle-group" id="chargeforms-logs-toggle">
								<button type="button" class="is-active" data-log-tab="general"><?php esc_html_e( 'General', 'chargeforms' ); ?></button>
								<button type="button" data-log-tab="api"><?php esc_html_e( 'API Calls', 'chargeforms' ); ?></button>
							</div>
						</div>
						<div data-log-panel="general">
							<?php if ( empty( $logs ) ) : ?>
								<p class="chargeforms-notes-empty"><?php esc_html_e( 'Sorry, No Logs found!', 'chargeforms' ); ?></p>
							<?php else : ?>
								<ul class="chargeforms-log-list">
									<?php foreach ( array_reverse( $logs ) as $log_row ) : ?>
										<?php $log = json_decode( $log_row['meta_value'], true ) ?: []; ?>
										<li class="chargeforms-log-item">
											<?php Icon::render( 'clock' ); ?>
											<span class="chargeforms-log-message"><?php echo esc_html( $log['message'] ?? '' ); ?></span>
											<span class="chargeforms-log-meta"><?php echo esc_html( $log['user'] ?? '' ); ?> &middot; <?php echo esc_html( self::format_entry_date( $log_row['created_at'], $date_format ) ); ?></span>
										</li>
									<?php endforeach; ?>
								</ul>
							<?php endif; ?>
						</div>
						<div data-log-panel="api" style="display:none;">
							<p class="chargeforms-notes-empty"><?php esc_html_e( 'Sorry, No Logs found!', 'chargeforms' ); ?></p>
						</div>
						<?php
						wp_add_inline_script( 'chargeforms-admin', '						( function () {
							var group = document.getElementById( \'chargeforms-logs-toggle\' );
							if ( ! group ) { return; }
							var buttons = group.querySelectorAll( \'button\' );
							var panels  = document.querySelectorAll( \'[data-log-panel]\' );
							Array.prototype.forEach.call( buttons, function ( btn ) {
								btn.addEventListener( \'click\', function () {
									Array.prototype.forEach.call( buttons, function ( b ) { b.classList.remove( \'is-active\' ); } );
									btn.classList.add( \'is-active\' );
									var tab = btn.getAttribute( \'data-log-tab\' );
									Array.prototype.forEach.call( panels, function ( panel ) {
										panel.style.display = panel.getAttribute( \'data-log-panel\' ) === tab ? \'\' : \'none\';
									} );
								} );
							} );
						} )();'
						);
						?>
					</div>
				</div>

				<div class="chargeforms-entry-sidebar">
					<div class="chargeforms-card">
						<h2><?php esc_html_e( 'Submission Info', 'chargeforms' ); ?></h2>
						<dl class="chargeforms-meta-list">
							<dt><?php esc_html_e( 'Submission ID', 'chargeforms' ); ?></dt>
							<dd>#<?php echo (int) $entry_id; ?></dd>
							<dt><?php esc_html_e( 'User IP', 'chargeforms' ); ?></dt>
							<dd>
								<?php if ( $entry['ip_address'] ) : ?>
									<a href="<?php echo esc_url( 'https://ipinfo.io/' . rawurlencode( $entry['ip_address'] ) ); ?>" target="_blank" rel="noopener"><?php echo esc_html( $entry['ip_address'] ); ?></a>
								<?php else : ?>
									&mdash;
								<?php endif; ?>
							</dd>
							<?php if ( $source_url ) : ?>
								<dt><?php esc_html_e( 'Source URL', 'chargeforms' ); ?></dt>
								<dd class="chargeforms-meta-wrap"><a href="<?php echo esc_url( $source_url ); ?>" target="_blank" rel="noopener"><?php echo esc_html( $source_url ); ?></a></dd>
							<?php endif; ?>
							<dt><?php esc_html_e( 'Browser', 'chargeforms' ); ?></dt>
							<dd><?php echo esc_html( $browser ?: '—' ); ?></dd>
							<dt><?php esc_html_e( 'Device', 'chargeforms' ); ?></dt>
							<dd><?php echo esc_html( $device ?: '—' ); ?></dd>
							<?php if ( $submitter ) : ?>
								<dt><?php esc_html_e( 'User', 'chargeforms' ); ?></dt>
								<dd><a href="<?php echo esc_url( get_edit_user_link( $submitter_id ) ); ?>"><?php echo esc_html( $submitter->display_name ); ?></a></dd>
							<?php endif; ?>
							<dt><?php esc_html_e( 'Status', 'chargeforms' ); ?></dt>
							<dd><span class="chargeforms-status chargeforms-status-<?php echo esc_attr( $entry['status'] ); ?>"><span class="chargeforms-status-dot"></span><?php echo esc_html( ucfirst( $entry['status'] ) ); ?></span></dd>
							<dt><?php esc_html_e( 'Submitted On', 'chargeforms' ); ?></dt>
							<dd><?php echo esc_html( self::format_entry_date( $entry['created_at'], $date_format ) ); ?></dd>
						</dl>
						<div class="chargeforms-entry-info-actions">
							<a class="button button-primary button-small" href="<?php echo esc_url( add_query_arg( 'edit', '1', $view_url ) ); ?>"><?php Icon::render( 'edit' ); ?> <?php esc_html_e( 'Edit', 'chargeforms' ); ?></a>
							<div class="chargeforms-status-dropdown">
								<button type="button" class="button button-small" id="chargeforms-status-dropdown-btn"><?php esc_html_e( 'Change status to', 'chargeforms' ); ?> <?php Icon::render( 'arrow-down-alt2' ); ?></button>
								<div class="chargeforms-status-dropdown-menu" id="chargeforms-status-dropdown-menu" style="display:none;">
									<?php foreach ( $status_options as $status_key => $status_label ) : ?>
										<?php if ( $status_key === $entry['status'] ) : continue; endif; ?>
										<a href="<?php echo esc_url( wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_toggle_entry_status&entry_id=' . $entry_id . '&to=' . $status_key ), 'chargeforms_toggle_status_' . $entry_id ) ); ?>"><?php echo esc_html( $status_label ); ?></a>
									<?php endforeach; ?>
								</div>
							</div>
						</div>
						<?php
						wp_add_inline_script( 'chargeforms-admin', '						( function () {
							var btn  = document.getElementById( \'chargeforms-status-dropdown-btn\' );
							var menu = document.getElementById( \'chargeforms-status-dropdown-menu\' );
							if ( ! btn || ! menu ) { return; }
							btn.addEventListener( \'click\', function ( e ) {
								e.stopPropagation();
								menu.style.display = menu.style.display === \'none\' ? \'\' : \'none\';
							} );
							document.addEventListener( \'click\', function () { menu.style.display = \'none\'; } );
						} )();'
						);
						?>
					</div>

					<?php $stripe_intent_id = Entry::get_meta( $entry_id, 'stripe_payment_intent_id' ); ?>
					<?php if ( $stripe_intent_id ) : ?>
						<?php
						// Mockup's "Resend receipt"/"Refund in Stripe" buttons both
						// resolve to the same real, working action for a PaymentIntent
						// on ChargeForms's current single-charge (non-subscription)
						// Stripe integration: Stripe's own dashboard page for that
						// intent, where a refund is actually performed and where
						// receipt emails are actually managed — there is no public
						// Stripe API to trigger a receipt resend outside the
						// dashboard, so a second, separately-labeled button here
						// would be a dead click, not a real second action.
						$is_test_mode  = 0 === strpos( (string) Settings::get( 'stripe_secret_key' ), 'sk_test_' );
						$stripe_dash_url = 'https://dashboard.stripe.com/' . ( $is_test_mode ? 'test/' : '' ) . 'payments/' . rawurlencode( $stripe_intent_id );
						?>
						<div class="chargeforms-card">
							<h2 style="display:flex;align-items:center;gap:7px;">
								<?php esc_html_e( 'Payment', 'chargeforms' ); ?>
								<span style="margin-left:auto;font-size:10px;font-weight:700;color:#fff;background:#635bff;padding:2px 7px;border-radius:999px;"><?php esc_html_e( 'STRIPE', 'chargeforms' ); ?></span>
							</h2>
							<dl class="chargeforms-meta-list">
								<dt><?php esc_html_e( 'Amount', 'chargeforms' ); ?></dt>
								<dd><?php echo esc_html( number_format( (float) Entry::get_meta( $entry_id, 'stripe_amount' ), 2 ) ); ?></dd>
								<dt><?php esc_html_e( 'Stripe PaymentIntent', 'chargeforms' ); ?></dt>
								<dd class="chargeforms-meta-wrap"><?php echo esc_html( $stripe_intent_id ); ?></dd>
							</dl>
							<a class="button button-primary" style="width:100%;text-align:center;margin-top:12px;" href="<?php echo esc_url( $stripe_dash_url ); ?>" target="_blank" rel="noopener noreferrer">
								<?php esc_html_e( 'View in Stripe', 'chargeforms' ); ?>
							</a>
						</div>
					<?php endif; ?>

					<div class="chargeforms-card">
						<h2><?php esc_html_e( 'Actions', 'chargeforms' ); ?></h2>
						<?php $created_post_id = Entry::get_meta( $entry_id, 'created_post_id' ); ?>
						<?php if ( $created_post_id ) : ?>
							<p>
								<a class="button" href="<?php echo esc_url( get_edit_post_link( $created_post_id ) ); ?>">
									<?php esc_html_e( 'Edit Created Post', 'chargeforms' ); ?>
								</a>
							</p>
						<?php endif; ?>
						<p>
							<button type="button" class="button" id="chargeforms-resend-notification-btn">
								<?php esc_html_e( 'Resend Email Notification', 'chargeforms' ); ?>
							</button>
						</p>
						<p>
							<a
								class="button"
								href="<?php echo esc_url( wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_print_entry&entry_id=' . $entry_id ), 'chargeforms_print_entry_' . $entry_id ) ); ?>"
								target="_blank" rel="noopener"
							>
								<?php esc_html_e( 'Print', 'chargeforms' ); ?>
							</a>
						</p>
						<?php if ( 'trashed' === $entry['status'] ) : ?>
							<p>
								<a
									class="button"
									href="<?php echo esc_url( wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_toggle_entry_status&entry_id=' . $entry_id . '&to=read' ), 'chargeforms_toggle_status_' . $entry_id ) ); ?>"
								>
									<?php esc_html_e( 'Restore', 'chargeforms' ); ?>
								</a>
							</p>
							<p>
								<a
									class="button chargeforms-delete-link chargeforms-confirm-delete"
									href="<?php echo esc_url( wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_delete_entry&entry_id=' . $entry_id . '&form_id=' . $form['id'] ), 'chargeforms_delete_entry_' . $entry_id ) ); ?>"
									data-confirm-title="<?php
										/* translators: %d: the entry's numeric id */
										echo esc_attr( sprintf( __( 'entry #%d', 'chargeforms' ), $entry_id ) );
									?>"
									data-confirm-message="<?php
										/* translators: %d: the entry's numeric id */
										echo esc_attr( sprintf( __( 'Permanently delete entry #%d? This cannot be undone.', 'chargeforms' ), $entry_id ) );
									?>"
								>
									<?php esc_html_e( 'Delete Permanently', 'chargeforms' ); ?>
								</a>
							</p>
						<?php else : ?>
							<p>
								<a
									class="button chargeforms-delete-link"
									href="<?php echo esc_url( wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_toggle_entry_status&entry_id=' . $entry_id . '&to=trashed' ), 'chargeforms_toggle_status_' . $entry_id ) ); ?>"
								>
									<?php esc_html_e( 'Move to Trash', 'chargeforms' ); ?>
								</a>
							</p>
						<?php endif; ?>
					</div>
				</div>
			</div>

			<div class="chargeforms-modal-overlay" id="chargeforms-resend-modal" style="display:none;">
				<div class="chargeforms-modal">
					<div class="chargeforms-modal-head">
						<h2><?php esc_html_e( 'Choose Email Notification', 'chargeforms' ); ?></h2>
						<button type="button" class="chargeforms-modal-close" data-modal="chargeforms-resend-modal" aria-label="<?php esc_attr_e( 'Close', 'chargeforms' ); ?>">&times;</button>
					</div>
					<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>">
						<input type="hidden" name="action" value="chargeforms_resend_notification">
						<input type="hidden" name="entry_id" value="<?php echo (int) $entry_id; ?>">
						<input type="hidden" name="recipient_mode" id="chargeforms-recipient-mode" value="default">
						<?php wp_nonce_field( 'chargeforms_resend_notification_' . $entry_id ); ?>

						<p class="chargeforms-modal-field">
							<label><?php esc_html_e( 'Notification', 'chargeforms' ); ?></label>
							<select disabled>
								<option><?php esc_html_e( 'New Submission Notification', 'chargeforms' ); ?></option>
							</select>
						</p>

						<p class="chargeforms-modal-field">
							<label><?php esc_html_e( 'Send To', 'chargeforms' ); ?></label>
							<div class="chargeforms-segmented" id="chargeforms-recipient-segmented">
								<button type="button" class="is-active" data-mode="default"><?php esc_html_e( 'Default Recipient', 'chargeforms' ); ?></button>
								<button type="button" data-mode="custom"><?php esc_html_e( 'Custom Recipient', 'chargeforms' ); ?></button>
							</div>
						</p>
						<p class="chargeforms-modal-field" id="chargeforms-custom-email-wrap" style="display:none;">
							<input type="email" name="custom_email" class="regular-text" placeholder="name@example.com">
						</p>

						<div class="chargeforms-modal-actions">
							<button type="button" class="button" data-modal="chargeforms-resend-modal"><?php esc_html_e( 'Cancel', 'chargeforms' ); ?></button>
							<button type="submit" class="button button-primary"><?php esc_html_e( 'Resend this notification', 'chargeforms' ); ?></button>
						</div>
					</form>
				</div>
			</div>

			<?php
			wp_add_inline_script( 'chargeforms-admin', '			( function () {
				function bindModal( openBtnId, modalId ) {
					var openBtn = document.getElementById( openBtnId );
					var modal   = document.getElementById( modalId );
					if ( ! openBtn || ! modal ) { return; }
					openBtn.addEventListener( \'click\', function () { modal.style.display = \'flex\'; } );
					Array.prototype.forEach.call( modal.querySelectorAll( \'[data-modal="\' + modalId + \'"]\' ), function ( closeEl ) {
						closeEl.addEventListener( \'click\', function () { modal.style.display = \'none\'; } );
					} );
					modal.addEventListener( \'click\', function ( e ) {
						if ( e.target === modal ) { modal.style.display = \'none\'; }
					} );
				}
				bindModal( \'chargeforms-resend-notification-btn\', \'chargeforms-resend-modal\' );

				var segmented = document.getElementById( \'chargeforms-recipient-segmented\' );
				var modeInput = document.getElementById( \'chargeforms-recipient-mode\' );
				var customWrap = document.getElementById( \'chargeforms-custom-email-wrap\' );
				if ( segmented && modeInput && customWrap ) {
					Array.prototype.forEach.call( segmented.querySelectorAll( \'button\' ), function ( btn ) {
						btn.addEventListener( \'click\', function () {
							Array.prototype.forEach.call( segmented.querySelectorAll( \'button\' ), function ( b ) { b.classList.remove( \'is-active\' ); } );
							btn.classList.add( \'is-active\' );
							var mode = btn.getAttribute( \'data-mode\' );
							modeInput.value = mode;
							customWrap.style.display = \'custom\' === mode ? \'\' : \'none\';
						} );
					} );
				}
			} )();'
			);
			?>
		</div>
		<?php
	}

	/** Renders one editable control for the entry-edit form, matched to the field's original input type. */
	private function render_edit_input( array $field, $value ) {
		$name = 'chargeforms_data[' . esc_attr( $field['id'] ) . ']';

		switch ( $field['type'] ) {
			case 'textarea':
				printf( '<textarea name="%s" class="large-text" rows="4">%s</textarea>', esc_attr( $name ), esc_textarea( $value ) );
				break;
			case 'select':
				printf( '<select name="%s">', esc_attr( $name ) );
				foreach ( $field['options'] ?? [] as $option ) {
					printf( '<option value="%1$s" %2$s>%1$s</option>', esc_attr( $option ), selected( $value, $option, false ) );
				}
				echo '</select>';
				break;
			case 'radio':
				foreach ( $field['options'] ?? [] as $option ) {
					printf(
						'<label class="chargeforms-edit-radio-option"><input type="radio" name="%s" value="%s" %s> %s</label>',
						esc_attr( $name ),
						esc_attr( $option ),
						checked( $value, $option, false ),
						esc_html( $option )
					);
				}
				break;
			case 'checkbox':
				printf( '<input type="checkbox" name="%s" value="1" %s>', esc_attr( $name ), checked( $value, '1', false ) );
				break;
			case 'number':
				printf( '<input type="number" name="%s" value="%s" class="regular-text">', esc_attr( $name ), esc_attr( $value ) );
				break;
			case 'email':
				printf( '<input type="email" name="%s" value="%s" class="regular-text">', esc_attr( $name ), esc_attr( $value ) );
				break;
			case 'date':
				printf( '<input type="date" name="%s" value="%s">', esc_attr( $name ), esc_attr( $value ) );
				break;
			case 'url':
				printf( '<input type="url" name="%s" value="%s" class="regular-text">', esc_attr( $name ), esc_attr( $value ) );
				break;
			default:
				printf( '<input type="text" name="%s" value="%s" class="regular-text">', esc_attr( $name ), esc_attr( $value ) );
		}
	}

	public function handle_update_entry() {
		$entry_id = isset( $_POST['entry_id'] ) ? (int) $_POST['entry_id'] : 0;

		if ( ! current_user_can( 'chargeforms_manage_forms' ) || ! check_admin_referer( 'chargeforms_update_entry_' . $entry_id ) ) {
			wp_die( esc_html__( 'Not allowed.', 'chargeforms' ), 403 );
		}

		$entry = Entry::get( $entry_id );
		if ( ! $entry ) {
			wp_die( esc_html__( 'Entry not found.', 'chargeforms' ), 404 );
		}

		$form = Form::get( $entry['form_id'] );
		$raw  = isset( $_POST['chargeforms_data'] ) ? wp_unslash( $_POST['chargeforms_data'] ) : []; // phpcs:ignore WordPress.Security.ValidatedSanitizedInput

		// Merge onto the existing values rather than replacing wholesale — the
		// edit form deliberately omits file fields (no re-upload support yet),
		// so a field absent from $_POST must keep its current stored value.
		$values = $entry['values'];
		foreach ( $form['fields'] ?? [] as $field ) {
			if ( ! array_key_exists( $field['id'], $raw ) ) {
				continue;
			}
			$val                    = $raw[ $field['id'] ];
			$values[ $field['id'] ] = is_array( $val ) ? array_map( 'sanitize_text_field', $val ) : sanitize_textarea_field( $val );
		}

		Entry::update( $entry_id, $values );
		Entry::log_activity( $entry_id, __( 'Entry data edited', 'chargeforms' ) );

		wp_safe_redirect( admin_url( 'admin.php?page=chargeforms-entries&entry_id=' . $entry_id . '&form_id=' . $entry['form_id'] . '&chargeforms_notice=updated' ) );
		exit;
	}

	/** Toggles the "starred" flag (Entry::set_meta upserts, so repeated clicks don't accumulate rows). */
	public function handle_toggle_star() {
		$entry_id = isset( $_GET['entry_id'] ) ? (int) $_GET['entry_id'] : 0;

		if ( ! current_user_can( 'chargeforms_manage_forms' ) || ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ?? '' ) ), 'chargeforms_toggle_star_' . $entry_id ) ) {
			wp_die( esc_html__( 'Not allowed.', 'chargeforms' ), 403 );
		}

		$starred = '1' === (string) Entry::get_meta( $entry_id, 'starred' );
		Entry::set_meta( $entry_id, 'starred', $starred ? '0' : '1' );

		wp_safe_redirect( wp_get_referer() ?: admin_url( 'admin.php?page=chargeforms-entries' ) );
		exit;
	}

	/** Adds one Submission Notes entry — stored the same way as the activity log, under its own meta_key so the two lists never mix. */
	public function handle_add_note() {
		$entry_id = isset( $_POST['entry_id'] ) ? (int) $_POST['entry_id'] : 0;

		if ( ! current_user_can( 'chargeforms_manage_forms' ) || ! check_admin_referer( 'chargeforms_add_entry_note_' . $entry_id ) ) {
			wp_die( esc_html__( 'Not allowed.', 'chargeforms' ), 403 );
		}

		$entry = Entry::get( $entry_id );
		if ( ! $entry ) {
			wp_die( esc_html__( 'Entry not found.', 'chargeforms' ), 404 );
		}

		$note = isset( $_POST['note'] ) ? sanitize_textarea_field( wp_unslash( $_POST['note'] ) ) : '';
		if ( '' !== $note ) {
			$user = wp_get_current_user();
			Entry::add_meta( $entry_id, 'note', wp_json_encode( [
				'text'   => $note,
				'author' => $user->display_name,
			] ) );
		}

		wp_safe_redirect( admin_url( 'admin.php?page=chargeforms-entries&entry_id=' . $entry_id . '&form_id=' . $entry['form_id'] ) );
		exit;
	}

	/**
	 * Re-sends the form's owner-notification email for an existing entry —
	 * reuses SubmissionHandler::send_entry_notification() so the resend uses
	 * the exact same body-building logic as the original send, not a second
	 * copy that could drift out of sync. Custom Recipient is validated with
	 * is_email() before use — never trust an admin-post field as a mail
	 * header input without checking it's actually a well-formed address.
	 */
	public function handle_resend_notification() {
		$entry_id = isset( $_POST['entry_id'] ) ? (int) $_POST['entry_id'] : 0;

		if ( ! current_user_can( 'chargeforms_manage_forms' ) || ! check_admin_referer( 'chargeforms_resend_notification_' . $entry_id ) ) {
			wp_die( esc_html__( 'Not allowed.', 'chargeforms' ), 403 );
		}

		$entry = Entry::get( $entry_id );
		if ( ! $entry ) {
			wp_die( esc_html__( 'Entry not found.', 'chargeforms' ), 404 );
		}

		$form = Form::get( $entry['form_id'] );
		if ( ! $form ) {
			wp_die( esc_html__( 'Form not found.', 'chargeforms' ), 404 );
		}

		$recipient_mode = isset( $_POST['recipient_mode'] ) ? sanitize_key( wp_unslash( $_POST['recipient_mode'] ) ) : 'default';
		$custom_email   = isset( $_POST['custom_email'] ) ? sanitize_email( wp_unslash( $_POST['custom_email'] ) ) : '';
		$to_override    = ( 'custom' === $recipient_mode && is_email( $custom_email ) ) ? $custom_email : '';

		SubmissionHandler::send_entry_notification( $form, $entry['values'], $entry_id, $to_override );
		Entry::log_activity( $entry_id, $to_override
			/* translators: %s: recipient email address */
			? sprintf( __( 'Notification resent to %s', 'chargeforms' ), $to_override )
			: __( 'Notification resent to default recipient', 'chargeforms' )
		);

		wp_safe_redirect( admin_url( 'admin.php?page=chargeforms-entries&entry_id=' . $entry_id . '&form_id=' . $entry['form_id'] . '&chargeforms_notice=notification_sent' ) );
		exit;
	}

	private function render_overview() {
		$forms = Form::all();

		if ( empty( $forms ) ) {
			?>
			<div class="wrap chargeforms-wrap chargeforms-entries-wrap">
				<?php Page_Header::render( 'chargeforms-entries' ); ?>
				<h1><?php esc_html_e( 'Entries', 'chargeforms' ); ?></h1>
				<div class="chargeforms-empty-state chargeforms-empty-state-hero">
					<?php Icon::render( 'inbox', 16, 'chargeforms-empty-state-icon' ); ?>
					<h2><?php esc_html_e( "There's nothing to show yet", 'chargeforms' ); ?></h2>
					<p><?php esc_html_e( 'Entries appear here once a form has been created and someone submits it.', 'chargeforms' ); ?></p>
					<a href="<?php echo esc_url( admin_url( 'admin.php?page=chargeforms-new' ) ); ?>" class="button button-primary button-hero">
						<?php esc_html_e( 'Create your first form', 'chargeforms' ); ?>
					</a>
				</div>
			</div>
			<?php
			return;
		}

		$forms_by_id = [];
		foreach ( $forms as $form ) {
			$forms_by_id[ $form['id'] ] = $form;
		}

		$date_preset = isset( $_GET['date_preset'] ) ? sanitize_key( wp_unslash( $_GET['date_preset'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
		list( $date_from, $date_to ) = $this->resolve_date_preset(
			$date_preset,
			isset( $_GET['date_from'] ) ? sanitize_text_field( wp_unslash( $_GET['date_from'] ) ) : '', // phpcs:ignore WordPress.Security.NonceVerification.Recommended
			isset( $_GET['date_to'] ) ? sanitize_text_field( wp_unslash( $_GET['date_to'] ) ) : '' // phpcs:ignore WordPress.Security.NonceVerification.Recommended
		);

		$query_args = [
			'form_id'   => isset( $_GET['filter_form_id'] ) ? (int) $_GET['filter_form_id'] : 0, // phpcs:ignore WordPress.Security.NonceVerification.Recommended
			'status'    => isset( $_GET['status'] ) ? sanitize_key( wp_unslash( $_GET['status'] ) ) : 'all', // phpcs:ignore WordPress.Security.NonceVerification.Recommended
			'search'    => isset( $_GET['s'] ) ? sanitize_text_field( wp_unslash( $_GET['s'] ) ) : '', // phpcs:ignore WordPress.Security.NonceVerification.Recommended
			'page'      => isset( $_GET['paged'] ) ? max( 1, (int) $_GET['paged'] ) : 1, // phpcs:ignore WordPress.Security.NonceVerification.Recommended
			'per_page'  => isset( $_GET['per_page'] ) ? min( 200, max( 1, (int) $_GET['per_page'] ) ) : 10, // phpcs:ignore WordPress.Security.NonceVerification.Recommended
			'date_from' => $date_from,
			'date_to'   => $date_to,
		];

		$result      = Entry::query( $query_args );
		$date_format = Settings::get( 'entries_date_format', 'M j, Y g:ia' );
		$daily       = Entry::counts_by_day( 14 );
		$max_daily   = max( 1, ...array_values( $daily ) );

		$trashed_all = Entry::count_trashed();

		?>
		<div class="wrap chargeforms-wrap chargeforms-entries-wrap">
			<?php Page_Header::render( 'chargeforms-entries' ); ?>

			<div class="chargeforms-page-head">
				<div class="chargeforms-page-head-text">
					<h1><?php esc_html_e( 'Entries', 'chargeforms' ); ?></h1>
					<p class="chargeforms-page-head-sub"><?php esc_html_e( 'Every submission across every form, in one searchable, filterable view.', 'chargeforms' ); ?></p>
				</div>
				<?php // the reference product's own Entries screen puts its primary actions on the SAME row as the title ("Entries from All Forms" + Import Entries/Hide Chart/Filter, all right-aligned) rather than a separate row below a status-tabs list — moved here to match, and to close the gap live feedback flagged ("overall polish/spacing feels off"). ?>
				<div class="chargeforms-page-head-actions chargeforms-entries-actions">
					<button type="button" class="button button-primary" id="chargeforms-import-entries-btn"><?php Icon::render( 'upload' ); ?> <?php esc_html_e( 'Import Entries', 'chargeforms' ); ?></button>
					<button type="button" class="button" id="chargeforms-toggle-chart"><?php Icon::render( 'chart-bar' ); ?> <span id="chargeforms-toggle-chart-label"><?php esc_html_e( 'Hide Chart', 'chargeforms' ); ?></span></button>
					<div class="chargeforms-filter-dropdown">
						<button type="button" class="button chargeforms-filter-btn" id="chargeforms-filter-toggle"><?php Icon::render( 'filter' ); ?> <?php esc_html_e( 'Filter', 'chargeforms' ); ?></button>
						<div class="chargeforms-filter-panel" id="chargeforms-filter-panel" style="display:none;">
							<form method="get">
								<input type="hidden" name="page" value="chargeforms-entries">
								<input type="hidden" name="status" value="<?php echo esc_attr( $query_args['status'] ); ?>">
								<?php if ( $query_args['form_id'] ) : ?>
									<input type="hidden" name="filter_form_id" value="<?php echo (int) $query_args['form_id']; ?>">
								<?php endif; ?>

								<?php foreach ( [ '' => __( 'All', 'chargeforms' ), 'today' => __( 'Today', 'chargeforms' ), 'yesterday' => __( 'Yesterday', 'chargeforms' ), 'last_week' => __( 'Last Week', 'chargeforms' ), 'last_month' => __( 'Last Month', 'chargeforms' ) ] as $preset_key => $preset_label ) : ?>
									<label class="chargeforms-filter-radio">
										<input type="radio" name="date_preset" value="<?php echo esc_attr( $preset_key ); ?>" <?php checked( $date_preset, $preset_key ); ?>>
										<?php echo esc_html( $preset_label ); ?>
									</label>
								<?php endforeach; ?>

								<div class="chargeforms-filter-range">
									<span><?php esc_html_e( 'Select a Timeframe', 'chargeforms' ); ?></span>
									<div class="chargeforms-filter-range-inputs">
										<input type="date" name="date_from_custom" value="<?php echo esc_attr( 'custom' === $date_preset ? $date_from : '' ); ?>" onclick="this.form.date_preset.value='custom';document.querySelectorAll('#chargeforms-filter-panel input[name=date_preset]').forEach(function(r){r.checked = r.value==='custom';});">
										<span>&ndash;</span>
										<input type="date" name="date_to_custom" value="<?php echo esc_attr( 'custom' === $date_preset ? $date_to : '' ); ?>" onclick="this.form.date_preset.value='custom';document.querySelectorAll('#chargeforms-filter-panel input[name=date_preset]').forEach(function(r){r.checked = r.value==='custom';});">
									</div>
								</div>
								<input type="hidden" name="date_from" id="chargeforms-filter-date-from">
								<input type="hidden" name="date_to" id="chargeforms-filter-date-to">

								<button type="submit" class="button button-primary" onclick="document.getElementById('chargeforms-filter-date-from').value=this.form.date_from_custom.value;document.getElementById('chargeforms-filter-date-to').value=this.form.date_to_custom.value;"><?php esc_html_e( 'Apply', 'chargeforms' ); ?></button>
								<a class="button" href="<?php echo esc_url( remove_query_arg( [ 'date_preset', 'date_from', 'date_to' ] ) ); ?>"><?php esc_html_e( 'Clear', 'chargeforms' ); ?></a>
							</form>
						</div>
					</div>
				</div>
			</div>
			<ul class="subsubsub chargeforms-entries-status-tabs">
				<li>
					<a href="<?php echo esc_url( remove_query_arg( 'status' ) ); ?>" class="<?php echo 'trashed' !== $query_args['status'] ? 'current' : ''; ?>"><?php esc_html_e( 'All', 'chargeforms' ); ?></a> |
				</li>
				<li>
					<a href="<?php echo esc_url( add_query_arg( 'status', 'trashed' ) ); ?>" class="<?php echo 'trashed' === $query_args['status'] ? 'current' : ''; ?>">
						<?php
						/* translators: %d: number of trashed entries */
						printf( esc_html__( 'Trash (%d)', 'chargeforms' ), (int) $trashed_all );
						?>
					</a>
				</li>
			</ul>

			<?php if ( isset( $_GET['chargeforms_notice'] ) && 'imported' === sanitize_text_field( wp_unslash( $_GET['chargeforms_notice'] ) ) ) : // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only display of a just-completed action's own redirect, not a state-changing request ?>
				<div class="notice notice-success is-dismissible"><p>
					<?php
					printf(
						/* translators: %d: number of imported entries */
						esc_html__( 'Imported %d entries.', 'chargeforms' ),
						isset( $_GET['chargeforms_imported'] ) ? absint( wp_unslash( $_GET['chargeforms_imported'] ) ) : 0 // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only, see the ignore comment above.
					);
					?>
				</p></div>
			<?php endif; ?>

			<?php
			wp_add_inline_script( 'chargeforms-admin', '				document.getElementById( \'chargeforms-filter-toggle\' ).addEventListener( \'click\', function () {
					var panel = document.getElementById( \'chargeforms-filter-panel\' );
					panel.style.display = panel.style.display === \'none\' ? \'\' : \'none\';
				} );
				document.getElementById( \'chargeforms-import-entries-btn\' ).addEventListener( \'click\', function () {
					document.getElementById( \'chargeforms-import-entries-modal\' ).style.display = \'flex\';
				} );'
			);
			?>
			<hr class="wp-header-end">

			<div class="chargeforms-modal-overlay" id="chargeforms-import-entries-modal" style="display:none;">
				<div class="chargeforms-modal">
					<h2><?php esc_html_e( 'Import Entries', 'chargeforms' ); ?></h2>
						<p><?php esc_html_e( 'Upload a CSV in the same format ChargeForms exports — a "Date" column followed by one column per form field, in field order.', 'chargeforms' ); ?></p>
						<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" enctype="multipart/form-data">
							<input type="hidden" name="action" value="chargeforms_import_entries">
							<?php wp_nonce_field( 'chargeforms_import_entries' ); ?>
							<p>
								<label for="chargeforms-import-form-select"><?php esc_html_e( 'Target Form', 'chargeforms' ); ?></label><br>
								<select name="form_id" id="chargeforms-import-form-select" required>
									<option value=""><?php esc_html_e( '— Select a form —', 'chargeforms' ); ?></option>
									<?php foreach ( $forms as $form ) : ?>
										<option value="<?php echo (int) $form['id']; ?>"><?php echo esc_html( $form['title'] ); ?></option>
									<?php endforeach; ?>
								</select>
							</p>
							<p>
								<input type="file" name="chargeforms_import_file" accept=".csv,text/csv" required>
							</p>
							<p>
								<button type="submit" class="button button-primary"><?php esc_html_e( 'Import', 'chargeforms' ); ?></button>
								<button type="button" class="button" onclick="document.getElementById('chargeforms-import-entries-modal').style.display='none';"><?php esc_html_e( 'Cancel', 'chargeforms' ); ?></button>
							</p>
						</form>
				</div>
			</div>

			<?php if ( 0 === array_sum( $daily ) ) : ?>
				<div class="chargeforms-empty-state" id="chargeforms-entries-chart">
					<?php Icon::render( 'chart-bar' ); ?>
					<p><?php esc_html_e( "No entries yet in the last 14 days — once submissions start coming in, this turns into a daily activity chart.", 'chargeforms' ); ?></p>
				</div>
			<?php else : ?>
			<?php // "--minimal": live feedback flagged the always-visible per-bar numbers as cluttered, especially with a mostly-sparse 14-day range (the reference product's own equivalent chart shows no per-bar values at all, only an axis + hover). Scoped as a modifier rather than changing .chargeforms-bar-value globally, since Reports' Submission Trends / Integration Deliveries charts reuse the same base classes and still want their values visible. ?>
			<div class="chargeforms-bar-chart chargeforms-bar-chart--minimal" id="chargeforms-entries-chart">
				<div class="chargeforms-bar-chart-axis-max"><?php echo (int) $max_daily; ?></div>
				<?php foreach ( $daily as $day => $count ) : ?>
					<div
						class="chargeforms-bar-col"
						data-tooltip="<?php echo esc_attr( sprintf( /* translators: 1: date, 2: count */ __( '%1$s — %2$s entries', 'chargeforms' ), date_i18n( 'M j', strtotime( $day ) ), number_format_i18n( $count ) ) ); ?>"
					>
						<div class="chargeforms-bar<?php echo 0 === $count ? ' is-empty' : ''; ?>" style="height: <?php echo esc_attr( max( 2, round( ( $count / $max_daily ) * 100 ) ) ); ?>%;">
							<span class="chargeforms-bar-value"><?php echo (int) $count; ?></span>
						</div>
						<span class="chargeforms-bar-label"><?php echo esc_html( date_i18n( 'j', strtotime( $day ) ) ); ?></span>
					</div>
				<?php endforeach; ?>
			</div>
			<?php endif; ?>
			<?php
			$hide_chart_label = wp_json_encode( __( 'Hide Chart', 'chargeforms' ) );
			$show_chart_label = wp_json_encode( __( 'Show Chart', 'chargeforms' ) );
			wp_add_inline_script( 'chargeforms-admin', '				document.getElementById( \'chargeforms-toggle-chart\' ).addEventListener( \'click\', function () {
					var chart = document.getElementById( \'chargeforms-entries-chart\' );
					var hidden = chart.style.display === \'none\';
					chart.style.display = hidden ? \'\' : \'none\';
					document.getElementById( \'chargeforms-toggle-chart-label\' ).textContent = hidden ? ' . $hide_chart_label . ' : ' . $show_chart_label . ';
				} );'
			);
			?>

			<div class="chargeforms-list-toolbar">
				<form method="get" class="chargeforms-filter-form">
					<input type="hidden" name="page" value="chargeforms-entries">
					<input type="hidden" name="status" value="<?php echo esc_attr( $query_args['status'] ); ?>">

					<select name="filter_form_id" onchange="this.form.submit()">
						<option value="0"><?php esc_html_e( 'All Forms', 'chargeforms' ); ?></option>
						<?php foreach ( $forms as $form ) : ?>
							<option value="<?php echo (int) $form['id']; ?>" <?php selected( $query_args['form_id'], $form['id'] ); ?>><?php echo esc_html( $form['title'] ); ?></option>
						<?php endforeach; ?>
					</select>

					<div class="chargeforms-tabs">
						<a class="<?php echo 'all' === $query_args['status'] ? 'is-active' : ''; ?>" href="<?php echo esc_url( add_query_arg( array_merge( $_GET, [ 'status' => 'all', 'paged' => 1 ] ) ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only, $_GET is only reused to build a preserved-filter link, never processed as an action. ?>"><?php esc_html_e( 'All', 'chargeforms' ); ?></a>
						<a class="<?php echo 'unread' === $query_args['status'] ? 'is-active' : ''; ?>" href="<?php echo esc_url( add_query_arg( array_merge( $_GET, [ 'status' => 'unread', 'paged' => 1 ] ) ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended ?>"><?php esc_html_e( 'Unread Only', 'chargeforms' ); ?></a>
						<a class="<?php echo 'read' === $query_args['status'] ? 'is-active' : ''; ?>" href="<?php echo esc_url( add_query_arg( array_merge( $_GET, [ 'status' => 'read', 'paged' => 1 ] ) ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended ?>"><?php esc_html_e( 'Read Only', 'chargeforms' ); ?></a>
					</div>

					<?php // Pushes the search box to the far right, matching the reference product's own toolbar (Select Form + All/Unread/Read on the left, Search Forms flush right) — this utility class already existed for exactly this but had no caller in this form. ?>
					<div class="chargeforms-toolbar-spacer"></div>

					<div class="chargeforms-search-box">
						<?php Icon::render( 'search' ); ?>
						<input type="search" name="s" value="<?php echo esc_attr( $query_args['search'] ); ?>" placeholder="<?php echo esc_attr__( 'Search entries…', 'chargeforms' ); ?>" aria-label="<?php esc_attr_e( 'Search entries', 'chargeforms' ); ?>">
					</div>
					<?php // Real bug found live (user feedback): this submit button was also labeled "Filter", identical to the unrelated date-range Filter button in the header above — two different controls with the same name, genuinely confusing. This one only ever submits the search/form-select/status form, so it's labeled for what it does. ?>
					<button type="submit" class="button"><?php esc_html_e( 'Search', 'chargeforms' ); ?></button>
				</form>
			</div>

			<?php if ( empty( $result['items'] ) ) : ?>
				<div class="chargeforms-empty-state"><?php Icon::render( 'trashed' === $query_args['status'] ? 'trash-2' : 'info' ); ?><p><?php echo 'trashed' === $query_args['status'] ? esc_html__( 'Trash is empty.', 'chargeforms' ) : esc_html__( 'No submissions match your filters.', 'chargeforms' ); ?></p></div>
			<?php else : ?>

				<?php // Same bulk-selection bar as the per-form Entries screen (render_form_entries) — checkboxes here were previously entirely absent from the cross-form view, the one screen most people land on first. Reuses the exact same element IDs/classes so the existing admin.js wiring (select-all, live count, confirm-before-delete) picks it up with no new JS. form_id is always 0 here since selections can span forms; handle_bulk_entry_action() and its nonce already accept that. ?>
				<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" id="chargeforms-bulk-actions-form" class="chargeforms-bulk-bar" hidden>
					<input type="hidden" name="action" value="chargeforms_bulk_entry_action">
					<input type="hidden" name="form_id" value="0">
					<input type="hidden" name="status" value="<?php echo esc_attr( $query_args['status'] ); ?>">
					<?php wp_nonce_field( 'chargeforms_bulk_entry_action_0' ); ?>
					<span
						class="chargeforms-bulk-bar-count"
						id="chargeforms-bulk-bar-count"
						data-label-singular="<?php esc_attr_e( 'entry selected', 'chargeforms' ); ?>"
						data-label-plural="<?php esc_attr_e( 'entries selected', 'chargeforms' ); ?>"
					></span>
					<label for="chargeforms-bulk-action-select" class="screen-reader-text"><?php esc_html_e( 'Select bulk action', 'chargeforms' ); ?></label>
					<select name="bulk_action" id="chargeforms-bulk-action-select">
						<option value=""><?php esc_html_e( 'Bulk Actions', 'chargeforms' ); ?></option>
						<?php if ( 'trashed' === $query_args['status'] ) : ?>
							<option value="restore"><?php esc_html_e( 'Restore', 'chargeforms' ); ?></option>
							<option value="delete"><?php esc_html_e( 'Delete Permanently', 'chargeforms' ); ?></option>
						<?php else : ?>
							<option value="mark_read"><?php esc_html_e( 'Mark as Read', 'chargeforms' ); ?></option>
							<option value="mark_unread"><?php esc_html_e( 'Mark as Unread', 'chargeforms' ); ?></option>
							<option value="mark_favorite"><?php esc_html_e( 'Mark as Favorites', 'chargeforms' ); ?></option>
							<option value="unmark_favorite"><?php esc_html_e( 'Remove from Favorites', 'chargeforms' ); ?></option>
							<option value="trash"><?php esc_html_e( 'Move to Trash', 'chargeforms' ); ?></option>
						<?php endif; ?>
					</select>
					<button
						type="submit"
						class="button button-primary"
						id="chargeforms-bulk-apply-btn"
						data-confirm-message="<?php echo esc_attr__( 'Permanently delete the selected entries? This cannot be undone.', 'chargeforms' ); ?>"
						data-confirm-yes-label="<?php echo esc_attr__( 'Yes, Delete', 'chargeforms' ); ?>"
					><?php esc_html_e( 'Apply', 'chargeforms' ); ?></button>
				</form>

				<div class="chargeforms-table-scroll">
				<table class="wp-list-table widefat fixed striped chargeforms-entries-table">
					<thead>
						<tr>
							<td class="check-column"><input type="checkbox" id="chargeforms-select-all-rows"></td>
							<th class="chargeforms-col-id"><?php esc_html_e( 'Submission ID', 'chargeforms' ); ?></th>
							<th><?php esc_html_e( 'Form', 'chargeforms' ); ?></th>
							<th><?php esc_html_e( 'Status', 'chargeforms' ); ?></th>
							<th><?php esc_html_e( 'Browser', 'chargeforms' ); ?></th>
							<th><?php esc_html_e( 'Time', 'chargeforms' ); ?></th>
							<th><?php esc_html_e( 'Action', 'chargeforms' ); ?></th>
						</tr>
					</thead>
					<tbody>
						<?php $starred_map = Entry::get_meta_bulk( array_map( fn( $e ) => $e['id'], $result['items'] ), 'starred' ); ?>
						<?php foreach ( $result['items'] as $entry ) : ?>
							<?php
							$form         = $forms_by_id[ $entry['form_id'] ] ?? null;
							$entries_url  = $form ? admin_url( 'admin.php?page=chargeforms-entries&form_id=' . $form['id'] ) : '';
							$toggle_to    = 'read' === $entry['status'] ? 'unread' : 'read';
							$toggle_url   = wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_toggle_entry_status&entry_id=' . $entry['id'] . '&to=' . $toggle_to ), 'chargeforms_toggle_status_' . $entry['id'] );
							$del_url      = wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_delete_entry&entry_id=' . $entry['id'] . '&form_id=' . $entry['form_id'] ), 'chargeforms_delete_entry_' . $entry['id'] );
							$is_starred   = '1' === (string) ( $starred_map[ $entry['id'] ] ?? '' );
							$star_url     = wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_toggle_star&entry_id=' . $entry['id'] ), 'chargeforms_toggle_star_' . $entry['id'] );
							?>
							<tr>
								<td class="check-column"><input type="checkbox" class="chargeforms-row-check" value="<?php echo (int) $entry['id']; ?>"></td>
								<td class="chargeforms-col-id"><?php echo (int) $entry['id']; ?></td>
								<td>
									<?php if ( $form ) : ?>
										<a href="<?php echo esc_url( $entries_url ); ?>"><?php echo esc_html( $form['title'] ); ?></a>
									<?php else : ?>
										<?php esc_html_e( '(deleted form)', 'chargeforms' ); ?>
									<?php endif; ?>
								</td>
								<td><span class="chargeforms-status chargeforms-status-<?php echo esc_attr( $entry['status'] ); ?>"><span class="chargeforms-status-dot"></span><?php echo esc_html( ucfirst( $entry['status'] ) ); ?></span></td>
								<td>
									<?php
									$device      = $entry['user_agent'] ? Entry::classify_device( $entry['user_agent'] ) : '';
									$device_icon = [ 'Desktop' => 'monitor', 'Mobile' => 'smartphone', 'Tablet' => 'tablet' ][ $device ] ?? 'globe';
									$browser     = $entry['user_agent'] ? Entry::classify_browser( $entry['user_agent'] ) : '';
									?>
									<span class="chargeforms-browser-cell" data-tooltip="<?php echo esc_attr( $entry['user_agent'] ?: __( 'Unknown', 'chargeforms' ) ); ?>">
										<?php Icon::render( $device_icon, 16, 'chargeforms-browser-icon' ); ?>
										<?php echo esc_html( ( $browser ?: __( 'Unknown', 'chargeforms' ) ) . ( $device && 'Desktop' !== $device ? ' on ' . $device : '' ) ); ?>
									</span>
								</td>
								<td><?php echo esc_html( self::format_entry_date( $entry['created_at'], $date_format ) ); ?></td>
								<td>
									<div class="chargeforms-row-actions">
										<a
											href="<?php echo esc_url( admin_url( 'admin.php?page=chargeforms-entries&entry_id=' . $entry['id'] . '&form_id=' . $entry['form_id'] ) ); ?>"
											class="chargeforms-icon-action"
											data-tooltip="<?php esc_attr_e( 'View Entry', 'chargeforms' ); ?>"
													aria-label="<?php esc_attr_e( 'View Entry', 'chargeforms' ); ?>"
													title="<?php esc_attr_e( 'View Entry', 'chargeforms' ); ?>"
										><?php Icon::render( 'visibility' ); ?></a>
										<?php if ( 'trashed' === $entry['status'] ) : ?>
											<a
												href="<?php echo esc_url( wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_toggle_entry_status&entry_id=' . $entry['id'] . '&to=read' ), 'chargeforms_toggle_status_' . $entry['id'] ) ); ?>"
												class="chargeforms-icon-action"
												data-tooltip="<?php esc_attr_e( 'Restore', 'chargeforms' ); ?>"
														aria-label="<?php esc_attr_e( 'Restore', 'chargeforms' ); ?>"
														title="<?php esc_attr_e( 'Restore', 'chargeforms' ); ?>"
											><?php Icon::render( 'undo' ); ?></a>
											<a
												href="<?php echo esc_url( $del_url ); ?>"
												class="chargeforms-icon-action is-danger chargeforms-confirm-delete"
												data-tooltip="<?php esc_attr_e( 'Delete Permanently', 'chargeforms' ); ?>"
														aria-label="<?php esc_attr_e( 'Delete Permanently', 'chargeforms' ); ?>"
														title="<?php esc_attr_e( 'Delete Permanently', 'chargeforms' ); ?>"
												data-confirm-title="<?php
													/* translators: %d: the entry's numeric id */
													echo esc_attr( sprintf( __( 'entry #%d', 'chargeforms' ), $entry['id'] ) );
												?>"
												data-confirm-message="<?php
													/* translators: %d: the entry's numeric id */
													echo esc_attr( sprintf( __( 'Permanently delete entry #%d? This cannot be undone.', 'chargeforms' ), $entry['id'] ) );
												?>"
											><?php Icon::render( 'trash' ); ?></a>
										<?php else : ?>
											<a
												href="<?php echo esc_url( $star_url ); ?>"
												class="chargeforms-icon-action<?php echo $is_starred ? ' is-active' : ''; ?>"
												data-tooltip="<?php echo $is_starred ? esc_attr__( 'Unstar', 'chargeforms' ) : esc_attr__( 'Mark as Favorite', 'chargeforms' ); ?>"
												aria-label="<?php echo $is_starred ? esc_attr__( 'Unstar', 'chargeforms' ) : esc_attr__( 'Mark as Favorite', 'chargeforms' ); ?>"
											><?php Icon::render( 'star', 16, $is_starred ? 'chargeforms-icon-star is-starred' : 'chargeforms-icon-star' ); ?></a>
											<a
												href="<?php echo esc_url( $toggle_url ); ?>"
												class="chargeforms-icon-action"
												data-tooltip="<?php echo 'read' === $entry['status'] ? esc_attr__( 'Mark Unread', 'chargeforms' ) : esc_attr__( 'Mark Read', 'chargeforms' ); ?>"
												aria-label="<?php echo 'read' === $entry['status'] ? esc_attr__( 'Mark Unread', 'chargeforms' ) : esc_attr__( 'Mark Read', 'chargeforms' ); ?>"
											><?php Icon::render( 'read' === $entry['status'] ? 'mail' : 'check-circle' ); ?></a>
											<a
												href="<?php echo esc_url( wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_toggle_entry_status&entry_id=' . $entry['id'] . '&to=trashed' ), 'chargeforms_toggle_status_' . $entry['id'] ) ); ?>"
												class="chargeforms-icon-action"
												data-tooltip="<?php esc_attr_e( 'Move to Trash', 'chargeforms' ); ?>"
												aria-label="<?php esc_attr_e( 'Move to Trash', 'chargeforms' ); ?>"
											><?php Icon::render( 'trash' ); ?></a>
										<?php endif; ?>
									</div>
								</td>
							</tr>
						<?php endforeach; ?>
					</tbody>
				</table>
				</div>

				<?php $this->render_entries_pagination( $result, $query_args ); ?>
			<?php endif; ?>
		</div>
		<?php
	}

	private function render_entries_pagination( array $result, array $query_args ) {
		$base_args = array_filter( [
			'page'           => 'chargeforms-entries',
			'filter_form_id' => $query_args['form_id'] ?: null,
			'status'         => 'all' === $query_args['status'] ? null : $query_args['status'],
			's'              => '' !== $query_args['search'] ? $query_args['search'] : null,
			'per_page'       => $result['per_page'],
		] );

		\ChargeForms\Includes\Pagination_Helper::render( $result, $base_args, [ 'jumper_id' => 'chargeforms-entries-jumper' ] );
	}

	public function handle_toggle_status() {
		$entry_id = isset( $_GET['entry_id'] ) ? (int) $_GET['entry_id'] : 0;
		$to       = isset( $_GET['to'] ) ? sanitize_key( wp_unslash( $_GET['to'] ) ) : 'read';

		if ( ! current_user_can( 'chargeforms_manage_forms' ) || ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ?? '' ) ), 'chargeforms_toggle_status_' . $entry_id ) ) {
			wp_die( esc_html__( 'Not allowed.', 'chargeforms' ), 403 );
		}

		// 'trashed' is a real, allowed transition here (Trash/Restore reuse
		// this same status-change machinery rather than a separate
		// handler), but it's never offered as a choice in the "Change
		// status to" dropdown (Admin\Entries_Page::render_single()'s
		// $status_options only lists read/unread) — Trash/Restore have
		// their own dedicated icon actions instead, matching how this
		// codebase already keeps the Favorite star toggle separate from
		// that same dropdown.
		$new_status = in_array( $to, [ 'read', 'unread', 'trashed' ], true ) ? $to : 'read';
		Entry::set_status( $entry_id, $new_status );
		$log_message = 'trashed' === $new_status
			? __( 'Moved to Trash', 'chargeforms' )
			/* translators: %s: new status (Read/Unread) */
			: sprintf( __( 'Status changed to %s', 'chargeforms' ), ucfirst( $new_status ) );
		Entry::log_activity( $entry_id, $log_message );

		wp_safe_redirect( wp_get_referer() ?: admin_url( 'admin.php?page=chargeforms-entries' ) );
		exit;
	}

	public function handle_delete() {
		$entry_id = isset( $_GET['entry_id'] ) ? (int) $_GET['entry_id'] : 0;
		$form_id  = isset( $_GET['form_id'] ) ? (int) $_GET['form_id'] : 0;

		if ( ! current_user_can( 'chargeforms_manage_forms' ) || ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ?? '' ) ), 'chargeforms_delete_entry_' . $entry_id ) ) {
			wp_die( esc_html__( 'Not allowed.', 'chargeforms' ), 403 );
		}

		Entry::delete( $entry_id );

		wp_safe_redirect( admin_url( 'admin.php?page=chargeforms-entries&form_id=' . $form_id . '&chargeforms_notice=entry_deleted' ) );
		exit;
	}

	/**
	 * The row-checkbox column's actual action (roadmap gap analysis: checkboxes
	 * previously led nowhere) — applies one action to every checked entry in a
	 * single request rather than one-at-a-time. Started as delete-only;
	 * expanded to match the reference product's own bulk-actions bar (mark read/unread,
	 * favorite/unfavorite, delete) since those reuse the exact same
	 * single-entry logic (Entry::set_status()/set_meta()) this page's row
	 * actions already call — just looped, not new functionality invented for
	 * the bulk case.
	 */
	public function handle_bulk_entry_action() {
		$form_id = isset( $_POST['form_id'] ) ? (int) $_POST['form_id'] : 0;
		if ( ! current_user_can( 'chargeforms_manage_forms' ) || ! isset( $_POST['_wpnonce'] ) || ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_POST['_wpnonce'] ) ), 'chargeforms_bulk_entry_action_' . $form_id ) ) {
			wp_die( esc_html__( 'Not allowed.', 'chargeforms' ), 403 );
		}

		$entry_ids   = isset( $_POST['entry_ids'] ) ? array_map( 'intval', (array) $_POST['entry_ids'] ) : [];
		$bulk_action = isset( $_POST['bulk_action'] ) ? sanitize_key( wp_unslash( $_POST['bulk_action'] ) ) : '';

		$entry_ids = array_values( array_filter( $entry_ids, fn( $id ) => $id > 0 ) );
		$notice    = '';

		switch ( $bulk_action ) {
			case 'delete':
				// Permanent — only ever offered as a bulk option from within
				// the Trashed view (see the toolbar's contextual bulk_action
				// options below); 'trash' below is the soft-delete every
				// other view's "Delete Selected" now means.
				foreach ( $entry_ids as $entry_id ) {
					Entry::delete( $entry_id );
				}
				$notice = 'entries_deleted';
				break;
			case 'trash':
			case 'restore':
				$status = 'trash' === $bulk_action ? 'trashed' : 'read';
				foreach ( $entry_ids as $entry_id ) {
					Entry::set_status( $entry_id, $status );
					Entry::log_activity( $entry_id, 'trash' === $bulk_action ? __( 'Moved to Trash', 'chargeforms' ) : __( 'Restored from Trash', 'chargeforms' ) );
				}
				$notice = 'trash' === $bulk_action ? 'entries_trashed' : 'entries_restored';
				break;
			case 'mark_read':
			case 'mark_unread':
				$status = 'mark_read' === $bulk_action ? 'read' : 'unread';
				foreach ( $entry_ids as $entry_id ) {
					Entry::set_status( $entry_id, $status );
					/* translators: %s: new status (Read/Unread) */
					Entry::log_activity( $entry_id, sprintf( __( 'Status changed to %s', 'chargeforms' ), ucfirst( $status ) ) );
				}
				$notice = 'entries_updated';
				break;
			case 'mark_favorite':
			case 'unmark_favorite':
				$flag = 'mark_favorite' === $bulk_action ? '1' : '0';
				foreach ( $entry_ids as $entry_id ) {
					Entry::set_meta( $entry_id, 'starred', $flag );
				}
				$notice = 'entries_updated';
				break;
			default:
				// Empty/unrecognized bulk_action — the Apply button is a no-op
				// client-side too (admin.js) until something is selected; a
				// direct/malformed POST just redirects back with no changes,
				// same as picking nothing and clicking Apply in the UI.
				break;
		}

		$redirect = admin_url( 'admin.php?page=chargeforms-entries&form_id=' . $form_id );
		// Restoring/deleting-permanently out of the Trashed view lands back
		// on the normal view (the acted-on rows are no longer trashed, so
		// staying on ?status=trashed would just show them vanish); trashing
		// from the normal view has nowhere else to go either. The one case
		// worth preserving is staying on ?status=trashed after a delete, so
		// a site owner permanently-deleting several trashed rows one batch
		// at a time doesn't get bounced out after each batch.
		if ( 'delete' === $bulk_action && isset( $_POST['status'] ) ) {
			$redirect = add_query_arg( 'status', sanitize_key( wp_unslash( $_POST['status'] ) ), $redirect );
		}
		if ( $notice ) {
			$redirect = add_query_arg( 'chargeforms_notice', $notice, $redirect );
		}
		wp_safe_redirect( $redirect );
		exit;
	}

	/** Standalone print-friendly view of one entry — opened in a new tab, calls window.print() on load. */
	public function handle_print() {
		$entry_id = isset( $_GET['entry_id'] ) ? (int) $_GET['entry_id'] : 0;

		if ( ! current_user_can( 'chargeforms_manage_forms' ) || ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ?? '' ) ), 'chargeforms_print_entry_' . $entry_id ) ) {
			wp_die( esc_html__( 'Not allowed.', 'chargeforms' ), 403 );
		}

		$entry = Entry::get( $entry_id );
		if ( ! $entry ) {
			wp_die( esc_html__( 'Entry not found.', 'chargeforms' ), 404 );
		}

		$form        = Form::get( $entry['form_id'] );
		$date_format = Settings::get( 'entries_date_format', 'M j, Y g:ia' );

		// Dedicated no-src handles so this admin-post standalone print page
		// (outside the normal wp_enqueue_scripts/wp_enqueue_styles lifecycle)
		// can carry its own inline CSS/JS through wp_add_inline_style()/
		// wp_add_inline_script() instead of raw <style>/<script> tags.
		wp_register_style( 'chargeforms-print', false, [], CHARGEFORMS_VERSION );
		wp_enqueue_style( 'chargeforms-print' );
		wp_add_inline_style( 'chargeforms-print', '
			body { font-family: -apple-system, "Segoe UI", Roboto, sans-serif; color: #1e1f21; max-width: 640px; margin: 40px auto; padding: 0 20px; }
			h1 { font-size: 20px; margin-bottom: 4px; }
			.chargeforms-print-meta { color: #606266; font-size: 13px; margin-bottom: 24px; }
			table { width: 100%; border-collapse: collapse; }
			th, td { text-align: left; padding: 10px 12px; border-bottom: 1px solid #dadbdd; vertical-align: top; }
			th { width: 200px; color: #606266; font-weight: 600; font-size: 13px; }
			@media print { button { display: none; } }
		' );
		wp_register_script( 'chargeforms-print', false, [], CHARGEFORMS_VERSION, true );
		wp_enqueue_script( 'chargeforms-print' );
		wp_add_inline_script( 'chargeforms-print', "window.addEventListener('load', function(){ window.print(); });" );
		?>
		<!DOCTYPE html>
		<html <?php language_attributes(); ?>>
		<head>
			<meta charset="<?php bloginfo( 'charset' ); ?>">
			<title><?php echo esc_html( ( $form['title'] ?? __( 'Entry', 'chargeforms' ) ) . ' #' . $entry_id ); ?></title>
			<?php wp_print_styles( 'chargeforms-print' ); ?>
		</head>
		<body>
			<h1><?php echo esc_html( $form['title'] ?? __( 'Entry', 'chargeforms' ) ); ?></h1>
			<p class="chargeforms-print-meta">
				<?php
				printf(
					/* translators: 1: entry id, 2: submission date */
					esc_html__( 'Entry #%1$s — submitted %2$s', 'chargeforms' ),
					(int) $entry_id,
					esc_html( self::format_entry_date( $entry['created_at'], $date_format ) )
				);
				?>
			</p>
			<table>
				<tbody>
					<?php foreach ( ( $form['fields'] ?? [] ) as $field ) : ?>
						<?php if ( in_array( $field['type'], self::NON_DATA_FIELD_TYPES, true ) ) : continue; endif; ?>
						<tr>
							<th><?php echo esc_html( self::column_label( $field ) ); ?></th>
							<td><?php echo esc_html( self::display_value( $entry['values'][ $field['id'] ] ?? '' ) ); ?></td>
						</tr>
					<?php endforeach; ?>
				</tbody>
			</table>
			<p><button onclick="window.print()"><?php esc_html_e( 'Print', 'chargeforms' ); ?></button></p>
			<?php wp_print_scripts( 'chargeforms-print' ); ?>
		</body>
		</html>
		<?php
		exit;
	}

	/**
	 * Roadmap issue #31 ("Admin Tables Mix Concerns in Large PHP Page
	 * Classes"): this method used to build both the CSV and JSON output
	 * itself inline. It now only owns the actual HTTP request (nonce,
	 * capability, resolving the form/format) and delegates the real
	 * export work to Includes\Entry_Exporter — this file's job is
	 * deciding WHETHER an export is allowed and WHAT to export, not HOW
	 * to serialize it.
	 */
	public function handle_export() {
		$form_id = isset( $_GET['form_id'] ) ? (int) $_GET['form_id'] : 0;
		$format  = isset( $_GET['format'] ) ? sanitize_key( wp_unslash( $_GET['format'] ) ) : 'csv';

		if ( ! current_user_can( 'chargeforms_manage_forms' ) || ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ?? '' ) ), 'chargeforms_export_' . $form_id ) ) {
			wp_die( esc_html__( 'Not allowed.', 'chargeforms' ), 403 );
		}

		$form = Form::get( $form_id );

		if ( ! $form ) {
			wp_die( esc_html__( 'Form not found.', 'chargeforms' ), 404 );
		}

		$csv_fields = Entry_Exporter::data_fields_for( $form );

		if ( 'json' === $format ) {
			Entry_Exporter::stream_json( $form, $form_id, $csv_fields );
			return;
		}

		Entry_Exporter::stream_csv( $form, $form_id, $csv_fields );
	}

	/**
	 * Imports entries from a CSV in the exact shape Entry_Exporter::
	 * stream_csv() produces. Like handle_export() above, this method only
	 * owns the HTTP request (nonce, capability, $_FILES validation,
	 * opening/closing the uploaded file) — the actual row-by-row import
	 * logic lives in Includes\Entry_Importer.
	 */
	public function handle_import() {
		$form_id = isset( $_POST['form_id'] ) ? (int) $_POST['form_id'] : 0;

		if ( ! current_user_can( 'chargeforms_manage_forms' ) || ! check_admin_referer( 'chargeforms_import_entries' ) ) {
			wp_die( esc_html__( 'Not allowed.', 'chargeforms' ), 403 );
		}

		// Server-side enforcement, not just the modal's UI lock — a request
		// straight to admin-post.php with a valid nonce (e.g. a saved form
		// resubmitted, or a script) must be rejected the same way the UI
		// already is, or the "free" tier's own capability check would be
		$form = Form::get( $form_id );
		if ( ! $form ) {
			wp_die( esc_html__( 'Form not found.', 'chargeforms' ), 404 );
		}

		$import_error = Import_Validator::validate(
			$_FILES['chargeforms_import_file'] ?? [], // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- Import_Validator::validate() itself is the sanitization/validation step for this raw upload array.
			[ 'csv' ],
			[ 'text/csv', 'text/plain', 'application/csv', 'application/vnd.ms-excel' ],
			25 * MB_IN_BYTES
		);
		if ( $import_error ) {
			wp_die( esc_html( $import_error ), 400 );
		}

		$csv_fields = Entry_Exporter::data_fields_for( $form );

		// tmp_name is a path PHP itself assigned inside the upload tmp dir, not
		// attacker-supplied content — Import_Validator::validate() above already
		// checked the upload's real extension/MIME/size before this point.
		$handle = isset( $_FILES['chargeforms_import_file']['tmp_name'] ) ? fopen( $_FILES['chargeforms_import_file']['tmp_name'], 'r' ) : false; // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_fopen, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
		if ( ! $handle ) {
			wp_die( esc_html__( 'Could not read the uploaded file.', 'chargeforms' ), 400 );
		}

		$imported = Entry_Importer::import_csv( $form_id, $csv_fields, $handle );

		fclose( $handle ); // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_fclose

		wp_safe_redirect( add_query_arg( [
			'page'              => 'chargeforms-entries',
			'form_id'           => $form_id,
			'chargeforms_notice'  => 'imported',
			'chargeforms_imported' => $imported,
		], admin_url( 'admin.php' ) ) );
		exit;
	}
}