<?php

namespace ChargeForms\Admin;

use ChargeForms\Includes\Commerce_Calculator;
use ChargeForms\Includes\Entry;
use ChargeForms\Includes\Field_Sanitizer;
use ChargeForms\Includes\Form;
use ChargeForms\Includes\Form_Start;
use ChargeForms\Includes\Icon;
use ChargeForms\Frontend\Shortcode;

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/**
 * ChargeForms > Forms — the "All Forms" landing screen. Overwrites the
 * top-level menu's default submenu entry (same 'chargeforms' slug) so it reads
 * "Forms" instead of duplicating "ChargeForms". Registered after Menu so the
 * relabel trick applies — see boot order in chargeforms.php.
 */
class Forms_List_Page {

	public function __construct() {
		// Real bug found live: the "relabel the phantom first row as Forms"
		// trick below only works when THIS registration is the very FIRST
		// add_submenu_page() call WordPress sees for the 'chargeforms'
		// parent — it only suppresses its own auto-generated duplicate
		// entry (labeled with the top-level menu's own title) when the
		// matching (parent===menu_slug) submenu is registered before any
		// OTHER submenu under that parent. Dashboard_Page registers at
		// priority 8; this was still at 10, so Dashboard's registration
		// (a different slug) ran first and the phantom "ChargeForms" row
		// appeared anyway, sitting above Dashboard/Forms as a genuine
		// duplicate of Forms' own link. Moved to priority 6 — right after
		// Menu::register_menu()'s own priority 5, before anything else.
		add_action( 'admin_menu', [ $this, 'register' ], 6 );
		add_action( 'admin_post_chargeforms_duplicate_form', [ $this, 'handle_duplicate' ] );
		add_action( 'admin_post_chargeforms_delete_form', [ $this, 'handle_delete' ] );
		add_action( 'admin_post_chargeforms_toggle_form_status', [ $this, 'handle_toggle_status' ] );
		add_action( 'admin_post_chargeforms_bulk_forms', [ $this, 'handle_bulk_forms' ] );
		add_action( 'admin_post_chargeforms_preview_form', [ $this, 'handle_preview' ] );
		add_action( 'admin_post_chargeforms_export_single_form', [ $this, 'handle_export_single' ] );
		add_action( 'wp_ajax_chargeforms_find_form_usage', [ $this, 'ajax_find_usage' ] );
		// Body class hook: forms-list-refine.css scopes its gray-canvas
		// rules to body.chargeforms-screen-forms-list so they never leak
		// onto Entries, Reports, or Global Settings (all under the same
		// ChargeForms menu).
		add_filter( 'admin_body_class', [ $this, 'admin_body_class' ] );
	}

	public function register() {
		add_submenu_page(
			'chargeforms',
			__( 'Forms', 'chargeforms' ),
			__( 'Forms', 'chargeforms' ),
			'chargeforms_manage_forms',
			'chargeforms',
			[ $this, 'render' ]
		);
	}

	/**
	 * Screen-scoped body class for the All Forms screen: the reference product skin paints
	 * the gray #f2f2f2 page canvas only on page=chargeforms (forms-list-refine.css),
	 * never on the sibling screens that share this admin body.
	 *
	 * @param string $classes Space-separated admin body classes.
	 * @return string
	 */
	public function admin_body_class( $classes ) {
		if ( isset( $_GET['page'] ) && 'chargeforms' === sanitize_key( wp_unslash( $_GET['page'] ) ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
			$classes .= ' chargeforms-screen-forms-list';
		}

		return $classes;
	}

	public function render() {
		$query_args = $this->parse_query_args();
		$result     = Form::query( $query_args );
		// One GROUP BY query for the whole page of forms instead of one
		// Entry::count_for_form() call per row (roadmap issue #36) — this
		// page is paginated, so the win is smaller than the Reports page's
		// identical fix (all-forms, not one-page), but still a real,
		// free reduction for every page load regardless.
		$entry_counts = Entry::count_by_form( array_column( $result['items'], 'id' ) );
		// Fields/Views/Conversion — real gap found live (user report): these
		// three columns exist in design_handoff_chargeforms's own Forms List
		// spec but were never actually implemented anywhere (neither this
		// page nor the now-retired Vue rewrite had them). One GROUP BY query
		// for the whole page's view counts, same reasoning as $entry_counts
		// above — not one Form_Start::count_for_form() call per row.
		$view_counts = Form_Start::count_by_form( array_column( $result['items'], 'id' ), 'view' );

		?>
		<div class="wrap chargeforms-wrap">
			<?php Page_Header::render( 'chargeforms' ); ?>

			<div class="chargeforms-page-head">
				<div class="chargeforms-page-head-text">
					<h1><?php esc_html_e( 'Forms', 'chargeforms' ); ?></h1>
					<p class="chargeforms-page-head-sub">
						<?php
						printf(
							/* translators: 1: number of forms, 2: total entries across every form */
							esc_html( _n( '%1$s form · %2$s total entries', '%1$s forms · %2$s total entries', Form::count(), 'chargeforms' ) ),
							esc_html( number_format_i18n( Form::count() ) ),
							esc_html( number_format_i18n( Entry::count_all() ) )
						);
						?>
					</p>
				</div>
				<?php if ( 0 < Form::count() ) : ?>
					<a href="<?php echo esc_url( admin_url( 'admin.php?page=chargeforms-new' ) ); ?>" class="button button-primary chargeforms-btn-icon">
						<?php esc_html_e( '+ Add New Form', 'chargeforms' ); ?>
					</a>
				<?php endif; ?>
			</div>

			<?php if ( isset( $_GET['chargeforms_notice'] ) ) : // phpcs:ignore WordPress.Security.NonceVerification.Recommended ?>
				<div class="notice notice-success is-dismissible"><p><?php esc_html_e( 'Done.', 'chargeforms' ); ?></p></div>
			<?php endif; ?>

			<?php if ( 0 === Form::count() ) : ?>
				<div class="chargeforms-empty-state chargeforms-empty-state-hero">
					<?php Icon::render( 'feedback', 16, 'chargeforms-empty-state-icon' ); ?>
					<h2><?php esc_html_e( "You haven't created any forms yet", 'chargeforms' ); ?></h2>
					<p><?php esc_html_e( 'Start from a blank canvas or a ready-made template — either way, you\'ll be collecting submissions in minutes.', 'chargeforms' ); ?></p>
					<a href="<?php echo esc_url( admin_url( 'admin.php?page=chargeforms-new' ) ); ?>" class="button button-primary button-hero">
						<?php esc_html_e( 'Create your first form', 'chargeforms' ); ?>
					</a>
				</div>
			<?php elseif ( 'vue' === $this->render_mode() ) : ?>
				<div id="chargeforms-vue-forms-list"></div>
			<?php else : ?>
				<?php // the reference product layout (user 2026-09-02): toolbar + pagination sit on the gray page canvas outside the white .ff_table card, exactly like the reference product All Forms; only the table renders inside .chargeforms-list-card. ?>
				<?php $this->render_toolbar( $query_args, $result['total'] ); ?>
				<?php $this->render_bulk_bar(); ?>

				<div class="chargeforms-list-card">
				<?php if ( empty( $result['items'] ) ) : ?>
					<div class="chargeforms-empty-state">
						<?php Icon::render( 'search', 16, 'chargeforms-empty-state-icon' ); ?>
						<p><?php esc_html_e( 'No forms match your search or filter.', 'chargeforms' ); ?></p>
						<a href="<?php echo esc_url( admin_url( 'admin.php?page=chargeforms' ) ); ?>" class="button">
							<?php esc_html_e( 'Clear filters', 'chargeforms' ); ?>
						</a>
					</div>
				<?php else : ?>
					<div class="chargeforms-table-scroll">
					<table class="wp-list-table widefat fixed chargeforms-forms-table">
						<thead>
							<tr>
								<th class="chargeforms-col-cb" scope="col">
									<input type="checkbox" id="chargeforms-forms-select-all" aria-label="<?php esc_attr_e( 'Select all forms', 'chargeforms' ); ?>">
								</th>
								<th class="chargeforms-col-form" scope="col"><?php esc_html_e( 'Form', 'chargeforms' ); ?></th>
								<th class="chargeforms-col-fields chargeforms-col-num" scope="col"><?php esc_html_e( 'Fields', 'chargeforms' ); ?></th>
								<th class="chargeforms-col-entries chargeforms-col-num" scope="col"><?php esc_html_e( 'Entries', 'chargeforms' ); ?></th>
								<th class="chargeforms-col-views chargeforms-col-num" scope="col"><?php esc_html_e( 'Views', 'chargeforms' ); ?></th>
								<th class="chargeforms-col-conv chargeforms-col-num" scope="col"><?php esc_html_e( 'Conv.', 'chargeforms' ); ?></th>
								<th class="chargeforms-col-status" scope="col"><?php esc_html_e( 'Status', 'chargeforms' ); ?></th>
								<th class="chargeforms-col-created" scope="col"><?php esc_html_e( 'Created', 'chargeforms' ); ?></th>
							</tr>
						</thead>
						<tbody>
							<?php foreach ( $result['items'] as $form ) : ?>
								<?php
								$edit_url     = admin_url( 'admin.php?page=chargeforms-builder&form_id=' . $form['id'] );
								$entries_url  = admin_url( 'admin.php?page=chargeforms-entries&form_id=' . $form['id'] );
								$settings_url = admin_url( 'admin.php?page=chargeforms-form-settings&form_id=' . $form['id'] );
								$preview_url  = wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_preview_form&form_id=' . $form['id'] ), 'chargeforms_preview_' . $form['id'] );
								$export_url   = wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_export_single_form&form_id=' . $form['id'] ), 'chargeforms_export_single_' . $form['id'] );
								$dup_url      = wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_duplicate_form&form_id=' . $form['id'] ), 'chargeforms_duplicate_' . $form['id'] );
								$del_url      = wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_delete_form&form_id=' . $form['id'] ), 'chargeforms_delete_form_' . $form['id'] );
								$toggle_to    = 'published' === $form['status'] ? 'draft' : 'published';
								$toggle_url   = wp_nonce_url( admin_url( 'admin-post.php?action=chargeforms_toggle_form_status&form_id=' . $form['id'] . '&to=' . $toggle_to ), 'chargeforms_toggle_status_' . $form['id'] );
								$is_active    = 'published' === $form['status'];
								$field_count  = count( Field_Sanitizer::flatten_submittable_fields( $form['fields'] ) );
								$views        = (int) ( $view_counts[ $form['id'] ] ?? 0 );
								$entries      = (int) ( $entry_counts[ $form['id'] ] ?? 0 );
								$conversion   = $views > 0 ? round( ( $entries / $views ) * 100, 1 ) : null;
								/* translators: %d: number of fields in the form */
								$meta_parts   = [ sprintf( _n( '%d field', '%d fields', $field_count, 'chargeforms' ), $field_count ) ];
								if ( Commerce_Calculator::find_payment_method_field( $form['fields'] ?? [] ) ) {
									$meta_parts[] = __( 'payment', 'chargeforms' );
								}
								$meta_text = implode( ' · ', $meta_parts );
								?>
								<tr>
									<td class="chargeforms-col-cb"><input type="checkbox" class="chargeforms-form-row-check" value="<?php echo (int) $form['id']; ?>"></td>
									<td class="chargeforms-col-form">
										<a href="<?php echo esc_url( $edit_url ); ?>" class="chargeforms-form-title"><?php echo esc_html( $form['title'] ); ?></a>
										<div class="chargeforms-form-meta">
											<button type="button" class="chargeforms-shortcode-chip" data-copy-text="[chargeforms id=&quot;<?php echo (int) $form['id']; ?>&quot;]" title="<?php esc_attr_e( 'Click to copy shortcode', 'chargeforms' ); ?>">
												<code>[chargeforms id="<?php echo (int) $form['id']; ?>"]</code>
											</button>
											<span class="chargeforms-form-meta-text"><?php echo esc_html( $meta_text ); ?></span>
										</div>
										<div class="row-actions">
											<span class="edit"><a href="<?php echo esc_url( $edit_url ); ?>"><?php esc_html_e( 'Edit', 'chargeforms' ); ?></a></span>
											<span class="settings"><a href="<?php echo esc_url( $settings_url ); ?>"><?php esc_html_e( 'Settings', 'chargeforms' ); ?></a></span>
											<span class="entries"><a href="<?php echo esc_url( $entries_url ); ?>"><?php esc_html_e( 'Entries', 'chargeforms' ); ?></a></span>
											<span class="preview"><a href="<?php echo esc_url( $preview_url ); ?>" target="_blank" rel="noopener noreferrer"><?php esc_html_e( 'Preview', 'chargeforms' ); ?></a></span>
											<span class="duplicate"><a href="<?php echo esc_url( $dup_url ); ?>"><?php esc_html_e( 'Duplicate', 'chargeforms' ); ?></a></span>
											<span class="export"><a href="<?php echo esc_url( $export_url ); ?>"><?php esc_html_e( 'Export', 'chargeforms' ); ?></a></span>
											<span class="delete"><a href="<?php echo esc_url( $del_url ); ?>" class="chargeforms-row-action-danger chargeforms-confirm-delete" data-confirm-title="<?php echo esc_attr( $form['title'] ); ?>"><?php esc_html_e( 'Delete', 'chargeforms' ); ?></a></span>
										</div>
									</td>
									<td class="chargeforms-col-fields chargeforms-col-num"><?php echo (int) $field_count; ?></td>
									<td class="chargeforms-col-entries chargeforms-col-num">
										<a href="<?php echo esc_url( $entries_url ); ?>" class="chargeforms-entries-count"><?php echo (int) $entries; ?></a>
									</td>
									<td class="chargeforms-col-views chargeforms-col-num"><?php echo (int) $views; ?></td>
									<td class="chargeforms-col-conv chargeforms-col-num"><?php echo null === $conversion ? '—' : esc_html( $conversion . '%' ); ?></td>
									<td class="chargeforms-col-status">
										<div class="chargeforms-status-cell">
											<a href="<?php echo esc_url( $toggle_url ); ?>" class="chargeforms-toggle<?php echo $is_active ? ' is-on' : ''; ?>" title="<?php echo esc_attr( $is_active ? __( 'Click to deactivate', 'chargeforms' ) : __( 'Click to activate', 'chargeforms' ) ); ?>">
												<span class="chargeforms-toggle-track"><span class="chargeforms-toggle-thumb"></span></span>
											</a>
											<span class="chargeforms-toggle-label"><?php echo $is_active ? esc_html__( 'Active', 'chargeforms' ) : esc_html__( 'Inactive', 'chargeforms' ); ?></span>
										</div>
									</td>
									<td class="chargeforms-col-created"><?php echo esc_html( mysql2date( 'M j, Y', get_date_from_gmt( $form['created_at'], 'Y-m-d H:i:s' ) ) ); // created_at is GMT (roadmap issue #27) — convert to site-local before display. ?></td>
								</tr>
							<?php endforeach; ?>
						</tbody>
					</table>
					</div>
				<?php endif; ?>
				</div>

				<?php if ( ! empty( $result['items'] ) ) : ?>
					<?php $this->render_pagination( $result, $query_args ); ?>
				<?php endif; ?>
			<?php endif; ?>
		</div>
		<?php
		wp_add_inline_script( 'chargeforms-admin', '			( function () {
				document.querySelectorAll( \'.chargeforms-shortcode-chip\' ).forEach( function ( chip ) {
					chip.addEventListener( \'click\', function () {
						navigator.clipboard.writeText( chip.getAttribute( \'data-copy-text\' ) ).then( function () {
							chip.classList.add( \'is-copied\' );
							setTimeout( function () { chip.classList.remove( \'is-copied\' ); }, 1400 );
						} );
					} );
				} );

			// Bulk checkbox column — the header checkbox selects every row,
			// and the bulk bar (Delete/Duplicate) appears only while at
			// least one row is checked (design has the checkbox column but
			// no permanent bulk chrome).
			var formsSelectAll = document.getElementById( \'chargeforms-forms-select-all\' );
			var formsBulkForm  = document.getElementById( \'chargeforms-forms-bulk-bar\' );
			var formsBulkCount = document.getElementById( \'chargeforms-forms-bulk-count\' );
			var formsRowCheck  = \'.chargeforms-form-row-check\';

			function updateFormsBulkBar() {
				if ( ! formsBulkForm ) { return; }
				var checked = document.querySelectorAll( formsRowCheck + \':checked\' );
				formsBulkForm.hidden = checked.length === 0;
				if ( formsBulkCount ) {
					formsBulkCount.textContent = checked.length + \' \' + ( checked.length === 1 ? formsBulkCount.getAttribute( \'data-label-singular\' ) : formsBulkCount.getAttribute( \'data-label-plural\' ) );
				}
			}

			if ( formsSelectAll ) {
				formsSelectAll.addEventListener( \'change\', function () {
					document.querySelectorAll( formsRowCheck ).forEach( function ( box ) { box.checked = formsSelectAll.checked; } );
					updateFormsBulkBar();
				} );
			}
			document.querySelectorAll( formsRowCheck ).forEach( function ( box ) {
				box.addEventListener( \'change\', updateFormsBulkBar );
			} );
			if ( formsBulkForm ) {
				formsBulkForm.addEventListener( \'submit\', function ( e ) {
					var select = document.getElementById( \'chargeforms-forms-bulk-action\' );
					if ( select && \'\' === select.value ) {
						e.preventDefault(); // Nothing chosen — no-op until an action is picked.
						return;
					}
					formsBulkForm.querySelectorAll( \'input[name="form_ids[]"]\' ).forEach( function ( input ) { input.remove(); } );
					document.querySelectorAll( formsRowCheck + \':checked\' ).forEach( function ( box ) {
						var input = document.createElement( \'input\' );
						input.type  = \'hidden\';
						input.name  = \'form_ids[]\';
						input.value = box.value;
						formsBulkForm.appendChild( input );
					} );
				} );
				var bulkActionSelect = document.getElementById( \'chargeforms-forms-bulk-action\' );
				var bulkApplyBtn     = document.getElementById( \'chargeforms-forms-bulk-apply\' );
				if ( bulkActionSelect && bulkApplyBtn ) {
					var syncBulkApplyConfirm = function () {
						bulkApplyBtn.classList.toggle( \'chargeforms-confirm-action\', \'delete\' === bulkActionSelect.value );
					};
					bulkActionSelect.addEventListener( \'change\', syncBulkApplyConfirm );
					syncBulkApplyConfirm();
				}
			}
			updateFormsBulkBar();
			} )();'
		);
		?>
		<?php
	}

	/**
	 * The Vue rebuild is being rolled out screen by screen — this flag lets
	 * it be toggled per-screen instead of an all-or-nothing switch, and
	 * gives an escape hatch (?chargeforms_ui=legacy) back to the plain-PHP
	 * table while the Vue version is still new.
	 *
	 * Falls back to 'legacy' automatically if the Vue bundle isn't actually
	 * built on disk — release zips don't always include assets/build/vue
	 * (it's a separate build step from the main `npm run build`), and
	 * without this check the page would silently render an empty mount div
	 * with nothing to populate it.
	 */
	/**
	 * Vue/Element Plus retired for this screen (real gap found live, user
	 * report: the Vue rewrite's colors were correctly themed to violet, but
	 * its table/buttons/dropdowns are Element Plus's own default component
	 * shapes — different corner radii, padding, icon set, interaction
	 * chrome from design_handoff_chargeforms's hand-built spec — no amount
	 * of CSS variable retheming closes that gap, only replacing the markup
	 * does). `?chargeforms_ui=vue` kept as an escape hatch during the
	 * transition, not a real supported mode going forward.
	 */
	private function render_mode() {
		if ( isset( $_GET['chargeforms_ui'] ) && 'vue' === $_GET['chargeforms_ui'] && file_exists( CHARGEFORMS_PATH . 'assets/build/vue/forms-list.js' ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
			return 'vue';
		}
		return 'legacy';
	}

	private function parse_query_args() {
		$date_preset = isset( $_GET['date_preset'] ) ? sanitize_key( wp_unslash( $_GET['date_preset'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
		list( $date_from, $date_to ) = $this->resolve_date_preset(
			$date_preset,
			isset( $_GET['date_from'] ) ? sanitize_text_field( wp_unslash( $_GET['date_from'] ) ) : '', // phpcs:ignore WordPress.Security.NonceVerification.Recommended
			isset( $_GET['date_to'] ) ? sanitize_text_field( wp_unslash( $_GET['date_to'] ) ) : '' // phpcs:ignore WordPress.Security.NonceVerification.Recommended
		);

		return [
			'status'    => isset( $_GET['category'] ) && in_array( $_GET['category'], [ 'published', 'draft' ], true ) ? sanitize_key( wp_unslash( $_GET['category'] ) ) : 'all', // phpcs:ignore WordPress.Security.NonceVerification.Recommended
			'category'  => isset( $_GET['category'] ) && 'multistep' === $_GET['category'] ? 'multistep' : '', // phpcs:ignore WordPress.Security.NonceVerification.Recommended
			'search'    => isset( $_GET['s'] ) ? sanitize_text_field( wp_unslash( $_GET['s'] ) ) : '', // phpcs:ignore WordPress.Security.NonceVerification.Recommended
			'sort'      => isset( $_GET['sort'] ) ? sanitize_key( wp_unslash( $_GET['sort'] ) ) : 'newest', // phpcs:ignore WordPress.Security.NonceVerification.Recommended
			'page'      => isset( $_GET['paged'] ) ? max( 1, (int) $_GET['paged'] ) : 1, // phpcs:ignore WordPress.Security.NonceVerification.Recommended
			'per_page'  => isset( $_GET['per_page'] ) ? min( 200, max( 1, (int) $_GET['per_page'] ) ) : 10, // phpcs:ignore WordPress.Security.NonceVerification.Recommended
			'date_from' => $date_from,
			'date_to'   => $date_to,
		];
	}

	/**
	 * Turns a preset key (or an explicit custom range) into
	 * [ date_from, date_to ] — both '' when no filter applies. Mirrors
	 * Entries_Page's identical helper, including the GMT-not-site-local
	 * `$today` fix (roadmap issue #27 — see that copy's doc comment for
	 * why: this range gets compared against `created_at` via gmdate()-
	 * built boundaries elsewhere, so `$today` needs the same reference
	 * frame).
	 */
	private function resolve_date_preset( $preset, $custom_from, $custom_to ) {
		$today = current_time( 'Y-m-d', true );

		switch ( $preset ) {
			case 'today':
				return [ $today, $today ];
			case 'yesterday':
				$y = gmdate( 'Y-m-d', strtotime( $today . ' -1 day' ) );
				return [ $y, $y ];
			case 'last_week':
				return [ gmdate( 'Y-m-d', strtotime( $today . ' -7 days' ) ), $today ];
			case 'last_month':
				return [ gmdate( 'Y-m-d', strtotime( $today . ' -30 days' ) ), $today ];
			case 'custom':
				return [ $custom_from, $custom_to ];
			default:
				return [ '', '' ];
		}
	}

	/** The single "Category" select — All / Active / Inactive / Multi-step Form. Payment Form and Conversational Form aren't real ChargeForms categories yet, so they're intentionally not offered here rather than faked. */
	private function current_category( array $query_args ) {
		if ( 'multistep' === $query_args['category'] ) {
			return 'multistep';
		}
		if ( 'published' === $query_args['status'] ) {
			return 'published';
		}
		if ( 'draft' === $query_args['status'] ) {
			return 'draft';
		}
		return 'all';
	}

	private function render_toolbar( array $query_args, $total = 0 ) {
		$category    = $this->current_category( $query_args );
		$date_preset = isset( $_GET['date_preset'] ) ? sanitize_key( wp_unslash( $_GET['date_preset'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
		$clear_url   = remove_query_arg( [ 'date_preset', 'date_from', 'date_to' ] );
		?>
		<form method="get" class="chargeforms-list-toolbar">
			<input type="hidden" name="page" value="chargeforms">

			<input type="search" name="s" value="<?php echo esc_attr( $query_args['search'] ); ?>" class="chargeforms-toolbar-search" placeholder="<?php echo esc_attr__( 'Search forms…', 'chargeforms' ); ?>">

			<select name="category" class="chargeforms-toolbar-select" onchange="this.form.submit()">
				<option value="all" <?php selected( $category, 'all' ); ?>><?php esc_html_e( 'All statuses', 'chargeforms' ); ?></option>
				<option value="published" <?php selected( $category, 'published' ); ?>><?php esc_html_e( 'Active', 'chargeforms' ); ?></option>
				<option value="draft" <?php selected( $category, 'draft' ); ?>><?php esc_html_e( 'Inactive', 'chargeforms' ); ?></option>
			</select>

			<select name="date_preset" class="chargeforms-toolbar-select chargeforms-toolbar-date" onchange="chargeformsToolbarDateChanged( this )">
				<option value="" <?php selected( $date_preset, '' ); ?>><?php esc_html_e( 'All time', 'chargeforms' ); ?></option>
				<option value="today" <?php selected( $date_preset, 'today' ); ?>><?php esc_html_e( 'Today', 'chargeforms' ); ?></option>
				<option value="yesterday" <?php selected( $date_preset, 'yesterday' ); ?>><?php esc_html_e( 'Yesterday', 'chargeforms' ); ?></option>
				<option value="last_week" <?php selected( $date_preset, 'last_week' ); ?>><?php esc_html_e( 'Last week', 'chargeforms' ); ?></option>
				<option value="last_month" <?php selected( $date_preset, 'last_month' ); ?>><?php esc_html_e( 'Last month', 'chargeforms' ); ?></option>
				<option value="custom" <?php selected( $date_preset, 'custom' ); ?>><?php esc_html_e( 'Custom range', 'chargeforms' ); ?></option>
			</select>

			<span class="chargeforms-toolbar-count"><?php
			/* translators: %d: number of forms matching the current list filters */
			echo esc_html( sprintf( _n( '%d item', '%d items', $total, 'chargeforms' ), $total ) );
			?></span>

			<div class="chargeforms-toolbar-range" id="chargeforms-toolbar-range"<?php echo 'custom' === $date_preset ? '' : ' hidden'; ?>>
				<input type="date" name="date_from" value="<?php echo esc_attr( $query_args['date_from'] ); ?>">
				<span class="chargeforms-toolbar-range-sep">&ndash;</span>
				<input type="date" name="date_to" value="<?php echo esc_attr( $query_args['date_to'] ); ?>">
				<button type="submit" class="button button-primary"><?php esc_html_e( 'Apply', 'chargeforms' ); ?></button>
				<a class="button" href="<?php echo esc_url( $clear_url ); ?>"><?php esc_html_e( 'Clear', 'chargeforms' ); ?></a>
			</div>
		</form>
		<?php
		wp_add_inline_script( 'chargeforms-admin', '			window.chargeformsToolbarDateChanged = function ( select ) {
				if ( \'custom\' === select.value ) {
					var range = document.getElementById( \'chargeforms-toolbar-range\' );
					if ( range ) { range.hidden = false; }
					return;
				}
				select.form.submit();
			};'
		);
		?>
		<?php
	}

	private function render_pagination( array $result, array $query_args ) {
		$category  = $this->current_category( $query_args );
		$base_args = array_filter( [
			'page'        => 'chargeforms',
			'category'    => 'all' !== $category ? $category : null,
			's'           => '' !== $query_args['search'] ? $query_args['search'] : null,
			'sort'        => 'newest' === $query_args['sort'] ? null : $query_args['sort'],
			'date_from'   => $query_args['date_from'] ?: null,
			'date_to'     => $query_args['date_to'] ?: null,
			'per_page'    => $result['per_page'],
		] );

		$first = ( $result['page'] - 1 ) * $result['per_page'] + 1;
		$last  = min( $result['page'] * $result['per_page'], $result['total'] );
		?>
		<div class="chargeforms-pagination">
			<span class="chargeforms-pagination-total">
				<?php
				printf(
					/* translators: 1: first item number, 2: last item number, 3: total items */
					esc_html__( 'Showing %1$d–%2$d of %3$d', 'chargeforms' ),
					(int) $first,
					(int) $last,
					(int) $result['total']
				);
				?>
			</span>

			<form method="get" class="chargeforms-per-page-form">
				<?php foreach ( $base_args as $key => $value ) : ?>
					<?php if ( 'per_page' !== $key ) : ?>
						<input type="hidden" name="<?php echo esc_attr( $key ); ?>" value="<?php echo esc_attr( $value ); ?>">
					<?php endif; ?>
				<?php endforeach; ?>
				<select name="per_page" onchange="this.form.submit()">
					<?php foreach ( [ 10, 20, 50, 100 ] as $option ) : ?>
						<option value="<?php echo (int) $option; ?>" <?php selected( $result['per_page'], $option ); ?>><?php echo (int) $option; ?>/page</option>
					<?php endforeach; ?>
				</select>
			</form>

			<div class="chargeforms-pagination-nav">
				<a
					class="chargeforms-page-btn<?php echo 1 === $result['page'] ? ' is-disabled' : ''; ?>"
					href="<?php echo esc_url( add_query_arg( array_merge( $base_args, [ 'paged' => max( 1, $result['page'] - 1 ) ] ), admin_url( 'admin.php' ) ) ); ?>"
				>&lsaquo;</a>

				<span class="chargeforms-page-current"><?php echo (int) $result['page']; ?></span>
				<span class="chargeforms-page-of"><?php /* translators: %d: total pages */ printf( esc_html__( 'of %d', 'chargeforms' ), (int) $result['pages'] ); ?></span>

				<a
					class="chargeforms-page-btn<?php echo $result['page'] >= $result['pages'] ? ' is-disabled' : ''; ?>"
					href="<?php echo esc_url( add_query_arg( array_merge( $base_args, [ 'paged' => min( $result['pages'], $result['page'] + 1 ) ] ), admin_url( 'admin.php' ) ) ); ?>"
				>&rsaquo;</a>
			</div>
		</div>
		<?php
	}

	/**
	 * The checkbox column's destination — a slim bulk bar (Delete /
	 * Duplicate) that only appears once at least one row is selected, so
	 * the at-rest Forms screen stays exactly on the design's table (which
	 * has the checkbox column but no permanent bulk chrome).
	 */
	private function render_bulk_bar() {
		?>
		<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" id="chargeforms-forms-bulk-bar" class="chargeforms-bulk-bar" hidden>
			<input type="hidden" name="action" value="chargeforms_bulk_forms">
			<?php wp_nonce_field( 'chargeforms_bulk_forms' ); ?>
			<span class="chargeforms-bulk-bar-count" id="chargeforms-forms-bulk-count" data-label-singular="<?php esc_attr_e( 'form selected', 'chargeforms' ); ?>" data-label-plural="<?php esc_attr_e( 'forms selected', 'chargeforms' ); ?>"></span>
			<label for="chargeforms-forms-bulk-action" class="screen-reader-text"><?php esc_html_e( 'Select bulk action', 'chargeforms' ); ?></label>
			<select name="bulk_action" id="chargeforms-forms-bulk-action">
				<option value=""><?php esc_html_e( 'Bulk Actions', 'chargeforms' ); ?></option>
				<option value="delete"><?php esc_html_e( 'Delete', 'chargeforms' ); ?></option>
				<option value="duplicate"><?php esc_html_e( 'Duplicate', 'chargeforms' ); ?></option>
			</select>
			<button type="submit" class="button button-primary" id="chargeforms-forms-bulk-apply" data-confirm-message="<?php echo esc_attr__( 'Delete the selected forms and all their entries? This cannot be undone.', 'chargeforms' ); ?>" data-confirm-yes-label="<?php echo esc_attr__( 'Yes, Delete', 'chargeforms' ); ?>"><?php esc_html_e( 'Apply', 'chargeforms' ); ?></button>
		</form>
		<?php
	}

	/**
	 * Bulk Delete / Duplicate for the Forms list — loops the exact same
	 * single-form logic the row actions call, nothing new invented for the
	 * bulk case.
	 */
	public function handle_bulk_forms() {
		$form_ids    = isset( $_POST['form_ids'] ) ? array_map( 'intval', (array) $_POST['form_ids'] ) : [];
		$bulk_action = isset( $_POST['bulk_action'] ) ? sanitize_key( $_POST['bulk_action'] ) : '';

		if ( ! current_user_can( 'chargeforms_manage_forms' ) || ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_POST['_wpnonce'] ?? '' ) ), 'chargeforms_bulk_forms' ) ) {
			wp_die( esc_html__( 'Not allowed.', 'chargeforms' ), 403 );
		}

		$form_ids = array_values( array_filter( $form_ids, fn( $id ) => $id > 0 ) );

		foreach ( $form_ids as $form_id ) {
			if ( 'duplicate' === $bulk_action ) {
				Form::duplicate( $form_id );
			} elseif ( 'delete' === $bulk_action ) {
				Form::delete( $form_id );
			}
		}

		wp_safe_redirect( admin_url( 'admin.php?page=chargeforms&chargeforms_notice=1' ) );
		exit;
	}

	public function handle_duplicate() {
		$form_id = isset( $_GET['form_id'] ) ? (int) $_GET['form_id'] : 0;

		if ( ! current_user_can( 'chargeforms_manage_forms' ) || ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ?? '' ) ), 'chargeforms_duplicate_' . $form_id ) ) {
			wp_die( esc_html__( 'Not allowed.', 'chargeforms' ), 403 );
		}

		Form::duplicate( $form_id );

		wp_safe_redirect( admin_url( 'admin.php?page=chargeforms&chargeforms_notice=1' ) );
		exit;
	}

	public function handle_delete() {
		$form_id = isset( $_GET['form_id'] ) ? (int) $_GET['form_id'] : 0;

		if ( ! current_user_can( 'chargeforms_manage_forms' ) || ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ?? '' ) ), 'chargeforms_delete_form_' . $form_id ) ) {
			wp_die( esc_html__( 'Not allowed.', 'chargeforms' ), 403 );
		}

		Form::delete( $form_id );

		wp_safe_redirect( admin_url( 'admin.php?page=chargeforms&chargeforms_notice=1' ) );
		exit;
	}

	public function handle_toggle_status() {
		$form_id = isset( $_GET['form_id'] ) ? (int) $_GET['form_id'] : 0;
		$to      = isset( $_GET['to'] ) ? sanitize_key( $_GET['to'] ) : 'published';

		if ( ! current_user_can( 'chargeforms_manage_forms' ) || ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ?? '' ) ), 'chargeforms_toggle_status_' . $form_id ) ) {
			wp_die( esc_html__( 'Not allowed.', 'chargeforms' ), 403 );
		}

		Form::update( $form_id, [ 'status' => in_array( $to, [ 'published', 'draft' ], true ) ? $to : 'published' ] );

		wp_safe_redirect( wp_get_referer() ?: admin_url( 'admin.php?page=chargeforms' ) );
		exit;
	}

	/**
	 * The "Find" row action — answers "where is this form actually used on
	 * the site?" by scanning post_content for the form's shortcode, rather
	 * than making the site owner guess or check every page by hand. Casts a
	 * broad net at the database level (any post containing the literal
	 * "[chargeforms" substring, which is cheap to index-scan even without a
	 * dedicated index since it's a bounded LIMIT) and narrows to the exact
	 * form id in PHP via a word-boundary-aware regex — a plain `LIKE
	 * '%id="5"%'` would also match id="50", id="51", etc., which is a real
	 * false-positive risk once a site has more than a handful of forms.
	 */
	public function ajax_find_usage() {
		if ( ! current_user_can( 'chargeforms_manage_forms' ) || ! check_ajax_referer( 'chargeforms_find_usage', 'nonce', false ) ) {
			wp_send_json_error( [ 'message' => __( 'Not allowed.', 'chargeforms' ) ], 403 );
		}

		$form_id = isset( $_POST['form_id'] ) ? (int) $_POST['form_id'] : 0;
		if ( ! $form_id ) {
			wp_send_json_error( [ 'message' => __( 'Invalid form.', 'chargeforms' ) ], 400 );
		}

		global $wpdb;
		// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching -- no Form/Entry model wraps a cross-post-table content scan; bounded by LIMIT below.
		$candidates = $wpdb->get_results(
			"SELECT ID, post_title, post_type, post_status, post_content FROM {$wpdb->posts}
			 WHERE post_status NOT IN ( 'trash', 'auto-draft' )
			 AND post_type NOT IN ( 'revision', 'attachment' )
			 AND post_content LIKE '%[chargeforms%'
			 ORDER BY post_modified DESC
			 LIMIT 500"
		);

		$pattern = '/\[chargeforms\b[^\]]*\bid=[\'"]?' . preg_quote( (string) $form_id, '/' ) . '[\'"]?(?=[\s\]])[^\]]*\]/';

		$items = [];
		foreach ( $candidates as $row ) {
			if ( ! preg_match( $pattern, $row->post_content ) ) {
				continue;
			}
			$post_type_obj = get_post_type_object( $row->post_type );
			$items[]       = [
				'title'    => $row->post_title ? $row->post_title : __( '(no title)', 'chargeforms' ),
				'edit_url' => get_edit_post_link( $row->ID, 'raw' ),
				'view_url' => 'publish' === $row->post_status ? get_permalink( $row->ID ) : '',
				'type'     => $post_type_obj ? $post_type_obj->labels->singular_name : $row->post_type,
				'status'   => get_post_status_object( $row->post_status ) ? get_post_status_object( $row->post_status )->label : $row->post_status,
			];
			if ( count( $items ) >= 50 ) {
				break;
			}
		}

		wp_send_json_success( [ 'items' => $items, 'scanned_limit' => 500 === count( $candidates ) ] );
	}

	/** Renders the form standalone in a new tab, bypassing the published-only check the real shortcode enforces. */
	/**
	 * The real "Preview & Design" screen — opens in its own tab, a browser-
	 * chrome mockup with Desktop/Tablet/Mobile width toggles around the
	 * actual rendered form, plus a mini top-nav back into the builder/
	 * settings/entries. Deliberately does NOT include a marketing panel
	 * listing paid-tier features ChargeForms doesn't have (the real product's
	 * equivalent screen does) — that would misrepresent what upgrading
	 * (there is no paid tier yet) would actually unlock.
	 */
	public function handle_preview() {
		$form_id = isset( $_GET['form_id'] ) ? (int) $_GET['form_id'] : 0;

		if ( ! current_user_can( 'chargeforms_manage_forms' ) || ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ?? '' ) ), 'chargeforms_preview_' . $form_id ) ) {
			wp_die( esc_html__( 'Not allowed.', 'chargeforms' ), 403 );
		}

		$form = Form::get( $form_id );
		if ( ! $form ) {
			wp_die( esc_html__( 'Form not found.', 'chargeforms' ), 404 );
		}

		/*
		 * register_assets() normally runs on 'wp_enqueue_scripts', which this
		 * admin-post.php request never fires — register and enqueue the
		 * style directly, and give add-ons the same chance via an action
		 * hook. A field type an add-on contributes (ChargeForms Bookings'
		 * Booking Calendar, e.g.) enqueues its OWN script/style from inside
		 * its render callback below, same as every field render always has
		 * — but that call is a silent no-op unless the handle was already
		 * registered, which normally happens on 'wp_enqueue_scripts' too.
		 * Real bug found live: without this, Booking Calendar previewed as
		 * an empty shell (no calendar grid, no console error either) since
		 * its picker script/style never got registered at all on this one
		 * request type.
		 */
		wp_register_style( 'chargeforms-frontend', CHARGEFORMS_URL . 'assets/css/frontend.css', [], CHARGEFORMS_VERSION );
		wp_enqueue_style( 'chargeforms-frontend' );
		wp_add_inline_style( 'chargeforms-frontend', '			* { box-sizing: border-box; }
			body {
				margin: 0;
				background: #f5f7fa;
				font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
				color: #16181d;
			}
			.fcp-topbar {
				display: flex;
				align-items: center;
				gap: 28px;
				background: #fff;
				border-bottom: 1px solid rgba(15,23,42,.08);
				padding: 16px 28px;
			}
			.fcp-topbar h1 {
				font-size: 16px;
				margin: 0;
				font-weight: 700;
				letter-spacing: -0.01em;
				white-space: nowrap;
				overflow: hidden;
				text-overflow: ellipsis;
				max-width: 240px;
			}
			.fcp-topbar nav { display: flex; gap: 24px; flex: 1; }
			.fcp-topbar nav a { color: #606266; text-decoration: none; font-size: 13px; font-weight: 600; transition: color .12s ease; }
			.fcp-topbar nav a:hover { color: #16181d; }
			.fcp-topbar-right { display: flex; align-items: center; gap: 12px; }
			.fcp-preview-only { display: flex; align-items: center; gap: 6px; font-size: 13px; color: #606266; }
			.fcp-shortcode {
				display: inline-flex;
				align-items: center;
				gap: 6px;
				background: #f5f7fa;
				border: 1px solid rgba(15,23,42,.08);
				border-radius: 8px;
				padding: 7px 12px;
				font-size: 12px;
				font-family: monospace;
				color: #606266;
			}
			.fcp-body { display: flex; align-items: flex-start; gap: 28px; padding: 32px; }
			.fcp-frame-col { flex: 1; min-width: 0; }
			.fcp-chrome {
				background: #fff;
				border: 1px solid rgba(15,23,42,.08);
				border-radius: 16px;
				box-shadow: 0 1px 2px rgba(15,23,42,.04), 0 8px 20px -6px rgba(15,23,42,.10);
				overflow: hidden;
			}
			.fcp-chrome-bar {
				display: flex;
				align-items: center;
				justify-content: space-between;
				padding: 12px 18px;
				background: #fafbfc;
				border-bottom: 1px solid rgba(15,23,42,.08);
			}
			.fcp-dots { display: flex; gap: 7px; }
			.fcp-dots span { width: 10px; height: 10px; border-radius: 50%; }
			.fcp-dots span:nth-child(1) { background: #e5484d; }
			.fcp-dots span:nth-child(2) { background: #f0a020; }
			.fcp-dots span:nth-child(3) { background: #16a672; }
			.fcp-devices { display: flex; gap: 4px; }
			.fcp-devices button {
				display: flex;
				align-items: center;
				justify-content: center;
				width: 32px;
				height: 28px;
				border: 1px solid transparent;
				background: none;
				border-radius: 8px;
				cursor: pointer;
				color: #606266;
				transition: background .12s ease, color .12s ease;
			}
			.fcp-devices button.is-active { background: #f2effe; color: #6c4ef5; border-color: #e1d8fd; }
			.fcp-devices button svg { display: block; }
			.fcp-canvas {
				padding: 56px 24px;
				display: flex;
				justify-content: center;
				background: #f5f7fa;
				transition: none;
			}
			.fcp-viewport {
				width: 100%;
				max-width: 680px;
				transition: max-width 0.25s ease;
				background: #fff;
				padding: 20px;
				border-radius: 6px;
			}
			.fcp-viewport.is-tablet { max-width: 480px; }
			.fcp-viewport.is-mobile { max-width: 320px; }
			.fcp-sidebar {
				width: 280px;
				flex-shrink: 0;
				background: #fff;
				border: 1px solid rgba(15,23,42,.08);
				border-radius: 16px;
				box-shadow: 0 1px 2px rgba(15,23,42,.04), 0 8px 20px -6px rgba(15,23,42,.10);
				padding: 24px;
			}
			.fcp-sidebar h2 { font-size: 15px; font-weight: 700; letter-spacing: -0.01em; margin: 0 0 16px; }
			.fcp-sidebar select {
				width: 100%;
				padding: 10px 12px;
				border: 1px solid rgba(15,23,42,.08);
				border-radius: 8px;
				background: #f5f7fa;
				font-size: 13px;
				margin-bottom: 20px;
			}
			.fcp-roadmap { border-top: 1px solid rgba(15,23,42,.08); padding-top: 18px; margin-top: 4px; }
			.fcp-roadmap h3 { font-size: 11.5px; text-transform: uppercase; letter-spacing: .06em; font-weight: 700; color: #909399; margin: 0 0 12px; }
			.fcp-roadmap ul { list-style: none; margin: 0; padding: 0; display: flex; flex-direction: column; gap: 10px; }
			.fcp-roadmap li { font-size: 12.5px; color: #606266; display: flex; gap: 6px; }
			@media (max-width: 900px) {
				.fcp-body { flex-direction: column; }
				.fcp-sidebar { width: 100%; }
			}'
		);
		// Dedicated no-src handle so this admin-post standalone preview page
		// (outside the normal wp_enqueue_scripts lifecycle) can carry its own
		// inline JS through wp_add_inline_script() instead of a raw <script> tag.
		wp_register_script( 'chargeforms-preview', false, [], CHARGEFORMS_VERSION, true );
		wp_enqueue_script( 'chargeforms-preview' );
		wp_add_inline_script( 'chargeforms-preview', '			document.querySelectorAll( \'.fcp-devices button\' ).forEach( function ( btn ) {
				btn.addEventListener( \'click\', function () {
					document.querySelectorAll( \'.fcp-devices button\' ).forEach( function ( b ) { b.classList.remove( \'is-active\' ); } );
					btn.classList.add( \'is-active\' );
					var vp = document.getElementById( \'fcp-viewport\' );
					vp.classList.remove( \'is-tablet\', \'is-mobile\' );
					if ( \'tablet\' === btn.getAttribute( \'data-size\' ) ) { vp.classList.add( \'is-tablet\' ); }
					if ( \'mobile\' === btn.getAttribute( \'data-size\' ) ) { vp.classList.add( \'is-mobile\' ); }
				} );
			} );
			document.getElementById( \'fcp-preview-only-toggle\' ).addEventListener( \'change\', function () {
				document.getElementById( \'fcp-sidebar\' ).style.display = this.checked ? \'none\' : \'\';
			} );'
		);
		do_action( 'chargeforms_preview_form_assets', $form );

		$shortcode = new Shortcode();
		$body      = $shortcode->render_form_html( $form, true );

		$edit_url     = admin_url( 'admin.php?page=chargeforms-builder&form_id=' . $form_id );
		$settings_url = admin_url( 'admin.php?page=chargeforms-form-settings&form_id=' . $form_id );
		$entries_url  = admin_url( 'admin.php?page=chargeforms-entries&form_id=' . $form_id );

		nocache_headers();
		?>
		<!DOCTYPE html>
		<html <?php language_attributes(); ?>>
		<head>
			<meta charset="<?php bloginfo( 'charset' ); ?>">
			<meta name="viewport" content="width=device-width, initial-scale=1">
			<title><?php echo esc_html( $form['title'] ); ?> — <?php esc_html_e( 'Preview', 'chargeforms' ); ?></title>
			<?php wp_print_styles(); // No handle: prints the whole queue — chargeforms-frontend plus whatever chargeforms_preview_form_assets enqueued. ?>
		</head>
		<body>
			<div class="fcp-topbar">
				<h1><?php echo esc_html( $form['title'] ); ?></h1>
				<nav>
					<a href="<?php echo esc_url( $edit_url ); ?>"><?php esc_html_e( 'Edit Fields', 'chargeforms' ); ?></a>
					<a href="<?php echo esc_url( $settings_url ); ?>"><?php esc_html_e( 'Settings & Integrations', 'chargeforms' ); ?></a>
					<a href="<?php echo esc_url( $entries_url ); ?>"><?php esc_html_e( 'Entries', 'chargeforms' ); ?></a>
				</nav>
				<div class="fcp-topbar-right">
					<label class="fcp-preview-only"><input type="checkbox" id="fcp-preview-only-toggle"> <?php esc_html_e( 'Preview Only', 'chargeforms' ); ?></label>
					<span class="fcp-shortcode"><?php echo esc_html( '[chargeforms id="' . $form_id . '"]' ); ?></span>
				</div>
			</div>

			<div class="fcp-body">
				<div class="fcp-frame-col">
					<div class="fcp-chrome">
						<div class="fcp-chrome-bar">
							<div class="fcp-dots"><span></span><span></span><span></span></div>
							<div class="fcp-devices">
								<button type="button" class="is-active" data-size="desktop" title="<?php esc_attr_e( 'Desktop', 'chargeforms' ); ?>">
									<svg width="16" height="16" viewBox="0 0 24 24" fill="none"><rect x="3" y="4" width="18" height="12" rx="1" stroke="currentColor" stroke-width="1.6"/><path d="M8 20h8M12 16v4" stroke="currentColor" stroke-width="1.6" stroke-linecap="round"/></svg>
								</button>
								<button type="button" data-size="tablet" title="<?php esc_attr_e( 'Tablet', 'chargeforms' ); ?>">
									<svg width="16" height="16" viewBox="0 0 24 24" fill="none"><rect x="5" y="2" width="14" height="20" rx="2" stroke="currentColor" stroke-width="1.6"/><circle cx="12" cy="18.5" r="0.8" fill="currentColor"/></svg>
								</button>
								<button type="button" data-size="mobile" title="<?php esc_attr_e( 'Mobile', 'chargeforms' ); ?>">
									<svg width="16" height="16" viewBox="0 0 24 24" fill="none"><rect x="7" y="2" width="10" height="20" rx="2" stroke="currentColor" stroke-width="1.6"/><circle cx="12" cy="18.5" r="0.8" fill="currentColor"/></svg>
								</button>
							</div>
						</div>
						<div class="fcp-canvas">
							<div class="fcp-viewport" id="fcp-viewport">
								<?php echo wp_kses( $body, Shortcode::allowed_form_html() ); ?>
							</div>
						</div>
					</div>
				</div>

				<div class="fcp-sidebar" id="fcp-sidebar">
					<h2><?php esc_html_e( 'Form Style Template', 'chargeforms' ); ?></h2>
					<select disabled>
						<option><?php esc_html_e( 'Default', 'chargeforms' ); ?></option>
					</select>
					<div class="fcp-roadmap">
						<h3><?php esc_html_e( 'Coming later', 'chargeforms' ); ?></h3>
						<ul>
							<li>— <?php esc_html_e( 'Per-form style templates', 'chargeforms' ); ?></li>
							<li>— <?php esc_html_e( 'Additional payment gateways', 'chargeforms' ); ?></li>
						</ul>
					</div>
				</div>
			</div>

			<?php wp_print_scripts(); // Same reasoning as wp_print_styles() above — prints whatever a field's render() enqueued (e.g. the Booking Calendar picker), which normally prints via wp_footer() on a real page load. ?>
		</body>
		</html>
		<?php
		exit;
	}

	public function handle_export_single() {
		$form_id = isset( $_GET['form_id'] ) ? (int) $_GET['form_id'] : 0;

		if ( ! current_user_can( 'chargeforms_manage_forms' ) || ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ?? '' ) ), 'chargeforms_export_single_' . $form_id ) ) {
			wp_die( esc_html__( 'Not allowed.', 'chargeforms' ), 403 );
		}

		$form = Form::get( $form_id );
		if ( ! $form ) {
			wp_die( esc_html__( 'Form not found.', 'chargeforms' ), 404 );
		}

		nocache_headers();
		header( 'Content-Type: application/json; charset=utf-8' );
		header( 'Content-Disposition: attachment; filename="' . sanitize_file_name( $form['title'] ) . '.json"' );
		echo wp_json_encode( [
			'title'    => $form['title'],
			'fields'   => $form['fields'],
			'settings' => $form['settings'],
		], JSON_PRETTY_PRINT );
		exit;
	}
}