<?php

namespace ChargeForms\Admin;

use ChargeForms\Includes\Icon;
use ChargeForms\Includes\Settings;

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/**
 * ChargeForms > Global Settings. Plugin-wide defaults — per-form settings
 * always override these. Sub-navigated into sections (?section=x) rather
 * than one long page, same convention (and same nav grouping) as the reference product
 * Forms' own Global Settings screen.
 *
 * Two sections the reference product gates behind its paid tier — Integration
 * Failure Email and Double Opt-in — are deliberately left as real, free,
 * working features here instead of being paywalled, since ChargeForms's
 * whole premise is a genuinely free, fully-functional plugin. Everything
 * else mirrors their layout as closely as the underlying functionality
 * allows.
 */
class Settings_Page {

	/* Five named groups, matching design_handoff_chargeforms/README.md's
	   Global Settings spec exactly: General / Payments / Security / Email /
	   Advanced. License is deliberately left ungrouped (TOPLEVEL_SECTIONS)
	   — the design's own screen map lists License as its own separate
	   numbered admin screen, not a member of any Settings group; it still
	   renders inside this page (moving it to a real standalone top-level
	   menu entry is a bigger navigation change than this reorganization
	   covers), but sits outside the five groups the same way the design's
	   own sidebar mockup shows it as a standalone entry. */
	const GENERAL_SECTIONS  = [ 'layout', 'validation-messages', 'style-template', 'miscellaneous' ];
	const PAYMENT_SECTIONS  = [ 'payment-settings', 'payment-methods' ];
	const SECURITY_SECTIONS = [ 'recaptcha', 'hcaptcha', 'turnstile', 'cleantalk' ];
	const EMAIL_SECTIONS    = [ 'email-delivery', 'email-summaries', 'integration-failure', 'double-optin' ];
	const ADVANCED_SECTIONS = [ 'permissions', 'save-resume', 'mcp', 'address-autocomplete', 'configure-integrations' ];
	const TOPLEVEL_SECTIONS = [ 'license' ];

	private $license_page;

	public function __construct() {
		add_action( 'admin_menu', [ $this, 'register' ] );
		add_action( 'admin_enqueue_scripts', [ $this, 'maybe_enqueue_email_delivery_assets' ] );
		add_action( 'admin_post_chargeforms_save_settings', [ $this, 'handle_save' ] );
		// License_Page owns its own admin-post handlers (activate/deactivate
		// need a real API round trip before deciding what to store — see
		// its class doc comment for why that can't go through
		// handle_save()'s generic Settings::update() flow); it's
		// instantiated here purely so those handlers register, then reused
		// by render_license() below to render the section itself.
		$this->license_page = new License_Page();
	}

	public function register() {
		add_submenu_page(
			'chargeforms',
			__( 'Global Settings', 'chargeforms' ),
			__( 'Global Settings', 'chargeforms' ),
			'chargeforms_manage_forms',
			'chargeforms-settings',
			[ $this, 'render' ]
		);
	}

	private function all_sections() {
		return array_merge( self::GENERAL_SECTIONS, self::PAYMENT_SECTIONS, self::SECURITY_SECTIONS, self::EMAIL_SECTIONS, self::ADVANCED_SECTIONS, self::TOPLEVEL_SECTIONS );
	}

	/** Loaded on every Global Settings section, not just Email Delivery — the CRUD/test UI is REST-driven vanilla JS that mounts into server-rendered markup, and admin.js's no-reload nav can turn ANY section page into the Email Delivery screen without a full page reload (it swaps #chargeforms-ajax-region via innerHTML, which never re-executes scripts). So this file has to already be present on whatever section the user started on; it self-guards when its root element isn't in the DOM and mounts when one appears (see email-delivery.js's chargeforms:ajax-region-swapped listener). Same reasoning as any other per-screen script this plugin loads where it's actually used (see Menu::enqueue_assets()'s own builder-only conditional) — here "where it's used" spans every section of this one page. */
	public function maybe_enqueue_email_delivery_assets() {
		$page    = isset( $_GET['page'] ) ? sanitize_key( wp_unslash( $_GET['page'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
		$section = isset( $_GET['section'] ) ? sanitize_key( wp_unslash( $_GET['section'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
		if ( 'chargeforms-settings' !== $page ) {
			return;
		}

		// Real live-site report: a normal refresh of this page kept serving a
		// stale copy of this script even after an update, while a hard
		// refresh (which bypasses the browser's own cache but still hits
		// whatever cached this page/its assets upstream) got the current
		// one. Two independent hardenings, since either layer alone can be
		// the culprit depending on the host: (1) filemtime() as the cache-
		// busting version instead of the plugin-wide CHARGEFORMS_VERSION —
		// changes the instant this exact file's bytes change, not just on a
		// version bump, so a stale-but-same-version cache entry can't
		// masquerade as current; (2) explicit no-store headers on the PAGE
		// itself below, so even a host/proxy layer that ignores the script
		// URL's own querystring can't serve a cached copy of the HTML that
		// still points at an old version.
		$script_path = CHARGEFORMS_PATH . 'assets/js/email-delivery.js';
		$script_ver  = file_exists( $script_path ) ? filemtime( $script_path ) : CHARGEFORMS_VERSION;
		wp_enqueue_script( 'chargeforms-email-delivery', CHARGEFORMS_URL . 'assets/js/email-delivery.js', [], $script_ver, true );
		// Deliberately NOT wp_localize_script() — a real live-site report
		// (v0.148.0) traced back to a caching/JS-optimization plugin
		// stripping or reordering the inline <script> block that call
		// prints, leaving the config this file needs simply never arriving
		// and the screen stuck on "Loading…" forever with no error. A
		// `data-*` attribute on the root container itself has no such
		// ordering dependency — it's part of the same HTML response as the
		// element the JS already has to find, so nothing can separate the
		// two. See render_email_delivery() below, which embeds this via
		// email_delivery_config().

		// nocache_headers() is WordPress core's own standard "never cache
		// this response" header set (Cache-Control: no-cache, no-store,
		// must-revalidate + Expires in the past + Pragma: no-cache) — sent
		// here (admin_enqueue_scripts, which fires before headers go out)
		// rather than left to whatever default wp-admin already sends,
		// since a host-level cache/proxy sitting in front of wp-admin can
		// still cache a response WordPress core didn't explicitly forbid.
		// Scoped to the Email Delivery section itself — that's the response
		// whose HTML both a direct load and admin.js's AJAX section fetch
		// pull, so it must never arrive from a cache.
		if ( 'email-delivery' === $section ) {
			nocache_headers();
		}
	}

	private function email_delivery_config() {
		return [
			'restUrl'      => esc_url_raw( rest_url( 'chargeforms/v1' ) ),
			'nonce'        => wp_create_nonce( 'wp_rest' ),
			'adminEmail'   => get_option( 'admin_email' ),
			'siteDomain'   => wp_parse_url( home_url(), PHP_URL_HOST ),
			'providers'    => \ChargeForms\Includes\Email\Smtp_Provider_Registry::all(),
			'i18n'         => [
				'confirmDelete' => __( 'Delete this SMTP connection? This cannot be undone.', 'chargeforms' ),
			],
		];
	}

	private function current_section() {
		$section = isset( $_GET['section'] ) ? sanitize_key( wp_unslash( $_GET['section'] ) ) : 'layout'; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
		return in_array( $section, $this->all_sections(), true ) ? $section : 'layout';
	}

	public function render() {
		$settings = Settings::all();
		$section  = $this->current_section();
		?>
		<div class="wrap chargeforms-wrap">
			<?php Page_Header::render( 'chargeforms-settings' ); ?>
			<h1 class="screen-reader-text"><?php esc_html_e( 'Global Settings', 'chargeforms' ); ?></h1>
			<div class="chargeforms-page-head">
				<div class="chargeforms-page-head-text">
					<h1><?php esc_html_e( 'Global Settings', 'chargeforms' ); ?></h1>
					<p class="chargeforms-page-head-sub"><?php esc_html_e( 'Applies to every form unless a form overrides it.', 'chargeforms' ); ?></p>
				</div>
				<?php if ( ! in_array( $section, [ 'license', 'configure-integrations', 'email-delivery' ], true ) ) : ?>
					<button type="button" class="button button-primary chargeforms-btn-icon chargeforms-settings-save-head" onclick="var f=document.querySelector('.chargeforms-settings-form'); if(f){f.requestSubmit();}">
						<?php esc_html_e( 'Save Changes', 'chargeforms' ); ?>
					</button>
				<?php endif; ?>
			</div>

			<div id="chargeforms-ajax-region">

			<?php if ( isset( $_GET['chargeforms_notice'] ) ) : // phpcs:ignore WordPress.Security.NonceVerification.Recommended ?>
				<div class="notice notice-success is-dismissible"><p><?php esc_html_e( 'Settings saved.', 'chargeforms' ); ?></p></div>
			<?php endif; ?>

			<div class="chargeforms-settings-shell">
				<nav class="chargeforms-settings-nav">
					<?php
					$group_icons = $this->group_icons();
					$this->render_nav_group( __( 'General', 'chargeforms' ), self::GENERAL_SECTIONS, $section, $group_icons['General'] );
					$this->render_nav_group( __( 'Payments', 'chargeforms' ), self::PAYMENT_SECTIONS, $section, $group_icons['Payments'] );
					$this->render_nav_group( __( 'Security', 'chargeforms' ), self::SECURITY_SECTIONS, $section, $group_icons['Security'] );
					$this->render_nav_group( __( 'Email', 'chargeforms' ), self::EMAIL_SECTIONS, $section, $group_icons['Email'] );
					$this->render_nav_group( __( 'Advanced', 'chargeforms' ), self::ADVANCED_SECTIONS, $section, $group_icons['Advanced'] );
					?>
					<?php foreach ( self::TOPLEVEL_SECTIONS as $key ) : ?>
						<a
							href="<?php echo esc_url( admin_url( 'admin.php?page=chargeforms-settings&section=' . $key ) ); ?>"
							class="chargeforms-settings-nav-toplevel<?php echo $section === $key ? ' is-active' : ''; ?>"
						>
							<span class="chargeforms-settings-nav-icon"><?php Icon::render( $this->section_icons()[ $key ] ?? 'circle', 18 ); ?></span>
							<span class="chargeforms-settings-nav-text">
								<span class="chargeforms-settings-nav-label"><?php echo esc_html( $this->section_labels()[ $key ] ); ?></span>
								<?php if ( ! empty( $this->section_descriptions()[ $key ] ) ) : ?>
									<span class="chargeforms-settings-nav-desc"><?php echo esc_html( $this->section_descriptions()[ $key ] ); ?></span>
								<?php endif; ?>
							</span>
						</a>
					<?php endforeach; ?>
				</nav>

				<div class="chargeforms-settings-content">
					<?php if ( 'permissions' === $section ) : ?>
						<?php $this->render_permissions( $settings ); ?>
					<?php elseif ( 'license' === $section ) : ?>
						<?php $this->license_page->render( $settings ); ?>
					<?php elseif ( 'configure-integrations' === $section ) : ?>
						<?php $this->render_configure_integrations(); ?>
					<?php elseif ( 'email-delivery' === $section ) : ?>
						<?php $this->render_email_delivery(); ?>
					<?php else : ?>
						<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" class="chargeforms-settings-form">
							<input type="hidden" name="action" value="chargeforms_save_settings">
							<input type="hidden" name="_redirect_to" value="chargeforms-settings&section=<?php echo esc_attr( $section ); ?><?php echo 'payment-methods' === $section && isset( $_GET['gateway'] ) ? '&gateway=' . esc_attr( sanitize_key( $_GET['gateway'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended ?>">
							<?php wp_nonce_field( 'chargeforms_save_settings' ); ?>

							<?php
							switch ( $section ) {
								case 'email-summaries':
									$this->render_email_summaries( $settings );
									break;
								case 'integration-failure':
									$this->render_integration_failure( $settings );
									break;
								case 'validation-messages':
									$this->render_validation_messages( $settings );
									break;
								case 'style-template':
									$this->render_style_template( $settings );
									break;
								case 'address-autocomplete':
									$this->render_address_autocomplete( $settings );
									break;
								case 'miscellaneous':
									$this->render_miscellaneous( $settings );
									break;
								case 'payment-settings':
									$this->render_payment_settings( $settings );
									break;
								case 'payment-methods':
									$this->render_payment_methods( $settings );
									break;
								case 'recaptcha':
									$this->render_recaptcha( $settings );
									break;
								case 'hcaptcha':
									$this->render_hcaptcha( $settings );
									break;
								case 'turnstile':
									$this->render_turnstile( $settings );
									break;
								case 'cleantalk':
									$this->render_cleantalk( $settings );
									break;
								case 'double-optin':
									$this->render_double_optin( $settings );
									break;
								case 'save-resume':
									$this->render_save_resume( $settings );
									break;
								case 'mcp':
									$this->render_mcp( $settings );
									break;
								default:
									$this->render_layout( $settings );
							}
							?>

							<?php submit_button( __( 'Save Settings', 'chargeforms' ) ); ?>
						</form>
					<?php endif; ?>
				</div>
			</div>

			</div><!-- #chargeforms-ajax-region -->
		</div>
		<?php
	}

	/**
	 * Redesigned to close the gap with Tools_Page's own nav (icon+label+
	 * description per row) — a real, visible inconsistency between two
	 * side panels in the same plugin, not a hypothetical one. $icon_key
	 * replaces the old small color-coded dot: the group heading itself
	 * now gets a real icon-in-square exactly like a leaf row does,
	 * rather than a dot standing in for one. The collapsible
	 * accordion behavior (only the active group's rows are visible) is
	 * unchanged — with real descriptions added, a fully flat Tools-style
	 * list across all ~19 sections at once would run very long, so
	 * grouping stays, just restyled to match Tools' visual language.
	 */
	private function render_nav_group( $heading, array $keys, $current_section, $icon_key ) {
		$is_expanded = in_array( $current_section, $keys, true );
		$descs       = $this->section_descriptions();
		?>
		<div class="chargeforms-settings-nav-group<?php echo $is_expanded ? ' is-expanded' : ''; ?>">
			<button type="button" class="chargeforms-settings-nav-heading">
				<span class="chargeforms-settings-nav-icon"><?php Icon::render( $icon_key, 18 ); ?></span>
				<span class="chargeforms-settings-nav-heading-label"><?php echo esc_html( $heading ); ?></span>
				<?php Icon::render( 'arrow-down-alt2', 16, 'chargeforms-settings-nav-chevron' ); ?>
			</button>
			<div class="chargeforms-settings-nav-body">
				<div class="chargeforms-settings-nav-links">
					<?php foreach ( $keys as $key ) : ?>
						<a
							href="<?php echo esc_url( admin_url( 'admin.php?page=chargeforms-settings&section=' . $key ) ); ?>"
							class="<?php echo $current_section === $key ? 'is-active' : ''; ?>"
						>
							<span class="chargeforms-settings-nav-icon"><?php Icon::render( $this->section_icons()[ $key ] ?? 'circle', 18 ); ?></span>
							<span class="chargeforms-settings-nav-text">
								<span class="chargeforms-settings-nav-label"><?php echo esc_html( $this->section_labels()[ $key ] ); ?></span>
								<?php if ( ! empty( $descs[ $key ] ) ) : ?>
									<span class="chargeforms-settings-nav-desc"><?php echo esc_html( $descs[ $key ] ); ?></span>
								<?php endif; ?>
							</span>
						</a>
					<?php endforeach; ?>
				</div>
			</div>
		</div>
		<?php
	}

	/**
	 * Real Lucide names from Icon_Data::ICONS (see includes/class-icon.php) —
	 * the same icon set already used everywhere else in this admin, not a
	 * separate hand-drawn set, so a settings-nav icon looks identical in
	 * style/weight to every other icon in the plugin. A handful of
	 * sections (Style Template, Save & Resume, MCP, Address Autocomplete)
	 * have no exact Lucide match in the extracted set — mapped to the
	 * closest real one rather than left icon-less.
	 */
	private function section_icons() {
		return [
			'layout'                 => 'layout',
			'email-delivery'         => 'mail',
			'email-summaries'        => 'bar-chart-3',
			'integration-failure'    => 'alert-triangle',
			'validation-messages'    => 'shield-check',
			'style-template'         => 'wand-2',
			'address-autocomplete'   => 'globe',
			'miscellaneous'          => 'sliders-horizontal',
			'payment-settings'       => 'dollar-sign',
			'payment-methods'        => 'dollar-sign',
			'recaptcha'              => 'shield-question',
			'hcaptcha'               => 'shield-question',
			'turnstile'              => 'shield-question',
			'cleantalk'              => 'shield-question',
			'permissions'            => 'users',
			'double-optin'           => 'mail-open',
			'save-resume'            => 'clipboard-list',
			'mcp'                    => 'code',
			'license'                => 'id-card',
			'configure-integrations' => 'puzzle',
		];
	}

	private function section_labels() {
		return [
			'layout'                 => __( 'Layout', 'chargeforms' ),
			'email-delivery'         => __( 'Email Delivery', 'chargeforms' ),
			'email-summaries'        => __( 'Email Summaries', 'chargeforms' ),
			'integration-failure'    => __( 'Integration Failure', 'chargeforms' ),
			'validation-messages'    => __( 'Validation Messages', 'chargeforms' ),
			'style-template'         => __( 'Default Style Template', 'chargeforms' ),
			'address-autocomplete'   => __( 'Address Autocomplete', 'chargeforms' ),
			'miscellaneous'          => __( 'Miscellaneous', 'chargeforms' ),
			'payment-settings'       => __( 'Settings', 'chargeforms' ),
			'payment-methods'        => __( 'Payment Methods', 'chargeforms' ),
			'recaptcha'              => __( 'reCAPTCHA', 'chargeforms' ),
			'hcaptcha'               => __( 'hCaptcha', 'chargeforms' ),
			'turnstile'              => __( 'Turnstile', 'chargeforms' ),
			'cleantalk'              => __( 'CleanTalk', 'chargeforms' ),
			'permissions'            => __( 'Permissions', 'chargeforms' ),
			'double-optin'           => __( 'Double Opt-in', 'chargeforms' ),
			'save-resume'            => __( 'Save & Resume', 'chargeforms' ),
			'mcp'                    => __( 'MCP for AI Agents', 'chargeforms' ),
			'license'                => __( 'License', 'chargeforms' ),
			'configure-integrations' => __( 'Configure Integrations', 'chargeforms' ),
		];
	}

	/**
	 * One-line, plain-language description per section — same purpose as
	 * Tools_Page::section_descriptions(), added here to close the gap
	 * between the two side panels: Tools already pairs an icon, a label
	 * and a description on every row; this sidebar had icon+label only,
	 * which reads as noticeably plainer next to Tools despite being the
	 * same plugin. No section-picking behavior changes — descriptions are
	 * additive.
	 */
	private function section_descriptions() {
		return [
			'layout'                 => __( 'Label position, help text, and required-field styling', 'chargeforms' ),
			'email-delivery'         => __( 'Connect the SMTP service your forms send mail through', 'chargeforms' ),
			'email-summaries'        => __( 'Weekly digest of activity across your forms', 'chargeforms' ),
			'integration-failure'    => __( 'Who gets notified when an integration send fails', 'chargeforms' ),
			'validation-messages'    => __( 'Wording shown when a field fails validation', 'chargeforms' ),
			'style-template'         => __( 'Default look every new form starts from', 'chargeforms' ),
			'address-autocomplete'   => __( 'Suggest addresses as visitors type', 'chargeforms' ),
			'miscellaneous'          => __( 'Date format and other small defaults', 'chargeforms' ),
			'payment-settings'       => __( 'Currency, taxes, and checkout behavior', 'chargeforms' ),
			'payment-methods'        => __( 'Stripe, PayPal, and other gateways', 'chargeforms' ),
			'recaptcha'              => __( 'Google reCAPTCHA spam protection', 'chargeforms' ),
			'hcaptcha'               => __( 'hCaptcha spam protection', 'chargeforms' ),
			'turnstile'              => __( 'Cloudflare Turnstile spam protection', 'chargeforms' ),
			'cleantalk'              => __( 'CleanTalk anti-spam service', 'chargeforms' ),
			'permissions'            => __( 'Who can manage forms and entries', 'chargeforms' ),
			'double-optin'           => __( 'Require email confirmation before an entry counts', 'chargeforms' ),
			'save-resume'            => __( 'Let visitors finish a long form later', 'chargeforms' ),
			'mcp'                    => __( 'Let AI agents read and manage forms', 'chargeforms' ),
			'license'                => __( 'Your ChargeForms Pro license key', 'chargeforms' ),
			'configure-integrations' => __( 'Connect Slack, Sheets, and other services', 'chargeforms' ),
		];
	}

	/**
	 * One representative icon per accordion group, replacing the small
	 * color-coded dot the heading used before — matching how Tools'
	 * single-level nav gives every row a real icon rather than a status
	 * dot standing in for one.
	 */
	private function group_icons() {
		return [
			'General'  => 'settings',
			'Payments' => 'dollar-sign',
			'Security' => 'shield-check',
			'Email'    => 'mail',
			'Advanced' => 'wrench',
		];
	}

	private function render_layout( array $s ) {
		?>
		<input type="hidden" name="chargeforms_settings_fields" value="notification_email,honeypot_enabled,entries_date_format,delete_data_on_uninstall,label_placement,help_placement,error_placement,asterisk_position">

		<div class="chargeforms-card">
			<h2><?php esc_html_e( 'Layout', 'chargeforms' ); ?></h2>
			<p class="chargeforms-form-row-desc" style="margin:0 0 18px;"><?php esc_html_e( 'Default rendering for every form. A form can override any of these.', 'chargeforms' ); ?></p>
			<div style="display:grid;grid-template-columns:1fr 1fr;gap:16px;margin-bottom:6px;">
				<div>
					<label class="chargeforms-form-label"><?php esc_html_e( 'Label placement', 'chargeforms' ); ?></label>
					<select name="label_placement" class="chargeforms-form-select" style="max-width:none;">
						<option value="top" <?php selected( $s['label_placement'], 'top' ); ?>><?php esc_html_e( 'Top aligned', 'chargeforms' ); ?></option>
						<option value="left" <?php selected( $s['label_placement'], 'left' ); ?>><?php esc_html_e( 'Left aligned', 'chargeforms' ); ?></option>
					</select>
				</div>
				<div>
					<label class="chargeforms-form-label"><?php esc_html_e( 'Help message style', 'chargeforms' ); ?></label>
					<select name="help_placement" class="chargeforms-form-select" style="max-width:none;">
						<option value="below" <?php selected( $s['help_placement'], 'below' ); ?>><?php esc_html_e( 'Below the field', 'chargeforms' ); ?></option>
						<option value="tooltip" <?php selected( $s['help_placement'], 'tooltip' ); ?>><?php esc_html_e( 'Tooltip icon', 'chargeforms' ); ?></option>
					</select>
				</div>
				<div>
					<label class="chargeforms-form-label"><?php esc_html_e( 'Error message placement', 'chargeforms' ); ?></label>
					<select name="error_placement" class="chargeforms-form-select" style="max-width:none;">
						<option value="below" <?php selected( $s['error_placement'], 'below' ); ?>><?php esc_html_e( 'Below input element', 'chargeforms' ); ?></option>
						<option value="above" <?php selected( $s['error_placement'], 'above' ); ?>><?php esc_html_e( 'Above input element', 'chargeforms' ); ?></option>
					</select>
				</div>
				<div>
					<label class="chargeforms-form-label"><?php esc_html_e( 'Asterisk on required fields', 'chargeforms' ); ?></label>
					<select name="asterisk_position" class="chargeforms-form-select" style="max-width:none;">
						<option value="right" <?php selected( $s['asterisk_position'], 'right' ); ?>><?php esc_html_e( 'Right of label', 'chargeforms' ); ?></option>
						<option value="left" <?php selected( $s['asterisk_position'], 'left' ); ?>><?php esc_html_e( 'Left of label', 'chargeforms' ); ?></option>
					</select>
				</div>
			</div>
			<div class="chargeforms-form-row">
				<div style="flex:1;">
					<div class="chargeforms-form-row-title"><?php esc_html_e( 'Enable honeypot spam protection on all forms', 'chargeforms' ); ?></div>
					<div class="chargeforms-form-row-desc"><?php esc_html_e( 'An invisible field bots fill in and humans never see', 'chargeforms' ); ?></div>
				</div>
				<label class="chargeforms-switch">
					<input type="checkbox" name="honeypot_enabled" value="1" <?php checked( $s['honeypot_enabled'] ); ?>>
					<span class="chargeforms-switch-track"><span class="chargeforms-switch-thumb"></span></span>
				</label>
			</div>
		</div>

		<div class="chargeforms-card">
			<h2><?php esc_html_e( 'Notifications & Entries', 'chargeforms' ); ?></h2>
			<div style="display:grid;grid-template-columns:1fr 1fr;gap:16px;">
				<div>
					<label for="chargeforms_notification_email" class="chargeforms-form-label"><?php esc_html_e( 'Notification Email', 'chargeforms' ); ?></label>
					<input type="email" id="chargeforms_notification_email" name="notification_email" class="chargeforms-form-input" style="max-width:none;" value="<?php echo esc_attr( $s['notification_email'] ); ?>">
					<p class="chargeforms-form-row-desc" style="margin:6px 0 0;"><?php esc_html_e( 'Default address new-submission emails are sent to, unless a form overrides it.', 'chargeforms' ); ?></p>
				</div>
				<div>
					<label for="chargeforms_entries_date_format" class="chargeforms-form-label"><?php esc_html_e( 'Entries Date Format', 'chargeforms' ); ?></label>
					<input type="text" id="chargeforms_entries_date_format" name="entries_date_format" class="chargeforms-form-input" style="max-width:none;" value="<?php echo esc_attr( $s['entries_date_format'] ); ?>">
					<p class="chargeforms-form-row-desc" style="margin:6px 0 0;">
						<?php
						printf(
							/* translators: %s: example formatted date */
							esc_html__( 'Example with current setting: %s', 'chargeforms' ),
							esc_html( date_i18n( $s['entries_date_format'] ) )
						);
						?>
						<?php esc_html_e( '(used only when Miscellaneous > Date & Time Format is set to something other than "Relative".)', 'chargeforms' ); ?>
					</p>
				</div>
			</div>
		</div>

		<div class="chargeforms-card">
			<h2><?php esc_html_e( 'Danger Zone', 'chargeforms' ); ?></h2>
			<div class="chargeforms-form-row" style="border-top:none;padding-top:0;">
				<div style="flex:1;">
					<div class="chargeforms-form-row-title"><?php esc_html_e( 'Delete all forms, entries, and settings when ChargeForms is deleted', 'chargeforms' ); ?></div>
				</div>
				<label class="chargeforms-switch">
					<input type="checkbox" name="delete_data_on_uninstall" value="1" <?php checked( $s['delete_data_on_uninstall'] ); ?>>
					<span class="chargeforms-switch-track"><span class="chargeforms-switch-thumb"></span></span>
				</label>
			</div>
		</div>
		<?php
	}

	private function render_validation_messages( array $s ) {
		$fields = [
			'validation_msg_required'   => __( 'Required Field', 'chargeforms' ),
			'validation_msg_email'      => __( 'Email', 'chargeforms' ),
			'validation_msg_numeric'    => __( 'Numeric', 'chargeforms' ),
			'validation_msg_min'        => __( 'Minimum', 'chargeforms' ),
			'validation_msg_max'        => __( 'Maximum', 'chargeforms' ),
			'validation_msg_digits'     => __( 'Digits', 'chargeforms' ),
			'validation_msg_url'        => __( 'Url', 'chargeforms' ),
			'validation_msg_image_type' => __( 'Allowed Image Types', 'chargeforms' ),
			'validation_msg_file_type'  => __( 'Allowed File Types', 'chargeforms' ),
			'validation_msg_file_size'  => __( 'Maximum File Size', 'chargeforms' ),
			'validation_msg_file_count' => __( 'Maximum File Count', 'chargeforms' ),
		];
		?>
		<input type="hidden" name="chargeforms_settings_fields" value="<?php echo esc_attr( implode( ',', array_keys( $fields ) ) ); ?>">

		<div class="chargeforms-card">
			<h2><?php esc_html_e( 'Validation Messages', 'chargeforms' ); ?></h2>
			<p class="chargeforms-form-row-desc" style="margin:0 0 18px;"><?php esc_html_e( 'Site-wide defaults. Any field can override its own. Required Field, Email, Numeric, and file-upload messages are enforced server-side on every submission; Minimum/Maximum/Digits are stored for a future release of per-field numeric range validation.', 'chargeforms' ); ?></p>
			<div style="display:flex;flex-direction:column;gap:13px;">
				<?php foreach ( $fields as $key => $label ) : ?>
					<div style="display:grid;grid-template-columns:168px 1fr;gap:14px;align-items:center;">
						<label for="chargeforms_<?php echo esc_attr( $key ); ?>" class="chargeforms-form-label" style="margin-bottom:0;"><?php echo esc_html( $label ); ?></label>
						<input type="text" id="chargeforms_<?php echo esc_attr( $key ); ?>" name="<?php echo esc_attr( $key ); ?>" class="chargeforms-form-input" style="max-width:none;" value="<?php echo esc_attr( $s[ $key ] ); ?>">
					</div>
				<?php endforeach; ?>
			</div>
		</div>
		<?php
	}

	private function render_style_template( array $s ) {
		?>
		<input type="hidden" name="chargeforms_settings_fields" value="default_style_template_enabled">

		<div class="chargeforms-card">
			<h2><?php esc_html_e( 'Default Style Template', 'chargeforms' ); ?></h2>
			<p class="chargeforms-form-row-desc" style="margin:0 0 4px;"><?php esc_html_e( 'ChargeForms\'s base styling always loads so forms look right out of the box. Enabling this adds an extra polish layer (card background, shadow, refined spacing) on top of it.', 'chargeforms' ); ?></p>
			<div class="chargeforms-form-row">
				<div style="flex:1;">
					<div class="chargeforms-form-row-title"><?php esc_html_e( 'Enable Default Style Template', 'chargeforms' ); ?></div>
				</div>
				<label class="chargeforms-switch">
					<input type="checkbox" name="default_style_template_enabled" value="1" <?php checked( $s['default_style_template_enabled'] ); ?>>
					<span class="chargeforms-switch-track"><span class="chargeforms-switch-thumb"></span></span>
				</label>
			</div>
		</div>
		<?php
	}

	private function render_miscellaneous( array $s ) {
		?>
		<input type="hidden" name="chargeforms_settings_fields" value="disable_ip_logging,disable_form_analytics,honeypot_enabled,block_disposable_emails,auto_tab_index_enabled,admin_top_nav_enabled,email_footer_text,date_time_format,google_fonts_enabled">

		<div class="chargeforms-card">
			<h2><?php esc_html_e( 'Miscellaneous', 'chargeforms' ); ?></h2>
			<p class="chargeforms-form-row-desc" style="margin:0 0 8px;"><?php esc_html_e( "The settings that don't belong anywhere else.", 'chargeforms' ); ?></p>

			<?php $this->toggle_row( 'google_fonts_enabled', __( 'Load Inter from Google Fonts', 'chargeforms' ), $s['google_fonts_enabled'], __( 'Off by default — no request to Google happens until you turn this on. Loads only on ChargeForms\' own admin screens; the admin UI uses your system font otherwise.', 'chargeforms' ) ); ?>
			<?php $this->toggle_row( 'disable_ip_logging', __( 'Disable IP Logging', 'chargeforms' ), $s['disable_ip_logging'] ); ?>
			<?php $this->toggle_row( 'disable_form_analytics', __( 'Disable Form Analytics', 'chargeforms' ), $s['disable_form_analytics'], __( 'Reports charts are skipped when this is on.', 'chargeforms' ) ); ?>
			<?php $this->toggle_row( 'honeypot_enabled', __( 'Enable Honeypot Security', 'chargeforms' ), $s['honeypot_enabled'], __( 'Recommended Settings: Enabled', 'chargeforms' ) ); ?>
			<?php $this->toggle_row( 'block_disposable_emails', __( 'Block Disposable Email Addresses', 'chargeforms' ), $s['block_disposable_emails'], __( 'Rejects submissions on any Email field that use a known temporary-inbox domain (e.g. mailinator.com).', 'chargeforms' ) ); ?>

			<div class="chargeforms-form-row">
				<div style="flex:1;">
					<div class="chargeforms-form-row-title"><?php esc_html_e( 'Token Based Spam Protection', 'chargeforms' ); ?></div>
					<div class="chargeforms-form-row-desc"><?php esc_html_e( 'Always on — every submission already requires a valid one-time WordPress nonce, generated fresh per page load and rejected if reused or missing.', 'chargeforms' ); ?></div>
				</div>
			</div>

			<?php $this->toggle_row( 'auto_tab_index_enabled', __( 'Enable Auto Tab - Index', 'chargeforms' ), $s['auto_tab_index_enabled'] ); ?>

			<div class="chargeforms-form-row">
				<div style="flex:1;">
					<div class="chargeforms-form-row-title"><?php esc_html_e( 'Geo-Location Provider', 'chargeforms' ); ?></div>
					<?php $this->coming_soon_notice( __( 'Geo-Location provider', 'chargeforms' ) ); ?>
				</div>
			</div>
			<div class="chargeforms-form-row">
				<div style="flex:1;">
					<div class="chargeforms-form-row-title"><?php esc_html_e( 'File Upload Location', 'chargeforms' ); ?></div>
					<?php $this->coming_soon_notice( __( 'File Upload Field & Location', 'chargeforms' ) ); ?>
				</div>
			</div>

			<?php $this->toggle_row( 'admin_top_nav_enabled', __( 'Admin Top Navigation', 'chargeforms' ), $s['admin_top_nav_enabled'] ); ?>

			<div class="chargeforms-form-row" style="align-items:flex-start;">
				<div style="flex:1;">
					<label for="chargeforms_email_footer_text" class="chargeforms-form-row-title" style="display:block;margin-bottom:8px;"><?php esc_html_e( 'Email Footer Text', 'chargeforms' ); ?></label>
					<textarea id="chargeforms_email_footer_text" name="email_footer_text" class="chargeforms-form-input" style="max-width:none;height:62px;resize:vertical;" rows="3"><?php echo esc_textarea( $s['email_footer_text'] ); ?></textarea>
				</div>
			</div>

			<div class="chargeforms-form-row" style="align-items:flex-start;">
				<div style="flex:1;">
					<div class="chargeforms-form-row-title" style="margin-bottom:9px;"><?php esc_html_e( 'Date & Time Format', 'chargeforms' ); ?></div>
					<label style="display:flex;align-items:center;gap:7px;font-size:var(--fc-text-base);cursor:pointer;margin-bottom:6px;"><input type="radio" name="date_time_format" value="relative" <?php checked( $s['date_time_format'], 'relative' ); ?>> <?php esc_html_e( 'Date Time difference (EG: 2 hours ago)', 'chargeforms' ); ?></label>
					<label style="display:flex;align-items:center;gap:7px;font-size:var(--fc-text-base);cursor:pointer;"><input type="radio" name="date_time_format" value="wp_default" <?php checked( $s['date_time_format'], 'wp_default' ); ?>> <?php esc_html_e( 'WordPress Default', 'chargeforms' ); ?></label>
				</div>
			</div>

			<div class="chargeforms-form-row">
				<div style="flex:1;">
					<div class="chargeforms-form-row-title"><?php esc_html_e( 'Form Editor Autosave', 'chargeforms' ); ?></div>
					<?php $this->coming_soon_notice( __( 'Form Editor Autosave', 'chargeforms' ) ); ?>
				</div>
			</div>
		</div>
		<?php
	}

	private function toggle_row( $name, $label, $checked, $hint = '' ) {
		?>
		<div class="chargeforms-form-row">
			<div style="flex:1;">
				<div class="chargeforms-form-row-title"><?php echo esc_html( $label ); ?></div>
				<?php if ( $hint ) : ?><div class="chargeforms-form-row-desc"><?php echo esc_html( $hint ); ?></div><?php endif; ?>
			</div>
			<label class="chargeforms-switch">
				<input type="checkbox" name="<?php echo esc_attr( $name ); ?>" value="1" <?php checked( $checked ); ?>>
				<span class="chargeforms-switch-track"><span class="chargeforms-switch-thumb"></span></span>
			</label>
		</div>
		<?php
	}

	private function coming_soon_notice( $feature ) {
		?>
		<div class="chargeforms-pro-notice">
			<?php Icon::render( 'info-outline' ); ?>
			<div>
				<strong><?php echo esc_html( $feature ); ?></strong> <?php esc_html_e( 'isn\'t built yet.', 'chargeforms' ); ?>
			</div>
		</div>
		<?php
	}

	private function render_payment_settings( array $s ) {
		?>
		<input type="hidden" name="chargeforms_settings_fields" value="payment_module_enabled,payment_business_name,payment_business_address">

		<div class="chargeforms-underline-tabs chargeforms-settings-subtabs">
			<a class="is-active" href="<?php echo esc_url( admin_url( 'admin.php?page=chargeforms-settings&section=payment-settings' ) ); ?>"><?php esc_html_e( 'General', 'chargeforms' ); ?></a>
			<span class="chargeforms-tabs-disabled"><?php esc_html_e( 'Currency', 'chargeforms' ); ?></span>
			<span class="chargeforms-tabs-disabled"><?php esc_html_e( 'Pages & Subscription Management', 'chargeforms' ); ?></span>
		</div>

		<div class="chargeforms-card">
			<h2><?php esc_html_e( 'Status', 'chargeforms' ); ?></h2>
			<div class="chargeforms-form-row">
				<div style="flex:1;">
					<div class="chargeforms-form-row-title"><?php esc_html_e( 'Enable Payment Module', 'chargeforms' ); ?></div>
				</div>
				<label class="chargeforms-switch">
					<input type="checkbox" name="payment_module_enabled" value="1" <?php checked( $s['payment_module_enabled'] ); ?>>
					<span class="chargeforms-switch-track"><span class="chargeforms-switch-thumb"></span></span>
				</label>
			</div>
			<div style="display:grid;grid-template-columns:1fr 1fr;gap:16px;margin-top:16px;">
				<div>
					<label for="chargeforms_payment_business_name" class="chargeforms-form-label"><?php esc_html_e( 'Business Name', 'chargeforms' ); ?></label>
					<input type="text" id="chargeforms_payment_business_name" name="payment_business_name" class="chargeforms-form-input" style="max-width:none;" placeholder="<?php esc_attr_e( 'Business Name', 'chargeforms' ); ?>" value="<?php echo esc_attr( $s['payment_business_name'] ); ?>">
				</div>
				<div>
					<label for="chargeforms_payment_business_address" class="chargeforms-form-label"><?php esc_html_e( 'Business Address', 'chargeforms' ); ?></label>
					<input type="text" id="chargeforms_payment_business_address" name="payment_business_address" class="chargeforms-form-input" style="max-width:none;" placeholder="<?php esc_attr_e( 'Full Business Address', 'chargeforms' ); ?>" value="<?php echo esc_attr( $s['payment_business_address'] ); ?>">
				</div>
			</div>
			<p class="chargeforms-form-row-desc" style="margin:14px 0 0;"><?php esc_html_e( 'Currency is configured under Payment Methods > Stripe for now; a dedicated Currency tab is planned.', 'chargeforms' ); ?></p>
		</div>
		<?php
	}

	/**
	 * Both gateways' fields are always in `chargeforms_settings_fields`
	 * (not just the active subtab's) — otherwise saving from the Stripe
	 * subtab would wipe PayPal's keys, since Settings::update() only
	 * touches fields listed there (see that method's own doc comment for
	 * why: an absent checkbox is indistinguishable from "not part of this
	 * form" otherwise, and the same reasoning extends to "not part of the
	 * subtab currently showing").
	 */
	/**
	 * Rebuilt to match the mockup's own layout: both gateways stacked as
	 * their own cards with a live Connected/Not configured indicator (not
	 * tab-switched, and not unstyled default .form-table markup — a real
	 * gap, same as Email Summaries before its own rebuild).
	 */
	private function render_payment_methods( array $s ) {
		$stripe_webhook_url = rest_url( 'chargeforms/v1/webhooks/stripe' );
		?>
		<input type="hidden" name="chargeforms_settings_fields" value="stripe_publishable_key,stripe_secret_key,stripe_currency,stripe_webhook_secret,paypal_client_id,paypal_client_secret,paypal_mode,paypal_currency">

		<div class="chargeforms-card">
			<h2><?php esc_html_e( 'Payment Methods', 'chargeforms' ); ?></h2>
			<p class="chargeforms-form-row-desc" style="margin:0 0 18px;"><?php esc_html_e( 'Both gateways are real and free — no Pro upgrade needed.', 'chargeforms' ); ?></p>

			<div style="border:1px solid var(--fc-border);border-radius:var(--fc-radius-lg);overflow:hidden;margin-bottom:14px;">
				<div style="display:flex;align-items:center;gap:11px;padding:14px 16px;background:#fafbfd;border-bottom:1px solid var(--fc-border);">
					<span style="font-size:10px;font-weight:700;color:#fff;background:#635bff;padding:3px 9px;border-radius:999px;"><?php esc_html_e( 'STRIPE', 'chargeforms' ); ?></span>
					<span style="font-size:13.5px;font-weight:700;"><?php esc_html_e( 'Stripe', 'chargeforms' ); ?></span>
					<?php if ( $s['stripe_secret_key'] ) : ?>
						<span style="display:flex;align-items:center;gap:5px;margin-left:auto;font-size:11.5px;font-weight:600;color:var(--fc-success-dark);">
							<span style="width:7px;height:7px;border-radius:50%;background:var(--fc-success);"></span><?php esc_html_e( 'Connected', 'chargeforms' ); ?>
						</span>
					<?php else : ?>
						<span style="margin-left:auto;font-size:11.5px;color:var(--fc-muted-light);"><?php esc_html_e( 'Not configured', 'chargeforms' ); ?></span>
					<?php endif; ?>
				</div>
				<div style="padding:16px;display:grid;grid-template-columns:1fr 1fr;gap:14px;">
					<p style="grid-column:1/-1;margin:0;font-size:var(--fc-text-sm);color:var(--fc-muted);">
						<?php
						printf(
							/* translators: %s: link to the Stripe dashboard API keys page */
							wp_kses_post( __( 'Get your keys from the <a href="%s" target="_blank" rel="noopener">Stripe Dashboard</a>. Use your test keys (starting pk_test_/sk_test_) until you\'re ready to accept real payments.', 'chargeforms' ) ),
							'https://dashboard.stripe.com/apikeys'
						);
						?>
					</p>
					<div>
						<label for="chargeforms_stripe_publishable_key" class="chargeforms-form-label"><?php esc_html_e( 'Publishable Key', 'chargeforms' ); ?></label>
						<input type="text" id="chargeforms_stripe_publishable_key" name="stripe_publishable_key" class="chargeforms-form-input" style="max-width:none;font-family:ui-monospace,monospace;font-size:12.5px;" value="<?php echo esc_attr( $s['stripe_publishable_key'] ); ?>">
					</div>
					<div>
						<label for="chargeforms_stripe_secret_key" class="chargeforms-form-label"><?php esc_html_e( 'Secret Key', 'chargeforms' ); ?></label>
						<input type="password" id="chargeforms_stripe_secret_key" name="stripe_secret_key" class="chargeforms-form-input" style="max-width:none;font-family:ui-monospace,monospace;font-size:12.5px;" value="<?php echo esc_attr( $s['stripe_secret_key'] ); ?>" autocomplete="new-password">
					</div>
					<div>
						<label for="chargeforms_stripe_currency" class="chargeforms-form-label"><?php esc_html_e( 'Currency', 'chargeforms' ); ?></label>
						<select id="chargeforms_stripe_currency" name="stripe_currency" class="chargeforms-form-select" style="max-width:none;">
							<?php foreach ( [ 'usd', 'eur', 'gbp', 'cad', 'aud', 'inr' ] as $currency ) : ?>
								<option value="<?php echo esc_attr( $currency ); ?>" <?php selected( $s['stripe_currency'], $currency ); ?>><?php echo esc_html( strtoupper( $currency ) ); ?></option>
							<?php endforeach; ?>
						</select>
					</div>
					<div>
						<label for="chargeforms_stripe_webhook_secret" class="chargeforms-form-label"><?php esc_html_e( 'Webhook Signing Secret', 'chargeforms' ); ?></label>
						<input type="password" id="chargeforms_stripe_webhook_secret" name="stripe_webhook_secret" class="chargeforms-form-input" style="max-width:none;font-family:ui-monospace,monospace;font-size:12.5px;" value="<?php echo esc_attr( $s['stripe_webhook_secret'] ); ?>" autocomplete="new-password">
					</div>
					<div style="grid-column:1/-1;">
						<label class="chargeforms-form-label"><?php esc_html_e( 'Webhook endpoint', 'chargeforms' ); ?></label>
						<div style="display:flex;gap:8px;">
							<input type="text" readonly value="<?php echo esc_attr( $stripe_webhook_url ); ?>" style="flex:1;padding:9px 11px;border:1px solid var(--fc-border);border-radius:var(--fc-radius-md);font-size:12px;font-family:ui-monospace,monospace;background:#fafbfd;outline:none;">
							<button type="button" class="chargeforms-copy-webhook-btn" data-copy-text="<?php echo esc_attr( $stripe_webhook_url ); ?>" style="border:1px solid var(--fc-border);background:#fff;border-radius:var(--fc-radius-md);padding:9px 13px;font-size:12.5px;font-weight:600;color:var(--fc-muted);cursor:pointer;"><?php esc_html_e( 'Copy', 'chargeforms' ); ?></button>
						</div>
						<p class="chargeforms-form-row-desc" style="margin:6px 0 0;">
							<?php esc_html_e( 'Required for recurring (subscription) payments — renewals, failed-payment, and cancellation events all arrive here. Listen for invoice.payment_succeeded, invoice.payment_failed, customer.subscription.updated, and customer.subscription.deleted, then paste its signing secret above.', 'chargeforms' ); ?>
						</p>
					</div>
				</div>
			</div>

			<div style="border:1px solid var(--fc-border);border-radius:var(--fc-radius-lg);overflow:hidden;">
				<div style="display:flex;align-items:center;gap:11px;padding:14px 16px;background:#fafbfd;border-bottom:1px solid var(--fc-border);">
					<span style="font-size:10px;font-weight:700;color:#fff;background:#003087;padding:3px 9px;border-radius:999px;"><?php esc_html_e( 'PAYPAL', 'chargeforms' ); ?></span>
					<span style="font-size:13.5px;font-weight:700;"><?php esc_html_e( 'PayPal', 'chargeforms' ); ?></span>
					<?php if ( $s['paypal_client_id'] ) : ?>
						<span style="display:flex;align-items:center;gap:5px;margin-left:auto;font-size:11.5px;font-weight:600;color:var(--fc-success-dark);">
							<span style="width:7px;height:7px;border-radius:50%;background:var(--fc-success);"></span><?php esc_html_e( 'Connected', 'chargeforms' ); ?>
						</span>
					<?php else : ?>
						<span style="margin-left:auto;font-size:11.5px;color:var(--fc-muted-light);"><?php esc_html_e( 'Not configured', 'chargeforms' ); ?></span>
					<?php endif; ?>
				</div>
				<div style="padding:16px;display:grid;grid-template-columns:1fr 1fr;gap:14px;">
					<p style="grid-column:1/-1;margin:0;font-size:var(--fc-text-sm);color:var(--fc-muted);">
						<?php
						printf(
							/* translators: %s: link to the PayPal developer apps page */
							wp_kses_post( __( 'Get your Client ID and Secret from the <a href="%s" target="_blank" rel="noopener">PayPal Developer Dashboard</a>. Use a Sandbox app until you\'re ready to accept real payments.', 'chargeforms' ) ),
							'https://developer.paypal.com/dashboard/applications'
						);
						?>
					</p>
					<div>
						<label for="chargeforms_paypal_client_id" class="chargeforms-form-label"><?php esc_html_e( 'Client ID', 'chargeforms' ); ?></label>
						<input type="text" id="chargeforms_paypal_client_id" name="paypal_client_id" class="chargeforms-form-input" style="max-width:none;font-family:ui-monospace,monospace;font-size:12.5px;" value="<?php echo esc_attr( $s['paypal_client_id'] ); ?>">
					</div>
					<div>
						<label for="chargeforms_paypal_client_secret" class="chargeforms-form-label"><?php esc_html_e( 'Client secret', 'chargeforms' ); ?></label>
						<input type="password" id="chargeforms_paypal_client_secret" name="paypal_client_secret" class="chargeforms-form-input" style="max-width:none;font-family:ui-monospace,monospace;font-size:12.5px;" value="<?php echo esc_attr( $s['paypal_client_secret'] ); ?>" autocomplete="new-password">
					</div>
					<div>
						<label class="chargeforms-form-label"><?php esc_html_e( 'Environment', 'chargeforms' ); ?></label>
						<div style="display:flex;gap:16px;padding-top:9px;">
							<label style="display:flex;align-items:center;gap:7px;font-size:var(--fc-text-base);cursor:pointer;"><input type="radio" name="paypal_mode" value="sandbox" <?php checked( $s['paypal_mode'], 'sandbox' ); ?>> <?php esc_html_e( 'Sandbox', 'chargeforms' ); ?></label>
							<label style="display:flex;align-items:center;gap:7px;font-size:var(--fc-text-base);cursor:pointer;"><input type="radio" name="paypal_mode" value="live" <?php checked( $s['paypal_mode'], 'live' ); ?>> <?php esc_html_e( 'Live', 'chargeforms' ); ?></label>
						</div>
					</div>
					<div>
						<label for="chargeforms_paypal_currency" class="chargeforms-form-label"><?php esc_html_e( 'Currency', 'chargeforms' ); ?></label>
						<select id="chargeforms_paypal_currency" name="paypal_currency" class="chargeforms-form-select" style="max-width:none;">
							<?php foreach ( [ 'usd', 'eur', 'gbp', 'cad', 'aud', 'inr' ] as $currency ) : ?>
								<option value="<?php echo esc_attr( $currency ); ?>" <?php selected( $s['paypal_currency'], $currency ); ?>><?php echo esc_html( strtoupper( $currency ) ); ?></option>
							<?php endforeach; ?>
						</select>
					</div>
				</div>
			</div>

			<div style="display:flex;align-items:center;gap:10px;margin-top:16px;padding:12px 14px;border-radius:var(--fc-radius-md);background:var(--fc-warning-soft-alt);border:1px solid var(--fc-warning-border);">
				<?php \ChargeForms\Includes\Icon::render( 'warning', 16 ); ?>
				<div style="font-size:12px;color:var(--fc-warning-dark);line-height:1.5;"><?php esc_html_e( 'Paddle is not built. Every submitted amount is re-calculated server-side and the transaction status re-confirmed before an entry is marked paid.', 'chargeforms' ); ?></div>
			</div>
			<p class="chargeforms-form-row-desc" style="margin:14px 0 0;">
				<?php esc_html_e( 'Add Payment Item, Custom Amount, and Payment Method fields to a form from the builder\'s Payment Fields group to actually collect a payment. Every charge amount is recalculated from the form\'s own field configuration on the server before the gateway is ever contacted, so a visitor tampering with the page can never change what they\'re charged.', 'chargeforms' ); ?>
			</p>
		</div>
		<?php
		$copied_text = wp_json_encode( __( 'Copied!', 'chargeforms' ) );
		wp_add_inline_script( 'chargeforms-admin', '		document.querySelectorAll( \'.chargeforms-copy-webhook-btn\' ).forEach( function ( btn ) {
			btn.addEventListener( \'click\', function () {
				navigator.clipboard.writeText( btn.getAttribute( \'data-copy-text\' ) ).then( function () {
					var original = btn.textContent;
					btn.textContent = ' . $copied_text . ';
					setTimeout( function () { btn.textContent = original; }, 1400 );
				} );
			} );
		} );'
		);
		?>
		<?php
	}

	/**
	 * Matches design_handoff_chargeforms/README.md's Email Summaries spec:
	 * "Enable is a toggle; the rest of the panel is hidden while off." Was
	 * previously a plain checkbox (like every other Status row here) with
	 * every row always visible regardless of Enable — a real gap against
	 * the design's own explicit interaction spec, not just a styling one.
	 * Reuses the same `chargeforms-switch` markup toggle_row() already
	 * renders elsewhere on this page, so this stays visually identical to
	 * every other toggle in Global Settings rather than a one-off.
	 */
	private function render_email_summaries( array $s ) {
		?>
		<input type="hidden" name="chargeforms_settings_fields" value="email_summaries_enabled,email_summaries_send_to,email_summaries_custom_email,email_summaries_day,email_summaries_subject">

		<?php
		/*
		 * Same intro-card shape Email Delivery uses (render_email_delivery()
		 * above) — icon, heading, a "Built-in, free" badge, one sentence of
		 * context — rather than this tab starting straight into a settings
		 * card with no equivalent framing. Both are genuinely free, always-
		 * on plugin capabilities; the two screens should read as siblings,
		 * not as one polished flagship feature next to a plainer one.
		 */
		?>
		<div class="chargeforms-card chargeforms-ed-intro">
			<div class="chargeforms-ed-intro-icon"><?php \ChargeForms\Includes\Icon::render( 'bar-chart-3', 22 ); ?></div>
			<div class="chargeforms-ed-intro-body">
				<h2>
					<?php esc_html_e( 'Email Summaries', 'chargeforms' ); ?>
					<span class="chargeforms-badge-new"><?php esc_html_e( 'Built-in, free', 'chargeforms' ); ?></span>
				</h2>
				<p><?php esc_html_e( 'A weekly report of how your forms performed, sent automatically by WP-Cron — real submission counts, not a Pro teaser. Every summary goes out through whatever you\'ve configured under Email Delivery.', 'chargeforms' ); ?></p>
			</div>
		</div>

		<div class="chargeforms-card">
			<div class="chargeforms-settings-card-head">
				<h2><?php esc_html_e( 'Email Summaries', 'chargeforms' ); ?></h2>
				<p class="chargeforms-card-intro"><?php esc_html_e( 'Would you like to receive a weekly report showing how your forms are performing? Enable Email Summaries option and you will get a report every week to the provided email address.', 'chargeforms' ); ?></p>
			</div>

			<div class="chargeforms-settings-card-body">
				<div class="chargeforms-form-row">
					<div class="chargeforms-form-row-text">
						<div class="chargeforms-form-row-title"><?php esc_html_e( 'Enable Email Summaries', 'chargeforms' ); ?></div>
						<div class="chargeforms-form-row-desc"><?php esc_html_e( 'Runs on WP-Cron · one send per week', 'chargeforms' ); ?></div>
					</div>
					<label class="chargeforms-switch">
						<input type="checkbox" id="chargeforms-summaries-enabled" name="email_summaries_enabled" value="1" <?php checked( $s['email_summaries_enabled'] ); ?>>
						<span class="chargeforms-switch-track"><span class="chargeforms-switch-thumb"></span></span>
					</label>
				</div>

				<div id="chargeforms-summaries-panel" class="chargeforms-summaries-panel<?php echo $s['email_summaries_enabled'] ? '' : ' is-hidden'; ?>">
					<label class="chargeforms-form-label"><?php esc_html_e( 'Send To', 'chargeforms' ); ?></label>
					<div class="chargeforms-radio-group">
						<label class="chargeforms-radio">
							<input type="radio" name="email_summaries_send_to" value="admin" <?php checked( $s['email_summaries_send_to'], 'admin' ); ?>> <?php esc_html_e( 'Site Admin', 'chargeforms' ); ?>
						</label>
						<label class="chargeforms-radio">
							<input type="radio" name="email_summaries_send_to" value="custom" <?php checked( $s['email_summaries_send_to'], 'custom' ); ?>> <?php esc_html_e( 'Custom Email', 'chargeforms' ); ?>
						</label>
					</div>
					<input type="email" name="email_summaries_custom_email" class="chargeforms-form-input" value="<?php echo esc_attr( $s['email_summaries_custom_email'] ); ?>" placeholder="you@example.com">

					<div class="chargeforms-field-grid">
						<div>
							<label for="chargeforms_summaries_day" class="chargeforms-form-label"><?php esc_html_e( 'Send Day', 'chargeforms' ); ?></label>
							<select id="chargeforms_summaries_day" name="email_summaries_day" class="chargeforms-form-select">
								<?php foreach ( [ 'monday', 'tuesday', 'wednesday', 'thursday', 'friday', 'saturday', 'sunday' ] as $day ) : ?>
									<option value="<?php echo esc_attr( $day ); ?>" <?php selected( $s['email_summaries_day'], $day ); ?>><?php echo esc_html( ucfirst( $day ) ); ?></option>
								<?php endforeach; ?>
							</select>
						</div>
						<div>
							<label for="chargeforms_summaries_subject" class="chargeforms-form-label"><?php esc_html_e( 'Email Subject', 'chargeforms' ); ?></label>
							<input type="text" id="chargeforms_summaries_subject" name="email_summaries_subject" class="chargeforms-form-input" placeholder="<?php esc_attr_e( 'Your weekly ChargeForms report', 'chargeforms' ); ?>" value="<?php echo esc_attr( $s['email_summaries_subject'] ); ?>">
						</div>
					</div>
				</div>
			</div>
		</div>
		<?php
		wp_add_inline_script( 'chargeforms-admin', '		( function () {
			var toggle = document.getElementById( \'chargeforms-summaries-enabled\' );
			var panel  = document.getElementById( \'chargeforms-summaries-panel\' );
			if ( ! toggle || ! panel ) {
				return;
			}
			toggle.addEventListener( \'change\', function () {
				panel.classList.toggle( \'is-hidden\', ! toggle.checked );
			} );
		}() );'
		);
		?>

		<div class="chargeforms-card">
			<?php if ( isset( $_GET['chargeforms_test_summary'] ) ) : // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only banner flag, no state change happens here ?>
				<div class="chargeforms-summary-sent-banner">
					<?php esc_html_e( 'Test summary sent to the configured recipient.', 'chargeforms' ); ?>
				</div>
			<?php endif; ?>
			<div class="chargeforms-card-head">
				<h2><?php esc_html_e( 'What gets sent', 'chargeforms' ); ?></h2>
				<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>">
					<input type="hidden" name="action" value="chargeforms_send_test_summary">
					<?php wp_nonce_field( 'chargeforms_send_test_summary' ); ?>
					<button type="submit" class="chargeforms-summary-test-btn">
						<?php \ChargeForms\Includes\Icon::render( 'send', 14 ); ?>
						<?php esc_html_e( 'Send me a test', 'chargeforms' ); ?>
					</button>
				</form>
			</div>
			<p class="chargeforms-form-row-desc chargeforms-summary-lede"><?php esc_html_e( 'A branded HTML report, with the same numbers attached as CSV.', 'chargeforms' ); ?></p>

			<div class="chargeforms-summary-mockup">
				<div class="chargeforms-summary-mockup-bar">
					<span class="chargeforms-summary-mockup-label"><?php esc_html_e( 'Subject', 'chargeforms' ); ?></span>
					<span class="chargeforms-summary-mockup-subject"><?php echo esc_html( $s['email_summaries_subject'] ?: __( 'Your weekly ChargeForms report', 'chargeforms' ) ); ?></span>
					<span class="chargeforms-summary-mockup-attach">
						<?php \ChargeForms\Includes\Icon::render( 'paperclip', 11 ); ?><?php esc_html_e( 'report.csv', 'chargeforms' ); ?>
					</span>
				</div>
				<div class="chargeforms-summary-preview-wrap">
					<div class="chargeforms-summary-preview">
						<div class="chargeforms-summary-preview-head">
							<div class="chargeforms-summary-preview-brand"><?php esc_html_e( 'ChargeForms', 'chargeforms' ); ?></div>
							<div class="chargeforms-summary-preview-tag"><?php esc_html_e( 'Weekly report preview', 'chargeforms' ); ?></div>
						</div>
						<div class="chargeforms-summary-preview-total">
							<div class="chargeforms-summary-preview-total-num">248</div>
							<div class="chargeforms-summary-preview-total-label"><?php esc_html_e( 'submissions this week', 'chargeforms' ); ?></div>
						</div>
						<div class="chargeforms-summary-preview-rows">
							<div class="chargeforms-summary-preview-row is-head">
								<span><?php esc_html_e( 'Form', 'chargeforms' ); ?></span><span><?php esc_html_e( 'Week', 'chargeforms' ); ?></span><span><?php esc_html_e( 'All time', 'chargeforms' ); ?></span>
							</div>
							<?php
							$preview_rows = [
								[ 'Course Enrollment Form', 42, 1204 ],
								[ 'Contact Us', 68, 6318 ],
								[ 'Donation Form', 15, 892 ],
							];
							foreach ( $preview_rows as $row ) :
								?>
								<div class="chargeforms-summary-preview-row">
									<span class="chargeforms-summary-preview-form"><?php echo esc_html( $row[0] ); ?></span>
									<span class="chargeforms-summary-preview-week"><?php echo esc_html( number_format_i18n( $row[1] ) ); ?></span>
									<span class="chargeforms-summary-preview-all"><?php echo esc_html( number_format_i18n( $row[2] ) ); ?></span>
								</div>
							<?php endforeach; ?>
							<div class="chargeforms-summary-preview-cta-row">
								<span class="chargeforms-summary-preview-cta"><?php esc_html_e( 'View All Entries', 'chargeforms' ); ?></span>
							</div>
						</div>
						<div class="chargeforms-summary-preview-footer">
							<?php esc_html_e( 'Sent by ChargeForms. Manage this report under ChargeForms → Global Settings → Email Summaries.', 'chargeforms' ); ?>
						</div>
					</div>
				</div>
			</div>
		</div>
		<?php
	}

	/**
	 * Real the reference product gates this behind Pro. ChargeForms doesn't — it's a
	 * genuinely free, working feature here, same layout/heading, no paywall.
	 */
	private function render_integration_failure( array $s ) {
		?>
		<input type="hidden" name="chargeforms_settings_fields" value="integration_failure_email_enabled">

		<div class="chargeforms-card">
			<h2><?php esc_html_e( 'Integration Failure Notification', 'chargeforms' ); ?></h2>
			<p class="chargeforms-form-row-desc" style="margin:0 0 4px;"><?php esc_html_e( 'Enable Integration Failure Notification and you will get an email when any of your integrations fails to run.', 'chargeforms' ); ?></p>
			<?php $this->toggle_row( 'integration_failure_email_enabled', __( 'Email me when an integration fails', 'chargeforms' ), $s['integration_failure_email_enabled'] ); ?>
		</div>
		<?php
	}

	private function render_recaptcha( array $s ) {
		$this->render_captcha_provider(
			__( 'Google reCAPTCHA Settings', 'chargeforms' ),
			__( 'ChargeForms integrates with reCAPTCHA, a free service that protects your website from spam and abuse. Please note, these settings are required only if you decide to use the reCAPTCHA field.', 'chargeforms' ),
			'recaptcha_site_key',
			'recaptcha_secret_key',
			$s
		);
	}

	private function render_address_autocomplete( array $s ) {
		?>
		<input type="hidden" name="chargeforms_settings_fields" value="address_autocomplete_provider,google_maps_api_key">

		<div class="chargeforms-card">
			<h2><?php esc_html_e( 'Address Autocomplete', 'chargeforms' ); ?></h2>
			<p class="chargeforms-form-row-desc" style="margin:0 0 18px;"><?php esc_html_e( 'Suggests addresses as the visitor types in an Address field. A form can leave this on the site default or override it per-field in the Builder.', 'chargeforms' ); ?></p>

			<div style="display:grid;grid-template-columns:1fr 1fr;gap:16px;">
				<div>
					<label for="chargeforms_address_autocomplete_provider" class="chargeforms-form-label"><?php esc_html_e( 'Provider', 'chargeforms' ); ?></label>
					<select id="chargeforms_address_autocomplete_provider" name="address_autocomplete_provider" class="chargeforms-form-select" style="max-width:none;">
						<option value="none" <?php selected( $s['address_autocomplete_provider'], 'none' ); ?>><?php esc_html_e( 'None (plain inputs)', 'chargeforms' ); ?></option>
						<option value="osm" <?php selected( $s['address_autocomplete_provider'], 'osm' ); ?>><?php esc_html_e( 'OpenStreetMap (free, no key needed)', 'chargeforms' ); ?></option>
						<option value="google" <?php selected( $s['address_autocomplete_provider'], 'google' ); ?>><?php esc_html_e( 'Google Maps (needs an API key below)', 'chargeforms' ); ?></option>
					</select>
				</div>
				<div>
					<label for="chargeforms_google_maps_api_key" class="chargeforms-form-label"><?php esc_html_e( 'API key', 'chargeforms' ); ?></label>
					<input type="password" autocomplete="new-password" id="chargeforms_google_maps_api_key" name="google_maps_api_key" class="chargeforms-form-input" style="max-width:none;font-family:ui-monospace,monospace;font-size:12.5px;" placeholder="<?php esc_attr_e( 'Paste your Places API key', 'chargeforms' ); ?>" value="<?php echo esc_attr( $s['google_maps_api_key'] ); ?>">
				</div>
			</div>
			<p class="chargeforms-form-row-desc" style="margin:14px 0 0;">
				<?php esc_html_e( 'OpenStreetMap uses the free public Nominatim search service — no account needed, but it is rate-limited (fine for normal form traffic, not built for very high volume). Google Maps needs your own API key with the Places and Geocoding APIs enabled — only used, and only ever printed on the page, when the provider above is set to Google Maps and a form actually has an Address field with autocomplete enabled.', 'chargeforms' ); ?>
			</p>
		</div>
		<?php
	}

	private function render_hcaptcha( array $s ) {
		$this->render_captcha_provider(
			__( 'hCaptcha Settings', 'chargeforms' ),
			__( 'ChargeForms integrates with hCaptcha, a free service that protects your website from spam and abuse. Please note, these settings are required only if you decide to use the hCaptcha field.', 'chargeforms' ),
			'hcaptcha_site_key',
			'hcaptcha_secret_key',
			$s
		);
	}

	private function render_turnstile( array $s ) {
		$this->render_captcha_provider(
			__( 'Cloudflare Turnstile Settings', 'chargeforms' ),
			__( 'ChargeForms integrates with Cloudflare Turnstile, a free service that protects your website from spam and abuse. Please note, these settings are required only if you decide to use the Turnstile field.', 'chargeforms' ),
			'turnstile_site_key',
			'turnstile_secret_key',
			$s
		);
	}

	private function render_captcha_provider( $title, $intro, $site_key_field, $secret_key_field, array $s ) {
		?>
		<input type="hidden" name="chargeforms_settings_fields" value="<?php echo esc_attr( $site_key_field . ',' . $secret_key_field ); ?>">

		<div class="chargeforms-card">
			<h2><?php echo esc_html( $title ); ?></h2>
			<p class="chargeforms-form-row-desc" style="margin:0 0 18px;"><?php echo esc_html( $intro ); ?></p>

			<div style="display:grid;grid-template-columns:1fr 1fr;gap:16px;">
				<div>
					<label for="chargeforms_<?php echo esc_attr( $site_key_field ); ?>" class="chargeforms-form-label"><?php esc_html_e( 'Site Key', 'chargeforms' ); ?></label>
					<input type="text" id="chargeforms_<?php echo esc_attr( $site_key_field ); ?>" name="<?php echo esc_attr( $site_key_field ); ?>" class="chargeforms-form-input" style="max-width:none;" value="<?php echo esc_attr( $s[ $site_key_field ] ); ?>">
				</div>
				<div>
					<label for="chargeforms_<?php echo esc_attr( $secret_key_field ); ?>" class="chargeforms-form-label"><?php esc_html_e( 'Secret Key', 'chargeforms' ); ?></label>
					<input type="password" id="chargeforms_<?php echo esc_attr( $secret_key_field ); ?>" name="<?php echo esc_attr( $secret_key_field ); ?>" class="chargeforms-form-input" style="max-width:none;" value="<?php echo esc_attr( $s[ $secret_key_field ] ); ?>" autocomplete="new-password">
				</div>
			</div>
			<p class="chargeforms-form-row-desc" style="margin:14px 0 0;"><?php esc_html_e( 'Add the matching field to a form from the builder\'s field palette to actually use it — these keys just configure it site-wide.', 'chargeforms' ); ?></p>
		</div>
		<?php
	}

	private function render_cleantalk( array $s ) {
		?>
		<input type="hidden" name="chargeforms_settings_fields" value="cleantalk_access_key,cleantalk_spam_validation">

		<div class="chargeforms-card">
			<h2><?php esc_html_e( 'CleanTalk Settings', 'chargeforms' ); ?></h2>
			<p class="chargeforms-form-row-desc" style="margin:0 0 18px;"><?php esc_html_e( 'ChargeForms offers integration with CleanTalk, an anti-spam service that checks submissions in real time. Configure it once here and it applies to every form — no per-form field needed.', 'chargeforms' ); ?></p>

			<div style="margin-bottom:16px;">
				<label for="chargeforms_cleantalk_access_key" class="chargeforms-form-label"><?php esc_html_e( 'Access Key', 'chargeforms' ); ?></label>
				<input type="text" id="chargeforms_cleantalk_access_key" name="cleantalk_access_key" class="chargeforms-form-input" value="<?php echo esc_attr( $s['cleantalk_access_key'] ); ?>">
			</div>
			<div>
				<label class="chargeforms-form-label"><?php esc_html_e( 'Spam Validation', 'chargeforms' ); ?></label>
				<label style="display:flex;align-items:center;gap:7px;font-size:var(--fc-text-base);cursor:pointer;margin-bottom:8px;"><input type="radio" name="cleantalk_spam_validation" value="mark_spam" <?php checked( $s['cleantalk_spam_validation'], 'mark_spam' ); ?>> <?php esc_html_e( 'Mark as Spam', 'chargeforms' ); ?></label>
				<label style="display:flex;align-items:center;gap:7px;font-size:var(--fc-text-base);cursor:pointer;margin-bottom:8px;"><input type="radio" name="cleantalk_spam_validation" value="fail" <?php checked( $s['cleantalk_spam_validation'], 'fail' ); ?>> <?php esc_html_e( 'Make the Form Submission as Failed', 'chargeforms' ); ?></label>
				<label style="display:flex;align-items:center;gap:7px;font-size:var(--fc-text-base);cursor:pointer;"><input type="radio" name="cleantalk_spam_validation" value="mark_spam_skip" <?php checked( $s['cleantalk_spam_validation'], 'mark_spam_skip' ); ?>> <?php esc_html_e( 'Mark as Spam and Skip Processing', 'chargeforms' ); ?></label>
			</div>
			<p class="chargeforms-form-row-desc" style="margin:14px 0 0;"><?php esc_html_e( 'Verified server-side against CleanTalk\'s real API on every submission once an access key is set — not just a UI toggle.', 'chargeforms' ); ?></p>
		</div>
		<?php
	}

	/** Real, working Role Based access grants (adds/removes the chargeforms_manage_forms capability on the selected roles) — the per-user "Advanced" manager table below it is not built yet, honestly labeled as such. */
	private function render_permissions( array $s ) {
		$admins        = get_users( [ 'role' => 'administrator', 'fields' => [ 'ID', 'display_name', 'user_email' ] ] );
		$roles         = [ 'editor' => __( 'Editor', 'chargeforms' ), 'author' => __( 'Author', 'chargeforms' ), 'contributor' => __( 'Contributor', 'chargeforms' ) ];
		$permitted     = (array) $s['permitted_roles'];
		?>
		<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" class="chargeforms-settings-form">
			<input type="hidden" name="action" value="chargeforms_save_settings">
			<input type="hidden" name="_redirect_to" value="chargeforms-settings&section=permissions">
			<input type="hidden" name="chargeforms_settings_fields" value="permitted_roles">
			<?php wp_nonce_field( 'chargeforms_save_settings' ); ?>

			<div class="chargeforms-card">
				<h2><?php esc_html_e( 'Permissions', 'chargeforms' ); ?></h2>
				<p class="chargeforms-form-row-desc" style="margin:0 0 4px;">
					<?php
					printf(
						/* translators: %s: the capability name, chargeforms_manage_forms */
						wp_kses_post( __( 'Grants the <code>%s</code> capability by role. Administrators always have full access.', 'chargeforms' ) ),
						'chargeforms_manage_forms'
					);
					?>
				</p>
				<p style="margin:8px 0 0;">
					<label style="display:flex;align-items:center;gap:7px;font-size:var(--fc-text-sm);cursor:pointer;"><input type="checkbox" id="chargeforms-role-check-all"> <?php esc_html_e( 'Check all', 'chargeforms' ); ?></label>
				</p>
				<?php foreach ( $roles as $slug => $label ) : ?>
					<div class="chargeforms-form-row">
						<div style="flex:1;">
							<div class="chargeforms-form-row-title"><?php echo esc_html( $label ); ?></div>
						</div>
						<label class="chargeforms-switch">
							<input type="checkbox" class="chargeforms-role-checkbox" name="permitted_roles[]" value="<?php echo esc_attr( $slug ); ?>" <?php checked( in_array( $slug, $permitted, true ) ); ?>>
							<span class="chargeforms-switch-track"><span class="chargeforms-switch-thumb"></span></span>
						</label>
					</div>
				<?php endforeach; ?>
				<p class="chargeforms-form-row-desc" style="margin:16px 0 0;padding:12px 14px;border-radius:var(--fc-radius-md);background:var(--fc-bg);"><?php esc_html_e( 'Per-form scoping (an Editor who can manage only one specific form) is not built — grants apply to a whole role.', 'chargeforms' ); ?></p>
				<?php
				wp_add_inline_script( 'chargeforms-admin', '					( function () {
						var all = document.getElementById( \'chargeforms-role-check-all\' );
						var boxes = document.querySelectorAll( \'.chargeforms-role-checkbox\' );
						if ( ! all ) { return; }
						all.addEventListener( \'change\', function () {
							boxes.forEach( function ( b ) { b.checked = all.checked; } );
						} );
					} )();'
				);
				?>
				<div style="margin-top:16px;">
					<?php submit_button( __( 'Save Settings', 'chargeforms' ) ); ?>
				</div>
			</div>
		</form>

		<div class="chargeforms-card">
			<h2><?php esc_html_e( 'Administrators', 'chargeforms' ); ?></h2>
			<p class="chargeforms-form-row-desc" style="margin:0 0 16px;"><?php esc_html_e( 'Administrators have full access to ChargeForms. Per-user, per-form scoped managers (e.g. an Editor who can only manage one specific form) aren\'t built yet.', 'chargeforms' ); ?></p>
			<table class="wp-list-table widefat fixed striped">
				<thead>
					<tr>
						<th><?php esc_html_e( 'ID', 'chargeforms' ); ?></th>
						<th><?php esc_html_e( 'Name', 'chargeforms' ); ?></th>
						<th><?php esc_html_e( 'Email', 'chargeforms' ); ?></th>
						<th><?php esc_html_e( 'Roles', 'chargeforms' ); ?></th>
					</tr>
				</thead>
				<tbody>
					<?php foreach ( $admins as $admin ) : ?>
						<tr>
							<td><?php echo (int) $admin->ID; ?></td>
							<td><?php echo esc_html( $admin->display_name ); ?></td>
							<td><?php echo esc_html( $admin->user_email ); ?></td>
							<td><?php esc_html_e( 'Administrator', 'chargeforms' ); ?></td>
						</tr>
					<?php endforeach; ?>
				</tbody>
			</table>
		</div>
		<?php
	}

	/**
	 * Real the reference product gates this behind Pro. ChargeForms doesn't — this is
	 * the same real, working double opt-in feature built earlier, just
	 * placed under this heading, no paywall.
	 */
	private function render_double_optin( array $s ) {
		?>
		<input type="hidden" name="chargeforms_settings_fields" value="double_optin_enabled">

		<div class="chargeforms-card">
			<h2><?php esc_html_e( 'Double Opt-in', 'chargeforms' ); ?></h2>
			<p class="chargeforms-form-row-desc" style="margin:0 0 4px;"><?php esc_html_e( 'When enabled by default, a submission is not saved as a real entry until the submitter clicks a confirmation link emailed to them. Individual forms can override this default.', 'chargeforms' ); ?></p>
			<div class="chargeforms-form-row">
				<div style="flex:1;">
					<div class="chargeforms-form-row-title"><?php esc_html_e( 'Require double opt-in confirmation by default for new forms', 'chargeforms' ); ?></div>
				</div>
				<label class="chargeforms-switch">
					<input type="checkbox" name="double_optin_enabled" value="1" <?php checked( $s['double_optin_enabled'] ); ?>>
					<span class="chargeforms-switch-track"><span class="chargeforms-switch-thumb"></span></span>
				</label>
			</div>
		</div>
		<?php
	}

	private function render_save_resume( array $s ) {
		?>
		<input type="hidden" name="chargeforms_settings_fields" value="save_resume_enabled,save_resume_expiry_days,save_resume_autosave_seconds">

		<div class="chargeforms-card">
			<h2><?php esc_html_e( 'Save & Resume', 'chargeforms' ); ?></h2>
			<p class="chargeforms-form-row-desc" style="margin:0 0 4px;"><?php esc_html_e( 'Lets a visitor save an in-progress form as a draft and continue later — manually, automatically in the background, or via a link emailed to them. Applies to every form; there is no per-form override.', 'chargeforms' ); ?></p>
			<div class="chargeforms-form-row">
				<div style="flex:1;">
					<div class="chargeforms-form-row-title"><?php esc_html_e( 'Allow visitors to save and resume forms', 'chargeforms' ); ?></div>
				</div>
				<label class="chargeforms-switch">
					<input type="checkbox" name="save_resume_enabled" value="1" <?php checked( $s['save_resume_enabled'] ); ?>>
					<span class="chargeforms-switch-track"><span class="chargeforms-switch-thumb"></span></span>
				</label>
			</div>
			<div style="display:grid;grid-template-columns:1fr 1fr;gap:16px;margin-top:16px;">
				<div>
					<label for="chargeforms_save_resume_expiry_days" class="chargeforms-form-label"><?php esc_html_e( 'Draft Expiry (days)', 'chargeforms' ); ?></label>
					<input type="number" id="chargeforms_save_resume_expiry_days" name="save_resume_expiry_days" min="1" max="365" class="chargeforms-form-input" style="max-width:120px;" value="<?php echo esc_attr( $s['save_resume_expiry_days'] ); ?>">
					<p class="chargeforms-form-row-desc" style="margin:6px 0 0;"><?php esc_html_e( 'How long an untouched draft stays resumable. Saving a draft extends this, up to 3x the configured value from when it was first created.', 'chargeforms' ); ?></p>
				</div>
				<div>
					<label for="chargeforms_save_resume_autosave_seconds" class="chargeforms-form-label"><?php esc_html_e( 'Autosave Interval (seconds)', 'chargeforms' ); ?></label>
					<input type="number" id="chargeforms_save_resume_autosave_seconds" name="save_resume_autosave_seconds" min="5" max="300" class="chargeforms-form-input" style="max-width:120px;" value="<?php echo esc_attr( $s['save_resume_autosave_seconds'] ); ?>">
					<p class="chargeforms-form-row-desc" style="margin:6px 0 0;"><?php esc_html_e( 'How often the browser checks whether to save a draft in the background. Nothing is actually written to the database unless something changed since the last save.', 'chargeforms' ); ?></p>
				</div>
			</div>
		</div>
		<?php
	}

	/**
	 * Mirrors the shape of the reference product's own "MCP for AI Agents" settings
	 * screen (toggle + a static list of available tools with Read/Write
	 * badges), adapted to what's actually true here: ChargeForms has a
	 * single `chargeforms_manage_forms` capability with no per-form
	 * ownership model, so access is "the connected WP user can manage
	 * ChargeForms at all," not per-form scoping — see
	 * includes/mcp/class-mcp-server.php's own doc comment for why this
	 * copy doesn't claim more granularity than the data model has.
	 */
	private function render_mcp( array $s ) {
		?>
		<input type="hidden" name="chargeforms_settings_fields" value="mcp_enabled">

		<div class="chargeforms-card">
			<h2><?php esc_html_e( 'MCP for AI Agents', 'chargeforms' ); ?></h2>
			<p class="chargeforms-form-row-desc" style="margin:0 0 4px;"><?php esc_html_e( 'Let AI assistants (Claude, Cursor, and other MCP clients) read your forms and entries and run a small set of operator tasks through the Model Context Protocol. Off by default; enable it, then connect with a WordPress Application Password. Every request runs as the WordPress user whose Application Password is used — an agent gets exactly that user\'s ChargeForms access, nothing more. Tools that change data require a preview-then-confirm step before they write anything.', 'chargeforms' ); ?></p>

			<div class="chargeforms-form-row">
				<div style="flex:1;">
					<div class="chargeforms-form-row-title">
						<?php
						$tool_count = count( \ChargeForms\Includes\Mcp\Mcp_Tools::all() );
						/* translators: %d: number of available MCP tools */
						printf( esc_html__( 'Enable MCP Server (%d tools available)', 'chargeforms' ), (int) $tool_count );
						?>
					</div>
					<div class="chargeforms-form-row-desc">
						<?php
						printf(
							/* translators: %s: the MCP endpoint URL */
							esc_html__( 'Endpoint: %s — point your MCP client at this URL using HTTP Basic Auth with a WordPress username and Application Password (Users > Profile > Application Passwords).', 'chargeforms' ),
							'<code>' . esc_html( rest_url( 'chargeforms/v1/mcp' ) ) . '</code>'
						);
						?>
					</div>
					<p class="chargeforms-form-row-desc">
						<a href="<?php echo esc_url( CHARGEFORMS_URL . 'docs/AI_MCP_GUIDE.md' ); ?>" download="chargeforms-ai-mcp-guide.md" target="_blank" rel="noopener noreferrer"><?php esc_html_e( 'Download the AI/MCP connection guide', 'chargeforms' ); ?> ↓</a>
					</p>
				</div>
				<label class="chargeforms-switch">
					<input type="checkbox" name="mcp_enabled" value="1" <?php checked( $s['mcp_enabled'] ); ?>>
					<span class="chargeforms-switch-track"><span class="chargeforms-switch-thumb"></span></span>
				</label>
			</div>

			<h3 style="font-size:13px;margin:18px 0 10px;"><?php esc_html_e( 'Available Tools', 'chargeforms' ); ?></h3>
			<div class="chargeforms-mcp-tools-grid">
				<?php foreach ( \ChargeForms\Includes\Mcp\Mcp_Tools::all() as $tool ) : ?>
					<span class="chargeforms-mcp-tool-chip" title="<?php echo esc_attr( $tool['description'] ); ?>">
						<?php echo esc_html( $tool['name'] ); ?>
						<em class="chargeforms-mcp-tool-badge chargeforms-mcp-tool-badge--<?php echo $tool['write'] ? 'write' : 'read'; ?>"><?php echo $tool['write'] ? esc_html__( 'Write', 'chargeforms' ) : esc_html__( 'Read', 'chargeforms' ); ?></em>
					</span>
				<?php endforeach; ?>
			</div>
		</div>
		<?php
	}

	/**
	 * "ChargeForms > Global Settings > Email > Email Delivery" — the SMTP
	 * screen (docs/SMTP_ARCHITECTURE.md). Server-rendered container only;
	 * all interaction (create/edit/delete/test a connection, the log
	 * table) is driven by assets/js/email-delivery.js against the REST
	 * routes in Email\Email_Manager — same "PHP page shell + vanilla JS
	 * talking to REST" shape as Global Settings > Integrations' own Test
	 * Connection buttons, just as a full CRUD screen instead of flat
	 * settings fields.
	 */
	private function render_email_delivery() {
		?>
		<div class="chargeforms-card chargeforms-ed-intro">
			<div class="chargeforms-ed-intro-icon"><?php Icon::render( 'email-alt2', 22 ); ?></div>
			<div class="chargeforms-ed-intro-body">
				<h2>
					<?php esc_html_e( 'Email Delivery', 'chargeforms' ); ?>
					<span class="chargeforms-badge-new"><?php esc_html_e( 'Built-in, free', 'chargeforms' ); ?></span>
				</h2>
				<p><?php esc_html_e( 'Connect Gmail, Microsoft 365, Amazon SES, SendGrid, Mailgun, Brevo, Postmark, or any custom SMTP server — real, encrypted, working delivery, not a Pro upsell. Every email ChargeForms sends (notifications, Save & Resume, weekly summaries) goes through this once it\'s configured.', 'chargeforms' ); ?></p>
			</div>
		</div>
		<div id="chargeforms-email-delivery-root" class="chargeforms-email-delivery" data-config="<?php echo esc_attr( wp_json_encode( $this->email_delivery_config() ) ); ?>">
			<p class="chargeforms-email-delivery-loading"><?php esc_html_e( 'Loading…', 'chargeforms' ); ?></p>
		</div>
		<noscript><p><?php esc_html_e( 'Email Delivery settings require JavaScript.', 'chargeforms' ); ?></p></noscript>
		<?php
	}

	private function render_configure_integrations() {
		?>
		<div class="chargeforms-card">
			<h2><?php esc_html_e( 'Configure Integrations', 'chargeforms' ); ?></h2>
			<p class="chargeforms-form-row-desc" style="margin:0;">
				<?php
				printf(
					wp_kses_post(
						/* translators: %s: link to the Integrations screen */
						__( 'Managed on its own screen — see <a href="%s">Integrations</a> in the main menu.', 'chargeforms' )
					),
					esc_url( admin_url( 'admin.php?page=chargeforms-integrations' ) )
				);
				?>
			</p>
		</div>
		<?php
	}

	public function handle_save() {
		if ( ! current_user_can( 'chargeforms_manage_forms' ) || ! check_admin_referer( 'chargeforms_save_settings' ) ) {
			wp_die( esc_html__( 'Not allowed.', 'chargeforms' ), 403 );
		}

		Settings::update( wp_unslash( $_POST ) ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput

		$redirect_page = isset( $_POST['_redirect_to'] ) ? sanitize_text_field( wp_unslash( $_POST['_redirect_to'] ) ) : 'chargeforms-settings';
		$redirect_page = preg_replace( '/[^a-z0-9_=&-]/i', '', $redirect_page );

		wp_safe_redirect( admin_url( 'admin.php?page=' . $redirect_page . '&chargeforms_notice=1' ) );
		exit;
	}
}