<?php
// Citami Connector — module. Loaded by citami-connector.php in a fixed
// order; never load this file on its own.
if (!defined('ABSPATH')) {
    exit;
}

/* ────────────────────────────────────────────────────────────────── */
/*  WP7 (Fase 2) — REDIRECT MANAGER + 404 LOG                          */
/*  The importer (WP3) brought the rule list and the request handler;  */
/*  this is the UI: add / toggle / delete rules, a 404 log with a      */
/*  one-click "create redirect", and the Settings → Citami → Redirect  */
/*  tab.                                                               */
/* ────────────────────────────────────────────────────────────────── */

define('CITAMI_404_LOG_OPT', 'citami_404_log');
define('CITAMI_404_LOG_MAX', 200);

function citami_redirects_all() {
    $rules = get_option(CITAMI_REDIRECTS_OPT, array());
    return is_array($rules) ? array_values(array_filter($rules, 'is_array')) : array();
}

/** Validates a rule; returns the clean rule or a WP_Error. */
function citami_redirect_sanitize_rule(array $in) {
    $source = trim((string) (isset($in['source']) ? $in['source'] : ''));
    $target = trim((string) (isset($in['target']) ? $in['target'] : ''));
    $match = isset($in['match']) ? sanitize_key((string) $in['match']) : 'exact';
    if (!in_array($match, array('exact', 'contains', 'start', 'end', 'regex'), true)) {
        $match = 'exact';
    }
    $code = isset($in['code']) ? (int) $in['code'] : 301;
    if (!in_array($code, array(301, 302, 307, 410, 451), true)) {
        $code = 301;
    }
    if ($source === '' || ($match !== 'regex' && $source[0] !== '/')) {
        return new WP_Error('citami_redirect_source', citami_t('Sorgente non valida: usa un percorso che inizia con /.', 'Invalid source: use a path starting with /.'));
    }
    if ($match === 'regex' && @preg_match('#' . str_replace('#', '\#', $source) . '#i', '') === false) {
        return new WP_Error('citami_redirect_regex', citami_t('Espressione regolare non valida.', 'Invalid regular expression.'));
    }
    // 2.59 — a rule that catches every address would send the whole site elsewhere.
    $catch_all = ($match === 'regex')
        ? (@preg_match('#' . str_replace('#', '\#', $source) . '#i', '/') === 1 && @preg_match('#' . str_replace('#', '\#', $source) . '#i', '/citami-zz-probe/') === 1)
        : (in_array($match, array('contains', 'start'), true) && rtrim($source, '/') === '');
    if ($catch_all) {
        return new WP_Error('citami_redirect_catch_all', citami_t('Questa regola prenderebbe tutti gli indirizzi del sito: rendila più precisa (per esempio /blog/vecchio-articolo).', 'This rule would catch every address on the site: make it more specific (for example /blog/old-post).'));
    }
    if ($code !== 410 && $code !== 451) {
        if ($target === '' || (!preg_match('#^https?://#i', $target) && $target[0] !== '/')) {
            return new WP_Error('citami_redirect_target', citami_t('Destinazione non valida: URL assoluto o percorso che inizia con /.', 'Invalid target: absolute URL or a path starting with /.'));
        }
        if ($match !== 'regex' && citami_redirect_normalise_path($source) === citami_redirect_normalise_path($target)) {
            return new WP_Error('citami_redirect_loop', citami_t('Sorgente e destinazione coincidono.', 'Source and target are the same.'));
        }
    }
    return array(
        'source' => $match === 'regex' ? $source : citami_redirect_normalise_path($source),
        'target' => $target,
        'code'   => $code,
        'regex'  => $match === 'regex',
        'match'  => $match,
        'active' => !isset($in['active']) || $in['active'] !== false,
    );
}

function citami_redirect_add(array $in) {
    $rule = citami_redirect_sanitize_rule($in);
    if (is_wp_error($rule)) {
        return $rule;
    }
    $rules = citami_redirects_all();
    foreach ($rules as $r) {
        if ($r['source'] === $rule['source'] && (isset($r['match']) ? $r['match'] : 'exact') === $rule['match']) {
            return new WP_Error('citami_redirect_duplicate', citami_t('Esiste già un redirect per questa sorgente.', 'A redirect for this source already exists.'));
        }
    }
    $rule['id'] = uniqid('rd_', true);
    $rule['hits'] = 0;
    $rule['imported'] = '';
    $rule['created'] = gmdate('c');
    $rules[] = $rule;
    update_option(CITAMI_REDIRECTS_OPT, $rules, false);
    return $rule;
}

function citami_redirect_update($id, array $patch) {
    $rules = citami_redirects_all();
    foreach ($rules as $i => $r) {
        if ($r['id'] === $id) {
            $rules[$i] = array_merge($r, $patch);
            update_option(CITAMI_REDIRECTS_OPT, $rules, false);
            return $rules[$i];
        }
    }
    return null;
}

function citami_redirect_delete($id) {
    $rules = citami_redirects_all();
    $kept = array_values(array_filter($rules, function ($r) use ($id) { return $r['id'] !== $id; }));
    $removed = count($rules) - count($kept);
    if ($removed > 0) {
        update_option(CITAMI_REDIRECTS_OPT, $kept, false);
    }
    return $removed;
}

/* ---------------------------------------------------------------- */
/*  404 log                                                           */
/* ---------------------------------------------------------------- */

/**
 * Requests not worth a redirect: WordPress internals (also inside a
 * sub-folder install, /blog/wp-includes/…), probes, and static files
 * (scripts, styles, images, fonts) — 2.56.1: a missing asset is not a
 * page anyone asked for, and it buried the AI-invented URLs.
 */
function citami_404_is_noise($path) {
    $path = (string) $path;
    return (bool) (preg_match('#(^|/)(wp-admin|wp-login|xmlrpc|wp-content|wp-includes|\.well-known)(/|\.|$)#', $path)
        || preg_match('/\.(php|env|git|sql|bak|map|js|mjs|css|png|jpe?g|gif|svg|webp|avif|ico|woff2?|ttf|eot|otf|mp4|webm|mp3)$/i', $path));
}

function citami_404_record($path, $referrer = '', $ua = '') {
    $path = citami_redirect_normalise_path($path);
    if ($path === '/' || strlen($path) > 300) {
        return;
    }
    // Ignore the noise every WordPress sees.
    if (citami_404_is_noise($path)) {
        return;
    }
    $log = get_option(CITAMI_404_LOG_OPT, array());
    if (!is_array($log)) {
        $log = array();
    }
    // BR4 — who asked for a page that does not exist: an AI crawler
    // (verified catalogue UA) or a visitor sent by an AI assistant
    // (Referer). Those are the URLs the models INVENTED about the site.
    $ai_source = citami_404_ai_source($ua, $referrer);
    if (isset($log[$path])) {
        $log[$path]['count']++;
        $log[$path]['last'] = time();
    } else {
        if (count($log) >= CITAMI_404_LOG_MAX) {
            uasort($log, function ($a, $b) { return $a['last'] <=> $b['last']; });
            $log = array_slice($log, -(CITAMI_404_LOG_MAX - 1), null, true);
        }
        $log[$path] = array('count' => 1, 'first' => time(), 'last' => time(), 'referrer' => mb_substr((string) $referrer, 0, 200), 'bot' => citami_bots_slug_from_ua($ua), 'ai' => 0, 'ai_from' => array());
    }
    if ($ai_source !== null) {
        do_action('citami_ai_404', $path, $ai_source); // 2.34 — the daily history counts it
        $log[$path]['ai'] = (isset($log[$path]['ai']) ? (int) $log[$path]['ai'] : 0) + 1;
        if (!isset($log[$path]['ai_from']) || !is_array($log[$path]['ai_from'])) {
            $log[$path]['ai_from'] = array();
        }
        $log[$path]['ai_from'][$ai_source] = (isset($log[$path]['ai_from'][$ai_source]) ? (int) $log[$path]['ai_from'][$ai_source] : 0) + 1;
        if (count($log[$path]['ai_from']) > 8) {
            arsort($log[$path]['ai_from']);
            $log[$path]['ai_from'] = array_slice($log[$path]['ai_from'], 0, 8, true);
        }
    }
    update_option(CITAMI_404_LOG_OPT, $log, false);
}

/* ---------------------------------------------------------------- */
/*  BR4 — hallucinated URLs: 404s that come from AI                  */
/* ---------------------------------------------------------------- */

/** Hosts of the assistants that send visitors (Referer header). */
function citami_404_ai_referrer_hosts() {
    return array(
        'chatgpt.com' => 'chatgpt', 'chat.openai.com' => 'chatgpt', 'openai.com' => 'chatgpt',
        'perplexity.ai' => 'perplexity', 'gemini.google.com' => 'gemini', 'bard.google.com' => 'gemini',
        'copilot.microsoft.com' => 'copilot', 'bing.com' => 'copilot', 'claude.ai' => 'claude',
        'you.com' => 'you', 'chat.mistral.ai' => 'mistral', 'meta.ai' => 'meta', 'poe.com' => 'poe',
        'duckduckgo.com' => 'duckassist', 'search.brave.com' => 'brave',
    );
}

/** "crawler:<slug>" for a catalogue AI crawler, "referrer:<engine>" for a visit from an assistant, null otherwise. */
function citami_404_ai_source($ua, $referrer) {
    $slug = citami_bots_slug_from_ua($ua);
    if ($slug !== null && !in_array($slug, array('googlebot', 'bingbot', 'applebot'), true)) {
        return 'crawler:' . $slug;
    }
    $host = strtolower((string) wp_parse_url((string) $referrer, PHP_URL_HOST));
    $host = preg_replace('/^www\./', '', $host);
    if ($host === '') {
        return null;
    }
    foreach (citami_404_ai_referrer_hosts() as $h => $engine) {
        if ($host === $h || substr($host, -strlen('.' . $h)) === '.' . $h) {
            // bing.com only counts as Copilot when the path says so.
            if ($h === 'bing.com' && stripos((string) wp_parse_url((string) $referrer, PHP_URL_PATH), 'chat') === false && stripos((string) wp_parse_url((string) $referrer, PHP_URL_PATH), 'copilot') === false) {
                return null;
            }
            return 'referrer:' . $engine;
        }
    }
    return null;
}

function citami_404_path_tokens($s) {
    $s = strtolower(preg_replace('/\.(html?|php)$/', '', (string) $s));
    $s = preg_replace('/[^a-z0-9]+/', ' ', $s);
    $stop = array('it', 'en', 'the', 'and', 'del', 'della', 'di', 'da', 'il', 'la', 'le', 'i', 'gli', 'per', 'con', 'www', 'index', 'page', 'pagina', 'html');
    $out = array();
    foreach (preg_split('/\s+/', trim($s)) as $t) {
        if ($t !== '' && strlen($t) > 1 && !in_array($t, $stop, true)) {
            $out[$t] = true;
        }
    }
    return $out;
}

/** The existing page an invented URL most likely meant (links index: slug + title tokens). '' when nothing is close. */
function citami_404_suggest_target($path) {
    if (!function_exists('citami_links_index')) {
        return '';
    }
    $want = citami_404_path_tokens($path);
    if (empty($want)) {
        return '';
    }
    $idx = citami_links_index();
    $entries = isset($idx['entries']) && is_array($idx['entries']) ? $idx['entries'] : array();
    $best = '';
    $best_score = 0.0;
    foreach ($entries as $e) {
        if (empty($e['url']) || !empty($e['noindex'])) continue;
        $have = citami_404_path_tokens((string) wp_parse_url((string) $e['url'], PHP_URL_PATH) . ' ' . (isset($e['title']) ? $e['title'] : ''));
        if (empty($have)) continue;
        $shared = count(array_intersect_key($want, $have));
        if ($shared === 0) continue;
        $score = $shared / max(1, count($want));
        if ($score > $best_score) {
            $best_score = $score;
            $best = (string) wp_parse_url((string) $e['url'], PHP_URL_PATH);
        }
    }
    return $best_score >= 0.34 ? $best : '';
}

/** 404 entries that came from AI, most requested first, with a suggested target. */
function citami_404_ai_entries($limit = 20) {
    $log = get_option(CITAMI_404_LOG_OPT, array());
    $out = array();
    foreach ((array) $log as $path => $e) {
        if (!is_array($e) || empty($e['ai'])) continue;
        $from = isset($e['ai_from']) && is_array($e['ai_from']) ? $e['ai_from'] : array();
        arsort($from);
        $out[] = array(
            'path'      => (string) $path,
            'ai'        => (int) $e['ai'],
            'total'     => (int) $e['count'],
            'sources'   => array_keys($from),
            'last'      => (int) $e['last'],
            'suggested' => citami_404_suggest_target((string) $path),
        );
    }
    usort($out, function ($a, $b) { return $b['ai'] <=> $a['ai'] ?: $b['last'] <=> $a['last']; });
    return array_slice($out, 0, $limit);
}

// The snapshot carries the top invented URLs to the dashboard.
add_filter('citami_health_extra', function ($extra) {
    $extra = is_array($extra) ? $extra : array();
    $list = citami_404_ai_entries(10);
    $all = citami_404_ai_entries(1000);
    $extra['hallucinated'] = array('count' => count($all), 'hits' => array_sum(array_map(function ($e) { return $e['ai']; }, $all)), 'list' => $list);
    // 2.40 — the rule list as numbers only (no sources or targets travel).
    $rules = citami_redirects_all();
    $active = 0;
    $hits = 0;
    foreach ($rules as $r) {
        if (!isset($r['active']) || $r['active'] !== false) {
            $active++;
        }
        $hits += isset($r['hits']) ? (int) $r['hits'] : 0;
    }
    $extra['redirects'] = array('count' => count($rules), 'active' => $active, 'hits' => $hits);
    return $extra;
});

add_action('template_redirect', function () {
    if (is_admin() || !is_404() || empty($_SERVER['REQUEST_URI'])) {
        return;
    }
    citami_404_record(esc_url_raw(wp_unslash($_SERVER['REQUEST_URI'])), isset($_SERVER['HTTP_REFERER']) ? esc_url_raw(wp_unslash($_SERVER['HTTP_REFERER'])) : '', isset($_SERVER['HTTP_USER_AGENT']) ? sanitize_text_field(wp_unslash($_SERVER['HTTP_USER_AGENT'])) : '');
}, PHP_INT_MAX); // last: a path that WordPress or an SEO plugin redirects is not a 404 for the visitor

/* ---------------------------------------------------------------- */
/*  Admin tab + handler                                               */
/* ---------------------------------------------------------------- */

function citami_handle_redirect_action() {
    if (!current_user_can('manage_options')) {
        wp_die('Permesso negato.', '', array('response' => 403));
    }
    if (!wp_verify_nonce(isset($_POST['_citami_redirect_nonce']) ? sanitize_text_field(wp_unslash($_POST['_citami_redirect_nonce'])) : '', 'citami_redirect')) {
        wp_die('Nonce non valido.', '', array('response' => 403));
    }
    $do = isset($_POST['do']) ? sanitize_key((string) $_POST['do']) : '';
    $notice = array('type' => 'success', 'message' => '');
    if ($do === 'add') {
        $res = citami_redirect_add(array(
            'source' => sanitize_text_field(wp_unslash((string) ($_POST['source'] ?? ''))),
            'target' => sanitize_text_field(wp_unslash((string) ($_POST['target'] ?? ''))),
            'match'  => sanitize_key(wp_unslash($_POST['match'] ?? 'exact')),
            'code'   => absint(wp_unslash($_POST['code'] ?? 301)),
        ));
        if (is_wp_error($res)) {
            // 2.59 — the form comes back filled in: fix the value, don't retype it.
            set_transient('citami_action_notice', array('type' => 'error', 'message' => $res->get_error_message()), 30);
            wp_safe_redirect(citami_admin_url('redirects', array_filter(array(
                'source' => sanitize_text_field(wp_unslash((string) ($_POST['source'] ?? ''))),
                'target' => sanitize_text_field(wp_unslash((string) ($_POST['target'] ?? ''))),
            ))));
            exit;
        } else {
            $notice['message'] = $res['code'] === 410 || $res['code'] === 451
                ? sprintf(citami_t('Redirect aggiunto: %1$s risponde %2$d.', 'Redirect added: %1$s answers %2$d.'), $res['source'], $res['code'])
                : sprintf(citami_t('Redirect aggiunto: %1$s → %2$s. Lo trovi in fondo alla tabella, dove puoi spegnerlo.', 'Redirect added: %1$s → %2$s. You find it at the bottom of the table, where you can switch it off.'), $res['source'], $res['target']);
            // A 404 turned into a redirect leaves the log.
            $log = get_option(CITAMI_404_LOG_OPT, array());
            if (is_array($log) && isset($log[$res['source']])) {
                if (!empty($log[$res['source']]['ai'])) {
                    do_action('citami_ai_404_redirected', $res['source']); // 2.34 — an invented URL recovered
                }
                unset($log[$res['source']]);
                update_option(CITAMI_404_LOG_OPT, $log, false);
            }
        }
    } elseif ($do === 'delete' && !empty($_POST['id'])) {
        citami_redirect_delete(sanitize_text_field(wp_unslash($_POST['id'])));
        $notice['message'] = citami_t('Redirect eliminato.', 'Redirect deleted.');
    } elseif ($do === 'toggle' && !empty($_POST['id'])) {
        $id = sanitize_text_field(wp_unslash($_POST['id']));
        foreach (citami_redirects_all() as $r) {
            if ($r['id'] === $id) {
                citami_redirect_update($id, array('active' => empty($r['active'])));
            }
        }
        $notice['message'] = citami_t('Redirect aggiornato.', 'Redirect updated.');
    } elseif ($do === 'clear404') {
        delete_option(CITAMI_404_LOG_OPT);
        $notice['message'] = citami_t('Log 404 svuotato.', '404 log cleared.');
    }
    set_transient('citami_action_notice', $notice, 30);
    wp_safe_redirect(admin_url('admin.php?page=citami-connector&tab=redirects'));
    exit;
}
add_action('admin_post_citami_redirect_action', 'citami_handle_redirect_action');

/**
 * "crawler:gptbot" / "referrer:chatgpt" → array(label, tooltip, is_visit).
 * Display only: the 404 table shows who asked as a short chip.
 */
function citami_404_source_label($src) {
    $src = (string) $src;
    $engines = array(
        'chatgpt' => 'ChatGPT', 'perplexity' => 'Perplexity', 'gemini' => 'Gemini', 'copilot' => 'Copilot', 'claude' => 'Claude',
        'you' => 'You.com', 'mistral' => 'Le Chat', 'meta' => 'Meta AI', 'poe' => 'Poe', 'duckassist' => 'DuckAssist', 'brave' => 'Brave',
    );
    if (strpos($src, 'referrer:') === 0) {
        $k = substr($src, 9);
        $name = isset($engines[$k]) ? $engines[$k] : ucfirst($k);
        return array($name, sprintf(citami_t('Visitatore arrivato da %s', 'Visitor sent by %s'), $name), true);
    }
    $k = strpos($src, 'crawler:') === 0 ? substr($src, 8) : $src;
    $catalog = function_exists('citami_bots_catalog') ? citami_bots_catalog() : array();
    $name = isset($catalog[strtolower($k)]['label']) ? $catalog[strtolower($k)]['label'] : $k;
    return array($name, sprintf(citami_t('Crawler AI %s', 'AI crawler %s'), $name), false);
}

function citami_render_redirects_tab() {
    $rules = citami_redirects_all();
    $raw_log = get_option(CITAMI_404_LOG_OPT, array());
    $raw_log = is_array($raw_log) ? $raw_log : array();
    // Entries logged before the noise filter existed are hidden too.
    $log = array_filter($raw_log, function ($e, $path) { return is_array($e) && !citami_404_is_noise($path); }, ARRAY_FILTER_USE_BOTH);
    uasort($log, function ($a, $b) { return $b['count'] <=> $a['count']; });
    $prefill = isset($_GET['source']) ? sanitize_text_field(wp_unslash((string) $_GET['source'])) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- display only: form prefill from the 404 log link
    $prefill_target = isset($_GET['target']) ? sanitize_text_field(wp_unslash((string) $_GET['target'])) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- display only: form prefill
    // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- display only: lift the 404 caps
    $all404 = !empty($_GET['all404']);
    $ai_entries = citami_404_ai_entries($all404 ? CITAMI_404_LOG_MAX * 5 : 20);
    // Every AI path, without the (slower) suggested target: only to count them.
    $ai_paths = array();
    foreach ($raw_log as $path => $e) {
        if (is_array($e) && !empty($e['ai'])) $ai_paths[] = (string) $path;
    }
    // 2.52 — one table instead of two: the AI-invented URLs used to appear
    // in their own list AND again in the 404 log below it. Now every 404 is
    // one row, the AI ones first (with who asked and the likely page).
    $ai_by_path = array();
    foreach ($ai_entries as $e) $ai_by_path[$e['path']] = $e;
    $rows = array();
    foreach ($ai_entries as $e) $rows[] = array('path' => $e['path'], 'e' => isset($log[$e['path']]) ? $log[$e['path']] : array('count' => $e['total'], 'last' => $e['last'], 'referrer' => '', 'bot' => ''), 'ai' => $e);
    foreach (($all404 ? $log : array_slice($log, 0, 100, true)) as $path => $e) {
        if (isset($ai_by_path[$path])) continue;
        $rows[] = array('path' => (string) $path, 'e' => $e, 'ai' => null);
    }
    // 2.60 — say when the table is cut: every distinct 404 path, AI or not.
    $total404 = count(array_unique(array_merge(array_map('strval', array_keys($log)), $ai_paths)));
    $active = 0;
    $hits = 0;
    foreach ($rules as $r) {
        if (!empty($r['active'])) $active++;
        $hits += isset($r['hits']) ? (int) $r['hits'] : 0;
    }
    $match_labels = array(
        'exact' => citami_t('esatto', 'exact'), 'start' => citami_t('inizia con', 'starts with'), 'contains' => citami_t('contiene', 'contains'),
        'end' => citami_t('finisce con', 'ends with'), 'regex' => 'regex',
    );
    $form_open = function ($do, $extra = '', $class = 'citami-inline-form') {
        return '<form method="post" action="' . esc_url(admin_url('admin-post.php')) . '" class="' . esc_attr($class) . '">'
            . wp_nonce_field('citami_redirect', '_citami_redirect_nonce', true, false)
            . '<input type="hidden" name="action" value="citami_redirect_action"><input type="hidden" name="do" value="' . esc_attr($do) . '">' . $extra;
    };
    ?>
    <div class="citami-page-head">
        <p class="citami-muted"><?php echo esc_html(citami_t('Un indirizzo che non esiste più, o che un\'AI si è inventata, finisce in una pagina di errore. Un redirect manda chi lo apre (persone e motori) alla pagina giusta. Qui sotto li aggiungi, li spegni e vedi quali indirizzi mancanti vengono chiesti di più.', 'An address that no longer exists, or that an AI made up, ends on an error page. A redirect sends whoever opens it (people and engines) to the right page. Below you add them, switch them off and see which missing addresses are asked for most.')); ?></p>
    </div>
    <div class="citami-kpis">
        <div class="citami-kpi"><span class="citami-kpi-label"><?php echo esc_html(citami_t('Redirect attivi', 'Active redirects')); ?></span><span class="citami-kpi-value"><?php echo (int) $active; ?></span></div>
        <div class="citami-kpi"><span class="citami-kpi-label"><?php echo esc_html(citami_t('Visite reindirizzate', 'Redirected hits')); ?></span><span class="citami-kpi-value"><?php echo (int) $hits; ?></span></div>
        <div class="citami-kpi"><span class="citami-kpi-label"><?php echo esc_html(citami_t('Indirizzi inventati dalle AI', 'AI-invented URLs')); ?></span><span class="citami-kpi-value"><?php echo (int) count($ai_paths); ?></span></div>
        <div class="citami-kpi"><span class="citami-kpi-label"><?php echo esc_html(citami_t('404 registrati', '404s logged')); ?></span><span class="citami-kpi-value"><?php echo (int) $total404; ?></span></div>
    </div>

    <section class="citami-card" data-citami="redirect-add">
        <header class="citami-card-head"><span class="citami-eyebrow"><?php echo esc_html(citami_t('Nuovo redirect', 'New redirect')); ?></span></header>
        <form method="post" action="<?php echo esc_url(admin_url('admin-post.php')); ?>" class="citami-redirect-form">
            <?php wp_nonce_field('citami_redirect', '_citami_redirect_nonce'); ?>
            <input type="hidden" name="action" value="citami_redirect_action"><input type="hidden" name="do" value="add">
            <label class="citami-redirect-form-source"><span><?php echo esc_html(citami_t('Sorgente', 'Source')); ?></span><input type="text" name="source" value="<?php echo esc_attr($prefill); ?>" placeholder="<?php echo esc_attr(citami_t('/vecchia-pagina', '/old-page')); ?>" required></label>
            <label><span><?php echo esc_html(citami_t('Tipo', 'Match')); ?></span><select name="match"><option value="exact"><?php echo esc_html(citami_t('esatto', 'exact')); ?></option><option value="start"><?php echo esc_html(citami_t('inizia con', 'starts with')); ?></option><option value="contains"><?php echo esc_html(citami_t('contiene', 'contains')); ?></option><option value="end"><?php echo esc_html(citami_t('finisce con', 'ends with')); ?></option><option value="regex">regex</option></select></label>
            <label class="citami-redirect-form-target"><span><?php echo esc_html(citami_t('Destinazione', 'Target')); ?></span><input type="text" name="target" value="<?php echo esc_attr($prefill_target); ?>" placeholder="<?php echo esc_attr(citami_t('/nuova-pagina', '/new-page')); ?>"></label>
            <label><span>HTTP</span><select name="code"><option value="301">301</option><option value="302">302</option><option value="307">307</option><option value="410">410</option><option value="451">451</option></select></label>
            <button class="citami-btn citami-btn--primary"><?php echo esc_html(citami_t('Aggiungi', 'Add')); ?></button>
        </form>
        <p class="description citami-redirect-help"><?php echo esc_html(citami_t('Esatto: solo quell\'indirizzo · Inizia con: tutto quello che comincia così (es. /blog/) · Contiene / Finisce con: una parte dell\'indirizzo · Regex: espressione regolare, $1 nella destinazione. 301 = spostata per sempre, 302/307 = temporaneo, 410/451 = sparita (destinazione vuota).', 'Exact: only that address · Starts with: everything that begins like this (e.g. /blog/) · Contains / Ends with: part of the address · Regex: regular expression, $1 in the target. 301 = moved for good, 302/307 = temporary, 410/451 = gone (empty target).')); ?></p>
    </section>

    <section class="citami-card citami-card--table" data-citami="redirect-rules">
        <header class="citami-card-head"><span class="citami-eyebrow"><?php echo esc_html(citami_t('Redirect attivi', 'Active redirects')); ?></span><?php if (!empty($rules)): ?><span class="citami-muted"><?php echo esc_html(sprintf(citami_t('%1$d regole · %2$d accese', '%1$d rules · %2$d on'), count($rules), $active)); ?></span><?php endif; ?></header>
        <?php if (empty($rules)): ?>
            <p class="citami-empty"><?php echo esc_html(citami_t('Nessun redirect.', 'No redirects.')); ?> <?php echo esc_html(citami_t('Aggiungine uno qui sopra, oppure parti da un 404 qui sotto.', 'Add one above, or start from a 404 below.')); ?></p>
        <?php else: ?>
        <div class="citami-table-scroll"><table class="widefat citami-redirects-table">
            <thead><tr><th><?php echo esc_html(citami_t('Sorgente', 'Source')); ?></th><th><?php echo esc_html(citami_t('Destinazione', 'Target')); ?></th><th class="citami-col-num">HTTP</th><th class="citami-col-nowrap"><?php echo esc_html(citami_t('Tipo', 'Match')); ?></th><th class="citami-col-num">Hit</th><th class="citami-col-nowrap"><?php echo esc_html(citami_t('Stato', 'Status')); ?></th><th></th></tr></thead>
            <tbody>
            <?php foreach ($rules as $r): $m = isset($r['match']) ? $r['match'] : 'exact'; ?>
                <tr>
                    <td class="citami-col-path"><code><?php echo esc_html($r['source']); ?></code><?php if (!empty($r['imported'])): ?> <small class="citami-muted">(<?php echo esc_html($r['imported']); ?>)</small><?php endif; ?></td>
                    <td class="citami-col-path"><?php echo $r['target'] !== '' ? '<code>' . esc_html($r['target']) . '</code>' : '<span class="citami-muted">—</span>'; ?></td>
                    <td class="citami-col-num"><?php echo (int) $r['code']; ?></td>
                    <td class="citami-col-nowrap"><?php echo esc_html(isset($match_labels[$m]) ? $match_labels[$m] : $m); ?></td>
                    <td class="citami-col-num"><?php echo (int) (isset($r['hits']) ? $r['hits'] : 0); ?></td>
                    <td class="citami-col-nowrap"><?php if (!empty($r['active'])): ?><span class="citami-pill citami-pill--ok"><?php echo esc_html(citami_t('attivo', 'active')); ?></span><?php else: ?><span class="citami-pill"><?php echo esc_html(citami_t('spento', 'off')); ?></span><?php endif; ?></td>
                    <td class="citami-td-action">
                        <?php echo wp_kses($form_open('toggle', '<input type="hidden" name="id" value="' . esc_attr($r['id']) . '">'), citami_kses_allowed()); ?><button class="citami-btn citami-btn--ghost citami-btn--small"><?php echo !empty($r['active']) ? esc_html(citami_t('Spegni', 'Turn off')) : esc_html(citami_t('Accendi', 'Turn on')); ?></button></form>
                        <?php echo wp_kses($form_open('delete', '<input type="hidden" name="id" value="' . esc_attr($r['id']) . '">'), citami_kses_allowed()); ?><button class="citami-btn citami-btn--ghost citami-btn--small citami-btn--danger" onclick="return confirm('<?php echo esc_js(citami_t('Eliminare questo redirect?', 'Delete this redirect?')); ?>');"><?php echo esc_html(citami_t('Elimina', 'Delete')); ?></button></form>
                    </td>
                </tr>
            <?php endforeach; ?>
            </tbody>
        </table></div>
        <?php endif; ?>
    </section>

    <section class="citami-card citami-card--table" id="citami-404" data-citami="redirect-404">
        <header class="citami-card-head">
            <span class="citami-eyebrow"><?php echo esc_html(citami_t('Pagine non trovate (404)', 'Pages not found (404)')); ?></span>
            <?php if ($total404 > 0): ?>
                <?php echo wp_kses($form_open('clear404'), citami_kses_allowed()); ?><button class="citami-btn citami-btn--ghost citami-btn--small" onclick="return confirm('<?php echo esc_js(citami_t('Svuotare il log dei 404? Si perdono anche gli indirizzi inventati dalle AI raccolti finora.', 'Clear the 404 log? The AI-invented addresses collected so far are lost too.')); ?>');"><?php echo esc_html(citami_t('Svuota log', 'Clear log')); ?></button></form>
            <?php endif; ?>
        </header>
        <p class="citami-muted citami-card-intro"><?php echo esc_html(citami_t('Prima le pagine inventate dalle AI: indirizzi che non esistono, richiesti da un crawler AI o da un visitatore arrivato da ChatGPT, Perplexity, Gemini, Copilot o Claude. Un redirect verso la pagina giusta trasforma l\'errore in una visita. Sotto, gli altri 404.', 'AI-invented pages first: addresses that do not exist, requested by an AI crawler or by a visitor coming from ChatGPT, Perplexity, Gemini, Copilot or Claude. A redirect to the right page turns the error into a visit. Below, the other 404s.')); ?></p>
        <?php if ($total404 > count($rows)): ?>
            <p class="citami-muted citami-card-intro" data-citami="404-cap"><?php echo esc_html(sprintf(citami_t('Mostrati %1$d di %2$d indirizzi (i più richiesti; le prime 20 righe AI e i primi 100 altri).', 'Showing %1$d of %2$d addresses (the most requested; the first 20 AI rows and the first 100 others).'), count($rows), $total404)); ?> <a href="<?php echo esc_url(citami_admin_url('redirects', array('all404' => 1)) . '#citami-404'); ?>"><?php echo esc_html(citami_t('Mostra tutti', 'Show all')); ?></a></p>
        <?php elseif ($all404 && $total404 > 0): ?>
            <p class="citami-muted citami-card-intro" data-citami="404-cap"><?php echo esc_html(sprintf(citami_t('Tutti i %d indirizzi registrati.', 'All %d recorded addresses.'), $total404)); ?> <a href="<?php echo esc_url(citami_admin_url('redirects') . '#citami-404'); ?>"><?php echo esc_html(citami_t('Mostra solo i più richiesti', 'Show only the most requested')); ?></a></p>
        <?php endif; ?>
        <?php if (empty($rows)): ?>
            <p class="citami-empty"><?php echo esc_html(citami_t('Nessun 404 registrato.', 'No 404 recorded.')); ?></p>
        <?php else: ?>
        <div class="citami-table-scroll"><table class="widefat citami-404-table" data-citami="hallucinated">
            <thead><tr><th class="citami-col-path"><?php echo esc_html(citami_t('Percorso', 'Path')); ?></th><th class="citami-col-num"><?php echo esc_html(citami_t('Volte', 'Times')); ?></th><th class="citami-col-src"><?php echo esc_html(citami_t('Da AI', 'From AI')); ?></th><th class="citami-col-date"><?php echo esc_html(citami_t('Ultima', 'Last')); ?></th><th class="citami-col-target"><?php echo esc_html(citami_t('Pagina probabile', 'Likely page')); ?></th><th></th></tr></thead>
            <tbody>
            <?php foreach ($rows as $r): $e = $r['e']; $ai = $r['ai']; ?>
                <tr<?php echo $ai ? ' class="citami-row--ai"' : ''; ?>>
                    <td class="citami-col-path"><code><?php echo esc_html($r['path']); ?></code></td>
                    <td class="citami-col-num"><?php echo (int) $e['count']; ?></td>
                    <td class="citami-col-src">
                        <?php if ($ai):
                            $from = isset($raw_log[$r['path']]['ai_from']) && is_array($raw_log[$r['path']]['ai_from']) ? $raw_log[$r['path']]['ai_from'] : array(); ?>
                            <span class="citami-src-chips">
                            <?php foreach ($ai['sources'] as $src): list($name, $tip, $visit) = citami_404_source_label($src); $n = isset($from[$src]) ? (int) $from[$src] : 0; ?>
                                <span class="citami-chip<?php echo $visit ? '' : ' citami-chip--muted'; ?>" title="<?php echo esc_attr($tip); ?>"><?php echo esc_html($name); ?><?php if ($n > 0): ?> <b>×<?php echo (int) $n; ?></b><?php endif; ?></span>
                            <?php endforeach; ?>
                            <?php if (empty($ai['sources'])): ?><span class="citami-chip"><?php echo esc_html(sprintf(citami_t('AI ×%d', 'AI ×%d'), (int) $ai['ai'])); ?></span><?php endif; ?>
                            </span>
                        <?php else:
                            $bot = (string) ($e['bot'] ?? '');
                            $ref = (string) ($e['referrer'] ?? '');
                            $ref_host = $ref !== '' ? (string) wp_parse_url($ref, PHP_URL_HOST) : ''; ?>
                            <?php if ($bot !== ''): list($bname) = citami_404_source_label('crawler:' . $bot); ?><span class="citami-chip citami-chip--muted"><?php echo esc_html($bname); ?></span><?php endif; ?>
                            <?php if ($ref !== ''): ?><span class="citami-muted citami-404-ref" title="<?php echo esc_attr($ref); ?>"><?php echo esc_html($ref_host !== '' ? preg_replace('/^www\./', '', $ref_host) : $ref); ?></span><?php endif; ?>
                            <?php if ($bot === '' && $ref === ''): ?><span class="citami-muted">—</span><?php endif; ?>
                        <?php endif; ?>
                    </td>
                    <td class="citami-col-date citami-muted"><?php echo esc_html(wp_date('d/m H:i', (int) $e['last'])); ?></td>
                    <td class="citami-col-target"><?php echo $ai && $ai['suggested'] !== '' ? '<code>' . esc_html($ai['suggested']) . '</code>' : '<span class="citami-muted">—</span>'; ?></td>
                    <td class="citami-td-action"><a class="citami-btn citami-btn--small<?php echo $ai ? ' citami-btn--primary' : ''; ?>" href="<?php echo esc_url(admin_url('admin.php?page=citami-connector&tab=redirects&source=' . rawurlencode($r['path']) . ($ai && $ai['suggested'] !== '' ? '&target=' . rawurlencode($ai['suggested']) : ''))); ?>"><?php echo esc_html(citami_t('Crea redirect', 'Create redirect')); ?></a></td>
                </tr>
            <?php endforeach; ?>
            </tbody>
        </table></div>
        <?php endif; ?>
    </section>
    <?php
}