<?php
/**
 * CookieFrame admin settings page and AJAX handlers.
 */

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

class CookieFrame_Admin {

	public function __construct() {
		add_action( 'admin_menu', array( $this, 'add_settings_page' ) );
		add_action( 'admin_init', array( $this, 'register_settings' ) );
		add_action( 'admin_init', array( $this, 'maybe_redirect_after_activation' ) );
		add_action( 'admin_enqueue_scripts', array( $this, 'enqueue_assets' ) );
		add_action( 'admin_notices', array( $this, 'show_setup_notice' ) );
		add_action( 'wp_ajax_cookieframe_validate_domain', array( $this, 'ajax_validate_domain' ) );
		add_action( 'wp_ajax_cookieframe_register', array( $this, 'ajax_register' ) );
		add_action( 'wp_ajax_cookieframe_fetch_status', array( $this, 'ajax_fetch_status' ) );
		add_action( 'wp_ajax_cookieframe_resend_verification', array( $this, 'ajax_resend_verification' ) );
		add_action( 'wp_ajax_cookieframe_disconnect', array( $this, 'ajax_disconnect' ) );
		add_action( 'wp_ajax_cookieframe_dismiss_review', array( $this, 'ajax_dismiss_review' ) );
		add_action( 'wp_ajax_cookieframe_search_posts', array( $this, 'ajax_search_posts' ) );
		add_action( 'admin_footer-plugins.php', array( $this, 'render_deactivation_modal' ) );
		add_action( 'wp_ajax_cookieframe_submit_feedback', array( $this, 'ajax_submit_feedback' ) );
	}

	/**
	 * Add settings page under Settings menu.
	 */
	public function add_settings_page() {
		add_options_page(
			__( 'CookieFrame Settings', 'cookieframe' ),
			__( 'CookieFrame', 'cookieframe' ),
			'manage_options',
			'cookieframe',
			array( $this, 'render_settings_page' )
		);
	}

	/**
	 * Register settings with sanitization callback.
	 */
	public function register_settings() {
		register_setting(
			'cookieframe_settings',
			CookieFrame::OPTION_NAME,
			array( 'sanitize_callback' => array( $this, 'sanitize_options' ) )
		);
	}

	/**
	 * Redirect to settings page after first activation.
	 */
	public function maybe_redirect_after_activation() {
		if ( ! get_transient( 'cookieframe_activation_redirect' ) ) {
			return;
		}
		delete_transient( 'cookieframe_activation_redirect' );

		if ( wp_doing_ajax() || isset( $_GET['activate-multi'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
			return;
		}

		wp_safe_redirect( admin_url( 'options-general.php?page=cookieframe' ) );
		exit;
	}

	/**
	 * Resolve stored excluded post IDs to title/type objects for JS initialization.
	 *
	 * @return array
	 */
	private function get_excluded_posts_data() {
		$options = CookieFrame::get_options();
		if ( empty( $options['excluded_posts'] ) ) {
			return array();
		}
		$ids  = array_filter( array_map( 'intval', explode( ',', $options['excluded_posts'] ) ) );
		$data = array();
		foreach ( $ids as $id ) {
			$post = get_post( $id );
			if ( $post ) {
				$data[] = array(
					'id'    => $id,
					'title' => html_entity_decode( get_the_title( $id ), ENT_QUOTES, 'UTF-8' ),
					'type'  => $post->post_type,
				);
			}
		}
		return $data;
	}

	/**
	 * AJAX: Search published posts and pages by title.
	 */
	public function ajax_search_posts() {
		check_ajax_referer( 'cookieframe_admin_nonce', 'nonce' );
		if ( ! current_user_can( 'manage_options' ) ) {
			wp_send_json_error( null, 403 );
			return;
		}

		$search = isset( $_POST['search'] ) ? sanitize_text_field( wp_unslash( $_POST['search'] ) ) : '';
		if ( strlen( $search ) < 2 ) {
			wp_send_json_success( array() );
			return;
		}

		$posts = get_posts( array(
			'post_type'      => array( 'post', 'page' ),
			'post_status'    => 'publish',
			's'              => $search,
			'posts_per_page' => 10,
			'fields'         => 'ids',
		) );

		$results = array_map( function( $id ) {
			return array(
				'id'    => $id,
				'title' => html_entity_decode( get_the_title( $id ), ENT_QUOTES, 'UTF-8' ),
				'type'  => get_post_type( $id ),
			);
		}, $posts );

		wp_send_json_success( array_values( $results ) );
	}

	/**
	 * Enqueue admin JS and CSS only on our settings page.
	 *
	 * @param string $hook_suffix The current admin page hook.
	 */
	public function enqueue_assets( $hook_suffix ) {
		if ( 'settings_page_cookieframe' !== $hook_suffix ) {
			return;
		}

		wp_enqueue_script(
			'cookieframe-admin',
			COOKIEFRAME_PLUGIN_URL . 'assets/js/admin.js',
			array( 'jquery' ),
			COOKIEFRAME_VERSION,
			true
		);

		wp_localize_script( 'cookieframe-admin', 'cookieframeAdmin', array(
			'ajaxUrl'     => admin_url( 'admin-ajax.php' ),
			'nonce'       => wp_create_nonce( 'cookieframe_admin_nonce' ),
			'isConnected' => ! empty( CookieFrame::get_options()['domain_id'] ),
			'hasApiKey'     => ! empty( CookieFrame::get_api_key() ),
			'excludedPosts' => $this->get_excluded_posts_data(),
			'i18n'          => array(
				'validating'        => __( 'Validating...', 'cookieframe' ),
				'registering'       => __( 'Creating account...', 'cookieframe' ),
				'invalidId'         => __( 'Please enter a valid 8-character Domain ID.', 'cookieframe' ),
				'fullNameRequired'  => __( 'Please enter your full name.', 'cookieframe' ),
				'invalidEmail'      => __( 'Please enter a valid email address.', 'cookieframe' ),
				'connected'         => __( 'Successfully connected!', 'cookieframe' ),
				'disconnectConfirm' => __( 'Are you sure you want to disconnect this domain?', 'cookieframe' ),
				'validate'          => __( 'Connect', 'cookieframe' ),
				'register'          => __( 'Create Account & Connect', 'cookieframe' ),
				'error'             => __( 'Something went wrong. Please try again.', 'cookieframe' ),
				'cookies'           => __( 'Cookies', 'cookieframe' ),
				'consents'          => __( 'Consents', 'cookieframe' ),
				'lastScan'          => __( 'Last Scan', 'cookieframe' ),
				'noData'            => __( 'No data yet', 'cookieframe' ),
				'categories'        => __( 'Categories', 'cookieframe' ),
				'uncategorized'     => __( 'uncategorized', 'cookieframe' ),
				'installed'           => __( 'Connected', 'cookieframe' ),
				'notInstalled'        => __( 'Not installed', 'cookieframe' ),
				'unreachable'         => __( 'Unreachable', 'cookieframe' ),
				'pendingVerification' => __( 'Pending', 'cookieframe' ),
				'installationError'   => __( 'Error', 'cookieframe' ),
				'bannerActive'        => __( 'Active', 'cookieframe' ),
				'bannerDisabled'      => __( 'Disabled', 'cookieframe' ),
				'resendingEmail'      => __( 'Sending...', 'cookieframe' ),
				'resendEmail'         => __( 'Resend Email', 'cookieframe' ),
				'verificationSent'    => __( 'Verification email sent! Check your inbox.', 'cookieframe' ),
				'verifyEmailPrompt'   => __( 'Check your inbox to verify your email address.', 'cookieframe' ),
			),
		) );

		wp_enqueue_style(
			'cookieframe-admin',
			COOKIEFRAME_PLUGIN_URL . 'assets/css/admin.css',
			array(),
			COOKIEFRAME_VERSION
		);
	}

	/**
	 * Show admin notice when no Domain ID is configured.
	 */
	public function show_setup_notice() {
		$options = CookieFrame::get_options();
		if ( ! empty( $options['domain_id'] ) ) {
			return;
		}

		$screen = get_current_screen();
		if ( $screen && 'settings_page_cookieframe' === $screen->id ) {
			return;
		}

		printf(
			'<div class="notice notice-warning is-dismissible"><p>%s <a href="%s">%s</a></p></div>',
			esc_html__( 'Just one more step to make your website compliant!', 'cookieframe' ),
			esc_url( admin_url( 'options-general.php?page=cookieframe' ) ),
			esc_html__( 'Complete setup to activate your cookie consent banner.', 'cookieframe' )
		);
	}

	/**
	 * Determine whether the review reminder should be shown.
	 *
	 * @return bool
	 */
	private function should_show_review_notice() {
		$options = CookieFrame::get_options();
		if ( empty( $options['domain_id'] ) ) {
			return false;
		}

		$review = get_option( 'cookieframe_review_notice' );
		if ( ! is_array( $review ) || empty( $review['activated_at'] ) ) {
			// Existing installations that connected before this option was introduced:
			// initialize it now so the 14-day timer starts from today.
			$review = array(
				'activated_at' => time(),
				'status'       => 'pending',
			);
			update_option( 'cookieframe_review_notice', $review, false );
			return false; // Not ready yet — will show after 14 days.
		}

		$status = isset( $review['status'] ) ? $review['status'] : 'pending';

		if ( 'dismissed' === $status ) {
			return false;
		}

		// Must be active for at least 14 days.
		$days_active = ( time() - (int) $review['activated_at'] ) / DAY_IN_SECONDS;
		if ( $days_active < 14 ) {
			return false;
		}

		if ( 'snoozed' === $status ) {
			$snoozed_at = isset( $review['snoozed_at'] ) ? (int) $review['snoozed_at'] : 0;
			$days_since_snooze = ( time() - $snoozed_at ) / DAY_IN_SECONDS;
			if ( $days_since_snooze < 30 ) {
				return false;
			}
		}

		return true;
	}

	/**
	 * Render the review reminder card HTML.
	 */
	private function render_review_notice() {
		if ( ! $this->should_show_review_notice() ) {
			return;
		}
		?>
		<div class="cookieframe-card cookieframe-review-card" id="cookieframe-review-notice">
			<div class="cookieframe-review-content">
				<div class="cookieframe-review-icon">
					<svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M19 14c1.49-1.46 3-3.21 3-5.5A5.5 5.5 0 0 0 16.5 3c-1.76 0-3 .5-4.5 2-1.5-1.5-2.74-2-4.5-2A5.5 5.5 0 0 0 2 8.5c0 2.3 1.5 4.05 3 5.5l7 7Z"/></svg>
				</div>
				<div class="cookieframe-review-text">
					<p class="cookieframe-review-title"><?php esc_html_e( 'Enjoying CookieFrame?', 'cookieframe' ); ?></p>
					<p class="cookieframe-review-desc"><?php esc_html_e( 'If CookieFrame has helped your site stay compliant, a quick review on WordPress.org would mean a lot to our small team.', 'cookieframe' ); ?></p>
				</div>
			</div>
			<div class="cookieframe-review-actions">
				<a href="https://wordpress.org/support/plugin/cookieframe/reviews/#new-post" target="_blank" rel="noopener noreferrer" class="cookieframe-btn cookieframe-btn--primary cookieframe-btn--sm" id="cookieframe-review-yes"><?php esc_html_e( 'Leave a Review', 'cookieframe' ); ?></a>
				<button type="button" class="cookieframe-btn cookieframe-btn--secondary cookieframe-btn--sm" id="cookieframe-review-later"><?php esc_html_e( 'Maybe Later', 'cookieframe' ); ?></button>
				<button type="button" class="cookieframe-review-dismiss" id="cookieframe-review-already"><?php esc_html_e( 'I already did', 'cookieframe' ); ?></button>
			</div>
		</div>
		<?php
	}

	/**
	 * Sanitize and validate option values.
	 *
	 * @param array $input Raw input from the settings form.
	 * @return array Sanitized values.
	 */
	public function sanitize_options( $input ) {
		$current  = CookieFrame::get_options();
		$defaults = CookieFrame::get_defaults();

		$output = array();

		// domain_id — keep current if not in input (AJAX sets it separately).
		// An empty string is allowed so the user can disconnect.
		if ( isset( $input['domain_id'] ) ) {
			$id = strtolower( sanitize_text_field( $input['domain_id'] ) );
			if ( '' === $id ) {
				$output['domain_id'] = '';
			} else {
				$is_valid = preg_match( '/^[0-9a-f]{8}$/', $id ) || preg_match( '/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/', $id );
				$output['domain_id'] = $is_valid ? $id : $current['domain_id'];
			}
		} else {
			$output['domain_id'] = $current['domain_id'];
		}

		// domain_name
		$output['domain_name'] = isset( $input['domain_name'] )
			? sanitize_text_field( $input['domain_name'] )
			: $current['domain_name'];

		// api_key
		if ( isset( $input['api_key'] ) ) {
			$output['api_key'] = sanitize_text_field( $input['api_key'] );
		} else {
			$output['api_key'] = $current['api_key'];
		}

		// enabled
		$output['enabled'] = ! empty( $input['enabled'] );

		// script_position
		$allowed_positions     = array( 'head', 'footer' );
		$output['script_position'] = isset( $input['script_position'] ) && in_array( $input['script_position'], $allowed_positions, true )
			? $input['script_position']
			: $defaults['script_position'];

		// excluded_posts — comma-separated integers
		if ( isset( $input['excluded_posts'] ) ) {
			$ids = array_filter( array_map( 'intval', explode( ',', sanitize_text_field( $input['excluded_posts'] ) ) ) );
			$output['excluded_posts'] = implode( ',', $ids );
		} else {
			$output['excluded_posts'] = $current['excluded_posts'];
		}

		return $output;
	}

	/**
	 * AJAX: Validate a Domain ID against the CookieFrame API.
	 */
	public function ajax_validate_domain() {
		check_ajax_referer( 'cookieframe_admin_nonce', 'nonce' );

		if ( ! current_user_can( 'manage_options' ) ) {
			wp_send_json_error( array( 'message' => __( 'Permission denied.', 'cookieframe' ) ) );
		}

		$domain_id = isset( $_POST['domain_id'] ) ? strtolower( sanitize_text_field( wp_unslash( $_POST['domain_id'] ) ) ) : '';

		$is_short_id = (bool) preg_match( '/^[0-9a-f]{8}$/', $domain_id );
		$is_full_uuid = (bool) preg_match( '/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/', $domain_id );

		if ( ! $is_short_id && ! $is_full_uuid ) {
			wp_send_json_error( array( 'message' => __( 'Invalid Domain ID format.', 'cookieframe' ) ) );
		}

		$response = wp_remote_get(
			COOKIEFRAME_API_URL . '/api/integrations/wordpress/validate/' . $domain_id,
			array(
				'timeout' => 15,
			)
		);

		if ( is_wp_error( $response ) ) {
			wp_send_json_error( array( 'message' => $response->get_error_message() ) );
		}

		$code = wp_remote_retrieve_response_code( $response );
		$body = json_decode( wp_remote_retrieve_body( $response ), true );

		if ( 200 !== $code || empty( $body['domain'] ) ) {
			$error = isset( $body['error'] ) ? $body['error'] : __( 'Domain not found. Please check your Domain ID.', 'cookieframe' );
			wp_send_json_error( array( 'message' => $error ) );
		}

		$options                = CookieFrame::get_options();
		$options['domain_id']   = $domain_id;
		$options['domain_name'] = sanitize_text_field( $body['domain'] );
		update_option( CookieFrame::OPTION_NAME, $options );

		wp_send_json_success( array( 'domain_name' => $options['domain_name'] ) );
	}

	/**
	 * AJAX: Register a new account via the CookieFrame WordPress integration API.
	 */
	public function ajax_register() {
		check_ajax_referer( 'cookieframe_admin_nonce', 'nonce' );

		if ( ! current_user_can( 'manage_options' ) ) {
			wp_send_json_error( array( 'message' => __( 'Permission denied.', 'cookieframe' ) ) );
		}

		$name     = isset( $_POST['name'] ) ? sanitize_text_field( wp_unslash( $_POST['name'] ) ) : '';
		$email    = isset( $_POST['email'] ) ? sanitize_email( wp_unslash( $_POST['email'] ) ) : '';
		$site_url = isset( $_POST['site_url'] ) ? esc_url_raw( wp_unslash( $_POST['site_url'] ) ) : '';

		if ( ! is_email( $email ) ) {
			wp_send_json_error( array( 'message' => __( 'Please enter a valid email address.', 'cookieframe' ) ) );
		}

		if ( empty( $site_url ) ) {
			wp_send_json_error( array( 'message' => __( 'Site URL is required.', 'cookieframe' ) ) );
		}

		// Extract the domain from the site URL.
		$parsed = wp_parse_url( $site_url );
		$domain = isset( $parsed['host'] ) ? $parsed['host'] : '';

		$request_headers = array( 'Content-Type' => 'application/json' );

		$body = array(
			'email'     => $email,
			'domain'    => $domain,
			'siteUrl'   => $site_url,
			'returnUrl' => admin_url( 'options-general.php?page=cookieframe' ),
		);
		if ( ! empty( $name ) ) {
			$body['name'] = $name;
		}

		$response = wp_remote_post(
			COOKIEFRAME_API_URL . '/api/integrations/wordpress/register',
			array(
				'timeout' => 30,
				'headers' => $request_headers,
				'body'    => wp_json_encode( $body ),
			)
		);

		if ( is_wp_error( $response ) ) {
			wp_send_json_error( array( 'message' => $response->get_error_message() ) );
		}

		$code = wp_remote_retrieve_response_code( $response );
		$body = json_decode( wp_remote_retrieve_body( $response ), true );

		if ( $code < 200 || $code >= 300 || empty( $body['domainId'] ) ) {
			$error = isset( $body['error'] ) ? $body['error'] : __( 'Registration failed. Please try again or create an account at cookieframe.com.', 'cookieframe' );
			wp_send_json_error( array( 'message' => $error ) );
		}

		$options                = CookieFrame::get_options();
		$options['domain_id']   = strtolower( sanitize_text_field( $body['domainId'] ) );
		$options['domain_name'] = ! empty( $body['domain'] ) ? sanitize_text_field( $body['domain'] ) : $domain;
		if ( ! empty( $body['apiKey'] ) ) {
			$options['api_key'] = sanitize_text_field( $body['apiKey'] );
		}
		update_option( CookieFrame::OPTION_NAME, $options );

		wp_send_json_success( array(
			'domain_id'      => $options['domain_id'],
			'domain_name'    => $options['domain_name'],
			'email_verified' => ! empty( $body['emailVerified'] ),
		) );
	}

	/**
	 * AJAX: Fetch live domain status from the CookieFrame API.
	 */
	public function ajax_fetch_status() {
		check_ajax_referer( 'cookieframe_admin_nonce', 'nonce' );

		if ( ! current_user_can( 'manage_options' ) ) {
			wp_send_json_error( array( 'message' => __( 'Permission denied.', 'cookieframe' ) ) );
		}

		$options   = CookieFrame::get_options();
		$domain_id = $options['domain_id'];

		if ( empty( $domain_id ) ) {
			wp_send_json_error( array( 'message' => __( 'Not connected.', 'cookieframe' ) ) );
		}

		$api_key = CookieFrame::get_api_key();
		if ( empty( $api_key ) ) {
			wp_send_json_error( array( 'message' => __( 'No API key configured. Please re-register your domain.', 'cookieframe' ) ) );
		}

		$response = wp_remote_get(
			COOKIEFRAME_API_URL . '/api/integrations/wordpress/status/' . $domain_id,
			array(
				'timeout' => 10,
				'headers' => array(
					'Authorization' => 'Bearer ' . $api_key,
				),
			)
		);

		if ( is_wp_error( $response ) ) {
			wp_send_json_error( array( 'message' => $response->get_error_message() ) );
		}

		$code = wp_remote_retrieve_response_code( $response );
		$body = json_decode( wp_remote_retrieve_body( $response ), true );

		if ( 200 !== $code || ! is_array( $body ) ) {
			$error = isset( $body['error'] ) ? $body['error'] : __( 'Failed to fetch status.', 'cookieframe' );
			wp_send_json_error( array( 'message' => $error ) );
		}

		wp_send_json_success( $body );
	}

	/**
	 * AJAX: Resend the email verification email via the CookieFrame API.
	 */
	public function ajax_resend_verification() {
		check_ajax_referer( 'cookieframe_admin_nonce', 'nonce' );

		if ( ! current_user_can( 'manage_options' ) ) {
			wp_send_json_error( array( 'message' => __( 'Permission denied.', 'cookieframe' ) ) );
		}

		$options   = CookieFrame::get_options();
		$domain_id = $options['domain_id'];
		$api_key   = CookieFrame::get_api_key();

		if ( empty( $domain_id ) || empty( $api_key ) ) {
			wp_send_json_error( array( 'message' => __( 'Not connected.', 'cookieframe' ) ) );
		}

		$response = wp_remote_post(
			COOKIEFRAME_API_URL . '/api/integrations/wordpress/resend-verification',
			array(
				'timeout' => 15,
				'headers' => array(
					'Content-Type'  => 'application/json',
					'Authorization' => 'Bearer ' . $api_key,
				),
				'body'    => wp_json_encode( array(
					'domainId' => $domain_id,
				) ),
			)
		);

		if ( is_wp_error( $response ) ) {
			wp_send_json_error( array( 'message' => $response->get_error_message() ) );
		}

		$code = wp_remote_retrieve_response_code( $response );
		$body = json_decode( wp_remote_retrieve_body( $response ), true );

		if ( $code < 200 || $code >= 300 ) {
			$error = isset( $body['error'] ) ? $body['error'] : __( 'Failed to send verification email.', 'cookieframe' );
			wp_send_json_error( array( 'message' => $error ) );
		}

		wp_send_json_success();
	}

	/**
	 * AJAX: Disconnect the domain by clearing stored options.
	 */
	public function ajax_disconnect() {
		check_ajax_referer( 'cookieframe_admin_nonce', 'nonce' );

		if ( ! current_user_can( 'manage_options' ) ) {
			wp_send_json_error( array( 'message' => __( 'Permission denied.', 'cookieframe' ) ) );
		}

		$defaults = CookieFrame::get_defaults();
		update_option( CookieFrame::OPTION_NAME, $defaults );

		wp_send_json_success();
	}

	/**
	 * AJAX: Dismiss the review reminder notice.
	 */
	public function ajax_dismiss_review() {
		check_ajax_referer( 'cookieframe_admin_nonce', 'nonce' );

		if ( ! current_user_can( 'manage_options' ) ) {
			wp_send_json_error( array( 'message' => __( 'Permission denied.', 'cookieframe' ) ) );
		}

		$dismiss_action = isset( $_POST['dismiss_action'] ) ? sanitize_text_field( wp_unslash( $_POST['dismiss_action'] ) ) : '';
		$allowed        = array( 'review', 'later', 'already' );

		if ( ! in_array( $dismiss_action, $allowed, true ) ) {
			wp_send_json_error( array( 'message' => __( 'Invalid action.', 'cookieframe' ) ) );
		}

		$review = get_option( 'cookieframe_review_notice', array() );

		if ( 'later' === $dismiss_action ) {
			$review['status']       = 'snoozed';
			$review['snoozed_at']   = time();
			$review['snooze_count'] = isset( $review['snooze_count'] ) ? (int) $review['snooze_count'] + 1 : 1;

			// Auto-dismiss after second snooze.
			if ( $review['snooze_count'] >= 2 ) {
				$review['status'] = 'dismissed';
			}
		} else {
			$review['status'] = 'dismissed';
		}

		update_option( 'cookieframe_review_notice', $review );

		wp_send_json_success();
	}

	/**
	 * Render the settings page.
	 */
	public function render_settings_page() {
		$options      = CookieFrame::get_options();
		$is_connected = ! empty( $options['domain_id'] );
		?>
		<div class="wrap cookieframe-wrap">
			<!-- Hidden h1 so WordPress injects admin_notices here, above our layout -->
			<h1 class="cookieframe-screen-title"><?php esc_html_e( 'CookieFrame Settings', 'cookieframe' ); ?></h1>

			<form method="post" action="options.php" id="cookieframe-settings-form">
				<?php settings_fields( 'cookieframe_settings' ); ?>
				<input type="hidden" name="<?php echo esc_attr( CookieFrame::OPTION_NAME ); ?>[domain_id]" id="cookieframe-domain-id-hidden" value="<?php echo esc_attr( $options['domain_id'] ); ?>" />
				<input type="hidden" name="<?php echo esc_attr( CookieFrame::OPTION_NAME ); ?>[domain_name]" id="cookieframe-domain-name-hidden" value="<?php echo esc_attr( $options['domain_name'] ); ?>" />

				<!-- Branded header -->
				<div class="cookieframe-header">
					<div class="cookieframe-header__brand">
						<svg class="cookieframe-header__logo" width="32" height="32" viewBox="0 0 100 100" fill="none" xmlns="http://www.w3.org/2000/svg">
							<path d="M71.6094 0C84.831 0 91.4424 -1.68664e-05 95.5498 4.10742C99.657 8.21482 99.6572 14.8257 99.6572 28.0469V71.9521C99.6572 85.1738 99.6572 91.7851 95.5498 95.8926C91.4424 100 84.831 100 71.6094 100H28.0469C14.8258 100 8.21483 99.9997 4.10742 95.8926C-1.68664e-05 91.7851 0 85.1738 0 71.9521V28.0469C6.08816e-10 14.8255 3.31406e-05 8.21481 4.10742 4.10742C8.21481 3.22226e-05 14.8255 5.86668e-10 28.0469 0H71.6094Z" fill="white"/>
							<path d="M71.6094 0C84.831 0 91.4424 -1.68664e-05 95.5498 4.10742C99.657 8.21482 99.6572 14.8257 99.6572 28.0469V71.9521C99.6572 85.1738 99.6572 91.7851 95.5498 95.8926C91.4424 100 84.831 100 71.6094 100H28.0469C14.8258 100 8.21483 99.9997 4.10742 95.8926C-1.68664e-05 91.7851 0 85.1738 0 71.9521V28.0469C6.08816e-10 14.8255 3.31406e-05 8.21481 4.10742 4.10742C8.21481 3.22226e-05 14.8255 5.86668e-10 28.0469 0H71.6094ZM49.4678 18.6797C48.5207 20.0602 46.5917 21.502 44.4492 22.7773C42.3332 24.0369 40.1104 25.076 38.6816 25.6758C33.0797 28.0274 27.1056 27.8079 22.5586 25.9238L22.123 25.7363C20.758 25.1259 19.299 26.1524 19.2988 27.6025C19.2988 53.2592 26.8585 66.7873 34.5537 73.8936C38.392 77.438 42.2367 79.3575 45.1299 80.3916C46.5758 80.9084 47.7847 81.2042 48.6377 81.3711C49.0642 81.4545 49.4024 81.5064 49.6367 81.5371C49.7537 81.5524 49.8456 81.5629 49.9092 81.5693C49.9406 81.5725 49.9658 81.5746 49.9834 81.5762C49.992 81.5769 49.9997 81.5777 50.0049 81.5781C50.0071 81.5783 50.0092 81.578 50.0107 81.5781L50.0127 81.5791C50.0135 81.5792 50.0143 81.5784 50.0684 80.8516L50.0146 81.5791L50.0684 81.583L50.123 81.5791L50.0684 80.8516C50.1196 81.5401 50.1231 81.5772 50.124 81.5791L50.127 81.5781C50.1285 81.578 50.1306 81.5783 50.1328 81.5781C50.138 81.5777 50.1456 81.5769 50.1543 81.5762C50.1719 81.5746 50.1969 81.5725 50.2285 81.5693C50.2921 81.5629 50.3839 81.5524 50.501 81.5371C50.7352 81.5064 51.0736 81.4545 51.5 81.3711C52.353 81.2042 53.5619 80.9084 55.0078 80.3916C57.901 79.3576 61.7456 77.438 65.584 73.8936C73.2793 66.7874 80.8389 53.2593 80.8389 27.6025C80.8387 26.1523 79.3798 25.1259 78.0146 25.7363C73.4182 27.7912 67.2385 28.1032 61.4561 25.6758C60.0272 25.0759 57.8044 24.0369 55.6885 22.7773C53.5461 21.502 51.6171 20.0602 50.6699 18.6797L50.0684 17.8037L49.4678 18.6797ZM50.0684 28.1221C53.2579 30.2808 56.7304 31.8682 58.5889 32.6484C62.2088 34.1679 66.0293 34.9377 69.9414 34.9375C71.0145 34.9375 72.0835 34.8773 73.1387 34.7588C72.043 51.7757 67.0701 61.4129 62.0098 66.8672C56.9846 72.2835 51.8093 73.6473 50.0684 73.9668C48.3264 73.6469 43.1521 72.2824 38.1279 66.8672C33.0677 61.4129 28.0927 51.7756 26.9971 34.7588C28.0529 34.8776 29.1227 34.9385 30.1963 34.9385C34.1087 34.9384 37.9294 34.1679 41.5488 32.6484C43.4073 31.8683 46.879 30.2807 50.0684 28.1221Z" fill="#2580FF"/>
						</svg>
						<span class="cookieframe-header__name">CookieFrame</span>
						<span class="cookieframe-header__version">v<?php echo esc_html( COOKIEFRAME_VERSION ); ?></span>
					</div>
					<div class="cookieframe-header__links">
						<a href="<?php echo esc_url( COOKIEFRAME_API_URL . '/docs' ); ?>" target="_blank" rel="noopener noreferrer"><?php esc_html_e( 'Documentation', 'cookieframe' ); ?></a>
						<a href="<?php echo esc_url( COOKIEFRAME_API_URL . '/app' ); ?>" target="_blank" rel="noopener noreferrer"><?php esc_html_e( 'Dashboard', 'cookieframe' ); ?></a>
					</div>
				</div>

				<div class="cookieframe-layout">

					<!-- ============ MAIN COLUMN ============ -->
					<div class="cookieframe-main">

						<!-- Review reminder -->
						<?php $this->render_review_notice(); ?>

						<!-- Connection card -->
						<div class="cookieframe-card" id="cookieframe-connection">
							<div class="cookieframe-card__header">
								<h2><?php esc_html_e( 'Connection', 'cookieframe' ); ?></h2>
								<span id="cookieframe-status-badge" class="cookieframe-badge <?php echo $is_connected ? 'cookieframe-badge--success' : 'cookieframe-badge--warning'; ?>">
									<?php echo $is_connected ? esc_html__( 'Connected', 'cookieframe' ) : esc_html__( 'Not connected', 'cookieframe' ); ?>
								</span>
							</div>

							<!-- Connected state -->
							<div id="cookieframe-connected" style="<?php echo $is_connected ? '' : 'display:none;'; ?>">
								<div id="cookieframe-email-verification" class="cookieframe-notice cookieframe-notice--warning" style="display:none;">
									<div class="cookieframe-notice__content">
										<strong><?php esc_html_e( 'Email not verified', 'cookieframe' ); ?></strong>
										<p><?php esc_html_e( 'Please check your inbox and verify your email address to secure your account.', 'cookieframe' ); ?></p>
									</div>
									<button type="button" class="cookieframe-btn cookieframe-btn--secondary cookieframe-btn--sm" id="cookieframe-resend-verification"><?php esc_html_e( 'Resend Email', 'cookieframe' ); ?></button>
								</div>
								<div class="cookieframe-connected-info">
									<div class="cookieframe-connected-info__row">
										<span class="cookieframe-connected-info__label"><?php esc_html_e( 'Domain', 'cookieframe' ); ?></span>
										<strong id="cookieframe-domain-display"><?php echo esc_html( $options['domain_name'] ); ?></strong>
									</div>
									<div class="cookieframe-connected-info__row">
										<span class="cookieframe-connected-info__label"><?php esc_html_e( 'Domain ID', 'cookieframe' ); ?></span>
										<code id="cookieframe-id-display"><?php echo esc_html( $options['domain_id'] ); ?></code>
									</div>
									<div class="cookieframe-connected-info__row">
										<span class="cookieframe-connected-info__label"><?php esc_html_e( 'Status', 'cookieframe' ); ?></span>
										<span class="cookieframe-connected-info__badges">
											<span class="cookieframe-badge cookieframe-badge--loading" id="cookieframe-banner-badge"></span>
											<span class="cookieframe-badge cookieframe-badge--loading" id="cookieframe-install-badge"></span>
										</span>
									</div>
								</div>
								<!-- Key Metrics (4-card grid) -->
								<div class="cookieframe-stats-grid" id="cookieframe-stats-grid">
									<div class="cookieframe-stat">
										<span class="cookieframe-stat__value cookieframe-stat__skeleton" id="cookieframe-stat-cookies">&mdash;</span>
										<span class="cookieframe-stat__label"><?php esc_html_e( 'Cookies', 'cookieframe' ); ?></span>
										<span class="cookieframe-stat__subtitle" id="cookieframe-stat-cookies-sub" style="display:none;"></span>
									</div>
									<div class="cookieframe-stat">
										<span class="cookieframe-stat__value cookieframe-stat__skeleton" id="cookieframe-stat-categories">&mdash;</span>
										<span class="cookieframe-stat__label"><?php esc_html_e( 'Categories', 'cookieframe' ); ?></span>
									</div>
									<div class="cookieframe-stat">
										<span class="cookieframe-stat__value cookieframe-stat__skeleton" id="cookieframe-stat-consents">&mdash;</span>
										<span class="cookieframe-stat__label"><?php esc_html_e( 'Consents', 'cookieframe' ); ?></span>
									</div>
									<div class="cookieframe-stat">
										<span class="cookieframe-stat__value cookieframe-stat__skeleton" id="cookieframe-stat-scan">&mdash;</span>
										<span class="cookieframe-stat__label"><?php esc_html_e( 'Last Scan', 'cookieframe' ); ?></span>
									</div>
								</div>
								<div class="cookieframe-connected-actions">
									<a href="<?php echo esc_url( COOKIEFRAME_API_URL . '/app' ); ?>" target="_blank" rel="noopener noreferrer" class="cookieframe-btn cookieframe-btn--primary"><?php esc_html_e( 'Open Dashboard', 'cookieframe' ); ?></a>
									<button type="button" class="cookieframe-btn cookieframe-btn--subtle" id="cookieframe-disconnect"><?php esc_html_e( 'Disconnect', 'cookieframe' ); ?></button>
								</div>
							</div>

							<!-- Disconnected state -->
							<div id="cookieframe-disconnected" style="<?php echo $is_connected ? 'display:none;' : ''; ?>">

								<!-- Path A: Domain ID -->
								<div class="cookieframe-section">
									<div class="cookieframe-section__icon">
										<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="#2580ff" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"/><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"/></svg>
									</div>
									<h3><?php esc_html_e( 'Connect with Domain ID', 'cookieframe' ); ?></h3>
									<p><?php esc_html_e( 'Paste the 8-character ID from your CookieFrame dashboard.', 'cookieframe' ); ?></p>
									<div class="cookieframe-input-group">
										<div class="cookieframe-input-wrap">
											<input type="text" id="cookieframe-domain-id-input" placeholder="a1b2c3d4" maxlength="8" autocomplete="off" spellcheck="false" />
										</div>
										<button type="button" class="cookieframe-btn cookieframe-btn--primary" id="cookieframe-validate"><?php esc_html_e( 'Connect', 'cookieframe' ); ?></button>
									</div>
									<p class="cookieframe-message" id="cookieframe-validate-message"></p>
									<p class="cookieframe-hint"><?php
										printf(
											/* translators: %s: link to CookieFrame dashboard */
											esc_html__( 'Find it in your %s under domain settings.', 'cookieframe' ),
											'<a href="' . esc_url( COOKIEFRAME_API_URL . '/app' ) . '" target="_blank" rel="noopener noreferrer">' . esc_html__( 'dashboard', 'cookieframe' ) . '</a>'
										);
									?></p>
								</div>

								<div class="cookieframe-divider"><span><?php esc_html_e( 'or', 'cookieframe' ); ?></span></div>

								<!-- Path B: Register -->
								<div class="cookieframe-section">
									<div class="cookieframe-section__icon">
										<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="#2580ff" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M4.5 16.5c-1.5 1.26-2 5-2 5s3.74-.5 5-2c.71-.84.7-2.13-.09-2.91a2.18 2.18 0 0 0-2.91-.09Z"/><path d="M12 15l-3-3a22 22 0 0 1 2-3.95A12.88 12.88 0 0 1 22 2c0 2.72-.78 7.5-6 11a22.35 22.35 0 0 1-4 2Z"/><path d="M9 12H4s.55-3.03 2-4c1.62-1.08 5 0 5 0"/><path d="M12 15v5s3.03-.55 4-2c1.08-1.62 0-5 0-5"/></svg>
									</div>
									<h3><?php esc_html_e( 'New to CookieFrame?', 'cookieframe' ); ?></h3>
									<p><?php esc_html_e( 'Create a free account and connect this site instantly.', 'cookieframe' ); ?></p>
									<?php
									$current_user = wp_get_current_user();
									$prefill_name = trim( $current_user->first_name . ' ' . $current_user->last_name );
									if ( empty( $prefill_name ) ) {
										$prefill_name = $current_user->display_name;
									}
									?>
									<div class="cookieframe-form-rows">
										<div class="cookieframe-form-row">
											<label for="cookieframe-register-name"><?php esc_html_e( 'Full Name', 'cookieframe' ); ?></label>
											<div class="cookieframe-input-wrap">
												<input type="text" id="cookieframe-register-name" value="<?php echo esc_attr( $prefill_name ); ?>" maxlength="100" />
											</div>
										</div>
										<div class="cookieframe-form-row">
											<label for="cookieframe-register-email"><?php esc_html_e( 'Email', 'cookieframe' ); ?></label>
											<div class="cookieframe-input-wrap">
												<input type="email" id="cookieframe-register-email" value="<?php echo esc_attr( $current_user->user_email ); ?>" />
											</div>
										</div>
										<div class="cookieframe-form-row">
											<label for="cookieframe-register-url"><?php esc_html_e( 'Site URL', 'cookieframe' ); ?></label>
											<div class="cookieframe-input-wrap">
												<input type="url" id="cookieframe-register-url" value="<?php echo esc_url( site_url() ); ?>" />
											</div>
										</div>
									</div>
									<button type="button" class="cookieframe-btn cookieframe-btn--primary cookieframe-btn--arrow" id="cookieframe-register"><?php esc_html_e( 'Create Account & Connect', 'cookieframe' ); ?></button>
									<p class="cookieframe-message" id="cookieframe-register-message"></p>
								</div>
							</div>
						</div>

						<!-- Script Settings (only when connected) -->
						<div class="cookieframe-card" id="cookieframe-script-settings" style="<?php echo $is_connected ? '' : 'display:none;'; ?>">
							<div class="cookieframe-card__header">
								<h2><?php esc_html_e( 'Script Settings', 'cookieframe' ); ?></h2>
							</div>
							<div class="cookieframe-settings-fields">
								<div class="cookieframe-settings-row">
									<span class="cookieframe-settings-row__label"><?php esc_html_e( 'Consent banner', 'cookieframe' ); ?></span>
									<div class="cookieframe-settings-row__control">
										<label class="cookieframe-toggle">
											<input type="checkbox" name="<?php echo esc_attr( CookieFrame::OPTION_NAME ); ?>[enabled]" value="1" <?php checked( $options['enabled'] ); ?> />
											<span class="cookieframe-toggle__slider"></span>
											<span class="cookieframe-toggle__label"><?php esc_html_e( 'Inject CookieFrame script on the front end', 'cookieframe' ); ?></span>
										</label>
									</div>
								</div>
								<div class="cookieframe-settings-row">
									<span class="cookieframe-settings-row__label"><?php esc_html_e( 'Script placement', 'cookieframe' ); ?></span>
									<div class="cookieframe-settings-row__control">
										<div class="cookieframe-segment">
											<input type="radio" name="<?php echo esc_attr( CookieFrame::OPTION_NAME ); ?>[script_position]" value="head" id="cf-pos-head" <?php checked( $options['script_position'], 'head' ); ?> />
											<label for="cf-pos-head"><code>&lt;head&gt;</code></label>
											<input type="radio" name="<?php echo esc_attr( CookieFrame::OPTION_NAME ); ?>[script_position]" value="footer" id="cf-pos-footer" <?php checked( $options['script_position'], 'footer' ); ?> />
											<label for="cf-pos-footer"><code>&lt;footer&gt;</code></label>
										</div>
									</div>
								</div>
								<div class="cookieframe-settings-row">
									<span class="cookieframe-settings-row__label"><?php esc_html_e( 'Excluded pages', 'cookieframe' ); ?></span>
									<div class="cookieframe-settings-row__control">
										<div class="cookieframe-token-input" id="cookieframe-excluded-wrap">
											<div class="cookieframe-token-input__chips" id="cookieframe-excluded-chips"></div>
											<input type="text" class="cookieframe-token-input__search" id="cookieframe-excluded-search" placeholder="<?php esc_attr_e( 'Search pages and posts...', 'cookieframe' ); ?>" autocomplete="off" />
											<ul class="cookieframe-token-input__dropdown" id="cookieframe-excluded-dropdown"></ul>
										</div>
										<input type="hidden" name="<?php echo esc_attr( CookieFrame::OPTION_NAME ); ?>[excluded_posts]" id="cookieframe-excluded-posts" value="<?php echo esc_attr( $options['excluded_posts'] ); ?>" />
										<p class="cookieframe-field-hint"><?php esc_html_e( 'Pages and posts where the consent banner will not appear.', 'cookieframe' ); ?></p>
									</div>
								</div>
							</div>
							<div class="cookieframe-settings-actions">
								<button type="submit" class="cookieframe-btn cookieframe-btn--primary"><?php esc_html_e( 'Save Settings', 'cookieframe' ); ?></button>
							</div>
						</div>

						<!-- Banner design CTA (only when connected) -->
						<div class="cookieframe-card cookieframe-banner-design-card" id="cookieframe-banner-design" style="<?php echo $is_connected ? '' : 'display:none;'; ?>">
							<div class="cookieframe-banner-design-content">
								<div class="cookieframe-banner-design-icon">
									<svg viewBox="0 0 24 24" fill="none" stroke="#fff" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M12 19l7-7 3 3-7 7-3-3z"/><path d="M18 13l-1.5-7.5L2 2l3.5 14.5L13 18l5-5z"/><path d="M2 2l7.586 7.586"/><circle cx="11" cy="11" r="2"/></svg>
								</div>
								<div class="cookieframe-banner-design-text">
									<p class="cookieframe-banner-design-title"><?php esc_html_e( 'Design Your Banner', 'cookieframe' ); ?></p>
									<p class="cookieframe-banner-design-desc"><?php esc_html_e( 'Customize colors, text, layout, and behavior to match your site.', 'cookieframe' ); ?></p>
								</div>
								<a href="<?php echo esc_url( COOKIEFRAME_API_URL . '/app' ); ?>" target="_blank" rel="noopener noreferrer" class="cookieframe-btn cookieframe-btn--white cookieframe-btn--arrow"><?php esc_html_e( 'Customize Design', 'cookieframe' ); ?></a>
							</div>
						</div>

						<!-- Shortcodes (only when connected) -->
						<div class="cookieframe-card" id="cookieframe-shortcodes-ref" style="<?php echo $is_connected ? '' : 'display:none;'; ?>">
							<div class="cookieframe-card__header">
								<h2><?php esc_html_e( 'Shortcodes', 'cookieframe' ); ?></h2>
							</div>
							<div class="cookieframe-shortcode">
								<code class="cookieframe-shortcode__code">[cookieframe-preferences]</code>
								<p><?php esc_html_e( 'Renders a link that opens the cookie preferences dialog. Place it in your footer or privacy page.', 'cookieframe' ); ?></p>
								<p class="description"><?php
									printf(
										/* translators: %s: shortcode example */
										esc_html__( 'Example: %s', 'cookieframe' ),
										'<code>[cookieframe-preferences text="Cookie Settings" class="my-link"]</code>'
									);
								?></p>
							</div>
							<hr />
							<div class="cookieframe-shortcode">
								<code class="cookieframe-shortcode__code">[cookieframe-do-not-sell]</code>
								<p><?php esc_html_e( 'Renders a "Do Not Sell My Personal Information" link for CCPA compliance.', 'cookieframe' ); ?></p>
								<p class="description"><?php
									printf(
										/* translators: %s: shortcode example */
										esc_html__( 'Example: %s', 'cookieframe' ),
										'<code>[cookieframe-do-not-sell class="footer-link"]</code>'
									);
								?></p>
							</div>
						</div>

					</div><!-- /.cookieframe-main -->

					<!-- ============ SIDEBAR ============ -->
					<div class="cookieframe-sidebar">

						<!-- Status widget -->
						<div class="cookieframe-card cookieframe-sidebar-card">
							<h3><?php esc_html_e( 'Consent Banner', 'cookieframe' ); ?></h3>
							<p class="cookieframe-sidebar-card__status">
								<?php if ( $is_connected && $options['enabled'] ) : ?>
									<span class="cookieframe-badge cookieframe-badge--success"><?php esc_html_e( 'Active', 'cookieframe' ); ?></span>
								<?php elseif ( $is_connected ) : ?>
									<span class="cookieframe-badge cookieframe-badge--warning"><?php esc_html_e( 'Disabled', 'cookieframe' ); ?></span>
								<?php else : ?>
									<span class="cookieframe-badge cookieframe-badge--muted"><?php esc_html_e( 'Not configured', 'cookieframe' ); ?></span>
								<?php endif; ?>
							</p>
						</div>

						<!-- Features widget -->
						<div class="cookieframe-card cookieframe-sidebar-card">
							<h3><?php esc_html_e( 'Included Features', 'cookieframe' ); ?></h3>
							<ul class="cookieframe-features">
								<li>
									<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="#2580ff" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><line x1="2" y1="12" x2="22" y2="12"/><path d="M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z"/></svg>
									<?php esc_html_e( 'Geo-detection', 'cookieframe' ); ?>
								</li>
								<li>
									<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="#2580ff" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><rect x="3" y="11" width="18" height="11" rx="2" ry="2"/><path d="M7 11V7a5 5 0 0 1 10 0v4"/></svg>
									<?php esc_html_e( 'Script blocking', 'cookieframe' ); ?>
								</li>
								<li>
									<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="#2580ff" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M22 11.08V12a10 10 0 1 1-5.93-9.14"/><polyline points="22 4 12 14.01 9 11.01"/></svg>
									<?php esc_html_e( 'Google Consent Mode v2', 'cookieframe' ); ?>
								</li>
								<li>
									<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="#2580ff" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M5 8l6 6"/><path d="M4 14l6 6"/><path d="M2 5h12"/><path d="M7 2h1"/><path d="M22 22l-5-10-5 10"/><path d="M14 18h6"/></svg>
									<?php esc_html_e( 'Multi-language (50+)', 'cookieframe' ); ?>
								</li>
								<li>
									<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="#2580ff" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="3"/><path d="M19.4 15a1.65 1.65 0 0 0 .33 1.82l.06.06a2 2 0 0 1-2.83 2.83l-.06-.06a1.65 1.65 0 0 0-1.82-.33 1.65 1.65 0 0 0-1 1.51V21a2 2 0 0 1-4 0v-.09A1.65 1.65 0 0 0 9 19.4a1.65 1.65 0 0 0-1.82.33l-.06.06a2 2 0 0 1-2.83-2.83l.06-.06A1.65 1.65 0 0 0 4.68 15a1.65 1.65 0 0 0-1.51-1H3a2 2 0 0 1 0-4h.09A1.65 1.65 0 0 0 4.6 9a1.65 1.65 0 0 0-.33-1.82l-.06-.06a2 2 0 0 1 2.83-2.83l.06.06A1.65 1.65 0 0 0 9 4.68a1.65 1.65 0 0 0 1-1.51V3a2 2 0 0 1 4 0v.09a1.65 1.65 0 0 0 1 1.51 1.65 1.65 0 0 0 1.82-.33l.06-.06a2 2 0 0 1 2.83 2.83l-.06.06A1.65 1.65 0 0 0 19.4 9a1.65 1.65 0 0 0 1.51 1H21a2 2 0 0 1 0 4h-.09a1.65 1.65 0 0 0-1.51 1z"/></svg>
									<?php esc_html_e( 'Customizable banners', 'cookieframe' ); ?>
								</li>
								<li>
									<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="#2580ff" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><polygon points="13 2 3 14 12 14 11 22 21 10 12 10 13 2"/></svg>
									<?php esc_html_e( 'Lightweight (< 30 KB)', 'cookieframe' ); ?>
								</li>
								<li>
									<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="#2580ff" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M18 20V10"/><path d="M12 20V4"/><path d="M6 20v-6"/></svg>
									<?php esc_html_e( 'Analytics & logs', 'cookieframe' ); ?>
								</li>
								<li>
									<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="#2580ff" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><rect x="2" y="6" width="20" height="12" rx="2"/><path d="M12 12h.01"/><path d="M17 12h.01"/><path d="M7 12h.01"/></svg>
									<?php esc_html_e( 'WP Consent API', 'cookieframe' ); ?>
								</li>
							</ul>
						</div>

						<!-- Help widget -->
						<div class="cookieframe-card cookieframe-sidebar-card">
							<h3><?php esc_html_e( 'Need Help?', 'cookieframe' ); ?></h3>
							<ul class="cookieframe-help-links">
								<li><a href="<?php echo esc_url( COOKIEFRAME_API_URL . '/docs/getting-started' ); ?>" target="_blank" rel="noopener noreferrer"><?php esc_html_e( 'Getting Started Guide', 'cookieframe' ); ?> &rarr;</a></li>
								<li><a href="<?php echo esc_url( COOKIEFRAME_API_URL . '/docs/integrations/wordpress' ); ?>" target="_blank" rel="noopener noreferrer"><?php esc_html_e( 'WordPress Integration', 'cookieframe' ); ?> &rarr;</a></li>
								<li><a href="<?php echo esc_url( COOKIEFRAME_API_URL . '/docs/integrations/google-tag-manager' ); ?>" target="_blank" rel="noopener noreferrer"><?php esc_html_e( 'Google Tag Manager', 'cookieframe' ); ?> &rarr;</a></li>
								<li><a href="mailto:contact@cookieframe.com"><?php esc_html_e( 'Contact Support', 'cookieframe' ); ?> &rarr;</a></li>
							</ul>
						</div>

					</div><!-- /.cookieframe-sidebar -->

				</div><!-- /.cookieframe-layout -->
			</form>
		</div>
		<?php
	}

	/**
	 * Handle deactivation feedback submission.
	 */
	public function ajax_submit_feedback() {
		check_ajax_referer( 'cookieframe_admin_nonce', 'nonce' );

		if ( ! current_user_can( 'activate_plugins' ) ) {
			wp_send_json_error( array( 'message' => __( 'Permission denied.', 'cookieframe' ) ) );
		}

		$valid_reasons = array(
			'couldnt_get_it_to_work',
			'theme_plugin_conflict',
			'found_alternative',
			'missing_features',
			'temporary',
			'other',
		);

		$reason = isset( $_POST['reason'] ) ? sanitize_text_field( wp_unslash( $_POST['reason'] ) ) : '';
		if ( ! in_array( $reason, $valid_reasons, true ) ) {
			wp_send_json_error( array( 'message' => __( 'Invalid reason.', 'cookieframe' ) ) );
		}

		$details = isset( $_POST['details'] ) ? sanitize_textarea_field( wp_unslash( $_POST['details'] ) ) : '';
		$options = CookieFrame::get_options();

		$body = array(
			'reason'        => $reason,
			'siteUrl'       => site_url(),
			'wpVersion'     => get_bloginfo( 'version' ),
			'pluginVersion' => COOKIEFRAME_VERSION,
		);

		if ( ! empty( $details ) ) {
			$body['details'] = substr( $details, 0, 1000 );
		}

		if ( ! empty( $options['domain_id'] ) ) {
			$body['domainId'] = $options['domain_id'];
		}

		$response = wp_remote_post(
			COOKIEFRAME_API_URL . '/api/integrations/wordpress/feedback',
			array(
				'timeout' => 10,
				'headers' => array( 'Content-Type' => 'application/json' ),
				'body'    => wp_json_encode( $body ),
			)
		);

		if ( is_wp_error( $response ) ) {
			wp_send_json_error( array( 'message' => $response->get_error_message() ) );
		}

		wp_send_json_success();
	}

	/**
	 * Render deactivation feedback modal on the plugins page.
	 */
	public function render_deactivation_modal() {
		$deactivate_url = wp_nonce_url(
			admin_url( 'plugins.php?action=deactivate&plugin=' . rawurlencode( COOKIEFRAME_PLUGIN_BASENAME ) ),
			'deactivate-plugin_' . COOKIEFRAME_PLUGIN_BASENAME
		);
		?>
		<div id="cookieframe-deactivation-overlay" style="display:none;position:fixed;inset:0;z-index:100000;background:rgba(0,0,0,0.5);backdrop-filter:blur(2px);align-items:center;justify-content:center;">
			<div style="background:#fff;border-radius:12px;max-width:460px;width:calc(100% - 32px);padding:28px 24px;box-shadow:0 20px 60px rgba(0,0,0,0.15);font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;">
				<div style="display:flex;align-items:center;gap:10px;margin-bottom:16px;">
					<svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="#2580ff" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M12 22c5.523 0 10-4.477 10-10S17.523 2 12 2 2 6.477 2 12s4.477 10 10 10z"/><path d="M12 8v4"/><path d="M12 16h.01"/></svg>
					<strong style="font-size:16px;color:#111;"><?php esc_html_e( 'Quick feedback before you go?', 'cookieframe' ); ?></strong>
				</div>
				<p style="color:#666;font-size:13px;margin:0 0 16px;line-height:1.5;"><?php esc_html_e( 'We\'d love to know why so we can improve. This is optional.', 'cookieframe' ); ?></p>
				<div id="cookieframe-deactivation-reasons" style="display:flex;flex-direction:column;gap:8px;margin-bottom:16px;">
					<?php
					$reasons = array(
						'couldnt_get_it_to_work' => __( 'I couldn\'t get it to work', 'cookieframe' ),
						'theme_plugin_conflict'  => __( 'It conflicted with my theme or another plugin', 'cookieframe' ),
						'found_alternative'      => __( 'I found a better alternative', 'cookieframe' ),
						'missing_features'       => __( 'Missing features I needed', 'cookieframe' ),
						'temporary'              => __( 'I\'m only deactivating temporarily', 'cookieframe' ),
						'other'                  => __( 'Other', 'cookieframe' ),
					);
					foreach ( $reasons as $value => $label ) :
					?>
					<label style="display:flex;align-items:center;gap:8px;cursor:pointer;padding:6px 8px;border-radius:6px;font-size:13px;color:#333;transition:background .15s;" onmouseover="this.style.background='#f5f7fa'" onmouseout="this.style.background='transparent'">
						<input type="radio" name="cookieframe_deactivation_reason" value="<?php echo esc_attr( $value ); ?>" style="margin:0;accent-color:#2580ff;" />
						<?php echo esc_html( $label ); ?>
					</label>
					<?php endforeach; ?>
				</div>
				<textarea id="cookieframe-deactivation-details" placeholder="<?php esc_attr_e( 'Tell us more (optional)...', 'cookieframe' ); ?>" style="width:100%;min-height:60px;padding:8px 10px;border:1px solid #ddd;border-radius:6px;font-size:13px;font-family:inherit;resize:vertical;box-sizing:border-box;margin-bottom:16px;"></textarea>
				<div style="display:flex;gap:8px;justify-content:flex-end;">
					<button type="button" id="cookieframe-deactivation-skip" style="padding:8px 16px;border:1px solid #ddd;border-radius:6px;background:#fff;color:#666;font-size:13px;cursor:pointer;font-family:inherit;"><?php esc_html_e( 'Skip & Deactivate', 'cookieframe' ); ?></button>
					<button type="button" id="cookieframe-deactivation-submit" style="padding:8px 16px;border:none;border-radius:6px;background:#2580ff;color:#fff;font-size:13px;cursor:pointer;font-family:inherit;opacity:0.5;" disabled><?php esc_html_e( 'Submit & Deactivate', 'cookieframe' ); ?></button>
				</div>
			</div>
		</div>
		<script>
		(function() {
			var overlay = document.getElementById('cookieframe-deactivation-overlay');
			var skipBtn = document.getElementById('cookieframe-deactivation-skip');
			var submitBtn = document.getElementById('cookieframe-deactivation-submit');
			var detailsField = document.getElementById('cookieframe-deactivation-details');
			var deactivateUrl = <?php echo wp_json_encode( $deactivate_url ); ?>;
			var ajaxUrl = <?php echo wp_json_encode( admin_url( 'admin-ajax.php' ) ); ?>;
			var nonce = <?php echo wp_json_encode( wp_create_nonce( 'cookieframe_admin_nonce' ) ); ?>;

			// Intercept the deactivate link
			var pluginRow = document.querySelector('tr[data-plugin="<?php echo esc_js( COOKIEFRAME_PLUGIN_BASENAME ); ?>"]');
			if (!pluginRow) return;

			var deactivateLink = pluginRow.querySelector('.deactivate a');
			if (!deactivateLink) return;

			deactivateUrl = deactivateLink.href;

			deactivateLink.addEventListener('click', function(e) {
				e.preventDefault();
				overlay.style.display = 'flex';
			});

			// Enable submit when a reason is selected
			var radios = overlay.querySelectorAll('input[name="cookieframe_deactivation_reason"]');
			for (var i = 0; i < radios.length; i++) {
				radios[i].addEventListener('change', function() {
					submitBtn.disabled = false;
					submitBtn.style.opacity = '1';
				});
			}

			// Close on overlay click (outside modal)
			overlay.addEventListener('click', function(e) {
				if (e.target === overlay) {
					overlay.style.display = 'none';
				}
			});

			// Skip: just deactivate
			skipBtn.addEventListener('click', function() {
				window.location.href = deactivateUrl;
			});

			// Submit: send feedback, then deactivate
			submitBtn.addEventListener('click', function() {
				var selected = overlay.querySelector('input[name="cookieframe_deactivation_reason"]:checked');
				if (!selected) return;

				submitBtn.disabled = true;
				submitBtn.textContent = <?php echo wp_json_encode( __( 'Submitting...', 'cookieframe' ) ); ?>;

				var formData = new FormData();
				formData.append('action', 'cookieframe_submit_feedback');
				formData.append('nonce', nonce);
				formData.append('reason', selected.value);
				formData.append('details', detailsField.value);

				var xhr = new XMLHttpRequest();
				xhr.open('POST', ajaxUrl, true);
				xhr.onloadend = function() {
					window.location.href = deactivateUrl;
				};
				xhr.send(formData);

				// Failsafe: deactivate after 5 seconds even if request hangs
				setTimeout(function() {
					window.location.href = deactivateUrl;
				}, 5000);
			});
		})();
		</script>
		<?php
	}
}