<?php
namespace CustomFields\Local;

if (!defined('ABSPATH')) { exit; }

/** Composite fields retain native values and validate every nested write. */
final class Fields {
    const MAX_DEPTH = 3;
    const MAX_CHILDREN = 20;
    const MAX_ROWS = 100;
    const MAX_SCHEMA_FIELDS = 200;
    const MAX_VALUE_NODES = 4000;
    const CHILD_TYPES = array('text', 'textarea', 'wysiwyg', 'number', 'email', 'url', 'select', 'checkbox', 'date', 'color', 'image', 'file', 'radio', 'multiselect', 'checkboxes', 'time', 'datetime', 'post', 'user', 'taxonomy', 'gallery', 'group', 'repeater');
    private static $sanitize_depth = 0;
    private static $value_nodes = 0;

    public static function init() {
        add_filter('customfields_field_types', array(__CLASS__, 'types'));
        add_filter('customfields_validate_field_schema', array(__CLASS__, 'validate'), 20, 3);
        add_filter('customfields_sanitize_value', array(__CLASS__, 'sanitize'), 10, 4);
        add_action('customfields_render_field', array(__CLASS__, 'render'), 10, 3);
        add_action('customfields_field_editor_settings', array(__CLASS__, 'editor'), 10, 2);
        add_filter('customfields_group_targets', array(__CLASS__, 'targets'));
        add_filter('customfields_validate_group_schema', array(__CLASS__, 'validate_group'), 20, 2);
        add_filter('customfields_supported_field_settings', array(__CLASS__, 'supported_settings'));
        add_filter('customfields_storage_error', array(__CLASS__, 'storage_error'), 10, 3);
        add_action('customfields_group_editor_settings', array(__CLASS__, 'group_editor'));
    }

    public static function supported_settings($settings) {
        return array_merge($settings, array('sub_fields', 'min_rows', 'max_rows'));
    }

    public static function targets($targets) {
        $targets['options'] = __('Site options', 'customfields-com');
        return $targets;
    }

    public static function types($types) {
        $types['repeater'] = __('Repeater', 'customfields-com');
        $types['group'] = __('Group', 'customfields-com');
        $types['gallery'] = __('Gallery', 'customfields-com');
        return $types;
    }

    private static function error($message) {
        return new \WP_Error('customfields_pro_schema', $message);
    }

    public static function validate($normalized, $raw, $depth = 0) {
        if (is_wp_error($normalized)) { return $normalized; }
        if ($normalized['type'] === 'gallery') {
            if (!array_key_exists('default', $raw) || $raw['default'] === '') { $normalized['default'] = array(); }
            return $normalized;
        }
        if (!in_array($normalized['type'], array('repeater', 'group'), true)) { return $normalized; }
        if ($depth >= self::MAX_DEPTH) {
            return self::error(__('Composite fields support at most three container levels.', 'customfields-com'));
        }
        $children = $raw['sub_fields'] ?? array();
        if (is_string($children)) { $children = json_decode($children, true); }
        if (!is_array($children) || count($children) < 1 || count($children) > self::MAX_CHILDREN) {
            return self::error(__('A repeater or group must contain 1–20 child fields.', 'customfields-com'));
        }
        $normalized['sub_fields'] = array();
        $names = array();
        $keys = array();
        foreach ($children as $child) {
            if (!is_array($child) || !in_array($child['type'] ?? '', apply_filters('customfields_pro_child_types', self::CHILD_TYPES), true)) {
                return self::error(__('This child field type is not supported.', 'customfields-com'));
            }
            $field = \CustomFields\Schema::validate_field($child, $depth + 1);
            if (is_wp_error($field)) { return $field; }
            if (isset($names[$field['name']]) || isset($keys[$field['key']])) {
                return self::error(__('Child field names and keys must be unique within their parent.', 'customfields-com'));
            }
            $names[$field['name']] = true;
            $keys[$field['key']] = true;
            $normalized['sub_fields'][] = $field;
        }
        $conditions = \CustomFields\Conditions::validate_fields($normalized['sub_fields']);
        if (is_wp_error($conditions)) { return $conditions; }
        if (self::schema_size($normalized) > self::MAX_SCHEMA_FIELDS) {
            return self::error(__('A composite field may contain at most 200 total nested fields.', 'customfields-com'));
        }
        if ($normalized['type'] === 'repeater') {
            foreach (array('min_rows' => 0, 'max_rows' => 20) as $key => $default) {
                $value = $raw[$key] ?? $default;
                if (filter_var($value, FILTER_VALIDATE_INT) === false || (int) $value < 0 || (int) $value > self::MAX_ROWS) {
                    return self::error(__('Repeater row limits must be integers between 0 and 100.', 'customfields-com'));
                }
                $normalized[$key] = (int) $value;
            }
            if ($normalized['max_rows'] < 1 || $normalized['min_rows'] > $normalized['max_rows']) {
                return self::error(__('The maximum row count must be 1–100 and at least the minimum.', 'customfields-com'));
            }
        }
        $normalized['default'] = array();
        if (self::minimum_size($normalized) > self::MAX_VALUE_NODES) { return self::error(__('The minimum rows and nested templates exceed 4,000 field controls. Reduce the minimum rows or nesting.', 'customfields-com')); }
        return $normalized;
    }

    /** Project automatic controls, including inert templates, before constructing HTML. */
    public static function minimum_size($field) { return self::render_size($field, $field['default'] ?? null); }

    /** Saturation keeps legacy or programmatically registered schemas bounded too. */
    public static function render_size($field, $value = null, $depth = 0) {
        $limit = self::MAX_VALUE_NODES;
        if (!is_array($field) || $depth > self::MAX_DEPTH) { return $limit + 1; }
        $type = $field['type'] ?? '';
        if ($type === 'gallery') { return 1 + (is_array($value) ? count($value) : 0); }
        if (!in_array($type, array('group', 'clone', 'repeater', 'flexible'), true)) { return 1; }
        $row_size = static function($children, $row) use ($depth, $limit) {
            if (!is_array($children) || count($children) > self::MAX_CHILDREN) { return $limit + 1; }
            $total = 1;
            foreach ($children as $child) {
                $name = $child['name'] ?? '';
                $total += self::render_size($child, is_array($row) && array_key_exists($name, $row) ? $row[$name] : ($child['default'] ?? null), $depth + 1);
                if ($total > $limit) { return $limit + 1; }
            }
            return $total;
        };
        if ($type === 'group' || $type === 'clone') { return $row_size($field['sub_fields'] ?? array(), $value); }
        $minimum = max(0, (int) ($field['min_rows'] ?? 0));
        $rows = is_array($value) ? array_values($value) : array();
        if ($minimum > self::MAX_ROWS || count($rows) > self::MAX_ROWS) { return $limit + 1; }
        $layouts = $type === 'flexible' ? ($field['layouts'] ?? array()) : array();
        if ($type === 'flexible' && (!is_array($layouts) || !$layouts || count($layouts) > 12)) { return $limit + 1; }
        foreach ($layouts as $layout) { if (!is_array($layout) || !is_string($layout['name'] ?? null)) { return $limit + 1; } }
        $first = $layouts ? reset($layouts) : array();
        $by_name = $layouts ? array_column($layouts, null, 'name') : array();
        while (count($rows) < $minimum) { $rows[] = $type === 'flexible' ? array('__layout' => $first['name'] ?? '') : array(); }
        // A repeater renders one blank template; flexible adds one for every layout.
        $total = 1 + $row_size($type === 'flexible' ? ($first['sub_fields'] ?? array()) : ($field['sub_fields'] ?? array()), array());
        foreach ($layouts as $layout) {
            $total += $row_size($layout['sub_fields'] ?? array(), array());
            if ($total > $limit) { return $limit + 1; }
        }
        foreach ($rows as $row) {
            if ($type === 'flexible' && (!is_array($row) || !is_string($row['__layout'] ?? null) || !isset($by_name[$row['__layout']]))) { return $limit + 1; }
            $children = $type === 'flexible' ? $by_name[$row['__layout']]['sub_fields'] : ($field['sub_fields'] ?? array());
            $total += $row_size($children, $row);
            if ($total > $limit) { return $limit + 1; }
        }
        return min($limit + 1, $total);
    }

    private static function schema_size($field) {
        $size = 1;
        foreach ($field['sub_fields'] ?? array() as $child) { $size += self::schema_size($child); }
        foreach ($field['layouts'] ?? array() as $layout) { foreach ($layout['sub_fields'] ?? array() as $child) { $size += self::schema_size($child); } }
        return $size;
    }

    public static function validate_group($group, $raw) {
        if (is_wp_error($group)) { return $group; }
        $minimum = 0;
        foreach ($group['fields'] as $field) {
            $minimum += self::minimum_size($field);
            if ($minimum > self::MAX_VALUE_NODES) { return self::error(__('This group would automatically render more than 4,000 field controls. Reduce its minimum rows or split the group.', 'customfields-com')); }
        }
        if (($group['target'] ?? '') !== 'options') { return $group; }
        $page = $raw['options_page'] ?? array();
        if (!is_array($page) || array_diff(array_keys($page), array('slug', 'title', 'capability'))) { return self::error(__('Options-page settings are invalid.', 'customfields-com')); }
        $slug = $page['slug'] ?? 'site';
        $title = $page['title'] ?? __('Site options', 'customfields-com');
        $cap = $page['capability'] ?? 'manage_options';
        if (!is_string($slug) || !preg_match('/^[a-z][a-z0-9_-]{0,39}$/D', $slug) || !is_string($title) || trim($title) === '' || strlen($title) > 80) {
            return self::error(__('Use an options page slug of 1–40 lowercase characters and a title of 1–80 characters.', 'customfields-com'));
        }
        if (!in_array($cap, self::option_capabilities(), true)) { return self::error(__('Choose an explicitly supported options-page capability.', 'customfields-com')); }
        $group['options_page'] = array('slug' => $slug, 'title' => sanitize_text_field($title), 'capability' => $cap);
        return $group;
    }

    public static function option_capabilities() {
        return array('manage_options', 'edit_theme_options', 'edit_others_posts', 'edit_others_pages');
    }

    /** Compatibility alias: conditional visibility now belongs to the Free plugin. */
    public static function is_active($active, $field, $submitted_values, $post_id = 0) {
        return class_exists('CustomFields\\Conditions') ? \CustomFields\Conditions::is_active($active, $field, $submitted_values, $post_id) : $active;
    }

    public static function conditions($field, $value, $input_name) {
        if (class_exists('CustomFields\\Conditions')) { \CustomFields\Conditions::render($field, $value, $input_name); }
    }

    public static function storage_error($error, $value, $field) {
        if (is_wp_error($error) || !in_array($field['type'] ?? '', array('repeater', 'group', 'gallery'), true)) { return $error; }
        return self::compatible_storage($value, $field) ? null : new \WP_Error('customfields_repeater_storage', __('Existing structured data does not match this schema. Restore the previous schema or migrate its stored values before editing.', 'customfields-com'));
    }

    public static function sanitize($clean, $field, $raw = null, $context = array()) {
        if (!in_array($field['type'] ?? '', array('repeater', 'group', 'gallery'), true)) { return $clean; }
        if (self::$sanitize_depth === 0) { self::$value_nodes = 0; }
        self::$sanitize_depth++;
        try {
            if (++self::$value_nodes > self::MAX_VALUE_NODES) { return self::error(__('This field exceeds the limit of 4,000 nested values.', 'customfields-com')); }
            if (self::$sanitize_depth > self::MAX_DEPTH + 1) { return self::error(__('Nested values exceed the supported depth.', 'customfields-com')); }
            if ($raw === '' || $raw === null) { $raw = array(); }
            if ($field['type'] === 'gallery') {
                self::$value_nodes += is_array($raw) ? count($raw) : 0;
                if (self::$value_nodes > self::MAX_VALUE_NODES) { return self::error(__('This field exceeds the limit of 4,000 nested values.', 'customfields-com')); }
                return self::gallery_value($raw, $field, empty($field['_validating_default']));
            }
            if (!is_array($raw) || array_key_exists('__storage_conflict', $raw)) {
                return new \WP_Error('customfields_repeater', __('Structured values must have a compatible array shape.', 'customfields-com'));
            }
            if (!empty($context['has_stored_value']) && !is_array($context['stored_value'] ?? null)) { return self::error(__('The original structured value has an incompatible shape. Restore its schema or migrate it before editing.', 'customfields-com')); }
            $stored = !empty($context['has_stored_value']) ? $context['stored_value'] : array();
            if (empty($field['_validating_default']) && !empty($context['has_stored_value']) && self::has_nested_conditions($field)) {
                if (!is_string($raw['__cfp_fingerprint'] ?? null) || !hash_equals(self::fingerprint($stored), $raw['__cfp_fingerprint'])) {
                    return self::error(__('These structured values changed after this form opened. Reload before saving so hidden values stay attached to the correct row.', 'customfields-com'));
                }
            }
            unset($raw['__present'], $raw['__cfp_fingerprint']);
            if (!empty($field['_validating_default']) && !$raw) { return array(); }
            if ($field['type'] === 'group') { return self::sanitize_children($raw, $field, $stored); }
            $min = max(!empty($field['required']) ? 1 : 0, $field['min_rows']);
            if (count($raw) < $min || count($raw) > $field['max_rows']) {
                return new \WP_Error('customfields_repeater', sprintf(/* translators: 1: Minimum row count; 2: maximum row count. */ __('Repeater requires between %1$d and %2$d rows.', 'customfields-com'), $min, $field['max_rows']));
            }
            $rows = array();
            foreach ($raw as $index => $row) {
                if (!ctype_digit((string) $index)) { return self::error(__('Repeater row indexes must be nonnegative integers.', 'customfields-com')); }
                if (!is_array($row)) { return self::error(__('A repeater row must be an object.', 'customfields-com')); }
                $has_source = array_key_exists('__cfp_source', $row);
                $source = $row['__cfp_source'] ?? null;
                if (self::has_nested_conditions($field) && !empty($context['has_stored_value']) && !$has_source) {
                    return self::error(__('This row is missing its original identity. Reload the form before saving.', 'customfields-com'));
                }
                if ($has_source && $source !== '' && ((!is_int($source) && !is_string($source)) || !ctype_digit((string) $source) || !array_key_exists((int) $source, $stored))) {
                    return self::error(__('A repeater row references an unavailable original row.', 'customfields-com'));
                }
                $previous = $has_source ? ($source === '' ? array() : $stored[(int) $source]) : ($stored[$index] ?? array());
                unset($row['__cfp_source']);
                $value = self::sanitize_children($row, $field, is_array($previous) ? $previous : array());
                if (is_wp_error($value)) { return $value; }
                $rows[] = $value;
            }
            return $rows;
        } finally {
            self::$sanitize_depth--;
        }
    }

    public static function has_nested_conditions($field) {
        foreach ($field['sub_fields'] ?? array() as $child) {
            if (!empty($child['conditional_logic']) || self::has_nested_conditions($child)) { return true; }
        }
        foreach ($field['layouts'] ?? array() as $layout) { if (self::has_nested_conditions($layout)) { return true; } }
        return false;
    }

    public static function fingerprint($value) { return hash('sha256', wp_json_encode($value)); }

    private static function sanitize_children($row, $field, $stored = array()) {
        if (!is_array($row) || array_diff(array_keys($row), array_column($field['sub_fields'], 'name'))) {
            return self::error(__('Structured data contains an invalid row or an unknown child field.', 'customfields-com'));
        }
        $output = array();
        $by_name = array_column($field['sub_fields'], null, 'name');
        $visiting = array();
        $resolve = function ($name) use (&$resolve, &$output, &$visiting, $by_name, $row, $stored) {
            if (array_key_exists($name, $output)) { return $output[$name]; }
            if (isset($visiting[$name]) || !isset($by_name[$name])) { return self::error(__('Nested visibility has an invalid dependency.', 'customfields-com')); }
            $visiting[$name] = true;
            $child = $by_name[$name];
            if (++self::$value_nodes > self::MAX_VALUE_NODES) { return self::error(__('This field exceeds the limit of 4,000 nested values.', 'customfields-com')); }
            $values = $row;
            foreach ($child['conditional_logic'] ?? array() as $rule) {
                $controller = $resolve($rule['field']);
                if (is_wp_error($controller)) { return $controller; }
                $values[$rule['field']] = $controller;
            }
            if (!\CustomFields\Conditions::is_active(true, $child, $values, 0, array_column($by_name, 'type', 'name'))) {
                $output[$name] = array_key_exists($name, $stored) ? $stored[$name] : ($child['default'] ?? '');
                unset($visiting[$name]);
                return $output[$name];
            }
            if (!array_key_exists($name, $row)) { return self::error(__('A nested field is missing from this submission. No structured values were saved.', 'customfields-com')); }
            $value = \CustomFields\Fields::sanitize($row[$name], $child, array('has_stored_value' => array_key_exists($name, $stored), 'stored_value' => $stored[$name] ?? null));
            if (is_wp_error($value)) { return new \WP_Error('customfields_repeater', $child['label'] . ': ' . $value->get_error_message()); }
            $output[$name] = $value;
            unset($visiting[$name]);
            return $value;
        };
        foreach ($field['sub_fields'] as $child) {
            $value = $resolve($child['name']);
            if (is_wp_error($value)) { return $value; }
        }
        // Schema order keeps exports and row summaries stable regardless of dependency order.
        $ordered = array();
        foreach ($field['sub_fields'] as $child) { $ordered[$child['name']] = $output[$child['name']]; }
        return $ordered;
    }

    private static function gallery_value($raw, $field, $check_permission = false) {
        if (!is_array($raw)) { return self::error(__('Gallery values must be an array of image attachment IDs.', 'customfields-com')); }
        unset($raw['__present']);
        if (count($raw) > 100) { return self::error(__('A gallery supports up to 100 images.', 'customfields-com')); }
        $ids = array();
        foreach ($raw as $index => $id) {
            if (!ctype_digit((string) $index) || (!is_int($id) && !is_string($id)) || !preg_match('/^[1-9][0-9]*$/D', (string) $id) || !wp_attachment_is_image((int) $id)) {
                return self::error(__('Every gallery item must be an existing image attachment ID.', 'customfields-com'));
            }
            if ($check_permission && !current_user_can('read_post', (int) $id)) { return self::error(__('You cannot select one of these gallery images.', 'customfields-com')); }
            $ids[] = (int) $id;
        }
        if (count($ids) !== count(array_unique($ids))) { return self::error(__('A gallery may not contain duplicate image IDs.', 'customfields-com')); }
        return $ids;
    }

    private static function compatible_storage($value, $field, $depth = 0, &$nodes = null) {
        if ($nodes === null) { $nodes = 0; }
        if (++$nodes > self::MAX_VALUE_NODES) { return false; }
        if ($depth > self::MAX_DEPTH || !is_array($value)) { return false; }
        if ($field['type'] === 'gallery') { $nodes += count($value); return $nodes <= self::MAX_VALUE_NODES && !is_wp_error(self::gallery_value($value, $field)); }
        if ($field['type'] === 'repeater' && count($value) > $field['max_rows']) { return false; }
        $rows = $field['type'] === 'group' ? array($value) : $value;
        foreach ($rows as $index => $row) {
            if (!ctype_digit((string) $index) || !is_array($row) || array_diff(array_keys($row), array_column($field['sub_fields'], 'name'))) { return false; }
            foreach ($field['sub_fields'] as $child) {
                if (++$nodes > self::MAX_VALUE_NODES) { return false; }
                if (!array_key_exists($child['name'], $row)) { continue; }
                if (in_array($child['type'], array('repeater', 'group', 'gallery'), true)) {
                    if (!self::compatible_storage($row[$child['name']], $child, $depth + 1, $nodes)) { return false; }
                } elseif (is_wp_error(\CustomFields\Fields::storage_error($row[$child['name']], $child))) { return false; }
            }
        }
        return true;
    }

    public static function render($field, $value, $input_name) {
        if (!in_array($field['type'], array('repeater', 'group', 'gallery'), true)) { return; }
        if (self::render_size($field, $value) > self::MAX_VALUE_NODES) {
            echo '<p role="alert" class="cfp-storage-conflict">' . esc_html__('This nested editor exceeds 4,000 field controls. Reduce its minimum rows or split its schema before editing. Stored values are preserved.', 'customfields-com') . '</p><input type="hidden" name="' . esc_attr($input_name . '[__storage_conflict]') . '" value="1">';
            return;
        }
        if (!self::compatible_storage($value, $field)) {
            echo '<div class="notice notice-error inline cfp-storage-conflict"><p>' . esc_html__('Stored data does not match this schema. Restore its previous schema or migrate values before editing.', 'customfields-com') . '</p></div><input type="hidden" name="' . esc_attr($input_name . '[__storage_conflict]') . '" value="1">';
            return;
        }
        if ($field['type'] === 'gallery') { self::gallery($value, $input_name); return; }
        if ($field['type'] === 'group') {
            echo '<div class="cfp-group" data-name="' . esc_attr($input_name) . '" role="group" aria-label="' . esc_attr($field['label']) . '"><input type="hidden" name="' . esc_attr($input_name . '[__present]') . '" value="1">';
            self::render_fingerprint($field, $value, $input_name);
            self::children($field, $value, $input_name);
            echo '</div>';
            return;
        }
        $rows = array_values($value);
        $sources = array_keys($value);
        while (count($rows) < $field['min_rows']) { $rows[] = array(); }
        $token = '__CFP_' . substr(md5($input_name), 0, 12) . '__';
        echo '<div class="cfp-repeater" role="group" aria-label="' . esc_attr($field['label']) . '" data-name="' . esc_attr($input_name) . '" data-token="' . esc_attr($token) . '" data-min="' . esc_attr($field['min_rows']) . '" data-max="' . esc_attr($field['max_rows']) . '" data-next="' . esc_attr(count($rows)) . '">';
        echo '<input type="hidden" name="' . esc_attr($input_name . '[__present]') . '" value="1"><div class="cfp-rows">';
        foreach ($rows as $index => $row) { self::row($field, $row, $input_name . '[' . $index . ']', array_key_exists($index, $sources) ? (string) $sources[$index] : ''); }
        echo '</div><template class="cfp-row-template">';
        self::row($field, array(), $input_name . '[' . $token . ']');
        echo '</template>';
        self::render_fingerprint($field, $value, $input_name);
        echo '<button type="button" class="button cfp-add-row">' . esc_html__('Add row', 'customfields-com') . '</button> <span class="cfp-row-status" aria-live="polite"></span><div class="cfp-undo" hidden></div></div>';
    }

    private static function render_fingerprint($field, $value, $name) {
        if (self::has_nested_conditions($field)) { echo '<input type="hidden" class="cfp-fingerprint" name="' . esc_attr($name . '[__cfp_fingerprint]') . '" value="' . esc_attr(self::fingerprint($value)) . '">'; }
    }

    public static function children($field, $row, $prefix) {
        foreach ($field['sub_fields'] as $child) {
            $name = $prefix . '[' . $child['name'] . ']';
            $id = 'cf-' . substr(md5($name), 0, 16);
            $value = $row[$child['name']] ?? ($child['default'] ?? '');
            echo '<div class="customfields-field" data-customfields-name="' . esc_attr($child['name']) . '" data-cfp-stored="' . esc_attr(wp_json_encode($value)) . '"><label for="' . esc_attr($id) . '">' . esc_html($child['label']) . (!empty($child['required']) ? ' *' : '') . '</label>';
            if ($child['type'] === 'wysiwyg' && !is_wp_error(\CustomFields\Fields::storage_error($value, $child))) {
                echo '<textarea class="widefat cfp-richtext" id="' . esc_attr($id) . '" name="' . esc_attr($name) . '" rows="8"' . (!empty($child['required']) ? ' required aria-required="true"' : '') . (!empty($child['instructions']) ? ' aria-describedby="' . esc_attr($id . '-description') . '"' : '') . '>' . esc_textarea($value) . '</textarea>';
                do_action('customfields_after_render_field', $child, $value, $name);
            } else { \CustomFields\Fields::render($child, $value, $name); }
            if (!empty($child['instructions'])) { echo '<p class="description" id="' . esc_attr($id . '-description') . '">' . esc_html($child['instructions']) . '</p>'; }
            echo '</div>';
        }
    }

    public static function row($field, $row, $prefix, $source = '') {
        echo '<div class="cfp-row" data-prefix="' . esc_attr($prefix) . '"><input type="hidden" class="cfp-row-source" name="' . esc_attr($prefix . '[__cfp_source]') . '" value="' . esc_attr($source) . '"><div class="cfp-row-heading"><button type="button" class="button cfp-row-drag" draggable="true" aria-label="' . esc_attr__('Drag row; use Alt and arrow keys to reorder', 'customfields-com') . '">↕</button><strong class="cfp-row-number">' . esc_html__('Row', 'customfields-com') . '</strong><span class="cfp-row-summary"></span><div class="cfp-row-actions">';
        foreach (array('up' => __('Move up', 'customfields-com'), 'down' => __('Move down', 'customfields-com'), 'duplicate' => __('Duplicate', 'customfields-com'), 'collapse' => __('Collapse', 'customfields-com'), 'remove' => __('Remove', 'customfields-com')) as $action => $label) {
            echo '<button type="button" class="button cfp-' . esc_attr($action) . '-row"' . ($action === 'collapse' ? ' aria-expanded="true"' : '') . '>' . esc_html($label) . '</button> ';
        }
        echo '</div></div><div class="cfp-row-body">';
        self::children($field, $row, $prefix);
        echo '</div></div>';
    }

    private static function gallery($value, $name) {
        echo '<div class="cfp-gallery" data-name="' . esc_attr($name) . '"><input type="hidden" name="' . esc_attr($name . '[__present]') . '" value="1"><ol class="cfp-gallery-items">';
        foreach ($value as $id) {
            $can_view = current_user_can('read_post', $id);
            $src = $can_view ? wp_get_attachment_image_url($id, 'thumbnail') : '';
            echo '<li data-id="' . esc_attr($id) . '"><input type="hidden" name="' . esc_attr($name . '[]') . '" value="' . esc_attr($id) . '">';
            if ($src) { echo '<img src="' . esc_url($src) . '" alt="">'; }
            echo '<span>' . esc_html($can_view ? get_the_title($id) : __('Image unavailable with your current permissions', 'customfields-com')) . '</span>';
            self::gallery_buttons();
            echo '</li>';
        }
        echo '</ol><button type="button" class="button cfp-gallery-select">' . esc_html__('Choose images', 'customfields-com') . '</button><p class="description">' . esc_html__('Up to 100 images. Use Move up and Move down to change their order.', 'customfields-com') . '</p></div>';
    }

    private static function gallery_buttons() {
        foreach (array('up' => __('Move up', 'customfields-com'), 'down' => __('Move down', 'customfields-com'), 'remove' => __('Remove', 'customfields-com')) as $key => $label) { echo '<button type="button" class="button cfp-gallery-' . esc_attr($key) . '">' . esc_html($label) . '</button> '; }
    }

    public static function editor($field, $prefix) {
        $active = in_array($field['type'] ?? '', array('repeater', 'group'), true);
        echo '<fieldset class="cfp-composite-settings"' . ($active ? '' : ' disabled hidden') . '><legend>' . esc_html__('Child fields', 'customfields-com') . '</legend>';
        echo '<div class="cfp-child-builder" data-types="' . esc_attr(wp_json_encode(\CustomFields\Fields::types())) . '"><div class="cfp-child-list"></div><button type="button" class="button cfp-add-child">' . esc_html__('Add child field', 'customfields-com') . '</button><details><summary>' . esc_html__('Advanced child schema JSON', 'customfields-com') . '</summary><textarea class="large-text code cfp-children-json" rows="5" name="' . esc_attr($prefix . '[sub_fields]') . '">' . esc_textarea(wp_json_encode($field['sub_fields'] ?? array(), JSON_PRETTY_PRINT)) . '</textarea><button type="button" class="button cfp-load-json">' . esc_html__('Apply JSON to builder', 'customfields-com') . '</button></details><p class="cfp-builder-status" role="status"></p></div>';
        echo '<div class="cfp-row-limits">';
        foreach (array('min_rows' => 0, 'max_rows' => 20) as $key => $default) { echo '<label>' . esc_html($key === 'min_rows' ? __('Minimum rows', 'customfields-com') : __('Maximum rows', 'customfields-com')) . ' <input type="number" min="0" max="100" name="' . esc_attr($prefix . '[' . $key . ']') . '" value="' . esc_attr($field[$key] ?? $default) . '"></label> '; }
        echo '</div><p class="description">' . esc_html__('Up to three container levels and 20 children per container. Child visibility uses sibling fields in the same row or group.', 'customfields-com') . '</p></fieldset>';
    }

    public static function group_editor($group) {
        $page = $group['options_page'] ?? array('slug' => 'site', 'title' => __('Site options', 'customfields-com'), 'capability' => 'manage_options');
        echo '<fieldset class="cfp-options-settings"' . (($group['target'] ?? '') === 'options' ? '' : ' disabled hidden') . '><legend>' . esc_html__('Options page', 'customfields-com') . '</legend>';
        foreach (array('slug' => __('Page slug', 'customfields-com'), 'title' => __('Page title', 'customfields-com')) as $key => $label) { echo '<p><label>' . esc_html($label) . '<input class="widefat" name="group[options_page][' . esc_attr($key) . ']" value="' . esc_attr($page[$key]) . '"></label></p>'; }
        echo '<p><label>' . esc_html__('Required capability', 'customfields-com') . '<select name="group[options_page][capability]">';
        foreach (self::option_capabilities() as $cap) { echo '<option value="' . esc_attr($cap) . '"' . selected($page['capability'], $cap, false) . '>' . esc_html($cap) . '</option>'; }
        echo '</select></label></p><p class="description">' . esc_html__('Groups with the same slug share a page. Each group independently enforces its capability. Named pages appear under Tools.', 'customfields-com') . '</p></fieldset>';
    }
}