<?php
/**
 * Plugin Name:       kofront frontend posts
 * Description:       A frontend dashboard and modular post builder.
 * Version:           12.1.4
 * Author:            kreativekabbage
 * Requires at least: 6.8
 * License:           GPLv2 or later
 * License URI:       https://www.gnu.org/licenses/gpl-2.0.html
 * Text Domain:       kofront-frontend-posts
 */

if ( ! defined( 'ABSPATH' ) ) {
    exit; 
}

// ---------------------------------------------------------
// 1. Enqueue assets.
// ---------------------------------------------------------
add_action( 'wp_enqueue_scripts', 'kofront_register_assets' );
function kofront_register_assets() {
    global $post;
    
    // Load CSS and base JS globally so sliders, image sizes, and lightboxes work on published posts.
    wp_enqueue_style( 'kofront-style', plugin_dir_url( __FILE__ ) . 'assets/kofront.css', array(), '12.1.4' );
    wp_enqueue_script( 'kofront-script', plugin_dir_url( __FILE__ ) . 'assets/kofront.js', array('jquery'), '12.1.4', true );
    
    // Only load Ajax variables on the actual portal pages.
    if ( is_a( $post, 'WP_Post' ) && ( has_shortcode( $post->post_content, 'kofront_dashboard' ) || has_shortcode( $post->post_content, 'kofront_editor' ) ) ) {
        
        // Enqueue the native WordPress Media Uploader
        wp_enqueue_media();
        
        wp_localize_script( 'kofront-script', 'kofrontAjax', array(
            'ajaxurl' => admin_url( 'admin-ajax.php' ),
            'nonce'   => wp_create_nonce( 'kofront_ajax_nonce' )
        ) );
    }
}

// ---------------------------------------------------------
// 1.1. Prevent Caching on Portal Pages (Pre-render hook).
// ---------------------------------------------------------
add_action( 'template_redirect', 'kofront_disable_caching' );
function kofront_disable_caching() {
    global $post;
    
    // Trigger if the page has the dashboard or editor shortcode.
    if ( is_a( $post, 'WP_Post' ) && ( has_shortcode( $post->post_content, 'kofront_dashboard' ) || has_shortcode( $post->post_content, 'kofront_editor' ) ) ) {
        if ( ! defined( 'DONOTCACHEPAGE' ) ) {
            // phpcs:ignore WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound
            define( 'DONOTCACHEPAGE', true );
        }  
        
        // phpcs:ignore WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
        do_action( 'litespeed_control_set_nocache', 'kofront-portal' );
        nocache_headers();
    }
}

// ---------------------------------------------------------
// 2. AJAX listener for instant category deletion.
// ---------------------------------------------------------
add_action( 'wp_ajax_kofront_delete_category', 'kofront_ajax_delete_category' );
function kofront_ajax_delete_category() {
    check_ajax_referer( 'kofront_ajax_nonce', 'security' );

    if ( ! current_user_can( 'edit_others_posts' ) ) {
        wp_send_json_error( array( 'message' => 'Permission denied.' ) );
    }
    $cat_id = isset( $_POST['cat_id'] ) ? intval( wp_unslash( $_POST['cat_id'] ) ) : 0;
    if ( $cat_id > 0 ) {
        $del_result = wp_delete_term( $cat_id, 'category' );
        if ( is_wp_error( $del_result ) ) {
            wp_send_json_error( array( 'message' => $del_result->get_error_message() ) );
        } else {
            wp_send_json_success( array( 'message' => 'Category deleted.' ) );
        }
    }

    wp_send_json_error( array( 'message' => 'Invalid category ID.' ) );
}

// ---------------------------------------------------------
// 3. Dashboard shortcode.
// ---------------------------------------------------------
add_shortcode( 'kofront_dashboard', 'kofront_render_dashboard' );
function kofront_render_dashboard( $atts ) {
    
    $parsed_atts = shortcode_atts( array( 'editor_url' => get_permalink() ), $atts );
    $editor_url = esc_url( $parsed_atts['editor_url'] );

    if ( ! is_user_logged_in() ) {
        $login_url = wp_login_url( get_permalink() );
        /* translators: %s: Login URL */
        return '<p class="kofront-portal-login-notice">' . sprintf( __( 'You must be logged in to access the portal. Please <a href="%s">log in here</a>.', 'kofront-frontend-posts' ), esc_url( $login_url ) ) . '</p>';
    }

    $current_user_id = get_current_user_id();
    $current_url = get_permalink(); 
    $message = '';

    // Handle post deletion.
    if ( isset( $_GET['kofront_action'] ) && sanitize_text_field( wp_unslash( $_GET['kofront_action'] ) ) === 'delete' && isset( $_GET['kofront_post_id'] ) ) {
        $del_post_id = intval( wp_unslash( $_GET['kofront_post_id'] ) );
        if ( isset( $_GET['_wpnonce'] ) && wp_verify_nonce( sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ) ), 'kofront_delete_post_' . $del_post_id ) ) {
            $del_post = get_post( $del_post_id );
            if ( $del_post && ( $del_post->post_author == $current_user_id || current_user_can( 'edit_others_posts' ) ) ) {
                wp_trash_post( $del_post_id );
                $message .= '<div id="kofront-notice-wrapper"><div class="kofront-message kofront-success">Post successfully moved to trash.</div></div>';
            } else {
                $message .= '<div class="kofront-message kofront-error">Permission denied.</div>';
            }
        }
    }

    // Handle post save success (PRG pattern redirect target).
    if ( isset( $_GET['kofront_success'] ) && isset( $_GET['kofront_saved_id'] ) ) {
        $success_type = sanitize_text_field( wp_unslash( $_GET['kofront_success'] ) );
        $action_msg = ( $success_type === 'updated' ) ? 'Post updated successfully.' : 'New post created successfully.';
        
        $message .= '<div id="kofront-notice-wrapper">';
        $message .= '<div class="kofront-message kofront-success">' . esc_html( $action_msg ) . '</div>';
        
        $saved_id = intval( wp_unslash( $_GET['kofront_saved_id'] ) );
        $saved_post = get_post( $saved_id );
        if ( $saved_post && ( $saved_post->post_author == $current_user_id || current_user_can( 'edit_others_posts' ) ) ) {
            $btn_text = ( $saved_post->post_status === 'publish' ) ? 'View Live Post' : 'Preview Draft';
            $btn_link = ( $saved_post->post_status === 'publish' ) ? get_permalink( $saved_id ) : get_preview_post_link( $saved_id );
            $message .= '<a href="' . esc_url( $btn_link ) . '" target="_blank" class="kofront-btn kofront-btn-secondary kofront-mb-15">&#128065; ' . esc_html( $btn_text ) . '</a>';
        }
        $message .= '</div>';
    }

    $query_args = array( 'post_type' => 'post', 'post_status' => array('publish', 'pending', 'draft'), 'posts_per_page' => -1 );
        if ( ! current_user_can( 'edit_others_posts' ) ) {
            $query_args['author'] = $current_user_id;
        }
    $user_posts = get_posts( $query_args );

    ob_start();
    ?>
    <div class="kofront-portal kofront-portal-dashboard">
        <?php echo wp_kses_post( $message ); ?>
        
        <div id="kofront-dashboard-area">
            <div class="kofront-header-area">
                <h2>Post Management</h2>
                <div class="kofront-d-flex kofront-gap-10">
                    <button type="button" id="kofront-help-btn" class="kofront-btn kofront-btn-secondary">Help</button>
                    <a href="<?php echo esc_url($editor_url); ?>" class="kofront-btn">+ Create New Post</a>
                </div>
            </div>
            
            <?php if ( empty( $user_posts ) ) : ?>
                <p class="kofront-text-muted">You haven't created any posts yet.</p>
            <?php else : ?>
                <div class="kofront-table-scroll">
                    <table class="kofront-table">
                        <thead>
                            <tr>
                                <th>Title</th>
                                <th>Status</th>
                                <th>Date</th>
                                <th class="kofront-text-right">Action</th>
                            </tr>
                        </thead>
                        <tbody>
                            <?php foreach ( $user_posts as $p ) : 
                                $view_link = get_permalink( $p->ID );
                                $edit_link = add_query_arg( 'kofront_edit_id', $p->ID, $editor_url );
                                $delete_url = wp_nonce_url( add_query_arg( array( 'kofront_action' => 'delete', 'kofront_post_id' => $p->ID ), $current_url ), 'kofront_delete_post_' . $p->ID );
                                $display_title = !empty($p->post_title) ? $p->post_title : '(Untitled)';
                            ?>
                                <tr>
                                    <td><strong><?php echo esc_html( $display_title ); ?></strong></td>
                                    <td><?php echo esc_html( ucfirst($p->post_status) ); ?></td>
                                    <td><?php echo esc_html( get_the_date( '', $p->ID ) ); ?></td>
                                    <td class="kofront-text-right">
                                        <?php if ( $p->post_status === 'publish' ) : ?>
                                            <a href="<?php echo esc_url( $view_link ); ?>" target="_blank" class="kofront-action-link">View</a>
                                        <?php endif; ?>
                                        <a href="<?php echo esc_url( $edit_link ); ?>" class="kofront-action-link">Edit</a>
                                        <a href="<?php echo esc_url( $delete_url ); ?>" class="kofront-danger-text kofront-underline" onclick="return confirm('Delete this post?');">Delete</a>
                                    </td>
                                </tr>
                            <?php endforeach; ?>
                        </tbody>
                    </table>
                </div>
            <?php endif; ?>
        </div>
    </div>

    <?php
    return ob_get_clean();
}

// ---------------------------------------------------------
// 4. Editor shortcode.
// ---------------------------------------------------------
add_shortcode( 'kofront_editor', 'kofront_render_editor' );
function kofront_render_editor( $atts ) {

    $parsed_atts = shortcode_atts( array( 'dashboard_url' => get_permalink() ), $atts );
    $dashboard_url = esc_url( $parsed_atts['dashboard_url'] );

    if ( ! is_user_logged_in() ) {
        $login_url = wp_login_url( get_permalink() );
        /* translators: %s: Login URL */
        return '<p class="kofront-portal-login-notice">' . sprintf( __( 'You must be logged in to access the portal. Please <a href="%s">log in here</a>.', 'kofront-frontend-posts' ), esc_url( $login_url ) ) . '</p>';
    }

    $current_user_id = get_current_user_id();
    $message = '';
    $edit_id = isset( $_GET['kofront_edit_id'] ) ? intval( wp_unslash( $_GET['kofront_edit_id'] ) ) : 0;

    // Handle form submission.
    if ( isset( $_POST['kofront_is_submission'] ) && sanitize_text_field( wp_unslash( $_POST['kofront_is_submission'] ) ) === '1' ) {
        
        if ( ! isset( $_POST['kofront_nonce'] ) || ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_POST['kofront_nonce'] ) ), 'kofront_submit_action' ) ) {
            $message .= '<div class="kofront-message kofront-error">Security check failed. Please try again.</div>';
        } else {
            $post_id_to_edit = isset( $_POST['kofront_post_id'] ) ? intval( wp_unslash( $_POST['kofront_post_id'] ) ) : 0;
            $post_title      = isset( $_POST['kofront_title'] ) ? sanitize_text_field( wp_unslash( $_POST['kofront_title'] ) ) : '';
            $post_excerpt    = isset( $_POST['kofront_excerpt'] ) ? sanitize_textarea_field( wp_unslash( $_POST['kofront_excerpt'] ) ) : '';
            
            if ( isset( $_POST['kofront_save_draft'] ) ) {
                $final_status = 'draft';
            } else {
                $final_status = 'publish';
            }

            $layout_style = isset( $_POST['kofront_layout_style'] ) ? sanitize_text_field( wp_unslash( $_POST['kofront_layout_style'] ) ) : '1-col';
            
            $selected_cats = isset( $_POST['kofront_categories'] ) && is_array( $_POST['kofront_categories'] ) ? array_map( 'intval', wp_unslash( $_POST['kofront_categories'] ) ) : array();
            if ( ! empty( $_POST['kofront_new_category'] ) ) {
                $new_cat_name = sanitize_text_field( wp_unslash( $_POST['kofront_new_category'] ) );
                $term_info    = term_exists( $new_cat_name, 'category' );
                if ( ! $term_info ) {
                    $term_info = wp_insert_term( $new_cat_name, 'category' );
                }
                if ( ! is_wp_error( $term_info ) ) {
                    $selected_cats[] = intval( $term_info['term_id'] );
                }
            }

            $gutenberg_content = '';
            $order          = isset( $_POST['kofront_order'] ) && is_array( $_POST['kofront_order'] ) ? array_map( 'sanitize_text_field', wp_unslash( $_POST['kofront_order'] ) ) : array();            
            
            $headings       = isset( $_POST['kofront_heading'] ) && is_array( $_POST['kofront_heading'] ) ? array_map( 'wp_kses_post', wp_unslash( $_POST['kofront_heading'] ) ) : array();
            $heading_levels = isset( $_POST['kofront_heading_level'] ) && is_array( $_POST['kofront_heading_level'] ) ? array_map( 'intval', wp_unslash( $_POST['kofront_heading_level'] ) ) : array();
            $heading_aligns = isset( $_POST['kofront_heading_align'] ) && is_array( $_POST['kofront_heading_align'] ) ? array_map( 'sanitize_text_field', wp_unslash( $_POST['kofront_heading_align'] ) ) : array();
            $paragraphs     = isset( $_POST['kofront_paragraph'] ) && is_array( $_POST['kofront_paragraph'] ) ? array_map( 'wp_kses_post', wp_unslash( $_POST['kofront_paragraph'] ) ) : array();
            
            $toc_titles     = isset( $_POST['kofront_toc_title'] ) && is_array( $_POST['kofront_toc_title'] ) ? array_map( 'sanitize_text_field', wp_unslash( $_POST['kofront_toc_title'] ) ) : array();
            $toc_levels_arr = isset( $_POST['kofront_toc_levels'] ) && is_array( $_POST['kofront_toc_levels'] ) ? array_map( 'sanitize_text_field', wp_unslash( $_POST['kofront_toc_levels'] ) ) : array();
            $toc_spans_arr  = isset( $_POST['kofront_toc_span'] ) && is_array( $_POST['kofront_toc_span'] ) ? array_map( 'sanitize_text_field', wp_unslash( $_POST['kofront_toc_span'] ) ) : array();
            $shortcodes     = isset( $_POST['kofront_shortcode'] ) && is_array( $_POST['kofront_shortcode'] ) ? array_map( 'sanitize_text_field', wp_unslash( $_POST['kofront_shortcode'] ) ) : array();
            $raw_blocks     = isset( $_POST['kofront_raw_block'] ) && is_array( $_POST['kofront_raw_block'] ) ? array_map( 'wp_kses_post', wp_unslash( $_POST['kofront_raw_block'] ) ) : array();

            $block_image_ids = array();
            $blocks_array    = array(); // Collect blocks for native column generation.
            $used_anchors    = array(); // Track heading anchor IDs to prevent duplicates.
            $toc_items       = array(); // Store headings to populate TOC blocks after loop.
            $toc_configs     = array(); // Store TOC placeholders and titles.
            $toc_counter     = 0;

            foreach ( $order as $block_type ) {
                $block_html = '';

                if ( $block_type === 'heading' ) {
                    $text       = trim( str_replace( array( '<br>', '<br/>', '<br />', "\r", "\n" ), ' ', kofront_sanitize_inline_html( (string) array_shift( $headings ) ) ) );
                    $plain_text = trim( wp_strip_all_tags( $text ) );
                    $level      = ! empty( $heading_levels ) ? intval( array_shift( $heading_levels ) ) : 2;
                    if ( $level < 1 || $level > 6 ) {
                        $level = 2;
                    }
                    $align       = ! empty( $heading_aligns ) ? (string) array_shift( $heading_aligns ) : 'left';
                    $align_class = ( $align === 'center' ) ? ' has-text-align-center' : '';
                    $class_attr  = trim( 'kofront-span-all' . $align_class );

                    if ( $plain_text !== '' ) {
                        $base_anchor = sanitize_title( $plain_text );
                        if ( '' === $base_anchor ) {
                            $base_anchor = 'section';
                        }
                        $anchor_id = $base_anchor;
                        $suffix    = 2;
                        while ( in_array( $anchor_id, $used_anchors, true ) ) {
                            $anchor_id = $base_anchor . '-' . $suffix;
                            $suffix++;
                        }
                        $used_anchors[] = $anchor_id;
                        $toc_items[]    = array(
                            'level' => $level,
                            'text'  => $plain_text,
                            'id'    => $anchor_id,
                        );

                        $level_json  = ( 2 !== $level ) ? '"level":' . $level . ',' : '';
                        $block_html .= '<!-- wp:heading {' . $level_json . '"className":"' . esc_attr( $class_attr ) . '"} --><h' . $level . ' id="' . esc_attr( $anchor_id ) . '" class="' . esc_attr( $class_attr ) . '">' . $text . '</h' . $level . '><!-- /wp:heading -->';
                    }
                } elseif ( $block_type === 'toc' ) {
                    $toc_counter++;
                    $raw_toc_title  = ! empty( $toc_titles ) ? (string) array_shift( $toc_titles ) : '';
                    $toc_title      = ( '' !== trim( $raw_toc_title ) ) ? $raw_toc_title : __( 'Table of Contents', 'kofront-frontend-posts' );
                    $raw_toc_levels = ! empty( $toc_levels_arr ) ? (string) array_shift( $toc_levels_arr ) : '1,2,3,4,5,6';
                    $raw_toc_span   = ! empty( $toc_spans_arr ) ? (string) array_shift( $toc_spans_arr ) : '0';
                    $placeholder    = '<!-- KOFRONT_TOC_PLACEHOLDER_' . $toc_counter . ' -->';
                    $toc_configs[ $placeholder ] = array(
                        'title'  => $toc_title,
                        'levels' => $raw_toc_levels,
                        'span'   => ( '1' === $raw_toc_span ) ? '1' : '0',
                    );
                    $block_html = $placeholder;
                } elseif ( $block_type === 'paragraph' ) {
                    $text = trim( kofront_sanitize_inline_html( (string) array_shift( $paragraphs ) ) );
                    if ( trim( wp_strip_all_tags( $text ) ) !== '' ) {
                        $text        = preg_replace( "/\r\n|\r|\n/", '<br>', $text );
                        $block_html .= '<!-- wp:paragraph --><p>' . $text . '</p><!-- /wp:paragraph -->';
                    }
                } elseif ( $block_type === 'shortcode' ) {
                    $sc_text = ! empty( $shortcodes ) ? trim( wp_strip_all_tags( (string) array_shift( $shortcodes ) ) ) : '';
                    if ( $sc_text !== '' ) {
                        $block_html .= '<!-- wp:shortcode -->' . $sc_text . '<!-- /wp:shortcode -->';
                    }
                } elseif ( $block_type === 'raw_block' ) {
                    $raw_b = ! empty( $raw_blocks ) ? trim( (string) array_shift( $raw_blocks ) ) : '';
                    if ( $raw_b !== '' ) {
                        $block_html .= $raw_b;
                    }
                } elseif ( strpos( $block_type, 'image_' ) === 0 ) {
                    $size_key         = 'kofront_image_size_' . str_replace( 'image_', '', $block_type );
                    $img_size         = isset( $_POST[ $size_key ] ) ? sanitize_text_field( wp_unslash( $_POST[ $size_key ] ) ) : 'large';
                    $existing_img_key = 'kofront_existing_' . $block_type;
                    $current_img_id   = isset( $_POST[ $existing_img_key ] ) ? intval( wp_unslash( $_POST[ $existing_img_key ] ) ) : 0;
                    $span_img_key     = 'kofront_span_' . $block_type;
                    $is_span          = ! empty( $_POST[ $span_img_key ] ) ? ' kofront-span-all' : '';

                    if ( $current_img_id > 0 ) {
                        $img_url     = wp_get_attachment_url( $current_img_id );
                        $block_html .= '<!-- wp:image {"align":"center","id":' . intval( $current_img_id ) . ',"sizeSlug":"full","className":"kofront-size-' . esc_attr( $img_size . $is_span ) . '"} -->';
                        $block_html .= '<figure class="wp-block-image aligncenter size-full kofront-size-' . esc_attr( $img_size . $is_span ) . '"><img src="' . esc_url( $img_url ) . '" class="wp-image-' . intval( $current_img_id ) . '"/></figure>';
                        $block_html .= '<!-- /wp:image -->';
                        $block_image_ids[ $block_type ] = $current_img_id;
                    }
                } elseif ( strpos( $block_type, 'gallery_' ) === 0 ) {
                    $layout_key     = 'kofront_gallery_layout_' . str_replace( 'gallery_', '', $block_type );
                    $gallery_layout = isset( $_POST[ $layout_key ] ) ? sanitize_text_field( wp_unslash( $_POST[ $layout_key ] ) ) : 'grid';
                    
                    $gallery_img_ids = array();
                    $existing_key    = 'kofront_existing_' . $block_type;
                    if ( isset( $_POST[ $existing_key ] ) && is_array( $_POST[ $existing_key ] ) ) {
                        $gallery_img_ids = array_map( 'intval', wp_unslash( $_POST[ $existing_key ] ) );
                    }
                    
                    $span_gal_key = 'kofront_span_' . $block_type;
                    $is_span      = ! empty( $_POST[ $span_gal_key ] ) ? ' kofront-span-all' : '';
                    if ( ! empty( $gallery_img_ids ) ) {
                        $img_count   = count( $gallery_img_ids );
                        $count_class = ' kofront-gallery-count-' . ( $img_count >= 3 ? '3-plus' : $img_count );

                        $class_addition = $count_class . $is_span;
                        if ( $gallery_layout === 'masonry' ) {
                            $class_addition .= ' kofront-masonry-gallery';
                        } elseif ( $gallery_layout === 'slider' ) {
                            $class_addition .= ' kofront-slider-gallery';
                        }

                        $block_html .= '<!-- wp:gallery {"ids":[' . implode( ',', $gallery_img_ids ) . '],"columns":3,"className":"' . esc_attr( ltrim( $class_addition ) ) . '"} -->';
                        $block_html .= '<figure class="wp-block-gallery columns-3 is-cropped' . esc_attr( $class_addition ) . '"><ul class="blocks-gallery-grid">';
                        foreach ( $gallery_img_ids as $gid ) {
                            $img_url     = wp_get_attachment_url( $gid );
                            $block_html .= '<li class="blocks-gallery-item"><figure><img src="' . esc_url( $img_url ) . '" data-id="' . intval( $gid ) . '" class="wp-image-' . intval( $gid ) . '"/></figure></li>';
                        }
                        $block_html .= '</ul></figure>';
                        $block_html .= '<!-- /wp:gallery -->';
                    }
                }
                
                if ( $block_html !== '' ) {
                    $blocks_array[] = $block_html;
                }
            }

            // Populate any Table of Contents blocks using collected headings.
            if ( ! empty( $toc_configs ) ) {
                foreach ( $blocks_array as $idx => $blk_content ) {
                    if ( isset( $toc_configs[ $blk_content ] ) ) {
                        $t_cfg          = $toc_configs[ $blk_content ];
                        $t_title        = $t_cfg['title'];
                        $t_levels_str   = $t_cfg['levels'];
                        $t_span         = $t_cfg['span'];
                        $allowed_levels = array_map( 'intval', array_filter( explode( ',', $t_levels_str ) ) );
                        $span_class     = ( '1' === $t_span ) ? ' kofront-span-all' : '';

                        $filtered_items = array();
                        foreach ( $toc_items as $item ) {
                            if ( in_array( intval( $item['level'] ), $allowed_levels, true ) ) {
                                $filtered_items[] = $item;
                            }
                        }

                        $toc_html = '<!-- wp:html --><nav id="rank-math-toc" class="kofront-toc wp-block-table-of-contents' . esc_attr( $span_class ) . '" data-kofront-toc="1" data-toc-title="' . esc_attr( $t_title ) . '" data-toc-levels="' . esc_attr( $t_levels_str ) . '" data-toc-span="' . esc_attr( $t_span ) . '" aria-label="' . esc_attr( $t_title ) . '"><div class="kofront-toc-title"><strong>' . esc_html( $t_title ) . '</strong></div>';
                        if ( ! empty( $filtered_items ) ) {
                            $toc_html .= '<ul class="kofront-toc-list">';
                            foreach ( $filtered_items as $item ) {
                                $indent_class = 'kofront-toc-level-' . intval( $item['level'] );
                                $toc_html    .= '<li class="' . esc_attr( $indent_class ) . '"><a href="#' . esc_attr( $item['id'] ) . '">' . esc_html( $item['text'] ) . '</a></li>';
                            }
                            $toc_html .= '</ul>';
                        } else {
                            $toc_html .= '<p class="kofront-toc-empty"><em>' . esc_html__( 'Add matching headings to your post to populate the Table of Contents.', 'kofront-frontend-posts' ) . '</em></p>';
                        }
                        $toc_html .= '</nav><!-- /wp:html -->';
                        $blocks_array[ $idx ] = $toc_html;
                    }
                }
            }

            // Store pure Gutenberg blocks for full backend editor compatibility (2-col wrapper is applied via the_content filter).
            $gutenberg_content = implode( '', $blocks_array );

            $post_args = array(
                'post_title'    => $post_title,
                'post_content'  => $gutenberg_content,
                'post_excerpt'  => $post_excerpt,
                'post_status'   => $final_status,
                'post_type'     => 'post',
                'post_category' => $selected_cats,
            );

            // Execute insert/update.
            $action_type = 'created';
            if ( $post_id_to_edit > 0 ) {
                $existing_post = get_post( $post_id_to_edit );
                if ( $existing_post && ( $existing_post->post_author == $current_user_id || current_user_can( 'edit_others_posts' ) ) ) {
                    $post_args['ID'] = $post_id_to_edit;
                    $post_id         = wp_update_post( $post_args );
                    $action_type     = 'updated';
                } else {
                    $post_id = new WP_Error( 'auth', 'Permission denied.' );
                }
            } else {
                $post_args['post_author'] = $current_user_id;
                $post_id                  = wp_insert_post( $post_args );
            }

            if ( ! is_wp_error( $post_id ) ) {
                update_post_meta( $post_id, '_kofront_layout_style', $layout_style );

                if ( isset( $_POST['kofront_tags'] ) ) {
                    wp_set_post_tags( $post_id, sanitize_text_field( wp_unslash( $_POST['kofront_tags'] ) ), false );
                }

                $featured_block_key  = isset( $_POST['kofront_featured_image_block'] ) ? sanitize_text_field( wp_unslash( $_POST['kofront_featured_image_block'] ) ) : '';
                $clear_featured_flag = isset( $_POST['kofront_clear_featured'] ) ? intval( wp_unslash( $_POST['kofront_clear_featured'] ) ) : 0;
                
                if ( $featured_block_key && isset( $block_image_ids[ $featured_block_key ] ) ) {
                    set_post_thumbnail( $post_id, $block_image_ids[ $featured_block_key ] );
                } elseif ( ! empty( $_POST['kofront_existing_thumbnail'] ) ) {
                    set_post_thumbnail( $post_id, intval( wp_unslash( $_POST['kofront_existing_thumbnail'] ) ) );
                } elseif ( $clear_featured_flag === 1 ) {
                    delete_post_thumbnail( $post_id );
                }
                
                /// Redirect cleanly back to the dashboard URL via data attribute handled by kofront.js.
                $redirect_url = add_query_arg( array(
                    'kofront_success'  => $action_type,
                    'kofront_saved_id' => $post_id,
                ), $dashboard_url );
                
                return '<div class="kofront-portal" data-kofront-redirect="' . esc_url( $redirect_url ) . '"><p>' . esc_html__( 'Saving and redirecting...', 'kofront-frontend-posts' ) . '</p></div>';
            } else {
                $message .= '<div class="kofront-message kofront-error">Error: ' . esc_html( $post_id->get_error_message() ) . '</div>';
            }
        }
    }

    // Prepare data for the form.
    $f_title = ''; $f_excerpt = ''; $f_cats = array(); $f_tags_str = ''; $f_status = 'publish'; 
    $f_layout = '1-col';
    $existing_blocks_html = '';

    if ( $edit_id > 0 ) {
        $existing_post = get_post($edit_id);
        if ( $existing_post && ( $existing_post->post_author == $current_user_id || current_user_can( 'edit_others_posts' ) ) ) {
            $f_title = $existing_post->post_title;
            $f_excerpt = $existing_post->post_excerpt;
            $f_status = $existing_post->post_status;
            $f_cats = wp_get_post_categories($edit_id);
            $f_layout = get_post_meta($edit_id, '_kofront_layout_style', true) ?: '1-col';
            $current_featured_id = get_post_thumbnail_id($edit_id);
            
            $tags = wp_get_post_tags($edit_id);
            if ($tags) {
                $tag_names = array();
                foreach($tags as $t) { $tag_names[] = $t->name; }
                $f_tags_str = implode(', ', $tag_names);
            }

            $raw_html    = $existing_post->post_content;
            $clean_html  = preg_replace( '/^\s*<div class="kofront-newspaper-columns">(.*)<\/div>\s*$/is', '$1', $raw_html );
            $parsed_blks = parse_blocks( $clean_html );
            $img_counter = 1000; 

            foreach ( $parsed_blks as $p_block ) {
                if ( empty( $p_block['blockName'] ) ) {
                    if ( '' !== trim( $p_block['innerHTML'] ) ) {
                        $raw_val = esc_textarea( trim( $p_block['innerHTML'] ) );
                        $existing_blocks_html .= "<div class='kofront-builder-block'><div class='kofront-block-header'><strong>Custom HTML Block</strong><div class='kofront-block-actions'><button type='button' class='kofront-move-up' title='Move Up'>&#9650;</button><button type='button' class='kofront-move-down' title='Move Down'>&#9660;</button><button type='button' class='kofront-delete-block' title='Delete'>&times;</button></div></div><input type='hidden' name='kofront_order[]' value='raw_block'><textarea name='kofront_raw_block[]' class='kofront-input kofront-d-none' rows='3' readonly>{$raw_val}</textarea><div class='kofront-hint'><em>(Backend HTML content preserved. You can reorder or delete it here, or edit it in the WordPress backend editor.)</em></div></div>";
                    }
                    continue;
                }
                $b = preg_replace( '/^<!--\s*wp:/', '', serialize_block( $p_block ) );

                if (strpos($b, 'heading') === 0) {
                    preg_match('/<h([1-6])[^>]*>(.*?)<\/h[1-6]>/is', $b, $matches);
                    $is_center = strpos($b, 'has-text-align-center') !== false ? 'center' : 'left';
                    if (isset($matches[2])) {
                        $h_level   = intval($matches[1]);
                        $rich_html = kofront_sanitize_inline_html($matches[2]);
                        $val_attr  = esc_attr($rich_html);
                        $toolbar   = kofront_get_richtext_toolbar_html('heading');
                        $existing_blocks_html .= "<div class='kofront-builder-block'><div class='kofront-block-header'><strong>Heading</strong><div class='kofront-block-actions'><button type='button' class='kofront-move-up' title='Move Up'>&#9650;</button><button type='button' class='kofront-move-down' title='Move Down'>&#9660;</button><button type='button' class='kofront-delete-block' title='Delete'>&times;</button></div></div><input type='hidden' name='kofront_order[]' value='heading'><div class='kofront-richtext-wrap kofront-mb-05'>{$toolbar}<div class='kofront-richtext-editor kofront-richtext-singleline kofront-input' contenteditable='true' data-placeholder='Enter heading text...'>{$rich_html}</div><input type='hidden' name='kofront_heading[]' class='kofront-richtext-input' value='{$val_attr}'></div><div class='kofront-d-flex kofront-align-center kofront-gap-15 kofront-mt-05 kofront-flex-wrap'><div class='kofront-d-flex kofront-align-center kofront-gap-10'><label style='margin:0; white-space:nowrap;'>Tag:</label><select name='kofront_heading_level[]' class='kofront-input' style='width:auto !important; min-width:90px;'><option value='1' ".selected($h_level, 1, false).">H1</option><option value='2' ".selected($h_level, 2, false).">H2</option><option value='3' ".selected($h_level, 3, false).">H3</option><option value='4' ".selected($h_level, 4, false).">H4</option><option value='5' ".selected($h_level, 5, false).">H5</option><option value='6' ".selected($h_level, 6, false).">H6</option></select></div><div class='kofront-d-flex kofront-align-center kofront-gap-10'><label style='margin:0; white-space:nowrap;'>Alignment:</label><select name='kofront_heading_align[]' class='kofront-input' style='width:auto !important; min-width:140px;'><option value='left' ".selected($is_center, 'left', false).">Left</option><option value='center' ".selected($is_center, 'center', false).">Center</option></select></div></div><span class='kofront-span-hint kofront-text-sm kofront-text-muted kofront-d-block kofront-mt-05' style='display:none;'><em>(Headings automatically span the full page in 2-column layout)</em></span></div>";
                    }
                } elseif (strpos($b, 'paragraph') === 0) {
                    preg_match('/<p[^>]*>(.*?)<\/p>/is', $b, $matches);
                    if (isset($matches[1])) {
                        $rich_html = kofront_sanitize_inline_html($matches[1]);
                        $val_attr  = esc_textarea($rich_html);
                        $toolbar   = kofront_get_richtext_toolbar_html('paragraph');
                        $existing_blocks_html .= "<div class='kofront-builder-block'><div class='kofront-block-header'><strong>Paragraph</strong><div class='kofront-block-actions'><button type='button' class='kofront-move-up' title='Move Up'>&#9650;</button><button type='button' class='kofront-move-down' title='Move Down'>&#9660;</button><button type='button' class='kofront-delete-block' title='Delete'>&times;</button></div></div><input type='hidden' name='kofront_order[]' value='paragraph'><div class='kofront-richtext-wrap'>{$toolbar}<div class='kofront-richtext-editor kofront-richtext-multiline kofront-input' contenteditable='true' data-placeholder='Enter paragraph text...'>{$rich_html}</div><textarea name='kofront_paragraph[]' class='kofront-richtext-input kofront-d-none' rows='4'>{$val_attr}</textarea></div></div>";
                    }
                } elseif (strpos($b, 'html') === 0 && strpos($b, 'data-kofront-toc="1"') !== false) {
                    $toc_title_val = 'Table of Contents';
                    if (preg_match('/data-toc-title="([^"]*)"/i', $b, $toc_matches)) {
                        $toc_title_val = wp_strip_all_tags($toc_matches[1]);
                    }
                    $toc_levels_val = '1,2,3,4,5,6';
                    if (preg_match('/data-toc-levels="([^"]*)"/i', $b, $lvl_matches)) {
                        $toc_levels_val = preg_replace('/[^0-9,]/', '', $lvl_matches[1]);
                    }
                    $enabled_lvls = array_map('intval', array_filter(explode(',', $toc_levels_val)));
                    
                    $toc_span_val = (strpos($b, 'data-toc-span="1"') !== false || strpos($b, 'kofront-span-all') !== false) ? '1' : '0';
                    $toc_span_chk = ($toc_span_val === '1') ? 'checked' : '';

                    $toc_title_esc  = esc_attr($toc_title_val);
                    $toc_levels_esc = esc_attr($toc_levels_val);

                    $lvl_checkboxes = '';
                    for ($lv = 1; $lv <= 6; $lv++) {
                        $lv_chk = in_array($lv, $enabled_lvls, true) ? 'checked' : '';
                        $lvl_checkboxes .= "<label class='kofront-feature-label'><input type='checkbox' class='kofront-toc-level-cb' value='{$lv}' {$lv_chk}> H{$lv}</label>";
                    }

                    $existing_blocks_html .= "<div class='kofront-builder-block'><div class='kofront-block-header'><strong>Table of Contents</strong><div class='kofront-block-actions'><button type='button' class='kofront-move-up' title='Move Up'>&#9650;</button><button type='button' class='kofront-move-down' title='Move Down'>&#9660;</button><button type='button' class='kofront-delete-block' title='Delete'>&times;</button></div></div><input type='hidden' name='kofront_order[]' value='toc'><label class='kofront-text-sm'>TOC Title:</label><input type='text' name='kofront_toc_title[]' class='kofront-input kofront-mb-05' value='{$toc_title_esc}' placeholder='Table of Contents'><div class='kofront-mt-05'><label class='kofront-text-sm'>Include Heading Levels:</label><input type='hidden' name='kofront_toc_levels[]' class='kofront-toc-levels-input' value='{$toc_levels_esc}'><div class='kofront-d-flex kofront-gap-15 kofront-flex-wrap kofront-mt-05'>{$lvl_checkboxes}</div></div><div class='kofront-d-flex kofront-align-center kofront-gap-15 kofront-mt-15'><input type='hidden' name='kofront_toc_span[]' class='kofront-toc-span-input' value='{$toc_span_val}'><label class='kofront-feature-label kofront-span-toggle'><input type='checkbox' class='kofront-toc-span-cb' value='1' {$toc_span_chk}> Span Full Page Width <span class='kofront-span-hint kofront-text-sm kofront-text-muted kofront-d-block' style='display:none;'>(Check to break out of columns and span full width)</span></label></div><div class='kofront-hint'>Automatically generates and updates jump links from selected heading levels on save.</div></div>";
                } elseif (strpos($b, 'image') === 0) {
                    preg_match('/"id":(\d+)/', $b, $id_matches);
                    if (isset($id_matches[1])) {
                        $img_counter++;
                        $img_id = intval($id_matches[1]);
                        $img_url = esc_url((string) wp_get_attachment_image_url($img_id, 'thumbnail'));
                        
                        $img_size = 'large';
                        preg_match('/kofront-size-([a-z]+)/', $b, $size_matches);
                        if (isset($size_matches[1])) { $img_size = sanitize_key($size_matches[1]); }
                        
                        $is_featured = ($img_id === intval($current_featured_id) && $current_featured_id > 0) ? 'checked' : '';
                        $is_span_checked = strpos($b, 'kofront-span-all') !== false ? 'checked' : '';
                        
                        $existing_blocks_html .= "<div class='kofront-builder-block'><div class='kofront-block-header'><strong>Image</strong><div class='kofront-block-actions'><button type='button' class='kofront-move-up' title='Move Up'>&#9650;</button><button type='button' class='kofront-move-down' title='Move Down'>&#9660;</button><button type='button' class='kofront-delete-block' title='Delete'>&times;</button></div></div><input type='hidden' name='kofront_order[]' value='image_{$img_counter}'><div class='kofront-img-preview-row kofront-live-previews kofront-mt-05'><img src='{$img_url}' class='kofront-img-preview-thumb'></div><input type='hidden' name='kofront_existing_image_{$img_counter}' id='kofront_existing_input_{$img_counter}' value='{$img_id}'><div class='kofront-d-flex kofront-gap-10 kofront-mt-05 kofront-flex-wrap kofront-align-center'><button type='button' class='kofront-btn kofront-btn-secondary kofront-open-wp-media kofront-min-w-150' data-target-type='single' data-input-id='kofront_existing_input_{$img_counter}'>Choose Image</button><select name='kofront_image_size_{$img_counter}' class='kofront-input kofront-flex-1 kofront-min-w-120 kofront-max-w-200'><option value='thumbnail' ".selected($img_size, 'thumbnail', false).">Small</option><option value='medium' ".selected($img_size, 'medium', false).">Medium</option><option value='large' ".selected($img_size, 'large', false).">Large</option><option value='full' ".selected($img_size, 'full', false).">Actual Size</option></select></div><div class='kofront-hint'>Click to upload a new file or choose an existing image.</div><div class='kofront-d-flex kofront-align-center kofront-gap-15 kofront-mt-15'><label class='kofront-feature-label'><input type='radio' name='kofront_featured_image_block' value='image_{$img_counter}' class='kofront-set-featured' {$is_featured}> Use as Featured Image</label><button type='button' class='kofront-btn-text-danger kofront-clear-featured-radio kofront-text-sm'>Clear Selection</button><label class='kofront-feature-label kofront-span-toggle'><input type='checkbox' name='kofront_span_image_{$img_counter}' value='1' {$is_span_checked}> Span Full Page Width <span class='kofront-span-hint kofront-text-sm kofront-text-muted kofront-d-block' style='display:none;'>(Check to break out of columns and center image)</span></label></div></div>";
                    }
                } elseif (strpos($b, 'gallery') === 0) {
                    preg_match_all('/data-id="(\d+)"/', $b, $gal_matches);
                    if (!empty($gal_matches[1])) {
                        $img_counter++;
                        $is_masonry = strpos($b, 'kofront-masonry-gallery') !== false ? 'masonry' : (strpos($b, 'kofront-slider-gallery') !== false ? 'slider' : 'grid');
                        
                        $existing_blocks_html .= "<div class='kofront-builder-block'><div class='kofront-block-header'><strong>Gallery</strong><div class='kofront-block-actions'><button type='button' class='kofront-move-up' title='Move Up'>&#9650;</button><button type='button' class='kofront-move-down' title='Move Down'>&#9660;</button><button type='button' class='kofront-delete-block' title='Delete'>&times;</button></div></div><input type='hidden' name='kofront_order[]' value='gallery_{$img_counter}'>";

                        $existing_blocks_html .= "<div class='kofront-img-preview-row kofront-live-previews kofront-mt-05' id='kofront_gallery_preview_{$img_counter}'>";
                        foreach($gal_matches[1] as $gid) {
                            $gid_int = intval($gid);
                            $g_url = esc_url((string) wp_get_attachment_image_url($gid_int, 'thumbnail'));
                            $existing_blocks_html .= "<div class='kofront-preview-thumb-wrap' style='position:relative; display:inline-block;'>";
                            $existing_blocks_html .= "<img src='{$g_url}' class='kofront-img-preview-thumb'>";
                            $existing_blocks_html .= "<button type='button' class='kofront-remove-existing-gallery-img' style='position:absolute; top:-5px; right:-5px; background:#d32f2f; color:#fff; border:none; border-radius:50%; width:18px; height:18px; font-size:10px; cursor:pointer; display:flex; align-items:center; justify-content:center;' title='Remove image'>&times;</button>";
                            $existing_blocks_html .= "<input type='hidden' name='kofront_existing_gallery_{$img_counter}[]' value='{$gid_int}'>";
                            $existing_blocks_html .= "</div>";
                        }
                        $existing_blocks_html .= "</div>";
                        
                        $existing_blocks_html .= "<div class='kofront-d-flex kofront-gap-10 kofront-mt-05 kofront-flex-wrap kofront-align-center'><button type='button' class='kofront-btn kofront-btn-secondary kofront-open-wp-media kofront-min-w-150' data-target-type='gallery' data-counter='{$img_counter}'>Manage Gallery</button><select name='kofront_gallery_layout_{$img_counter}' class='kofront-input kofront-flex-1 kofront-min-w-120 kofront-max-w-200'><option value='grid' ".selected($is_masonry, 'grid', false).">Standard Grid</option><option value='masonry' ".selected($is_masonry, 'masonry', false).">Masonry</option><option value='slider' ".selected($is_masonry, 'slider', false).">Horizontal Slider</option></select></div><div class='kofront-hint'>Click to upload or choose images for your gallery.</div><div class='kofront-d-flex kofront-align-center kofront-gap-15 kofront-mt-05'><span class='kofront-span-hint kofront-text-sm kofront-text-muted kofront-d-block' style='display:none;'><em>(Galleries automatically span the full page in 2-column layout)</em></span></div></div>";
                    }
                } elseif (strpos($b, 'shortcode') === 0) {
                    $sc_val = esc_attr(trim(wp_strip_all_tags($p_block['innerHTML'])));
                    $existing_blocks_html .= "<div class='kofront-builder-block'><div class='kofront-block-header'><strong>Shortcode</strong><div class='kofront-block-actions'><button type='button' class='kofront-move-up' title='Move Up'>&#9650;</button><button type='button' class='kofront-move-down' title='Move Down'>&#9660;</button><button type='button' class='kofront-delete-block' title='Delete'>&times;</button></div></div><input type='hidden' name='kofront_order[]' value='shortcode'><input type='text' name='kofront_shortcode[]' class='kofront-input' value='{$sc_val}' placeholder='[your_shortcode]' required><div class='kofront-hint'>Paste any WordPress shortcode (e.g., [my_shortcode]).</div></div>";
                } else {
                    $block_label = esc_html($p_block['blockName']);
                    $raw_serialized = esc_textarea(serialize_block($p_block));
                    $existing_blocks_html .= "<div class='kofront-builder-block'><div class='kofront-block-header'><strong>Backend Block ({$block_label})</strong><div class='kofront-block-actions'><button type='button' class='kofront-move-up' title='Move Up'>&#9650;</button><button type='button' class='kofront-move-down' title='Move Down'>&#9660;</button><button type='button' class='kofront-delete-block' title='Delete'>&times;</button></div></div><input type='hidden' name='kofront_order[]' value='raw_block'><textarea name='kofront_raw_block[]' class='kofront-input kofront-d-none' rows='3' readonly>{$raw_serialized}</textarea><div class='kofront-hint'><em>(Custom block added via the WordPress backend editor. It will be preserved intact when you save.)</em></div></div>";
                }
            }
        }
    }

    $all_categories = get_categories( array( 'hide_empty' => false ) );

    ob_start();
    ?>
    <div class="kofront-portal kofront-portal-editor">
        <?php echo wp_kses_post( $message ); ?>
        <div id="kofront-form-area" class="kofront-form-section">
            <form method="post" action="" enctype="multipart/form-data">
                <?php wp_nonce_field( 'kofront_submit_action', 'kofront_nonce' ); ?>
                <input type="hidden" name="kofront_is_submission" value="1">
                <input type="hidden" name="kofront_post_id" value="<?php echo esc_attr($edit_id); ?>">

                <!-- Post content header. -->
                <div class="kofront-header-area">
                    <h2><?php echo ( $edit_id > 0 ) ? 'Edit Post' : 'New Post'; ?></h2>
                    <div class="kofront-d-flex kofront-align-center kofront-gap-15">
                        <button type="button" id="kofront-help-btn" class="kofront-post-top-links">Help</button>
                        <a href="<?php echo esc_url($dashboard_url); ?>" class="kofront-post-top-links">Cancel</a>
                    </div>
                </div>

                <h3 class="kofront-mb-1">Post Content</h3>

                <!-- Post title. -->
                <div class="kofront-field-group">
                    <input type="text" name="kofront_title" value="<?php echo esc_attr($f_title); ?>" placeholder="Enter Post Title *" required class="kofront-input kofront-mb-1">
                </div>

                <!-- Add buttons, Layout, and blocks. -->
                <div class="kofront-field-group">
                    <div class="kofront-builder-controls kofront-align-center">
                        <button type="button" class="kofront-btn kofront-btn-secondary kofront-add-heading">+ Add Heading</button>
                        <button type="button" class="kofront-btn kofront-btn-secondary kofront-add-paragraph">+ Add Paragraph</button>
                        <button type="button" class="kofront-btn kofront-btn-secondary kofront-add-image">+ Add Image</button>
                        <button type="button" class="kofront-btn kofront-btn-secondary kofront-add-gallery">+ Add Gallery</button>
                        <button type="button" class="kofront-btn kofront-btn-secondary kofront-add-toc">+ Add Table of Contents</button>
                        <button type="button" class="kofront-btn kofront-btn-secondary kofront-add-shortcode">+ Add Shortcode</button>
                        
                        <div class="kofront-d-flex kofront-align-center kofront-gap-10" style="margin-left: auto;">
                            <label style="margin: 0; white-space: nowrap;">Layout:</label>
                            <select name="kofront_layout_style" class="kofront-input" style="width: auto !important; min-width: 140px;">
                                <option value="1-col" <?php selected($f_layout, '1-col'); ?>>Single Column</option>
                                <option value="2-col" <?php selected($f_layout, '2-col'); ?>>Two Columns</option>
                            </select>
                        </div>
                    </div>
                    <div id="kofront-modular-blocks"><?php echo wp_kses( $existing_blocks_html, kofront_get_allowed_builder_html() ); ?></div>
                </div>

                <div class="kofront-divider"></div>

                <h3 class="kofront-mb-1">Post Settings</h3>

                <!-- Excerpt. -->
                <div class="kofront-field-group">
                    <label>Excerpt (Optional Summary)</label>
                    <textarea name="kofront_excerpt" rows="2" class="kofront-input"><?php echo esc_textarea($f_excerpt); ?></textarea>
                </div>

                <!-- Featured image. -->
                <div class="kofront-field-group">
                    <label>Featured Image (Cover)</label>
                    <?php 
                    $featured_img_url = '';
                    if($edit_id && has_post_thumbnail($edit_id)) {
                        $featured_img_url = wp_get_attachment_image_url(get_post_thumbnail_id($edit_id), 'thumbnail');
                    }
                    ?>
                    <div class="kofront-hint kofront-mb-05" id="kofront_main_thumbnail_hint"><?php echo ($edit_id && has_post_thumbnail($edit_id)) ? 'Cover image already set. Choose below to replace or clear.' : 'Upload or choose a cover image below.'; ?></div>
                    <div class="kofront-img-preview-row kofront-live-previews kofront-mt-05" id="kofront_main_thumbnail_preview">
                        <?php if($featured_img_url): ?>
                            <img src="<?php echo esc_url($featured_img_url); ?>" class="kofront-img-preview-thumb">
                        <?php endif; ?>
                    </div>
                    <input type="hidden" name="kofront_existing_thumbnail" id="kofront_existing_thumbnail" value="<?php echo esc_attr($edit_id ? get_post_thumbnail_id($edit_id) : ''); ?>">
                    <div class="kofront-d-flex kofront-gap-10 kofront-align-center kofront-flex-wrap">
                        <button type="button" class="kofront-btn kofront-btn-secondary kofront-open-wp-media kofront-min-w-150" data-target-type="featured" data-input-id="kofront_existing_thumbnail" data-preview-id="kofront_main_thumbnail_preview">Choose Image</button>
                        <button type="button" id="kofront-clear-main-thumbnail" class="kofront-btn-text-danger kofront-clear-btn">Clear Cover Image</button>
                    </div>
                </div>

                <div class="kofront-flex-row">
                    <!-- Categories. -->
                    <div class="kofront-flex-col">
                        <div class="kofront-field-group">
                            <label>Categories</label>
                            <div class="kofront-cat-scroll">
                            <?php foreach ( $all_categories as $cat ) : $checked = in_array( $cat->term_id, $f_cats ) ? 'checked' : ''; ?>
                                <div class="kofront-cat-row kofront-d-flex kofront-justify-between kofront-align-center">
                                    <label class="kofront-feature-label">
                                        <input type="checkbox" name="kofront_categories[]" value="<?php echo esc_attr( $cat->term_id ); ?>" <?php echo esc_attr( $checked ); ?>> 
                                        <?php echo esc_html( $cat->name ); ?>
                                    </label>
                                    <?php if ( current_user_can('edit_others_posts') ) : ?>
                                        <button type="button" class="kofront-btn-text-danger kofront-ajax-del-cat" data-cat-id="<?php echo esc_attr( $cat->term_id ); ?>">Delete</button>
                                    <?php endif; ?>
                                </div>
                            <?php endforeach; ?>
                            </div>
                            <input type="text" name="kofront_new_category" placeholder="Or type a new category..." class="kofront-input kofront-mt-05">
                        </div>
                    </div>
                    
                    <div class="kofront-flex-col">
                        <!-- Tags. -->
                        <div class="kofront-field-group">
                            <label>Tags</label>
                            <input type="text" name="kofront_tags" value="<?php echo esc_attr($f_tags_str); ?>" placeholder="e.g. news, photography (separate with commas)" class="kofront-input">
                        </div>
                    </div>
                </div>

                <input type="hidden" name="kofront_clear_featured" id="kofront_clear_featured" value="0">

                <!-- Submit, save draft, and cancel buttons. -->
                <div class="kofront-form-actions">
                    <button type="submit" name="kofront_submit_post" class="kofront-btn kofront-flex-2 kofront-min-w-150">
                        <?php echo ( $edit_id > 0 && $f_status === 'publish' ) ? 'Update Post' : 'Publish Post'; ?>
                    </button>
                    <button type="submit" name="kofront_save_draft" class="kofront-btn kofront-btn-secondary kofront-flex-1 kofront-min-w-130">
                        Save as Draft
                    </button>
                    <a href="<?php echo esc_url($dashboard_url); ?>" class="kofront-btn kofront-btn-danger kofront-flex-1 kofront-min-w-130" style="text-decoration:none; display:flex; align-items:center; justify-content:center; box-sizing:border-box;">
                        Cancel / Discard
                    </a>
                </div>
            </form>
        </div>
    </div>

    <?php
    return ob_get_clean();
}

// ---------------------------------------------------------
// 5. Restrict media library visibility based on user role.
// ---------------------------------------------------------
add_filter( 'ajax_query_attachments_args', 'kofront_filter_media_library_by_role' );
function kofront_filter_media_library_by_role( $query ) {
    if ( current_user_can( 'manage_options' ) ) {
        return $query; // Administrator sees everything.
    }
    
    $current_user_id = get_current_user_id();
    if ( current_user_can( 'edit_others_posts' ) ) {
        // Editor: See all media attached to posts across the site.
        $query['post_parent__not_in'] = array( 0 );
    } else {
        // Author: See only their own uploaded media.
        $query['author'] = $current_user_id;
    }
    
    return $query;
}

// ---------------------------------------------------------
// 6. Render global Help modal in footer on portal pages.
// ---------------------------------------------------------
add_action( 'wp_footer', 'kofront_render_global_help_modal' );
function kofront_render_global_help_modal() {
    global $post;
    if ( is_a( $post, 'WP_Post' ) && ( has_shortcode( $post->post_content, 'kofront_dashboard' ) || has_shortcode( $post->post_content, 'kofront_editor' ) ) ) {
        ?>
        <!-- Help modal overlay. -->
        <div id="kofront-help-modal" class="kofront-modal-overlay">
            <div class="kofront-modal-content">
                <div class="kofront-modal-header">
                    <h3>kofront User Guide</h3>
                    <button type="button" id="kofront-close-help" class="kofront-btn-text-danger kofront-close-help">X</button>
                </div>
                <div class="kofront-modal-body">
                    <p><strong>Welcome to kofront!</strong> This portal allows you to easily create, edit, and manage your website posts directly from the frontend.</p>
                    <p><strong>1. Creating a Post:</strong> Click "+ Create New Post" at the top to open the editor. Enter your main title and use the content builder buttons to insert headings, text paragraphs, or body images.</p>
                    <p><strong>2. Organizing Content:</strong> Use the up (&uarr;) and down (&darr;) arrows on any content block to rearrange your article layout. Click "X" to remove a block.</p>
                    <p><strong>3. Images & Sizing:</strong> Click "Choose Image" to securely access your media library, upload new files, or select existing ones. You can also select the radio button beneath an image to use it as the main Cover/Featured Image for your post.</p>
                    <p><strong>4. Categories & Tags:</strong> Select existing categories or type a new one into the input box. For tags, write multiple tags separated by commas (e.g., <em>design, tech, updates</em>).</p>
                    <p><strong>5. Saving Options:</strong> You can choose to publish your post immediately, save it as a draft for later review, or click "Cancel" to close the editor without saving.</p>
                    <p class="kofront-modal-footer-note">Contact <a href="https://kreativekabbage.com" target="_blank" rel="noopener noreferrer">kreativekabbage</a> for feedback or support.</p>
                </div>
            </div>
        </div>
        <?php
    }
}

// ---------------------------------------------------------
// 7. Allowed HTML tags, inline sanitizer, and toolbar helper for the modular builder.
// ---------------------------------------------------------
function kofront_get_allowed_inline_html() {
    return array(
        'a'      => array(
            'href'   => true,
            'target' => true,
            'rel'    => true,
            'title'  => true,
        ),
        'strong' => array(),
        'b'      => array(),
        'em'     => array(),
        'i'      => array(),
        'u'      => array(),
        's'      => array(),
        'strike' => array(),
        'del'    => array(),
        'code'   => array(),
        'mark'   => array(),
        'sub'    => array(),
        'sup'    => array(),
        'br'     => array(),
    );
}

function kofront_sanitize_inline_html( $html ) {
    return wp_kses( (string) $html, kofront_get_allowed_inline_html() );
}

function kofront_get_richtext_toolbar_html( $context = 'paragraph' ) {
    $extra_btns = '';
    if ( 'paragraph' === $context ) {
        $extra_btns = "<button type='button' class='kofront-rt-btn' data-cmd='underline' title='Underline (Ctrl+U)'><u>U</u></button><button type='button' class='kofront-rt-btn' data-cmd='strikeThrough' title='Strikethrough'><s>S</s></button>";
    }
    return "<div class='kofront-richtext-toolbar'><button type='button' class='kofront-rt-btn' data-cmd='bold' title='Bold (Ctrl+B)'><strong>B</strong></button><button type='button' class='kofront-rt-btn' data-cmd='italic' title='Italic (Ctrl+I)'><em>I</em></button>{$extra_btns}<button type='button' class='kofront-rt-btn kofront-rt-link-btn' title='Insert/Edit Link'>&#128279; Link</button><button type='button' class='kofront-rt-btn' data-cmd='unlink' title='Remove Link'>Unlink</button><button type='button' class='kofront-rt-btn' data-cmd='removeFormat' title='Clear Formatting'>Tx</button></div><div class='kofront-link-popover kofront-d-none'><input type='url' class='kofront-input kofront-link-url-input' placeholder='https://example.com'><label class='kofront-feature-label'><input type='checkbox' class='kofront-link-target-cb' checked> New tab</label><button type='button' class='kofront-btn kofront-btn-secondary kofront-link-apply-btn'>Apply</button><button type='button' class='kofront-btn-text-danger kofront-link-cancel-btn'>Cancel</button></div>";
}

function kofront_get_allowed_builder_html() {
    return array_merge(
        kofront_get_allowed_inline_html(),
        array(
            'div'      => array(
                'class'            => true,
                'id'               => true,
                'style'            => true,
                'contenteditable'  => true,
                'data-placeholder' => true,
            ),
            'strong'   => array(
                'class' => true,
            ),
            'span'     => array(
                'class' => true,
                'style' => true,
            ),
            'em'       => array(),
            'label'    => array(
                'class' => true,
                'style' => true,
            ),
            'button'   => array(
                'type'             => true,
                'class'            => true,
                'title'            => true,
                'style'            => true,
                'data-target-type' => true,
                'data-input-id'    => true,
                'data-counter'     => true,
                'data-cmd'         => true,
            ),
            'input'    => array(
                'type'        => true,
                'name'        => true,
                'id'          => true,
                'class'       => true,
                'value'       => true,
                'required'    => true,
                'checked'     => true,
                'disabled'    => true,
                'placeholder' => true,
                'readonly'    => true,
            ),
            'select'   => array(
                'name'  => true,
                'class' => true,
                'style' => true,
            ),
            'option'   => array(
                'value'    => true,
                'selected' => true,
            ),
            'textarea' => array(
                'name'        => true,
                'class'       => true,
                'rows'        => true,
                'required'    => true,
                'placeholder' => true,
                'readonly'    => true,
            ),
            'img'      => array(
                'src'   => true,
                'class' => true,
                'alt'   => true,
            ),
        )
    );
}

// ---------------------------------------------------------
// 8. Register with Rank Math SEO as a Table of Contents provider.
// ---------------------------------------------------------
add_filter( 'rank_math/researches/toc_plugins', 'kofront_register_rank_math_toc' );
function kofront_register_rank_math_toc( $toc_plugins ) {
    $toc_plugins['kofront-frontend-posts/kofront-frontend-posts.php'] = 'kofront frontend posts';
    return $toc_plugins;
}

// ---------------------------------------------------------
// 9. Dynamically sync TOC and apply 2-column layout on frontend render.
// ---------------------------------------------------------
add_filter( 'the_content', 'kofront_filter_frontend_post_content', 20 );
function kofront_filter_frontend_post_content( $content ) {
    if ( ! is_singular( 'post' ) || ! in_the_loop() || ! is_main_query() ) {
        return $content;
    }

    $post_id = get_the_ID();
    if ( ! $post_id ) {
        return $content;
    }

    // 1. If post contains a kofront TOC block, dynamically ensure all headings have IDs and sync the TOC list (supports backend edits).
    if ( strpos( $content, 'data-kofront-toc="1"' ) !== false ) {
        $used_ids  = array();
        $toc_items = array();

        $content = preg_replace_callback(
            '/<h([1-6])([^>]*)>(.*?)<\/h\1>/is',
            function ( $matches ) use ( &$used_ids, &$toc_items ) {
                $level      = intval( $matches[1] );
                $attrs      = $matches[2];
                $inner_html = $matches[3];
                $plain_text = trim( wp_strip_all_tags( $inner_html ) );

                if ( '' === $plain_text ) {
                    return $matches[0];
                }

                if ( preg_match( '/\bid=["\']([^"\']+)["\']/i', $attrs, $id_match ) ) {
                    $anchor_id = $id_match[1];
                } else {
                    $base_anchor = sanitize_title( $plain_text );
                    if ( '' === $base_anchor ) {
                        $base_anchor = 'section';
                    }
                    $anchor_id = $base_anchor;
                    $suffix    = 2;
                    while ( in_array( $anchor_id, $used_ids, true ) ) {
                        $anchor_id = $base_anchor . '-' . $suffix;
                        $suffix++;
                    }
                    $attrs .= ' id="' . esc_attr( $anchor_id ) . '"';
                }

                $used_ids[]  = $anchor_id;
                $toc_items[] = array(
                    'level' => $level,
                    'text'  => $plain_text,
                    'id'    => $anchor_id,
                );

                return '<h' . $level . $attrs . '>' . $inner_html . '</h' . $level . '>';
            },
            $content
        );

        $content = preg_replace_callback(
            '/<nav\b[^>]*\bdata-kofront-toc="1"[^>]*>.*?<\/nav>/is',
            function ( $nav_match ) use ( $toc_items ) {
                $nav_html  = $nav_match[0];
                $toc_title = __( 'Table of Contents', 'kofront-frontend-posts' );
                if ( preg_match( '/data-toc-title="([^"]*)"/i', $nav_html, $t_match ) ) {
                    $toc_title = wp_strip_all_tags( $t_match[1] );
                }

                $toc_levels_str = '1,2,3,4,5,6';
                if ( preg_match( '/data-toc-levels="([^"]*)"/i', $nav_html, $l_match ) ) {
                    $toc_levels_str = preg_replace( '/[^0-9,]/', '', $l_match[1] );
                }
                $allowed_levels = array_map( 'intval', array_filter( explode( ',', $toc_levels_str ) ) );

                $toc_span   = ( strpos( $nav_html, 'data-toc-span="1"' ) !== false || strpos( $nav_html, 'kofront-span-all' ) !== false ) ? '1' : '0';
                $span_class = ( '1' === $toc_span ) ? ' kofront-span-all' : '';

                $filtered_items = array();
                foreach ( $toc_items as $item ) {
                    if ( in_array( intval( $item['level'] ), $allowed_levels, true ) ) {
                        $filtered_items[] = $item;
                    }
                }

                $rebuilt = '<nav id="rank-math-toc" class="kofront-toc wp-block-table-of-contents' . esc_attr( $span_class ) . '" data-kofront-toc="1" data-toc-title="' . esc_attr( $toc_title ) . '" data-toc-levels="' . esc_attr( $toc_levels_str ) . '" data-toc-span="' . esc_attr( $toc_span ) . '" aria-label="' . esc_attr( $toc_title ) . '"><div class="kofront-toc-title"><strong>' . esc_html( $toc_title ) . '</strong></div>';
                if ( ! empty( $filtered_items ) ) {
                    $rebuilt .= '<ul class="kofront-toc-list">';
                    foreach ( $filtered_items as $item ) {
                        $indent_class = 'kofront-toc-level-' . intval( $item['level'] );
                        $rebuilt     .= '<li class="' . esc_attr( $indent_class ) . '"><a href="#' . esc_attr( $item['id'] ) . '">' . esc_html( $item['text'] ) . '</a></li>';
                    }
                    $rebuilt .= '</ul>';
                } else {
                    $rebuilt .= '<p class="kofront-toc-empty"><em>' . esc_html__( 'Add matching headings to your post to populate the Table of Contents.', 'kofront-frontend-posts' ) . '</em></p>';
                }
                $rebuilt .= '</nav>';
                return $rebuilt;
            },
            $content
        );
    }

    // 2. Apply the 2-column newspaper wrapper dynamically if enabled and not already present.
    $layout_style = get_post_meta( $post_id, '_kofront_layout_style', true );
    if ( '2-col' === $layout_style && strpos( $content, 'kofront-newspaper-columns' ) === false ) {
        $content = '<div class="kofront-newspaper-columns">' . $content . '</div>';
    }

    return $content;
}