<?php
/**
 * Product edit screen: the "Tabs" panel of the Product data box.
 *
 * @package Prodtabs
 */

namespace Prodtabs;

defined( 'ABSPATH' ) || exit;

/**
 * Panel, saving and AJAX actions of the product screen.
 */
final class Admin_Product {

	const NONCE_SAVE = 'prodtabs_save_tabs';
	const NONCE_AJAX = 'prodtabs_product';

	/**
	 * Name of the panel in the Product data box. While Custom Product Tabs (YIKES) is active, its own panel sits next to
	 * ours with a close name: the plugin name tells them apart.
	 */
	public static function panel_label(): string {
		return Import_Yikes::active() ? __( 'Tabs (ProdTabs)', 'prodtabs' ) : __( 'Tabs', 'prodtabs' );
	}

	/** Hooks. */
	public static function init(): void {
		add_filter( 'woocommerce_product_data_tabs', array( __CLASS__, 'data_tab' ) );
		add_action( 'woocommerce_product_data_panels', array( __CLASS__, 'panel' ) );
		add_action( 'woocommerce_admin_process_product_object', array( __CLASS__, 'save' ) );
		add_action( 'admin_enqueue_scripts', array( __CLASS__, 'assets' ), 20 );
		add_action( 'wp_ajax_prodtabs_library_row', array( __CLASS__, 'ajax_library_row' ) );
		add_action( 'wp_ajax_prodtabs_customize', array( __CLASS__, 'ajax_customize' ) );
		add_action( 'admin_notices', array( __CLASS__, 'show_notice' ) );
	}

	/**
	 * Entry of the panel in the Product data box.
	 *
	 * @param array $tabs Product data tabs.
	 */
	public static function data_tab( $tabs ) {
		$tabs['prodtabs'] = array(
			'label'    => self::panel_label(),
			'target'   => 'prodtabs_product_data',
			'class'    => array(),
			'priority' => 75,
		);
		return $tabs;
	}

	/** Scripts and styles of the product screen. */
	public static function assets(): void {
		$screen = get_current_screen();
		if ( ! $screen || 'product' !== $screen->id ) {
			return;
		}
		wp_enqueue_editor();
		wp_enqueue_style( 'prodtabs-admin', PRODTABS_URL . 'assets/css/admin.css', array(), Plugin::asset_version( 'assets/css/admin.css' ) );

		$deps = array( 'jquery', 'jquery-ui-sortable', 'wp-a11y' );
		if ( wp_script_is( 'selectWoo', 'registered' ) ) {
			$deps[] = 'selectWoo';
			wp_enqueue_style( 'select2' );
		}
		wp_enqueue_script( 'prodtabs-admin-product', PRODTABS_URL . 'assets/js/admin-product.js', $deps, Plugin::asset_version( 'assets/js/admin-product.js' ), true );
		Display::copy_script();
		wp_localize_script(
			'prodtabs-admin-product',
			'prodtabsProduct',
			array(
				'ajaxUrl'   => admin_url( 'admin-ajax.php' ),
				'nonce'     => wp_create_nonce( self::NONCE_AJAX ),
				'productId' => (int) get_the_ID(),
				'i18n'      => array(
					/* translators: %s: tab title. */
					'moveUp'        => __( 'Move “%s” up', 'prodtabs' ),
					/* translators: %s: tab title. */
					'moveDown'      => __( 'Move “%s” down', 'prodtabs' ),
					/* translators: %s: tab title. */
					'remove'        => __( 'Remove “%s”', 'prodtabs' ),
					/* translators: 1: tab title, 2: new position, 3: number of tabs. */
					'moved'         => __( '“%1$s” moved to position %2$d of %3$d.', 'prodtabs' ),
					/* translators: %s: tab title. */
					'added'         => __( '“%s” added.', 'prodtabs' ),
					/* translators: %s: tab title. */
					'removed'       => __( '“%s” removed.', 'prodtabs' ),
					/* translators: %s: tab title. */
					'confirmRemove' => __( 'Remove the tab “%s”? Its content will be lost when you update the product.', 'prodtabs' ),
					'confirmRevert' => __( 'Go back to the shared version? The changes made to this tab on this product will be lost when you update the product.', 'prodtabs' ),
					'untitled'      => __( '(no title)', 'prodtabs' ),
					'error'         => __( 'Something went wrong. Reload the page and try again.', 'prodtabs' ),
					'newTab'        => __( 'New tab', 'prodtabs' ),
				),
			)
		);
	}

	/** Panel content. */
	public static function panel(): void {
		global $post;
		$product_id = $post ? (int) $post->ID : 0;
		$entries    = $product_id ? Product_Tabs::get( $product_id ) : array();
		$product = $product_id ? wc_get_product( $product_id ) : null;
		if ( $product ) {
			$entries = Product_Tabs::with_auto( $entries, $product );
		}
		if ( ! $entries ) {
			$entries = Tabs::with_natives( array(), Settings::get( 'native_order' ) );
		}
		$context = array(
			'lang'    => $product_id ? Multilingual::post_language( $product_id ) : '',
			'locked'  => $product_id && Multilingual::structure_locked( $product_id ),
			'source'  => self::source_texts( $product_id ),
			'product' => $product_id,
		);
		$library = $context['locked'] ? array() : self::library_choices( $context['lang'] );
		?>
		<div id="prodtabs_product_data" class="panel woocommerce_options_panel hidden">
			<div class="prodtabs-panel<?php echo $context['locked'] ? ' is-locked' : ''; ?>" data-next-index="<?php echo esc_attr( (string) count( $entries ) ); ?>">
				<?php wp_nonce_field( self::NONCE_SAVE, 'prodtabs_nonce' ); ?>
				<input type="hidden" name="prodtabs[signature]" value="<?php echo esc_attr( Tabs::signature( $product_id ? Product_Tabs::layout( $product_id ) : array() ) ); ?>">
				<?php if ( $context['locked'] ) : ?>
					<div class="prodtabs-message prodtabs-message--info"><p><?php esc_html_e( 'This product is a translation: its tabs, their order and their visibility follow the original product. Translate the texts of its own tabs here, or in the translation editor.', 'prodtabs' ); ?></p></div>
				<?php else : ?>
					<p class="prodtabs-intro"><?php esc_html_e( 'Tabs shown on this product, in this order. Drag a tab or use its arrows to move it.', 'prodtabs' ); ?></p>
				<?php endif; ?>
				<ul class="prodtabs-list">
					<?php
					foreach ( $entries as $index => $entry ) {
						// phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- escaped in row().
						echo self::row( $entry, $index, $context );
					}
					?>
				</ul>
				<?php if ( ! $context['locked'] ) : ?>
					<p class="prodtabs-empty"<?php echo Tabs::has_custom( $entries ) ? ' hidden' : ''; ?>>
						<?php esc_html_e( 'This product only shows the WooCommerce tabs. Add a tab of its own, or a shared tab.', 'prodtabs' ); ?>
					</p>
					<div class="prodtabs-actions">
						<button type="button" class="button prodtabs-add-local">
							<span class="dashicons dashicons-plus-alt2" aria-hidden="true"></span>
							<?php esc_html_e( 'Add a tab', 'prodtabs' ); ?>
						</button>
						<?php
						/**
						 * Buttons of extensions next to "Add a tab" (a FAQ, for example).
						 *
						 * @param int $product_id Product id.
						 */
						do_action( 'prodtabs_panel_actions', $product_id );
						?>
						<?php if ( $library ) : ?>
							<span class="prodtabs-add-library">
								<label for="prodtabs-library-select" class="screen-reader-text"><?php esc_html_e( 'Add a shared tab', 'prodtabs' ); ?></label>
								<select id="prodtabs-library-select" class="prodtabs-library-select" data-placeholder="<?php esc_attr_e( 'Add a shared tab…', 'prodtabs' ); ?>">
									<option value=""><?php esc_html_e( 'Add a shared tab…', 'prodtabs' ); ?></option>
									<?php foreach ( $library as $id => $label ) : ?>
										<option value="<?php echo esc_attr( (string) $id ); ?>"><?php echo esc_html( $label ); ?></option>
									<?php endforeach; ?>
								</select>
							</span>
						<?php else : ?>
							<a class="prodtabs-library-link" href="<?php echo esc_url( admin_url( 'post-new.php?post_type=' . Library::POST_TYPE ) ); ?>" target="_blank" rel="noopener">
								<?php esc_html_e( 'Create a shared tab, to use on several products', 'prodtabs' ); ?><span class="screen-reader-text"> <?php esc_html_e( '(opens in a new tab)', 'prodtabs' ); ?></span>
							</a>
						<?php endif; ?>
					</div>
					<script type="text/html" id="tmpl-prodtabs-local">
						<?php
						$template = self::row(
							array(
								'type'       => 'local',
								'key'        => '__KEY__',
								'anchor'     => '',
								'title'      => '',
								'content'    => '',
								'origin'     => 0,
								'visible'    => true,
								'translated' => true,
							),
							'__INDEX__',
							$context,
							true
						);
						echo $template; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- escaped in row().
						?>
					</script>
				<?php endif; ?>
				<?php
				if ( $product_id ) {
					echo Display::shortcode_field( Display::shortcode_for( $product_id ), __( 'Shortcode of all the tabs of this product', 'prodtabs' ), 'prodtabs-shortcode-all' ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- escaped in shortcode_field().
				}
				/**
				 * After the tab list of the product panel.
				 *
				 * @param int $product_id Product id.
				 */
				do_action( 'prodtabs_product_panel_after', $product_id );
				?>
				<?php // Last field of the panel: when PHP drops fields beyond max_input_vars, it is missing and nothing is saved. ?>
				<input type="hidden" name="prodtabs[complete]" value="1">
			</div>
		</div>
		<?php
	}

	/**
	 * Texts of the source of a translation, shown to translators as a reference.
	 *
	 * @param int $product_id Product id.
	 * @return array Texts by key.
	 */
	private static function source_texts( int $product_id ): array {
		$source = $product_id ? Multilingual::source_product( $product_id ) : 0;
		$texts  = $source ? get_post_meta( $source, Tabs::META_TEXTS, true ) : array();
		return is_array( $texts ) ? $texts : array();
	}

	/**
	 * Published library tabs offered in the panel, in the language of the product when there is one.
	 *
	 * @param string $lang Language of the product.
	 * @return string[] Label by id.
	 */
	private static function library_choices( string $lang ): array {
		$args = array(
			'post_type'      => Library::POST_TYPE,
			'post_status'    => 'publish',
			'posts_per_page' => 500,
			'orderby'        => 'title',
			'order'          => 'ASC',
			'no_found_rows'  => true,
		);
		if ( '' !== $lang ) {
			$args['lang']             = $lang; // Polylang.
			$args['suppress_filters'] = false; // WPML filters the query by the current admin language.
		}
		$choices = array();
		foreach ( get_posts( $args ) as $post ) {
			$shop                 = Library::shop_title( $post );
			/* translators: 1: title of the tab in the shop, 2: name of the library tab. */
			$choices[ $post->ID ] = $shop === $post->post_title ? $shop : sprintf( __( '%1$s (%2$s)', 'prodtabs' ), $shop, $post->post_title );
		}
		return $choices;
	}

	/**
	 * One row of the list.
	 *
	 * @param array      $entry    Normalised entry.
	 * @param int|string $index    Position in the form (a placeholder in the template).
	 * @param array      $context  lang, locked, source (texts of the source product).
	 * @param bool       $expanded Whether the row opens on display.
	 */
	public static function row( array $entry, $index, array $context = array(), bool $expanded = false ): string {
		$context = wp_parse_args(
			$context,
			array(
				'lang'    => '',
				'locked'  => false,
				'source'  => array(),
				'product' => 0,
			)
		);
		$index   = (string) $index;
		$name    = 'prodtabs[entries][' . $index . ']';
		$type    = $entry['type'];
		$title   = self::row_title( $entry, $context );
		$body    = '';
		$notes   = array();
		$locked  = (bool) $context['locked'];

		if ( 'native' === $type ) {
			$natives = Settings::get( 'natives' );
			$visible = null === $entry['visible'] ? $natives[ $entry['key'] ]['visible'] : $entry['visible'];
			$value   = null === $entry['visible'] ? '' : ( $entry['visible'] ? '1' : '0' );
			$badge   = __( 'WooCommerce', 'prodtabs' );
			$body    = self::native_body( $entry, $context );
		} else {
			$visible = (bool) $entry['visible'];
			$value   = $visible ? '1' : '0';
			$badge   = 'local' === $type ? __( 'This product', 'prodtabs' ) : __( 'Shared', 'prodtabs' );
			$body    = 'local' === $type ? self::local_body( $entry, $index, $name, $context ) : self::library_body( $entry, $context );
			if ( 'library' === $type && ! Library::get_tab( (int) $entry['library_id'] ) ) {
				$notes[] = __( 'Not published: not shown in the shop.', 'prodtabs' );
			}
			if ( ! empty( $entry['auto'] ) ) {
				$notes[] = __( 'Added automatically', 'prodtabs' );
			}
			if ( 'local' === $type && empty( $entry['translated'] ) ) {
				$notes[] = __( 'Not translated', 'prodtabs' );
			}
		}

		$title_id = 'prodtabs-title-' . $index;
		$body_id  = 'prodtabs-body-' . $index;
		$classes  = array( 'prodtabs-item', 'prodtabs-item--' . $type );
		if ( ! $visible ) {
			$classes[] = 'is-hidden';
		}
		if ( $expanded ) {
			$classes[] = 'is-open';
		}

		ob_start();
		?>
		<li class="<?php echo esc_attr( implode( ' ', $classes ) ); ?>" data-type="<?php echo esc_attr( $type ); ?>" data-index="<?php echo esc_attr( $index ); ?>">
			<div class="prodtabs-item__head">
				<?php if ( ! $locked ) : ?>
					<span class="prodtabs-item__handle dashicons dashicons-menu" aria-hidden="true" title="<?php esc_attr_e( 'Drag to move', 'prodtabs' ); ?>"></span>
				<?php endif; ?>
				<span class="prodtabs-item__label">
					<span class="prodtabs-item__title" id="<?php echo esc_attr( $title_id ); ?>"><?php echo esc_html( '' !== $title ? $title : __( '(no title)', 'prodtabs' ) ); ?></span>
					<span class="prodtabs-badge prodtabs-badge--<?php echo esc_attr( $type ); ?>"><?php echo esc_html( $badge ); ?></span>
					<?php foreach ( $notes as $note ) : ?>
						<span class="prodtabs-item__note"><?php echo esc_html( $note ); ?></span>
					<?php endforeach; ?>
				</span>
				<span class="prodtabs-item__tools">
					<label class="prodtabs-visible">
						<input type="checkbox" class="prodtabs-visible__box" aria-describedby="<?php echo esc_attr( $title_id ); ?>"<?php checked( $visible ); ?><?php disabled( $locked ); ?>>
						<?php esc_html_e( 'Visible', 'prodtabs' ); ?>
					</label>
					<?php if ( ! $locked ) : ?>
						<button type="button" class="button-link prodtabs-move" data-direction="up" aria-label="<?php /* translators: %s: tab title. */ echo esc_attr( sprintf( __( 'Move “%s” up', 'prodtabs' ), $title ) ); ?>">
							<span class="dashicons dashicons-arrow-up-alt2" aria-hidden="true"></span>
						</button>
						<button type="button" class="button-link prodtabs-move" data-direction="down" aria-label="<?php /* translators: %s: tab title. */ echo esc_attr( sprintf( __( 'Move “%s” down', 'prodtabs' ), $title ) ); ?>">
							<span class="dashicons dashicons-arrow-down-alt2" aria-hidden="true"></span>
						</button>
					<?php endif; ?>
					<?php if ( 'native' === $type ) : ?>
						<button type="button" class="button-link prodtabs-toggle" aria-expanded="<?php echo $expanded ? 'true' : 'false'; ?>" aria-controls="<?php echo esc_attr( $body_id ); ?>" aria-describedby="<?php echo esc_attr( $title_id ); ?>">
							<?php esc_html_e( 'Details', 'prodtabs' ); ?>
						</button>
						<?php if ( ! $locked ) : ?>
							<span class="prodtabs-item__spacer" aria-hidden="true">
								<span class="button-link"><span class="dashicons dashicons-trash"></span></span>
							</span>
						<?php endif; ?>
					<?php else : ?>
						<button type="button" class="button-link prodtabs-toggle" aria-expanded="<?php echo $expanded ? 'true' : 'false'; ?>" aria-controls="<?php echo esc_attr( $body_id ); ?>" aria-describedby="<?php echo esc_attr( $title_id ); ?>">
							<?php echo 'local' === $type ? esc_html__( 'Edit', 'prodtabs' ) : esc_html__( 'Details', 'prodtabs' ); ?>
						</button>
						<?php if ( ! $locked && ! empty( $entry['auto'] ) ) : ?>
							<?php // Removed, it would come back: the Visible box hides it on this product. ?>
							<span class="prodtabs-item__spacer" aria-hidden="true">
								<span class="button-link"><span class="dashicons dashicons-trash"></span></span>
							</span>
						<?php elseif ( ! $locked ) : ?>
							<button type="button" class="button-link prodtabs-remove" aria-label="<?php /* translators: %s: tab title. */ echo esc_attr( sprintf( __( 'Remove “%s”', 'prodtabs' ), $title ) ); ?>">
								<span class="dashicons dashicons-trash" aria-hidden="true"></span>
							</button>
						<?php endif; ?>
					<?php endif; ?>
				</span>
			</div>
			<div class="prodtabs-item__body" id="<?php echo esc_attr( $body_id ); ?>"<?php echo $expanded ? '' : ' hidden'; ?>>
				<?php echo $body; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- built from escaped parts. ?>
			</div>
			<input type="hidden" name="<?php echo esc_attr( $name . '[type]' ); ?>" value="<?php echo esc_attr( $type ); ?>">
			<input type="hidden" class="prodtabs-visible__value" name="<?php echo esc_attr( $name . '[visible]' ); ?>" value="<?php echo esc_attr( $value ); ?>">
			<?php if ( 'native' === $type ) : ?>
				<input type="hidden" name="<?php echo esc_attr( $name . '[key]' ); ?>" value="<?php echo esc_attr( $entry['key'] ); ?>">
			<?php elseif ( 'library' === $type ) : ?>
				<input type="hidden" name="<?php echo esc_attr( $name . '[library_id]' ); ?>" value="<?php echo esc_attr( (string) $entry['library_id'] ); ?>">
				<input type="hidden" class="prodtabs-anchor-value" name="<?php echo esc_attr( $name . '[anchor]' ); ?>" value="<?php echo esc_attr( $entry['anchor'] ); ?>">
				<?php if ( ! empty( $entry['auto'] ) ) : ?>
					<input type="hidden" name="<?php echo esc_attr( $name . '[auto]' ); ?>" value="1">
				<?php endif; ?>
			<?php endif; ?>
		</li>
		<?php
		return (string) ob_get_clean();
	}

	/**
	 * Title shown on a row.
	 *
	 * @param array $entry   Entry.
	 * @param array $context Row context.
	 */
	private static function row_title( array $entry, array $context ): string {
		if ( 'native' === $entry['type'] ) {
			$custom = Settings::get( 'natives' )[ $entry['key'] ]['title'];
			if ( '' !== $custom ) {
				return trim( str_replace( '{count}', '', $custom ) );
			}
			$labels = array(
				'description'            => __( 'Description', 'prodtabs' ),
				'additional_information' => __( 'Additional information', 'prodtabs' ),
				'reviews'                => __( 'Reviews', 'prodtabs' ),
			);
			return $labels[ $entry['key'] ];
		}
		if ( 'local' === $entry['type'] ) {
			if ( '' === $entry['title'] && isset( $context['source'][ $entry['key'] ]['title'] ) ) {
				return (string) $context['source'][ $entry['key'] ]['title'];
			}
			return $entry['title'];
		}
		$post = get_post( self::library_id_in( (int) $entry['library_id'], (string) $context['lang'] ) );
		return $post && Library::POST_TYPE === $post->post_type ? Library::shop_title( $post ) : __( '(deleted shared tab)', 'prodtabs' );
	}

	/**
	 * Library tab to show for a product: its translation in the language of the product when there is one.
	 *
	 * @param int    $id   Library tab id.
	 * @param string $lang Language of the product.
	 */
	private static function library_id_in( int $id, string $lang ): int {
		if ( '' === $lang ) {
			return $id;
		}
		$translated = Multilingual::translation( $id, Library::POST_TYPE, $lang );
		return $translated ? $translated : $id;
	}

	/**
	 * Fields of a tab of the product.
	 *
	 * @param array  $entry   Entry.
	 * @param string $index   Position in the form.
	 * @param string $name    Field name prefix.
	 * @param array  $context Row context.
	 */
	private static function local_body( array $entry, string $index, string $name, array $context ): string {
		$origin = (int) $entry['origin'];
		$source = $origin ? get_post( self::library_id_in( $origin, (string) $context['lang'] ) ) : null;
		$ref    = $context['source'][ $entry['key'] ] ?? null;
		ob_start();
		if ( $source && Library::POST_TYPE === $source->post_type ) :
			?>
			<div class="prodtabs-origin prodtabs-message prodtabs-message--info">
				<p>
					<?php
					/* translators: %s: library tab title. */
					echo esc_html( sprintf( __( 'Customized from the shared tab “%s”: changes made to the shared tab no longer apply to this product.', 'prodtabs' ), Library::shop_title( $source ) ) );
					?>
					<?php if ( empty( $context['locked'] ) ) : ?>
						<button type="button" class="button-link prodtabs-revert" data-library="<?php echo esc_attr( (string) $origin ); ?>"><?php esc_html_e( 'Go back to the shared version', 'prodtabs' ); ?></button>
					<?php endif; ?>
				</p>
			</div>
		<?php endif; ?>
		<?php if ( empty( $entry['translated'] ) ) : ?>
			<div class="prodtabs-message prodtabs-message--warning">
				<p><?php esc_html_e( 'Not translated in this language yet: the shop shows the text of the original language. Type the translation below.', 'prodtabs' ); ?></p>
			</div>
		<?php endif; ?>
		<p class="prodtabs-field">
			<label for="<?php echo esc_attr( 'prodtabs-title-input-' . $index ); ?>"><?php esc_html_e( 'Title', 'prodtabs' ); ?></label>
			<input type="text" class="prodtabs-title-input" id="<?php echo esc_attr( 'prodtabs-title-input-' . $index ); ?>" name="<?php echo esc_attr( $name . '[title]' ); ?>" value="<?php echo esc_attr( $entry['title'] ); ?>"<?php echo is_array( $ref ) && '' !== ( $ref['title'] ?? '' ) ? ' placeholder="' . esc_attr( (string) $ref['title'] ) . '"' : ''; ?>>
		</p>
		<div class="prodtabs-field prodtabs-field--editor">
			<label for="<?php echo esc_attr( 'prodtabs-content-' . $index ); ?>"><?php esc_html_e( 'Content', 'prodtabs' ); ?></label>
			<p class="prodtabs-code-note description" hidden><?php esc_html_e( 'This content contains code that the visual editor would change (icons, scripts, styles): it opens in the code editor.', 'prodtabs' ); ?></p>
			<textarea class="prodtabs-content wp-editor-area" id="<?php echo esc_attr( 'prodtabs-content-' . $index ); ?>" name="<?php echo esc_attr( $name . '[content]' ); ?>" rows="12"><?php echo esc_textarea( $entry['content'] ); ?></textarea>
		</div>
		<?php if ( is_array( $ref ) && '' !== trim( (string) ( $ref['content'] ?? '' ) ) ) : ?>
			<details class="prodtabs-reference">
				<summary><?php esc_html_e( 'Text of the original language', 'prodtabs' ); ?></summary>
				<div class="prodtabs-preview"><?php echo wp_kses_post( wpautop( (string) $ref['content'] ) ); ?></div>
			</details>
		<?php endif; ?>
		<?php if ( '' !== $entry['anchor'] ) : ?>
			<p class="prodtabs-anchor description">
				<?php
				/* translators: %s: anchor such as #tab-shipping. */
				echo esc_html( sprintf( __( 'Direct link to this tab: %s', 'prodtabs' ), '#tab-' . $entry['anchor'] ) );
				?>
			</p>
			<?php if ( ! empty( $context['product'] ) ) : ?>
				<?php echo Display::shortcode_field( Display::shortcode_for( (int) $context['product'], $entry['anchor'] ), __( 'Shortcode of this tab', 'prodtabs' ), 'prodtabs-shortcode-' . $index ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- escaped in shortcode_field(). ?>
			<?php endif; ?>
		<?php endif; ?>
		<input type="hidden" name="<?php echo esc_attr( $name . '[key]' ); ?>" value="<?php echo esc_attr( $entry['key'] ); ?>">
		<input type="hidden" class="prodtabs-anchor-value" name="<?php echo esc_attr( $name . '[anchor]' ); ?>" value="<?php echo esc_attr( $entry['anchor'] ); ?>">
		<input type="hidden" name="<?php echo esc_attr( $name . '[origin]' ); ?>" value="<?php echo esc_attr( (string) $origin ); ?>">
		<?php
		return (string) ob_get_clean();
	}

	/**
	 * Read-only view of a library tab.
	 *
	 * @param array $entry   Entry.
	 * @param array $context Row context.
	 */
	private static function library_body( array $entry, array $context ): string {
		$id   = self::library_id_in( (int) $entry['library_id'], (string) $context['lang'] );
		$post = get_post( $id );
		ob_start();
		if ( ! $post || Library::POST_TYPE !== $post->post_type ) :
			?>
			<p><?php esc_html_e( 'This shared tab no longer exists. Remove it from the product, or add another one.', 'prodtabs' ); ?></p>
			<?php
			return (string) ob_get_clean();
		endif;
		?>
		<div class="prodtabs-preview" tabindex="0" role="region" aria-label="<?php esc_attr_e( 'Shared content (read only)', 'prodtabs' ); ?>">
			<?php echo wp_kses_post( self::preview( $post->post_content ) ); ?>
		</div>
		<p class="prodtabs-library-actions">
			<a href="<?php echo esc_url( (string) get_edit_post_link( $post->ID ) ); ?>" target="_blank" rel="noopener">
				<?php esc_html_e( 'Edit the shared tab', 'prodtabs' ); ?><span class="screen-reader-text"> <?php esc_html_e( '(opens in a new tab)', 'prodtabs' ); ?></span>
			</a>
			<?php if ( empty( $context['locked'] ) ) : ?>
				<button type="button" class="button prodtabs-customize" data-library="<?php echo esc_attr( (string) $post->ID ); ?>"><?php esc_html_e( 'Customize for this product', 'prodtabs' ); ?></button>
			<?php endif; ?>
		</p>
		<p class="description"><?php esc_html_e( 'Shared tab: changes made to it apply to every product that uses it. Customize it to change it on this product only.', 'prodtabs' ); ?></p>
		<?php if ( ! empty( $context['product'] ) && '' !== $entry['anchor'] ) : ?>
			<?php echo Display::shortcode_field( Display::shortcode_for( (int) $context['product'], $entry['anchor'] ), __( 'Shortcode of this tab', 'prodtabs' ), 'prodtabs-shortcode-lib-' . (int) $entry['library_id'] ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- escaped in shortcode_field(). ?>
		<?php endif; ?>
		<?php if ( ! empty( $entry['auto'] ) ) : ?>
			<p class="description"><?php esc_html_e( 'Added automatically by the “Show on” setting of the shared tab. Uncheck Visible to hide it on this product.', 'prodtabs' ); ?></p>
		<?php endif; ?>
		<?php
		return (string) ob_get_clean();
	}

	/**
	 * Read-only view of a WooCommerce tab: where its content comes from, what the shop shows on this product as saved,
	 * and a shortcut to the panel or editor that holds the content.
	 *
	 * @param array $entry   Entry.
	 * @param array $context Row context.
	 */
	private static function native_body( array $entry, array $context ): string {
		$product = $context['product'] ? wc_get_product( (int) $context['product'] ) : null;
		$rows    = array();
		$text    = '';
		$status  = '';
		$targets = array();
		switch ( $entry['key'] ) {
			case 'description':
				$source    = __( 'Content of this tab: the description of the product, in the main editor at the top of this screen.', 'prodtabs' );
				// A space before each tag, so that a heading and the next paragraph do not run together once the tags are gone.
				$text      = $product ? wp_trim_words( str_replace( '<', ' <', $product->get_description() ), 40 ) : '';
				$status    = '' === $text ? __( 'The description is empty: WooCommerce does not show this tab.', 'prodtabs' ) : '';
				$targets[] = array( 'description', __( 'Go to the description', 'prodtabs' ) );
				break;
			case 'additional_information':
				$source = __( 'Content made by WooCommerce: the attributes shown on the product page, and the weight and dimensions.', 'prodtabs' );
				if ( $product ) {
					foreach ( $product->get_attributes() as $attribute ) {
						if ( ! $attribute instanceof \WC_Product_Attribute || ! $attribute->get_visible() ) {
							continue;
						}
						$values = $attribute->is_taxonomy()
							? wc_get_product_terms( $product->get_id(), $attribute->get_name(), array( 'fields' => 'names' ) )
							: $attribute->get_options();
						$rows[] = array( wc_attribute_label( $attribute->get_name(), $product ), implode( ', ', (array) $values ) );
					}
					if ( $product->has_weight() ) {
						$rows[] = array( __( 'Weight', 'prodtabs' ), wc_format_weight( $product->get_weight() ) );
					}
					if ( $product->has_dimensions() ) {
						$rows[] = array( __( 'Dimensions', 'prodtabs' ), wc_format_dimensions( $product->get_dimensions( false ) ) );
					}
				}
				$status    = $rows ? '' : __( 'Nothing to show: WooCommerce does not show this tab on this product.', 'prodtabs' );
				$targets[] = array( 'product_attributes', '' );
				$targets[] = array( 'shipping_product_data', '' );
				break;
			default:
				$source = __( 'Content of this tab: the customer reviews of the product.', 'prodtabs' );
				if ( 'yes' !== get_option( 'woocommerce_enable_reviews', 'yes' ) ) {
					$status = __( 'Reviews are off for the whole shop: WooCommerce does not show this tab.', 'prodtabs' );
				} elseif ( $product && ! $product->get_reviews_allowed() ) {
					$status = __( 'Reviews are off for this product: WooCommerce does not show this tab.', 'prodtabs' );
				} else {
					$count  = $product ? (int) $product->get_review_count() : 0;
					$status = __( 'No reviews yet: the tab shows the review form.', 'prodtabs' );
					if ( $count ) {
						/* translators: %d: number of reviews. */
						$status = sprintf( _n( '%d review.', '%d reviews.', $count, 'prodtabs' ), $count );
					}
				}
				$targets[] = array( 'advanced_product_data', '' );
		}
		ob_start();
		?>
		<p class="description"><?php echo esc_html( $source ); ?></p>
		<?php if ( '' !== $text || $rows ) : ?>
			<div class="prodtabs-preview" tabindex="0" role="region" aria-label="<?php esc_attr_e( 'What the shop shows (as saved)', 'prodtabs' ); ?>">
				<?php if ( '' !== $text ) : ?>
					<p><?php echo esc_html( $text ); ?></p>
				<?php else : ?>
					<table class="prodtabs-native-table">
						<?php foreach ( $rows as $row ) : ?>
							<tr><th scope="row"><?php echo esc_html( $row[0] ); ?></th><td><?php echo esc_html( $row[1] ); ?></td></tr>
						<?php endforeach; ?>
					</table>
				<?php endif; ?>
			</div>
		<?php endif; ?>
		<?php if ( '' !== $status ) : ?>
			<p><?php echo esc_html( $status ); ?></p>
		<?php endif; ?>
		<p class="prodtabs-library-actions">
			<?php foreach ( $targets as $target ) : ?>
				<?php // A panel button takes the name of that panel in the Product data box, set by the script. ?>
				<button type="button" class="button prodtabs-goto" data-target="<?php echo esc_attr( $target[0] ); ?>"><?php echo esc_html( $target[1] ); ?></button>
			<?php endforeach; ?>
		</p>
		<p class="description"><?php esc_html_e( 'As saved: changes made on this screen show here once the product is updated.', 'prodtabs' ); ?></p>
		<?php if ( $product ) : ?>
			<?php echo Display::shortcode_field( Display::shortcode_for( $product->get_id(), $entry['key'] ), __( 'Shortcode of this tab', 'prodtabs' ), 'prodtabs-shortcode-' . $entry['key'] ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- escaped in shortcode_field(). ?>
		<?php endif; ?>
		<?php
		return (string) ob_get_clean();
	}

	/**
	 * HTML preview of library content: blocks rendered, shortcodes left out.
	 *
	 * @param string $content Raw content.
	 */
	private static function preview( string $content ): string {
		$content = strip_shortcodes( $content );
		return has_blocks( $content ) ? do_blocks( $content ) : wpautop( $content );
	}

	/**
	 * Saves the panel with the product.
	 *
	 * @param \WC_Product $product Product being saved.
	 */
	public static function save( $product ): void {
		if ( ! $product instanceof \WC_Product || ! isset( $_POST['prodtabs_nonce'] ) ) {
			return;
		}
		if ( ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_POST['prodtabs_nonce'] ) ), self::NONCE_SAVE ) ) {
			return;
		}
		if ( ! current_user_can( 'edit_product', $product->get_id() ) ) {
			return;
		}
		$product_id = $product->get_id();

		// The last field of the panel is missing when PHP dropped fields (max_input_vars): saving would lose tabs.
		if ( empty( $_POST['prodtabs']['complete'] ) ) {
			self::notice( __( 'The tabs of this product were not saved: the form was too long for the server (max_input_vars setting of PHP). Your host can raise this limit.', 'prodtabs' ) );
			return;
		}

		// phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- cleaned by normalize() and sanitize_input().
		$raw     = isset( $_POST['prodtabs']['entries'] ) && is_array( $_POST['prodtabs']['entries'] ) ? wp_unslash( $_POST['prodtabs']['entries'] ) : array();
		$entries = Product_Tabs::sanitize_input( Tabs::normalize( array_values( $raw ) ) );

		// Structure changed in another language while this screen was open (Polylang shares it): keep the stored one.
		$loaded     = isset( $_POST['prodtabs']['signature'] ) ? sanitize_key( wp_unslash( $_POST['prodtabs']['signature'] ) ) : '';
		$stored_now = Tabs::signature( Product_Tabs::layout( $product_id ) );
		$texts_only = Multilingual::structure_locked( $product_id );
		if ( '' !== $loaded && $loaded !== $stored_now ) {
			$texts_only = true;
			if ( Tabs::signature( $entries ) !== $loaded ) {
				self::notice( __( 'The list of tabs of this product was changed in another language while you were editing it. The texts you typed were saved, but not your changes to the list: check the Tabs panel and make them again.', 'prodtabs' ) );
			}
		}

		// A tab added and left empty is dropped; a stored tab without text stays, to be translated later.
		$stored = array();
		foreach ( Product_Tabs::layout( $product_id ) as $item ) {
			if ( is_array( $item ) && isset( $item['key'] ) ) {
				$stored[ (string) $item['key'] ] = true;
			}
		}
		$entries = array_values(
			array_filter(
				$entries,
				static function ( $entry ) use ( $stored ) {
					return 'local' !== $entry['type'] || isset( $stored[ $entry['key'] ] ) || '' !== $entry['title'] || '' !== trim( $entry['content'] );
				}
			)
		);

		// New tabs get a readable key from their title, the name translators see in WPML. Keys still holding texts in
		// another language (a tab removed earlier) are avoided: those old texts would come back as translations.
		$keys = array();
		foreach ( Multilingual::translation_ids( $product_id, 'product' ) as $translation ) {
			$texts = get_post_meta( $translation, Tabs::META_TEXTS, true );
			$keys += is_array( $texts ) ? array_fill_keys( array_map( 'strval', array_keys( $texts ) ), true ) : array();
		}
		foreach ( $entries as $entry ) {
			if ( 'local' === $entry['type'] && isset( $stored[ $entry['key'] ] ) ) {
				$keys[ $entry['key'] ] = true;
			}
		}
		foreach ( $entries as $i => $entry ) {
			if ( 'local' === $entry['type'] && ! isset( $stored[ $entry['key'] ] ) ) {
				$entries[ $i ]['key']          = Tabs::key_from( $entry['title'], $keys );
				$keys[ $entries[ $i ]['key'] ] = true;
			}
		}

		Product_Tabs::set( $product, $entries, $texts_only );
	}

	/**
	 * Message shown on the product screen after the redirection that follows saving.
	 *
	 * @param string $message Message.
	 */
	private static function notice( string $message ): void {
		set_transient( 'prodtabs_notice_' . get_current_user_id(), $message, 5 * MINUTE_IN_SECONDS );
	}

	/** Shows the message left by the last save. */
	public static function show_notice(): void {
		$key     = 'prodtabs_notice_' . get_current_user_id();
		$message = get_transient( $key );
		if ( ! $message ) {
			return;
		}
		delete_transient( $key );
		echo '<div class="notice notice-warning is-dismissible"><p>' . esc_html( (string) $message ) . '</p></div>';
	}

	/** Checks an AJAX request of the panel. */
	private static function check_ajax(): void {
		check_ajax_referer( self::NONCE_AJAX, 'nonce' );
		if ( ! current_user_can( 'edit_products' ) ) {
			wp_send_json_error( null, 403 );
		}
	}

	/**
	 * Library tab asked by an AJAX request, if the user may read it.
	 *
	 * @param int $id Library tab id.
	 */
	private static function readable_library_tab( int $id ): \WP_Post {
		$post = get_post( $id );
		if ( ! $post || Library::POST_TYPE !== $post->post_type || 'trash' === $post->post_status ) {
			wp_send_json_error( null, 404 );
		}
		if ( ! current_user_can( 'read_post', $id ) ) {
			wp_send_json_error( null, 403 );
		}
		return $post;
	}

	/** Context of a row built by an AJAX request. */
	private static function ajax_context(): array {
		// phpcs:ignore WordPress.Security.NonceVerification.Missing -- checked in check_ajax().
		$product_id = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;
		return array(
			'lang'   => $product_id ? Multilingual::post_language( $product_id ) : '',
			'locked' => false,
			'source' => self::source_texts( $product_id ),
		);
	}

	/** AJAX: row of a library tab, to add it or to go back to it. */
	public static function ajax_library_row(): void {
		self::check_ajax();
		// phpcs:disable WordPress.Security.NonceVerification.Missing -- nonce checked by check_ajax() above.
		$id     = isset( $_POST['library_id'] ) ? absint( $_POST['library_id'] ) : 0;
		$index  = isset( $_POST['index'] ) ? absint( $_POST['index'] ) : 0;
		$anchor = isset( $_POST['anchor'] ) ? sanitize_text_field( wp_unslash( $_POST['anchor'] ) ) : '';
		// phpcs:enable
		$post = self::readable_library_tab( $id );
		$entry  = array(
			'type'       => 'library',
			'key'        => 'lib_' . $id,
			'library_id' => $id,
			'anchor'     => $anchor,
			'visible'    => true,
		);
		wp_send_json_success(
			array(
				'html'  => self::row( $entry, $index, self::ajax_context() ),
				'title' => Library::shop_title( $post ),
			)
		);
	}

	/** AJAX: copy of a library tab as a tab of the product, keeping its anchor. */
	public static function ajax_customize(): void {
		self::check_ajax();
		// phpcs:disable WordPress.Security.NonceVerification.Missing -- nonce checked by check_ajax() above.
		$id     = isset( $_POST['library_id'] ) ? absint( $_POST['library_id'] ) : 0;
		$index  = isset( $_POST['index'] ) ? absint( $_POST['index'] ) : 0;
		$anchor = isset( $_POST['anchor'] ) ? sanitize_text_field( wp_unslash( $_POST['anchor'] ) ) : '';
		// phpcs:enable
		$post = self::readable_library_tab( $id );
		// The product editor is the classic one: block markup is turned into the HTML it renders.
		$content = has_blocks( $post->post_content ) ? do_blocks( $post->post_content ) : $post->post_content;
		$entry   = array(
			'type'       => 'local',
			'key'        => Tabs::new_key(),
			'anchor'     => $anchor,
			'title'      => Library::shop_title( $post ),
			'content'    => trim( $content ),
			'origin'     => $id,
			'visible'    => true,
			'translated' => true,
		);
		wp_send_json_success(
			array(
				'html'  => self::row( $entry, $index, self::ajax_context(), true ),
				'title' => $entry['title'],
			)
		);
	}
}