<?php
if ( ! defined( 'ABSPATH' ) ) exit;

class ACQUIS_Admin {

    public function init() {
        add_action( 'admin_menu',            array( $this, 'register_menu' ) );
        add_action( 'admin_enqueue_scripts', array( $this, 'enqueue_assets' ) );
        add_action( 'admin_head',            array( $this, 'output_global_icon_css' ) );
        // Runs immediately before WP fires 'admin_notices'/'all_admin_notices' — strip
        // other plugins' sitewide promotional/setup notices from our own screens so they
        // don't render inside our custom dashboard UI (WP fires those hooks on every
        // admin page, not just the plugin that registered them).
        add_action( 'in_admin_header',       array( $this, 'suppress_foreign_admin_notices' ), 1 );
        // Sitewide dismissible upgrade/review banner — every wp-admin page,
        // not just our own (see render_promo_banner()'s own docblock for
        // why our own screens need admin_header() to call it explicitly too).
        add_action( 'admin_notices',         array( $this, 'render_promo_banner' ) );
        add_action( 'admin_post_acquis_upload_file',       array( $this, 'handle_file_upload' ) );
        add_action( 'admin_post_acquis_delete_file',       array( $this, 'handle_file_delete' ) );
        add_action( 'wp_ajax_acquis_delete_lead',             array( $this, 'ajax_delete_lead' ) );
        add_action( 'wp_ajax_acquis_delete_email_log',        array( $this, 'ajax_delete_email_log' ) );
        add_action( 'wp_ajax_acquis_bulk_clear_email_logs',   array( $this, 'ajax_bulk_clear_email_logs' ) );
        add_action( 'wp_ajax_acquis_resend_email_log',         array( $this, 'ajax_resend_email_log' ) );
        add_action( 'wp_ajax_acquis_bulk_delete_leads',        array( $this, 'ajax_bulk_delete_leads' ) );
        add_action( 'wp_ajax_acquis_dismiss_promo',            array( $this, 'ajax_dismiss_promo' ) );
        add_action( 'acquis_daily_cleanup', array( $this, 'run_daily_cleanup' ) );
        add_action( 'admin_post_acquis_save_email',        array( $this, 'handle_save_email_settings' ) );
        add_action( 'admin_post_acquis_save_integrations', array( $this, 'handle_save_integrations' ) );
        add_filter( 'upload_mimes',                     array( $this, 'allow_mime_types' ) );
    }

    public function register_menu() {
        add_menu_page( __( 'AcquisitionSuite', 'acquisitionsuite' ), __( 'AcquisitionSuite', 'acquisitionsuite' ), 'manage_options', 'acquisitionsuite', array( $this, 'render_dashboard' ), 'data:image/svg+xml;base64,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', 58 );

        // ── Core pages: visible on Lite and Pro ───────────────────────
        add_submenu_page( 'acquisitionsuite', __( 'Dashboard', 'acquisitionsuite' ),     __( 'Dashboard', 'acquisitionsuite' ),     'manage_options', 'acquisitionsuite',              array( $this, 'render_dashboard' ) );
        add_submenu_page( 'acquisitionsuite', __( 'Upload Files', 'acquisitionsuite' ),  __( 'Upload Files', 'acquisitionsuite' ),  'manage_options', 'acquisitionsuite-files',        array( $this, 'render_files_page' ) );
        add_submenu_page( 'acquisitionsuite', __( 'Leads', 'acquisitionsuite' ),         __( 'Leads', 'acquisitionsuite' ),         'manage_options', 'acquisitionsuite-leads',        array( $this, 'render_leads_page' ) );
        add_submenu_page( 'acquisitionsuite', __( 'Integrations', 'acquisitionsuite' ),  __( 'Integrations', 'acquisitionsuite' ),  'manage_options', 'acquisitionsuite-integrations', array( $this, 'render_integrations_page' ) );
        add_submenu_page( 'acquisitionsuite', __( 'Email Logs', 'acquisitionsuite' ),    __( 'Email Logs', 'acquisitionsuite' ),    'manage_options', 'acquisitionsuite-email-logs',   array( $this, 'render_email_logs_page' ) );
        add_submenu_page( 'acquisitionsuite', __( 'Settings', 'acquisitionsuite' ),      __( 'Settings', 'acquisitionsuite' ),      'manage_options', 'acquisitionsuite-settings',     array( $this, 'render_settings_page' ) );
        add_submenu_page( 'acquisitionsuite', __( 'System Status', 'acquisitionsuite' ), __( 'System Status', 'acquisitionsuite' ), 'manage_options', 'acquisitionsuite-status',       array( $this, 'render_system_status' ) );

        // ── Lite only: single orange CTA replacing all locked items ───
        add_submenu_page(
            'acquisitionsuite',
            esc_html__( 'Upgrade to Pro', 'acquisitionsuite' ),
            '⚡ ' . esc_html__( 'Upgrade to Pro', 'acquisitionsuite' ),
            'manage_options',
            'acquis-upgrade',
            array( $this, 'render_upgrade_to_pro_page' )
        );
        // Hidden (no nav item): keeps the old "Email Settings" URL working as a redirect into Settings → Email tabs.
        add_submenu_page( null, __( 'Email Settings', 'acquisitionsuite' ), '', 'manage_options', 'acquisitionsuite-email', array( $this, 'render_email_page' ) );
    }

    /**
     * Remove every other plugin's admin_notices/all_admin_notices callback while on
     * an AcquisitionSuite screen (Lite or Pro — both register submenus under the
     * same top-level 'acquisitionsuite' parent, so is_acquis_screen() covers the
     * whole plugin family, including Pro's own admin pages, even though this
     * method lives in Lite: this hook is registered from Lite's init(), which
     * always runs whenever Lite boots, and Pro requires Lite to function at all).
     * Our own inline notices (get_notice_html(), save-confirmation banners, etc.)
     * are never hooked to admin_notices, they're echoed directly inside each
     * render_*() method, so nothing of ours is lost by the wipe.
     *
     * render_promo_banner() is the one exception: it's re-added immediately
     * after the wipe rather than called explicitly from every page's own
     * header method (Lite's admin_header() plus 3 separate page_header()
     * methods across Pro), so it automatically reaches every current and
     * future AcquisitionSuite admin page, Lite or Pro, with nothing to
     * remember to wire up per-page.
     */
    public function suppress_foreign_admin_notices() {
        if ( ! $this->is_acquis_screen() ) return;
        remove_all_actions( 'admin_notices' );
        remove_all_actions( 'all_admin_notices' );
        add_action( 'admin_notices', array( $this, 'render_promo_banner' ) );
    }

    /**
     * Whether the current admin screen belongs to AcquisitionSuite (Lite or
     * Pro, both register every submenu under the same 'acquisitionsuite'
     * top-level parent). Deliberately does NOT use
     * get_current_screen()->parent_base: confirmed via debug logging that
     * it's still empty at the point 'in_admin_header' fires (parent_base
     * only gets populated later, while WordPress renders the admin menu
     * sidebar, which happens after in_admin_header in the page's own
     * output order) meaning every check built on it, including the
     * original version of suppress_foreign_admin_notices(), silently
     * never matched anything since this suppression was first added.
     * $screen->id, in contrast, is set as soon as set_current_screen()
     * runs and reliably follows WordPress's own "{parent_slug}_page_
     * {submenu_slug}" convention (or "toplevel_page_{slug}" for the
     * top-level item itself), confirmed empirically for both Lite and Pro
     * submenu screens.
     *
     * @return bool
     */
    private function is_acquis_screen() {
        $screen = get_current_screen();
        if ( ! $screen ) return false;
        return 'toplevel_page_acquisitionsuite' === $screen->id
            || 0 === strpos( $screen->id, 'acquisitionsuite_page_' );
    }

    /**
     * Output global admin CSS via WP Stylesheet API.
     * Uses a virtual handle (no external file) so wp_add_inline_style() works
     * on every admin screen without requiring a physical CSS file.
     */
    public function output_global_icon_css() {
        wp_register_style( 'acquis-admin-global', false, array(), ACQUIS_VERSION ); // phpcs:ignore WordPress.WP.EnqueuedResourceParameters.MissingVersion -- version passed as 4th arg
        wp_enqueue_style( 'acquis-admin-global' );
        wp_add_inline_style(
            'acquis-admin-global',
            '
            /* ── Menu icon — WP renders the SVG data-URI as <img>, let it breathe ─ */
            #adminmenu #toplevel_page_acquisitionsuite .wp-menu-image img {
                width: 18px !important; height: 18px !important;
                padding: 0 !important; margin-top: 7px !important;
                opacity: 0.6;
            }
            #adminmenu #toplevel_page_acquisitionsuite:hover .wp-menu-image img,
            #adminmenu #toplevel_page_acquisitionsuite.wp-has-current-submenu .wp-menu-image img,
            #adminmenu #toplevel_page_acquisitionsuite.current .wp-menu-image img {
                opacity: 1;
            }
            /* ── Upgrade to Pro submenu CTA ─────────────────────────────── */
            #adminmenu a[href*="page=acquis-upgrade"] {
                color: #f97316 !important;
                font-weight: 700 !important;
            }
            #adminmenu a[href*="page=acquis-upgrade"]:hover,
            #adminmenu a[href*="page=acquis-upgrade"]:focus {
                color: #f97316 !important;
                font-weight: 700 !important;
            }
            '
        );
    }

    public function enqueue_assets( $hook ) {
        if ( strpos( $hook, 'acquisitionsuite' ) === false ) return;
        wp_enqueue_style( 'acquis-admin', ACQUIS_PLUGIN_URL . 'admin/acquis-admin.css', array(), acquis_asset_ver( ACQUIS_PLUGIN_DIR . 'admin/acquis-admin.css' ) );
        wp_enqueue_style( 'wp-color-picker' );
        wp_enqueue_script( 'acquis-admin', ACQUIS_PLUGIN_URL . 'admin/acquis-admin.js', array( 'jquery', 'wp-color-picker' ), acquis_asset_ver( ACQUIS_PLUGIN_DIR . 'admin/acquis-admin.js' ), true );
        wp_enqueue_media();
        // MailWizz field-map data — needed for initMailwizzFieldMap() in acquis-admin.js
        $mw_field_map = get_option( 'acquis_mailwizz_custom_fields', array( array( 'tag' => '', 'source' => '' ) ) );
        $mw_sources   = array(
            'full_name' => 'Full Name',
            'email'     => 'Email',
            'file_name' => 'File Name',
            'file_ext'  => 'File Extension',
            'site_name' => 'Site Name',
            'site_url'  => 'Site URL',
        );

        wp_localize_script( 'acquis-admin', 'ACQUIS_Admin', array(
            'ajaxurl' => admin_url( 'admin-ajax.php' ),
            'nonce'   => wp_create_nonce( 'acquis_admin_nonce' ),
            'i18n'    => array(
                'sending'     => __( 'Sending…', 'acquisitionsuite' ),
                'loading'     => __( 'Loading…', 'acquisitionsuite' ),
                'testing'     => __( 'Testing…', 'acquisitionsuite' ),
                'select_logo' => __( 'Select Logo', 'acquisitionsuite' ),
                'use_logo'    => __( 'Use This Image', 'acquisitionsuite' ),
            ),
        ) );

        // Pass MailWizz field-map config as a separate object so acquis-admin.js
        // can initialise the dynamic row builder without any inline script in PHP.
        wp_add_inline_script(
            'acquis-admin',
            'window.ACQUIS_MW = ' . wp_json_encode( array(
                'idx'     => count( (array) $mw_field_map ),
                'sources' => $mw_sources,
            ) ) . ';',
            'before'
        );
    }

    public function allow_mime_types( $mimes ) {
        return array_merge( $mimes, ACQUIS_File_Manager::allowed_mime_types() );
    }

    // DASHBOARD
    public function render_dashboard() {
        $total_leads  = ACQUIS_Database::count_leads();
        $total_sent   = ACQUIS_Database::count_email_logs( 'sent' );
        $total_failed = ACQUIS_Database::count_email_logs( 'failed' );
        $fq = new WP_Query( array( 'post_type' => ACQUIS_File_Manager::POST_TYPE, 'posts_per_page' => -1, 'fields' => 'ids' ) );
        $total_files  = $fq->found_posts;
        $recent_leads = ACQUIS_Database::get_leads( 5, 1 );
        ?>
        <div class="wrap acquis-admin-wrap">
        <?php $this->admin_header( esc_html__(  'Dashboard', 'acquisitionsuite' ) ); ?>
        <div class="acquis-stats-grid">
        <?php foreach ( array(
            array( 'dashicons-groups',         number_format( $total_leads ),  esc_html__( 'Total Leads', 'acquisitionsuite' ) ),
            array( 'dashicons-media-document', number_format( $total_files ),  esc_html__( 'Gated Files', 'acquisitionsuite' ) ),
            array( 'dashicons-email-alt',      number_format( $total_sent ),   esc_html__( 'Emails Sent', 'acquisitionsuite' ) ),
            array( 'dashicons-warning',        number_format( $total_failed ), esc_html__( 'Email Failures', 'acquisitionsuite' ) ),
        ) as list( $icon, $num, $lbl ) ) : ?>
        <div class="acquis-stat-card"><span class="dashicons <?php echo esc_attr( $icon ); ?>"></span><div class="acquis-stat-number"><?php echo esc_html( $num ); ?></div><div class="acquis-stat-label"><?php echo esc_html( $lbl ); ?></div></div>
        <?php endforeach; ?>
        </div>
        <?php if ( class_exists( 'ACQUIS_Pay_DB' ) ) :
            $pay_summary_30 = ACQUIS_Pay_DB::get_summary( 30 );
            $currency_sym   = ACQUIS_Pay_DB::get_currency_symbol( get_option( 'acquis_pay_default_currency', 'USD' ) );
        ?>
        <div class="acquis-stats-grid" style="margin-top:14px;">
            <?php foreach ( array(
                array( 'dashicons-money-alt', $currency_sym . number_format( $pay_summary_30['revenue'], 2 ), esc_html__( 'Revenue (30d)', 'acquisitionsuite' ) ),
                array( 'dashicons-cart',      number_format( $pay_summary_30['total_orders'] ),               esc_html__( 'Orders (30d)', 'acquisitionsuite' ) ),
                array( 'dashicons-yes-alt',   number_format( $pay_summary_30['successful'] ),                 esc_html__( 'Successful Payments', 'acquisitionsuite' ) ),
                array( 'dashicons-chart-line',$pay_summary_30['conversion_rate'] . '%',                       esc_html__( 'Order Conversion', 'acquisitionsuite' ) ),
            ) as list( $icon, $num, $lbl ) ) : ?>
            <div class="acquis-stat-card"><span class="dashicons <?php echo esc_attr( $icon ); ?>"></span><div class="acquis-stat-number"><?php echo esc_html( $num ); ?></div><div class="acquis-stat-label"><?php echo esc_html( $lbl ); ?></div></div>
            <?php endforeach; ?>
        </div>
        <p style="margin:10px 0 0;"><a href="<?php echo esc_url( admin_url( 'admin.php?page=acquis-pay-orders' ) ); ?>" class="acquis-btn-secondary acquis-btn-sm"><?php esc_html_e( 'View All Orders', 'acquisitionsuite' ); ?></a></p>
        <?php endif; ?>
        <div class="acquis-two-col acquis-dashboard-cols">
            <div class="acquis-card" style="overflow-x:auto;">
                <h2><?php esc_html_e( 'Recent Leads', 'acquisitionsuite' ); ?></h2>
                <?php if ( $recent_leads ) : ?>
                <div class="acquis-table-scroll">
                <table class="acquis-table">
                    <thead><tr><th><?php esc_html_e( 'Name', 'acquisitionsuite' ); ?></th><th>Email</th><th><?php esc_html_e( 'File', 'acquisitionsuite' ); ?></th><th><?php esc_html_e( 'Date', 'acquisitionsuite' ); ?></th></tr></thead>
                    <tbody><?php foreach ( $recent_leads as $l ) : ?><tr>
                        <td><strong style="color:var(--acquis-navy);"><?php echo esc_html( $l->full_name ); ?></strong></td>
                        <td><a href="mailto:<?php echo esc_attr( $l->email ); ?>" style="color:var(--acquis-orange);text-decoration:none;"><?php echo esc_html( $l->email ); ?></a></td>
                        <td><span class="acquis-dash-file"><?php echo esc_html( $l->file_name ?: ' ' ); ?></span></td>
                        <td style="white-space:nowrap;font-size:12px;color:#9ca3af;"><?php echo esc_html( date_i18n( 'M j, H:i', strtotime( $l->created_at ) ) ); ?></td>
                    </tr><?php endforeach; ?></tbody>
                </table>
                </div>
                <div style="margin-top:12px;">
                    <a href="<?php echo esc_url( admin_url( 'admin.php?page=acquisitionsuite-leads' ) ); ?>" class="acquis-btn-secondary acquis-btn-sm"><?php esc_html_e( 'View All Leads', 'acquisitionsuite' ); ?></a>
                </div>
                <?php else : ?><p class="acquis-empty"><?php esc_html_e( 'No leads yet.', 'acquisitionsuite' ); ?></p><?php endif; ?>
            </div>
            <div class="acquis-card" style="overflow-x:auto;">
                <h2><?php esc_html_e( 'Integration Status', 'acquisitionsuite' ); ?></h2>
                <table class="acquis-table"><tbody>
                <tr><td><strong><?php esc_html_e( 'Delivery Mode', 'acquisitionsuite' ); ?></strong></td><td><span class="acquis-badge acquis-badge-blue"><?php echo esc_html( ucfirst( get_option( 'acquis_delivery_mode', 'both' ) ) ); ?></span></td></tr>
                <?php foreach ( array( 'Mailchimp' => ACQUIS_Mailchimp::is_enabled(), 'MailWizz' => ACQUIS_Mailwizz::is_enabled(), 'Brevo' => ACQUIS_Brevo::is_enabled() ) as $name => $on ) : ?>
                <tr><td><strong><?php echo esc_html( $name ); ?></strong></td><td><?php echo $on ? '<span class="acquis-badge acquis-badge-green">' . esc_html__( 'Active', 'acquisitionsuite' ) . '</span>' : '<span class="acquis-badge acquis-badge-gray">' . esc_html__( 'Disabled', 'acquisitionsuite' ) . '</span>'; ?></td></tr>
                <?php endforeach; ?>
                </tbody></table>
                <p style="margin-top:14px;"><a href="<?php echo esc_url( admin_url( 'admin.php?page=acquisitionsuite-integrations' ) ); ?>" class="button"><?php esc_html_e( 'Manage Integrations', 'acquisitionsuite' ); ?></a></p>
            </div>
        </div>
        </div>
        <?php
    }

    // FILES PAGE
    public function render_files_page() {
        $notice  = $this->get_notice_html();
        $per_page = 20;
        // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only pagination
        $page    = max( 1, absint( $_GET['acquis_page'] ?? 1 ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only display filter
        $fq = new WP_Query( array(
            'post_type'      => ACQUIS_File_Manager::POST_TYPE,
            'posts_per_page' => $per_page,
            'paged'          => $page,
            'orderby'        => 'date',
            'order'          => 'DESC',
        ) );
        $total_files     = (int) $fq->found_posts;
        $total_pages     = max( 1, (int) $fq->max_num_pages );
        $download_counts = class_exists( 'ACQUIS_P3_DB' ) ? ACQUIS_P3_DB::get_download_counts_by_file() : array();
        ?>
        <div class="wrap acquis-admin-wrap">
        <?php $this->admin_header( esc_html__(  'Gated Files', 'acquisitionsuite' ) ); echo wp_kses_post( $notice ); ?>
        <div class="acquis-two-col">
            <div class="acquis-card acquis-upload-card">
                <h2><?php esc_html_e( 'Upload New File', 'acquisitionsuite' ); ?></h2>
                <form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" enctype="multipart/form-data">
                    <input type="hidden" name="action" value="acquis_upload_file"><?php wp_nonce_field( 'acquis_upload_file', 'acquis_upload_nonce' ); ?>
                    <div class="acquis-form-group"><label><?php esc_html_e( 'File Title', 'acquisitionsuite' ); ?></label><input type="text" name="file_title" required placeholder="e.g. Marketing Guide 2024"></div>

                    <div class="acquis-form-group acquis-pay-type-toggle">
                        <label><?php esc_html_e( 'File Source', 'acquisitionsuite' ); ?></label>
                        <div class="acquis-radio-pill-group">
                            <label class="acquis-radio-pill active">
                                <input type="radio" name="acquis_source_type" value="upload" checked class="acquis-source-type-radio" data-target="acquis-add-file">
                                <span class="dashicons dashicons-upload acquis-dicon-sm"></span> <?php esc_html_e( 'Upload File', 'acquisitionsuite' ); ?>
                            </label>
                            <label class="acquis-radio-pill">
                                <input type="radio" name="acquis_source_type" value="url" class="acquis-source-type-radio" data-target="acquis-add-file">
                                <span class="dashicons dashicons-admin-links acquis-dicon-sm"></span> <?php esc_html_e( 'External URL', 'acquisitionsuite' ); ?>
                            </label>
                        </div>
                    </div>

                    <div id="acquis-add-file-upload-fields" class="acquis-form-group">
                        <label><?php esc_html_e( 'Choose File', 'acquisitionsuite' ); ?></label>
                        <div class="acquis-file-drop" id="acquis-drop-zone"><span class="dashicons dashicons-upload"></span><p><?php esc_html_e( 'Drag &amp; drop or click to select', 'acquisitionsuite' ); ?></p><small>PDF, ZIP, DOCX, XLSX, PPTX, MP4, MP3, JPG, PNG</small><input type="file" name="acquis_file" accept=".pdf,.zip,.docx,.xlsx,.pptx,.mp4,.mp3,.jpg,.jpeg,.png" required></div>
                    </div>
                    <div id="acquis-add-file-url-fields" class="acquis-form-group" style="display:none;">
                        <label><?php esc_html_e( 'File URL', 'acquisitionsuite' ); ?></label>
                        <input type="url" name="file_url" placeholder="https://drive.google.com/..." style="width:100%;">
                        <p class="description"><?php esc_html_e( 'Link to a Google Drive, Dropbox, or other hosted file great for large files like video courses.', 'acquisitionsuite' ); ?></p>
                    </div>

                    <button type="submit" class="button button-primary acquis-btn-upload"><?php esc_html_e( 'Upload &amp; Gate File', 'acquisitionsuite' ); ?></button>
                    <?php do_action( 'acquis_upload_form_fields' ); ?>
                </form>
            </div>
            <div class="acquis-card">
                <h2><?php esc_html_e( 'Uploaded Files', 'acquisitionsuite' ); ?> <?php if ( $total_files ) : ?><span class="acquis-total-badge"><?php echo number_format( $total_files ); ?> <?php echo $total_files === 1 ? esc_html__( 'file', 'acquisitionsuite' ) : esc_html__( 'files', 'acquisitionsuite' ); ?></span><?php endif; ?></h2>
                <?php if ( $fq->have_posts() ) : ?>
                <div class="acquis-files-list">
                <?php while ( $fq->have_posts() ) : $fq->the_post(); $pid = get_the_ID(); $source_type = get_post_meta( $pid, '_acquis_file_source_type', true ) ?: 'upload'; $ext = strtoupper( get_post_meta( $pid, '_acquis_file_ext', true ) ?: get_post_meta( $pid, '_sll_file_ext', true ) ); $size = ACQUIS_File_Manager::format_bytes( get_post_meta( $pid, '_acquis_file_size', true ) ?: get_post_meta( $pid, '_sll_file_size', true ) ); $dl_count = $download_counts[ $pid ] ?? 0; ?>
                    <div class="acquis-file-row">
                        <div class="acquis-file-row-info">
                            <strong><?php the_title(); ?></strong>
                            <span class="acquis-badge acquis-badge-id" title="<?php esc_attr_e( 'File ID use this in the shortcode', 'acquisitionsuite' ); ?>">#<?php echo absint( $pid ); ?></span>
                            <?php if ( 'url' === $source_type ) : ?>
                            <span class="acquis-badge" style="background:#eef2ff;color:#4338ca;"><span class="dashicons dashicons-admin-links acquis-dicon-sm"></span> <?php esc_html_e( 'External URL', 'acquisitionsuite' ); ?></span>
                            <a href="<?php echo esc_url( get_post_meta( $pid, '_acquis_file_url', true ) ); ?>" target="_blank" rel="noopener noreferrer" class="acquis-file-size" style="max-width:260px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;display:inline-block;vertical-align:middle;"><?php echo esc_html( get_post_meta( $pid, '_acquis_file_url', true ) ); ?></a>
                            <?php else : ?>
                            <span class="acquis-badge"><?php echo esc_html( $ext ); ?></span>
                            <span class="acquis-file-size"><?php echo esc_html( $size ); ?></span>
                            <?php endif; ?>
                            <?php if ( class_exists( 'ACQUIS_Pay_DB' ) ) :
                                $pay_cfg = ACQUIS_Pay_DB::get_file_pay_config( $pid );
                                if ( ! empty( $pay_cfg['enabled'] ) && ! empty( $pay_cfg['price'] ) ) : ?>
                            <span class="acquis-badge" style="background:#fff7ed;color:#f97316;border:1px solid #fdba74;font-weight:700;">
                                <?php echo esc_html( strtoupper( $pay_cfg['currency'] ?? 'USD' ) . ' ' . number_format( (float) $pay_cfg['price'], 2 ) ); ?>
                            </span>
                            <?php endif; endif; ?>

                                <span class="dashicons dashicons-download acquis-dicon-sm"></span> <?php echo esc_html( number_format( $dl_count ) ); ?> <?php echo $dl_count === 1 ? esc_html__( 'download', 'acquisitionsuite' ) : esc_html__( 'downloads', 'acquisitionsuite' ); ?>
                            </span>
                        </div>
                        <div class="acquis-file-row-actions">
                            <code class="acquis-shortcode-copy">[acquis_download id="<?php echo absint( $pid ); ?>"]</code>
                            <button class="acquis-copy-btn button" data-copy='[acquis_download id="<?php echo absint( $pid ); ?>"]'><?php esc_html_e( 'Copy', 'acquisitionsuite' ); ?></button>

                            <form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" style="display:inline;" onsubmit="return confirm('Delete permanently?')">
                                <input type="hidden" name="action" value="acquis_delete_file"><input type="hidden" name="file_id" value="<?php echo absint( $pid ); ?>"><?php wp_nonce_field( 'acquis_delete_file_' . absint( $pid ), 'acquis_delete_nonce' ); ?>
                                <button type="submit" class="button acquis-btn-delete"><?php esc_html_e( 'Delete', 'acquisitionsuite' ); ?></button>
                            </form>
                        </div>
                        <?php do_action( 'acquis_file_row_after_actions', $pid ); ?>
                    </div>
                <?php endwhile; wp_reset_postdata(); ?>
                </div>
                <?php if ( $total_pages > 1 ) : ?>
                <div class="acquis-pagination" style="padding:14px 0 0;border-top:1px solid #e5e7eb;margin-top:14px;">
                    <?php if ( $page > 1 ) : ?><a href="<?php echo esc_url( add_query_arg( array( 'acquis_page' => $page - 1 ) ) ); ?>" class="button">&laquo; <?php esc_html_e( 'Prev', 'acquisitionsuite' ); ?></a><?php endif; ?>
                    <?php
                    $start = max( 1, $page - 2 );
                    $end   = min( $total_pages, $page + 2 );
                    if ( $start > 1 ) echo '<span style="padding:0 6px;color:#9ca3af;">…</span>';
                    for ( $i = $start; $i <= $end; $i++ ) : ?>
                    <a href="<?php echo esc_url( add_query_arg( array( 'acquis_page' => $i ) ) ); ?>" class="button <?php echo $i === $page ? 'button-primary' : ''; ?>"><?php echo absint( $i ); ?></a>
                    <?php endfor;
                    if ( $end < $total_pages ) echo '<span style="padding:0 6px;color:#9ca3af;">…</span>'; ?>
                    <?php if ( $page < $total_pages ) : ?><a href="<?php echo esc_url( add_query_arg( array( 'acquis_page' => $page + 1 ) ) ); ?>" class="button"><?php esc_html_e( 'Next', 'acquisitionsuite' ); ?> &raquo;</a><?php endif; ?>
                    <span style="font-size:12px;color:#9ca3af;padding:0 10px;"><?php /* translators: 1: current page, 2: total pages */ printf( esc_html__( 'Page %1$d of %2$d', 'acquisitionsuite' ), absint( $page ), absint( $total_pages ) ); ?></span>
                </div>
                <?php endif; ?>
                <?php else : ?><p class="acquis-empty"><?php esc_html_e( 'No files uploaded yet.', 'acquisitionsuite' ); ?></p><?php endif; ?>
            </div>
        </div>
        </div>
        <?php
    }

    // LEADS PAGE sort, search, pagination, export
    public function render_leads_page() {
        $page    = max( 1, absint( $_GET['acquis_page'] ?? 1 ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only display filter
        $orderby = in_array( $_GET['orderby'] ?? '', array('id','full_name','email','file_id','created_at'), true ) // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only display filter
                   ? sanitize_key( $_GET['orderby'] ) : 'created_at'; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only display filter
        $order   = strtoupper( sanitize_key( $_GET['order'] ?? 'DESC' ) ) === 'ASC' ? 'ASC' : 'DESC'; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only display filter
        $search  = sanitize_text_field( wp_unslash( $_GET['s'] ?? '' ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only display filter
        $leads   = ACQUIS_Database::get_leads( 25, $page, $orderby, $order, $search );
        $total   = ACQUIS_Database::count_leads( $search );
        $pages   = max( 1, ceil( $total / 25 ) );
        ?>
        <div class="wrap acquis-admin-wrap">
        <?php $this->admin_header( esc_html__(  'Leads', 'acquisitionsuite' ), "<span class='acquis-total-badge'>" . number_format( $total ) . " leads</span>" ); ?>

        <div class="acquis-table-controls">
            <form method="get" style="display:flex;gap:8px;align-items:center;flex-wrap:wrap;">
                <input type="hidden" name="page" value="acquisitionsuite-leads">
                <input type="search" name="s" value="<?php echo esc_attr($search); ?>" placeholder="<?php esc_attr_e('Search name or email…', 'acquisitionsuite' ); ?>" style="width:220px;">
                <button type="submit" class="button"><?php esc_html_e( 'Search', 'acquisitionsuite' ); ?></button>
                <?php if ($search) : ?><a href="<?php echo esc_url(admin_url('admin.php?page=acquisitionsuite-leads')); ?>" class="button"><?php esc_html_e( 'Clear', 'acquisitionsuite' ); ?></a><?php endif; ?>
            </form>
            <div style="display:flex;gap:8px;align-items:center;margin-left:auto;flex-wrap:wrap;">
                <!-- Bulk action toolbar (shown when checkboxes are ticked) -->
                <span id="acquis-bulk-count" style="font-size:13px;color:#6b7280;display:none;"></span>
                <button id="acquis-bulk-delete-leads" class="button acquis-btn-danger" style="display:none;"
                        data-nonce="<?php echo esc_attr( wp_create_nonce( 'acquis_nonce' ) ); ?>">
                    <span class="dashicons dashicons-trash acquis-dicon-sm"></span>
                    <?php esc_html_e( 'Delete Selected', 'acquisitionsuite' ); ?>
                </button>
                <form method="post" action="<?php echo esc_url(admin_url('admin-post.php')); ?>">
                    <?php wp_nonce_field('acquis_export'); ?>
                    <input type="hidden" name="action" value="acquis_export_leads_csv">
                    <?php if ($search) : ?><input type="hidden" name="s" value="<?php echo esc_attr($search); ?>"><?php endif; ?>
                    <button type="submit" class="button"><span class="dashicons dashicons-download acquis-dicon-sm"></span> <?php esc_html_e( 'Export CSV', 'acquisitionsuite' ); ?></button>
                </form>
            </div>
        </div>

        <div class="acquis-card" style="overflow-x:auto;">
            <?php if ( $leads ) : ?>
            <div class="acquis-table-scroll">
            <table class="acquis-table" style="border:none;">
                <thead><tr>
                    <th style="width:32px;"><input type="checkbox" id="acquis-select-all-leads" title="<?php esc_attr_e( 'Select all', 'acquisitionsuite' ); ?>"></th>
                    <th style="width:50px;"><?php esc_html_e( 'S/N', 'acquisitionsuite' ); ?></th>
                    <th><a href="<?php echo esc_url( $this->lead_sort_url( 'full_name', $orderby, $order ) ); ?>"><?php esc_html_e( 'Name', 'acquisitionsuite' ); ?><?php echo wp_kses( $this->lead_sort_arrow('full_name', $orderby, $order), array( 'span' => array( 'class' => array() ) ) ); ?></a></th>
                    <th><a href="<?php echo esc_url( $this->lead_sort_url( 'email', $orderby, $order ) ); ?>">Email<?php echo wp_kses( $this->lead_sort_arrow('email', $orderby, $order), array( 'span' => array( 'class' => array() ) ) ); ?></a></th>
                    <th><?php esc_html_e( 'File', 'acquisitionsuite' ); ?></th>
                    <th class="acquis-col-hide-sm"><?php esc_html_e( 'Score / Stage', 'acquisitionsuite' ); ?></th>
                    <th class="acquis-col-hide-sm"><?php esc_html_e( 'Device / Location', 'acquisitionsuite' ); ?></th>
                    <th><a href="<?php echo esc_url( $this->lead_sort_url( 'created_at', $orderby, $order ) ); ?>"><?php esc_html_e( 'Date', 'acquisitionsuite' ); ?><?php echo wp_kses( $this->lead_sort_arrow('created_at', $orderby, $order), array( 'span' => array( 'class' => array() ) ) ); ?></a></th>
                    <th style="width:60px;"><?php esc_html_e( 'Actions', 'acquisitionsuite' ); ?></th>
                </tr></thead>
                <tbody>
                <?php
                    $sn = ($page - 1) * 25 + 1;
                    foreach ( $leads as $l ) :
                        $tags    = class_exists( 'ACQUIS_Tags' ) ? ACQUIS_Tags::get_for_lead( $l->id ) : array();
                        $segment = class_exists( 'ACQUIS_Automation_Engine' ) ? ACQUIS_Automation_Engine::get_lead_segment( $l->id ) : '';
                        $score   = class_exists( 'ACQUIS_Lead_Scorer' ) ? ACQUIS_Lead_Scorer::current_total( $l->id ) : 0;
                        $tier    = class_exists( 'ACQUIS_Lead_Scorer' ) ? ACQUIS_Lead_Scorer::score_label( $score ) : array( 'label' => ' ', 'class' => 'acquis-badge-gray' );
                        $stage   = class_exists( 'ACQUIS_Pipeline' ) ? ACQUIS_Pipeline::get_lead_stage( $l->id ) : null;
                ?>
                <tr id="acquis-lead-row-<?php echo absint($l->id); ?>">
                    <td><input type="checkbox" class="acquis-lead-checkbox" value="<?php echo absint( $l->id ); ?>"></td>
                    <td style="color:#9ca3af;font-size:12px;font-weight:700;">
                        <?php echo absint( $sn++ ); ?>
                    </td>
                    <td>
                        <strong style="color:#0D1B4B;"><?php echo esc_html($l->full_name); ?></strong>
                        <?php if ($segment) : ?><div style="margin-top:3px;"><span class="acquis-badge acquis-badge-blue"><?php echo esc_html($segment); ?></span></div><?php endif; ?>
                        <?php if (!empty($tags)) : ?><div style="margin-top:3px;"><?php foreach ($tags as $tag) : if ( strpos( $tag, 'segment:' ) === 0 ) continue; ?><span class="acquis-badge acquis-badge-orange" style="margin-right:3px;"><?php echo esc_html($tag); ?></span><?php endforeach; ?></div><?php endif; ?>
                    </td>
                    <td><a href="mailto:<?php echo esc_attr($l->email); ?>"><?php echo esc_html($l->email); ?></a></td>
                    <td style="font-size:13px;"><?php echo esc_html($l->file_name ?: ' '); ?></td>
                    <td class="acquis-col-hide-sm">
                        <span class="acquis-badge <?php echo esc_attr( $tier['class'] ); ?>" title="<?php echo esc_attr( $score . ' pts' ); ?>"><?php echo esc_html( $tier['label'] ); ?></span>
                        <?php if ( $stage ) : ?><div style="margin-top:3px;font-size:11px;font-weight:700;color:<?php echo esc_attr($stage->color); ?>;"><span class="acquis-status-dot" style="background:<?php echo esc_attr($stage->color); ?>;"></span> <?php echo esc_html($stage->name); ?></div><?php endif; ?>
                    </td>
                    <td class="acquis-col-hide-sm" style="font-size:11px;color:#6b7280;line-height:1.5;">
                        <?php if ( ! empty( $l->device ) ) : ?><?php echo esc_html( $l->device . ' · ' . $l->browser ); ?><br><?php endif; ?>
                        <?php if ( ! empty( $l->country ) ) : ?><?php echo esc_html( $l->city ? $l->city . ', ' . $l->country : $l->country ); ?><?php else : ?><span style="color:#9ca3af;"><?php echo esc_html( $l->ip_address ); ?></span><?php endif; ?>
                    </td>
                    <td style="font-size:12px;white-space:nowrap;"><?php echo esc_html(date_i18n('M j, Y H:i',strtotime($l->created_at))); ?></td>
                    <td class="acquis-actions-cell">
                        <button class="acquis-btn-secondary acquis-btn-sm acquis-delete-lead" data-id="<?php echo absint($l->id); ?>" title="<?php esc_attr_e('Delete lead', 'acquisitionsuite' ); ?>"><span class="dashicons dashicons-trash acquis-dicon-sm"></span></button>
                    </td>
                </tr>
                <?php endforeach; ?>
                </tbody>
            </table>
            </div><!-- /.acquis-table-scroll -->
            <?php if ( $pages > 1 ) : ?>
            <div class="acquis-pagination" style="padding:14px 20px;border-top:1px solid #e5e7eb;">
                <?php if ($page>1) : ?><a href="<?php echo esc_url(add_query_arg(array('acquis_page'=>$page-1,'orderby'=>$orderby,'order'=>$order))); ?>" class="button">&laquo; <?php esc_html_e( 'Prev', 'acquisitionsuite' ); ?></a><?php endif; ?>
                <?php $start=max(1,$page-2); $end=min($pages,$page+2);
                if ($start>1) echo '<span style="padding:0 6px;color:#9ca3af;">…</span>';
                for($i=$start;$i<=$end;$i++): ?>
                <a href="<?php echo esc_url(add_query_arg(array('acquis_page'=>$i,'orderby'=>$orderby,'order'=>$order))); ?>" class="button <?php echo $i===$page?'button-primary':''; ?>"><?php echo absint( $i ); ?></a>
                <?php endfor;
                if ($end<$pages) echo '<span style="padding:0 6px;color:#9ca3af;">…</span>'; ?>
                <?php if ($page<$pages): ?><a href="<?php echo esc_url(add_query_arg(array('acquis_page'=>$page+1,'orderby'=>$orderby,'order'=>$order))); ?>" class="button"><?php esc_html_e( 'Next', 'acquisitionsuite' ); ?> &raquo;</a><?php endif; ?>
                <span style="font-size:12px;color:#9ca3af;padding:0 10px;"><?php printf( esc_html__( 'Page %d of %d', 'acquisitionsuite' ),$page,$pages); ?></span>
            </div>
            <?php endif; ?>
            <?php else : ?><div style="padding:40px;text-align:center;color:#9ca3af;"><?php esc_html_e( 'No leads yet.', 'acquisitionsuite' ); ?></div><?php endif; ?>
        </div>
        </div>
        <?php
    }

    // EMAIL SETTINGS PAGE
    /**
     * The standalone "Email Settings" page has moved to a tab under
     * Settings (see render_settings_page()). This redirect keeps any
     * bookmarked links to the old top-level page working.
     */
    public function render_email_page() {
        wp_safe_redirect( admin_url( 'admin.php?page=acquisitionsuite-settings' ) );
        exit;
    }

    // INTEGRATIONS PAGE
    public function render_integrations_page() {
        $saved_msg = isset( $_GET['acquis_saved'] ) ? '<div class="notice notice-success is-dismissible"><p>' . esc_html__( 'Integration settings saved.', 'acquisitionsuite' ) . '</p></div>' : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only display filter
        ?>
        <div class="wrap acquis-admin-wrap">
        <?php $this->admin_header( esc_html__(  'Email Marketing Integrations', 'acquisitionsuite' ) ); echo wp_kses_post( $saved_msg ); ?>
        <div class="acquis-tab-nav" id="acquis-integrations-tab-nav">
            <a href="#" class="acquis-tab active" data-tab="mailchimp">Mailchimp</a>
            <a href="#" class="acquis-tab" data-tab="mailwizz">MailWizz</a>
            <a href="#" class="acquis-tab" data-tab="brevo">Brevo</a>
            <?php do_action( 'acquis_integrations_tabs' ); ?>
        </div>
        <form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>">
        <input type="hidden" name="action" value="acquis_save_integrations"><?php wp_nonce_field( 'acquis_save_integrations' ); ?>

        <!-- Mailchimp -->
        <div class="acquis-tab-panel" id="acquis-tab-mailchimp">
            <div class="acquis-card acquis-integration-card">
                <div class="acquis-integration-header">
                    <div class="acquis-integration-logo acquis-logo-mc">MC</div>
                    <div><h2>Mailchimp</h2><p><?php esc_html_e( 'Automatically add leads to your Mailchimp audience.', 'acquisitionsuite' ); ?></p></div>
                    <label class="acquis-toggle"><input type="checkbox" name="acquis_mailchimp_enabled" value="1" <?php checked( get_option( 'acquis_mailchimp_enabled' ), '1' ); ?>><span class="acquis-toggle-slider"></span></label>
                </div>
                <table class="form-table acquis-settings-table">
                    <tr><th><?php esc_html_e( 'API Key', 'acquisitionsuite' ); ?></th><td><input type="password" name="acquis_mailchimp_api_key" id="acquis-mc-api-key" value="<?php echo esc_attr( get_option( 'acquis_mailchimp_api_key' ) ); ?>" class="large-text" placeholder="xxxx-us21"><button type="button" class="button acquis-fetch-mc-lists" style="margin-left:8px;"><?php esc_html_e( 'Fetch Lists', 'acquisitionsuite' ); ?></button><span class="acquis-inline-result" id="acquis-mc-result"></span></td></tr>
                    <tr><th><?php esc_html_e( 'Audience', 'acquisitionsuite' ); ?></th><td><select name="acquis_mailchimp_list_id" id="acquis-mc-list-select"><option value=""><?php esc_html_e( '  Fetch lists first  ', 'acquisitionsuite' ); ?></option><?php $sl = get_option( 'acquis_mailchimp_list_id' ); if ( $sl ) echo '<option value="'.esc_attr($sl).'" selected>'.esc_html($sl).'</option>'; ?></select></td></tr>
                    <tr><th><?php esc_html_e( 'Tags (comma-separated)', 'acquisitionsuite' ); ?></th><td><input type="text" name="acquis_mailchimp_tags" value="<?php echo esc_attr( get_option( 'acquis_mailchimp_tags' ) ); ?>" class="large-text" placeholder="acquisitionsuite, download"></td></tr>
                    <tr><th><?php esc_html_e( 'Double Opt-In', 'acquisitionsuite' ); ?></th><td><label><input type="checkbox" name="acquis_mailchimp_double_optin" value="1" <?php checked( get_option( 'acquis_mailchimp_double_optin' ), '1' ); ?>><?php esc_html_e( 'Require email confirmation before subscribing', 'acquisitionsuite' ); ?></label></td></tr>
                </table>
            </div>
        </div>

        <!-- MailWizz -->
        <div class="acquis-tab-panel" id="acquis-tab-mailwizz" style="display:none;">
            <div class="acquis-card acquis-integration-card">
                <div class="acquis-integration-header">
                    <div class="acquis-integration-logo acquis-logo-mw">MW</div>
                    <div><h2>MailWizz EMA</h2><p><?php esc_html_e( 'Full API integration with HMAC-SHA1 signing, custom field mapping, and double opt-in.', 'acquisitionsuite' ); ?></p></div>
                    <label class="acquis-toggle"><input type="checkbox" name="acquis_mailwizz_enabled" value="1" <?php checked( get_option( 'acquis_mailwizz_enabled' ), '1' ); ?>><span class="acquis-toggle-slider"></span></label>
                </div>
                <table class="form-table acquis-settings-table">
                    <tr><th><?php esc_html_e( 'API URL', 'acquisitionsuite' ); ?></th><td><input type="url" name="acquis_mailwizz_api_url" id="acquis-mw-url" value="<?php echo esc_attr( get_option( 'acquis_mailwizz_api_url' ) ); ?>" class="large-text" placeholder="https://your-mailwizz.com/api"></td></tr>
                    <tr><th><?php esc_html_e( 'Public Key', 'acquisitionsuite' ); ?></th><td><input type="text" name="acquis_mailwizz_public_key" id="acquis-mw-pub" value="<?php echo esc_attr( get_option( 'acquis_mailwizz_public_key' ) ); ?>" class="large-text"></td></tr>
                    <tr><th><?php esc_html_e( 'Private Key', 'acquisitionsuite' ); ?></th><td><input type="password" name="acquis_mailwizz_private_key" id="acquis-mw-priv" value="<?php echo esc_attr( get_option( 'acquis_mailwizz_private_key' ) ); ?>" class="large-text"></td></tr>
                    <tr><th></th><td><button type="button" class="button" id="acquis-test-mw"><?php esc_html_e( 'Test Connection', 'acquisitionsuite' ); ?></button><span id="acquis-mw-test-result" class="acquis-inline-result"></span></td></tr>
                    <tr><th><?php esc_html_e( 'List UID', 'acquisitionsuite' ); ?></th><td><select name="acquis_mailwizz_list_uid" id="acquis-mw-list-select"><option value=""><?php esc_html_e( '  Test connection, then Fetch Lists  ', 'acquisitionsuite' ); ?></option><?php $mwl = get_option( 'acquis_mailwizz_list_uid' ); if ( $mwl ) echo '<option value="'.esc_attr($mwl).'" selected>'.esc_html($mwl).'</option>'; ?></select><button type="button" class="button acquis-fetch-mw-lists" style="margin-left:8px;"><?php esc_html_e( 'Fetch Lists', 'acquisitionsuite' ); ?></button></td></tr>
                    <tr><th><?php esc_html_e( 'Double Opt-In', 'acquisitionsuite' ); ?></th><td><label><input type="checkbox" name="acquis_mailwizz_double_optin" value="1" <?php checked( get_option( 'acquis_mailwizz_double_optin' ), '1' ); ?>><?php esc_html_e( 'Require confirmation before subscribing', 'acquisitionsuite' ); ?></label></td></tr>
                </table>

                <!-- Custom Field Mapping -->
                <div style="border-top:1px solid #eee;margin-top:20px;padding-top:20px;">
                    <h3 style="margin:0 0 8px;"><?php esc_html_e( 'Custom Field Mapping', 'acquisitionsuite' ); ?></h3>
                    <p class="acquis-desc"><?php esc_html_e( 'Map AcquisitionSuite data fields to your MailWizz list custom field TAGs.', 'acquisitionsuite' ); ?></p>
                    <?php
                    $field_map = get_option( 'acquis_mailwizz_custom_fields', array( array( 'tag' => '', 'source' => '' ) ) );
                    $sources   = array( 'full_name' => 'Full Name', 'email' => 'Email', 'file_name' => 'File Name', 'file_ext' => 'File Extension', 'site_name' => 'Site Name', 'site_url' => 'Site URL' );
                    ?>
                    <div id="acquis-mw-field-map">
                    <?php foreach ( (array) $field_map as $i => $mapping ) : ?>
                    <div class="acquis-field-map-row">
                        <input type="text" name="acquis_mailwizz_custom_fields[<?php echo absint( $i ); ?>][tag]" value="<?php echo esc_attr( $mapping['tag'] ?? '' ); ?>" placeholder="MAILWIZZ_TAG" style="width:180px;">
                        <span style="padding:0 10px;color:#666;">→</span>
                        <select name="acquis_mailwizz_custom_fields[<?php echo absint( $i ); ?>][source]">
                            <option value="">  Source  </option>
                            <?php foreach ( $sources as $v => $l ) : ?><option value="<?php echo esc_attr($v); ?>" <?php selected( $mapping['source'] ?? '', $v ); ?>><?php echo esc_html($l); ?></option><?php endforeach; ?>
                        </select>
                        <button type="button" class="button acquis-remove-row" style="margin-left:6px;"><span class="dashicons dashicons-no-alt" style="vertical-align:-4px;"></span></button>
                    </div>
                    <?php endforeach; ?>
                    </div>
                    <button type="button" class="button" id="acquis-add-mw-field" style="margin-top:10px;">+ <?php esc_html_e( 'Add Field', 'acquisitionsuite' ); ?></button>
                    <?php /* MW field-map JS handled by initMailwizzFieldMap() in acquis-admin.js; data injected via window.ACQUIS_MW in enqueue_assets() */ ?>
                </div>
            </div>
        </div>

        <!-- Brevo -->
        <div class="acquis-tab-panel" id="acquis-tab-brevo" style="display:none;">
            <div class="acquis-card acquis-integration-card">
                <div class="acquis-integration-header">
                    <div class="acquis-integration-logo acquis-logo-brevo">BR</div>
                    <div><h2>Brevo <small style="color:#999;font-size:0.7em;">formerly Sendinblue</small></h2><p><?php esc_html_e( 'Add leads to your Brevo contact list with optional double opt-in.', 'acquisitionsuite' ); ?></p></div>
                    <label class="acquis-toggle"><input type="checkbox" name="acquis_brevo_enabled" value="1" <?php checked( get_option( 'acquis_brevo_enabled' ), '1' ); ?>><span class="acquis-toggle-slider"></span></label>
                </div>
                <table class="form-table acquis-settings-table">
                    <tr><th><?php esc_html_e( 'API Key', 'acquisitionsuite' ); ?></th><td><input type="password" name="acquis_brevo_api_key" id="acquis-brevo-api-key" value="<?php echo esc_attr( get_option( 'acquis_brevo_api_key' ) ); ?>" class="large-text" placeholder="xkeysib-..."><button type="button" class="button" id="acquis-test-brevo" style="margin-left:8px;"><?php esc_html_e( 'Test Key', 'acquisitionsuite' ); ?></button><span id="acquis-brevo-test-result" class="acquis-inline-result"></span></td></tr>
                    <tr><th><?php esc_html_e( 'Contact List', 'acquisitionsuite' ); ?></th><td><select name="acquis_brevo_list_id" id="acquis-brevo-list-select"><option value=""><?php esc_html_e( '  Fetch lists first  ', 'acquisitionsuite' ); ?></option><?php $bl = get_option( 'acquis_brevo_list_id' ); if ( $bl ) echo '<option value="'.esc_attr($bl).'" selected>#'.esc_html($bl).'</option>'; ?></select><button type="button" class="button acquis-fetch-brevo-lists" style="margin-left:8px;"><?php esc_html_e( 'Fetch Lists', 'acquisitionsuite' ); ?></button></td></tr>
                    <tr><th><?php esc_html_e( 'Double Opt-In', 'acquisitionsuite' ); ?></th><td><label><input type="checkbox" name="acquis_brevo_double_optin" value="1" id="acquis-brevo-doi-chk" <?php checked( get_option( 'acquis_brevo_double_optin' ), '1' ); ?>><?php esc_html_e( 'Use Brevo double opt-in flow', 'acquisitionsuite' ); ?></label></td></tr>
                    <tr id="acquis-brevo-doi-row" <?php echo get_option( 'acquis_brevo_double_optin' ) ? '' : 'style="display:none;"'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- Literal CSS string, not user data ?>>
                        <th><?php esc_html_e( 'DOI Template ID', 'acquisitionsuite' ); ?></th>
                        <td><input type="number" name="acquis_brevo_doi_template_id" value="<?php echo absint( get_option( 'acquis_brevo_doi_template_id', 0 ) ); ?>" class="small-text"><p class="description"><?php esc_html_e( 'From your Brevo Email Templates list.', 'acquisitionsuite' ); ?></p></td>
                    </tr>
                </table>
            </div>
        </div>

        <!-- WhatsApp (only rendered when Pro is active) -->


                <?php do_action( 'acquis_integrations_panels' ); ?>

        <p class="submit" style="padding-left:0;"><button type="submit" class="button button-primary"><?php esc_html_e( 'Save Integration Settings', 'acquisitionsuite' ); ?></button></p>
        </form>
        </div>
        <?php
    }

    // EMAIL LOGS PAGE
    public function render_email_logs_page() {
        $page = max( 1, absint( $_GET['acquis_page'] ?? 1 ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only display filter
        $logs = ACQUIS_Database::get_email_logs( 25, $page );
        $total = ACQUIS_Database::count_email_logs();
        $sent  = ACQUIS_Database::count_email_logs( 'sent' );
        $failed= ACQUIS_Database::count_email_logs( 'failed' );
        $pages = ceil( $total / 25 );
        ?>
        <div class="wrap acquis-admin-wrap">
        <?php $this->admin_header( esc_html__(  'Email Logs', 'acquisitionsuite' ) ); ?>
        <div class="acquis-stats-grid" style="grid-template-columns:repeat(3,1fr);">
            <div class="acquis-stat-card"><span class="dashicons dashicons-email-alt"></span><div class="acquis-stat-number"><?php echo number_format( $total ); ?></div><div class="acquis-stat-label"><?php esc_html_e( 'Total Emails', 'acquisitionsuite' ); ?></div></div>
            <div class="acquis-stat-card" style="border-color:rgba(15,157,88,.3);"><span class="dashicons dashicons-yes-alt" style="color:#0f9d58;"></span><div class="acquis-stat-number" style="color:#0f9d58;"><?php echo number_format( $sent ); ?></div><div class="acquis-stat-label"><?php esc_html_e( 'Sent', 'acquisitionsuite' ); ?></div></div>
            <div class="acquis-stat-card" style="border-color:rgba(217,48,37,.3);"><span class="dashicons dashicons-warning" style="color:#d93025;"></span><div class="acquis-stat-number" style="color:#d93025;"><?php echo number_format( $failed ); ?></div><div class="acquis-stat-label"><?php esc_html_e( 'Failed', 'acquisitionsuite' ); ?></div></div>
        </div>
        <div class="acquis-card" style="overflow-x:auto;">
            <!-- Bulk clear toolbar -->
            <div style="display:flex;gap:10px;align-items:center;padding:12px 16px;border-bottom:1px solid var(--p3-gray-100);flex-wrap:wrap;">
                <strong style="font-size:12px;color:var(--p3-navy);"><?php esc_html_e( 'Clear:', 'acquisitionsuite' ); ?></strong>
                <select id="acquis-log-clear-status" style="font-size:12px;padding:4px 8px;border:1px solid #e5e7eb;border-radius:6px;">
                    <option value=""><?php esc_html_e( 'All statuses', 'acquisitionsuite' ); ?></option>
                    <option value="sent"><?php esc_html_e( 'Sent only', 'acquisitionsuite' ); ?></option>
                    <option value="failed"><?php esc_html_e( 'Failed only', 'acquisitionsuite' ); ?></option>
                </select>
                <input type="date" id="acquis-log-clear-before" style="font-size:12px;padding:4px 8px;border:1px solid #e5e7eb;border-radius:6px;" placeholder="Before date">
                <button type="button" id="acquis-bulk-clear-logs" class="acquis-btn-danger acquis-btn-sm">
                    <span class="dashicons dashicons-trash" style="font-size:13px;vertical-align:-2px;"></span>
                    <?php esc_html_e( 'Clear Selected', 'acquisitionsuite' ); ?>
                </button>
                <span id="acquis-log-clear-result" style="font-size:12px;color:#16a34a;"></span>
                <span style="margin-left:auto;font-size:11px;color:#9ca3af;"><?php printf( esc_html__( 'Auto-clear after %d days (Settings - Data Retention)', 'acquisitionsuite' ), absint( get_option( 'acquis_retention_email_logs', 30 ) ) ); ?></span>
            </div>
            <?php if ( $logs ) : ?>
            <div class="acquis-table-scroll">
            <table class="acquis-table" style="border:none;">
                <thead><tr>
                    <th style="width:50px;"><?php esc_html_e( 'S/N', 'acquisitionsuite' ); ?></th>
                    <th><?php esc_html_e( 'Lead', 'acquisitionsuite' ); ?></th>
                    <th>Email</th>
                    <th class="acquis-col-hide-sm"><?php esc_html_e( 'Subject', 'acquisitionsuite' ); ?></th>
                    <th><?php esc_html_e( 'Status', 'acquisitionsuite' ); ?></th>
                    <th class="acquis-col-hide-sm"><?php esc_html_e( 'Provider', 'acquisitionsuite' ); ?></th>
                    <th><?php esc_html_e( 'Date', 'acquisitionsuite' ); ?></th>
                    <th style="width:50px;"></th>
                </tr></thead>
                <tbody>
                <?php
                    $log_sn = ( $page - 1 ) * 25 + 1;
                    foreach ( $logs as $log ) :
                    $bc = $log->status === 'sent' ? 'acquis-badge-green' : ( $log->status === 'failed' ? 'acquis-badge-red' : 'acquis-badge-gray' );
                ?>
                <tr>
                    <td style="color:#9ca3af;font-size:12px;font-weight:700;"><?php echo absint( $log_sn++ ); ?></td>
                    <td><strong style="color:var(--acquis-navy);"><?php echo esc_html( $log->full_name ?: ' ' ); ?></strong></td>
                    <td><a href="mailto:<?php echo esc_attr( $log->email ); ?>" style="color:var(--acquis-orange);text-decoration:none;"><?php echo esc_html( $log->email ); ?></a></td>
                    <td class="acquis-col-hide-sm" style="max-width:200px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis;" title="<?php echo esc_attr( $log->subject ); ?>"><?php echo esc_html( $log->subject ); ?></td>
                    <td>
                        <span class="acquis-badge <?php echo esc_attr( $bc ); ?>"><?php echo esc_html( ucfirst( $log->status ) ); ?></span>
                        <?php if ( $log->status === 'failed' && $log->error_msg ) : ?>
                        <span class="acquis-error-hint" title="<?php echo esc_attr( $log->error_msg ); ?>"><span class="dashicons dashicons-warning acquis-dicon-sm"></span></span>
                        <?php endif; ?>
                    </td>
                    <td class="acquis-col-hide-sm" style="font-size:12px;"><?php echo esc_html( $log->provider ); ?></td>
                    <td style="font-size:12px;white-space:nowrap;color:#9ca3af;"><?php echo esc_html( date_i18n( 'M j, H:i', strtotime( $log->created_at ) ) ); ?></td>
                    <td>
                        <button class="button acquis-btn-xs acquis-resend-email-log" data-id="<?php echo absint( $log->id ); ?>" data-nonce="<?php echo esc_attr( wp_create_nonce( 'acquis_nonce' ) ); ?>" style="padding:2px 8px;margin-right:3px;font-size:11px;" title="<?php esc_attr_e( 'Resend email', 'acquisitionsuite' ); ?>">
                            <span class="dashicons dashicons-email-alt" style="font-size:12px;width:12px;height:12px;vertical-align:-1px;"></span>
                        </button>
                        <button class="acquis-btn-danger acquis-btn-xs acquis-del-email-log" data-id="<?php echo absint($log->id); ?>" title="<?php esc_attr_e('Delete', 'acquisitionsuite' ); ?>" style="padding:2px 6px;">
                            <span class="dashicons dashicons-trash" style="font-size:12px;width:12px;height:12px;vertical-align:-1px;"></span>
                        </button>
                    </td>
                </tr>
                <?php endforeach; ?>
                </tbody>
            </table>
            </div><!-- /.acquis-table-scroll -->
            <?php if ( $pages > 1 ) : ?>
            <div class="acquis-pagination" style="padding:14px 20px;border-top:1px solid var(--acquis-border);">
                <?php
                $start = max( 1, $page - 2 ); $end = min( $pages, $page + 2 );
                if ( $start > 1 ) echo '<span style="padding:0 6px;color:#9ca3af;">…</span>';
                for ( $i = $start; $i <= $end; $i++ ) :
                ?><a href="<?php echo esc_url( add_query_arg( 'acquis_page', $i ) ); ?>" class="button <?php echo $i === $page ? 'button-primary' : ''; ?>"><?php echo absint( $i ); ?></a><?php
                endfor;
                if ( $end < $pages ) echo '<span style="padding:0 6px;color:#9ca3af;">…</span>';
                ?>
                <span style="font-size:12px;color:#9ca3af;padding:0 10px;"><?php printf( esc_html__( 'Page %d of %d', 'acquisitionsuite' ), $page, $pages ); ?></span>
            </div>
            <?php endif; ?>
            <?php else : ?><div style="padding:40px;text-align:center;color:#9ca3af;"><?php esc_html_e( 'No email logs yet.', 'acquisitionsuite' ); ?></div><?php endif; ?>
        </div>
        </div>
        <?php
    }

    // SETTINGS PAGE
    public function render_settings_page() {
        // Save retention settings
        if ( isset( $_POST['acquis_save_settings'] ) && check_admin_referer( 'acquis_settings' ) ) {
            update_option( 'acquis_retention_email_logs',   absint( $_POST['acquis_retention_email_logs']   ?? 30 ) );
            // Allow Pro to save its own retention options (email queue, orders, transactions)
            do_action( 'acquis_save_retention_settings' );

            foreach ( array(
                'acquis_link_expiry_minutes'   => 'absint',
                'acquis_free_download_limit'   => 'absint',
                'acquis_success_message'     => 'sanitize_textarea_field',
                'acquis_success_message_standalone' => 'sanitize_textarea_field',
                'acquis_button_label'        => 'sanitize_text_field',
                'acquis_modal_title'         => 'sanitize_text_field',
                'acquis_modal_subtitle'      => 'sanitize_textarea_field',
            ) as $key => $fn ) {
                update_option( $key, call_user_func( $fn, wp_unslash( $_POST[ $key ] ?? '' ) ) );
            }
            // Branding opt-in — checkbox: save '1' if checked, '0' if not
            update_option( 'acquis_show_powered_by', isset( $_POST['acquis_show_powered_by'] ) ? '1' : '0' );
            update_option( 'acquis_modal_header_color', sanitize_hex_color( wp_unslash( $_POST['acquis_modal_header_color'] ?? '#0D1B4B' ) ) ?: '#0D1B4B' );
            update_option( 'acquis_modal_accent_color', sanitize_hex_color( wp_unslash( $_POST['acquis_modal_accent_color'] ?? '#F97316' ) ) ?: '#F97316' );
            // Uninstall data deletion opt-in
            update_option( 'acquis_delete_data_on_uninstall', isset( $_POST['acquis_delete_data_on_uninstall'] ) ? '1' : '0' );
            echo '<div class="notice notice-success is-dismissible"><p>' . esc_html__( 'Settings saved.', 'acquisitionsuite' ) . '</p></div>';
        }

        $saved_msg = isset( $_GET['acquis_saved'] ) ? '<div class="notice notice-success is-dismissible"><p>' . esc_html__( 'Email settings saved.', 'acquisitionsuite' ) . '</p></div>' : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only display filter
        $preview_ctx = array( 'full_name' => 'Amara Osei', 'email' => 'amara@example.com', 'file_name' => 'Marketing_Guide_2024.pdf', 'download_link' => '#preview', 'site_name' => get_bloginfo( 'name' ) );
        $preview_html = ACQUIS_Email_Template::render( $preview_ctx );
        $expiry_mins = absint( get_option( 'acquis_link_expiry_minutes', 30 ) );
        ?>
        <div class="wrap acquis-admin-wrap">
        <?php $this->admin_header( esc_html__(  'Settings', 'acquisitionsuite' ) ); echo wp_kses_post( $saved_msg ); ?>

        <div class="acquis-tab-nav" id="acquis-settings-tab-nav">
            <a href="#" class="acquis-tab active" data-tab="general"><?php esc_html_e( 'General', 'acquisitionsuite' ); ?></a>
            <a href="#" class="acquis-tab" data-tab="modal-design"><?php esc_html_e( 'Modal Design', 'acquisitionsuite' ); ?></a>
            <a href="#" class="acquis-tab" data-tab="email-delivery"><?php esc_html_e( 'Email: Delivery', 'acquisitionsuite' ); ?></a>
            <a href="#" class="acquis-tab" data-tab="email-design"><?php esc_html_e( 'Email: Design & Template', 'acquisitionsuite' ); ?></a>
            <a href="#" class="acquis-tab" data-tab="email-preview"><?php esc_html_e( 'Email: Preview & Test', 'acquisitionsuite' ); ?></a>
            <a href="#" class="acquis-tab" data-tab="retention"><?php esc_html_e( 'Data Retention', 'acquisitionsuite' ); ?></a>
        </div>

        <!-- ══════════════ GENERAL + MODAL DESIGN: one form ══════════════ -->
        <form method="post">
        <?php wp_nonce_field( 'acquis_settings' ); ?>

        <div class="acquis-tab-panel" id="acquis-tab-general">
            <div class="acquis-card">
                <h2><?php esc_html_e( 'Download Behaviour', 'acquisitionsuite' ); ?></h2>
                <table class="form-table acquis-settings-table">
                    <tr>
                        <th><?php esc_html_e( 'Link Expiry', 'acquisitionsuite' ); ?></th>
                        <td>
                            <div class="acquis-expiry-wrap">
                                <div class="acquis-expiry-field">
                                    <input type="number" name="acquis_link_expiry_minutes" id="acquis-expiry-mins"
                                           value="<?php echo absint( $expiry_mins ); ?>" min="1" max="10080" style="width:100px;">
                                    <span class="acquis-expiry-unit"><?php esc_html_e( 'minutes', 'acquisitionsuite' ); ?></span>
                                </div>
                                <div class="acquis-expiry-conversion" id="acquis-expiry-display">
                                    <?php
                                    if ( $expiry_mins >= 60 ) {
                                        $hrs  = floor( $expiry_mins / 60 );
                                        $mins = $expiry_mins % 60;
                                        echo '<span class="acquis-expiry-badge">';
                                        echo '= ' . absint( $hrs ) . ' ' . esc_html( _n( 'hour', 'hours', $hrs, 'acquisitionsuite' ) );
                                        if ( $mins ) echo ' ' . absint( $mins ) . ' ' . esc_html( _n( 'minute', 'minutes', absint( $mins ), 'acquisitionsuite' ) );
                                        echo '</span>';
                                    } else {
                                        echo '<span class="acquis-expiry-badge">= ' . absint( $expiry_mins ) . ' ' . esc_html__( 'minutes', 'acquisitionsuite' ) . '</span>';
                                    }
                                    ?>
                                </div>
                            </div>
                            <p class="description"><?php esc_html_e( 'How long a generated download link stays valid after the lead submits the form. Max 10,080 min (7 days).', 'acquisitionsuite' ); ?></p>
                        </td>
                    </tr>
                    <tr><th><?php esc_html_e( 'Download Button Label', 'acquisitionsuite' ); ?></th><td><input type="text" name="acquis_button_label" value="<?php echo esc_attr( get_option( 'acquis_button_label', 'Download File' ) ); ?>" class="regular-text"></td></tr>
                    <tr>
                        <th><?php esc_html_e( 'Free Download Limit', 'acquisitionsuite' ); ?></th>
                        <td>
                            <input type="number" name="acquis_free_download_limit" id="acquis-free-download-limit"
                                   value="<?php echo absint( get_option( 'acquis_free_download_limit', 0 ) ); ?>"
                                   min="0" max="999" style="width:80px;">
                            <span style="margin-left:6px;color:#6b7280;"><?php esc_html_e( 'downloads per lead per file', 'acquisitionsuite' ); ?></span>
                            <p class="description"><?php esc_html_e( 'Maximum times a single lead can download the same free file. Set to 0 for unlimited. Paid files use their own download limit configured per-file.', 'acquisitionsuite' ); ?></p>
                        </td>
                    </tr>
                    <tr><th><?php esc_html_e( 'Success Message', 'acquisitionsuite' ); ?></th><td><textarea name="acquis_success_message" class="large-text" rows="2"><?php echo esc_textarea( get_option( 'acquis_success_message' ) ); ?></textarea><p class="description"><?php esc_html_e( 'Shown after a gated-file download form is submitted.', 'acquisitionsuite' ); ?></p></td></tr>
                    <tr><th><?php esc_html_e( 'Standalone Forms Success Message', 'acquisitionsuite' ); ?></th><td><textarea name="acquis_success_message_standalone" class="large-text" rows="2"><?php echo esc_textarea( get_option( 'acquis_success_message_standalone' ) ); ?></textarea><p class="description"><?php esc_html_e( 'Shown after any standalone form (appointment, registration, etc — no file attached) is submitted for free. Paid standalone forms use their own screen under AcquisitionSuite Pro → Payment Settings → Success Screen.', 'acquisitionsuite' ); ?></p></td></tr>
                    <tr>
                        <th><?php esc_html_e( 'Display Branding', 'acquisitionsuite' ); ?></th>
                        <td>
                            <label>
                                <input type="checkbox" name="acquis_show_powered_by" value="1" <?php checked( get_option( 'acquis_show_powered_by', '0' ), '1' ); ?>>
                                <?php esc_html_e( 'Display "Powered by AcquisitionSuite" on the lead capture modal', 'acquisitionsuite' ); ?>
                            </label>
                            <p class="description"><?php esc_html_e( 'Disabled by default. Enable to show a small attribution note below the form on the public modal. This never appears when the administrator has not opted in.', 'acquisitionsuite' ); ?></p>
                        </td>
                    </tr>
                    <tr>
                        <th><?php esc_html_e( 'Data Deletion on Uninstall', 'acquisitionsuite' ); ?></th>
                        <td>
                            <label>
                                <input type="checkbox" name="acquis_delete_data_on_uninstall" value="1" <?php checked( get_option( 'acquis_delete_data_on_uninstall', '0' ), '1' ); ?>>
                                <?php esc_html_e( 'Permanently delete all plugin data when the plugin is deleted', 'acquisitionsuite' ); ?>
                            </label>
                            <p class="description" style="color:#dc2626;">
                                <?php esc_html_e( 'When enabled, deleting this plugin from WordPress will permanently remove all leads, forms, submissions, files, email logs, and settings. This cannot be undone. Leave disabled to keep your data when switching or reinstalling.', 'acquisitionsuite' ); ?>
                            </p>
                        </td>
                    </tr>
                    <?php if ( class_exists( 'ACQUIS_Pay_DB' ) ) : ?>
                    <tr>
                        <th><?php esc_html_e( 'Currency', 'acquisitionsuite' ); ?></th>
                        <td>
                            <?php
                            $unified_currency = get_option( 'acquis_pay_default_currency', 'USD' );
                            $unified_symbol   = class_exists( 'ACQUIS_Pay_DB' ) ? ACQUIS_Pay_DB::get_currency_symbol( $unified_currency ) : '$';
                            ?>
                            <code style="background:#f0f0f1;padding:4px 10px;border-radius:4px;font-size:13px;"><?php echo esc_html( $unified_currency . ' (' . $unified_symbol . ')' ); ?></code>
                            <p class="description">
                                <?php
                                printf(
                                    /* translators: %s: link to Payment Settings */
                                    esc_html__( 'One currency is used across the whole plugin for revenue figures here and on Analytics, and as the default for new paid files. Change it under %s.', 'acquisitionsuite' ),
                                    '<a href="' . esc_url( admin_url( 'admin.php?page=acquis-payments-settings' ) ) . '">' . esc_html__( 'Payments → Settings → General', 'acquisitionsuite' ) . '</a>'
                                );
                                ?>
                            </p>
                        </td>
                    </tr>
                    <?php endif; ?>
                </table>
            </div>
            <p class="submit" style="padding-left:0;"><button type="submit" name="acquis_save_settings" class="button button-primary"><?php esc_html_e( 'Save Settings', 'acquisitionsuite' ); ?></button></p>
        </div>

        <div class="acquis-tab-panel" id="acquis-tab-modal-design" style="display:none;">
            <div class="acquis-card">
                <h2><?php esc_html_e( 'Modal Copy', 'acquisitionsuite' ); ?></h2>
                <table class="form-table acquis-settings-table">
                    <tr><th><?php esc_html_e( 'Modal Title', 'acquisitionsuite' ); ?></th><td><input type="text" name="acquis_modal_title" value="<?php echo esc_attr( get_option( 'acquis_modal_title' ) ); ?>" class="regular-text"></td></tr>
                    <tr><th><?php esc_html_e( 'Modal Subtitle', 'acquisitionsuite' ); ?></th><td><textarea name="acquis_modal_subtitle" class="large-text" rows="2"><?php echo esc_textarea( get_option( 'acquis_modal_subtitle' ) ); ?></textarea></td></tr>
                </table>
            </div>
            <div class="acquis-card">
                <h2><?php esc_html_e( 'Global Colours', 'acquisitionsuite' ); ?></h2>
                <p class="acquis-desc"><?php esc_html_e( 'These set the default look of the lead-capture modal across your whole site. Individual forms can still override the header/colours in the Form Builder.', 'acquisitionsuite' ); ?></p>
                <table class="form-table acquis-settings-table">
                    <tr><th><?php esc_html_e( 'Modal Header Background', 'acquisitionsuite' ); ?></th><td><input type="text" name="acquis_modal_header_color" value="<?php echo esc_attr( get_option( 'acquis_modal_header_color', '#0D1B4B' ) ); ?>" class="acquis-color-picker" data-default-color="#0D1B4B"></td></tr>
                    <tr><th><?php esc_html_e( 'Button / Accent Colour', 'acquisitionsuite' ); ?></th><td><input type="text" name="acquis_modal_accent_color" value="<?php echo esc_attr( get_option( 'acquis_modal_accent_color', '#F97316' ) ); ?>" class="acquis-color-picker" data-default-color="#F97316"><p class="description"><?php esc_html_e( 'Used for the submit button, focus rings, and the lock icon accent.', 'acquisitionsuite' ); ?></p></td></tr>
                </table>
            </div>
            <p class="submit" style="padding-left:0;"><button type="submit" name="acquis_save_settings" class="button button-primary"><?php esc_html_e( 'Save Settings', 'acquisitionsuite' ); ?></button></p>
        </div>

        </form>

        <!-- ══════════════ EMAIL TABS: separate form (own action/handler) ══════════════ -->
        <form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>">
        <input type="hidden" name="action" value="acquis_save_email"><?php wp_nonce_field( 'acquis_save_email' ); ?>

        <div class="acquis-tab-panel" id="acquis-tab-email-delivery" style="display:none;">
            <div class="acquis-card">
                <h2><?php esc_html_e( 'Delivery Mode', 'acquisitionsuite' ); ?></h2>
                <p class="acquis-desc"><?php esc_html_e( 'Choose how users receive their download after submitting the form.', 'acquisitionsuite' ); ?></p>
                <?php $mode = get_option( 'acquis_delivery_mode', 'both' ); ?>
                <?php foreach ( array( 'instant' => array( esc_html__( 'Instant Download Only', 'acquisitionsuite' ), esc_html__( 'Show download link immediately in the modal. No email sent.', 'acquisitionsuite' ) ), 'email' => array( esc_html__( 'Email Only', 'acquisitionsuite' ), esc_html__( 'Send link via email only. No link shown in modal.', 'acquisitionsuite' ) ), 'both' => array( esc_html__( 'Both (Recommended)', 'acquisitionsuite' ), esc_html__( 'Show instant link AND send a branded email with the download.', 'acquisitionsuite' ) ) ) as $val => list( $lbl, $desc ) ) : ?>
                <label class="acquis-radio-card <?php echo esc_attr( $mode === $val ? 'active' : '' ); ?>">
                    <input type="radio" name="acquis_delivery_mode" value="<?php echo esc_attr( $val ); ?>" <?php checked( $mode, $val ); ?>>
                    <div><strong><?php echo esc_html( $lbl ); ?></strong><span><?php echo esc_html( $desc ); ?></span></div>
                </label>
                <?php endforeach; ?>
            </div>
            <div class="acquis-card">
                <h2><?php esc_html_e( 'Sender Details', 'acquisitionsuite' ); ?></h2>
                <table class="form-table acquis-settings-table">
                    <tr><th><?php esc_html_e( 'From Name', 'acquisitionsuite' ); ?></th><td><input type="text" name="acquis_email_from_name" value="<?php echo esc_attr( get_option( 'acquis_email_from_name' ) ); ?>" class="regular-text"></td></tr>
                    <tr><th><?php esc_html_e( 'From Email', 'acquisitionsuite' ); ?></th><td><input type="email" name="acquis_email_from_address" value="<?php echo esc_attr( get_option( 'acquis_email_from_address' ) ); ?>" class="regular-text"><p class="description"><?php esc_html_e( 'Must match your SMTP sending domain.', 'acquisitionsuite' ); ?></p></td></tr>
                    <tr><th><?php esc_html_e( 'Subject Line', 'acquisitionsuite' ); ?></th><td><input type="text" name="acquis_email_subject" value="<?php echo esc_attr( get_option( 'acquis_email_subject' ) ); ?>" class="large-text"><p class="description"><?php esc_html_e( 'Tags: {full_name}, {file_name}, {site_name}', 'acquisitionsuite' ); ?></p></td></tr>
                </table>
            </div>
            <p class="submit" style="padding-left:0;"><button type="submit" class="button button-primary"><?php esc_html_e( 'Save Email Settings', 'acquisitionsuite' ); ?></button></p>
        </div>

        <div class="acquis-tab-panel" id="acquis-tab-email-design" style="display:none;">
            <div class="acquis-card">
                <h2><?php esc_html_e( 'Branding', 'acquisitionsuite' ); ?></h2>
                <table class="form-table acquis-settings-table">
                    <tr><th><?php esc_html_e( 'Logo', 'acquisitionsuite' ); ?></th><td>
                        <div style="display:flex;gap:10px;align-items:center;flex-wrap:wrap;">
                            <input type="url" name="acquis_email_logo_url" id="acquis-logo-url" value="<?php echo esc_attr( get_option( 'acquis_email_logo_url' ) ); ?>" class="large-text" placeholder="https://">
                            <button type="button" class="button" id="acquis-upload-logo"><?php esc_html_e( 'Select Image', 'acquisitionsuite' ); ?></button>
                        </div>
                        <?php if ( get_option( 'acquis_email_logo_url' ) ) : ?><img src="<?php echo esc_url( get_option( 'acquis_email_logo_url' ) ); ?>" id="acquis-logo-preview" style="max-height:48px;margin-top:8px;display:block;"><?php endif; ?>
                    </td></tr>
                    <tr><th><?php esc_html_e( 'Header Color', 'acquisitionsuite' ); ?></th><td><input type="text" name="acquis_email_header_color" value="<?php echo esc_attr( get_option( 'acquis_email_header_color', '#1a73e8' ) ); ?>" class="acquis-color-picker" data-default-color="#1a73e8"></td></tr>
                    <tr><th><?php esc_html_e( 'Button Color', 'acquisitionsuite' ); ?></th><td><input type="text" name="acquis_email_button_color" value="<?php echo esc_attr( get_option( 'acquis_email_button_color', '#0f9d58' ) ); ?>" class="acquis-color-picker" data-default-color="#0f9d58"></td></tr>
                    <tr><th><?php esc_html_e( 'Button Text', 'acquisitionsuite' ); ?></th><td><input type="text" name="acquis_email_button_text" value="<?php echo esc_attr( get_option( 'acquis_email_button_text', 'Download My File' ) ); ?>" class="regular-text"></td></tr>
                    <tr><th><?php esc_html_e( 'Footer Text', 'acquisitionsuite' ); ?></th><td><textarea name="acquis_email_footer_text" class="large-text" rows="2"><?php echo esc_textarea( get_option( 'acquis_email_footer_text' ) ); ?></textarea><p class="description"><?php esc_html_e( 'Supports {site_name}, {email} tags.', 'acquisitionsuite' ); ?></p></td></tr>
                </table>
            </div>
            <div class="acquis-card">
                <h2><?php esc_html_e( 'HTML Template', 'acquisitionsuite' ); ?></h2>
                <p class="acquis-desc"><?php esc_html_e( 'Lead tags: {full_name} {email} {file_name} {download_link} {site_name} &nbsp;|&nbsp; Design tokens: {{header_color}} {{button_color}} {{button_text}} {{footer_text}} {{logo_block}} {{expiry_minutes}} {{current_year}}', 'acquisitionsuite' ); ?></p>
                <div class="acquis-dynamic-tags-bar">
                    <?php foreach ( ACQUIS_Email_Template::available_tags() as $tag => $desc ) : ?>
                    <button type="button" class="acquis-tag-insert button" data-tag="<?php echo esc_attr( $tag ); ?>" title="<?php echo esc_attr( $desc ); ?>"><?php echo esc_html( $tag ); ?></button>
                    <?php endforeach; ?>
                </div>
                <textarea name="acquis_email_template" id="acquis-email-template" rows="28" class="large-text acquis-code-editor"><?php echo esc_textarea( get_option( 'acquis_email_template' ) ); ?></textarea>
            </div>
            <div class="acquis-card">
                <h2><?php esc_html_e( 'Standalone Forms Email', 'acquisitionsuite' ); ?></h2>
                <p class="acquis-desc"><?php esc_html_e( 'Used for any form submission with no file attached (appointments, registrations, etc). A form can override this under its own Email tab in the Form Builder.', 'acquisitionsuite' ); ?></p>
                <table class="form-table acquis-settings-table">
                    <tr><th><?php esc_html_e( 'Subject Line', 'acquisitionsuite' ); ?></th><td><input type="text" name="acquis_standalone_email_subject" value="<?php echo esc_attr( get_option( 'acquis_standalone_email_subject' ) ); ?>" class="large-text"><p class="description"><?php esc_html_e( 'Tags: {full_name}, {site_name}', 'acquisitionsuite' ); ?></p></td></tr>
                </table>
                <textarea name="acquis_standalone_email_template" id="acquis-standalone-email-template" rows="28" class="large-text acquis-code-editor"><?php echo esc_textarea( get_option( 'acquis_standalone_email_template' ) ); ?></textarea>
            </div>
            <p class="submit" style="padding-left:0;"><button type="submit" class="button button-primary"><?php esc_html_e( 'Save Email Settings', 'acquisitionsuite' ); ?></button></p>
        </div>

        <div class="acquis-tab-panel" id="acquis-tab-email-preview" style="display:none;">
            <div class="acquis-card">
                <h2><?php esc_html_e( 'Live Preview', 'acquisitionsuite' ); ?></h2>
                <p class="acquis-desc"><?php esc_html_e( 'Based on saved settings. Save first, then check here.', 'acquisitionsuite' ); ?></p>
                <iframe srcdoc="<?php echo esc_attr( $preview_html ); ?>" style="width:100%;min-height:600px;border:1px solid #dadce0;border-radius:8px;background:#fff;"></iframe>
            </div>
            <div class="acquis-card">
                <h2><?php esc_html_e( 'Send Test Email', 'acquisitionsuite' ); ?></h2>
                <div style="display:flex;gap:12px;align-items:center;flex-wrap:wrap;">
                    <input type="email" id="acquis-test-email-addr" value="<?php echo esc_attr( get_bloginfo( 'admin_email' ) ); ?>" class="regular-text" placeholder="you@example.com">
                    <button type="button" class="button button-primary" id="acquis-send-test-email"><?php esc_html_e( 'Send Test Email', 'acquisitionsuite' ); ?></button>
                    <span id="acquis-test-email-result" class="acquis-inline-result"></span>
                </div>
            </div>
        </div>

        <div class="acquis-tab-panel" id="acquis-tab-retention" style="display:none;">
            <div class="acquis-card">
                <div style="padding:16px 20px;border-bottom:1px solid var(--p3-gray-100);">
                    <h2 style="margin:0 0 4px;font-size:15px;color:var(--p3-navy);"><?php esc_html_e( 'Data Retention', 'acquisitionsuite' ); ?></h2>
                    <p style="margin:0;font-size:12px;color:var(--p3-gray-500);"><?php esc_html_e( 'Records older than the set number of days are automatically deleted by a daily background task. Set 0 to keep records forever.', 'acquisitionsuite' ); ?></p>
                </div>
                <div style="padding:16px 20px;">
                <table class="form-table acquis-settings-table">
                    <tr>
                        <th><?php esc_html_e( 'Email Logs', 'acquisitionsuite' ); ?></th>
                        <td>
                            <input type="number" name="acquis_retention_email_logs" min="0" max="3650" style="width:80px;"
                                   value="<?php echo absint( get_option( 'acquis_retention_email_logs', 30 ) ); ?>">
                            <?php esc_html_e( 'days', 'acquisitionsuite' ); ?>
                            <p class="description"><?php esc_html_e( 'Sent and failed email log entries. Default: 30 days.', 'acquisitionsuite' ); ?></p>
                        </td>
                    </tr>
                    <?php do_action( 'acquis_data_retention_rows' ); ?>
                </table>
                </div>
            </div>
        </div>
        </form>

        </div>
        <?php
    }

    // FORM SAVE HANDLERS
    public function handle_save_email_settings() {
        if ( ! current_user_can( 'manage_options' ) ) wp_die( 'Unauthorized', 403 );
        check_admin_referer( 'acquis_save_email' );
        update_option( 'acquis_delivery_mode',      sanitize_text_field( wp_unslash( $_POST['acquis_delivery_mode'] ?? 'both' ) ) );
        update_option( 'acquis_email_from_name',    sanitize_text_field( wp_unslash( $_POST['acquis_email_from_name'] ?? '' ) ) );
        update_option( 'acquis_email_from_address', sanitize_email( wp_unslash( $_POST['acquis_email_from_address'] ?? '' ) ) );
        update_option( 'acquis_email_subject',      sanitize_text_field( wp_unslash( $_POST['acquis_email_subject'] ?? '' ) ) );
        update_option( 'acquis_email_logo_url',     esc_url_raw( wp_unslash( $_POST['acquis_email_logo_url'] ?? '' ) ) );
        update_option( 'acquis_email_header_color', sanitize_hex_color( wp_unslash( $_POST['acquis_email_header_color'] ?? '#1a73e8' ) ) );
        update_option( 'acquis_email_button_color', sanitize_hex_color( wp_unslash( $_POST['acquis_email_button_color'] ?? '#0f9d58' ) ) );
        update_option( 'acquis_email_button_text',  sanitize_text_field( wp_unslash( $_POST['acquis_email_button_text'] ?? '' ) ) );
        update_option( 'acquis_email_footer_text',  wp_kses_post( wp_unslash( $_POST['acquis_email_footer_text'] ?? '' ) ) );
        $allowed_html = array_merge( wp_kses_allowed_html( 'post' ), array( 'table'=>array('width'=>true,'cellpadding'=>true,'cellspacing'=>true,'style'=>true,'align'=>true,'bgcolor'=>true),'td'=>array('align'=>true,'style'=>true,'colspan'=>true,'rowspan'=>true,'bgcolor'=>true),'tr'=>array('style'=>true,'bgcolor'=>true),'th'=>array('style'=>true),'img'=>array('src'=>true,'alt'=>true,'style'=>true,'width'=>true,'height'=>true,'border'=>true),'a'=>array('href'=>true,'style'=>true,'target'=>true,'rel'=>true),'center'=>array('style'=>true),'font'=>array('style'=>true,'color'=>true,'size'=>true) ) );
        $template = wp_unslash( $_POST['acquis_email_template'] ?? '' );
        update_option( 'acquis_email_template', wp_kses( $template, $allowed_html ) );
        update_option( 'acquis_standalone_email_subject', sanitize_text_field( wp_unslash( $_POST['acquis_standalone_email_subject'] ?? '' ) ) );
        $standalone_template = wp_unslash( $_POST['acquis_standalone_email_template'] ?? '' );
        update_option( 'acquis_standalone_email_template', wp_kses( $standalone_template, $allowed_html ) );
        wp_redirect( add_query_arg( array( 'page' => 'acquisitionsuite-settings', 'acquis_saved' => '1' ), admin_url( 'admin.php' ) ) ); exit;
    }

    public function handle_save_integrations() {
        if ( ! current_user_can( 'manage_options' ) ) wp_die( 'Unauthorized', 403 );
        check_admin_referer( 'acquis_save_integrations' );
        // Mailchimp
        update_option( 'acquis_mailchimp_enabled',      isset( $_POST['acquis_mailchimp_enabled'] ) ? '1' : '0' );
        update_option( 'acquis_mailchimp_api_key',      sanitize_text_field( wp_unslash( $_POST['acquis_mailchimp_api_key'] ?? '' ) ) );
        update_option( 'acquis_mailchimp_list_id',      sanitize_text_field( wp_unslash( $_POST['acquis_mailchimp_list_id'] ?? '' ) ) );
        update_option( 'acquis_mailchimp_tags',         sanitize_text_field( wp_unslash( $_POST['acquis_mailchimp_tags'] ?? '' ) ) );
        update_option( 'acquis_mailchimp_double_optin', isset( $_POST['acquis_mailchimp_double_optin'] ) ? '1' : '0' );
        // MailWizz
        update_option( 'acquis_mailwizz_enabled',      isset( $_POST['acquis_mailwizz_enabled'] ) ? '1' : '0' );
        update_option( 'acquis_mailwizz_api_url',      esc_url_raw( wp_unslash( $_POST['acquis_mailwizz_api_url'] ?? '' ) ) );
        update_option( 'acquis_mailwizz_public_key',   sanitize_text_field( wp_unslash( $_POST['acquis_mailwizz_public_key'] ?? '' ) ) );
        update_option( 'acquis_mailwizz_private_key',  sanitize_text_field( wp_unslash( $_POST['acquis_mailwizz_private_key'] ?? '' ) ) );
        update_option( 'acquis_mailwizz_list_uid',     sanitize_text_field( wp_unslash( $_POST['acquis_mailwizz_list_uid'] ?? '' ) ) );
        update_option( 'acquis_mailwizz_double_optin', isset( $_POST['acquis_mailwizz_double_optin'] ) ? '1' : '0' );
        $clean_fields = array();
        foreach ( (array) ( $_POST['acquis_mailwizz_custom_fields'] ?? array() ) as $row ) {
            if ( ! empty( $row['tag'] ) && ! empty( $row['source'] ) ) {
                $clean_fields[] = array( 'tag' => sanitize_text_field( $row['tag'] ), 'source' => sanitize_text_field( $row['source'] ) );
            }
        }
        update_option( 'acquis_mailwizz_custom_fields', $clean_fields );
        // Brevo
        update_option( 'acquis_brevo_enabled',         isset( $_POST['acquis_brevo_enabled'] ) ? '1' : '0' );
        update_option( 'acquis_brevo_api_key',         sanitize_text_field( wp_unslash( $_POST['acquis_brevo_api_key'] ?? '' ) ) );
        update_option( 'acquis_brevo_list_id',         absint( $_POST['acquis_brevo_list_id'] ?? 0 ) );
        update_option( 'acquis_brevo_double_optin',    isset( $_POST['acquis_brevo_double_optin'] ) ? '1' : '0' );
        update_option( 'acquis_brevo_doi_template_id', absint( $_POST['acquis_brevo_doi_template_id'] ?? 0 ) );
        // Allow Pro to save its own integration options (e.g. WhatsApp, Geo Lookup)
        do_action( 'acquis_save_integrations_extra' );
        wp_redirect( add_query_arg( array( 'page' => 'acquisitionsuite-integrations', 'acquis_saved' => '1' ), admin_url( 'admin.php' ) ) ); exit;
    }

    public function handle_file_upload() {
        if ( ! current_user_can( 'manage_options' ) ) wp_die( 'Unauthorized', 403 );
        check_admin_referer( 'acquis_upload_file', 'acquis_upload_nonce' );
        $title       = sanitize_text_field( wp_unslash( $_POST['file_title'] ?? '' ) );
        $source_type = ( 'url' === ( $_POST['acquis_source_type'] ?? 'upload' ) ) ? 'url' : 'upload';

        if ( empty( $title ) ) {
            wp_redirect( add_query_arg( 'acquis_msg', 'err_move', admin_url( 'admin.php?page=acquisitionsuite-files' ) ) ); exit;
        }

        if ( 'url' === $source_type ) {
            $url    = esc_url_raw( wp_unslash( $_POST['file_url'] ?? '' ) );
            $result = ACQUIS_File_Manager::handle_url_file( $url, $title );
            $msg    = is_wp_error( $result ) ? 'err_url' : 'uploaded';
        } else {
            if ( ! isset( $_FILES['acquis_file'] ) || $_FILES['acquis_file']['error'] !== UPLOAD_ERR_OK ) {
                wp_redirect( add_query_arg( 'acquis_msg', 'err_move', admin_url( 'admin.php?page=acquisitionsuite-files' ) ) ); exit;
            }
            $result = ACQUIS_File_Manager::handle_upload( $_FILES['acquis_file'], $title );
            $msg    = is_wp_error( $result ) ? ( $result->get_error_code() === 'acquis_invalid_type' ? 'err_type' : 'err_move' ) : 'uploaded';
        }

        if ( ! is_wp_error( $result ) ) {
            // Allow Pro to save paid download config for the new file
            do_action( 'acquis_after_file_upload', $result );
        }

        wp_redirect( add_query_arg( 'acquis_msg', $msg, admin_url( 'admin.php?page=acquisitionsuite-files' ) ) ); exit;
    }


    public function handle_file_delete() {
        if ( ! current_user_can( 'manage_options' ) ) wp_die( 'Unauthorized', 403 );
        $fid = absint( $_POST['file_id'] ?? 0 );
        check_admin_referer( 'acquis_delete_file_' . $fid, 'acquis_delete_nonce' );
        $file = ACQUIS_File_Manager::get_file_data( $fid );
        if ( $file && file_exists( $file['path'] ) ) {
            wp_delete_file( $file['path'] ); // WP Filesystem API per WP.org Guideline 7
        }
        wp_delete_post( $fid, true );
        wp_redirect( add_query_arg( 'acquis_msg', 'deleted', admin_url( 'admin.php?page=acquisitionsuite-files' ) ) ); exit;
    }


    private function admin_header( $title, $extra = '' ) {
        $title_text = trim( wp_strip_all_tags( $title ) );
        ?>
        <div class="acquis-admin-header">
            <?php if ( '' !== $title_text ) : ?>
            <h1 class="screen-reader-text"><?php echo esc_html( $title_text ); ?></h1>
            <?php endif; ?>
            <div class="acquis-logo"><img src="<?php echo esc_url( ACQUIS_PLUGIN_URL . 'assets/images/logo-minimal.png' ); ?>" alt="AcquisitionSuite" /><p style="margin:2px 0 0;font-size:11px;color:var(--p3-gray-400);">by Fortunatus | UfirstDEV Technologies</p></div>
            <div style="display:flex;align-items:center;gap:12px;"><?php echo wp_kses_post( $extra ); ?><span class="acquis-version">v<?php echo ACQUIS_VERSION; ?></span></div>
        </div>
        <?php
        // No explicit render_promo_banner() call needed here:
        // suppress_foreign_admin_notices() re-adds it to 'admin_notices'
        // immediately after wiping every other plugin's callback on our own
        // screens, so it fires through the normal hook on every
        // AcquisitionSuite page (Lite or Pro) without being called per-page.
    }

    /**
     * Sitewide, dismissible upgrade/review nudge, hooked to 'admin_notices'
     * so it shows on every wp-admin page (Dashboard, Posts, other plugins'
     * pages, all of it), the same way many plugins' own promo banners do.
     * On our own screens (Lite or Pro) this exact callback is what
     * suppress_foreign_admin_notices() re-adds immediately after wiping
     * every other plugin's admin_notices callback there, so it still shows
     * exactly once on our own pages too, through the same single hook, no
     * separate per-page call needed. Fully self-contained (inline styles,
     * inline dismiss script) since acquis-admin.css/acquis-admin.js are
     * only enqueued on our own pages, this has to work correctly on every
     * other admin page too, where neither of those loads. Shown only to
     * users who could act on it (manage_options), only once the site has
     * had the plugin running long enough to have a real opinion of it, and
     * snoozed for 60 days per-admin after being dismissed rather than
     * hidden forever, since "not now" isn't the same as "never."
     */
    public function render_promo_banner() {
        if ( ! current_user_can( 'manage_options' ) ) return;

        $snoozed_until = (int) get_user_meta( get_current_user_id(), 'acquis_promo_snoozed_until', true );
        if ( $snoozed_until && time() < $snoozed_until ) return;

        $activated = (int) get_option( 'acquis_activated_time', 0 );
        if ( ! $activated || ( time() - $activated ) < 7 * DAY_IN_SECONDS ) return;

        $pro_active = class_exists( 'ACQUIS_License_Manager' ) && ACQUIS_License_Manager::is_active();

        // sub_confirmation=1 is a real, documented YouTube URL parameter
        // that pops the subscribe confirmation dialog on arrival, not
        // something invented here.
        $youtube_url = 'https://www.youtube.com/@UfirstDEV?sub_confirmation=1';

        // X's own Web Intent endpoint for composing a pre-filled post, not
        // a "follow this account" link, since there's no confirmed
        // AcquisitionSuite X handle to point that at.
        $tweet_url = add_query_arg( array(
            'text' => rawurlencode( 'Turning file downloads into leads with AcquisitionSuite, the WordPress plugin for lead capture, automation, and paid downloads.' ),
            'url'  => rawurlencode( 'https://acquisitionsuite.ufirstdev.com' ),
        ), 'https://twitter.com/intent/tweet' );

        $ajax_url = admin_url( 'admin-ajax.php' );
        $nonce    = wp_create_nonce( 'acquis_admin_nonce' );
        ?>
        <div id="acquis-promo-banner" style="display:flex;align-items:center;justify-content:space-between;gap:16px;background:#fff;border:1px solid #e5e7eb;border-left:4px solid #F97316;border-radius:10px;padding:14px 18px;margin:15px 0 0;flex-wrap:wrap;box-sizing:border-box;">
            <div style="display:flex;align-items:center;gap:14px;flex:1;min-width:240px;">
                <img src="<?php echo esc_url( ACQUIS_PLUGIN_URL . 'assets/images/icon-128x128.png' ); ?>" alt="" width="40" height="40" style="border-radius:8px;flex-shrink:0;">
                <p style="margin:0;font-size:13px;color:#0D1B4B;line-height:1.4;"><?php esc_html_e( 'Glad AcquisitionSuite has been useful. Got a minute for one of these?', 'acquisitionsuite' ); ?></p>
            </div>
            <div style="display:flex;align-items:center;gap:8px;flex-wrap:wrap;">
                <?php if ( ! $pro_active ) : ?>
                <a href="<?php echo esc_url( admin_url( 'admin.php?page=acquis-upgrade' ) ); ?>" style="background:#F97316;color:#fff;text-decoration:none;font-weight:600;font-size:12px;padding:6px 12px;border-radius:6px;white-space:nowrap;"><?php esc_html_e( 'Upgrade to Pro', 'acquisitionsuite' ); ?></a>
                <?php endif; ?>
                <a href="https://wordpress.org/support/plugin/acquisitionsuite/reviews/?rate=5#new-post" target="_blank" rel="noopener" style="background:#eef0f8;color:#0D1B4B;text-decoration:none;font-weight:600;font-size:12px;padding:6px 12px;border-radius:6px;white-space:nowrap;"><?php esc_html_e( 'Rate us 5 stars', 'acquisitionsuite' ); ?></a>
                <a href="<?php echo esc_url( $youtube_url ); ?>" target="_blank" rel="noopener" style="background:#eef0f8;color:#0D1B4B;text-decoration:none;font-weight:600;font-size:12px;padding:6px 12px;border-radius:6px;white-space:nowrap;"><?php esc_html_e( 'Subscribe on YouTube', 'acquisitionsuite' ); ?></a>
                <a href="<?php echo esc_url( $tweet_url ); ?>" target="_blank" rel="noopener" style="background:#eef0f8;color:#0D1B4B;text-decoration:none;font-weight:600;font-size:12px;padding:6px 12px;border-radius:6px;white-space:nowrap;"><?php esc_html_e( 'Share on X', 'acquisitionsuite' ); ?></a>
                <button type="button" id="acquis-promo-dismiss" aria-label="<?php esc_attr_e( 'Dismiss', 'acquisitionsuite' ); ?>" style="background:none;border:none;cursor:pointer;color:#9ca3af;padding:4px;line-height:1;">
                    <span class="dashicons dashicons-no-alt"></span>
                </button>
            </div>
        </div>
        <script>
        (function () {
            var btn = document.getElementById( 'acquis-promo-dismiss' );
            if ( ! btn ) return;
            btn.addEventListener( 'click', function () {
                var panel = document.getElementById( 'acquis-promo-banner' );
                if ( panel ) panel.style.display = 'none';
                var body = new URLSearchParams();
                body.set( 'action', 'acquis_dismiss_promo' );
                body.set( 'nonce', '<?php echo esc_js( $nonce ); ?>' );
                fetch( '<?php echo esc_url_raw( $ajax_url ); ?>', {
                    method: 'POST',
                    credentials: 'same-origin',
                    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
                    body: body.toString(),
                } );
            } );
        })();
        </script>
        <?php
    }

    /**
     * Snooze the promo banner for this admin for 60 days rather than hiding
     * it forever, "not now" from one dismiss click isn't the same as "never
     * ask me again." 60, not 7: this banner shows on every wp-admin page
     * now, not just our own Dashboard, so a short snooze would put it back
     * in front of someone within a week of them explicitly dismissing it.
     */
    public function ajax_dismiss_promo() {
        check_ajax_referer( 'acquis_admin_nonce', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( 'forbidden', 403 );
        update_user_meta( get_current_user_id(), 'acquis_promo_snoozed_until', time() + 60 * DAY_IN_SECONDS );
        wp_send_json_success();
    }

    private function get_notice_html() {
        if ( ! isset( $_GET['acquis_msg'] ) ) return ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only display filter
        $msgs = array( 'uploaded' => array('success', 'File saved successfully.'), 'deleted' => array('success','File deleted.'), 'err_type' => array('error','File type not allowed.'), 'err_move' => array('error','Upload failed.'), 'err_url' => array('error','Please enter a valid http(s) URL.'), 'pricing_saved' => array('success','Pricing settings saved.') );
        $key = sanitize_key( $_GET['acquis_msg'] ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only display filter
        if ( ! isset( $msgs[$key] ) ) return '';
        return '<div class="notice notice-' . $msgs[$key][0] . ' is-dismissible"><p>' . esc_html( $msgs[$key][1] ) . '</p></div>';
    }

    /**
     * Sortable-column helpers for the Leads table. These were previously
     * declared as global functions inside render_leads_page() itself,
     * which would trigger a fatal "cannot redeclare" error if that method
     * were ever called more than once in the same request converted to
     * private class methods to fix that.
     */
    private function lead_sort_url( $col, $ob, $o ) {
        $no = ( $col === $ob && $o === 'ASC' ) ? 'DESC' : 'ASC';
        return add_query_arg( array( 'orderby' => $col, 'order' => $no, 'acquis_page' => 1 ) );
    }

    private function lead_sort_arrow( $col, $ob, $o ) {
        return $col != $ob ? '' : ( $o === 'ASC' ? ' ▲' : ' ▼' );
    }
    
    public function ajax_delete_lead() {
        if ( ! current_user_can( 'manage_options' ) ) {
            wp_send_json_error( 'Unauthorized' );
        }

        check_ajax_referer( 'acquis_admin_nonce', 'nonce' );

        $lead_id = absint( $_POST['lead_id'] ?? 0 );

        if ( ! $lead_id ) {
            wp_send_json_error( 'Invalid lead ID' );
        }

        global $wpdb;

        // Delete all data associated with this lead cascade to every
        // related table so no orphaned records remain. The lead row is
        // the central entity; without it, all downstream records are
        // meaningless and waste space.

        // 1. Submission values (must go before submissions so FK is clean)
        $sub_ids = $wpdb->get_col( $wpdb->prepare(
            "SELECT id FROM {$wpdb->prefix}acquis_submissions WHERE lead_id=%d", $lead_id
        ) );
        if ( $sub_ids ) {
            $ids       = array_map( 'absint', $sub_ids );
            // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- $lt is internal table name; placeholders built with array_fill+implode
            $ph        = implode( ',', array_fill( 0, count( $ids ), '%d' ) );
            $lt_sv     = $wpdb->prefix . 'acquis_submission_values';
            // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- table name from $wpdb->prefix + hardcoded string; $ph is %d placeholders only
            $wpdb->query( $wpdb->prepare( "DELETE FROM `{$lt_sv}` WHERE submission_id IN ({$ph})", $ids ) );
        }

        // 2. Submissions
        $wpdb->delete( $wpdb->prefix . 'acquis_submissions', array( 'lead_id' => $lead_id ) );

        // 3. Download tokens
        $wpdb->delete( $wpdb->prefix . 'acquis_tokens', array( 'lead_id' => $lead_id ) );

        // 4. Email logs
        $wpdb->delete( $wpdb->prefix . 'acquis_email_logs', array( 'lead_id' => $lead_id ) );

        // Pro plugin handles its own cascade deletes via this hook
        do_action( 'acquis_before_lead_deleted', $lead_id );
        // 10. Finally delete the lead itself
        $deleted = $wpdb->delete( $wpdb->prefix . 'acquis_leads', array( 'id' => $lead_id ) );

        if ( $deleted === false ) {
            wp_send_json_error( 'Delete failed' );
        }

        wp_send_json_success( array( 'id' => $lead_id ) );
    }

    /**
     * AJAX — bulk delete multiple leads by ID array.
     * Each deletion follows the same path as single-lead delete so Pro cascade hook fires.
     */
    public function ajax_bulk_delete_leads() {
        check_ajax_referer( 'acquis_nonce', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) {
            wp_send_json_error( array( 'message' => 'Forbidden.' ), 403 );
        }
        // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- sanitized below per-ID
        $raw_ids = isset( $_POST['ids'] ) ? (array) $_POST['ids'] : array();
        $ids     = array_filter( array_map( 'absint', $raw_ids ) );
        if ( empty( $ids ) ) {
            wp_send_json_error( array( 'message' => esc_html__( 'No leads selected.', 'acquisitionsuite' ) ) );
        }
        $deleted = 0;
        foreach ( $ids as $lead_id ) {
            $this->delete_lead( $lead_id );
            $deleted++;
        }
        wp_send_json_success( array(
            'message' => sprintf(
                /* translators: %d: number of leads deleted */
                esc_html__( '%d lead(s) deleted.', 'acquisitionsuite' ),
                $deleted
            ),
            'deleted' => $deleted,
        ) );
    }

    public function ajax_delete_email_log() {
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error();
        check_ajax_referer( 'acquis_admin_nonce', 'nonce' );
        global $wpdb;
        $id = absint( $_POST['id'] ?? 0 );
        if ( ! $id ) wp_send_json_error();
        $wpdb->delete( $wpdb->prefix . 'acquis_email_logs', array( 'id' => $id ) );
        wp_send_json_success();
    }

    public function ajax_bulk_clear_email_logs() {
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error();
        check_ajax_referer( 'acquis_admin_nonce', 'nonce' );
        global $wpdb;
        $status = sanitize_key( $_POST['status'] ?? '' );
        $before = sanitize_text_field( $_POST['before'] ?? '' );
        $table  = $wpdb->prefix . 'acquis_email_logs';
        $where  = '1=1';
        $args   = array();
        if ( $status ) { $where .= ' AND status=%s';    $args[] = $status; }
        if ( $before ) { $where .= ' AND created_at<%s'; $args[] = $before . ' 00:00:00'; }
        // Use %i placeholder for table name so plugin check sees no bare interpolation.
        // $where is built entirely from wpdb->prepare() calls — safe to pass as string.
        if ( $args ) {
            // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- $where built with prepare(); $table from $wpdb->prefix + hardcoded string
            $count = $wpdb->query( $wpdb->prepare( "DELETE FROM `{$table}` WHERE {$where}", ...$args ) );
        } else {
            // No filters applied — $where is the literal string '1=1'; $table from $wpdb->prefix only
            // phpcs:ignore WordPress.DB.PreparedSQL.NotPrepared -- $table from $wpdb->prefix + hardcoded string; no user input in query
            $count = $wpdb->query( $wpdb->prepare( 'DELETE FROM %i WHERE 1=1', $table ) );
        }
        wp_send_json_success( array( 'count' => (int) $count ) );
    }

    /**
     * AJAX — resend the download email from the Email Logs page.
     * Looks up the original log row, fetches the lead + file, and re-sends.
     */
    public function ajax_resend_email_log() {
        check_ajax_referer( 'acquis_nonce', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) {
            wp_send_json_error( array( 'message' => 'Forbidden.' ), 403 );
        }
        $log_id = absint( $_POST['log_id'] ?? 0 );
        if ( ! $log_id ) {
            wp_send_json_error( array( 'message' => esc_html__( 'Invalid log ID.', 'acquisitionsuite' ) ) );
        }

        global $wpdb;
        $log = $wpdb->get_row( $wpdb->prepare(
            "SELECT * FROM {$wpdb->prefix}acquis_email_logs WHERE id = %d",
            $log_id
        ) );
        if ( ! $log ) {
            wp_send_json_error( array( 'message' => esc_html__( 'Email log not found.', 'acquisitionsuite' ) ) );
        }

        $lead = $wpdb->get_row( $wpdb->prepare(
            "SELECT * FROM {$wpdb->prefix}acquis_leads WHERE id = %d",
            absint( $log->lead_id )
        ) );
        if ( ! $lead ) {
            wp_send_json_error( array( 'message' => esc_html__( 'Lead not found.', 'acquisitionsuite' ) ) );
        }

        // Regenerate a fresh download token so the link is valid
        $token    = ACQUIS_Database::create_token( $lead->id, absint( $log->file_id ) );
        $dl_url   = add_query_arg( array( 'acquis_download' => 1, 'token' => $token ), home_url( '/' ) );
        $file     = ACQUIS_File_Manager::get_file_data( absint( $log->file_id ) );

        if ( class_exists( 'ACQUIS_Email_Engine' ) ) {
            ACQUIS_Email_Engine::send( $lead->email, $lead->full_name, $file, $dl_url );
        }

        wp_send_json_success( array( 'message' => esc_html__( 'Email resent successfully.', 'acquisitionsuite' ) ) );
    }

    /** Daily cron: auto-purge old records per retention settings. */
    public function run_daily_cleanup() {
        global $wpdb;
        $log_days = absint( get_option( 'acquis_retention_email_logs', 30 ) );

        if ( $log_days > 0 ) {
            $wpdb->query( $wpdb->prepare(
                "DELETE FROM {$wpdb->prefix}acquis_email_logs WHERE created_at < DATE_SUB(NOW(), INTERVAL %d DAY)",
                $log_days
            ) );
        }
        // Pro retention cleanup (sequences, orders, transactions) handled by Pro
        do_action( 'acquis_daily_cleanup_pro' );
    }

    // ══════════════════════════════════════════════════════════════════════════
    //  SYSTEM STATUS PAGE
    // ══════════════════════════════════════════════════════════════════════════
    public function render_upgrade_to_pro_page() {
        $pricing_url = esc_url( 'https://acquisitionsuite.ufirstdev.com/pricing/' );
        ?>
        <div class="wrap acquis-admin-wrap">
            <?php $this->admin_header( '' ); ?>

            <!-- Hero banner -->
            <div style="text-align:center;padding:48px 24px 40px;background:linear-gradient(135deg,#030419 0%,#0f1535 100%);border-radius:16px;margin-bottom:36px;color:#fff;">
                <div style="display:inline-flex;align-items:center;gap:8px;background:rgba(249,115,22,.15);border:1px solid rgba(249,115,22,.35);border-radius:20px;padding:6px 18px;font-size:12px;font-weight:700;color:#f97316;margin-bottom:20px;letter-spacing:.06em;">
                    &#9889; ACQUISITIONSUITE PRO
                </div>
                <h1 style="margin:0 0 16px;font-size:34px;font-weight:900;line-height:1.2;color:#ffffff;">
                    Your leads deserve more than a spreadsheet.
                </h1>
                <p style="margin:0 auto 28px;max-width:580px;font-size:16px;color:rgba(255,255,255,.75);line-height:1.7;">
                    AcquisitionSuite Pro gives you the tools to automatically follow up, score, segment, and sell to every lead you capture. Everything runs inside WordPress. No third-party tools required.
                </p>
                <a href="<?php echo esc_url( $pricing_url ); ?>" target="_blank"
                   style="display:inline-block;background:linear-gradient(135deg,#f97316,#ea580c);color:#fff;padding:16px 40px;border-radius:8px;font-weight:800;font-size:16px;text-decoration:none;box-shadow:0 6px 20px rgba(249,115,22,.45);">
                    &#9889; See Plans &amp; Pricing
                </a>
                <p style="margin:16px 0 0;font-size:12px;color:rgba(255,255,255,.45);">
                    14-day money-back guarantee on all paid plans
                </p>
            </div>

            <!-- What Lite gives you vs what you are missing -->
            <div style="display:grid;grid-template-columns:1fr 1fr;gap:20px;margin-bottom:36px;">
                <div style="background:#f0fdf4;border:1px solid #bbf7d0;border-radius:12px;padding:24px;">
                    <h3 style="margin:0 0 16px;font-size:14px;font-weight:700;color:#15803d;text-transform:uppercase;letter-spacing:.05em;">What you have with Lite</h3>
                    <?php
                    $lite_items = array(
                        'Lead capture forms with file gating',
                        'Default and custom form builder',
                        'Email delivery with branded templates',
                        'Mailchimp, Brevo, and MailWizz sync',
                        'Leads, submissions, and analytics',
                        'CSV export',
                        'Settings and system status',
                    );
                    foreach ( $lite_items as $item ) :
                    ?>
                    <div style="display:flex;align-items:flex-start;gap:10px;margin-bottom:10px;">
                        <span style="color:#16a34a;font-size:16px;font-weight:700;flex-shrink:0;">&#10003;</span>
                        <span style="font-size:13px;color:#374151;"><?php echo esc_html( $item ); ?></span>
                    </div>
                    <?php endforeach; ?>
                </div>

                <div style="background:#fff7ed;border:2px solid #fed7aa;border-radius:12px;padding:24px;">
                    <h3 style="margin:0 0 16px;font-size:14px;font-weight:700;color:#c2410c;text-transform:uppercase;letter-spacing:.05em;">Unlocked with Pro</h3>
                    <?php
                    $pro_items = array(
                        'Marketing automation rules',
                        'Email drip sequences',
                        'Lead scoring and tier labels',
                        'Lead intelligence (geo, device, ISP)',
                        'Sales pipeline with kanban board',
                        'Tags and audience segments',
                        'Paid downloads (Stripe, Paystack, Flutterwave)',
                        'Orders, transactions, and receipts',
                        'Email open and click tracking',
                        'Webhooks to any external tool',
                        'Advanced forms with conditional logic',
                        'Priority support',
                    );
                    foreach ( $pro_items as $item ) :
                    ?>
                    <div style="display:flex;align-items:flex-start;gap:10px;margin-bottom:10px;">
                        <span style="color:#f97316;font-size:16px;font-weight:700;flex-shrink:0;">&#9889;</span>
                        <span style="font-size:13px;color:#374151;"><?php echo esc_html( $item ); ?></span>
                    </div>
                    <?php endforeach; ?>
                </div>
            </div>

            <!-- Feature deep-dives -->
            <h2 style="font-size:22px;font-weight:800;color:#030419;margin:0 0 20px;text-align:center;">
                What Pro makes possible
            </h2>
            <?php
            $deep_dives = array(
                array(
                    'icon'    => '&#129302;',
                    'title'   => 'Marketing Automation',
                    'tagline' => 'Work smarter, not harder.',
                    'body'    => 'Build automation rules that fire when a lead submits a form, reaches a score threshold, makes a payment, or visits a page. Each rule can trigger one or more actions: send an email, apply a tag, assign a pipeline stage, fire a webhook, add them to a sequence, or notify your team. No coding. No Zapier.',
                ),
                array(
                    'icon'    => '&#128231;',
                    'title'   => 'Email Sequences',
                    'tagline' => 'Follow up while you sleep.',
                    'body'    => 'Create drip campaigns with any number of steps, each sent at a delay you control (minutes, hours, or days). Trigger sequences automatically when a form is submitted or a payment completes. Every email uses your branded template and supports personalisation tags.',
                ),
                array(
                    'icon'    => '&#127919;',
                    'title'   => 'Lead Scoring',
                    'tagline' => 'Know who is ready to buy.',
                    'body'    => 'Define scoring rules based on form field values, geography, device type, download behavior, email engagement, and payment history. Every lead gets a live score and a tier label (Cold, Warm, Qualified, Hot, Sales Ready) so you know exactly where to focus your time.',
                ),
                array(
                    'icon'    => '&#128179;',
                    'title'   => 'Paid Downloads',
                    'tagline' => 'Sell your files directly from WordPress.',
                    'body'    => 'Turn any uploaded file into a paid product. Accept payments through Stripe, Paystack, or Flutterwave. Buyers complete payment on your site, receive a receipt by email, and get a secure time-limited download link. All order and transaction history is managed inside WordPress. No commission taken.',
                ),
                array(
                    'icon'    => '&#128202;',
                    'title'   => 'Sales Pipeline',
                    'tagline' => 'Turn your lead list into a sales process.',
                    'body'    => 'A visual kanban board where every lead lives in a stage. Drag leads between stages as they progress. Create custom stages that match your actual sales process. Move leads automatically with automation rules when specific conditions are met.',
                ),
                array(
                    'icon'    => '&#128171;',
                    'title'   => 'Lead Intelligence',
                    'tagline' => 'Know your leads before you call them.',
                    'body'    => 'For every new lead, AcquisitionSuite Pro automatically detects their country, city, ISP, device type, operating system, and browser. This data feeds into lead scoring and is visible in the lead detail view, giving you context before you ever make contact.',
                ),
            );
            foreach ( $deep_dives as $dive ) :
            ?>
            <div style="display:grid;grid-template-columns:80px 1fr;gap:20px;align-items:flex-start;background:#fff;border:1px solid #e5e7eb;border-radius:12px;padding:24px;margin-bottom:16px;">
                <div style="font-size:40px;text-align:center;padding-top:4px;"><?php echo esc_html( $dive['icon'] ); ?></div>
                <div>
                    <div style="font-size:11px;font-weight:700;color:#f97316;text-transform:uppercase;letter-spacing:.06em;margin-bottom:4px;"><?php echo esc_html( $dive['tagline'] ); ?></div>
                    <h3 style="margin:0 0 10px;font-size:18px;font-weight:800;color:#030419;"><?php echo esc_html( $dive['title'] ); ?></h3>
                    <p style="margin:0;font-size:13px;color:#4b5563;line-height:1.7;"><?php echo esc_html( $dive['body'] ); ?></p>
                </div>
            </div>
            <?php endforeach; ?>

            <!-- Final CTA -->
            <div style="background:#030419;color:#fff;border-radius:16px;padding:36px;text-align:center;margin:36px 0;">
                <p style="margin:0 0 8px;font-size:20px;font-weight:800;line-height:1.4;">
                    AcquisitionSuite Lite captures leads.<br>Pro turns them into customers.
                </p>
                <p style="margin:0 0 28px;font-size:14px;color:rgba(255,255,255,.6);">
                    Everything runs inside your WordPress site. No monthly SaaS fees. No per-email charges. No limits on leads captured.
                </p>
                <a href="<?php echo esc_url( $pricing_url ); ?>" target="_blank"
                   style="display:inline-block;background:linear-gradient(135deg,#f97316,#ea580c);color:#fff;padding:14px 36px;border-radius:8px;font-weight:800;font-size:15px;text-decoration:none;box-shadow:0 4px 16px rgba(249,115,22,.4);">
                    &#9889; View Plans &amp; Upgrade Now
                </a>
            </div>

        </div>
        <?php
    }


    public function render_system_status() {
        global $wpdb;

        // Helper: render one status row
        $row = function( $label, $value, $status = 'ok', $note = '' ) {
            $colors = array( 'ok' => '#16a34a', 'warn' => '#d97706', 'fail' => '#dc2626' );
            $icons  = array( 'ok' => '✓', 'warn' => '!', 'fail' => '✗' );
            $color  = $colors[ $status ] ?? $colors['ok'];
            $icon   = $icons[ $status ] ?? '✓';
            echo '<tr>';
            echo '<td style="padding:9px 14px;font-size:13px;color:#374151;border-bottom:1px solid #f3f4f6;">' . esc_html( $label ) . '</td>';
            echo '<td style="padding:9px 14px;font-size:13px;border-bottom:1px solid #f3f4f6;">';
            echo '<span style="display:inline-flex;align-items:center;gap:6px;font-weight:600;color:' . esc_attr( $color ) . ';">';
            echo '<span style="width:18px;height:18px;background:' . esc_attr( $color ) . ';color:#fff;border-radius:50%;display:inline-flex;align-items:center;justify-content:center;font-size:11px;font-weight:700;">' . esc_html( $icon ) . '</span>';
            echo esc_html( $value );
            echo '</span>';
            if ( $note ) echo ' <span style="font-size:12px;color:#6b7280;margin-left:6px;">' . esc_html( $note ) . '</span>';
            echo '</td></tr>';
        };
        $section = function( $title ) {
            echo '<tr><td colspan="2" style="padding:14px 14px 6px;font-size:11px;font-weight:700;text-transform:uppercase;letter-spacing:.06em;color:#9ca3af;background:#f9fafb;">' . esc_html( $title ) . '</td></tr>';
        };

        ?>
        <div class="wrap acquis-admin-wrap">
        <?php $this->admin_header( '<span class="dashicons dashicons-admin-tools"></span> ' . esc_html__(  'System Status', 'acquisitionsuite' ) ); ?>
        <p style="color:#6b7280;font-size:13px;margin:0 0 20px;"><?php esc_html_e( 'A snapshot of this site\'s compatibility and configuration for running AcquisitionSuite Pro. Green = good; yellow = review recommended; red = action required.', 'acquisitionsuite' ); ?></p>

        <table style="width:100%;max-width:900px;background:#fff;border-radius:8px;border:1px solid #e5e7eb;border-collapse:collapse;margin-bottom:24px;">
        <?php

        // ── WordPress & PHP ────────────────────────────────────────────────
        $section( esc_html__(  'WordPress & Server Environment', 'acquisitionsuite' ) );

        $wp_ver = get_bloginfo('version');
        $wp_ok  = version_compare( $wp_ver, '6.2', '>=' );
        $row( 'WordPress Version', $wp_ver . ' (required: 6.2+)', $wp_ok ? 'ok' : 'fail', $wp_ok ? '' : 'Please update WordPress.' );

        $php_ver = PHP_VERSION;
        $php_ok  = version_compare( $php_ver, '7.4', '>=' );
        $row( 'PHP Version', $php_ver . ' (required: 7.4+)', $php_ok ? 'ok' : 'fail', $php_ok ? '' : 'AcquisitionSuite requires PHP 7.4 or higher. Please upgrade.' );

        $php_warn = version_compare( $php_ver, '8.0', '>=' );
        $row( 'PHP 8.0+ (recommended)', $php_warn ? 'Yes' : 'No', $php_warn ? 'ok' : 'warn', $php_warn ? '' : 'PHP 8.0+ is recommended for best performance and security.' );

        $memory_limit = ini_get('memory_limit');
        $memory_mb    = (int) $memory_limit;
        $mem_status   = $memory_mb >= 256 ? 'ok' : ( $memory_mb >= 128 ? 'warn' : 'fail' );
        $row( 'PHP Memory Limit', $memory_limit, $mem_status, $memory_mb < 256 ? '256MB+ recommended.' : '' );

        $max_upload = ini_get('upload_max_filesize');
        $row( 'Max Upload Size (upload_max_filesize)', $max_upload, 'ok' );

        $post_max = ini_get('post_max_size');
        $row( 'Max POST Size (post_max_size)', $post_max, 'ok' );

        $max_exec = ini_get('max_execution_time');
        $exec_ok  = (int) $max_exec === 0 || (int) $max_exec >= 30;
        $row( 'Max Execution Time', $max_exec . 's', $exec_ok ? 'ok' : 'warn', $exec_ok ? '' : 'At least 30s recommended.' );

        $row( 'WordPress Timezone', wp_timezone_string(), 'ok' );
        $row( 'Server Time (UTC)', gmdate( 'Y-m-d H:i:s' ), 'ok' );
        $row( 'WordPress Time', current_time('Y-m-d H:i:s'), 'ok' );

        // ── PHP Extensions ─────────────────────────────────────────────────
        $section( esc_html__(  'PHP Extensions', 'acquisitionsuite' ) );

        foreach ( array(
            'curl'     => array( true,  'Required for gateway API calls and WhatsApp.' ),
            'json'     => array( true,  'Required for all API communication.' ),
            'mbstring' => array( true,  'Required for multi-byte string handling.' ),
            'openssl'  => array( true,  'Required for webhook signature verification (Stripe, Paystack, Flutterwave).' ),
            'fileinfo' => array( false, 'Recommended for better MIME type detection on file uploads.' ),
            'zip'      => array( false, 'Optional needed only if you plan to serve ZIP files.' ),
        ) as $ext => list( $required, $note ) ) {
            $has = extension_loaded( $ext );
            $status = $has ? 'ok' : ( $required ? 'fail' : 'warn' );
            $row( 'PHP Extension: ' . $ext, $has ? 'Enabled' : 'Disabled', $status, $has ? '' : $note );
        }

        // ── WordPress Configuration ─────────────────────────────────────────
        $section( esc_html__(  'WordPress Configuration', 'acquisitionsuite' ) );

        $row( 'WordPress Cron (WP-Cron)', defined('DISABLE_WP_CRON') && DISABLE_WP_CRON ? 'Disabled' : 'Enabled',
              defined('DISABLE_WP_CRON') && DISABLE_WP_CRON ? 'warn' : 'ok',
              defined('DISABLE_WP_CRON') && DISABLE_WP_CRON ? 'WP-Cron is disabled. Sequences and time-based automation will not fire unless you have a real server-side cron job configured.' : '' );

        $row( 'SSL / HTTPS', is_ssl() ? 'Yes' : 'No', is_ssl() ? 'ok' : 'warn', is_ssl() ? '' : 'HTTPS is required for live payment gateway webhooks.' );

        $row( 'WP Debug Mode', WP_DEBUG ? 'On' : 'Off', WP_DEBUG ? 'warn' : 'ok', WP_DEBUG ? 'Turn off WP_DEBUG on production sites.' : '' );
        $row( 'WP Debug Log', ( defined('WP_DEBUG_LOG') && WP_DEBUG_LOG ) ? 'On' : 'Off', 'ok' );

        $row( 'Plugin Version', ACQUIS_VERSION, 'ok' );
        $row( 'Database Version', get_option('acquis_db_version', 'not set'), get_option('acquis_db_version') === ACQUIS_VERSION ? 'ok' : 'warn', get_option('acquis_db_version') !== ACQUIS_VERSION ? 'Run the upgrade by deactivating and reactivating the plugin, or upgrading to the latest version.' : '' );

        // ── File System ─────────────────────────────────────────────────────
        $section( esc_html__(  'File System & Protected Directory', 'acquisitionsuite' ) );

        $upload_dir = wp_upload_dir();
        $protect_dir = $upload_dir['basedir'] . '/acquis-protected';
        $row( 'Protected Upload Directory', $protect_dir, 'ok' );
        $row( 'Directory Exists', is_dir( $protect_dir ) ? 'Yes' : 'No', is_dir( $protect_dir ) ? 'ok' : 'fail', ! is_dir( $protect_dir ) ? 'Upload a file to create it.' : '' );
        $row( 'Directory Writable', is_writable( $protect_dir ) ? 'Yes' : ( is_dir( $protect_dir ) ? 'No ACTION REQUIRED' : 'N/A' ), is_dir( $protect_dir ) ? ( is_writable( $protect_dir ) ? 'ok' : 'fail' ) : 'ok', ! is_writable( $protect_dir ) && is_dir( $protect_dir ) ? 'WordPress must be able to write to this directory to store gated files.' : '' );
        $htaccess_ok = file_exists( $protect_dir . '/.htaccess' );
        $row( '.htaccess Protection File', $htaccess_ok ? 'Present' : 'Missing', $htaccess_ok ? 'ok' : 'fail', ! $htaccess_ok ? 'Upload any file to regenerate it.' : '' );

        // ── Database ───────────────────────────────────────────────────────
        $section( esc_html__(  'Database Tables', 'acquisitionsuite' ) );

        // Only check Lite-owned tables. Pro plugin adds its own table check
        // via the acquis_system_status_tables filter.
        $lite_tables = array(
            'acquis_leads', 'acquis_tokens', 'acquis_email_logs', 'acquis_integration_logs',
            'acquis_forms', 'acquis_form_fields', 'acquis_submissions', 'acquis_submission_values',
            'acquis_analytics',
        );
        $expected_tables = apply_filters( 'acquis_system_status_tables', $lite_tables );
        // phpcs:ignore WordPress.DB.PreparedSQLPlaceholders.LikeWildcardsInQuery -- % appended after esc_like() so it is the LIKE wildcard, not a literal
        $existing_tables = $wpdb->get_col( $wpdb->prepare( "SHOW TABLES LIKE %s", $wpdb->esc_like( $wpdb->prefix . 'acquis_' ) . '%' ) );
        $missing = array();
        foreach ( $expected_tables as $t ) {
            if ( ! in_array( $wpdb->prefix . $t, $existing_tables, true ) ) {
                $missing[] = $t;
            }
        }
        $row( 'Expected Tables', count( $expected_tables ), 'ok' );
        $row( 'Tables Found', count( $existing_tables ), count( $missing ) === 0 ? 'ok' : 'fail' );
        if ( $missing ) {
            $row( 'Missing Tables', implode( ', ', $missing ), 'fail', 'Deactivate and reactivate the plugin to recreate missing tables.' );
        }

        // Delay unit migration check
        $steps_table = $wpdb->prefix . 'acquis_sequence_steps';
        // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- INFORMATION_SCHEMA is a system catalog; table name from $wpdb->prefix + hardcoded string
        $has_unit = $wpdb->get_var( $wpdb->prepare(
            "SELECT COUNT(*) FROM INFORMATION_SCHEMA.COLUMNS WHERE TABLE_SCHEMA = %s AND TABLE_NAME = %s AND COLUMN_NAME = 'delay_unit'",
            DB_NAME,
            $steps_table
        ) );
        $row( 'Sequence Steps: delay_unit column', $has_unit ? 'Present' : 'Missing upgrade required', $has_unit ? 'ok' : 'warn', ! $has_unit ? 'Run maybe_upgrade() by deactivating and reactivating the plugin.' : '' );

        // ── Cron ────────────────────────────────────────────────────────────
        $section( esc_html__(  'Scheduled Tasks (Cron)', 'acquisitionsuite' ) );

        $seq_hook    = class_exists( 'ACQUIS_Sequences' ) ? ACQUIS_Sequences::CRON_HOOK : 'acquis_process_sequences';
        $tb_hook     = class_exists( 'ACQUIS_Time_Based_Scheduler' ) ? ACQUIS_Time_Based_Scheduler::CRON_HOOK : 'acquis_process_time_based_rules';
        $seq_next    = wp_next_scheduled( $seq_hook );
        $tb_next     = wp_next_scheduled( $tb_hook );

        $row( 'Email Sequences Cron', $seq_next ? 'Scheduled (next: ' . date_i18n( 'Y-m-d H:i:s', $seq_next ) . ')' : 'NOT SCHEDULED', $seq_next ? 'ok' : 'fail', ! $seq_next ? 'Re-activate the plugin to reschedule.' : '' );
        $row( 'Time-Based Automation Cron', $tb_next ? 'Scheduled (next: ' . date_i18n( 'Y-m-d H:i:s', $tb_next ) . ')' : 'NOT SCHEDULED', $tb_next ? 'ok' : 'fail', ! $tb_next ? 'Re-activate the plugin to reschedule.' : '' );

        // ── Payment Gateways ───────────────────────────────────────────────
        $section( esc_html__(  'Payment Gateways', 'acquisitionsuite' ) );

        if ( class_exists( 'ACQUIS_Pay_Gateway_Registry' ) ) {
            foreach ( ACQUIS_Pay_Gateway_Registry::get_all() as $slug => $gateway ) {
                $configured = $gateway->is_configured();
                $row( $gateway->get_label() . ' (' . $slug . ')', $configured ? 'Configured' : 'Not configured', $configured ? 'ok' : 'warn', $configured ? '' : 'Add API credentials under Payments → Settings.' );
            }
        } else {
            $row( 'Gateway Registry', 'Unavailable', 'fail' );
        }

        $currency = get_option( 'acquis_pay_default_currency', 'USD' );
        $symbol   = class_exists( 'ACQUIS_Pay_DB' ) ? ACQUIS_Pay_DB::get_currency_symbol( $currency ) : $currency;
        $row( 'Active Currency', $currency . ' (' . $symbol . ')', 'ok' );

        // ── Email ──────────────────────────────────────────────────────────
        $section( esc_html__(  'Email', 'acquisitionsuite' ) );

        $from_name    = get_option( 'acquis_email_from_name', '' );
        $from_address = get_option( 'acquis_email_from_address', '' );
        $row( 'From Name', $from_name ?: esc_html__( '(using site name)', 'acquisitionsuite' ), $from_name ? 'ok' : 'warn' );
        $row( 'From Address', $from_address ?: esc_html__( '(using admin email)', 'acquisitionsuite' ), ( $from_address && is_email( $from_address ) ) ? 'ok' : 'warn', ( $from_address && ! is_email( $from_address ) ) ? 'Invalid email address.' : '' );

        // Detect SMTP / transactional mail plugin checks common plugins including AWS SES
        $smtp_plugin_name = '';
        if ( defined( 'WPMS_PLUGIN_VER' ) || class_exists( 'WPMailSMTP\Core' ) || function_exists( 'wp_mail_smtp' ) ) {
            $smtp_plugin_name = 'WP Mail SMTP';
        } elseif ( class_exists( 'WP_Offload_SES' ) || class_exists( 'WP_Offload_SES_Lite' ) ) {
            $smtp_plugin_name = 'WP Offload SES (AWS SES)';
        } elseif ( get_option( 'wpses_settings' ) || class_exists( 'WP_SES' ) ) {
            $smtp_plugin_name = 'WP SES (AWS SES)';
        } elseif ( defined( 'FLUENT_MAIL_PLUGIN_FILE' ) ) {
            $smtp_plugin_name = 'FluentSMTP';
        } elseif ( class_exists( 'Postmark_Mail' ) || defined( 'POSTMARK_API_KEY' ) ) {
            $smtp_plugin_name = 'Postmark';
        } elseif ( function_exists( 'mailgun_init' ) || get_option( 'mailgun' ) ) {
            $smtp_plugin_name = 'Mailgun';
        } elseif ( defined( 'SENDGRID_API_KEY' ) ) {
            $smtp_plugin_name = 'SendGrid';
        } elseif ( defined( 'SENDINBLUE_SMTP' ) ) {
            $smtp_plugin_name = 'Brevo / Sendinblue';
        } elseif ( has_action( 'phpmailer_init' ) ) {
            $smtp_plugin_name = 'Custom SMTP handler detected';
        }
        $smtp_detected = ! empty( $smtp_plugin_name );
        $row( 'SMTP / Mail Plugin', $smtp_detected ? $smtp_plugin_name : 'None detected', $smtp_detected ? 'ok' : 'warn',
              ! $smtp_detected ? 'No SMTP plugin found. Without one, emails likely fail silently. Install WP Offload SES, WP Mail SMTP, or FluentSMTP.' : '' );

        ?>
        </table>

        <p style="font-size:12px;color:#9ca3af;"><?php printf( esc_html__( 'Generated on %s UTC', 'acquisitionsuite' ), esc_html( gmdate('Y-m-d H:i:s') ) ); ?></p>
        </div>
        <?php
    }
}