<?php
if ( ! defined( 'ABSPATH' ) ) exit;

/**
 * ACQUIS_P3_Admin Phase 3 Admin UI
 * Bespoke redesign: Form Builder | Analytics | Lead Scoring | Automation | Export | Submissions
 * Author: Fortunatus | UfirstDEV Technologies
 */
class ACQUIS_P3_Admin {

    public function init() {
        add_action( 'admin_menu',            array( $this, 'register_pages' ), 20 );
        add_action( 'admin_enqueue_scripts', array( $this, 'enqueue_assets' ) );
        add_action( 'wp_ajax_acquis_save_form',              array( $this, 'ajax_save_form' ) );
        add_action( 'wp_ajax_acquis_delete_form',            array( $this, 'ajax_delete_form' ) );
        add_action( 'wp_ajax_acquis_duplicate_form',         array( $this, 'ajax_duplicate_form' ) );
        add_action( 'wp_ajax_acquis_reorder_fields',         array( $this, 'ajax_reorder_fields' ) );
        add_action( 'wp_ajax_acquis_delete_field',           array( $this, 'ajax_delete_field' ) );
        add_action( 'wp_ajax_acquis_send_form_test_email',   array( $this, 'ajax_send_form_test_email' ) );
        add_action( 'wp_ajax_acquis_get_analytics',          array( $this, 'ajax_get_analytics' ) );
        add_action( 'wp_ajax_acquis_delete_submission',      array( $this, 'ajax_delete_submission' ) );
        add_action( 'admin_post_acquis_export_csv',          array( $this, 'handle_export_csv' ) );
        add_action( 'admin_post_acquis_export_xlsx',         array( $this, 'handle_export_xlsx' ) );
        add_action( 'admin_post_acquis_export_leads_csv',    array( $this, 'handle_export_leads_csv' ) );
        add_action( 'admin_post_acquis_export_subs_csv',     array( $this, 'handle_export_subs_csv' ) );

    }

    /**
     * Whether Pro is installed and actively licensed. Multi-step forms are
     * a Pro feature — Lite forms are locked to a single step, both in the
     * builder UI (disabled input) and server-side in ajax_save_form() (so
     * the lock can't be bypassed by posting a raw AJAX request).
     *
     * @return bool
     */
    public static function is_pro_active() {
        return class_exists( 'ACQUIS_License_Manager' ) && ACQUIS_License_Manager::is_active();
    }

    public function register_pages() {
        // Lite items always shown
        add_submenu_page( 'acquisitionsuite', __( 'Form Builder', 'acquisitionsuite' ), __( 'Form Builder', 'acquisitionsuite' ), 'manage_options', 'acquis-form-builder', array( $this, 'render_form_builder' ) );
        add_submenu_page( 'acquisitionsuite', __( 'Analytics', 'acquisitionsuite' ),    __( 'Analytics', 'acquisitionsuite' ),    'manage_options', 'acquis-analytics',    array( $this, 'render_analytics' ) );
        add_submenu_page( 'acquisitionsuite', __( 'Submissions', 'acquisitionsuite' ),  __( 'Submissions', 'acquisitionsuite' ),  'manage_options', 'acquis-submissions',  array( $this, 'render_submissions' ) );
        add_submenu_page( 'acquisitionsuite', __( 'Export', 'acquisitionsuite' ),       __( 'Export', 'acquisitionsuite' ),       'manage_options', 'acquis-export',       array( $this, 'render_export' ) );
        // Lead Scoring and Automation registered by Pro plugin when active
    }

    public function enqueue_assets( $hook ) {
        if ( strpos( $hook, 'acquisitionsuite' ) === false && strpos( $hook, 'acquis-' ) === false ) return;
        // 'acquis-admin' (admin.css) is explicitly declared as a dependency
        // here because acquis-p3.css does NOT redefine the shared base
        // classes it relies on (.acquis-tab-nav, .acquis-tab, .acquis-toggle,
        // .acquis-stat-card, etc.) those only exist in admin.css. This
        // page must never depend on some other class's enqueue_assets()
        // happening to also fire on the same page load as an implicit
        // side effect; that's exactly the kind of fragile, undeclared
        // dependency that silently breaks when page registration changes.
        wp_enqueue_style( 'acquis-admin', ACQUIS_PLUGIN_URL . 'admin/acquis-admin.css', array(), acquis_asset_ver( ACQUIS_PLUGIN_DIR . 'admin/acquis-admin.css' ) );
        // Same reasoning as acquis-admin.css above: the Form Builder's
        // "Standalone Usage" panel reuses ACQUIS_P3_Pro_Admin's Free/Paid
        // and Default/Custom-success-page radio-pill partials verbatim,
        // whose toggle JS (.acquis-pay-type-radio / .acquis-pay-success-radio)
        // lives in acquis-admin.js explicitly enqueue it rather than rely
        // on some other page's enqueue_assets() happening to also run here.
        wp_enqueue_script( 'acquis-admin', ACQUIS_PLUGIN_URL . 'admin/acquis-admin.js', array( 'jquery', 'wp-color-picker' ), acquis_asset_ver( ACQUIS_PLUGIN_DIR . 'admin/acquis-admin.js' ), true );
        wp_enqueue_script( 'chartjs',    ACQUIS_PLUGIN_URL . 'admin/vendor/chart.min.js', array(), '4.5.1', true );
        wp_enqueue_script( 'sortablejs', ACQUIS_PLUGIN_URL . 'admin/vendor/sortable.min.js', array(), '1.15.0', true );
        wp_enqueue_script( 'acquis-p3-admin', ACQUIS_PLUGIN_URL . 'admin/phase3/acquis-p3.js', array( 'jquery', 'sortablejs', 'chartjs' ), acquis_asset_ver( ACQUIS_PLUGIN_DIR . 'admin/phase3/acquis-p3.js' ), true );
        wp_enqueue_style( 'acquis-p3-admin', ACQUIS_PLUGIN_URL . 'admin/phase3/acquis-p3.css', array( 'acquis-admin' ), acquis_asset_ver( ACQUIS_PLUGIN_DIR . 'admin/phase3/acquis-p3.css' ) );
        wp_localize_script( 'acquis-p3-admin', 'ACQUIS_P3', array(
            'ajaxurl'     => admin_url( 'admin-ajax.php' ),
            'nonce'       => wp_create_nonce( 'acquis_p3_nonce' ),
            'field_types' => self::get_field_type_definitions(),
            'i18n'        => array(
                'saving'      => __( 'Saving…', 'acquisitionsuite' ),
                'creating'    => __( 'Creating…', 'acquisitionsuite' ),
                'enter_name'  => __( 'Please enter a form name.', 'acquisitionsuite' ),
                'deleting'    => __( 'Deleting…', 'acquisitionsuite' ),
                'confirm_del' => __( 'Are you sure? This cannot be undone.', 'acquisitionsuite' ),
                'saved'       => __( 'Saved!', 'acquisitionsuite' ),
                'error'       => __( 'Something went wrong. Please try again.', 'acquisitionsuite' ),
            ),
        ) );

        // Analytics chart data — inject here (in the enqueue hook) so the JS
        // object is available before acquis-p3.js executes, with no inline
        // <script> in the render method. $_GET['days'] is safe to read here
        // because admin_enqueue_scripts fires on the same request as rendering.
        // phpcs:disable WordPress.Security.NonceVerification.Recommended -- Read-only display filter, no data mutation
        if ( isset( $_GET['page'] ) && 'acquis-analytics' === sanitize_key( $_GET['page'] ) ) {
            $chart_days = absint( $_GET['days'] ?? 30 );
            // phpcs:enable WordPress.Security.NonceVerification.Recommended
            $chart_data = ACQUIS_P3_DB::get_analytics_summary( $chart_days );
            wp_add_inline_script(
                'acquis-p3-admin',
                'window.ACQUIS_ChartData=' . wp_json_encode( array(
                    'leads'     => $chart_data['daily_leads'],
                    'downloads' => $chart_data['daily_downloads'],
                ) ) . ';',
                'before'
            );
        }
    }

    // ══════════════════════════════════════════════════════════════════════════
    //  PAGE HEADER
    // ══════════════════════════════════════════════════════════════════════════
    private function page_header( $title, $subtitle = '' ) {
        ?>
        <!--<div class="acquis-admin-header">-->
        <!--    <div class="acquis-brand">-->
        <!--        <span class="acquis-brand-icon"><span class="dashicons dashicons-lock acquis-dicon-lg"></span></span>-->
        <!--        <div>-->
        <!--            <h1>AcquisitionSuite <span style="color:var(--p3-orange)">Pro</span></h1>-->
        <!--            <p>by Fortunatus | UfirstDEV Technologies</p>-->
        <!--        </div>-->
        <!--    </div>-->
        <!--    <span style="font-size:11px;color:rgba(255,255,255,.45);font-weight:600;">v<?php echo esc_html( ACQUIS_VERSION ); ?></span>-->
        <!--</div>-->
        
        <div class="acquis-admin-header">
            <div class="acquis-logo"><img src="<?php echo esc_url( ACQUIS_PLUGIN_URL . 'assets/images/logo-minimal.png' ); ?>" alt="AcquisitionSuite" /><p style="margin:2px 0 0;font-size:11px;color:var(--p3-gray-400);">by Fortunatus | UfirstDEV Technologies</p></div>
            <div style="display:flex;align-items:center;gap:12px;"><span class="acquis-version">v<?php echo esc_html( ACQUIS_LITE_VERSION ); ?></span></div>
        </div>
        
        <div class="acquis-subs-header" style="margin-bottom:22px;">
            <h1 style="font-size:20px;font-weight:900;color:var(--p3-navy);margin:0;display:flex;align-items:center;gap:10px;">
                <?php echo wp_kses_post( $title ); ?>
            </h1>
            <?php if ( $subtitle ) : ?>
                <div><?php echo wp_kses_post( $subtitle ); ?></div>
            <?php endif; ?>
        </div>
        <?php
    }

    // ══════════════════════════════════════════════════════════════════════════
    //  ██  FORM BUILDER
    // ══════════════════════════════════════════════════════════════════════════
    public function render_form_builder() {
        // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only page routing parameter, not form processing
        $edit_raw = sanitize_text_field( wp_unslash( $_GET['edit'] ?? '' ) );
        $is_new   = ( $edit_raw === 'new' );
        $edit_id  = absint( $edit_raw );
        $form     = ( $edit_id && ! $is_new ) ? ACQUIS_P3_DB::get_form( $edit_id ) : null;
        $forms    = ACQUIS_P3_DB::get_forms();
        ?>
        <div class="wrap acquis-admin-wrap">
        <?php $this->page_header( '<span class="dashicons dashicons-screenoptions acquis-dicon"></span> ' . esc_html__(  'Form Builder', 'acquisitionsuite' ) ); ?>

        <?php if ( $form ) : ?>
        <!-- ── BUILDER: modern 3-panel layout ────────────────────────────── -->
        <input type="hidden" id="acquis-form-id" value="<?php echo esc_attr( $edit_id ); ?>">

        <div class="acquis-fb-wrap">

            <!-- ═══ PANEL 1: Field Palette (left) ═══════════════════════════ -->
            <div class="acquis-fb-palette">
                <div class="acquis-fb-panel-head">
                    <span class="dashicons dashicons-plus-alt2"></span>
                    <strong><?php esc_html_e( 'Add Fields', 'acquisitionsuite' ); ?></strong>
                </div>
                <div class="acquis-fb-palette-grid">
                    <?php foreach ( self::get_field_type_definitions() as $type => $def ) : ?>
                    <button type="button" class="acquis-add-field-btn acquis-fb-palette-btn"
                            data-type="<?php echo esc_attr( $type ); ?>"
                            data-form="<?php echo absint( $edit_id ); ?>"
                            title="<?php echo esc_attr( $def['label'] ); ?>">
                        <?php echo wp_kses( $def['icon'], array( 'span' => array( 'class' => array() ) ) ); ?>
                        <span><?php echo esc_html( $def['label'] ); ?></span>
                    </button>
                    <?php endforeach; ?>
                </div>
            </div>

            <!-- ═══ PANEL 2: Canvas (centre) ════════════════════════════════ -->
            <div class="acquis-fb-canvas-panel">
                <!-- Topbar -->
                <div class="acquis-fb-topbar">
                    <div class="acquis-fb-topbar-left">
                        <a href="<?php echo esc_url( admin_url( 'admin.php?page=acquis-form-builder' ) ); ?>" class="acquis-fb-back-btn">
                            <span class="dashicons dashicons-arrow-left-alt"></span>
                        </a>
                        <div class="acquis-fb-form-title-wrap">
                            <input type="text" id="acquis-form-title" class="acquis-fb-form-title-input"
                                   value="<?php echo esc_attr( $form->title ); ?>"
                                   placeholder="<?php esc_attr_e( 'Form name…', 'acquisitionsuite' ); ?>">
                            <span class="acquis-fb-title-hint"><?php esc_html_e( 'Click to rename', 'acquisitionsuite' ); ?></span>
                        </div>
                        <span id="acquis-autosave-global" class="acquis-fb-save-badge" style="display:none;"></span>
                    </div>
                    <div class="acquis-fb-topbar-right">
                        <span class="acquis-fb-field-count">
                            <span id="acquis-fb-field-count-num"><?php echo count( $form->fields ); ?></span>
                            <?php esc_html_e( 'fields', 'acquisitionsuite' ); ?>
                        </span>
                        <button type="button" class="acquis-fb-tab-btn active" data-panel="canvas">
                            <span class="dashicons dashicons-edit-page"></span> <?php esc_html_e( 'Fields', 'acquisitionsuite' ); ?>
                        </button>
                        <button type="button" class="acquis-fb-tab-btn" data-panel="settings">
                            <span class="dashicons dashicons-admin-generic"></span> <?php esc_html_e( 'Settings', 'acquisitionsuite' ); ?>
                        </button>
                        <button type="button" class="acquis-fb-tab-btn" data-panel="email">
                            <span class="dashicons dashicons-email-alt"></span> <?php esc_html_e( 'Email', 'acquisitionsuite' ); ?>
                        </button>
                    </div>
                </div>

                <!-- Canvas -->
                <div class="acquis-fb-panel-body acquis-fb-panel-active" id="acquis-fb-panel-canvas">
                    <div id="acquis-field-canvas" class="acquis-fb-canvas" data-form-id="<?php echo absint( $edit_id ); ?>">
                        <?php if ( empty( $form->fields ) ) : ?>
                        <div class="acquis-fb-empty" id="acquis-canvas-placeholder">
                            <span class="dashicons dashicons-screenoptions" style="font-size:40px;color:var(--p3-gray-200);"></span>
                            <p><?php esc_html_e( 'Click a field type on the left to add it here.', 'acquisitionsuite' ); ?></p>
                            <p style="font-size:11px;"><?php esc_html_e( 'Drag the ≡ handle to reorder.', 'acquisitionsuite' ); ?></p>
                        </div>
                        <?php endif; ?>
                        <?php foreach ( $form->fields as $field ) : ?>
                        <?php // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- render_field_card() escapes all values internally
                        echo $this->render_field_card( $field ); ?>
                        <?php endforeach; ?>
                    </div>
                </div>

                <!-- Settings panel -->
                <div class="acquis-fb-panel-body" id="acquis-fb-panel-settings" style="display:none;">
                    <?php
                    $fs   = is_array( $form->settings ) ? $form->settings : array();
                    $flds = $form->fields ?? array();
                    ?>
                    <div class="acquis-fb-settings-grid">
                        <div class="acquis-fb-settings-section">
                            <h4><?php esc_html_e( 'Field Mapping', 'acquisitionsuite' ); ?></h4>
                            <p class="acquis-fb-hint"><?php esc_html_e( 'Tell AcquisitionSuite which fields hold the lead\'s name and email.', 'acquisitionsuite' ); ?></p>
                            <label><?php esc_html_e( 'Name Field', 'acquisitionsuite' ); ?></label>
                            <select id="acquis-name-field">
                                <option value=""><?php esc_html_e( '(auto-detect)', 'acquisitionsuite' ); ?></option>
                                <?php foreach ( $flds as $fd ) : ?>
                                <option value="<?php echo esc_attr( $fd->field_key ); ?>" <?php selected( $fs['name_field'] ?? '', $fd->field_key ); ?>>
                                    <?php echo esc_html( ( $fd->label ?: $fd->field_key ) . ' (' . $fd->field_key . ')' ); ?>
                                </option>
                                <?php endforeach; ?>
                            </select>
                            <label><?php esc_html_e( 'Email Field', 'acquisitionsuite' ); ?></label>
                            <select id="acquis-email-field">
                                <option value=""><?php esc_html_e( '(auto-detect)', 'acquisitionsuite' ); ?></option>
                                <?php foreach ( $flds as $fd ) : ?>
                                <option value="<?php echo esc_attr( $fd->field_key ); ?>" <?php selected( $fs['email_field'] ?? '', $fd->field_key ); ?>>
                                    <?php echo esc_html( ( $fd->label ?: $fd->field_key ) . ' (' . $fd->field_key . ')' ); ?>
                                </option>
                                <?php endforeach; ?>
                            </select>
                        </div>
                        <div class="acquis-fb-settings-section">
                            <h4><?php esc_html_e( 'Modal Appearance', 'acquisitionsuite' ); ?></h4>
                            <label><?php esc_html_e( 'Modal Title', 'acquisitionsuite' ); ?></label>
                            <input type="text" id="acquis-modal-title" value="<?php echo esc_attr( $fs['modal_title'] ?? '' ); ?>" placeholder="<?php esc_attr_e( 'Get Your Free Resource', 'acquisitionsuite' ); ?>">
                            <label><?php esc_html_e( 'Subtitle', 'acquisitionsuite' ); ?></label>
                            <input type="text" id="acquis-modal-subtitle" value="<?php echo esc_attr( $fs['modal_subtitle'] ?? '' ); ?>" placeholder="<?php esc_attr_e( 'Enter your details below', 'acquisitionsuite' ); ?>">
                            <label><?php esc_html_e( 'Header Color', 'acquisitionsuite' ); ?></label>
                            <div style="display:flex;gap:8px;align-items:center;">
                                <input type="color" id="acquis-header-bg" value="<?php echo esc_attr( $fs['header_bg'] ?? '#0D1B4B' ); ?>" style="width:44px;height:36px;border:1.5px solid var(--p3-gray-200);border-radius:6px;padding:2px;cursor:pointer;">
                                <input type="text" id="acquis-header-bg-text" value="<?php echo esc_attr( $fs['header_bg'] ?? '#0D1B4B' ); ?>" style="flex:1;" placeholder="#0D1B4B">
                            </div>
                            <label><?php esc_html_e( 'Title Color', 'acquisitionsuite' ); ?></label>
                            <input type="color" id="acquis-title-color" value="<?php echo esc_attr( $fs['title_color'] ?? '#ffffff' ); ?>" style="width:44px;height:36px;border:1.5px solid var(--p3-gray-200);border-radius:6px;padding:2px;cursor:pointer;">
                            <label><?php esc_html_e( 'Subtitle Color', 'acquisitionsuite' ); ?></label>
                            <input type="color" id="acquis-subtitle-color" value="<?php echo esc_attr( $fs['subtitle_color'] ?? '#cccccc' ); ?>" style="width:44px;height:36px;border:1.5px solid var(--p3-gray-200);border-radius:6px;padding:2px;cursor:pointer;">
                            <label><?php esc_html_e( 'Submit Button Label', 'acquisitionsuite' ); ?></label>
                            <input type="text" id="acquis-modal-submit-label" value="<?php echo esc_attr( $fs['modal_submit_label'] ?? '' ); ?>" placeholder="<?php esc_attr_e( 'Get My Download', 'acquisitionsuite' ); ?>">
                            <p class="acquis-fb-hint"><?php esc_html_e( 'The button inside the popup that actually submits the form. Leave blank to use the default ("Get My Download" for a gated file, "Submit" for a standalone form).', 'acquisitionsuite' ); ?></p>
                        </div>
                        <div class="acquis-fb-settings-section">
                            <h4><?php esc_html_e( 'Steps', 'acquisitionsuite' ); ?></h4>
                            <label><?php esc_html_e( 'Number of Steps', 'acquisitionsuite' ); ?></label>
                            <?php $can_multi_step = self::is_pro_active(); ?>
                            <input type="number" id="acquis-form-steps" value="<?php echo absint( $form->steps ); ?>" min="1" max="10" style="width:80px;" <?php disabled( ! $can_multi_step ); ?>>
                            <?php if ( $can_multi_step ) : ?>
                            <p class="acquis-fb-hint"><?php esc_html_e( '1 = single page · 2+ = multi-step', 'acquisitionsuite' ); ?></p>
                            <?php else : ?>
                            <p class="acquis-fb-hint"><?php esc_html_e( 'Multi-step forms are a Pro feature. This form will have a single step.', 'acquisitionsuite' ); ?></p>
                            <?php endif; ?>
                        </div>
                        <?php
                        $purpose        = in_array( $fs['purpose'] ?? '', array( 'file_gate', 'appointment', 'registration', 'custom' ), true ) ? $fs['purpose'] : 'file_gate';
                        $is_file_access = ( 'file_gate' === $purpose );
                        $display_style  = $fs['display_style'] ?? 'popup';
                        ?>
                        <div class="acquis-fb-settings-section" style="grid-column:1/-1;">
                            <h4><?php esc_html_e( 'Purpose', 'acquisitionsuite' ); ?></h4>
                            <p class="acquis-fb-hint"><?php esc_html_e( 'File Access gates a download behind this form. Standalone Form stands on its own no file required.', 'acquisitionsuite' ); ?></p>
                            <div class="acquis-radio-pill-group">
                                <label class="acquis-radio-pill <?php echo $is_file_access ? 'active' : ''; ?>">
                                    <input type="radio" name="acquis_form_purpose_type" value="file_gate" <?php checked( $is_file_access ); ?> class="acquis-form-purpose-type-radio">
                                    <?php esc_html_e( 'File Access', 'acquisitionsuite' ); ?>
                                </label>
                                <label class="acquis-radio-pill <?php echo ! $is_file_access ? 'active' : ''; ?>">
                                    <input type="radio" name="acquis_form_purpose_type" value="standalone" <?php checked( ! $is_file_access ); ?> class="acquis-form-purpose-type-radio">
                                    <?php esc_html_e( 'Standalone Form', 'acquisitionsuite' ); ?>
                                </label>
                            </div>
                        </div>

                        <div class="acquis-fb-settings-section" id="acquis-shortcode-section" style="<?php echo $is_file_access ? '' : 'display:none;'; ?>">
                            <h4><?php esc_html_e( 'Shortcode', 'acquisitionsuite' ); ?></h4>
                            <?php $all_files = class_exists( 'ACQUIS_File_Manager' ) ? ACQUIS_File_Manager::get_all_files() : array(); ?>
                            <label><?php esc_html_e( 'Gate this file', 'acquisitionsuite' ); ?></label>
                            <select id="acquis-shortcode-file-picker">
                                <option value=""><?php esc_html_e( '— choose file —', 'acquisitionsuite' ); ?></option>
                                <?php foreach ( $all_files as $fl ) : ?>
                                <option value="<?php echo absint( $fl['id'] ); ?>"><?php echo esc_html( $fl['title'] . ' (' . $fl['ext'] . ')' ); ?></option>
                                <?php endforeach; ?>
                            </select>
                            <div class="acquis-shortcode-box acquis-fb-shortcode-box" id="acquis-shortcode-output">[acquis_download id="____" form="<?php echo absint( $edit_id ); ?>"]</div>
                            <button class="acquis-btn-ghost acquis-btn-sm acquis-copy-btn" id="acquis-copy-shortcode-btn" style="width:100%;justify-content:center;margin-top:6px;" data-copy='[acquis_download id="____" form="<?php echo absint( $edit_id ); ?>"]' disabled>
                                <span class="dashicons dashicons-clipboard acquis-dicon"></span> <?php esc_html_e( 'Copy Shortcode', 'acquisitionsuite' ); ?>
                            </button>
                        </div>

                        <div class="acquis-fb-settings-section" id="acquis-standalone-section" style="<?php echo $is_file_access ? 'display:none;' : ''; ?>">
                            <h4><?php esc_html_e( 'Standalone Usage', 'acquisitionsuite' ); ?></h4>
                            <p class="acquis-fb-hint"><?php esc_html_e( 'Use this form on its own no file required. Great for appointments, registrations, or any lead capture that isn\'t gating a download.', 'acquisitionsuite' ); ?></p>

                            <label><?php esc_html_e( 'Standalone Type', 'acquisitionsuite' ); ?></label>
                            <select id="acquis-form-purpose">
                                <option value="appointment" <?php selected( $purpose, 'appointment' ); ?>><?php esc_html_e( 'Appointment Booking', 'acquisitionsuite' ); ?></option>
                                <option value="registration" <?php selected( $purpose, 'registration' ); ?>><?php esc_html_e( 'Registration', 'acquisitionsuite' ); ?></option>
                                <option value="custom" <?php selected( $purpose, 'custom' ); ?>><?php esc_html_e( 'Custom / Other', 'acquisitionsuite' ); ?></option>
                            </select>

                            <label style="margin-top:12px;"><?php esc_html_e( 'Button Label', 'acquisitionsuite' ); ?></label>
                            <input type="text" id="acquis-form-button-label" value="<?php echo esc_attr( $fs['button_label'] ?? '' ); ?>" placeholder="<?php echo esc_attr( $form->title ?: __( 'Open Form', 'acquisitionsuite' ) ); ?>">
                            <p class="acquis-fb-hint"><?php esc_html_e( 'Shown on the trigger button (Popup Modal / Floating Button) and the Embedded submit button. Leave blank to use the form name.', 'acquisitionsuite' ); ?></p>

                            <label style="margin-top:12px;"><?php esc_html_e( 'Display Style', 'acquisitionsuite' ); ?></label>
                            <div class="acquis-radio-pill-group">
                                <label class="acquis-radio-pill <?php echo 'embedded' === $display_style ? 'active' : ''; ?>">
                                    <input type="radio" name="acquis_form_display_style" value="embedded" <?php checked( $display_style, 'embedded' ); ?> class="acquis-form-display-style-radio">
                                    <?php esc_html_e( 'Embedded', 'acquisitionsuite' ); ?>
                                </label>
                                <label class="acquis-radio-pill <?php echo 'popup' === $display_style || ! in_array( $display_style, array( 'embedded', 'popup' ), true ) ? 'active' : ''; ?>">
                                    <input type="radio" name="acquis_form_display_style" value="popup" <?php checked( ! in_array( $display_style, array( 'embedded' ), true ) ); ?> class="acquis-form-display-style-radio">
                                    <?php esc_html_e( 'Popup Modal', 'acquisitionsuite' ); ?>
                                </label>
                                <?php do_action( 'acquis_form_display_style_options', $display_style ); ?>
                            </div>
                            <?php do_action( 'acquis_form_display_style_note' ); ?>

                            <p class="acquis-fb-hint" style="margin-top:12px;">
                                <?php
                                printf(
                                    /* translators: %s: link to the global Settings page */
                                    esc_html__( 'The success message shown after submission is configured globally, in %s.', 'acquisitionsuite' ),
                                    '<a href="' . esc_url( admin_url( 'admin.php?page=acquisitionsuite-settings' ) ) . '">' . esc_html__( 'Settings → General', 'acquisitionsuite' ) . '</a>'
                                ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- the only dynamic part is an esc_url()'d admin_url(), the rest is a literal, already-escaped string
                                ?>
                            </p>

                            <?php do_action( 'acquis_form_pay_config_fields', $edit_id, $fs ); ?>

                            <label style="margin-top:12px;"><?php esc_html_e( 'Standalone Shortcode', 'acquisitionsuite' ); ?></label>
                            <div class="acquis-shortcode-box acquis-fb-shortcode-box" id="acquis-standalone-shortcode-output">[acquis_form id="<?php echo absint( $edit_id ); ?>" display="<?php echo esc_attr( $display_style ); ?>"]</div>
                            <button type="button" class="acquis-btn-ghost acquis-btn-sm acquis-copy-btn" id="acquis-copy-standalone-shortcode-btn" style="width:100%;justify-content:center;margin-top:6px;" data-copy='[acquis_form id="<?php echo absint( $edit_id ); ?>" display="<?php echo esc_attr( $display_style ); ?>"]'>
                                <span class="dashicons dashicons-clipboard acquis-dicon"></span> <?php esc_html_e( 'Copy Shortcode', 'acquisitionsuite' ); ?>
                            </button>
                        </div>
                    </div>
                    <div style="padding:16px 0 0;border-top:1px solid var(--p3-gray-100);margin-top:16px;display:flex;gap:10px;">
                        <button class="acquis-btn-primary" id="acquis-pf-save-settings">
                            <span class="dashicons dashicons-saved acquis-dicon"></span> <?php esc_html_e( 'Save Settings', 'acquisitionsuite' ); ?>
                        </button>
                        <span id="acquis-pf-settings-save-result" class="acquis-inline-result"></span>
                    </div>
                </div>

                <!-- Email panel -->
                <div class="acquis-fb-panel-body" id="acquis-fb-panel-email" style="display:none;">
                    <?php
                    $email_settings   = ( is_array( $form->settings ) && isset( $form->settings['email'] ) ) ? $form->settings['email'] : array();
                    $email_enabled    = ! empty( $email_settings['enabled'] );
                    $is_standalone_fb = 'file_gate' !== ( ( is_array( $form->settings ) ? $form->settings['purpose'] ?? 'file_gate' : 'file_gate' ) );
                    // Fall back to the canonical default (not an empty string) when the
                    // global option hasn't been seeded yet, so "Load Default Template"
                    // always loads something even on a site that hasn't visited
                    // Settings → Email since upgrading to 3.6.0.
                    $global_tpl       = $is_standalone_fb
                        ? ( get_option( 'acquis_standalone_email_template', '' ) ?: ACQUIS_Email_Template::get_default_standalone_template() )
                        : ( get_option( 'acquis_email_template', '' ) ?: ACQUIS_Email_Template::get_default_template() );
                    ?>
                    <div class="acquis-fb-settings-grid" style="grid-template-columns:1fr;">
                        <div class="acquis-fb-settings-section">
                            <h4><?php esc_html_e( 'Lead Notification Email', 'acquisitionsuite' ); ?></h4>
                            <label style="display:flex;align-items:center;gap:8px;cursor:pointer;margin-bottom:14px;">
                                <input type="checkbox" id="acquis-pf-email-enabled" <?php checked( $email_enabled ); ?>>
                                <strong><?php esc_html_e( 'Override global email template for this form', 'acquisitionsuite' ); ?></strong>
                            </label>
                            <div id="acquis-pf-email-custom-fields" style="<?php echo $email_enabled ? '' : 'display:none;'; ?>">
                                <label><?php esc_html_e( 'Subject', 'acquisitionsuite' ); ?></label>
                                <input type="text" id="acquis-pf-email-subject" class="acquis-field-input"
                                       value="<?php echo esc_attr( $email_settings['subject'] ?? '' ); ?>"
                                       placeholder="<?php echo esc_attr( $is_standalone_fb ? __( 'Thanks for your submission!', 'acquisitionsuite' ) : __( 'Your download is ready!', 'acquisitionsuite' ) ); ?>">
                                <label style="margin-top:12px;"><?php esc_html_e( 'Template (HTML)', 'acquisitionsuite' ); ?></label>
                                <textarea id="acquis-pf-email-template" class="acquis-code-editor" rows="12"><?php echo esc_textarea( $email_settings['template'] ?? '' ); ?></textarea>
                                <textarea id="acquis-pf-email-template-default" style="display:none;"><?php echo esc_textarea( $global_tpl ); ?></textarea>
                                <div style="display:flex;gap:8px;margin-top:8px;flex-wrap:wrap;">
                                    <button type="button" class="acquis-btn-ghost acquis-btn-sm" id="acquis-pf-email-load-default">
                                        <?php esc_html_e( 'Load Default Template', 'acquisitionsuite' ); ?>
                                    </button>
                                </div>
                            </div>
                            <div style="display:flex;gap:10px;align-items:center;margin-top:16px;padding-top:14px;border-top:1px solid var(--p3-gray-100);flex-wrap:wrap;">
                                <button class="acquis-btn-primary" id="acquis-pf-save-email">
                                    <span class="dashicons dashicons-saved acquis-dicon"></span> <?php esc_html_e( 'Save Email', 'acquisitionsuite' ); ?>
                                </button>
                                <input type="email" id="acquis-pf-email-test-to" class="acquis-field-input" style="width:200px;" value="<?php echo esc_attr( wp_get_current_user()->user_email ); ?>" placeholder="you@example.com">
                                <button type="button" class="acquis-btn-secondary acquis-btn-sm" id="acquis-pf-send-test-email">
                                    <?php esc_html_e( 'Send Test', 'acquisitionsuite' ); ?>
                                </button>
                                <span id="acquis-pf-email-save-result" class="acquis-inline-result"></span>
                                <span id="acquis-pf-email-test-result" class="acquis-inline-result"></span>
                            </div>
                        </div>
                    </div>
                </div>
            </div><!-- /canvas-panel -->

        </div><!-- /fb-wrap -->


                <?php elseif ( $is_new ) : ?>
        <!-- ── CREATE NEW FORM ─────────────────────────────────────────── -->
        <div class="acquis-create-form-wrap">
            <div class="acquis-card acquis-create-form-card">
                <div class="acquis-create-form-icon"><span class="dashicons dashicons-star-filled acquis-dicon-lg"></span></div>
                <h2 style="font-size:20px;font-weight:900;color:var(--acquis-navy);margin:0 0 6px;"><?php esc_html_e( 'Create a New Form', 'acquisitionsuite' ); ?></h2>
                <p style="font-size:13px;color:#6b7280;margin:0 0 24px;line-height:1.6;"><?php esc_html_e( 'Name your form and choose how many steps it needs. You can add and arrange fields after.', 'acquisitionsuite' ); ?></p>

                <input type="hidden" id="acquis-form-id" value="new">

                <div class="acquis-form-group-p3">
                    <label class="acquis-form-label"><?php esc_html_e( 'Form Name', 'acquisitionsuite' ); ?> <span style="color:var(--acquis-orange);">*</span></label>
                    <input type="text" id="acquis-form-title" class="acquis-field-input" placeholder="e.g. Resource Download Lead Form" autofocus style="width:100%;box-sizing:border-box;">
                </div>

                <div class="acquis-form-group-p3">
                    <label class="acquis-form-label"><?php esc_html_e( 'Number of Steps', 'acquisitionsuite' ); ?></label>
                    <div class="acquis-steps-row">
                        <?php $can_multi_step = self::is_pro_active(); ?>
                        <input type="number" id="acquis-form-steps" value="1" min="1" max="10" style="width:80px;" <?php disabled( ! $can_multi_step ); ?>>
                        <?php if ( $can_multi_step ) : ?>
                        <span class="acquis-steps-hint"><?php esc_html_e( '1 = single page · 2+ = multi-step progress bar', 'acquisitionsuite' ); ?></span>
                        <?php else : ?>
                        <span class="acquis-steps-hint"><?php esc_html_e( 'Multi-step forms are a Pro feature. This form will have a single step.', 'acquisitionsuite' ); ?></span>
                        <?php endif; ?>
                    </div>
                </div>

                <div class="acquis-form-group-p3">
                    <label class="acquis-form-label"><?php esc_html_e( 'Purpose', 'acquisitionsuite' ); ?></label>
                    <div class="acquis-radio-pill-group">
                        <label class="acquis-radio-pill active">
                            <input type="radio" name="acquis_new_form_purpose" value="file_gate" checked class="acquis-new-form-purpose-radio">
                            <?php esc_html_e( 'File Access', 'acquisitionsuite' ); ?>
                        </label>
                        <label class="acquis-radio-pill">
                            <input type="radio" name="acquis_new_form_purpose" value="custom" class="acquis-new-form-purpose-radio">
                            <?php esc_html_e( 'Standalone Form', 'acquisitionsuite' ); ?>
                        </label>
                    </div>
                    <p class="acquis-fb-hint"><?php esc_html_e( 'File Access gates a download behind this form. Standalone Form stands on its own no file required for appointments, registrations, or any other lead capture.', 'acquisitionsuite' ); ?></p>
                </div>

                <div class="acquis-create-form-actions">
                    <button type="button" class="acquis-btn-primary" id="acquis-save-form" style="flex:1;justify-content:center;">
                        <span class="dashicons dashicons-star-filled acquis-dicon"></span> <?php esc_html_e( 'Create Form', 'acquisitionsuite' ); ?>
                    </button>
                    <a href="<?php echo esc_url( admin_url( 'admin.php?page=acquis-form-builder' ) ); ?>" class="acquis-btn-secondary">
                        <?php esc_html_e( 'Cancel', 'acquisitionsuite' ); ?>
                    </a>
                </div>
                <span id="acquis-form-save-result" class="acquis-inline-result" style="display:block;margin-top:10px;"></span>
            </div>
        </div>

        <?php else : ?>
        <!-- ── FORM LIST ───────────────────────────────────────────────── -->
        <div class="acquis-p3-form-list-header">
            <div>
                <span style="font-size:13px;color:var(--p3-gray-600);">
                    <?php /* translators: %s: number of forms */ printf( esc_html( _n( '%s form', '%s forms', count( $forms ), 'acquisitionsuite' ) ), number_format( count( $forms ) ) ); ?>
                </span>
            </div>
            <a href="<?php echo esc_url( add_query_arg( array( 'page' => 'acquis-form-builder', 'edit' => 'new' ), admin_url( 'admin.php' ) ) ); ?>" class="acquis-btn-primary">
                + <?php esc_html_e( 'New Form', 'acquisitionsuite' ); ?>
            </a>
        </div>

        <?php if ( $forms ) : ?>
        <div class="acquis-p3-forms-grid">
            <?php foreach ( $forms as $f ) : ?>
            <div class="acquis-form-item-card">
                <div class="acquis-form-item-icon"><span class="dashicons dashicons-clipboard acquis-dicon-lg"></span></div>
                <div class="acquis-form-item-body">
                    <strong><?php echo esc_html( $f->title ); ?></strong>
                    <div class="acquis-form-item-meta">
                        <span class="acquis-badge <?php echo esc_attr( $f->status === 'active' ? 'acquis-badge-green' : 'acquis-badge-gray' ); ?>">
                            <?php echo esc_html( ucfirst( $f->status ) ); ?>
                        </span>
                        <span><?php echo absint( $f->steps ); ?> step<?php echo $f->steps != 1 ? 's' : ''; ?></span>
                        <span><?php echo esc_html( date_i18n( 'M j, Y', strtotime( $f->created_at ) ) ); ?></span>
                        <?php $form_funnel = class_exists( 'ACQUIS_Funnels' ) ? ACQUIS_Funnels::for_form( $f->id ) : null; ?>
                        <?php if ( $form_funnel ) : ?>
                            <a class="acquis-badge acquis-badge-orange" href="<?php echo esc_url( add_query_arg( array( 'page' => 'acquis-funnels', 'funnel' => (int) $form_funnel->id, 'view' => 'report' ), admin_url( 'admin.php' ) ) ); ?>">
                                <?php /* translators: %s: funnel name */ printf( esc_html__( 'Funnel: %s', 'acquisitionsuite' ), esc_html( $form_funnel->name ) ); ?>
                            </a>
                        <?php endif; ?>
                        <span class="acquis-badge acquis-badge-blue">
                            <?php
                            $lead_count = ACQUIS_P3_DB::count_submissions_grouped( '', $f->id );
                            /* translators: %s: number of leads */
                            printf( esc_html( _n( '%s lead', '%s leads', $lead_count, 'acquisitionsuite' ) ), number_format( $lead_count ) );
                            ?>
                        </span>
                    </div>
                </div>
                <div class="acquis-form-item-actions">
                    <a href="<?php echo esc_url( add_query_arg( array( 'page' => 'acquis-form-builder', 'edit' => $f->id ), admin_url( 'admin.php' ) ) ); ?>" class="acquis-btn-primary acquis-btn-sm">
                        <span class="dashicons dashicons-edit acquis-dicon"></span> <?php esc_html_e( 'Edit', 'acquisitionsuite' ); ?>
                    </a>
                    <a href="<?php echo esc_url( add_query_arg( array( 'page' => 'acquis-submissions', 'form_filter' => $f->id ), admin_url( 'admin.php' ) ) ); ?>" class="acquis-btn-secondary acquis-btn-sm">
                        <span class="dashicons dashicons-visibility acquis-dicon"></span> <?php esc_html_e( 'View Submissions', 'acquisitionsuite' ); ?>
                    </a>
                    <button class="acquis-btn-secondary acquis-btn-sm acquis-dup-form" data-id="<?php echo absint( $f->id ); ?>">
                        <span class="dashicons dashicons-admin-page acquis-dicon"></span> <?php esc_html_e( 'Duplicate', 'acquisitionsuite' ); ?>
                    </button>
                    <button class="acquis-btn-danger acquis-btn-xs acquis-del-form" data-id="<?php echo absint( $f->id ); ?>">
                        <span class="dashicons dashicons-trash acquis-dicon-sm"></span>
                    </button>
                </div>
            </div>
            <?php endforeach; ?>
        </div>

        <?php else : ?>
        <div class="acquis-p3-empty">
            <span class="acquis-p3-empty-icon"><span class="dashicons dashicons-clipboard acquis-dicon-lg"></span></span>
            <h3><?php esc_html_e( 'No forms yet', 'acquisitionsuite' ); ?></h3>
            <p><?php esc_html_e( 'Create your first form to capture richer lead data alongside every file download.', 'acquisitionsuite' ); ?></p>
            <a href="<?php echo esc_url( add_query_arg( array( 'page' => 'acquis-form-builder', 'edit' => 'new' ), admin_url( 'admin.php' ) ) ); ?>" class="acquis-btn-primary">
                <span class="dashicons dashicons-star-filled acquis-dicon"></span> <?php esc_html_e( 'Create First Form', 'acquisitionsuite' ); ?>
            </a>
        </div>
        <?php endif; ?>
        <?php endif; ?>
        </div>
        <?php
    }

    // ── Field card renderer ────────────────────────────────────────────────
    public function render_field_card( $field ) {
        $type_defs = self::get_field_type_definitions();
        $icon      = $type_defs[ $field->field_type ]['icon'] ?? '<span class="dashicons dashicons-admin-generic acquis-dicon"></span>';
        $ob  = '<div class="acquis-field-card" data-field-id="' . absint( $field->id ) . '" data-field-key="' . esc_attr( $field->field_key ) . '" data-field-type="' . esc_attr( $field->field_type ) . '">';

        // Card header
        $ob .= '<div class="acquis-field-card-header">';
        $ob .= '<span class="acquis-drag-handle" title="Drag to reorder"><span class="dashicons dashicons-menu"></span></span>';
        $ob .= '<span class="acquis-field-type-chip"><span class="acquis-type-icon">' . $icon . '</span>' . esc_html( strtoupper( $field->field_type ) ) . '</span>';
        $ob .= '<span class="acquis-field-card-label">' . esc_html( $field->label ?: '(' . $field->field_type . ')' ) . '</span>';
        $ob .= '<code class="acquis-field-key-chip" title="Field key (click to copy)" data-copy="' . esc_attr( $field->field_key ) . '">' . esc_html( $field->field_key ) . '</code>';
        // Both badges are always rendered (never a conditional if()), the
        // "Required" one just hidden via style when not applicable, rather
        // than omitted from the markup entirely: after an auto-save, the
        // edit panel's JS only has DOM elements already on the page to
        // toggle/update, it can't make an element that was never rendered
        // suddenly appear. Same fix as the front-end success modal's
        // "check your email" / "Download Now" blocks.
        $ob .= '<div class="acquis-field-meta-chips">';
        $ob .= '<span class="acquis-badge acquis-badge-red acquis-required-badge" style="font-size:9px;' . ( $field->required ? '' : 'display:none;' ) . '">Required</span>';
        $ob .= '<span class="acquis-badge acquis-badge-gray acquis-field-step-badge" style="font-size:9px;">Step ' . absint( $field->step ) . '</span>';
        $ob .= '</div>';
        $ob .= '<div class="acquis-field-card-actions">';
        $ob .= '<button type="button" class="acquis-edit-field-btn" data-field-id="' . absint( $field->id ) . '" title="Edit field"><span class="dashicons dashicons-edit acquis-dicon-sm"></span></button>';
        $ob .= '<button type="button" class="acquis-del-field-btn acquis-del-btn" data-field-id="' . absint( $field->id ) . '" title="Delete field"><span class="dashicons dashicons-trash acquis-dicon-sm"></span></button>';
        $ob .= '</div>';
        $ob .= '</div>';

        // Inline edit panel
        $ob .= '<div class="acquis-field-edit-panel" id="acquis-edit-panel-' . absint( $field->id ) . '" style="display:none;">';
        $ob .= '<h4><span class="dashicons dashicons-edit acquis-dicon"></span> Edit Field: ' . esc_html( strtoupper( $field->field_type ) ) . '</h4>';
        $ob .= '<div class="acquis-field-edit-grid">';

        $ob .= '<div class="acquis-feg-group acquis-feg-full">';
        $ob .= '<label>Field Key</label>';
        $ob .= '<div class="acquis-fe-key-row"><code class="acquis-field-key-chip acquis-field-key-chip-lg" data-copy="' . esc_attr( $field->field_key ) . '">' . esc_html( $field->field_key ) . '</code> <button type="button" class="acquis-btn-ghost acquis-btn-xs acquis-copy-field-key" data-copy="' . esc_attr( $field->field_key ) . '"><span class="dashicons dashicons-clipboard acquis-dicon-sm"></span> Copy</button></div>';
        $ob .= '<p class="acquis-feg-hint">This is this field\'s unique identifier. You\'ll use it when mapping the Name/Email field in Settings, or in Automation rules. It can\'t be changed once the field is created.</p>';
        $ob .= '</div>';

        $ob .= '<div class="acquis-feg-group"><label>Label</label><input type="text" class="acquis-fe-label" value="' . esc_attr( $field->label ) . '" placeholder="Field label…"></div>';
        $ob .= '<div class="acquis-feg-group"><label>Placeholder</label><input type="text" class="acquis-fe-placeholder" value="' . esc_attr( $field->placeholder ) . '" placeholder="Placeholder text…"></div>';
        $ob .= '<div class="acquis-feg-group"><label>Help Text</label><input type="text" class="acquis-fe-help" value="' . esc_attr( $field->help_text ) . '" placeholder="Optional hint below the field…"></div>';
        // Multi-step is Pro-only, and the field's own Step # is meaningless
        // without it (a field assigned to a step beyond the form's single
        // step would silently never render, see ACQUIS_Form_Renderer::render()'s
        // per-step loop), so lock it the same way the form-level Steps
        // field is locked.
        $ob .= '<div class="acquis-feg-group"><label>Step #</label><input type="number" class="acquis-fe-step" value="' . absint( $field->step ) . '" min="1" style="max-width:80px;"' . disabled( ! self::is_pro_active(), true, false ) . '></div>';

        $ob .= '<div class="acquis-feg-group acquis-feg-full">';
        $ob .= '<label class="acquis-feg-checkbox-label"><input type="checkbox" class="acquis-fe-required" ' . checked( $field->required, 1, false ) . '> Mark as Required</label>';
        $ob .= '</div>';

        if ( in_array( $field->field_type, array( 'dropdown', 'radio', 'checkbox' ), true ) ) {
            $opts_str = implode( "\n", array_map( function( $o ) {
                return is_array( $o ) ? ( $o['label'] ?? $o ) : $o;
            }, (array) $field->options ) );
            $ob .= '<div class="acquis-feg-group acquis-feg-full"><label>Options <span style="font-weight:400;color:var(--p3-gray-400);">(one per line)</span></label>';
            $ob .= '<textarea class="acquis-fe-options" rows="4" placeholder="Option A&#10;Option B&#10;Option C">' . esc_textarea( $opts_str ) . '</textarea></div>';
        }

        // Conditional logic
        $cond = ! empty( $field->conditions['rules'] ) ? $field->conditions['rules'][0] : array( 'field' => '', 'operator' => 'equals', 'value' => '' );
        $ob .= '<div class="acquis-feg-group acquis-feg-full">';
        $ob .= '<label>Conditional Logic <span style="font-weight:400;color:var(--p3-gray-400);">(show this field only if…)</span></label>';
        $ob .= '<div class="acquis-cond-logic-row">';
        $ob .= '<span class="acquis-cond-label">Show if</span>';
        $ob .= '<input type="text" class="acquis-cond-field" placeholder="field_key" value="' . esc_attr( $cond['field'] ) . '">';
        $ob .= '<select class="acquis-cond-op">';
        foreach ( array( 'equals', 'not_equals', 'contains', 'gt', 'lt', 'in_list', 'is_empty', 'is_not_empty' ) as $op ) {
            $ob .= '<option value="' . $op . '" ' . selected( $cond['operator'] ?? '', $op, false ) . '>' . $op . '</option>';
        }
        $ob .= '</select>';
        $ob .= '<input type="text" class="acquis-cond-value" placeholder="value" value="' . esc_attr( $cond['value'] ) . '">';
        $ob .= '</div></div>';

        $ob .= '</div>';

        $ob .= '<div class="acquis-field-edit-footer">';
        $ob .= '<button type="button" class="acquis-btn-ghost acquis-btn-sm acquis-cancel-field-edit">Cancel</button>';
        $ob .= '<button type="button" class="acquis-btn-primary acquis-btn-sm acquis-save-field-edit"'
             . ' data-field-id="' . absint( $field->id ) . '"'
             . ' data-form-id="' . absint( $field->form_id ) . '"'
             . ' data-field-key="' . esc_attr( $field->field_key ) . '"'
             . ' data-field-type="' . esc_attr( $field->field_type ) . '">'
             . '<span class="dashicons dashicons-saved acquis-dicon"></span> Save Field</button>';
        $ob .= '</div>';
        $ob .= '</div>';

        $ob .= '</div>';
        return $ob;
    }

    // ══════════════════════════════════════════════════════════════════════════
    //  ██  ANALYTICS
    // ══════════════════════════════════════════════════════════════════════════
    public function render_analytics() {
        // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only analytics filter, no data mutation
        $days    = absint( $_GET['days'] ?? 30 );
        $data    = ACQUIS_P3_DB::get_analytics_summary( $days );
        $max_dl  = ! empty( $data['top_files'] )    ? max( array_column( (array) $data['top_files'],    'downloads' ) ) : 1;
        $max_src = ! empty( $data['lead_sources'] ) ? max( array_column( (array) $data['lead_sources'], 'count' ) )     : 1;
        ?>
        <div class="wrap acquis-admin-wrap">
        <?php $this->page_header( '<span class="dashicons dashicons-chart-bar acquis-dicon"></span> ' . esc_html__( 'Analytics', 'acquisitionsuite' ) ); ?>

        <!-- Hero -->
        <div class="acquis-analytics-hero">
            <div class="acquis-analytics-hero-left">
                <h2><span class="dashicons dashicons-chart-bar acquis-dicon"></span> <?php esc_html_e( 'Performance Overview', 'acquisitionsuite' ); ?></h2>
                <p><?php /* translators: %d: number of days */ printf( esc_html__( 'Showing data for the last %d days', 'acquisitionsuite' ), absint( $days ) ); ?></p>
            </div>
            <div class="acquis-analytics-filters">
                <?php foreach ( array( 7 => '7 days', 30 => '30 days', 90 => '90 days', 365 => '1 year' ) as $d => $lbl ) : ?>
                <a href="<?php echo esc_url( add_query_arg( array( 'page' => 'acquis-analytics', 'days' => $d ), admin_url( 'admin.php' ) ) ); ?>"
                   class="<?php echo esc_attr( $days === $d ? 'active' : '' ); ?>">
                    <?php echo esc_html( $lbl ); ?>
                </a>
                <?php endforeach; ?>
            </div>
        </div>

        <!-- KPI Grid -->
        <div class="acquis-kpi-grid">
            <?php
            $kpis = array(
                array( '<span class="dashicons dashicons-groups"></span>',       number_format( $data['total_leads'] ),      'Total Leads',      'all time' ),
                array( '<span class="dashicons dashicons-download"></span>',     number_format( $data['total_downloads'] ),  'Downloads',        'last ' . $days . 'd' ),
                array( '<span class="dashicons dashicons-visibility"></span>',   number_format( $data['total_views'] ),      'Form Views',       'last ' . $days . 'd' ),
                array( '<span class="dashicons dashicons-yes-alt"></span>',      number_format( $data['total_submissions'] ),'Submissions',      'last ' . $days . 'd' ),
                array( '<span class="dashicons dashicons-email-alt"></span>',    number_format( $data['emails_sent'] ),      'Emails Sent',      'all time' ),
                array( '<span class="dashicons dashicons-chart-line"></span>',   $data['conversion_rate'] . '%',             'Conversion Rate',  'view → submit' ),
            );
            foreach ( $kpis as list( $emoji, $num, $label, $sub ) ) :
            ?>
            <div class="acquis-kpi-card">
                <div class="acquis-kpi-icon"><?php echo wp_kses( $emoji, array( 'span' => array( 'class' => array() ) ) ); ?></div>
                <div class="acquis-kpi-value"><?php echo esc_html( $num ); ?></div>
                <div class="acquis-kpi-label"><?php echo esc_html( $label ); ?></div>
                <div class="acquis-kpi-sub"><?php echo esc_html( $sub ); ?></div>
            </div>
            <?php endforeach; ?>
        </div>

        <?php if ( class_exists( 'ACQUIS_Pay_DB' ) ) :
            $pay_summary    = ACQUIS_Pay_DB::get_summary( $days );
            $free_downloads = ACQUIS_Pay_DB::get_free_download_count( $days );
            $paid_downloads = ACQUIS_Pay_DB::get_paid_download_count( $days );
            $currency_sym   = ACQUIS_Pay_DB::get_currency_symbol( get_option( 'acquis_pay_default_currency', 'USD' ) );
        ?>
        <h3 style="margin:28px 0 14px;font-size:15px;color:var(--p3-navy);"><span class="dashicons dashicons-cart acquis-dicon"></span> <?php esc_html_e( 'Payments', 'acquisitionsuite' ); ?></h3>
        <div class="acquis-kpi-grid">
            <?php
            $pay_kpis = array(
                array( '<span class="dashicons dashicons-money-alt"></span>', $currency_sym . number_format( $pay_summary['revenue'], 2 ), esc_html__( 'Revenue', 'acquisitionsuite' ), 'last ' . $days . 'd' ),
                array( '<span class="dashicons dashicons-cart"></span>',      number_format( $pay_summary['total_orders'] ),               esc_html__( 'Total Orders', 'acquisitionsuite' ), 'last ' . $days . 'd' ),
                array( '<span class="dashicons dashicons-yes-alt"></span>',  number_format( $pay_summary['successful'] ),                 esc_html__( 'Successful Payments', 'acquisitionsuite' ), 'last ' . $days . 'd' ),
                array( '<span class="dashicons dashicons-warning"></span>', number_format( $pay_summary['failed'] ),                     esc_html__( 'Failed Payments', 'acquisitionsuite' ), 'last ' . $days . 'd' ),
                array( '<span class="dashicons dashicons-unlock"></span>',  number_format( $free_downloads ),                             esc_html__( 'Free Downloads', 'acquisitionsuite' ), 'last ' . $days . 'd' ),
                array( '<span class="dashicons dashicons-download"></span>',number_format( $paid_downloads ),                             esc_html__( 'Paid Downloads', 'acquisitionsuite' ), 'last ' . $days . 'd' ),
                array( '<span class="dashicons dashicons-chart-line"></span>', $pay_summary['conversion_rate'] . '%',                     esc_html__( 'Order Conversion', 'acquisitionsuite' ), 'pending → paid' ),
            );
            foreach ( $pay_kpis as list( $icon, $num, $label, $sub ) ) :
            ?>
            <div class="acquis-kpi-card">
                <div class="acquis-kpi-icon"><?php echo wp_kses( $icon, array( 'span' => array( 'class' => array() ) ) ); ?></div>
                <div class="acquis-kpi-value"><?php echo esc_html( $num ); ?></div>
                <div class="acquis-kpi-label"><?php echo esc_html( $label ); ?></div>
                <div class="acquis-kpi-sub"><?php echo esc_html( $sub ); ?></div>
            </div>
            <?php endforeach; ?>
        </div>
        <?php endif; ?>

        <!-- Charts -->
        <div class="acquis-charts-grid">
            <div class="acquis-chart-panel">
                <div class="acquis-chart-panel-header">
                    <h3><span class="dashicons dashicons-chart-line acquis-dicon"></span> <?php esc_html_e( 'Leads Over Time', 'acquisitionsuite' ); ?></h3>
                    <span class="acquis-chart-range-pill"><?php echo absint( $days ); ?>d</span>
                </div>
                <canvas id="acquis-chart-leads"></canvas>
            </div>
            <div class="acquis-chart-panel">
                <div class="acquis-chart-panel-header">
                    <h3><span class="dashicons dashicons-download acquis-dicon"></span> <?php esc_html_e( 'Downloads Over Time', 'acquisitionsuite' ); ?></h3>
                    <span class="acquis-chart-range-pill"><?php echo absint( $days ); ?>d</span>
                </div>
                <canvas id="acquis-chart-downloads"></canvas>
            </div>
        </div>

        <!-- Data Tables -->
        <div class="acquis-analytics-tables-grid">

            <div class="acquis-data-panel">
                <div class="acquis-data-panel-header">
                    <h3><span class="dashicons dashicons-flag acquis-dicon"></span> <?php esc_html_e( 'Top Downloaded Files', 'acquisitionsuite' ); ?></h3>
                    <span class="acquis-badge acquis-badge-orange"><?php echo count( (array) $data['top_files'] ); ?> files</span>
                </div>
                <div class="acquis-data-panel-body">
                    <?php if ( $data['top_files'] ) :
                        $rank = 0;
                        foreach ( $data['top_files'] as $f ) :
                            $rank++;
                            $pct = $max_dl > 0 ? round( ( $f->downloads / $max_dl ) * 100 ) : 0;
                    ?>
                    <div class="acquis-data-row">
                        <span class="acquis-data-row-rank"><?php echo absint( $rank ); ?></span>
                        <span class="acquis-data-row-label"><?php echo esc_html( $f->file_name ?: 'File #' . $f->file_id ); ?></span>
                        <div class="acquis-data-row-bar-wrap">
                            <div class="acquis-data-row-bar-fill" style="width:<?php echo number_format( (float) $pct, 2 ); ?>%"></div>
                        </div>
                        <span class="acquis-data-row-value"><?php echo number_format( $f->downloads ); ?></span>
                    </div>
                    <?php endforeach; else : ?>
                    <div style="padding:40px;text-align:center;color:var(--p3-gray-400);font-size:13px;"><span class="dashicons dashicons-portfolio acquis-dicon"></span> <?php esc_html_e( 'No download data yet.', 'acquisitionsuite' ); ?></div>
                    <?php endif; ?>
                </div>
            </div>

            <div class="acquis-data-panel">
                <div class="acquis-data-panel-header">
                    <h3><span class="dashicons dashicons-admin-site-alt3 acquis-dicon"></span> <?php esc_html_e( 'Lead Sources', 'acquisitionsuite' ); ?></h3>
                    <span class="acquis-badge acquis-badge-blue"><?php echo count( (array) $data['lead_sources'] ); ?> pages</span>
                </div>
                <div class="acquis-data-panel-body">
                    <?php if ( $data['lead_sources'] ) :
                        $rank = 0;
                        foreach ( $data['lead_sources'] as $src ) :
                            $rank++;
                            $pct   = $max_src > 0 ? round( ( $src->count / $max_src ) * 100 ) : 0;
                            $title = get_the_title( $src->source_post ) ?: 'Post #' . $src->source_post;
                            $url   = get_permalink( $src->source_post );
                    ?>
                    <div class="acquis-data-row">
                        <span class="acquis-data-row-rank"><?php echo absint( $rank ); ?></span>
                        <span class="acquis-data-row-label">
                            <?php if ( $url ) : ?><a href="<?php echo esc_url( $url ); ?>" target="_blank" style="color:var(--p3-navy);text-decoration:none;"><?php echo esc_html( $title ); ?></a>
                            <?php else : echo esc_html( $title ); endif; ?>
                        </span>
                        <div class="acquis-data-row-bar-wrap">
                            <div class="acquis-data-row-bar-fill" style="width:<?php echo number_format( (float) $pct, 2 ); ?>%"></div>
                        </div>
                        <span class="acquis-data-row-value"><?php echo number_format( $src->count ); ?></span>
                    </div>
                    <?php endforeach; else : ?>
                    <div style="padding:40px;text-align:center;color:var(--p3-gray-400);font-size:13px;"><span class="dashicons dashicons-admin-site-alt3 acquis-dicon"></span> <?php esc_html_e( 'No source data yet.', 'acquisitionsuite' ); ?></div>
                    <?php endif; ?>
                </div>
            </div>

        </div>

        <?php if ( class_exists( 'ACQUIS_Pay_DB' ) ) :
            $best_sellers     = ACQUIS_Pay_DB::get_best_selling_files( 5, $days );
            $max_sales        = ! empty( $best_sellers ) ? max( array_column( $best_sellers, 'sales' ) ) : 1;
        ?>
        <div class="acquis-data-panel" style="margin-top:18px;">
            <div class="acquis-data-panel-header">
                <h3><span class="dashicons dashicons-star-filled acquis-dicon"></span> <?php esc_html_e( 'Best Selling Files', 'acquisitionsuite' ); ?></h3>
                <span class="acquis-badge acquis-badge-green"><?php echo count( $best_sellers ); ?> <?php esc_html_e( 'files', 'acquisitionsuite' ); ?></span>
            </div>
            <div class="acquis-data-panel-body">
                <?php if ( $best_sellers ) :
                    $rank = 0;
                    foreach ( $best_sellers as $f ) :
                        $rank++;
                        $pct = $max_sales > 0 ? round( ( $f->sales / $max_sales ) * 100 ) : 0;
                ?>
                <div class="acquis-data-row">
                    <span class="acquis-data-row-rank"><?php echo absint( $rank ); ?></span>
                    <span class="acquis-data-row-label"><?php echo esc_html( $f->file_name ?: 'File #' . $f->file_id ); ?> <small style="color:var(--p3-gray-400);">(<?php $sym = class_exists( 'ACQUIS_Pay_DB' ) ? ACQUIS_Pay_DB::get_currency_symbol( get_option( 'acquis_pay_default_currency', 'USD' ) ) : '$'; echo esc_html( $sym . number_format( (float) $f->revenue, 2 ) ); ?>)</small></span>
                    <div class="acquis-data-row-bar-wrap">
                        <div class="acquis-data-row-bar-fill" style="width:<?php echo esc_attr( $pct ); ?>%"></div>
                    </div>
                    <span class="acquis-data-row-value"><?php echo number_format( $f->sales ); ?> <?php esc_html_e( 'sales', 'acquisitionsuite' ); ?></span>
                </div>
                <?php endforeach; else : ?>
                <div style="padding:40px;text-align:center;color:var(--p3-gray-400);font-size:13px;"><span class="dashicons dashicons-cart acquis-dicon"></span> <?php esc_html_e( 'No sales yet in this period.', 'acquisitionsuite' ); ?></div>
                <?php endif; ?>
            </div>
        </div>
        <?php endif; ?>

        <?php /* Chart data injected via enqueue_assets() — no inline script needed here */ ?>
        </div>
        <?php
    }

    // ══════════════════════════════════════════════════════════════════════════
    //  ██  LEAD SCORING
    // ══════════════════════════════════════════════════════════════════════════
    // ══════════════════════════════════════════════════════════════════════════
    //  ██  AUTOMATION
    // ══════════════════════════════════════════════════════════════════════════
    // ══════════════════════════════════════════════════════════════════════════
    //  ██  EXPORT
    // ══════════════════════════════════════════════════════════════════════════
    public function render_export() {
        $forms = ACQUIS_P3_DB::get_forms( 'active' );
        $total = ACQUIS_Database::count_leads();
        $total_subs = ACQUIS_P3_DB::count_submissions();
        ?>
        <div class="wrap acquis-admin-wrap">
        <?php $this->page_header( '<span class="dashicons dashicons-download acquis-dicon"></span> ' . esc_html__(  'Export', 'acquisitionsuite' ) ); ?>

        <!-- Hero -->
        <div class="acquis-export-hero">
            <h2><span class="dashicons dashicons-download acquis-dicon"></span> <?php esc_html_e( 'Export Leads & Submissions', 'acquisitionsuite' ); ?></h2>
            <p><?php printf( esc_html__( 'Export your data with custom fields, lead scores, tags, segments, UTM attribution and more.', 'acquisitionsuite' ) ); ?></p>
            <div class="acquis-export-hero-meta">
                <div class="acquis-export-hero-stat">
                    <span class="acquis-export-hero-stat-num"><?php echo number_format( $total ); ?></span>
                    <span class="acquis-export-hero-stat-lbl"><?php esc_html_e( 'Total Leads', 'acquisitionsuite' ); ?></span>
                </div>
                <div class="acquis-export-hero-stat">
                    <span class="acquis-export-hero-stat-num"><?php echo number_format( $total_subs ); ?></span>
                    <span class="acquis-export-hero-stat-lbl"><?php esc_html_e( 'Submissions', 'acquisitionsuite' ); ?></span>
                </div>
                <div class="acquis-export-hero-stat">
                    <span class="acquis-export-hero-stat-num"><?php echo count( $forms ); ?></span>
                    <span class="acquis-export-hero-stat-lbl"><?php esc_html_e( 'Active Forms', 'acquisitionsuite' ); ?></span>
                </div>
            </div>
        </div>

        <form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>">
        <?php wp_nonce_field( 'acquis_export' ); ?>

        <div class="acquis-export-layout">

            <!-- Filters -->
            <div class="acquis-filter-card">
                <div class="acquis-filter-card-head">
                    <span><span class="dashicons dashicons-search acquis-dicon-lg"></span></span>
                    <h3><?php esc_html_e( 'Filter Options', 'acquisitionsuite' ); ?></h3>
                </div>
                <div class="acquis-filter-card-body">
                    <div class="acquis-filter-group">
                        <label class="acquis-filter-label"><?php esc_html_e( 'Date Range', 'acquisitionsuite' ); ?></label>
                        <div class="acquis-filter-date-row">
                            <input type="date" name="date_from" class="acquis-filter-input" placeholder="From">
                            <input type="date" name="date_to"   class="acquis-filter-input" placeholder="To">
                        </div>
                    </div>
                    <div class="acquis-filter-group">
                        <label class="acquis-filter-label"><?php esc_html_e( 'Filter by Form', 'acquisitionsuite' ); ?></label>
                        <select name="form_id" class="acquis-filter-select">
                            <option value=""><?php esc_html_e( '  All Forms  ', 'acquisitionsuite' ); ?></option>
                            <?php foreach ( $forms as $f ) : ?>
                            <option value="<?php echo absint( $f->id ); ?>"><?php echo esc_html( $f->title ); ?></option>
                            <?php endforeach; ?>
                        </select>
                    </div>
                    <div class="acquis-filter-note">
                        <?php esc_html_e( 'Leave date fields blank to export all records. Filtering by form only applies to Submissions export.', 'acquisitionsuite' ); ?>
                    </div>

                    <!-- What's included -->
                    <div class="acquis-export-includes-card">
                        <h4><?php esc_html_e( "What's included", 'acquisitionsuite' ); ?></h4>
                        <div class="acquis-includes-grid">
                            <?php foreach ( array( 'Full name', 'Email', 'File downloaded', 'Lead score', 'Score tier', 'Tags', 'Segment', 'UTM source', 'UTM medium', 'UTM campaign', 'Source page', 'IP address', 'Submitted date', 'Custom fields' ) as $col ) : ?>
                            <div class="acquis-includes-item"><?php echo esc_html( $col ); ?></div>
                            <?php endforeach; ?>
                        </div>
                    </div>
                </div>
            </div>

            <!-- Format picker -->
            <div>
                <div class="acquis-format-card">
                    <div class="acquis-format-card-head">
                        <h3><?php esc_html_e( 'Choose Export Format', 'acquisitionsuite' ); ?></h3>
                    </div>
                    <div class="acquis-format-card-body">
                        <button type="submit" name="action" value="acquis_export_csv" class="acquis-export-format-btn acquis-efb-csv">
                            <div class="acquis-efb-icon"><span class="dashicons dashicons-chart-bar acquis-dicon-lg"></span></div>
                            <div class="acquis-efb-body">
                                <div class="acquis-efb-name">CSV Leads</div>
                                <div class="acquis-efb-desc"><?php esc_html_e( 'Universal format opens in Excel, Google Sheets, Numbers', 'acquisitionsuite' ); ?></div>
                            </div>
                            <span class="acquis-efb-arrow">→</span>
                        </button>
                        <button type="submit" name="action" value="acquis_export_xlsx" class="acquis-export-format-btn acquis-efb-xlsx">
                            <div class="acquis-efb-icon"><span class="dashicons dashicons-media-document acquis-dicon-lg"></span></div>
                            <div class="acquis-efb-body">
                                <div class="acquis-efb-name">Excel .xlsx Leads</div>
                                <div class="acquis-efb-desc"><?php esc_html_e( 'Native Excel with formatting, column widths, and header row', 'acquisitionsuite' ); ?></div>
                            </div>
                            <span class="acquis-efb-arrow">→</span>
                        </button>
                        <button type="submit" name="action" value="acquis_export_subs_csv" class="acquis-export-format-btn acquis-efb-csv">
                            <div class="acquis-efb-icon"><span class="dashicons dashicons-clipboard acquis-dicon-lg"></span></div>
                            <div class="acquis-efb-body">
                                <div class="acquis-efb-name">CSV Submissions</div>
                                <div class="acquis-efb-desc"><?php esc_html_e( 'All custom form submission values included', 'acquisitionsuite' ); ?></div>
                            </div>
                            <span class="acquis-efb-arrow">→</span>
                        </button>
                    </div>
                </div>
            </div>

        </div>
        </form>
        </div>
        <?php
    }

    // ══════════════════════════════════════════════════════════════════════════
    //  ██  SUBMISSIONS
    // ══════════════════════════════════════════════════════════════════════════
    public function render_submissions() {
        // phpcs:disable WordPress.Security.NonceVerification.Recommended -- All read-only display filters, no data mutation
        $page    = max( 1, absint( $_GET['acquis_page'] ?? 1 ) );
        $orderby = in_array( $_GET['orderby'] ?? '', array( 'id', 'created_at', 'full_name', 'email', 'total_score' ), true )
                   ? sanitize_key( $_GET['orderby'] ) : 'created_at';
        $order   = strtoupper( sanitize_key( $_GET['order'] ?? 'DESC' ) ) === 'ASC' ? 'ASC' : 'DESC';
        $search  = sanitize_text_field( wp_unslash( $_GET['s'] ?? '' ) );
        $view_id = absint( $_GET['view'] ?? 0 );
        // form_filter: '' = no filter, '0' = Default Form only, '<id>' = that custom form only, 'src:<slug>' = recorded by that add-on.
        $form_filter = isset( $_GET['form_filter'] ) ? ACQUIS_P3_DB::clean_form_filter( sanitize_text_field( wp_unslash( $_GET['form_filter'] ) ) ) : '';
        // phpcs:enable WordPress.Security.NonceVerification.Recommended

        // ── Lead detail view — all submissions for one lead ──────────────────
        $view_lead_id = absint( $_GET['view_lead'] ?? 0 );
        if ( $view_lead_id ) {
            global $wpdb;
            // Load lead record for header info
            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- custom plugin table, single-row lookup by ID
            $lead = $wpdb->get_row( $wpdb->prepare(
                'SELECT * FROM %i WHERE id = %d',
                $wpdb->prefix . 'acquis_leads',
                $view_lead_id
            ) );
            if ( ! $lead ) {
                echo '<div class="notice notice-error"><p>' . esc_html__( 'Lead not found.', 'acquisitionsuite' ) . '</p></div>';
                return;
            }
            $all_subs   = ACQUIS_P3_DB::get_submissions_for_lead( $view_lead_id );
            $latest_fvs = ACQUIS_P3_DB::get_latest_field_values_for_lead( $view_lead_id );
            $score      = class_exists( 'ACQUIS_Lead_Scorer' ) ? ACQUIS_Lead_Scorer::current_total( $view_lead_id ) : 0;
            $tier       = class_exists( 'ACQUIS_Lead_Scorer' ) ? ACQUIS_Lead_Scorer::score_label( $score ) : array( 'label' => '-', 'class' => 'acquis-badge-gray' );
            ?>
            <div class="wrap acquis-admin-wrap">
            <?php $this->page_header( '<span class="dashicons dashicons-clipboard acquis-dicon"></span> ' . esc_html__( 'Lead Submissions', 'acquisitionsuite' ) ); ?>
            <div style="margin-bottom:16px;">
                <a href="<?php echo esc_url( admin_url( 'admin.php?page=acquis-submissions' ) ); ?>" class="acquis-btn-secondary acquis-btn-sm">
                    ← <?php esc_html_e( 'All Submissions', 'acquisitionsuite' ); ?>
                </a>
            </div>

            <!-- Lead Header Card -->
            <div class="acquis-card" style="padding:20px 24px;margin-bottom:20px;">
                <div style="display:flex;align-items:center;gap:16px;flex-wrap:wrap;">
                    <div style="width:48px;height:48px;border-radius:50%;background:#eff6ff;display:flex;align-items:center;justify-content:center;flex-shrink:0;">
                        <span class="dashicons dashicons-admin-users" style="font-size:22px;width:22px;height:22px;color:#2563eb;"></span>
                    </div>
                    <div style="flex:1;min-width:0;">
                        <h2 style="margin:0 0 4px;font-size:18px;color:#0D1B4B;"><?php echo esc_html( $lead->full_name ?: esc_html__( 'Anonymous', 'acquisitionsuite' ) ); ?></h2>
                        <a href="mailto:<?php echo esc_attr( $lead->email ); ?>" style="color:#6b7280;font-size:13px;"><?php echo esc_html( $lead->email ); ?></a>
                    </div>
                    <div style="display:flex;gap:10px;align-items:center;flex-wrap:wrap;">
                        <span class="acquis-badge <?php echo esc_attr( $tier['class'] ); ?>"><?php echo esc_html( $tier['label'] ); ?></span>
                        <span style="font-size:13px;color:#6b7280;font-weight:600;"><?php echo absint( $score ); ?> pts</span>
                        <span style="font-size:12px;color:#9ca3af;"><?php echo esc_html( count( $all_subs ) ); ?> <?php esc_html_e( 'submissions', 'acquisitionsuite' ); ?></span>
                    </div>
                </div>
            </div>

            <div class="acquis-lead-detail-grid" style="display:grid;grid-template-columns:1fr 1fr;gap:20px;">

                <!-- Latest Info Card -->
                <div class="acquis-card" style="padding:0;overflow:hidden;">
                    <div style="padding:14px 20px;border-bottom:1px solid #f3f4f6;">
                        <h3 style="margin:0;font-size:14px;font-weight:700;color:#0D1B4B;">
                            <span class="dashicons dashicons-id-alt acquis-dicon-sm" style="color:#f97316;"></span>
                            <?php esc_html_e( 'Latest Info', 'acquisitionsuite' ); ?>
                        </h3>
                        <p style="margin:4px 0 0;font-size:12px;color:#9ca3af;"><?php esc_html_e( 'Most recent value submitted per field across all forms.', 'acquisitionsuite' ); ?></p>
                    </div>
                    <?php if ( $latest_fvs ) : ?>
                    <div class="acquis-table-scroll">
                    <table style="width:100%;border-collapse:collapse;table-layout:fixed;">
                        <tbody>
                        <?php foreach ( $latest_fvs as $fv ) : ?>
                        <tr style="border-bottom:1px solid #f9fafb;">
                            <th style="padding:9px 16px;font-size:11px;font-weight:700;color:#6b7280;text-align:left;text-transform:uppercase;letter-spacing:.04em;width:40%;background:#fafafa;word-break:break-word;">
                                <?php echo esc_html( $fv->field_label ?: $fv->field_key ); ?>
                            </th>
                            <td style="padding:9px 16px;font-size:13px;color:#111827;word-break:break-word;overflow-wrap:anywhere;">
                                <?php echo esc_html( $fv->value ); ?>
                            </td>
                        </tr>
                        <?php endforeach; ?>
                        </tbody>
                    </table>
                    </div>
                    <?php else : ?>
                    <div style="padding:30px;text-align:center;color:#9ca3af;font-size:13px;"><?php esc_html_e( 'No custom field values recorded.', 'acquisitionsuite' ); ?></div>
                    <?php endif; ?>
                </div>

                <!-- Files Engaged Card -->
                <div class="acquis-card" style="padding:0;overflow:hidden;">
                    <div style="padding:14px 20px;border-bottom:1px solid #f3f4f6;">
                        <h3 style="margin:0;font-size:14px;font-weight:700;color:#0D1B4B;">
                            <span class="dashicons dashicons-media-default acquis-dicon-sm" style="color:#f97316;"></span>
                            <?php esc_html_e( 'Files Engaged', 'acquisitionsuite' ); ?>
                        </h3>
                        <p style="margin:4px 0 0;font-size:12px;color:#9ca3af;"><?php esc_html_e( 'Every file this lead has accessed through any submission.', 'acquisitionsuite' ); ?></p>
                    </div>
                    <?php
                    // Build unique file list from submissions
                    $seen_files = array();
                    foreach ( $all_subs as $sub ) {
                        if ( $sub->file_id && ! isset( $seen_files[ $sub->file_id ] ) ) {
                            $seen_files[ $sub->file_id ] = array(
                                'name' => $sub->file_name ?: ( '#' . absint( $sub->file_id ) ),
                                'date' => $sub->created_at,
                            );
                        }
                    }
                    ?>
                    <?php if ( $seen_files ) : ?>
                    <div class="acquis-table-scroll">
                    <table style="width:100%;border-collapse:collapse;">
                        <tbody>
                        <?php foreach ( $seen_files as $fid => $fdata ) : ?>
                        <tr style="border-bottom:1px solid #f9fafb;">
                            <td style="padding:9px 16px;font-size:13px;">
                                <span class="dashicons dashicons-media-default acquis-dicon-sm" style="color:#f97316;margin-right:4px;"></span>
                                <?php echo esc_html( $fdata['name'] ); ?>
                            </td>
                            <td style="padding:9px 16px;font-size:11px;color:#9ca3af;text-align:right;white-space:nowrap;">
                                <?php echo esc_html( date_i18n( get_option( 'date_format' ), strtotime( $fdata['date'] ) ) ); ?>
                            </td>
                        </tr>
                        <?php endforeach; ?>
                        </tbody>
                    </table>
                    </div>
                    <?php else : ?>
                    <div style="padding:30px;text-align:center;color:#9ca3af;font-size:13px;"><?php esc_html_e( 'No files recorded.', 'acquisitionsuite' ); ?></div>
                    <?php endif; ?>
                </div>

            </div><!-- /grid -->

            <!-- All Submissions Timeline -->
            <div class="acquis-card" style="margin-top:20px;padding:0;overflow:hidden;">
                <div style="padding:14px 20px;border-bottom:1px solid #f3f4f6;display:flex;align-items:center;gap:10px;">
                    <h3 style="margin:0;font-size:14px;font-weight:700;color:#0D1B4B;">
                        <span class="dashicons dashicons-list-view acquis-dicon-sm" style="color:#f97316;"></span>
                        <?php esc_html_e( 'Submission History', 'acquisitionsuite' ); ?>
                    </h3>
                    <span class="acquis-badge acquis-badge-blue"><?php echo absint( count( $all_subs ) ); ?></span>
                </div>
                <?php if ( $all_subs ) : ?>
                <div class="acquis-table-scroll">
                <table style="width:100%;border-collapse:collapse;">
                    <thead>
                        <tr style="background:#f9fafb;">
                            <th style="padding:10px 16px;font-size:11px;font-weight:700;color:#6b7280;text-transform:uppercase;letter-spacing:.04em;text-align:left;"><?php esc_html_e( 'File', 'acquisitionsuite' ); ?></th>
                            <th style="padding:10px 16px;font-size:11px;font-weight:700;color:#6b7280;text-transform:uppercase;letter-spacing:.04em;text-align:left;"><?php esc_html_e( 'Form', 'acquisitionsuite' ); ?></th>
                            <th style="padding:10px 16px;font-size:11px;font-weight:700;color:#6b7280;text-transform:uppercase;letter-spacing:.04em;text-align:left;"><?php esc_html_e( 'Date', 'acquisitionsuite' ); ?></th>
                            <th style="padding:10px 16px;font-size:11px;font-weight:700;color:#6b7280;text-transform:uppercase;letter-spacing:.04em;text-align:left;"><?php esc_html_e( 'Field Values', 'acquisitionsuite' ); ?></th>
                        </tr>
                    </thead>
                    <tbody>
                    <?php foreach ( $all_subs as $sub ) :
                        $sub_values = ACQUIS_P3_DB::get_submission_values( $sub->id );
                    ?>
                    <tr style="border-top:1px solid #f3f4f6;vertical-align:top;">
                        <td style="padding:12px 16px;font-size:13px;font-weight:600;color:#0D1B4B;">
                            <?php echo esc_html( $sub->file_name ?: esc_html__( '(no file)', 'acquisitionsuite' ) ); ?>
                        </td>
                        <td style="padding:12px 16px;">
                            <span class="acquis-badge acquis-badge-blue" style="font-size:11px;">
                                <?php echo esc_html( ACQUIS_P3_DB::submission_form_label( $sub ) ); ?>
                            </span>
                        </td>
                        <td style="padding:12px 16px;font-size:12px;color:#6b7280;white-space:nowrap;">
                            <?php echo esc_html( date_i18n( get_option( 'date_format' ) . ' ' . get_option( 'time_format' ), strtotime( $sub->created_at ) ) ); ?>
                        </td>
                        <td style="padding:12px 16px;">
                            <?php if ( $sub_values ) : ?>
                            <div style="display:flex;flex-wrap:wrap;gap:4px;">
                                <?php foreach ( $sub_values as $sv ) : ?>
                                <span style="font-size:11px;background:#f3f4f6;border-radius:4px;padding:2px 8px;color:#374151;max-width:100%;word-break:break-word;overflow-wrap:anywhere;">
                                    <strong style="color:#6b7280;"><?php echo esc_html( $sv->field_label ?: $sv->field_key ); ?>:</strong>
                                    <?php echo esc_html( $sv->value ); ?>
                                </span>
                                <?php endforeach; ?>
                            </div>
                            <?php else : ?>
                            <span style="color:#9ca3af;font-size:12px;"><?php esc_html_e( 'No field values', 'acquisitionsuite' ); ?></span>
                            <?php endif; ?>
                        </td>
                    </tr>
                    <?php endforeach; ?>
                    </tbody>
                </table>
                </div>
                <?php else : ?>
                <div style="padding:40px;text-align:center;color:#9ca3af;font-size:13px;"><?php esc_html_e( 'No submissions found.', 'acquisitionsuite' ); ?></div>
                <?php endif; ?>
            </div>

            </div><?php /* .wrap */ ?>
            <?php return;
        }

        // ── Legacy single-submission detail view (still supported via ?view=ID) ─
        // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only display filter, no data mutation
        $view_id = absint( $_GET['view'] ?? 0 );
        if ( $view_id ) {
            $values     = ACQUIS_P3_DB::get_submission_values( $view_id );
            $sub        = ACQUIS_P3_DB::get_submissions( 1, 1, array( 'id' => $view_id ) );
            $sub        = $sub ? $sub[0] : null;
            $lead_files = $sub ? ACQUIS_P3_DB::get_files_for_lead( $sub->lead_id ) : array();
            ?>
            <div class="wrap acquis-admin-wrap">
            <?php $this->page_header( '<span class="dashicons dashicons-clipboard acquis-dicon"></span> ' . esc_html__(  'Submission Detail', 'acquisitionsuite' ) ); ?>

            <div style="margin-bottom:16px;">
                <a href="<?php echo esc_url( remove_query_arg( array( 'view', 'acquis_page' ) ) ); ?>" class="acquis-btn-secondary acquis-btn-sm">
                    ← <?php esc_html_e( 'All Submissions', 'acquisitionsuite' ); ?>
                </a>
            </div>

            <div class="acquis-sub-detail-card">
                <div class="acquis-sub-detail-head">
                    <div class="acquis-sub-detail-icon"><span class="dashicons dashicons-clipboard acquis-dicon-lg"></span></div>
                    <div>
                        <div class="acquis-sub-detail-title">
                            <?php echo $sub ? esc_html( $sub->full_name ?: 'Submission #' . absint( $view_id ) ) : esc_html( 'Submission #' . absint( $view_id ) ); ?>
                        </div>
                        <div class="acquis-sub-detail-meta">
                            <?php if ( $sub ) : ?>
                            <?php echo esc_html( $sub->email ); ?> &bull;
                            <?php echo esc_html( date_i18n( get_option( 'date_format' ) . ' ' . get_option( 'time_format' ), strtotime( $sub->created_at ) ) ); ?> &bull;
                            <span class="acquis-badge acquis-badge-blue"><?php echo esc_html( ACQUIS_P3_DB::submission_form_label( $sub ) ); ?></span>
                            <?php endif; ?>
                        </div>
                    </div>
                </div>

                <?php if ( $values ) : ?>
                <div class="acquis-table-scroll">
                <table class="acquis-sub-fields-table">
                    <tbody>
                    <?php foreach ( $values as $v ) : ?>
                    <tr>
                        <th>
                            <?php echo esc_html( $v->field_label ?: $v->field_key ); ?>
                            <div class="acquis-sub-field-key"><?php echo esc_html( $v->field_key ); ?></div>
                        </th>
                        <td><?php echo esc_html( $v->value ); ?></td>
                    </tr>
                    <?php endforeach; ?>
                    </tbody>
                </table>
                </div>
                <?php else : ?>
                <div style="padding:40px;text-align:center;color:var(--p3-gray-400);">
                    <div style="font-size:36px;margin-bottom:12px;"><span class="dashicons dashicons-email acquis-dicon-lg"></span></div>
                    <p style="font-size:13px;margin:0;"><?php esc_html_e( 'No custom field values for this submission.', 'acquisitionsuite' ); ?></p>
                </div>
                <?php endif; ?>
            </div>

            <?php if ( $lead_files ) : ?>
            <div class="acquis-card" style="margin-top:20px;">
                <div style="padding:14px 20px;border-bottom:1px solid var(--p3-gray-100);">
                    <h3 style="margin:0;font-size:14px;color:var(--p3-navy);">
                        <span class="dashicons dashicons-media-default acquis-dicon"></span>
                        <?php /* translators: %d: number of files */ printf( esc_html__( 'Files Engaged (%d)', 'acquisitionsuite' ), (int) count( $lead_files ) ); ?>
                    </h3>
                    <p style="margin:4px 0 0;font-size:12px;color:var(--p3-gray-400);"><?php esc_html_e( 'All files this lead has accessed through any form submission.', 'acquisitionsuite' ); ?></p>
                </div>
                <div class="acquis-table-scroll">
                <table style="width:100%;border-collapse:collapse;">
                    <thead>
                        <tr style="background:var(--p3-gray-50);">
                            <th style="padding:10px 16px;font-size:11px;text-align:left;color:var(--p3-gray-500);text-transform:uppercase;letter-spacing:.04em;"><?php esc_html_e( 'File', 'acquisitionsuite' ); ?></th>
                            <th style="padding:10px 16px;font-size:11px;text-align:left;color:var(--p3-gray-500);text-transform:uppercase;letter-spacing:.04em;width:180px;"><?php esc_html_e( 'First Accessed', 'acquisitionsuite' ); ?></th>
                        </tr>
                    </thead>
                    <tbody>
                    <?php foreach ( $lead_files as $lf ) : ?>
                    <tr style="border-top:1px solid var(--p3-gray-100);">
                        <td style="padding:10px 16px;font-size:13px;">
                            <span class="dashicons dashicons-media-default acquis-dicon-sm" style="color:var(--p3-orange);"></span>
                            <?php echo esc_html( $lf->file_name ?: 'File #' . $lf->file_id ); ?>
                        </td>
                        <td style="padding:10px 16px;font-size:12px;color:var(--p3-gray-500);">
                            <?php echo esc_html( date_i18n( get_option('date_format') . ' ' . get_option('time_format'), strtotime($lf->created_at) ) ); ?>
                        </td>
                    </tr>
                    <?php endforeach; ?>
                    </tbody>
                </table>
                </div>
            </div>
            <?php endif; ?>
            </div><?php /* .wrap.acquis-admin-wrap */ ?>
            <?php return;
        }

        // ── List view — grouped by email ─────────────────────────────────────
        $per_page  = 25;
        $allowed_ob = array( 'last_seen', 'full_name', 'email', 'submission_count', 'total_score' );
        $group_ob   = in_array( $orderby, $allowed_ob, true ) ? $orderby : 'last_seen';
        $subs       = ACQUIS_P3_DB::get_submissions_grouped( $per_page, $page, $search, $group_ob, $order, $form_filter );
        $total      = ACQUIS_P3_DB::count_submissions_grouped( $search, $form_filter );
        $pages      = max( 1, (int) ceil( $total / $per_page ) );

        $sort_url = function( $col ) use ( $group_ob, $order ) {
            $new_order = ( $col === $group_ob && $order === 'ASC' ) ? 'DESC' : 'ASC';
            return add_query_arg( array( 'orderby' => $col, 'order' => $new_order, 'acquis_page' => 1 ) );
        };
        $sort_arrow = function( $col ) use ( $group_ob, $order ) {
            if ( $col !== $group_ob ) return '';
            return $order === 'ASC' ? ' ▲' : ' ▼';
        };
        $all_forms = ACQUIS_P3_DB::get_forms();
        ?>
        <div class="wrap acquis-admin-wrap">
        <?php $this->page_header(
            '<span class="dashicons dashicons-clipboard acquis-dicon"></span> ' . esc_html__( 'Submissions', 'acquisitionsuite' ),
            '<span class="acquis-count-pill">' . number_format( $total ) . ' total</span>'
        ); ?>

        <!-- Controls bar -->
        <div class="acquis-table-controls">
            <form method="get" style="display:contents;">
                <input type="hidden" name="page" value="acquis-submissions">
                <div class="acquis-search-wrap">
                    <div class="acquis-search-input-wrap">
                        <span class="dashicons dashicons-search acquis-search-icon"></span>
                        <input type="search" name="s" value="<?php echo esc_attr( $search ); ?>"
                               class="acquis-search-input" placeholder="<?php esc_attr_e( 'Search name or email…', 'acquisitionsuite' ); ?>">
                    </div>
                    <select name="form_filter" class="acquis-auto-submit">
                        <option value=""><?php esc_html_e( 'All forms', 'acquisitionsuite' ); ?></option>
                        <option value="0" <?php selected( $form_filter, '0' ); ?>><?php esc_html_e( 'Default Form', 'acquisitionsuite' ); ?></option>
                        <?php foreach ( ACQUIS_P3_DB::get_submission_sources() as $src_slug ) : ?>
                        <option value="<?php echo esc_attr( 'src:' . $src_slug ); ?>" <?php selected( $form_filter, 'src:' . $src_slug ); ?>><?php echo esc_html( ACQUIS_P3_DB::source_label( $src_slug ) ); ?></option>
                        <?php endforeach; ?>
                        <?php foreach ( $all_forms as $f ) : ?>
                        <option value="<?php echo absint( $f->id ); ?>" <?php selected( $form_filter, (string) $f->id ); ?>><?php echo esc_html( $f->title ); ?></option>
                        <?php endforeach; ?>
                    </select>
                    <button type="submit" class="acquis-btn-secondary acquis-btn-sm"><?php esc_html_e( 'Search', 'acquisitionsuite' ); ?></button>
                    <?php if ( $search || '' !== $form_filter ) : ?>
                    <a href="<?php echo esc_url( admin_url( 'admin.php?page=acquis-submissions' ) ); ?>" class="acquis-btn-ghost acquis-btn-sm">
                        <span class="dashicons dashicons-no-alt acquis-dicon"></span> <?php esc_html_e( 'Clear', 'acquisitionsuite' ); ?>
                    </a>
                    <?php endif; ?>
                </div>
            </form>
            <div class="acquis-controls-right">
                <form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>">
                    <?php wp_nonce_field( 'acquis_export' ); ?>
                    <input type="hidden" name="action" value="acquis_export_subs_csv">
                    <?php if ( $search ) : ?><input type="hidden" name="s" value="<?php echo esc_attr( $search ); ?>"><?php endif; ?>
                    <?php if ( '' !== $form_filter ) : ?><input type="hidden" name="form_filter" value="<?php echo esc_attr( $form_filter ); ?>"><?php endif; ?>
                    <button type="submit" class="acquis-btn-secondary acquis-btn-sm">
                        <span class="dashicons dashicons-download acquis-dicon"></span> <?php esc_html_e( 'Export CSV', 'acquisitionsuite' ); ?>
                    </button>
                </form>
            </div>
        </div>

        <!-- Grouped Submissions Table — one row per unique email/lead -->
        <div class="acquis-subs-table-card">
            <?php if ( $subs ) : ?>
            <div style="overflow-x:auto;">
            <table class="acquis-subs-table">
                <thead>
                    <tr>
                        <th><a href="<?php echo esc_url( $sort_url( 'full_name' ) ); ?>"><?php esc_html_e( 'Name', 'acquisitionsuite' ); ?><?php echo $sort_arrow( 'full_name' ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- $sort_arrow() always returns '', ' ▲', or ' ▼' (see definition above) ?></a></th>
                        <th><a href="<?php echo esc_url( $sort_url( 'email' ) ); ?>"><?php esc_html_e( 'Email', 'acquisitionsuite' ); ?><?php echo $sort_arrow( 'email' ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- $sort_arrow() always returns '', ' ▲', or ' ▼' ?></a></th>
                        <th><?php esc_html_e( 'Files Engaged', 'acquisitionsuite' ); ?></th>
                        <th><a href="<?php echo esc_url( $sort_url( 'submission_count' ) ); ?>"><?php esc_html_e( 'Submissions', 'acquisitionsuite' ); ?><?php echo $sort_arrow( 'submission_count' ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- $sort_arrow() always returns '', ' ▲', or ' ▼' ?></a></th>
                        <th><a href="<?php echo esc_url( $sort_url( 'total_score' ) ); ?>"><?php esc_html_e( 'Score', 'acquisitionsuite' ); ?><?php echo $sort_arrow( 'total_score' ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- $sort_arrow() always returns '', ' ▲', or ' ▼' ?></a></th>
                        <th><a href="<?php echo esc_url( $sort_url( 'last_seen' ) ); ?>"><?php esc_html_e( 'Last Seen', 'acquisitionsuite' ); ?><?php echo $sort_arrow( 'last_seen' ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- $sort_arrow() always returns '', ' ▲', or ' ▼' ?></a></th>
                        <th></th>
                    </tr>
                </thead>
                <tbody>
                <?php foreach ( $subs as $s ) :
                    $score = absint( $s->total_score );
                    $tier  = class_exists( 'ACQUIS_Lead_Scorer' ) ? ACQUIS_Lead_Scorer::score_label( $score ) : array( 'label' => '-', 'class' => 'acquis-badge-gray' );
                    $file_count = absint( $s->file_count );
                ?>
                <tr>
                    <td class="acquis-cell-name" style="font-weight:600;color:#0D1B4B;"><?php echo esc_html( $s->full_name ?: esc_html__( 'Anonymous', 'acquisitionsuite' ) ); ?></td>
                    <td class="acquis-cell-email">
                        <a href="mailto:<?php echo esc_attr( $s->email ); ?>"><?php echo esc_html( $s->email ); ?></a>
                    </td>
                    <td class="acquis-cell-files" style="max-width:280px;">
                        <?php if ( $s->files_engaged ) : ?>
                            <span style="font-size:12px;color:#374151;line-height:1.5;"><?php echo esc_html( $s->files_engaged ); ?></span>
                            <?php if ( $file_count > 1 ) : ?>
                            <span class="acquis-badge" style="margin-left:4px;background:#f0fdf4;color:#16a34a;border:1px solid #bbf7d0;font-size:10px;">
                                <?php echo absint( $file_count ); ?> <?php esc_html_e( 'files', 'acquisitionsuite' ); ?>
                            </span>
                            <?php endif; ?>
                        <?php else : ?>
                            <span style="color:#9ca3af;font-size:12px;"><?php esc_html_e( '—', 'acquisitionsuite' ); ?></span>
                        <?php endif; ?>
                    </td>
                    <td class="acquis-cell-count" style="text-align:center;">
                        <span class="acquis-badge acquis-badge-blue"><?php echo absint( $s->submission_count ); ?></span>
                    </td>
                    <td class="acquis-cell-score">
                        <span class="acquis-badge <?php echo esc_attr( $tier['class'] ); ?>"><?php echo esc_html( $tier['label'] ); ?></span>
                        <span class="acquis-pts" style="font-size:11px;color:#9ca3af;margin-left:3px;"><?php echo absint( $score ); ?>pts</span>
                    </td>
                    <td class="acquis-cell-date" style="font-size:12px;color:#6b7280;white-space:nowrap;">
                        <?php echo esc_html( date_i18n( get_option( 'date_format' ) . ' ' . get_option( 'time_format' ), strtotime( $s->last_seen ) ) ); ?>
                    </td>
                    <td class="acquis-cell-actions" style="white-space:nowrap;">
                        <a href="<?php echo esc_url( add_query_arg( array( 'view_lead' => absint( $s->lead_id ), 'page' => 'acquis-submissions' ), admin_url( 'admin.php' ) ) ); ?>"
                           class="button button-small"><?php esc_html_e( 'View', 'acquisitionsuite' ); ?></a>
                    </td>
                </tr>
                <?php endforeach; ?>
                </tbody>
            </table>
            </div>

            <!-- Pagination -->
            <?php if ( $pages > 1 ) :
                $start = max( 1, $page - 2 );
                $end   = min( $pages, $page + 2 );
            ?>
            <div class="acquis-pagination">
                <?php if ( $page > 1 ) : ?>
                <a href="<?php echo esc_url( add_query_arg( array( 'acquis_page' => $page - 1, 'orderby' => $orderby, 'order' => $order ) ) ); ?>" class="acquis-page-btn">← <?php esc_html_e( 'Prev', 'acquisitionsuite' ); ?></a>
                <?php endif; ?>
                <?php if ( $start > 1 ) : ?><span class="acquis-page-ellipsis">…</span><?php endif; ?>
                <?php for ( $i = $start; $i <= $end; $i++ ) : ?>
                <a href="<?php echo esc_url( add_query_arg( array( 'acquis_page' => $i, 'orderby' => $orderby, 'order' => $order ) ) ); ?>"
                   class="acquis-page-btn <?php echo esc_attr( $i === $page ? 'acquis-page-active' : '' ); ?>">
                    <?php echo absint( $i ); ?>
                </a>
                <?php endfor; ?>
                <?php if ( $end < $pages ) : ?><span class="acquis-page-ellipsis">…</span><?php endif; ?>
                <?php if ( $page < $pages ) : ?>
                <a href="<?php echo esc_url( add_query_arg( array( 'acquis_page' => $page + 1, 'orderby' => $orderby, 'order' => $order ) ) ); ?>" class="acquis-page-btn"><?php esc_html_e( 'Next', 'acquisitionsuite' ); ?> →</a>
                <?php endif; ?>
                <span class="acquis-pagination-info">
                    <?php /* translators: 1: current page, 2: total pages, 3: total count */ printf( esc_html__( 'Page %1$d of %2$d of %3$s total', 'acquisitionsuite' ), absint( $page ), absint( $pages ), number_format( $total ) ); ?>
                </span>
            </div>
            <?php endif; ?>

            <?php else : ?>
            <div class="acquis-table-empty">
                <span class="acquis-table-empty-icon"><span class="dashicons dashicons-email acquis-dicon-lg"></span></span>
                <p><?php $search ? esc_html_e( 'No submissions match your search.', 'acquisitionsuite' ) : esc_html_e( 'No submissions yet. Share your locked file links to start capturing leads.', 'acquisitionsuite' ); ?></p>
                <?php if ( $search ) : ?>
                <a href="<?php echo esc_url( admin_url( 'admin.php?page=acquis-submissions' ) ); ?>" class="acquis-btn-secondary acquis-btn-sm" style="margin-top:12px;">Clear search</a>
                <?php endif; ?>
            </div>
            <?php endif; ?>
        </div>
        </div>
        <?php
    }

    // ══════════════════════════════════════════════════════════════════════════
    //  AJAX HANDLERS (unchanged logic, bespoke validation kept)
    // ══════════════════════════════════════════════════════════════════════════
    private function verify() {
        check_ajax_referer( 'acquis_p3_nonce', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( null, 403 );
    }

    public function ajax_save_form() {
        if ( ! current_user_can( 'manage_options' ) ) {
            wp_send_json_error( array( 'message' => 'Forbidden.' ), 403 );
        }

        $this->verify();
        // phpcs:disable WordPress.Security.NonceVerification.Missing -- nonce already verified by $this->verify() above; every $_POST access below is past that check
        $raw_form_id = sanitize_key( wp_unslash( $_POST['form_id'] ?? '' ) );
        $form_id     = absint( $raw_form_id );

        // Create a new form only when the caller explicitly passes form_id='new'.
        // Any other missing/zero value when fields are also present is an error —
        // it means data-form-id was stripped (e.g. wp_kses allowlist too tight)
        // and we must NOT silently create a duplicate form.
        if ( $raw_form_id === 'new' || ( $form_id === 0 && ! isset( $_POST['fields'] ) ) ) {
            $title   = sanitize_text_field( wp_unslash( $_POST['title'] ?? 'New Form' ) );
            $steps   = absint( wp_unslash( $_POST['steps'] ?? 1 ) );
            // Multi-step is Pro-only; the builder disables this input in
            // Lite, but enforce it server-side too rather than trust that.
            if ( ! self::is_pro_active() ) {
                $steps = 1;
            }
            $purpose = sanitize_key( wp_unslash( $_POST['purpose'] ?? 'file_gate' ) );
            $purpose = in_array( $purpose, array( 'file_gate', 'appointment', 'registration', 'custom' ), true ) ? $purpose : 'file_gate';
            $form_id = ACQUIS_P3_DB::create_form( $title, '', $steps, array(
                'purpose'    => $purpose,
                'standalone' => ( 'file_gate' !== $purpose ),
            ) );
            wp_send_json_success( array( 'form_id' => $form_id, 'redirect' => admin_url( 'admin.php?page=acquis-form-builder&edit=' . $form_id ) ) );
        }

        // If form_id is still 0 here (fields present but no valid form_id),
        // it means the UI sent a field save without a valid form — refuse to proceed.
        if ( $form_id === 0 ) {
            wp_send_json_error( array( 'message' => 'Invalid form ID. Please reload the page and try again.' ) );
        }

        // Build the update payload from ONLY the keys actually present in
        // this request. This matters because ajax_save_form is called from
        // several different places in the UI the full Form/Settings/Email
        // tabs send everything, but quick actions like "add a field from
        // the palette" only send `fields`. Treating every possible key as
        // present (defaulting missing ones to '' / 'New Form') would silently
        // blank out the title and settings every time a field was added,
        // which is the root cause of "form settings not saving".
        $update = array();

        if ( isset( $_POST['title'] ) ) {
            $update['title'] = sanitize_text_field( wp_unslash( $_POST['title'] ) );
        }
        if ( isset( $_POST['steps'] ) ) {
            $update['steps'] = self::is_pro_active() ? absint( wp_unslash( $_POST['steps'] ) ) : 1;
        }

        $settings_keys_present = array_intersect(
            array( 'modal_title', 'modal_subtitle', 'header_bg', 'title_color', 'subtitle_color', 'name_field', 'email_field', 'purpose', 'display_style', 'button_label', 'modal_submit_label' ),
            array_keys( $_POST )
        );
        if ( ! empty( $settings_keys_present ) ) {
            $settings = array();
            if ( isset( $_POST['modal_title'] ) )    $settings['modal_title']    = sanitize_text_field( wp_unslash( $_POST['modal_title'] ) );
            if ( isset( $_POST['modal_subtitle'] ) ) $settings['modal_subtitle'] = sanitize_text_field( wp_unslash( $_POST['modal_subtitle'] ) );
            if ( isset( $_POST['header_bg'] ) )      $settings['header_bg']      = sanitize_hex_color( wp_unslash( $_POST['header_bg'] ) ) ?: '#0D1B4B';
            if ( isset( $_POST['title_color'] ) )    $settings['title_color']    = sanitize_hex_color( wp_unslash( $_POST['title_color'] ) ) ?: '#ffffff';
            if ( isset( $_POST['subtitle_color'] ) ) $settings['subtitle_color'] = sanitize_hex_color( wp_unslash( $_POST['subtitle_color'] ) ) ?: '#ffffff';
            if ( isset( $_POST['name_field'] ) )     $settings['name_field']     = sanitize_key( wp_unslash( $_POST['name_field'] ) );
            if ( isset( $_POST['email_field'] ) )    $settings['email_field']    = sanitize_key( wp_unslash( $_POST['email_field'] ) );
            // ── Universal forms (3.6.0): purpose/display style/standalone ──
            if ( isset( $_POST['purpose'] ) ) {
                $purpose = sanitize_key( wp_unslash( $_POST['purpose'] ) );
                $settings['purpose']    = in_array( $purpose, array( 'file_gate', 'appointment', 'registration', 'custom' ), true ) ? $purpose : 'file_gate';
                $settings['standalone'] = ( 'file_gate' !== $settings['purpose'] );
            }
            if ( isset( $_POST['display_style'] ) ) {
                $display_style = sanitize_key( wp_unslash( $_POST['display_style'] ) );
                // Floating Button is Pro-only. Filterable so Pro can extend
                // the allow-list without Lite needing to know Pro's option
                // values.
                $allowed_styles = apply_filters( 'acquis_form_display_styles', array( 'embedded', 'popup' ) );
                $settings['display_style'] = in_array( $display_style, $allowed_styles, true ) ? $display_style : 'popup';
            }
            if ( isset( $_POST['button_label'] ) ) {
                $settings['button_label'] = sanitize_text_field( wp_unslash( $_POST['button_label'] ) );
            }
            if ( isset( $_POST['modal_submit_label'] ) ) {
                $settings['modal_submit_label'] = sanitize_text_field( wp_unslash( $_POST['modal_submit_label'] ) );
            }
            $update['settings'] = $settings;
        }

        // Email tab: subject + full HTML override + on/off toggle.
        // Sent only by the Email tab's save action.
        if ( isset( $_POST['email_enabled'] ) || isset( $_POST['email_subject'] ) || isset( $_POST['email_template'] ) ) {
            $email_settings = array();
            if ( isset( $_POST['email_enabled'] ) )  $email_settings['enabled']  = ! empty( $_POST['email_enabled'] ) ? 1 : 0;
            if ( isset( $_POST['email_subject'] ) )   $email_settings['subject']  = sanitize_text_field( wp_unslash( $_POST['email_subject'] ) );
            // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- sanitized via self::sanitize_email_template()
            if ( isset( $_POST['email_template'] ) )  $email_settings['template'] = self::sanitize_email_template( wp_unslash( $_POST['email_template'] ) );
            $update['settings'] = array_merge( $update['settings'] ?? array(), array( 'email' => $email_settings ) );
        }

        if ( ! empty( $update ) ) {
            ACQUIS_P3_DB::update_form( $form_id, $update );
        }

        // Let Pro save its own additional per-form settings (e.g. paid-form
        // config) from this same POST without Lite needing to know
        // anything about Pro's fields. Nonce/capability already verified
        // above before this method could be reached.
        do_action( 'acquis_save_form_extra', $form_id );

        $rendered_cards = array();
        $is_pro_active = self::is_pro_active();
        // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- type/emptiness check only; each element sanitized via sanitize_field_payload() below
        if ( ! empty( $_POST['fields'] ) && is_array( $_POST['fields'] ) ) {
            foreach ( wp_unslash( (array) $_POST['fields'] ) as $field_data ) {
                $clean_field = self::sanitize_field_payload( $field_data );
                // A field's own Step # is as Pro-gated as the form-level
                // Steps count it belongs to — see the matching note on the
                // Step # input in render_field_card().
                if ( ! $is_pro_active && isset( $clean_field['step'] ) ) {
                    $clean_field['step'] = 1;
                }
                $saved_id = ACQUIS_P3_DB::save_field( $form_id, $clean_field );
                // Return rendered card HTML so JS can inject it without a page reload
                if ( $saved_id ) {
                    $field_obj = ACQUIS_P3_DB::get_field( $saved_id );
                    if ( $field_obj ) {
                        $rendered_cards[] = array(
                            'id'   => $saved_id,
                            'html' => $this->render_field_card( $field_obj ),
                        );
                    }
                }
            }
        }
        wp_send_json_success( array( 'form_id' => $form_id, 'cards' => $rendered_cards ) );
        // phpcs:enable WordPress.Security.NonceVerification.Missing
    }

    /**
     * Sanitize a field payload coming from the builder. Unlike a flat
     * sanitize_text_field() map, this preserves arrays (options, validation,
     * conditions) instead of mangling them, since those are meant to be
     * JSON-encodable structures, not plain strings.
     *
     * The builder JS (readPanel() in acquis-p3.js) sends 'options' and
     * 'conditions' as JSON.stringify()'d strings, not nested arrays, over
     * the wire — they must be json_decode()'d back into PHP structures
     * here. Without this, save_field()'s own wp_json_encode() would
     * re-encode the already-JSON string a second time, and the next load
     * would only decode one layer back to a plain string, which
     * ACQUIS_Form_Renderer then rendered as a single option whose label
     * was the raw, un-decoded JSON text.
     */
    private static function sanitize_field_payload( $field_data ) {
        if ( ! is_array( $field_data ) ) return array();
        $clean = array();
        foreach ( $field_data as $key => $val ) {
            $key = sanitize_key( $key );

            if ( in_array( $key, array( 'options', 'conditions' ), true ) && is_string( $val ) ) {
                $decoded = json_decode( $val, true );
                $val     = is_array( $decoded ) ? $decoded : array();
            }

            if ( 'options' === $key && is_array( $val ) ) {
                $clean_options = array();
                foreach ( $val as $opt ) {
                    if ( is_array( $opt ) ) {
                        $clean_options[] = array(
                            'label' => sanitize_text_field( (string) ( $opt['label'] ?? '' ) ),
                            'value' => sanitize_text_field( (string) ( $opt['value'] ?? '' ) ),
                        );
                    } else {
                        $clean_options[] = sanitize_text_field( (string) $opt );
                    }
                }
                $clean[ $key ] = $clean_options;
            } elseif ( 'conditions' === $key && is_array( $val ) ) {
                $clean_conditions = array();
                if ( ! empty( $val['rules'] ) && is_array( $val['rules'] ) ) {
                    $clean_rules = array();
                    foreach ( $val['rules'] as $rule ) {
                        if ( ! is_array( $rule ) ) continue;
                        $clean_rules[] = array(
                            'field'    => sanitize_text_field( (string) ( $rule['field'] ?? '' ) ),
                            'operator' => sanitize_key( $rule['operator'] ?? 'equals' ),
                            'value'    => sanitize_text_field( (string) ( $rule['value'] ?? '' ) ),
                        );
                    }
                    $clean_conditions['rules'] = $clean_rules;
                }
                $clean[ $key ] = $clean_conditions;
            } elseif ( is_array( $val ) ) {
                // Any other nested array structure — sanitize scalar leaves only.
                $clean_inner = array();
                foreach ( $val as $ik => $iv ) {
                    $clean_inner[ sanitize_key( $ik ) ] = is_scalar( $iv ) ? sanitize_text_field( wp_unslash( (string) $iv ) ) : $iv;
                }
                $clean[ $key ] = $clean_inner;
            } else {
                $clean[ $key ] = sanitize_text_field( wp_unslash( (string) $val ) );
            }
        }
        return $clean;
    }

    /**
     * Sanitize a full custom HTML email template the same way the global
     * template editor does (see ACQUIS_Admin::handle_save_settings()), so
     * per-form templates support the same full-document HTML (head/style/
     * table-based layouts) that email design typically requires.
     */
    private static function sanitize_email_template( $html ) {
        // Allow email-safe HTML only. No <style> blocks, no <html>/<head>/<body>.
        // Email templates must use inline styles on individual elements.
        return wp_kses( $html, array_merge( wp_kses_allowed_html( 'post' ), array(
            'table'  => array( 'width' => true, 'cellpadding' => true, 'cellspacing' => true, 'style' => true, 'align' => true, 'bgcolor' => true ),
            'td'     => array( 'align' => true, 'style' => true, 'colspan' => true, 'rowspan' => true, 'bgcolor' => true ),
            'tr'     => array( 'style' => true, 'bgcolor' => true ),
            'th'     => array( 'style' => true ),
            'img'    => array( 'src' => true, 'alt' => true, 'style' => true, 'width' => true, 'height' => true, 'border' => true ),
            'a'      => array( 'href' => true, 'style' => true, 'target' => true, 'rel' => true ),
            'center' => array( 'style' => true ),
            'font'   => array( 'style' => true, 'color' => true, 'size' => true ),
        ) ) );
    }

    public function ajax_delete_form() {
        if ( ! current_user_can( 'manage_options' ) ) {
            wp_send_json_error( array( 'message' => 'Forbidden.' ), 403 );
        }

        $this->verify();
        // phpcs:ignore WordPress.Security.NonceVerification.Missing -- nonce already verified by $this->verify() above
        ACQUIS_P3_DB::delete_form( absint( $_POST['form_id'] ?? 0 ) );
        wp_send_json_success();
    }

    public function ajax_duplicate_form() {
        if ( ! current_user_can( 'manage_options' ) ) {
            wp_send_json_error( array( 'message' => 'Forbidden.' ), 403 );
        }

        $this->verify();
        // phpcs:ignore WordPress.Security.NonceVerification.Missing -- nonce already verified by $this->verify() above
        $new_id = ACQUIS_P3_DB::duplicate_form( absint( $_POST['form_id'] ?? 0 ) );
        wp_send_json_success( array( 'new_id' => $new_id, 'redirect' => admin_url( 'admin.php?page=acquis-form-builder&edit=' . $new_id ) ) );
    }

    public function ajax_reorder_fields() {
        if ( ! current_user_can( 'manage_options' ) ) {
            wp_send_json_error( array( 'message' => 'Forbidden.' ), 403 );
        }

        $this->verify();
        // phpcs:ignore WordPress.Security.NonceVerification.Missing -- nonce already verified by $this->verify() above
        ACQUIS_P3_DB::reorder_fields( absint( $_POST['form_id'] ?? 0 ), array_map( 'absint', (array) ( $_POST['field_ids'] ?? array() ) ) );
        wp_send_json_success();
    }

    public function ajax_delete_field() {
        if ( ! current_user_can( 'manage_options' ) ) {
            wp_send_json_error( array( 'message' => 'Forbidden.' ), 403 );
        }

        $this->verify();
        // phpcs:ignore WordPress.Security.NonceVerification.Missing -- nonce already verified by $this->verify() above
        ACQUIS_P3_DB::delete_field( absint( $_POST['field_id'] ?? 0 ) );
        wp_send_json_success();
    }

    /**
     * Send a test email for the Email tab's "Send Test" button. Uses the
     * form's saved per-form template if it has one enabled, otherwise the
     * global default same resolution logic as a real send.
     */
    public function ajax_send_form_test_email() {
        if ( ! current_user_can( 'manage_options' ) ) {
            wp_send_json_error( array( 'message' => 'Forbidden.' ), 403 );
        }

        $this->verify();
        // phpcs:ignore WordPress.Security.NonceVerification.Missing -- nonce already verified by $this->verify() above
        $form_id = absint( $_POST['form_id'] ?? 0 );
        // phpcs:ignore WordPress.Security.NonceVerification.Missing -- nonce already verified by $this->verify() above
        $to      = sanitize_email( wp_unslash( $_POST['to'] ?? wp_get_current_user()->user_email ) );

        if ( ! $to || ! is_email( $to ) ) {
            wp_send_json_error( array( 'message' => __( 'Please enter a valid email address.', 'acquisitionsuite' ) ) );
        }
        if ( ! class_exists( 'ACQUIS_Email_Engine' ) ) {
            wp_send_json_error( array( 'message' => __( 'Email engine unavailable.', 'acquisitionsuite' ) ) );
        }

        $sent = ACQUIS_Email_Engine::send_test( $to, $form_id );

        if ( $sent ) {
            wp_send_json_success( array( 'message' => __( 'Test email sent!', 'acquisitionsuite' ) ) );
        }
        wp_send_json_error( array( 'message' => __( 'wp_mail() returned false check your SMTP configuration.', 'acquisitionsuite' ) ) );
    }

    public function ajax_get_analytics() {
        if ( ! current_user_can( 'manage_options' ) ) {
            wp_send_json_error( array( 'message' => 'Forbidden.' ), 403 );
        }

        $this->verify();
        // phpcs:ignore WordPress.Security.NonceVerification.Missing -- nonce already verified by $this->verify() above
        wp_send_json_success( ACQUIS_P3_DB::get_analytics_summary( absint( $_POST['days'] ?? 30 ) ) );
    }


    public function ajax_delete_submission() {
        if ( ! current_user_can( 'manage_options' ) ) {
            wp_send_json_error( array( 'message' => 'Forbidden.' ), 403 );
        }

        $this->verify();
        global $wpdb;
        // phpcs:ignore WordPress.Security.NonceVerification.Missing -- nonce already verified by $this->verify() above
        $sub_id = absint( $_POST['id'] ?? 0 );
        if ( ! $sub_id ) wp_send_json_error();
        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- $wpdb->delete() on custom plugin tables
        $wpdb->delete( $wpdb->prefix . 'acquis_submission_values', array( 'submission_id' => $sub_id ) );
        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- $wpdb->delete() on custom plugin tables
        $wpdb->delete( $wpdb->prefix . 'acquis_submissions', array( 'id' => $sub_id ) );
        wp_send_json_success();
    }


    public function handle_export_csv() {
        if ( ! current_user_can( 'manage_options' ) ) wp_die( 'Unauthorized', 403 );
        check_admin_referer( 'acquis_export' );
        ACQUIS_Export_Engine::export_csv( array(
            'date_from' => sanitize_text_field( wp_unslash( $_POST['date_from'] ?? '' ) ),
            'date_to'   => sanitize_text_field( wp_unslash( $_POST['date_to']   ?? '' ) ),
            'form_id'   => absint( $_POST['form_id'] ?? 0 ),
        ) );
    }

    public function handle_export_xlsx() {
        if ( ! current_user_can( 'manage_options' ) ) wp_die( 'Unauthorized', 403 );
        check_admin_referer( 'acquis_export' );
        ACQUIS_Export_Engine::export_xlsx( array(
            'date_from' => sanitize_text_field( wp_unslash( $_POST['date_from'] ?? '' ) ),
            'date_to'   => sanitize_text_field( wp_unslash( $_POST['date_to']   ?? '' ) ),
            'form_id'   => absint( $_POST['form_id'] ?? 0 ),
        ) );
    }

    public function handle_export_leads_csv() {
        if ( ! current_user_can( 'manage_options' ) ) wp_die( 'Unauthorized', 403 );
        check_admin_referer( 'acquis_export' );
        ACQUIS_Export_Engine::export_csv( array(
            'date_from' => sanitize_text_field( wp_unslash( $_POST['date_from'] ?? '' ) ),
            'date_to'   => sanitize_text_field( wp_unslash( $_POST['date_to']   ?? '' ) ),
        ) );
    }

    public function handle_export_subs_csv() {
        if ( ! current_user_can( 'manage_options' ) ) wp_die( 'Unauthorized', 403 );
        check_admin_referer( 'acquis_export' );
        $search      = sanitize_text_field( wp_unslash( $_POST['s'] ?? '' ) );
        $form_filter = isset( $_POST['form_filter'] ) ? ACQUIS_P3_DB::clean_form_filter( sanitize_text_field( wp_unslash( $_POST['form_filter'] ) ) ) : '';
        $filters     = '' !== $form_filter ? array( 'form_id' => $form_filter ) : array();
        $subs        = ACQUIS_P3_DB::get_submissions( 9999, 1, $filters, 'created_at', 'DESC', $search );
        $filename = 'acquisitionsuite-submissions-' . gmdate( 'Y-m-d' ) . '.csv';
        header( 'Content-Type: text/csv; charset=UTF-8' );
        header( 'Content-Disposition: attachment; filename="' . $filename . '"' );
        header( 'Pragma: no-cache' );
        // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_fopen -- php://output is a PHP stream wrapper, not a real file; WP_Filesystem cannot open it
        $fp = fopen( 'php://output', 'w' );
        fprintf( $fp, chr(0xEF) . chr(0xBB) . chr(0xBF) );
        fputcsv( $fp, array( 'ID', 'Name', 'Email', 'File', 'Form ID', 'Score', 'Tier', 'Source Page', 'UTM Source', 'UTM Medium', 'UTM Campaign', 'Date' ) );
        foreach ( $subs as $s ) {
            $score = absint( $s->total_score ?? 0 );
            $tier  = class_exists( 'ACQUIS_Lead_Scorer' ) ? ACQUIS_Lead_Scorer::score_label( $score ) : array( 'label' => '-', 'class' => 'acquis-badge-gray' );
            fputcsv( $fp, array(
                $s->id, $s->full_name ?? '', $s->email ?? '', $s->file_name ?? '',
                $s->form_id ?? '', $score, $tier['label'],
                $s->source_post ? get_the_title( $s->source_post ) : '',
                $s->utm_source ?? '', $s->utm_medium ?? '', $s->utm_campaign ?? '',
                $s->created_at ?? '',
            ) );
        }
        // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_fclose -- pairs with the php://output stream opened above
        fclose( $fp );
        exit;
    }

    // ── Helpers ───────────────────────────────────────────────────────────────
    public static function get_field_type_definitions() {
        $i = '<span class="dashicons dashicons-%s acquis-dicon"></span>';
        return array(
            'text'     => array( 'label' => 'Text',         'icon' => sprintf( $i, 'editor-textcolor' ) ),
            'email'    => array( 'label' => 'Email',         'icon' => sprintf( $i, 'email-alt' ) ),
            'phone'    => array( 'label' => 'Phone',         'icon' => sprintf( $i, 'phone' ) ),
            'url'      => array( 'label' => 'Link',          'icon' => sprintf( $i, 'admin-links' ) ),
            'number'   => array( 'label' => 'Number',        'icon' => sprintf( $i, 'editor-ol' ) ),
            'textarea' => array( 'label' => 'Textarea',      'icon' => sprintf( $i, 'edit' ) ),
            'dropdown' => array( 'label' => 'Dropdown',      'icon' => sprintf( $i, 'arrow-down-alt2' ) ),
            'radio'    => array( 'label' => 'Radio',         'icon' => sprintf( $i, 'marker' ) ),
            'checkbox' => array( 'label' => 'Checkbox',      'icon' => sprintf( $i, 'yes' ) ),
            'date'     => array( 'label' => 'Date',          'icon' => sprintf( $i, 'calendar-alt' ) ),
            'country'  => array( 'label' => 'Country',       'icon' => sprintf( $i, 'admin-site-alt3' ) ),
            'hidden'   => array( 'label' => 'Hidden Field',  'icon' => sprintf( $i, 'visibility' ) ),
        );
    }
}