<?php
/**
 * The options engine: the shared addon_boss_* primitives that make a product
 * offer choices.
 *
 * Everything here is part of the plugin proper and present in every build. It
 * holds the option-set store and schema, the field-type registry, the
 * sanitiser, the value and fee resolvers, the field renderer, virtual
 * variations and the grid split.
 */

defined( 'ABSPATH' ) || exit;

// =================================================================
// Field schema - types, def sanitiser, option parser. Lifted UNCHANGED from
// the earlier bundle-side layout; shared by the bundle personalisation
// surface and the standalone product-options surface.
// =================================================================

/**
 * The add-on field types.
 *
 * The engine's own types are listed here; a type whose machinery lives in a
 * module (a file field needs somewhere for the file to go, a measured size
 * field the measurement maths) registers itself on the filter from that
 * module, carrying its own callbacks:
 *   sanitize_def  the type's extra config, raw row to stored def
 *   resolve       a submitted value to { value, display, ... } or null
 *   render        the type's input markup
 *   seed          the reverse of resolve, for the cart edit loop: a frozen
 *                 snapshot back into the posted shape its input expects (a
 *                 measured size stores "3x2" and posts w and h). A type
 *                 without one seeds its stored value string, which is the
 *                 posted shape for every plain type.
 *   menu          wording for the product panel's "Add a field" menu
 *   own_fee_mode  a type whose charge is its own maths names the display mode
 *                 its inputs wear instead of the shared fee modes
 *
 * A stored field of a type nothing registers is inert rather than deleted:
 * never rendered, priced or required, its saved config untouched, so it
 * returns whole the moment the module that owns it is installed.
 *
 * @return array<string,array{label:string,has_options?:bool,per_char?:bool,display_only?:bool}>
 */
function addon_boss_personalisation_field_types(): array {
	$own = array(
		'text'     => array( 'label' => __( 'Text', 'addon-boss' ), 'per_char' => true, 'menu' => __( 'Name or text to print', 'addon-boss' ) ),
		'textarea' => array( 'label' => __( 'Message', 'addon-boss' ), 'per_char' => true, 'menu' => __( 'Message', 'addon-boss' ) ),
		'number'   => array( 'label' => __( 'Number', 'addon-boss' ), 'menu' => __( 'Number', 'addon-boss' ) ),
		'date'     => array( 'label' => __( 'Date', 'addon-boss' ) ),
		'time'     => array( 'label' => __( 'Time', 'addon-boss' ) ),
		'select'   => array( 'label' => __( 'Dropdown', 'addon-boss' ), 'has_options' => true ),
		'checkbox' => array( 'label' => __( 'Tick box', 'addon-boss' ), 'menu' => __( 'Tick box', 'addon-boss' ) ),
		'color'    => array( 'label' => __( 'Colour', 'addon-boss' ), 'menu' => __( 'Colour', 'addon-boss' ), 'color_options' => true, 'rule_answer' => 'addon_boss_colour_rule_answer' ),
		// "Name your price" is what this is CALLED, everywhere it is sold. It was
		// "Their price", which is our shorthand and nobody else's: it names the
		// figure rather than the thing, so a merchant scanning the field list has
		// to open it to find out what it does. The trade already has a name for a
		// box the shopper types an amount into, and a merchant who wants one
		// searches for that name, not for ours. (His find, 7 Sept.)
		'price'    => array( 'label' => __( 'Name your price', 'addon-boss' ), 'menu' => __( 'Name your price', 'addon-boss' ), 'own_amount' => true ),
		'email'    => array( 'label' => __( 'Email', 'addon-boss' ), 'menu' => __( 'Email address', 'addon-boss' ) ),
		'url'      => array( 'label' => __( 'Web address', 'addon-boss' ), 'menu' => __( 'Web address', 'addon-boss' ) ),
		'hidden'   => array( 'label' => __( 'Hidden', 'addon-boss' ), 'menu' => __( 'Hidden value', 'addon-boss' ), 'admin_only' => true ),
		'heading'  => array( 'label' => __( 'Heading', 'addon-boss' ), 'display_only' => true, 'menu' => __( 'Heading', 'addon-boss' ) ),
		'html'     => array( 'label' => __( 'Info block', 'addon-boss' ), 'display_only' => true, 'menu' => __( 'Info block', 'addon-boss' ) ),
	);
	return (array) apply_filters( 'addon_boss_field_types', $own );
}

/**
 * The fee modes a field can charge by, as mode => menu wording. The engine's
 * own two are a flat fee for each item and a fee charged once per order line;
 * richer modes register from the module that implements their maths, which
 * answers the addon_boss_fee_modes_fee filter with the amount they resolve to.
 *
 * A stored mode nothing registers charges nothing and is never rewritten, so
 * the field keeps its input and its price comes back with the module.
 *
 * @return array<string,string>
 */
function addon_boss_fee_modes(): array {
	$own = array(
		'once' => __( 'Flat fee', 'addon-boss' ),
		'unit' => __( 'Quantity based', 'addon-boss' ),
	);
	return (array) apply_filters( 'addon_boss_fee_modes', $own );
}

/**
 * The same modes as short phrases, for the closed row's summary line, where
 * the mode reads AFTER an amount: "+£2.50 for each" is a sentence, while
 * "+£2.50 Quantity based" is a label read aloud. The menu takes the
 * category's names (Flat fee, Quantity based); this keeps the reading.
 *
 * @return array<string,string> mode key to phrase.
 */
function addon_boss_fee_mode_shorts(): array {
	$own = array(
		'once' => __( 'once', 'addon-boss' ),
		'unit' => __( 'for each', 'addon-boss' ),
	);
	return (array) apply_filters( 'addon_boss_fee_mode_shorts', $own );
}

/**
 * What ONE charge mode does, in a sentence a merchant can act on.
 *
 * The Charge control used to carry a single sentence explaining "for each" and
 * "once" together, sitting full-width above the controls. It was a wall of text
 * AND incomplete: the menu offers five modes, and the three it never mentioned
 * are exactly the ones nobody guesses. A merchant only ever needs the one they
 * have picked, which is the rule the repeatable panel already follows.
 *
 * Filterable for the same reason the menu is: a module that registers a mode
 * says what it does here, so the note can never fall behind the menu.
 *
 * @param string $mode The stored fee mode.
 * @return string Empty when nothing has claimed the mode.
 */
function addon_boss_fee_mode_note( string $mode ): string {
	$own = array(
		'unit' => __( 'Charged per item: two shirts, twice.', 'addon-boss' ),
		'once' => __( 'Charged once, however many they buy.', 'addon-boss' ),
	);
	$notes = (array) apply_filters( 'addon_boss_fee_mode_notes', $own );
	return isset( $notes[ $mode ] ) ? (string) $notes[ $mode ] : '';
}

/**
 * Sanitise raw personalisation field-def rows (the admin repeater's POST shape)
 * into stored field definitions. The ONE sanitiser shared by the per-item save
 * and the whole-order save, so both apply identical rules (types, labels,
 * unique keys, requirement, fees, options, limits).
 *
 * Idempotent on its own output: re-sanitising a STORED def (which carries
 * required/require_when instead of the raw `require`) preserves the requirement,
 * so an import or a wizard-edit round trip never drops it. Raw rows carry
 * neither key, so per-item save behaviour is byte-identical.
 *
 * @param array $raw_addons Raw field rows.
 * @return array[] Clean stored field definitions.
 */
function addon_boss_personalisation_sanitize_field_defs( array $raw_addons ): array {
	$types = addon_boss_personalisation_field_types();
	$clean = array();
	$used  = array();

	foreach ( $raw_addons as $f ) {
		if ( ! is_array( $f ) ) {
			continue;
		}
		$type = sanitize_key( $f['type'] ?? '' );
		if ( '' === $type ) {
			continue;
		}
		// A type this build has no module for is stored, not judged: the shared
		// core below is sanitised as usual and, at the end, every other key the
		// row carries rides through as submitted. What arrives here has already
		// been leaf-sanitised at the request boundary, and nothing on this build
		// ever renders, prices or requires such a field, so the config simply
		// waits, whole, for the module that owns it.
		$known = isset( $types[ $type ] );
		$label = sanitize_text_field( $f['label'] ?? '' );
		// An info/HTML block carries its body in `content` and can stand with no
		// label (the body speaks for itself), so it survives the empty-label drop.
		$content = ( 'html' === $type ) ? wp_kses_post( (string) ( $f['content'] ?? '' ) ) : '';
		if ( '' === $label && '' === $content ) {
			continue; // a field with nothing to show is meaningless
		}

		// Stable, unique key per item. Prefer a submitted key, else derive.
		$key = sanitize_title( $f['key'] ?? '' ) ?: sanitize_title( $label );
		if ( '' === $key ) {
			$key = 'field';
		}
		$base = $key;
		$n    = 2;
		while ( isset( $used[ $key ] ) ) {
			$key = $base . '-' . $n++;
		}
		$used[ $key ] = true;

		$def = array(
			'key'   => $key,
			'label' => $label,
			'type'  => $type,
		);

		if ( ! empty( $types[ $type ]['display_only'] ) ) {
			if ( 'html' === $type && '' !== $content ) {
				$def['content'] = $content; // the sanitised HTML body
			}
			// An info block's label does two jobs: it names the row in the editor
			// and, until a merchant says otherwise, it heads the body on the page.
			// Those come apart here, because plenty of blocks are a sentence of
			// guidance with nothing to head.
			//
			// HIDING is the key that has to be present, never showing. The editor
			// posts show_title through a hidden zero paired with the tick box, so
			// unticking arrives as a fact; a STORED def carries hide_title and no
			// show_title at all, and reading that absence as "hide" would strip the
			// heading off every block an import or a wizard edit passes through.
			if ( 'html' === $type ) {
				$bb_hide_title = ! empty( $f['hide_title'] )
					|| ( isset( $f['show_title'] ) && ! (int) $f['show_title'] );
				if ( $bb_hide_title ) {
					$def['hide_title'] = true;
				}
			}
			$clean[] = $def; // heading / info block: nothing else to store
			continue;
		}

		// The merchant's own sentence under the field, and the category's own name
		// for it: Gravity Forms, WPForms, Product Add-Ons, PPOM, Ninja Forms and
		// Meta Box all call this control Description, it is WordPress's own admin
		// idiom (`<p class="description">`) and it is already the argument name in
		// WooCommerce's own wp_*_input helpers. ACF's "Instructions" is that one
		// plugin's dialect; even the field builder that copies the label stores it
		// under `description` underneath.
		//
		// Stored only when written, like every optional string in these defs, so a
		// cleared box removes the key and the storefront falls silent again. Plain
		// text on purpose: this is guidance, not a place to build markup, and it
		// shares a slot with lines the engine WORKS OUT (a number's fence, a date's
		// earliest day) which are escaped as text too.
		$bb_desc = sanitize_text_field( (string) ( $f['description'] ?? '' ) );
		if ( '' !== $bb_desc ) {
			$def['description'] = $bb_desc;
		}

		$def['scope'] = ( ( $f['scope'] ?? 'unit' ) === 'item' ) ? 'item' : 'unit';
		// Requirement: optional (default) / always / only once personalising. A
		// re-sanitised STORED def carries required/require_when instead of the raw
		// `require`; derive from them so an import or wizard-edit round trip keeps
		// the rule. Raw rows have neither key, so per-item save is byte-identical.
		$require = $f['require'] ?? '';
		if ( '' === $require && ! empty( $f['required'] ) ) {
			$require = 'always';
		} elseif ( '' === $require && ( $f['require_when'] ?? '' ) === 'engaged' ) {
			$require = 'engaged';
		}
		$require              = in_array( $require, array( 'always', 'engaged' ), true ) ? $require : '';
		$def['required']      = ( 'always' === $require );
		$def['require_when']  = ( 'engaged' === $require ) ? 'engaged' : '';
		$def['fee']           = max( 0.0, (float) wc_format_decimal( (string) ( $f['fee'] ?? 0 ) ) );
		// The mode is kept as stored even when this build has no module for it:
		// an unregistered mode charges nothing (the fee resolver has no maths to
		// answer with), and a save must never reprice a field to "for each"
		// just because the module that priced it is not installed today.
		$bb_fee_mode     = sanitize_key( (string) ( $f['fee_mode'] ?? '' ) );
		$def['fee_mode'] = '' === $bb_fee_mode ? 'unit' : $bb_fee_mode;

		// Repeatable: the shopper fills this field more than once on one line.
		// 'add' lets them add as many as they want (up to a maximum); 'per_item'
		// asks once for every unit bought, so a run of six shirts asks for six
		// names. Anything else, including the absent key every field built before
		// this carries, means the field asks exactly once, as it always has.
		//
		// Stored WITHOUT asking whether the plan is active, deliberately: gating
		// the save would rewrite a merchant's configuration the moment a licence
		// lapsed and a field was re-saved. The capability is asked at the two
		// places it can be honoured, the editor's panel and the storefront, so a
		// free build asks once and leaves the setting alone for the plan's return.
		$repeat = (string) ( $f['repeat'] ?? '' );
		if ( in_array( $repeat, array( 'add', 'per_item' ), true ) ) {
			$def['repeat'] = $repeat;
			// A ceiling on 'add' so a shopper cannot open a thousand cards. Absent
			// or nonsense means the built-in ceiling, never unlimited.
			$rmax = (int) ( $f['repeat_max'] ?? 0 );
			if ( $rmax > 0 ) {
				$def['repeat_max'] = min( ADDON_BOSS_REPEAT_CEILING, $rmax );
			}
			// What each one is called on the page, in the cart and on the order:
			// "Shirt %d", "Name %d". The %d is filled with the instance number; a
			// label without one still reads sensibly because the number is
			// appended when it is missing.
			$rlabel = sanitize_text_field( (string) ( $f['repeat_label'] ?? '' ) );
			if ( '' !== $rlabel ) {
				$def['repeat_label'] = $rlabel;
			}
		}

		// Which variations this field applies to. Empty means every one, which is
		// what every field built before this existed resolves to, so nothing has
		// to be migrated and a simple product is unaffected.
		$only = array();
		foreach ( (array) ( $f['only_variations'] ?? array() ) as $vid ) {
			$vid = absint( $vid );
			if ( $vid && ! in_array( $vid, $only, true ) ) {
				$only[] = $vid;
			}
		}
		if ( $only ) {
			$def['only_variations'] = $only;
		}

		if ( in_array( $type, array( 'text', 'textarea' ), true ) ) {
			$def['maxlength'] = max( 0, (int) ( $f['maxlength'] ?? 0 ) );
		}
		if ( 'select' === $type ) {
			// A dropdown prices by the chosen option. A field-level fee here was
			// promised on three surfaces and charged on none; it never survives.
			$def['fee'] = 0.0;
		}
		if ( 'number' === $type ) {
			// Bounds are optional; the zero floor at resolve is not. Stored
			// only when set, like every optional fence in these defs.
			foreach ( array( 'num_min', 'num_max' ) as $bb_bk ) {
				if ( '' !== (string) ( $f[ $bb_bk ] ?? '' ) && is_numeric( $f[ $bb_bk ] ) ) {
					$def[ $bb_bk ] = (float) $f[ $bb_bk ];
				}
			}
			// Counting things, not measuring them. Stored only when ticked, so
			// every field built before this keeps taking decimals.
			if ( ! empty( $f['num_whole'] ) ) {
				$def['num_whole'] = true;
			}
			if ( isset( $def['num_min'], $def['num_max'] ) && $def['num_max'] < $def['num_min'] ) {
				// A ceiling below the floor is nonsense; the floor wins.
				unset( $def['num_max'] );
			}
		}
		if ( 'color' === $type ) {
			$def['options'] = addon_boss_personalisation_parse_color_options( $f['options'] ?? '' );
			// The custom pick is an extra swatch the merchant switches ON; its own
			// charge is separate because a colour match costs work the presets do not.
			$def['allow_custom'] = ! empty( $f['allow_custom'] );
			$def['custom_fee']   = max( 0.0, (float) wc_format_decimal( (string) ( $f['custom_fee'] ?? 0 ) ) );
			$def['fee']          = 0.0; // the swatches carry the money; a field-level fee never applies.
		}
		if ( 'price' === $type ) {
			// The shopper's amount IS the charge, so the field's own fee input never
			// applies; min/max/suggested bound it and the chips are typed as one
			// comma list, capped at five so the row stays a row.
			$def['fee'] = 0.0;
			foreach ( array( 'price_min', 'price_max', 'price_suggested' ) as $bb_pk ) {
				$bb_pv = trim( (string) ( $f[ $bb_pk ] ?? '' ) );
				if ( '' !== $bb_pv && is_numeric( wc_format_decimal( $bb_pv ) ) ) {
					$def[ $bb_pk ] = max( 0.0, (float) wc_format_decimal( $bb_pv ) );
				}
			}
			if ( isset( $def['price_min'], $def['price_max'] ) && $def['price_max'] < $def['price_min'] ) {
				unset( $def['price_max'] ); // a ceiling under the floor is a typo, not a rule.
			}
			$bb_amounts = array();
			foreach ( explode( ',', (string) ( $f['price_amounts'] ?? '' ) ) as $bb_a ) {
				$bb_a = trim( $bb_a );
				if ( '' !== $bb_a && is_numeric( wc_format_decimal( $bb_a ) ) && (float) wc_format_decimal( $bb_a ) > 0 ) {
					$bb_amounts[] = (float) wc_format_decimal( $bb_a );
				}
			}
			if ( $bb_amounts ) {
				$def['price_amounts'] = array_slice( array_values( array_unique( $bb_amounts ) ), 0, 5 );
			}
		}
		if ( 'hidden' === $type ) {
			// Invisible things carry no requirement and no charge, ever: a shopper
			// cannot complete what they cannot see, and invisible money is exactly
			// the pattern this plugin exists to refuse.
			$def['required'] = false;
			unset( $def['require_when'] );
			$def['fee']      = 0.0;
			$def['value']    = sanitize_text_field( (string) ( $f['value'] ?? '' ) );
			$def['url_fill'] = ! empty( $f['url_fill'] );
		}
	// A field's on-photo placement is the drawing module's data: it registers
	// the sanitiser for its own config on this seam. With nothing registered a
	// stored placement rides through a save untouched (the row reposts it
	// whole), so it returns with its module.
	$bb_preview = apply_filters( 'addon_boss_sanitize_field_preview', is_array( $f['preview'] ?? null ) ? $f['preview'] : array(), $f, $type );
	if ( is_array( $bb_preview ) && $bb_preview ) {
		$def['preview'] = $bb_preview;
	}
		if ( ! empty( $types[ $type ]['has_options'] ) ) {
			$def['options'] = addon_boss_personalisation_parse_options( $f['options'] ?? '' );
		}
		// A type's own extra config (the unit a size is measured in, an upload
		// field's accept rules) is sanitised by the callback its module
		// registered alongside the type.
		if ( $known && is_callable( $types[ $type ]['sanitize_def'] ?? null ) ) {
			$def = (array) call_user_func( $types[ $type ]['sanitize_def'], $def, $f );
		} elseif ( isset( ADDON_BOSS_SCHEDULING_KEYS[ $type ] ) ) {
			// A scheduling field's own rules (a date's lead time, cut-off, closed
			// days and rush ladder; a time's hours, slot step and priced windows)
			// belong to a module this build may not have. They ride through a save
			// untouched rather than being wiped, on exactly the reasoning the
			// repeat setting above is stored on: a licence that lapses and a field
			// that is re-saved must not cost a shop its whole calendar or its
			// opening hours. The editor reposts them on hidden carriers; nothing
			// here reads or honours them.
			//
			// The list is keyed by type rather than written out per field because
			// the date field carried this protection from the day it shipped and
			// the time field, written days later, did not: a merchant on a lapsed
			// licence lost every window on the first save. One table, and the next
			// scheduling type cannot repeat it.
			foreach ( ADDON_BOSS_SCHEDULING_KEYS[ $type ] as $bb_dk ) {
				if ( isset( $f[ $bb_dk ] ) ) {
					$def[ $bb_dk ] = map_deep( $f[ $bb_dk ], 'sanitize_text_field' );
				}
			}
		}
		if ( ! $known ) {
			// The rest of an unregistered type's row is that module's data, not
			// ours to rewrite; it rides through as submitted, minus the raw-only
			// control keys the shared core above already consumed.
			$def = array_merge(
				array_diff_key(
					$f,
					array(
						'require'         => 1,
						'label'           => 1,
						'key'             => 1,
						'type'            => 1,
						'fee'             => 1,
						'fee_mode'        => 1,
						'scope'           => 1,
						'required'        => 1,
						'require_when'    => 1,
						'only_variations' => 1,
						'maxlength'       => 1,
						'description'     => 1,
						'preview'         => 1,
						'options'         => 1,
						'content'         => 1,
					)
				),
				$def
			);
		}

		$clean[] = $def;
	}

	return $clean;
}

/**
 * Sanitise the structured option rows from the admin repeater. Each row is
 * [ label, fee ]; the stored value (slug) is derived from the label so the
 * merchant never types one. Keys are kept unique within the field.
 *
 * @return array<int,array{value:string,label:string,fee:float}>
 */
function addon_boss_personalisation_parse_options( $raw ): array {
	$out = array();
	if ( ! is_array( $raw ) ) {
		return $out;
	}
	$used = array();
	foreach ( $raw as $row ) {
		if ( ! is_array( $row ) ) {
			continue;
		}
		$label = sanitize_text_field( $row['label'] ?? '' );
		if ( '' === $label ) {
			continue;
		}
		$value = sanitize_title( $row['value'] ?? '' ) ?: sanitize_title( $label );
		if ( '' === $value ) {
			$value = 'option';
		}
		$base = $value;
		$n    = 2;
		while ( isset( $used[ $value ] ) ) {
			$value = $base . '-' . $n++;
		}
		$used[ $value ] = true;
		$out[]          = array(
			'value' => $value,
			'label' => $label,
			'fee'   => max( 0.0, (float) wc_format_decimal( (string) ( $row['fee'] ?? 0 ) ) ),
		);
	}
	return $out;
}

// =================================================================
// Value + fee resolution (the money math). Lifted UNCHANGED from
// the earlier bundle-side layout; shared by both surfaces.
// =================================================================

/**
 * Sanitise the structured colour rows from the admin repeater. Each row is
 * [ label, color, fee ]; the slug derives from the label like every option.
 * A row without a real hex colour is dropped rather than stored blank, so a
 * stored swatch can always be painted.
 *
 * @return array<int,array{value:string,label:string,color:string,fee:float}>
 */
function addon_boss_personalisation_parse_color_options( $raw ): array {
	$out = array();
	if ( ! is_array( $raw ) ) {
		return $out;
	}
	$used = array();
	foreach ( $raw as $row ) {
		if ( ! is_array( $row ) ) {
			continue;
		}
		$label = sanitize_text_field( $row['label'] ?? '' );
		$hex   = addon_boss_normalise_hex( (string) ( $row['color'] ?? '' ) );
		if ( '' === $label || '' === $hex ) {
			continue;
		}
		$value = sanitize_title( $row['value'] ?? '' ) ?: sanitize_title( $label );
		if ( '' === $value ) {
			$value = 'colour';
		}
		$base = $value;
		$n    = 2;
		while ( isset( $used[ $value ] ) ) {
			$value = $base . '-' . $n++;
		}
		$used[ $value ] = true;
		$out[]          = array(
			'value' => $value,
			'label' => $label,
			'color' => $hex,
			'fee'   => max( 0.0, (float) wc_format_decimal( (string) ( $row['fee'] ?? 0 ) ) ),
		);
	}
	return $out;
}

/**
 * One hex shape everywhere: #RRGGBB lower-case, or '' for anything else.
 * Accepts a missing #, and the #RGB short form browsers never send but
 * people paste.
 */
function addon_boss_normalise_hex( string $raw ): string {
	$raw = strtolower( trim( $raw ) );
	if ( '' !== $raw && '#' !== $raw[0] ) {
		$raw = '#' . $raw;
	}
	if ( preg_match( '/^#([0-9a-f]{3})$/', $raw, $m ) ) {
		return '#' . $m[1][0] . $m[1][0] . $m[1][1] . $m[1][1] . $m[1][2] . $m[1][2];
	}
	return preg_match( '/^#[0-9a-f]{6}$/', $raw ) ? $raw : '';
}

/**
 * Sanitise a raw submitted value against a field definition.
 *
 * A WP_Error is the third answer, for a value the shopper DID type that the
 * field cannot accept (an amount under the minimum, an address that is not
 * an address). null stays "left empty": dropping typed-but-wrong input
 * silently would either lose their answer or, on a priced field, their money.
 *
 * @return array{value:string,display:string,opt_fee?:float}|WP_Error|null  null = empty.
 */
function addon_boss_personalisation_resolve_value( array $def, $raw, $product = null ) {
	$bb_type  = (string) ( $def['type'] ?? 'text' );
	$bb_types = addon_boss_personalisation_field_types();
	// A type that registered its own resolver (a measured size, an upload)
	// answers through it. A type nothing registered resolves to nothing, the
	// same as any other value the engine has no code to read.
	if ( is_callable( $bb_types[ $bb_type ]['resolve'] ?? null ) ) {
		return call_user_func( $bb_types[ $bb_type ]['resolve'], $def, $raw );
	}
	switch ( $bb_type ) {
		case 'textarea':
			$val = trim( sanitize_textarea_field( (string) $raw ) );
			if ( '' === $val ) {
				return null;
			}
			$bb_over = addon_boss_personalisation_too_long( $val, $def );
			if ( $bb_over instanceof WP_Error ) {
				return $bb_over;
			}
			return array( 'value' => $val, 'display' => $val );

		case 'text':
			$val = trim( sanitize_text_field( (string) $raw ) );
			if ( '' === $val ) {
				return null;
			}
			$bb_over = addon_boss_personalisation_too_long( $val, $def );
			if ( $bb_over instanceof WP_Error ) {
				return $bb_over;
			}
			return array( 'value' => $val, 'display' => $val );

		case 'number':
			if ( null === $raw || '' === $raw ) {
				return null;
			}
			if ( ! is_numeric( $raw ) ) {
				// Typed but not a number. This used to resolve to null, so somebody
				// who wrote "two" got silence while somebody who wrote 1e9 got a
				// sentence. One wrong answer, one behaviour.
				return new WP_Error(
					'addon_boss',
					sprintf(
						/* translators: %s: the field's label */
						__( '%s: enter a number.', 'addon-boss' ),
						(string) ( $def['label'] ?? '' )
					)
				);
			}
			$bb_num = (float) $raw;
			// The floor is zero even with no bounds set: a typed -3 on a
			// per-value charge priced NEGATIVE money before this. Typed but
			// out of the fence speaks, never silently drops.
			$bb_lo = isset( $def['num_min'] ) ? max( 0.0, (float) $def['num_min'] ) : 0.0;
			$bb_hi = isset( $def['num_max'] ) ? (float) $def['num_max'] : null;
			if ( $bb_num < $bb_lo || ( null !== $bb_hi && $bb_num > $bb_hi ) ) {
				$bb_words = null !== $bb_hi
					/* translators: 1: the field's label, 2: the lowest allowed number, 3: the highest allowed number */
					? sprintf( __( '%1$s: enter a number between %2$s and %3$s.', 'addon-boss' ), (string) ( $def['label'] ?? '' ), (string) ( $bb_lo + 0 ), (string) ( $bb_hi + 0 ) )
					/* translators: 1: the field's label, 2: the lowest allowed number */
					: sprintf( __( '%1$s: enter a number of at least %2$s.', 'addon-boss' ), (string) ( $def['label'] ?? '' ), (string) ( $bb_lo + 0 ) );
				return new WP_Error( 'bundle_boss', $bb_words );
			}
			if ( ! empty( $def['num_whole'] ) && floor( $bb_num ) !== $bb_num ) {
				// "7.5 stems" is orderable without this. A shop that COUNTS things
				// ticks the box; one that measures in metres leaves it clear.
				return new WP_Error(
					'addon_boss',
					sprintf(
						/* translators: %s: the field's label */
						__( '%s: enter a whole number.', 'addon-boss' ),
						(string) ( $def['label'] ?? '' )
					)
				);
			}
			$val = (string) ( $raw + 0 );
			return array( 'value' => $val, 'display' => $val );

		case 'date':
			// A real calendar date, not merely something date-shaped: 2026-02-31
			// passes a regex and fails checkdate, and letting it through would put
			// an impossible delivery date on a real order.
			$raw = trim( sanitize_text_field( (string) $raw ) );
			if ( ! preg_match( '/^(\d{4})-(\d{2})-(\d{2})$/', $raw, $dm ) ) {
				return null;
			}
			if ( ! checkdate( (int) $dm[2], (int) $dm[3], (int) $dm[1] ) ) {
				return null;
			}
			// Shown in the store's own date format, stored ISO so it sorts and
			// travels safely.
			$fmt = function_exists( 'wc_date_format' ) ? wc_date_format() : get_option( 'date_format', 'Y-m-d' );
			return array( 'value' => $raw, 'display' => date_i18n( $fmt, strtotime( $raw . ' 12:00:00' ) ) );

		case 'time':
			$raw = trim( sanitize_text_field( (string) $raw ) );
			// Browsers send H:i, and H:i:s when seconds are enabled.
			if ( ! preg_match( '/^([01]\d|2[0-3]):([0-5]\d)(?::[0-5]\d)?$/', $raw, $tm ) ) {
				return null;
			}
			$hhmm = $tm[1] . ':' . $tm[2];
			$tfmt = function_exists( 'wc_time_format' ) ? wc_time_format() : get_option( 'time_format', 'H:i' );
			return array( 'value' => $hhmm, 'display' => date_i18n( $tfmt, strtotime( '1970-01-01 ' . $hhmm . ':00' ) ) );

		case 'select':
			$bb_typed = trim( (string) $raw );
			$slug     = sanitize_title( $bb_typed );
			if ( '' === $slug ) {
				return null;
			}
			foreach ( (array) ( $def['options'] ?? array() ) as $opt ) {
				// The sanitised form OR the value exactly as stored, for the same
				// reason as the colour swatches above: a value that arrived by a
				// road other than the editor can carry a character sanitize_title
				// rewrites, and no answer would ever match it again.
				$stored = (string) ( $opt['value'] ?? '' );
				if ( '' !== $stored && ( $stored === $slug || $stored === $bb_typed ) ) {
					return array( 'value' => $stored, 'display' => $opt['label'] ?? $stored, 'opt_fee' => (float) ( $opt['fee'] ?? 0 ) );
				}
			}
			return null; // not a defined option

		case 'checkbox':
			return empty( $raw ) ? null : array( 'value' => '1', 'display' => __( 'Yes', 'addon-boss' ) );

		case 'email':
			$val   = trim( sanitize_text_field( (string) $raw ) );
			$bb_at = strrpos( $val, '@' );
			if ( false !== $bb_at ) {
				// The domain is case-blind; the part before the @ is theirs to spell.
				$val = substr( $val, 0, $bb_at ) . strtolower( substr( $val, $bb_at ) );
			}
			if ( '' === $val ) {
				return null;
			}
			if ( ! is_email( $val ) ) {
				return new WP_Error(
					'addon_boss',
					sprintf(
						/* translators: %s: the field's label */
						__( '%s: enter an email address like name@example.com.', 'addon-boss' ),
						(string) ( $def['label'] ?? __( 'Email', 'addon-boss' ) )
					)
				);
			}
			return array( 'value' => $val, 'display' => $val );

		case 'url':
			$val = trim( sanitize_text_field( (string) $raw ) );
			if ( '' === $val ) {
				return null;
			}
			// People type "mysite.com". The strict native check rejects exactly the
			// commonest correct input, so the scheme is supplied rather than demanded.
			if ( ! preg_match( '#^https?://#i', $val ) ) {
				$val = 'https://' . $val;
			}
			$bb_host = (string) wp_parse_url( $val, PHP_URL_HOST );
			if ( false === strpos( $bb_host, '.' ) || ! filter_var( $val, FILTER_VALIDATE_URL ) ) {
				return new WP_Error(
					'addon_boss',
					sprintf(
						/* translators: %s: the field's label */
						__( '%s: enter a web address like example.com.', 'addon-boss' ),
						(string) ( $def['label'] ?? __( 'Web address', 'addon-boss' ) )
					)
				);
			}
			$val = esc_url_raw( $val );
			return array( 'value' => $val, 'display' => $val );

		case 'color':
			$val = trim( sanitize_text_field( (string) $raw ) );
			if ( '' === $val ) {
				return null;
			}
			if ( 0 === strpos( $val, 'custom:' ) ) {
				if ( empty( $def['allow_custom'] ) ) {
					return null; // the escape hatch is off: not a defined choice.
				}
				$hex = addon_boss_normalise_hex( substr( $val, 7 ) );
				if ( '' === $hex ) {
					return new WP_Error(
						'addon_boss',
						sprintf(
							/* translators: %s: the field's label */
							__( '%s: pick a colour or enter a code like #1A2B3C.', 'addon-boss' ),
							(string) ( $def['label'] ?? __( 'Colour', 'addon-boss' ) )
						)
					);
				}
				return array(
					'value'   => 'custom:' . $hex,
					// The hex is the truth a printer can work from; "Custom" is the word.
					'display' => sprintf( /* translators: %s: a colour code like #1A2B3C */ __( 'Custom (%s)', 'addon-boss' ), $hex ),
					'opt_fee' => (float) ( $def['custom_fee'] ?? 0 ),
					'hex'     => $hex,
				);
			}
			$slug = sanitize_title( $val );
			foreach ( (array) ( $def['options'] ?? array() ) as $opt ) {
				// The sanitised form OR the value exactly as stored. The editor
				// slugs every value it saves, so the two are normally the same
				// string and this changes nothing. They come apart only when a
				// value arrived by some other road (an import, an older format,
				// a hand-written fixture) carrying a character sanitize_title
				// rewrites: a swatch stored as "#c9a227" can then never be
				// matched by the "#c9a227" the page posts back, and the field
				// becomes permanently unanswerable. Required, that is a dead
				// Add to basket refusing a colour the shopper can see selected,
				// with nothing in the message to explain it. Same family as the
				// hidden required choice that blocked the grid.
				$stored = (string) ( $opt['value'] ?? '' );
				if ( '' !== $stored && ( $stored === $slug || $stored === $val ) ) {
					$bb_label = (string) ( $opt['label'] ?? $stored );
					$bb_hex   = (string) ( $opt['color'] ?? '' );
					return array(
						'value'   => $stored,
						// The code in brackets is for the person making the thing,
						// and only earns its place when there is one. A swatch that
						// reached us without a colour printed "Gold ()" on the cart
						// line and on the order, an empty bracket nobody can read.
						'display' => '' !== $bb_hex ? sprintf( '%1$s (%2$s)', $bb_label, $bb_hex ) : $bb_label,
						'opt_fee' => (float) ( $opt['fee'] ?? 0 ),
						'hex'     => $bb_hex,
					);
				}
			}
			return null; // not a defined swatch

		case 'price':
			$val = trim( (string) ( is_scalar( $raw ) ? $raw : '' ) );
			if ( '' === $val ) {
				return null;
			}
			$bb_amount = wc_format_decimal( $val );
			if ( '' === (string) $bb_amount || ! is_numeric( $bb_amount ) ) {
				return new WP_Error(
					'addon_boss',
					sprintf(
						/* translators: 1: the field's label, 2: a money amount */
						__( '%1$s: enter an amount like %2$s.', 'addon-boss' ),
						(string) ( $def['label'] ?? __( 'Name your price', 'addon-boss' ) ),
						// aob-money-raw: an example of the FORMAT to type in, not a charge.
						addon_boss_plain_price( 10 )
					)
				);
			}
			$bb_amount = (float) $bb_amount;
			if ( $bb_amount <= 0 ) {
				// Zero or less is no charge at all, and no charge is an empty answer,
				// never a negative line. The zero-floor rule, same as everywhere.
				return null;
			}
			// THE SHOPPER TYPED THE FIGURE THEY WERE READING.
			//
			// The box speaks the shop's display basis, like every other price on
			// the page, so the typed figure arrives in that basis. The bounds the
			// merchant set are entry-basis like every Woo price, so they convert
			// to the shopper's basis for the comparison and for the sentence: the
			// refusal must quote figures the shopper can see on their screen. The
			// charge converts the other way and rides the fee pipeline as the
			// entry-basis figure every configured fee already is. On a shop whose
			// two bases coincide, none of this moves anything. (His call, 7 Sept.)
			$bb_pp = $product instanceof WC_Product ? $product : null;
			// The basis the page declared, or the shop's display setting where no
			// declaration arrived (an API add, an order-again): the same default
			// the page renders with.
			$bb_basis = isset( $_POST['bb_own_basis'] ) ? sanitize_key( wp_unslash( $_POST['bb_own_basis'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Missing -- read-only basis declaration; the add-to-cart nonce guards the request.
			if ( ! in_array( $bb_basis, array( 'incl', 'excl' ), true ) ) {
				$bb_basis = 'incl' === get_option( 'woocommerce_tax_display_shop', 'excl' ) ? 'incl' : 'excl';
			}
			if ( isset( $def['price_min'] ) ) {
				$bb_min_shown = $bb_pp ? addon_boss_entry_to_basis( (float) $def['price_min'], $bb_pp, $bb_basis ) : (float) $def['price_min'];
				if ( round( $bb_amount, 4 ) < round( $bb_min_shown, 4 ) ) {
					return new WP_Error(
						'addon_boss',
						sprintf(
							/* translators: 1: the field's label, 2: the smallest amount accepted */
							__( '%1$s: enter at least %2$s.', 'addon-boss' ),
							(string) ( $def['label'] ?? '' ),
							// aob-money-raw: the bound in the basis the shopper reads.
							addon_boss_plain_price( $bb_min_shown )
						)
					);
				}
			}
			if ( isset( $def['price_max'] ) ) {
				$bb_max_shown = $bb_pp ? addon_boss_entry_to_basis( (float) $def['price_max'], $bb_pp, $bb_basis ) : (float) $def['price_max'];
				if ( round( $bb_amount, 4 ) > round( $bb_max_shown, 4 ) ) {
					return new WP_Error(
						'addon_boss',
						sprintf(
							/* translators: 1: the field's label, 2: the largest amount accepted */
							__( '%1$s: enter at most %2$s.', 'addon-boss' ),
							(string) ( $def['label'] ?? '' ),
							// aob-money-raw: the upper twin of price_min, same reason.
							addon_boss_plain_price( $bb_max_shown )
						)
					);
				}
			}
			return array(
				'value'   => (string) wc_format_decimal( $bb_amount, wc_get_price_decimals() ),
				// aob-money-raw: the figure they typed, echoed back to them, in the
				// basis they typed it in.
				'display' => addon_boss_plain_price( $bb_amount ),
				// Their amount IS the charge, converted to the entry basis so it
				// rides the same pipeline every configured fee does. Downstream tax
				// puts it back to exactly the figure they typed.
				'opt_fee' => $bb_pp ? addon_boss_basis_to_entry( $bb_amount, $bb_pp, $bb_basis ) : $bb_amount,
			);

		case 'hidden':
			// The stored value is the truth; the page never asked anything. Posted
			// input counts only when fill-from-link is on, and even then it is
			// plain text with a hard cap, never markup, never unbounded.
			$bb_fixed = (string) ( $def['value'] ?? '' );
			$val      = $bb_fixed;
			if ( ! empty( $def['url_fill'] ) ) {
				$bb_posted = trim( sanitize_text_field( (string) ( is_scalar( $raw ) ? $raw : '' ) ) );
				if ( '' !== $bb_posted ) {
					$val = mb_substr( $bb_posted, 0, 200 );
				}
			}
			if ( '' === $val ) {
				return null;
			}
			return array( 'value' => $val, 'display' => $val, 'admin_only' => true );
	}
	return null;
}

/**
 * Storefront field polish: keep every capped field's character count in step, and
 * mark a field the shopper has completed with a quiet edge.
 *
 * Pure sugar over the fields that already carry the values, and it degrades to
 * nothing when absent. File fields are deliberately left out of the done state:
 * theirs arrives with the upload chip, so an empty file field can never read as
 * finished.
 */
function addon_boss_standalone_fields_polish(): void {
	if ( ! function_exists( 'is_product' ) || ! is_product() ) {
		return;
	}
	?>
	<?php ob_start(); try { ?>
	( function () {
		var root = document.querySelector( '.bb-standalone-options' );
		if ( ! root ) { return; }

		// Delegated from the document, one copy for the page, so an instance
		// an add-another clones AFTER boot behaves exactly like one the
		// server rendered. Per-element binding at boot was how a cloned
		// engraving's count sat frozen at 0/20 while its twin counted.
		function counterUpd( input ) {
			var field = input.closest( '.bb-addon-field' );
			var c     = field ? field.querySelector( '.bb-addon-counter' ) : null;
			if ( ! c ) { return; }
			var max = parseInt( c.getAttribute( 'data-bb-max' ), 10 ) || 0;
			var n   = ( input.value || '' ).length;
			c.textContent = n + '/' + max;
			// Amber as the cap approaches, red once it is reached. The last
			// stretch is proportional, so a 30 box and a 500 box both warn
			// with room to act; a flat two characters was no notice at all on
			// a long one. Red matters because maxlength stops the keys
			// silently: without it, nothing on screen explains why typing died.
			var tail = !! max ? Math.min( 20, Math.max( 2, Math.round( max * 0.1 ) ) ) : 0;
			c.classList.toggle( 'is-near', !! max && n >= max - tail && n < max );
			c.classList.toggle( 'is-at', !! max && n >= max );
		}
		function filledOf( g ) {
			// A file field's done state belongs to its chip, not to this.
			if ( g.querySelector( '.bb-addon-file-ref' ) ) { return false; }
			var cb = g.querySelector( 'input[type="checkbox"].bb-addon-input' );
			if ( cb ) { return cb.checked; }
			var input = g.querySelector( '.bb-addon-input' );
			return !! ( input && input.value && input.value.trim() );
		}
		function groupSync( g ) {
			if ( ! g || g.querySelector( '.bb-addon-file-ref' ) ) { return; }
			g.classList.toggle( 'is-filled', filledOf( g ) );
		}
		function onEdit( e ) {
			var input = e.target && e.target.classList && e.target.classList.contains( 'bb-addon-input' ) ? e.target : null;
			if ( ! input || ! root.contains( input ) ) { return; }
			counterUpd( input );
			groupSync( input.closest( '.bb-field-group' ) );
		}
		document.addEventListener( 'input', onEdit );
		document.addEventListener( 'change', onEdit );
		// First paint: the server may have prefilled any of them.
		root.querySelectorAll( '.bb-addon-input' ).forEach( function ( input ) {
			counterUpd( input );
			groupSync( input.closest( '.bb-field-group' ) );
		} );
	} )();
	<?php } finally { addon_boss_inline_js( ob_get_clean() ); } ?>
	<?php
}
add_action( 'wp_footer', 'addon_boss_standalone_fields_polish', 29 );

/**
 * The winner fields' storefront behaviour, plus the searchable long list.
 *
 * Everything here is an enhancement over controls that already work without
 * it: the colour presets are plain radios, the typed amount is a plain box,
 * the long list is a native select. The script opens the custom-colour hatch
 * and the amount chips (both rendered hidden so no dead control ever shows),
 * offers the email typo nudge, and upgrades any option list past the chip
 * threshold into a searchable combobox in place - the native select stays in
 * the form as the single source of truth, so pruning, pricing and validation
 * never learn this exists.
 */
function addon_boss_winner_fields_js(): void {
	if ( ! function_exists( 'is_product' ) || ! is_product() ) {
		return;
	}
	$bb_i18n = array(
		/* translators: %s: the closest matching choice, offered as a correction */
		'mean'    => __( 'Did you mean %s?', 'addon-boss' ),
		'unavail' => __( 'Unavailable', 'addon-boss' ),
		/* translators: %s: how many choices the list holds */
		'nomatch' => __( 'No matching options. Clear your text to see all %s options.', 'addon-boss' ),
		/* translators: 1: results shown, 2: of them unavailable */
		'results' => __( '%1$s results (%2$s unavailable). Use up and down arrows.', 'addon-boss' ),
	);
	?>
	<?php ob_start(); try { ?>
	( function () {
		var root = document.querySelector( '.bb-standalone-options' );
		if ( ! root ) { return; }
		var I18N = <?php echo wp_json_encode( $bb_i18n ); ?>;

		// ── Colour: the custom swatch opens only once this script exists. ──
		root.querySelectorAll( '.bb-addon-colour .bb-colour-custom' ).forEach( function ( cw ) {
			cw.hidden = false;
			var radio  = cw.querySelector( 'input[type=radio]' );
			var pickw  = cw.querySelector( '.bb-colour-pick' );
			var picker = cw.querySelector( '.bb-colour-picker' );
			var hexin  = cw.querySelector( '.bb-colour-hex' );
			var group  = cw.closest( '.bb-addon-colour' );
			function norm( v ) {
				v = ( v || '' ).trim().toLowerCase();
				if ( v && '#' !== v[ 0 ] ) { v = '#' + v; }
				if ( /^#[0-9a-f]{3}$/.test( v ) ) { v = '#' + v[ 1 ] + v[ 1 ] + v[ 2 ] + v[ 2 ] + v[ 3 ] + v[ 3 ]; }
				return /^#[0-9a-f]{6}$/.test( v ) ? v : '';
			}
			function sync( from ) {
				var hex = norm( 'picker' === from ? picker.value : hexin.value );
				if ( ! hex ) { return; }
				if ( 'picker' === from ) { hexin.value = hex; } else { picker.value = hex; }
				// The radio's value IS the answer the form posts; painting it here is
				// what lets a no-surprises native POST carry the exact colour.
				radio.value   = 'custom:' + hex;
				radio.checked = true;
				radio.dispatchEvent( new Event( 'change', { bubbles: true } ) );
			}
			picker && picker.addEventListener( 'input', function () { sync( 'picker' ); } );
			// Live on input too: the chip takes the colour the moment the sixth
			// character lands, not when the box loses focus. Partial codes fall
			// out of norm() and change nothing.
			hexin && hexin.addEventListener( 'input', function () { sync( 'hex' ); } );
			hexin && hexin.addEventListener( 'change', function () { sync( 'hex' ); } );
			group && group.addEventListener( 'change', function ( e ) {
				if ( e.target && 'radio' === e.target.type ) {
					pickw.hidden = ( e.target !== radio );
				}
			} );
		} );

		// ── Name your price: chips fill the box; the box stays the truth. ──
		//
		// A chip shows the display-basis figure and pressing it writes exactly
		// that figure. On a shop with a tax toggle the figure a chip SHOWS moves
		// with the switch, so what it writes has to move too: the -ex/-in pair
		// carries both, and the toggle plugin's own active class says which side
		// the shopper is reading. No tax maths happens here.
		root.querySelectorAll( '.bb-addon-ownprice' ).forEach( function ( w ) {
			var chips = w.querySelector( '.bb-price-chips' );
			var input = w.querySelector( '.bb-price-input' );
			if ( ! chips || ! input ) { return; }
			chips.hidden = false;
			function curAmount( c ) {
				var on = document.querySelector( '.wts-price-incl.wts-active' );
				var off = document.querySelector( '.wts-price-excl.wts-active' );
				if ( on ) { return c.dataset.bbAmountIn || c.dataset.bbAmount; }
				if ( off ) { return c.dataset.bbAmountEx || c.dataset.bbAmount; }
				return c.dataset.bbAmount;
			}
			function mark() {
				var now = parseFloat( ( input.value || '' ).replace( ',', '.' ) );
				chips.querySelectorAll( '.bb-price-chip' ).forEach( function ( c ) {
					// A chip is "on" when the box holds its figure in ANY basis, so
					// the tick survives a toggle flip that rewrites both of them.
					c.classList.toggle(
						'is-on',
						parseFloat( c.dataset.bbAmount ) === now
							|| parseFloat( c.dataset.bbAmountEx ) === now
							|| parseFloat( c.dataset.bbAmountIn ) === now
					);
				} );
			}
			chips.addEventListener( 'click', function ( e ) {
				var b = e.target.closest( '.bb-price-chip' );
				if ( ! b ) { return; }
				input.value = curAmount( b );
				input.dispatchEvent( new Event( 'input', { bubbles: true } ) );
				input.dispatchEvent( new Event( 'change', { bubbles: true } ) );
				mark();
			} );
			input.addEventListener( 'input', mark );
			mark();
		} );

		// ── E-mail: the did-you-mean nudge. Never blocks, one tap accepts. ──
		var DOMAINS = [ 'gmail.com', 'googlemail.com', 'hotmail.com', 'hotmail.co.uk', 'outlook.com', 'yahoo.com', 'yahoo.co.uk', 'icloud.com', 'live.com', 'aol.com', 'protonmail.com', 'msn.com' ];
		function nearDomain( d ) {
			if ( -1 !== DOMAINS.indexOf( d ) ) { return ''; }
			for ( var i = 0; i < DOMAINS.length; i++ ) {
				var t = DOMAINS[ i ];
				if ( Math.abs( t.length - d.length ) > 1 ) { continue; }
				var edits = 0, a = 0, b = 0;
				while ( a < d.length && b < t.length ) {
					if ( d[ a ] === t[ b ] ) { a++; b++; continue; }
					// gmial -> gmail: the classic typo is two adjacent letters
					// swapped, and it is ONE mistake, not two.
					if ( a + 1 < d.length && b + 1 < t.length && d[ a ] === t[ b + 1 ] && d[ a + 1 ] === t[ b ] ) {
						edits++; a += 2; b += 2;
						if ( edits > 1 ) { break; }
						continue;
					}
					edits++;
					if ( edits > 1 ) { break; }
					if ( d.length > t.length ) { a++; } else if ( d.length < t.length ) { b++; } else { a++; b++; }
				}
				edits += ( d.length - a ) + ( t.length - b );
				if ( edits === 1 ) { return t; }
			}
			return '';
		}
		root.querySelectorAll( 'input[type=email].bb-addon-input' ).forEach( function ( inp ) {
			var hint = root.querySelector( '.bb-addon-mailhint[data-bb-for="' + inp.id + '"]' );
			if ( ! hint ) { return; }
			inp.addEventListener( 'blur', function () {
				hint.hidden = true;
				hint.textContent = '';
				var v  = ( inp.value || '' ).trim();
				var at = v.lastIndexOf( '@' );
				if ( at < 1 ) { return; }
				var fix = nearDomain( v.slice( at + 1 ).toLowerCase() );
				if ( ! fix ) { return; }
				var whole = v.slice( 0, at + 1 ) + fix;
				hint.textContent = I18N.mean.replace( '%s', whole );
				hint.hidden = false;
				hint.onclick = function () {
					inp.value   = whole;
					hint.hidden = true;
					inp.dispatchEvent( new Event( 'change', { bubbles: true } ) );
				};
			} );
		} );

		// ── Long lists search themselves. ──────────────────────────────
		// The native select stays in the form and stays the single truth: the
		// combobox only reads its options (fresh on every open, because pruning
		// disables options live) and writes its value back. No script, or a
		// script failure, leaves the working select exactly as it renders today.
		var THRESHOLD = 12;
		function fold( s ) {
			// Case- and accent-insensitive matching: "Metallic" finds "métallic".
			s = ( s || '' ).toLowerCase();
			try { s = s.normalize( 'NFD' ).replace( /[̀-ͯ]/g, '' ); } catch ( e ) {}
			return s;
		}
		function enhance( sel ) {
			if ( sel.dataset.bbCombo || 'off' === sel.dataset.bbSearch || sel.multiple ) { return; }
			var real = 0;
			for ( var i = 0; i < sel.options.length; i++ ) {
				if ( '' !== sel.options[ i ].value ) { real++; }
			}
			if ( real <= THRESHOLD ) { return; }
			sel.dataset.bbCombo = '1';
			var wrap  = document.createElement( 'span' );
			wrap.className = 'bb-combo';
			var input = document.createElement( 'input' );
			// BOTH classes. It only ever carried bb-combo-input, so the one control
			// we build in script wore raw browser chrome while every field beside
			// it wore the panel's. Next to a dressed field it read as something
			// from another decade, which is exactly what it was. (His find.)
			input.type = 'text';
			input.className = 'bb-addon-input bb-combo-input';
			input.setAttribute( 'role', 'combobox' );
			input.setAttribute( 'aria-expanded', 'false' );
			input.setAttribute( 'aria-autocomplete', 'list' );
			input.setAttribute( 'autocomplete', 'off' );
			input.setAttribute( 'spellcheck', 'false' );
			var lbid = ( sel.id || sel.name || 'bb' ).replace( /[^a-z0-9_-]/gi, '' ) + '-listbox';
			input.setAttribute( 'aria-controls', lbid );
			// The select's accessible name carries over, so the combobox answers
			// to the same label the select did.
			var owner = sel.closest( 'label' ) || document.querySelector( 'label[for="' + sel.id + '"]' );
			if ( owner && owner.id ) { input.setAttribute( 'aria-labelledby', owner.id ); }
			var chev = document.createElement( 'span' );
			chev.className = 'bb-combo-chev';
			chev.setAttribute( 'aria-hidden', 'true' );
			var list = document.createElement( 'ul' );
			list.className = 'bb-combo-list';
			list.id = lbid;
			list.setAttribute( 'role', 'listbox' );
			list.hidden = true;
			var live = document.createElement( 'span' );
			live.className = 'screen-reader-text';
			live.setAttribute( 'aria-live', 'polite' );
			sel.parentNode.insertBefore( wrap, sel );
			wrap.appendChild( input );
			wrap.appendChild( chev );
			wrap.appendChild( list );
			wrap.appendChild( live );
			sel.style.display = 'none';
			sel.setAttribute( 'tabindex', '-1' );
			sel.setAttribute( 'aria-hidden', 'true' );

			var committed = sel.selectedOptions && sel.selectedOptions[ 0 ] && sel.value ? sel.selectedOptions[ 0 ].text : '';
			input.value = committed;
			var items = [], hl = -1, liveTimer = 0;

			function snapshot() {
				var out = [];
				for ( var i = 0; i < sel.options.length; i++ ) {
					var o = sel.options[ i ];
					if ( '' === o.value ) { continue; }
					out.push( { value: o.value, label: o.text, dis: o.disabled } );
				}
				return out;
			}
			function render( q ) {
				var all = snapshot();
				var f   = fold( q );
				var starts = [], has = [];
				all.forEach( function ( o ) {
					var l = fold( o.label );
					if ( '' === f || 0 === l.indexOf( f ) ) { starts.push( o ); }
					else if ( -1 !== l.indexOf( f ) ) { has.push( o ); }
					// A shopper types what they know, and that is not always the
					// words on the row. A collection time is stored 09:30 and
					// written "9:30 am", so typing the time found nothing; a size
					// or a finish is often known by its code. The value is the
					// option's other half, so it answers too, ranked last so a
					// real label match always leads.
					else if ( -1 !== fold( o.value ).indexOf( f ) ) { has.push( o ); }
				} );
				items = starts.concat( has );
				list.textContent = '';
				hl = -1;
				if ( ! items.length ) {
					var none = document.createElement( 'li' );
					none.className = 'bb-combo-none';
					none.textContent = I18N.nomatch.replace( '%s', String( all.length ) );
					list.appendChild( none );
				}
				var un = 0;
				items.forEach( function ( o, ix ) {
					if ( o.dis ) { un++; }
					var li = document.createElement( 'li' );
					// is-on marks what is chosen NOW. Opening on the whole list is
					// only half the job: a shopper also has to see which row they
					// are already on without reading the box above.
					var bbOn = sel.value && o.value === sel.value;
					li.className = 'bb-combo-opt' + ( o.dis ? ' is-dis' : '' ) + ( bbOn ? ' is-on' : '' );
					li.id = lbid + '-' + ix;
					li.setAttribute( 'role', 'option' );
					li.setAttribute( 'aria-selected', bbOn ? 'true' : 'false' );
					if ( o.dis ) { li.setAttribute( 'aria-disabled', 'true' ); }
					// Highlight the matched letters without trusting the label as HTML.
					var l = fold( o.label ), at = '' === f ? -1 : l.indexOf( f );
					if ( at >= 0 ) {
						li.appendChild( document.createTextNode( o.label.slice( 0, at ) ) );
						var m = document.createElement( 'mark' );
						m.textContent = o.label.slice( at, at + q.length );
						li.appendChild( m );
						li.appendChild( document.createTextNode( o.label.slice( at + q.length ) ) );
					} else {
						li.textContent = o.label;
					}
					if ( o.dis ) {
						var u = document.createElement( 'span' );
						u.className = 'bb-combo-unav';
						u.textContent = I18N.unavail;
						li.appendChild( u );
					}
					li.dataset.bbValue = o.value;
					list.appendChild( li );
				} );
				clearTimeout( liveTimer );
				liveTimer = setTimeout( function () {
					live.textContent = I18N.results.replace( '%1$s', String( items.length ) ).replace( '%2$s', String( un ) );
				}, 900 );
			}
			function open( q ) {
				render( q );
				list.hidden = false;
				input.setAttribute( 'aria-expanded', 'true' );
			}
			function close() {
				list.hidden = true;
				input.setAttribute( 'aria-expanded', 'false' );
				input.removeAttribute( 'aria-activedescendant' );
				hl = -1;
			}
			function commit( ix ) {
				var o = items[ ix ];
				if ( ! o || o.dis ) { return; }
				sel.value   = o.value;
				committed   = o.label;
				input.value = o.label;
				sel.dispatchEvent( new Event( 'change', { bubbles: true } ) );
				close();
			}
			function move( dir ) {
				if ( list.hidden ) { open( input.value ); }
				var n = hl;
				for ( var g = 0; g < items.length; g++ ) {
					n += dir;
					if ( n < 0 ) { n = items.length - 1; }
					if ( n >= items.length ) { n = 0; }
					if ( ! items[ n ].dis ) { break; }
				}
				if ( n < 0 || ! items.length || items[ n ].dis ) { return; }
				var prev = list.querySelector( '.is-hl' );
				prev && prev.classList.remove( 'is-hl' );
				hl = n;
				var el = document.getElementById( lbid + '-' + n );
				if ( el ) {
					el.classList.add( 'is-hl' );
					input.setAttribute( 'aria-activedescendant', el.id );
					el.scrollIntoView( { block: 'nearest' } );
				}
			}
			input.addEventListener( 'input', function () { open( input.value ); } );
			input.addEventListener( 'keydown', function ( e ) {
				// YOUR ANSWER IS REPLACEABLE, NOT EDITABLE.
				//
				// While the box shows the committed pick it is a statement of what
				// you chose, not text to amend. Backspacing into it left
				// "9:30 am (+GBP 4.0" on screen while the field underneath still
				// held 09:30: the box saying something the form did not mean.
				// Nothing unsafe could be submitted, because blur reverts and free
				// text never posts, but a control that can be made to lie about
				// your own answer is not one to trust. (His find, 7 Sept.)
				//
				// So the first key on a committed box clears it and starts a fresh
				// search. Escape and blur still put the answer back.
				if ( committed && input.value === committed
					&& ! e.ctrlKey && ! e.metaKey && ! e.altKey
					&& ( 1 === String( e.key ).length || 'Backspace' === e.key || 'Delete' === e.key ) ) {
					input.value = '';
					if ( 'Backspace' === e.key || 'Delete' === e.key ) { e.preventDefault(); open( '' ); }
				}
				if ( 'ArrowDown' === e.key ) { e.preventDefault(); move( 1 ); }
				else if ( 'ArrowUp' === e.key ) { e.preventDefault(); move( -1 ); }
				else if ( 'Enter' === e.key ) { if ( ! list.hidden && hl >= 0 ) { e.preventDefault(); commit( hl ); } }
				else if ( 'Escape' === e.key ) { input.value = committed; close(); }
			} );
			input.addEventListener( 'blur', function () {
				// Unconfirmed text reverts: free text can never submit, the exact
				// contract that keeps this a select underneath.
				setTimeout( function () {
					if ( document.activeElement && wrap.contains( document.activeElement ) ) { return; }
					input.value = committed;
					close();
				}, 120 );
			} );
			chev.addEventListener( 'mousedown', function ( e ) {
				e.preventDefault();
				if ( list.hidden ) { input.focus(); open( '' ); } else { close(); }
			} );
			// PRESSING THE BOX OPENS THE WHOLE LIST, and highlights what is in it.
			//
			// It used to open filtered by input.value, which after a pick IS the
			// chosen label: the list came back holding one row, the row already
			// chosen. So the only ways to see the other choices were to press the
			// little arrow, or to delete your own answer first. It read as a search
			// box that had forgotten it was a dropdown. (His find, 7 Sept.)
			//
			// Selecting the text is the other half: the next keystroke replaces the
			// old answer instead of being appended to it, which is what every
			// combobox a shopper has ever used does.
			input.addEventListener( 'click', function () {
				if ( ! list.hidden ) { return; }
				open( '' );
				input.select();
			} );
			list.addEventListener( 'mousedown', function ( e ) {
				var li = e.target.closest( '.bb-combo-opt' );
				if ( ! li || li.classList.contains( 'is-dis' ) ) { e.preventDefault(); return; }
				e.preventDefault();
				commit( items.findIndex( function ( o ) { return o.value === li.dataset.bbValue; } ) );
			} );
			// The select's value can move without us (prefill, another driver):
			// mirror it so the box never lies about the committed pick.
			sel.addEventListener( 'change', function () {
				var o = sel.selectedOptions && sel.selectedOptions[ 0 ];
				committed = sel.value && o ? o.text : '';
				if ( document.activeElement !== input ) { input.value = committed; }
			} );
			// THE BOX IS A COPY, AND A COPY GOES STALE.
			//
			// This input holds the chosen option's TEXT, taken once at the moment
			// it was chosen. The tax toggle rewrites every <option> in the hidden
			// select, so the rows behind the box answer the switch and the box
			// itself does not: on a field with a price in every row, flipping VAT
			// moved every figure EXCEPT the one the shopper had actually picked,
			// which is the only one they were reading. (His find, 7 Sept.)
			//
			// The select's own value has not moved, so no 'change' fires and the
			// mirror above cannot help. The repaint says when it is done instead.
			document.addEventListener( 'bb-choice-fees-repainted', function () {
				var o   = sel.selectedOptions && sel.selectedOptions[ 0 ];
				var was = committed;
				committed = sel.value && o ? o.text : '';
				// The box is rewritten when it is SHOWING the committed pick, not
				// only when it is unfocused. Choosing from the list leaves focus
				// in the box, so an unfocused-only guard skips the one case the
				// shopper is looking at, which is how this stayed broken. A box
				// holding anything else is a half-typed search: leave it alone.
				if ( input.value === was || document.activeElement !== input ) { input.value = committed; }
				// An open list is showing the old figures too. Keep whatever the
				// shopper was typing; they have not finished choosing.
				if ( ! list.hidden ) { render( input.value === committed ? '' : input.value ); }
			} );
		}
		root.querySelectorAll( 'select.bb-list-sel, select.bb-addon-input' ).forEach( enhance );
	} )();
	<?php } finally { addon_boss_inline_js( ob_get_clean() ); } ?>
	<?php
}
add_action( 'wp_footer', 'addon_boss_winner_fields_js', 29 );

/**
 * Does this field apply to the variation being bought?
 *
 * A field with no list applies to every variation, which is what everything
 * built before per-variation fields existed resolves to. A field restricted to
 * specific variations is INERT for the others: never rendered, never required,
 * never charged, which is the same discipline a hidden conditional field
 * follows.
 */
function addon_boss_field_applies_to_variation( array $def, int $variation_id ): bool {
	$only = (array) ( $def['only_variations'] ?? array() );
	if ( ! $only ) {
		return true;
	}
	// No variation chosen yet (a simple product, or the parent page): the field
	// stands, and the choice narrows it once one is picked.
	if ( $variation_id <= 0 ) {
		return true;
	}
	return in_array( $variation_id, array_map( 'absint', $only ), true );
}

/** Clip a string value to the field's maxlength (0 = no limit). */
function addon_boss_personalisation_clip( string $val, array $def ): string {
	$max = (int) ( $def['maxlength'] ?? 0 );
	if ( $max <= 0 ) {
		return $val;
	}
	return function_exists( 'mb_substr' ) ? mb_substr( $val, 0, $max ) : substr( $val, 0, $max );
}

/**
 * Is this longer than the field allows?
 *
 * The cap used to be enforced by CLIPPING, which quietly threw away whatever
 * ran over: forty characters sent to a twenty-character field stored twenty
 * and said nothing about the rest. Numbers already refuse and explain, and
 * this resolver's own contract is that typed-but-wrong never silently drops.
 * Text keeps that promise now too. clip() stays for callers that only need to
 * shorten something for display.
 *
 * @param string $val The submitted value, already sanitised and trimmed.
 * @param array  $def The field def.
 * @return WP_Error|null WP_Error when it is too long, null when it fits.
 */
function addon_boss_personalisation_too_long( string $val, array $def ) {
	$max = (int) ( $def['maxlength'] ?? 0 );
	if ( $max <= 0 ) {
		return null;
	}
	$len = function_exists( 'mb_strlen' ) ? mb_strlen( $val ) : strlen( $val );
	if ( $len <= $max ) {
		return null;
	}
	return new WP_Error(
		'addon_boss',
		sprintf(
			/* translators: 1: the field's label, 2: the most characters allowed */
			__( '%1$s: use %2$s characters or fewer.', 'addon-boss' ),
			(string) ( $def['label'] ?? '' ),
			(string) $max
		)
	);
}

/**
 * Resolve a single add-on's fee for this selection, honouring fee mode.
 * Mutates $once_charged so a "once" fee is taken a single time per item+field.
 *
 * $base_price is the line's per-unit base in the store's entry basis, and is
 * only consulted by the 'percent' mode. Callers that have no unambiguous base
 * (the bundle's per-item and whole-order paths) leave it at zero, and a percent
 * fee then resolves to nothing rather than guessing at a base: the admin only
 * offers percent where a product's own price is the obvious thing to take it
 * from, so this is a belt-and-braces floor, not a live path.
 */
function addon_boss_personalisation_resolve_fee( array $def, array $resolved, $item_index, array &$once_charged, float $base_price = 0.0 ): float {
	$decimals = function_exists( 'wc_get_price_decimals' ) ? wc_get_price_decimals() : 2;

	// A field type or fee mode this build does not offer charges nothing: the
	// field keeps its input, its price stays inert, and the stored fee is left
	// untouched for when the module arrives. An unavailable field TYPE is also
	// dropped upstream (never priced), so this is the belt to that braces.
	if ( ! addon_boss_field_type_available( (string) ( $def['type'] ?? '' ) )
		|| ! addon_boss_fee_mode_available( (string) ( $def['fee_mode'] ?? '' ) ) ) {
		return 0.0;
	}

	// Selects price by the chosen option; a colour by its swatch; a their-price
	// field by the amount the shopper typed. All three carry the money in the
	// resolved value, so the field-level fee never applies.
	if ( in_array( $def['type'] ?? '', array( 'select', 'color', 'price' ), true ) ) {
		return round( (float) ( $resolved['opt_fee'] ?? 0 ), $decimals );
	}

	// A type whose charge comes from the answer and the item's own price rather
	// than from an amount typed on the field (a date priced by how far forward
	// it was pulled) answers here, BEFORE the per-field amount is read, because
	// it has no amount to read. Returning null leaves the fee to the modes
	// below, so a type that does not price this way costs nothing extra.
	$bb_by_basis = apply_filters( 'addon_boss_field_type_line_fee', null, $def, $resolved, $base_price );
	if ( null !== $bb_by_basis ) {
		return round( (float) $bb_by_basis, $decimals );
	}

	$amount = (float) ( $def['fee'] ?? 0 );
	if ( $amount <= 0 ) {
		return 0.0;
	}

	// A type whose charge is its own maths (a measured size prices by the area
	// the shopper entered) answers through the module that registered it, and
	// short circuits like a select: no fee mode applies.
	$bb_own = apply_filters( 'addon_boss_field_type_fee', null, $def, $resolved, $amount );
	if ( null !== $bb_own ) {
		return round( (float) $bb_own, $decimals );
	}

	$bb_mode = (string) ( $def['fee_mode'] ?? 'unit' );
	if ( '' === $bb_mode ) {
		$bb_mode = 'unit'; // a field with no mode at all has always charged per item.
	}
	switch ( $bb_mode ) {
		case 'once':
			$ck = $item_index . '|' . ( $def['key'] ?? '' );
			if ( ! empty( $once_charged[ $ck ] ) ) {
				return 0.0;
			}
			$once_charged[ $ck ] = true;
			return round( $amount, $decimals );
		case 'unit':
			return round( $amount, $decimals );
		default:
			// A mode beyond the engine's own two resolves through the module
			// that registered it; a mode with no module behind it charges
			// nothing, and the field keeps its input for when one arrives.
			$bb_fee = apply_filters( 'addon_boss_fee_mode_fee', null, $bb_mode, $amount, $def, $resolved, $base_price );
			return null === $bb_fee ? 0.0 : round( (float) $bb_fee, $decimals );
	}
}

// =================================================================
// Field render. Lifted UNCHANGED from the earlier bundle-side layout; the
// standalone product-options surface renders through this too (via
// addon_boss_render_standalone_field).
// =================================================================

/**
 * Print HTML attributes, escaping each one where it is output.
 *
 * Takes a map rather than a ready-made string on purpose. A prebuilt string is
 * only provably safe to someone willing to read its composition further up.
 * Here the escaping happens at the point of output, one value at a time, so
 * there is nothing left to take on trust and nothing to suppress.
 *
 * true prints a bare boolean attribute. null and false print nothing.
 *
 * @param array<string,string|int|float|bool|null> $attrs Attribute map.
 */
function addon_boss_print_attrs( array $attrs ): void {
	foreach ( $attrs as $key => $value ) {
		if ( null === $value || false === $value ) {
			continue;
		}
		if ( true === $value ) {
			echo ' ' . esc_attr( $key );
			continue;
		}
		echo ' ' . esc_attr( $key ) . '="' . esc_attr( (string) $value ) . '"';
	}
}

/**
 * Render one add-on field. data-bb-* attributes let the configurator JS mirror
 * the fee into the live total.
 *
 * $product is what the printed fee is converted AGAINST. A stored fee is a raw
 * number in the shop's entry basis, and turning it into the shopper's basis
 * needs the product's tax status and class. Without it the label printed the
 * raw figure while the cart suffix, which has always had the product, printed
 * the converted one, so a shop with a VAT display toggle showed two different
 * prices for the same add-on. Optional, and unconverted when absent, so a
 * caller with no product in hand behaves exactly as before.
 */
function addon_boss_personalisation_render_field( array $def, string $name, $value = null, string $context = 'block', $product = null ) {
	$type  = $def['type'] ?? 'text';
	$label = $def['label'] ?? '';
	$cell  = ( 'cell' === $context ); // table-cell mode: no label/wrapper (the column header carries the label).

	// A field type's render callback takes a fixed shape with no product in it,
	// so the money it prints can only find one here. Set, never restored: every
	// field in a panel belongs to the same product, and the panel that opened
	// the basis closes it again.
	if ( $product instanceof WC_Product ) {
		addon_boss_money_product( $product );
	}

	if ( 'heading' === $type ) {
		if ( ! $cell ) {
			echo '<div class="bb-addon-note">' . esc_html( $label ) . '</div>';
		}
		return;
	}

	// A hidden field is the merchant talking to their own order screen. The page
	// prints an input only when fill-from-link is on (so the parameter has
	// somewhere to land in the post), and never a label, never chrome.
	if ( 'hidden' === $type ) {
		if ( ! empty( $def['url_fill'] ) ) {
			$bb_seed = (string) ( $value ?? '' );
			if ( '' === $bb_seed && isset( $_GET[ (string) ( $def['key'] ?? '' ) ] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
				$bb_seed = mb_substr( trim( sanitize_text_field( wp_unslash( (string) $_GET[ (string) ( $def['key'] ?? '' ) ] ) ) ), 0, 200 ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended
			}
			printf( '<input type="hidden" name="%s" value="%s">', esc_attr( $name ), esc_attr( $bb_seed ) );
		}
		return;
	}

	// An info / HTML block: display only, no input, no fee, no chrome. The body
	// carries its own markup, so it is emitted as-is (kses-cleaned); an optional
	// label reads as a plain note above it, unless the merchant has kept the
	// label for the editor's list and asked for no heading on the page.
	if ( 'html' === $type ) {
		if ( ! $cell ) {
			if ( '' !== (string) $label && empty( $def['hide_title'] ) ) {
				echo '<div class="bb-addon-note">' . esc_html( $label ) . '</div>';
			}
			echo wp_kses_post( (string) ( $def['content'] ?? '' ) );
		}
		return;
	}

	$fee   = (float) ( $def['fee'] ?? 0 );
	$types = addon_boss_personalisation_field_types();
	// A select prices by its option, and a type whose charge is its own maths
	// (a measured size prices by area) wears the mode its registration names,
	// rather than the fee mode the other types share.
	$bb_own_mode = (string) ( $types[ $type ]['own_fee_mode'] ?? '' );
	$mode        = ( 'select' === $type ) ? 'select' : ( '' !== $bb_own_mode ? $bb_own_mode : (string) ( $def['fee_mode'] ?? 'unit' ) );
	// A shared mode this build has no maths for charges nothing at add-to-cart,
	// so the page must not promise a fee either: the shown price and the taken
	// price are the same fact.
	if ( 'select' !== $mode && '' === $bb_own_mode && ! isset( addon_boss_fee_modes()[ '' === $mode ? 'unit' : $mode ] ) ) {
		$fee = 0.0;
	}
	$req   = ! empty( $def['required'] );
	$id    = 'bb-add-' . substr( md5( $name ), 0, 8 );
	// The input's own data attributes, carried as a map and printed through
	// addon_boss_print_attrs() so each value is escaped where it lands.
	//
	// NOTHING is concatenated in raw here. This used to accept an $extra_attrs
	// parameter appended straight into the tag; no caller ever passed one, but
	// an unescaped path is a hole even while it is unreachable. The parameter is
	// gone rather than sanitised, because a caller-supplied attribute blob has
	// no legitimate use here.
	$attr_map = array(
		'data-bb-addon'    => '1',
		'data-bb-fee'      => (string) $fee,
		'data-bb-fee-mode' => $mode,
	);
	if ( 'select' === $type && 'once' === (string) ( $def['fee_mode'] ?? '' ) ) {
		// A dropdown's mode attribute stays "select": it is what tells every
		// reader to price by the CHOSEN option. WHEN it charges follows the
		// field's own stored mode, and the server spreads a 'once' select's
		// option fee across the units (one setup charge however many are
		// bought), so the whole-line fact rides its own marker for the live
		// total to read. Without it the page multiplied the fee by the
		// quantity and promised 195.50 where 171.50 was charged.
		$attr_map['data-bb-fee-once'] = '1';
	}
	if ( $fee > 0 && 'select' !== $mode && '' === $bb_own_mode && ! in_array( $mode, array( 'unit', 'once' ), true ) ) {
		// A mode whose live maths lives in a module starts at nothing and is
		// recomputed by that module's script; the flat fallback must not count
		// the bare rate as the charge.
		$attr_map['data-bb-live-fee'] = '0';
	}
	if ( 'engaged' === ( $def['require_when'] ?? '' ) ) {
		$attr_map['data-bb-follower'] = '1'; // a modifier; only counts when an anchor field is filled
	}
	// The programmatic half of the required marking: aria-required rides the
	// CONTROL the shopper uses, so assistive tech announces the requirement at
	// the field rather than nowhere at all. Only the perceivable controls carry
	// it (a hidden reference or area carrier has no reader to tell), which is
	// why it is its own map rather than a line in $attr_map above.
	$attr_req = $attr_map;
	if ( $req ) {
		$attr_req['aria-required'] = 'true';
	}

	// The merchant's own sentence, wired to the control with aria-describedby so
	// a screen reader hears it AS PART OF the field rather than as loose text
	// somewhere after it. Of every comparable plugin read for this, Gravity Forms
	// is the only one that bothers, and it is the whole difference between help
	// text and decoration. A table cell has no label and no room, so it says
	// nothing there: the column header is doing that job.
	$bb_desc    = $cell ? '' : trim( (string) ( $def['description'] ?? '' ) );
	$bb_desc_id = $id . '-desc';
	if ( '' !== $bb_desc ) {
		$attr_req['aria-describedby'] = $bb_desc_id;
	}

	if ( ! $cell ) {
		echo '<div class="bb-addon-field bb-addon-' . esc_attr( $type ) . '">';
	}

	if ( 'checkbox' === $type ) {
		if ( $cell ) {
			// Bare checkbox; the column header carries the label.
			printf( '<input type="checkbox" name="%s" value="1"%s', esc_attr( $name ), checked( ! empty( $value ), true, false ) );
			addon_boss_print_attrs( $attr_req );
			echo '>';
			return;
		}
		printf(
			'<label class="bb-addon-check"><input type="checkbox" name="%s" value="1"%s',
			esc_attr( $name ),
			checked( ! empty( $value ), true, false )
		);
		addon_boss_print_attrs( $attr_req );
		echo '> <span>' . esc_html( $label ) . '</span>';
		// The same one marking system the labelled fields wear.
		echo wp_kses(
			$req
				? ' <span class="bb-addon-req">' . esc_html__( 'Required', 'addon-boss' ) . '</span>'
				: addon_boss_optional_marker( $label ),
			addon_boss_kses_allowed()
		);
		if ( $fee > 0 ) {
			echo '<span class="bb-addon-fee">' . wp_kses_post( addon_boss_money( $fee, $product, array( 'sign' => true ) ) ) . '</span>';
		}
		echo '</label>';
		echo '</div>';
		return;
	}

	if ( ! $cell ) {
		// A heading right above already wears this field's exact words (the
		// per-item accordion header carrying "Shirt 1"): the label keeps the
		// ACCESSIBLE name and leaves the screen, the heading-stutter rule the
		// group section applies. Never stored; stamped by the caller that
		// drew the heading.
		$bb_label_sr = ! empty( $def['_bb_label_sr'] );
		// A capped field carries its own count, so a shopper naming a shirt can see
		// how much room is left instead of typing into a silent stop.
		printf( '<label class="bb-addon-label%s" for="%s">%s', $bb_label_sr ? ' screen-reader-text' : '', esc_attr( $id ), esc_html( $label ) );
		// One marking system for the whole page, the one the sets settled: the
		// word "Required" (the platform's own word) or "(optional)", both
		// visible and both readable, and neither repeated when the label
		// already says it. The old red asterisk was aria-hidden, so
		// assistive tech heard no requirement at all, and it was a second
		// grammar beside the sets' on the same panel.
		echo wp_kses(
			$req
				? ' <span class="bb-addon-req">' . esc_html__( 'Required', 'addon-boss' ) . '</span>'
				: addon_boss_optional_marker( $label ),
			addon_boss_kses_allowed()
		);
		$bb_counter = '';
		if ( ! empty( $def['maxlength'] ) && in_array( $type, array( 'text', 'textarea' ), true ) ) {
			$bb_counter = sprintf(
				' <span class="bb-addon-counter" data-bb-max="%d" aria-hidden="true">%s</span>',
				(int) $def['maxlength'],
				esc_html( mb_strlen( (string) ( $value ?? '' ) ) . '/' . (int) $def['maxlength'] )
			);
		}
		if ( ! $bb_label_sr && '' !== $bb_counter ) {
			echo wp_kses( $bb_counter, addon_boss_kses_allowed() );
		}
		echo '</label>';
		if ( $bb_label_sr && '' !== $bb_counter ) {
			// The room-left count must not leave the screen with the label it
			// used to ride in; it stands beside the control instead.
			echo wp_kses( $bb_counter, addon_boss_kses_allowed() );
		}
	}

	switch ( $type ) {
		case 'textarea':
			printf( '<textarea id="%s" name="%s" class="bb-addon-input"', esc_attr( $id ), esc_attr( $name ) );
			if ( ! empty( $def['maxlength'] ) ) {
				printf( ' maxlength="%d"', (int) $def['maxlength'] );
			}
			addon_boss_print_attrs( $attr_req );
			echo '>' . esc_textarea( (string) ( $value ?? '' ) ) . '</textarea>';
			break;

		case 'number':
			$bb_nlo = isset( $def['num_min'] ) ? max( 0.0, (float) $def['num_min'] ) : 0.0;
			$bb_nhi = isset( $def['num_max'] ) ? (float) $def['num_max'] : null;
			printf(
				'<input type="number" id="%s" name="%s" class="bb-addon-input" value="%s" min="%s" step="%s"%s',
				esc_attr( $id ),
				esc_attr( $name ),
				esc_attr( (string) ( $value ?? '' ) ),
				esc_attr( (string) ( $bb_nlo + 0 ) ),
				empty( $def['num_whole'] ) ? 'any' : '1',
				null !== $bb_nhi ? ' max="' . esc_attr( (string) ( $bb_nhi + 0 ) ) . '"' : '' // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- esc_attr'd where built.
			);
			addon_boss_print_attrs( $attr_req );
			echo '>';
			// The fence is said up front, never discovered by refusal.
			if ( $bb_nlo > 0 || null !== $bb_nhi ) {
				$bb_nhint = null !== $bb_nhi
					? ( $bb_nlo > 0
						/* translators: 1: the lowest allowed number, 2: the highest allowed number */
						? sprintf( __( 'Between %1$s and %2$s', 'addon-boss' ), (string) ( $bb_nlo + 0 ), (string) ( $bb_nhi + 0 ) )
						/* translators: %s: the highest allowed number */
						: sprintf( __( 'Up to %s', 'addon-boss' ), (string) ( $bb_nhi + 0 ) ) )
					/* translators: %s: the lowest allowed number */
					: sprintf( __( 'At least %s', 'addon-boss' ), (string) ( $bb_nlo + 0 ) );
				echo '<span class="bb-addon-help">' . esc_html( $bb_nhint ) . '</span>';
			}
			break;

		case 'date':
		case 'time':
			// A module may take over a type this switch already draws: the paid
			// plan turns the plain date box into a priced one. Its registered
			// markup wins here, exactly as it does in the default arm below.
			// Without this the case would draw the plain box and the module's
			// input would never reach a storefront, while every direct call of
			// it in a test passed.
			if ( is_callable( $types[ $type ]['render'] ?? null ) ) {
				call_user_func( $types[ $type ]['render'], $def, $name, $value, $id, $attr_req );
				break;
			}
			printf(
				'<input type="%1$s" id="%2$s" name="%3$s" class="bb-addon-input" value="%4$s"',
				esc_attr( $type ),
				esc_attr( $id ),
				esc_attr( $name ),
				esc_attr( (string) ( $value ?? '' ) )
			);
			addon_boss_print_attrs( $attr_req );
			echo '>';
			break;

		case 'select':
			printf( '<select id="%s" name="%s" class="bb-addon-input"', esc_attr( $id ), esc_attr( $name ) );
			addon_boss_print_attrs( $attr_req );
			echo '>';
			echo '<option value="">' . esc_html__( 'Choose…', 'addon-boss' ) . '</option>';
			foreach ( (array) ( $def['options'] ?? array() ) as $opt ) {
				$ofee = (float) ( $opt['fee'] ?? 0 );
				// What the CHARGE reads as on this shop: the raw figure is what a
				// tax-inclusive store charges on top, not what it shows. Said in
				// the display basis the receipt below already speaks, or the
				// dropdown promises one number and the tray charges another.
				$ofee_shown = addon_boss_fee_shown( $ofee, $product );
				$olabel     = (string) ( $opt['label'] ?? $opt['value'] );
				printf(
					// data-bb-fee stays the RAW fee: the grid and the fee modes
					// price from it. data-delta is the shown one, so the VAT
					// toggle can repaint this label the way it repaints the total.
					'<option value="%s"%s data-bb-fee="%s" data-delta="%s" data-label="%s">%s%s</option>',
					esc_attr( $opt['value'] ),
					selected( (string) $value, $opt['value'], false ),
					esc_attr( (string) $ofee ),
					esc_attr( (string) $ofee_shown ),
					esc_attr( $olabel ),
					esc_html( $olabel ),
					$ofee > 0 ? ' (' . esc_html( addon_boss_money( $ofee_shown, null, array( 'plain' => true, 'sign' => true, 'convert' => false ) ) ) . ')' : ''
				);
			}
			echo '</select>';
			break;

		case 'email':
			printf(
				'<input type="email" id="%s" name="%s" class="bb-addon-input" value="%s" autocomplete="email" spellcheck="false"',
				esc_attr( $id ),
				esc_attr( $name ),
				esc_attr( (string) ( $value ?? '' ) )
			);
			addon_boss_print_attrs( $attr_req );
			echo '>';
			// The nudge lands here: one quiet line, filled by the typo check, never
			// blocking anything. Empty = absent to every reader.
			printf( '<button type="button" class="bb-addon-mailhint" data-bb-for="%s" aria-live="polite" hidden></button>', esc_attr( $id ) );
			break;

		case 'url':
			// type="text" on purpose: the strict native url check rejects
			// "mysite.com", which is how people actually type their site.
			printf(
				'<input type="text" inputmode="url" id="%s" name="%s" class="bb-addon-input" value="%s" spellcheck="false" placeholder="%s"',
				esc_attr( $id ),
				esc_attr( $name ),
				esc_attr( (string) ( $value ?? '' ) ),
				esc_attr__( 'example.com', 'addon-boss' )
			);
			addon_boss_print_attrs( $attr_req );
			echo '>';
			break;

		case 'color':
			$bb_val    = (string) ( $value ?? '' );
			$bb_is_cus = 0 === strpos( $bb_val, 'custom:' );
			// data-pmode names the voice these swatches speak, so a shopper
			// flipping the tax toggle repaints them in it. Without the host the
			// repaint reads whichever priced control rendered first on the page.
			printf( '<div class="bb-addon-colour" id="%s" role="radiogroup" aria-label="%s" data-pmode="delta">', esc_attr( $id ), esc_attr( $label ) );
			foreach ( (array) ( $def['options'] ?? array() ) as $opt ) {
				$ofee = (float) ( $opt['fee'] ?? 0 );
				printf(
					'<label class="bb-colour-sw"><input type="radio" name="%1$s" value="%2$s"%3$s data-bb-fee="%4$s" data-delta="%9$s"%5$s><span class="bb-colour-disc" style="background:%6$s"></span><span class="bb-colour-name">%7$s%8$s</span></label>',
					esc_attr( $name ),
					esc_attr( $opt['value'] ),
					checked( $bb_val, $opt['value'], false ),
					esc_attr( (string) $ofee ),
					$req ? ' required' : '',
					esc_attr( $opt['color'] ?? '#cccccc' ),
					esc_html( $opt['label'] ?? $opt['value'] ),
					// The figure sits in its own span so the repaint can rewrite it
					// without eating the brackets around it.
					$ofee > 0 ? ' <span class="bb-colour-fee">(<span class="bb-chip-delta">' . esc_html( addon_boss_money( $ofee, $product, array( 'plain' => true, 'sign' => true ) ) ) . '</span>)</span>' : '',
					esc_attr( (string) addon_boss_fee_shown( $ofee, $product ) )
				);
			}
			if ( ! empty( $def['allow_custom'] ) ) {
				$bb_cfee = (float) ( $def['custom_fee'] ?? 0 );
				$bb_hex  = $bb_is_cus ? addon_boss_normalise_hex( substr( $bb_val, 7 ) ) : '';
				// The whole custom row waits for the script that makes it work:
				// without it the presets stand alone, complete, rather than a
				// dead swatch beside a picker nothing reads.
				printf(
					'<span class="bb-colour-custom" data-bb-fee="%s" hidden>'
					. '<label class="bb-colour-sw bb-colour-customsw"><input type="radio" name="%s" value="%s"%s data-bb-fee="%1$s" data-delta="%12$s" data-bb-rule-value="custom"><span class="bb-colour-disc bb-colour-anydisc" aria-hidden="true"></span><span class="bb-colour-name">%s%s</span></label>'
					. '<span class="bb-colour-pick"%s><input type="color" class="bb-colour-picker" value="%s" aria-label="%s"><input type="text" class="bb-colour-hex" value="%s" placeholder="#1A2B3C" maxlength="7" aria-label="%s" spellcheck="false"></span>'
					. '</span>',
					esc_attr( (string) $bb_cfee ),
					esc_attr( $name ),
					esc_attr( $bb_is_cus ? $bb_val : 'custom:' ),
					checked( $bb_is_cus, true, false ),
					esc_html__( 'Custom', 'addon-boss' ),
					$bb_cfee > 0 ? ' <span class="bb-colour-fee">(<span class="bb-chip-delta">' . esc_html( addon_boss_money( $bb_cfee, $product, array( 'plain' => true, 'sign' => true ) ) ) . '</span>)</span>' : '',
					$bb_is_cus ? '' : ' hidden',
					esc_attr( '' !== $bb_hex ? $bb_hex : '#1a2b3c' ),
					esc_attr__( 'Pick a colour', 'addon-boss' ),
					esc_attr( $bb_hex ),
					esc_attr__( 'Colour code', 'addon-boss' ),
					esc_attr( (string) addon_boss_fee_shown( $bb_cfee, $product ) )
				);
			}
			echo '</div>';
			break;

		case 'price':
			$bb_cur = function_exists( 'get_woocommerce_currency_symbol' ) ? get_woocommerce_currency_symbol() : '';
			// THE BOX TAKES THE FIGURE THE SHOPPER IS READING.
			//
			// Every other price on the page converts to the shop's display basis,
			// and for a while this field alone did not: it took the ENTRY basis and
			// a line under it apologised ("Type the amount without VAT"). On a shop
			// showing inc-VAT prices, typing 5 charged 6. His call, 7 Sept: the box
			// speaks the shopper's basis, the apology goes, and the server converts
			// what was typed back to the entry basis for the charge.
			//
			// So every figure on this field is DISPLAY basis: the chips, the
			// bounds, the refusal sentences, and the number the box takes.
			// data-pmode="whole" hands the lot to the tax toggle's repaint, and the
			// -ex/-in attribute pairs carry both bases so the client can follow a
			// live flip without re-deriving any tax maths of its own.
			$bb_ep   = $product instanceof WC_Product ? $product : null;
			$bb_dec  = function_exists( 'wc_get_price_decimals' ) ? wc_get_price_decimals() : 2;
			$bb_show = static function ( float $bb_v ) use ( $bb_ep ): float {
				return $bb_ep ? addon_boss_fee_shown( $bb_v, $bb_ep ) : $bb_v;
			};
			$bb_ex = static function ( float $bb_v ) use ( $bb_ep ): float {
				return $bb_ep && function_exists( 'wc_get_price_excluding_tax' )
					? (float) wc_get_price_excluding_tax( $bb_ep, array( 'price' => $bb_v, 'qty' => 1 ) )
					: $bb_v;
			};
			$bb_in = static function ( float $bb_v ) use ( $bb_ep ): float {
				return $bb_ep && function_exists( 'wc_get_price_including_tax' )
					? (float) wc_get_price_including_tax( $bb_ep, array( 'price' => $bb_v, 'qty' => 1 ) )
					: $bb_v;
			};
			echo '<div class="bb-addon-ownprice" data-pmode="whole">';
			$bb_chips = (array) ( $def['price_amounts'] ?? array() );
			if ( $bb_chips ) {
				// Buttons that only work by script stay hidden until the script is
				// there; the typed box below is the whole feature without it.
				// A chip shows the display-basis figure, and PRESSING it writes that
				// same figure into the box: one number for one amount, in the basis
				// the shopper is reading. Both bases ride along so a live toggle
				// flip can keep the promise without any client-side tax maths.
				echo '<span class="bb-price-chips" role="group" aria-label="' . esc_attr__( 'Suggested amounts', 'addon-boss' ) . '" hidden>';
				foreach ( $bb_chips as $bb_chip ) {
					printf(
						'<button type="button" class="bb-price-chip" data-delta="%s" data-bb-amount="%s" data-bb-amount-ex="%s" data-bb-amount-in="%s">%s</button>',
						esc_attr( (string) $bb_show( (float) $bb_chip ) ),
						esc_attr( (string) round( $bb_show( (float) $bb_chip ), $bb_dec ) ),
						esc_attr( (string) round( $bb_ex( (float) $bb_chip ), $bb_dec ) ),
						esc_attr( (string) round( $bb_in( (float) $bb_chip ), $bb_dec ) ),
						esc_html( addon_boss_money( (float) $bb_chip, $product, array( 'plain' => true ) ) )
					);
				}
				echo '</span>';
			}
			// A BOUND ONLY THE TILL KNOWS ABOUT IS NOT A BOUND.
			//
			// Minimum and maximum were printed under the box as words and enforced on
			// the server, with nothing in between. The box took any figure without
			// complaint, the running total quoted it, and the refusal arrived only at
			// Add to basket. (His find, 7 Sept.)
			//
			// The box carries its bounds in the display basis the shopper reads, in
			// both bases for a live toggle flip, plus the sentence as a template the
			// client fills with the current-basis figure. The prefilled -say twin is
			// the fallback for a page with no money formatter to hand. The server
			// stays the enforcer; this only moves the news to the field.
			$bb_bounds = '';
			if ( isset( $def['price_min'] ) ) {
				$bb_bounds .= sprintf(
					' data-bb-pmin="%s" data-bb-pmin-ex="%s" data-bb-pmin-in="%s" data-bb-pmin-say="%s"',
					esc_attr( (string) $bb_show( (float) $def['price_min'] ) ),
					esc_attr( (string) $bb_ex( (float) $def['price_min'] ) ),
					esc_attr( (string) $bb_in( (float) $def['price_min'] ) ),
					esc_attr(
						sprintf(
							// AT THE FIELD, SAY THE RULE. The till's sentence names the field,
							// because a cart notice arrives with no context. Here the label sits
							// an inch above, so repeating it reads as a stutter. (His look, 7 Sept.)
							/* translators: %s: the smallest amount accepted */
							__( 'Enter at least %s.', 'addon-boss' ),
							// aob-money-raw: the bound in the basis the shopper reads,
							// exactly as the server compares it.
							addon_boss_plain_price( $bb_show( (float) $def['price_min'] ) )
						)
					)
				);
			}
			if ( isset( $def['price_max'] ) ) {
				$bb_bounds .= sprintf(
					' data-bb-pmax="%s" data-bb-pmax-ex="%s" data-bb-pmax-in="%s" data-bb-pmax-say="%s"',
					esc_attr( (string) $bb_show( (float) $def['price_max'] ) ),
					esc_attr( (string) $bb_ex( (float) $def['price_max'] ) ),
					esc_attr( (string) $bb_in( (float) $def['price_max'] ) ),
					esc_attr(
						sprintf(
							/* translators: %s: the largest amount accepted */
							__( 'Enter at most %s.', 'addon-boss' ),
							// aob-money-raw: the upper twin of price_min, same reason.
							addon_boss_plain_price( $bb_show( (float) $def['price_max'] ) )
						)
					)
				);
			}
			if ( isset( $def['price_min'] ) || isset( $def['price_max'] ) ) {
				/* translators: %s: the smallest amount accepted */
				$bb_bounds .= ' data-bb-say-min="' . esc_attr__( 'Enter at least %s.', 'addon-boss' ) . '"';
				/* translators: %s: the largest amount accepted */
				$bb_bounds .= ' data-bb-say-max="' . esc_attr__( 'Enter at most %s.', 'addon-boss' ) . '"';
			}
			printf(
				'<span class="bb-price-entry"><span class="bb-price-symbol" data-pmode="hidden" aria-hidden="true">%s</span><input type="text" inputmode="decimal" id="%s" name="%s" class="bb-addon-input bb-price-input" value="%s" data-bb-own-amount="1" data-bb-fee="0" data-bb-fee-mode="' . esc_attr( (string) ( $def['fee_mode'] ?? 'unit' ) ) . '"%s',
				esc_html( $bb_cur ),
				esc_attr( $id ),
				esc_attr( $name ),
				esc_attr( (string) ( $value ?? '' ) ),
				$bb_bounds // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- assembled from esc_attr parts above.
			);
			addon_boss_print_attrs( $attr_req );
			echo '></span>';
			// WHICH BASIS THE SHOPPER WAS READING travels with the form. A tax
			// toggle keeps its state in the browser, so the server cannot know
			// which side the page showed when the amount was typed; this field
			// says so, and the script updates it on every flip. Declaring it is
			// money-safe: bounds and charge convert together, so whatever basis
			// is claimed, the shopper pays the figure they saw against the bounds
			// they saw.
			printf(
				'<input type="hidden" class="bb-own-basis" name="bb_own_basis" value="%s">',
				esc_attr( 'incl' === get_option( 'woocommerce_tax_display_shop', 'excl' ) ? 'incl' : 'excl' )
			);
			$bb_pmin = isset( $def['price_min'] ) ? (float) $def['price_min'] : null;
			$bb_psug = isset( $def['price_suggested'] ) ? (float) $def['price_suggested'] : null;
			// The bounds are always said, never a guessing game after a refusal.
			if ( null !== $bb_pmin || null !== $bb_psug ) {
				// The ladder reads in order: minimum, suggestion, maximum. All three
				// describe the box below them in the basis the shopper reads, and
				// each figure carries data-delta so the toggle repaint moves it with
				// every other price on the page.
				$bb_bit = static function ( string $bb_tpl, float $bb_v ) use ( $bb_show ): string {
					return sprintf(
						$bb_tpl,
						'<span data-delta="' . esc_attr( (string) $bb_show( $bb_v ) ) . '">'
							. esc_html( addon_boss_plain_price( $bb_show( $bb_v ) ) ) . '</span>' // aob-money-raw: the bound in the shopper's display basis, converted by bb_show above.
					);
				};
				$bb_bits = array();
				if ( null !== $bb_pmin ) {
					/* translators: %s: a money amount */
					$bb_bits[] = $bb_bit( __( 'Minimum %s', 'addon-boss' ), $bb_pmin ); // aob-money-raw: display basis, converted above.
				}
				if ( null !== $bb_psug ) {
					/* translators: %s: a money amount */
					$bb_bits[] = $bb_bit( __( 'Suggested: %s', 'addon-boss' ), $bb_psug ); // aob-money-raw: display basis, converted above.
				}
				$bb_pmax = (float) ( $def['price_max'] ?? 0 );
				if ( $bb_pmax > 0 ) {
					/* translators: %s: a money amount */
					$bb_bits[] = $bb_bit( __( 'Maximum %s', 'addon-boss' ), $bb_pmax ); // aob-money-raw: display basis, converted above.
				}
				echo '<span class="bb-addon-help">' . wp_kses( implode( ' · ', $bb_bits ), array( 'span' => array( 'data-delta' => true ) ) ) . '</span>';
			}
			// THE COMPLAINT SITS BESIDE THE RULE IT BROKE.
			//
			// The group's refusal line renders at the TOP of the card, which is right
			// for a missing choice: the whole card is the offender. A bounded amount
			// is different: its rule is printed at the bottom, under the box, so the
			// complaint lands there too, and the group's own line stays for
			// everything else. (His look, 7 Sept.)
			if ( isset( $def['price_min'] ) || isset( $def['price_max'] ) ) {
				echo '<p class="bb-gmiss-note bb-gmiss-here" role="status" aria-live="polite" hidden></p>';
			}
			echo '</div>';
			break;

		case 'text':
		default:
			// A type that registered its own input markup renders through it.
			if ( is_callable( $types[ $type ]['render'] ?? null ) ) {
				call_user_func( $types[ $type ]['render'], $def, $name, $value, $id, $attr_map );
				break;
			}
			printf(
				'<input type="text" id="%s" name="%s" class="bb-addon-input" value="%s"',
				esc_attr( $id ),
				esc_attr( $name ),
				esc_attr( (string) ( $value ?? '' ) )
			);
			if ( ! empty( $def['maxlength'] ) ) {
				printf( ' maxlength="%d"', (int) $def['maxlength'] );
			}
			addon_boss_print_attrs( $attr_req );
			echo '>';
			break;
	}

	if ( ! $cell && $fee > 0 && ! in_array( $type, array( 'select', 'color' ), true ) ) {
		// A dropdown and a colour price by the chosen option; a stored field fee
		// from before the sanitiser zeroed them must not be promised here either.
		// A rate has to say what it is a rate OF, or the shopper reads it as the
		// whole charge: "+£12.00" on a size field that will actually bill £72 for
		// six square metres is the exact mismatch this suffix prevents. Each
		// rate-shaped mode's wording rides with the module that does its maths;
		// a flat fee needs no qualifier and says nothing.
		$suffix = (string) apply_filters( 'addon_boss_fee_rate_suffix', '', $mode, $def );
		echo ' <span class="bb-addon-fee" data-bb-rate="1">' . wp_kses_post( addon_boss_money( $fee, $product, array( 'sign' => true ) ) ) . esc_html( $suffix ) . '</span>';
	}

	if ( '' !== $bb_desc ) {
		// The same slot and the same dress the engine's OWN computed lines use (a
		// number's fence, a date's earliest day), so the two read as one voice
		// under the field. Never merged with them, though, and never seeded from
		// them: what the engine works out stays the engine's and is always true of
		// the settings; what the merchant typed stays theirs and is never written
		// for them. Gravity Forms settled this exact question the same way, by
		// rendering its generated file rules as their own line wearing the
		// description class beside the merchant's text.
		printf(
			'<span class="bb-addon-help bb-addon-desc" id="%s">%s</span>',
			esc_attr( $bb_desc_id ),
			esc_html( $bb_desc )
		);
	}

	if ( ! $cell ) {
		echo '</div>';
	}
}

// =================================================================
// Option-set store, schema + measured maths. Lifted UNCHANGED from
// the earlier bundle-side layout; the option-set library both surfaces draw
// from, plus the measured-set pricing maths.
// =================================================================

const ADDON_BOSS_OPTION_SETS_STORE = 'bundle_boss_option_sets';
const ADDON_BOSS_PRODUCT_OPTIONS_META = '_bundle_boss_product_options';

/**
 * The one reader for "which side is the VAT toggle showing", as a script
 * fragment every surface that paints money embeds.
 *
 * Asked of the TOGGLE'S OWN MEMORY rather than of the page, because reading the
 * page is a race and on a reload we lose it: the plugin restores the shopper's
 * choice in its own script, and whichever of us paints first wins. That is the
 * whole of the reload defect - the switch reads Incl VAT, our figures read Ex,
 * and the two agree again the moment somebody toggles, because a toggle fires
 * the event we already listen for. Nothing was ever wrong with the arithmetic.
 *
 * What the plugin stores is "switched away from the shop's own basis", so that
 * flag and the basis together answer the question with no timing in it at all.
 * With nothing stored (nobody has toggled in this browser) the page is showing
 * the shop's own basis, and the DOM agrees, so the DOM is read instead.
 *
 * One copy, emitted three times, so the two cannot drift apart.
 */
function addon_boss_wts_reader_js(): string {
	return <<<'JS'
	function bbWtsIncl( basis ) {
		var raw = null;
		try {
			raw = window.localStorage.getItem( "wdevs_tax_switch_is_switched" );
		} catch ( e ) {
			raw = null; // a browser refusing storage: fall through to the page.
		}
		if ( null !== raw ) {
			var switched = "true" === String( raw ).trim();
			return ( "incl" === basis && ! switched ) || ( "excl" === basis && switched );
		}
		var active = document.querySelector( ".wts-price-wrapper .wts-active" );
		if ( active ) { return active.classList.contains( "wts-price-incl" ); }
		return "incl" === basis;
	}
JS;
}

/**
 * The VAT-toggle attributes for a surface that paints its own money.
 *
 * 🔴 Whether the Tax Switch plugin runs is decided HERE, server-side, rather
 * than by sniffing its JS globals. Its wtsCompatibilityObject only exists
 * where one of ITS OWN compat shims happens to load, and its switch block
 * loads nothing unless the merchant placed it, while its server side wraps
 * every static price in the incl/excl pair unconditionally. So on David's
 * shop (23 Aug) the page was covered in dual prices while the one figure
 * carrying the option and embroidery money, our live total, painted a single
 * basis: the pair "only carried the base". The base rate rides along for the
 * same reason: the compat object that used to supply it is not there to ask.
 *
 * Empty when the plugin is absent or the product carries no tax, so every
 * consumer can echo it unconditionally and nothing changes on shops without
 * the toggle. Escaped within.
 */
function addon_boss_wts_attrs( WC_Product $product ): string {
	if ( ! defined( 'WDEVS_TAX_SWITCH_VERSION' ) || ! function_exists( 'wc_tax_enabled' ) || ! wc_tax_enabled() || 'taxable' !== $product->get_tax_status() ) {
		return '';
	}
	$rate = array_sum( array_map( 'floatval', array_column( WC_Tax::get_base_tax_rates( $product->get_tax_class() ), 'rate' ) ) );
	// The shop's OWN display basis rides along, because the toggle plugin
	// remembers "switched away from it" rather than "showing tax": the two
	// together are the only way to answer which side is on without waiting to
	// see what the plugin does to the page.
	return ' data-wts="1" data-wts-rate="' . esc_attr( (string) $rate ) . '"'
		. ' data-tax-basis="' . esc_attr( get_option( 'woocommerce_tax_display_shop', 'excl' ) ) . '"';
}

// -----------------------------------------------------------------
// Keys
// -----------------------------------------------------------------

/**
 * A stable, immutable key for an option or a set. Generated once at row
 * creation and preserved by the sanitiser forever after; renaming a label
 * never changes the key.
 */
function addon_boss_option_key( string $prefix = 'op' ): string {
	return $prefix . '_' . substr( md5( uniqid( (string) wp_rand(), true ) ), 0, 10 );
}

/** True when a key looks like one of ours (or a sane hand-written slug). */
function addon_boss_option_key_valid( $key ): bool {
	return is_string( $key ) && '' !== $key && (bool) preg_match( '/^[a-z0-9_\-]{1,40}$/', $key );
}

// -----------------------------------------------------------------
// Sets store (CRUD)
// -----------------------------------------------------------------

/**
 * All saved option sets, keyed by set id.
 *
 * @return array<string,array{name:string,options:array[]}>
 */
function addon_boss_option_sets(): array {
	$sets = get_option( ADDON_BOSS_OPTION_SETS_STORE, array() );
	if ( ! is_array( $sets ) ) {
		return array();
	}
	// Stored data is historical fact: an older build wrote table sets with no
	// options key, and one such set took the whole library screen down with a
	// TypeError. The reader guarantees the shape every consumer assumes, so a
	// set written by any past version renders, opens and can be put right.
	foreach ( $sets as $id => $set ) {
		if ( ! is_array( $set ) ) {
			unset( $sets[ $id ] );
			continue;
		}
		if ( ! isset( $set['options'] ) || ! is_array( $set['options'] ) ) {
			$sets[ $id ]['options'] = array();
		}
	}
	return $sets;
}

/** One saved set, or null. */
function addon_boss_option_set( string $id ): ?array {
	$sets = addon_boss_option_sets();
	return $sets[ $id ] ?? null;
}

/**
 * The kinds an option set can be.
 *
 * The engine's own kind is 'choices': a named list, each entry with an
 * optional charge. A kind priced by other means registers here from the module
 * that implements it, carrying the callbacks the engine calls at each seam:
 *   label        the kind picker's wording
 *   desc         the sentence under the picker saying what the kind is for
 *   uses_options whether the set's option rows apply (a kind priced off its
 *                own panel says no and the editor hides them)
 *   collect      read the kind's own fields from the save form into raw shape
 *   sanitize     raw shape to the stored keys to merge over the base set
 *   editor       print the kind's panel inside the set editor
 *   snapshot     resolve one request against a set of this kind into a cart
 *                snapshot (null = nothing picked, WP_Error = refuse the add)
 *   seed         the reverse of snapshot, for the cart edit loop: one frozen
 *                snapshot back into the request fields (name => value) that
 *                would have produced it, so an edited line arrives prefilled.
 *                The engine's own 'choices' kind needs none (its one field
 *                carries the option's key); a kind without one seeds nothing.
 *   render       print the set's body on the product page
 *   save_notice  something worth saying about the set just saved, or null
 *
 * A stored set whose kind nothing registers is INERT: it stays stored and
 * listed, offers nothing, charges nothing, and is never sanitised away, so it
 * returns whole the moment the module that owns it is installed.
 *
 * @return array<string,array>
 */
function addon_boss_option_set_kinds(): array {
	$own = array(
		'choices' => array(
			'label'        => __( 'a list of choices', 'addon-boss' ),
			'desc'         => __( 'Named options, each with its own price.', 'addon-boss' ),
			'uses_options' => true,
		),
	);
	return (array) apply_filters( 'addon_boss_option_set_kinds', $own );
}

/**
 * Sanitise a set definition. Options with an empty label are dropped;
 * existing valid keys are PRESERVED (stability is the contract), missing or
 * invalid keys are generated; swatches must be real hex colours; deltas are
 * floats and may be negative. Order is the submitted order.
 */
function addon_boss_sanitize_option_set( array $raw ): array {
	$options = array();
	foreach ( (array) ( $raw['options'] ?? array() ) as $opt ) {
		if ( ! is_array( $opt ) ) {
			continue;
		}
		$label = sanitize_text_field( (string) ( $opt['label'] ?? '' ) );
		if ( '' === $label ) {
			continue;
		}
		$swatch = sanitize_hex_color( (string) ( $opt['swatch'] ?? '' ) );
		// An optional second colour for two-tone options (a "Navy/Red" jacket):
		// when set, the swatch renders as a split of the two.
		$swatch2 = sanitize_hex_color( (string) ( $opt['swatch2'] ?? '' ) );
		$row = array(
			'key'      => addon_boss_option_key_valid( $opt['key'] ?? '' ) ? (string) $opt['key'] : addon_boss_option_key(),
			'label'    => $label,
			'swatch'   => $swatch ? $swatch : '',
			'swatch2'  => $swatch2 ? $swatch2 : '',
			// An optional short note shown when the shopper picks this option
			// (e.g. "Print protection" -> "adds a clear laminate...").
			'desc'     => sanitize_text_field( (string) ( $opt['desc'] ?? '' ) ),
			'image_id' => absint( $opt['image_id'] ?? 0 ),
			'delta'    => (float) wc_format_decimal( (string) ( $opt['delta'] ?? '0' ) ),
			'dims'     => array_map(
				static function ( $v ) {
					return (float) wc_format_decimal( (string) $v );
				},
				array_slice( array_values( (array) ( $opt['dims'] ?? array() ) ), 0, 3 )
			),
		);
		// Per-option stock: an integer count this option is limited to. Present,
		// even 0 (sold out), means tracked; absent means unlimited (the default,
		// so every existing set is untouched). The actual number lives on a hidden
		// WooCommerce backing product provisioned on save, so Woo owns the count.
		if ( isset( $opt['stock'] ) && '' !== $opt['stock'] && is_numeric( $opt['stock'] ) ) {
			$row['stock'] = max( 0, (int) $opt['stock'] );
		}
		$options[] = $row;
	}

	// Type "Navy" and the swatch fills itself from the shared name map, but
	// only when the WHOLE row resolves: every option carrying its own colour
	// or a recognised name. A lone hit in a row of strangers (Lavender among
	// scents) painted one tile in a row of pills, so a row that cannot be
	// uniform in dots stores no guesses at all and stays uniform in pills.
	// Colours the merchant typed themselves are already in place above.
	if ( function_exists( 'addon_boss_swatch_row_uniform' ) && addon_boss_swatch_row_uniform( $options ) ) {
		foreach ( $options as &$bb_row_opt ) {
			if ( '' === $bb_row_opt['swatch'] ) {
				$bb_row_opt['swatch'] = (string) sanitize_hex_color( addon_boss_swatch_from_name( $bb_row_opt['label'] ) );
			}
		}
		unset( $bb_row_opt );
	}

	// The set's kind. The engine's own is 'choices'; a richer kind sanitises
	// through the callback its module registered. A stored kind nothing
	// registers is carried through INERT, payload and all: the merchant's data
	// is not this build's to rewrite, and nothing here ever reads it. The
	// payload arrives leaf-sanitised at the request boundary, exactly like
	// every other admin-shaped array this function receives.
	$kinds = addon_boss_option_set_kinds();
	$kind  = sanitize_key( (string) ( $raw['kind'] ?? 'choices' ) );
	if ( '' === $kind ) {
		$kind = 'choices';
	}
	$out = array(
		'name'    => sanitize_text_field( (string) ( $raw['name'] ?? '' ) ),
		// What the PRODUCT PAGE calls this set, when that should differ from
		// the library name. A feed files sets under searchable names ("GD56 -
		// ... Colour", the style code leading so a decorator can find them at
		// two hundred products), and that name worn as the shopper's group
		// heading read as a part number. Empty means the name serves both,
		// which is every hand-made set today.
		'label'   => sanitize_text_field( (string) ( $raw['label'] ?? '' ) ),
		'kind'    => $kind,
		'measure' => array(),
		'table'   => array(),
		'options' => $options,
		// The group (folder) a set is filed under on the list page. Empty means
		// Ungrouped. Managed by drag on the list, never in the set editor.
		'group'   => sanitize_text_field( (string) ( $raw['group'] ?? '' ) ),
		// Where the set came from: a supplier integration writes its own name
		// here when it creates the set. Empty means the merchant built it, and
		// empty is deliberately never given a word of its own on the page:
		// absence is the marking, and only the supplier's rows wear a badge.
		'source'  => sanitize_text_field( (string) ( $raw['source'] ?? '' ) ),
		// Whether a picked choice's photo also becomes the product's main
		// image. Absent means yes, so every set that existed before this
		// switch keeps doing exactly what it did.
		'photo_swaps' => ! isset( $raw['photo_swaps'] ) || ! empty( $raw['photo_swaps'] ),
		// The swatch shape (display only): square, circle or the photo card.
		// Empty means the merchant never chose, which is a REAL state: it
		// renders square, except that a set whose options carry photos
		// prefers the card by itself. Nothing is migrated to a word here,
		// or that preference would die on the first unrelated save.
		'shape'   => in_array( (string) ( $raw['shape'] ?? '' ), array( 'square', 'circle', 'card' ), true ) ? (string) $raw['shape'] : '',
		// D6, display only: past the threshold a long set renders as the
		// list control; this pin keeps the chips regardless, per set.
		'pin_chips' => ! empty( $raw['pin_chips'] ),
		// Whether the storefront shows this set's stock (Sold out / Only N left).
		// Absent means yes - the useful default and downgrade-safe. The guard that
		// prevents overselling is independent of this and always on; turning this
		// off just hides the numbers (and quietly drops a sold-out option).
		'show_stock' => ! isset( $raw['show_stock'] ) || ! empty( $raw['show_stock'] ),
		// Several-of: the shopper may pick MORE THAN ONE choice from this set
		// ("choose up to 3 toppings"), each pick charged its own fee. The
		// bounds are optional; zero means unbounded on that side. A build that
		// never heard of the keys simply reads the set as pick-one, which is
		// the downgrade-safe shape on purpose.
		'multi'     => ! empty( $raw['multi'] ),
		'min'       => 0,
		'max'       => 0,
	);
	if ( $out['multi'] ) {
		$bb_min = min( 100, absint( $raw['min'] ?? 0 ) );
		$bb_max = min( 100, absint( $raw['max'] ?? 0 ) );
		// Bounds that cannot both be met are made lawful, never guessed past:
		// an at-least above the up-to clamps down to it.
		if ( $bb_max > 0 && $bb_min > $bb_max ) {
			$bb_min = $bb_max;
		}
		$out['min'] = $bb_min;
		$out['max'] = $bb_max;
	}
	if ( 'choices' !== $kind ) {
		if ( is_callable( $kinds[ $kind ]['sanitize'] ?? null ) ) {
			$out = array_merge( $out, (array) call_user_func( $kinds[ $kind ]['sanitize'], $raw ) );
		} else {
			$out['measure'] = is_array( $raw['measure'] ?? null ) ? $raw['measure'] : array();
			$out['table']   = is_array( $raw['table'] ?? null ) ? $raw['table'] : array();
		}
	}
	// Modules may carry their own per-set keys through the same sanitise pass,
	// so a set never stores a key nothing cleaned.
	return (array) apply_filters( 'addon_boss_sanitize_option_set', $out, $raw );
}

// =================================================================
// Option-set resolution + snapshot + config sanitisers. Lifted UNCHANGED from
// the earlier bundle-side layout; the option-set library, the cart-snapshot
// contract, the product-options config sanitisers and the active-set resolver.
// =================================================================

/**
 * Save a set (new when $id is empty). Returns the set id. The store is
 * written with autoload OFF: option sets are looked up on demand, never
 * dragged into every request.
 */
function addon_boss_save_option_set( array $set, string $id = '' ): string {
	$id   = addon_boss_option_key_valid( $id ) ? $id : addon_boss_option_key( 'set' );
	$sets = addon_boss_option_sets();

	// The set editor has no group control (grouping lives on the list page), so
	// carry the existing group through an edit rather than clearing it.
	if ( ! isset( $set['group'] ) && isset( $sets[ $id ]['group'] ) ) {
		$set['group'] = $sets[ $id ]['group'];
	}
	// Where the set came from (a supplier feed writes its name here; a set the
	// merchant builds carries none). Carried through edits the same way, so a
	// rename or a reprice never launders a supplier's set into an unmarked one.
	if ( ! isset( $set['source'] ) && isset( $sets[ $id ]['source'] ) ) {
		$set['source'] = $sets[ $id ]['source'];
	} elseif ( isset( $set['source'] ) ) {
		$set['source'] = sanitize_text_field( (string) $set['source'] );
		if ( '' === $set['source'] ) {
			unset( $set['source'] );
		}
	}
	// The same for a caller that never mentions the swatch shape (imports,
	// bulk paths): an explicit shape survives; it is never wiped by omission.
	if ( ! isset( $set['shape'] ) && isset( $sets[ $id ]['shape'] ) ) {
		$set['shape'] = $sets[ $id ]['shape'];
	}
	// And the chip pin: a save that never mentions the toggle must not undo
	// a merchant's explicit "keep the buttons".
	if ( ! isset( $set['pin_chips'] ) && ! empty( $sets[ $id ]['pin_chips'] ) ) {
		$set['pin_chips'] = true;
	}
	// Per-option stock rides through untouched whenever this save cannot speak
	// for it: a build without the plan prints no stock boxes and no display
	// toggle, so its form posts neither. Without this, one Save on a free build
	// would wipe every number the merchant set while on the plan. Stored values
	// are restored by option KEY, so reordering or renaming options is safe.
	if ( ! addon_boss_option_stock_enabled() && isset( $sets[ $id ] ) ) {
		if ( ! isset( $set['show_stock'] ) && isset( $sets[ $id ]['show_stock'] ) ) {
			$set['show_stock'] = $sets[ $id ]['show_stock'];
		}
		$bb_stored_stock = array();
		foreach ( (array) ( $sets[ $id ]['options'] ?? array() ) as $bb_old ) {
			if ( isset( $bb_old['key'], $bb_old['stock'] ) ) {
				$bb_stored_stock[ (string) $bb_old['key'] ] = (int) $bb_old['stock'];
			}
		}
		if ( $bb_stored_stock && ! empty( $set['options'] ) ) {
			foreach ( $set['options'] as &$bb_new ) {
				$bb_k = (string) ( $bb_new['key'] ?? '' );
				if ( '' !== $bb_k && ! isset( $bb_new['stock'] ) && isset( $bb_stored_stock[ $bb_k ] ) ) {
					$bb_new['stock'] = $bb_stored_stock[ $bb_k ];
				}
			}
			unset( $bb_new );
		}
	}
	// The several-of setting and its bounds ride through a save that never
	// mentions them (imports, bulk paths), exactly like the shape and the pin.
	if ( ! isset( $set['multi'] ) && ! empty( $sets[ $id ]['multi'] ) ) {
		$set['multi'] = true;
		foreach ( array( 'min', 'max' ) as $bb_bound ) {
			if ( ! isset( $set[ $bb_bound ] ) && isset( $sets[ $id ][ $bb_bound ] ) ) {
				$set[ $bb_bound ] = $sets[ $id ][ $bb_bound ];
			}
		}
	}
	// A kind this build has no module for cannot repost its own payload (no
	// panel printed a form for it), so the stored payload rides into the save.
	// Losing a merchant's dimensions or price grid to a Save press would be
	// unforgivable; the data waits, whole, for the module that reads it.
	$bb_kind = sanitize_key( (string) ( $set['kind'] ?? 'choices' ) );
	if ( 'choices' !== $bb_kind && '' !== $bb_kind && ! isset( addon_boss_option_set_kinds()[ $bb_kind ] ) && isset( $sets[ $id ] ) ) {
		foreach ( array( 'measure', 'table' ) as $bb_carry ) {
			if ( empty( $set[ $bb_carry ] ) && ! empty( $sets[ $id ][ $bb_carry ] ) ) {
				$set[ $bb_carry ] = $sets[ $id ][ $bb_carry ];
			}
		}
	}
	$sets[ $id ] = addon_boss_sanitize_option_set( $set );

	// update_option() keeps the existing autoload flag, so seed the row with
	// autoload off and update after.
	if ( false === get_option( ADDON_BOSS_OPTION_SETS_STORE, false ) ) {
		add_option( ADDON_BOSS_OPTION_SETS_STORE, array(), '', false );
	}
	update_option( ADDON_BOSS_OPTION_SETS_STORE, $sets, false );
	// Sync the hidden backing product behind each stock-limited option, so Woo
	// owns the count from the moment the merchant sets one.
	addon_boss_provision_option_stock( $id, $sets[ $id ] );
	return $id;
}

/** Delete a set. Product attachments referencing it resolve to nothing. */
function addon_boss_delete_option_set( string $id ): bool {
	$sets = addon_boss_option_sets();
	if ( ! isset( $sets[ $id ] ) ) {
		return false;
	}
	unset( $sets[ $id ] );
	update_option( ADDON_BOSS_OPTION_SETS_STORE, $sets, false );
	// A deleted set leaves no counters behind (the old build left its hidden
	// backing products orphaned here, which nothing ever cleaned).
	if ( function_exists( 'addon_boss_option_stock_prune' ) ) {
		addon_boss_option_stock_prune( $id, array() );
	}
	return true;
}

// -----------------------------------------------------------------
// Per-option stock. A stock-limited option's count lives in ONE ROW of
// our own small table, never in a product. The engine enforces the
// merchant's "stock N on this choice" contract at add-to-cart and at
// checkout (counting the cart), draws the count down on the sale, and
// gives it back on a cancel or a restocking refund.
//
// The count deliberately does NOT live on a WooCommerce product. An
// earlier build minted a hidden product per stocked option "so Woo owns
// the counting", and the audit of what shipped showed Woo never did:
// the backing product was never a line item on any order, so Woo's own
// stock pass, its low-stock mails, its checkout holds and its reports
// never touched it, while the catalogue gained mystery entries the
// founding customer reported as a bug on day one. The one primitive it
// provided was a relative SQL update, which is exactly what the table
// does, minus the product wrapped around it. Every plugin in the
// category that links options to products links products the merchant
// ALREADY SELLS; none of them mint products, and neither do we.
// -----------------------------------------------------------------

// Where the old build kept its counters: an option-name to post-id map, and a
// stamp on each hidden product. Read ONLY by the one-time migration below.
const ADDON_BOSS_OPTION_STOCK_MAP          = 'addon_boss_option_stock_products';
const ADDON_BOSS_OPTION_STOCK_BACKING_META = '_addon_boss_option_stock_backing';

/**
 * Is per-option stock offered by this build? A Pro capability: without it the
 * engine neither tracks nor shows option stock, and every stored number is left
 * exactly as the merchant set it, ready for the plan returning.
 */
function addon_boss_option_stock_enabled(): bool {
	return addon_boss_engine_can( 'option-stock' );
}

/** The counters' table name. */
function addon_boss_option_stock_table(): string {
	global $wpdb;
	return $wpdb->prefix . 'addon_boss_option_stock';
}

/**
 * Create the counters' table. Self-healing on first write rather than an
 * activation hook, so a copied database, a multisite subsite or a build that
 * skipped activation all work the same; the flag keeps the DDL to once.
 */
function addon_boss_option_stock_install(): void {
	global $wpdb;
	if ( '1' === get_option( 'addon_boss_option_stock_db' ) ) {
		return;
	}
	$table = addon_boss_option_stock_table();
	// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- our own table; identifiers cannot be placeholdered.
	$wpdb->query(
		"CREATE TABLE IF NOT EXISTS {$table} (
			set_id     VARCHAR(64) NOT NULL,
			option_key VARCHAR(64) NOT NULL,
			qty        INT NOT NULL DEFAULT 0,
			PRIMARY KEY (set_id, option_key)
		) {$wpdb->get_charset_collate()}"
	);
	update_option( 'addon_boss_option_stock_db', '1', false );
}

/**
 * How many of one option are left, or null when the option tracks no stock
 * (which includes every option on a build without the capability: stored
 * numbers wait untouched, nothing is tracked, nothing is blocked).
 *
 * Floored at zero: a racing pair of orders can take the stored count below
 * zero exactly as WooCommerce's own products allow, and nothing downstream
 * needs the negative, only "none left".
 */
function addon_boss_option_stock_left( string $set_id, string $key ): ?int {
	if ( ! addon_boss_option_stock_enabled() || '1' !== get_option( 'addon_boss_option_stock_db' ) ) {
		return null;
	}
	global $wpdb;
	$table = addon_boss_option_stock_table();
	// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- one primary-key read of our own table; a live count must not be served from cache.
	$qty = $wpdb->get_var( $wpdb->prepare( "SELECT qty FROM {$table} WHERE set_id = %s AND option_key = %s", $set_id, $key ) );
	return null === $qty ? null : max( 0, (int) $qty );
}

/** Set one option's live count (the merchant's typed number, and the migration). */
function addon_boss_option_stock_write( string $set_id, string $key, int $qty ): void {
	addon_boss_option_stock_install();
	global $wpdb;
	$table = addon_boss_option_stock_table();
	// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- upsert into our own table.
	$wpdb->query( $wpdb->prepare( "INSERT INTO {$table} (set_id, option_key, qty) VALUES (%s, %s, %d) ON DUPLICATE KEY UPDATE qty = %d", $set_id, $key, $qty, $qty ) );
}

/**
 * Move one option's live count by a signed amount, in a single relative
 * UPDATE so two orders landing together each take their own units (the same
 * arithmetic wc_update_product_stock does for a product). A row that does not
 * exist moves nothing: an option whose number was cleared takes no decrements
 * and no give-backs, which is what "not tracked" means.
 */
function addon_boss_option_stock_adjust( string $set_id, string $key, int $delta ): void {
	if ( 0 === $delta || '1' !== get_option( 'addon_boss_option_stock_db' ) ) {
		return;
	}
	global $wpdb;
	$table = addon_boss_option_stock_table();
	// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- one relative update of our own table; relative on purpose, see above.
	$wpdb->query( $wpdb->prepare( "UPDATE {$table} SET qty = qty + %d WHERE set_id = %s AND option_key = %s", $delta, $set_id, $key ) );
}

/*
 * =================================================================
 * COMBINATION counters: a colour AND a size together.
 *
 * Per-option counters answer "how many Navy" and "how many XXL", and for a
 * shop holding one pile per choice that is the whole truth. A garment
 * supplier holds a pile per PAIR: forty Black Small, none in Navy Small.
 * Per-option counters cannot say that, and the gap is not cosmetic - a
 * shopper can buy five Navy Small while Navy (fifty, mostly Large) and
 * Small (forty, mostly Black) both look healthy, and the order goes to a
 * supplier who has none.
 *
 * So a product may declare that its counts are kept per combination. The
 * rows live in the SAME table as the option counters, in a bucket of the
 * product's own, which is what makes every seam that already works keep
 * working: the cart's demand walk, the sale-time decrement, the give-back
 * on a refund, the checkout re-read. Only the key is new.
 *
 * Declaring is per product and explicit, because it says WHICH sets the
 * pairs are made of: a tee with Colour, Size and Printing is tracked on
 * colour x size, and the printing choice is not part of the pile.
 *
 * Nothing declares it by hand. A supplier feed does (StockBoss writes the
 * pairs it already holds per item code), and a product that declares
 * nothing behaves exactly as it did before: per-option counters, or
 * nothing at all.
 * =================================================================
 */

/** The sets a product's counts are kept in pairs of, or none. */
const ADDON_BOSS_COMBO_SETS_META = '_addon_boss_combo_sets';

/**
 * Which sets this product tracks combinations across, in a fixed order.
 *
 * @return string[]
 */
function addon_boss_combo_sets( $product ): array {
	if ( ! $product instanceof WC_Product ) {
		$product = function_exists( 'wc_get_product' ) ? wc_get_product( (int) $product ) : null;
	}
	if ( ! $product instanceof WC_Product ) {
		return array();
	}
	$sets = $product->get_meta( ADDON_BOSS_COMBO_SETS_META );
	if ( ! is_array( $sets ) ) {
		return array();
	}
	$out = array();
	foreach ( $sets as $sid ) {
		$sid = (string) $sid;
		if ( '' !== $sid ) {
			$out[] = $sid;
		}
	}
	sort( $out ); // one order, whoever wrote it, so a key never depends on the writer.
	return $out;
}

/** One product's bucket in the counter table. */
function addon_boss_combo_bucket( int $product_id ): string {
	return 'bbpair:' . $product_id;
}

/**
 * The key one combination is counted under.
 *
 * Hashed rather than joined, because two option keys can be 38 characters
 * each and the column holds 64. The pairs a key stands for are always
 * recoverable from the picks themselves, so nothing is lost by hashing.
 *
 * @param array<string,string> $picks set id => option key.
 * @param string[]             $sets  The sets to key on, in their fixed order.
 */
function addon_boss_combo_key( array $picks, array $sets ): string {
	$parts = array();
	foreach ( $sets as $sid ) {
		if ( ! isset( $picks[ $sid ] ) || '' === (string) $picks[ $sid ] ) {
			return ''; // an incomplete pair is not a pair.
		}
		$parts[] = $sid . '::' . $picks[ $sid ];
	}
	return $parts ? substr( sha1( implode( '|', $parts ) ), 0, 40 ) : '';
}

/**
 * The combination a line's option snapshots land on, as a counter row.
 *
 * Returns null when this product tracks no pairs, or when the snapshots do
 * not name every set a pair is made of. The label is the shopper's own
 * words for it ("Deep Black / XXL"), because a refusal that says
 * "bbpair:263" would be useless to everybody.
 *
 * @param array<int,array> $snaps
 * @return array{set:string,key:string,label:string}|null
 */
function addon_boss_combo_row( $product, array $snaps ): ?array {
	$sets = addon_boss_combo_sets( $product );
	if ( ! $sets ) {
		return null;
	}
	$picks  = array();
	$labels = array();
	foreach ( $snaps as $snap ) {
		if ( ! is_array( $snap ) ) {
			continue;
		}
		$sid = (string) ( $snap['set'] ?? '' );
		if ( '' === $sid || ! in_array( $sid, $sets, true ) ) {
			continue;
		}
		$picks[ $sid ]  = (string) ( $snap['key'] ?? '' );
		$labels[ $sid ] = (string) ( $snap['label'] ?? $picks[ $sid ] );
	}
	$key = addon_boss_combo_key( $picks, $sets );
	if ( '' === $key ) {
		return null;
	}
	$words = array();
	foreach ( $sets as $sid ) {
		$words[] = $labels[ $sid ];
	}
	$pid = $product instanceof WC_Product ? $product->get_id() : (int) $product;
	return array(
		'set'   => addon_boss_combo_bucket( $pid ),
		'key'   => $key,
		'label' => implode( ' / ', array_filter( $words ) ),
	);
}

/**
 * Does this product's CHOOSING carry its own counts?
 *
 * True when the pairs are tracked, or when any set the product wears holds a
 * counter of its own. It is the question behind one piece of copy: whether
 * the product-wide "6,454 in stock" means anything to a shopper.
 *
 * On a product whose colours and sizes each carry a number, that figure is
 * every colour and size added together. It answers a question nobody asked,
 * it dwarfs anything anybody can actually buy, and it contradicts the very
 * counts beside it, where the size they want reads sold out. So a product
 * that counts per choice stops printing the total, and a product that
 * counts nothing per choice keeps it, because there the total IS the truth.
 */
function addon_boss_product_counts_per_choice( $product ): bool {
	if ( ! $product instanceof WC_Product ) {
		return false;
	}
	if ( addon_boss_combo_sets( $product ) ) {
		return true;
	}
	if ( ! function_exists( 'addon_boss_standalone_option_sets' ) || ! function_exists( 'addon_boss_option_stock_left' ) ) {
		return false;
	}
	foreach ( (array) addon_boss_standalone_option_sets( $product ) as $set ) {
		foreach ( (array) ( $set['options'] ?? array() ) as $opt ) {
			if ( null !== addon_boss_option_stock_left( (string) ( $set['id'] ?? '' ), (string) ( $opt['key'] ?? '' ) ) ) {
				return true;
			}
		}
	}
	return false;
}

/**
 * A product whose choices carry counts never shows the product-wide one.
 *
 * @param mixed $html    What WooCommerce was going to print.
 * @param mixed $product The product it was printing it for.
 * @return mixed
 */
function addon_boss_no_whole_count( $html, $product = null ) {
	if ( $product instanceof WC_Product
		&& ( addon_boss_product_counts_per_choice( $product )
			|| ( function_exists( 'addon_boss_product_uses_grid' ) && addon_boss_product_uses_grid( $product ) ) ) ) {
		return '';
	}
	return $html;
}
add_filter( 'woocommerce_get_stock_html', 'addon_boss_no_whole_count', 10, 2 );

/**
 * Every tracked pair of a product, keyed by the option keys a shopper picks.
 *
 * The stored key is a hash, which the counters do not need to reverse but a
 * SCREEN does: the chips have to know that Bottle Green plus S is the pile
 * with none in it, before the shopper presses anything. So the cartesian is
 * walked once here and matched against a single read of the bucket, rather
 * than asking the database once per pair.
 *
 * @return array<string,int> "c_bot|s_s" => qty, in the declared set order.
 */
function addon_boss_combo_stock_all( $product ): array {
	$sets = addon_boss_combo_sets( $product );
	if ( ! $sets || ! function_exists( 'addon_boss_option_set' ) ) {
		return array();
	}
	if ( ! $product instanceof WC_Product ) {
		$product = function_exists( 'wc_get_product' ) ? wc_get_product( (int) $product ) : null;
	}
	if ( ! $product instanceof WC_Product || '1' !== get_option( 'addon_boss_option_stock_db' ) ) {
		return array();
	}

	global $wpdb;
	$table = addon_boss_option_stock_table();
	// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- one read of our own table; a live count must not be served from cache.
	$rows = $wpdb->get_results( $wpdb->prepare( "SELECT option_key, qty FROM {$table} WHERE set_id = %s", addon_boss_combo_bucket( $product->get_id() ) ), ARRAY_A );
	if ( ! $rows ) {
		return array();
	}
	$held = array();
	foreach ( $rows as $row ) {
		$held[ (string) $row['option_key'] ] = max( 0, (int) $row['qty'] );
	}

	// The cartesian of the declared sets, in their declared order.
	$combos = array( array() );
	foreach ( $sets as $sid ) {
		$set  = addon_boss_option_set( $sid );
		$next = array();
		foreach ( (array) ( $set['options'] ?? array() ) as $opt ) {
			$key = (string) ( $opt['key'] ?? '' );
			if ( '' === $key ) {
				continue;
			}
			foreach ( $combos as $combo ) {
				$next[] = $combo + array( $sid => $key );
			}
		}
		$combos = $next;
	}

	$out = array();
	foreach ( $combos as $combo ) {
		$hash = addon_boss_combo_key( $combo, $sets );
		if ( '' === $hash || ! array_key_exists( $hash, $held ) ) {
			continue; // this pair tracks nothing.
		}
		$parts = array();
		foreach ( $sets as $sid ) {
			$parts[] = $combo[ $sid ];
		}
		$out[ implode( '|', $parts ) ] = $held[ $hash ];
	}
	return $out;
}

/**
 * How many of one combination are left, or null when this pair is not tracked.
 *
 * A pair the table does not hold reads as NONE rather than as unlimited, and
 * the difference is a real one: the table is written whole every run, so a
 * missing pair is not an unknown, it is a combination the supplier does not
 * make. Half the range is like this - a shop's White tee stops at XXL while
 * its Black one runs to 6XL - and reading those as untracked let a shopper
 * order five White 6XL, which nobody anywhere has.
 *
 * A product whose table is empty is a different thing entirely: nothing is
 * tracked, and everything is offered exactly as it was before.
 */
function addon_boss_combo_stock_left( $product, array $snaps ): ?int {
	$row = addon_boss_combo_row( $product, $snaps );
	if ( null === $row ) {
		return null;
	}
	return addon_boss_counted_left( $row['set'], $row['key'] );
}

/**
 * How many of one COUNTED thing are left, option or pair.
 *
 * The one reader every guard uses, because the two kinds differ in exactly
 * one way and it matters at the till: a missing option row means the option
 * counts nothing, while a missing PAIR row on a product that holds a table
 * means that combination is not made. Reading them the same way is what let
 * five White 6XL through.
 */
function addon_boss_counted_left( string $set_id, string $key ): ?int {
	$left = addon_boss_option_stock_left( $set_id, $key );
	if ( null !== $left || 0 !== strpos( $set_id, 'bbpair:' ) ) {
		return $left;
	}
	return addon_boss_combo_stock_any( $set_id ) ? 0 : null;
}

/**
 * Does this product hold any pairs at all?
 *
 * Asked once per product per request, because it is the difference between
 * "this combination is not made" and "this shop counts nothing", and the
 * cartesian above would otherwise ask it per cell.
 */
function addon_boss_combo_stock_any( string $bucket ): bool {
	static $seen = array();
	if ( isset( $seen[ $bucket ] ) ) {
		return $seen[ $bucket ];
	}
	if ( '1' !== get_option( 'addon_boss_option_stock_db' ) ) {
		$seen[ $bucket ] = false;
		return false;
	}
	global $wpdb;
	$table = addon_boss_option_stock_table();
	// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- one existence check of our own table.
	$seen[ $bucket ] = (bool) $wpdb->get_var( $wpdb->prepare( "SELECT 1 FROM {$table} WHERE set_id = %s LIMIT 1", $bucket ) );
	return $seen[ $bucket ];
}

/**
 * Write one product's whole pair table at once, and say which sets it is
 * keyed on. Whole-table on purpose: a feed knows every pair it holds, and
 * a pair that has left the range should stop being counted rather than
 * linger at its last figure.
 *
 * @param array<int,array{picks:array<string,string>,qty:int}> $pairs
 * @param string[]                                             $sets
 */
function addon_boss_combo_stock_put( $product, array $sets, array $pairs ): void {
	if ( ! $product instanceof WC_Product ) {
		$product = function_exists( 'wc_get_product' ) ? wc_get_product( (int) $product ) : null;
	}
	if ( ! $product instanceof WC_Product || ! function_exists( 'addon_boss_option_stock_write' ) ) {
		return;
	}
	$clean = array();
	foreach ( $sets as $sid ) {
		$sid = (string) $sid;
		if ( '' !== $sid ) {
			$clean[] = $sid;
		}
	}
	sort( $clean );

	$bucket = addon_boss_combo_bucket( $product->get_id() );
	if ( ! $clean || ! $pairs ) {
		// Tracking withdrawn: the declaration goes and so do the rows, so
		// nothing is left half-counted.
		$product->delete_meta_data( ADDON_BOSS_COMBO_SETS_META );
		$product->save();
		addon_boss_option_stock_prune( $bucket, array() );
		return;
	}

	$product->update_meta_data( ADDON_BOSS_COMBO_SETS_META, $clean );
	$product->save();

	$kept = array();
	foreach ( $pairs as $pair ) {
		$key = addon_boss_combo_key( (array) ( $pair['picks'] ?? array() ), $clean );
		if ( '' === $key ) {
			continue;
		}
		$kept[] = $key;
		addon_boss_option_stock_write( $bucket, $key, max( 0, (int) ( $pair['qty'] ?? 0 ) ) );
	}
	addon_boss_option_stock_prune( $bucket, $kept );
}

/**
 * Delete a set's counters, except the keys named. An empty keep-list clears
 * the whole set (a deleted set leaves no counters behind).
 *
 * @param string[] $keep Option keys that still carry a number.
 */
function addon_boss_option_stock_prune( string $set_id, array $keep ): void {
	if ( '1' !== get_option( 'addon_boss_option_stock_db' ) ) {
		return; // no table, nothing to prune.
	}
	global $wpdb;
	$table = addon_boss_option_stock_table();
	if ( ! $keep ) {
		// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- deleting our own rows.
		$wpdb->query( $wpdb->prepare( "DELETE FROM {$table} WHERE set_id = %s", $set_id ) );
		return;
	}
	$holes = implode( ', ', array_fill( 0, count( $keep ), '%s' ) );
	// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.InterpolatedNotPrepared, WordPress.DB.PreparedSQLPlaceholders -- deleting our own rows; the placeholder list is built from count() alone.
	$wpdb->query( $wpdb->prepare( "DELETE FROM {$table} WHERE set_id = %s AND option_key NOT IN ( {$holes} )", array_merge( array( $set_id ), array_values( $keep ) ) ) );
}

/**
 * Keep the counters in step with the merchant's numbers, on every set save.
 *
 * The box in the editor IS the count: typing 10 makes it 10, and emptying the
 * box deletes the row, so an empty box means unlimited everywhere at once and
 * there is no counter left anywhere to go stale. On a build without the plan
 * nothing here runs and the stored numbers ride through the save whole.
 */
function addon_boss_provision_option_stock( string $set_id, array $set ): void {
	if ( ! addon_boss_option_stock_enabled() ) {
		return;
	}
	$tracked = array();
	foreach ( (array) ( $set['options'] ?? array() ) as $opt ) {
		$key = (string) ( $opt['key'] ?? '' );
		if ( '' === $key || ! isset( $opt['stock'] ) || ! is_numeric( $opt['stock'] ) ) {
			continue;
		}
		$tracked[] = $key;
		addon_boss_option_stock_write( $set_id, $key, max( 0, (int) $opt['stock'] ) );
	}
	addon_boss_option_stock_prune( $set_id, $tracked );
}

/**
 * Move every counter out of the old hidden backing products, then remove the
 * products themselves. Runs once (the flag), and belt-and-braces: after the
 * map walk it sweeps for any product still carrying the backing stamp, so a
 * store whose map lost an entry is cleaned too. Counts are only carried over
 * for counters WooCommerce was still managing; a stood-down one was already
 * "cleared" and gets no row.
 */
function addon_boss_migrate_option_stock_backing(): void {
	if ( get_option( 'addon_boss_option_stock_migrated' ) || ! function_exists( 'wc_get_product' ) ) {
		return;
	}
	$map = get_option( ADDON_BOSS_OPTION_STOCK_MAP, null );
	foreach ( is_array( $map ) ? $map : array() as $map_key => $bp_id ) {
		$parts = explode( '::', (string) $map_key, 2 );
		$bp    = wc_get_product( (int) $bp_id );
		if ( $bp instanceof WC_Product ) {
			if ( 2 === count( $parts ) && $bp->managing_stock() ) {
				addon_boss_option_stock_write( $parts[0], $parts[1], max( 0, (int) $bp->get_stock_quantity() ) );
			}
			$bp->delete( true );
		}
	}
	// Strays the map forgot: anything still stamped as a backing product goes.
	global $wpdb;
	// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching -- a one-time migration sweep.
	$stray_ids = $wpdb->get_col( $wpdb->prepare( "SELECT post_id FROM {$wpdb->postmeta} WHERE meta_key = %s", ADDON_BOSS_OPTION_STOCK_BACKING_META ) );
	foreach ( array_map( 'intval', (array) $stray_ids ) as $stray ) {
		$bp = wc_get_product( $stray );
		if ( $bp instanceof WC_Product ) {
			$bp->delete( true );
		}
	}
	delete_option( ADDON_BOSS_OPTION_STOCK_MAP );
	update_option( 'addon_boss_option_stock_migrated', '1', false );
}
add_action( 'admin_init', 'addon_boss_migrate_option_stock_backing', 5 );

/**
 * The cart line this request is replacing, when the options form posted its
 * "edit this line" marker AND that marker really names a line of this product
 * in this visitor's own cart. Anything else excludes nothing, so a stale or
 * crossed-up marker can never discount stock that stays in the cart. The test
 * is deliberately the same one addon_boss_edit_apply_replace makes before it
 * removes the old line, so we only ever discount a line that is about to go.
 */
function addon_boss_editing_cart_line( int $product_id ): string {
	if ( ! isset( $_REQUEST['bb_edit_line'] ) || ! function_exists( 'WC' ) || null === WC()->cart ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- presence check; the key still has to resolve to this visitor's own line below.
		return '';
	}
	$key = sanitize_text_field( wp_unslash( (string) $_REQUEST['bb_edit_line'] ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended
	if ( '' === $key ) {
		return '';
	}
	$line = WC()->cart->get_cart_item( $key );
	if ( ! is_array( $line ) || (int) ( $line['product_id'] ?? 0 ) !== $product_id ) {
		return '';
	}
	return $key;
}

/**
 * The set an interop snapshot came from, back out of its axis name.
 *
 * A bundle's component picks ride the neutral house shape, which names the set
 * by the axis addon_boss_virtual_attr_name() minted rather than by id, and the
 * asking plugin slugifies that name because it becomes a form field. Rather
 * than assume the round trip survives slugification, the known sets are asked
 * which of them mints this axis.
 */
function addon_boss_set_id_from_axis( string $axis ): string {
	if ( '' === $axis ) {
		return '';
	}
	foreach ( array_keys( addon_boss_option_sets() ) as $id ) {
		$mine = addon_boss_virtual_attr_name( (string) $id );
		if ( $axis === $mine || $axis === sanitize_title( $mine ) ) {
			return (string) $id;
		}
	}
	return '';
}

/**
 * What a BundleBoss bundle's validated selections ask of stocked options.
 *
 * A bundle is one cart line holding several components, so demand is each
 * component's own quantity times the line's. Returns [ "set::key" => row ].
 *
 * @param mixed $selections The bundle payload's selections (cart or order line).
 * @param int   $line_qty   How many of that bundle.
 */
function addon_boss_bundle_option_demand( $selections, int $line_qty = 1 ): array {
	$out = array();
	foreach ( (array) $selections as $sel ) {
		$unit = max( 1, (int) ( $sel['qty'] ?? 1 ) );
		foreach ( (array) ( ( is_array( $sel ) ? $sel['options'] : null ) ?? array() ) as $snap ) {
			$set = addon_boss_set_id_from_axis( (string) ( $snap['axis'] ?? '' ) );
			$key = (string) ( $snap['key'] ?? '' );
			if ( '' === $set || '' === $key ) {
				continue;
			}
			$mk = $set . '::' . $key;
			if ( ! isset( $out[ $mk ] ) ) {
				$out[ $mk ] = array(
					'set'   => $set,
					'key'   => $key,
					'label' => (string) ( $snap['label'] ?? $key ),
					'qty'   => 0,
				);
			}
			$out[ $mk ]['qty'] += $unit * max( 1, $line_qty );
		}
	}
	return $out;
}

/**
 * Everything the whole cart currently asks of stocked options, keyed
 * "set::key". Counts BOTH a product bought on its own page and the same
 * product bought inside a bundle: one shelf, however the sale is dressed.
 */
function addon_boss_cart_option_demand( string $exclude_key = '' ): array {
	$out = array();
	if ( ! function_exists( 'WC' ) || null === WC()->cart ) {
		return $out;
	}
	$add = static function ( array &$out, string $set, string $key, string $label, int $qty ): void {
		if ( '' === $set || '' === $key || $qty < 1 ) {
			return;
		}
		$mk = $set . '::' . $key;
		if ( ! isset( $out[ $mk ] ) ) {
			$out[ $mk ] = array(
				'set'   => $set,
				'key'   => $key,
				'label' => $label,
				'qty'   => 0,
			);
		}
		$out[ $mk ]['qty'] += $qty;
	};

	foreach ( WC()->cart->get_cart() as $cart_key => $item ) {
		if ( '' !== $exclude_key && $cart_key === $exclude_key ) {
			continue;
		}
		$line_qty = max( 0, (int) ( $item['quantity'] ?? 0 ) );
		if ( $line_qty < 1 ) {
			continue;
		}
		$bb_snaps = (array) ( $item[ ADDON_BOSS_STANDALONE_OPTIONS_KEY ] ?? array() );
		foreach ( $bb_snaps as $snap ) {
			$add( $out, (string) ( $snap['set'] ?? '' ), (string) ( $snap['key'] ?? '' ), (string) ( $snap['label'] ?? '' ), $line_qty );
		}
		// The pair this line lands on, when the product counts in pairs. It
		// rides the same demand list as any option, so the cart re-read, the
		// sale-time decrement and the give-back all reach it unchanged.
		$bb_pair = addon_boss_combo_row( (int) ( $item['product_id'] ?? 0 ), $bb_snaps );
		if ( null !== $bb_pair ) {
			$add( $out, $bb_pair['set'], $bb_pair['key'], $bb_pair['label'], $line_qty );
		}
		foreach ( addon_boss_bundle_option_demand( $item['bundle_boss']['selections'] ?? array(), $line_qty ) as $row ) {
			$add( $out, $row['set'], $row['key'], $row['label'], (int) $row['qty'] );
		}
	}
	return $out;
}

/**
 * Is there room for this many of one counted thing, counting the cart?
 *
 * One voice for an option and for a pair, because the arithmetic and the
 * apology are identical and only the name differs.
 *
 * @param array{set:string,key:string,label:string} $row
 * @return WP_Error|null
 */
function addon_boss_stock_shortfall( array $row, int $add_qty, string $exclude_key = '' ) {
	$have = addon_boss_counted_left( $row['set'], $row['key'] );
	if ( null === $have ) {
		return null; // not tracked: unlimited.
	}
	$label = (string) ( $row['label'] ?? '' );
	if ( $have <= 0 ) {
		/* translators: %s: the choice, or the colour and size together */
		return new WP_Error( 'addon_boss', sprintf( __( 'Sorry, "%s" is out of stock.', 'addon-boss' ), $label ) );
	}
	$in = addon_boss_option_qty_in_cart( $row['set'], $row['key'], $exclude_key );
	if ( $in + $add_qty > $have ) {
		$left = max( 0, $have - $in );
		return new WP_Error(
			'addon_boss',
			sprintf(
				/* translators: 1: units still available, 2: the choice, or the colour and size together */
				_n( 'Sorry, only %1$d of "%2$s" is left.', 'Sorry, only %1$d of "%2$s" are left.', $left, 'addon-boss' ),
				$left,
				$label
			)
		);
	}
	return null;
}

/** How many of one option the cart already holds, on its own page or in a bundle. */
function addon_boss_option_qty_in_cart( string $set_id, string $key, string $exclude_key = '' ): int {
	$demand = addon_boss_cart_option_demand( $exclude_key );
	return (int) ( $demand[ $set_id . '::' . $key ]['qty'] ?? 0 );
}

/**
 * Refuse an add that would sell more of a stock-limited option than exist,
 * counting what the cart already holds. Returns true when every picked option
 * has room (or tracks no stock), or a WP_Error naming the short option.
 */
function addon_boss_check_option_stock( $product, $snaps, int $add_qty, string $exclude_key = '' ) {
	if ( ! is_array( $snaps ) || $add_qty < 1 ) {
		return true;
	}
	// The pair first, because it is the most specific thing anybody can be
	// short of: "Deep Black / XXL" is a truer refusal than "XXL", and a shop
	// that counts pairs has already said the per-option totals are not the
	// question.
	$bb_pair = addon_boss_combo_row( $product, $snaps );
	if ( null !== $bb_pair ) {
		$bb_err = addon_boss_stock_shortfall( $bb_pair, $add_qty, $exclude_key );
		if ( is_wp_error( $bb_err ) ) {
			return $bb_err;
		}
	}
	foreach ( $snaps as $snap ) {
		$set_id = (string) ( $snap['set'] ?? '' );
		$key    = (string) ( $snap['key'] ?? '' );
		if ( '' === $set_id || '' === $key ) {
			continue;
		}
		$have = addon_boss_option_stock_left( $set_id, $key );
		if ( null === $have ) {
			continue; // this option tracks no stock: unlimited.
		}
		$label = (string) ( $snap['label'] ?? $key );
		if ( $have <= 0 ) {
			/* translators: %s: option name */
			return new WP_Error( 'addon_boss', sprintf( __( 'Sorry, "%s" is out of stock.', 'addon-boss' ), $label ) );
		}
		$in = addon_boss_option_qty_in_cart( $set_id, $key, $exclude_key );
		if ( $in + $add_qty > $have ) {
			$left = max( 0, $have - $in );
			return new WP_Error(
				'addon_boss',
				sprintf(
					/* translators: 1: units still available, 2: option name */
					_n( 'Sorry, only %1$d of "%2$s" is left.', 'Sorry, only %1$d of "%2$s" are left.', $left, 'addon-boss' ),
					$left,
					$label
				)
			);
		}
	}
	return true;
}

// The add-to-cart gate is not the last word: a shopper can raise the quantity
// box on the cart page, and a cart restored from a session can outlive the
// stock it was built against. WooCommerce re-reads its own products here, on
// the way to checkout, so option stock is re-read at the same seam - counting
// the WHOLE cart, since two lines can draw on one option.
add_action( 'woocommerce_check_cart_items', 'addon_boss_check_cart_option_stock' );

function addon_boss_check_cart_option_stock(): void {
	if ( ! function_exists( 'WC' ) || null === WC()->cart ) {
		return;
	}
	foreach ( addon_boss_cart_option_demand() as $row ) {
		$have = addon_boss_counted_left( $row['set'], $row['key'] );
		if ( null === $have ) {
			continue; // this option tracks no stock: unlimited.
		}
		if ( $have <= 0 ) {
			wc_add_notice(
				sprintf(
					/* translators: %s: option name */
					__( 'Sorry, "%s" is out of stock. Please remove it from your cart.', 'addon-boss' ),
					$row['label']
				),
				'error'
			);
			continue;
		}
		if ( $row['qty'] > $have ) {
			wc_add_notice(
				sprintf(
					/* translators: 1: units still available, 2: option name */
					_n(
						'Sorry, only %1$d of "%2$s" is left. Please lower the quantity in your cart.',
						'Sorry, only %1$d of "%2$s" are left. Please lower the quantity in your cart.',
						max( 0, $have ),
						'addon-boss'
					),
					max( 0, $have ),
					$row['label']
				),
				'error'
			);
		}
	}
}

// Decrement at the sale, restore on a cancel. An option is never a line item,
// so WooCommerce's own stock pass never sees it: we ride the SAME order-stock
// actions WC fires, once per order (guarded by an order flag, exactly like
// WC's _order_stock_reduced), and move each counter with one relative UPDATE,
// the same arithmetic WC's own stock update runs for a product.
add_action( 'woocommerce_reduce_order_stock', 'addon_boss_reduce_order_option_stock', 10, 1 );
add_action( 'woocommerce_restore_order_stock', 'addon_boss_restore_order_option_stock', 10, 1 );

function addon_boss_reduce_order_option_stock( $order ): void {
	addon_boss_adjust_order_option_stock( $order, 'decrease' );
}

function addon_boss_restore_order_option_stock( $order ): void {
	addon_boss_adjust_order_option_stock( $order, 'increase' );
}

/**
 * What one order line asks of stocked options, keyed "set::key".
 *
 * A line is either a product bought on its own page, which froze its picks
 * under our own key, or a BundleBoss bundle, which froze its components' picks
 * under BundleBoss's. Both are sales of the same jars off the same shelf.
 *
 * @param WC_Order_Item $item     The order line.
 * @param int           $line_qty How many of that line.
 */
function addon_boss_order_item_option_demand( $item, int $line_qty ): array {
	$out       = array();
	$bb_snaps  = (array) $item->get_meta( '_bundle_boss_standalone_options' );
	$bb_pair   = addon_boss_combo_row( (int) $item->get_product_id(), $bb_snaps );
	if ( null !== $bb_pair ) {
		// Counted like any option, so a sale takes the pair down and a refund
		// puts it back, through the machinery that already does both.
		$out[ $bb_pair['set'] . '::' . $bb_pair['key'] ] = array(
			'set'   => $bb_pair['set'],
			'key'   => $bb_pair['key'],
			'label' => $bb_pair['label'],
			'qty'   => $line_qty,
		);
	}
	foreach ( $bb_snaps as $snap ) {
		$set = (string) ( is_array( $snap ) ? ( $snap['set'] ?? '' ) : '' );
		$key = (string) ( is_array( $snap ) ? ( $snap['key'] ?? '' ) : '' );
		if ( '' === $set || '' === $key ) {
			continue;
		}
		$out[ $set . '::' . $key ] = array(
			'set'   => $set,
			'key'   => $key,
			'label' => (string) ( $snap['label'] ?? $key ),
			'qty'   => $line_qty,
		);
	}
	foreach ( addon_boss_bundle_option_demand( $item->get_meta( '_bundle_boss_selections' ), $line_qty ) as $mk => $row ) {
		if ( isset( $out[ $mk ] ) ) {
			$out[ $mk ]['qty'] += (int) $row['qty'];
			continue;
		}
		$out[ $mk ] = $row;
	}
	return $out;
}

/**
 * Move every stocked option in an order by its ordered quantity, once. The flag
 * mirrors WooCommerce's reduce-once discipline, so a re-fired hook, a status
 * bounce or a manual "reduce stock" never double-counts.
 */
function addon_boss_adjust_order_option_stock( $order, string $direction ): void {
	if ( ! $order instanceof WC_Order ) {
		$order = wc_get_order( $order );
	}
	if ( ! $order ) {
		return;
	}
	$flag    = '_addon_boss_option_stock_reduced';
	$reduced = 'yes' === $order->get_meta( $flag );
	if ( 'decrease' === $direction && $reduced ) {
		return; // already off stock.
	}
	if ( 'increase' === $direction && ! $reduced ) {
		return; // nothing of ours to give back.
	}
	foreach ( $order->get_items() as $item ) {
		$qty = (int) $item->get_quantity();
		if ( $qty < 1 ) {
			continue;
		}
		foreach ( addon_boss_order_item_option_demand( $item, $qty ) as $row ) {
			if ( null === addon_boss_option_stock_left( $row['set'], $row['key'] ) ) {
				continue; // not tracked: nothing to move.
			}
			addon_boss_option_stock_adjust( $row['set'], $row['key'], ( 'decrease' === $direction ? -1 : 1 ) * (int) $row['qty'] );
		}
	}
	$order->update_meta_data( $flag, 'decrease' === $direction ? 'yes' : 'no' );
	$order->save();
}

// A refund with "restock refunded items" gives option stock back too. WC's own
// wc_restock_refunded_items only touches real line items, so we ride the refund
// event and lift each stocked option by the refunded quantity - honouring the
// merchant's restock choice ($args['restock_items']) exactly as WooCommerce does.
add_action( 'woocommerce_create_refund', 'addon_boss_restock_refunded_option_stock', 10, 2 );

function addon_boss_restock_refunded_option_stock( $refund, $args ): void {
	if ( empty( $args['restock_items'] ) || empty( $args['line_items'] ) ) {
		return;
	}
	$order_id = (int) ( $args['order_id'] ?? ( $refund instanceof WC_Order_Refund ? $refund->get_parent_id() : 0 ) );
	$order    = $order_id ? wc_get_order( $order_id ) : null;
	if ( ! $order ) {
		return;
	}
	// Only give back what a sale actually took off.
	if ( 'yes' !== $order->get_meta( '_addon_boss_option_stock_reduced' ) ) {
		return;
	}
	foreach ( (array) $args['line_items'] as $item_id => $data ) {
		$qty = abs( (int) round( (float) ( $data['qty'] ?? 0 ) ) );
		if ( $qty < 1 ) {
			continue;
		}
		$item = $order->get_item( (int) $item_id );
		if ( ! $item ) {
			continue;
		}
		// The refunded quantity is a count of LINES, so a bundle gives back
		// whatever each bundle held, exactly as the sale took it off.
		foreach ( addon_boss_order_item_option_demand( $item, $qty ) as $row ) {
			if ( null === addon_boss_option_stock_left( $row['set'], $row['key'] ) ) {
				continue; // not tracked (or cleared since the sale): nothing to give back.
			}
			addon_boss_option_stock_adjust( $row['set'], $row['key'], (int) $row['qty'] );
		}
	}
}

// -----------------------------------------------------------------
// Starter library — ready-made sets a shop imports as its OWN copy
// -----------------------------------------------------------------

/**
 * The shipped ready-made sets. Swatches resolve through the engine's
 * colour-name map where it exists, so garment colours arrive with correct
 * chips and zero typing. These are templates: importing COPIES one into the
 * shop's saved sets, where it is fully editable and deletable.
 *
 * @return array<string,array{name:string,options:array[]}>
 */
function addon_boss_option_starter_sets(): array {
	$swatch = static function ( string $name ): string {
		return function_exists( 'addon_boss_swatch_from_name' ) ? addon_boss_swatch_from_name( $name ) : '';
	};
	$colours = static function ( array $names ) use ( $swatch ): array {
		$out = array();
		foreach ( $names as $name ) {
			$out[] = array( 'label' => $name, 'swatch' => $swatch( $name ) );
		}
		return $out;
	};
	$plain = static function ( array $labels ): array {
		$out = array();
		foreach ( $labels as $label ) {
			$out[] = array( 'label' => $label );
		}
		return $out;
	};

	return array(
		'starter_garment_colours' => array(
			'name'    => __( 'Garment colours', 'addon-boss' ),
			'purpose' => __( 'For apparel and workwear', 'addon-boss' ),
			'options' => $colours( array( 'Black', 'White', 'Navy', 'Royal Blue', 'Red', 'Burgundy', 'Charcoal', 'Heather Grey', 'Forest Green', 'Orange', 'Yellow', 'Pink' ) ),
		),
		'starter_sizes_s_4xl'     => array(
			'name'    => __( 'Sizes S to 4XL', 'addon-boss' ),
			'purpose' => __( 'Clothing sizes', 'addon-boss' ),
			'options' => $plain( array( 'S', 'M', 'L', 'XL', '2XL', '3XL', '4XL' ) ),
		),
		'starter_shoe_sizes_uk'   => array(
			'name'    => __( 'UK shoe sizes', 'addon-boss' ),
			'purpose' => __( 'Footwear', 'addon-boss' ),
			'options' => $plain( array( 'UK 6', 'UK 7', 'UK 8', 'UK 9', 'UK 10', 'UK 11', 'UK 12' ) ),
		),
		'starter_paper_sizes'     => array(
			'name'    => __( 'Paper and board sizes', 'addon-boss' ),
			'purpose' => __( 'Print and signage', 'addon-boss' ),
			'options' => $plain( array( 'A6', 'A5', 'A4', 'A3', 'A2', 'A1', 'A0' ) ),
		),
		'starter_bag_weights'     => array(
			'name'    => __( 'Bag weights', 'addon-boss' ),
			'purpose' => __( 'Sweets and food', 'addon-boss' ),
			'options' => $plain( array( '100g', '250g', '500g', '1kg' ) ),
		),
		'starter_finishes'        => array(
			'name'    => __( 'Finishes', 'addon-boss' ),
			'purpose' => __( 'Print, signs and framing', 'addon-boss' ),
			// Real starting numbers, like the price-table templates: the plain
			// finishes free, the laminates carrying a modest charge, every one
			// editable the moment the set is the shop's own.
			'options' => array(
				array( 'label' => __( 'Matt', 'addon-boss' ) ),
				array( 'label' => __( 'Gloss', 'addon-boss' ) ),
				array( 'label' => __( 'Satin', 'addon-boss' ) ),
				array(
					'label' => __( 'Matt laminated', 'addon-boss' ),
					'delta' => 3.0,
				),
				array(
					'label' => __( 'Gloss laminated', 'addon-boss' ),
					'delta' => 3.0,
				),
			),
		),
		'starter_addons'          => array(
			'name'    => __( 'Add-ons', 'addon-boss' ),
			'purpose' => __( 'Charged extras for any shop', 'addon-boss' ),
			// A true extras list is several-of: shoppers may take more than one,
			// each pick charged its own fee, so the set imports that way.
			'multi'   => true,
			'options' => array(
				array(
					'label' => __( 'Gift wrap', 'addon-boss' ),
					'delta' => 3.5,
				),
				array(
					'label' => __( 'Gift box', 'addon-boss' ),
					'delta' => 5.0,
				),
				array(
					'label' => __( 'Handwritten card', 'addon-boss' ),
					'delta' => 1.5,
				),
				array(
					'label' => __( 'Priority dispatch', 'addon-boss' ),
					'delta' => 9.95,
				),
			),
		),
	);
}

/**
 * The id of a saved set whose name matches, or '' when none does. The starter
 * shelf uses it so a ready-made set already imported reads as "Added", and
 * re-importing opens the existing copy instead of silently making a duplicate.
 */
function addon_boss_option_set_id_by_name( string $name ): string {
	foreach ( addon_boss_option_sets() as $id => $set ) {
		if ( isset( $set['name'] ) && (string) $set['name'] === $name ) {
			return (string) $id;
		}
	}
	return '';
}

/**
 * Import a starter set as a new saved set the shop owns. Returns the new
 * set id, or '' for an unknown starter.
 */
function addon_boss_import_starter_set( string $starter_id ): string {
	$starters = addon_boss_option_starter_sets();
	if ( ! isset( $starters[ $starter_id ] ) ) {
		return '';
	}
	return addon_boss_save_option_set( $starters[ $starter_id ] );
}

// -----------------------------------------------------------------
// Product attachment (Shape B: options live on the product)
// -----------------------------------------------------------------

/**
 * The raw attachment config on a product: which sets it comes in, whether
 * each is required, and any per-product delta and photo overrides.
 *
 * @return array<int,array{set:string,required:bool,deltas:array<string,float>,images:array<string,int>}>
 */
/**
 * Whether anything is offering choices and fields ON A PRODUCT'S OWN TERMS.
 *
 * Inside AddOnBoss the feature is always its own, so the default is simply
 * true; the filter stays so a site can switch the surface off. Same shape,
 * and the same reasoning, as addon_boss_positions_available().
 */
function addon_boss_options_available(): bool {
	return (bool) apply_filters( 'addon_boss_options_available', true );
}

/**
 * The words a SHOPPER sees for a set: its display label, else its name.
 *
 * One function because the words surface in five places (the group heading,
 * the pick snapshot the cart and order print, the virtual attribute label,
 * the required and bounds messages), and five copies of "label or name"
 * would drift.
 */
function addon_boss_set_shopper_name( array $set ): string {
	$bb_label = (string) ( $set['label'] ?? '' );
	return '' !== $bb_label ? $bb_label : (string) ( $set['name'] ?? '' );
}

function addon_boss_product_option_config( $product ): array {
	// The chokepoint. Both the option-set resolver and the product-field
	// resolver read through here, so one gate makes the whole per-product
	// feature inert: no sets, no fields, no grid, no standalone surface, and
	// nothing chargeable. Stored data simply lies dormant rather than being
	// migrated or deleted, exactly as it does for positions.
	if ( ! $product instanceof WC_Product || ! addon_boss_options_available() ) {
		return array();
	}
	$cfg = $product->get_meta( ADDON_BOSS_PRODUCT_OPTIONS_META );
	return is_array( $cfg ) ? $cfg : array();
}

/**
 * Sanitise + save the attachment config. Override deltas keep an explicit
 * zero (it is a value that beats the set default) and drop empty strings
 * (absence, meaning "use the default").
 */
function addon_boss_save_product_option_config( $product, array $raw ): void {
	if ( ! $product instanceof WC_Product ) {
		return;
	}
	$clean = addon_boss_sanitize_product_option_config( $raw );
	if ( $clean ) {
		$product->update_meta_data( ADDON_BOSS_PRODUCT_OPTIONS_META, $clean );
	} else {
		$product->delete_meta_data( ADDON_BOSS_PRODUCT_OPTIONS_META );
	}
	$product->save();
}

// How a product with several option groups lays them out. Stacked is plain
// block flow, so it is theme-proof and stays the default for every product that
// has never been told otherwise.
const ADDON_BOSS_OPTIONS_LAYOUT_META = '_bundle_boss_options_layout';

/**
 * The layouts this build can actually draw.
 *
 * Every key here MUST be honoured by the renderer. "Step by step" was listed
 * before it was built: the menu offered it, the save accepted it, and the page
 * came out identical to stacked, so a merchant chose a layout and got nothing.
 * A control that does not do its job is worse than an absent one, because the
 * merchant spends their time wondering what they did wrong. It comes back when
 * there is a renderer behind it, and LayoutsRenderTest fails the moment this
 * list grows a key the renderer does not branch on.
 *
 * Deliberately no tabs. They are the worst of the options for a form: they hide
 * sibling groups behind a click, so a shopper cannot see what is left to decide,
 * and they are the most fragile thing to put inside a page builder's column.
 *
 * @return array<string,string> Layout key => the merchant-facing name.
 */
function addon_boss_options_layouts(): array {
	$out = array( 'stacked' => __( 'One after another', 'addon-boss' ) );
	// A layout beyond the engine's own flow registers from the module that
	// draws it, so the menu can never offer a page this build cannot render.
	return (array) apply_filters( 'addon_boss_options_layouts', $out );
}

/**
 * The layout to draw a product's option groups in.
 *
 * Anything this build cannot draw falls back to stacked, which can render any
 * configuration. The STORED value is left alone, exactly as a repeatable field's
 * setting is, so a lapsed licence shows the plain layout for a while rather than
 * losing what the merchant chose.
 *
 * @param WC_Product|int|null $product
 * @return string
 */
function addon_boss_options_layout( $product ): string {
	$product = $product instanceof WC_Product ? $product : ( $product ? wc_get_product( $product ) : null );
	if ( ! $product instanceof WC_Product ) {
		return 'stacked';
	}
	$want = (string) $product->get_meta( ADDON_BOSS_OPTIONS_LAYOUT_META );
	return isset( addon_boss_options_layouts()[ $want ] ) ? $want : 'stacked';
}

/**
 * Store the chosen layout. An unknown value, or the default, stores nothing, so
 * a product only carries this meta once it actually differs from plain flow.
 *
 * @param WC_Product $product
 * @param string     $layout
 */
function addon_boss_save_options_layout( WC_Product $product, string $layout ): void {
	// Validated against what this build OFFERS, plus whatever the product
	// already carries: a repost of the stored value on a build without the
	// module keeps the merchant's choice rather than resetting it, while a
	// layout nothing registered and nothing stored is refused, because
	// accepting it would store a choice that can never show up on the page.
	// (The caller only reaches here when the picker was actually on the
	// screen that posted, so an absent control can never blank a choice.)
	$known  = array_keys( addon_boss_options_layouts() );
	$stored = (string) $product->get_meta( ADDON_BOSS_OPTIONS_LAYOUT_META );
	if ( '' !== $stored && ! in_array( $stored, $known, true ) ) {
		$known[] = $stored;
	}
	if ( in_array( $layout, $known, true ) && 'stacked' !== $layout ) {
		$product->update_meta_data( ADDON_BOSS_OPTIONS_LAYOUT_META, $layout );
	} else {
		$product->delete_meta_data( ADDON_BOSS_OPTIONS_LAYOUT_META );
	}
}

/**
 * The RESOLVED, render-ready option sets for a product: attachment plus set
 * data merged, cascade applied (set default delta, then product override).
 * Variable PARENTS resolve too: their variations keep owning colour, size,
 * stock and photos, and sets ride on top as extras priced per pick (88% of
 * the founding customer's variable catalogue carries add-on fields).
 * Variation objects resolve nothing (sets live on the parent), and
 * attachments whose set no longer exists degrade silently.
 *
 * @return array<int,array{id:string,name:string,required:bool,options:array[]}>
 */
function addon_boss_product_option_sets( $product ): array {
	if ( ! $product instanceof WC_Product || $product->is_type( 'variation' ) ) {
		return array();
	}
	$resolved = array();
	// Flattened so a set inside a GROUP resolves (and prices) exactly like a
	// top-level one; grouping is presentation only.
	foreach ( addon_boss_flatten_option_config( addon_boss_product_option_config( $product ) ) as $row ) {
		if ( ( $row['row_type'] ?? '' ) === 'field' || ! isset( $row['set'] ) ) {
			continue; // field rows carry no set for this set-only resolver.
		}
		$set = addon_boss_option_set( $row['set'] );
		if ( ! $set ) {
			continue; // deleted set: degrade silently, never fatally.
		}
		// An empty choices set offers nothing; a kind priced off its own panel
		// (its payload stored under measure or table) is whole WITHOUT option
		// rows (pure custom sizing is a real shop). This reads the stored
		// SHAPE only; whatever maths prices the payload lives with its module.
		$bb_kind_whole = 'choices' !== ( $set['kind'] ?? 'choices' )
			&& ( ! empty( $set['measure']['dims'] ) || ! empty( $set['table']['a_labels'] ) );
		if ( empty( $set['options'] ) && ! $bb_kind_whole ) {
			continue;
		}
		// Choices this product does not offer. Applied HERE, in the resolver,
		// so the page, the validation, the price and the cart all read one
		// list: a hidden key is refused at add-to-cart for exactly the reason
		// an invented one is, because by this point they are the same thing.
		// (The discipline is BundleBoss's, ported with the feature.)
		$bb_hidden = array_flip( array_map( 'strval', (array) ( $row['hide'] ?? array() ) ) );
		$options = array();
		foreach ( $set['options'] as $opt ) {
			if ( isset( $bb_hidden[ (string) $opt['key'] ] ) ) {
				continue;
			}
			$options[] = array(
				'key'      => $opt['key'],
				'label'    => $opt['label'],
				'swatch'   => $opt['swatch'],
				'swatch2'  => $opt['swatch2'] ?? '',
				'desc'     => $opt['desc'] ?? '',
				// The photo cascades exactly like the charge: the set may carry a
				// default, the product override wins (sets are shared, but the
				// blue photo of THIS product is this product's business).
				'image_id' => isset( $row['images'][ $opt['key'] ] ) ? (int) $row['images'][ $opt['key'] ] : (int) $opt['image_id'],
				'delta'    => array_key_exists( $opt['key'], $row['deltas'] ) ? (float) $row['deltas'][ $opt['key'] ] : (float) $opt['delta'],
				'dims'     => (array) ( $opt['dims'] ?? array() ),
			);
		}
		// Hidden down to nothing: the set is not offered at all. A required set
		// with no choice left would block the product for good, and an empty one
		// is chrome around nothing either way.
		if ( ! $options && ! $bb_kind_whole ) {
			continue;
		}
		// The measured rate cascades exactly like the choice photos and deltas:
		// the set carries the default, and a rate on this product's attachment
		// row wins here alone. Overlaid at the resolver, the one seam every
		// surface reads, so the page, the JS payload, the validation and the
		// cart all price from the same number without the measured module
		// knowing the feature exists.
		$bb_measure = (array) ( $set['measure'] ?? array() );
		if ( isset( $row['rate'] ) && '' !== $row['rate'] && 'measured' === (string) ( $set['kind'] ?? 'choices' ) ) {
			$bb_measure['rate'] = (float) $row['rate'];
		}
		// Modules ride the same seam (the one list every surface reads), with
		// the stored set and the product's own row both in hand for cascades.
		$resolved[] = (array) apply_filters( 'addon_boss_resolved_set_row', array(
			'id'        => $row['set'],
			'name'      => $set['name'],
			// The shopper-facing heading, when it differs from the library
			// name. Carried or it dies here (see the whitelist note below).
			'label'     => (string) ( $set['label'] ?? '' ),
			'required'  => ! empty( $row['required'] ),
			'when'      => is_array( $row['when'] ?? null ) ? $row['when'] : array(),
			'kind'      => (string) ( $set['kind'] ?? 'choices' ),
			'measure'   => $bb_measure,
			'table'     => (array) ( $set['table'] ?? array() ),
			'shape'     => (string) ( $set['shape'] ?? '' ),
			'pin_chips' => ! empty( $set['pin_chips'] ),
			// Absent means on (downgrade-safe): only an explicit false hides stock.
			'show_stock' => ! isset( $set['show_stock'] ) || ! empty( $set['show_stock'] ),
			// 🔴 This list is a WHITELIST, not a passthrough. A flag added to the
			// set editor and the sanitiser but not to this line is saved, shown
			// ticked in the admin, and then silently absent everywhere the
			// storefront reads it. Same downgrade-safe reading as show_stock:
			// absent means on, only an explicit false stops the swap.
			'photo_swaps' => ! isset( $set['photo_swaps'] ) || ! empty( $set['photo_swaps'] ),
			'multi'     => ! empty( $set['multi'] ),
			'min'       => max( 0, (int) ( $set['min'] ?? 0 ) ),
			'max'       => max( 0, (int) ( $set['max'] ?? 0 ) ),
			'options'   => $options,
		), $set, $row );
	}
	return $resolved;
}

// -----------------------------------------------------------------
// The cart snapshot contract
// -----------------------------------------------------------------

/**
 * Snapshot one pick against a RESOLVED set: the exact array the cart will
 * carry. Null when the key is not in the set — the server-side validation
 * building block (a DOM-invented key never reaches the cart).
 *
 * @return array{set:string,set_name:string,key:string,label:string,delta:float}|null
 */
function addon_boss_option_snapshot( array $resolved_set, string $key ): ?array {
	foreach ( (array) ( $resolved_set['options'] ?? array() ) as $opt ) {
		if ( ( $opt['key'] ?? '' ) === $key ) {
			return array(
				'set'      => (string) ( $resolved_set['id'] ?? '' ),
				'set_name' => addon_boss_set_shopper_name( $resolved_set ),
				'key'      => $key,
				'label'    => (string) $opt['label'],
				'delta'    => (float) $opt['delta'],
			);
		}
	}
	return null;
}

// =================================================================
// Form parsing — pure helpers so the save handlers stay testable
// =================================================================

/**
 * Assemble option rows from the editor form's parallel arrays. Rows arrive
 * in DOM order (the drag-reorder result). The hidden per-row key input is
 * what keeps keys STABLE through every admin round trip; a row without one
 * (a freshly added row) gets a generated key from the sanitiser.
 *
 * @param string[] $labels
 * @param string[] $keys
 * @param string[] $swatches
 * @param string[] $deltas
 * @return array[] raw option rows ready for addon_boss_sanitize_option_set()
 */
function addon_boss_option_rows_from_form( array $labels, array $keys, array $swatches, array $deltas, array $dims = array(), array $swatches2 = array(), array $descs = array(), array $stocks = array(), array $images = array() ): array {
	$rows = array();
	foreach ( array_values( $labels ) as $i => $label ) {
		$row_dims = array();
		foreach ( $dims as $dim_column ) {
			$row_dims[] = (string) ( array_values( (array) $dim_column )[ $i ] ?? '' );
		}
		$row = array(
			'label'   => (string) $label,
			'key'     => (string) ( array_values( $keys )[ $i ] ?? '' ),
			'swatch'  => (string) ( array_values( $swatches )[ $i ] ?? '' ),
			'swatch2' => (string) ( array_values( $swatches2 )[ $i ] ?? '' ),
			'desc'    => (string) ( array_values( $descs )[ $i ] ?? '' ),
			'delta'   => (string) ( array_values( $deltas )[ $i ] ?? '0' ),
			'dims'    => $row_dims,
			// The choice's own picture, carried by the SET, so a library set
			// built once (print positions, finishes, papers) takes its
			// pictures onto every product it is ever put on. A photo set
			// against the same choice on one product still wins there,
			// exactly as a price override does; this is the one underneath.
			'image_id' => absint( array_values( $images )[ $i ] ?? 0 ),
		);
		// Per-option stock: a blank box means unlimited (no key stored); a number
		// (including 0 = sold out) turns tracking on for this option.
		$bb_stock = trim( (string) ( array_values( $stocks )[ $i ] ?? '' ) );
		if ( '' !== $bb_stock && is_numeric( $bb_stock ) ) {
			$row['stock'] = max( 0, (int) $bb_stock );
		}
		$rows[] = $row;
	}
	return $rows;
}

/**
 * The settings each scheduling field type owns, so a build without the module
 * that draws them carries them through a save instead of wiping them.
 *
 * @var array<string,array<int,string>>
 */
const ADDON_BOSS_SCHEDULING_KEYS = array(
	'date' => array( 'prep_days', 'book_ahead', 'cutoff', 'closed_days', 'closed_dates', 'date_face', 'date_bands' ),
	'time' => array( 'time_open', 'time_close', 'time_step', 'time_face', 'time_bands' ),
);

/**
 * Sanitise a product attachment config from raw form arrays (also used by
 * the model's save function, so the two paths can never drift). Groups are
 * real containers: a group row carries its own child rows, so membership is
 * explicit and moving a group never sweeps up its neighbours.
 */
function addon_boss_sanitize_product_option_config( array $raw ): array {
	$clean      = array();
	$field_keys = array();
	// Set ids seen anywhere in this config, top level or inside a group, so one
	// set can only be on a product once however the rows are arranged.
	$set_ids    = array();
	foreach ( $raw as $row ) {
		if ( ! is_array( $row ) ) {
			continue;
		}
		// A GROUP row is a real container: a name and its own child rows (sets
		// and fields). Members belong to the group explicitly, never by
		// position, so moving a group never sweeps up its neighbours. A
		// 'collapsed' key from an older build is read nowhere and simply not
		// carried forward; how a group starts is the layout's call alone.
		if ( ( $row['row_type'] ?? '' ) === 'group' ) {
			$glabel   = sanitize_text_field( (string) ( $row['label'] ?? '' ) );
			$children = array();
			foreach ( (array) ( $row['children'] ?? array() ) as $child ) {
				if ( ! is_array( $child ) || ( $child['row_type'] ?? '' ) === 'group' ) {
					continue; // groups never nest inside groups.
				}
				$c = addon_boss_sanitize_option_row( $child, $field_keys, $set_ids );
				if ( $c ) {
					$children[] = $c;
				}
			}
			// A group keeps its children whether or not it is named; a nameless group
			// is a valid untitled section (no visible title on the front end). Only a
			// group that is BOTH nameless and empty is pointless, so that one is dropped.
			if ( '' === $glabel && ! $children ) {
				continue;
			}
			$bb_grow = array(
				'row_type' => 'group',
				'label'    => $glabel,
				'children' => $children,
			);
			// Repeatable GROUP: all fields in this group repeat together, as one
			// block per instance. Same keys, same whitelist, same ceiling and the
			// same discipline as a field's own repeat: stored WITHOUT asking
			// whether the plan is active, because gating the save would rewrite a
			// merchant's configuration the moment a licence lapsed. The capability
			// is asked where it can be honoured (the editor's panel and the
			// storefront), so a free build renders a plain section and leaves the
			// setting alone for the plan's return.
			$bb_grpt = (string) ( $row['repeat'] ?? '' );
			if ( in_array( $bb_grpt, array( 'add', 'per_item' ), true ) ) {
				$bb_grow['repeat'] = $bb_grpt;
				$bb_grmax          = (int) ( $row['repeat_max'] ?? 0 );
				if ( $bb_grmax > 0 ) {
					$bb_grow['repeat_max'] = min( ADDON_BOSS_REPEAT_CEILING, $bb_grmax );
				}
				$bb_grlabel = sanitize_text_field( (string) ( $row['repeat_label'] ?? '' ) );
				if ( '' !== $bb_grlabel ) {
					$bb_grow['repeat_label'] = $bb_grlabel;
				}
			}
			$clean[] = $bb_grow;
			continue;
		}
		$c = addon_boss_sanitize_option_row( $row, $field_keys, $set_ids );
		if ( $c ) {
			$clean[] = $c;
		}
	}

	// Conditions second pass over EVERY row (top-level and group children). The
	// attached-set list is flattened so a rule may point at a set inside a group.
	// The reveal module validates the rules through this seam; with nothing
	// hooked, a stored rule rides through exactly as it stands.
	$attached = array();
	foreach ( addon_boss_flatten_option_config( $clean ) as $r ) {
		if ( isset( $r['set'] ) ) {
			$attached[] = (string) $r['set'];
		}
	}
	return (array) apply_filters( 'addon_boss_sanitize_option_rows', $clean, $attached );
}

/**
 * Flatten a (possibly grouped) config into a plain list of set/field rows,
 * unwrapping group containers so the MONEY + resolve paths see every row
 * regardless of nesting. A field or set inside a group is priced and captured
 * exactly as a top-level one; grouping is presentation only.
 */
function addon_boss_flatten_option_config( array $config ): array {
	$flat = array();
	foreach ( $config as $row ) {
		if ( ( $row['row_type'] ?? '' ) === 'group' ) {
			foreach ( (array) ( $row['children'] ?? array() ) as $child ) {
				$flat[] = $child;
			}
		} else {
			$flat[] = $row;
		}
	}
	return $flat;
}

/**
 * Flatten a grouped config into a render sequence with explicit group_open /
 * group_close markers, so the storefront render walks one flat list yet still
 * knows each section's exact boundaries (never guessing by position).
 */
function addon_boss_config_render_sequence( array $config ): array {
	$seq = array();
	foreach ( $config as $row ) {
		if ( ( $row['row_type'] ?? '' ) === 'group' ) {
			// The whole group row rides the marker, so a module that draws a
			// group AS a unit (a repeatable group) can see everything the group
			// carries without a second walk.
			$seq[] = array(
				'row_type' => 'group_open',
				'label'    => (string) ( $row['label'] ?? '' ),
				'group'    => $row,
			);
			foreach ( (array) ( $row['children'] ?? array() ) as $child ) {
				$seq[] = $child;
			}
			$seq[] = array( 'row_type' => 'group_close' );
		} else {
			$seq[] = $row;
		}
	}
	return $seq;
}

/**
 * Sanitise ONE set-or-field row into its clean stored shape, or null to drop
 * it. Field keys stay unique across the whole product ($field_keys by ref, so
 * top-level and grouped fields never collide). This is the exact field/set
 * logic the money-tested path has always used, lifted out so a group can reuse
 * it for its children.
 *
 * @return array|null
 */
function addon_boss_sanitize_option_row( array $row, array &$field_keys, array &$set_ids = array() ) {
	// A FIELD row: reuse the personalisation field-def sanitiser wholesale.
	if ( ( $row['row_type'] ?? '' ) === 'field' || is_array( $row['field'] ?? null ) ) {
		if ( ! function_exists( 'addon_boss_personalisation_sanitize_field_defs' ) ) {
			return null; // personalisation engine off: field rows do not persist.
		}
		$defs = addon_boss_personalisation_sanitize_field_defs( array( (array) ( $row['field'] ?? array() ) ) );
		if ( ! $defs ) {
			return null; // no label or unknown type: drop the row.
		}
		$field = $defs[0];
		$base  = $field['key'];
		$n     = 2;
		while ( in_array( $field['key'], $field_keys, true ) ) {
			$field['key'] = $base . '-' . $n++;
		}
		$field_keys[] = $field['key'];
		return array(
			'row_type' => 'field',
			'field'    => $field,
			'when'     => is_array( $row['when'] ?? null ) ? $row['when'] : array(),
		);
	}
	// A SET row: unchanged from before (the money-tested path).
	if ( ! addon_boss_option_key_valid( $row['set'] ?? '' ) ) {
		return null;
	}
	// One row per set. Two rows for the same set share a field name, so the
	// second silently eats the first and the merchant ends up with one answer
	// where they configured two. The first placement wins, which is where they
	// put it; the copy simply does not exist. The picker refuses the click
	// too, but a stale form or a folder taken twice still arrives here.
	if ( in_array( (string) $row['set'], $set_ids, true ) ) {
		return null;
	}
	$set_ids[] = (string) $row['set'];
	$deltas = array();
	foreach ( (array) ( $row['deltas'] ?? array() ) as $key => $val ) {
		if ( ! addon_boss_option_key_valid( $key ) || '' === $val || null === $val ) {
			continue; // absence = use the set default; explicit 0 stays.
		}
		$deltas[ $key ] = (float) wc_format_decimal( (string) $val );
	}
	$images = array();
	foreach ( (array) ( $row['images'] ?? array() ) as $key => $att ) {
		$att = absint( $att );
		if ( ! addon_boss_option_key_valid( $key ) || ! $att ) {
			continue; // 0 = no photo (the cleared state), same absence rule as deltas.
		}
		$images[ $key ] = $att;
	}
	// Which of the shared set's choices this product does not offer. Stored as
	// what is HIDDEN, never as what is allowed: a set is shared on purpose, and
	// an allow-list would mean every product silently refusing the colour the
	// set gains next month. A key the set no longer carries is harmless (the
	// resolver matches by key), so nothing has to be pruned when a set changes.
	$hide = array();
	foreach ( (array) ( $row['hide'] ?? array() ) as $key => $val ) {
		// Accepts both shapes: the panel posts key => 1, an import or a
		// programmatic save reads more naturally as a plain list of keys.
		$bb_k = is_string( $key ) ? $key : $val;
		if ( ! is_string( $bb_k ) || ! addon_boss_option_key_valid( $bb_k ) || ! $val ) {
			continue;
		}
		if ( ! in_array( $bb_k, $hide, true ) ) {
			$hide[] = $bb_k;
		}
	}
	// A measured set's per-product rate. Empty = no override, the set's own
	// rate stands (the same absence rule as the deltas above); an explicit 0
	// is a real value, still floored by the set's minimum charge. Junk and
	// negatives are NOT overrides: wc_format_decimal turns word salad into '',
	// and a negative rate would be a negative price path, so both fall back to
	// the set. The '' state is stored, not omitted, so a saved row always
	// carries the key and true absence keeps meaning "row from before this".
	$bb_rate = trim( (string) ( $row['rate'] ?? '' ) );
	if ( '' !== $bb_rate ) {
		$bb_fmt  = wc_format_decimal( $bb_rate );
		$bb_rate = ( '' !== $bb_fmt && is_numeric( $bb_fmt ) && (float) $bb_fmt >= 0 ) ? (float) $bb_fmt : '';
	}
	// Modules carry their own per-row keys through the same pass, so a row
	// never stores a key nothing cleaned.
	return (array) apply_filters( 'addon_boss_sanitize_set_row', array(
		'set'        => (string) $row['set'],
		'required'   => ! empty( $row['required'] ),
		'deltas'     => $deltas,
		'images'     => $images,
		'hide'       => $hide,
		'rate'       => $bb_rate,
		// Which library folder this set arrived from, when it came in with the
		// rest of its folder rather than on its own. Nothing reads it to decide
		// anything today; it is the record a later "this folder gained a set,
		// add it here too" nudge needs, and it costs one string to keep.
		'from_group' => sanitize_text_field( (string) ( $row['from_group'] ?? '' ) ),
		'when'       => is_array( $row['when'] ?? null ) ? $row['when'] : array(),
	), $row );
}

/**
 * Which resolved sets are ACTIVE for one pick state. A set with no rule is
 * active. A set carrying a reveal rule starts inactive and resolves through
 * the module that evaluates such rules; with no evaluator registered a rule
 * was already wiped on read, so everything simply shows. Hidden means INERT
 * everywhere: never required of the shopper, never charged. That is the
 * server-side discipline the whole category keeps re-patching the lack of
 * (hidden fields still charging, hidden required fields blocking checkout,
 * in rival changelogs for years).
 *
 * @param array<int,array>     $sets  Resolved sets carrying 'when'.
 * @param array<string,string> $picks Set id => currently picked option key.
 * @return array<string,bool> Set id => active.
 */
function addon_boss_active_option_sets( array $sets, array $picks ): array {
	$active = array();
	foreach ( $sets as $set ) {
		// A HIDE rule starts the other way round: the set is there until its
		// conditions fire, so it seeds ACTIVE and the module that evaluates
		// rules turns it off. Seeding it inactive like a show rule would leave
		// a hide-ruled set permanently gone, since the activation pass only
		// ever turns things on.
		$bb_when              = (array) ( $set['when'] ?? array() );
		$active[ $set['id'] ] = ! $bb_when || 'hide' === (string) ( $bb_when['act'] ?? '' );
	}
	return (array) apply_filters( 'addon_boss_active_option_sets', $active, $sets, $picks );
}

// =================================================================
// Synthetic variation axes + per-item resolver: the optioned-simple
// engine both surfaces render from (virtual axes + render-seam
// filters), plus the per-item set resolver that virtual_axes calls.
// The cartesian entry list built on those axes is the grid module's.
// =================================================================

/**
 * The product's sets AS THEY APPLY IN ONE BUNDLE ROW. Same shape as
 * addon_boss_product_option_sets(), then narrowed by the item's per-row
 * restrictions ($item['option_restrictions'] = { set_id => { off, options } }):
 * a set switched OFF for this row is dropped, and a set whose options are
 * restricted keeps only the chosen ones (an empty result drops the set too).
 * No restrictions ($item null or empty) returns the product-level sets
 * unchanged, so every existing call site behaves exactly as before.
 */
function addon_boss_product_option_sets_for_item( $product, $item = null ): array {
	$sets = addon_boss_product_option_sets( $product );
	$rx   = is_array( $item ) ? (array) ( $item['option_restrictions'] ?? array() ) : array();
	if ( ! $rx ) {
		return $sets;
	}
	$out = array();
	foreach ( $sets as $set ) {
		$rule = (array) ( $rx[ $set['id'] ] ?? array() );
		if ( ! empty( $rule['off'] ) ) {
			continue; // this bundle does not offer the set.
		}
		$allow = array_filter( array_map( 'strval', (array) ( $rule['options'] ?? array() ) ) );
		if ( $allow ) {
			$set['options'] = array_values(
				array_filter(
					$set['options'],
					static function ( $opt ) use ( $allow ) {
						return in_array( (string) $opt['key'], $allow, true );
					}
				)
			);
			if ( ! $set['options'] ) {
				continue; // restricted to nothing = not offered.
			}
		}
		$out[] = $set;
	}
	return $out;
}

// =================================================================
// SYNTHETIC VARIATIONS: an optioned simple product enters the EXISTING
// variation front end (chips, all-the-same, cards, table, grid) through
// virtual attributes + virtual variation entries. Nothing touches the
// database; picks resolve server-side by stable option KEYS, and the
// virtual variation id is display plumbing only (negative, never loaded).
// =================================================================

/** The virtual attribute name for a set (field: attribute_bbset-<set id>). */
function addon_boss_virtual_attr_name( string $set_id ): string {
	return 'bbset-' . $set_id;
}

/** True when a product renders per-unit choices (real variations or sets). */
function addon_boss_product_has_unit_choices( $product ): bool {
	return $product instanceof WC_Product
		&& ( $product->is_type( 'variable' ) || (bool) addon_boss_product_option_sets( $product ) );
}

/**
 * Virtual axes for the render: attribute name => option KEYS (stable),
 * with label + swatch lookups the render seams consume.
 *
 * @return array<string,array{options:string[],labels:array<string,string>,swatches:array<string,string>,set:array}>
 */
function addon_boss_virtual_axes( $product, $item = null, $only_sets = null ): array {
	// Synthetic variations exist to give an optioned SIMPLE the native
	// variation front end. A variable product HAS real variations; its sets
	// render on its own page (the standalone path), never as virtual axes,
	// so every virtual consumer (unit cards, grids, box cards, candidate
	// maps) stays untouched by sets on variables through this one gate.
	if ( $product instanceof WC_Product && $product->is_type( 'variable' ) ) {
		return array();
	}
	// $only_sets (an allowlist of set ids) narrows the axes to a chosen few. The
	// quantity grid uses it to keep the matrix to colour x size, leaving any
	// further set to render as a whole-order choice instead of a cartesian cell.
	$only = is_array( $only_sets ) ? array_map( 'strval', $only_sets ) : null;
	$axes = array();
	foreach ( addon_boss_product_option_sets_for_item( $product, $item ) as $set ) {
		if ( ! empty( $set['when'] ) || ! empty( $set['multi'] ) || 'choices' !== ( $set['kind'] ?? 'choices' ) ) {
			// Neither a conditional set (may be hidden), nor a several-of set
			// (a unit is one of each axis, never two), nor a kind priced by a
			// continuous dimension (no finite option list) can be a cartesian
			// axis. Only the engine's own pick-one choices kind qualifies;
			// everything else lives on the product's own page.
			continue;
		}
		if ( null !== $only && ! in_array( (string) $set['id'], $only, true ) ) {
			continue; // not one of the chosen matrix sets.
		}
		$labels    = array();
		$swatches  = array();
		$swatches2 = array();
		$images    = array();
		$keys      = array();
		foreach ( $set['options'] as $opt ) {
			$keys[]                   = $opt['key'];
			$labels[ $opt['key'] ]    = $opt['label'];
			$swatches[ $opt['key'] ]  = $opt['swatch'];
			$swatches2[ $opt['key'] ] = $opt['swatch2'] ?? '';
			$images[ $opt['key'] ]    = (int) ( $opt['image_id'] ?? 0 );
		}
		$axes[ addon_boss_virtual_attr_name( $set['id'] ) ] = array(
			'options'   => $keys,
			'labels'    => $labels,
			'swatches'  => $swatches,
			'swatches2' => $swatches2,
			'images'    => $images,
			'set'       => $set,
		);
	}
	return $axes;
}

// The render seams: pretty labels + real swatches for virtual attributes,
// and a human name for the attribute heading.
add_filter( 'addon_boss_attr_option_labels', 'addon_boss_virtual_option_labels', 10, 3 );
add_filter( 'addon_boss_attr_option_swatches', 'addon_boss_virtual_option_swatches', 10, 3 );
// The CROSS-PLUGIN seam keeps BundleBoss's names. BundleBoss draws a bundle
// component's axes and asks bundle_boss_attr_option_labels / _swatches for
// the pretty words and the real colours, whoever answers: the family
// surface's shape, BB asks and whichever plugin owns the sets replies. The
// namespace sweep renamed the providers along with everything else, which
// unhooked them from their only caller and left an answered component's
// chips printing raw op_* keys. The SAME callbacks answer both spellings;
// the addon_boss_* pair above stays for surfaces of our own.
add_filter( 'bundle_boss_attr_option_labels', 'addon_boss_virtual_option_labels', 10, 3 );
add_filter( 'bundle_boss_attr_option_swatches', 'addon_boss_virtual_option_swatches', 10, 3 );
add_filter( 'woocommerce_attribute_label', 'addon_boss_virtual_attribute_label', 10, 2 );

function addon_boss_virtual_option_labels( $labels, $attr_name, $item_product ) {
	if ( 0 === strpos( (string) $attr_name, 'bbset-' ) && $item_product instanceof WC_Product ) {
		$axes = addon_boss_virtual_axes( $item_product );
		if ( isset( $axes[ $attr_name ] ) ) {
			return $axes[ $attr_name ]['labels'];
		}
	}
	return $labels;
}

function addon_boss_virtual_option_swatches( $swatches, $attr_name, $item_product ) {
	if ( 0 === strpos( (string) $attr_name, 'bbset-' ) && $item_product instanceof WC_Product ) {
		$axes = addon_boss_virtual_axes( $item_product );
		if ( isset( $axes[ $attr_name ] ) ) {
			return array_filter( $axes[ $attr_name ]['swatches'] );
		}
	}
	return $swatches;
}

function addon_boss_virtual_attribute_label( $label, $name ) {
	if ( 0 === strpos( (string) $name, 'bbset-' ) ) {
		$set = addon_boss_option_set( substr( (string) $name, 6 ) );
		if ( $set && '' !== addon_boss_set_shopper_name( $set ) ) {
			return addon_boss_set_shopper_name( $set );
		}
	}
	return $label;
}

// =================================================================
// Griddability: whether this product's own page shows the quantity
// grid at all. The grid itself (the matrix, the set split, its save)
// is the grid module's; the engine keeps only the gate it asks.
// =================================================================

/** Whether this product is set to show the quantity grid on its own page. */
function addon_boss_product_uses_grid( $product ): bool {
	// The standalone quantity grid is a product's-own-page feature and belongs
	// to the plugin whose job that is. The gate sits here because everything the
	// grid does flows through this one question: the page takeover, its assets,
	// the AJAX add and the admin layout control. A variable product used to slip
	// past, because the can-grid check below answers "variable" before ever
	// touching the gated option config.
	if ( ! addon_boss_options_available() ) {
		return false;
	}
	// Without the grid module a product is ordered one at a time. Its stored grid
	// layout is left untouched for when the module arrives.
	if ( ! addon_boss_engine_can( 'grid' ) ) {
		return false;
	}
	if ( ! $product instanceof WC_Product
		|| 'grid' !== (string) $product->get_meta( '_bundle_boss_order_layout' )
		|| ! function_exists( 'addon_boss_grid_render_card_body' ) ) {
		return false;
	}
	// A variable product grids across its variations; an optioned SIMPLE grids
	// across its choice sets (BundleBoss's "options, not variations" flagship).
	return addon_boss_product_can_grid( $product );
}

/**
 * Whether a product has something to grid: real variations, or 2+ griddable
 * choice sets on a simple product (colour, size...). A single griddable set
 * still grids as one row of option cells, so one axis is enough.
 */
function addon_boss_product_can_grid( $product ): bool {
	if ( ! $product instanceof WC_Product ) {
		return false;
	}
	// A bundle is never griddable, whatever meta it carries. It has picks, not
	// variations, and it prices itself from what its own configurator collects.
	// The grid takes the page over, so laid on a bundle it removes the
	// configurator: no picks, nothing to price, and the shopper gets a £0.00
	// product with a dead Add to cart (BundleBoss #31).
	//
	// The meta reaches a bundle by outliving its product. Turn the grid on for a
	// variable product or an optioned simple, change that product into a bundle
	// later, and '_bundle_boss_order_layout' stays behind; BundleBoss's own
	// exporter already calls that meta "never on a bundle". Without this line the
	// checks below answer "has it a griddable set?", and one leftover option set
	// is enough to say yes.
	if ( $product->is_type( 'bundle' ) ) {
		return false;
	}
	if ( $product->is_type( 'variable' ) ) {
		return true;
	}
	return function_exists( 'addon_boss_virtual_axes' )
		&& count( addon_boss_virtual_axes( $product ) ) >= 1;
}

// =================================================================
// STANDALONE SURFACE (product options on a plain product, no bundle).
// Lifted from the earlier bundle-side layout into the shared engine so both
// plugins expose it and it registers exactly once. Part 1: resolvers + key.
// =================================================================

const ADDON_BOSS_STANDALONE_OPTIONS_KEY = 'bundle_boss_standalone_options';

/**
 * The sets a product offers on its OWN page: simple products only. The
 * resolver already refuses variable products (variations own that job);
 * this also refuses bundles and every other composite type.
 */
/**
 * The form field for one set's pick on a STANDALONE page. Deliberately
 * OUTSIDE WooCommerce's attribute_ namespace: on a variable product,
 * anything named attribute_* is treated by WooCommerce's scripts and its
 * variable add handler as a variation attribute, so our hidden selects
 * were read as unchosen attributes and the add button locked with
 * "please select some product options". Inside bundles the native
 * virtual-variation path keeps its attribute_ names; that is a different
 * form with different owners.
 */
function addon_boss_standalone_field_name( string $set_id ): string {
	return 'bbpick_' . sanitize_title( addon_boss_virtual_attr_name( $set_id ) );
}

/**
 * An option delta carried onto the DISPLAY basis, sign intact.
 *
 * wc_get_price_to_display() floors any passed price at zero, so a
 * cheaper-choice delta (a plain garment at -3.00 on a printed product)
 * silently became 0 in every figure built from it: the page total held at
 * the base price while the cart correctly charged less, and the till and
 * the page disagreed. The conversion runs on the magnitude and the sign
 * rides around it, so a reduction converts exactly as a surcharge does.
 */
function addon_boss_delta_to_display( $product, float $delta ): float {
	if ( 0.0 === $delta ) {
		return 0.0;
	}
	$bb_disp = (float) wc_get_price_to_display( $product, array( 'price' => abs( $delta ), 'qty' => 1 ) );
	return $delta < 0 ? -$bb_disp : $bb_disp;
}

function addon_boss_standalone_option_sets( $product ): array {
	// The sets render on the product's own page (below the variations form on a
	// variable parent, the placement every rival converged on). A product type
	// this build does not carry sets for renders nothing, and its stored config
	// is left untouched for when the module that does arrives.
	if ( ! $product instanceof WC_Product
		|| ! in_array( $product->get_type(), addon_boss_options_product_types(), true ) ) {
		return array();
	}
	$bb_sets = addon_boss_product_option_sets( $product );
	// A set of a kind nothing registered is dropped from the offer: the build
	// has no maths to price it, and offering it would sell an unchargeable
	// thing. Its stored config is untouched.
	$bb_kinds = addon_boss_option_set_kinds();
	$bb_sets  = array_values(
		array_filter(
			$bb_sets,
			static function ( $bb_s ) use ( $bb_kinds ) {
				return isset( $bb_kinds[ (string) ( $bb_s['kind'] ?? 'choices' ) ] );
			}
		)
	);
	// Without conditional reveal a set's stored rule is ignored and it simply
	// shows, which is the honest reading of "show this when" with nothing to
	// evaluate it.
	if ( ! addon_boss_engine_can( 'reveal' ) ) {
		foreach ( $bb_sets as &$bb_set ) {
			$bb_set['when'] = array();
		}
		unset( $bb_set );
	}
	return $bb_sets;
}

/**
 * How a field's answer is named in the rule state. Sets are keyed by their own
 * id, so fields take a prefix nothing else can collide with: a set id is a
 * sanitised key and can never contain a colon.
 */
const ADDON_BOSS_FIELD_RULE_KEY = 'field:';

/**
 * What "there is an answer" and "there is not" are CALLED, for one field type.
 *
 * Two stored operators, four or five pairs of words. A tick box is ticked, not
 * "answered"; a text box is filled in; an upload has a file. One generic pair
 * for all of them reads like nothing anybody says out loud, and a rule you
 * cannot say out loud is a rule you cannot check.
 *
 * @param string $type The trigger field's type.
 * @return array{filled:string,empty:string}
 */
function addon_boss_field_op_words( string $type ): array {
	switch ( $type ) {
		case 'checkbox':
			$words = array( 'filled' => __( 'is ticked', 'addon-boss' ), 'empty' => __( 'is not ticked', 'addon-boss' ) );
			break;
		case 'file':
			$words = array( 'filled' => __( 'has a file', 'addon-boss' ), 'empty' => __( 'has no file', 'addon-boss' ) );
			break;
		case 'select':
		case 'color':
			$words = array( 'filled' => __( 'is chosen', 'addon-boss' ), 'empty' => __( 'is not chosen', 'addon-boss' ) );
			break;
		default:
			// Text, message, number, date, time, and any type a module adds
			// without saying otherwise.
			$words = array( 'filled' => __( 'is filled in', 'addon-boss' ), 'empty' => __( 'is left blank', 'addon-boss' ) );
	}
	// A module with a field type of its own names its own two words here.
	return (array) apply_filters( 'addon_boss_field_op_words', $words, $type );
}

/**
 * A stored reveal rule read into the one canonical shape: act + groups of
 * conditions. Conditions inside a group must all hold; any one group holding
 * fires the rule. Pure data traversal with bounds — nothing here evaluates,
 * repairs or judges; that is the reveal module's job. It exists in the engine
 * so the hidden carriers and the save reader can round-trip every stored shape
 * even in a build with no reveal module at all.
 *
 * Shapes read: legacy {set,is}; flat {match,conditions}, where match 'any'
 * becomes one group per condition (OR of singles is exactly what any meant);
 * and {groups:[...]} as itself. Bounded so a hand-crafted post cannot balloon:
 * six groups of eight conditions, twenty values in a list.
 *
 * @param mixed $when The stored rule, any shape.
 * @return array{act:string,groups:array<int,array<int,array{set:string,field:string,op:string,value:mixed}>>}
 */
function addon_boss_when_to_groups( $when ): array {
	$when   = is_array( $when ) ? $when : array();
	$act    = ( 'hide' === (string) ( $when['act'] ?? '' ) ) ? 'hide' : 'show';
	$bb_ops = array( 'is', 'is_not', 'is_any', 'filled', 'empty', 'more', 'less', 'exact' );

	$bb_cond = static function ( $c ) use ( $bb_ops ) {
		if ( ! is_array( $c ) ) {
			return null;
		}
		$bb_set   = sanitize_text_field( (string) ( $c['set'] ?? '' ) );
		$bb_field = '' === $bb_set ? sanitize_text_field( (string) ( $c['field'] ?? '' ) ) : '';
		if ( '' === $bb_set && '' === $bb_field ) {
			return null;
		}
		$op     = in_array( $c['op'] ?? 'is', $bb_ops, true ) ? (string) $c['op'] : 'is';
		$bb_val = $c['value'] ?? '';
		if ( is_array( $bb_val ) ) {
			$bb_list = array();
			foreach ( $bb_val as $bb_v ) {
				if ( is_scalar( $bb_v ) && count( $bb_list ) < 20 ) {
					$bb_list[] = sanitize_text_field( (string) $bb_v );
				}
			}
			$bb_val = $bb_list;
		} else {
			$bb_val = is_scalar( $bb_val ) ? sanitize_text_field( (string) $bb_val ) : '';
		}
		return array( 'set' => $bb_set, 'field' => $bb_field, 'op' => $op, 'value' => $bb_val );
	};

	$groups = array();
	if ( isset( $when['groups'] ) && is_array( $when['groups'] ) ) {
		foreach ( $when['groups'] as $bb_g ) {
			if ( count( $groups ) >= 6 ) {
				break;
			}
			$bb_conds = array();
			foreach ( (array) ( is_array( $bb_g ) && isset( $bb_g['conditions'] ) ? $bb_g['conditions'] : $bb_g ) as $c ) {
				if ( count( $bb_conds ) >= 8 ) {
					break;
				}
				$bb_c = $bb_cond( $c );
				if ( null !== $bb_c ) {
					$bb_conds[] = $bb_c;
				}
			}
			if ( $bb_conds ) {
				$groups[] = $bb_conds;
			}
		}
	} elseif ( isset( $when['conditions'] ) && is_array( $when['conditions'] ) ) {
		$bb_conds = array();
		foreach ( $when['conditions'] as $c ) {
			if ( count( $bb_conds ) >= 8 ) {
				break;
			}
			$bb_c = $bb_cond( $c );
			if ( null !== $bb_c ) {
				$bb_conds[] = $bb_c;
			}
		}
		if ( $bb_conds ) {
			if ( 'any' === ( $when['match'] ?? 'all' ) ) {
				foreach ( $bb_conds as $bb_c ) {
					$groups[] = array( $bb_c );
				}
			} else {
				$groups[] = $bb_conds;
			}
		}
	} elseif ( isset( $when['set'] ) && array_key_exists( 'is', $when ) && '' !== (string) $when['set'] ) {
		$groups[] = array(
			array(
				'set'   => sanitize_text_field( (string) $when['set'] ),
				'field' => '',
				'op'    => 'is',
				'value' => sanitize_text_field( (string) $when['is'] ),
			),
		);
	}

	return array( 'act' => $act, 'groups' => $groups );
}

/**
 * The storage shape for a canonical act+groups rule: the SMALLEST shape that
 * says it. One plain show "is" on a set stores in the legacy {set,is}, so an
 * ordinary single rule is byte-identical on disk to one saved years ago and
 * every older reader keeps reading it. One group stores flat; only a rule that
 * genuinely says "or when" stores groups. Hide rides an 'act' prefix.
 *
 * @param array $norm The {act,groups} shape (see addon_boss_when_to_groups()).
 * @return array The array to store on the row; empty for no rule.
 */
function addon_boss_when_store_shape( array $norm ): array {
	$act    = ( 'hide' === (string) ( $norm['act'] ?? '' ) ) ? 'hide' : 'show';
	$groups = array_values( array_filter( array_map( 'array_values', (array) ( $norm['groups'] ?? array() ) ) ) );
	if ( ! $groups ) {
		return array();
	}
	if ( 1 === count( $groups ) && 1 === count( $groups[0] ) && 'show' === $act
		&& 'is' === (string) ( $groups[0][0]['op'] ?? '' )
		&& '' === (string) ( $groups[0][0]['field'] ?? '' )
		&& ! is_array( $groups[0][0]['value'] ) ) {
		return array(
			'set' => (string) $groups[0][0]['set'],
			'is'  => (string) $groups[0][0]['value'],
		);
	}
	if ( 1 === count( $groups ) ) {
		$when = array(
			'match'      => 'all',
			'conditions' => $groups[0],
		);
		return 'hide' === $act ? array( 'act' => 'hide' ) + $when : $when;
	}
	$when = array( 'groups' => $groups );
	return 'hide' === $act ? array( 'act' => 'hide' ) + $when : $when;
}

/**
 * The operators ONE trigger offers, worded so the rule reads as a sentence a
 * person would say out loud — and no more than four of them, because eleven
 * operators on screen at once is how the rivals' builders got their support
 * queues. A single-pick set speaks is / is not / is any of / is answered; a
 * several-of set speaks includes / does not include; a text box is filled in
 * or left blank; a number compares. The stored operator vocabulary is wider
 * than any one trigger's menu, which is the point: the menu fits the trigger.
 *
 * @param string $kind        'set' or 'field'.
 * @param string $type        The field's type when kind is 'field'.
 * @param bool   $multi       Whether a set trigger takes several answers.
 * @param bool   $has_options Whether a set trigger has a pickable option list.
 * @return array<string,string> Operator => the word it prints as, in menu order.
 */
function addon_boss_trigger_op_choices( string $kind, string $type = '', bool $multi = false, bool $has_options = true ): array {
	if ( 'set' === $kind ) {
		if ( ! $has_options ) {
			// A set priced off its own panel (a size grid, a measured size) has
			// no option list to compare against, but "answered at all" is still
			// a fact about it worth ruling on.
			return array( 'filled' => __( 'is answered', 'addon-boss' ) );
		}
		if ( $multi ) {
			return array(
				'is'     => __( 'includes', 'addon-boss' ),
				'is_not' => __( 'does not include', 'addon-boss' ),
			);
		}
		return array(
			'is'     => __( 'is', 'addon-boss' ),
			'is_not' => __( 'is not', 'addon-boss' ),
			'is_any' => __( 'is any of', 'addon-boss' ),
			'filled' => __( 'is answered', 'addon-boss' ),
		);
	}
	if ( 'number' === $type ) {
		return array(
			'more'  => __( 'is more than', 'addon-boss' ),
			'less'  => __( 'is less than', 'addon-boss' ),
			'exact' => __( 'is exactly', 'addon-boss' ),
		);
	}
	$bb_types = function_exists( 'addon_boss_personalisation_field_types' ) ? addon_boss_personalisation_field_types() : array();
	$bb_words = addon_boss_field_op_words( $type );
	if ( ! empty( $bb_types[ $type ]['has_options'] ) || ! empty( $bb_types[ $type ]['color_options'] ) ) {
		// A dropdown field and a colour field are picked from a list, so they
		// speak the same four words a single-pick set does — worded by type.
		return array(
			'is'     => __( 'is', 'addon-boss' ),
			'is_not' => __( 'is not', 'addon-boss' ),
			'is_any' => __( 'is any of', 'addon-boss' ),
			'filled' => (string) $bb_words['filled'],
		);
	}
	return array(
		'filled' => (string) $bb_words['filled'],
		'empty'  => (string) $bb_words['empty'],
	);
}

/**
 * A field's answer flattened to the one string a rule compares against.
 *
 * A field asked several times (repeatable, several uploads) answers with the
 * FIRST thing it was actually given, so "is filled in" means "they filled in at
 * least one", which is what a merchant writing the rule means by it.
 *
 * @param mixed $raw Whatever the request carries for the field.
 * @return string
 */
function addon_boss_field_rule_value( $raw ): string {
	if ( is_array( $raw ) ) {
		foreach ( $raw as $bb_v ) {
			$bb_flat = addon_boss_field_rule_value( $bb_v );
			if ( '' !== $bb_flat ) {
				return $bb_flat;
			}
		}
		return '';
	}
	if ( is_bool( $raw ) ) {
		return $raw ? '1' : '';
	}
	return is_scalar( $raw ) ? trim( (string) $raw ) : '';
}

/**
 * A colour field's answer as a RULE sees it: any custom pick answers plainly
 * as "custom", whatever hex it carries. A rule can offer the merchant's own
 * swatches and the one word Custom; it can never name a specific free-typed
 * hex, because "when they pick #37b24d" is not a rule anyone can keep true.
 *
 * Registered on the colour type as its rule_answer callback — the engine's
 * generic seam, so the rule state never knows what a colour is.
 *
 * @param string $answer The posted answer.
 * @return string
 */
function addon_boss_colour_rule_answer( string $answer ): string {
	return 0 === strpos( $answer, 'custom:' ) ? 'custom' : $answer;
}

/**
 * Add every field's answer to the rule state, so a rule can be triggered by a
 * field and not only by a set.
 *
 * Walked in ROW ORDER, and a field's own rule is judged against what came
 * BEFORE it. That is why the builder only offers earlier fields as triggers: it
 * removes the need for a fixpoint over field answers, and it makes a cycle
 * impossible by construction rather than by detection. It is also honest in the
 * merchant's own terms, because a rule cannot depend on an answer nobody has
 * been asked for yet.
 *
 * A field that is itself hidden is marked inactive, so a stale answer nobody
 * can see never satisfies the next rule along. That is the same discipline sets
 * have always had.
 *
 * @param array $fields The product's fields, in row order.
 * @param mixed $posted What the request carries under bb_pf.
 * @param array $picks  Set id => picked keys; gains one entry per field.
 * @param array $active Set id => active; gains one entry per field.
 */
function addon_boss_add_field_rule_state( array $fields, $posted, array &$picks, array &$active ): void {
	$bb_types = addon_boss_personalisation_field_types();
	foreach ( $fields as $bb_def ) {
		$bb_key = (string) ( $bb_def['key'] ?? '' );
		if ( '' === $bb_key ) {
			continue;
		}
		$bb_id   = ADDON_BOSS_FIELD_RULE_KEY . $bb_key;
		$bb_when = is_array( $bb_def['when'] ?? null ) ? $bb_def['when'] : array();
		// Judged against the state so far, which is exactly the rows above it.
		$bb_vis = ! $bb_when || (bool) apply_filters( 'addon_boss_when_met', true, $bb_when, $picks, $active );
		$bb_ans = addon_boss_field_rule_value( is_array( $posted ) ? ( $posted[ $bb_key ] ?? null ) : null );
		// A type may restate its answer in rule terms (a custom colour answers
		// as the one word "custom"), through its own registered callback.
		$bb_map = $bb_types[ (string) ( $bb_def['type'] ?? '' ) ]['rule_answer'] ?? null;
		if ( '' !== $bb_ans && $bb_map && is_callable( $bb_map ) ) {
			$bb_ans = (string) call_user_func( $bb_map, $bb_ans );
		}
		$picks[ $bb_id ]  = $bb_ans;
		$active[ $bb_id ] = $bb_vis;
	}
}

/**
 * Does a fired rule take this row out of the MARKUP, rather than just out of
 * sight? It never does, and this function exists to be the one place that says
 * why.
 *
 * A rule that can fire can also un-fire. Tick the box and the upload goes;
 * untick it and the upload has to come back, which it cannot do if the server
 * left it out of the page. So every conditional row is drawn and the stylesheet
 * decides what is on screen, which is what lets the storefront script move a
 * row either way without a reload.
 *
 * Nothing about the money changes. A hidden row is inert on the server whatever
 * its input happens to be carrying, so a stale value in a hidden field is read
 * by nobody, charged by nobody and required of nobody.
 *
 * @param array $when   The stored rule.
 * @param bool  $active Whether the rule currently leaves the row available.
 * @return bool Always false.
 */
function addon_boss_rule_removes_row( $when, bool $active ): bool {
	unset( $when, $active );
	return false;
}

/**
 * One set's posted picks, cleaned: an array of sanitised keys in the SET'S
 * OWN option order, so the same picks always snapshot in the same order and
 * the cart id they hash to can never depend on click order. Duplicates
 * collapse to one. A pick-one set reads its scalar exactly as before, and an
 * array posted against one reads as no answer (a crafted shape, never a
 * fatal). A key the set does not carry is KEPT, at the end, so the resolver
 * still refuses it by name. Bounded before any work, so a crafted
 * thousand-entry payload costs nothing.
 *
 * @param array $set The resolved set (its 'multi' flag and options).
 * @param mixed $raw What the request carries for the set's field (slashed).
 * @return string[] Picked keys; empty when nothing was picked.
 */
function addon_boss_standalone_posted_picks( array $set, $raw ): array {
	$bb_multi = ! empty( $set['multi'] );
	if ( is_array( $raw ) ) {
		if ( ! $bb_multi ) {
			return array();
		}
		$bb_vals = array_slice( array_values( $raw ), 0, 100 );
	} else {
		$bb_vals = array( $raw );
	}
	$bb_picked = array();
	foreach ( $bb_vals as $bb_v ) {
		if ( is_array( $bb_v ) ) {
			continue; // a nested array is noise, never a pick.
		}
		$bb_v = sanitize_text_field( wp_unslash( (string) $bb_v ) );
		if ( '' !== $bb_v ) {
			$bb_picked[] = $bb_v;
		}
	}
	$bb_picked = array_values( array_unique( $bb_picked ) );
	if ( ! $bb_multi ) {
		return array_slice( $bb_picked, 0, 1 );
	}
	$bb_order = array();
	foreach ( (array) ( $set['options'] ?? array() ) as $bb_opt ) {
		$bb_order[] = (string) ( $bb_opt['key'] ?? '' );
	}
	return array_merge(
		array_values( array_intersect( $bb_order, $bb_picked ) ),
		array_values( array_diff( $bb_picked, $bb_order ) )
	);
}

/**
 * Resolve one request's standalone picks into cart snapshots via the SAME
 * resolver the bundle gate uses (addon_boss_option_snapshot), reading the
 * native field names (attribute_bbset-<set id>) from $source. WP_Error
 * naming the set when a required set has no pick or a posted key is not in
 * its set; the snapshot array otherwise (empty when nothing was picked). A
 * several-of set resolves every posted key and enforces its own bounds here,
 * server-side, whatever any client allowed.
 *
 * @param array $source Raw request fields (slashed; sanitised per field).
 * @return array|WP_Error
 */
/**
 * A several-of set's picks, checked against its bounds, as snapshots.
 *
 * Every posted key becomes its own snapshot carrying its own fee, and the
 * bounds are enforced HERE, whatever any client allowed. An optional set left
 * entirely alone is no answer rather than a short answer, so its at-least only
 * speaks once the shopper has engaged with it.
 *
 * This lives on its own because TWO surfaces order these sets: the product's
 * own page and the quantity grid's whole-order block. Two copies of a rule
 * about what a shopper may pick, and what each pick costs, is two rules that
 * drift, and the drift shows up as money.
 *
 * @param array $set  A resolved set with multi set.
 * @param array $keys The keys the shopper picked, in any order.
 * @return array|WP_Error One snapshot per pick, or the shopper's own message.
 */
function addon_boss_multi_pick_snapshots( array $set, array $keys ) {
	$name  = addon_boss_set_shopper_name( $set );
	$count = count( $keys );
	$min   = max( 0, (int) ( $set['min'] ?? 0 ) );
	$max   = max( 0, (int) ( $set['max'] ?? 0 ) );

	if ( 0 === $count ) {
		if ( ! empty( $set['required'] ) ) {
			return new WP_Error(
				'bundle_boss',
				$min > 1
					/* translators: 1: the smallest number of choices, 2: option set name */
					? sprintf( __( 'Choose at least %1$s for %2$s.', 'addon-boss' ), number_format_i18n( $min ), $name )
					/* translators: %s: option set name */
					: sprintf( __( 'Please choose %s.', 'addon-boss' ), $name )
			);
		}
		return array();
	}
	if ( $count < $min ) {
		return new WP_Error(
			'bundle_boss',
			/* translators: 1: the smallest number of choices, 2: option set name */
			sprintf( __( 'Choose at least %1$s for %2$s.', 'addon-boss' ), number_format_i18n( $min ), $name )
		);
	}
	if ( $max > 0 && $count > $max ) {
		return new WP_Error(
			'bundle_boss',
			/* translators: 1: the largest number of choices, 2: option set name */
			sprintf( __( 'Choose up to %1$s for %2$s.', 'addon-boss' ), number_format_i18n( $max ), $name )
		);
	}

	// One veto seam for anything reasoning about the picks TOGETHER, in the
	// same chokepoint the bounds hold, so a refusal is a refusal on the page
	// and at the till alike. Null objects to nothing; a WP_Error is the
	// shopper's own sentence.
	$bb_stop = apply_filters( 'addon_boss_multi_pick_stop', null, $set, $keys );
	if ( is_wp_error( $bb_stop ) ) {
		return $bb_stop;
	}

	$snapshots = array();
	foreach ( $keys as $key ) {
		$snap = addon_boss_option_snapshot( $set, (string) $key );
		if ( null === $snap ) {
			return new WP_Error(
				'bundle_boss',
				/* translators: %s: option set name */
				sprintf( __( 'That %s choice is not available any more. Please pick another.', 'addon-boss' ), $name )
			);
		}
		$snapshots[] = $snap;
	}
	return $snapshots;
}

function addon_boss_standalone_option_snapshots( WC_Product $product, array $source ) {
	$sets = addon_boss_standalone_option_sets( $product );

	// Every set's raw pick first, then the activity map: a hidden set is
	// INERT, so its posted value is discarded (never charged, the crafted
	// POST case) and its required flag never fires (the blocked-checkout
	// case). Both are the category's admitted failure classes. A pick-one
	// set's entry stays the string it always was; a several-of set's entry
	// is its array of keys.
	$picks = array();
	foreach ( $sets as $set ) {
		$field = addon_boss_standalone_field_name( $set['id'] );
		$bb_pp = addon_boss_standalone_posted_picks( $set, $source[ $field ] ?? '' );
		$picks[ $set['id'] ] = ! empty( $set['multi'] ) ? $bb_pp : (string) ( $bb_pp[0] ?? '' );
	}
	$active = addon_boss_active_option_sets( $sets, $picks );

	$snapshots = array();
	foreach ( $sets as $set ) {
		if ( empty( $active[ $set['id'] ] ) ) {
			continue; // hidden means inert.
		}

		// A kind priced off its own panel (a measured size, a price table)
		// resolves through the module that registered it; the sets list above
		// already dropped any kind nothing did.
		$bb_kind = (string) ( $set['kind'] ?? 'choices' );
		if ( 'choices' !== $bb_kind ) {
			$bb_cb = addon_boss_option_set_kinds()[ $bb_kind ]['snapshot'] ?? null;
			if ( ! is_callable( $bb_cb ) ) {
				continue;
			}
			$bb_snap = call_user_func( $bb_cb, $set, $source );
			if ( is_wp_error( $bb_snap ) ) {
				return $bb_snap;
			}
			if ( is_array( $bb_snap ) ) {
				// A module can adjust a panel-priced snapshot off the OTHER
				// answers on the page (a table's named uplift when Two colours
				// is picked). It runs HERE because this is the one place the
				// picks and the activity map stand beside the freshly priced
				// snapshot; with nothing hooked it passes byte-identical.
				$bb_snap = apply_filters( 'addon_boss_kind_snapshot_adjust', $bb_snap, $set, $picks, $active, $source );
				if ( is_wp_error( $bb_snap ) ) {
					return $bb_snap;
				}
				$snapshots[] = $bb_snap;
			}
			continue;
		}

		// Several-of: the bounds and the snapshots come from the one helper that
		// both ordering surfaces call, so the single-pick page and the quantity
		// grid can never disagree about what is allowed or what it costs.
		if ( ! empty( $set['multi'] ) ) {
			$bb_multi = addon_boss_multi_pick_snapshots( $set, (array) $picks[ $set['id'] ] );
			if ( is_wp_error( $bb_multi ) ) {
				return $bb_multi;
			}
			foreach ( $bb_multi as $bb_snap ) {
				$snapshots[] = $bb_snap;
			}
			continue;
		}

		$picked = $picks[ $set['id'] ];
		if ( '' === $picked ) {
			if ( $set['required'] ) {
				return new WP_Error(
					'bundle_boss',
					/* translators: %s: option set name */
					sprintf( __( 'Please choose %s.', 'addon-boss' ), addon_boss_set_shopper_name( $set ) )
				);
			}
			continue;
		}
		$snap = addon_boss_option_snapshot( $set, $picked );
		if ( null === $snap ) {
			return new WP_Error(
				'bundle_boss',
				/* translators: %s: option set name */
				sprintf( __( 'That %s choice is not available any more. Please pick another.', 'addon-boss' ), addon_boss_set_shopper_name( $set ) )
			);
		}
		$snapshots[] = $snap;
	}

	/**
	 * The resolved snapshots, before anything charges off them. A module may
	 * re-cut deltas that belong TOGETHER (per-combination pricing charges a
	 * colour and size pair as one exact cell); with no subscriber they pass
	 * through untouched. Filtered HERE, at the one resolve boundary, so the
	 * add-to-cart check, the cart line, the order rows and the emails can
	 * never disagree about what a pair costs.
	 *
	 * @param array<int,array> $snapshots
	 * @param WC_Product       $product
	 */
	return apply_filters( 'addon_boss_standalone_option_snapshots_resolved', $snapshots, $product );
}

/**
 * A snapshot's charge as a display suffix, or '' for no charge. The helper
 * that converts it is the one every bundle option figure goes through
 * (addon_boss_price_to_display); it only converts positive amounts, so the
 * magnitude converts and the sign is reapplied (deltas may be negative).
 */
function addon_boss_standalone_charge_suffix( array $snap, $product, string $context ): string {
	$fee = (float) ( $snap['delta'] ?? 0 );
	if ( 0.0 === $fee || ! $product instanceof WC_Product ) {
		return '';
	}
	$shown = addon_boss_price_to_display( $product, abs( $fee ), $context );
	// A look-up table on the "sets the whole price" basis is not a surcharge: the
	// cell REPLACES the product price, so the line and this figure are the same
	// money. Printing "+£115.20" beside a £115.20 line reads as a double charge.
	// Plain text for the same reason the field suffix is: meta renders where
	// our CSS never follows, and wc_price invites dual-basis tax markup.
	if ( 'set' === ( $snap['table_basis'] ?? '' ) ) {
		return ' (' . addon_boss_money( $shown, null, array( 'plain' => true, 'convert' => false ) ) . ')';
	}
	return ' (' . ( $fee > 0 ? '+' : '-' ) . addon_boss_money( $shown, null, array( 'plain' => true, 'convert' => false ) ) . ')';
}

/**
 * The SAME charge suffix as plain text, for the readable order rows. The one
 * formatter builds the suffix (above); this only takes its markup off.
 * wp_strip_all_tags() ends in trim(), which ate the suffix's leading space:
 * the cart read "Sandalwood (+£2.00)" while the thank-you page, the order
 * screen and the emails read "Sandalwood(+£2.00)". The space is the suffix's
 * own first character, so it is put back after the strip; an empty suffix
 * stays exactly empty.
 */
function addon_boss_standalone_suffix_text( string $suffix ): string {
	if ( '' === $suffix ) {
		return '';
	}
	return ' ' . trim( wp_strip_all_tags( $suffix ) );
}

// ---- Product fields: priced custom inputs on the product's own page ----
//
// A field shares the set's shape exactly: optional / required (or "required
// once personalising"), an "available only when a set is picked" reveal, and a
// charge. The money joins the SAME cart line as the sets (one set_price), so
// the two paths can never drift. A hidden field (its reveal rule unmet) is
// INERT: never resolved, never charged, its required flag never fires, the
// same server-side discipline the sets keep.

const ADDON_BOSS_PRODUCT_FIELDS_KEY  = 'bundle_boss_product_fields';
const ADDON_BOSS_PRODUCT_FIELDS_META = '_bundle_boss_product_fields';

// The most instances one repeatable field can ever open, whatever the merchant
// typed and whatever the browser posts. A shopper cannot be allowed to grow the
// payload without limit, but the ceiling has to sit ABOVE the size runs
// merchants actually take: quantity discounts make 100 and 150 normal
// quantities, and a per-item field's promise is one entry per unit. Past a
// handful the storefront folds the list into one paste-the-list box and the
// cart folds the rows into a summary, so nothing ever draws hundreds of cards
// however much this allows.
const ADDON_BOSS_REPEAT_CEILING = 200;


/**
 * One posted field value, cleaned to what its type is allowed to carry.
 *
 * The single-instance path and each instance of a repeatable one go through
 * this same function, so a repeated measured field cannot accept a shape the
 * plain one refuses.
 *
 * @param array  $types  The field type register.
 * @param string $type   This field's type.
 * @param mixed  $posted What arrived for it.
 * @return array|string|null
 */
function addon_boss_field_normalise_posted( array $types, string $type, $posted ) {
	if ( null === $posted ) {
		return null;
	}
	if ( is_array( $posted ) ) {
		// Only a MEASURED field posts an array (its two dimensions). Every
		// other type stays scalar-only, so an array smuggled in against a
		// text or file field is still dropped exactly as before.
		if ( empty( $types[ $type ]['is_measure'] ) ) {
			return null;
		}
		return array(
			'w' => isset( $posted['w'] ) ? sanitize_text_field( wp_unslash( (string) $posted['w'] ) ) : '',
			'h' => isset( $posted['h'] ) ? sanitize_text_field( wp_unslash( (string) $posted['h'] ) ) : '',
		);
	}
	return wp_unslash( (string) $posted );
}


/**
 * The priced fields a product offers on its OWN page, each field def carrying
 * its reveal rule ('when') folded in. Same surfaces as the sets (simple
 * products and variable parents); anything else offers none.
 *
 * @return array<int,array>
 */
function addon_boss_standalone_product_fields( $product ): array {
	if ( ! $product instanceof WC_Product || ! ( $product->is_type( 'simple' ) || $product->is_type( 'variable' ) ) ) {
		return array();
	}
	$out = array();
	// One field row to its read-ready def, or null when this build cannot
	// offer its type. The exact logic the flat walk has always applied.
	$bb_read = static function ( array $row ) {
		if ( ( $row['row_type'] ?? '' ) !== 'field' || ! is_array( $row['field'] ?? null ) ) {
			return null;
		}
		$def         = $row['field'];
		// Without conditional reveal a field's stored rule is ignored, so it
		// simply shows. The rule itself is left untouched.
		$def['when'] = ( addon_boss_engine_can( 'reveal' ) && is_array( $row['when'] ?? null ) ) ? $row['when'] : array();
		// A field TYPE this build does not offer is inert: dropped from the set
		// every downstream reader uses, so it never prices, validates/blocks or
		// renders. A field priced by an unavailable fee MODE is KEPT (its input
		// still works; the fee is zeroed in resolve_fee). The stored config is
		// never rewritten, so the field returns whole with its module.
		if ( ! addon_boss_field_type_available( (string) ( $def['type'] ?? '' ) ) ) {
			return null;
		}
		return $def;
	};
	// The walk keeps each group's identity in hand: a field inside a GROUP is
	// captured + priced exactly like a top-level one (grouping is presentation,
	// never a money boundary), and when the group is marked repeatable its
	// members are STAMPED with the group's repeat facts under '_grp', a derived
	// read-time key that is never stored. The module that owns repeats reads
	// the stamp; with no module the stamp is inert and every field asks once.
	// A quantity-grid product is never stamped: the grid captures a quantity
	// per variation and nothing per line, so there is no line quantity for a
	// block to follow and no per-line blocks to draw (the same deferral the
	// per-field per_item mode already makes there).
	$bb_grid = function_exists( 'addon_boss_product_uses_grid' ) && addon_boss_product_uses_grid( $product );
	$bb_gi   = -1;
	foreach ( (array) addon_boss_product_option_config( $product ) as $row ) {
		if ( ( $row['row_type'] ?? '' ) === 'group' ) {
			++$bb_gi;
			$bb_gmode = (string) ( $row['repeat'] ?? '' );
			$bb_stamp = ! $bb_grid && in_array( $bb_gmode, array( 'add', 'per_item' ), true );
			$bb_kids  = (array) ( $row['children'] ?? array() );
			// The member keys, in order, so the module can read the whole
			// block's posted lists from any one member's seam call.
			$bb_keys = array();
			if ( $bb_stamp ) {
				foreach ( $bb_kids as $bb_kid ) {
					$bb_kdef = is_array( $bb_kid ) ? $bb_read( $bb_kid ) : null;
					if ( null !== $bb_kdef && '' !== (string) ( $bb_kdef['key'] ?? '' ) ) {
						$bb_keys[] = (string) $bb_kdef['key'];
					}
				}
			}
			foreach ( $bb_kids as $bb_kid ) {
				$def = is_array( $bb_kid ) ? $bb_read( $bb_kid ) : null;
				if ( null === $def ) {
					continue;
				}
				if ( $bb_stamp ) {
					$def['_grp'] = array(
						'index'        => $bb_gi,
						'label'        => (string) ( $row['label'] ?? '' ),
						'repeat'       => $bb_gmode,
						'repeat_max'   => (int) ( $row['repeat_max'] ?? 0 ),
						'repeat_label' => (string) ( $row['repeat_label'] ?? '' ),
						'keys'         => $bb_keys,
					);
				}
				$out[] = $def;
			}
			continue;
		}
		$def = $bb_read( $row );
		if ( null !== $def ) {
			$out[] = $def;
		}
	}
	return $out;
}

/**
 * Resolve one request's field inputs into cart snapshots via the SAME
 * personalisation resolvers the bundle add-ons use, so text / number / tick /
 * dropdown / file behave identically here and there. A field revealed "only
 * when" a set is picked reads its activity off the SAME set picks the option
 * snapshots use: hidden means INERT (its posted value discarded, never
 * charged; its required flag never fires). Returns WP_Error naming the field
 * when a required (or "required once personalising") field is left empty; the
 * snapshot array otherwise (empty when nothing was filled).
 *
 * Each snapshot freezes the resolved fee. A 'once' fee is a WHOLE-LINE charge
 * (the price seam spreads it across the line quantity so quantity can never
 * multiply it); every other mode is per-unit and multiplies natively.
 *
 * @param array $source Raw request fields (slashed; sanitised per field).
 * @return array|WP_Error
 */
function addon_boss_standalone_field_snapshots( WC_Product $product, array $source ) {
	$fields = addon_boss_standalone_product_fields( $product );
	if ( ! $fields ) {
		return array();
	}
	$types = function_exists( 'addon_boss_personalisation_field_types' ) ? addon_boss_personalisation_field_types() : array();

	// Field reveal rides on the SAME set picks the option snapshots resolve, so
	// a field shown "only when Style is Printed" is inert while Plain is picked.
	// The same reader as the resolver: a several-of set's entry is its array.
	$sets  = addon_boss_standalone_option_sets( $product );
	$picks = array();
	foreach ( $sets as $set ) {
		$f     = addon_boss_standalone_field_name( $set['id'] );
		$bb_pp = addon_boss_standalone_posted_picks( $set, $source[ $f ] ?? '' );
		$picks[ $set['id'] ] = ! empty( $set['multi'] ) ? $bb_pp : (string) ( $bb_pp[0] ?? '' );
	}
	$active_sets = addon_boss_active_option_sets( $sets, $picks );
	// Fields join the rule state too, so a rule can be triggered by a tick box
	// and not only by an option set.
	addon_boss_add_field_rule_state( $fields, $source['bb_pf'] ?? null, $picks, $active_sets );

	// The variation being bought, so a field restricted to certain variations
	// stays inert for the rest.
	$chosen_variation = isset( $source['variation_id'] ) ? absint( $source['variation_id'] ) : 0;

	// First pass: resolve every ACTIVE, input-bearing field. A section label is
	// display-only, so it carries no value and never resolves.
	$resolved_rows = array();
	$any_filled    = false;
	foreach ( $fields as $def ) {
		$key  = (string) ( $def['key'] ?? '' );
		$type = (string) ( $def['type'] ?? '' );
		if ( '' === $key || ! empty( $types[ $type ]['display_only'] ) ) {
			continue;
		}
		if ( ! addon_boss_field_applies_to_variation( $def, $chosen_variation ) ) {
			continue; // inert for this variation: never required, never charged.
		}
		$when = is_array( $def['when'] ?? null ) ? $def['when'] : array();
		if ( $when && ! (bool) apply_filters( 'addon_boss_when_met', true, $when, $picks, $active_sets ) ) {
			// The module that evaluates reveal rules answered no: hidden means
			// inert, never resolved, never charged, never blocking. With no
			// evaluator registered a rule was already wiped on read, and the
			// default answer keeps everything visible.
			continue;
		}
		$posted = $source['bb_pf'][ $key ] ?? null;
		// A module that asks one field several times (repeatable fields)
		// answers this seam with one entry per instance: the posted value,
		// the instance's own label, its number from 1, and whether its money
		// is whole-line (a per-item repeat already scales with the quantity).
		// With nothing registered every field asks exactly once, as it always
		// has, and a stored repeat setting waits, unhonoured and untouched.
		$bb_instances = apply_filters( 'addon_boss_field_instances', null, $def, $posted, $source );
		if ( is_array( $bb_instances ) ) {
			foreach ( $bb_instances as $bb_inst ) {
				$resolved = addon_boss_personalisation_resolve_value(
					$def,
					addon_boss_field_normalise_posted( $types, $type, $bb_inst['value'] ?? null ),
					$product
				);
				if ( is_wp_error( $resolved ) ) {
					// Typed but wrong is its own state: the message says what to fix.
					// Dropping it as if empty would lose the answer, or the money.
					return $resolved;
				}
				if ( null !== $resolved ) {
					$any_filled = true;
				}
				$resolved_rows[] = array(
					'def'      => $def,
					'resolved' => $resolved,
					'instance' => (int) ( $bb_inst['instance'] ?? 0 ),
					'label'    => (string) ( $bb_inst['label'] ?? '' ),
					'spread'   => ! empty( $bb_inst['spread'] ),
				);
			}
			continue;
		}
		$resolved = addon_boss_personalisation_resolve_value(
			$def,
			addon_boss_field_normalise_posted( $types, $type, $posted ),
			$product
		);
		if ( is_wp_error( $resolved ) ) {
			return $resolved; // typed but wrong: the message says what to fix.
		}
		if ( null !== $resolved ) {
			$any_filled = true;
		}
		$resolved_rows[] = array( 'def' => $def, 'resolved' => $resolved );
	}

	// A module that resolves several fields as ONE block (a repeatable group)
	// reorders the rows here so the line reads block by block, the way the
	// shopper filled it in, and the required gate below accuses the first gap
	// in READING order. With nothing registered the rows stand exactly as the
	// loop built them, which is the order every line has always had.
	$resolved_rows = (array) apply_filters( 'addon_boss_field_resolved_rows', $resolved_rows );

	// Second pass: gate required / "required once personalising", then freeze
	// the fee for each filled field into a snapshot.
	$once_charged = array();
	$snapshots    = array();
	foreach ( $resolved_rows as $row ) {
		$def      = $row['def'];
		$resolved = $row['resolved'];
		$instance = (int) ( $row['instance'] ?? 0 );
		// A repeatable field names each one (the instances seam carried the
		// name), so an unfilled third card reads "Please complete Name 3" and
		// the shopper knows which to go back to rather than being sent to
		// look at the field in general.
		$label = '' !== (string) ( $row['label'] ?? '' )
			? (string) $row['label']
			: (string) ( $def['label'] ?? '' );
		if ( null === $resolved ) {
			$blocks = ! empty( $def['required'] )
				|| ( 'engaged' === ( $def['require_when'] ?? '' ) && $any_filled );
			if ( $blocks ) {
				return new WP_Error(
					'bundle_boss',
					/* translators: %s: the field's label */
					sprintf( __( 'Please complete %s.', 'addon-boss' ), $label )
				);
			}
			continue;
		}
		// A floor on the file count ("send at least two views"). Checked HERE, on
		// the server, because the browser count is a courtesy: the add-to-cart post
		// is what decides, and a short set must not reach the cart at all. Only a
		// field that WAS filled is measured, so an optional upload left empty is
		// still optional.
		$min_files = max( 0, (int) ( $def['min_files'] ?? 0 ) );
		if ( $min_files > 1 && 'file' === ( $def['type'] ?? '' ) ) {
			$sent = count( array_filter( array_map( 'trim', explode( ',', (string) $resolved['value'] ) ) ) );
			if ( $sent < $min_files ) {
				return new WP_Error(
					'bundle_boss',
					sprintf(
						/* translators: 1: the field's label, 2: the smallest number of files accepted, 3: how many arrived */
						__( '%1$s needs at least %2$s files. You have added %3$s.', 'addon-boss' ),
						(string) ( $def['label'] ?? '' ),
						number_format_i18n( $min_files ),
						number_format_i18n( $sent )
					)
				);
			}
		}
		// The product's own per-unit base, so a percent field takes its share of
		// the same figure the line is priced from.
		// The instance number is what a "once" fee is counted against, so each one
		// the shopper opens carries its own setup charge. Passing 0 for every
		// instance, as a field that asks once does, would let the first engraving
		// charge and silently give away the rest.
		//
		// This is also where the merchant chooses between the two ways a repeated
		// charge can behave, using the fee mode they already set:
		//   unit  a charge per instance ON EVERY ITEM. Two mugs, three engravings,
		//         six charges. The category's usual reading of a per-item fee.
		//   once  a charge per instance for the WHOLE LINE. Three engravings cost
		//         three setups however many mugs are bought, because the price seam
		//         spreads a "once" fee across the units.
		$fee  = addon_boss_personalisation_resolve_fee( $def, $resolved, $instance, $once_charged, addon_boss_options_base_price( $product ) );
		$snap = array(
			'key'      => (string) $def['key'],
			'label'    => $label,
			'type'     => (string) ( $def['type'] ?? 'text' ),
			'value'    => (string) $resolved['value'],
			'display'  => (string) $resolved['display'],
			'url'      => (string) ( $resolved['url'] ?? '' ),
			'fee'      => (float) $fee,
			'fee_mode' => (string) ( $def['fee_mode'] ?? 'unit' ),
		);
		// A colour's code rides beside its words so the admin order can paint a
		// real chip; a hidden field's row is marked for the admin's eyes so no
		// customer surface ever prints it. Absent keys stay absent, keeping every
		// other field's snapshot byte-identical to the one it has always written.
		if ( '' !== (string) ( $resolved['hex'] ?? '' ) ) {
			$snap['hex'] = (string) $resolved['hex'];
		}
		if ( '' !== (string) ( $resolved['display_cart'] ?? '' ) ) {
			// A type's shorter cart-only form rides beside the full display.
			$snap['display_cart'] = (string) $resolved['display_cart'];
		}
		if ( ! empty( $resolved['admin_only'] ) ) {
			$snap['admin_only'] = true;
		}
		// Whatever a module froze alongside the value (the typeface and colour
		// pick for a placement field that offers one) rides this seam, so the
		// cart row, the order line and a reorder all state the exact print.
		// With nothing registered the snapshot stays byte-identical to the one
		// this engine has always written.
		$snap = (array) apply_filters( 'addon_boss_standalone_field_snapshot', $snap, $def, $source );
		if ( $instance > 0 ) {
			// Which one of several this is. Written ONLY for a repeatable field,
			// so an ordinary field's snapshot stays byte-identical to the one it
			// has always written and every order already placed reads back
			// unchanged.
			$snap['instance'] = $instance;
			if ( ! empty( $row['spread'] ) ) {
				// A per-item repeat opens one instance for every unit bought, so
				// the instances already scale with the quantity. WooCommerce then
				// multiplies the unit price by that same quantity, which would
				// charge six names on six shirts thirty-six times over. Marked to
				// be spread across the units, exactly as a "once" fee is, so the
				// line lands back on one charge per name.
				$snap['spread'] = true;
			}
		}
		$snapshots[] = $snap;
	}
	return $snapshots;
}

/**
 * A field snapshot's frozen charge as a display suffix, or '' for no charge.
 * Fees are never negative (the sanitiser floors at zero), so the sign is
 * always '+'. Converts through the SAME helper the option rows use, so a
 * field's money reads in the same basis as a set's on the same line.
 */
function addon_boss_standalone_field_charge_suffix( array $fsnap, $product, string $context ): string {
	$fee = (float) ( $fsnap['fee'] ?? 0 );
	if ( $fee <= 0.0 || ! $product instanceof WC_Product ) {
		return '';
	}
	// Plain text, never wc_price markup: this suffix rides in cart meta and
	// order rows, which render wherever our CSS does not follow (the block
	// cart, the emails), and a dual-basis tax plugin filtering wc_price
	// prints both of its figures mashed together there.
	$shown = addon_boss_money( $fee, $product, array( 'plain' => true, 'context' => $context ) );

	// NEVER THE SAME FIGURE TWICE ON ONE LINE. Where a shopper names the amount
	// themselves, the answer already IS the charge, and the cart read
	// "Add a tip for the maker: GBP 5.00 (+GBP 5.00)". Said once is the whole
	// truth. They part company only where the answer was typed in one basis and
	// the cart is read in another, and then the pair is worth printing: GBP 5.00
	// named, GBP 6.00 to pay.
	if ( isset( $fsnap['display'] ) && (string) $fsnap['display'] === $shown ) {
		return '';
	}

	return ' (' . addon_boss_money( $fee, $product, array( 'plain' => true, 'sign' => true, 'context' => $context ) ) . ')';
}

// =================================================================
// STANDALONE SURFACE part 2: native-WooCommerce cart/order path (validate,
// capture, price, cart display, order line, order-again). Lifted from
// slot-options; registers once via the load-once engine (no double-charge).
// =================================================================

// ---- Validate + capture -----------------------------------------

add_filter( 'woocommerce_add_to_cart_validation', 'addon_boss_validate_standalone_options', 10, 6 );

function addon_boss_validate_standalone_options( $passed, $product_id, $quantity = 1, $variation_id = 0, $variations = array(), $cart_item_data = array() ) {
	if ( ! $passed ) {
		return $passed;
	}
	// A bundle add configures its components through the bundle's own gate.
	if ( isset( $_REQUEST['bundle_selections'] ) || isset( $_REQUEST['bundle_id'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- presence check only, to stand down for the bundle's own flow.
		return $passed;
	}
	// Order again hands the restored snapshots through (6th argument): they
	// were validated at the original add and deliberately keep their charge.
	if ( is_array( $cart_item_data )
		&& ( ! empty( $cart_item_data['bundle_boss'] ) || isset( $cart_item_data[ ADDON_BOSS_STANDALONE_OPTIONS_KEY ] ) || isset( $cart_item_data[ ADDON_BOSS_STANDALONE_UPLOAD_KEY ] ) || isset( $cart_item_data[ ADDON_BOSS_PRODUCT_FIELDS_KEY ] ) ) ) {
		return $passed;
	}
	$product = wc_get_product( absint( $product_id ) );
	if ( ! $product || ( ! addon_boss_standalone_option_sets( $product ) && ! addon_boss_standalone_product_fields( $product ) ) ) {
		return $passed;
	}
	$result = addon_boss_standalone_option_snapshots( $product, $_REQUEST ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- WooCommerce's add-to-cart flow carries no nonce; each field is sanitised and resolved against the stored set inside.
	if ( is_wp_error( $result ) ) {
		wc_add_notice( $result->get_error_message(), 'error' );
		return false;
	}
	// Per-option stock: refuse an over-order, counting what the cart already
	// holds, less the line this request is replacing.
	$bb_stock = addon_boss_check_option_stock(
		$product,
		is_array( $result ) ? $result : array(),
		(int) $quantity,
		addon_boss_editing_cart_line( absint( $product_id ) )
	);
	if ( is_wp_error( $bb_stock ) ) {
		wc_add_notice( $bb_stock->get_error_message(), 'error' );
		return false;
	}
	// Fields share the gate: a required (or "required once personalising")
	// field left empty blocks the add, unless it is hidden by an unmet reveal
	// rule, in which case it is inert and never asked for.
	if ( addon_boss_standalone_product_fields( $product ) ) {
		$fields = addon_boss_standalone_field_snapshots( $product, $_REQUEST ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- each field sanitised and resolved inside.
		if ( is_wp_error( $fields ) ) {
			wc_add_notice( $fields->get_error_message(), 'error' );
			return false;
		}
	}
	return $passed;
}


add_filter( 'woocommerce_add_cart_item_data', 'addon_boss_capture_standalone_options', 10, 4 );

function addon_boss_capture_standalone_options( $cart_item_data, $product_id, $variation_id = 0, $quantity = 1 ) {
	if ( ! is_array( $cart_item_data ) ) {
		$cart_item_data = array();
	}
	// A bundle add configures its components through the bundle's own gate, so
	// the picks are not re-read here. The one thing that gate cannot know is
	// our per-option count, and a jar sold inside a bundle comes off the same
	// shelf as one sold on its own page, so that is checked before the bundle
	// reaches the cart. The payload already carries validated selections.
	if ( ! empty( $cart_item_data['bundle_boss'] ) ) {
		$bb_demand = addon_boss_bundle_option_demand(
			$cart_item_data['bundle_boss']['selections'] ?? array(),
			max( 1, (int) $quantity )
		);
		foreach ( $bb_demand as $bb_row ) {
			$bb_short = addon_boss_check_option_stock(
				null,
				array(
					array(
						'set'   => $bb_row['set'],
						'key'   => $bb_row['key'],
						'label' => $bb_row['label'],
					),
				),
				(int) $bb_row['qty']
			);
			if ( is_wp_error( $bb_short ) ) {
				throw new Exception( esc_html( $bb_short->get_error_message() ) );
			}
		}
		return $cart_item_data;
	}
	// A line arriving with snapshots already made (order again, or any
	// programmatic add that built its own picks) keeps them: they were
	// resolved and priced once and must not be re-read from the request.
	// Stock is the exception. What was on the shelf when the first order was
	// placed can be gone now, so the count is asked again even though the
	// picks are not.
	if ( isset( $cart_item_data[ ADDON_BOSS_STANDALONE_OPTIONS_KEY ] ) || isset( $cart_item_data[ ADDON_BOSS_STANDALONE_UPLOAD_KEY ] ) || isset( $cart_item_data[ ADDON_BOSS_PRODUCT_FIELDS_KEY ] ) ) {
		$bb_restored = $cart_item_data[ ADDON_BOSS_STANDALONE_OPTIONS_KEY ] ?? array();
		$bb_product  = is_array( $bb_restored ) && $bb_restored ? wc_get_product( absint( $product_id ) ) : null;
		if ( $bb_product ) {
			$bb_stock = addon_boss_check_option_stock( $bb_product, $bb_restored, max( 1, (int) $quantity ) );
			if ( is_wp_error( $bb_stock ) ) {
				throw new Exception( esc_html( $bb_stock->get_error_message() ) );
			}
		}
		return $cart_item_data;
	}
	$product = wc_get_product( absint( $product_id ) );
	if ( ! $product || ( ! addon_boss_standalone_option_sets( $product ) && ! addon_boss_standalone_product_fields( $product ) ) ) {
		return $cart_item_data;
	}
	$result = addon_boss_standalone_option_snapshots( $product, $_REQUEST ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- WooCommerce's add-to-cart flow carries no nonce; each field is sanitised and resolved against the stored set inside.
	if ( is_wp_error( $result ) ) {
		// Direct adds (Store API, programmatic) skip the form handler's
		// validation gate; throwing keeps a required choice from selling
		// unchosen, the same discipline as addon_boss_require_configuration.
		throw new Exception( esc_html( $result->get_error_message() ) );
	}
	// Per-option stock enforced here, because this is the only seam every add
	// passes through: WC_Cart::add_to_cart never fires the validation filter
	// itself, so a Store API, quick-order or otherwise programmatic add would
	// reach the cart unchecked. The quantity being added arrives as this
	// filter's own argument, which is the only number worth checking: a posted
	// one can be absent (a JSON request carries none) or simply differ.
	$bb_stock = addon_boss_check_option_stock(
		$product,
		is_array( $result ) ? $result : array(),
		max( 1, (int) $quantity ),
		addon_boss_editing_cart_line( absint( $product_id ) )
	);
	if ( is_wp_error( $bb_stock ) ) {
		throw new Exception( esc_html( $bb_stock->get_error_message() ) );
	}
	if ( $result ) {
		// Distinct picks make distinct cart_item_data, which WooCommerce's
		// generate_cart_id() hashes: different combinations never merge
		// into one line, identical ones still do. No extra key needed.
		$cart_item_data[ ADDON_BOSS_STANDALONE_OPTIONS_KEY ] = $result;
	}
	// Fields resolve and freeze the same way, under their own key so a
	// fields-only line still hashes distinctly per input (the frozen fee is
	// what the price seam charges).
	$fields = addon_boss_standalone_product_fields( $product );
	if ( $fields ) {
		$fresult = addon_boss_standalone_field_snapshots( $product, $_REQUEST ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- each field sanitised and resolved inside.
		if ( is_wp_error( $fresult ) ) {
			// Direct adds (Store API, programmatic) skip the form gate; throwing
			// keeps a required field from selling unfilled, the same discipline
			// the option snapshots keep above.
			throw new Exception( esc_html( $fresult->get_error_message() ) );
		}
		if ( $fresult ) {
			$cart_item_data[ ADDON_BOSS_PRODUCT_FIELDS_KEY ] = $fresult;
		}
	}
	return $cart_item_data;
}

// Order again: restore the snapshots from the order line so the re-order
// charges what the original charged (the reorder-undercharge lesson; the
// bundle path restores its selections the same way).
add_filter( 'woocommerce_order_again_cart_item_data', 'addon_boss_standalone_order_again', 10, 2 );

function addon_boss_standalone_order_again( $cart_item_data, $item ) {
	$snaps = $item->get_meta( '_bundle_boss_standalone_options' );
	if ( ! empty( $snaps ) && is_array( $snaps ) ) {
		$cart_item_data[ ADDON_BOSS_STANDALONE_OPTIONS_KEY ] = $snaps;
	}
	// The upload comes back only if its file still exists (kept uploads
	// survive cleanup; a vanished file restores as no file, never an error).
	$up = $item->get_meta( ADDON_BOSS_STANDALONE_UPLOAD_META );
	if ( is_array( $up ) && function_exists( 'addon_boss_personalisation_resolve_upload' )
		&& addon_boss_personalisation_resolve_upload( (string) ( $up['ref'] ?? '' ) ) ) {
		$cart_item_data[ ADDON_BOSS_STANDALONE_UPLOAD_KEY ] = $up;
	}
	// The fields restore straight from the frozen snapshots, so a re-order
	// charges exactly what the original did (a file field carries its
	// reference; a vanished upload simply reads as no file when re-resolved).
	$fsnaps = $item->get_meta( ADDON_BOSS_PRODUCT_FIELDS_META );
	if ( ! empty( $fsnaps ) && is_array( $fsnaps ) ) {
		$cart_item_data[ ADDON_BOSS_PRODUCT_FIELDS_KEY ] = $fsnaps;
	}
	return $cart_item_data;
}

// ---- Price ------------------------------------------------------

/**
 * The product's price in the STORE'S BASE currency, for building a cart
 * price that a currency switcher then converts exactly once.
 *
 * get_price() returns the VIEW price, which a switcher (WOOCS, Aelia, FOX,
 * WPML multi-currency) has already converted to the active currency. Adding
 * raw option fees to that and handing the sum to set_price() lets the
 * switcher convert the whole line AGAIN, a confirmed double charge (a
 * banner that should cost the equivalent of 37 was billed 134 instead of
 * 74 under WOOCS). When the active currency differs from the store's base,
 * we read the UNCONVERTED base (the 'edit' context bypasses the price
 * filters) so base + fees is one clean base-currency figure the switcher
 * converts once. When no switcher is converting, which is every ordinary
 * store and even a switcher store viewing in its base currency, active
 * equals base and this returns exactly get_price(), so nothing else is
 * touched: sales, tax, and role-based pricing all behave as before.
 */
function addon_boss_options_base_price( WC_Product $product ): float {
	// One currency rule for the whole plugin: the bundle sum reads components
	// through addon_boss_base_price() (core) with this exact logic, so the
	// standalone line shares it rather than keeping a second copy that can drift.
	return addon_boss_base_price( $product );
}

add_action( 'woocommerce_before_calculate_totals', 'addon_boss_price_standalone_options', 10 );

function addon_boss_price_standalone_options( $cart ): void {
	if ( is_admin() && ! defined( 'DOING_AJAX' ) ) {
		return;
	}
	foreach ( $cart->get_cart() as $item ) {
		$bb_pos_snaps = defined( 'ADDON_BOSS_POSITIONS_KEY' ) ? (array) ( $item[ ADDON_BOSS_POSITIONS_KEY ] ?? array() ) : array();
		// A module can claim a line that carries no option data at all (a
		// quantity-banded product bought plain still needs its unit repriced).
		// Bundled lines are never claimable: the bundle owns their price.
		$bb_forced = apply_filters( 'addon_boss_price_line_forced', false, $item );
		if ( ! empty( $item['bundle_boss'] )
			|| ( ! $bb_forced && empty( $item[ ADDON_BOSS_STANDALONE_OPTIONS_KEY ] ) && empty( $item[ ADDON_BOSS_PRODUCT_FIELDS_KEY ] ) && ! $bb_pos_snaps ) ) {
			continue;
		}
		// A FRESH product each pass: this hook runs repeatedly and the line's
		// own object already carries the previous pass's price, so deriving
		// from it would compound the fees. On a variable line the VARIATION
		// is the base (the parent would answer with its cheapest variation,
		// the exact undercharge every rival's changelog admits to).
		$base_id = (int) ( $item['variation_id'] ?? 0 );
		$base    = wc_get_product( $base_id ? $base_id : (int) ( $item['product_id'] ?? 0 ) );
		if ( ! $base ) {
			continue;
		}
		// Fees accumulate in THREE buckets, because a discount module must be
		// able to tell them apart: unit fees scale with the quantity (an option
		// delta, a per-item charge) and may fairly be discounted with the
		// product; position fees are per-item print and embroidery money, held
		// apart so a shop can tier its options while its needlework holds firm
		// (Stefanos, 23 Aug); spread fees are whole-line charges divided across
		// the units (a setup charge is one piece of work at any quantity) and
		// must never be touched by anything.
		$unit_fees     = 0.0;
		$position_fees = 0.0;
		$spread_fees   = 0.0;
		$qty         = max( 1, (int) ( $item['quantity'] ?? 1 ) );
		$table_set_base = null;
		foreach ( (array) ( $item[ ADDON_BOSS_STANDALONE_OPTIONS_KEY ] ?? array() ) as $snap ) {
			// A look-up table on the "sets the whole price" basis REPLACES the product
			// base (a 60x90 sign IS 68.00, not the product price plus 68). Every other
			// option (an add-basis table, a choice delta, a measured charge) adds on.
			if ( 'set' === ( $snap['table_basis'] ?? '' ) ) {
				$table_set_base = (float) ( $snap['delta'] ?? 0 );
				// A once-for-the-line adjustment (a rush charge on a priced grid)
				// is a whole-line amount whatever the quantity, exactly like a
				// 'once' field fee, so it spreads the same way and WooCommerce's
				// per-unit times quantity lands back on the one charge.
				$spread_fees += (float) ( $snap['adj_once'] ?? 0 ) / $qty;
				continue;
			}
			$unit_fees += (float) ( $snap['delta'] ?? 0 );
			$spread_fees += (float) ( $snap['adj_once'] ?? 0 ) / $qty;
		}
		// Product-field fees fold into the SAME per-unit price. A 'once' field is
		// a whole-line charge, so it is spread across the units (fee / qty) and
		// WooCommerce's per-unit x quantity lands back on exactly one fee; every
		// other mode is per-unit and multiplies natively. Deliberately NOT
		// rounded here: the unit price is an intermediate WooCommerce rounds into
		// the line total (£12 over 7 units is £1.714…, and pre-rounding loses 3p).
		foreach ( (array) ( $item[ ADDON_BOSS_PRODUCT_FIELDS_KEY ] ?? array() ) as $fsnap ) {
			$fee = (float) ( $fsnap['fee'] ?? 0 );
			if ( 0.0 === $fee ) {
				continue;
			}
			// A per-item repeat opened one instance for every unit being bought,
			// and the instances were frozen at that moment. Lower the quantity in
			// the cart afterwards and the instances above the new one are not
			// being bought any more, so they must stop charging: six names on a
			// line cut to two shirts is two names. The stored values are left
			// alone, so putting the quantity back puts the names back.
			if ( ! empty( $fsnap['spread'] ) && (int) ( $fsnap['instance'] ?? 0 ) > $qty ) {
				continue;
			}
			// Two things are whole-line charges and so are spread across the units:
			// a "once" fee by its mode, and one instance of a per-item repeatable
			// field, because those instances ALREADY scale with the quantity and
			// would otherwise be multiplied by it a second time.
			$spread = ( 'once' === ( $fsnap['fee_mode'] ?? 'unit' ) ) || ! empty( $fsnap['spread'] );
			if ( $spread ) {
				$spread_fees += $fee / $qty;
			} else {
				$unit_fees += $fee;
			}
		}
		// Chosen positions charge exactly the same way: 'once' is a setup charge for
		// the line however many are bought, so it is spread across the units and
		// WooCommerce's per-unit times quantity lands back on one fee; 'unit' is per
		// item and multiplies natively. Same seam, same tax treatment, so a position
		// can never be taxed differently from the thing it is printed on.
		foreach ( $bb_pos_snaps as $psnap ) {
			$pfee = (float) ( $psnap['fee'] ?? 0 );
			if ( 0.0 !== $pfee ) {
				if ( 'once' === ( $psnap['fee_mode'] ?? 'once' ) ) {
					$spread_fees += $pfee / $qty;
				} else {
					$position_fees += $pfee;
				}
			}
			// Tidying up a logo is one piece of work on one file, so it is charged
			// once whatever the position's own mode is. Folded into the fee it
			// followed that mode, and a per-item position multiplied it.
			$phelp = (float) ( $psnap['help_fee'] ?? 0 );
			if ( 0.0 !== $phelp ) {
				$spread_fees += $phelp / $qty;
			}
		}
		// Raw plus raw, exactly like the bundle's unit seam: set_price() takes
		// the store's entry basis and WooCommerce taxes it natively. Per unit;
		// the line quantity multiplies through WooCommerce's own maths. Floored
		// at zero: a merchant can price an option BELOW zero (a "strip it back,
		// -5" choice), and a line cheaper than its own options must read as free,
		// never a negative price that quietly discounts the rest of the cart.
		//
		// The parts pass through one filter before they are summed, so a module
		// can band the base by quantity or discount the per-unit money, each
		// kind under its own tick, while the spread fees stay exactly as
		// computed. With nothing hooked the sum is identical to base + fees.
		$line_base = ( null !== $table_set_base ) ? $table_set_base : addon_boss_options_base_price( $base );
		$bb_parts  = apply_filters(
			'addon_boss_line_price_parts',
			array(
				'base'          => $line_base,
				'unit_fees'     => $unit_fees,
				'position_fees' => $position_fees,
				'spread_fees'   => $spread_fees,
				// True when an option (a table set to own the whole price)
				// replaced the product's base, so a module knows the base is
				// not the product's own price. Informational; never summed.
				'base_is_replaced' => ( null !== $table_set_base ),
			),
			$item,
			$base,
			$qty
		);
		$item['data']->set_price( max( 0.0, (float) $bb_parts['base'] + (float) $bb_parts['unit_fees'] + (float) ( $bb_parts['position_fees'] ?? 0 ) + (float) $bb_parts['spread_fees'] ) );
	}
}

// ---- Display + order --------------------------------------------

/**
 * Give every cart meta row the 'key' the Store API reads. The classic cart
 * backfills it from 'name' (wc_get_formatted_cart_item_data); the Store API
 * does not, so on a block-theme cart each row printed "undefined" where its
 * label belongs. Applied at every exit of the item-data filter below.
 *
 * @param array $data The filter's rows so far.
 * @return array The same rows, each with a key.
 */
function addon_boss_cart_rows_keyed( array $data ): array {
	foreach ( $data as &$bb_row ) {
		if ( is_array( $bb_row ) && ! isset( $bb_row['key'] ) && isset( $bb_row['name'] ) ) {
			$bb_row['key'] = $bb_row['name'];
		}
	}
	unset( $bb_row );
	return $data;
}

add_filter( 'woocommerce_get_item_data', 'addon_boss_standalone_option_item_data', 10, 2 );

function addon_boss_standalone_option_item_data( $data, $cart_item ) {
	if ( ! empty( $cart_item['bundle_boss'] ) ) {
		return $data;
	}
	// The upload's cart row, whether or not the line also carries options.
	$up = $cart_item[ ADDON_BOSS_STANDALONE_UPLOAD_KEY ] ?? null;
	if ( is_array( $up ) && '' !== (string) ( $up['name'] ?? '' ) ) {
		$data[] = array(
			'name'  => '' !== (string) ( $up['label'] ?? '' ) ? (string) $up['label'] : __( 'Your file', 'addon-boss' ),
			'value' => (string) $up['name'],
		);
	}
	// The variation when there is one: charge suffixes convert to display basis
	// through the product's own tax class. Resolved before the options guard so
	// a fields-only line (no option sets) still shows its field rows.
	$vid     = (int) ( $cart_item['variation_id'] ?? 0 );
	$product = wc_get_product( $vid ? $vid : (int) ( $cart_item['product_id'] ?? 0 ) );

	// Product-field rows: Label -> the shopper's value (a file as a link), with
	// any per-unit charge shown in the same basis the option rows use. One
	// field asked per unit becomes a WALL at trade quantities (fifty shirts,
	// fifty rows), so past a handful one field's instances fold into a single
	// summary row HERE, in the cart display only: the first few values quoted,
	// the rest counted, the whole charge on the one row. The order line keeps
	// every row untouched, because the packing bench works from those.
	// Bucket by field key to decide what folds, but WALK THE SNAPSHOTS IN THE
	// ORDER THEY WERE FILLED IN. Emitting bucket by bucket instead reordered
	// the whole list into field-major, so a tankard with two engravings read
	// "Engraving 1: Words, Engraving 2: Words, Engraving 1: Font, ..." and
	// whoever engraves it reads across the blocks rather than down one. Money
	// was never wrong; the instruction was. A folded bucket takes the place of
	// its FIRST member and its later members are skipped, so folding still
	// collapses a wall of rows without shuffling everything around it.
	$bb_fsnaps = (array) ( $cart_item[ ADDON_BOSS_PRODUCT_FIELDS_KEY ] ?? array() );

	// The order is decided once, at CAPTURE, and must not be second-guessed
	// here. A repeatable group reorders its own members into block order as
	// they are resolved (the addon_boss_field_resolved_rows seam), and it does
	// that IN PLACE: each group is sorted where the merchant put it and every
	// other field keeps its own position.
	//
	// This used to re-sort the whole list by instance number instead. It got
	// the blocks right and everything else wrong, because a field outside a
	// group carries no instance number, so it read as instance zero and was
	// lifted above block one. A merchant who put "Delivery note" last saw it
	// printed first. Reading the stored order is both simpler and correct.
	$bb_buckets = array();
	foreach ( $bb_fsnaps as $bb_fi => $fsnap ) {
		$bb_buckets[ (string) ( $fsnap['key'] ?? $bb_fi ) ][] = $fsnap;
	}
	$bb_folded = array();
	foreach ( $bb_fsnaps as $bb_fi => $bb_snap ) {
		if ( ! empty( $bb_snap['admin_only'] ) ) {
			continue; // the merchant talking to their own order screen, not a cart row.
		}
		$bb_key   = (string) ( $bb_snap['key'] ?? $bb_fi );
		$bb_bunch = $bb_buckets[ $bb_key ] ?? array( $bb_snap );
		$bb_fold  = count( $bb_bunch ) > 8 && ! empty( $bb_bunch[0]['spread'] );
		if ( $bb_fold ) {
			if ( isset( $bb_folded[ $bb_key ] ) ) {
				continue; // this bucket already printed its summary row
			}
			$bb_folded[ $bb_key ] = true;
		} else {
			$bb_bunch = array( $bb_snap ); // one row for this one snapshot
		}
		if ( $bb_fold ) {
			$bb_names = array();
			$bb_sum   = 0.0;
			foreach ( $bb_bunch as $fsnap ) {
				$bb_d = trim( (string) ( $fsnap['display'] ?? '' ) );
				if ( '' !== $bb_d ) {
					$bb_names[] = $bb_d;
				}
				$bb_sum += (float) ( $fsnap['fee'] ?? 0 );
			}
			// "Shirt × 12": the instance word (the label with its number taken
			// back off) and how many the row holds.
			$bb_word  = trim( (string) preg_replace( '/\s*[\d,.\x{00a0}]+$/u', '', (string) ( $bb_bunch[0]['label'] ?? '' ) ) );
			$bb_word  = '' !== $bb_word ? $bb_word : __( 'Detail', 'addon-boss' );
			$bb_shown = array_slice( $bb_names, 0, 3 );
			$bb_rest  = count( $bb_bunch ) - count( $bb_shown );
			$bb_syn   = $bb_bunch[0];
			$bb_syn['fee'] = $bb_sum;
			$data[] = array(
				/* translators: 1: what each one is called, e.g. "Shirt", 2: how many of them. */
				'name'  => sprintf( __( '%1$s × %2$s', 'addon-boss' ), $bb_word, number_format_i18n( count( $bb_bunch ) ) ),
				'value' => esc_html( implode( ', ', $bb_shown ) )
					/* translators: %s: how many further entries the row is not listing. */
					. ( $bb_rest > 0 ? ' ' . esc_html( sprintf( __( 'and %s more', 'addon-boss' ), number_format_i18n( $bb_rest ) ) ) : '' )
					. addon_boss_standalone_field_charge_suffix( $bb_syn, $product, 'cart' ),
			);
			continue;
		}
		foreach ( $bb_bunch as $fsnap ) {
			$disp = trim( (string) ( $fsnap['display'] ?? '' ) );
			if ( '' === $disp ) {
				continue;
			}
			$val = ! empty( $fsnap['url'] )
				? '<a href="' . esc_url( $fsnap['url'] ) . '" target="_blank" rel="noopener">' . esc_html( $disp ) . '</a>'
				: esc_html( $disp );
			$bb_tail = esc_html( addon_boss_standalone_field_style_suffix( $fsnap ) ) . addon_boss_standalone_field_charge_suffix( $fsnap, $product, 'cart' );
			$bb_row  = array(
				'name'  => '' !== (string) ( $fsnap['label'] ?? '' ) ? (string) $fsnap['label'] : __( 'Detail', 'addon-boss' ),
				'value' => $val . $bb_tail,
			);
			// A type may carry a shorter cart-only form (a date reads
			// "Mon 8 Sep 2026" here and the store's full format everywhere
			// else); both carts prefer a row's display over its value.
			if ( '' !== (string) ( $fsnap['display_cart'] ?? '' ) ) {
				$bb_row['display'] = esc_html( (string) $fsnap['display_cart'] ) . $bb_tail;
			}
			$data[] = $bb_row;
		}
	}

	if ( empty( $cart_item[ ADDON_BOSS_STANDALONE_OPTIONS_KEY ] ) ) {
		return addon_boss_cart_rows_keyed( $data );
	}
	foreach ( (array) $cart_item[ ADDON_BOSS_STANDALONE_OPTIONS_KEY ] as $snap ) {
		$label = (string) ( $snap['label'] ?? '' );
		if ( '' === $label ) {
			continue;
		}
		$data[] = array(
			'name'  => '' !== (string) ( $snap['set_name'] ?? '' ) ? (string) $snap['set_name'] : __( 'Option', 'addon-boss' ),
			'value' => $label . addon_boss_standalone_charge_suffix( $snap, $product, 'cart' ),
		);
		// A priced grid's named adjustments each read as their own row, so
		// "Second colour +10% (5.80)" is auditable at every hop rather than
		// vanishing into one grown figure. The module that computed them owns
		// the wording; without it the stored lines simply do not print.
		if ( ! empty( $snap['adj_lines'] ) && function_exists( 'addon_boss_table_adj_line_text' ) ) {
			foreach ( (array) $snap['adj_lines'] as $bb_adj ) {
				$data[] = array(
					'name'  => (string) ( $bb_adj['name'] ?? '' ),
					'value' => addon_boss_table_adj_line_text( (array) $bb_adj, $product, 'cart' ),
				);
			}
		}
	}
	return addon_boss_cart_rows_keyed( $data );
}

add_action( 'woocommerce_checkout_create_order_line_item', 'addon_boss_standalone_order_line_meta', 10, 3 );

function addon_boss_standalone_order_line_meta( $item, $cart_item_key, $values ): void {
	if ( ! empty( $values['bundle_boss'] ) ) {
		return;
	}
	// The upload persists onto the order line and its file is marked kept,
	// so the orphan cleanup never eats an ordered file.
	$up = $values[ ADDON_BOSS_STANDALONE_UPLOAD_KEY ] ?? null;
	if ( is_array( $up ) && '' !== (string) ( $up['ref'] ?? '' ) ) {
		$item->add_meta_data( ADDON_BOSS_STANDALONE_UPLOAD_META, $up, true );
		$item->add_meta_data(
			'' !== (string) ( $up['label'] ?? '' ) ? (string) $up['label'] : __( 'Your file', 'addon-boss' ),
			(string) ( $up['name'] ?? '' )
		);
		if ( function_exists( 'addon_boss_personalisation_keep_upload' ) ) {
			addon_boss_personalisation_keep_upload( (string) $up['ref'] );
		}
	}
	// Product fields: the structured copy (the reorder source of truth) plus a
	// readable row per filled field. Persisted even when the line carries no
	// option sets, so a fields-only product reorders and reads on the order
	// screen and in emails.
	$fsnaps = $values[ ADDON_BOSS_PRODUCT_FIELDS_KEY ] ?? array();
	if ( ! empty( $fsnaps ) && is_array( $fsnaps ) ) {
		$item->add_meta_data( ADDON_BOSS_PRODUCT_FIELDS_META, array_values( $fsnaps ), true );
		$fvid     = (int) ( $values['variation_id'] ?? 0 );
		$fproduct = wc_get_product( $fvid ? $fvid : (int) ( $values['product_id'] ?? 0 ) );
		foreach ( $fsnaps as $fsnap ) {
			$flabel = (string) ( $fsnap['label'] ?? '' );
			$fdisp  = (string) ( $fsnap['display'] ?? '' );
			if ( '' === $flabel || '' === $fdisp ) {
				continue;
			}
			if ( ! empty( $fsnap['admin_only'] ) ) {
				// The structured copy above already carries it; a readable row would
				// print it on the customer's order page and in their emails, which
				// is exactly what a hidden field promises never to do. The admin
				// order screen prints these from the structured copy instead.
				continue;
			}
			$item->add_meta_data(
				$flabel,
				$fdisp . addon_boss_standalone_field_style_suffix( $fsnap ) . addon_boss_standalone_suffix_text( addon_boss_standalone_field_charge_suffix( $fsnap, $fproduct, 'cart' ) )
			);
		}
	}
	$snaps = $values[ ADDON_BOSS_STANDALONE_OPTIONS_KEY ] ?? array();
	if ( empty( $snaps ) || ! is_array( $snaps ) ) {
		return;
	}
	// The structured copy is the reorder source of truth; the readable rows
	// mirror the cart lines for the order screen and emails.
	$item->add_meta_data( '_bundle_boss_standalone_options', array_values( $snaps ), true );
	$vid     = (int) ( $values['variation_id'] ?? 0 );
	$product = wc_get_product( $vid ? $vid : (int) ( $values['product_id'] ?? 0 ) );
	foreach ( $snaps as $snap ) {
		$label = (string) ( $snap['label'] ?? '' );
		if ( '' === $label ) {
			continue;
		}
		$item->add_meta_data(
			'' !== (string) ( $snap['set_name'] ?? '' ) ? (string) $snap['set_name'] : __( 'Option', 'addon-boss' ),
			$label . addon_boss_standalone_suffix_text( addon_boss_standalone_charge_suffix( $snap, $product, 'cart' ) )
		);
		// The named adjustments reach the order line by name too: the packing
		// bench and the printer read "Second colour: +10% (5.80)" exactly as
		// the shopper did in the cart.
		if ( ! empty( $snap['adj_lines'] ) && function_exists( 'addon_boss_table_adj_line_text' ) ) {
			foreach ( (array) $snap['adj_lines'] as $bb_adj ) {
				$item->add_meta_data(
					(string) ( $bb_adj['name'] ?? '' ),
					addon_boss_table_adj_line_text( (array) $bb_adj, $product, 'cart' )
				);
			}
		}
	}
}

// ---- Admin order screen extras ---------------------------------
//
// Two things only the merchant sees. A hidden field's row (kept off every
// customer surface above) prints here, because the order screen is who it was
// written for. A colour field's row gains a painted chip beside its words,
// because "#9b111e" is a code and a red square is a colour.

add_action( 'woocommerce_after_order_itemmeta', 'addon_boss_field_admin_order_extras', 15, 2 );

function addon_boss_field_admin_order_extras( $item_id, $item ): void {
	if ( ! is_admin() || ! $item instanceof WC_Order_Item_Product ) {
		return;
	}
	$fsnaps = $item->get_meta( ADDON_BOSS_PRODUCT_FIELDS_META, true );
	if ( ! is_array( $fsnaps ) || ! $fsnaps ) {
		return;
	}
	$bb_rows = array();
	foreach ( $fsnaps as $fsnap ) {
		if ( ! is_array( $fsnap ) ) {
			continue;
		}
		if ( ! empty( $fsnap['admin_only'] ) && '' !== (string) ( $fsnap['display'] ?? '' ) ) {
			$bb_rows[] = '<span class="bb-admin-hiddenrow" style="display:block;font-size:12px;color:#646970;">'
				. esc_html( (string) ( $fsnap['label'] ?? '' ) ) . ': '
				. esc_html( (string) $fsnap['display'] )
				. ' <em>' . esc_html__( '(not shown to the customer)', 'addon-boss' ) . '</em></span>';
			continue;
		}
		if ( '' !== (string) ( $fsnap['hex'] ?? '' ) ) {
			$bb_rows[] = '<span class="bb-admin-colourrow" style="display:inline-flex;align-items:center;gap:5px;font-size:12px;color:#646970;margin-right:10px;">'
				. '<span style="width:12px;height:12px;border-radius:3px;border:1px solid #dcdce4;background:' . esc_attr( (string) $fsnap['hex'] ) . ';display:inline-block;"></span>'
				. esc_html( (string) ( $fsnap['label'] ?? '' ) ) . ': ' . esc_html( (string) ( $fsnap['display'] ?? '' ) )
				. '</span>';
		}
	}
	if ( $bb_rows ) {
		echo '<div class="bb-admin-field-extras" style="margin-top:4px;">' . wp_kses_post( implode( '', $bb_rows ) ) . '</div>';
	}
}

// =================================================================
// The cart edit loop: a configured line offers "Edit options", the product
// page comes back with every choice prefilled, and saving REPLACES the line.
//
// The prefill IS the failed-add machinery: the render already restores
// whatever the request carries (bb_pf values, set picks, style picks, upload
// references), so the edit only has to write the line's snapshots back into
// $_REQUEST and the page draws itself filled in. Each option-set kind can
// register a 'seed' callback that turns its snapshot back into its own
// request fields, and a field type can do the same for its posted shape; the
// engine's own kinds and types need neither.
//
// The replace is atomic on WooCommerce's own terms: the update is an
// ordinary add-to-cart, validated by the same gates as any add, and only
// AFTER it succeeds is the original line removed (and the new line stood in
// its place). A refused update therefore leaves the original exactly as it
// was, with the reason on screen. Identical picks hash to the identical cart
// id, so an edit that changes nothing merges back into the very line being
// edited and only the quantity is pinned to what was posted.
//
// Free in every build. A line inside a bundle is not offered the link (the
// bundle's own edit flow owns it), and BundleBoss can join through the same
// filters when it does.
// =================================================================

/**
 * Does this cart line carry anything this engine configured onto it?
 *
 * The edit link is contextual: a plain line offers nothing to edit. A bundle
 * line stands down here however much it carries, because the bundle's own
 * edit flow owns it. Filterable so another plugin (BundleBoss) can claim its
 * own lines into, or out of, the loop.
 *
 * @param array $item One cart line.
 * @return bool
 */
function addon_boss_cart_line_carries_options( array $item ): bool {
	$carries = false;
	if ( empty( $item['bundle_boss'] ) ) {
		$carries = ! empty( $item[ ADDON_BOSS_STANDALONE_OPTIONS_KEY ] )
			|| ! empty( $item[ ADDON_BOSS_PRODUCT_FIELDS_KEY ] )
			|| ! empty( $item[ ADDON_BOSS_STANDALONE_UPLOAD_KEY ] )
			|| ( defined( 'ADDON_BOSS_POSITIONS_KEY' ) && ! empty( $item[ ADDON_BOSS_POSITIONS_KEY ] ) );
	}
	return (bool) apply_filters( 'addon_boss_cart_line_carries_options', $carries, $item );
}

/**
 * The cart line being edited in THIS request, or null.
 *
 * Two spellings mean the same line: bb_edit rides the link from the cart, and
 * bb_edit_line rides the form's own hidden field, so a refused update
 * re-renders still wearing its edit state. The key is only ever trusted after
 * it resolves to a real line in this visitor's own cart (the cart is bound to
 * their session, so a key from anywhere else resolves to nothing).
 *
 * @return array{key:string,item:array}|null
 */
function addon_boss_edit_line_state(): ?array {
	$key = '';
	foreach ( array( 'bb_edit', 'bb_edit_line' ) as $bb_param ) {
		// Read ONCE, through the boundary, and judged afterwards. Testing the
		// raw value and sanitising it on the next line reads the input twice
		// and leaves the comparison looking at bytes nothing has cleaned.
		// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only lookup; the key must resolve inside this visitor's own session cart to mean anything.
		$bb_asked = isset( $_REQUEST[ $bb_param ] ) ? sanitize_text_field( wp_unslash( (string) $_REQUEST[ $bb_param ] ) ) : '';
		if ( '' !== $bb_asked ) {
			$key = $bb_asked;
			break;
		}
	}
	if ( '' === $key || ! function_exists( 'WC' ) || null === WC()->cart ) {
		return null;
	}
	$item = WC()->cart->get_cart_item( $key );
	if ( ! $item || ! is_array( $item ) || ! addon_boss_cart_line_carries_options( $item ) ) {
		return null;
	}
	return array( 'key' => $key, 'item' => $item );
}

/**
 * The edit state ONLY when this product page is the edited line's own
 * product, which is what the chrome (banner, hidden field, button wording,
 * quantity) keys off. A stray bb_edit for some other product changes nothing.
 *
 * @param WC_Product|null $product The product being rendered, when the caller has it.
 * @return array{key:string,item:array}|null
 */
function addon_boss_edit_page_state( $product = null ): ?array {
	$state = addon_boss_edit_line_state();
	if ( ! $state ) {
		return null;
	}
	$line_pid = (int) ( $state['item']['product_id'] ?? 0 );
	$page_pid = 0;
	if ( $product instanceof WC_Product ) {
		$page_pid = $product->get_id();
	} elseif ( isset( $GLOBALS['product'] ) && $GLOBALS['product'] instanceof WC_Product ) {
		$page_pid = $GLOBALS['product']->get_id();
	} elseif ( function_exists( 'is_product' ) && is_product() ) {
		$page_pid = (int) get_queried_object_id();
	}
	return $line_pid === $page_pid ? $state : null;
}

/**
 * The URL that opens a line for editing: the product's own page, the chosen
 * variation carried as WooCommerce's native attribute parameters (its form
 * preselects from them), and the line named by its cart item key.
 */
function addon_boss_edit_line_url( array $item, string $key ): string {
	$product = wc_get_product( (int) ( $item['product_id'] ?? 0 ) );
	if ( ! $product || ! $product->is_purchasable() ) {
		return '';
	}
	$args = array();
	foreach ( (array) ( $item['variation'] ?? array() ) as $bb_attr => $bb_val ) {
		if ( '' !== (string) $bb_val ) {
			$args[ (string) $bb_attr ] = (string) $bb_val;
		}
	}
	$args['bb_edit'] = $key;
	return add_query_arg( urlencode_deep( $args ), $product->get_permalink() );
}

add_filter( 'woocommerce_cart_item_name', 'addon_boss_edit_cart_link', 20, 3 );

/**
 * The "Edit options" link under a configured line's name, on the cart page
 * and in the classic mini cart (both print their names through this same
 * filter). Contextual: only a line that actually carries options offers it.
 * The checkout review table is for checking, not editing, so it stays clean.
 * A grid product's lines are made by the grid and edited through the grid.
 */
function addon_boss_edit_cart_link( $name, $cart_item = null, $cart_item_key = '' ) {
	if ( ! is_array( $cart_item ) || '' === (string) $cart_item_key ) {
		return $name;
	}
	if ( function_exists( 'is_checkout' ) && is_checkout() ) {
		return $name;
	}
	if ( ! addon_boss_cart_line_carries_options( $cart_item ) ) {
		return $name;
	}
	$bb_parent = wc_get_product( (int) ( $cart_item['product_id'] ?? 0 ) );
	if ( ! $bb_parent || addon_boss_product_uses_grid( $bb_parent ) ) {
		return $name;
	}
	$url = addon_boss_edit_line_url( $cart_item, (string) $cart_item_key );
	if ( '' === $url ) {
		return $name;
	}
	$link = '<a class="bb-edit-line" href="' . esc_url( $url ) . '">' . esc_html__( 'Edit options', 'addon-boss' ) . '</a>';
	/**
	 * The rendered edit link, for another plugin to reword, restyle or veto
	 * (return '' to offer nothing for this line).
	 *
	 * @param string $link          The anchor markup.
	 * @param array  $cart_item     The cart line.
	 * @param string $cart_item_key Its key.
	 * @param string $url           The edit URL.
	 */
	$link = (string) apply_filters( 'addon_boss_edit_line_link', $link, $cart_item, (string) $cart_item_key, $url );
	if ( '' === $link ) {
		return $name;
	}
	static $bb_css = false;
	if ( ! $bb_css ) {
		$bb_css = true;
		addon_boss_inline_css( '.bb-edit-line{display:block;width:max-content;margin-top:2px;font-size:.85em;font-weight:600;text-decoration:underline;text-underline-offset:2px;opacity:.85;}.bb-edit-line:hover{opacity:1;}' );
	}
	return $name . ' ' . $link;
}

/**
 * Write one line's frozen choices back into $_REQUEST, exactly where the
 * failed-add prefill machinery reads them, so the product page renders
 * already filled in: set picks, field values (each repeat instance under its
 * own index), a size field's two dimensions, upload references (the render
 * turns them back into their chips), style picks, chosen positions.
 *
 * Values are wp_slash()ed on the way in because everything that reads the
 * request unslashes, exactly as it would a browser's own post.
 *
 * @param array $item The cart line.
 */
function addon_boss_edit_seed_request( array $item ): void {
	$product = wc_get_product( (int) ( $item['product_id'] ?? 0 ) );
	if ( ! $product ) {
		return;
	}

	// A crafted scalar where an array belongs (?bb_pf=x on the edit URL) must
	// not fatal the array writes below; the seed owns these keys on an edit
	// arrival, so a scalar imposter is simply cleared.
	foreach ( array( 'bb_pf', 'bb_pf_style', 'bb_pos' ) as $bb_arr_key ) {
		if ( isset( $_REQUEST[ $bb_arr_key ] ) && ! is_array( $_REQUEST[ $bb_arr_key ] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- shape guard only.
			unset( $_REQUEST[ $bb_arr_key ] );
		}
	}

	// The chosen variation, in WooCommerce's own attribute parameters; its
	// form preselects from the request natively.
	foreach ( (array) ( $item['variation'] ?? array() ) as $bb_attr => $bb_val ) {
		if ( '' !== (string) $bb_val ) {
			$_REQUEST[ (string) $bb_attr ] = wp_slash( (string) $bb_val );
		}
	}

	// Option sets: each snapshot back through its kind. The engine's own
	// 'choices' kind is one field carrying the option's key; a several-of
	// set carries EVERY pick, so its snapshots accumulate into the array its
	// multi control posts rather than overwriting to the last one standing.
	// A kind priced off its own panel (a measured set, a price table)
	// answers through the 'seed' callback its module registered, and a kind
	// with neither seeds nothing rather than guessing.
	$bb_sets_by_id = array();
	foreach ( addon_boss_standalone_option_sets( $product ) as $bb_set ) {
		$bb_sets_by_id[ (string) $bb_set['id'] ] = $bb_set;
	}
	$bb_kinds      = addon_boss_option_set_kinds();
	$bb_multi_seed = array(); // field name => every picked key, in snapshot order.
	foreach ( (array) ( $item[ ADDON_BOSS_STANDALONE_OPTIONS_KEY ] ?? array() ) as $bb_snap ) {
		if ( ! is_array( $bb_snap ) ) {
			continue;
		}
		$bb_set = $bb_sets_by_id[ (string) ( $bb_snap['set'] ?? '' ) ] ?? null;
		if ( ! $bb_set ) {
			continue; // the set has since left the product: nothing to prefill it into.
		}
		$bb_kind = (string) ( $bb_set['kind'] ?? 'choices' );
		$bb_cb   = $bb_kinds[ $bb_kind ]['seed'] ?? null;
		if ( is_callable( $bb_cb ) ) {
			$bb_fields = (array) call_user_func( $bb_cb, $bb_set, $bb_snap );
		} elseif ( 'choices' === $bb_kind ) {
			if ( ! empty( $bb_set['multi'] ) ) {
				$bb_multi_seed[ addon_boss_standalone_field_name( (string) $bb_set['id'] ) ][] = (string) ( $bb_snap['key'] ?? '' );
				continue;
			}
			$bb_fields = array( addon_boss_standalone_field_name( (string) $bb_set['id'] ) => (string) ( $bb_snap['key'] ?? '' ) );
		} else {
			$bb_fields = array();
		}
		foreach ( $bb_fields as $bb_k => $bb_v ) {
			$_REQUEST[ (string) $bb_k ] = wp_slash( (string) $bb_v );
		}
	}
	foreach ( $bb_multi_seed as $bb_k => $bb_keys ) {
		$_REQUEST[ (string) $bb_k ] = wp_slash( array_values( $bb_keys ) );
	}

	// Product fields: snapshots regrouped by field, a repeatable field's
	// instances back into the list shape it posts (bb_pf[key][0], [1], ...),
	// everything else back to its scalar. A type whose posted shape is not
	// its stored value (a measured size stores "3x2" and posts w and h)
	// answers through the 'seed' callback its module registered against the
	// type. A frozen style pick (typeface, colour) rides back under
	// bb_pf_style, where the picker's own prefill reads.
	$bb_defs_by_key = array();
	foreach ( addon_boss_standalone_product_fields( $product ) as $bb_def ) {
		$bb_defs_by_key[ (string) ( $bb_def['key'] ?? '' ) ] = $bb_def;
	}
	$bb_types  = addon_boss_personalisation_field_types();
	$bb_groups = array();
	foreach ( (array) ( $item[ ADDON_BOSS_PRODUCT_FIELDS_KEY ] ?? array() ) as $bb_fsnap ) {
		if ( is_array( $bb_fsnap ) && '' !== (string) ( $bb_fsnap['key'] ?? '' ) ) {
			$bb_groups[ (string) $bb_fsnap['key'] ][] = $bb_fsnap;
		}
	}
	foreach ( $bb_groups as $bb_fkey => $bb_snaps ) {
		$bb_def = $bb_defs_by_key[ $bb_fkey ] ?? null;
		if ( ! $bb_def ) {
			continue; // the field has since left the product.
		}
		$bb_seed_cb = $bb_types[ (string) ( $bb_def['type'] ?? 'text' ) ]['seed'] ?? null;
		$bb_repeat  = false;
		$bb_vals    = array();
		foreach ( $bb_snaps as $bb_fsnap ) {
			$bb_inst = (int) ( $bb_fsnap['instance'] ?? 0 );
			if ( $bb_inst > 0 ) {
				$bb_repeat = true;
			}
			// SLOT-TRUE: an instance's value seeds back into its own numbered
			// slot, never packed down into a hole a skipped instance left. In a
			// repeatable GROUP the members share the block numbering, so a font
			// picked only on block two must land under [1] for both the render
			// and the resolver to reunite it with block two's other fields.
			$bb_vals[ max( 0, $bb_inst - 1 ) ] = is_callable( $bb_seed_cb )
				? call_user_func( $bb_seed_cb, $bb_def, $bb_fsnap )
				: (string) ( $bb_fsnap['value'] ?? '' );
			if ( isset( $bb_fsnap['font'] ) || isset( $bb_fsnap['colour'] ) ) {
				$_REQUEST['bb_pf_style'][ $bb_fkey ] = wp_slash(
					array(
						'font'   => (string) ( $bb_fsnap['font'] ?? '' ),
						'colour' => (string) ( $bb_fsnap['colour'] ?? '' ),
					)
				);
			}
		}
		if ( $bb_repeat ) {
			// Fill the gaps with the empty string a blank input would have
			// posted, so the list is contiguous and every renderer's positional
			// read stays true to the blocks the shopper actually had.
			$bb_top = max( array_keys( $bb_vals ) );
			for ( $bb_s = 0; $bb_s <= $bb_top; $bb_s++ ) {
				if ( ! isset( $bb_vals[ $bb_s ] ) ) {
					$bb_vals[ $bb_s ] = '';
				}
			}
			ksort( $bb_vals );
		}
		$_REQUEST['bb_pf'][ $bb_fkey ] = wp_slash( $bb_repeat ? array_values( $bb_vals ) : reset( $bb_vals ) );
	}

	// The product-level upload box, by its stored reference.
	$bb_up = $item[ ADDON_BOSS_STANDALONE_UPLOAD_KEY ] ?? null;
	if ( is_array( $bb_up ) && '' !== (string) ( $bb_up['ref'] ?? '' ) ) {
		$_REQUEST['bb_standalone_upload_ref'] = wp_slash( (string) $bb_up['ref'] );
	}

	// Chosen positions, back into the bb_pos shape their panels post.
	if ( defined( 'ADDON_BOSS_POSITIONS_KEY' ) ) {
		foreach ( (array) ( $item[ ADDON_BOSS_POSITIONS_KEY ] ?? array() ) as $bb_psnap ) {
			if ( ! is_array( $bb_psnap ) ) {
				continue;
			}
			$bb_pkey = (string) ( $bb_psnap['set'] ?? '' ) . ':' . (string) ( $bb_psnap['id'] ?? '' );
			if ( ':' === $bb_pkey ) {
				continue;
			}
			$_REQUEST['bb_pos'][ $bb_pkey ] = wp_slash(
				array(
					'text'   => (string) ( $bb_psnap['text'] ?? '' ),
					'file'   => (string) ( $bb_psnap['file'] ?? '' ),
					'method' => (string) ( $bb_psnap['method'] ?? '' ),
					'help'   => ! empty( $bb_psnap['help'] ) ? '1' : '',
				)
			);
		}
	}

	/**
	 * Whatever else a module or another plugin froze onto this line, seeded
	 * back the same way. BundleBoss joins the loop here.
	 *
	 * @param array $item The cart line being edited.
	 */
	do_action( 'addon_boss_edit_seed', $item );
}

add_action( 'template_redirect', 'addon_boss_edit_prefill_boot' );

/**
 * Arriving on a product page from an edit link: seed the request from the
 * line so the page renders prefilled. Only on a plain arrival; a posted form
 * (a refused update re-rendering) carries the shopper's own values, and
 * overwriting those with the line's stored ones would throw away exactly the
 * typing the failed-add machinery exists to keep.
 */
function addon_boss_edit_prefill_boot(): void {
	if ( ! function_exists( 'is_product' ) || ! is_product() ) {
		return;
	}
	$bb_method = isset( $_SERVER['REQUEST_METHOD'] ) ? strtoupper( sanitize_text_field( wp_unslash( (string) $_SERVER['REQUEST_METHOD'] ) ) ) : 'GET';
	// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- presence check only: a posted form keeps its own values.
	if ( 'POST' === $bb_method || isset( $_REQUEST['add-to-cart'] ) ) {
		return;
	}
	if ( ! isset( $_REQUEST['bb_edit'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- presence check only.
		return;
	}
	$state = addon_boss_edit_page_state();
	if ( ! $state ) {
		// The link outlived the line (bought, removed, or another tab got
		// there first). Say so kindly and render the page fresh.
		if ( function_exists( 'wc_add_notice' ) ) {
			wc_add_notice( __( 'That item is not in your cart any more, so this page starts fresh.', 'addon-boss' ), 'notice' );
		}
		return;
	}
	addon_boss_edit_seed_request( $state['item'] );
}

add_action( 'woocommerce_before_add_to_cart_form', 'addon_boss_edit_banner' );

/**
 * The banner above the form, so the page says plainly that this is an edit:
 * what is being changed, that nothing happens until it is saved, and the way
 * back out. role="status" so assistive tech announces the mode.
 */
function addon_boss_edit_banner(): void {
	$state = addon_boss_edit_page_state();
	if ( ! $state ) {
		return;
	}
	addon_boss_inline_css(
		'.bb-edit-banner{display:flex;flex-wrap:wrap;align-items:baseline;gap:6px 14px;margin:0 0 18px;padding:12px 16px;border-radius:10px;border:1.5px solid color-mix(in srgb,var(--aob-accent,#fd4730) 35%,transparent);background:color-mix(in srgb,var(--aob-accent,#fd4730) 6%,var(--aob-surface,#fff));}'
		. '.bb-edit-banner strong{font-weight:700;}'
		. '.bb-edit-banner .bb-edit-cancel{margin-left:auto;font-weight:600;text-decoration:underline;text-underline-offset:2px;white-space:nowrap;}'
	);
	echo '<div class="bb-edit-banner" role="status">';
	echo '<strong>' . esc_html__( 'You are changing an item from your cart.', 'addon-boss' ) . '</strong> ';
	echo '<span>' . esc_html__( 'Your choices are filled in below. Nothing changes until you save.', 'addon-boss' ) . '</span>';
	echo '<a class="bb-edit-cancel" href="' . esc_url( wc_get_cart_url() ) . '">' . esc_html__( 'Back to the cart without saving', 'addon-boss' ) . '</a>';
	echo '</div>';
}

add_action( 'woocommerce_before_add_to_cart_button', 'addon_boss_edit_hidden_field', 5 );

/**
 * The hidden field naming the line this form replaces. Inside the native
 * add-to-cart form, so it rides the update post however the theme submits.
 */
function addon_boss_edit_hidden_field(): void {
	$state = addon_boss_edit_page_state();
	if ( ! $state ) {
		return;
	}
	echo '<input type="hidden" name="bb_edit_line" value="' . esc_attr( $state['key'] ) . '">';
}

add_filter( 'woocommerce_product_single_add_to_cart_text', 'addon_boss_edit_button_text', 20, 2 );

/**
 * The button says what it will do: update, not add. The platform's own verb
 * (the cart page's own button is "Update cart"), so the shopper meets one
 * vocabulary. The live total beside it already shows the recalculated price.
 */
function addon_boss_edit_button_text( $text, $product = null ) {
	return addon_boss_edit_page_state( $product instanceof WC_Product ? $product : null )
		? __( 'Update cart', 'addon-boss' )
		: $text;
}

add_filter( 'woocommerce_quantity_input_args', 'addon_boss_edit_quantity_prefill', 10, 2 );

/**
 * The quantity box starts at the line's own quantity, so saving untouched
 * keeps it. A posted quantity (a refused update re-rendering) wins, exactly
 * as it does for every other field.
 */
function addon_boss_edit_quantity_prefill( $args, $product = null ) {
	if ( isset( $_POST['quantity'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Missing -- presence check only: the template already honours a posted quantity.
		return $args;
	}
	$state = addon_boss_edit_page_state( $product instanceof WC_Product ? $product : null );
	if ( $state && is_array( $args ) ) {
		$args['input_value'] = max( 1, (int) ( $state['item']['quantity'] ?? 1 ) );
	}
	return $args;
}

add_filter( 'woocommerce_add_to_cart_sold_individually_found_in_cart', 'addon_boss_edit_sold_individually', 10, 5 );

/**
 * A sold-individually product refuses a second identical line, but the line
 * being EDITED is not "another one": the update replaces it. Only that exact
 * line is excused; everything else keeps WooCommerce's answer.
 */
function addon_boss_edit_sold_individually( $found, $product_id = 0, $variation_id = 0, $cart_item_data = array(), $cart_id = '' ) {
	if ( ! $found || ! isset( $_REQUEST['bb_edit_line'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- presence check; the key still has to resolve to this visitor's own line below.
		return $found;
	}
	$edit_key = sanitize_text_field( wp_unslash( (string) $_REQUEST['bb_edit_line'] ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended
	if ( '' === $edit_key || null === WC()->cart ) {
		return $found;
	}
	return WC()->cart->find_product_in_cart( (string) $cart_id ) === $edit_key ? false : $found;
}

/**
 * Whether THIS request replaced a line (and which product), for the redirect
 * and the message. A request-scoped latch, set only by the replace below.
 *
 * @param bool|null $set Pass true to latch; null to read.
 * @return bool
 */
function addon_boss_edit_replaced( ?bool $set = null ): bool {
	static $bb_replaced = false;
	if ( null !== $set ) {
		$bb_replaced = $set;
	}
	return $bb_replaced;
}

add_action( 'woocommerce_add_to_cart', 'addon_boss_edit_apply_replace', 20, 6 );

/**
 * The atomic half of the update: runs only AFTER WooCommerce accepted the
 * add, so a refused update never reaches here and the original line stands
 * untouched with the reason on screen.
 *
 * Three shapes, one outcome each:
 * - Identical picks merged back into the edited line itself (same cart id):
 *   the posted quantity is the whole answer, so it is pinned rather than
 *   summed, and the line is byte-identical to before.
 * - New picks made a new line: the original is removed and the new line
 *   stands exactly where it stood, so the cart reads as updated in place.
 *   Nothing is left in the removed pile, so there is no ghost to restore.
 * - New picks merged into ANOTHER existing identical line: the original is
 *   removed and the merge stands, which is how WooCommerce has always
 *   folded identical lines together.
 */
function addon_boss_edit_apply_replace( $cart_item_key, $product_id = 0, $quantity = 1, $variation_id = 0, $variation = array(), $cart_item_data = array() ): void {
	if ( ! isset( $_REQUEST['bb_edit_line'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- the key must resolve to a line of the same product in this visitor's own cart below.
		return;
	}
	$edit_key = sanitize_text_field( wp_unslash( (string) $_REQUEST['bb_edit_line'] ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended
	$cart     = function_exists( 'WC' ) ? WC()->cart : null;
	if ( '' === $edit_key || ! $cart ) {
		return;
	}
	$old = $cart->get_cart_item( $edit_key );
	if ( ! $old || ! is_array( $old ) ) {
		return; // the link outlived the line: this was an ordinary add.
	}
	// Only a line of the same product can be replaced by this form. A stale
	// or crossed-up marker must never eat an unrelated line.
	if ( (int) ( $old['product_id'] ?? 0 ) !== (int) $product_id ) {
		return;
	}

	if ( $edit_key === (string) $cart_item_key ) {
		// Nothing about the picks changed, so WooCommerce merged the update
		// into the very line being edited (its quantity plus the posted one).
		// The posted quantity is the whole answer.
		$cart->set_quantity( $cart_item_key, max( 1, (int) $quantity ) );
		addon_boss_edit_replaced( true );
		return;
	}

	$bb_keys = array_keys( $cart->cart_contents );
	$bb_pos  = array_search( $edit_key, $bb_keys, true );
	$cart->remove_cart_item( $edit_key );
	// Atomic replace: nothing waits in the removed pile to be restored.
	unset( $cart->removed_cart_contents[ $edit_key ] );

	// A fresh line lands at the end of the cart; stand it where the original
	// stood so the cart reads as updated in place. A merge into another
	// existing line keeps that line's own place.
	$bb_contents = $cart->cart_contents;
	if ( false !== $bb_pos && array_key_last( $bb_contents ) === (string) $cart_item_key && isset( $bb_contents[ $cart_item_key ] ) ) {
		$bb_new = $bb_contents[ $cart_item_key ];
		unset( $bb_contents[ $cart_item_key ] );
		$cart->cart_contents = array_slice( $bb_contents, 0, (int) $bb_pos, true )
			+ array( (string) $cart_item_key => $bb_new )
			+ array_slice( $bb_contents, (int) $bb_pos, null, true );
	}
	addon_boss_edit_replaced( true );
}

add_filter( 'woocommerce_add_to_cart_redirect', 'addon_boss_edit_redirect_to_cart', 20 );

/**
 * A saved update goes back to the cart, where the shopper came from and
 * where the changed line is. An ordinary add keeps whatever the store does.
 */
function addon_boss_edit_redirect_to_cart( $url ) {
	return addon_boss_edit_replaced() ? wc_get_cart_url() : $url;
}

add_filter( 'wc_add_to_cart_message_html', 'addon_boss_edit_update_message', 10, 2 );

/**
 * The message says what happened: updated, not added.
 */
function addon_boss_edit_update_message( $message, $products = array() ) {
	if ( ! addon_boss_edit_replaced() ) {
		return $message;
	}
	$bb_titles = array();
	foreach ( array_keys( (array) $products ) as $bb_pid ) {
		$bb_t = get_the_title( (int) $bb_pid );
		if ( '' !== $bb_t ) {
			$bb_titles[] = $bb_t;
		}
	}
	if ( ! $bb_titles ) {
		return $message;
	}
	/* translators: %s: the product's name */
	return esc_html( sprintf( __( '%s has been updated in your cart.', 'addon-boss' ), implode( ', ', $bb_titles ) ) );
}

// =================================================================
// STANDALONE SURFACE part 3: file-upload field config (upload meta/key,
// config reader, sanitiser, active-rule check). Lifted from slot-options.
// =================================================================

const ADDON_BOSS_STANDALONE_UPLOAD_META = '_bundle_boss_standalone_upload';
const ADDON_BOSS_STANDALONE_UPLOAD_KEY  = 'bundle_boss_standalone_upload';


// =================================================================
// STANDALONE SURFACE part 4: front-end render + styles + boot JS. Lifted
// from slot-options; registers once via the load-once engine. The one
// external stylesheet is provided per-host via the addon_boss_engine_frontend_css
// filter (BundleBoss -> css/bundle.css), so BundleBoss renders identically.
// =================================================================

// ---- Render -----------------------------------------------------

/**
 * The merchant's Colours choices, sanitised: hex per known token, nothing
 * else. The skin has three layers: neutral defaults that work anywhere, a
 * block theme's published palette flowing in through the var() chains, and
 * these choices over both. Only the four named tokens store, each as a hex
 * colour or not at all.
 *
 * @param array $raw The posted (or stored) map.
 * @return array<string,string>
 */
function addon_boss_sanitize_colours( array $raw ): array {
	$clean = array();
	foreach ( array( 'accent', 'sel', 'receipt', 'wrap' ) as $bb_key ) {
		$bb_val = $raw[ $bb_key ] ?? '';
		$bb_hex = is_string( $bb_val ) ? sanitize_hex_color( trim( $bb_val ) ) : '';
		if ( $bb_hex ) {
			$clean[ $bb_key ] = $bb_hex;
		}
	}
	return $clean;
}

/**
 * The merchant Colours overrides as one inline CSS block, or '' with none
 * set. It only ever RE-STATES tokens (plus the wrapper's panel chrome when
 * the optional tint is on: a tinted wrapper reads as a deliberate panel
 * again, padding and hairline back). Every value passes sanitize_hex_color
 * again at output, so a corrupted store prints nothing unsafe.
 */
function addon_boss_colour_override_css(): string {
	$stored = get_option( 'addon_boss_colours', array() );
	$cols   = addon_boss_sanitize_colours( is_array( $stored ) ? $stored : array() );
	if ( ! $cols ) {
		return '';
	}
	$css    = '';
	$tokens = '';
	foreach ( array( 'accent', 'sel', 'receipt' ) as $bb_key ) {
		if ( isset( $cols[ $bb_key ] ) ) {
			$tokens .= '--aob-' . $bb_key . ':' . $cols[ $bb_key ] . ';';
		}
	}
	if ( '' !== $tokens ) {
		// Every surface the colours are supposed to dress has to carry the
		// tokens, or a merchant sets them and one whole kind of product ignores
		// them. The quantity grid was missing: a grid product has no
		// .bb-standalone-options wrapper at all, so --aob-accent was unset there
		// and the Colours screen appeared to do nothing to anyone selling by
		// grid. Same lesson as the stylesheet enqueue above, which had to list
		// its surfaces for the same reason.
		//
		// This list must MATCH the skin block in css/options.css, which derives
		// the legacy --bb-* accent from --aob-accent. A custom property resolves
		// on the element that declares it, so if the skin derives one level up
		// from where these tokens land, the merchant's colour never reaches the
		// derived values. Listing .bb-quantity-grid here while the stylesheet
		// said .bb-standalone-grid is exactly how the grid kept its old accent
		// while appearing to be covered. Both names, in both places.
		//
		// .bundle-boss-form is deliberately NOT in the stylesheet's derive list:
		// bundles are BundleBoss's surface and keep their own brand-colour
		// setting, which writes --bb-accent at :root. Carrying --aob-* there is
		// harmless and long-standing; deriving the legacy palette there would
		// repaint another plugin's pages from this screen.
		//
		/**
		 * Which storefront surfaces the merchant's colours dress.
		 *
		 * Filterable so a sibling plugin can put its own surface in the list
		 * without this file learning that plugin's name. StockBoss's supplier
		 * price grid is the first taker: it sits on a merchant's own product
		 * page, and a brand colour that dressed everything except it would read
		 * as a broken settings screen.
		 *
		 * A surface joining this list has to declare these same token names at
		 * ZERO specificity of its own, via :where(), or the two plain class
		 * rules tie and the winner comes down to which stylesheet happened to
		 * print last.
		 *
		 * @param array<int,string> $surfaces CSS selectors.
		 */
		$surfaces = (array) apply_filters(
			'addon_boss_colour_surfaces',
			array( '.bb-standalone-options', '.bb-standalone-grid', '.bb-quantity-grid', '.bb-tray-peek.bb-st-peek', '.bundle-boss-form' )
		);
		$surfaces = array_filter( array_map( 'strval', $surfaces ) );
		if ( $surfaces ) {
			$css .= implode( ',', $surfaces ) . '{' . $tokens . '}';
		}
	}
	if ( isset( $cols['wrap'] ) ) {
		// A grid product has no options panel, so the tint has to name the grid's
		// own wrapper too or "Options background" does nothing to a grid seller.
		$css .= '.bb-standalone-options,.bb-standalone-grid{--aob-wrap:' . $cols['wrap'] . ';padding:12px;border:1px solid var(--aob-line,#e6e4df);}';
	}
	return $css;
}

add_action( 'wp_enqueue_scripts', 'addon_boss_standalone_options_styles', 21 );

function addon_boss_standalone_options_styles(): void {
	if ( ! function_exists( 'is_product' ) || ! is_product() ) {
		return;
	}
	$queried = wc_get_product( get_queried_object_id() );
	// Every surface this stylesheet dresses has to be listed, or a product using
	// only one of them renders with none of it. Positions and product fields were
	// both missing: a product offering only areas to personalise loaded no
	// stylesheet at all and its tiles came out as bare theme buttons.
	$bb_has_positions = function_exists( 'addon_boss_product_positions' ) && addon_boss_product_positions( $queried );
	$bb_has_fields    = function_exists( 'addon_boss_standalone_product_fields' ) && addon_boss_standalone_product_fields( $queried );

	/**
	 * A sibling surface asking to be DRESSED, and nothing more.
	 *
	 * Distinct from addon_boss_standalone_has_extra on purpose. has_extra means
	 * "render the options panel, I have something to sell in it", and the
	 * receipt renders with it. StockBoss's supplier configurator needs only the
	 * stylesheet and the merchant's colours (it joined addon_boss_colour_surfaces
	 * above); when it answered has_extra instead, every supplier-priced product
	 * grew an EMPTY options panel whose receipt echoed the meaningless base
	 * price as a Grand total. Two totals on one screen and only one of them real.
	 *
	 * @param bool       $dresses
	 * @param WC_Product $queried
	 */
	$bb_dress_only = (bool) apply_filters( 'addon_boss_standalone_worth_dressing', false, $queried );

	if ( ! addon_boss_standalone_option_sets( $queried ) && ! apply_filters( 'addon_boss_standalone_has_extra', false, $queried ) && ! $bb_has_positions && ! $bb_has_fields && ! $bb_dress_only ) {
		return;
	}
	// The chip/swatch base styles, provided through the filter (AddOnBoss ->
	// css/options.css): register with that URL when given, else a bare handle
	// to carry the inline styles.
	$bb_css = (string) apply_filters( 'addon_boss_engine_frontend_css', '' );
	wp_register_style( 'addon-boss-options-front', '' !== $bb_css ? $bb_css : false, array(), ADDON_BOSS_VERSION );
	wp_enqueue_style( 'addon-boss-options-front' );
	wp_add_inline_style(
		'addon-boss-options-front',
		// The owner-approved hybrid skin: each group is a white card (surface,
		// hairline, the 15px radius, a soft double shadow) standing DIRECTLY
		// on the theme's own page; group names read as treatment B's tracked
		// uppercase labels. The wrapper paints nothing by default (his
		// correction: a fixed tint fights somebody's store, transparent fights
		// nobody's), so --aob-wrap resolves to transparent and the border and
		// padding stay off. The Colours screen's optional tint sets the token
		// AND restores the panel chrome, in its own later rule. Every colour
		// and shape rides a --aob-* token (defined in css/options.css, with a
		// theme-inherit chain and the merchant Colours overrides); the literal
		// fallbacks here keep the surface styled even with no stylesheet.
		'.bb-standalone-options{margin:0 0 1.1em;padding:0;border:0;border-radius:calc(var(--aob-radius,15px) + 4px);background:var(--aob-wrap,transparent);color:var(--aob-text,#3a3f47);font-size:max(16px,1em);}'
		// The card. Groups nested inside a titled section stand down to plain
		// rows (a card in a card is noise); the section carries the chrome.
		. '.bb-standalone-options .bb-attr-group{margin:0 0 12px;padding:15px 16px;border:1px solid var(--aob-line,#e6e4df);border-radius:var(--aob-radius,15px);background:var(--aob-surface,#fff);box-shadow:0 1px 2px rgba(24,26,30,.04),0 10px 28px rgba(24,26,30,.05);}'
		. '.bb-standalone-options > .bb-attr-group:last-child,.bb-standalone-options .bb-po-section:last-child{margin-bottom:0;}'
		. '.bb-standalone-options .bb-attr-group[hidden]{display:none !important;}'
		. '.bb-standalone-options .bb-chip-delta{color:inherit;opacity:.75;font-size:0.85em;font-variant-numeric:tabular-nums;}'
		// A stock-limited option that has sold out renders as a dimmed, disabled
		// chip with a "Sold out" line; a low one carries a quiet "Only N left".
		. '.bb-standalone-options .bb-chips .bb-chip{flex-wrap:wrap;}'
		. '.bb-standalone-options .bb-chips .bb-chip.bb-chip--soldout{opacity:.6;}'
		. '.bb-standalone-options .bb-chips .bb-chip[disabled]{cursor:not-allowed;}'
		// A full-width flex line drops the stock note onto its own row, centred
		// under the name, so it never butts against the label.
		. '.bb-standalone-options .bb-chip-stock{flex-basis:100%;width:100%;margin:3px 0 0;line-height:1;text-align:center;font-size:.72em;font-weight:700;letter-spacing:.02em;}'
		. '.bb-standalone-options .bb-chip-stock--out{color:#b3261e;}'
		. '.bb-standalone-options .bb-chip-stock--low{color:#8a6d00;}'
		. '.bb-standalone-options .bb-opt-note{margin:9px 0 2px;padding:9px 12px;border-left:3px solid var(--aob-accent,#fd4730);background:color-mix(in srgb,var(--aob-accent,#fd4730) 6%,var(--aob-surface,#fff));border-radius:0 8px 8px 0;font-size:0.9em;color:var(--aob-text,#3a3f47);line-height:1.45;}'
		. '.bb-standalone-options .bb-opt-note[hidden]{display:none;}'
		// Several-of: the sentence that states the rule ("Choose up to 3.")
		// sits quietly under the chips; a refused pick hands it the accent for
		// a moment, so the answer arrives at the control, not in a theme
		// notice at the top of the page.
		. '.bb-standalone-options .bb-multi-hint{margin:8px 0 0;font-size:0.85em;color:var(--aob-mut,#7d8590);transition:color .2s ease;}'
		. '.bb-standalone-options .bb-multi-hint.is-refused{color:var(--aob-bad,#b3261e);font-weight:700;}'
		// A several-of long set's checkbox rows: plain native ticks in a quiet
		// column, each row a comfortable touch target with its price at rest
		// on the right, the same anatomy as the chips laid on its side.
		. '.bb-standalone-options .bb-checks{display:flex;flex-direction:column;gap:2px;max-width:420px;}'
		. '.bb-standalone-options .bb-check-row{display:flex;align-items:center;gap:10px;margin:0;padding:8px 10px;border-radius:9px;font-size:0.95em;color:var(--aob-text,#3a3f47);cursor:pointer;}'
		. '.bb-standalone-options .bb-check-row:hover{background:var(--aob-soft,#faf9f7);}'
		. '.bb-standalone-options .bb-check-row input{margin:0;accent-color:var(--aob-accent,#fd4730);width:17px;height:17px;flex:none;}'
		. '.bb-standalone-options .bb-check-row .bb-check-name{flex:1 1 auto;min-width:0;}'
		. '.bb-standalone-options .bb-check-row .bb-chip-delta{white-space:nowrap;}'
		// A look-up table on the storefront: an axis label + a row of size
		// buttons (the shared chip), and a live price line that never shifts.
		. '.bb-standalone-options .bb-tbl-store{display:flex;flex-direction:column;gap:12px;}'
		. '.bb-standalone-options .bb-tbl-axisrow{display:flex;flex-wrap:wrap;align-items:center;gap:8px 12px;}'
		. '.bb-standalone-options .bb-tbl-axislab{font-size:0.9em;color:var(--aob-mut,#7d8590);min-width:56px;}'
		. '.bb-standalone-options .bb-tbl-priceline{font-size:1.05em;color:var(--aob-ink,#16181d);font-variant-numeric:tabular-nums;}'
		. '.bb-standalone-options .bb-tbl-priceline b{font-weight:700;}'
		. '.bb-standalone-options .bb-tbl-priceline[hidden]{display:none;}'
		. '.bb-standalone-options .bb-tbl-pricenote{color:#b91c1c;font-size:0.9em;}'
		// Typed sizes: a number box per option, with the band it landed in stated
		// beside it, so the shopper reads which row of the price list they are on.
		. '.bb-standalone-options .bb-tbl-typedlab{display:inline-flex;align-items:center;gap:8px;margin:0;}'
		. '.bb-standalone-options .bb-tbl-typedin{width:112px;padding:9px 11px;border:1.5px solid var(--aob-line,#e6e4df);border-radius:10px;background:var(--aob-surface,#fff);color:var(--aob-ink,#16181d);font-size:max(16px,0.95em);line-height:1.3;box-sizing:border-box;font-variant-numeric:tabular-nums;}'
		. '.bb-standalone-options .bb-tbl-typedin:focus{border-color:var(--aob-ink,#16181d);outline:none;box-shadow:0 0 0 3px color-mix(in srgb,var(--aob-ink,#16181d) 7%,transparent);}'
		. '.bb-standalone-options .bb-tbl-unit{font-size:0.85em;color:var(--aob-mut,#7d8590);font-weight:700;}'
		// A list: the native control, themed only as far as the box around it, so the
		// platform's own picker (and its type-ahead) is left alone.
		. '.bb-standalone-options .bb-tbl-listlab{display:inline-flex;align-items:center;gap:8px;margin:0;}'
		. '.bb-standalone-options .bb-tbl-sel{min-width:150px;max-width:100%;padding:10px 11px;border:1.5px solid var(--aob-line,#e6e4df);border-radius:10px;background:var(--aob-surface,#fff);color:var(--aob-ink,#16181d);font-size:max(16px,0.95em);line-height:1.3;}'
		. '.bb-standalone-options .bb-tbl-sel:focus{border-color:var(--aob-ink,#16181d);outline:none;box-shadow:0 0 0 3px color-mix(in srgb,var(--aob-ink,#16181d) 7%,transparent);}'
		. '.bb-standalone-options .bb-tbl-sel option:disabled{color:var(--aob-mut,#7d8590);}'
		// A long choices set rendered as the list control (D6): the same
		// themed select, block-level at a comfortable reading width.
		. '.bb-standalone-options select.bb-list-sel{display:block;width:100%;max-width:420px;}'
		// The colour field: real radios under painted discs, the house tick on the
		// picked one, the custom hatch folded until the script opens it.
		. '.bb-addon-colour{display:flex;flex-wrap:wrap;gap:10px 14px;align-items:center;}'
		// A display rule on a class quietly beats the [hidden] attribute's UA
		// display:none; these keep "hidden" meaning hidden for every flexed
		// piece the script reveals.
		. '.bb-colour-custom[hidden],.bb-colour-pick[hidden],.bb-price-chips[hidden]{display:none;}'
		. '.bb-colour-sw{display:inline-flex;align-items:center;gap:7px;cursor:pointer;margin:0;}'
		. '.bb-colour-sw input{position:absolute;opacity:0;width:1px;height:1px;}'
		. '.bb-colour-disc{width:26px;height:26px;border-radius:8px;border:2px solid rgba(0,0,0,.12);box-sizing:border-box;display:inline-block;position:relative;}'
		. '.bb-colour-sw input:checked + .bb-colour-disc{border-color:currentColor;box-shadow:0 0 0 2px #fff inset,0 0 0 1.5px currentColor;}'
		. '.bb-colour-sw input:focus-visible + .bb-colour-disc{outline:2px solid currentColor;outline-offset:2px;}'
		. '.bb-colour-name{font-size:0.92em;}'
		. '.bb-colour-fee{opacity:.75;}'
		. '.bb-colour-anydisc{background:conic-gradient(#e85c46,#f5d547,#4c9e6e,#3d5a80,#e85c46);}'
		// The custom cluster takes a line of its OWN, deliberately. It is wide
		// (chip, words, fee, and the code pill holding its place), so left in
		// the flow it wrapped as a unit and left a hole in the middle of the
		// swatch row. Its own line reads as a considered second step, and the
		// space that follows it is ordinary trailing space nobody sees.
		. '.bb-colour-custom{display:flex;flex-basis:100%;align-items:center;gap:12px;flex-wrap:nowrap;margin-top:2px;}'
		// ONE pill, not two boxes: the wrap wears the border, the chip and the
		// code sit borderless inside it. Typed selectors so a theme's own
		// input dress (full width, tall boxes) cannot inflate the pair.
		. '.bb-colour-pick{display:inline-flex;align-items:center;gap:2px;padding:3px 4px;border:1px solid rgba(0,0,0,.18);border-radius:10px;background:#fff;}'
		. '.bb-colour-pick input[type=color].bb-colour-picker{width:30px;height:30px;min-height:30px;max-width:30px;padding:1px;border:0;border-radius:7px;background:none;box-sizing:border-box;flex:0 0 auto;cursor:pointer;}'
		. '.bb-colour-pick input[type=text].bb-colour-hex{width:6.4em;max-width:6.4em;min-height:30px;height:30px;padding:0 8px;font-size:15px;border:0;box-shadow:none;outline:none;background:transparent;box-sizing:border-box;flex:0 0 auto;}'
		. '.bb-colour-pick:focus-within{border-color:currentColor;}'
		// The pair keeps its place while hidden, so picking Custom reveals it
		// IN PLACE: nothing below the row moves.
		. '.bb-colour-custom .bb-colour-pick[hidden]{display:inline-flex;visibility:hidden;}'
		// Name your price: chips above a currency-prefixed box; chips hidden until the
		// script that makes them work exists.
		. '.bb-addon-ownprice .bb-price-chips{display:flex;gap:8px;flex-wrap:wrap;margin:0 0 8px;}'
		// color:inherit matters: themes paint button text white for their own
		// filled buttons, and white on our transparent chip is an empty pill.
		. '.bb-price-chip{border:1.5px solid rgba(0,0,0,.2);border-radius:8px;background:transparent;color:inherit;padding:6px 14px;font:inherit;cursor:pointer;}'
		. '.bb-price-chip.is-on{border-color:currentColor;box-shadow:inset 0 0 0 1px currentColor;font-weight:600;}'
		. '.bb-price-entry{display:inline-flex;align-items:center;gap:6px;}'
		. '.bb-price-symbol{opacity:.7;}'
		. '.bb-price-input{max-width:9em;font-size:16px;}'
		. '.bb-addon-ownprice .bb-addon-help{display:block;margin-top:6px;}'
		. '.bb-addon-mailhint{display:block;font-size:.85em;margin-top:4px;text-decoration:underline;text-underline-offset:2px;cursor:pointer;background:none;border:0;padding:0;font-family:inherit;color:inherit;}'
		// The combobox a long list upgrades into. 16px input so phones never zoom;
		// the list scrolls inside itself; unavailable options stay listed, dimmed.
		// Dressed in the panel's own tokens, not in hardcoded greys. It was a
		// white box with a hairline and a 8px tick, which beside our own
		// controls read as a browser default somebody forgot to style, and made
		// the whole control look like a search box rather than a dropdown.
		. '.bb-combo{position:relative;display:block;max-width:420px;}'
		. '.bb-combo-input{width:100%;font-size:16px;box-sizing:border-box;padding-right:40px;cursor:pointer;}'
		// A real chevron, big enough to read as one, and it turns over when the
		// list is open so the control says which way it is facing.
		. '.bb-combo-chev{position:absolute;inset-inline-end:14px;top:50%;width:10px;height:10px;border-right:2px solid currentColor;border-bottom:2px solid currentColor;'
		. 'transform:translateY(-75%) rotate(45deg);opacity:.55;cursor:pointer;transition:transform .16s ease,opacity .16s ease;pointer-events:auto;}'
		. '.bb-combo:hover .bb-combo-chev{opacity:.9;}'
		. '.bb-combo-input[aria-expanded="true"] ~ .bb-combo-chev{transform:translateY(-25%) rotate(225deg);opacity:.9;}'
		// The list matches the BOX, not the page. Theme body type can be 20px and
		// more, which turned sixteen slots into a wall you scroll rather than a
		// list you scan, and made the soft panel disagree with the hard square
		// control above it. 16px is the input's own size, set so phones never
		// zoom, and the two now read as one control.
		. '.bb-combo-list{position:absolute;z-index:30;left:0;right:0;top:calc(100% + 4px);margin:0;padding:4px;list-style:none;font-size:16px;line-height:1.4;'
		. 'background:var(--aob-surface,#fff);color:var(--aob-text,#1f2328);border:1px solid var(--aob-line,#e6e4df);border-radius:10px;'
		. 'max-height:17.5em;overflow-y:auto;overscroll-behavior:contain;box-shadow:0 2px 6px rgba(24,26,30,.06),0 18px 40px -12px rgba(24,26,30,.28);}'
		. '.bb-combo-opt{display:flex;align-items:baseline;gap:8px;padding:7px 10px;border-radius:7px;cursor:pointer;color:inherit;line-height:1.4;}'
		. '.bb-combo-opt mark{background:none;color:inherit;font-weight:700;text-decoration:underline;text-underline-offset:2px;}'
		// Keyboard and pointer land on the same state, so arrowing down looks
		// exactly like hovering. Ink tint, never the accent: coral is for things
		// you press, not for marking where you are.
		. '.bb-combo-opt:hover,.bb-combo-opt.is-hl{background:color-mix(in srgb,var(--aob-ink,#16181d) 8%,transparent);}'
		// What you are on already, marked with a tick rather than a colour, so it
		// survives a dark theme and a colour-blind eye alike.
		. '.bb-combo-opt.is-on{font-weight:600;}'
		. '.bb-combo-opt.is-on::after{content:"\\2713";margin-inline-start:auto;opacity:.75;font-weight:400;}'
		. '.bb-combo-opt.is-dis{color:var(--aob-mut,#7d8590);cursor:default;}'
		. '.bb-combo-opt.is-dis:hover{background:none;}'
		. '.bb-combo-unav{margin-inline-start:auto;font-size:.85em;opacity:.8;}'
		. '.bb-combo-none{padding:9px 11px;color:var(--aob-mut,#7d8590);}'
		. '.bb-standalone-options .bb-tbl-bandnote{font-size:0.85em;color:var(--aob-mut,#7d8590);}'
		. '.bb-standalone-options .bb-tbl-bandnote:empty{display:none;}'
		// An unsold combination: the option greys out and cannot be picked, so a
		// shopper never reaches a dead end (the same signal as a sold-out variation).
		. '.bb-standalone-options .bb-tbl-opt:disabled,.bb-standalone-options .bb-tbl-opt.bb-tbl-off{opacity:.45;cursor:not-allowed;text-decoration:line-through;box-shadow:none;}'
		. '.bb-standalone-options .bb-when-revealed{box-shadow:inset 3px 0 0 var(--aob-accent,#fd4730),0 1px 2px rgba(24,26,30,.04),0 10px 28px rgba(24,26,30,.05);}'
		// A group renders as a titled section: ONE card owning its members,
		// which sit inside as plain rows split by hairlines.
		. '.bb-standalone-options .bb-po-section{margin:0 0 12px;border:1px solid var(--aob-line,#e6e4df);border-radius:var(--aob-radius,15px);background:var(--aob-surface,#fff);box-shadow:0 1px 2px rgba(24,26,30,.04),0 10px 28px rgba(24,26,30,.05);overflow:hidden;}'
		. '.bb-standalone-options .bb-po-section .bb-attr-group{margin:0;border:0;border-radius:0;box-shadow:none;background:none;}'
		. '.bb-standalone-options .bb-po-section .bb-attr-group + .bb-attr-group{border-top:1px solid var(--aob-line,#e6e4df);}'
		. '.bb-standalone-options .bb-po-section .bb-when-revealed{box-shadow:inset 3px 0 0 var(--aob-accent,#fd4730);}'
		. '.bb-standalone-options .bb-po-sectionname{padding:14px 16px 4px;}'
		// The header row: name left, echo right. The echo is the receipt and
		// the required marking in one: accent "Choose" while unanswered, the
		// value and its money once answered, the good green once done.
		. '.bb-standalone-options .bb-ghead{display:flex;width:100%;justify-content:space-between;align-items:baseline;gap:12px;margin:0;padding:0;background:none;border:0;font:inherit;color:inherit;text-align:left;box-shadow:none;}'
		. 'button.bb-ghead{cursor:pointer;}'
		. '.bb-standalone-options .bb-ghead:focus-visible{outline:2px solid var(--aob-accent,#fd4730);outline-offset:2px;border-radius:6px;}'
		// Treatment B's group label: a small tracked uppercase eyebrow in a
		// tone between muted and ink, and the "(optional)" suffix stepping
		// back out of the uppercase into its own quiet weight.
		. '.bb-standalone-options .bb-attr-name{font-size:11px;font-weight:800;letter-spacing:.09em;text-transform:uppercase;color:color-mix(in srgb,var(--aob-mut,#7d8590) 80%,var(--aob-ink,#16181d));margin:0;}'
		. '.bb-standalone-options .bb-gopt{text-transform:none;letter-spacing:normal;}'
		. '.bb-gopt{font-weight:600;color:var(--aob-mut,#7d8590);font-size:11.5px;}'
		// The Required flag: one pill everywhere the word appears (set heads,
		// field labels, the fold family's section rows). Accent ink on the
		// accent-soft ground, small caps, never plain red text. The literal
		// ground declares first, so a browser without color-mix() keeps a
		// readable pill instead of dropping the declaration.
		. '.bb-standalone-options .bb-addon-req,.bb-standalone-options .bb-po-reqflag{display:inline-block;color:var(--aob-accent,#fd4730);background:#fff1ee;background:color-mix(in srgb,var(--aob-accent,#fd4730) 9%,var(--aob-surface,#fff));border:0;border-radius:99px;padding:2px 9px;font-size:10.5px;font-weight:700;letter-spacing:.05em;line-height:1.5;text-transform:none;font-variant-caps:all-small-caps;white-space:nowrap;vertical-align:middle;}'
		. '.bb-gecho{font-size:12.5px;color:var(--aob-mut,#7d8590);text-align:right;font-variant-numeric:tabular-nums;}'
		. '.bb-gecho.bb-gecho-todo{color:var(--aob-accent,#fd4730);font-weight:700;}'
		. '.bb-gecho.bb-gecho-done{color:var(--aob-good,#1a7f37);font-weight:600;}'
		// A REFUSAL IS NOT THE BRAND COLOUR.
		//
		// This block wore --aob-accent, the merchant's own colour, on the theory
		// that a refusal should match the Choose echo. On a shop whose accent is
		// green (#0f6b52 on the dev store) that painted every refusal green, which
		// reads as a tick. Worse, .bb-when-revealed draws the SAME inset edge in
		// the SAME colour, so a group that had just been refused and a group that
		// had just appeared were indistinguishable. His find, 7 Sept: "there's no
		// real indication as to why it's not letting you add to cart". There was
		// one. It was green, 12.5px, and looked like everything else.
		//
		// --aob-bad never derives from the accent. A merchant can set a house red;
		// they cannot accidentally set the refusal colour to their brand colour by
		// picking one on the Colours screen.
		. '.bb-standalone-options .bb-attr-group.bb-gmiss{box-shadow:inset 3px 0 0 var(--aob-bad,#b3261e),0 1px 2px rgba(24,26,30,.04),0 10px 28px rgba(24,26,30,.05);background:color-mix(in srgb,var(--aob-bad,#b3261e) 4%,var(--aob-surface,#fff));}'
		. '.bb-standalone-options .bb-po-section .bb-attr-group.bb-gmiss{box-shadow:inset 3px 0 0 var(--aob-bad,#b3261e);}'
		// The words of the block, at the offender: filled by the gate and gone the
		// moment the group is answered. Empty and [hidden] until then.
		. '.bb-standalone-options .bb-gmiss-note{margin:6px 0 0;font-size:13px;font-weight:700;color:var(--aob-bad,#b3261e);}'
		. '.bb-standalone-options .bb-gmiss-note[hidden]{display:none;}'
		. '.bb-standalone-options .bb-gmiss .bb-addon-ownprice .bb-addon-help{color:var(--aob-bad,#b3261e);}'
		. '.bb-standalone-options .bb-gmiss-here{margin-top:3px;}'
		. '.bb-st-line.bb-st-bad .bb-st-line-n,.bb-st-line.bb-st-bad .bb-st-free-v{color:var(--aob-bad,#b3261e);font-weight:600;}'
		. '.bb-st-line.bb-st-bad .bb-st-free-v::before{content:"\A0\B7\A0";}'
		// AND THE CONTROL HOLDING THE OFFENDING ANSWER SAYS SO ITSELF.
		//
		// aria-invalid was set on it and nothing was drawn: assistive tech knew,
		// and a shopper looking straight at a box holding 500 against a maximum of
		// 20 saw a box that looked exactly like every other box on the page.
		. '.bb-standalone-options .bb-gmiss .bb-addon-input[aria-invalid="true"],'
		. '.bb-standalone-options .bb-gmiss .bb-tbl-sel[aria-invalid="true"],'
		. '.bb-standalone-options .bb-gmiss .bb-tbl-typedin[aria-invalid="true"],'
		. '.bb-standalone-options .bb-gmiss select.bundle-attr-select[aria-invalid="true"]'
		. '{border-color:var(--aob-bad,#b3261e);background:color-mix(in srgb,var(--aob-bad,#b3261e) 5%,var(--aob-surface,#fff));}'
		. '.bb-standalone-options .bb-gmiss .bb-price-symbol{color:var(--aob-bad,#b3261e);}'
		. '.bb-gbody{padding-top:11px;}'
		// A conditional group stays out of sight until its trigger is picked,
		// then appears in place. No "available when" line on the front end.
		// (This is the hiding-versus-visibility round's outcome. The paragraph
		// that used to sit here still described the visible-locked design the
		// stylesheet had already stopped drawing, which is exactly how a reader
		// ends up trusting a comment over the CSS underneath it.)
		. '.bb-attr-group.bb-glocked{display:none;}'
		. '.bb-lockline{display:none;}'
		// Scope disclosure: how many decisions the page holds, so the visible
		// groups never read as "that is all there is". Green once every one
		// of them is answered.
		. '.bb-progress{font-size:12.5px;color:var(--aob-mut,#7d8590);text-align:right;padding:0 4px 9px;font-variant-numeric:tabular-nums;}'
		. '.bb-progress.bb-prog-done{color:var(--aob-good,#1a7f37);font-weight:700;}'
		. '.bb-progress[hidden]{display:none;}'
		. '.bb-mdims{display:flex;gap:10px 16px;flex-wrap:wrap;margin:8px 0 6px;}'
		. '.bb-mdims[hidden]{display:none;}'
		. '.bb-mdim{display:inline-flex;align-items:center;gap:6px;font-size:0.92em;color:var(--aob-mut,#7d8590);}'
		. '.bb-mdim input{width:96px;border:1.5px solid var(--aob-line,#e6e4df);border-radius:10px;padding:9px 11px;text-align:right;font-size:max(16px,0.92em);background:var(--aob-surface,#fff);color:var(--aob-ink,#16181d);font-variant-numeric:tabular-nums;}'
		. '.bb-mdim input:focus{border-color:var(--aob-ink,#16181d);outline:none;box-shadow:0 0 0 3px color-mix(in srgb,var(--aob-ink,#16181d) 7%,transparent);}'
		// The size echo panel: the soft ground, the money in ink, per gallery.
		. '.bb-mprice{margin:8px 0 4px;padding:8px 11px;background:var(--aob-soft,#faf9f7);border:1px solid var(--aob-line,#e6e4df);border-radius:9px;font-size:0.9em;font-variant-numeric:tabular-nums;}'
		. '.bb-mprice b{font-size:1.1em;color:var(--aob-ink,#16181d);}'
		. '.bb-mprice[hidden]{display:none;}'
		. '.bb-mprice-note{color:var(--aob-mut,#7d8590);font-size:0.88em;}'
		. '.bb-mchips{margin-bottom:4px;}'
		// A chip is a flex row, so the whitespace the markup puts between the
		// label and this note is dropped entirely: "A4" and "210 × 297 mm" met
		// with no gap at all, reading as one run-on word. Space between flex
		// items has to be spacing, never a space character.
		. '.bb-mdims-note{color:inherit;opacity:.7;font-size:0.82em;font-weight:400;margin-left:.5em;}'
		. '.bb-mchip .bb-chip-delta{margin-left:.5em;}'
		. '.bb-mchip-custom{border-style:dashed;}'
		// The receipt card: per-source lines in the muted tone, an explicit
		// Total row in the ink, everything tabular, sitting immediately
		// above the theme's own add-to-cart button (which is never
		// repainted). The card enters with a deliberate HAND-OFF (his
		// correction: the options run must visibly finish before the money
		// starts): a spacing shift, then treatment B's ledger rule drawn
		// across the card's top, 2px in the ink unless the merchant's
		// receipt-highlight colour recolours it. On narrow screens it may
		// pin to the bottom of the options flow, but only when the peek bar
		// has NOT mounted: two pinned totals stacking is worse than either
		// alone.
		. '.bb-standalone-total{display:flex;flex-direction:column;gap:2px;margin:20px 0 0;padding:16px 16px 14px;border:1px solid var(--aob-line,#e6e4df);border-top:2px solid var(--aob-receipt,var(--aob-ink,#16181d));border-radius:var(--aob-radius,15px);background:var(--aob-surface,#fff);box-shadow:0 1px 2px rgba(24,26,30,.04),0 10px 28px rgba(24,26,30,.05);font-size:1em;color:var(--aob-ink,#16181d);font-variant-numeric:tabular-nums;}'
		. '.bb-standalone-total .bb-st-lines{display:flex;flex-direction:column;gap:3px;}'
		// A free answer is what they CHOSE, not what they are paying for: it
		// names itself and leaves the money column empty, so the eye still runs
		// down one clean column of figures.
		// A charged line wears its answer the same way, so "Collection time:
		// 9:30 am   £4.00" reads as one sentence with the free lines above it.
		//
		// Scoped on the class alone, NOT under .bb-standalone-total. The separator
		// is the only thing standing between the label and the answer, and the
		// sticky peek bar shows a COPY of these lines outside that container: with
		// an ancestor in the selector every line in the bar read "Any date, no
		// rules at allThu, 10 Sept 2026". A rule that draws a word boundary has to
		// travel with the markup, wherever it is shown.
		. '.bb-st-free-v{color:var(--aob-mut,#7d8590);}'
		. '.bb-st-free-v::before{content:":\00a0";}'
		. '.bb-st-line{display:flex;justify-content:space-between;align-items:baseline;gap:12px;font-size:0.82em;color:var(--aob-mut,#7d8590);}'
		. '.bb-st-line-n{min-width:0;overflow-wrap:anywhere;}'
		. '.bb-st-line-a{white-space:nowrap;}'
		. '.bb-st-row{display:flex;justify-content:space-between;align-items:baseline;gap:12px;padding-top:7px;font-weight:800;}'
		. '.bb-st-lab{font-size:1em;}'
		. '.bb-st-sum{text-align:right;}'
		. '.bb-standalone-total b{font-size:1.25em;font-weight:800;}'
		. '.bb-st-note{color:var(--aob-mut,#7d8590);font-size:0.88em;text-align:right;font-weight:400;}'
		. '.bb-standalone-total[hidden]{display:none;}'
		. '@media (max-width:782px){.bb-standalone-total:not(.bb-has-peek){position:sticky;bottom:10px;z-index:5;}}'
		// The standalone peek bar reuses the bundle bar's shell; only the CTA
		// needs its own paint (filled, never outline: themes force text
		// white). It stands in for the theme's own add button, so it wears
		// the ink/surface pair: readable by construction on any theme, where
		// an accent fill went white-on-highlighter the moment a theme's
		// palette lent us something pale.
		. '.bb-st-peek .bb-peek-cta{background:var(--aob-ink,#16181d);color:var(--aob-surface,#fff);border:0;border-radius:10px;padding:11px 18px;min-height:44px;font-weight:700;font-size:0.95em;cursor:pointer;box-shadow:0 4px 12px -8px var(--aob-ink,#16181d);}'
		. '.bb-st-peek .bb-peek-cta:hover{filter:brightness(0.95);}'
		// A grid disables its own Add button until the order is complete, and
		// the bar's stand-in follows it. It has to LOOK unwilling too, or the
		// shopper taps a button that looks ready and nothing happens.
		. '.bb-st-peek .bb-peek-cta[disabled]{background:#c4cad4;box-shadow:none;cursor:not-allowed;}'
		. '.bb-st-peek .bb-peek-cta[disabled]:hover{filter:none;}'
	);
	// The merchant's Colours choices land LAST, as their own block, so they
	// override the neutral defaults and the theme inherit alike.
	$bb_colour_css = addon_boss_colour_override_css();
	if ( '' !== $bb_colour_css ) {
		wp_add_inline_style( 'addon-boss-options-front', $bb_colour_css );
	}
	// The boot rides the script loader, NEVER inline hook output: block
	// themes pass that output through content filters that entity-encode
	// ampersands (&& arrived as &#038;&#038; on Twenty Twenty-Five and the
	// whole script died on a syntax error). Loader-printed footer scripts
	// bypass content filtering entirely; the handle dedupes the once-only.
	wp_register_script( 'addon-boss-standalone', false, array(), ADDON_BOSS_VERSION, true );
	wp_enqueue_script( 'addon-boss-standalone' );
	// One handle, one order: the engine's own driver first, then whatever each
	// module appends on the filter, so a module's script can lean on the
	// conventions the driver establishes (the live-charge and echo data
	// attributes, and the bb-pick-change / bb-group-clear / bb-live-change
	// events) without sharing a scope with it.
	wp_add_inline_script( 'addon-boss-standalone', (string) apply_filters( 'addon_boss_standalone_boot_js', addon_boss_standalone_boot_js() ) );
}

add_action( 'woocommerce_before_add_to_cart_button', 'addon_boss_render_standalone_options' );

/**
 * D6: how many choices a chip row carries before the set switches to the
 * list control. Past this, chips sprawl into a wall; the native select
 * scans, searches (type-ahead) and fits a phone. Display only, and the
 * merchant can pin the chips per set.
 */
const ADDON_BOSS_CHIP_LIST_THRESHOLD = 12;

/**
 * The swatch shape a choices set renders with (D1, display only).
 *
 * An explicit merchant choice always wins. Absent means square, except that
 * a set whose options carry photos prefers the photo card by itself: a
 * merchant who mapped photos onto choices meant them to be seen.
 *
 * @param array $set A resolved (or stored) set.
 * @return string 'square', 'circle' or 'card'.
 */
function addon_boss_option_set_shape( array $set ): string {
	$explicit = (string) ( $set['shape'] ?? '' );
	if ( in_array( $explicit, array( 'square', 'circle', 'card' ), true ) ) {
		return $explicit;
	}
	foreach ( (array) ( $set['options'] ?? array() ) as $bb_o ) {
		if ( ! empty( $bb_o['image_id'] ) ) {
			return 'card';
		}
	}
	return 'square';
}

/**
 * Whether a label already says "optional" in its own words. Such a label is
 * its own marking, and the "(optional)" suffix beside it would read as a
 * stutter: "Optional extras (optional)". The comparison uses the same
 * translated word the suffix prints, so it follows the store's language.
 */
function addon_boss_label_says_optional( string $label ): bool {
	$word = trim( __( '(optional)', 'addon-boss' ), '() ' );
	return '' !== $word && false !== mb_stripos( $label, $word );
}

/**
 * The "(optional)" marker for a label, or '' when the label already carries
 * the word itself. The one source of truth for the suffix: field labels, set
 * headers and fold summaries all mark themselves through here.
 *
 * @param string $label The label being marked.
 * @param string $class The class the marker wears where it renders.
 */
function addon_boss_optional_marker( string $label, string $class = 'bb-gopt' ): string {
	if ( addon_boss_label_says_optional( $label ) ) {
		return '';
	}
	return ' <span class="' . esc_attr( $class ) . '">' . esc_html__( '(optional)', 'addon-boss' ) . '</span>';
}

/**
 * Whether a group's name and its only member's name are near-duplicates
 * ("How it is finished" holding "Finish"), so stacking both headings would
 * say the same thing twice. Case-insensitive containment either way round;
 * the shorter name must have some substance (three characters), so a trivial
 * fragment can never collapse an unrelated pair.
 */
function addon_boss_labels_near_duplicate( string $a, string $b ): bool {
	$a = trim( $a );
	$b = trim( $b );
	if ( '' === $a || '' === $b ) {
		return false;
	}
	$needle = mb_strlen( $a ) <= mb_strlen( $b ) ? $a : $b;
	$stack  = ( $needle === $a ) ? $b : $a;
	return mb_strlen( $needle ) >= 3 && false !== mb_stripos( $stack, $needle );
}

/**
 * A group's header row: the name on the left, the live echo on the right.
 * The heading marks the STATE in the same grammar the field labels wear:
 * the platform's word "Required" (drawn by the skin as the accent-soft
 * pill) or "(optional)", unless the name already says so in its own words.
 * The echo stays the VALUE half of the marking: "Choose" in the accent
 * while an answer is owed, the pick and its money once given, "None" for
 * an optional group left alone, and NOTHING while a conditional group
 * waits for its trigger (the greyed body plus its availability line carry
 * that state; the research is clear that a status word like "Locked" is
 * mechanism language a shopper should not have to read). A plain row, not
 * a control: every group stays open, so there is nothing to toggle.
 */
function addon_boss_standalone_group_head( string $name, bool $required ): string {
	return '<div class="bb-ghead">'
		. '<span class="bb-attr-name">' . esc_html( $name )
		. ( $required ? ' <span class="bb-addon-req">' . esc_html__( 'Required', 'addon-boss' ) . '</span>' : addon_boss_optional_marker( $name ) )
		. '</span>'
		. '<span class="bb-gecho" data-choose="' . esc_attr__( 'Choose', 'addon-boss' ) . '" data-none="' . esc_attr__( 'None', 'addon-boss' ) . '"'
		/* translators: %s: how many choices the shopper has picked in this set */
		. ' data-chosen="' . esc_attr__( '%s chosen', 'addon-boss' ) . '"></span>'
		. '</div>';
}

/**
 * The tags and attributes wp_kses() is allowed to keep in the option-set and
 * field markup this engine prints. One shared allowlist for every sink on this
 * surface: the structural elements, the form controls with their own
 * attributes, links and images, and the global class, id, style, data and aria set.
 * Every value is still escaped at its sink (esc_attr/esc_html); this is the
 * outer gate that proves it to a reader, and to Plugin Check, at the echo.
 */
function addon_boss_kses_allowed(): array {
	$global = array(
		'class'            => true,
		'id'               => true,
		'style'            => true,
		'title'            => true,
		'role'             => true,
		'hidden'           => true,
		'tabindex'         => true,
		'data-*'           => true,
		'aria-label'       => true,
		'aria-hidden'      => true,
		'aria-live'        => true,
		'aria-pressed'     => true,
		'aria-checked'     => true,
		// A sold-out choice carries both `disabled` and `aria-disabled`. The
		// first is allowed on form elements below; without this one kses would
		// strip the second silently, so the chip would look and behave disabled
		// while telling a screen reader nothing at all.
		'aria-disabled'    => true,
		'aria-expanded'    => true,
		'aria-describedby' => true,
		'aria-required'    => true,
		'aria-labelledby'  => true,
	);
	$form   = array_merge(
		$global,
		array(
			'type'         => true,
			'name'         => true,
			'value'        => true,
			'checked'      => true,
			'selected'     => true,
			'disabled'     => true,
			'required'     => true,
			'placeholder'  => true,
			'min'          => true,
			'max'          => true,
			'step'         => true,
			'maxlength'    => true,
			'minlength'    => true,
			'pattern'      => true,
			'accept'       => true,
			'multiple'     => true,
			'readonly'     => true,
			'inputmode'    => true,
			'autocomplete' => true,
			'size'         => true,
			'rows'         => true,
			'cols'         => true,
			'for'          => true,
			'form'         => true,
		)
	);
	return array(
		'div'      => $global,
		'span'     => $global,
		'p'        => $global,
		'section'  => $global,
		'fieldset' => $global,
		'legend'   => $global,
		'ul'       => $global,
		'ol'       => $global,
		'li'       => $global,
		'strong'   => $global,
		'em'       => $global,
		'b'        => $global,
		'i'        => $global,
		'small'    => $global,
		'code'     => $global,
		'br'       => $global,
		'hr'       => $global,
		'abbr'     => $global,
		'h2'       => $global,
		'h3'       => $global,
		'h4'       => $global,
		'label'    => $form,
		'input'    => $form,
		'select'   => $form,
		'option'   => $form,
		'optgroup' => $form,
		'textarea' => $form,
		'button'   => $form,
		'a'        => array_merge(
			$global,
			array(
				'href'   => true,
				'target' => true,
				'rel'    => true,
			)
		),
		'img'      => array_merge(
			$global,
			array(
				'src'     => true,
				'alt'     => true,
				'width'   => true,
				'height'  => true,
				'loading' => true,
				'srcset'  => true,
				'sizes'   => true,
			)
		),
		'table'    => $global,
		'thead'    => $global,
		'tbody'    => $global,
		'tfoot'    => $global,
		'tr'       => $global,
		'th'       => array_merge(
			$global,
			array(
				'scope'   => true,
				'colspan' => true,
				'rowspan' => true,
			)
		),
		'td'       => array_merge(
			$global,
			array(
				'colspan' => true,
				'rowspan' => true,
			)
		),
	);
}

/**
 * The pieces a group wears when it carries a reveal rule: the data attributes
 * the reveal script reads, the locked-or-revealed class, and the availability
 * line stating the condition in the customer's words. All three come from the
 * module that evaluates such rules; with nothing registered a rule was
 * already wiped on read, and a group wears none of them.
 *
 * @param array $when   The stored rule.
 * @param bool  $active Whether the group is currently active.
 * @param array $sets   The resolved sets (for the trigger's name and option).
 * @return array{attrs:string,class:string,lock:string}
 */
function addon_boss_standalone_reveal_bits( array $when, bool $active, array $sets ): array {
	$bits = array(
		'attrs' => '',
		'class' => '',
		'lock'  => '',
	);
	if ( ! $when ) {
		return $bits;
	}
	return (array) apply_filters( 'addon_boss_reveal_group_bits', $bits, $when, $active, $sets );
}

/**
 * A field snapshot's frozen style as a display suffix, or '' when the field
 * carries none. Rides the same rows the charge suffix does, so the cart line
 * and the order line both read "Maria (Script, #d4af37) (+5.00)".
 */
function addon_boss_standalone_field_style_suffix( array $fsnap ): string {
	$style = trim( (string) ( $fsnap['style'] ?? '' ) );
	return '' !== $style ? ' (' . $style . ')' : '';
}

/**
 * One product-FIELD group on the standalone product page. Reuses the shared
 * personalisation field renderer verbatim; the field posts inside the native
 * add-to-cart form as bb_pf[<key>], and its data-bb-fee feeds the live total.
 * Wrapped in a .bb-attr-group so it flows with the option-set groups (and, in
 * Phase 2, can carry the same reveal rule the sets do).
 */
function addon_boss_render_standalone_field( $product, array $field, array $when = array(), array $sets = array(), bool $active = true ): void {
	if ( ! function_exists( 'addon_boss_personalisation_render_field' ) || empty( $field['type'] ) || empty( $field['key'] ) ) {
		return;
	}
	// A field for the admin's eyes only (a hidden merchant note) draws NO card:
	// an empty white shell on the product page is exactly the shelf-of-nothing
	// this page must never show. The bare renderer still runs, so a
	// fill-from-link input can land in the form when that switch is on.
	$bb_all_types = addon_boss_personalisation_field_types();
	if ( ! empty( $bb_all_types[ (string) $field['type'] ]['admin_only'] ) ) {
		addon_boss_personalisation_render_field( $field, 'bb_pf[' . $field['key'] . ']', null, 'block', $product );
		return;
	}
	// Prefill on a failed add re-render so the shopper never loses what they
	// typed. Display only, on the storefront where WooCommerce's add-to-cart
	// carries no nonce; the submitted value is re-resolved and re-validated
	// server-side at add-to-cart, and every render path escapes at output.
	$posted = null;
	// phpcs:ignore WordPress.Security.NonceVerification.Recommended
	if ( isset( $_REQUEST['bb_pf'][ $field['key'] ] ) ) {
		// phpcs:ignore WordPress.Security.NonceVerification.Recommended
		$posted = map_deep( wp_unslash( $_REQUEST['bb_pf'][ $field['key'] ] ), 'sanitize_textarea_field' );
	}
	// Extra group attributes (a placement's settings for the module that
	// draws on the product photo) ride this seam, escaped by the module that
	// builds them; with nothing registered a group carries none.
	$bb_extra_attrs = (string) apply_filters( 'addon_boss_field_group_extra_attrs', '', $field, $product );

	// The same reveal rule the sets carry: a field shown "only when" a set is
	// picked renders VISIBLE and LOCKED until then (never hidden), reads its
	// trigger off the same select, carries a plain availability line, and its
	// fee drops out of the live total while locked. The reveal module's script
	// keeps it in step with the picks client-side, mirroring the server.
	$bb_reveal   = addon_boss_standalone_reveal_bits( $when, $active, $sets );
	$when_attrs  = $bb_reveal['attrs'];
	// The group states its field kind (bb-fk-text, bb-fk-number, ...) so the
	// stylesheet can lay kinds out by nature: two short fields standing next
	// to each other pair onto one row where the wrapper is wide enough (D5),
	// with no admin control and no script. Which kinds pair is entirely the
	// stylesheet's decision; the markup just stops hiding what each group is.
	$group_class = 'bundle-item-attribute bb-attr-group bb-field-group bb-fk-' . sanitize_html_class( (string) $field['type'] ) . $bb_reveal['class'];
	// Which variations this field is for, carried onto the group so the page
	// scripts can mirror the server's inertness rule: a field restricted to
	// other variations must not gate the add, count in the progress line or
	// price into the live total while a variation it does not apply to is the
	// one being bought. The server has always stood such a field down; the
	// page just had no way to know.
	$bb_vars_attr = '';
	if ( ! empty( $field['only_variations'] ) ) {
		$bb_vars_attr = ' data-bb-vars="' . esc_attr( implode( ',', array_map( 'absint', (array) $field['only_variations'] ) ) ) . '"';
	}
	$when_attrs .= $bb_vars_attr;
	// A type whose group carries its own wiring (an upload field's endpoint
	// attributes) rides the callback its module registered.
	$bb_ftypes    = addon_boss_personalisation_field_types();
	$upload_attrs = is_callable( $bb_ftypes[ (string) $field['type'] ]['group_attrs'] ?? null )
		? (string) call_user_func( $bb_ftypes[ (string) $field['type'] ]['group_attrs'], $field, $product )
		: '';
	// The words a blocked add says at this field, in the field's own label
	// (gauntlet P1); the sets' twin above explains the pattern. Only a
	// required field can block, so only a required field carries them.
	$bb_miss_attr = '';
	if ( ! empty( $field['required'] ) ) {
		/* translators: %s: the field's own label, e.g. "Engraving" */
		$bb_miss_attr = ' data-bb-miss="' . esc_attr( sprintf( __( 'Fill in %s first.', 'addon-boss' ), (string) ( $field['label'] ?? '' ) ) ) . '"';
	}
	echo wp_kses( '<div class="' . esc_attr( $group_class ) . '" data-req="' . ( ! empty( $field['required'] ) ? '1' : '0' ) . '"' . $when_attrs . $upload_attrs . $bb_extra_attrs . $bb_miss_attr . '>', addon_boss_kses_allowed() );
	// A FIELD THAT CAN BLOCK NEEDS SOMEWHERE TO SAY WHY.
	//
	// This note used to belong to required fields alone, because only a required
	// field could hold up the basket. A name-your-price box with a minimum or a
	// maximum can hold it up too, optional or not, and without this line it did
	// so in silence: the field went red and said nothing. Closing a limit
	// changes three things, and this is the third.
	if ( '' !== $bb_miss_attr || isset( $field['price_min'] ) || isset( $field['price_max'] ) ) {
		echo '<p class="bb-gmiss-note" role="status" aria-live="polite" hidden></p>';
	}
	if ( '' !== $bb_reveal['lock'] ) {
		echo '<div class="bb-lockline">' . esc_html( $bb_reveal['lock'] ) . '</div>';
	}
	// A mode that displays as something other than its stored self (a percent
	// charge resolves to its actual money, off the same base the server prices
	// from) is adjusted by the module that owns the mode, so the shopper reads
	// "+£3.00" rather than a percentage they have to do arithmetic on and the
	// live total needs no maths of its own. The server recomputes the exact
	// charge at add-to-cart, so what is shown is what is charged.
	$render_field = (array) apply_filters( 'addon_boss_render_field_def', $field, $product );
	echo '<div class="bb-gwrap"><div class="bb-gbody">';
	// A field the merchant set to repeat asks several times, through the
	// module that owns repeats: it answers true when it drew the cards. Every
	// other field renders exactly the single input it always has.
	if ( ! (bool) apply_filters( 'addon_boss_render_repeat_field', false, $render_field, $posted ) ) {
		echo wp_kses( (string) addon_boss_personalisation_render_field( $render_field, 'bb_pf[' . $field['key'] . ']', $posted, 'block', $product ), addon_boss_kses_allowed() );
	}
	// Whatever a module offers inside this group beyond the input itself (the
	// typeface and colour chips of a placement field) renders here, through
	// the module's own listener; a build without one prints nothing.
	do_action( 'addon_boss_standalone_field_extra', $field, $product );
	echo '</div></div>';
	echo '</div>';
}

function addon_boss_render_standalone_options(): void {
	global $product;
	if ( ! $product instanceof WC_Product || ! $product->is_purchasable() ) {
		return;
	}
	$sets = addon_boss_standalone_option_sets( $product );
	if ( ! $sets && ! addon_boss_standalone_product_fields( $product ) && ! apply_filters( 'addon_boss_standalone_has_extra', false, $product ) ) {
		return; // nothing to show: no sets, no fill-in fields, and no module with something of its own.
	}
	// Whose money this panel is about to print, said once, so a field type whose
	// render callback has no product in its shape still converts what it shows.
	// Restored at the end of the panel, so a second product later in the request
	// (a shop loop, a related-products row) can never inherit this one's basis.
	$bb_money_was = addon_boss_money_product( $product );
	// Prefill picks first (a failed add re-renders in the same request, and an
	// edit arrival seeds the line's picks), then the activity map, so a
	// conditional set arrives hidden or revealed in the same state the server
	// will enforce. A several-of set's entry is its array of keys; a pick-one
	// set's stays the string it always was.
	// Cleaned HERE, at the boundary, rather than trusting the helpers to do it
	// out of sight. Both are also called with an already-collected $source
	// array, so the boundary is the caller's job at every one of their sites
	// and only these two read the request directly.
	$prefill = array();
	foreach ( $sets as $set ) {
		$field = addon_boss_standalone_field_name( $set['id'] );
		// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- display prefill only; picks are validated against the stored set on submit.
		$bb_raw = isset( $_REQUEST[ $field ] ) ? map_deep( wp_unslash( $_REQUEST[ $field ] ), 'sanitize_text_field' ) : '';
		$bb_pp  = addon_boss_standalone_posted_picks( $set, $bb_raw );
		$prefill[ $set['id'] ] = ! empty( $set['multi'] ) ? $bb_pp : (string) ( $bb_pp[0] ?? '' );
	}
	$active = addon_boss_active_option_sets( $sets, $prefill );
	// Fields join the rule state, so the first paint already agrees with what
	// the server will enforce for a rule triggered by a tick box.
	// sanitize_textarea_field, not its one-line sibling: a message field's
	// newlines are part of the answer, and stripping them here would make the
	// first paint disagree with the value the box is about to show.
	// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- display prefill only; every answer is re-read and validated on submit.
	$bb_pf = isset( $_REQUEST['bb_pf'] ) ? map_deep( wp_unslash( $_REQUEST['bb_pf'] ), 'sanitize_textarea_field' ) : null;
	addon_boss_add_field_rule_state( addon_boss_standalone_product_fields( $product ), $bb_pf, $prefill, $active );

	// The panel owns every group. A scope line announces how many decisions
	// exist so the visible groups never read as the whole story (the
	// illusion-of-completeness risk the visibility research named). Answered
	// groups refine in place; conditional groups render VISIBLE-LOCKED, never
	// hidden, so a dependent choice is always discoverable.

	// The pairs, for the chips. A product that counts per combination hands
	// its whole table to the page, so picking a colour can grey the sizes that
	// colour has none of, at the moment of the pick rather than at the button.
	// An attribute rather than a script tag: a block theme's summary region
	// content-filters what it finds there, and an inline script has already
	// been mangled into a syntax error once.
	$bb_pairs      = function_exists( 'addon_boss_combo_stock_all' ) ? addon_boss_combo_stock_all( $product ) : array();
	$bb_pairs_attr = '';
	if ( $bb_pairs ) {
		$bb_pairs_attr = ' data-bb-pairs="' . esc_attr( (string) wp_json_encode( array( 'sets' => addon_boss_combo_sets( $product ), 'q' => $bb_pairs ) ) ) . '"';
	}
	// Whether the pairs also carry PRICES is the price module's own business
	// (Pro): it prints its map through the options-extra hook below, in the
	// same wire shape the counts travel in.
	echo '<div class="bb-standalone-options"' . wp_kses_data( $bb_pairs_attr ) . '>';
	/* translators: 1: total number of option groups on the page, 2: how many the shopper has picked so far */
	echo '<div class="bb-progress" data-tpl="' . esc_attr__( '%2$s of %1$s chosen', 'addon-boss' ) . '" hidden></div>';
	// Display-basis base price, shared by the chips (which state each choice as
	// a whole price) and the total line below. Empty on a variable product,
	// whose base only exists once a variation is chosen.
	$base_disp = $product->is_type( 'variable' ) ? '' : (string) wc_get_price_to_display( $product );
	// Whole-price chips ("4XL is £26") read well for ONE priced set, where the
	// choice IS the product's price. On a product with SEVERAL priced sets
	// (add-ons: print +£35, design +£40, lamination +£16.67...) every set would
	// repeat the base and no option would read as the add-on it is. So with two
	// or more priced sets, chips show the "+£35" surcharge instead.
	$priced_sets = 0;
	foreach ( $sets as $s ) {
		foreach ( $s['options'] as $o ) {
			if ( 0.0 !== (float) $o['delta'] ) {
				++$priced_sets;
				break;
			}
		}
	}
			$bb_sets_by_id = array();
		foreach ( $sets as $bb_s ) {
			$bb_sets_by_id[ $bb_s['id'] ] = $bb_s;
		}
		// Walk the unified config so fields interleave with sets in the merchant's
		// arranged order. Set rows resolve to their prepared entry; field rows
		// render inline. A set that no longer resolves (deleted) is skipped, as
		// before.
		// One render sequence with explicit group_open / group_close markers, so
		// each section's boundaries are exact (never guessed by position). A
		// group is a real container; its children render between the markers.
		// The layout to draw in, and, in the order the groups will render, whether
		// each one holds something the shopper has to answer. Worked out from the
		// config rather than from the render sequence, so the guarantee that a
		// required group is never folded away does not depend on a marker.
		$bb_layout_now   = addon_boss_options_layout( $product );
		$bb_fold_open    = array();
		$bb_grp_meta     = array();
		foreach ( (array) addon_boss_product_option_config( $product ) as $bb_grow ) {
			if ( ( $bb_grow['row_type'] ?? '' ) !== 'group' ) {
				continue;
			}
			$bb_gkids = (array) ( $bb_grow['children'] ?? array() );
			$bb_greq  = false;
			foreach ( $bb_gkids as $bb_gkid ) {
				if ( ! empty( $bb_gkid['required'] ) || ! empty( $bb_gkid['field']['required'] ) ) {
					$bb_greq = true;
					break;
				}
			}
			// One heading, not two. A group holding exactly ONE set whose name
			// near-duplicates its own ("How it is finished" holding "Finish")
			// collapses into a single card wearing the group's richer name:
			// stacked, both headings would say the same thing twice. Decided
			// here from the config, so the walk below needs no lookahead.
			$bb_gkid_one = ( 1 === count( $bb_gkids ) && is_array( $bb_gkids[0] ?? null ) ) ? $bb_gkids[0] : array();
			$bb_gcollapse = '' !== (string) ( $bb_gkid_one['set'] ?? '' )
				&& isset( $bb_sets_by_id[ (string) $bb_gkid_one['set'] ] )
				&& addon_boss_labels_near_duplicate( (string) ( $bb_grow['label'] ?? '' ), (string) $bb_sets_by_id[ (string) $bb_gkid_one['set'] ]['name'] );
			$bb_grp_meta[] = array(
				'req'      => $bb_greq,
				'collapse' => $bb_gcollapse,
			);
		}
		$bb_collapse_label = null;
		$bb_repeat_grp     = false; // inside a group whose FIELDS a module drew as one repeating block.
		foreach ( addon_boss_config_render_sequence( addon_boss_product_option_config( $product ) ) as $bb_cfg ) {
			if ( ( $bb_cfg['row_type'] ?? '' ) === 'group_open' ) {
				$g_label = (string) ( $bb_cfg['label'] ?? '' );
				// What the config prepass decided for this group, taken in the
				// same order the groups render, so it needs no key on the sequence.
				$bb_gm = (array) array_shift( $bb_grp_meta );
				$g_req = ! empty( $bb_gm['req'] );
				// A group marked repeatable renders AS A UNIT through the module
				// that owns repeats: the module opens the section and draws every
				// field child inside the instance blocks, so the walk must not
				// draw them again; a set child is not part of the block and still
				// renders below, and the close is the plain section's own. With
				// no module registered the answer stays false and the group is
				// the plain always-open section it has always been.
				if ( (bool) apply_filters( 'addon_boss_render_repeat_group', false, (array) ( $bb_cfg['group'] ?? array() ), $product, $g_req ) ) {
					$bb_fold_open[] = false;
					$bb_repeat_grp  = true;
					continue;
				}
				if ( ! empty( $bb_gm['collapse'] ) ) {
					// The near-duplicate 1:1 case draws NO group chrome under any
					// layout: a section (or a one-question fold) whose title repeats
					// its content's heading is noise, not structure. The member set
					// renders as its own card, wearing the group's name.
					$bb_fold_open[]    = 'collapsed';
					$bb_collapse_label = $g_label;
					continue;
				}
				// A layout beyond the engine's own stacked flow draws its own group
				// chrome through the module that registered it, answering with
				// whether this group FOLDED so the closer knows which tag to close.
				// With nothing registered (or the module standing aside for this
				// group) every group is the engine's plain section.
				$bb_go = apply_filters( 'addon_boss_render_group_open', null, $bb_layout_now, $g_label, $g_req );
				if ( is_array( $bb_go ) ) {
					$bb_fold_open[] = ! empty( $bb_go['fold'] );
					continue;
				}
				$bb_fold_open[] = false;
				// A group is a plain section: an optional title, then its body. It is
				// not collapsible, and shows no title at all when it is nameless.
				echo '<section class="bb-po-section' . ( '' === $g_label ? ' bb-po-untitled' : '' ) . '">';
				if ( '' !== $g_label ) {
					echo '<div class="bb-po-sectionname"><span class="bb-attr-name">' . esc_html( $g_label ) . '</span></div>';
				}
				echo '<div class="bb-po-sectionbody">';
				continue;
			}
			if ( ( $bb_cfg['row_type'] ?? '' ) === 'group_close' ) {
				$bb_closed = array_pop( $bb_fold_open );
				if ( 'collapsed' !== $bb_closed ) {
					echo '</div>' . ( $bb_closed ? '</details>' : '</section>' );
				}
				$bb_collapse_label = null; // a collapsed group is spent once closed.
				$bb_repeat_grp     = false;
				continue;
			}
			if ( ( $bb_cfg['row_type'] ?? '' ) === 'field' ) {
				if ( $bb_repeat_grp ) {
					continue; // drawn inside the group's instance blocks already.
				}
				$bb_fdef = (array) ( $bb_cfg['field'] ?? array() );
				// A field type this build does not offer is inert: not rendered (it
				// is dropped from pricing and validation in the same breath, via
				// addon_boss_standalone_product_fields).
				if ( ! addon_boss_field_type_available( (string) ( $bb_fdef['type'] ?? '' ) ) ) {
					continue;
				}
				// Without conditional reveal a field's stored rule is ignored, so it
				// renders unlocked (its data is dropped from the priced set too).
				$bb_fwhen   = ( addon_boss_engine_can( 'reveal' ) && is_array( $bb_cfg['when'] ?? null ) ) ? $bb_cfg['when'] : array();
				$bb_factive = ! $bb_fwhen || (bool) apply_filters( 'addon_boss_when_met', true, $bb_fwhen, $prefill, $active );
				if ( addon_boss_rule_removes_row( $bb_fwhen, $bb_factive ) ) {
					continue; // a fired HIDE rule takes the row off the page, not just out of reach.
				}
				addon_boss_render_standalone_field( $product, $bb_fdef, $bb_fwhen, $sets, $bb_factive );
				continue;
			}
			$set = $bb_sets_by_id[ (string) ( $bb_cfg['set'] ?? '' ) ] ?? null;
			if ( ! $set ) {
				continue;
			}
			if ( addon_boss_rule_removes_row( $set['when'] ?? array(), ! empty( $active[ $set['id'] ] ) ) ) {
				continue; // a fired HIDE rule takes the set off the page, not just out of reach.
			}
			$field    = addon_boss_standalone_field_name( $set['id'] );
			$selected = $prefill[ $set['id'] ];
			// Several-of: the selected keys as a list (one entry or none on a
			// pick-one set), the bounds, and the sentence that states them.
			// The sentence is the control's own always-visible words: it is
			// how a shopper learns the chips take more than one, and it is
			// the copy standing right there when a pick past the bound is
			// refused.
			$bb_sel_keys = array_values( array_filter( array_map( 'strval', (array) $selected ), 'strlen' ) );
			$bb_is_multi = ! empty( $set['multi'] );
			$bb_min      = $bb_is_multi ? max( 0, (int) ( $set['min'] ?? 0 ) ) : 0;
			$bb_max      = $bb_is_multi ? max( 0, (int) ( $set['max'] ?? 0 ) ) : 0;
			$bb_hint     = '';
			if ( $bb_is_multi ) {
				if ( $bb_min > 1 && $bb_max > 0 ) {
					/* translators: 1: the smallest number of choices, 2: the largest number of choices */
					$bb_hint = sprintf( __( 'Choose at least %1$s and up to %2$s.', 'addon-boss' ), number_format_i18n( $bb_min ), number_format_i18n( $bb_max ) );
				} elseif ( $bb_min > 1 ) {
					/* translators: %s: the smallest number of choices */
					$bb_hint = sprintf( __( 'Choose at least %s.', 'addon-boss' ), number_format_i18n( $bb_min ) );
				} elseif ( $bb_max > 0 ) {
					/* translators: %s: the largest number of choices */
					$bb_hint = sprintf( __( 'Choose up to %s.', 'addon-boss' ), number_format_i18n( $bb_max ) );
				} else {
					$bb_hint = __( 'Choose as many as you like.', 'addon-boss' );
				}
			}
			$bb_hint_html   = $bb_is_multi
				? '<div class="bb-multi-hint" aria-live="polite">' . esc_html( $bb_hint ) . '</div>'
				: '';
			$bb_multi_attrs = $bb_is_multi
				? ' data-multi="1" data-min="' . esc_attr( (string) $bb_min ) . '" data-max="' . esc_attr( (string) $bb_max ) . '"'
				: '';

		$bb_sreveal  = addon_boss_standalone_reveal_bits(
			is_array( $set['when'] ?? null ) ? $set['when'] : array(),
			! empty( $active[ $set['id'] ] ),
			$sets
		);
		$when_attrs  = $bb_sreveal['attrs'];
		$group_class = 'bundle-item-attribute bb-attr-group' . $bb_sreveal['class'];
		// A collapsed 1:1 group hands the set its own name: the one heading
		// wears the group's words, and everything else about the set (its
		// field name, its echo, its required marking) is exactly itself.
		//
		// The set's display label beats its library name here. A supplier
		// feed names sets to be FOUND ("GD56 - ... Colour", the code leading,
		// asked 23 Aug); worn as the heading that read as a part number on
		// the product page (seen 14 Sept, the Printful shop). The shopper's
		// word and the decorator's word are different jobs, so a set may
		// carry both.
		$bb_head_name = addon_boss_set_shopper_name( $set );
		if ( null !== $bb_collapse_label ) {
			$bb_head_name      = (string) $bb_collapse_label;
			$bb_collapse_label = null;
		}
		// The words a blocked add says AT this group (gauntlet P1: the coral
		// outline alone was wordless). Composed server-side so the copy ships
		// translated, exactly the shrink notice's discipline; the gate script
		// fills the live slot below with it and retires it on answer. Only a
		// group that can actually block carries one: required, or several-of
		// with an at-least bound the server would refuse a short pick against.
		$bb_miss_attr = '';
		if ( ! empty( $set['required'] ) || ( $bb_is_multi && $bb_min > 1 ) ) {
			/* translators: %s: the option set's name, e.g. "Candle scent" */
			$bb_miss_attr = ' data-bb-miss="' . esc_attr( sprintf( __( 'Choose %s first.', 'addon-boss' ), $bb_head_name ) ) . '"';
		}
		echo wp_kses(
			'<div class="' . esc_attr( $group_class ) . '"'
			// Which set this group is, so anything reasoning about sets
			// TOGETHER (the pair counters) can find its two groups without
			// guessing at field names.
			. ' data-set="' . esc_attr( (string) ( $set['id'] ?? '' ) ) . '"'
			. ' data-req="' . ( ! empty( $set['required'] ) ? '1' : '0' ) . '"' . $bb_multi_attrs . $when_attrs . $bb_miss_attr . '>',
			addon_boss_kses_allowed()
		);
		echo wp_kses( addon_boss_standalone_group_head( $bb_head_name, ! empty( $set['required'] ) ), addon_boss_kses_allowed() );
		if ( '' !== $bb_miss_attr ) {
			echo '<p class="bb-gmiss-note" role="status" aria-live="polite" hidden></p>';
		}
		if ( '' !== $bb_sreveal['lock'] ) {
			echo '<div class="bb-lockline">' . esc_html( $bb_sreveal['lock'] ) . '</div>';
		}
		echo '<div class="bb-gwrap"><div class="bb-gbody">';

		// A kind priced off its own panel renders through the module that
		// registered it; the sets list already dropped any kind nothing did.
		if ( 'choices' !== ( $set['kind'] ?? 'choices' ) ) {
			$bb_kcb = addon_boss_option_set_kinds()[ (string) $set['kind'] ]['render'] ?? null;
			if ( is_callable( $bb_kcb ) ) {
				call_user_func( $bb_kcb, $product, $set );
			}
			echo '</div></div></div>';
			continue;
		}

		// The bundle component's shape exactly: a hidden select the form
		// posts natively, driven by the chip row below.
		// The price wording each choice carries, shared by the chip row and the
		// list control below. A set that varies in price states each choice as
		// a WHOLE price (base + that choice's delta), so a dearer size reads
		// as "£26", never "+£2" aimed at the shopper; every choice in the set
		// then shows its price, so no single choice is singled out as the
		// expensive one. A flat set (colours at £0) states nothing; a variable
		// product has no base here, so it keeps the +/- bump. The HTML
		// survives for dual-basis (ex/inc VAT) price plugins; attributes and
		// option text get the plain string.
		//
		// A SEVERAL-OF set never qualifies, however few priced sets the page
		// has: whole prices are the one-of-these-is-your-price story, and its
		// picks STACK, so three chips each dressed as the finished price would
		// promise three different totals for one line. Its choices keep the
		// +delta form, which stays true whatever else is ticked.
		$set_varies = false;
		foreach ( $set['options'] as $o ) {
			if ( 0.0 !== (float) $o['delta'] ) {
				$set_varies = true;
				break;
			}
		}
		// The merchant's Prices on choices setting (Pro) overrides the automatic
		// pick: 'delta' forces the +bump, 'full' forces whole prices wherever a
		// base exists, 'hidden' shows no figures at all. The several-of stacking
		// truth holds under EVERY mode: its picks add up, so its chips never
		// dress as a finished price. Hidden only silences the printed badge;
		// the delta DATA still rides the control, so the total and the charge
		// are untouched by a display choice.
		$bb_spmode     = function_exists( 'addon_boss_grid_size_prices' ) ? addon_boss_grid_size_prices( $product ) : '';
		$absolute      = '' === $bb_spmode || 'hidden' === $bb_spmode
			? ( $set_varies && '' !== $base_disp && $priced_sets <= 1 && ! $bb_is_multi )
			: ( 'full' === $bb_spmode && '' !== $base_disp && ! $bb_is_multi );
		$bb_price_bits = function ( array $opt ) use ( $absolute, $base_disp, $product, $bb_spmode ) {
			$delta     = (float) $opt['delta'];
			$bump_html = '';
			if ( 'hidden' === $bb_spmode ) {
				$bump_html = '';
			} elseif ( $absolute ) {
				// Both halves are already in the display basis, so the seam formats
				// rather than converts a second time.
				$bump_html = addon_boss_money( (float) $base_disp + addon_boss_delta_to_display( $product, $delta ), null, array( 'convert' => false ) );
			} elseif ( 0.0 !== $delta ) {
				$bump_html = addon_boss_money( $delta, $product, array( 'sign' => true ) );
			}
			return array(
				'html'  => $bump_html,
				'text'  => $bump_html ? trim( wp_strip_all_tags( $bump_html ) ) : '',
				// The display-basis delta rides the control as data, so the page
				// total can reconcile product + options without re-deriving.
				'delta' => addon_boss_delta_to_display( $product, $delta ),
			);
		};
		// The reveal region for per-option notes: shown for the chosen option,
		// only rendered when at least one option in the set carries a note.
		// Shared by both controls, so a long set keeps its notes.
		//
		// A several-of set keeps a line PER PICK, each named. One region held
		// one note, so ticking a second choice silently replaced the first
		// one's description: pick Front chest and then Left sleeve and what
		// the chest print actually is disappeared off the screen. Naming them
		// is not decoration either; with several answers up at once, an
		// unattributed sentence belongs to nobody.
		$bb_has_desc = false;
		$bb_sel_desc = '';
		$bb_lines    = array();
		foreach ( $set['options'] as $bb_o ) {
			if ( ! empty( $bb_o['desc'] ) ) {
				$bb_has_desc = true;
			}
			if ( in_array( (string) $bb_o['key'], $bb_sel_keys, true ) && '' !== (string) ( $bb_o['desc'] ?? '' ) ) {
				$bb_sel_desc = (string) $bb_o['desc'];
				$bb_lines[]  = '<span class="bb-opt-noteline"><b>' . esc_html( $bb_o['label'] ) . '</b> '
					. esc_html( (string) $bb_o['desc'] ) . '</span>';
			}
		}
		if ( ! $bb_has_desc ) {
			$bb_note = '';
		} elseif ( $bb_is_multi ) {
			$bb_note = '<div class="bb-opt-note bb-opt-note--many"' . ( $bb_lines ? '' : ' hidden' ) . '>'
				. implode( '', $bb_lines ) . '</div>';
		} else {
			$bb_note = '<div class="bb-opt-note"' . ( '' === $bb_sel_desc ? ' hidden' : '' ) . '>'
				. esc_html( $bb_sel_desc ) . '</div>';
		}

		// D6: past the threshold a chip row sprawls, so the set renders as the
		// same NATIVE list control the price tables use (the platform's own
		// picker, whose type-ahead is the search), unless the merchant pinned
		// the chips for this set. The select is the same posted field wearing
		// the same classes the gate, the answered reading and the miss marking
		// already drive; each option carries the label, the display-basis
		// delta and the note for the scripts, and states its price in words.
		// A several-of long set cannot be a single select, and the platform's
		// multiple select is a control shoppers famously fight, so it renders
		// as plain checkbox rows instead: each row posts the same field
		// natively and carries the same data the page scripts read.
		// A colour or photo set stays as chips no matter how many options it
		// holds. Pouring eighteen colours into a <select> hides the very
		// swatches that make the choice legible, and no merchant should have to
		// find an obscure "keep as chips" switch to stop that happening. The
		// many-options list exists for TEXT options, whose long labels a chip
		// row cannot hold; a visual set wraps its dots or cards down the page and
		// reads fine at any count. So the list gate fires only for a set that is
		// not visual: no uniform swatch row (every option a colour or a name the
		// vocabulary knows) and no photo mapped on any option.
		$bb_set_visual = addon_boss_swatch_row_uniform( $set['options'] );
		if ( ! $bb_set_visual ) {
			foreach ( $set['options'] as $bb_visual_opt ) {
				if ( ! empty( $bb_visual_opt['image_id'] ) ) {
					$bb_set_visual = true;
					break;
				}
			}
		}
		if ( count( $set['options'] ) > ADDON_BOSS_CHIP_LIST_THRESHOLD && empty( $set['pin_chips'] ) && ! $bb_set_visual ) {
			if ( $bb_is_multi ) {
				// Same money voice as the chip row and the dropdown carry, so a
				// module redrawing these labels (per-combination pricing, the VAT
				// toggle) knows whether a tick states a whole price or a bump.
				echo '<div class="bb-checks" data-attribute="' . esc_attr( $field ) . '"'
					. ' data-pmode="' . esc_attr( 'hidden' === $bb_spmode ? 'hidden' : ( $absolute ? 'full' : 'delta' ) ) . '">';
				foreach ( $set['options'] as $opt ) {
					$bb_p = $bb_price_bits( $opt );
					echo '<label class="bb-check-row">'
						. '<input type="checkbox" name="' . esc_attr( $field ) . '[]" value="' . esc_attr( $opt['key'] ) . '"'
						. ( in_array( (string) $opt['key'], $bb_sel_keys, true ) ? ' checked="checked"' : '' )
						. ' data-delta="' . esc_attr( (string) $bb_p['delta'] ) . '"'
						. ' data-label="' . esc_attr( $opt['label'] ) . '"'
						. ( ! empty( $opt['desc'] ) ? ' data-desc="' . esc_attr( $opt['desc'] ) . '"' : '' )
						. '>'
						. '<span class="bb-check-name">' . esc_html( $opt['label'] ) . '</span>'
						. ( '' !== $bb_p['text'] ? ' <span class="bb-chip-delta">' . wp_kses_post( $bb_p['html'] ) . '</span>' : '' )
						. '</label>';
				}
				echo '</div>';
				echo wp_kses( $bb_hint_html . $bb_note . '</div></div></div>', addon_boss_kses_allowed() );
				continue;
			}
			echo '<select name="' . esc_attr( $field ) . '" class="bundle-attr-select bb-tbl-sel bb-list-sel" data-attribute="' . esc_attr( $field ) . '"'
				// How this set states its money (a whole price, a +bump, or
				// nothing), said as data so a module re-pricing choices live
				// (per-combination pricing) redraws them in the same voice.
				. ' data-pmode="' . esc_attr( 'hidden' === $bb_spmode ? 'hidden' : ( $absolute ? 'full' : 'delta' ) ) . '"'
				. ( ! empty( $set['required'] ) ? ' aria-required="true"' : '' ) . '>';
			echo '<option value="">' . esc_html__( 'Choose…', 'addon-boss' ) . '</option>';
			foreach ( $set['options'] as $opt ) {
				$bb_p = $bb_price_bits( $opt );
				echo '<option value="' . esc_attr( $opt['key'] ) . '"' . selected( $opt['key'], $selected, false )
					. ' data-delta="' . esc_attr( (string) $bb_p['delta'] ) . '"'
					. ' data-label="' . esc_attr( $opt['label'] ) . '"'
					. ( ! empty( $opt['desc'] ) ? ' data-desc="' . esc_attr( $opt['desc'] ) . '"' : '' )
					. '>' . esc_html( $opt['label'] . ( '' !== $bb_p['text'] ? ' (' . $bb_p['text'] . ')' : '' ) ) . '</option>';
			}
			echo '</select>';
			echo wp_kses( $bb_note . '</div></div></div>', addon_boss_kses_allowed() );
			continue;
		}

		// The bundle component's shape exactly: a hidden select the form
		// posts natively, driven by the chip row below. A several-of set's is
		// the same select made multiple (its name picks up the array brackets,
		// its data-attribute stays the bare field the chip driver looks up),
		// so every pick posts natively and nothing else changes shape.
		// autocomplete="off" asks the browser not to restore this control on
		// reload (the chips it mirrors come back clean, so a restored select
		// is a pick the screen never shows); the boot reconcile is the
		// backstop for browsers that restore it anyway.
		echo '<select name="' . esc_attr( $field ) . ( $bb_is_multi ? '[]' : '' ) . '" class="bundle-attr-select" data-attribute="' . esc_attr( $field ) . '"'
			. ( $bb_is_multi ? ' multiple' : '' ) . ' autocomplete="off" style="display:none;">';
		if ( ! $bb_is_multi ) {
			echo '<option value=""></option>';
		}
		foreach ( $set['options'] as $opt ) {
			$bb_osel = $bb_is_multi
				? ( in_array( (string) $opt['key'], $bb_sel_keys, true ) ? ' selected="selected"' : '' )
				: selected( $opt['key'], $selected, false );
			echo wp_kses( '<option value="' . esc_attr( $opt['key'] ) . '"' . $bb_osel . '>' . esc_html( $opt['label'] ) . '</option>', addon_boss_kses_allowed() );
		}
		echo '</select>';
		// The swatch shape (D1, display only): square and circle ride the row
		// as a class the stylesheet reads; the photo card rebuilds each
		// chip's own anatomy (the visual filling it, name and price
		// beneath). Same button, same classes the scripts drive, same data
		// attributes, same hidden select: the shape never touches keys,
		// money or the form.
		$bb_shape = addon_boss_option_set_shape( $set );
		// The whole-row rule at render: a row that cannot be uniform in dots
		// renders uniform pills. That now gates STORED swatches too, not just
		// the name guess: a supplier feed (or a merchant mid-edit) can hand
		// one option a colour and its siblings none, and the one dot chip in
		// a row of pills was exactly the mixed-shape defect the sanitiser's
		// comment warns about (the camo cap: one white tile, two bare pills).
		// Storage is untouched; the dot returns the moment the row completes.
		// The card shape keeps every swatch either way: every option cards
		// alike there, so a colour fill mixes no shapes.
		$bb_row_dots = addon_boss_swatch_row_uniform( $set['options'] );
		echo '<div class="bb-chips bb-shape-' . esc_attr( $bb_shape ) . ( $bb_is_multi ? ' bb-multi' : '' ) . '" data-for-select="' . esc_attr( $field ) . '"'
			// How this set states its money (a whole price, a +bump, or
			// nothing), said as data so a module re-pricing choices live
			// (per-combination pricing) redraws them in the same voice.
			. ' data-pmode="' . esc_attr( 'hidden' === $bb_spmode ? 'hidden' : ( $absolute ? 'full' : 'delta' ) ) . '"' . '>';
		foreach ( $set['options'] as $opt ) {
			$swatch = ( $bb_row_dots || 'card' === $bb_shape )
				? ( $opt['swatch'] ? $opt['swatch'] : addon_boss_swatch_from_name( $opt['label'] ) )
				: '';
			$is_sel = in_array( (string) $opt['key'], $bb_sel_keys, true );
			// Per-option stock: read the live count, so a sold-out option renders
			// as a disabled "Sold out" chip up front (the add-to-cart guard stays
			// the backstop) and a low one nudges with what is left. The low
			// threshold is the store's own, the one WooCommerce products use.
			$bb_soldout = false;
			$bb_left    = null;
			$bb_ql      = addon_boss_option_stock_left( (string) ( $set['id'] ?? '' ), (string) $opt['key'] );
			if ( null !== $bb_ql ) {
				$bb_soldout = $bb_ql <= 0;
				if ( ! $bb_soldout ) {
					$bb_low = (int) get_option( 'woocommerce_notify_low_stock_amount', 2 );
					if ( $bb_ql <= max( 1, $bb_low ) ) {
						$bb_left = $bb_ql;
					}
				}
			}
			// The set's display toggle: when off, the numbers stay hidden and a
			// sold-out option is simply not offered (the add-to-cart guard still
			// blocks it). Absent means on, so existing sets are unchanged.
			if ( isset( $set['show_stock'] ) && empty( $set['show_stock'] ) ) {
				if ( $bb_soldout ) {
					continue;
				}
				$bb_left = null;
			}
			$bb_p   = $bb_price_bits( $opt );
			// No live price engine on a plain product page, so the price rides
			// the chip itself; a dot-only chip carries it in the title.
			$bump_html  = $bb_p['html'];
			$bump       = $bb_p['text'];
			$title      = $opt['label'] . ( $bump ? ' ' . $bump : '' );
			$bb_card    = ( 'card' === $bb_shape );
			$classes    = 'bb-chip' . ( $bb_card ? ' bb-chip--card' : ( $swatch ? ' bb-chip--swatch' : '' ) ) . ( $is_sel ? ' is-selected' : '' ) . ( $bb_soldout ? ' bb-chip--soldout' : '' );
			$delta_disp = $bb_p['delta'];
			// A mapped photo rides the chip through the module that owns the
			// swap; a build without one puts no image on any chip, and the
			// stored image id is untouched. The SET goes with it, because
			// whether picking should move the product's own photograph is a
			// property of the set rather than of one choice.
			$img_attrs = (string) apply_filters( 'addon_boss_option_photo_attrs', '', $opt, $product, $set );
			echo wp_kses(
				'<button type="button" class="' . esc_attr( $classes ) . '"'
				. ' data-value="' . esc_attr( $opt['key'] ) . '"'
				. ' data-label="' . esc_attr( $opt['label'] ) . '"'
				. ' data-delta="' . esc_attr( (string) $delta_disp ) . '"'
				. ( ! empty( $opt['desc'] ) ? ' data-desc="' . esc_attr( $opt['desc'] ) . '"' : '' )
				. $img_attrs
				. ' aria-label="' . esc_attr( $title ) . '"'
				. ' title="' . esc_attr( $title ) . '"'
				. ' aria-pressed="' . ( $is_sel ? 'true' : 'false' ) . '"'
				. ( $bb_soldout ? ' disabled aria-disabled="true"' : '' ) . '>',
				addon_boss_kses_allowed()
			);
			if ( $bb_card ) {
				// The photo card: the image fills the chip's visual with the
				// name and price beneath. This is display; the SWAP of the
				// main gallery image stays where its own gate put it, so
				// showing the picture here never fights a variable page's
				// variation gallery. A photo wins; a plain colour fills the
				// same block; an option with neither still cards cleanly.
				// 🔴 'medium', NOT 'woocommerce_thumbnail'. WooCommerce ships
				// with thumbnail cropping set to 1:1, so asking for that size hands
				// back a SQUARE file cut from the middle of whatever the merchant
				// uploaded, before any CSS could be blamed. Two branches hit it from
				// opposite ends: a portrait garment shot arrived as a band of fabric
				// that read like a tee, and David's 640x480 cutting diagram arrived
				// 300x300 with its top and bottom already gone, which is exactly the
				// "cut on the top and bottom" he reported. WordPress's medium is
				// scaled, not cropped, so the whole picture arrives and the card
				// decides how to fit it.
				$bb_card_img = ! empty( $opt['image_id'] ) ? wp_get_attachment_image_url( absint( $opt['image_id'] ), 'medium' ) : '';
				if ( $bb_card_img ) {
					echo '<img class="bb-cc-img" src="' . esc_url( $bb_card_img ) . '" alt="" loading="lazy">';
				} elseif ( $swatch ) {
					echo '<span class="bb-cc-img bb-cc-fill" style="background:' . esc_attr( addon_boss_swatch_css( $opt ) ) . '"></span>';
				}
				echo '<span class="bb-cc-name">' . esc_html( $opt['label'] ) . '</span>';
				if ( $bump ) {
					echo '<span class="bb-chip-delta">' . wp_kses_post( $bump_html ) . '</span>';
				}
			} elseif ( $swatch ) {
				echo '<span class="bb-swatch-dot" style="background:' . esc_attr( addon_boss_swatch_css( $opt ) ) . '"></span>';
				// The gallery anatomy: the name (and the price where one is
				// carried) stands visibly beneath the swatch. A hover tooltip
				// was the only place they lived, which is no place at all on
				// a touch screen, and a priced material hid its price.
				echo '<span class="bb-sw-name">' . esc_html( $opt['label'] ) . '</span>';
				if ( $bump ) {
					echo '<span class="bb-chip-delta">' . wp_kses_post( $bump_html ) . '</span>';
				}
			} else {
				echo esc_html( $opt['label'] );
				if ( $bump ) {
					echo ' <span class="bb-chip-delta">' . wp_kses_post( $bump_html ) . '</span>';
				}
			}
			if ( $bb_soldout ) {
				echo '<span class="bb-chip-stock bb-chip-stock--out">' . esc_html__( 'Sold out', 'addon-boss' ) . '</span>';
			} elseif ( null !== $bb_left ) {
				/* translators: %d: units of this option still available */
				echo '<span class="bb-chip-stock bb-chip-stock--low">' . esc_html( sprintf( _n( 'Only %d left', 'Only %d left', $bb_left, 'addon-boss' ), $bb_left ) ) . '</span>';
			}
			echo '</button>';
		}
		echo wp_kses( '</div>' . $bb_hint_html . $bb_note . '</div></div></div>', addon_boss_kses_allowed() );
	}

	// Whatever a module offers on this surface beyond the sets and fields
	// (the artwork upload box) renders here, after the sets, through the
	// module's own listener.
	do_action( 'addon_boss_standalone_options_extra', $product, $sets, $prefill );

	// The receipt the category calls a breakdown: per-source lines (the base
	// with its size where one is measured, each fee-bearing choice, repeats
	// as "N × thing") above an explicit Total row, live with every pick, so
	// the number on the chip, the number in the receipt and the number in
	// the cart are one story. The server paints the first state (a simple
	// product arrives with its base line and total filled, no script
	// needed); the script rebuilds the lines from the same per-control walk
	// that computes the figure. On a variable page the whole receipt joins
	// the moment a variation is chosen.
	$bb_rcpt_name = $product->get_name();
	// HELD, not printed here. A receipt is a summary, so it belongs after
	// everything it summarises. Printed inline it came out at priority 10,
	// which put it ABOVE the decoration panel that renders at 14: the page
	// asked a shopper to total up before it had finished asking what they
	// wanted. Held now and printed on a late hook, so any module adding to
	// this surface lands above the total instead of below it.
	ob_start();
	echo '<div class="bb-standalone-total" data-base="' . esc_attr( $base_disp ) . '"'
		. ' data-name="' . esc_attr( $bb_rcpt_name ) . '"'
		/* translators: 1: how many are being bought, 2: what each one is. e.g. "3 × Team shirt" */
		. ' data-qty-tpl="' . esc_attr__( '%1$s × %2$s', 'addon-boss' ) . '"'
		. ' data-symbol="' . esc_attr( get_woocommerce_currency_symbol() ) . '"'
		. ' data-decimals="' . esc_attr( (string) wc_get_price_decimals() ) . '"'
		// The whole money format, not just the symbol: a Euro store writes
		// "155,00 €", and a receipt answering it with "€155.00" reads like a
		// different shop's till.
		. ' data-ds="' . esc_attr( wc_get_price_decimal_separator() ) . '"'
		. ' data-ts="' . esc_attr( wc_get_price_thousand_separator() ) . '"'
		. ' data-pos="' . esc_attr( get_option( 'woocommerce_currency_pos', 'left' ) ) . '"'
		// The shop's display basis rides in with the toggle attributes below,
		// which is the only place it is ever read: with no toggle plugin there is
		// one basis on the page and nothing to convert anything to.
		. addon_boss_wts_attrs( $product ) // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- escaped within.
		. ( '' === $base_disp ? ' hidden' : '' ) . '>'
		. '<div class="bb-st-lines">'
		. ( '' !== $base_disp
			? '<div class="bb-st-line"><span class="bb-st-line-n">' . esc_html( $bb_rcpt_name ) . '</span><span class="bb-st-line-a">' . wp_kses_post( addon_boss_money( (float) $base_disp, null, array( 'convert' => false ) ) ) . '</span></div>'
			: '' )
		. '</div>'
		// "Grand total", not "Total": the receipt above it already shows a price
		// against the product and against each option, so a bare "Total" reads
		// like one more line rather than the sum of all of them.
		. '<div class="bb-st-row"><span class="bb-st-lab">' . esc_html__( 'Grand total', 'addon-boss' ) . '</span>'
		. '<span class="bb-st-sum"><b class="bb-st-total">' . ( '' !== $base_disp ? wp_kses_post( addon_boss_money( (float) $base_disp, null, array( 'convert' => false ) ) ) : '' ) . '</b> <span class="bb-st-note"></span></span></div>'
		. '<span class="bb-st-tpl-total" hidden>' . /* translators: %s: the total price */ esc_attr__( '%s total', 'addon-boss' ) . '</span>'
		. '<span class="bb-st-tpl-opts" hidden>' . /* translators: %s: the options subtotal price */ esc_attr__( '+ %s options', 'addon-boss' ) . '</span>'
		. '</div>';
	addon_boss_standalone_receipt_held( (string) ob_get_clean() );
	echo '</div>';
	addon_boss_money_product( $bb_money_was ); // the panel is done; hand the basis back.
}

/**
 * The receipt's markup, held between the options render and the late hook
 * that prints it. A getter with no argument; pass a string to store one.
 *
 * @param string|null $set Markup to hold, or null to read and clear.
 * @return string The held markup; '' once read.
 */
function addon_boss_standalone_receipt_held( ?string $set = null ): string {
	static $held = '';
	if ( null !== $set ) {
		$held = $set;
		return '';
	}
	$out  = $held;
	$held = '';
	return $out;
}

add_action( 'woocommerce_before_add_to_cart_button', 'addon_boss_print_standalone_receipt', 20 );

/**
 * Print the held receipt, last on this surface.
 *
 * Priority 20 leaves the whole 10-to-19 band for blocks that a shopper is
 * still ANSWERING: the option sets and fields at 10, the print areas at 14,
 * and whatever a later module adds. The sum comes after the questions.
 */
function addon_boss_print_standalone_receipt(): void {
	$bb_held = addon_boss_standalone_receipt_held();
	if ( '' === $bb_held ) {
		return;
	}
	// Its own wrapper, because the options panel has closed by now and the
	// receipt's styling is scoped to that class.
	echo '<div class="bb-standalone-options bb-so-receipt">' . $bb_held . '</div>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- built and escaped above.
}

/**
 * The chip driver as a STRING for the script loader. bundle.js only boots
 * inside a bundle form and no BundleBoss script loads on a plain product
 * page, so this self-contained binding mirrors its chip-to-select contract
 * (same markup, same toggle-off semantics, change event for themes that
 * listen). It attaches via wp_add_inline_script in the enqueue, because
 * printing it inline into hook output let block themes content-filter it
 * into a syntax error.
 */
function addon_boss_standalone_boot_js(): string {
	ob_start();
	try {
	?>
	( function () {
		<?php echo addon_boss_money_round_js(); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- generated JS, no variables. ?>
		// Clearing a group's own pick keeps the page honest with the server,
		// The hidden select is the form carrier the chips drive, and a browser
		// restores form controls on reload while the chips' classes come back
		// clean. Left alone, the restored select posts (and prices) a pick the
		// screen never showed, and the exclusion rules grey partners of a
		// choice nobody made. The chips are the control, so the select is made
		// to agree with them at boot and again after the browser's late
		// restore; only when a ghost was actually cleared does the select say
		// change, so the receipt and the rules re-settle.
		function bbChipReconcile() {
			document.querySelectorAll( ".bb-standalone-options .bb-chips[data-for-select]" ).forEach( function ( wrap ) {
				var group = wrap.closest( ".bb-attr-group" );
				var sel   = group ? group.querySelector( "select[data-attribute=\"" + wrap.dataset.forSelect + "\"]" ) : null;
				if ( ! sel ) { return; }
				var keys = [];
				wrap.querySelectorAll( ".bb-chip.is-selected" ).forEach( function ( c ) { keys.push( c.getAttribute( "data-value" ) || "" ); } );
				var moved = false;
				for ( var i = 0; i < sel.options.length; i++ ) {
					var want = sel.multiple
						? keys.indexOf( sel.options[ i ].value ) !== -1
						: sel.options[ i ].value === ( keys[0] || "" );
					if ( sel.options[ i ].selected !== want ) { sel.options[ i ].selected = want; moved = true; }
				}
				if ( moved ) { sel.dispatchEvent( new Event( "change", { bubbles: true } ) ); }
			} );
		}
		bbChipReconcile();
		window.addEventListener( "load", bbChipReconcile );
		// The restore has no event of its own and can land after load; two
		// quiet retries cover it, and agreeing is free.
		setTimeout( bbChipReconcile, 400 );
		setTimeout( bbChipReconcile, 1200 );
		// which discards a hidden group's value anyway. A module that decides a
		// group must clear (the reveal evaluator hiding one) asks through the
		// bb-clear-group event rather than reaching into this driver.
		function bbClearGroup( group ) {
			var select = group.querySelector( 'select.bundle-attr-select' );
			if ( select && select.multiple ) {
				Array.prototype.forEach.call( select.options, function ( o ) { o.selected = false; } );
			} else if ( select && select.value ) { select.value = ''; }
			group.querySelectorAll( '.bb-chip.is-selected' ).forEach( function ( c ) {
				c.classList.remove( 'is-selected' );
				c.setAttribute( 'aria-pressed', 'false' );
			} );
			// A several-of long set's checkbox rows blank the same way.
			group.querySelectorAll( '.bb-checks input:checked' ).forEach( function ( c ) { c.checked = false; } );
			// A field group blanks its own input so a hidden field submits
			// nothing (the server treats it as inert regardless; the page
			// just stays honest and the fee leaves the live total).
			if ( group.classList.contains( 'bb-field-group' ) ) {
				group.querySelectorAll( '[name^="bb_pf"]' ).forEach( function ( el ) {
					if ( 'checkbox' === el.type || 'radio' === el.type ) { el.checked = false; }
					else { el.value = ''; }
				} );
			}
			// Whatever a module keeps inside this group (typed dimensions, a live
			// charge it computed) is its own to clear; the event says now is the
			// moment.
			group.dispatchEvent( new CustomEvent( 'bb-group-clear', { bubbles: true } ) );
		}
		document.addEventListener( 'bb-clear-group', function ( e ) {
			if ( e.target && e.target.classList ) { bbClearGroup( e.target ); }
		} );
		// A refused pick points at the sentence that already states the bound:
		// the hint takes the accent for a moment, and its aria-live region has
		// just been re-read, so the answer arrives at the control, kindly.
		function bbHintRefuse( group ) {
			var hint = group.querySelector( '.bb-multi-hint' );
			if ( ! hint ) { return; }
			hint.classList.add( 'is-refused' );
			setTimeout( function () { hint.classList.remove( 'is-refused' ); }, 1200 );
		}
		// The note region, rebuilt from what is CHOSEN rather than from what
		// was just clicked. A several-of set keeps a line per pick, each
		// named: one region holding one note meant a second tick silently
		// wiped the first one's description off the page.
		function bbNotes( group ) {
			var note = group.querySelector( '.bb-opt-note' );
			if ( ! note ) { return; }
			var many = note.classList.contains( 'bb-opt-note--many' );
			var on   = group.querySelectorAll( '.bb-chip.is-selected, .bb-checks input:checked' );
			if ( ! many ) {
				// Pick-one: the chosen option's note, exactly as before. A
				// select-driven long set answers through its own handler.
				var one = on[ on.length - 1 ];
				var txt = one ? ( one.dataset.desc || '' ) : '';
				note.textContent = txt;
				note.hidden = ( '' === txt );
				return;
			}
			var html = '';
			Array.prototype.forEach.call( on, function ( el ) {
				var d = el.dataset.desc || '';
				if ( ! d ) { return; }
				var line = document.createElement( 'span' );
				line.className = 'bb-opt-noteline';
				var b = document.createElement( 'b' );
				b.textContent = el.dataset.label || '';
				line.appendChild( b );
				line.appendChild( document.createTextNode( ' ' + d ) );
				html += line.outerHTML;
			} );
			note.innerHTML = html;
			note.hidden = ( '' === html );
		}
		// ── Pairs: a colour AND a size ────────────────────────────────────
		// A product whose counts are kept per combination hands its table to
		// the page. Picking a colour then re-reads every size against THAT
		// colour, so the size the supplier has none of in it goes dim at the
		// moment of the pick. With nothing picked yet a choice is dimmed only
		// when it is gone in every combination, because it is still available
		// in some of them and dimming it would be a lie.
		//
		// A courtesy, not the rule: the server counts the same pairs again on
		// add, and it is the server that decides what a shopper buys.
		var bbPairsRoot = document.querySelector( '.bb-standalone-options[data-bb-pairs]' );
		var bbPairs     = null;
		if ( bbPairsRoot ) {
			try { bbPairs = JSON.parse( bbPairsRoot.getAttribute( 'data-bb-pairs' ) ); } catch ( err ) { bbPairs = null; }
		}

		function bbPairGroups() {
			var out = {};
			if ( ! bbPairs || ! bbPairs.sets ) { return out; }
			bbPairs.sets.forEach( function ( sid ) {
				var g = bbPairsRoot.querySelector( '.bb-attr-group[data-set="' + sid + '"]' );
				if ( g ) { out[ sid ] = g; }
			} );
			return out;
		}

		function bbPairPicked( group ) {
			var chip = group ? group.querySelector( '.bb-chip.is-selected' ) : null;
			if ( chip ) { return chip.dataset.value || ''; }
			var sel = group ? group.querySelector( 'select.bundle-attr-select' ) : null;
			return sel && sel.value ? sel.value : '';
		}

		function bbPairsApply() {
			if ( ! bbPairs || ! bbPairs.sets || bbPairs.sets.length < 2 ) { return; }
			var groups = bbPairGroups();
			var sets   = bbPairs.sets.filter( function ( sid ) { return groups[ sid ]; } );
			if ( sets.length < 2 ) { return; }

			sets.forEach( function ( sid, idx ) {
				var others = sets.filter( function ( o ) { return o !== sid; } );
				groups[ sid ].querySelectorAll( '.bb-chip' ).forEach( function ( chip ) {
					var key   = chip.dataset.value || '';
					var any   = false;   // available in at least one live combination
					var known = false;   // this choice appears in the table at all
					Object.keys( bbPairs.q ).forEach( function ( pair ) {
						var parts = pair.split( '|' );
						if ( parts[ idx ] !== key ) { return; }
						// Every other set that HAS a pick must match it; a set
						// with no pick yet matches anything.
						var fits = true;
						others.forEach( function ( o ) {
							var oi = sets.indexOf( o );
							var on = bbPairPicked( groups[ o ] );
							if ( on && parts[ oi ] !== on ) { fits = false; }
						} );
						if ( ! fits ) { return; }
						known = true;
						if ( bbPairs.q[ pair ] > 0 ) { any = true; }
					} );
					// A pair the table does not hold is a combination the supplier
					// does not make, so it is dimmed exactly like an empty one:
					// White stopping at XXL is as real as White XXL selling out.
					// Only a product holding no table at all leaves chips alone.
					if ( ! known && ! bbPairs.q ) { return; }
					if ( ! known && ! Object.keys( bbPairs.q ).length ) { return; }
					chip.classList.toggle( 'bb-chip--soldout', ! any );
					if ( any ) {
						chip.removeAttribute( 'disabled' );
						chip.removeAttribute( 'aria-disabled' );
					} else {
						chip.setAttribute( 'disabled', 'disabled' );
						chip.setAttribute( 'aria-disabled', 'true' );
						// A pick that has just become impossible cannot stand:
						// leaving it selected would send a shopper to a button
						// that refuses them.
						if ( chip.classList.contains( 'is-selected' ) ) {
							chip.classList.remove( 'is-selected' );
							chip.setAttribute( 'aria-pressed', 'false' );
							var sel = groups[ sid ].querySelector( 'select.bundle-attr-select' );
							if ( sel ) { sel.value = ''; sel.dispatchEvent( new Event( 'change', { bubbles: true } ) ); }
						}
					}
				} );
			} );
		}

		if ( bbPairs ) {
			bbPairsApply();
			document.addEventListener( 'bb-pick-change', bbPairsApply );
		}

		document.addEventListener( 'click', function ( e ) {
			var chip = e.target.closest ? e.target.closest( '.bb-standalone-options .bb-chip' ) : null;
			if ( ! chip ) { return; }
			var wrap   = chip.closest( '.bb-chips' );
			var group  = chip.closest( '.bb-attr-group' );
			var select = group && wrap ? group.querySelector( 'select[data-attribute="' + wrap.dataset.forSelect + '"]' ) : null;
			if ( ! select ) { return; }
			if ( '1' === ( group.dataset.multi || '' ) ) {
				// Several-of: each chip toggles for itself and the picks
				// accumulate. Going past the up-to bound is refused HERE, at
				// the chip, with the hint's own words; the server enforces
				// the same bound regardless.
				var on  = chip.classList.contains( 'is-selected' );
				var max = parseInt( group.dataset.max, 10 ) || 0;
				if ( ! on && max > 0 && wrap.querySelectorAll( '.bb-chip.is-selected' ).length >= max ) {
					bbHintRefuse( group );
					return;
				}
				chip.classList.toggle( 'is-selected', ! on );
				chip.setAttribute( 'aria-pressed', on ? 'false' : 'true' );
				var onKeys = [];
				wrap.querySelectorAll( '.bb-chip.is-selected' ).forEach( function ( c ) { onKeys.push( c.dataset.value ); } );
				Array.prototype.forEach.call( select.options, function ( o ) { o.selected = onKeys.indexOf( o.value ) >= 0; } );
			} else if ( chip.classList.contains( 'is-selected' ) ) {
				chip.classList.remove( 'is-selected' );
				chip.setAttribute( 'aria-pressed', 'false' );
				select.value = '';
			} else {
				wrap.querySelectorAll( '.bb-chip' ).forEach( function ( c ) {
					c.classList.remove( 'is-selected' );
					c.setAttribute( 'aria-pressed', 'false' );
				} );
				chip.classList.add( 'is-selected' );
				chip.setAttribute( 'aria-pressed', 'true' );
				select.value = chip.dataset.value;
			}
			bbNotes( group );
			select.dispatchEvent( new Event( 'change', { bubbles: true } ) );
			// Modules that react to a pick (a reveal chain re-evaluating) listen
			// for this rather than reaching into the driver.
			group.dispatchEvent( new CustomEvent( 'bb-pick-change', { bubbles: true, detail: { chip: chip } } ) );
			bbTotal();
		} );
		// A several-of long set's checkbox rows: a tick is a pick, the up-to
		// bound refuses the tick that would pass it, and the same pick event
		// fires for the modules.
		document.addEventListener( 'change', function ( e ) {
			var c = e.target;
			if ( ! c || ! c.matches || ! c.matches( '.bb-standalone-options .bb-checks input' ) ) { return; }
			var group = c.closest( '.bb-attr-group' );
			if ( ! group ) { return; }
			if ( c.checked ) {
				var max = parseInt( group.dataset.max, 10 ) || 0;
				if ( max > 0 && group.querySelectorAll( '.bb-checks input:checked' ).length > max ) {
					c.checked = false;
					bbHintRefuse( group );
					return;
				}
			}
			bbNotes( group );
			group.dispatchEvent( new CustomEvent( 'bb-pick-change', { bubbles: true, detail: {} } ) );
			bbTotal();
		} );
		// A long set's list control (D6) is its own select: a change is the
		// pick. The note follows the chosen option exactly as it follows a
		// chip, the same pick event fires for the modules, and the total
		// refigures.
		document.addEventListener( 'change', function ( e ) {
			var s = e.target;
			if ( ! s || ! s.matches || ! s.matches( '.bb-standalone-options select.bb-list-sel' ) ) { return; }
			var group  = s.closest( '.bb-attr-group' );
			var noteEl = group ? group.querySelector( '.bb-opt-note' ) : null;
			if ( noteEl ) {
				var o = s.selectedOptions && s.selectedOptions[ 0 ];
				var t = ( s.value && o ) ? ( o.dataset.desc || '' ) : '';
				noteEl.textContent = t;
				noteEl.hidden = ( '' === t );
			}
			if ( group ) { group.dispatchEvent( new CustomEvent( 'bb-pick-change', { bubbles: true, detail: {} } ) ); }
			bbTotal();
		} );
		// The reconciliation: product plus options equals total, one story
		// from the top of the page to the cart. The base is the product's
		// display price on a simple, the chosen variation's on a variable.
		var bbVarBase = null;
		function bbFmt( box, amount ) {
			// The merchant's own money format, the same recipe the printed
			// prices use: separators, decimals and symbol position, so the
			// receipt's figures read exactly like the rest of the page.
			var neg = amount < 0;
			// Each of these is always printed, so an empty value is the
			// merchant's setting, not a missing attribute. Two of those
			// settings are falsy: a zero-decimal currency (SEK, JPY, HUF,
			// ISK) and a blank thousands separator. An `||` default
			// overrules precisely the merchants who chose them.
			var dec = parseInt( box.dataset.decimals, 10 );
			if ( ! isFinite( dec ) || dec < 0 ) { dec = 2; }
			var ts  = undefined === box.dataset.ts ? ',' : box.dataset.ts;
			var ds  = undefined === box.dataset.ds ? '.' : box.dataset.ds;
			var s   = Math.abs( window.bbMoneyRound( amount, dec ) ).toFixed( dec );
			var parts = s.split( '.' );
			parts[ 0 ] = parts[ 0 ].replace( /\B(?=(\d{3})+(?!\d))/g, ts );
			s = parts.join( ds );
			var sym = box.dataset.symbol || '', out;
			switch ( box.dataset.pos ) {
				case 'right': out = s + sym; break;
				case 'left_space': out = sym + ' ' + s; break;
				case 'right_space': out = s + ' ' + sym; break;
				default: out = sym + s;
			}
			return ( neg ? '-' : '' ) + out;
		}
		// VAT-toggle compatibility (Tax Switch for WooCommerce and its kind):
		// paint the toggle plugin's own dual-basis markup so a computed total
		// answers the ex/inc switch, exactly as the bundle total does. Without
		// it the number froze in one basis after every repaint.
		function bbToggleActive() {
			if ( window.wtsCompatibilityObject ) { return true; }
			var b = document.querySelector( ".bb-standalone-total" );
			return !! ( b && "1" === b.dataset.wts ); // the server said the toggle plugin runs here.
		}
		function bbEscape( s ) { var d = document.createElement( "i" ); d.textContent = String( s ); return d.innerHTML; }
		function bbOtherBasis( box, amount ) {
			// Our own server-computed rate first: the toggle plugin's compat
			// object only exists where one of its shims loads, and a page can
			// be covered in its dual prices without one (see data-wts).
			var rate = parseFloat( box.dataset.wtsRate ) || parseFloat( ( window.wtsCompatibilityObject || {} ).baseTaxRate ) || 0;
			var f    = 1 + rate / 100;
			return ( "incl" === box.dataset.taxBasis ) ? amount / f : amount * f;
		}
		<?php echo addon_boss_wts_reader_js(); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- a literal script fragment this plugin wrote. ?>
		function bbInclActive() {
			var box = document.querySelector( ".bb-standalone-total" );
			return bbWtsIncl( box ? ( box.dataset.taxBasis || "excl" ) : "excl" );
		}
		function bbMoneyHTML( box, amount ) {
			var incl   = ( "incl" === box.dataset.taxBasis ) ? amount : bbOtherBasis( box, amount );
			var excl   = ( "incl" === box.dataset.taxBasis ) ? bbOtherBasis( box, amount ) : amount;
			var inclOn = bbInclActive(); // hide the off-basis side with wts-inactive, not just mark the shown side active (Tax Switch hides .wts-inactive)
			return "<span class=\"wts-price-container\"><span class=\"wts-price-wrapper\">"
				+ "<span class=\"wts-price-excl " + ( inclOn ? "wts-inactive" : "wts-active" ) + "\">" + bbEscape( bbFmt( box, excl ) ) + "</span>"
				+ "<span class=\"wts-price-incl " + ( inclOn ? "wts-active" : "wts-inactive" ) + "\">" + bbEscape( bbFmt( box, incl ) ) + "</span>"
				+ "</span></span>";
		}
		// Write money into an element; template may carry one %s ("%s total").
		// Plain textContent with no toggle plugin, dual markup with one.
		function bbSetMoney( el, box, amount, template ) {
			if ( ! el ) { return; }
			if ( ! bbToggleActive() ) {
				var text = bbFmt( box, amount );
				el.textContent = template ? template.replace( "%s", text ) : text;
				return;
			}
			var html = bbMoneyHTML( box, amount );
			el.innerHTML = template ? bbEscape( template ).replace( "%s", html ) : html;
		}
		// wdevs-tax-switch-changed: the toggle event for late painters. Re-point
		// every dual-basis price we drew (total, and the peek copy of it) to the
		// chosen side; both bases are already in the markup so we only move the
		// active/inactive classes, idempotent with the plugin document-wide pass.
		function bbRepointTax( incl ) {
			document.querySelectorAll( ".wts-price-wrapper" ).forEach( function ( w ) {
				var i = w.querySelector( ".wts-price-incl" ), x = w.querySelector( ".wts-price-excl" );
				if ( i ) { i.classList.toggle( "wts-active", incl ); i.classList.toggle( "wts-inactive", ! incl ); }
				if ( x ) { x.classList.toggle( "wts-active", ! incl ); x.classList.toggle( "wts-inactive", incl ); }
			} );
		}
		// The labels a shopper reads BEFORE picking: "Hat box (+£9.00)" in a
		// dropdown, the badge on a chip or a tick row. The server writes them
		// once, in the shop's own basis, so on their own they cannot answer the
		// VAT toggle: the dropdown went on promising +£9.00 while the receipt
		// line under it, which does answer, charged £10.80. Two figures for one
		// choice, on one screen.
		//
		// The dual-basis pair cannot be planted here the way it is in the total:
		// an <option> holds TEXT, not elements, so there is nowhere to hang the
		// toggle plugin's incl/excl spans. The figure is recomputed instead from
		// the data-delta already riding every control in the shop's basis, in
		// the voice data-pmode names (a whole price, or a bump).
		//
		// A badge the toggle plugin already turned into its own pair is left
		// alone: it answers the switch by itself, and overwriting it with flat
		// text would take that away.
		function bbSyncChoiceFees( incl ) {
			var box = document.querySelector( ".bb-standalone-total" );
			if ( ! box || ! bbToggleActive() ) { return; }
			var shopIncl = "incl" === ( box.dataset.taxBasis || "excl" );
			var base     = parseFloat( box.dataset.base );
			var flip     = incl !== shopIncl;
			// Document-wide, not just the option-set root: a personalisation
			// field is drawn by its own renderer and can sit outside it. The
			// early return above already confines this to a standalone product
			// page carrying our receipt.
			document.querySelectorAll( "[data-delta]" ).forEach( function ( el ) {
				// An <option> asks its own <select> and nothing else. Falling
				// back to the group would send a personalisation dropdown, which
				// sits outside every attribute group, to the whole document, and
				// there it borrowed the voice of whichever priced set happened to
				// render first: a "+£3.00" printed as a whole price.
				// The control's OWN host first, walking up. Searching a group for
				// the first priced thing in it answers correctly only while a group
				// holds one; a colour field beside a chip row borrowed the chip
				// row's voice. Walking up asks the element which host it is in,
				// which is the question that was meant all along.
				var host = "OPTION" === el.tagName
					? el.closest( "select" )
					: ( el.closest( "[data-pmode]" )
						|| ( el.closest( ".bb-attr-group" ) || document )
							.querySelector( ".bb-chips[data-pmode], .bb-checks[data-pmode], select[data-pmode], .bb-price-chips[data-pmode]" ) );
				var pmode = ( host && host.dataset ) ? ( host.dataset.pmode || "delta" ) : "delta";
				if ( "hidden" === pmode ) { return; }
				var d = parseFloat( el.dataset.delta );
				if ( isNaN( d ) ) { return; }
				if ( flip ) { d = bbOtherBasis( box, d ); }
				var text = "";
				if ( "full" === pmode && ! isNaN( base ) ) {
					text = bbFmt( box, ( flip ? bbOtherBasis( box, base ) : base ) + d );
				} else if ( "delta" === pmode && 0 !== d ) {
					text = ( d > 0 ? "+" : "-" ) + bbFmt( box, Math.abs( d ) );
				} else if ( "whole" === pmode ) {
					// A suggested amount stands on its own: no sign, no base
					// added. The chip said GBP 2.00 while pressing it put GBP
					// 2.40 on the receipt beside it, which is the two-figures
					// -for-one-choice fault this whole function exists to end.
					text = bbFmt( box, d );
				}
				if ( "OPTION" === el.tagName ) {
					el.textContent = ( el.dataset.label || el.textContent.replace( /\s*\(.*\)\s*$/, "" ) )
						+ ( text ? " (" + text + ")" : "" );
					return;
				}
				// A suggested amount IS its own label, so it has no badge beside
				// it to write into: the figure is the whole button. Where there IS
				// a badge, the words around it are the merchant's ("Minimum %s")
				// and only the figure inside may be rewritten.
				if ( "whole" === pmode ) {
					var only = el.querySelector && el.querySelector( ".bb-chip-delta" );
					if ( only ) {
						if ( text && ! only.querySelector( ".wts-price-wrapper" ) ) { only.textContent = text; }
						return;
					}
					if ( text && ! el.querySelector( ".wts-price-wrapper" ) ) { el.textContent = text; }
					return;
				}
				var badge = ( el.querySelector && el.querySelector( ".bb-chip-delta" ) )
					|| ( el.parentElement && el.parentElement.querySelector( ".bb-chip-delta" ) );
				if ( ! badge || badge.querySelector( ".wts-price-wrapper" ) ) { return; }
				badge.textContent = text;
				badge.hidden = "" === text;
			} );
			// A searchable dropdown keeps a COPY of its chosen option's text in a
			// visible input, and rewriting the <option> behind it does not touch
			// that copy. Say the repaint is finished so those boxes re-read it,
			// or the one figure a shopper is actually looking at is the one that
			// never moves.
			try { document.dispatchEvent( new CustomEvent( "bb-choice-fees-repainted" ) ); } catch ( e ) {}
		}
		document.addEventListener( "wdevs-tax-switch-changed", function ( ev ) {
			var d = ( ev && ev.detail ) || {};
			var incl = typeof d.displayIncludingTax === "boolean" ? d.displayIncludingTax
				: typeof d.displayIncludingVat === "boolean" ? d.displayIncludingVat
				: bbInclActive();
			bbRepointTax( incl );
			bbSyncChoiceFees( incl );
		} );
		// On arrival too: the toggle remembers its answer per browser, so a
		// shopper who chose inc-VAT last visit lands on a page the server drew
		// in the shop's basis. Same reason the totals reconcile on boot.
		if ( "loading" === document.readyState ) {
			document.addEventListener( "DOMContentLoaded", function () { bbSyncChoiceFees( bbInclActive() ); } );
		} else {
			bbSyncChoiceFees( bbInclActive() );
		}
		// The quantity being bought, read from the THEME'S OWN field (the same
		// selector the repeat script follows), because a second quantity control
		// of ours is how these plugins break on page builders. The live total
		// multiplies exactly as the cart will: at qty 3 a page quoting one
		// unit's figure while the cart adds three units' worth is the
		// category's classic one-star trigger.
		function bbQty() {
			var root = document.querySelector( '.bb-standalone-options' );
			var form = ( root && root.closest ) ? root.closest( 'form' ) : null;
			if ( ! form ) { form = document.querySelector( 'form.cart' ); }
			var q = form ? form.querySelector( 'input.qty, input[name="quantity"]' ) : null;
			return q ? Math.max( 1, parseInt( q.value, 10 ) || 1 ) : 1;
		}
		// A field restricted to certain variations is INERT for the rest: the
		// server never requires it and never charges it, so the page must not
		// gate on it, count it or price it either. No variation chosen yet
		// means the field stands, the server's own rule.
		function bbVarInert( group ) {
			var only = ( group.dataset.bbVars || '' ).trim();
			if ( ! only ) { return false; }
			var form = group.closest ? group.closest( 'form' ) : null;
			var vin  = form ? form.querySelector( 'input[name="variation_id"]' ) : null;
			var vid  = vin ? parseInt( vin.value, 10 ) || 0 : 0;
			if ( vid <= 0 ) { return false; }
			return ( ',' + only + ',' ).indexOf( ',' + vid + ',' ) < 0;
		}
		// A money cell for one receipt line: plain text normally, the VAT
		// toggle plugin's dual-basis markup when one is on, exactly as
		// bbSetMoney paints the total itself.
		function bbMoneyCell( box, amount ) {
			return bbToggleActive() ? bbMoneyHTML( box, amount ) : bbEscape( bbFmt( box, amount ) );
		}
		// The label a fee-bearing FIELD control lines under: the field's own
		// label (its first text node, before the Required word and the
		// counter), or the tick-box's caption.
		function bbFeeLabel( el ) {
			var f = el.closest ? el.closest( '.bb-addon-field' ) : null;
			if ( ! f ) { return ''; }
			var lab = f.querySelector( '.bb-addon-label' ) || f.querySelector( '.bb-addon-check span' );
			if ( ! lab ) { return ''; }
			var n = lab.childNodes[ 0 ];
			return ( ( n && 3 === n.nodeType ) ? n.nodeValue : ( lab.textContent || '' ) ).trim();
		}
		// What a repeatable field's instances are collectively called, read
		// off the wrap's own naming pattern ("Engraving %d" -> "Engraving"),
		// so the receipt speaks the merchant's word for the thing.
		function bbRepThing( wrap ) {
			return ( wrap.getAttribute( 'data-bb-repeat-label' ) || '' ).replace( '%d', '' ).trim();
		}
		function bbTotal() {
			var box = document.querySelector( '.bb-standalone-total' );
			if ( ! box ) { return; }
			// Two pots, exactly the split the price seam makes: per-unit money
			// multiplies by the quantity; whole-line money joins the total once
			// however many are bought (the server spreads it across the units,
			// so per-unit times quantity lands back on this same figure).
			// Alongside the figure, the same walk now collects the receipt's
			// per-source lines, so the breakdown and the total are one pass
			// and can never disagree.
			var opts = 0;
			var flat = 0;
			var perLines  = []; // per-unit sources: multiply with the quantity.
			var flatLines = []; // whole-line sources: once for the line.
			var repAgg    = []; // repeatable fields, aggregated per wrap.
			var sizeTexts  = []; // a measured or table size joins the BASE line.
			var sizeCharge = 0;
			var zeroPicks  = []; // free picks (a colour, a size) name the BASE line.
			// FIELD answers that cost nothing. A free CHIP joins the base line
			// ("Team shirt, M, Navy") because a colour is part of what the thing
			// IS; a field's answer is not. A delivery date, a name to engrave and
			// a quantity are things the shopper decided, and a receipt that lists
			// only what costs money leaves them off the page entirely: a rush
			// charge then reads as "Sooner than usual, 40.00" with nothing saying
			// which day it bought. These get their own lines, with no money in
			// the amount column.
			var freeLines  = [];
			// The human answer behind a control: the words a shopper would use,
			// not the posted value. A date input holds ISO, a select holds a
			// slug, and neither is what they picked as far as they are concerned.
			function bbFreeAnswer( el ) {
				if ( 'SELECT' === el.tagName ) {
					var o = el.selectedOptions && el.selectedOptions[ 0 ];
					return o ? String( o.textContent || '' ).replace( /\s*\([^)]*\)\s*$/, '' ).trim() : '';
				}
				if ( 'radio' === el.type || 'checkbox' === el.type ) {
					var lab = el.closest ? el.closest( 'label' ) : null;
					// A ticked box says everything by being ticked; its label is
					// already the line's name, so it needs no second word.
					return 'checkbox' === el.type ? '' : ( lab ? String( lab.textContent || '' ).replace( /\s*\([^)]*\)\s*$/, '' ).trim() : String( el.value || '' ) );
				}
				// A MEASURED FIELD STORES ITS AREA, and the area is not the answer.
				// A 124 by 123 plaque was read back as "Plaque size 15252": a number
				// the shopper never typed, that no workshop can cut to, and that
				// changes unit silently the moment the merchant switches from cm to
				// m. Say back the two figures they entered, with the unit beside
				// them, exactly as the field asked for them. (His find, 7 Sept.)
				var bbFld = el.closest ? el.closest( '.bb-addon-field' ) : null;
				var bbW   = bbFld && bbFld.querySelector( '.bb-size-w' );
				var bbH   = bbFld && bbFld.querySelector( '.bb-size-h' );
				if ( bbW && bbH ) {
					if ( ! bbW.value || ! bbH.value ) { return ''; }
					var bbUn = bbFld.querySelector( '.bb-size-unit' );
					return bbW.value + ' × ' + bbH.value + ( bbUn ? ' ' + bbUn.textContent.trim() : '' );
				}
				var v = String( el.value || '' ).trim();
				// AN AMOUNT THEY NAMED IS MONEY, and reads as money. The receipt
				// said "Add a tip for the maker 5" beside a charge of GBP 6.00,
				// while the cart the same answer reaches says "GBP 5.00". One
				// answer, two spellings, and the bare number reads like a quantity.
				// In the entry basis, because that is the basis they typed it in.
				if ( undefined !== el.dataset.bbOwnAmount ) {
					var ownN = parseFloat( v.replace( ',', '.' ) );
					if ( ! isFinite( ownN ) || ownN <= 0 ) { return ''; }
					var ownBox = document.querySelector( '.bb-standalone-total' );
					return ownBox ? bbFmt( ownBox, ownN ) : v;
				}
				if ( 'date' === el.type && /^\d{4}-\d{2}-\d{2}$/.test( v ) ) {
					// Read back in the shopper's own locale. The cart and the order
					// carry the store's format; this panel is the live estimate.
					var d = new Date( v + 'T12:00:00' );
					if ( ! isNaN( d.getTime() ) ) {
						return d.toLocaleDateString( undefined, { weekday: 'short', day: 'numeric', month: 'short', year: 'numeric' } );
					}
				}
				return v;
			}
			// One receipt line for an answer that cost nothing. Deduped by field,
			// because a group's block can hold the same control more than once.
			function bbFreeLine( el ) {
				var filled = ( 'checkbox' === el.type ) ? el.checked : ( String( el.value || '' ).trim() !== '' );
				if ( ! filled ) { return; }
				if ( el.closest && el.closest( '.bb-repeat' ) ) { return; } // instances aggregate elsewhere
				// A field that is CHARGING for this answer says it once, on its
				// charge line, where the money is. Without this a date field
				// printed twice over: a free line naming the field, and a charge
				// line beside it (his find, 6 September). A free answer on the
				// same field still lands here, because then no charge line
				// exists to carry it.
				var fld = el.closest ? el.closest( '.bb-addon-field' ) : null;
				var own = fld ? fld.querySelector( '.bb-pp-xfee[data-bb-xfee]' ) : null;
				if ( own && 0 !== ( parseFloat( own.dataset.bbXfee ) || 0 ) ) { return; }
				var n = bbFeeLabel( el );
				if ( ! n ) { return; }
				var a = bbFreeAnswer( el );
				for ( var i = 0; i < freeLines.length; i++ ) {
					if ( freeLines[ i ].n === n && freeLines[ i ].v === a ) { return; }
				}
				freeLines.push( { n: n, v: a } );
			}
			// The client half of the price-parts seam: a module may take a share
			// off PER-UNIT option money (the quantity-discount toggle), exactly
			// as the server's parts filter does, and the same figure feeds the
			// line and the total so the receipt still reconciles. Whole-line
			// money is never offered to it, and a module's own negative store
			// charge passes through each function's own sign guard untouched.
			// Empty by default: a no-op.
			// Alongside the share cut, keep the RAW per-unit fee sum. Every
			// per-unit fee source passes through here exactly once (whole-line
			// money is guarded away at every call site), so this one line is
			// the whole accounting. Positive only: a module's own negative
			// store charge (the quantity-discount share) is a reduction of the
			// base, not an option fee, and counting it would fold the discount
			// into the very figure other modules price options FROM.
			var bbRawUnit = 0;
			var bbRawPos  = 0;
			function bbFeeShare( a, kind ) {
				kind = kind || 'opt';
				if ( a > 0 ) { if ( 'pos' === kind ) { bbRawPos += a; } else { bbRawUnit += a; } }
				( window.addonBossFeeShare || [] ).forEach( function ( f ) { a = f( a, kind ); } );
				return a;
			}
			document.querySelectorAll( '.bb-standalone-options .bb-attr-group:not([hidden]):not(.bb-glocked) .bb-chip.is-selected[data-delta]' ).forEach( function ( c ) {
				var d = bbFeeShare( parseFloat( c.dataset.delta ) || 0 );
				opts += d;
				if ( 0 !== d && ! c.closest( '.bb-style-chips' ) ) {
					perLines.push( { n: c.dataset.label || '', a: d } );
				} else if ( 0 === d && ! c.closest( '.bb-style-chips' ) && c.dataset.label ) {
					// A free pick earns no line of its own, but it IS what is
					// being bought: the colour and the size join the base line,
					// so the receipt says "Team shirt, M, Navy", not just the
					// product's name.
					zeroPicks.push( c.dataset.label );
				}
			} );
			// A long set's list control (D6): the chosen option carries the same
			// display-basis delta a chip would, and lines under its own label.
			document.querySelectorAll( '.bb-standalone-options .bb-attr-group:not([hidden]):not(.bb-glocked) select.bb-list-sel' ).forEach( function ( s ) {
				var o = s.selectedOptions && s.selectedOptions[ 0 ];
				if ( ! s.value || ! o ) { return; }
				var d = bbFeeShare( parseFloat( o.dataset.delta ) || 0 );
				opts += d;
				if ( 0 !== d ) {
					perLines.push( { n: o.dataset.label || '', a: d } );
				} else if ( o.dataset.label ) {
					zeroPicks.push( o.dataset.label );
				}
			} );
			// A several-of long set's checkbox rows: every tick adds its own
			// fee and lines under its own label, exactly like a selected chip.
			document.querySelectorAll( '.bb-standalone-options .bb-attr-group:not([hidden]):not(.bb-glocked) .bb-checks input:checked[data-delta]' ).forEach( function ( c ) {
				var d = bbFeeShare( parseFloat( c.dataset.delta ) || 0 );
				opts += d;
				if ( 0 !== d ) {
					perLines.push( { n: c.dataset.label || '', a: d } );
				}
			} );
				// A module that computes its own live figure (a measured size, a
				// price-table cell) writes it onto its store element as
				// data-bb-live-charge; this driver only ever reads the number. The
				// words for the receipt ride beside it as data-bb-size-text, so a
				// priced size joins the base line the way the group itself tells
				// the band-price story.
				document.querySelectorAll( '.bb-standalone-options .bb-attr-group:not([hidden]):not(.bb-glocked) [data-bb-live-charge]' ).forEach( function ( g ) {
					var c = bbFeeShare( parseFloat( g.dataset.bbLiveCharge ) || 0 );
					opts += c;
					if ( '' !== ( g.dataset.bbLiveCharge || '' ) ) {
						sizeCharge += c;
						if ( g.dataset.bbSizeText ) { sizeTexts.push( g.dataset.bbSizeText ); }
					}
				} );
				// Product-field fees, one CONTROL at a time, each priced by the
				// same rule the server charges by. A dropdown prices by its CHOSEN
				// option only (every option carries its own fee, and summing the
				// lot as descendants was the every-option bug). A mode whose maths
				// lives in a module pre-computes onto data-bb-live-fee and this
				// driver reads that instead; a filled or ticked flat fee adds as
				// itself. Per-unit charges multiply with the quantity. Two things
				// are whole-line money and join FLAT instead: a 'once' fee (a
				// setup charge for the line however many are bought), and any
				// instance of a per-item repeatable field, whose instances
				// already scale with the quantity and must not be multiplied by
				// it a second time. This is the live estimate; the server
				// re-resolves the exact charge at add-to-cart (spreading
				// once-fees, rejecting tampering).
				var bbWholeLine = function ( el, mode ) {
					if ( 'once' === mode ) { return true; }
					// A once-mode DROPDOWN wears mode "select" (price by the
					// chosen option), so its whole-line fact rides the marker.
					if ( el.dataset && '1' === ( el.dataset.bbFeeOnce || '' ) ) { return true; }
					return !! ( el.closest && el.closest( '.bb-repeat[data-bb-repeat="per_item"]' ) );
				};
				// One receipt entry for a fee a field control earned. Instances
				// of a repeatable field aggregate under their wrap ("2 ×
				// engraving"); everything else lines under the field's label.
				// The count is INSTANCES, not controls: a group's block holds
				// several priced fields and is still one engraving.
				var bbFeeLine = function ( el, due, whole ) {
					if ( due <= 0 ) { return; }
					var wrap = el.closest ? el.closest( '.bb-repeat' ) : null;
					if ( wrap ) {
						var it = el.closest( '[data-bb-repeat-item]' );
						for ( var ri = 0; ri < repAgg.length; ri++ ) {
							if ( repAgg[ ri ].wrap === wrap ) {
								repAgg[ ri ].sum += due;
								if ( it && -1 === repAgg[ ri ].items.indexOf( it ) ) { repAgg[ ri ].items.push( it ); }
								return;
							}
						}
						repAgg.push( { wrap: wrap, items: it ? [ it ] : [], sum: due, whole: whole } );
						return;
					}
					// The answer rides with the charge. A free pick already names
					// itself on its own line, so a shopper who picked noon read
					// "Collection time: 12:00 pm" while one who picked half nine
					// read "Collection time  £4.00" and was never told which time
					// they were paying for. Same helper the free line uses, so the
					// two read alike; a ticked box still answers with nothing,
					// because being ticked is the whole answer.
					( whole ? flatLines : perLines ).push( { n: bbFeeLabel( el ), v: bbFreeAnswer( el ), a: due } );
				};
				document.querySelectorAll( '.bb-standalone-options .bb-attr-group:not([hidden]):not(.bb-glocked) [data-bb-fee]' ).forEach( function ( el ) {
					// A field inert for the chosen variation never charges, so its
					// fee must leave the figure the moment that variation is picked.
					var vg = el.closest ? el.closest( '.bb-attr-group' ) : null;
					if ( vg && bbVarInert( vg ) ) { return; }
					if ( 'OPTION' === el.tagName ) { return; } // priced through its select, below.
					if ( 'SELECT' === el.tagName ) {
						var opt = el.selectedOptions && el.selectedOptions[ 0 ];
						if ( el.value && opt ) {
							var sfee  = parseFloat( opt.dataset.bbFee ) || 0;
							var swhole = bbWholeLine( el, el.dataset.bbFeeMode || '' );
							if ( ! swhole ) { sfee = bbFeeShare( sfee ); }
							if ( swhole ) { flat += sfee; } else { opts += sfee; }
							bbFeeLine( el, sfee, swhole );
							// A free choice still says what was chosen.
							if ( sfee <= 0 ) { bbFreeLine( el ); }
						}
						return;
					}
					// A radio group prints its fee on every option; only the picked
					// one is money. Without this, an unpicked swatch's value (never
					// empty on a radio) would read as "filled" below and charge.
					if ( 'radio' === el.type && ! el.checked ) { return; }
					var fee = parseFloat( el.dataset.bbFee ) || 0;
					if ( undefined !== el.dataset.bbOwnAmount ) {
						// THE TOTAL NEVER QUOTES A PRICE THE TILL WILL REFUSE.
						//
						// An amount outside the field's bounds used to ride into the total
						// like any other: type 500 against a maximum of 20 and the page
						// cheerfully offered a GBP 520 basket that could never be bought.
						// It now counts nothing and the receipt line says why instead of
						// showing a figure. The box still holds what was typed: that is the
						// shopper's text, and the field beside it is already saying no.
						// (His call, 7 Sept.)
						var ownBad = bbAmountRefused( el );
						if ( ownBad ) {
							var badName = bbFeeLabel( el );
							// The receipt says the same short sentence the field is showing. "Outside
							// the limits" was a fact, not an instruction: it told a shopper something
							// was wrong and nothing about how to make it right.
							if ( badName ) { freeLines.push( { n: badName, v: ownBad, bad: true } ); }
							return;
						}
						// The shopper's own typed amount IS the charge (name your price).
						// The server re-resolves and fences it at add-to-cart; this is
						// the honest live estimate, floored at zero like everywhere.
						//
						// The box speaks the CURRENT display basis, and this total is
						// computed in the RENDER basis with the toggle picking a side at
						// the end, so a figure typed after a live flip converts here or
						// the one hand-typed number on the page rides in the wrong basis.
						var ownAmt   = parseFloat( ( el.value || '' ).replace( ',', '.' ) ) || 0;
						var ownBox   = document.querySelector( '.bb-standalone-total' );
						if ( ownBox && bbToggleActive() && ownAmt > 0 ) {
							var ownRenderIncl = 'incl' === ( ownBox.dataset.taxBasis || 'excl' );
							if ( bbInclActive() !== ownRenderIncl ) {
								var ownRate = parseFloat( ownBox.dataset.wtsRate ) || parseFloat( ( window.wtsCompatibilityObject || {} ).baseTaxRate ) || 0;
								var ownF    = 1 + ownRate / 100;
								ownAmt      = ownRenderIncl ? ownAmt * ownF : ownAmt / ownF;
							}
						}
						var ownMode  = el.dataset.bbFeeMode || '';
						var ownWhole = bbWholeLine( el, ownMode );
						var ownDue   = ownAmt > 0 ? ownAmt : 0;
						if ( ! ownWhole ) { ownDue = bbFeeShare( ownDue ); }
						if ( ownWhole ) { flat += ownDue; } else { opts += ownDue; }
						bbFeeLine( el, ownDue, ownWhole );
						return;
					}
					// Costs nothing, but they still answered it: the date, the
					// name, the count. Named on its own line with an empty
					// amount, so the receipt says what is being bought and not
					// merely what is being charged for.
					if ( fee <= 0 ) { bbFreeLine( el ); return; }
					var mode  = el.dataset.bbFeeMode || '';
					var whole = bbWholeLine( el, mode );
					var due   = 0;
					if ( undefined !== el.dataset.bbLiveFee ) {
						// A mode whose maths lives in a module pre-computed its
						// figure onto the control; this driver only reads it.
						due = parseFloat( el.dataset.bbLiveFee ) || 0;
					} else {
						var filled = ( 'checkbox' === el.type ) ? el.checked : ( ( el.value || '' ).trim() !== '' );
						if ( filled ) { due = fee; }
					}
					if ( ! whole ) { due = bbFeeShare( due ); }
					if ( whole ) { flat += due; } else { opts += due; }
					bbFeeLine( el, due, whole );
				} );
				// Fees a companion module (positions) pre-computed and tagged by
				// mode. The receipt is the one true total on the page, so it folds
				// them in with the SAME once-versus-per-item rule its own fields
				// use: a 'once' fee joins the flat whole-line money, a per-item fee
				// joins opts and multiplies with the quantity. The server re-resolves
				// the exact charge at add-to-cart; this is the honest live estimate.
				document.querySelectorAll( '.bb-pp-xfee[data-bb-xfee]' ).forEach( function ( el ) {
					var xamt = parseFloat( el.dataset.bbXfee ) || 0;
					// Zero is silence; a NEGATIVE line is a table adjustment's
					// deduction and reads on the receipt like any named line.
					if ( 0 === xamt ) { return; }
					var xwhole = 'once' === ( el.dataset.bbXfeeMode || '' );
					var xdue   = xwhole ? xamt : bbFeeShare( xamt, 'pos' );
					if ( xwhole ) { flat += xdue; } else { opts += xdue; }
					( xwhole ? flatLines : perLines ).push( { n: el.dataset.bbXfeeLabel || '', a: xdue } );
				} );
			var qty  = bbQty();
			var base = '' !== box.dataset.base ? parseFloat( box.dataset.base ) : bbVarBase;
			var totalEl = box.querySelector( '.bb-st-total' );
			var noteEl  = box.querySelector( '.bb-st-note' );
			var tpl     = function ( sel ) { var el = box.querySelector( sel ); return el ? el.textContent : '%s'; };
			// ── The receipt lines, from the walk above. ────────────────────
			var linesEl = box.querySelector( '.bb-st-lines' );
			var qtyTpl  = box.dataset.qtyTpl || '%1$s × %2$s';
			function bbQtyLabel( n, thing ) {
				return qtyTpl.replace( '%1$s', String( n ) ).replace( '%2$s', thing );
			}
			var out  = [];
			function bbLine( labelHtml, amount, answer ) {
				out.push(
					'<div class="bb-st-line"><span class="bb-st-line-n">' + labelHtml
					+ ( answer ? '<span class="bb-st-free-v">' + bbEscape( answer ) + '</span>' : '' )
					+ '</span><span class="bb-st-line-a">' + bbMoneyCell( box, amount ) + '</span></div>'
				);
			}
			if ( null !== base && ! isNaN( base ) ) {
				// The base line, wearing its free picks ("Team shirt, M, Navy"),
				// its measured or table size ("Sign, 60 × 40 cm"), and absorbing
				// that size's charge, exactly the band-price story the group
				// itself tells: the line says what is being bought.
				var bn = bbEscape( box.dataset.name || '' );
				if ( zeroPicks.length ) { bn += ', ' + bbEscape( zeroPicks.join( ', ' ) ); }
				if ( sizeTexts.length ) { bn += ', ' + bbEscape( sizeTexts.join( ', ' ) ); }
				bbLine( qty > 1 ? bbQtyLabel( qty, bn ) : bn, ( base + sizeCharge ) * qty );
			} else if ( 0 !== sizeCharge && sizeTexts.length ) {
				bbLine( bbEscape( sizeTexts.join( ', ' ) ), sizeCharge * qty );
			}
			// What they chose that costs nothing, straight after the thing being
			// bought and before the charges, so a rush charge has something on the
			// page to refer back to.
			freeLines.forEach( function ( l ) {
				// A REFUSED LINE IS NOT A FREE CHOICE. It sat in the same grey as "Ink"
				// and "Gloss laminated", so the one line on the receipt saying something
				// was wrong read exactly like the lines saying everything was fine.
				out.push(
					'<div class="bb-st-line bb-st-free' + ( l.bad ? ' bb-st-bad' : '' ) + '"><span class="bb-st-line-n">' + bbEscape( l.n )
					+ ( l.v ? '<span class="bb-st-free-v">' + bbEscape( l.v ) + '</span>' : '' )
					+ '</span><span class="bb-st-line-a"></span></div>'
				);
			} );
			perLines.forEach( function ( l ) {
				var n = bbEscape( l.n );
				bbLine( qty > 1 ? bbQtyLabel( qty, n ) : n, l.a * qty, l.v );
			} );
			repAgg.forEach( function ( r ) {
				var thing = bbEscape( bbRepThing( r.wrap ) );
				var cnt   = r.items.length || 1;
				var n     = cnt > 1 ? bbQtyLabel( cnt, thing ) : thing;
				// A per-item repeat's instances already scale with the
				// quantity (whole-line money); an add-another repeat is
				// per-unit and multiplies like any other option.
				bbLine( n, r.whole ? r.sum : r.sum * qty );
			} );
			flatLines.forEach( function ( l ) { bbLine( bbEscape( l.n ), l.a ); } );
			if ( linesEl ) { linesEl.innerHTML = out.join( '' ); }
			if ( null !== base && ! isNaN( base ) ) {
				bbSetMoney( totalEl, box, ( base + opts ) * qty + flat, '' );
				// The lines above carry the reconciliation now; the Total row
				// states the figure plainly.
				noteEl.textContent  = '';
				box.hidden = false;
			} else if ( opts > 0 || flat > 0 ) {
				bbSetMoney( totalEl, box, opts * qty + flat, tpl( '.bb-st-tpl-opts' ) );
				noteEl.textContent  = '';
				box.hidden = false;
			} else {
				box.hidden = true;
			}
			// Publish the raw per-unit fee sum for any module that prices
			// AROUND the options (the quantity block's loaded figures read
			// it), and say the walk settled. One computation, one number,
			// every reader: re-walking the controls elsewhere is how two
			// figures on one page learn to disagree.
			var bbOptsRoot = document.querySelector( '.bb-standalone-options' );
			if ( bbOptsRoot ) {
				bbOptsRoot.dataset.bbUnitFees     = String( bbRawUnit );
				bbOptsRoot.dataset.bbPositionFees = String( bbRawPos );
				bbOptsRoot.dispatchEvent( new CustomEvent( 'bb-fees-settled', { bubbles: true, detail: { unitFees: bbRawUnit, positionFees: bbRawPos } } ) );
			}
			bbRawUnit = 0;
			bbRawPos  = 0;
		}
		// A product field changing (typed text, a tick, an uploaded file ref)
			// re-figures the live total the same as picking a chip does.
			document.addEventListener( 'input', function ( e ) { if ( e.target && e.target.dataset && undefined !== e.target.dataset.bbFee ) { bbTotal(); } } );
			document.addEventListener( 'change', function ( e ) { if ( e.target && e.target.dataset && undefined !== e.target.dataset.bbFee ) { bbTotal(); } } );
				// A companion module (positions) recomputed its personalisation fees.
				document.addEventListener( 'bb-xfee-changed', bbTotal );
			// The theme's quantity field re-figures it too. Deferred a tick, so
			// when the repeat script grows or shrinks its per-item cards on this
			// same event, the recount sees the field list as it ends up rather
			// than as it was. Input as well as change: a shopper who TYPES six
			// must watch the figure move, not only one who clicks the stepper.
			function bbQtyPing( e ) {
				if ( e.target && e.target.matches && e.target.matches( 'input.qty, input[name="quantity"]' ) ) {
					setTimeout( bbTotal, 0 );
				}
			}
			document.addEventListener( 'input', bbQtyPing );
			document.addEventListener( 'change', bbQtyPing );
			// Adding or removing a repeatable card changes which fee inputs
			// exist at all, and a removed card fires no input event of its own,
			// so the recount rides the click that did it.
			document.addEventListener( 'click', function ( e ) {
				if ( e.target && e.target.closest && e.target.closest( '[data-bb-repeat-add], [data-bb-repeat-remove]' ) ) {
					setTimeout( bbTotal, 0 );
				}
			} );
			// On a variable page the native form announces the chosen variation.
			// The recount is deferred a tick (the quantity listener's idiom):
			// this handler binds at ready, BEFORE the deferred variation script
			// binds its own, so it runs first on the event, while the form's
			// variation_id input still holds the previous pick. Everything that
			// reads the input (the variation-inert stand-down, the scope line,
			// the gate marks) would judge against the stale variation; a tick
			// later the form is settled and the recount reads what the server
			// will see. bbVarBase needs no wait, the event payload carries it.
		if ( window.jQuery ) {
			window.jQuery( function ( $ ) {
				$( '.variations_form' )
					.on( 'found_variation', function ( e, variation ) {
						bbVarBase = variation && undefined !== variation.display_price ? parseFloat( variation.display_price ) : null;
						setTimeout( bbTotal, 0 );
					} )
					.on( 'reset_data hide_variation', function () {
						bbVarBase = null;
						setTimeout( bbTotal, 0 );
					} );
			} );
		}
		// A module recomputing its own live figure says so; the driver refigures
		// the one total everything reads.
		document.addEventListener( 'bb-live-change', function () { bbTotal(); } );
		// Picks prefilled from a failed add (the page re-rendered with a chip
		// already selected) get their state on load; each module boots its own
		// the same way.
		document.addEventListener( 'DOMContentLoaded', function () {
			bbTotal();
		} );
		// ── The configurator frame: header echoes, the growth discipline,
		// the peek bar. The echo is the receipt and the required marking in
		// one; folding compresses answered groups at four-plus groups only.
		// 🔴 DAVID, 1 Sept 2026: the peek bar never appeared on his site. It is a
		// quantity-grid product, and a grid replaces the whole add-to-cart form
		// (grid__premium_only removes woocommerce_template_single_add_to_cart and
		// the options panel with it). So there was no .bb-standalone-total to
		// mirror and no .single_add_to_cart_button to stand in for, and the bar
		// simply declined to mount. Nothing was broken on his side.
		//
		// A grid is a bulk-order screen with a running total and a button at the
		// bottom of a long page, which is the case the bar exists FOR. So it
		// takes the grid's own total and the grid's own button, and the rest of
		// the driver never learns there are two kinds of page.
		function bbStBox() {
			return document.querySelector( '.bb-standalone-total' ) || document.querySelector( '.bb-grid-total' );
		}
		/** The button the bar stands in for while it is off screen. */
		function bbStRealAdd() {
			// 🔴 The GRID's button first, not the theme's. A grid page still
			// carries form.cart's add button, but as a leftover with no height,
			// parked at the top of the document: anchoring to it meant the bar
			// judged itself against a control the shopper can neither see nor
			// scroll past, so it read "off screen" everywhere including the top
			// of the page. The button the shopper is actually reaching for is
			// the grid's own Add, at the bottom of the matrix.
			return document.querySelector( '.bb-standalone-grid .bb-grid-add-all' )
				|| document.querySelector( 'form.cart .single_add_to_cart_button' );
		}
		/**
		 * The figure, and the lines behind it.
		 *
		 * The options receipt keeps its money in .bb-st-total and its breakdown
		 * in .bb-st-lines. The grid's total IS the figure (money and note in one
		 * row) and its breakdown is the per-row summary above it. Both are read
		 * as markup, not text, so a dual-basis VAT total carries whole.
		 */
		function bbStFigure( box ) { return box.querySelector( '.bb-st-total' ) || box; }
		function bbStLines( box ) {
			return box.querySelector( '.bb-st-lines' ) || document.querySelector( '.bb-standalone-grid .bb-grid-summary' );
		}
		/**
		 * Is there anything to show yet?
		 *
		 * An options receipt hides itself when it has nothing to say. A grid
		 * total is simply empty until the shopper types a quantity, and its
		 * button stays disabled until then, so an empty box is the grid saying
		 * the same thing. Copying it anyway would pin a blank bar to the screen
		 * with a button that does nothing.
		 */
		function bbStHasFigure( box ) {
			return !! box && ! box.hidden && '' !== ( box.textContent || '' ).trim();
		}
		function bbGroups() { return document.querySelectorAll( '.bb-standalone-options .bb-attr-group' ); }
		// A conditional group is LOCKED (visible, disabled, its reason shown)
		// rather than hidden, by the module that evaluates such rules; this
		// driver only ever reads the class.
		function bbActionable( group ) { return ! group.classList.contains( 'bb-glocked' ); }
		function bbAnswered( group ) {
			// A module that owns this group's state says whether it is answered
			// through the echo attribute it maintains: empty means not yet.
			var own = group.querySelector( '[data-bb-echo]' );
			if ( own ) { return '' !== ( own.dataset.bbEcho || '' ); }
			// A several-of long set's checkbox rows: any tick is an answer.
			var checks = group.querySelector( '.bb-checks' );
			if ( checks ) { return !! checks.querySelector( 'input:checked' ); }
			var sel = group.querySelector( 'select.bundle-attr-select' );
			if ( sel ) { return !! sel.value; }
			// A FIELD group. Its fold echo already computes answered-ness (typed
			// text, a tick, an uploaded file, a chosen option), so the same
			// reading serves the scope line and the add-to-cart gate: without
			// this branch a shopper who had finished every field still read an
			// unfinished count. null means the group asks nothing at all (a
			// heading or an info block), which is never answered and never asked.
			var t = bbFieldEcho( group );
			return null !== t && '' !== t;
		}
		// Does this group ask the shopper anything? Display-only groups (a
		// heading, an info block) must not count in any denominator.
		function bbAsks( group ) {
			if ( group.querySelector( '.bb-gecho' ) ) { return true; }
			return null !== bbFieldEcho( group );
		}
		// A several-of group's picked labels, whichever control it wears, in
		// the order the controls stand (the set's own order). Null for any
		// other group, so callers can branch on the shape once.
		function bbMultiPicks( group ) {
			if ( '1' !== ( group.dataset.multi || '' ) ) { return null; }
			var labels = [];
			var sel = group.querySelector( 'select.bundle-attr-select[multiple]' );
			if ( sel ) {
				Array.prototype.forEach.call( sel.selectedOptions, function ( o ) { labels.push( o.textContent || '' ); } );
			} else {
				group.querySelectorAll( '.bb-checks input:checked' ).forEach( function ( c ) { labels.push( c.dataset.label || '' ); } );
			}
			return labels;
		}
		// Engaged but short of the at-least bound: the server would refuse
		// this exact submit, so the gate holds it at the control instead.
		function bbMultiShort( group ) {
			var picks = bbMultiPicks( group );
			if ( null === picks ) { return false; }
			var min = parseInt( group.dataset.min, 10 ) || 0;
			return picks.length > 0 && picks.length < min;
		}
		// A TYPED AMOUNT OUTSIDE ITS BOUNDS, and the sentence the till would say.
		//
		// The bounds on a name-your-price box were printed as words and enforced on
		// the server, with nothing joining the two: the box took anything, the total
		// quoted it, and the refusal arrived at Add to basket. This is the join. It
		// reads the box's own data-bb-pmin/pmax, compares them against the typed
		// figure UNCONVERTED (both are in the basis the box takes), and hands back
		// the server's own wording, so nobody meets two phrasings of one rule.
		// An empty box is not out of range, it is no answer, and the required gate
		// already owns that question.
		// One box, read against its own bounds, in the basis the shopper is
		// CURRENTLY reading. The box speaks the display basis, so on a shop with
		// a tax toggle the bound to compare against moves with the switch: the
		// -ex/-in attribute pairs carry both, and the sentence is rebuilt from
		// its template with the current-basis figure so the words on the field
		// never quote a basis the shopper is not looking at. With no toggle, the
		// prefilled render-basis attributes are the whole story. Zero, negative
		// and nonsense are the server's own answers and pass through untouched.
		function bbAmountRefused( b ) {
			if ( ! b || b.disabled || null === b.offsetParent ) { return ''; }
			var raw = String( b.value || '' ).trim().replace( ',', '.' );
			if ( '' === raw ) { return ''; }
			var n = parseFloat( raw );
			if ( isNaN( n ) || n <= 0 ) { return ''; }
			var box  = document.querySelector( '.bb-standalone-total' );
			var live = !! box && bbToggleActive();
			var incl = live ? bbInclActive() : false;
			var mn   = live ? ( ( incl ? b.dataset.bbPminIn : b.dataset.bbPminEx ) || b.dataset.bbPmin || '' ) : ( b.dataset.bbPmin || '' );
			var mx   = live ? ( ( incl ? b.dataset.bbPmaxIn : b.dataset.bbPmaxEx ) || b.dataset.bbPmax || '' ) : ( b.dataset.bbPmax || '' );
			function say( tpl, bound, fallback ) {
				if ( live && tpl && -1 !== tpl.indexOf( '%s' ) ) { return tpl.replace( '%s', bbFmt( box, parseFloat( bound ) ) ); }
				return fallback || ' ';
			}
			if ( '' !== mn && n < parseFloat( mn ) ) { return say( b.dataset.bbSayMin, mn, b.dataset.bbPminSay ); }
			if ( '' !== mx && n > parseFloat( mx ) ) { return say( b.dataset.bbSayMax, mx, b.dataset.bbPmaxSay ); }
			return '';
		}
		function bbPriceOut( group ) {
			var say = '';
			var boxes = group.querySelectorAll( 'input.bb-price-input' );
			for ( var i = 0; i < boxes.length; i++ ) {
				if ( ! say ) { say = bbAmountRefused( boxes[ i ] ); }
			}
			return say;
		}
		function bbEchoGroup( group ) {
			var echo = group.querySelector( '.bb-gecho' );
			if ( ! echo ) { return; }
			if ( group.classList.contains( 'bb-glocked' ) ) {
				echo.textContent = '';
				echo.classList.remove( 'bb-gecho-todo' );
				echo.classList.remove( 'bb-gecho-done' );
				return;
			}
			var text = '';
			var own  = group.querySelector( '[data-bb-echo]' );
			var multi = bbMultiPicks( group );
			if ( null !== multi && multi.length ) {
				// A several-of group's echo IS its pick list: the labels while
				// they fit on a breath, the count once they stop ("3 chosen").
				echo.textContent = multi.length > 2
					? ( echo.dataset.chosen || '%s chosen' ).replace( '%s', String( multi.length ) )
					: multi.map( function ( t ) { return t.trim(); } ).join( ', ' );
				echo.classList.remove( 'bb-gecho-todo' );
				echo.classList.add( 'bb-gecho-done' );
				return;
			}
			if ( own ) {
				// A module writes its own receipt (the size and its money, the band
				// and its cell) onto the store element it maintains.
				text = own.dataset.bbEcho || '';
			} else if ( null === multi ) {
				// A long set's list control (D6): the chosen option IS the echo,
				// price and all (its text already states both, translated).
				var lsel = group.querySelector( 'select.bb-list-sel' );
				if ( lsel ) {
					if ( lsel.value && lsel.selectedOptions.length ) {
						echo.textContent = ( lsel.selectedOptions[ 0 ].textContent || '' ).trim();
						echo.classList.remove( 'bb-gecho-todo' );
						echo.classList.add( 'bb-gecho-done' );
						return;
					}
				}
				var chip = group.querySelector( '.bb-chip.is-selected' );
				if ( chip ) {
					// Mirror the chip: its label plus its OWN rendered price, so a
					// dual-basis price plugin's markup (and its ex/inc toggle)
					// survives instead of the stripped title mashing the two
					// figures into "£29.17£35.00". Label rides in as text (safe),
					// the price as the chip's already-escaped markup.
					var deltaEl = chip.querySelector( '.bb-chip-delta' );
					echo.textContent = chip.dataset.label || '';
					if ( deltaEl && deltaEl.innerHTML ) {
						echo.insertAdjacentHTML( 'beforeend', ' ' + deltaEl.innerHTML );
					}
					echo.classList.remove( 'bb-gecho-todo' );
					echo.classList.add( 'bb-gecho-done' );
					return;
				}
			}
			// An answered group's echo is DONE (the skin reads it green); the
			// "None" an optional group falls back to is a state, not an answer.
			var done = '' !== text;
			var todo = false;
			if ( '' === text ) {
				todo = '1' === group.dataset.req;
				text = todo ? ( echo.dataset.choose || '' ) : ( echo.dataset.none || '' );
			}
			echo.textContent = text;
			echo.classList.toggle( 'bb-gecho-todo', todo );
			echo.classList.toggle( 'bb-gecho-done', done );
		}
		function bbEchoAll() { bbGroups().forEach( bbEchoGroup ); }
		// A fold shut after a pick must still show the pick, so each summary
		// mirrors its children's echoes. Set, measured, table and upload
		// children already keep a body echo; FIELD children have none, so
		// their value is read straight off the input.
		function bbEsc( t ) {
			var i = document.createElement( 'i' );
			i.textContent = t;
			return i.innerHTML;
		}
		// A field group's contribution: null when it asks nothing (a heading
		// or an info block), '' while unanswered, the value once answered.
		function bbFieldEcho( group ) {
			var chk = group.querySelector( '.bb-addon-check input[type="checkbox"]' );
			if ( chk ) {
				if ( ! chk.checked ) { return ''; }
				var lab = group.querySelector( '.bb-addon-check span' );
				return lab ? lab.textContent.trim() : '';
			}
			var fref = group.querySelector( '.bb-addon-file-ref' );
			if ( fref ) {
				if ( ! fref.value ) { return ''; }
				var fn = group.querySelector( '.bb-file-fn' );
				return fn ? fn.textContent.trim() : ( fref.dataset.bbFilename || '' );
			}
			var w = group.querySelector( '.bb-size-w' ), h = group.querySelector( '.bb-size-h' );
			if ( w && h ) { return ( w.value && h.value ) ? w.value + ' × ' + h.value : ''; }
			// Colour radios carry no input class, which made a colour field
			// invisible here: never counted, never caught when required.
			var swat = group.querySelector( '[role="radiogroup"]' );
			if ( swat ) {
				var son = swat.querySelector( 'input:checked' );
				if ( ! son ) { return ''; }
				var sl = son.closest( 'label' );
				return sl ? sl.textContent.trim() : '';
			}
			var inp = group.querySelector( '.bb-addon-input' );
			if ( ! inp ) { return null; }
			if ( 'SELECT' === inp.tagName ) {
				return inp.value && inp.selectedOptions.length ? inp.selectedOptions[ 0 ].textContent.trim() : '';
			}
			var v = ( inp.value || '' ).trim();
			if ( '' === v ) { return ''; }
			// Typed words read back in quotes, the receipt convention for free
			// text; a number or a date is already its own value.
			return ( 'TEXTAREA' === inp.tagName || 'text' === inp.type ) ? '“' + v + '”' : v;
		}
		function bbEchoFolds() {
			document.querySelectorAll( '.bb-standalone-options details.bb-po-fold' ).forEach( function ( sec ) {
				var out = sec.querySelector( 'summary .bb-po-foldecho' );
				if ( ! out ) { return; }
				var parts = [], todo = false, askable = 0;
				sec.querySelectorAll( '.bb-attr-group' ).forEach( function ( g ) {
					if ( ! bbActionable( g ) ) { return; }
					var e = g.querySelector( '.bb-gecho' );
					if ( e ) {
						askable++;
						// The body echo's own markup, so a price rendered by a
						// dual-basis plugin survives into the summary too.
						if ( bbAnswered( g ) ) { parts.push( e.innerHTML ); }
						else if ( e.classList.contains( 'bb-gecho-todo' ) ) { todo = true; }
						return;
					}
					var t = bbFieldEcho( g );
					if ( null === t ) { return; }
					askable++;
					if ( '' !== t ) { parts.push( bbEsc( t ) ); }
					else if ( '1' === g.dataset.req ) { todo = true; }
				} );
				if ( ! askable ) { out.textContent = ''; out.classList.remove( 'bb-gecho-todo' ); out.classList.remove( 'bb-gecho-done' ); return; }
				if ( parts.length ) {
					out.innerHTML = parts.join( ', ' );
					out.classList.remove( 'bb-gecho-todo' );
					out.classList.add( 'bb-gecho-done' );
					return;
				}
				out.textContent = todo ? ( out.dataset.choose || '' ) : ( out.dataset.none || '' );
				out.classList.toggle( 'bb-gecho-todo', todo );
				out.classList.remove( 'bb-gecho-done' );
			} );
		}
		// The scope line: how many actionable decisions exist and how many are
		// answered, so the visible groups never read as the whole story.
		function bbScope() {
			var prog = document.querySelector( '.bb-standalone-options .bb-progress' );
			if ( ! prog ) { return; }
			var total = 0, done = 0;
			bbGroups().forEach( function ( g ) {
				if ( g.hidden || ! bbActionable( g ) || bbVarInert( g ) || ! bbAsks( g ) ) { return; }
				total++;
				if ( bbAnswered( g ) ) { done++; }
			} );
			if ( total < 2 ) { prog.hidden = true; return; }
			prog.hidden = false;
			prog.textContent = ( prog.dataset.tpl || '' ).replace( '%1$s', String( total ) ).replace( '%2$s', String( done ) );
			// Finished scope reads in the good green, the gallery's language.
			prog.classList.toggle( 'bb-prog-done', done === total );
		}
		// ── The add-to-cart gate: a courtesy, never the authority. ─────────
		// The server's validation stays the enforcer, exactly as it is; this
		// only saves the shopper the round trip that lands the answer in a
		// theme notice at the top of the page, far from the field. The button
		// stays enabled (a disabled submit is a dead control with no
		// explanation); a blocked attempt marks the first unanswered required
		// group with the same accent the Choose echo already wears, scrolls
		// to it, and moves focus there.
		function bbFirstMissing() {
			var found = null;
			bbGroups().forEach( function ( g ) {
				if ( found || g.hidden || ! bbActionable( g ) || bbVarInert( g ) || ! bbAsks( g ) ) { return; }
				if ( '1' === g.dataset.req && ! bbAnswered( g ) ) { found = g; }
				// A several-of group short of its at-least bound blocks too,
				// required or not: the server would refuse this exact submit.
				if ( ! found && bbMultiShort( g ) ) { found = g; }
				// So does an amount outside the bounds the field prints under it:
				// same reason, and the shopper is reading those bounds right there.
				if ( ! found && bbPriceOut( g ) ) { found = g; }
			} );
			return found;
		}
		// The mark leaves the moment the group is answered (or stops being
		// asked at all), so nobody finishes a field that stays accused; its
		// sentence leaves with it.
		function bbMissSync() {
			document.querySelectorAll( '.bb-standalone-options .bb-attr-group.bb-gmiss' ).forEach( function ( g ) {
				if ( ! g.hidden && bbActionable( g ) && ! bbVarInert( g )
				&& ( ! bbAnswered( g ) || bbMultiShort( g ) || bbPriceOut( g ) ) ) { return; }
				g.classList.remove( 'bb-gmiss' );
				g.querySelectorAll( '[aria-invalid="true"]' ).forEach( function ( el ) { el.removeAttribute( 'aria-invalid' ); } );
				g.querySelectorAll( '.bb-gmiss-note' ).forEach( function ( gnote ) {
					gnote.textContent = '';
					gnote.hidden = true;
				} );
			} );
		}
		// The paint and the sentence, with no scroll and no focus grab: this half
		// is safe to run while the shopper is still moving around the form.
		function bbMissPaint( g, say ) {
			g.classList.add( 'bb-gmiss' );
			// Say it, at the offender: the group's own server-composed sentence
			// lands in its live region, so the refusal is words as well as paint.
			// A bound gives its own sentence, because "Fill in Add a tip first" is
			// not what is wrong with an amount that is filled in and too big.
			// A bound's complaint goes in the slot beside the bound, under the box.
			// Everything else uses the group's line at the top of the card, which is
			// right when the whole card is the offender.
			var note = ( say && g.querySelector( '.bb-gmiss-here' ) ) || g.querySelector( '.bb-gmiss-note' );
			var line = say || g.dataset.bbMiss;
			if ( note && line ) {
				note.textContent = line;
				note.hidden = false;
			}
			g.querySelectorAll( 'select.bundle-attr-select, .bb-checks input, .bb-addon-input:not([type="hidden"]), .bb-tbl-sel, .bb-tbl-typedin' ).forEach( function ( el ) {
				el.setAttribute( 'aria-invalid', 'true' );
			} );
		}
		function bbMissMark( g, say ) {
			bbMissPaint( g, say );
			g.scrollIntoView( { behavior: 'smooth', block: 'center' } );
			// Focus the first thing a keyboard can drive, without yanking the
			// smooth scroll off course: chips before hidden machinery.
			var f = g.querySelector( '.bb-chip, .bb-tbl-opt, .bb-mchip, .bb-checks input, .bb-addon-input:not([type="hidden"]), .bb-tbl-sel, .bb-tbl-typedin, .bb-up-pick, .bb-addon-file-input' );
			if ( f && f.focus ) {
				try { f.focus( { preventScroll: true } ); } catch ( _ ) { f.focus(); }
			}
		}
		// Capture phase, the lightbox override's idiom, so an AJAX-add theme's
		// own submit handler never fires on an add the server would refuse.
		document.addEventListener( 'submit', function ( e ) {
			var form = e.target;
			if ( ! form || ! form.querySelector || ! form.querySelector( '.bb-standalone-options' ) ) { return; }
			var miss = bbFirstMissing();
			if ( ! miss ) { return; }
			e.preventDefault();
			e.stopPropagation();
			bbMissMark( miss, bbPriceOut( miss ) );
		}, true );
		// TELL THEM AT THE BOX, NOT AT THE BUTTON.
		//
		// The bounds are printed directly under this field, so the moment a figure
		// outside them is left there, the field says so itself. On the way OUT of
		// the box, not on every keystroke: marking mid-typing would accuse "5" on
		// its way to "50". Paint only, never the scroll and the focus grab, because
		// the shopper is on their way somewhere and this is news, not a summons.
		// A TOGGLE FLIP RE-READS THE BOUNDS. The typed figure keeps its digits
		// but changes meaning with the switch, so a mark that was right can stop
		// being right and the sentence must requote in the basis now showing.
		// bbTotal() re-runs too, so the receipt's refusal line follows.
		document.addEventListener( 'bb-choice-fees-repainted', function () {
			var basisNow = bbInclActive() ? 'incl' : 'excl';
			document.querySelectorAll( '.bb-own-basis' ).forEach( function ( h ) { h.value = basisNow; } );
			document.querySelectorAll( '.bb-standalone-options .bb-attr-group' ).forEach( function ( g ) {
				if ( ! g.querySelector( 'input.bb-price-input' ) ) { return; }
				var say = bbPriceOut( g );
				if ( say ) { bbMissPaint( g, say ); }
			} );
			bbTotal();
		} );
		document.addEventListener( 'blur', function ( e ) {
			var b = e.target;
			if ( ! b || ! b.classList || ! b.classList.contains( 'bb-price-input' ) ) { return; }
			var g = b.closest ? b.closest( '.bb-attr-group' ) : null;
			if ( ! g ) { return; }
			var say = bbPriceOut( g );
			if ( say ) { bbMissPaint( g, say ); } else { bbMissSync(); }
		}, true );
			// Every state change funnels through bbTotal; the echoes, the scope
			// line and the peek bar ride the same wave, so none can go stale.
		var bbTotalCore = bbTotal;
		bbTotal = function () {
			bbTotalCore();
			bbEchoAll();
			bbEchoFolds();
			bbScope();
			bbMissSync();
			bbStPeekSync();
		};
				// The peek bar: the bundle bar's shell standing in for the theme's add
		// button while it is off screen. Appended to <body> so no transformed
		// ancestor can capture its fixed positioning.
		var bbPeekBar = null;
		// Fold the tapped-open lines away: whenever the bar itself hides,
		// an open peek would otherwise reappear pre-opened later.
		function bbStPeekFold() {
			if ( ! bbPeekBar ) { return; }
			var l = bbPeekBar.querySelector( '.bb-peek-lines' );
			var o = bbPeekBar.querySelector( '.bb-peek-open' );
			if ( l ) { l.hidden = true; }
			if ( o ) { o.setAttribute( 'aria-expanded', 'false' ); }
			bbPeekBar.classList.remove( 'is-open' );
		}
		function bbStPeekSync() {
			if ( ! bbPeekBar ) { return; }
			var box = bbStBox();
			// A grid total is empty until a quantity is typed, and its button
			// stays disabled until then. Both say the same thing, so an empty
			// box hides the bar rather than pinning a blank figure and a dead
			// button to the bottom of the screen.
			if ( ! bbStHasFigure( box ) ) {
				bbPeekBar.bbHasTotal = false;
				bbPeekBar.classList.remove( 'is-shown' );
				bbStPeekFold();
				return;
			}
			// innerHTML, not textContent: carry the total's dual-basis markup (when
			// a VAT toggle is on) to the peek bar so it answers the switch too.
			bbPeekBar.querySelector( '.bb-peek-info' ).innerHTML = bbStFigure( box ).innerHTML;
			// The stand-in is never more willing than the button it stands for.
			// A grid disables its own button while the order is incomplete, and
			// a copy that stayed live would be a button that quietly does
			// nothing, which is worse than no button.
			var bbReal = bbStRealAdd();
			var bbCta  = bbPeekBar.querySelector( '.bb-peek-cta' );
			if ( bbReal && bbCta ) { bbCta.disabled = !! bbReal.disabled; }
			bbPeekBar.bbHasTotal = true;
			bbPeekBar.classList.toggle( 'is-shown', !! bbPeekBar.bbOff );
			if ( ! bbPeekBar.classList.contains( 'is-shown' ) ) {
				bbStPeekFold();
			} else {
				// An open peek rides the same wave as the total: re-copy the
				// lines on every change, so it can never show a stale receipt.
				var bbPl = bbPeekBar.querySelector( '.bb-peek-lines' );
				var bbSrc = bbStLines( box );
				if ( bbPl && ! bbPl.hidden && bbSrc ) { bbPl.innerHTML = bbSrc.innerHTML; }
			}
		}
		// The boot prints inside the form BEFORE the add button parses, so the
		// bar mounts at DOM-ready, when the button it stands in for exists.
		function bbStPeekMount() {
			if ( bbPeekBar || ! bbStBox() || ! ( 'IntersectionObserver' in window ) ) { return; }
			var real = bbStRealAdd();
			if ( ! real ) { return; }
			bbPeekBar = document.createElement( 'div' );
			bbPeekBar.className = 'bb-tray-peek bb-st-peek';
			// Tap-to-peek: the total is a button that lifts the receipt's own
			// lines up out of the bar, so the shopper can check what is in the
			// number without scrolling back. The lines are the receipt's very
			// markup, copied on open and on every later change.
			var lines = document.createElement( 'div' );
			lines.className = 'bb-peek-lines';
			lines.id     = 'bb-peek-lines';
			lines.hidden = true;
			var row  = document.createElement( 'div' );
			row.className = 'bb-peek-row';
			var info = document.createElement( 'span' );
			info.className = 'bb-peek-info';
			var open = document.createElement( 'button' );
			open.type      = 'button';
			open.className = 'bb-peek-open';
			open.setAttribute( 'aria-expanded', 'false' );
			open.setAttribute( 'aria-controls', 'bb-peek-lines' );
			var chev = document.createElement( 'span' );
			chev.className = 'bb-peek-chev';
			chev.setAttribute( 'aria-hidden', 'true' );
			chev.textContent = '\u25B2';
			// No label: the figure and the chevron say it all (his trim).
			// The button still announces itself to screen readers.
			open.setAttribute( 'aria-label', '<?php echo esc_js( __( 'Grand total', 'addon-boss' ) ); ?>' );
			var figr = document.createElement( 'span' );
			figr.className = 'bb-peek-figure';
			figr.appendChild( info );
			figr.appendChild( chev );
			open.appendChild( figr );
			var cta  = document.createElement( 'button' );
			cta.type = 'button';
			cta.className   = 'bb-peek-cta';
			cta.textContent = ( real.textContent || '' ).trim() || 'Add to cart';
			row.appendChild( open );
			row.appendChild( cta );
			bbPeekBar.appendChild( lines );
			bbPeekBar.appendChild( row );
			document.body.appendChild( bbPeekBar );
			open.addEventListener( 'click', function () {
				var src = bbStBox() && bbStLines( bbStBox() );
				lines.hidden = ! lines.hidden;
				if ( ! lines.hidden && src ) { lines.innerHTML = src.innerHTML; }
				open.setAttribute( 'aria-expanded', lines.hidden ? 'false' : 'true' );
				bbPeekBar.classList.toggle( 'is-open', ! lines.hidden );
			} );
			// The peek bar owns the pinned total from here: the receipt stands
			// down to a plain block (bb-has-peek), so the figure is never
			// pinned to the viewport twice at once.
			var stbox = bbStBox();
			if ( stbox ) { stbox.classList.add( 'bb-has-peek' ); }
			cta.addEventListener( 'click', function () { real.click(); } );
			new IntersectionObserver( function ( entries ) {
				bbPeekBar.bbOff = ! entries[ 0 ].isIntersecting;
				bbPeekBar.classList.toggle( 'is-shown', !! ( bbPeekBar.bbOff && bbPeekBar.bbHasTotal ) );
				if ( ! bbPeekBar.classList.contains( 'is-shown' ) ) { bbStPeekFold(); }
			} ).observe( real );
			// On a grid the options driver never runs, so nothing would ever call
			// bbStPeekSync again.
			//
			// 🔴 WATCH THE FIGURE, do not listen for the announcement. The grid
			// dispatches bb-grid-recount partway through its own tally, BEFORE
			// it writes the new total: a listener on it reads the figure that
			// was there a moment ago. On the first quantity of a fresh page
			// that is the empty string, so the bar concluded there was no total
			// yet, hid itself, and — no further event ever coming — stayed
			// hidden for the rest of the visit however much was ordered.
			// Stefanos saw exactly that on the club polo, 1 September, against
			// David's live shop where the bar does appear.
			//
			// The total element is the thing the bar mirrors, so observing it
			// is the honest seam and it cannot be raced: whenever the figure is
			// written, whoever wrote it and whenever, the bar follows.
			var bbStTotalBox = bbStBox();
			if ( bbStTotalBox && 'MutationObserver' in window ) {
				new MutationObserver( bbStPeekSync ).observe( bbStTotalBox, {
					childList: true,
					characterData: true,
					subtree: true,
					attributes: true,
					attributeFilter: [ 'hidden', 'class' ]
				} );
			}
			// The events still carry the button's own state, because a grid can
			// go from addable back to nothing (clearing every quantity) without
			// the total's markup being the thing that changed. They run after
			// the observer has had its say, never instead of it.
			var bbGridRoot = document.querySelector( '.bb-standalone-grid' );
			if ( bbGridRoot ) {
				bbGridRoot.addEventListener( 'bb-grid-recount', bbStPeekSync );
				bbGridRoot.addEventListener( 'bb-fees-settled', bbStPeekSync );
			}
			bbStPeekSync();
		}
		if ( 'loading' !== document.readyState ) {
			bbStPeekMount();
		} else {
			document.addEventListener( 'DOMContentLoaded', bbStPeekMount );
		}
		// First paint: the echoes and the scope line tell the story straight
		// away, on the fold summaries too, so a shut group never starts blank.
		( function () {
			bbEchoAll();
			bbEchoFolds();
			bbScope();
			bbStPeekSync();
		} )();
		} )();
	<?php
	} finally {
		// Closes whether this returns or throws. The buffer holds the WHOLE boot
		// script, so leaving it open does not lose a stylesheet, it swallows the
		// rest of the page.
		$bb_js = (string) ob_get_clean();
	}
	return $bb_js;
}

// =================================================================
// ADMIN: the Option Sets library screen + the per-product "Product options"
// tab. Lifted from slot-options at the split. Menu parent + admin CSS come
// from includes/admin-menu.php via the addon_boss_menu_parent /
// addon_boss_engine_admin_css filters.
// =================================================================

// =================================================================
// Admin: the Option sets screen
// =================================================================

add_action( 'admin_menu', 'addon_boss_register_option_sets_page', 12 );

/** The page's hook suffix, captured at registration for the asset gate. */
function addon_boss_option_sets_hook( string $set = '' ): string {
	static $hook = '';
	if ( '' !== $set ) {
		$hook = $set;
	}
	return $hook;
}

function addon_boss_register_option_sets_page(): void {
	// A library nobody can attach to anything is a menu item that only puzzles a
	// merchant, so the screen goes with the feature.
	if ( ! addon_boss_options_available() ) {
		return;
	}
	// The Option Sets library page attaches under the AddOnBoss menu, provided
	// by includes/admin-menu.php through this filter.
	$parent = (string) apply_filters( 'addon_boss_menu_parent', '' );
	if ( '' === $parent ) {
		return;
	}
	addon_boss_option_sets_hook(
		(string) add_submenu_page(
			$parent,
			__( 'Option sets', 'addon-boss' ),
			__( 'Option sets', 'addon-boss' ),
			'manage_woocommerce',
			'addon-boss-option-sets',
			'addon_boss_render_option_sets_page'
		)
	);
}

add_action( 'admin_enqueue_scripts', 'addon_boss_option_sets_assets' );

/**
 * The version for an engine asset URL. The host plugin already owns a
 * cache-busting helper (addon-boss.php: plugin version in production,
 * the file's mtime under WP_DEBUG) - the bug was that these enqueues
 * never called it, so a dev store served edited stylesheets from the
 * browser cache under the same version string. This adapter maps the
 * filtered URL back to the host-relative path the helper expects, and
 * steps aside for files some other host's filter pointed elsewhere.
 */
function addon_boss_engine_asset_version( string $url ): string {
	if ( function_exists( 'addon_boss_asset_version' ) && defined( 'ADDON_BOSS_URL' ) && 0 === strpos( $url, ADDON_BOSS_URL ) ) {
		return addon_boss_asset_version( substr( $url, strlen( ADDON_BOSS_URL ) ) );
	}
	return defined( 'ADDON_BOSS_VERSION' ) ? ADDON_BOSS_VERSION : '1';
}

function addon_boss_option_sets_assets( string $hook ): void {
	if ( '' === $hook || $hook !== addon_boss_option_sets_hook() ) {
		return;
	}
	// The admin stylesheet arrives through the filter (css/admin.css), so the
	// Option Sets page styles correctly.
	$css = (string) apply_filters( 'addon_boss_engine_admin_css', '' );
	if ( '' !== $css ) {
		wp_enqueue_style( 'addon-boss-options-admin', $css, array(), addon_boss_engine_asset_version( $css ) );
		// The tag chips ride the same sheet, so a build without the module
		// ships no rules for a thing it cannot draw.
		if ( function_exists( 'addon_boss_tag_styles' ) ) {
			wp_add_inline_style( 'addon-boss-options-admin', addon_boss_tag_styles() );
		}
	}
}

// The product-options tab lives on every product-edit screen (not just the
// Option Sets page), so the engine loads its admin stylesheet + JS there too.
// Priority 20 runs after other plugins' admin enqueues. The stylesheet always
// comes with the panel: a post-split BundleBoss styles only its own bundle
// panels, so nobody else owns these rules any more (loading after a pre-split
// BundleBoss is harmless, the rules are same-lineage). The script still steps
// aside when the bundle-boss-admin handle is present, because a pre-split
// BundleBoss binds the same generic admin behaviours.
add_action( 'admin_enqueue_scripts', 'addon_boss_options_product_admin_assets', 20 );

function addon_boss_options_product_admin_assets( $hook ): void {
	if ( ! in_array( $hook, array( 'post.php', 'post-new.php' ), true ) ) {
		return;
	}
	$screen = function_exists( 'get_current_screen' ) ? get_current_screen() : null;
	if ( ! $screen || 'product' !== $screen->id ) {
		return;
	}
	$css = (string) apply_filters( 'addon_boss_engine_admin_css', '' );
	if ( '' !== $css ) {
		wp_enqueue_style( 'addon-boss-options-admin', $css, array(), addon_boss_engine_asset_version( $css ) );
	}
	if ( ! wp_script_is( 'bundle-boss-admin', 'enqueued' ) ) {
		$js = (string) apply_filters( 'addon_boss_engine_admin_js', '' );
		if ( '' !== $js ) {
			wp_enqueue_script( 'addon-boss-options-admin', $js, array( 'jquery', 'select2', 'jquery-ui-sortable' ), addon_boss_engine_asset_version( $js ), true );
			wp_localize_script(
				'addon-boss-options-admin',
				'addonBossAdmin',
				(array) apply_filters(
					'addon_boss_engine_admin_localize',
					array(
						'ajaxUrl' => admin_url( 'admin-ajax.php' ),
						'nonce'   => wp_create_nonce( 'addon_boss_admin' ),
						'i18n'    => array(),
					)
				)
			);
		}
	}
}

// The saved order of option-set groups (names), kept apart from the sets so an
// empty group a merchant just made is still there after a reload.
const ADDON_BOSS_OPTION_SET_GROUPS_STORE = 'bundle_boss_option_set_groups';

function addon_boss_option_set_groups(): array {
	$saved = get_option( ADDON_BOSS_OPTION_SET_GROUPS_STORE, array() );
	return is_array( $saved ) ? array_values( array_filter( array_map( 'strval', $saved ) ) ) : array();
}

/**
 * The library arranged the way a merchant sees it: folder name => [set id =>
 * name], in the order the list page put the folders in, with everything in no
 * folder last under an empty key.
 *
 * A folder holding nothing is not listed: it is real on the library page (an
 * empty folder a merchant just made is still theirs) but there is nothing to
 * attach from it, and offering "everything in here" over an empty folder is a
 * control that does nothing.
 *
 * @return array<string,array<string,string>>
 */
function addon_boss_option_sets_by_group(): array {
	$sets   = addon_boss_option_sets();
	$out    = array();
	$loose  = array();
	$known  = addon_boss_option_set_groups();
	foreach ( $known as $bb_g ) {
		$out[ $bb_g ] = array();
	}
	foreach ( $sets as $bb_id => $bb_set ) {
		$bb_g = (string) ( $bb_set['group'] ?? '' );
		if ( '' === $bb_g ) {
			$loose[ $bb_id ] = (string) ( $bb_set['name'] ?? $bb_id );
			continue;
		}
		// A set naming a folder the order list never heard of still belongs
		// somewhere, so its folder joins the end rather than swallowing the set.
		if ( ! isset( $out[ $bb_g ] ) ) {
			$out[ $bb_g ] = array();
		}
		$out[ $bb_g ][ $bb_id ] = (string) ( $bb_set['name'] ?? $bb_id );
	}
	$out = array_filter( $out ); // drop the folders with nothing in them
	if ( $loose ) {
		$out[''] = $loose;
	}
	return $out;
}

add_action( 'wp_ajax_addon_boss_save_set_groups', 'addon_boss_ajax_save_set_groups' );
/**
 * Persist the grouping from the list page: which group each set sits in, plus
 * the ordered list of group names. One full-state write, so a drop, a rename
 * and a delete all travel the same path (the client sends the whole picture).
 */
function addon_boss_ajax_save_set_groups(): void {
	if ( ! current_user_can( 'manage_woocommerce' ) ) {
		wp_send_json_error( 'forbidden', 403 );
	}
	check_ajax_referer( 'addon_boss_set_groups' );

	$assignments = ( isset( $_POST['assignments'] ) && is_array( $_POST['assignments'] ) )
		? wp_unslash( $_POST['assignments'] ) // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- each id + value sanitised in the loop.
		: array();
	$order = ( isset( $_POST['order'] ) && is_array( $_POST['order'] ) )
		? array_map( 'sanitize_text_field', wp_unslash( $_POST['order'] ) )
		: array();

	$sets = addon_boss_option_sets();
	// A set MOVING INTO a group is the moment worth noticing: products already
	// carrying that group do not have it yet, and hunting them down by hand is
	// the job the group was supposed to save. Recorded here and handed back, so
	// the page can offer rather than a group silently changing live products.
	$bb_joined = array();
	foreach ( $assignments as $set_id => $group ) {
		$set_id = sanitize_text_field( (string) $set_id );
		if ( ! isset( $sets[ $set_id ] ) ) {
			continue;
		}
		$bb_group = sanitize_text_field( (string) $group );
		$bb_was   = (string) ( $sets[ $set_id ]['group'] ?? '' );
		if ( '' !== $bb_group && $bb_group !== $bb_was ) {
			$bb_missing = addon_boss_products_missing_set( $bb_group, $set_id );
			if ( $bb_missing ) {
				$bb_joined[] = array(
					'set'   => $set_id,
					'name'  => (string) ( $sets[ $set_id ]['name'] ?? $set_id ),
					'group' => $bb_group,
					'count' => count( $bb_missing ),
				);
			}
		}
		$sets[ $set_id ]['group'] = $bb_group;
	}
	update_option( ADDON_BOSS_OPTION_SETS_STORE, $sets, false );

	// Keep unique, non-empty names in the given order.
	$clean = array();
	foreach ( $order as $name ) {
		$name = trim( $name );
		if ( '' !== $name && ! in_array( $name, $clean, true ) ) {
			$clean[] = $name;
		}
	}
	update_option( ADDON_BOSS_OPTION_SET_GROUPS_STORE, $clean, false );

	wp_send_json_success( array( 'joined' => $bb_joined ) );
}

/**
 * Products carrying a group that do NOT yet have one of its sets.
 *
 * Findable because every row attached through the group picker records the
 * group it arrived with, which is the whole reason that was stored.
 *
 * @param string $group  The group name.
 * @param string $set_id The set they may be missing.
 * @return int[] Product ids.
 */
function addon_boss_products_missing_set( string $group, string $set_id ): array {
	if ( '' === $group || '' === $set_id ) {
		return array();
	}
	$bb_q = new WP_Query(
		array(
			'post_type'      => 'product',
			'post_status'    => array( 'publish', 'draft', 'private', 'pending' ),
			'posts_per_page' => 200,
			'fields'         => 'ids',
			'meta_key'       => ADDON_BOSS_PRODUCT_OPTIONS_META, // phpcs:ignore WordPress.DB.SlowDBQuery.slow_db_query_meta_key -- a bounded admin-only lookup, not a front-end query.
		)
	);
	$out = array();
	foreach ( $bb_q->posts as $bb_pid ) {
		$bb_rows  = addon_boss_flatten_option_config( (array) get_post_meta( (int) $bb_pid, ADDON_BOSS_PRODUCT_OPTIONS_META, true ) );
		$bb_from  = false;
		$bb_hasit = false;
		foreach ( $bb_rows as $bb_r ) {
			if ( ( $bb_r['set'] ?? '' ) === $set_id ) {
				$bb_hasit = true;
				break;
			}
			if ( (string) ( $bb_r['from_group'] ?? '' ) === $group ) {
				$bb_from = true;
			}
		}
		if ( $bb_from && ! $bb_hasit ) {
			$out[] = (int) $bb_pid;
		}
	}
	return $out;
}

add_action( 'wp_ajax_addon_boss_apply_set_to_group', 'addon_boss_ajax_apply_set_to_group' );
/**
 * Add one set to every product carrying its group and missing it.
 *
 * Only ever runs because somebody pressed the offer. Nothing about a group
 * reaches a live product on its own, which is the line between this and simply
 * linking the group, where editing the library would change what is on sale.
 */
function addon_boss_ajax_apply_set_to_group(): void {
	if ( ! current_user_can( 'manage_woocommerce' ) ) {
		wp_send_json_error( 'forbidden', 403 );
	}
	check_ajax_referer( 'addon_boss_set_groups' );

	$bb_set   = isset( $_POST['set'] ) ? sanitize_text_field( wp_unslash( $_POST['set'] ) ) : '';
	$bb_group = isset( $_POST['group'] ) ? sanitize_text_field( wp_unslash( $_POST['group'] ) ) : '';
	if ( '' === $bb_set || '' === $bb_group || ! addon_boss_option_set( $bb_set ) ) {
		wp_send_json_error( 'unknown set', 400 );
	}

	$bb_done = 0;
	foreach ( addon_boss_products_missing_set( $bb_group, $bb_set ) as $bb_pid ) {
		$bb_product = wc_get_product( $bb_pid );
		if ( ! $bb_product instanceof WC_Product ) {
			continue;
		}
		// Appended, never inserted mid-list: the merchant's own arrangement is
		// theirs, and a set arriving in the middle of it would be a second
		// surprise on top of the one they asked for.
		$bb_rows   = addon_boss_product_option_config( $bb_product );
		$bb_rows[] = array( 'set' => $bb_set, 'from_group' => $bb_group );
		addon_boss_save_product_option_config( $bb_product, $bb_rows );
		$bb_done++;
	}
	wp_send_json_success( array( 'applied' => $bb_done ) );
}

function addon_boss_render_option_sets_page(): void {
	if ( ! current_user_can( 'manage_woocommerce' ) ) {
		wp_die( esc_html__( 'Sorry, you are not allowed to do that.', 'addon-boss' ) );
	}
	$notice = get_transient( 'bundle_boss_option_sets_notice_' . get_current_user_id() );
	if ( $notice ) {
		delete_transient( 'bundle_boss_option_sets_notice_' . get_current_user_id() );
		// Tolerate the old plain-string shape as well as the {m,t} array.
		$msg  = is_array( $notice ) ? (string) ( $notice['m'] ?? '' ) : (string) $notice;
		$type = is_array( $notice ) ? (string) ( $notice['t'] ?? 'success' ) : 'success';
		// A notice may carry its one next action (label + URL): the checklist's
		// "now attach it" after a first save. Escaped here, where it prints.
		$act  = is_array( $notice ) && is_array( $notice['a'] ?? null ) ? $notice['a'] : array();
		$link = '';
		if ( '' !== (string) ( $act['l'] ?? '' ) && '' !== (string) ( $act['u'] ?? '' ) ) {
			$link = ' <a class="button button-small bb-notice-act" href="' . esc_url( (string) $act['u'] ) . '">' . esc_html( (string) $act['l'] ) . '</a>';
		}
		printf(
			'<div class="notice notice-%1$s is-dismissible"><p>%2$s%3$s</p></div>',
			esc_attr( $type ),
			esc_html( $msg ),
			wp_kses( $link, addon_boss_kses_allowed() )
		);
	}

	$editing = isset( $_GET['set'] ) ? sanitize_text_field( wp_unslash( $_GET['set'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only routing.
	$recipe  = isset( $_GET['recipe'] ) ? sanitize_key( wp_unslash( $_GET['recipe'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only routing.
	echo '<div class="wrap">';
	if ( 'new' === $editing && '' === $recipe ) {
		// Never a blank page: a brand-new set opens on the starting points, the
		// same on-ramp idiom the price-table gallery established. Every stored
		// set, and a picked recipe, goes straight to the editor.
		addon_boss_render_new_set_onramp();
	} elseif ( '' !== $editing ) {
		addon_boss_render_option_set_editor( $editing, 'new' === $editing ? addon_boss_new_set_recipe_seed( $recipe ) : null );
		addon_boss_set_preview_panel();
	} else {
		addon_boss_render_option_sets_list();
	}
	echo '</div>';
}

/**
 * The seed a new-set recipe pre-fills the editor with, or null for a scratch
 * start (and for anything unrecognised, which must never block the editor).
 *
 * Two families of recipe, both fully editable before anything saves:
 *  - a ready-made shape from the starter roster ('starter_*'), arriving with
 *    its rows, charges and pick rule filled in;
 *  - a registered set kind ('kind_<kind>'), arriving empty but with the kind
 *    already chosen, so its own panel (a price table's template gallery) takes
 *    over from there. Only kinds this build registers qualify, so a stripped
 *    build offers exactly the kinds it can honour.
 */
function addon_boss_new_set_recipe_seed( string $recipe ): ?array {
	$starters = addon_boss_option_starter_sets();
	if ( isset( $starters[ $recipe ] ) ) {
		// Through the set sanitiser, so the seed carries the exact stored shape
		// the editor expects: generated option keys, resolved name-map swatches,
		// lawful bounds. The keys ride the form and persist on save.
		return addon_boss_sanitize_option_set( $starters[ $recipe ] );
	}
	if ( 0 === strpos( $recipe, 'kind_' ) ) {
		$kind = substr( $recipe, 5 );
		if ( 'choices' !== $kind && isset( addon_boss_option_set_kinds()[ $kind ] ) ) {
			return addon_boss_sanitize_option_set(
				array(
					'name'    => '',
					'kind'    => $kind,
					'options' => array(),
				)
			);
		}
	}
	return null;
}

/**
 * The new-set on-ramp: a gallery of starting points in the same tile idiom as
 * the price-table template picker, with a quiet start-from-scratch beside
 * them. Server-rendered links, so it works before a line of script arrives.
 */
function addon_boss_render_new_set_onramp(): void {
	$base = admin_url( 'admin.php?page=addon-boss-option-sets&set=new' );
	echo '<div class="bb-optsets">';
	echo '<h1 class="screen-reader-text">' . esc_html__( 'New option set', 'addon-boss' ) . '</h1>';
	addon_boss_optsets_header(
		__( 'New option set', 'addon-boss' ),
		'<a href="' . esc_url( admin_url( 'admin.php?page=addon-boss-option-sets' ) ) . '" class="button">' . esc_html__( 'Back to sets', 'addon-boss' ) . '</a>'
	);
	echo '<p class="bb-lede">' . esc_html__( 'Start from the closest template, or from scratch. Nothing is saved until you press Save set.', 'addon-boss' ) . '</p>';
	echo '<div class="bb-onramp-tiles" id="bb-onramp-tiles">';
	foreach ( addon_boss_option_starter_sets() as $bb_rid => $bb_starter ) {
		echo '<a class="bb-onramp-tile" href="' . esc_url( $base . '&recipe=' . rawurlencode( (string) $bb_rid ) ) . '" data-recipe="' . esc_attr( (string) $bb_rid ) . '">';
		echo '<span class="bb-mini bb-onramp-mini">';
		foreach ( array_slice( (array) $bb_starter['options'], 0, 8 ) as $bb_opt ) {
			$bb_sw = (string) ( $bb_opt['swatch'] ?? '' );
			echo '' !== $bb_sw
				? '<span class="bb-mini-dot" style="background:' . esc_attr( $bb_sw ) . '"></span>'
				: '<span class="bb-mini-txt">' . esc_html( (string) ( $bb_opt['label'] ?? '' ) ) . '</span>';
		}
		echo '</span>';
		echo '<span class="bb-onramp-tt">' . esc_html( (string) $bb_starter['name'] ) . '</span>';
		if ( ! empty( $bb_starter['purpose'] ) ) {
			echo '<span class="bb-onramp-sub">' . esc_html( (string) $bb_starter['purpose'] ) . '</span>';
		}
		echo '</a>';
	}
	// Kinds priced by their own panel: whatever this build registers beyond the
	// plain list gets a tile, worded by its own module, so a build without a
	// module never offers a page it cannot render.
	foreach ( addon_boss_option_set_kinds() as $bb_k => $bb_spec ) {
		if ( 'choices' === $bb_k ) {
			continue;
		}
		$bb_tt = (string) ( $bb_spec['recipe_label'] ?? '' );
		if ( '' === $bb_tt ) {
			$bb_tt = ucfirst( (string) ( $bb_spec['label'] ?? $bb_k ) );
		}
		echo '<a class="bb-onramp-tile bb-onramp-tile--kind" href="' . esc_url( $base . '&recipe=' . rawurlencode( 'kind_' . $bb_k ) ) . '" data-recipe="' . esc_attr( 'kind_' . $bb_k ) . '">';
		echo '<span class="bb-onramp-tt">' . esc_html( $bb_tt ) . '</span>';
		if ( ! empty( $bb_spec['desc'] ) ) {
			echo '<span class="bb-onramp-sub">' . esc_html( (string) $bb_spec['desc'] ) . '</span>';
		}
		echo '</a>';
	}
	echo '<a class="bb-onramp-tile bb-onramp-tile--blank" href="' . esc_url( $base . '&recipe=scratch' ) . '" data-recipe="scratch">';
	echo '<span class="bb-onramp-tt">' . esc_html__( 'Start from scratch', 'addon-boss' ) . '</span>';
	echo '<span class="bb-onramp-sub">' . esc_html__( 'An empty set. Add your own choices.', 'addon-boss' ) . '</span>';
	echo '</a>';
	echo '</div>';
	// The rate-or-list rule of thumb, ON the screen where that choice is made.
	// Both kinds sell a size and their tiles cannot carry the whole
	// distinction, so the one-line test sits under them, and only when both
	// doors are actually offered: a build with one or neither has no fork to
	// explain, and printing the note there would name a kind that is not on
	// the screen.
	$bb_fork = addon_boss_option_set_kinds();
	if ( isset( $bb_fork['measured'], $bb_fork['table'] ) ) {
		echo '<p class="bb-onramp-note">' . esc_html__( 'Not sure which? If the price comes from a formula, choose Priced by a rate. If you price from a list, choose Priced from a table.', 'addon-boss' ) . '</p>';
	}
	echo '</div>';
}

/**
 * The one pass behind every usage figure: each product's option config read
 * once per request, and each set mapped to the DISTINCT products that attach
 * it. A row's own set counts; a rule's trigger mentioning a set does not, so
 * "Used on N products" and the list behind it always tell the same story.
 *
 * A product in the bin does not count (his call, 5 Sept): its config rides
 * along only in case it is restored, and a figure that counted it would
 * disagree with the Products screen, whose All view never shows the bin.
 * Drafts and every other live status count, named beside the name.
 *
 * The pass is remembered for the request; pass true to forget it, which a
 * test or a long import does after changing what products carry.
 *
 * @param bool $forget Drop the remembered pass and return empty.
 * @return array<string,array<int,true>> set id => [ product id => true ].
 */
function addon_boss_option_set_usage_map( bool $forget = false ): array {
	static $map = null;
	if ( $forget ) {
		$map = null;
		return array();
	}
	if ( null !== $map ) {
		return $map;
	}
	$map = array();
	global $wpdb;
	$bb_rows = $wpdb->get_results( // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching -- one prepared read per request over our own meta key; mapped in PHP and static-cached.
		$wpdb->prepare(
			"SELECT pm.post_id, pm.meta_value
			 FROM {$wpdb->postmeta} pm
			 INNER JOIN {$wpdb->posts} p ON p.ID = pm.post_id
			 WHERE pm.meta_key = %s AND p.post_status NOT IN ( 'trash', 'auto-draft' )",
			ADDON_BOSS_PRODUCT_OPTIONS_META
		)
	);
	foreach ( (array) $bb_rows as $bb_meta ) {
		$bb_cfg = maybe_unserialize( $bb_meta->meta_value );
		if ( ! is_array( $bb_cfg ) ) {
			continue;
		}
		foreach ( addon_boss_flatten_option_config( $bb_cfg ) as $bb_row ) {
			$bb_sid = (string) ( $bb_row['set'] ?? '' );
			if ( '' !== $bb_sid ) {
				$map[ $bb_sid ][ (int) $bb_meta->post_id ] = true; // once per product, however many rows.
			}
		}
	}
	return $map;
}

/**
 * How many products attach this set. See the map above for what counts.
 *
 * @param string $set_id The set.
 * @return int
 */
function addon_boss_option_set_usage( string $set_id ): int {
	return count( addon_boss_option_set_usage_map()[ $set_id ] ?? array() );
}

/**
 * WHICH products attach this set: the same truth as the count, as ids.
 *
 * @param string $set_id The set.
 * @return int[]
 */
function addon_boss_option_set_used_on( string $set_id ): array {
	return array_keys( addon_boss_option_set_usage_map()[ $set_id ] ?? array() );
}

/**
 * The list behind "Used on N products": a handful of named, linked products
 * for the card's own fold, the true total, and the route to the whole list
 * on the Products screen.
 *
 * @param string $set_id The set.
 * @param int    $cap    How many named products the fold shows.
 * @return array
 */
function addon_boss_set_products_payload( string $set_id, int $cap = 20, string $q = '', int $page = 1 ): array {
	$bb_ids = addon_boss_option_set_used_on( $set_id );

	// One primary-key read for the names and statuses, then everything in
	// PHP: the ids ARE the truth the figure counted, and WP_Query's default
	// status rules would quietly drop the drafts the count includes.
	$bb_rows = array();
	if ( $bb_ids ) {
		global $wpdb;
		$bb_in   = implode( ',', array_map( 'intval', $bb_ids ) );
		$bb_rows = (array) $wpdb->get_results( // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- a primary-key IN over our own integer ids.
			"SELECT ID, post_title, post_status FROM {$wpdb->posts} WHERE ID IN ( {$bb_in} )"
		);
	}
	usort(
		$bb_rows,
		static function ( $a, $b ) {
			return strcasecmp( (string) $a->post_title, (string) $b->post_title );
		}
	);

	$q = trim( $q );
	if ( '' !== $q ) {
		$bb_rows = array_values( array_filter(
			$bb_rows,
			static function ( $bb_row ) use ( $q ) {
				if ( function_exists( 'mb_stripos' ) ? false !== mb_stripos( (string) $bb_row->post_title, $q ) : false !== stripos( (string) $bb_row->post_title, $q ) ) {
					return true;
				}
				return ltrim( $q, '#' ) === (string) $bb_row->ID; // "#123" or "123" finds the product by id.
			}
		) );
	}

	$cap      = max( 1, $cap );
	$page     = max( 1, $page );
	$bb_found = count( $bb_rows );
	$bb_items = array();
	foreach ( array_slice( $bb_rows, ( $page - 1 ) * $cap, $cap ) as $bb_row ) {
		$bb_title = (string) $bb_row->post_title;
		if ( '' === $bb_title ) {
			$bb_title = '#' . (int) $bb_row->ID;
		}
		// A product the shop cannot sell right now says so beside its name,
		// in the status word core already translated.
		if ( 'publish' !== (string) $bb_row->post_status ) {
			$bb_obj = get_post_status_object( (string) $bb_row->post_status );
			if ( $bb_obj && ! empty( $bb_obj->label ) ) {
				$bb_title = sprintf( '%1$s (%2$s)', $bb_title, $bb_obj->label );
			}
		}
		$bb_url     = get_edit_post_link( (int) $bb_row->ID, 'raw' );
		$bb_items[] = array(
			'title' => $bb_title,
			'url'   => $bb_url ? $bb_url : admin_url( 'post.php?post=' . (int) $bb_row->ID . '&action=edit' ),
		);
	}
	return array(
		'items'     => $bb_items,
		'total'     => count( $bb_ids ),
		'found'     => $bb_found,
		'more'      => ( $page * $cap ) < $bb_found,
		'all_url'   => admin_url( 'edit.php?post_type=product&aob_set=' . rawurlencode( $set_id ) ),
		/* translators: %s: how many products carry the set. */
		'all_label' => sprintf( __( 'All %s in Products', 'addon-boss' ), number_format_i18n( count( $bb_ids ) ) ),
	);
}

add_action( 'wp_ajax_addon_boss_set_products', 'addon_boss_ajax_set_products' );
/** The list above, spoken over admin-ajax. */
function addon_boss_ajax_set_products(): void {
	if ( ! current_user_can( 'manage_woocommerce' ) ) {
		wp_send_json_error( 'forbidden', 403 );
	}
	check_ajax_referer( 'addon_boss_set_groups' );
	wp_send_json_success( addon_boss_set_products_payload(
		sanitize_text_field( wp_unslash( $_POST['set'] ?? '' ) ),
		20,
		sanitize_text_field( wp_unslash( $_POST['q'] ?? '' ) ),
		max( 1, absint( $_POST['page'] ?? 1 ) )
	) );
}

add_action( 'pre_get_posts', 'addon_boss_products_by_set_query' );
/**
 * The Products screen, filtered to one set: exactly the ids the usage figure
 * counted, so the count and the screen can never disagree.
 *
 * @param WP_Query $query The list's main query.
 */
function addon_boss_products_by_set_query( $query ): void {
	if ( ! is_admin() || wp_doing_ajax() || ! $query->is_main_query() ) {
		return;
	}
	if ( 'product' !== (string) $query->get( 'post_type' ) ) {
		return;
	}
	$bb_set = isset( $_GET['aob_set'] ) ? sanitize_text_field( wp_unslash( $_GET['aob_set'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- a read-only list filter, like any list-table filter link.
	if ( '' === $bb_set ) {
		return;
	}
	$bb_ids = addon_boss_option_set_used_on( $bb_set );
	$query->set( 'post__in', $bb_ids ? $bb_ids : array( 0 ) );
}

add_action( 'admin_notices', 'addon_boss_products_by_set_notice' );
/** The filtered Products screen says which set it is showing, and the ways back. */
function addon_boss_products_by_set_notice(): void {
	$bb_screen = function_exists( 'get_current_screen' ) ? get_current_screen() : null;
	if ( ! $bb_screen || 'edit-product' !== $bb_screen->id ) {
		return;
	}
	$bb_set = isset( $_GET['aob_set'] ) ? sanitize_text_field( wp_unslash( $_GET['aob_set'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- names the read-only filter already applied above.
	if ( '' === $bb_set ) {
		return;
	}
	$bb_sets = addon_boss_option_sets();
	$bb_name = (string) ( $bb_sets[ $bb_set ]['name'] ?? $bb_set );
	echo '<div class="notice notice-info"><p>'
		. sprintf(
			/* translators: %s: the option set's name. */
			esc_html__( 'Products carrying %s.', 'addon-boss' ),
			'<strong>' . esc_html( $bb_name ) . '</strong>'
		)
		. ' <a href="' . esc_url( admin_url( 'edit.php?post_type=product' ) ) . '">' . esc_html__( 'Show every product', 'addon-boss' ) . '</a>'
		. ' &middot; <a href="' . esc_url( admin_url( 'admin.php?page=addon-boss-option-sets' ) ) . '">' . esc_html__( 'Back to Option sets', 'addon-boss' ) . '</a>'
		. '</p></div>';
}

/**
 * A price string WITHOUT the wc_price filters, so a VAT-toggle plugin cannot
 * wrap it in its dual-basis markup. Mirrors wc_price symbol placement and
 * separators; for admin previews and anywhere one plain figure is wanted.
 *
 * 🔴 Originally built for the admin preview chips; the STOREFRONT kept
 * stripping filtered wc_price output, so on David's shop every measured
 * size chip printed two numbers side by side (his acrylic panel, 2 Sept).
 * Every wp_strip_all_tags( wc_price( … ) ) in the engine now routes here.
 */
function addon_boss_plain_price( float $amount ): string {
	$formatted = number_format(
		$amount,
		wc_get_price_decimals(),
		wc_get_price_decimal_separator(),
		wc_get_price_thousand_separator()
	);
	return sprintf( get_woocommerce_price_format(), get_woocommerce_currency_symbol(), $formatted );
}

/** One preview chip (shared by the list cards and the product panel). */
function addon_boss_option_preview_chip( array $opt, string $class = '' ): string {
	$dot = $opt['swatch']
		? '<span class="bb-opt-dot" style="background:' . esc_attr( addon_boss_swatch_css( $opt ) ) . '"></span>'
		: '';
	// wc_price runs through a VAT-toggle plugin filter that, in wp-admin, wraps
	// it in dual-basis markup WITHOUT the CSS that hides the off-side, so the two
	// figures run together. The admin preview only needs the plain surcharge, so
	// bypass wc_price there; keep it on the front end where the toggle can switch.
	$delta = (float) $opt['delta'];
	if ( 0.0 === $delta ) {
		$bump = '';
	} elseif ( is_admin() ) {
		// esc_html, not a bare concatenation. addon_boss_plain_price() builds its
		// string from get_woocommerce_price_format() and
		// get_woocommerce_currency_symbol(), and both of those are filter values,
		// so anything hooking them lands here. Nothing between that helper and
		// this echo escaped it, and "escaped inside" is what the comment on the
		// two call sites claimed. It was not.
		// aob-money-raw: the merchant's own configured surcharge, on their own
		// screen. An admin preview states what was typed in, not what a shopper
		// would be charged after tax.
		$bump = ' <b>' . esc_html( ( $delta > 0 ? '+' : '-' ) . addon_boss_plain_price( abs( $delta ) ) ) . '</b>';
	} else {
		// The storefront twin, where it IS what a shopper pays, so it converts.
		$bump = ' <b>' . wp_kses_post( addon_boss_money( $delta, null, array( 'sign' => true ) ) ) . '</b>';
	}
	$cls = 'bb-opt-chip' . ( $bump ? ' has-bump' : '' ) . ( '' !== $class ? ' ' . $class : '' );
	return '<span class="' . esc_attr( $cls ) . '">' . $dot . esc_html( $opt['label'] ) . $bump . '</span>';
}

/**
 * A whole preview row: the first $cap chips visible, the rest behind a
 * clickable "+N" that expands the row in place (and collapses it again).
 * With $cap or fewer options there is no button and nothing to expand.
 */
function addon_boss_option_preview_row( array $options, int $cap ): string {
	$html = '';
	foreach ( array_values( $options ) as $i => $opt ) {
		$html .= addon_boss_option_preview_chip( $opt, $i >= $cap ? 'bb-chip-overflow' : '' );
	}
	$hidden = count( $options ) - $cap;
	if ( $hidden > 0 ) {
		$more  = sprintf( '+%d', $hidden );
		$html .= '<button type="button" class="bb-opt-chip bb-opt-more" aria-expanded="false"'
			. ' data-more-label="' . esc_attr( $more ) . '"'
			. ' data-less-label="' . esc_attr__( 'Show fewer', 'addon-boss' ) . '">'
			. esc_html( $more ) . '</button>';
	}
	return $html;
}

/** The BundleBoss page header (brand square + crumb + action). */
function addon_boss_optsets_header( string $crumb, string $action_html = '' ): void {
	echo '<div class="bb-optsets-head">';
	// The host's own mark, when it has one. An <img> src only: the seam hands
	// over a URL rather than markup, so a host can never post HTML into this
	// header. Empty leaves the name on its own exactly as before, which is what
	// a host without a mark still gets.
	$bb_mark = esc_url_raw( (string) apply_filters( 'addon_boss_engine_brand_mark', '' ) );
	echo '<span class="bb-brandmark">';
	if ( '' !== $bb_mark ) {
		echo '<img class="bb-brand-mark" src="' . esc_url( $bb_mark ) . '" alt="" width="18" height="18">';
	}
	echo esc_html( (string) apply_filters( 'addon_boss_engine_brand_name', '' ) ) . '</span>';
	echo '<span class="bb-crumb">/ ' . esc_html( $crumb ) . '</span>';
	// kses rather than a promise. Every caller builds this from esc_url and
	// esc_html already, but "the callers escape it" is an assertion nobody can
	// verify at this line. wp_kses_post allows the links and buttons the header
	// actually uses and drops anything else.
	echo '<span class="bb-head-spacer"></span>' . wp_kses_post( $action_html ) . '</div>';
}

/** One set card, extracted so the grouped list (and any later view) share it. */
function addon_boss_render_option_set_card( string $id, array $set ): void {
    $edit   = admin_url( 'admin.php?page=addon-boss-option-sets&set=' . rawurlencode( $id ) );
    $delete = wp_nonce_url( admin_url( 'admin-post.php?action=addon_boss_delete_option_set_form&set=' . rawurlencode( $id ) ), 'addon_boss_delete_option_set' );
    $dupe   = wp_nonce_url( admin_url( 'admin-post.php?action=addon_boss_duplicate_option_set_form&set=' . rawurlencode( $id ) ), 'addon_boss_duplicate_option_set' );
    $usage  = addon_boss_option_set_usage( $id );

    // A lowercase haystack for the client-side search: the set name + every label.
    $hay = strtolower( (string) ( $set['name'] ?? '' ) );
    foreach ( (array) ( $set['options'] ?? array() ) as $hopt ) {
        $hay .= ' ' . strtolower( (string) ( $hopt['label'] ?? '' ) );
    }

    echo '<div class="bb-setcard" draggable="true" data-set-id="' . esc_attr( $id ) . '" data-search="' . esc_attr( $hay ) . '">';
    echo '<button type="button" class="bb-card-menu-btn" aria-haspopup="true" aria-expanded="false" aria-label="' . esc_attr__( 'File this set', 'addon-boss' ) . '">&#8943;</button>';
    echo '<h3><a href="' . esc_url( $edit ) . '">' . esc_html( $set['name'] ?: $id ) . '</a></h3>';
    if ( $usage ) {
        // The figure is a door: it opens the products themselves, in the
        // same house dialog the Move and Copy pickers use, so two products
        // and three thousand read the same way.
        echo '<div class="bb-setmeta"><button type="button" class="bb-setuse" aria-haspopup="dialog">' . esc_html(
            /* translators: %d: number of products */
            sprintf( _n( 'Used on %d product', 'Used on %d products', $usage, 'addon-boss' ), $usage )
        ) . '</button></div>';
    } else {
        echo '<div class="bb-setmeta">' . esc_html__( 'Not attached to a product yet', 'addon-boss' ) . '</div>';
    }
    echo '<div class="bb-chiprow">';
    // Stored data is historical fact: an older build wrote table sets with no
    // options key at all, and one such set took this whole screen down with a
    // TypeError. Every set must render, malformed or not, or the merchant has
    // no way to open it and put it right.
    echo wp_kses( addon_boss_option_preview_row( (array) ( $set['options'] ?? array() ), 8 ), addon_boss_kses_allowed() );
    echo '</div>';
    echo '<div class="bb-setfoot">';
    echo '<button type="button" class="button bb-cta bb-bulk-toggle" aria-expanded="false">' . esc_html__( 'Attach to products', 'addon-boss' ) . '</button>';
    echo '<span class="bb-setacts">';
    echo '<a class="bb-edit" href="' . esc_url( $edit ) . '">' . esc_html__( 'Edit', 'addon-boss' ) . '</a>';
    echo '<a class="bb-dupe" href="' . esc_url( $dupe ) . '">' . esc_html__( 'Duplicate', 'addon-boss' ) . '</a>';
    echo '<a class="bb-del" href="' . esc_url( $delete ) . '" onclick="return confirm(\'' . esc_js( __( 'Delete this set? Products stop offering these options. Existing carts and orders are not affected.', 'addon-boss' ) ) . '\')">' . esc_html__( 'Delete', 'addon-boss' ) . '</a>';
    echo '</span>';
    echo '</div>';
    echo '<form class="bb-bulkrow" method="post" action="' . esc_url( admin_url( 'admin-post.php' ) ) . '" hidden>';
    echo '<input type="hidden" name="action" value="addon_boss_bulk_attach_set">';
    echo '<input type="hidden" name="set" value="' . esc_attr( $id ) . '">';
    wp_nonce_field( 'addon_boss_bulk_attach_set' );
    echo '<span>' . esc_html__( 'Every product in', 'addon-boss' ) . '</span>';
    wp_dropdown_categories(
        array(
            'taxonomy'          => 'product_cat',
            'name'              => 'bulk_category',
            'hide_empty'        => true,
            'hierarchical'      => true,
            'show_option_none'  => __( 'Choose a category…', 'addon-boss' ),
            'option_none_value' => '',
        )
    );
    echo '<button type="submit" class="button bb-bulk-go">' . esc_html__( 'Attach', 'addon-boss' ) . '</button>';
    // The panel offers the category route only, so the one-product case needs
    // its signpost RIGHT HERE, always visible, in the words the checklist
    // teaches. Without it this panel is a dead door for a store wanting the
    // set on a single product (or holding no categories at all).
    echo '<span class="bb-bulk-single">' . esc_html__( 'To attach to a single product, open its edit screen and use the Product options tab.', 'addon-boss' ) . '</span>';
    echo '</form>';
    echo '</div>';
}

/** One collapsible group section (a drop target) on the option-sets list. */
/**
 * Where one set came from: its stored source, offered to the plugin that wrote
 * it. A supplier integration stamps 'source' when it writes a set and can also
 * answer here for sets it wrote before it stamped them. A set the merchant
 * built answers '', and '' is deliberately never given a word of its own on
 * the page: the survey behind this screen found no shipping product that
 * badges the user's own records, so absence IS the marking.
 *
 * @param string $id  The set's id.
 * @param array  $set The stored set.
 * @return string The source's display name, or '' for the merchant's own.
 */
function addon_boss_option_set_source( string $id, array $set ): string {
	return sanitize_text_field( (string) apply_filters( 'addon_boss_option_set_source', (string) ( $set['source'] ?? '' ), $id, $set ) );
}

/**
 * The library, shaped for one page of the list: searched, filtered by source,
 * ordered (registry first, then unregistered names, Ungrouped last) and
 * sliced. Pure on its inputs so the shape is testable without a screen.
 *
 * Search matches a group's name, a set's name, or an option label inside a
 * set — the same reach the search box promises. The source buckets are
 * counted AFTER the search and BEFORE the source filter, so each choice in
 * the dropdown says what picking it would show under the current search: a
 * filter narrows a search here, it never resets one.
 *
 * @param array $sets     The whole library, id => set.
 * @param array $registry The ordered group names.
 * @param array $args     s, source ('' | 'none' | a source name), paged, per_page.
 * @return array rows (one per group on this page), total, pages, paged,
 *               buckets (source => group count, post-search), searched (group
 *               count post-search), group_names (every named group, unfiltered).
 */
function addon_boss_option_library_view( array $sets, array $registry, array $args ): array {
	$bb_q      = strtolower( trim( (string) ( $args['s'] ?? '' ) ) );
	$bb_source = (string) ( $args['source'] ?? '' );
	$bb_tags   = array_values( array_filter( array_map( 'sanitize_key', (array) ( $args['tags'] ?? array() ) ) ) );
	$bb_paged  = max( 1, (int) ( $args['paged'] ?? 1 ) );
	$bb_pp     = max( 1, (int) ( $args['per_page'] ?? 25 ) );

	$bb_by = array();
	foreach ( $sets as $bb_id => $bb_set ) {
		$bb_by[ (string) ( $bb_set['group'] ?? '' ) ][ (string) $bb_id ] = $bb_set;
	}

	// Registry order first, then names in use the registry never learned,
	// then Ungrouped last — the order the page has always drawn.
	$bb_names = array();
	foreach ( $registry as $bb_n ) {
		$bb_n = (string) $bb_n;
		if ( '' !== $bb_n ) {
			$bb_names[ $bb_n ] = true;
		}
	}
	foreach ( array_keys( $bb_by ) as $bb_n ) {
		if ( '' !== $bb_n ) {
			$bb_names[ (string) $bb_n ] = true;
		}
	}
	$bb_group_names = array_keys( $bb_names );

	$bb_rows = array();
	foreach ( array_merge( $bb_group_names, array( '' ) ) as $bb_name ) {
		$bb_gsets = $bb_by[ $bb_name ] ?? array();
		if ( '' === $bb_name && ! $bb_gsets ) {
			continue; // an empty Ungrouped says nothing worth a row.
		}
		// The search: the group's name, or anything inside any of its sets.
		if ( '' !== $bb_q && false === strpos( strtolower( $bb_name ), $bb_q ) ) {
			$bb_hit = false;
			foreach ( $bb_gsets as $bb_s ) {
				$bb_hay = strtolower( (string) ( $bb_s['name'] ?? '' ) );
				foreach ( (array) ( $bb_s['options'] ?? array() ) as $bb_o ) {
					$bb_hay .= ' ' . strtolower( (string) ( $bb_o['label'] ?? '' ) );
				}
				if ( false !== strpos( $bb_hay, $bb_q ) ) {
					$bb_hit = true;
					break;
				}
			}
			if ( ! $bb_hit ) {
				continue;
			}
		}
		// The group's source: unanimous and non-empty, or nothing. A group
		// mixing a supplier's sets with the merchant's own is not the
		// supplier's to badge.
		$bb_src = null;
		foreach ( $bb_gsets as $bb_sid => $bb_s ) {
			$bb_one = addon_boss_option_set_source( (string) $bb_sid, (array) $bb_s );
			if ( null === $bb_src ) {
				$bb_src = $bb_one;
			} elseif ( $bb_src !== $bb_one ) {
				$bb_src = '';
				break;
			}
		}
		$bb_src     = (string) ( $bb_src ?? '' );
		$bb_preview = array();
		foreach ( $bb_gsets as $bb_s ) {
			$bb_preview[] = (string) ( $bb_s['name'] ?? '' );
		}
		$bb_rows[] = array(
			'slug'      => $bb_name,
			'label'     => '' === $bb_name ? __( 'Ungrouped', 'addon-boss' ) : $bb_name,
			'sets'      => $bb_gsets,
			'ungrouped' => '' === $bb_name,
			'source'    => $bb_src,
			'preview'   => implode( ' · ', array_filter( $bb_preview ) ),
		);
	}

	// Buckets from the searched rows, then the source filter narrows.
	$bb_buckets = array();
	foreach ( $bb_rows as $bb_r ) {
		$bb_key                = '' === $bb_r['source'] ? 'none' : $bb_r['source'];
		$bb_buckets[ $bb_key ] = ( $bb_buckets[ $bb_key ] ?? 0 ) + 1;
	}
	// Tags narrow after the source does, and MORE tags narrow further: two
	// chosen means the groups wearing both, never the groups wearing
	// either. Discontinued and Schools together is the question a
	// merchant actually has (his agreement, 6 September).
	if ( $bb_tags && function_exists( 'addon_boss_groups_tagged' ) ) {
		$bb_keep = addon_boss_groups_tagged( $bb_tags );
		$bb_rows = array_values( array_filter( $bb_rows, static function ( $bb_r ) use ( $bb_keep ) {
			return in_array( (string) $bb_r['slug'], $bb_keep, true );
		} ) );
	}
	$bb_searched = count( $bb_rows );
	if ( '' !== $bb_source ) {
		$bb_rows = array_values( array_filter( $bb_rows, static function ( $bb_r ) use ( $bb_source ) {
			return 'none' === $bb_source ? '' === $bb_r['source'] : $bb_r['source'] === $bb_source;
		} ) );
	}

	$bb_total = count( $bb_rows );
	$bb_pages = max( 1, (int) ceil( $bb_total / $bb_pp ) );
	$bb_paged = min( $bb_paged, $bb_pages );
	$bb_rows  = array_slice( $bb_rows, ( $bb_paged - 1 ) * $bb_pp, $bb_pp );
	foreach ( $bb_rows as $bb_i => $bb_r ) {
		// Its place in the WHOLE filtered list, so assistive tech says
		// "7 of 100" and never "7 of 25".
		$bb_rows[ $bb_i ]['pos'] = ( $bb_paged - 1 ) * $bb_pp + $bb_i + 1;
	}

	return array(
		'rows'        => $bb_rows,
		'total'       => $bb_total,
		'pages'       => $bb_pages,
		'paged'       => $bb_paged,
		'buckets'     => $bb_buckets,
		'searched'    => $bb_searched,
		'group_names' => $bb_group_names,
	);
}

/**
 * Reorder one set among its group's sets, in the flat store. Every other
 * group's sets keep their exact slots: the group's slots are refilled in the
 * new order and nothing else is touched.
 *
 * @param array  $sets     The whole library, id => set.
 * @param string $set_id   The set being placed (already in $group).
 * @param string $group    The group whose order is being written.
 * @param int    $position Target index among the group's sets, 0-based, clamped.
 * @return array The library, reordered.
 */
function addon_boss_reorder_set_in_group( array $sets, string $set_id, string $group, int $position ): array {
	$bb_ids = array();
	foreach ( $sets as $bb_id => $bb_s ) {
		if ( (string) ( $bb_s['group'] ?? '' ) === $group ) {
			$bb_ids[] = (string) $bb_id;
		}
	}
	if ( ! in_array( $set_id, $bb_ids, true ) ) {
		return $sets;
	}
	$bb_ids   = array_values( array_diff( $bb_ids, array( $set_id ) ) );
	$position = max( 0, min( $position, count( $bb_ids ) ) );
	array_splice( $bb_ids, $position, 0, array( $set_id ) );

	$bb_out = array();
	foreach ( $sets as $bb_id => $bb_s ) {
		if ( (string) ( $bb_s['group'] ?? '' ) === $group ) {
			$bb_next            = array_shift( $bb_ids );
			$bb_out[ $bb_next ] = $sets[ $bb_next ];
		} else {
			$bb_out[ $bb_id ] = $bb_s;
		}
	}
	return $bb_out;
}

/**
 * Move ONE set into a group (or out, with ''), optionally to a position in
 * it. This names exactly what changed, which is what lets the list paginate:
 * the old whole-picture save read every card on the page, and on a paged list
 * the page no longer holds every card.
 *
 * @param string   $set_id   The set to move.
 * @param string   $group    Destination group name, '' for Ungrouped.
 * @param int|null $position Optional 0-based position among the group's sets.
 * @return array|WP_Error joined-offer rows (see the group save), or the refusal.
 */
function addon_boss_move_set_apply( string $set_id, string $group, ?int $position = null ) {
	$bb_sets = addon_boss_option_sets();
	if ( ! isset( $bb_sets[ $set_id ] ) ) {
		return new WP_Error( 'bundle_boss', __( 'That option set no longer exists.', 'addon-boss' ) );
	}
	$bb_was                          = (string) ( $bb_sets[ $set_id ]['group'] ?? '' );
	$bb_sets[ $set_id ]['group']     = $group;
	if ( '' !== $group ) {
		$bb_reg = addon_boss_option_set_groups();
		if ( ! in_array( $group, $bb_reg, true ) ) {
			$bb_reg[] = $group;
			update_option( ADDON_BOSS_OPTION_SET_GROUPS_STORE, $bb_reg, false );
		}
	}
	if ( null !== $position ) {
		$bb_sets = addon_boss_reorder_set_in_group( $bb_sets, $set_id, $group, $position );
	}
	update_option( ADDON_BOSS_OPTION_SETS_STORE, $bb_sets, false );

	// A set that just JOINED a group, on products already carrying that
	// group: the same offer the old save made, because it is the moment the
	// grouping exists to catch.
	$bb_joined = array();
	if ( '' !== $group && $group !== $bb_was ) {
		$bb_missing = addon_boss_products_missing_set( $group, $set_id );
		if ( $bb_missing ) {
			$bb_joined[] = array(
				'set'   => $set_id,
				'name'  => (string) ( $bb_sets[ $set_id ]['name'] ?? $set_id ),
				'group' => $group,
				'count' => count( $bb_missing ),
			);
		}
	}
	return $bb_joined;
}

add_action( 'wp_ajax_addon_boss_move_set', 'addon_boss_ajax_move_set' );
/** The move above, spoken over admin-ajax. */
function addon_boss_ajax_move_set(): void {
	if ( ! current_user_can( 'manage_woocommerce' ) ) {
		wp_send_json_error( 'forbidden', 403 );
	}
	check_ajax_referer( 'addon_boss_set_groups' );
	$bb_set   = sanitize_text_field( wp_unslash( $_POST['set'] ?? '' ) );
	$bb_group = sanitize_text_field( wp_unslash( $_POST['group'] ?? '' ) );
	$bb_pos   = isset( $_POST['position'] ) && '' !== $_POST['position'] ? max( 0, absint( $_POST['position'] ) ) : null;
	$bb_out   = addon_boss_move_set_apply( $bb_set, $bb_group, $bb_pos );
	if ( is_wp_error( $bb_out ) ) {
		wp_send_json_error( array( 'message' => $bb_out->get_error_message() ) );
	}
	wp_send_json_success( array( 'joined' => $bb_out ) );
}

/**
 * Copy ONE set into a group ('' for Ungrouped): a fresh id, the merchant's
 * own set from the moment it exists. The supplier stamp stays behind on the
 * original - a feed refreshes the set it wrote by id, and this id it has
 * never seen - so the badge never predicts a lock that will not come. A name
 * already taken in the destination gains "(copy)" after it; anywhere else
 * the name travels as is.
 *
 * @param string $set_id The set to copy.
 * @param string $group  Destination group name, '' for Ungrouped.
 * @return array|WP_Error the new set's id, name and group, or the refusal.
 */
function addon_boss_copy_set_apply( string $set_id, string $group ) {
	$bb_sets = addon_boss_option_sets();
	if ( ! isset( $bb_sets[ $set_id ] ) ) {
		return new WP_Error( 'bundle_boss', __( 'That option set no longer exists.', 'addon-boss' ) );
	}
	$bb_new           = $bb_sets[ $set_id ];
	$bb_new['group']  = $group;
	$bb_new['source'] = '';

	$bb_taken = array();
	foreach ( $bb_sets as $bb_s ) {
		if ( (string) ( $bb_s['group'] ?? '' ) === $group ) {
			$bb_taken[] = (string) ( $bb_s['name'] ?? '' );
		}
	}
	$bb_name = (string) ( $bb_new['name'] ?? $set_id );
	if ( in_array( $bb_name, $bb_taken, true ) ) {
		/* translators: %s: the name being copied. */
		$bb_try = sprintf( __( '%s (copy)', 'addon-boss' ), $bb_name );
		$bb_n   = 2;
		while ( in_array( $bb_try, $bb_taken, true ) ) {
			/* translators: 1: the name being copied, 2: which copy this is. */
			$bb_try = sprintf( __( '%1$s (copy %2$d)', 'addon-boss' ), $bb_name, $bb_n );
			++$bb_n;
		}
		$bb_name = $bb_try;
	}
	$bb_new['name'] = $bb_name;

	$bb_id = addon_boss_save_option_set( $bb_new, '' );
	if ( '' !== $group ) {
		$bb_reg = addon_boss_option_set_groups();
		if ( ! in_array( $group, $bb_reg, true ) ) {
			$bb_reg[] = $group;
			update_option( ADDON_BOSS_OPTION_SET_GROUPS_STORE, $bb_reg, false );
		}
	}
	return array( 'set' => $bb_id, 'name' => $bb_name, 'group' => $group );
}

add_action( 'wp_ajax_addon_boss_copy_set', 'addon_boss_ajax_copy_set' );
/** The copy above, spoken over admin-ajax. */
function addon_boss_ajax_copy_set(): void {
	if ( ! current_user_can( 'manage_woocommerce' ) ) {
		wp_send_json_error( 'forbidden', 403 );
	}
	check_ajax_referer( 'addon_boss_set_groups' );
	$bb_out = addon_boss_copy_set_apply(
		sanitize_text_field( wp_unslash( $_POST['set'] ?? '' ) ),
		sanitize_text_field( wp_unslash( $_POST['group'] ?? '' ) )
	);
	if ( is_wp_error( $bb_out ) ) {
		wp_send_json_error( array( 'message' => $bb_out->get_error_message() ) );
	}
	wp_send_json_success( $bb_out );
}

/**
 * A group's name, rewritten wherever a product row remembers arriving from
 * it. Bounded exactly like the missing-set lookup: this is an admin action on
 * an admin screen, not a migration.
 *
 * @param string $from The old name.
 * @param string $to   The new name.
 * @return int How many products were rewritten.
 */
function addon_boss_rename_group_on_products( string $from, string $to ): int {
	if ( '' === $from || '' === $to || $from === $to ) {
		return 0;
	}
	$bb_q = new WP_Query(
		array(
			'post_type'      => 'product',
			'post_status'    => array( 'publish', 'draft', 'private', 'pending' ),
			'posts_per_page' => 200,
			'fields'         => 'ids',
			'meta_key'       => ADDON_BOSS_PRODUCT_OPTIONS_META, // phpcs:ignore WordPress.DB.SlowDBQuery.slow_db_query_meta_key -- a bounded admin-only lookup, not a front-end query.
		)
	);
	$bb_walk = static function ( $rows ) use ( &$bb_walk, $from, $to, &$bb_changed ) {
		foreach ( (array) $rows as $bb_k => $bb_row ) {
			if ( ! is_array( $bb_row ) ) {
				continue;
			}
			if ( (string) ( $bb_row['from_group'] ?? '' ) === $from ) {
				$bb_row['from_group'] = $to;
				$bb_changed           = true;
			}
			foreach ( array( 'rows', 'children' ) as $bb_kids ) {
				if ( isset( $bb_row[ $bb_kids ] ) && is_array( $bb_row[ $bb_kids ] ) ) {
					$bb_row[ $bb_kids ] = $bb_walk( $bb_row[ $bb_kids ] );
				}
			}
			$rows[ $bb_k ] = $bb_row;
		}
		return $rows;
	};
	$bb_done = 0;
	foreach ( $bb_q->posts as $bb_pid ) {
		$bb_cfg = get_post_meta( (int) $bb_pid, ADDON_BOSS_PRODUCT_OPTIONS_META, true );
		if ( ! is_array( $bb_cfg ) ) {
			continue;
		}
		$bb_changed = false;
		$bb_cfg     = $bb_walk( $bb_cfg );
		if ( $bb_changed ) {
			update_post_meta( (int) $bb_pid, ADDON_BOSS_PRODUCT_OPTIONS_META, $bb_cfg );
			++$bb_done;
		}
	}
	return $bb_done;
}

/**
 * One group operation, named: create, rename, empty (its sets to Ungrouped,
 * the name kept), delete (the same, the name gone), duplicate (the group and
 * every set in it copied, "(copy)" names, fresh ids, filed right after the
 * original). Named operations are what survive pagination: each says exactly
 * what changed and touches nothing else.
 *
 * @param string $op   create|rename|empty|delete|duplicate.
 * @param array  $args group, and 'to' for rename.
 * @return array|WP_Error Details per op, or the refusal.
 */
function addon_boss_group_op_apply( string $op, array $args ) {
	$bb_group = trim( (string) ( $args['group'] ?? '' ) );
	if ( '' === $bb_group ) {
		return new WP_Error( 'bundle_boss', __( 'Name the group first.', 'addon-boss' ) );
	}
	$bb_reg  = addon_boss_option_set_groups();
	$bb_sets = addon_boss_option_sets();

	if ( 'create' === $op ) {
		if ( ! in_array( $bb_group, $bb_reg, true ) ) {
			$bb_reg[] = $bb_group;
			update_option( ADDON_BOSS_OPTION_SET_GROUPS_STORE, $bb_reg, false );
		}
		return array( 'group' => $bb_group );
	}

	if ( 'rename' === $op ) {
		$bb_to = trim( (string) ( $args['to'] ?? '' ) );
		if ( '' === $bb_to || $bb_to === $bb_group ) {
			return new WP_Error( 'bundle_boss', __( 'Give the group a new name.', 'addon-boss' ) );
		}
		$bb_out = array();
		foreach ( $bb_reg as $bb_n ) {
			$bb_n = ( $bb_n === $bb_group ) ? $bb_to : $bb_n;
			if ( ! in_array( $bb_n, $bb_out, true ) ) {
				$bb_out[] = $bb_n;
			}
		}
		update_option( ADDON_BOSS_OPTION_SET_GROUPS_STORE, $bb_out, false );
		foreach ( $bb_sets as $bb_id => $bb_s ) {
			if ( (string) ( $bb_s['group'] ?? '' ) === $bb_group ) {
				$bb_sets[ $bb_id ]['group'] = $bb_to;
			}
		}
		update_option( ADDON_BOSS_OPTION_SETS_STORE, $bb_sets, false );
		// Product rows remember the group they arrived with; the offer that
		// reads that memory must survive the rename.
		addon_boss_rename_group_on_products( $bb_group, $bb_to );
		return array( 'group' => $bb_to );
	}

	if ( 'empty' === $op || 'delete' === $op ) {
		// Deleting the sets as well is asked for, never assumed: it is the one
		// verb here that destroys work, and a set can be on any number of
		// products. Those products degrade silently rather than fatally (see
		// addon_boss_product_option_sets), so this is safe to offer, but the
		// screen has to say what it costs before anyone presses it.
		$bb_take = ( 'delete' === $op ) && ! empty( $args['sets'] );
		$bb_gone = 0;
		foreach ( $bb_sets as $bb_id => $bb_s ) {
			if ( (string) ( $bb_s['group'] ?? '' ) !== $bb_group ) {
				continue;
			}
			if ( $bb_take ) {
				unset( $bb_sets[ $bb_id ] );
				++$bb_gone;
			} else {
				$bb_sets[ $bb_id ]['group'] = '';
			}
		}
		update_option( ADDON_BOSS_OPTION_SETS_STORE, $bb_sets, false );
		if ( 'delete' === $op ) {
			update_option( ADDON_BOSS_OPTION_SET_GROUPS_STORE, array_values( array_diff( $bb_reg, array( $bb_group ) ) ), false );
		}
		if ( $bb_gone ) {
			// The usage figures counted sets that no longer exist.
			addon_boss_option_set_usage_map( true );
		}
		return array( 'group' => $bb_group, 'sets_deleted' => $bb_gone );
	}

	if ( 'duplicate' === $op ) {
		/* translators: %s: the name being copied. */
		$bb_copy = sprintf( __( '%s (copy)', 'addon-boss' ), $bb_group );
		$bb_n    = 2;
		while ( in_array( $bb_copy, $bb_reg, true ) ) {
			/* translators: 1: the name being copied, 2: which copy this is. */
			$bb_copy = sprintf( __( '%1$s (copy %2$d)', 'addon-boss' ), $bb_group, $bb_n );
			++$bb_n;
		}
		$bb_made = 0;
		foreach ( $bb_sets as $bb_id => $bb_s ) {
			if ( (string) ( $bb_s['group'] ?? '' ) !== $bb_group ) {
				continue;
			}
			$bb_new          = $bb_s;
			/* translators: %s: the name being copied. */
			$bb_new['name']  = sprintf( __( '%s (copy)', 'addon-boss' ), (string) ( $bb_s['name'] ?? $bb_id ) );
			$bb_new['group'] = $bb_copy;
			// A fresh id is a set the feed will never refresh: the supplier
			// stamp stays on the originals, so the badge keeps its promise.
			$bb_new['source'] = '';
			addon_boss_save_option_set( $bb_new, '' );
			++$bb_made;
		}
		if ( ! $bb_made ) {
			return new WP_Error( 'bundle_boss', __( 'That group has no sets to copy.', 'addon-boss' ) );
		}
		// Filed right after the original, so the copy lands where the eye is.
		$bb_reg = addon_boss_option_set_groups();
		$bb_reg = array_values( array_diff( $bb_reg, array( $bb_copy ) ) );
		$bb_at  = array_search( $bb_group, $bb_reg, true );
		array_splice( $bb_reg, false === $bb_at ? count( $bb_reg ) : $bb_at + 1, 0, array( $bb_copy ) );
		update_option( ADDON_BOSS_OPTION_SET_GROUPS_STORE, $bb_reg, false );
		return array( 'group' => $bb_copy, 'sets' => $bb_made );
	}

	return new WP_Error( 'bundle_boss', __( 'That is not a group action.', 'addon-boss' ) );
}

add_action( 'wp_ajax_addon_boss_group_op', 'addon_boss_ajax_group_op' );
/** The group operations above, spoken over admin-ajax. */
function addon_boss_ajax_group_op(): void {
	if ( ! current_user_can( 'manage_woocommerce' ) ) {
		wp_send_json_error( 'forbidden', 403 );
	}
	check_ajax_referer( 'addon_boss_set_groups' );
	$bb_op = sanitize_text_field( wp_unslash( $_POST['op'] ?? '' ) );

	// A selection does the same verbs, on each of its groups, in one trip. A
	// merchant clearing a supplier they dropped has two hundred of them, and
	// two hundred round trips is a screen that looks broken while it works.
	// phpcs:disable WordPress.Security.NonceVerification.Missing -- checked above.
	$bb_many = isset( $_POST['groups'] )
		? array_values( array_filter( array_map( 'sanitize_text_field', (array) wp_unslash( $_POST['groups'] ) ), static function ( $bb_g ) {
			return '' !== $bb_g;
		} ) )
		: array();
	// phpcs:enable
	// What a delete would actually cost, so the question can be asked with
	// real numbers instead of a warning in the abstract. Read only.
	if ( 'weigh' === $bb_op ) {
		// phpcs:disable WordPress.Security.NonceVerification.Missing -- checked above.
		$bb_names = $bb_many ? $bb_many : array( sanitize_text_field( wp_unslash( $_POST['group'] ?? '' ) ) );
		// phpcs:enable
		$bb_n_sets = 0;
		$bb_n_used = 0;
		$bb_prods  = array();
		foreach ( addon_boss_option_sets() as $bb_sid => $bb_set ) {
			if ( ! in_array( (string) ( $bb_set['group'] ?? '' ), $bb_names, true ) ) {
				continue;
			}
			++$bb_n_sets;
			$bb_on = addon_boss_option_set_used_on( (string) $bb_sid );
			if ( $bb_on ) {
				++$bb_n_used;
				foreach ( $bb_on as $bb_pid ) {
					$bb_prods[ (int) $bb_pid ] = true;
				}
			}
		}
		wp_send_json_success( array(
			'groups'   => count( $bb_names ),
			'sets'     => $bb_n_sets,
			'used'     => $bb_n_used,
			'products' => count( $bb_prods ),
		) );
	}

	// phpcs:disable WordPress.Security.NonceVerification.Missing -- checked above.
	$bb_with_sets = ! empty( $_POST['sets'] );
	// phpcs:enable

	if ( $bb_many ) {
		// Only the verbs that make sense on many at once. Rename and create
		// name ONE thing, and a bulk rename would have to invent the names.
		if ( ! in_array( $bb_op, array( 'delete', 'duplicate', 'empty' ), true ) ) {
			wp_send_json_error( array( 'message' => __( 'That is not something to do to several groups at once.', 'addon-boss' ) ), 400 );
		}
		$bb_did  = 0;
		$bb_stop = null;
		foreach ( $bb_many as $bb_group ) {
			$bb_one = addon_boss_group_op_apply( $bb_op, array( 'group' => $bb_group, 'sets' => $bb_with_sets ) );
			if ( is_wp_error( $bb_one ) ) {
				// Say which one stopped it and how far it got, rather than
				// leaving a merchant to guess what half-happened.
				$bb_stop = $bb_group;
				break;
			}
			++$bb_did;
		}
		if ( null !== $bb_stop ) {
			wp_send_json_error( array(
				'message' => sprintf(
					/* translators: 1: how many groups were done, 2: the group it stopped on. */
					__( '%1$s done, then it stopped at %2$s.', 'addon-boss' ),
					number_format_i18n( $bb_did ),
					$bb_stop
				),
				'done'    => $bb_did,
			), 400 );
		}
		wp_send_json_success( array( 'done' => $bb_did ) );
	}

	$bb_out = addon_boss_group_op_apply(
		$bb_op,
		array(
			'group' => sanitize_text_field( wp_unslash( $_POST['group'] ?? '' ) ),
			'to'    => sanitize_text_field( wp_unslash( $_POST['to'] ?? '' ) ),
			'sets'  => $bb_with_sets,
		)
	);
	if ( is_wp_error( $bb_out ) ) {
		wp_send_json_error( array( 'message' => $bb_out->get_error_message() ) );
	}
	wp_send_json_success( $bb_out );
}

function addon_boss_render_option_set_group( string $slug, string $label, array $sets, bool $is_ungrouped, array $ctx = array() ): void {
    $bb_collapsed = ! empty( $ctx['collapsed'] );
    $bb_aria      = '';
    if ( ! empty( $ctx['pos'] ) && ! empty( $ctx['size'] ) ) {
        // Its place in the WHOLE list, not the page: "7 of 100", never "7 of 25".
        $bb_aria = ' aria-posinset="' . (int) $ctx['pos'] . '" aria-setsize="' . (int) $ctx['size'] . '"';
    }
    echo '<section class="bb-optgroup' . ( $is_ungrouped ? ' is-ungrouped' : '' ) . ( $sets ? '' : ' is-empty' ) . ( $bb_collapsed ? ' is-collapsed' : '' ) . '" data-group="' . esc_attr( $slug ) . '"' . $bb_aria . '>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- $bb_aria is two ints cast above.
    // The tick that puts this group in a selection, for tagging a run of them
    // at once. In its OWN gutter beside the row rather than inside the header:
    // the whole header folds the group when pressed, and a tick sitting in it
    // meant aiming at a small box inside a large button that does something
    // else. Only where tags exist to apply, so a shop without them is not
    // shown a control that does nothing.
    if ( function_exists( 'addon_boss_tags' ) ) {
        echo '<label class="bb-grp-pickwrap"><input type="checkbox" class="bb-grp-pick" aria-label="' . esc_attr(
            /* translators: %s: the group's name. */
            sprintf( __( 'Select %s', 'addon-boss' ), $label )
        ) . '"></label>';
    }
    echo '<div class="bb-optgroup-h">';
    echo '<button type="button" class="bb-grp-caret" aria-expanded="' . ( $bb_collapsed ? 'false' : 'true' ) . '" aria-label="' . esc_attr__( 'Show or hide this group', 'addon-boss' ) . '">&#9662;</button>';
    echo '<span class="bb-grp-mid">';
    echo '<span class="bb-grp-name"' . ( $is_ungrouped ? '' : ' title="' . esc_attr__( 'Double-click to rename', 'addon-boss' ) . '"' ) . '>' . esc_html( $label ) . '</span>';
    // What the group holds, said on the closed row: with a hundred groups the
    // set names ARE the index, and a header that previews nothing does not
    // get opened.
    if ( '' !== (string) ( $ctx['preview'] ?? '' ) ) {
        echo '<span class="bb-grp-preview">' . esc_html( (string) $ctx['preview'] ) . '</span>';
    }
    echo '</span>';
    // The garment's own tags, on its header, so what it came from and what
    // has become of it read without opening anything.
    if ( ! $is_ungrouped && function_exists( 'addon_boss_group_tag_chips' ) ) {
        echo addon_boss_group_tag_chips( $label, (string) ( $ctx['source'] ?? '' ) ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- escaped within.
    }
    echo '<span class="bb-grp-count">' . (int) count( $sets ) . '</span>';
    // Only a set that came from somewhere carries a badge; the merchant's own
    // are simply unmarked. The name is the warning that the next feed run
    // owns this row.
    if ( '' !== (string) ( $ctx['source'] ?? '' ) ) {
        echo '<span class="bb-grp-src">' . esc_html( (string) $ctx['source'] ) . '</span>';
    }
    if ( ! $is_ungrouped ) {
        echo '<span class="bb-grp-menuwrap">';
        echo '<button type="button" class="bb-grp-menu-btn" aria-haspopup="true" aria-expanded="false" aria-label="' . esc_attr__( 'Group actions', 'addon-boss' ) . '">&#8943;</button>';
        echo '<span class="bb-grp-menu" hidden>';
        echo '<button type="button" class="bb-grp-rename">' . esc_html__( 'Rename…', 'addon-boss' ) . '</button>';
        echo '<button type="button" class="bb-grp-dup">' . esc_html__( 'Duplicate', 'addon-boss' ) . '</button>';
        echo '<a class="bb-grp-newset" href="' . esc_url( admin_url( 'admin.php?page=addon-boss-option-sets&set=new&recipe=scratch&group=' . rawurlencode( $slug ) ) ) . '">' . esc_html__( '+ New set', 'addon-boss' ) . '</a>';
        echo '<button type="button" class="bb-grp-emptyop">' . esc_html__( 'Move all sets to Ungrouped', 'addon-boss' ) . '</button>';
        echo '<button type="button" class="bb-grp-del">' . esc_html__( 'Delete group', 'addon-boss' ) . '</button>';
        echo '</span></span>';
    }
    echo '</div>';
    echo '<div class="bb-setgrid">';
    foreach ( $sets as $id => $set ) {
        addon_boss_render_option_set_card( (string) $id, $set );
    }
    echo '<p class="bb-grp-empty">' . esc_html__( 'Drag sets here', 'addon-boss' ) . '</p>';
    echo '</div>';
    echo '</section>';
}

/** The list-page JS: fold memory, drag-to-file, the group and set menus. Every change is a NAMED operation (move this set, rename this group), because a paged list no longer holds every card and a whole-picture save would drop whatever is not on screen. */
function addon_boss_option_sets_organise_script( array $ctx = array() ): void {
    $labels = array(
        'newGroup'  => __( 'New group', 'addon-boss' ),
        'newGroupGo' => __( 'Create group', 'addon-boss' ),
        'untitled'  => __( 'Untitled group', 'addon-boss' ),
        'rename'    => esc_attr__( 'Double-click to rename', 'addon-boss' ),
        'name'      => esc_attr__( 'Group name', 'addon-boss' ),
        'delTitle'  => __( 'Delete this group?', 'addon-boss' ),
        'delBody'   => __( 'What should happen to the option sets inside?', 'addon-boss' ),
        'delKeep'   => __( 'Keep the sets, remove the group only', 'addon-boss' ),
        'delBoth'   => __( 'Delete the group and its sets', 'addon-boss' ),
        'delCancel' => __( 'Cancel', 'addon-boss' ),
        /* translators: %s: how many groups were picked. */
        'delMany'   => __( 'Delete %s groups?', 'addon-boss' ),
        /* translators: %s: a count of option sets, already worded. */
        'delHas'    => __( 'They hold %s.', 'addon-boss' ),
        /* translators: %s: a count of option sets, already worded. */
        'delHas1'   => __( 'It holds %s.', 'addon-boss' ),
        /* translators: %s: how many option sets. */
        'delSet1'   => __( '%s option set', 'addon-boss' ),
        /* translators: %s: how many option sets. */
        'delSetN'   => __( '%s option sets', 'addon-boss' ),
        // The clause travels WITH the product count, because it is the product
        // that loses the options: "1 product, which loses" against "3 products,
        // which lose". Keeping it in the outer sentence made one of the four
        // combinations ungrammatical whatever was written.
        /* translators: %s: how many products. */
        'delProd1'  => __( '%s product, which loses those options', 'addon-boss' ),
        /* translators: %s: how many products. */
        'delProdN'  => __( '%s products, which lose those options', 'addon-boss' ),
        /* translators: 1: how many sets are in use, 2: a count of products, already worded. */
        'delUsed'   => __( '%1$s of them are on %2$s.', 'addon-boss' ),
        /* translators: %s: a count of products, already worded. */
        'delUsed1'  => __( 'One of them is on %s.', 'addon-boss' ),
        'delNone'   => __( 'None of them is on a product.', 'addon-boss' ),
        'delUndo'   => __( 'Deleting the sets cannot be undone.', 'addon-boss' ),
        // An empty group holds nothing to keep, so there is no choice to
        // offer. It is still worth asking, because a selection can hold
        // twenty of them and a merchant should see the number first.
        'delBare'   => __( 'It holds no option sets.', 'addon-boss' ),
        'delBareN'  => __( 'They hold no option sets.', 'addon-boss' ),
        'delOnly'   => __( 'Delete the group', 'addon-boss' ),
        'delOnlyN'  => __( 'Delete the groups', 'addon-boss' ),
        'moveTo'    => __( 'Move to', 'addon-boss' ),
        'copyTo'    => __( 'Copy to', 'addon-boss' ),
        /* translators: %s: the set being moved, quoted. */
        'moveTitle' => __( 'Move %s to', 'addon-boss' ),
        /* translators: %s: the set being copied, quoted. */
        'copyTitle' => __( 'Copy %s to', 'addon-boss' ),
        'findGroup' => esc_attr__( 'Find a group', 'addon-boss' ),
        'findProduct' => esc_attr__( 'Find a product', 'addon-boss' ),
        'showMore'  => __( 'Show more', 'addon-boss' ),
        'noMatch'   => __( 'No products match.', 'addon-boss' ),
        'ungrouped' => __( 'Ungrouped', 'addon-boss' ),
        'newIn'     => __( '+ New group…', 'addon-boss' ),
        'position'  => __( 'Position', 'addon-boss' ),
        /* translators: %s: how many sets the group holds. */
        'ofN'       => __( 'of %s', 'addon-boss' ),
        /* translators: 1: group name, 2: how many products, 3: the set just added to the group */
        'offer'     => __( '%1$s is on %2$s products that do not have %3$s.', 'addon-boss' ),
        /* translators: %s: how many products */
        'offerYes'  => __( 'Add it to all %s', 'addon-boss' ),
        'offerNo'   => __( 'Not now', 'addon-boss' ),
        /* translators: %s: how many products it was added to */
        'offerDone' => __( 'Added to %s products.', 'addon-boss' ),
        /* translators: %s: how many groups are selected */
        'bulkN'     => __( '%s selected', 'addon-boss' ),
        'bulkAdd'   => __( 'Add a tag to the selected groups', 'addon-boss' ),
        'bulkRm'    => __( 'Take a tag off the selected groups', 'addon-boss' ),
        /* translators: %s: the tag's name */
        'bulkOff'   => __( 'Take %s off the selected groups', 'addon-boss' ),
        /* translators: %s: how many groups are selected */
        'bulkEmptyAsk' => __( 'Empty %s groups?', 'addon-boss' ),
        'bulkEmptyWhy' => __( 'Every set inside moves to Ungrouped. The groups stay, with nothing in them.', 'addon-boss' ),
        'bulkEmptyOk'  => __( 'Move the sets out', 'addon-boss' ),
        'tagFind'   => __( 'Find a tag', 'addon-boss' ),
        'tagFindOrNew' => __( 'Find a tag, or type a new one', 'addon-boss' ),
        /* translators: %s: the word the merchant typed */
        'tagNew'    => __( 'Make a new tag: %s', 'addon-boss' ),
        'tagNone'   => __( 'No tags yet. Type one to make it.', 'addon-boss' ),
        'tagLocked' => __( 'Kept up to date by your supplier feed', 'addon-boss' ),
        'tagRename' => __( 'Rename', 'addon-boss' ),
        'tagRenameGo' => __( 'Rename it', 'addon-boss' ),
        'tagMerge'  => __( 'Merge', 'addon-boss' ),
        /* translators: %s: the tag being folded into another */
        'tagMergeInto' => __( 'Merge %s into which tag?', 'addon-boss' ),
        'tagDelete' => __( 'Delete', 'addon-boss' ),
        /* translators: %s: the tag's name */
        'tagDeleteAsk' => __( 'Delete %s?', 'addon-boss' ),
        /* translators: %s: how many groups wear the tag */
        'tagDeleteWhy' => __( 'It comes off %s groups. The groups and their sets stay exactly as they are.', 'addon-boss' ),
        'tagDeleteWhy1' => __( 'It comes off one group. The group and its sets stay exactly as they are.', 'addon-boss' ),
        'tagDeleteWhy0' => __( 'No group is wearing it.', 'addon-boss' ),
        'tagDeleteOk' => __( 'Delete the tag', 'addon-boss' ),
        'manageTitle' => __( 'Manage tags', 'addon-boss' ),
        'manageSub' => __( 'Rename, recolour, merge or delete your own tags. Tags from a supplier feed are kept up to date by the feed.', 'addon-boss' ),
        'manageDone' => __( 'Done', 'addon-boss' ),
        'tagNewAsk'  => __( 'Name the new tag', 'addon-boss' ),
        'tagNewGo'   => __( 'Add it', 'addon-boss' ),
        'manageNone' => __( 'No tags yet. Select some groups and add one.', 'addon-boss' ),
        /* translators: %s: how many groups wear this tag */
        'onN'       => __( 'on %s', 'addon-boss' ),
    );
    ?>
    <?php ob_start(); try { ?>
    ( function () {
        var wrap = document.getElementById( 'bb-optgroups' );
        if ( ! wrap ) { return; }
        var NONCE  = <?php echo wp_json_encode( wp_create_nonce( 'addon_boss_set_groups' ) ); ?>;
        var L      = <?php echo wp_json_encode( $labels ); ?>;
        var GROUPS = <?php echo wp_json_encode( array_values( array_map( 'strval', (array) ( $ctx['groups'] ?? array() ) ) ) ); ?>;
        var FILTERING = <?php echo ! empty( $ctx['filtering'] ) ? 'true' : 'false'; ?>;
        var FNONCE = <?php echo wp_json_encode( wp_create_nonce( 'addon_boss_option_library' ) ); ?>;

        // ---- Narrowing without a page load.
        //
        // A tag, the source, a page number: each changes one list. Reloading
        // the whole admin to do it costs about ten times what fetching the
        // list costs. The controls stay ordinary links, so this is only ever
        // an improvement on top of something that already works.
        var busy = false;
        function stateFrom( url ) {
            var p = new URL( url, window.location.href ).searchParams;
            // add_query_arg writes an array as bbtag[0]=x&bbtag[1]=y, so take
            // every key that begins bbtag rather than one fixed spelling.
            var tags = [];
            p.forEach( function ( v, k ) {
                if ( 0 === k.indexOf( 'bbtag' ) && v ) { tags.push( v ); }
            } );
            return {
                s: p.get( 's' ) || '',
                source: p.get( 'source' ) || '',
                paged: p.get( 'paged' ) || '1',
                per_page: p.get( 'per_page' ) || '',
                bbtag: tags
            };
        }
        function narrow( url ) {
            if ( busy ) { return; }
            busy = true;
            var st   = stateFrom( url );
            var body = new URLSearchParams();
            body.append( 'action', 'addon_boss_option_library' );
            body.append( 'nonce', FNONCE );
            body.append( 's', st.s );
            body.append( 'source', st.source );
            body.append( 'paged', st.paged );
            body.append( 'per_page', st.per_page );
            st.bbtag.forEach( function ( t ) { body.append( 'bbtag[]', t ); } );
            wrap.setAttribute( 'aria-busy', 'true' );
            fetch( ajaxurl, {
                method: 'POST',
                credentials: 'same-origin',
                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
                body: body.toString()
            } ).then( function ( r ) { return r.json(); } ).then( function ( j ) {
                if ( ! j || ! j.success ) { window.location.href = url; return; }
                // innerHTML, never replacing the element: every handler on this
                // page is delegated from wrap, and swapping wrap would drop
                // the lot — the drag, the menus, the rename.
                wrap.innerHTML = j.data.rows;
                if ( j.data.filtering ) { wrap.setAttribute( 'data-filtering', '1' ); }
                else { wrap.removeAttribute( 'data-filtering' ); }
                var nav = document.querySelector( '.bb-optsets-nav' );
                if ( nav ) { nav.outerHTML = j.data.nav; }
                window.history.pushState( {}, '', j.data.url );
                // Swap the furniture PHP rendered rather than reshaping what is
                // already there: same markup a reload would give, so the two
                // routes into this screen can never disagree.
                var row = document.querySelector( '.bb-tagapplied' );
                if ( row && j.data.applied ) { row.outerHTML = j.data.applied; }
                var pick = document.querySelector( '.bb-tagpick' );
                if ( pick && j.data.menu ) { pick.outerHTML = j.data.menu; }
                syncSearchForm( st );
                wrap.removeAttribute( 'aria-busy' );
                busy = false;
                if ( typeof refresh === 'function' ) { refresh(); }
            } ).catch( function () { window.location.href = url; } );
        }
        // The one thing the swap cannot carry: the search form is part of the
        // toolbar, which narrowing never re-renders. Left alone it would still
        // hold whatever the page FIRST loaded with, and pressing Enter would
        // jump back to a view the person had already moved on from.
        function syncSearchForm( st ) {
            var on   = st.bbtag || [];
            var form = document.querySelector( '.bb-optsets-toolbar' );
            if ( ! form ) { return; }
            form.querySelectorAll( 'input[name="bbtag[]"]' ).forEach( function ( i ) { i.remove(); } );
            on.forEach( function ( t ) {
                var i = document.createElement( 'input' );
                i.type  = 'hidden';
                i.name  = 'bbtag[]';
                i.value = t;
                form.appendChild( i );
            } );
            var box = form.querySelector( 'input[name="s"]' );
            if ( box && box.value !== st.s ) { box.value = st.s; }
            var src = form.querySelector( 'select[name="source"]' );
            if ( src && src.value !== st.source ) { src.value = st.source; }
        }
        /**
         * Typing in the menu narrows it. A heading with nothing left under it
         * goes too, or the list reads as sections that are not there.
         */
        function filterTagMenu() {
            var pick = document.querySelector( '.bb-tagpick' );
            if ( ! pick ) { return; }
            var box = pick.querySelector( '.bb-tagpick-find' );
            var q   = box ? box.value.trim().toLowerCase() : '';
            var hits = 0;
            pick.querySelectorAll( '.bb-tagpick-opt' ).forEach( function ( o ) {
                var name = ( o.dataset.name || '' ).toLowerCase();
                var hit  = ! q || name.indexOf( q ) > -1;
                o.closest( 'li' ).hidden = ! hit;
                if ( hit ) { hits++; }
            } );
            pick.querySelectorAll( '.bb-tagpick-head' ).forEach( function ( h ) {
                var any = false, n = h.nextElementSibling;
                while ( n && ! n.classList.contains( 'bb-tagpick-head' ) ) {
                    if ( ! n.hidden && n.querySelector( '.bb-tagpick-opt' ) ) { any = true; break; }
                    n = n.nextElementSibling;
                }
                h.hidden = ! any;
            } );
            var none = pick.querySelector( '.bb-tagpick-nohit' );
            if ( none ) { none.hidden = ! ( q && ! hits ); }
        }
        /** Open or shut the menu, and never leave two of them open. */
        function shutTagMenu() {
            document.querySelectorAll( '.bb-tagpick-pop' ).forEach( function ( p ) { p.hidden = true; } );
            document.querySelectorAll( '.bb-tagpick-btn' ).forEach( function ( b ) { b.setAttribute( 'aria-expanded', 'false' ); } );
        }
        document.addEventListener( 'input', function ( e ) {
            if ( e.target && e.target.classList && e.target.classList.contains( 'bb-tagpick-find' ) ) { filterTagMenu(); }
        } );
        document.addEventListener( 'click', function ( e ) {
            var btn = e.target.closest ? e.target.closest( '.bb-tagpick-btn' ) : null;
            if ( btn ) {
                e.preventDefault();
                var pop  = btn.parentNode.querySelector( '.bb-tagpick-pop' );
                var show = pop.hidden;
                shutTagMenu();
                if ( show ) {
                    pop.hidden = false;
                    btn.setAttribute( 'aria-expanded', 'true' );
                    var find = pop.querySelector( '.bb-tagpick-find' );
                    if ( find ) { find.value = ''; filterTagMenu(); find.focus(); }
                }
                return;
            }
            if ( ! e.target.closest || ! e.target.closest( '.bb-tagpick' ) ) { shutTagMenu(); }
        } );
        document.addEventListener( 'keydown', function ( e ) {
            if ( 'Escape' === e.key ) { shutTagMenu(); }
            // The menu's search sits inside the toolbar form. Enter there means
            // "narrow this list of words", never "search the library and throw
            // my menu away".
            if ( 'Enter' === e.key && e.target && e.target.classList
                && e.target.classList.contains( 'bb-tagpick-find' ) ) {
                e.preventDefault();
                var first = document.querySelector( '.bb-tagpick-pop a.bb-tagpick-opt:not([hidden])' );
                if ( first && first.closest( 'li' ) && ! first.closest( 'li' ).hidden ) { first.click(); }
            }
        } );
        // Every control that only changes which sets are listed: the chips on
        // the applied row, the words in the menu, the pager. They stay real
        // links, so this is an improvement on something that already worked.
        document.addEventListener( 'click', function ( e ) {
            var a = e.target.closest
                ? e.target.closest( '.bb-tagapplied a, .bb-tagpick-pop a, .bb-optsets-nav a' )
                : null;
            if ( ! a || ! a.href || e.metaKey || e.ctrlKey || e.shiftKey || 1 === e.button ) { return; }
            e.preventDefault();
            shutTagMenu();
            narrow( a.href );
        } );
        window.addEventListener( 'popstate', function () { narrow( window.location.href ); } );

        // ---- Tagging a run of groups at once, and keeping the vocabulary.
        //
        // One garment at a time is fine for one garment. A merchant who has
        // just imported a supplier is looking at forty polos that are all for
        // the same school order, and doing that forty times is why people stop
        // tagging things after the first week.
        var TNONCE = <?php echo wp_json_encode( wp_create_nonce( 'addon_boss_tag_op' ) ); ?>;
        var TAGS   = <?php echo wp_json_encode( function_exists( 'addon_boss_tags_listed' ) ? addon_boss_tags_listed() : array() ); ?>;
        var PALETTE = <?php echo wp_json_encode( function_exists( 'addon_boss_tag_palette' ) ? array_values( addon_boss_tag_palette() ) : array() ); ?>;
        var bulk = document.getElementById( 'bb-tagbulk' );

        function tagPost( params ) {
            var body = new URLSearchParams();
            body.append( 'action', 'addon_boss_tag_op' );
            body.append( 'nonce', TNONCE );
            Object.keys( params ).forEach( function ( k ) {
                if ( Array.isArray( params[ k ] ) ) {
                    params[ k ].forEach( function ( v ) { body.append( k + '[]', v ); } );
                } else {
                    body.append( k, params[ k ] );
                }
            } );
            return fetch( ajaxurl, {
                method: 'POST', credentials: 'same-origin',
                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
                body: body.toString()
            } ).then( function ( r ) { return r.json(); } ).then( function ( j ) {
                if ( j && j.data && j.data.tags ) { TAGS = j.data.tags; }
                // A refusal is the supplier-tag rule speaking, and it has a
                // reason worth reading rather than a silent nothing-happened.
                if ( j && ! j.success && j.data && j.data.message ) { window.alert( j.data.message ); }
                return j;
            } );
        }

        function picked() {
            var out = [];
            wrap.querySelectorAll( '.bb-grp-pick:checked' ).forEach( function ( c ) {
                var sec = c.closest( '.bb-optgroup' );
                if ( sec ) { out.push( sec.classList.contains( 'is-ungrouped' ) ? '' : ( sec.getAttribute( 'data-group' ) || '' ) ); }
            } );
            return out;
        }
        function syncBulk() {
            if ( ! bulk ) { return; }
            var n = picked().length;
            bulk.classList.toggle( 'is-on', n > 0 );
            wrap.classList.toggle( 'is-picking', n > 0 );
            bulk.querySelector( '.bb-tagbulk-n' ).textContent = n
                ? L.bulkN.replace( '%s', String( n ) )
                : '';
            paintCarried();
        }

        // What the selection already wears, each one pressable to take it off.
        // Asking "which tag?" in a dialog was asking a question the screen can
        // simply answer: these are the words in front of you, press one to go.
        function paintCarried() {
            if ( ! bulk ) { return; }
            var host = bulk.querySelector( '.bb-tagbulk-on' );
            if ( ! host ) { return; }
            host.textContent = '';
            var seen = {};
            wrap.querySelectorAll( '.bb-grp-pick:checked' ).forEach( function ( c ) {
                var sec = c.closest( '.bb-optgroup' );
                if ( ! sec ) { return; }
                sec.querySelectorAll( '.bb-optgroup-h .bb-tag[data-tag]' ).forEach( function ( t ) {
                    // A locked chip is the feed's word and not a merchant's to
                    // take off, so it is never offered as removable.
                    if ( t.classList.contains( 'is-locked' ) ) { return; }
                    // The chip's NAME, not everything inside it: the chip grew a
                    // remove control of its own, so textContent now carries that
                    // glyph too and the bar was drawing two of them.
                    var nm = '';
                    t.childNodes.forEach( function ( n ) { if ( 3 === n.nodeType ) { nm += n.textContent; } } );
                    seen[ t.dataset.tag ] = { name: nm.trim() || t.textContent.trim(), colour: t.style.getPropertyValue( '--bb-tag' ) };
                } );
            } );
            Object.keys( seen ).forEach( function ( id ) {
                var b = document.createElement( 'button' );
                b.type = 'button';
                b.className = 'bb-tagbulk-off';
                b.style.setProperty( '--bb-tag', seen[ id ].colour );
                b.title = L.bulkOff.replace( '%s', seen[ id ].name );
                b.setAttribute( 'aria-label', b.title );
                b.appendChild( document.createTextNode( seen[ id ].name ) );
                var x = document.createElement( 'span' );
                x.className = 'bb-tagbulk-x';
                x.setAttribute( 'aria-hidden', 'true' );
                x.textContent = '×';
                b.appendChild( x );
                b.addEventListener( 'click', function () {
                    var groups = picked();
                    if ( ! groups.length ) { return; }
                    tagPost( { op: 'apply', tag: id, on: 0, groups: groups } ).then( function ( j ) {
                        if ( j && j.success ) { repaintChips( j.data.chips ); paintCarried(); }
                    } );
                } );
                host.appendChild( b );
            } );
        }
        wrap.addEventListener( 'change', function ( e ) {
            if ( e.target && e.target.classList && e.target.classList.contains( 'bb-grp-pick' ) ) { syncBulk(); }
        } );
        // A tick is not a fold: clicking it must not open the group underneath.
        wrap.addEventListener( 'click', function ( e ) {
            if ( e.target && e.target.classList && e.target.classList.contains( 'bb-grp-pick' ) ) { e.stopPropagation(); }
        }, true );

        // The chooser: what the shop already says, before anything new is made.
        function pickTag( title, opts, done ) {
            var ov = document.createElement( 'div' ); ov.className = 'bb-po-modal-ov';
            ov.innerHTML = '<div class="bb-po-modal bb-pick-modal" role="dialog" aria-modal="true"><p class="bb-po-modal-msg"></p><p class="bb-name-row"><input type="search" class="bb-grp-nameedit bb-name-input bb-pick-find"></p><div class="bb-pick-list"></div><div class="bb-po-modal-acts"><button type="button" class="button bb-po-modal-cancel bb-fd-cancel"></button></div></div>';
            ov.querySelector( '.bb-po-modal-msg' ).textContent = title;
            ov.querySelector( '.bb-fd-cancel' ).textContent = L.delCancel;
            var find = ov.querySelector( '.bb-pick-find' );
            find.placeholder = opts.make ? L.tagFindOrNew : L.tagFind;
            find.setAttribute( 'aria-label', find.placeholder );
            var list = ov.querySelector( '.bb-pick-list' );
            function close() { if ( ov.parentNode ) { ov.parentNode.removeChild( ov ); } document.removeEventListener( 'keydown', esc ); }
            function esc( ev ) { if ( ev.key === 'Escape' ) { close(); } }
            function fill( q ) {
                list.textContent = '';
                q = ( q || '' ).toLowerCase();
                var shown = 0;
                TAGS.forEach( function ( t ) {
                    // A supplier tag is the feed's to apply. Offering it here
                    // would promise something tonight's run takes back.
                    if ( 'supplier' === t.kind ) { return; }
                    if ( opts.skip && opts.skip === t.id ) { return; }
                    if ( q && t.name.toLowerCase().indexOf( q ) === -1 ) { return; }
                    var b = document.createElement( 'button' );
                    b.type = 'button';
                    b.textContent = t.name + ( t.n ? '  (' + t.n + ')' : '' );
                    b.addEventListener( 'click', function () { close(); done( t.id, '' ); } );
                    list.appendChild( b );
                    shown++;
                } );
                // Creating is offered LAST and only once nothing matched what
                // was typed, which is the whole defence against a second
                // spelling of a word the shop already has.
                if ( opts.make && q && ! TAGS.some( function ( t ) { return t.name.toLowerCase() === q; } ) ) {
                    var mk = document.createElement( 'button' );
                    mk.type = 'button'; mk.className = 'bb-menu-new';
                    mk.textContent = L.tagNew.replace( '%s', find.value.trim() );
                    mk.addEventListener( 'click', function () { close(); done( '', find.value.trim() ); } );
                    list.appendChild( mk );
                } else if ( ! shown ) {
                    var none = document.createElement( 'p' );
                    none.className = 'bb-tagman-none';
                    none.textContent = L.tagNone;
                    list.appendChild( none );
                }
            }
            find.addEventListener( 'input', function () { fill( find.value ); } );
            find.addEventListener( 'keydown', function ( ev ) {
                if ( ev.key !== 'Enter' ) { return; }
                ev.preventDefault();
                var top = list.querySelector( 'button' );
                if ( top ) { top.click(); }
            } );
            fill( '' );
            ov.querySelector( '.bb-fd-cancel' ).addEventListener( 'click', close );
            ov.addEventListener( 'click', function ( ev ) { if ( ev.target === ov ) { close(); } } );
            document.addEventListener( 'keydown', esc );
            document.body.appendChild( ov );
            find.focus();
        }

        // Tagging ONE group, from the row itself. Selecting and using the bar
        // is right for forty garments and far too much ceremony for one.
        document.addEventListener( 'click', function ( e ) {
            var b = e.target.closest ? e.target.closest( '.bb-grp-tagadd' ) : null;
            if ( ! b ) { return; }
            e.preventDefault();
            e.stopPropagation(); // it sits in the header, which folds the group.
            var sec = b.closest( '.bb-optgroup' );
            if ( ! sec ) { return; }
            var slug = sec.classList.contains( 'is-ungrouped' ) ? '' : ( sec.getAttribute( 'data-group' ) || '' );
            applyTo( [ slug ], true );
        } );

        // Taking ONE tag off ONE group, pressed on the tag itself. No dialog:
        // the chip already names which tag, and the row it sits on already
        // names which group, so asking either would be asking a question the
        // screen has answered.
        document.addEventListener( 'click', function ( e ) {
            var x = e.target.closest ? e.target.closest( '.bb-tag-off' ) : null;
            if ( ! x ) { return; }
            e.preventDefault();
            e.stopPropagation(); // it sits in the header, which folds the group.
            var chip = x.closest( '.bb-tag[data-tag]' );
            var sec  = x.closest( '.bb-optgroup' );
            if ( ! chip || ! sec ) { return; }
            var slug = sec.classList.contains( 'is-ungrouped' ) ? '' : ( sec.getAttribute( 'data-group' ) || '' );
            tagPost( { op: 'apply', tag: chip.dataset.tag, on: 0, groups: [ slug ] } ).then( function ( j ) {
                if ( ! j || ! j.success ) { return; }
                repaintChips( j.data.chips );
                paintCarried();
            } );
        } );

        function applyToPicked( on ) {
            var groups = picked();
            if ( ! groups.length ) { return; }
            applyTo( groups, on );
        }
        // Repaint from what the server says the group now wears, never from
        // what this screen hoped it would.
        function repaintChips( chips ) {
            Object.keys( chips || {} ).forEach( function ( g ) {
                wrap.querySelectorAll( '.bb-optgroup' ).forEach( function ( sec ) {
                    var slug = sec.classList.contains( 'is-ungrouped' ) ? '' : ( sec.getAttribute( 'data-group' ) || '' );
                    if ( slug !== g ) { return; }
                    var old = sec.querySelector( '.bb-optgroup-h > .bb-tag-row' );
                    var holder = document.createElement( 'div' );
                    holder.innerHTML = chips[ g ];
                    var fresh = holder.firstElementChild;
                    if ( old && fresh ) { old.replaceWith( fresh ); }
                    else if ( old ) { old.remove(); }
                    else if ( fresh ) {
                        var count = sec.querySelector( '.bb-grp-count' );
                        if ( count ) { count.parentNode.insertBefore( fresh, count ); }
                    }
                } );
            } );
        }
        function applyTo( groups, on ) {
            pickTag( on ? L.bulkAdd : L.bulkRm, { make: on }, function ( id, name ) {
                tagPost( { op: 'apply', tag: id, name: name, on: on ? 1 : 0, groups: groups } ).then( function ( j ) {
                    if ( ! j || ! j.success ) { return; }
                    repaintChips( j.data.chips );
                    paintCarried();
                } );
            } );
        }

        // The verbs a selection is expected to have. Each is the same thing the
        // group's own menu already does, asked of all of them in one trip.
        // The one delete question, asked the same way from the row menu and
        // from a selection. It weighs the groups first so it can say what is
        // actually inside, then offers the two real answers. The safe one
        // leads and holds focus; the destructive one is never the default.
        function askGroupDelete( names, go ) {
            post( { action: "addon_boss_group_op", op: "weigh", groups: names, group: names[ 0 ] || "" } ).then( function ( j2 ) {
                var d = ( j2 && j2.success && j2.data ) ? j2.data : { sets: 0, used: 0, products: 0 };
                var bare = ! d.sets;
                var ov = document.createElement( "div" );
                ov.className = "bb-po-modal-ov";
                ov.innerHTML = '<div class="bb-po-modal" role="dialog" aria-modal="true">'
                    + '<p class="bb-po-modal-msg"></p><p class="bb-po-modal-sub"></p>'
                    + '<p class="bb-po-modal-sub bb-po-modal-cost"></p>'
                    + '<div class="bb-po-modal-acts">'
                    + '<button type="button" class="button bb-cta bb-po-modal-keep"></button>'
                    + '<button type="button" class="button bb-po-modal-del"></button>'
                    + '<button type="button" class="button bb-po-modal-cancel"></button>'
                    + '</div></div>';
                var title = 1 === names.length
                    ? ( names[ 0 ] ? ( "\u201C" + names[ 0 ] + "\u201D" ) : L.delTitle )
                    : L.delMany.replace( "%s", String( names.length ) );
                ov.querySelector( ".bb-po-modal-msg" ).textContent = title;
                var keep = ov.querySelector( ".bb-po-modal-keep" );
                var both = ov.querySelector( ".bb-po-modal-del" );
                if ( bare ) {
                    // No sets inside means no choice to make, so the screen
                    // does not stage one: it states the fact and offers the
                    // single action there is.
                    ov.querySelector( ".bb-po-modal-sub" ).textContent = 1 === names.length ? L.delBare : L.delBareN;
                    ov.querySelector( ".bb-po-modal-cost" ).remove();
                    keep.remove();
                    both.textContent = 1 === names.length ? L.delOnly : L.delOnlyN;
                } else {
                    ov.querySelector( ".bb-po-modal-sub" ).textContent = L.delBody;
                    // What it costs, in this shop\u2019s own numbers.
                    // Every number wears its own plural: "1 product" is not "1 products",
                    // and a merchant reading a warning notices which of the two you wrote.
                    var setsWord = ( 1 === d.sets ? L.delSet1 : L.delSetN ).replace( "%s", String( d.sets ) );
                    var prodWord = ( 1 === d.products ? L.delProd1 : L.delProdN ).replace( "%s", String( d.products ) );
                    var has = ( 1 === names.length ? L.delHas1 : L.delHas ).replace( "%s", setsWord );
                    var use = d.used
                        ? ( 1 === d.used
                            ? L.delUsed1.replace( "%s", prodWord )
                            : L.delUsed.replace( "%1$s", String( d.used ) ).replace( "%2$s", prodWord ) )
                        : L.delNone;
                    ov.querySelector( ".bb-po-modal-cost" ).textContent = has + " " + use + " " + L.delUndo;
                    keep.textContent = L.delKeep;
                    both.textContent = L.delBoth;
                }
                ov.querySelector( ".bb-po-modal-cancel" ).textContent = L.delCancel;
                function done() { if ( ov.parentNode ) { ov.parentNode.removeChild( ov ); } document.removeEventListener( "keydown", esc ); }
                function esc( ev ) { if ( "Escape" === ev.key ) { done(); } }
                if ( ! bare ) { keep.addEventListener( "click", function () { done(); go( false ); } ); }
                both.addEventListener( "click", function () { done(); go( bare ? false : true ); } );
                ov.querySelector( ".bb-po-modal-cancel" ).addEventListener( "click", done );
                ov.addEventListener( "click", function ( ev ) { if ( ev.target === ov ) { done(); } } );
                document.addEventListener( "keydown", esc );
                document.body.appendChild( ov );
                // Focus never lands on the destructive answer when a safe one
                // exists; with an empty group there is only the one action.
                ( bare ? ov.querySelector( ".bb-po-modal-cancel" ) : keep ).focus();
            } );
        }
        // A one-answer question in the same frame as the two-answer one, so a
        // merchant is never thrown from our screen into the browser's own box
        // halfway through a job.
        function askPlainly( title, body, okLabel, go ) {
            var ov = document.createElement( 'div' );
            ov.className = 'bb-po-modal-ov';
            ov.innerHTML = '<div class="bb-po-modal" role="dialog" aria-modal="true">'
                + '<p class="bb-po-modal-msg"></p><p class="bb-po-modal-sub"></p>'
                + '<div class="bb-po-modal-acts">'
                + '<button type="button" class="button bb-cta bb-po-modal-ok"></button>'
                + '<button type="button" class="button bb-po-modal-cancel"></button>'
                + '</div></div>';
            ov.querySelector( '.bb-po-modal-msg' ).textContent = title;
            ov.querySelector( '.bb-po-modal-sub' ).textContent = body;
            ov.querySelector( '.bb-po-modal-ok' ).textContent = okLabel;
            ov.querySelector( '.bb-po-modal-cancel' ).textContent = L.delCancel;
            function done() { if ( ov.parentNode ) { ov.parentNode.removeChild( ov ); } document.removeEventListener( 'keydown', esc ); }
            function esc( ev ) { if ( 'Escape' === ev.key ) { done(); } }
            ov.querySelector( '.bb-po-modal-ok' ).addEventListener( 'click', function () { done(); go(); } );
            ov.querySelector( '.bb-po-modal-cancel' ).addEventListener( 'click', done );
            ov.addEventListener( 'click', function ( ev ) { if ( ev.target === ov ) { done(); } } );
            document.addEventListener( 'keydown', esc );
            document.body.appendChild( ov );
            ov.querySelector( '.bb-po-modal-ok' ).focus();
        }
        function bulkGroupOp( op ) {
            var groups = picked();
            if ( ! groups.length ) { return; }
            // Delete is the one verb that can destroy work, so it asks properly
            // rather than through the browser box, which cannot offer a choice.
            if ( 'delete' === op ) { askGroupDelete( groups, function ( withSets ) { runGroupOp( op, groups, withSets ); } ); return; }
            if ( 'empty' === op ) {
                askPlainly(
                    L.bulkEmptyAsk.replace( '%s', String( groups.length ) ),
                    L.bulkEmptyWhy,
                    L.bulkEmptyOk,
                    function () { runGroupOp( op, groups, false ); }
                );
                return;
            }
            runGroupOp( op, groups, false );
        }
        function runGroupOp( op, groups, withSets ) {
            post( { action: "addon_boss_group_op", op: op, groups: groups, sets: withSets ? 1 : 0 } ).then( function ( j ) {
                if ( j && ! j.success && j.data && j.data.message ) { window.alert( j.data.message ); }
                // Groups appeared, vanished or emptied: the list is a different
                // list now, so it is re-read rather than patched in ten places.
                narrow( window.location.href );
            } );
        }
        if ( bulk ) {
            bulk.querySelector( '.bb-tagbulk-add' ).addEventListener( 'click', function () { applyToPicked( true ); } );
            bulk.querySelector( '.bb-tagbulk-dup' ).addEventListener( 'click', function () { bulkGroupOp( 'duplicate' ); } );
            bulk.querySelector( '.bb-tagbulk-empty' ).addEventListener( 'click', function () { bulkGroupOp( 'empty' ); } );
            bulk.querySelector( '.bb-tagbulk-del' ).addEventListener( 'click', function () { bulkGroupOp( 'delete' ); } );
            bulk.querySelector( '.bb-tagbulk-none' ).addEventListener( 'click', function () {
                wrap.querySelectorAll( '.bb-grp-pick:checked' ).forEach( function ( c ) { c.checked = false; } );
                syncBulk();
            } );
        }

        // ---- Housekeeping: rename, recolour, merge, delete.
        function manageTags() {
            var ov = document.createElement( 'div' ); ov.className = 'bb-po-modal-ov';
            ov.innerHTML = '<div class="bb-po-modal bb-pick-modal bb-tagman-modal" role="dialog" aria-modal="true"><p class="bb-po-modal-msg"></p><p class="bb-po-modal-sub"></p><div class="bb-pick-list bb-tagman-list"></div><div class="bb-po-modal-acts"><button type="button" class="button bb-po-modal-cancel bb-fd-cancel"></button></div></div>';
            ov.querySelector( '.bb-po-modal-msg' ).textContent = L.manageTitle;
            ov.querySelector( '.bb-po-modal-sub' ).textContent = L.manageSub;
            ov.querySelector( '.bb-fd-cancel' ).textContent = L.manageDone;
            var list = ov.querySelector( '.bb-tagman-list' );
            function close() {
                if ( ov.parentNode ) { ov.parentNode.removeChild( ov ); }
                document.removeEventListener( 'keydown', esc );
                // The bar, the chips and the counts all came from tags that
                // may have just been renamed or folded together, so the page
                // is re-read rather than patched in six places.
                narrow( window.location.href );
            }
            function esc( ev ) { if ( ev.key === 'Escape' ) { close(); } }
            function act( label, fn ) {
                var b = document.createElement( 'button' );
                b.type = 'button'; b.textContent = label;
                b.addEventListener( 'click', fn );
                return b;
            }
            function draw() {
                list.textContent = '';
                if ( ! TAGS.length ) {
                    var none = document.createElement( 'p' );
                    none.className = 'bb-tagman-none';
                    none.textContent = L.manageNone;
                    list.appendChild( none );
                    return;
                }
                TAGS.forEach( function ( t ) {
                    var row = document.createElement( 'div' );
                    row.className = 'bb-tagman-row';

                    var chip = document.createElement( 'span' );
                    chip.className = 'bb-tagman-name';
                    chip.innerHTML = '<span class="bb-tag" style="--bb-tag:' + t.colour + '"><span class="bb-tag-dot"></span></span>';
                    chip.querySelector( '.bb-tag' ).appendChild( document.createTextNode( t.name ) );
                    row.appendChild( chip );

                    var n = document.createElement( 'span' );
                    n.className = 'bb-tagman-n';
                    n.textContent = L.onN.replace( '%s', String( t.n ) );
                    row.appendChild( n );

                    if ( 'supplier' === t.kind ) {
                        var lk = document.createElement( 'span' );
                        lk.className = 'bb-tagman-locked';
                        lk.textContent = L.tagLocked;
                        row.appendChild( lk );
                        list.appendChild( row );
                        return;
                    }

                    var sw = document.createElement( 'span' );
                    sw.className = 'bb-tagman-sw';
                    PALETTE.forEach( function ( hex ) {
                        var b = document.createElement( 'button' );
                        b.type = 'button';
                        b.style.background = hex;
                        b.setAttribute( 'aria-label', hex );
                        if ( hex.toLowerCase() === String( t.colour ).toLowerCase() ) { b.className = 'is-on'; }
                        b.addEventListener( 'click', function () {
                            tagPost( { op: 'recolour', tag: t.id, colour: hex } ).then( function ( j ) { if ( j && j.success ) { draw(); } } );
                        } );
                        sw.appendChild( b );
                    } );
                    row.appendChild( sw );

                    var acts = document.createElement( 'span' );
                    acts.className = 'bb-tagman-acts';
                    acts.appendChild( act( L.tagRename, function () {
                        askName( L.tagRename, L.tagRenameGo, function ( name ) {
                            tagPost( { op: 'rename', tag: t.id, name: name } ).then( function ( j ) { if ( j && j.success ) { draw(); } } );
                        }, t.name );
                    } ) );
                    acts.appendChild( act( L.tagMerge, function () {
                        pickTag( L.tagMergeInto.replace( '%s', t.name ), { skip: t.id, make: false }, function ( into ) {
                            if ( ! into ) { return; }
                            tagPost( { op: 'merge', tag: t.id, into: into } ).then( function ( j ) { if ( j && j.success ) { draw(); } } );
                        } );
                    } ) );
                    acts.appendChild( act( L.tagDelete, function () {
                        // A delete takes the word off everything wearing it,
                        // so the count is in the question, not discovered after.
                        var why = t.n
                            ? ( 1 === t.n ? L.tagDeleteWhy1 : L.tagDeleteWhy.replace( '%s', String( t.n ) ) )
                            : L.tagDeleteWhy0;
                        askPlainly( L.tagDeleteAsk.replace( '%s', t.name ), why, L.tagDeleteOk, function () {
                            tagPost( { op: 'delete', tag: t.id } ).then( function ( j ) { if ( j && j.success ) { draw(); } } );
                        } );
                    } ) );
                    row.appendChild( acts );
                    list.appendChild( row );
                } );
            }
            draw();
            ov.querySelector( '.bb-fd-cancel' ).addEventListener( 'click', close );
            ov.addEventListener( 'click', function ( ev ) { if ( ev.target === ov ) { close(); } } );
            document.addEventListener( 'keydown', esc );
            document.body.appendChild( ov );
        }
        document.addEventListener( 'click', function ( e ) {
            var b = e.target.closest ? e.target.closest( '.bb-tag-manage' ) : null;
            if ( ! b ) { return; }
            e.preventDefault();
            manageTags();
        } );
        // Coining a word, without needing something to put it on first. It
        // lands under "On nothing yet" until it does, which is where the menu
        // already says such words live.
        document.addEventListener( 'click', function ( e ) {
            var b = e.target.closest ? e.target.closest( '.bb-tag-new' ) : null;
            if ( ! b ) { return; }
            e.preventDefault();
            // The same dialog Rename opens, not the browser's own prompt box.
            // A native prompt is the one thing on this screen that looks like
            // nothing else on it: no house chrome, no styling, and it says the
            // site's hostname across the top as if the page were warning you.
            // askName already handles focus, Enter, Escape and clicking away.
            askName( L.tagNewAsk, L.tagNewGo, function ( name ) {
                b.disabled = true;
                tagPost( { op: 'make', name: name } ).then( function ( j ) {
                    b.disabled = false;
                    if ( j && j.success ) { narrow( window.location.href ); }
                } ).catch( function () { b.disabled = false; } );
            } );
        } );

        function post( params ) {
            var body = new URLSearchParams();
            body.append( '_wpnonce', NONCE );
            Object.keys( params ).forEach( function ( k ) {
                // A list goes over the wire AS a list. Appending it whole turns
                // two group names into one string with a comma in it, and the
                // server then looks for a group nobody has ever created: the
                // request succeeds and the selection is untouched.
                if ( Array.isArray( params[ k ] ) ) {
                    params[ k ].forEach( function ( v ) { body.append( k + '[]', v ); } );
                    return;
                }
                body.append( k, params[ k ] );
            } );
            return fetch( ajaxurl, { method: 'POST', credentials: 'same-origin', headers: { 'Content-Type': 'application/x-www-form-urlencoded' }, body: body.toString() } )
                .then( function ( r ) { return r.json(); } );
        }

        // ---- The folds this user last had open, per browser. A filtered page
        // renders its matches open and is left alone.
        var KEY = 'aobOptsetsOpen';
        function readOpen() { try { return JSON.parse( window.localStorage.getItem( KEY ) || '[]' ); } catch ( _ ) { return []; } }
        function writeOpen() {
            try {
                var open = [];
                wrap.querySelectorAll( '.bb-optgroup:not(.is-collapsed)' ).forEach( function ( g ) { open.push( g.getAttribute( 'data-group' ) || '' ); } );
                window.localStorage.setItem( KEY, JSON.stringify( open ) );
            } catch ( _ ) {}
        }
        function setFold( sec, collapsed ) {
            sec.classList.toggle( 'is-collapsed', collapsed );
            var c = sec.querySelector( '.bb-grp-caret' );
            if ( c ) { c.setAttribute( 'aria-expanded', collapsed ? 'false' : 'true' ); }
        }
        if ( ! FILTERING ) {
            var remembered = readOpen();
            wrap.querySelectorAll( '.bb-optgroup' ).forEach( function ( g ) {
                if ( remembered.indexOf( g.getAttribute( 'data-group' ) || '' ) > -1 ) { setFold( g, false ); }
            } );
        }

        wrap.addEventListener( 'click', function ( e ) {
            var head = e.target.closest ? e.target.closest( '.bb-optgroup-h' ) : null;
            if ( ! head ) { return; }
            // Controls that live IN the header do their own thing; the header
            // itself is the fold. The tag button joined this list the moment
            // it existed, because pressing it also opened the group.
            if ( e.target.closest( '.bb-grp-menuwrap, .bb-grp-nameedit, .bb-grp-tagadd, .bb-tag-row, a' ) ) { return; }
            var sec = head.closest( '.bb-optgroup' );
            setFold( sec, ! sec.classList.contains( 'is-collapsed' ) );
            writeOpen(); syncFoldAll();
        } );

        var foldAll = document.querySelector( '.bb-collapse-all' );
        function syncFoldAll() {
            if ( ! foldAll ) { return; }
            var open = 0;
            wrap.querySelectorAll( '.bb-optgroup' ).forEach( function ( g ) { if ( ! g.classList.contains( 'is-collapsed' ) ) { open++; } } );
            foldAll.textContent = open ? foldAll.getAttribute( 'data-say-collapse' ) : foldAll.getAttribute( 'data-say-expand' );
        }
        if ( foldAll ) {
            foldAll.addEventListener( 'click', function () {
                var anyOpen = false;
                wrap.querySelectorAll( '.bb-optgroup' ).forEach( function ( g ) { if ( ! g.classList.contains( 'is-collapsed' ) ) { anyOpen = true; } } );
                wrap.querySelectorAll( '.bb-optgroup' ).forEach( function ( g ) { setFold( g, anyOpen ); } );
                writeOpen(); syncFoldAll();
            } );
            syncFoldAll();
        }

        // The source filter applies itself; the search submits on Enter.
        var srcSel = document.getElementById( 'bb-set-source' );
        if ( srcSel ) {
            srcSel.addEventListener( 'change', function () {
                // Same narrowing, same one list: build the URL the form would
                // have submitted, then fetch it instead of navigating to it.
                var u = new URL( window.location.href );
                u.searchParams.set( 'page', 'addon-boss-option-sets' );
                u.searchParams.delete( 'paged' );
                if ( srcSel.value ) { u.searchParams.set( 'source', srcSel.value ); }
                else { u.searchParams.delete( 'source' ); }
                narrow( u.href );
            } );
        }

        // Typing filters THIS page instantly; Enter asks the whole library.
        // The hint under the box says so whenever the page is not the whole
        // story, so "no matches here" is never mistaken for "no matches".
        var search  = document.getElementById( 'bb-set-search' );
        var typeHint = document.getElementById( 'bb-set-typehint' );
        if ( search ) {
            search.addEventListener( 'input', function () {
                var q = search.value.trim().toLowerCase();
                var shown = 0;
                wrap.querySelectorAll( '.bb-optgroup' ).forEach( function ( sec ) {
                    var hay = ( sec.getAttribute( 'data-group' ) || '' ).toLowerCase();
                    sec.querySelectorAll( '.bb-setcard' ).forEach( function ( card ) {
                        hay += ' ' + ( card.getAttribute( 'data-search' ) || '' );
                    } );
                    var hit = ! q || hay.indexOf( q ) > -1;
                    sec.style.display = hit ? '' : 'none';
                    if ( hit ) { shown++; }
                } );
                if ( typeHint ) { typeHint.hidden = ! q; }
                syncFoldAll();
            } );
        }

        function refresh() {
            wrap.querySelectorAll( '.bb-optgroup' ).forEach( function ( sec ) {
                var n = sec.querySelectorAll( '.bb-setcard' ).length;
                var c = sec.querySelector( '.bb-grp-count' ); if ( c ) { c.textContent = n; }
                sec.classList.toggle( 'is-empty', n === 0 );
            } );
        }

        // Attach-to-products disclosure (unchanged).
        wrap.addEventListener( 'click', function ( e ) {
            var t = e.target.closest ? e.target.closest( '.bb-bulk-toggle' ) : null;
            if ( ! t ) { return; }
            var form = t.closest( '.bb-setcard' ).querySelector( '.bb-bulkrow' );
            if ( form ) { form.hidden = ! form.hidden; t.setAttribute( 'aria-expanded', form.hidden ? 'false' : 'true' ); }
        } );

        // ---- One menu open at a time.
        function closeMenus() {
            document.querySelectorAll( '.bb-grp-menu:not([hidden])' ).forEach( function ( m ) { m.hidden = true; } );
            document.querySelectorAll( '.bb-grp-menu-btn[aria-expanded="true"], .bb-card-menu-btn[aria-expanded="true"]' ).forEach( function ( b ) { b.setAttribute( 'aria-expanded', 'false' ); } );
            var fl = document.querySelector( '.bb-card-menu' );
            if ( fl ) { fl.remove(); }
        }
        document.addEventListener( 'click', function ( e ) {
            if ( ! e.target.closest || ( ! e.target.closest( '.bb-grp-menuwrap' ) && ! e.target.closest( '.bb-card-menu' ) && ! e.target.closest( '.bb-card-menu-btn' ) ) ) { closeMenus(); }
        } );
        document.addEventListener( 'keydown', function ( e ) { if ( e.key === 'Escape' ) { closeMenus(); } } );

        wrap.addEventListener( 'click', function ( e ) {
            var btn = e.target.closest ? e.target.closest( '.bb-grp-menu-btn' ) : null;
            if ( ! btn ) { return; }
            var menu = btn.parentNode.querySelector( '.bb-grp-menu' );
            var open = menu && menu.hidden;
            closeMenus();
            if ( menu && open ) { menu.hidden = false; btn.setAttribute( 'aria-expanded', 'true' ); }
        } );

        // A name asked for in the house chrome, never the browser's own
        // prompt: one input, Enter or the button commits, Escape walks away.
        function askName( title, go, done, was ) {
            var ov = document.createElement( 'div' ); ov.className = 'bb-po-modal-ov';
            ov.innerHTML = '<div class="bb-po-modal" role="dialog" aria-modal="true"><p class="bb-po-modal-msg"></p><p class="bb-name-row"><input type="text" class="bb-grp-nameedit bb-name-input"></p><div class="bb-po-modal-acts"><button type="button" class="button bb-po-modal-keep bb-fd-ok"></button><button type="button" class="button bb-po-modal-cancel bb-fd-cancel"></button></div></div>';
            ov.querySelector( '.bb-po-modal-msg' ).textContent = title;
            ov.querySelector( '.bb-fd-ok' ).textContent = go;
            ov.querySelector( '.bb-fd-cancel' ).textContent = L.delCancel;
            var inp = ov.querySelector( '.bb-name-input' );
            inp.setAttribute( 'aria-label', L.name );
            // A rename starts from the name it has. Naming something NEW still
            // starts empty, because every caller before this passed nothing.
            if ( was ) { inp.value = was; }
            function close() { if ( ov.parentNode ) { ov.parentNode.removeChild( ov ); } document.removeEventListener( 'keydown', esc ); }
            function esc( ev ) { if ( ev.key === 'Escape' ) { close(); } }
            function commit() {
                var val = ( inp.value || '' ).trim();
                if ( ! val ) { inp.focus(); return; }
                close(); done( val );
            }
            ov.querySelector( '.bb-fd-ok' ).addEventListener( 'click', commit );
            ov.querySelector( '.bb-fd-cancel' ).addEventListener( 'click', close );
            inp.addEventListener( 'keydown', function ( ev ) { if ( ev.key === 'Enter' ) { ev.preventDefault(); commit(); } } );
            ov.addEventListener( 'click', function ( ev ) { if ( ev.target === ov ) { close(); } } );
            document.addEventListener( 'keydown', esc );
            document.body.appendChild( ov );
            inp.focus();
        }

        // ---- The offer when a set joins a group (unchanged endpoint).
        function offerToApply( item ) {
            var bar = document.createElement( 'div' );
            bar.className = 'bb-grp-offer';
            var msg = document.createElement( 'span' );
            msg.textContent = L.offer.replace( '%1$s', item.group ).replace( '%2$s', String( item.count ) ).replace( '%3$s', item.name );
            var yes = document.createElement( 'button' );
            yes.type = 'button'; yes.className = 'button button-primary';
            yes.textContent = L.offerYes.replace( '%s', String( item.count ) );
            var no = document.createElement( 'button' );
            no.type = 'button'; no.className = 'button-link'; no.textContent = L.offerNo;
            no.addEventListener( 'click', function () { bar.remove(); } );
            yes.addEventListener( 'click', function () {
                yes.disabled = true;
                post( { action: 'addon_boss_apply_set_to_group', set: item.set, group: item.group } )
                    .then( function ( j ) { bar.textContent = L.offerDone.replace( '%s', String( ( j && j.data && j.data.applied ) || 0 ) ); } )
                    .catch( function () { yes.disabled = false; } );
            } );
            bar.appendChild( msg ); bar.appendChild( yes ); bar.appendChild( no );
            wrap.insertBefore( bar, wrap.firstChild );
        }

        // ---- Move one set: the operation every route lands on.
        function moveSet( card, groupName, position, destSec, after ) {
            var params = { action: 'addon_boss_move_set', set: card.getAttribute( 'data-set-id' ), group: groupName };
            if ( typeof position === 'number' ) { params.position = String( position ); }
            post( params ).then( function ( j ) {
                if ( ! j || ! j.success ) { return; }
                if ( destSec ) {
                    var grid = destSec.querySelector( '.bb-setgrid' );
                    var ph   = grid.querySelector( '.bb-grp-empty' );
                    if ( ph ) { grid.insertBefore( card, ph ); } else { grid.appendChild( card ); }
                    setFold( destSec, false ); writeOpen();
                } else if ( typeof position !== 'number' ) {
                    // Moved to a group not on this page: the card leaves.
                    card.remove();
                }
                refresh(); syncFoldAll();
                if ( j.data && j.data.joined ) { j.data.joined.forEach( offerToApply ); }
                if ( after ) { after(); }
            } ).catch( function () {} );
        }

        // Drag stays for anyone who likes it, page-local by nature.
        var dragEl = null;
        wrap.addEventListener( 'dragstart', function ( e ) {
            var card = e.target.closest ? e.target.closest( '.bb-setcard' ) : null;
            if ( ! card ) { return; }
            dragEl = card; card.classList.add( 'is-dragging' );
            e.dataTransfer.effectAllowed = 'move';
            try { e.dataTransfer.setData( 'text/plain', card.getAttribute( 'data-set-id' ) ); } catch ( _ ) {}
        } );
        wrap.addEventListener( 'dragend', function () {
            if ( dragEl ) { dragEl.classList.remove( 'is-dragging' ); }
            dragEl = null;
            wrap.querySelectorAll( '.bb-drop-hi' ).forEach( function ( s ) { s.classList.remove( 'bb-drop-hi' ); } );
        } );
        wrap.addEventListener( 'dragover', function ( e ) {
            if ( ! dragEl ) { return; }
            var sec = e.target.closest ? e.target.closest( '.bb-optgroup' ) : null;
            if ( ! sec ) { return; }
            e.preventDefault(); e.dataTransfer.dropEffect = 'move';
            wrap.querySelectorAll( '.bb-drop-hi' ).forEach( function ( s ) { if ( s !== sec ) { s.classList.remove( 'bb-drop-hi' ); } } );
            sec.classList.add( 'bb-drop-hi' );
        } );
        wrap.addEventListener( 'drop', function ( e ) {
            if ( ! dragEl ) { return; }
            var sec = e.target.closest ? e.target.closest( '.bb-optgroup' ) : null;
            if ( ! sec ) { return; }
            e.preventDefault();
            sec.classList.remove( 'bb-drop-hi' );
            moveSet( dragEl, sec.classList.contains( 'is-ungrouped' ) ? '' : ( sec.getAttribute( 'data-group' ) || '' ), undefined, sec );
        } );

        // ---- The destination dialog Move to and Copy to share: the house
        // modal with a search box and every group in the library, never a
        // hundred buttons crammed into a dropdown. Click a group and the
        // verb happens; Enter takes the top match; a group made here comes
        // back flagged so the caller can follow it.
        function pickGroup( title, opts, done ) {
            var ov = document.createElement( 'div' ); ov.className = 'bb-po-modal-ov';
            ov.innerHTML = '<div class="bb-po-modal bb-pick-modal" role="dialog" aria-modal="true"><p class="bb-po-modal-msg"></p><p class="bb-name-row"><input type="search" class="bb-grp-nameedit bb-name-input bb-pick-find"></p><div class="bb-pick-list"></div><div class="bb-po-modal-acts"><button type="button" class="button bb-po-modal-cancel bb-fd-cancel"></button></div></div>';
            ov.querySelector( '.bb-po-modal-msg' ).textContent = title;
            ov.querySelector( '.bb-fd-cancel' ).textContent = L.delCancel;
            var find = ov.querySelector( '.bb-pick-find' );
            find.placeholder = L.findGroup; find.setAttribute( 'aria-label', L.findGroup );
            var list = ov.querySelector( '.bb-pick-list' );
            function close() { if ( ov.parentNode ) { ov.parentNode.removeChild( ov ); } document.removeEventListener( 'keydown', esc ); }
            function esc( ev ) { if ( ev.key === 'Escape' ) { close(); } }
            function secOf( group ) {
                var hit = null;
                wrap.querySelectorAll( '.bb-optgroup' ).forEach( function ( g ) {
                    var slug = g.classList.contains( 'is-ungrouped' ) ? '' : ( g.getAttribute( 'data-group' ) || '' );
                    if ( slug === group ) { hit = g; }
                } );
                return hit;
            }
            function entry( label, group, cls ) {
                var b = document.createElement( 'button' );
                b.type = 'button'; b.textContent = label; if ( cls ) { b.className = cls; }
                b.addEventListener( 'click', function () {
                    if ( '__new__' === group ) {
                        close();
                        askName( L.newGroup, L.newGroupGo, function ( name ) {
                            post( { action: 'addon_boss_group_op', op: 'create', group: name } ).then( function ( j ) {
                                if ( j && j.success ) { done( j.data.group, null, true ); }
                            } );
                        } );
                        return;
                    }
                    close(); done( group, secOf( group ), false );
                } );
                return b;
            }
            function fill( q ) {
                list.textContent = '';
                q = ( q || '' ).toLowerCase();
                GROUPS.forEach( function ( g ) {
                    if ( g === opts.skip ) { return; }
                    if ( q && g.toLowerCase().indexOf( q ) === -1 ) { return; }
                    list.appendChild( entry( g, g ) );
                } );
                list.appendChild( entry( L.newIn, '__new__', 'bb-menu-new' ) );
                if ( opts.ungrouped && ( ! q || L.ungrouped.toLowerCase().indexOf( q ) > -1 ) ) {
                    list.appendChild( entry( L.ungrouped, '', 'bb-menu-ung' ) );
                }
            }
            find.addEventListener( 'input', function () { fill( find.value ); } );
            find.addEventListener( 'keydown', function ( ev ) {
                if ( ev.key !== 'Enter' ) { return; }
                ev.preventDefault();
                var top = list.querySelector( 'button' );
                if ( top ) { top.click(); }
            } );
            fill( '' );
            ov.querySelector( '.bb-fd-cancel' ).addEventListener( 'click', close );
            ov.addEventListener( 'click', function ( ev ) { if ( ev.target === ov ) { close(); } } );
            document.addEventListener( 'keydown', esc );
            document.body.appendChild( ov );
            find.focus();
        }

        // ---- The set's own menu: three verbs, no crammed list. Move to and
        // Copy to open the picker above (the whole library searchable, so
        // pagination can never strand a destination); Position stays, the
        // pointer alternative the drag needs.
        wrap.addEventListener( 'click', function ( e ) {
            var btn = e.target.closest ? e.target.closest( '.bb-card-menu-btn' ) : null;
            if ( ! btn ) { return; }
            closeMenus();
            btn.setAttribute( 'aria-expanded', 'true' );
            var card  = btn.closest( '.bb-setcard' );
            var sec   = card.closest( '.bb-optgroup' );
            var here  = sec.classList.contains( 'is-ungrouped' ) ? '' : ( sec.getAttribute( 'data-group' ) || '' );
            var quoted = ( function () {
                var a = card.querySelector( 'h3 a' );
                return '\u201C' + ( a ? a.textContent.trim() : '' ) + '\u201D';
            } )();
            var menu = document.createElement( 'div' );
            menu.className = 'bb-card-menu';
            menu.setAttribute( 'role', 'menu' );

            function verb( label, run ) {
                var b = document.createElement( 'button' );
                b.type = 'button'; b.className = 'bb-menu-verb'; b.textContent = label;
                b.addEventListener( 'click', function () { closeMenus(); run(); } );
                menu.appendChild( b );
            }
            verb( L.moveTo + '\u2026', function () {
                pickGroup( L.moveTitle.replace( '%s', quoted ), { skip: here, ungrouped: '' !== here }, function ( group, destSec, made ) {
                    moveSet( card, group, undefined, destSec, made ? function () { window.location.reload(); } : null );
                } );
            } );
            verb( L.copyTo + '\u2026', function () {
                pickGroup( L.copyTitle.replace( '%s', quoted ), { ungrouped: true }, function ( group, destSec ) {
                    post( { action: 'addon_boss_copy_set', set: card.getAttribute( 'data-set-id' ), group: group } ).then( function ( j ) {
                        if ( ! j || ! j.success ) { return; }
                        // The copy is server-made; open the destination and
                        // let the reload draw its card.
                        if ( destSec ) { setFold( destSec, false ); writeOpen(); }
                        window.location.reload();
                    } ).catch( function () {} );
                } );
            } );

            // Position among this group's sets: type the place, press Enter.
            var cards = sec.querySelectorAll( '.bb-setcard' );
            var at    = Array.prototype.indexOf.call( cards, card );
            var pos   = document.createElement( 'div' );
            pos.className = 'bb-menu-pos';
            var posLab = document.createElement( 'span' );
            posLab.textContent = L.position;
            var posIn = document.createElement( 'input' );
            posIn.type = 'number'; posIn.min = '1'; posIn.max = String( cards.length );
            posIn.value = String( at + 1 );
            posIn.setAttribute( 'aria-label', L.position );
            var posOf = document.createElement( 'span' );
            posOf.className = 'bb-menu-ofn';
            posOf.textContent = L.ofN.replace( '%s', String( cards.length ) );
            posIn.addEventListener( 'keydown', function ( ev ) {
                if ( ev.key !== 'Enter' ) { return; }
                ev.preventDefault();
                var want = Math.max( 1, Math.min( parseInt( posIn.value, 10 ) || 1, cards.length ) ) - 1;
                moveSet( card, here, want, null );
                var grid = sec.querySelector( '.bb-setgrid' );
                var kids = grid.querySelectorAll( '.bb-setcard' );
                if ( want >= kids.length - 1 ) {
                    var ph = grid.querySelector( '.bb-grp-empty' );
                    grid.insertBefore( card, ph || null );
                } else {
                    var ref = kids[ want ];
                    if ( ref === card ) { ref = kids[ want + 1 ]; }
                    grid.insertBefore( card, ref );
                }
                closeMenus();
            } );
            pos.appendChild( posLab ); pos.appendChild( posIn ); pos.appendChild( posOf );
            menu.appendChild( pos );

            card.appendChild( menu );
            menu.querySelector( 'button' ).focus();
        } );

        // ---- "Used on N products" opens the products themselves, in the
        // same house dialog the pickers use: a search box answered by the
        // server, twenty a page with Show more, and the Products screen in
        // the footer for bulk work. One surface, whatever the scale.
        wrap.addEventListener( 'click', function ( e ) {
            var btn = e.target.closest ? e.target.closest( '.bb-setuse' ) : null;
            if ( ! btn ) { return; }
            var card  = btn.closest( '.bb-setcard' );
            var setId = card.getAttribute( 'data-set-id' );
            var name  = ( card.querySelector( 'h3 a' ) || { textContent: '' } ).textContent.trim();

            var ov = document.createElement( 'div' ); ov.className = 'bb-po-modal-ov';
            ov.innerHTML = '<div class="bb-po-modal bb-pick-modal bb-uses-modal" role="dialog" aria-modal="true"><p class="bb-po-modal-msg"></p><p class="bb-po-modal-sub"></p><p class="bb-name-row"><input type="search" class="bb-grp-nameedit bb-name-input bb-pick-find"></p><div class="bb-pick-list bb-uses-list"></div><p class="bb-uses-foot" hidden><a class="bb-setuse-all"></a></p><div class="bb-po-modal-acts"><button type="button" class="button bb-po-modal-cancel bb-fd-cancel"></button></div></div>';
            ov.querySelector( '.bb-po-modal-msg' ).textContent = '\u201C' + name + '\u201D';
            ov.querySelector( '.bb-po-modal-sub' ).textContent = btn.textContent;
            ov.querySelector( '.bb-fd-cancel' ).textContent = L.delCancel;
            var find = ov.querySelector( '.bb-pick-find' );
            find.placeholder = L.findProduct; find.setAttribute( 'aria-label', L.findProduct );
            var list = ov.querySelector( '.bb-uses-list' );
            var foot = ov.querySelector( '.bb-uses-foot' );

            function close() { if ( ov.parentNode ) { ov.parentNode.removeChild( ov ); } document.removeEventListener( 'keydown', esc ); }
            function esc( ev ) { if ( 'Escape' === ev.key ) { close(); } }

            var page = 1, query = '', timer = null;
            function load( append ) {
                post( { action: 'addon_boss_set_products', set: setId, q: query, page: page } ).then( function ( j ) {
                    if ( ! j || ! j.success ) { return; }
                    var old = list.querySelector( '.bb-uses-more' );
                    if ( old ) { old.remove(); }
                    if ( ! append ) { list.textContent = ''; }
                    ( j.data.items || [] ).forEach( function ( it ) {
                        var a = document.createElement( 'a' );
                        a.href = it.url; a.textContent = it.title;
                        list.appendChild( a );
                    } );
                    if ( ! list.childNodes.length ) {
                        var none = document.createElement( 'span' );
                        none.className = 'bb-uses-none'; none.textContent = L.noMatch;
                        list.appendChild( none );
                    } else if ( j.data.more ) {
                        var more = document.createElement( 'button' );
                        more.type = 'button'; more.className = 'bb-uses-more'; more.textContent = L.showMore;
                        more.addEventListener( 'click', function () { page += 1; load( true ); } );
                        list.appendChild( more );
                    }
                    var all = foot.querySelector( '.bb-setuse-all' );
                    all.href = j.data.all_url; all.textContent = j.data.all_label;
                    foot.hidden = false;
                } ).catch( function () {} );
            }
            find.addEventListener( 'input', function () {
                window.clearTimeout( timer );
                timer = window.setTimeout( function () {
                    query = find.value; page = 1; load( false );
                }, 300 );
            } );
            ov.querySelector( '.bb-fd-cancel' ).addEventListener( 'click', close );
            ov.addEventListener( 'click', function ( ev ) { if ( ev.target === ov ) { close(); } } );
            document.addEventListener( 'keydown', esc );
            document.body.appendChild( ov );
            find.focus();
            load( false );
        } );

        // ---- Group operations, each one named.
        function groupOf( el ) { return el.closest( '.bb-optgroup' ); }
        wrap.addEventListener( 'click', function ( e ) {
            var t = e.target.closest ? e.target.closest( '.bb-grp-dup, .bb-grp-emptyop, .bb-grp-rename' ) : null;
            if ( ! t ) { return; }
            var sec  = groupOf( t );
            var name = sec.getAttribute( 'data-group' ) || '';
            if ( t.classList.contains( 'bb-grp-dup' ) ) {
                post( { action: 'addon_boss_group_op', op: 'duplicate', group: name } ).then( function ( j ) {
                    if ( j && j.success ) { window.location.reload(); }
                } );
            } else if ( t.classList.contains( 'bb-grp-emptyop' ) ) {
                post( { action: 'addon_boss_group_op', op: 'empty', group: name } ).then( function ( j ) {
                    if ( j && j.success ) { window.location.reload(); }
                } );
            } else {
                closeMenus();
                startRename( sec );
            }
        } );

        // Rename in place: the menu starts it, a double-click still works.
        function startRename( sec ) {
            var nameEl = sec.querySelector( '.bb-grp-name' );
            if ( ! nameEl || sec.classList.contains( 'is-ungrouped' ) ) { return; }
            var was = nameEl.textContent;
            var inp = document.createElement( 'input' );
            inp.type = 'text'; inp.className = 'bb-grp-nameedit'; inp.value = was; inp.setAttribute( 'aria-label', L.name );
            nameEl.parentNode.replaceChild( inp, nameEl );
            inp.focus(); inp.select();
            var committed = false;
            function done() {
                if ( committed ) { return; }
                committed = true;
                var val  = ( inp.value || '' ).trim() || L.untitled;
                var span = document.createElement( 'span' );
                span.className = 'bb-grp-name'; span.title = L.rename; span.textContent = val;
                if ( inp.parentNode ) { inp.parentNode.replaceChild( span, inp ); }
                if ( val === was ) { return; }
                sec.setAttribute( 'data-group', val );
                post( { action: 'addon_boss_group_op', op: 'rename', group: was, to: val } ).then( function ( j ) {
                    if ( ! j || ! j.success ) { span.textContent = was; sec.setAttribute( 'data-group', was ); }
                } );
            }
            inp.addEventListener( 'blur', done );
            inp.addEventListener( 'keydown', function ( e ) { if ( e.key === 'Enter' ) { inp.blur(); } } );
        }
        wrap.addEventListener( 'dblclick', function ( e ) {
            var name = e.target.closest ? e.target.closest( '.bb-grp-name' ) : null;
            if ( name ) { startRename( groupOf( name ) ); }
        } );

        // Delete: the modal stays; the operation is named on confirm.
        wrap.addEventListener( 'click', function ( e ) {
            var del = e.target.closest ? e.target.closest( '.bb-grp-del' ) : null;
            if ( ! del ) { return; }
            closeMenus();
            var sec  = groupOf( del );
            var name = sec.getAttribute( 'data-group' ) || '';
            function doDelete( withSets ) {
                post( { action: 'addon_boss_group_op', op: 'delete', group: name, sets: withSets ? 1 : 0 } ).then( function ( j ) {
                    if ( j && j.success ) { window.location.reload(); }
                } );
            }
            // An empty group just goes; a full one is asked about, in the same
            // words a selection is asked in, by the same function.
            if ( ! sec.querySelector( '.bb-setcard' ) ) { doDelete( false ); return; }
            askGroupDelete( [ name ], doDelete );
            return;
            var ov = document.createElement( 'div' ); ov.className = 'bb-po-modal-ov';
            ov.innerHTML = '<div class="bb-po-modal" role="dialog" aria-modal="true"><p class="bb-po-modal-msg"></p><p class="bb-po-modal-sub"></p><div class="bb-po-modal-acts"><button type="button" class="button bb-po-modal-keep bb-fd-ok"></button><button type="button" class="button bb-po-modal-cancel bb-fd-cancel"></button></div></div>';
            ov.querySelector( '.bb-po-modal-msg' ).textContent = name ? ( '\u201C' + name + '\u201D' ) : L.delTitle;
            ov.querySelector( '.bb-po-modal-sub' ).textContent = L.delBody;
            ov.querySelector( '.bb-fd-ok' ).textContent = L.delOk;
            ov.querySelector( '.bb-fd-cancel' ).textContent = L.delCancel;
            function done() { if ( ov.parentNode ) { ov.parentNode.removeChild( ov ); } document.removeEventListener( 'keydown', esc ); }
            function esc( ev ) { if ( ev.key === 'Escape' ) { done(); } }
            ov.querySelector( '.bb-fd-ok' ).addEventListener( 'click', function () { doDelete(); done(); } );
            ov.querySelector( '.bb-fd-cancel' ).addEventListener( 'click', done );
            ov.addEventListener( 'click', function ( ev ) { if ( ev.target === ov ) { done(); } } );
            document.addEventListener( 'keydown', esc );
            document.body.appendChild( ov );
            ov.querySelector( '.bb-fd-ok' ).focus();
        } );

        // Make a new group: named on creation, then the page shows it where
        // it will actually live.
        var newBtn = document.querySelector( '.bb-newgroup' );
        if ( newBtn ) {
            newBtn.addEventListener( 'click', function () {
                askName( L.newGroup, L.newGroupGo, function ( name ) {
                    post( { action: 'addon_boss_group_op', op: 'create', group: name } ).then( function ( j ) {
                        if ( j && j.success ) { window.location.reload(); }
                    } );
                } );
            } );
        }

        refresh();
    } )();
    <?php } finally { addon_boss_inline_js( ob_get_clean() ); } ?>
    <?php
}

/**
 * The rows of the library, and nothing around them: exactly what lives inside
 * #bb-optgroups. The page prints this on arrival and the filter endpoint
 * returns the same string, so the two can never drift.
 *
 * @param array $view The library view.
 * @return string
 */
function addon_boss_option_library_rows_html( array $view ): string {
	ob_start();
	try {
		foreach ( $view['rows'] as $bb_row ) {
			addon_boss_render_option_set_group(
				(string) $bb_row['slug'],
				(string) $bb_row['label'],
				$bb_row['sets'],
				! empty( $bb_row['ungrouped'] ),
				array(
					'preview'   => $bb_row['preview'],
					'source'    => $bb_row['source'],
					'pos'       => $bb_row['pos'],
					'size'      => $view['total'],
					// Closed even when filtered: the preview line carries the
					// context, and a search that flings twenty groups open is
					// a wall, not an answer. One click opens the one wanted.
					'collapsed' => true,
				)
			);
		}
		if ( ! $view['rows'] ) {
			echo '<p class="bb-setnomatch" id="bb-set-nomatch">' . esc_html__( 'No sets match. Clear the search to see them all.', 'addon-boss' ) . '</p>';
		}
	} finally {
		$bb_html = ob_get_clean();
	}
	return (string) $bb_html;
}

/**
 * The count, the per-page ladder and the pager.
 *
 * @param array    $view The library view.
 * @param callable $url  Builds a page URL carrying the whole current state.
 * @param int      $pp   The per-page in force.
 * @return string
 */
function addon_boss_option_library_nav_html( array $view, callable $url, int $pp ): string {
	$bb_out = '<div class="tablenav bb-optsets-nav">';
	$bb_out .= '<span class="displaying-num">' . esc_html( sprintf(
		/* translators: %s: how many groups the list holds. */
		_n( '%s item', '%s items', (int) $view['total'], 'addon-boss' ),
		number_format_i18n( (int) $view['total'] )
	) ) . '</span>';
	$bb_out .= '<span class="bb-pp-wrap">' . esc_html__( 'Items per page', 'addon-boss' ) . '<span class="bb-pp-segs">';
	foreach ( array( 10, 25, 50, 100 ) as $bb_n ) {
		$bb_out .= '<a' . ( $bb_n === $pp ? ' class="is-on" aria-current="true"' : '' ) . ' href="' . esc_url( $url( array( 'per_page' => $bb_n, 'paged' => 1 ) ) ) . '">' . (int) $bb_n . '</a>';
	}
	$bb_out .= '</span></span>';
	if ( $view['pages'] > 1 ) {
		$bb_links = paginate_links( array(
			'base'      => str_replace( '999999999', '%#%', esc_url_raw( $url( array( 'paged' => 999999999 ) ) ) ),
			'format'    => '',
			'current'   => (int) $view['paged'],
			'total'     => (int) $view['pages'],
			'mid_size'  => 2,
			'prev_text' => '&lsaquo;',
			'next_text' => '&rsaquo;',
		) );
		if ( $bb_links ) {
			$bb_out .= '<span class="bb-pg">' . wp_kses_post( $bb_links ) . '</span>';
		}
	}
	return $bb_out . '</div>';
}

/**
 * Narrow the library without rebuilding the admin around it.
 *
 * A chip, the source, a page number: each of those changes one list, and until
 * now each cost a whole page load — the menu, the styles, every screen this
 * admin draws, about six hundred milliseconds of it, to swap a list that takes
 * seventy. The controls stay real links, so nothing here is required; this
 * hands back the same markup the page would have printed, and the browser puts
 * it where the old list was.
 */
function addon_boss_option_library_filter_ajax(): void {
	if ( ! current_user_can( 'manage_woocommerce' ) ) {
		wp_send_json_error( array( 'why' => 'cap' ), 403 );
	}
	check_ajax_referer( 'addon_boss_option_library', 'nonce' );

	// phpcs:disable WordPress.Security.NonceVerification.Missing -- checked above.
	$bb_q      = isset( $_POST['s'] ) ? sanitize_text_field( wp_unslash( $_POST['s'] ) ) : '';
	$bb_source = isset( $_POST['source'] ) ? sanitize_text_field( wp_unslash( $_POST['source'] ) ) : '';
	$bb_paged  = isset( $_POST['paged'] ) ? max( 1, absint( $_POST['paged'] ) ) : 1;
	$bb_tag_on = isset( $_POST['bbtag'] ) ? array_values( array_filter( array_map( 'sanitize_key', (array) wp_unslash( $_POST['bbtag'] ) ) ) ) : array();
	$bb_pp     = isset( $_POST['per_page'] ) ? absint( $_POST['per_page'] ) : 0;
	// phpcs:enable
	// The same rule the page load uses, for the same reason: a word that is
	// gone must not narrow to nothing with nothing on screen to say why.
	if ( $bb_tag_on && function_exists( 'addon_boss_tags' ) ) {
		$bb_known  = addon_boss_tags();
		$bb_tag_on = array_values( array_filter( $bb_tag_on, static function ( $bb_id ) use ( $bb_known ) {
			return isset( $bb_known[ $bb_id ] );
		} ) );
	}
	if ( in_array( $bb_pp, array( 10, 25, 50, 100 ), true ) ) {
		update_user_meta( get_current_user_id(), 'addon_boss_optsets_per_page', $bb_pp );
	} else {
		$bb_pp = (int) get_user_meta( get_current_user_id(), 'addon_boss_optsets_per_page', true );
		$bb_pp = in_array( $bb_pp, array( 10, 25, 50, 100 ), true ) ? $bb_pp : 25;
	}

	$bb_view = addon_boss_option_library_view( addon_boss_option_sets(), addon_boss_option_set_groups(), array(
		's'        => $bb_q,
		'source'   => $bb_source,
		'tags'     => $bb_tag_on,
		'paged'    => $bb_paged,
		'per_page' => $bb_pp,
	) );

	$bb_url = static function ( array $over = array() ) use ( $bb_q, $bb_source, $bb_pp, $bb_tag_on ) {
		$bb_args = array( 'page' => 'addon-boss-option-sets', 'per_page' => $bb_pp );
		if ( '' !== $bb_q ) {
			$bb_args['s'] = $bb_q;
		}
		if ( '' !== $bb_source ) {
			$bb_args['source'] = $bb_source;
		}
		if ( $bb_tag_on ) {
			$bb_args['bbtag'] = $bb_tag_on;
		}
		return add_query_arg( array_merge( $bb_args, $over ), admin_url( 'admin.php' ) );
	};

	// The filter row and the menu come back rendered rather than being
	// reproduced in the browser. Which chip leads, which carries a cross, how
	// many offers are left over: those are layout rules, and a second copy of
	// them in JavaScript is a second copy to keep in step. It never is.
	$bb_carry = array( 's' => $bb_q, 'source' => $bb_source, 'per_page' => $bb_pp );
	$bb_furn  = array();
	if ( function_exists( 'addon_boss_tag_applied_row' ) ) {
		$bb_furn['applied'] = addon_boss_tag_applied_row( $bb_tag_on, $bb_carry );
		$bb_furn['menu']    = addon_boss_tag_filter_control( $bb_tag_on, $bb_carry );
	}

	wp_send_json_success( array_merge( array(
		'rows'      => addon_boss_option_library_rows_html( $bb_view ),
		'nav'       => addon_boss_option_library_nav_html( $bb_view, $bb_url, $bb_pp ),
		'url'       => $bb_url( array( 'paged' => (int) $bb_view['paged'] ) ),
		'filtering' => ( '' !== $bb_q || '' !== $bb_source || $bb_tag_on ) ? 1 : 0,
		'total'     => (int) $bb_view['total'],
	), $bb_furn ) );
}
add_action( 'wp_ajax_addon_boss_option_library', 'addon_boss_option_library_filter_ajax' );

/** The list: set cards + the starter shelf. */
function addon_boss_render_option_sets_list(): void {
	$sets = addon_boss_option_sets();
	echo '<div class="bb-optsets">';
	// A real page heading for screen-reader and skip-link navigation; the
	// visible brand header renders just below.
	echo '<h1 class="screen-reader-text">' . esc_html__( 'Option sets', 'addon-boss' ) . '</h1>';
	addon_boss_optsets_header(
		__( 'Option sets', 'addon-boss' ),
		// New set + New group sit together in the toolbar once sets exist; on
		// first run New set is the header's primary action beside the starter shelf.
		$sets ? '' : '<a href="' . esc_url( admin_url( 'admin.php?page=addon-boss-option-sets&set=new' ) ) . '" class="button bb-cta">' . esc_html__( 'New set', 'addon-boss' ) . '</a>'
	);
	echo '<p class="bb-lede">' . esc_html__( 'Build a list of choices once and reuse it everywhere. Attach a set to your products and every bundle that includes them offers it automatically, so you never rebuild the same colours or sizes for each product.', 'addon-boss' ) . '</p>';

	if ( $sets ) {
        // What the URL asks of the library. GET filters carry no nonce, the
        // same as every list table; each value is sanitised here, and the
        // per-page choice is remembered per user.
        // phpcs:disable WordPress.Security.NonceVerification.Recommended
        $bb_q      = isset( $_GET['s'] ) ? sanitize_text_field( wp_unslash( $_GET['s'] ) ) : '';
        $bb_source = isset( $_GET['source'] ) ? sanitize_text_field( wp_unslash( $_GET['source'] ) ) : '';
        $bb_paged  = isset( $_GET['paged'] ) ? max( 1, absint( $_GET['paged'] ) ) : 1;
        // Tags chosen from the chip bar. More than one NARROWS.
        $bb_tag_on = isset( $_GET['bbtag'] ) ? array_values( array_filter( array_map( 'sanitize_key', (array) wp_unslash( $_GET['bbtag'] ) ) ) ) : array();
        $bb_pp     = isset( $_GET['per_page'] ) ? absint( $_GET['per_page'] ) : 0;
        // phpcs:enable
        // A word that is gone narrows to nothing, and nothing is what the
        // screen then shows: no rows, and no chip to explain them, because the
        // row only draws chips for words it can name. A bookmark kept past a
        // deleted tag, or a merge, lands exactly there. Drop what we cannot
        // name and filter by the rest.
        if ( $bb_tag_on && function_exists( 'addon_boss_tags' ) ) {
            $bb_known  = addon_boss_tags();
            $bb_tag_on = array_values( array_filter( $bb_tag_on, static function ( $bb_id ) use ( $bb_known ) {
                return isset( $bb_known[ $bb_id ] );
            } ) );
        }
        if ( in_array( $bb_pp, array( 10, 25, 50, 100 ), true ) ) {
            update_user_meta( get_current_user_id(), 'addon_boss_optsets_per_page', $bb_pp );
        } else {
            $bb_pp = (int) get_user_meta( get_current_user_id(), 'addon_boss_optsets_per_page', true );
            $bb_pp = in_array( $bb_pp, array( 10, 25, 50, 100 ), true ) ? $bb_pp : 25;
        }
        $bb_view = addon_boss_option_library_view( $sets, addon_boss_option_set_groups(), array(
            's'        => $bb_q,
            'source'   => $bb_source,
            'tags'     => $bb_tag_on,
            'paged'    => $bb_paged,
            'per_page' => $bb_pp,
        ) );
        // One URL builder, so every control carries the whole current state:
        // a filter NARROWS a search here, it never resets one.
        $bb_url = static function ( array $over = array() ) use ( $bb_q, $bb_source, $bb_pp, $bb_tag_on ) {
            $bb_args = array( 'page' => 'addon-boss-option-sets', 'per_page' => $bb_pp );
            if ( '' !== $bb_q ) {
                $bb_args['s'] = $bb_q;
            }
            if ( '' !== $bb_source ) {
                $bb_args['source'] = $bb_source;
            }
            // Chosen tags travel with every other control. Turning to page two
            // of "Discontinued" must not quietly hand back the whole library.
            if ( $bb_tag_on ) {
                $bb_args['bbtag'] = $bb_tag_on;
            }
            return add_query_arg( array_merge( $bb_args, $over ), admin_url( 'admin.php' ) );
        };

        echo '<form method="get" action="' . esc_url( admin_url( 'admin.php' ) ) . '" class="bb-optsets-toolbar">';
        echo '<input type="hidden" name="page" value="addon-boss-option-sets">';
        // Chosen tags ride the search with everything else. A GET form posts
        // only its own fields, so without these, pressing Enter on a narrowed
        // library silently threw the tags away and answered a question nobody
        // had asked. The links carry them through $bb_url; this is the same
        // job on the form side.
        foreach ( $bb_tag_on as $bb_on ) {
            echo '<input type="hidden" name="bbtag[]" value="' . esc_attr( $bb_on ) . '">';
        }
        echo '<label class="bb-setsearch"><span class="bb-setsearch-ico" aria-hidden="true">&#128269;</span>';
        echo '<input type="search" id="bb-set-search" name="s" value="' . esc_attr( $bb_q ) . '" placeholder="' . esc_attr__( 'Search sets by name or by an option inside them', 'addon-boss' ) . '" aria-label="' . esc_attr__( 'Search option sets', 'addon-boss' ) . '"></label>';
        // A form with no submit button only submits on Enter while it holds a
        // single text field. The tags menu put a second one inside it, and the
        // search box went quiet: Enter did nothing at all, no error, no clue.
        // A real submit button restores it however many fields land here next.
        echo '<button type="submit" class="bb-setsearch-go screen-reader-text">' . esc_html__( 'Search', 'addon-boss' ) . '</button>';
        // The source filter appears once there is more than one place sets
        // come from, and a source with nothing under the current search is
        // not offered at all.
        $bb_bucket_names = array_keys( $bb_view['buckets'] );
        sort( $bb_bucket_names );
        if ( count( $bb_bucket_names ) > 1 || '' !== $bb_source ) {
            echo '<label class="bb-src-filter"><span class="bb-src-lab">' . esc_html__( 'Source:', 'addon-boss' ) . '</span>';
            echo '<select name="source" id="bb-set-source">';
            echo '<option value="">' . esc_html( sprintf( /* translators: %s: how many groups. */ __( 'All sources (%s)', 'addon-boss' ), number_format_i18n( $bb_view['searched'] ) ) ) . '</option>';
            foreach ( $bb_bucket_names as $bb_b ) {
                if ( 'none' === $bb_b ) {
                    continue;
                }
                echo '<option value="' . esc_attr( $bb_b ) . '"' . selected( $bb_source, $bb_b, false ) . '>' . esc_html( $bb_b . ' (' . number_format_i18n( (int) $bb_view['buckets'][ $bb_b ] ) . ')' ) . '</option>';
            }
            if ( isset( $bb_view['buckets']['none'] ) ) {
                echo '<option value="none"' . selected( $bb_source, 'none', false ) . '>' . esc_html( sprintf( /* translators: %s: how many groups. */ __( 'Not from a supplier (%s)', 'addon-boss' ), number_format_i18n( (int) $bb_view['buckets']['none'] ) ) ) . '</option>';
            }
            echo '</select></label>';
        }
        // Tags sits beside Source because they do the same job: narrow one list.
        // It used to be a wall of chips under the toolbar instead.
        if ( function_exists( 'addon_boss_tag_filter_control' ) ) {
            echo addon_boss_tag_filter_control( $bb_tag_on, array( // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- escaped within.
                's'        => $bb_q,
                'source'   => $bb_source,
                'per_page' => $bb_pp,
            ) );
        }
        echo '<a href="' . esc_url( admin_url( 'admin.php?page=addon-boss-option-sets&set=new' ) ) . '" class="button bb-cta bb-newset">' . esc_html__( '+ New set', 'addon-boss' ) . '</a>';
        echo '<button type="button" class="button bb-newgroup">' . esc_html__( '+ New group', 'addon-boss' ) . '</button>';
        // One press folds the whole library to its group headers (David, 23
        // Aug: at two hundred built products the list cannot be scanned open).
        echo '<button type="button" class="button bb-collapse-all" data-say-collapse="' . esc_attr__( 'Collapse all', 'addon-boss' ) . '" data-say-expand="' . esc_attr__( 'Expand all', 'addon-boss' ) . '">' . esc_html__( 'Expand all', 'addon-boss' ) . '</button>';
        echo '</form>';
        // The tag chips sit WITH the search, never as a tree down the side: on
        // a library of 253 garments a person searches for the one they want,
        // and tags answer the questions search cannot. What has been dropped,
        // what is new, what still needs looking at. Choosing two narrows to the
        // groups wearing both (his agreement, 6 September).
        if ( function_exists( 'addon_boss_tag_applied_row' ) ) {
            echo addon_boss_tag_applied_row( $bb_tag_on, array( // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- escaped within.
                's'        => $bb_q,
                'source'   => $bb_source,
                'per_page' => $bb_pp,
            ) );
        }
        echo '<p class="bb-type-hint" id="bb-set-typehint" hidden>' . esc_html( sprintf(
            /* translators: %s: how many groups the whole library holds. */
            __( 'Filtering this page. Press Enter to search all %s groups.', 'addon-boss' ),
            number_format_i18n( (int) $bb_view['total'] )
        ) ) . '</p>';
        // The applied row says all of this with chips that come off, so the
        // sentence and its Reset would be a second, quieter answer to the same
        // question, one line below and clearing only some of it. Kept for the
        // build that has no applied row.
        if ( ! function_exists( 'addon_boss_tag_applied_row' ) && ( '' !== $bb_q || '' !== $bb_source ) ) {
            echo '<p class="subtitle bb-optsets-subtitle">';
            if ( '' !== $bb_q ) {
                printf(
                    /* translators: %s: what was searched for. */
                    esc_html__( 'Search results for: %s', 'addon-boss' ),
                    '<strong>' . esc_html( $bb_q ) . '</strong>'
                );
            } else {
                echo '<strong>' . esc_html( 'none' === $bb_source ? __( 'Not from a supplier', 'addon-boss' ) : $bb_source ) . '</strong>';
            }
            echo ' <a class="bb-optsets-reset" href="' . esc_url( add_query_arg( array( 'page' => 'addon-boss-option-sets', 'per_page' => $bb_pp ), admin_url( 'admin.php' ) ) ) . '">' . esc_html__( 'Reset', 'addon-boss' ) . '</a></p>';
        }
        addon_boss_render_sets_io( $sets );

        // A filtered page renders its matches OPEN (that is what was asked
        // for); an unfiltered page renders closed and the browser reopens
        // what this user last had open.
        $bb_filtering = ( '' !== $bb_q || '' !== $bb_source || $bb_tag_on );
        echo '<div id="bb-optgroups"' . ( $bb_filtering ? ' data-filtering="1"' : '' ) . '>';
        echo addon_boss_option_library_rows_html( $bb_view ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- escaped within.
        echo '</div>';
        echo addon_boss_option_library_nav_html( $bb_view, $bb_url, $bb_pp ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- escaped within.
        if ( function_exists( 'addon_boss_tag_bulk_bar' ) ) {
            echo addon_boss_tag_bulk_bar(); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- escaped within.
        }

        addon_boss_option_sets_organise_script( array(
            'groups'    => $bb_view['group_names'],
            'filtering' => $bb_filtering,
        ) );
	} else {
		// First run: a real empty state above the shelf, which becomes the hero.
		echo '<div class="bb-optsets-empty">';
		echo '<h2>' . esc_html__( 'Add your first option set', 'addon-boss' ) . '</h2>';
		echo '<p>' . esc_html__( 'An option set is a reusable list of choices, like colours or sizes, that you attach to products. Start from a ready-made set below, or build your own.', 'addon-boss' ) . '</p>';
		// The first-product checklist's compact echo (and any other host note)
		// renders inside the empty state, so the blank library says where this
		// first set is heading.
		do_action( 'addon_boss_option_sets_empty_state' );
		echo '</div>';
		addon_boss_render_sets_io( $sets );
	}

	// The starter shelf. On first run it leads (open, primary Add buttons); once
	// the shop has its own sets it steps back into a collapsed disclosure. No
	// rival ships ready-made sets, so first-run leans into ours.
	$bb_names = array();
	foreach ( $sets as $bb_set ) {
		if ( isset( $bb_set['name'] ) ) {
			$bb_names[ (string) $bb_set['name'] ] = true;
		}
	}
	$starters = addon_boss_option_starter_sets();
	if ( $sets ) {
		echo '<details class="bb-shelf bb-shelf-disc">';
		echo '<summary class="bb-shelf-sum">' . esc_html__( 'Add a ready-made set', 'addon-boss' ) . '</summary>';
		echo '<div class="bb-shelf-body">';
		addon_boss_render_starter_cards( $starters, $bb_names );
		echo '</div></details>';
	} else {
		echo '<div class="bb-shelf bb-shelf-hero">';
		addon_boss_render_starter_cards( $starters, $bb_names );
		echo '<p class="bb-shelf-scratch">' . wp_kses_post(
			sprintf(
				/* translators: %s: a link labelled "Create a set from scratch" */
				__( 'Prefer to start clean? %s.', 'addon-boss' ),
				// Straight to the blank editor: this line PROMISES scratch, so it
				// skips the starting-points on-ramp the plain New set button opens.
				'<a href="' . esc_url( admin_url( 'admin.php?page=addon-boss-option-sets&set=new&recipe=scratch' ) ) . '">' . esc_html__( 'Create a set from scratch', 'addon-boss' ) . '</a>'
			)
		) . '</p>';
		echo '</div>';
	}

	// (The library import/export line renders up top now; see
	// addon_boss_render_sets_io.)

	echo '</div>';
}

/**
 * Move the whole library between stores, one quiet line. It lived at the
 * page's foot and nobody found it there (his call, 2 Sept); it now sits
 * under the toolbar, and on a blank shop right under the first-run hero,
 * where importing an existing library IS the likely first action.
 */
function addon_boss_render_sets_io( array $sets ): void {
	$export_url = wp_nonce_url( admin_url( 'admin-post.php?action=addon_boss_export_option_sets' ), 'addon_boss_export_option_sets' );
	// No surveyed export screen leads with a question, and naming one motive
	// (moving) undersold the others - a backup, staging to live, a file for
	// support. The sentence describes the artifact and the round-trip; the
	// import half carries the one fact that matters there, the update rule.
	$io_lead    = $sets
		? __( 'All sets export to one JSON file, ready to import on any store. Importing updates a set that is already here.', 'addon-boss' )
		: __( 'A sets file exported from another store imports here.', 'addon-boss' );
	echo '<div class="bb-sets-io bb-sets-io-top"><span class="bb-sets-io-lead">' . esc_html( $io_lead ) . '</span>';
	if ( $sets ) {
		echo '<a href="' . esc_url( $export_url ) . '" class="button">' . esc_html__( 'Export all sets', 'addon-boss' ) . '</a>';
	}
	echo '<form method="post" enctype="multipart/form-data" action="' . esc_url( admin_url( 'admin-post.php' ) ) . '" class="bb-sets-import-form">';
	echo '<input type="hidden" name="action" value="addon_boss_import_option_sets">';
	wp_nonce_field( 'addon_boss_import_option_sets' );
	echo '<label class="button bb-choose">' . esc_html__( 'Choose file…', 'addon-boss' );
	echo '<input type="file" name="bb_sets_file" accept="application/json,.json" required>';
	echo '</label>';
	echo '<span class="bb-choose-name"></span>';
	echo '<button type="submit" class="button">' . esc_html__( 'Import sets', 'addon-boss' ) . '</button>';
	echo '</form></div>';
	ob_start();
	try {
		?>
		document.querySelectorAll( '.bb-choose input[type=file]' ).forEach( function ( f ) {
			f.addEventListener( 'change', function () {
				var name = f.closest( 'form, p, div' ).querySelector( '.bb-choose-name' );
				if ( name && f.files.length ) { name.textContent = f.files[0].name; }
			} );
		} );
		<?php
	} finally {
		addon_boss_inline_js( ob_get_clean() );
	}
}

/**
 * The starter cards: a wrapping grid of ready-made sets. A starter already
 * imported (matched by name in $existing_names) reads as "Added" with a link to
 * the copy the shop owns, so a second click can never make a silent duplicate.
 */
function addon_boss_render_starter_cards( array $starters, array $existing_names ): void {
	echo '<div class="bb-shelfrow">';
	foreach ( $starters as $starter_id => $starter ) {
		$added = isset( $existing_names[ (string) $starter['name'] ] );
		echo '<div class="bb-starter' . ( $added ? ' is-added' : '' ) . '">';
		echo '<h4>' . esc_html( $starter['name'] ) . '</h4>';
		if ( ! empty( $starter['purpose'] ) ) {
			echo '<div class="bb-starter-purpose">' . esc_html( $starter['purpose'] ) . '</div>';
		}
		echo '<div class="bb-mini">';
		foreach ( array_slice( $starter['options'], 0, 12 ) as $opt ) {
			echo ! empty( $opt['swatch'] )
				? '<span class="bb-mini-dot" style="background:' . esc_attr( addon_boss_swatch_css( $opt ) ) . '"></span>'
				: '<span class="bb-mini-txt">' . esc_html( $opt['label'] ) . '</span>';
		}
		echo '</div>';
		echo '<div class="bb-starter-act">';
		if ( $added ) {
			$edit_url = admin_url( 'admin.php?page=addon-boss-option-sets&set=' . rawurlencode( addon_boss_option_set_id_by_name( (string) $starter['name'] ) ) );
			echo '<span class="bb-added">' . esc_html__( 'Added', 'addon-boss' ) . '</span>';
			echo '<a class="bb-added-edit" href="' . esc_url( $edit_url ) . '">' . esc_html__( 'Edit', 'addon-boss' ) . '</a>';
		} else {
			$url = wp_nonce_url( admin_url( 'admin-post.php?action=addon_boss_import_starter_set&starter=' . rawurlencode( $starter_id ) ), 'addon_boss_import_starter_set' );
			echo '<a href="' . esc_url( $url ) . '" class="button bb-cta">' . esc_html__( 'Add to my sets', 'addon-boss' ) . '</a>';
		}
		echo '</div></div>';
	}
	echo '</div>';
}

/**
 * The editor: name + option rows (drag to reorder; keys ride hidden inputs).
 *
 * A new set may arrive with a $seed: a recipe from the on-ramp, pre-filled but
 * unsaved, every row editable and nothing stored until Save. A stored set
 * ignores the seed entirely.
 */
function addon_boss_render_option_set_editor( string $id, ?array $seed = null ): void {
	$is_new = ( 'new' === $id );
	$set    = $is_new ? ( $seed ? $seed : array( 'name' => '', 'options' => array() ) ) : addon_boss_option_set( $id );
	if ( null === $set ) {
		echo '<p>' . esc_html__( 'That set no longer exists.', 'addon-boss' ) . '</p>';
		return;
	}
	wp_enqueue_script( 'jquery-ui-sortable' );

	echo '<div class="bb-optsets">';
	echo '<h1 class="screen-reader-text">' . esc_html( $is_new ? __( 'New option set', 'addon-boss' ) : $set['name'] ) . '</h1>';
	addon_boss_optsets_header(
		$is_new ? __( 'New option set', 'addon-boss' ) : $set['name'],
		'<a href="' . esc_url( admin_url( 'admin.php?page=addon-boss-option-sets' ) ) . '" class="button">' . esc_html__( 'Back to sets', 'addon-boss' ) . '</a>'
	);
	echo '<form method="post" action="' . esc_url( admin_url( 'admin-post.php' ) ) . '" id="bb-option-set-form" class="bb-editor">';
	wp_nonce_field( 'addon_boss_save_option_set_form' );
	echo '<input type="hidden" name="action" value="addon_boss_save_option_set_form">';
	echo '<input type="hidden" name="set_id" value="' . esc_attr( $is_new ? '' : $id ) . '">';

	echo '<div class="bb-edhead">';
	echo '<input type="text" class="bb-edname" name="set_name" required aria-label="' . esc_attr__( 'Set name', 'addon-boss' ) . '" value="' . esc_attr( $set['name'] ) . '" placeholder="' . esc_attr__( 'Our colours', 'addon-boss' ) . '">';
	// A set opened from a group's own menu arrives already filed there. New
	// sets only; the value is validated on save.
	if ( $is_new && isset( $_GET['group'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- a prefill for the form, sanitised on the way through and validated on save.
		echo '<input type="hidden" name="bb_new_group" value="' . esc_attr( sanitize_text_field( wp_unslash( $_GET['group'] ) ) ) . '">'; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
	}
	$usage = $is_new ? 0 : addon_boss_option_set_usage( $id );
	if ( $usage ) {
		/* translators: %d: number of products */
		echo '<span class="bb-edlive">' . esc_html( sprintf( _n( 'Used on %d product', 'Used on %d products', $usage, 'addon-boss' ), $usage ) ) . '</span>';
	}
	echo '</div>';


	// The set's kind. The engine's own is a list of choices; each registered
	// kind adds its own option to this menu and prints its own panel below. A
	// stored kind this build has no module for stays on the menu, named
	// plainly, so a save reposts it rather than quietly turning the set into a
	// plain list; its payload rides through that save untouched.
	$kind  = (string) ( $set['kind'] ?? 'choices' );
	$kinds = addon_boss_option_set_kinds();
	echo '<div class="bb-edkind' . ( 'choices' !== $kind ? ' bb-kind-' . esc_attr( $kind ) : '' ) . '">';
	echo '<label>' . esc_html__( 'This set is', 'addon-boss' ) . ' ';
	echo '<select name="set_kind" id="bb-set-kind" class="bb-seg-auto">';
	$bb_menu = $kinds;
	if ( ! isset( $bb_menu[ $kind ] ) ) {
		$bb_menu[ $kind ] = array(
			'label'        => $kind,
			'uses_options' => true,
		);
	}
	foreach ( $bb_menu as $bb_k => $bb_spec ) {
		echo '<option value="' . esc_attr( $bb_k ) . '"' . selected( $bb_k, $kind, false )
			. ' data-desc="' . esc_attr( (string) ( $bb_spec['desc'] ?? '' ) ) . '"'
			. ' data-uses-options="' . ( empty( $bb_spec['uses_options'] ) ? '0' : '1' ) . '">'
			. esc_html( (string) ( $bb_spec['label'] ?? $bb_k ) ) . '</option>';
	}
	echo '</select></label>';
	// Say what each kind is FOR, right at the fork, so a merchant who wants
	// flat per-item prices reaches for choices and one who sells by size
	// reaches for the kind that does. The first paint is the server's, so the
	// line is there before a script runs; the editor script keeps it in step
	// with the menu from the picked option's own words.
	echo '<p class="bb-kind-desc" id="bb-kind-desc">' . esc_html( (string) ( $bb_menu[ $kind ]['desc'] ?? '' ) ) . '</p>';
	// Each kind's own panel, printed by the module that owns it. A panel wears
	// data-bb-kind-panel="<kind>" so the picker shows exactly one at a time.
	foreach ( $kinds as $bb_spec ) {
		if ( is_callable( $bb_spec['editor'] ?? null ) ) {
			call_user_func( $bb_spec['editor'], $set, $kind );
		}
	}
	echo '</div>';

	// D1: the swatch shape, a display-only choice for a list of choices. The
	// seg shows the shape the set will ACTUALLY use (the resolved default
	// while the merchant has never chosen); only a real click writes the
	// hidden explicit field, so the photo-card auto preference survives
	// every unrelated save instead of dying to a phantom "square".
	$bb_shape_now      = addon_boss_option_set_shape( $set );
	$bb_shape_explicit = (string) ( $set['shape'] ?? '' );
	echo '<div class="bb-msec bb-shape-panel" id="bb-shape-panel" data-bb-kind-panel="choices"' . ( 'choices' === $kind ? '' : ' hidden' ) . '>';
	echo '<h4 class="bb-msec-h">' . esc_html__( 'Swatch shape', 'addon-boss' ) . '</h4>';
	echo '<p class="bb-msec-hint">' . esc_html__( 'Photo card shows each choice with its picture and price.', 'addon-boss' ) . '</p>';
	echo '<div class="bb-tbl-axes bb-shape-seg" id="bb-shape-seg">';
	$bb_shapes = array(
		'square' => __( 'Square', 'addon-boss' ),
		'circle' => __( 'Circle', 'addon-boss' ),
		'card'   => __( 'Photo card', 'addon-boss' ),
	);
	foreach ( $bb_shapes as $bb_sv => $bb_sl ) {
		echo '<label class="bb-seg' . ( $bb_shape_now === $bb_sv ? ' is-on' : '' ) . '"><input type="radio" name="__bb_set_shape" value="' . esc_attr( $bb_sv ) . '"' . checked( $bb_shape_now, $bb_sv, false ) . '> ' . esc_html( $bb_sl ) . '</label>';
	}
	echo '</div>';
	echo '<input type="hidden" name="set_shape" id="bb-set-shape" value="' . esc_attr( $bb_shape_explicit ) . '">';
	/*
	 * A picture that will never be drawn, said where the picture was added.
	 *
	 * The product panel has warned about this for as long as a photo could be
	 * pinned per product. Pictures now live on the set itself, so the set
	 * editor is where a merchant attaches them and where the silence bites: a
	 * set someone once clicked Square or Circle on keeps every picture and
	 * shows none of them, with nothing on this screen saying so. The same
	 * sentence as the product panel, plus the one click that fixes it, on the
	 * screen the merchant is already looking at.
	 */
	$bb_pin_photo = false;
	foreach ( (array) ( $set['options'] ?? array() ) as $bb_o ) {
		if ( ! empty( $bb_o['image_id'] ) ) {
			$bb_pin_photo = true;
			break;
		}
	}
	$bb_pin_flat = in_array( $bb_shape_explicit, array( 'square', 'circle' ), true );
	echo '<p class="bb-msec-hint bb-shape-warn" id="bb-shape-warn"' . ( $bb_pin_flat && $bb_pin_photo ? '' : ' hidden' ) . '>';
	echo esc_html__( 'These choices have pictures, but this set draws plain swatches, so shoppers never see them.', 'addon-boss' ) . ' ';
	echo '<button type="button" class="bb-shape-warn-fix" id="bb-shape-warn-fix">' . esc_html__( 'Show them as photo cards', 'addon-boss' ) . '</button>';
	echo '</p>';

	// 🔴 DAVID, 2 Sept 2026: "is there something to say I don't want to change
	// the main image to the selected option?" There was not. A photo on a
	// pick-one choice always replaced the product's main image, and for a
	// colour set that is the whole point: pick blue, see the blue shirt.
	//
	// But a set like Cutting options carries pictures that EXPLAIN the choice
	// rather than pictures of the product. Swapping a photograph of the panel
	// for a diagram of a corner radius tells a shopper their acrylic panel is
	// now a line drawing. The module already reasons this way for several-of
	// sets, where three picks fought over one gallery; a pick-one set of
	// diagrams has the same character and no way to say so. Now it has one.
	//
	// Ticked by default and when absent, so no existing set moves.
	$bb_swaps = ! isset( $set['photo_swaps'] ) || ! empty( $set['photo_swaps'] );
	echo '<label class="bb-mcustom bb-shape-swap"><input type="checkbox" name="set_photo_swaps" value="1"' . checked( $bb_swaps, true, false ) . '> '
		. esc_html__( 'Picking a choice also changes the product image to its photo.', 'addon-boss' ) . '</label>';
	echo '<p class="bb-msec-hint">' . esc_html__( 'On when the photos are the product itself; off when they only explain the choice.', 'addon-boss' ) . '</p>';
	// Several-of: turn the set from pick-one into pick-many, with optional
	// bounds. The same seg language as the shape control above; the bounds
	// only appear once "several" is on, and the helper states the exact words
	// shoppers read so the merchant knows what they are switching on.
	$bb_is_multi = ! empty( $set['multi'] );
	echo '<h4 class="bb-msec-h">' . esc_html__( 'Customers choose', 'addon-boss' ) . '</h4>';
	echo '<p class="bb-msec-hint">' . esc_html__( 'Several lets shoppers pick more than one; each pick adds its charge.', 'addon-boss' ) . '</p>';
	echo '<div class="bb-tbl-axes bb-multi-seg" id="bb-multi-seg">';
	echo '<label class="bb-seg' . ( $bb_is_multi ? '' : ' is-on' ) . '"><input type="radio" name="set_multi" value=""' . checked( $bb_is_multi, false, false ) . '> ' . esc_html__( 'One', 'addon-boss' ) . '</label>';
	echo '<label class="bb-seg' . ( $bb_is_multi ? ' is-on' : '' ) . '"><input type="radio" name="set_multi" value="1"' . checked( $bb_is_multi, true, false ) . '> ' . esc_html__( 'Several', 'addon-boss' ) . '</label>';
	echo '</div>';
	echo '<div class="bb-multi-bounds" id="bb-multi-bounds"' . ( $bb_is_multi ? '' : ' hidden' ) . '>';
	echo '<label class="bb-multi-bound">' . esc_html__( 'At least', 'addon-boss' )
		. ' <input type="number" name="set_min" min="0" max="100" step="1" value="' . esc_attr( (int) ( $set['min'] ?? 0 ) > 0 ? (string) (int) $set['min'] : '' ) . '" placeholder="' . esc_attr__( 'any', 'addon-boss' ) . '"></label>';
	echo '<label class="bb-multi-bound">' . esc_html__( 'Up to', 'addon-boss' )
		. ' <input type="number" name="set_max" min="0" max="100" step="1" value="' . esc_attr( (int) ( $set['max'] ?? 0 ) > 0 ? (string) (int) $set['max'] : '' ) . '" placeholder="' . esc_attr__( 'any', 'addon-boss' ) . '"></label>';
	echo '<span class="bb-msec-hint bb-multi-boundhint">' . esc_html__( 'Empty means no bound; shoppers read it as "Choose up to 3."', 'addon-boss' ) . '</span>';
	echo '</div>';
	// Controls that only mean something on a several-of set print here, under
	// the bounds, and mind the same One/Several switch themselves.
	do_action( 'addon_boss_set_editor_multi', $set );
	// D6: long lists switch themselves to a searchable dropdown on the
	// product page; this pin keeps the buttons for this set regardless.
	echo '<div class="bb-set-row bb-pin-row">';
	echo '<span class="bb-set-copy"><span class="bb-set-t">' . esc_html__( 'Keep the buttons for long lists', 'addon-boss' ) . '</span>';
	echo '<span class="bb-set-d">' . esc_html(
		sprintf(
			/* translators: %s: how many choices fit before the switch, e.g. 12 */
			__( 'Past %s choices the set becomes a searchable dropdown; on keeps every choice a button.', 'addon-boss' ),
			number_format_i18n( ADDON_BOSS_CHIP_LIST_THRESHOLD )
		)
	) . '</span></span>';
	echo '<label class="bb-switch"><input type="checkbox" name="set_pin_chips" value="1"' . checked( ! empty( $set['pin_chips'] ), true, false ) . '><span class="bb-switch-track"></span></label>';
	echo '</div>';
	// The storefront stock display toggle: on shows Sold out / Only N left; off
	// hides the numbers and simply drops a sold-out choice. The oversell guard is
	// independent of this and always on.
	// A build without the plan prints nothing here at all: it cannot offer the
	// feature, so it does not advertise it either.
	if ( addon_boss_option_stock_enabled() ) {
	echo '<div class="bb-set-row bb-showstock-row">';
	echo '<span class="bb-set-copy"><span class="bb-set-t">' . esc_html__( 'Show stock to shoppers', 'addon-boss' ) . '</span>';
	echo '<span class="bb-set-d">' . esc_html__( 'Off simply stops offering a sold-out choice; overselling is prevented either way.', 'addon-boss' ) . '</span></span>';
	echo '<label class="bb-switch"><input type="hidden" name="set_show_stock" value="0"><input type="checkbox" name="set_show_stock" value="1"' . checked( ! isset( $set['show_stock'] ) || ! empty( $set['show_stock'] ), true, false ) . '><span class="bb-switch-track"></span></label>';
	echo '</div>';
	} // end: per-option stock offered by this build
	echo '</div>';

	echo '<div class="bb-edrows" id="bb-option-rows">';
	// Measured mode shows the presets as a headed table: the columns echo the
	// dimensions (Name / Width (m) / Height (m) / Price), so a bare preset number
	// reads as its dimension, not a mystery. Hidden for the colour list. The
	// trailing cells mirror the row's controls (kept invisible) purely to hold
	// the auto columns in step; the measured module's script fills the labels.
	echo '<div class="bb-pshead" aria-hidden="true">';
	echo '<span class="bb-ps-grip"></span>';
	// A ghost cell mirrors the row's photo-tile column (the swatch pair is
	// hidden in measured mode), so "Name" stands over the name input.
	echo '<span class="bb-ps-ghost"></span>';
	echo '<span>' . esc_html__( 'Name', 'addon-boss' ) . '</span>';
	echo '<span class="bb-ps-dim bb-ps-dim-0"></span>';
	echo '<span class="bb-ps-dim bb-ps-dim-1"></span>';
	echo '<span class="bb-ps-dim bb-ps-dim-2"></span>';
	echo '<span>' . esc_html__( 'Price', 'addon-boss' ) . '</span>';
	// The stock cell exists only when this build offers per-option stock; its
	// ghost must come and go with it, and it mirrors the row's own controls
	// (invisible) because an empty span sizes its auto column to nothing and
	// every header before it drifts a column's width to the right.
	echo addon_boss_option_stock_enabled()
		? '<span class="bb-edstockwrap bb-ps-ghost"><span class="bb-edstocklab">' . esc_html__( 'Stock', 'addon-boss' ) . '</span><input type="number" class="bb-edstock" tabindex="-1" disabled></span>'
		: '';
	echo '<span class="bb-edmoves bb-ps-ghost"><button type="button" class="button-link bb-edmove" tabindex="-1">&#8593;</button><button type="button" class="button-link bb-edmove" tabindex="-1">&#8595;</button></span>';
	echo '<button type="button" class="button-link bb-ps-ghost" tabindex="-1">' . esc_html__( 'Remove', 'addon-boss' ) . '</button>';
	echo '</div>';
	foreach ( $set['options'] as $opt ) {
		addon_boss_option_editor_row( $opt );
	}
	echo '</div>';
	echo '<div class="bb-edadd"><button type="button" class="button" id="bb-add-option">' . esc_html__( '+ Add option', 'addon-boss' ) . '</button>';
	echo '<span class="bb-edhint" id="bb-add-hint">' . esc_html__( 'Type a colour name and the swatch fills itself; drag rows to set the order.', 'addon-boss' ) . '</span></div>';
	echo '<div class="bb-edfoot">';
	echo '<button type="submit" class="button bb-cta">' . esc_html__( 'Save set', 'addon-boss' ) . '</button>';
	echo '<span class="bb-edhint">' . esc_html__( 'Each product can override the charges; carts and orders keep their snapshots.', 'addon-boss' ) . '</span>';
	echo '</div></form></div>';

	// Row template + sortable + a fresh blank row for new sets.
	?>
	<?php // A <template>, like every other row template on these screens, rather than a script tag holding markup: there is no JavaScript in it. ?>
	<template id="bb-option-row-template"><?php addon_boss_option_editor_row( array( 'key' => '', 'label' => '', 'swatch' => '', 'delta' => 0.0 ) ); ?></template>
	<?php ob_start(); try { ?>
	jQuery( function ( $ ) {
		$( '#bb-option-rows' ).sortable( { handle: '.bb-opt-grip', axis: 'y', items: '> :not(.bb-pshead)' } );
		// Keyboard reorder: the grip is mouse-only, so each row also has Move up
		// and Move down buttons. Delegated, so it works for rows added later.
		$( '#bb-option-rows' ).on( 'click', '.bb-edmove-up', function () {
			var row = $( this ).closest( '.bb-edrow' );
			var prev = row.prev( '.bb-edrow' );
			if ( prev.length ) { row.insertBefore( prev ); this.focus(); }
		} );
		$( '#bb-option-rows' ).on( 'click', '.bb-edmove-down', function () {
			var row = $( this ).closest( '.bb-edrow' );
			var next = row.next( '.bb-edrow' );
			if ( next.length ) { row.insertAfter( next ); this.focus(); }
		} );
		// The kind switcher, generic on purpose: each option on the menu carries
		// its own description and whether the option rows apply, and each kind's
		// panel wears data-bb-kind-panel, so a kind registered tomorrow behaves
		// without this script learning its name. The form wears bb-kind-<kind>
		// for the panel's own styles.
		function bbKindSync() {
			var sel = document.getElementById( 'bb-set-kind' );
			if ( ! sel ) { return; }
			var kind = sel.value;
			var opt  = sel.options[ sel.selectedIndex ];
			var form = $( '#bb-option-set-form' );
			( form.attr( 'class' ) || '' ).split( /\s+/ ).forEach( function ( c ) {
				if ( 0 === c.indexOf( 'bb-kind-' ) ) { form.removeClass( c ); }
			} );
			if ( 'choices' !== kind ) { form.addClass( 'bb-kind-' + kind ); }
			$( '[data-bb-kind-panel]' ).each( function () {
				this.hidden = this.getAttribute( 'data-bb-kind-panel' ) !== kind;
			} );
			$( '#bb-kind-desc' ).text( opt ? ( opt.getAttribute( 'data-desc' ) || '' ) : '' );
			// A kind priced off its own panel has no use for the option rows.
			// .toggle() sets inline display, which beats the list's own display
			// rule (prop hidden alone loses to it).
			var uses = ! opt || '0' !== opt.getAttribute( 'data-uses-options' );
			$( '#bb-option-rows, .bb-edadd' ).toggle( uses );
		}
		$( '#bb-set-kind' ).on( 'change', bbKindSync );
		bbKindSync();
		// The swatch shape seg: a click is what makes the choice explicit
		// (the hidden field is the one the save reads), and the highlight
		// follows the checked radio exactly as the other segs do.
		function bbShapeShow( value ) {
			$( '#bb-shape-seg input[type=radio]' ).each( function () {
				var on = ( this.value === value );
				this.checked = on;
				$( this ).closest( '.bb-seg' ).toggleClass( 'is-on', on );
			} );
		}
		$( '#bb-shape-seg' ).on( 'change', 'input[type=radio]', function () {
			$( '#bb-set-shape' ).val( this.value );
			bbShapeShow( this.value );
			bbShapeSync();
		} );
		// The seg shows the shape the set will ACTUALLY use, so attaching the
		// first picture has to move it: the resolved shape just became the
		// photo card, and a seg still reading "Square" is the screen telling
		// the merchant their pictures will not be drawn when they will. The
		// hidden pin is never written here, only the highlight, so the auto
		// preference survives. Where the pin IS square or circle the pictures
		// really are dead, and the warning says so with the one click that
		// fixes it. Photos are a Pro feature; with no picker on the page
		// nothing ever changes and this simply agrees with the server.
		function bbShapeSync() {
			var photos = 0;
			$( '#bb-option-rows .bb-ovr-imgid' ).each( function () {
				if ( this.value && '0' !== this.value ) {
					photos++;
				}
			} );
			var pin = $( '#bb-set-shape' ).val();
			if ( ! pin ) {
				bbShapeShow( photos ? 'card' : 'square' );
			}
			document.getElementById( 'bb-shape-warn' ).hidden =
				! ( photos && ( 'square' === pin || 'circle' === pin ) );
		}
		$( '#bb-option-rows' ).on( 'bb:photos', bbShapeSync );
		$( '#bb-shape-warn-fix' ).on( 'click', function () {
			$( '#bb-set-shape' ).val( 'card' );
			bbShapeShow( 'card' );
			bbShapeSync();
		} );
		// The several-of seg: the same highlight discipline, and the bounds
		// row only exists while "several" is the answer.
		$( '#bb-multi-seg' ).on( 'change', 'input[type=radio]', function () {
			$( '#bb-multi-seg .bb-seg' ).each( function () {
				$( this ).toggleClass( 'is-on', $( this ).find( 'input' ).prop( 'checked' ) );
			} );
			document.getElementById( 'bb-multi-bounds' ).hidden = ( '1' !== this.value );
		} );
		$( '#bb-add-option' ).on( 'click', function () {
			$( '#bb-option-rows' ).append( $( '#bb-option-row-template' ).html() );
		} );
		$( document ).on( 'click', '.bb-opt-remove', function () {
			$( this ).closest( '.bb-edrow' ).remove();
		} );
		// The colour bubble: the native picker writes through to the hidden
		// swatch field the form actually submits.
		$( document ).on( 'input change', '.bb-swpick', function () {
			var bub = $( this ).closest( '.bb-swbub' );
			bub.removeClass( 'is-none' ).css( 'background', this.value );
			bub.find( 'input[name="opt_swatch[]"]' ).val( this.value );
		} );
		// The optional second colour (two-tone): its own picker writes through,
		// and the small clear control drops back to a single-colour swatch.
		$( document ).on( 'input change', '.bb-swpick2', function () {
			var bub = $( this ).closest( '.bb-swbub2' );
			bub.removeClass( 'is-none' ).css( 'background', this.value );
			bub.find( 'input[name="opt_swatch2[]"]' ).val( this.value );
		} );
		$( document ).on( 'click', '.bb-sw2-clear', function ( e ) {
			e.preventDefault();
			var bub = $( this ).closest( '.bb-swbub2' );
			bub.addClass( 'is-none' ).css( 'background', '' );
			bub.find( 'input[name="opt_swatch2[]"]' ).val( '' );
		} );
		// A fresh option list gets one blank row; a kind priced off its own
		// panel never needs one.
		var bbKindOpt = $( '#bb-set-kind option:selected' );
		if ( ( ! bbKindOpt.length || '0' !== bbKindOpt.attr( 'data-uses-options' ) ) && ! $( '#bb-option-rows .bb-edrow' ).length ) {
			$( '#bb-add-option' ).trigger( 'click' );
		}
	} );
	<?php } finally { addon_boss_inline_js( ob_get_clean() ); } ?>
	<?php
	/*
	 * Whatever drives the per-choice picture controls this screen just
	 * printed. The engine owns the stored id and the hidden input; choosing a
	 * picture is the photo module's job, on this screen exactly as on the
	 * product panel, so the module binds here rather than the engine learning
	 * what a media frame is.
	 */
	do_action( 'addon_boss_option_set_editor_js' );
	?>
	<?php
}

/** One editor row. The hidden key input is the stability contract. */
function addon_boss_option_editor_row( array $opt ): void {
	$swatch  = (string) ( $opt['swatch'] ?? '' );
	$swatch2 = (string) ( $opt['swatch2'] ?? '' );
	$desc    = (string) ( $opt['desc'] ?? '' );
	$dims    = array_values( (array) ( $opt['dims'] ?? array() ) );

	/*
	 * The choice's picture, next to its colour, because they are the same
	 * question: what does this choice LOOK like. It could only be answered on
	 * one product at a time before, which is no answer at all for a set built
	 * to be shared: four print positions meant re-picking the same four
	 * photographs on every garment in the shop.
	 *
	 * The picker itself belongs to the photo module and arrives through the
	 * same action the product panel uses; the stored id is the engine's own
	 * hidden input, so a build with no picker still carries the pictures
	 * through a save untouched.
	 */
	ob_start();
	do_action( 'addon_boss_option_photo_controls', absint( $opt['image_id'] ?? 0 ) );
	$photo  = (string) ob_get_clean();
	// Its own narrow wrapper, not the override grid's field row: the clear
	// control is positioned against its corner, and in a wide flex cell it
	// ended up floating in the middle of the row beside the option's name.
	$photo  = '<span class="bb-edphoto">' . $photo
		. '<input type="hidden" class="bb-ovr-imgid" name="opt_image[]" value="'
		. esc_attr( ! empty( $opt['image_id'] ) ? (string) absint( $opt['image_id'] ) : '' ) . '"></span>';
	$dcells = '';
	for ( $d = 0; $d < 3; $d++ ) {
		$dval = isset( $dims[ $d ] ) && 0.0 !== (float) $dims[ $d ] ? (string) (float) $dims[ $d ] : '';
		/* translators: %d: dimension number, 1 to 3 */
		$dlabel  = sprintf( __( 'Preset size, dimension %d', 'addon-boss' ), $d + 1 );
		$dcells .= '<input type="number" step="any" name="opt_dim' . $d . '[]" class="bb-eddim bb-eddim-' . $d . '" aria-label="' . esc_attr( $dlabel ) . '" value="' . esc_attr( $dval ) . '">';
	}
	// Every field carries an aria-label (the placeholder alone vanishes on type
	// and is not reliably announced). The grip is decorative — keyboard users
	// reorder with the Move up/down buttons. Numbered args: the option-name label
	// is reused for aria-label and placeholder.
	printf(
		'<div class="bb-edrow"><span class="bb-opt-grip" aria-hidden="true">&#10495;</span>' .
		'<span class="bb-swpair"><span class="bb-swbub%1$s" style="%2$s"><input type="color" class="bb-swpick" aria-label="%3$s" value="%4$s"><input type="hidden" name="opt_swatch[]" value="%5$s"></span>' .
		'<span class="bb-swbub bb-swbub2%16$s" style="%17$s" title="%18$s"><input type="color" class="bb-swpick2" aria-label="%18$s" value="%19$s"><input type="hidden" name="opt_swatch2[]" value="%20$s"><button type="button" class="bb-sw2-clear" aria-label="%21$s" title="%21$s">&times;</button></span></span>' .
		'%28$s' .
		'<input type="hidden" name="opt_key[]" value="%6$s">' .
		'<input type="text" name="opt_label[]" class="bb-edlabel" aria-label="%7$s" value="%8$s" placeholder="%7$s">' .
		'%9$s' .
		'<input type="text" name="opt_delta[]" class="bb-edbump" aria-label="%10$s" value="%11$s" placeholder="%12$s">' .
			// The caption is part of the control, not a header row above it: the
			// choices rows are flex, so a separate header cannot be trusted to
			// stay over this column, and a placeholder alone vanishes the moment
			// a number is typed. An unlabelled box here is how a merchant once
			// typed a number without knowing what it did.
			( addon_boss_option_stock_enabled() ? '<span class="bb-edstockwrap"><span class="bb-edstocklab" aria-hidden="true">%27$s</span><input type="number" min="0" step="1" inputmode="numeric" name="opt_stock[]" class="bb-edstock" aria-label="%24$s" value="%25$s" placeholder="%26$s"></span>' : '' ) .
		'<span class="bb-edmoves"><button type="button" class="button-link bb-edmove bb-edmove-up" aria-label="%13$s">&#8593;</button>' .
		'<button type="button" class="button-link bb-edmove bb-edmove-down" aria-label="%14$s">&#8595;</button></span>' .
		'<button type="button" class="button-link bb-opt-remove">%15$s</button>' .
		'<input type="text" name="opt_desc[]" class="bb-ednote" aria-label="%22$s" value="%23$s" placeholder="%22$s"></div>',
		$swatch ? '' : ' is-none',
		$swatch ? 'background:' . esc_attr( $swatch ) : '',
		esc_attr__( 'Swatch colour', 'addon-boss' ),
		esc_attr( $swatch ? $swatch : '#dddddd' ),
		esc_attr( $swatch ),
		esc_attr( $opt['key'] ?? '' ),
		esc_attr__( 'Option name', 'addon-boss' ),
		esc_attr( $opt['label'] ?? '' ),
		wp_kses( $dcells, addon_boss_kses_allowed() ),
		esc_attr__( 'Extra charge', 'addon-boss' ),
		esc_attr( 0.0 === (float) ( $opt['delta'] ?? 0 ) ? '' : (string) $opt['delta'] ),
		esc_attr__( 'No extra charge', 'addon-boss' ),
		esc_attr__( 'Move up', 'addon-boss' ),
		esc_attr__( 'Move down', 'addon-boss' ),
		esc_html__( 'Remove', 'addon-boss' ),
		$swatch2 ? '' : ' is-none',
		$swatch2 ? 'background:' . esc_attr( $swatch2 ) : '',
		esc_attr__( 'Second colour (two-tone)', 'addon-boss' ),
		esc_attr( $swatch2 ? $swatch2 : '#dddddd' ),
		esc_attr( $swatch2 ),
		esc_attr__( 'Clear second colour', 'addon-boss' ),
		esc_attr__( 'Note shown when this option is picked (optional)', 'addon-boss' ),
		esc_attr( $desc ),
		esc_attr__( 'Stock (leave blank for unlimited)', 'addon-boss' ),
		esc_attr( isset( $opt['stock'] ) && is_numeric( $opt['stock'] ) ? (string) (int) $opt['stock'] : '' ),
		esc_attr__( 'No limit', 'addon-boss' ),
		esc_html__( 'Stock', 'addon-boss' ),
		// Built above from the photo module's own controls, already escaped by
		// the module that prints them, plus the engine's hidden id.
		wp_kses( $photo, addon_boss_kses_allowed() )
	);
}

// ---- admin-post handlers ----------------------------------------

add_action( 'admin_post_addon_boss_save_option_set_form', 'addon_boss_handle_save_option_set_form' );
add_action( 'admin_post_addon_boss_delete_option_set_form', 'addon_boss_handle_delete_option_set_form' );
add_action( 'admin_post_addon_boss_import_starter_set', 'addon_boss_handle_import_starter_set' );
add_action( 'admin_post_addon_boss_duplicate_option_set_form', 'addon_boss_handle_duplicate_option_set_form' );
add_action( 'admin_post_addon_boss_bulk_attach_set', 'addon_boss_handle_bulk_attach_set' );

/**
 * Attach one set to every product in a category. Products already offering
 * it are left EXACTLY as they are, overrides, photos and rules included;
 * the attachment stays removable per product. A starting point, never a
 * lock: 303 optioned products cannot be configured one at a time.
 *
 * One run is bounded. Loading and re-saving every product happens inside a
 * single request, and past a point that request times out halfway with the
 * category half-attached, which is worse than not starting. The ids query is
 * cheap, so the size is counted first; a category past the cap is refused
 * whole, with both numbers named, and nothing is touched. The refusal rides
 * the result as 'refused' so the handler can show it as it stands.
 */
function addon_boss_bulk_attach_set( string $set_id, int $term_id ): array {
	$attached = 0;
	$skipped  = 0;
	if ( ! addon_boss_option_set( $set_id ) || $term_id <= 0 ) {
		return array( 'attached' => 0, 'skipped' => 0 );
	}
	$ids = get_posts(
		array(
			'post_type'      => 'product',
			'post_status'    => array( 'publish', 'draft', 'private' ),
			'posts_per_page' => -1,
			'fields'         => 'ids',
			'tax_query'      => array( // phpcs:ignore WordPress.DB.SlowDBQuery.slow_db_query_tax_query -- an explicit admin action, not a storefront query.
				array(
					'taxonomy' => 'product_cat',
					'terms'    => $term_id,
				),
			),
		)
	);

	/**
	 * The most products one bulk-attach run will take on.
	 *
	 * 200 finishes comfortably inside an ordinary request. A host with more
	 * headroom can raise it, and zero or less removes the bound entirely.
	 *
	 * @param int $cap The bound. Default 200.
	 */
	$cap = (int) apply_filters( 'addon_boss_bulk_attach_cap', 200 );
	if ( $cap > 0 && count( $ids ) > $cap ) {
		return array(
			'attached' => 0,
			'skipped'  => 0,
			'refused'  => sprintf(
				/* translators: 1: how many products the category holds, 2: the most one run will attach to */
				__( 'That category holds %1$s products. To finish reliably in one go, this tool attaches to at most %2$s at a time, so nothing was attached. Please try a smaller category or a subcategory.', 'addon-boss' ),
				number_format_i18n( count( $ids ) ),
				number_format_i18n( $cap )
			),
		);
	}

	$first_id = 0;
	foreach ( $ids as $pid ) {
		$product = wc_get_product( $pid );
		if ( ! $product || ! ( $product->is_type( 'simple' ) || $product->is_type( 'variable' ) ) ) {
			continue;
		}
		$config = addon_boss_product_option_config( $product );
		if ( in_array( $set_id, array_column( $config, 'set' ), true ) ) {
			++$skipped;
			if ( 0 === $first_id ) {
				$first_id = (int) $pid;
			}
			continue;
		}
		$config[] = array( 'set' => $set_id, 'required' => false );
		addon_boss_save_product_option_config( $product, $config );
		++$attached;
		if ( 0 === $first_id ) {
			$first_id = (int) $pid;
		}
	}
	return array( 'attached' => $attached, 'skipped' => $skipped, 'first_id' => $first_id );
}

function addon_boss_handle_bulk_attach_set(): void {
	if ( ! current_user_can( 'manage_woocommerce' ) ) {
		wp_die( esc_html__( 'Sorry, you are not allowed to do that.', 'addon-boss' ) );
	}
	check_admin_referer( 'addon_boss_bulk_attach_set' );
	$result = addon_boss_bulk_attach_set(
		sanitize_text_field( wp_unslash( $_POST['set'] ?? '' ) ),
		absint( $_POST['bulk_category'] ?? 0 )
	);
	if ( isset( $result['refused'] ) ) {
		// The category is past the bound: the worker refused it whole and its
		// message names the count and the cap. A warning, not an error, because
		// nothing broke and nothing was half-done.
		addon_boss_option_sets_redirect( (string) $result['refused'], 'warning' );
	}
	if ( 0 === (int) $result['attached'] && 0 === (int) $result['skipped'] ) {
		// Nothing happened: no category chosen, or the category held no eligible
		// products. A green "Attached to 0 products" read as a silent success.
		addon_boss_option_sets_redirect(
			__( 'Pick a category first, or that one has no eligible products. Nothing was attached.', 'addon-boss' ),
			'warning'
		);
	}
	addon_boss_option_sets_redirect(
		$result['skipped']
			? sprintf(
				/* translators: 1: products attached, 2: products that already offered the set */
				__( 'Attached to %1$d products. %2$d already offered it and were left untouched.', 'addon-boss' ),
				$result['attached'],
				$result['skipped']
			)
			/* translators: %d: products attached */
			: sprintf( __( 'Attached to %d products.', 'addon-boss' ), $result['attached'] ),
		'success',
		// Until a product page has been seen, the first attach offers the view.
		function_exists( 'addon_boss_onboarding_next_action' )
			? addon_boss_onboarding_next_action( 'attached', (int) ( $result['first_id'] ?? 0 ) )
			: array()
	);
}

function addon_boss_handle_duplicate_option_set_form(): void {
	if ( ! current_user_can( 'manage_woocommerce' ) ) {
		wp_die( esc_html__( 'Sorry, you are not allowed to do that.', 'addon-boss' ) );
	}
	check_admin_referer( 'addon_boss_duplicate_option_set' );
	$src = addon_boss_option_set( sanitize_text_field( wp_unslash( $_GET['set'] ?? '' ) ) );
	if ( $src ) {
		/* translators: %s: the copied set's name */
		$src['name'] = sprintf( __( '%s copy', 'addon-boss' ), $src['name'] );
		addon_boss_save_option_set( $src );
	}
	addon_boss_option_sets_redirect(
		$src ? __( 'Set duplicated.', 'addon-boss' ) : __( 'That set no longer exists.', 'addon-boss' ),
		$src ? 'success' : 'error'
	);
}

function addon_boss_option_sets_redirect( string $notice, string $type = 'success', array $action = array() ): void {
	// The message carries its own type so a failure never wears the green
	// success tick. "That set no longer exists" and a bad file import used to
	// render exactly like "Option set saved". An optional action ({l,u}) rides
	// along so a notice can carry its one next step; the printer escapes it.
	$payload = array(
		'm' => $notice,
		't' => in_array( $type, array( 'success', 'error', 'warning' ), true ) ? $type : 'success',
	);
	if ( '' !== (string) ( $action['l'] ?? '' ) && '' !== (string) ( $action['u'] ?? '' ) ) {
		$payload['a'] = array(
			'l' => (string) $action['l'],
			'u' => (string) $action['u'],
		);
	}
	set_transient( 'bundle_boss_option_sets_notice_' . get_current_user_id(), $payload, MINUTE_IN_SECONDS );
	wp_safe_redirect( admin_url( 'admin.php?page=addon-boss-option-sets' ) );
	exit;
}

function addon_boss_handle_save_option_set_form(): void {
	if ( ! current_user_can( 'manage_woocommerce' ) ) {
		wp_die( esc_html__( 'Sorry, you are not allowed to do that.', 'addon-boss' ) );
	}
	check_admin_referer( 'addon_boss_save_option_set_form' );

	// The whole form-to-set assembly lives in addon_boss_option_set_from_form()
	// (set-preview.php), shared with the preview endpoint so a preview can
	// never drift from what saving stores.
	$bb_raw = addon_boss_option_set_from_form();
	// A set born from a group's own menu lands in that group. New sets only:
	// an edit never rewrites its group from a stray parameter.
	if ( '' === (string) ( $_POST['set_id'] ?? '' ) && isset( $_POST['bb_new_group'] ) ) {
		$bb_raw['group'] = sanitize_text_field( wp_unslash( $_POST['bb_new_group'] ) );
	}
	$id = addon_boss_save_option_set( $bb_raw, sanitize_text_field( wp_unslash( $_POST['set_id'] ?? '' ) ) );
	// A kind may have something worth saying about the set just saved (a price
	// table warns about overlapping bands). Never blocks the save.
	$saved_set = addon_boss_option_set( $id );
	if ( $saved_set ) {
		$bb_spec = addon_boss_option_set_kinds()[ (string) ( $saved_set['kind'] ?? 'choices' ) ] ?? null;
		if ( $bb_spec && is_callable( $bb_spec['save_notice'] ?? null ) ) {
			$bb_notice = call_user_func( $bb_spec['save_notice'], $saved_set );
			if ( is_array( $bb_notice ) && '' !== (string) ( $bb_notice['message'] ?? '' ) ) {
				addon_boss_option_sets_redirect( (string) $bb_notice['message'], (string) ( $bb_notice['type'] ?? 'warning' ) );
			}
		}
	}
	// While nothing is attached yet, the saved-set notice carries the next
	// step, so the first success points straight at the second.
	addon_boss_option_sets_redirect(
		__( 'Option set saved.', 'addon-boss' ),
		'success',
		function_exists( 'addon_boss_onboarding_next_action' ) ? addon_boss_onboarding_next_action( 'set_saved' ) : array()
	);
}

function addon_boss_handle_delete_option_set_form(): void {
	if ( ! current_user_can( 'manage_woocommerce' ) ) {
		wp_die( esc_html__( 'Sorry, you are not allowed to do that.', 'addon-boss' ) );
	}
	check_admin_referer( 'addon_boss_delete_option_set' );
	addon_boss_delete_option_set( sanitize_text_field( wp_unslash( $_GET['set'] ?? '' ) ) );
	addon_boss_option_sets_redirect( __( 'Option set deleted.', 'addon-boss' ) );
}

function addon_boss_handle_import_starter_set(): void {
	if ( ! current_user_can( 'manage_woocommerce' ) ) {
		wp_die( esc_html__( 'Sorry, you are not allowed to do that.', 'addon-boss' ) );
	}
	check_admin_referer( 'addon_boss_import_starter_set' );
	$starter_id = sanitize_text_field( wp_unslash( $_GET['starter'] ?? '' ) );
	$starters   = addon_boss_option_starter_sets();
	if ( ! isset( $starters[ $starter_id ] ) ) {
		addon_boss_option_sets_redirect( __( 'Unknown ready-made set.', 'addon-boss' ), 'error' );
	}
	// Already imported: don't make a silent duplicate. Say so plainly and leave
	// the copy the shop already owns untouched.
	if ( '' !== addon_boss_option_set_id_by_name( $starters[ $starter_id ]['name'] ) ) {
		addon_boss_option_sets_redirect( __( 'You already have that set, so it was not added again.', 'addon-boss' ), 'warning' );
	}
	addon_boss_import_starter_set( $starter_id );
	// An import is a saved set by another route, so it earns the same next step.
	addon_boss_option_sets_redirect(
		__( 'Ready-made set imported. It is your own copy now, edit it however you like.', 'addon-boss' ),
		'success',
		function_exists( 'addon_boss_onboarding_next_action' ) ? addon_boss_onboarding_next_action( 'set_saved' ) : array()
	);
}

// -----------------------------------------------------------------
// Export / import the whole option-sets library as one JSON file, so a
// store's colours and sizes move to another store (the concierge
// migration story). Sets keep their stable ids, so a product's saved
// attachment resolves on the other side without any re-keying.
//
// PHOTOS DO NOT TRAVEL AS BYTES, AND THAT IS DELIBERATE. A choice's photo
// is an attachment id, which means nothing on another site. The product
// transfer packs the image bytes because it carries one product; a whole
// library cannot. Measured on a modest library: 49 photos, 36 MB of
// files, 49 MB once base64'd into JSON, against a 64 MB upload ceiling
// here and 2 to 8 MB on plenty of hosts. Packing them would produce an
// export nobody could import, which is a worse feature than an honest
// one.
//
// So the file carries each photo's FILENAME, and the import resolves it
// against the media library it is landing in. The rule that matters:
// a photo is either matched to a real image on this site or cleared. An
// id is never carried across sites unresolved, because an id that points
// at a stranger's image renders a wrong photo silently, and a merchant
// with a wrong photo is worse off than one with no photo.
// -----------------------------------------------------------------

const ADDON_BOSS_OPTION_SETS_EXPORT_FORMAT = 'bundleboss-option-sets';

/**
 * Every attachment id referenced by a set's choices, and its filename.
 *
 * @param array<string,mixed> $sets
 * @return array<int,array{name:string}>
 */
function addon_boss_option_sets_photo_manifest( array $sets ): array {
	$out = array();
	foreach ( $sets as $set ) {
		foreach ( (array) ( $set['options'] ?? array() ) as $opt ) {
			$aid = (int) ( $opt['image_id'] ?? 0 );
			if ( ! $aid || isset( $out[ $aid ] ) ) {
				continue;
			}
			$file = get_attached_file( $aid );
			if ( $file ) {
				$out[ $aid ] = array( 'name' => basename( $file ) );
			}
		}
	}
	return $out;
}

/**
 * Find an attachment on THIS site by the filename it was exported under.
 *
 * Two passes, because WordPress renames a re-uploaded file: an exact
 * basename first, then the same name with a trailing "-2" style suffix
 * allowed, so a library uploaded twice still matches.
 *
 * @return int Attachment id, or 0 when this site does not have it.
 */
function addon_boss_option_sets_find_photo( string $name ): int {
	global $wpdb;
	$name = trim( $name );
	if ( '' === $name ) {
		return 0;
	}
	$exact = $wpdb->get_var(
		$wpdb->prepare(
			"SELECT post_id FROM {$wpdb->postmeta} WHERE meta_key = '_wp_attached_file' AND meta_value LIKE %s ORDER BY post_id ASC LIMIT 1",
			'%' . $wpdb->esc_like( '/' . $name )
		)
	);
	if ( $exact ) {
		return (int) $exact;
	}
	$dot  = strrpos( $name, '.' );
	$stem = false === $dot ? $name : substr( $name, 0, $dot );
	$ext  = false === $dot ? '' : substr( $name, $dot );
	$like = $wpdb->get_var(
		$wpdb->prepare(
			"SELECT post_id FROM {$wpdb->postmeta} WHERE meta_key = '_wp_attached_file' AND meta_value REGEXP %s ORDER BY post_id ASC LIMIT 1",
			'/' . preg_quote( $stem, '/' ) . '(-[0-9]+)?' . preg_quote( $ext, '/' ) . '$'
		)
	);
	return (int) $like;
}

/**
 * Point a library's photos at this site's own attachments.
 *
 * @param array<string,mixed>            $sets
 * @param array<int|string,array{name:string}> $manifest old id => filename
 * @return array{sets:array<string,mixed>,matched:int,cleared:int}
 */
function addon_boss_option_sets_land_photos( array $sets, array $manifest ): array {
	$map     = array();
	$matched = 0;
	foreach ( $manifest as $old => $info ) {
		$found = addon_boss_option_sets_find_photo( (string) ( $info['name'] ?? '' ) );
		if ( $found ) {
			$map[ (int) $old ] = $found;
			++$matched;
		}
	}
	$cleared = 0;
	foreach ( $sets as $sid => $set ) {
		foreach ( (array) ( $set['options'] ?? array() ) as $i => $opt ) {
			$aid = (int) ( $opt['image_id'] ?? 0 );
			if ( ! $aid ) {
				continue;
			}
			if ( isset( $map[ $aid ] ) ) {
				$sets[ $sid ]['options'][ $i ]['image_id'] = $map[ $aid ];
			} else {
				// Cleared, never carried: see the rule in the block comment above.
				$sets[ $sid ]['options'][ $i ]['image_id'] = 0;
				++$cleared;
			}
		}
	}
	return array(
		'sets'    => $sets,
		'matched' => $matched,
		'cleared' => $cleared,
	);
}

add_action( 'admin_post_addon_boss_export_option_sets', 'addon_boss_handle_export_option_sets' );
add_action( 'admin_post_addon_boss_import_option_sets', 'addon_boss_handle_import_option_sets' );

function addon_boss_handle_export_option_sets(): void {
	if ( ! current_user_can( 'manage_woocommerce' ) ) {
		wp_die( esc_html__( 'Sorry, you are not allowed to do that.', 'addon-boss' ) );
	}
	check_admin_referer( 'addon_boss_export_option_sets' );
	$bb_sets = addon_boss_option_sets();
	$doc     = array(
		'format'  => ADDON_BOSS_OPTION_SETS_EXPORT_FORMAT,
		'version' => 2,
		'site'    => home_url(),
		'sets'    => $bb_sets, // id => { name, options[] }
		// Filenames, not bytes. The import resolves these against its own
		// media library; see the block comment above for why.
		'photos'  => addon_boss_option_sets_photo_manifest( $bb_sets ),
	);
	nocache_headers();
	header( 'Content-Type: application/json; charset=utf-8' );
	header( 'Content-Disposition: attachment; filename="bundleboss-option-sets.json"' );
	echo wp_json_encode( $doc, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE );
	exit;
}

function addon_boss_handle_import_option_sets(): void {
	if ( ! current_user_can( 'manage_woocommerce' ) ) {
		wp_die( esc_html__( 'Sorry, you are not allowed to do that.', 'addon-boss' ) );
	}
	check_admin_referer( 'addon_boss_import_option_sets' );

	if ( empty( $_FILES['bb_sets_file']['tmp_name'] ) || ! is_uploaded_file( $_FILES['bb_sets_file']['tmp_name'] ) ) { // phpcs:ignore WordPress.Security.ValidatedSanitizedInput -- path checked by is_uploaded_file; contents validated below.
		addon_boss_option_sets_redirect( __( 'No file was uploaded. Choose a JSON file and try again.', 'addon-boss' ), 'error' );
	}
	$raw  = (string) file_get_contents( $_FILES['bb_sets_file']['tmp_name'] ); // phpcs:ignore WordPress.WP.AlternativeFunctions.file_get_contents_file_get_contents, WordPress.Security -- just-uploaded temp file; path validated by is_uploaded_file above.
	$doc  = json_decode( $raw, true );
	if ( ! is_array( $doc ) || ( $doc['format'] ?? '' ) !== ADDON_BOSS_OPTION_SETS_EXPORT_FORMAT || empty( $doc['sets'] ) || ! is_array( $doc['sets'] ) ) {
		addon_boss_option_sets_redirect( __( 'That is not an option-sets file.', 'addon-boss' ), 'error' );
	}

	// A file from THIS site still holds valid attachment ids, so a re-import
	// in place keeps its photos untouched. A file from anywhere else has ids
	// that mean nothing here, so every photo is resolved by filename or
	// cleared. Never carried: an unresolved id renders somebody else's image.
	$bb_sets   = (array) $doc['sets'];
	$bb_same   = untrailingslashit( (string) ( $doc['site'] ?? '' ) ) === untrailingslashit( home_url() );
	$bb_photos = 0;
	$bb_lost   = 0;
	if ( ! $bb_same ) {
		$bb_landed = addon_boss_option_sets_land_photos( $bb_sets, (array) ( $doc['photos'] ?? array() ) );
		$bb_sets   = $bb_landed['sets'];
		$bb_photos = $bb_landed['matched'];
		$bb_lost   = $bb_landed['cleared'];
	}

	$imported = 0;
	foreach ( $bb_sets as $id => $set ) {
		if ( ! is_array( $set ) ) {
			continue;
		}
		// Keep the file's id so product attachments resolve; the sanitiser
		// regenerates any missing option keys and drops junk. An existing set
		// with the same id is overwritten (a re-import updates in place).
		addon_boss_save_option_set( $set, is_string( $id ) ? $id : '' );
		++$imported;
	}
	$bb_said = $imported
		/* translators: %d: number of option sets imported */
		? sprintf( _n( '%d option set imported.', '%d option sets imported.', $imported, 'addon-boss' ), $imported )
		: __( 'No option sets were found in that file.', 'addon-boss' );
	if ( $imported && ( $bb_photos || $bb_lost ) ) {
		$bb_said .= ' ' . sprintf(
			/* translators: 1: photos found in this shop's media library, 2: photos that could not be found */
			__( '%1$d photos were matched to images already in your library, and %2$d could not be found, so those choices came in without a picture.', 'addon-boss' ),
			$bb_photos,
			$bb_lost
		);
	}
	addon_boss_option_sets_redirect(
		$bb_said,
		$imported ? 'success' : 'warning'
	);
}

// =================================================================
// Admin: the product panel ("Options this product comes in")
// =================================================================

add_filter( 'woocommerce_product_data_tabs', 'addon_boss_product_options_tab' );
add_action( 'woocommerce_product_data_panels', 'addon_boss_product_options_panel' );
add_action( 'woocommerce_admin_process_product_object', 'addon_boss_product_options_save' );

function addon_boss_product_options_tab( array $tabs ): array {
	// No tab, no panel, no save handler reached. The stored config is left
	// exactly as it is, so switching the feature back on restores every product
	// untouched rather than to an empty one.
	if ( ! addon_boss_options_available() ) {
		return $tabs;
	}
	$tabs['bundle_boss_options'] = array(
		// "Product options": the feature's public name (docs, website), and
		// unambiguous next to WooCommerce's own Attributes tab. His call.
		'label'    => __( 'Product options', 'addon-boss' ),
		'target'   => 'bundle_boss_options_panel',
		'class'    => array( 'show_if_simple', 'show_if_variable' ), // sets ride on variables as extras; variations keep stock and photos.
		'priority' => 65,
	);
	return $tabs;
}

// -----------------------------------------------------------------
// Suggest photos: deterministic option-to-image matching. The engine
// proposes, a review sheet shows every proposal WITH its reason, and
// nothing persists until the merchant applies and saves. Trust order:
// the product's own photos first, then the media library by file name
// and title. Options that already carry a photo are never touched.
// -----------------------------------------------------------------


/**
 * Hidden inputs reposting a stored value tree exactly as it stands, so a save
 * from a build that cannot edit the thing carries it whole rather than
 * quietly dropping it. Data only: names are escaped path segments, leaves are
 * scalars; nothing here reads or interprets what it carries.
 *
 * @param string $name  The input name prefix, e.g. bb_pf[3].
 * @param mixed  $value The stored subtree.
 */
function addon_boss_hidden_carriers( string $name, $value ): void {
	if ( is_array( $value ) ) {
		foreach ( $value as $k => $v ) {
			addon_boss_hidden_carriers( $name . '[' . $k . ']', $v );
		}
		return;
	}
	if ( is_bool( $value ) ) {
		$value = $value ? '1' : '';
	}
	echo '<input type="hidden" name="' . esc_attr( $name ) . '" value="' . esc_attr( (string) $value ) . '">';
}

/**
 * Hidden inputs reposting a field row's stored reveal rule in the exact shape
 * the rule editor posts, so a build with no editor for it still carries the
 * rule through a save. Both stored shapes serialise: the legacy single rule
 * and the canonical multi-condition one. Data traversal only; nothing here
 * evaluates anything.
 *
 * @param string $ix   The row index.
 * @param array  $when The stored rule.
 */
function addon_boss_field_when_carriers( string $ix, array $when ): void {
	if ( ! $when ) {
		return;
	}
	// One carrier, the canonical shape as json. Every stored shape — legacy
	// single, flat list, groups — reads into it whole, so a rule of any age or
	// richness survives a save from a build that cannot edit it.
	$bb_norm = addon_boss_when_to_groups( $when );
	if ( ! $bb_norm['groups'] ) {
		return;
	}
	echo '<input type="hidden" name="bb_pf_when_json[' . esc_attr( $ix ) . ']" value="' . esc_attr( (string) wp_json_encode( $bb_norm ) ) . '">';
}

/**
 * A field whose TYPE this build has no module for: a plain card naming it, a
 * remove control, and hidden carriers reposting the stored def and rule
 * whole, so pressing Update rewrites nothing and the field returns intact the
 * moment its module is installed. Nothing here is editable, because the build
 * has no controls that could honestly edit it.
 *
 * @param mixed $i     The row index.
 * @param array $field The stored def.
 * @param array $when  The stored reveal rule.
 */
function addon_boss_render_inert_field_row( $i, array $field, array $when = array() ): void {
	$ix    = esc_attr( (string) $i );
	$type  = (string) ( $field['type'] ?? '' );
	$label = (string) ( $field['label'] ?? '' );
	?>
	<div class="bb-po-row bb-po-fieldrow bb-po-inertrow" data-idx="<?php echo (int) $ix; ?>" data-type="<?php echo esc_attr( $type ); ?>">
		<div class="bb-po-line">
			<span class="bb-po-caret" aria-hidden="true">&#9656;</span>
			<span class="bb-po-fieldpill"><?php esc_html_e( 'Field', 'addon-boss' ); ?></span>
			<b class="bb-pf-headlabel"><?php echo esc_html( '' !== $label ? $label : $type ); ?></b>
			<span class="bb-po-sum bb-pf-sum"><?php
				/* translators: %s: the stored field type, e.g. size */
				echo esc_html( sprintf( __( '%s. This build does not offer it; its settings are kept as saved.', 'addon-boss' ), $type ) );
			?></span>
			<button type="button" class="bb-po-remove" aria-label="<?php esc_attr_e( 'Remove this field', 'addon-boss' ); ?>">&#10005;</button>
			<?php
			addon_boss_hidden_carriers( 'bb_pf[' . (string) $ix . ']', $field );
			addon_boss_field_when_carriers( (string) $ix, $when );
			?>
			<input type="hidden" class="bb-po-orderkey" value="field-<?php echo (int) $ix; ?>">
		</div>
	</div>
	<?php
}

/**
 * One FIELD row in the unified product-options list, in the same .bb-po-row
 * shell as a set row so it folds, removes and sorts with them. The editor
 * reuses the personalisation field-def field NAMES (label/type/require/fee/
 * fee_mode/maxlength/max_size) so the shared sanitiser handles it verbatim.
 * $i may be the placeholder '__PFIDX__' when rendered into the JS template.
 *
 * @param bool $force_when Render the rule editor even with nothing to point at
 *                         YET. True only for the new-row TEMPLATE: what a row
 *                         cloned from it may point at depends on where it lands,
 *                         which is not knowable when the template is printed.
 *                         Gating it on the template's own (empty) lists is what
 *                         left a fields-only product unable to rule at all.
 */
function addon_boss_render_product_field_row( $i, array $field, array $when = array(), array $sibling_sets = array(), array $sibling_fields = array(), bool $force_when = false ): void {
	$types   = function_exists( 'addon_boss_personalisation_field_types' ) ? addon_boss_personalisation_field_types() : array();
	$type    = (string) ( $field['type'] ?? 'text' );
	// A stored type nothing registered gets the preserved card instead of an
	// editor this build could not honestly offer.
	if ( '' !== $type && ! isset( $types[ $type ] ) ) {
		addon_boss_render_inert_field_row( $i, $field, $when );
		return;
	}
	$label   = (string) ( $field['label'] ?? '' );
	$reqmode = ! empty( $field['required'] ) ? 'always' : '';
	$fee     = (float) ( $field['fee'] ?? 0 );
	$mode    = (string) ( $field['fee_mode'] ?? 'unit' );
	$sym     = html_entity_decode( get_woocommerce_currency_symbol() );
	$heading = ! empty( $types[ $type ]['display_only'] );
	// NEVER cast this to (int) at an echo: $i may be the literal '__PFIDX__'
	// placeholder rendered into the add-a-field <template>, and a cast turns it
	// into 0, so every row the button adds posts under bb_pf[0] and the save
	// clones one row's data over the others. Proven as real admin data loss
	// (ProductFieldRowTemplateTest pins the placeholder's survival).
	$ix      = esc_attr( (string) $i );
	$mode_lbls = addon_boss_fee_modes();
	$bits    = array( $heading ? __( 'Heading', 'addon-boss' ) : ( 'always' === $reqmode ? __( 'Required', 'addon-boss' ) : __( 'Optional', 'addon-boss' ) ) );
	// A block whose label is only for this list says so on its closed line, or a
	// merchant hunting a heading that will not appear has nothing to go on.
	if ( 'html' === $type && ! empty( $field['hide_title'] ) ) {
		$bits[] = __( 'Label hidden', 'addon-boss' );
	}
	if ( $fee > 0 && ! $heading ) {
		$num = rtrim( rtrim( number_format( $fee, 2 ), '0' ), '.' );
		// A type or mode whose charge reads in its own words (per square metre,
		// a share of the price) says so through the module that owns it; the
		// engine's own modes read from the menu wording, and a mode this build
		// has no module for is named plainly.
		$bb_bit = (string) apply_filters( 'addon_boss_field_fee_bit', '', $field, $num, $sym );
		// The summary reads the SHORT form ("+£2.50 for each"); the menu keeps
		// the category's names ("Quantity based"), which read as labels, not
		// as the tail of a sentence.
		$mode_shorts = addon_boss_fee_mode_shorts();
		$bits[]      = '' !== $bb_bit ? $bb_bit : '+' . $sym . $num . ' ' . ( $mode_shorts[ $mode ] ?? $mode_lbls[ $mode ] ?? $mode );
	}
	// A module with something to say about this row on its closed line (a
	// placement announcing itself, a rule owning up) says it through this seam.
	$bits = (array) apply_filters( 'addon_boss_field_row_bits', $bits, $field, $type, $when );
	?>
	<div class="bb-po-row bb-po-fieldrow" data-idx="<?php echo esc_attr( (string) $ix ); ?>" data-type="<?php echo esc_attr( $type ); ?>">
		<div class="bb-po-line">
			<span class="bb-po-caret" aria-hidden="true">&#9656;</span>
			<span class="bb-po-fieldpill"><?php esc_html_e( 'Field', 'addon-boss' ); ?></span>
			<b class="bb-pf-headlabel"><?php echo esc_html( '' !== $label ? $label : __( 'New field', 'addon-boss' ) ); ?></b>
			<span class="bb-po-sum bb-pf-sum"><?php echo esc_html( implode( ' · ', $bits ) ); ?></span>
			<button type="button" class="bb-po-remove" aria-label="<?php esc_attr_e( 'Remove this field', 'addon-boss' ); ?>">&#10005;</button>
			<input type="hidden" name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][key]" value="<?php echo esc_attr( (string) ( $field['key'] ?? '' ) ); ?>">
			<input type="hidden" class="bb-po-orderkey" value="field-<?php echo esc_attr( (string) $ix ); ?>">
		</div>
		<div class="bb-po-body"<?php echo '' !== $label ? ' hidden' : ''; ?>>
			<div class="bb-pf-editor">
				<div class="bb-pf-line">
					<input type="text" name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][label]" value="<?php echo esc_attr( $label ); ?>"
						class="bb-pf-label" placeholder="<?php esc_attr_e( 'Field label, e.g. Name to print', 'addon-boss' ); ?>">
					<select name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][type]" class="bb-pf-type">
						<?php
						// The SAME list the add bar offers, in the same words. These
						// two were written separately and drifted: this one showed
						// types the build has no code for, and printed each type's
						// bare label where the add bar printed its menu wording, so
						// one control had two names depending on where you met it.
						// The field's own type rides along even when the build no
						// longer offers it, or the row would show somebody else's
						// type and change the field on the next save.
						foreach ( addon_boss_field_type_menu( $type ) as $tk => $twords ) :
							?>
							<option value="<?php echo esc_attr( $tk ); ?>" <?php selected( $type, $tk ); ?>><?php echo esc_html( $twords ); ?></option>
						<?php endforeach; ?>
					</select>
				</div>
				<div class="bb-pf-settings"<?php echo $heading ? ' hidden' : ''; ?>>
				<?php
				// One level of labelled groups, never tabs: we sit inside a WooCommerce
				// Product Data tab (nesting is out) and these settings are
				// interdependent (type drives fee mode drives the rest), which is the
				// documented test for when tabs are the wrong control. A group hides
				// itself when the field type makes every control in it irrelevant, and
				// a single remaining group drops its heading so a simple field still
				// reads as one flat row.
				?>
				<?php
				// Group visibility is decided HERE, not only in JS, so the very first
				// paint is already correct: a text field must never flash (or keep, if
				// JS fails) an empty "Image size" heading. Only a file field has more
				// than one group, so it is also what decides whether the headings earn
				// their space at all.
				// Escaped where they are printed below, not because either can hold
				// anything but the two literals above, but because an echoed
				// variable should be verifiably safe at the line that echoes it,
				// without tracing it back here to be sure.
				// The General heading only earns its space when a module's own groups
				// share the row with it (a file field's accept and image rules).
				$grp_solo = (bool) apply_filters( 'addon_boss_field_row_groups_visible', false, $type ) ? '' : ' hidden';
				?>
				<div class="bb-pf-grp" data-grp="ask">
					<h5 class="bb-pf-grph"<?php echo esc_attr( $grp_solo ); ?>><?php esc_html_e( 'General', 'addon-boss' ); ?></h5>
					<div class="bb-pf-grprow">
					<?php
					// First control under the label, which is where every comparable
					// builder puts it: Gravity Forms, WPForms, ACF, Product Add-Ons,
					// PPOM and ThemeHigh all place Description directly beneath the
					// field's name. It starts empty and stays empty until the merchant
					// writes something. NOTHING is ever seeded here, not even as
					// placeholder text: no product in this category pre-fills the box,
					// and a sentence nobody wrote that ships anyway is exactly the trap
					// that has one free delivery plugin promising "we will try our best
					// to deliver your order on the specified date" on every checkout
					// that ever installed it, true or not.
					//
					// The hint names WHO reads it, because half the category's version
					// of this control is admin-only guidance (ACF's Instructions is
					// read by whoever edits the post, never by a customer), and one
					// word settles which of the two this is.
					?>
					<label class="bb-pf-ctl bb-pf-desc"><span><?php esc_html_e( 'Description', 'addon-boss' ); ?></span>
						<input type="text" name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][description]" value="<?php echo esc_attr( (string) ( $field['description'] ?? '' ) ); ?>" class="bb-pf-desc-in">
						<span class="description bb-pf-deschint"><?php esc_html_e( 'Shown to shoppers below the field.', 'addon-boss' ); ?></span>
					</label>
					<?php
					// "Required" as a tick, the whole category's shape (Gravity,
					// WPForms, APF, PPOM, EPO and core's own `required` flag all
					// name it exactly this). Ticked posts 'always', unticked posts
					// nothing, which is precisely what the sanitiser already reads,
					// so stored fields round-trip untouched.
					?>
					<label class="bb-pf-ctl bb-pf-reqctl"><span><?php esc_html_e( 'Required', 'addon-boss' ); ?></span>
						<input type="checkbox" name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][require]" value="always" <?php checked( 'always', $reqmode ); ?> class="bb-pf-require">
					</label>
					<label class="bb-pf-ctl bb-pf-charge"<?php echo in_array( $type, array( 'color', 'price', 'hidden', 'select' ), true ) ? ' hidden' : ''; ?>><span><?php esc_html_e( 'Price', 'addon-boss' ); ?></span>
						<span class="bb-pf-feebox">
							<span class="bb-pf-feesym"<?php echo 'percent' === $mode ? ' hidden' : ''; ?>><?php echo esc_html( $sym ); ?></span>
							<input type="text" name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][fee]" value="<?php echo $fee > 0 ? esc_attr( rtrim( rtrim( number_format( $fee, 2 ), '0' ), '.' ) ) : ''; ?>" class="bb-pf-fee" placeholder="0">
							<span class="bb-pf-feepct"<?php echo 'percent' === $mode ? '' : ' hidden'; ?>>%</span>
						</span>
					</label>
					<?php
					// A type whose charge is its own maths hides the shared mode
					// menu (its own control renders through the seam below).
					$bb_own_fm = '' !== (string) ( $types[ $type ]['own_fee_mode'] ?? '' );
					// "Price type" beside "Price", the shape the category settled on
					// (Extra Product Options names it exactly this; Product Add-Ons
					// and Advanced Product Fields both pair an amount with a type
					// menu). It carries .bb-pf-charge too, so the one rule that
					// hides the charge for a colour or a dropdown hides both.
					?>
					<label class="bb-pf-ctl bb-pf-charge bb-pf-pricetype"<?php echo in_array( $type, array( 'color', 'price', 'hidden', 'select' ), true ) ? ' hidden' : ''; ?>><span><?php esc_html_e( 'Price type', 'addon-boss' ); ?></span>
						<select name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][fee_mode]" class="bb-pf-feemode"<?php echo $bb_own_fm ? ' hidden' : ''; ?>>
							<?php
							// The menu lists exactly the modes this build has maths for.
							// A field already saved with a mode nothing registered keeps
							// its own entry, named plainly, so opening the editor can
							// never silently reprice it.
							$bb_menu_modes = addon_boss_fee_modes();
							if ( '' !== $mode && ! isset( $bb_menu_modes[ $mode ] ) ) {
								$bb_menu_modes[ $mode ] = $mode;
							}
							foreach ( $bb_menu_modes as $bb_fm => $bb_fm_label ) {
								printf(
									'<option value="%1$s" %2$s>%3$s</option>',
									esc_attr( $bb_fm ),
									selected( $mode, $bb_fm, false ),
									esc_html( $bb_fm_label )
								);
							}
							?>
						</select>
						<?php
						// A type's own charge control (a measured size's per-square unit
						// picker) rides in from the module that registered the type.
						do_action( 'addon_boss_field_row_fee_extra', $ix, $field, $type );

						// WHAT THE CHOSEN MODE DOES, and only that one.
						//
						// The label used to carry a sentence explaining "for each"
						// and "once" together, above the controls. It was a wall of
						// text AND incomplete: this menu offers five modes, and the
						// three it never mentioned are the ones a merchant is least
						// likely to guess. A merchant only needs the one they picked,
						// which is the rule the repeatable panel already follows.
						$bb_fm_attrs = '';
						foreach ( addon_boss_fee_modes() as $bb_fmk => $bb_fml ) {
							$bb_n = addon_boss_fee_mode_note( (string) $bb_fmk );
							if ( '' !== $bb_n ) {
								$bb_fm_attrs .= ' data-note-' . esc_attr( $bb_fmk ) . '="' . esc_attr( $bb_n ) . '"';
							}
						}
						$bb_fm_now = addon_boss_fee_mode_note( (string) $mode );
						?>
						<span class="description bb-pf-charge-note"<?php
							echo $bb_fm_attrs; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- name and value are esc_attr'd as each pair is built above.
							echo '' === $bb_fm_now ? ' hidden' : '';
						?>><?php echo esc_html( $bb_fm_now ); ?></span>
					</label>
					<label class="bb-pf-ctl bb-pf-max"<?php echo in_array( $type, array( 'text', 'textarea' ), true ) ? '' : ' hidden'; ?>><span><?php esc_html_e( 'Max length', 'addon-boss' ); ?></span>
						<input type="number" min="0" step="1" name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][maxlength]" value="<?php echo ! empty( $field['maxlength'] ) ? (int) $field['maxlength'] : ''; ?>" class="bb-pf-maxlength">
					</label>
					<label class="bb-pf-ctl bb-pf-numlo"<?php echo 'number' === $type ? '' : ' hidden'; ?>><span><?php esc_html_e( 'Minimum', 'addon-boss' ); ?></span>
						<input type="number" step="any" name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][num_min]" value="<?php echo isset( $field['num_min'] ) ? esc_attr( (string) ( $field['num_min'] + 0 ) ) : ''; ?>" class="bb-pf-shortnum" placeholder="0">
					</label>
					<label class="bb-pf-ctl bb-pf-numhi"<?php echo 'number' === $type ? '' : ' hidden'; ?>><span><?php esc_html_e( 'Maximum', 'addon-boss' ); ?></span>
						<input type="number" step="any" name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][num_max]" value="<?php echo isset( $field['num_max'] ) ? esc_attr( (string) ( $field['num_max'] + 0 ) ) : ''; ?>" class="bb-pf-shortnum" placeholder="<?php esc_attr_e( 'none', 'addon-boss' ); ?>">
					</label>
					<label class="bb-pf-ctl bb-pf-numwhole"<?php echo 'number' === $type ? '' : ' hidden'; ?>><span><?php esc_html_e( 'Whole numbers only', 'addon-boss' ); ?></span>
						<input type="checkbox" name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][num_whole]" value="1" <?php checked( ! empty( $field['num_whole'] ) ); ?> class="bb-pf-numwhole-in">
					</label>
					<?php
					// Name your price: the shopper types the amount, so there is no Charge
					// box; the merchant sets the fences and, if they like, a few
					// suggested amounts typed as one comma list. Every control on one
					// row, every helper in the placeholder, nothing to read first.
					$bb_is_price = ( 'price' === $type );
					?>
					<label class="bb-pf-ctl bb-pf-pricemin"<?php echo $bb_is_price ? '' : ' hidden'; ?>><span><?php esc_html_e( 'Minimum', 'addon-boss' ); ?></span>
						<input type="text" inputmode="decimal" name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][price_min]" value="<?php echo isset( $field['price_min'] ) ? esc_attr( (string) $field['price_min'] ) : ''; ?>" class="bb-pf-shortnum" placeholder="<?php esc_attr_e( 'none', 'addon-boss' ); ?>">
					</label>
					<label class="bb-pf-ctl bb-pf-pricemax"<?php echo $bb_is_price ? '' : ' hidden'; ?>><span><?php esc_html_e( 'Maximum', 'addon-boss' ); ?></span>
						<input type="text" inputmode="decimal" name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][price_max]" value="<?php echo isset( $field['price_max'] ) ? esc_attr( (string) $field['price_max'] ) : ''; ?>" class="bb-pf-shortnum" placeholder="<?php esc_attr_e( 'none', 'addon-boss' ); ?>">
					</label>
					<label class="bb-pf-ctl bb-pf-pricesug"<?php echo $bb_is_price ? '' : ' hidden'; ?>><span><?php esc_html_e( 'Suggested', 'addon-boss' ); ?></span>
						<input type="text" inputmode="decimal" name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][price_suggested]" value="<?php echo isset( $field['price_suggested'] ) ? esc_attr( (string) $field['price_suggested'] ) : ''; ?>" class="bb-pf-shortnum" placeholder="<?php esc_attr_e( 'none', 'addon-boss' ); ?>">
					</label>
					<label class="bb-pf-ctl bb-pf-priceamts"<?php echo $bb_is_price ? '' : ' hidden'; ?>><span><?php esc_html_e( 'Suggested amounts', 'addon-boss' ); ?><?php
						addon_boss_options_addctl_tip( __( 'Up to five one-tap amounts. Shoppers can still type their own.', 'addon-boss' ) );
					?></span>
						<input type="text" name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][price_amounts]" value="<?php echo esc_attr( implode( ', ', array_map( 'strval', (array) ( $field['price_amounts'] ?? array() ) ) ) ); ?>" class="bb-pf-priceamounts" placeholder="5, 10, 20">
					</label>
					<?php
					// Hidden: a note from the merchant to their own order screen. One
					// value, and an off-by-default switch for filling it from a link.
					$bb_is_hidden = ( 'hidden' === $type );
					?>
					<label class="bb-pf-ctl bb-pf-hiddenval"<?php echo $bb_is_hidden ? '' : ' hidden'; ?>><span><?php esc_html_e( 'Value', 'addon-boss' ); ?><?php
						addon_boss_options_addctl_tip( __( 'Saved on every order, shown only to you.', 'addon-boss' ) );
					?></span>
						<input type="text" name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][value]" value="<?php echo esc_attr( (string) ( $field['value'] ?? '' ) ); ?>" class="bb-pf-hiddenvalue" placeholder="<?php esc_attr_e( 'e.g. DTF-B', 'addon-boss' ); ?>">
					</label>
					<label class="bb-pf-ctl bb-pf-hiddenurl"<?php echo $bb_is_hidden ? '' : ' hidden'; ?>><span><?php esc_html_e( 'Allow fill from link', 'addon-boss' ); ?><?php
						addon_boss_options_addctl_tip( __( 'Links ending ?fieldkey=value set it. Leave off unless you send them.', 'addon-boss' ) );
					?></span>
						<input type="checkbox" name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][url_fill]" value="1" <?php checked( ! empty( $field['url_fill'] ) ); ?> class="bb-pf-hiddenurlfill">
					</label>
					</div>
				</div>
					<?php
					// The colour field's swatches: label + the colour itself + an
					// optional charge, one row each. Its own group BESIDE the ask row
					// (never inside it) because a swatch list is taller than a control
					// slot, and group visibility is derived from a group's own children.
					$bb_is_color   = ( 'color' === $type );
					$bb_color_opts = $bb_is_color ? (array) ( $field['options'] ?? array() ) : array();
					?>
					<div class="bb-pf-grp bb-pf-colourgrp" data-grp="colours"<?php echo $bb_is_color ? '' : ' hidden'; ?>>
						<h5 class="bb-pf-grph"><?php esc_html_e( 'The colours', 'addon-boss' ); ?></h5>
						<div class="bb-pf-colourrows">
						<?php
						$bb_ci = 0;
						foreach ( $bb_color_opts as $bb_copt ) {
							printf(
								'<div class="bb-pf-colourrow">'
								. '<input type="text" name="bb_pf[%1$s][options][%2$d][label]" value="%3$s" class="bb-pf-colourlabel" placeholder="%4$s">'
								. '<input type="color" name="bb_pf[%1$s][options][%2$d][color]" value="%5$s" class="bb-pf-colourpick">'
								. '<span class="bb-pf-feebox"><span class="bb-pf-feesym">%6$s</span><input type="text" name="bb_pf[%1$s][options][%2$d][fee]" value="%7$s" class="bb-pf-colourfee" placeholder="0"></span>'
								. '<input type="hidden" name="bb_pf[%1$s][options][%2$d][value]" value="%8$s">'
								. '<button type="button" class="bb-po-remove bb-pf-colourdel" aria-label="%9$s">&#10005;</button>'
								. '</div>',
								esc_attr( (string) $ix ),
								(int) $bb_ci,
								esc_attr( (string) ( $bb_copt['label'] ?? '' ) ),
								esc_attr__( 'Colour name, e.g. Ruby', 'addon-boss' ),
								esc_attr( (string) ( $bb_copt['color'] ?? '#cccccc' ) ),
								esc_html( $sym ),
								(float) ( $bb_copt['fee'] ?? 0 ) > 0 ? esc_attr( rtrim( rtrim( number_format( (float) $bb_copt['fee'], 2 ), '0' ), '.' ) ) : '',
								esc_attr( (string) ( $bb_copt['value'] ?? '' ) ),
								esc_attr__( 'Remove this colour', 'addon-boss' )
							);
							$bb_ci++;
						}
						?>
						</div>
						<button type="button" class="bb-po-ghostbtn bb-pf-colouradd" data-ix="<?php echo esc_attr( (string) $ix ); ?>"><?php esc_html_e( '+ Add a colour', 'addon-boss' ); ?></button>
						<label class="bb-pf-ctl bb-pf-colourcustom"<?php echo $bb_is_color ? '' : ' hidden'; ?>><span><?php esc_html_e( 'Also allow any colour', 'addon-boss' ); ?><?php
							addon_boss_options_addctl_tip( __( 'Adds a Custom swatch: shoppers pick any colour.', 'addon-boss' ) );
						?></span>
							<input type="checkbox" name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][allow_custom]" value="1" <?php checked( ! empty( $field['allow_custom'] ) ); ?> class="bb-pf-colourallow">
							<span class="bb-pf-feebox bb-pf-colourcfee"<?php echo empty( $field['allow_custom'] ) ? ' hidden' : ''; ?>><span class="bb-pf-feesym"><?php echo esc_html( $sym ); ?></span><input type="text" name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][custom_fee]" value="<?php echo (float) ( $field['custom_fee'] ?? 0 ) > 0 ? esc_attr( rtrim( rtrim( number_format( (float) $field['custom_fee'], 2 ), '0' ), '.' ) ) : ''; ?>" class="bb-pf-colourcustomfee" placeholder="0"></span>
						</label>
					</div>
						<?php
						// The dropdown field's choices: label + an optional charge, one
						// row each — the colour repeater minus the swatch. Until this
						// group existed a Dropdown could only be authored by import or
						// code: the storefront rendered its choices while the editor
						// offered nowhere to see or change them. Both repeaters post the
						// same options[] names; only the ACTIVE type's group holds rows,
						// and the sanitiser reads label, value and fee from either.
						$bb_is_select   = ( 'select' === $type );
						$bb_select_opts = $bb_is_select ? (array) ( $field['options'] ?? array() ) : array();
						?>
						<div class="bb-pf-grp bb-pf-choicegrp" data-grp="choices"<?php echo $bb_is_select ? '' : ' hidden'; ?>>
							<h5 class="bb-pf-grph"><?php esc_html_e( 'The choices', 'addon-boss' ); ?></h5>
							<div class="bb-pf-choicerows"<?php echo $bb_is_select ? '' : ' hidden'; ?>>
							<?php
							$bb_si = 0;
							foreach ( $bb_select_opts as $bb_sopt ) {
								printf(
									'<div class="bb-pf-colourrow bb-pf-choicerow">'
									. '<input type="text" name="bb_pf[%1$s][options][%2$d][label]" value="%3$s" class="bb-pf-colourlabel bb-pf-choicelabel" placeholder="%4$s">'
									. '<span class="bb-pf-feebox"><span class="bb-pf-feesym">%5$s</span><input type="text" name="bb_pf[%1$s][options][%2$d][fee]" value="%6$s" class="bb-pf-colourfee bb-pf-choicefee" placeholder="0"></span>'
									. '<input type="hidden" name="bb_pf[%1$s][options][%2$d][value]" value="%7$s">'
									. '<button type="button" class="bb-po-remove bb-pf-choicedel" aria-label="%8$s">&#10005;</button>'
									. '</div>',
									esc_attr( (string) $ix ),
									(int) $bb_si,
									esc_attr( (string) ( $bb_sopt['label'] ?? '' ) ),
									esc_attr__( 'Choice name, e.g. New artwork', 'addon-boss' ),
									esc_html( $sym ),
									(float) ( $bb_sopt['fee'] ?? 0 ) > 0 ? esc_attr( rtrim( rtrim( number_format( (float) $bb_sopt['fee'], 2 ), '0' ), '.' ) ) : '',
									esc_attr( (string) ( $bb_sopt['value'] ?? '' ) ),
									esc_attr__( 'Remove this choice', 'addon-boss' )
								);
								$bb_si++;
							}
							?>
							</div>
							<button type="button" class="bb-po-ghostbtn bb-pf-choiceadd" data-ix="<?php echo esc_attr( (string) $ix ); ?>"><?php esc_html_e( '+ Add a choice', 'addon-boss' ); ?></button>
						</div>
				<?php
				// The repeat panel (ask this field several times) rides in from the
				// module that owns repeats; a build without one reposts a stored
				// repeat setting through hidden carriers instead, so a save never
				// drops what the merchant chose while they had it.
				if ( ! (bool) apply_filters( 'addon_boss_field_row_repeat_editor', false, $ix, $field, $mode ) ) {
					addon_boss_hidden_carriers( 'bb_pf[' . (string) $ix . ']', array_intersect_key( $field, array( 'repeat' => 1, 'repeat_max' => 1, 'repeat_label' => 1 ) ) );
				}
				// The same rule for a date field's calendar: a build without the
				// module draws none of its controls, so the stored settings repost
				// on carriers instead of disappearing at the next save.
				if ( 'date' === $type && ! is_callable( addon_boss_personalisation_field_types()['date']['sanitize_def'] ?? null ) ) {
					addon_boss_hidden_carriers(
						'bb_pf[' . (string) $ix . ']',
						array_intersect_key(
							$field,
							array(
								'prep_days'    => 1,
								'book_ahead'   => 1,
								'cutoff'       => 1,
								'closed_days'  => 1,
								'closed_dates' => 1,
								'date_face'    => 1,
								'date_bands'   => 1,
								)
						)
					);
				}
				?>
				<?php
				// The upload module's own groups (what it accepts, the image size,
				// tidying what they send) ride in from that module; a build without
				// it offers none of these controls.
				do_action( 'addon_boss_field_row_extra_groups', $ix, $field, $type );
				?>
				</div>
				<?php
				// Which variations this field is for needs the product, fetched
				// once here for the block below.
				$bb_post = get_post();
				?>
				<?php
				// Which variations this field is for. Only worth asking on a variable
				// product that actually has variations, so a simple product's panel
				// never grows a control about something it does not have.
				$bb_vars = array();
				if ( $bb_post ) {
					$bb_vprod = wc_get_product( $bb_post->ID );
					if ( $bb_vprod instanceof WC_Product && $bb_vprod->is_type( 'variable' ) ) {
						foreach ( $bb_vprod->get_children() as $bb_vid ) {
							$bb_v = wc_get_product( $bb_vid );
							if ( $bb_v ) {
								$bb_vlab = wc_get_formatted_variation( $bb_v, true, false );
								$bb_vars[ (int) $bb_vid ] = '' !== $bb_vlab ? $bb_vlab : ( '#' . (int) $bb_vid );
							}
						}
					}
				}
				$bb_only = array_map( 'absint', (array) ( $field['only_variations'] ?? array() ) );
				?>
				<?php if ( $bb_vars ) : ?>
				<div class="bb-pf-vars">
					<span class="bb-pfp-lab"><?php esc_html_e( 'Which variations is it for', 'addon-boss' ); ?></span>
					<label class="bb-pf-varall">
						<input type="checkbox" class="bb-pf-varall-cb" <?php checked( empty( $bb_only ) ); ?>>
						<span><?php esc_html_e( 'All of them', 'addon-boss' ); ?></span>
					</label>
					<div class="bb-pf-varlist"<?php echo empty( $bb_only ) ? ' hidden' : ''; ?>>
						<?php foreach ( $bb_vars as $bb_vid => $bb_vlabel ) : ?>
							<label class="bb-pf-var">
								<input type="checkbox" name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][only_variations][]" value="<?php echo (int) $bb_vid; ?>" <?php checked( in_array( (int) $bb_vid, $bb_only, true ) ); ?>>
								<span><?php echo esc_html( $bb_vlabel ); ?></span>
							</label>
						<?php endforeach; ?>
					</div>
				</div>
				<?php endif; ?>
					<?php
					// The placement editor (show this field on the product photo)
					// rides in from the module that draws placements; a build
					// without one reposts a stored placement through hidden
					// carriers instead, so a save never drops it.
					if ( ! (bool) apply_filters( 'addon_boss_field_row_placement_editor', false, $ix, $field, $type )
						&& is_array( $field['preview'] ?? null ) && $field['preview'] ) {
						addon_boss_hidden_carriers( 'bb_pf[' . (string) $ix . '][preview]', $field['preview'] );
					}
					?>
				<div class="bb-pf-htmlbox"<?php echo 'html' === $type ? '' : ' hidden'; ?>>
					<label class="bb-pf-ctl bb-pf-contentctl"><span><?php esc_html_e( 'Content (text or HTML)', 'addon-boss' ); ?></span>
						<textarea name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][content]" class="bb-pf-content" rows="4" placeholder="<?php esc_attr_e( 'Shown to customers. Basic HTML is allowed: bold, lists, links.', 'addon-boss' ); ?>"><?php echo esc_textarea( (string) ( $field['content'] ?? '' ) ); ?></textarea>
					</label>
					<?php
					// The zero carrier goes FIRST so unticking the box posts a
					// fact rather than an absence: an absent key is what a stored
					// block re-sanitised through an import looks like, and that
					// must leave the heading alone.
					?>
					<input type="hidden" name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][show_title]" value="0">
					<label class="bb-pf-cbhint">
						<input type="checkbox" name="bb_pf[<?php echo esc_attr( (string) $ix ); ?>][show_title]" value="1" <?php checked( empty( $field['hide_title'] ) ); ?>>
						<?php esc_html_e( 'Show the label above this block', 'addon-boss' ); ?>
						<em class="bb-po-hint"><?php esc_html_e( 'The label always names this block in the list here. Untick and the customer sees the content on its own.', 'addon-boss' ); ?></em>
					</label>
				</div>
				<?php
				// The reveal-rule builder rides in from the module that evaluates
				// such rules; a build without one reposts a stored rule through
				// hidden carriers instead, so a save never drops it.
				if ( ! (bool) apply_filters( 'addon_boss_field_row_when_editor', false, $ix, $when, $sibling_sets, $sibling_fields, $force_when ) ) {
					addon_boss_field_when_carriers( (string) $ix, $when );
				}
				?>
			</div>
		</div>
	</div>
	<?php
}

/**
 * One GROUP header row in the admin list. A section marker: its members are
 * the rows dragged beneath it (positional), so it holds only a name. It
 * carries its own bb_po_order key (group-<i>) so the save stores it in the
 * arranged sequence.
 */
function addon_boss_render_product_group_head( $i, array $group ): void {
	// $i may be the '__PGIDX__' template placeholder; see the field row's note.
	$ix    = esc_attr( (string) $i );
	$label = (string) ( $group['label'] ?? '' );
	?>
		<div class="bb-po-line">
			<span class="bb-po-caret bb-po-grip" aria-hidden="true">&#9776;</span>
			<span class="bb-po-grouppill"><?php esc_html_e( 'Section', 'addon-boss' ); ?></span>
			<input type="text" name="bb_po_group_label[<?php echo esc_attr( (string) $ix ); ?>]" value="<?php echo esc_attr( $label ); ?>"
				class="bb-po-grouplabel" placeholder="<?php esc_attr_e( 'Section name (optional)', 'addon-boss' ); ?>">
			<button type="button" class="bb-po-remove" aria-label="<?php esc_attr_e( 'Remove this section', 'addon-boss' ); ?>">&#10005;</button>
			<input type="hidden" class="bb-po-orderkey" value="group-<?php echo esc_attr( (string) $ix ); ?>">
		</div>
	<?php
	// The group's repeat panel rides in from the module that owns repeats; a
	// build without one reposts a stored setting through hidden carriers
	// instead, so a save from the wrong build never drops what the merchant
	// chose while nothing on the page invites setting it up.
	if ( ! (bool) apply_filters( 'addon_boss_group_row_repeat_editor', false, $i, $group )
		&& in_array( (string) ( $group['repeat'] ?? '' ), array( 'add', 'per_item' ), true ) ) {
		echo '<input type="hidden" name="bb_po_group_repeat[' . esc_attr( (string) $ix ) . ']" value="' . esc_attr( (string) $group['repeat'] ) . '">';
		if ( ! empty( $group['repeat_max'] ) ) {
			echo '<input type="hidden" name="bb_po_group_repeat_max[' . esc_attr( (string) $ix ) . ']" value="' . (int) $group['repeat_max'] . '">';
		}
		if ( '' !== (string) ( $group['repeat_label'] ?? '' ) ) {
			echo '<input type="hidden" name="bb_po_group_repeat_label[' . esc_attr( (string) $ix ) . ']" value="' . esc_attr( (string) $group['repeat_label'] ) . '">';
		}
	}
}

/**
 * One SET row in the admin product-options list. Extracted so a group can
 * render it as a child exactly like a top-level one. $attached is the
 * [id => name] map of sets on this product, for the reveal-rule siblings.
 */
function addon_boss_render_product_set_row( $i, array $row, array $sets, array $attached ): void {
	$set = $sets[ $row['set'] ?? '' ] ?? null;
	if ( ! $set ) {
		return; // deleted set: degrade silently.
	}
	$ix = (int) $i;
	?>
	<div class="bb-po-row" data-idx="<?php echo esc_attr( (string) $ix ); ?>">
		<div class="bb-po-line">
			<span class="bb-po-caret" aria-hidden="true">&#9656;</span>
			<b><?php echo esc_html( $set['name'] ); ?></b>
			<?php // Straight into the set's own editor, in a new tab so the product's unsaved work stays put (his ask, 4 Sept: stop the trip back through the Option Sets page). ?>
			<a class="bb-po-editset" href="<?php echo esc_url( admin_url( 'admin.php?page=addon-boss-option-sets&set=' . rawurlencode( (string) $row['set'] ) ) ); ?>" target="_blank" rel="noopener">
				<?php esc_html_e( 'Edit set', 'addon-boss' ); ?><span aria-hidden="true">&#8599;</span><span class="screen-reader-text"><?php esc_html_e( '(opens in a new tab)', 'addon-boss' ); ?></span>
			</a>
			<span class="bb-chiprow bb-chiprow-mini">
			<?php echo wp_kses( addon_boss_option_preview_row( (array) ( $set['options'] ?? array() ), 6 ), addon_boss_kses_allowed() ); ?>
			</span>
			<select class="bb-seg-auto bb-po-req" name="bb_po_required[<?php echo esc_attr( (string) $ix ); ?>]" aria-label="<?php esc_attr_e( 'Is a pick required?', 'addon-boss' ); ?>">
				<option value=""><?php esc_html_e( 'Optional', 'addon-boss' ); ?></option>
				<option value="1" <?php selected( ! empty( $row['required'] ) ); ?>><?php esc_html_e( 'Required', 'addon-boss' ); ?></option>
			</select>
			<button type="button" class="bb-po-remove" aria-label="<?php esc_attr_e( 'Remove this set from the product', 'addon-boss' ); ?>">&#10005;</button>
			<input type="hidden" name="bb_po_set[<?php echo esc_attr( (string) $ix ); ?>]" value="<?php echo esc_attr( $row['set'] ); ?>">
			<?php // The origin folder rides back through the save, so a re-save never forgets where the set came from. ?>
			<input type="hidden" class="bb-po-fromgroup" name="bb_po_fromgroup[<?php echo esc_attr( (string) $ix ); ?>]" value="<?php echo esc_attr( (string) ( $row['from_group'] ?? '' ) ); ?>">
			<input type="hidden" class="bb-po-orderkey" value="set-<?php echo esc_attr( (string) $ix ); ?>">
		</div>
		<div class="bb-po-body" hidden>
			<?php if ( 'measured' === (string) ( $set['kind'] ?? 'choices' ) ) : ?>
				<?php
				// A measured set prices by ONE number, so the per-product
				// override is one number too: this product's rate, in place of
				// the per-choice grid a choices set gets. Blank means the set's
				// own rate, shown as the placeholder so the merchant can see
				// exactly what they would be overruling. Reuses the override
				// grid's cells so the row reads like its siblings.
				$bb_rate_val = ( isset( $row['rate'] ) && '' !== $row['rate'] ) ? (string) $row['rate'] : '';
				$bb_rate_id  = 'bb-po-rate-' . sanitize_html_class( (string) $ix );
				?>
				<div class="bb-po-bodytop">
					<div class="bb-po-ovlab"><?php esc_html_e( 'Rate for this product only', 'addon-boss' ); ?></div>
				</div>
				<div class="bb-ovr-grid">
					<div class="bb-ovr-cell<?php echo '' !== $bb_rate_val ? ' is-overridden' : ''; ?>">
						<label class="bb-ovr-name" for="<?php echo esc_attr( $bb_rate_id ); ?>"><?php esc_html_e( 'Rate', 'addon-boss' ); ?></label>
						<span class="bb-ovr-fields">
							<input type="text" id="<?php echo esc_attr( $bb_rate_id ); ?>" name="bb_po_rate[<?php echo esc_attr( (string) $ix ); ?>]"
								value="<?php echo esc_attr( $bb_rate_val ); ?>"
								placeholder="<?php echo esc_attr( (string) ( $set['measure']['rate'] ?? '' ) ); ?>">
						</span>
					</div>
				</div>
				<p class="bb-po-hint"><?php esc_html_e( 'Blank uses the set\'s own rate. A figure here prices this product alone; the set\'s minimum charge still applies.', 'addon-boss' ); ?></p>
			<?php else : ?>
			<div class="bb-po-bodytop">
				<?php
				// The photo module names the override grid (and adds its suggest
				// control); a build without one talks about charges alone.
				$bb_po_copy = (array) apply_filters(
					'addon_boss_option_overrides_copy',
					array(
						'label' => __( 'Extra charge per option, for this product only', 'addon-boss' ),
						'hint'  => __( 'Blank uses the set\'s own charge. A 0 here makes it free for this product.', 'addon-boss' ),
					)
				);
				?>
				<div class="bb-po-ovlab"><?php echo esc_html( (string) $bb_po_copy['label'] ); ?></div>
				<?php do_action( 'addon_boss_option_suggest_control' ); ?>
			</div>
			<div class="bb-ovr-grid">
			<?php
			$bb_hidden = array_flip( array_map( 'strval', (array) ( $row['hide'] ?? array() ) ) );
			foreach ( $set['options'] as $opt ) :
				$override = $row['deltas'][ $opt['key'] ] ?? '';
				$img_id   = absint( $row['images'][ $opt['key'] ] ?? 0 );
				$thumb    = $img_id ? wp_get_attachment_image_url( $img_id, 'thumbnail' ) : '';
				$bb_off   = isset( $bb_hidden[ (string) $opt['key'] ] );
				// The cell holds two controls now, so it is a container with a
				// label each rather than one label wrapped around both: nested,
				// every click on the tick box's wording would land in the charge
				// field instead, which is what a label points at by default.
				$bb_cell_id = 'bb-ovr-' . sanitize_html_class( (string) $ix . '-' . $opt['key'] );
				?>
				<div class="bb-ovr-cell<?php echo '' !== $override ? ' is-overridden' : ''; ?><?php echo $bb_off ? ' is-off' : ''; ?>">
					<label class="bb-ovr-name" for="<?php echo esc_attr( $bb_cell_id ); ?>"><?php echo esc_html( $opt['label'] ); ?></label>
					<span class="bb-ovr-fields">
						<input type="text" id="<?php echo esc_attr( $bb_cell_id ); ?>" name="bb_po_delta[<?php echo esc_attr( (string) $ix ); ?>][<?php echo esc_attr( $opt['key'] ); ?>]"
							value="<?php echo esc_attr( '' === $override ? '' : (string) $override ); ?>"
							placeholder="<?php echo esc_attr( 0.0 === (float) $opt['delta'] ? '0' : (string) $opt['delta'] ); ?>">
						<?php do_action( 'addon_boss_option_photo_controls', $img_id ); ?>
						<?php // The stored id rides along whether or not this build offers the picker, so saving the panel never quietly drops a photo the merchant set. ?>
						<input type="hidden" class="bb-ovr-imgid" name="bb_po_image[<?php echo esc_attr( (string) $ix ); ?>][<?php echo esc_attr( $opt['key'] ); ?>]" value="<?php echo $img_id ? (int) $img_id : ''; ?>">
					</span>
					<?php
					// Tick to REFUSE, never to allow. A merchant hiding two of forty
					// colours ticks two, and a choice the shared set gains next month
					// is offered here without anyone coming back to permit it.
					?>
					<label class="bb-ovr-off">
						<input type="checkbox" class="bb-ovr-offcb"
							name="bb_po_hide[<?php echo esc_attr( (string) $ix ); ?>][<?php echo esc_attr( $opt['key'] ); ?>]" value="1" <?php checked( $bb_off ); ?>>
						<span><?php esc_html_e( 'Not on this product', 'addon-boss' ); ?></span>
					</label>
				</div>
			<?php endforeach; ?>
			</div>
			<p class="bb-po-hint"><?php echo esc_html( (string) $bb_po_copy['hint'] ); ?></p>
			<?php
			// Per-row controls a module owns print under the overrides, with the
			// stored set, this product's row and the row's index in hand.
			do_action( 'addon_boss_product_set_row_extra', $set, $row, $ix );
			?>
			<?php endif; ?>
			<?php
			/*
			 * A picture that will never be drawn.
			 *
			 * The set's swatch shape decides whether a choice draws as a photo.
			 * Left alone it works the obliging way round: the first photo turns
			 * the row into photo cards by itself. But a merchant who once
			 * clicked Square or Circle has PINNED it, and from then on every
			 * photo attached here is stored, kept, and silently never shown.
			 * Nothing on the screen said so, which is a whole afternoon of
			 * uploading swatches and wondering what is broken.
			 *
			 * Read through the same merged view the storefront resolves, so a
			 * photo set only for THIS product counts exactly like one on the
			 * shared set.
			 */
			$bb_shape_pin = (string) ( $set['shape'] ?? '' );
			if ( in_array( $bb_shape_pin, array( 'square', 'circle' ), true ) ) {
				$bb_has_photo = false;
				foreach ( (array) $set['options'] as $bb_o ) {
					if ( ! empty( $bb_o['image_id'] ) || ! empty( $row['images'][ $bb_o['key'] ] ) ) {
						$bb_has_photo = true;
						break;
					}
				}
				if ( $bb_has_photo ) {
					printf(
						'<p class="bb-po-hint bb-po-warn">%s</p>',
						esc_html(
							sprintf(
								/* translators: %s: the set's swatch shape, either Square or Circle. */
								__( 'These choices are drawn as %s swatches, so the photos above are not shown to shoppers. To show them, open this set and set its Swatch shape to Photo card.', 'addon-boss' ),
								'square' === $bb_shape_pin ? __( 'Square', 'addon-boss' ) : __( 'Circle', 'addon-boss' )
							)
						)
					);
				}
			}
			$siblings = array();
			foreach ( $attached as $sid => $sname ) {
				if ( $sid !== ( $row['set'] ?? '' ) ) {
					$siblings[ $sid ] = is_array( $sname ) ? ( $sname['name'] ?? $sid ) : $sname;
				}
			}
			// The reveal-rule editor rides in from the module that evaluates
			// such rules; a build without one reposts a stored rule through
			// hidden carriers instead, so a save never drops it.
			$bb_row_when = is_array( $row['when'] ?? null ) ? $row['when'] : array();
			if ( ! (bool) apply_filters( 'addon_boss_set_row_when_editor', false, $ix, $bb_row_when, $siblings, $sets ) ) {
				$bb_when_norm = addon_boss_when_to_groups( $bb_row_when );
				if ( $bb_when_norm['groups'] ) {
					echo '<input type="hidden" name="bb_po_when_json[' . (int) $ix . ']" value="' . esc_attr( (string) wp_json_encode( $bb_when_norm ) ) . '">';
				}
			}
			?>
		</div>
	</div>
	<?php
}

/**
 * Remember a row's field, so the rows BELOW it may point a rule at it.
 *
 * Carries the TYPE as well as the name, because the operator a rule offers is
 * worded from what it points at: a tick box is ticked, a text box is filled in.
 *
 * @param mixed $row     A config row.
 * @param array $earlier Field key => [label, type]; gains this row's field.
 */
function addon_boss_note_earlier_field( $row, array &$earlier ): void {
	$row = is_array( $row ) ? $row : array();
	$key = (string) ( $row['field']['key'] ?? '' );
	if ( '' === $key ) {
		return;
	}
	$label = (string) ( $row['field']['label'] ?? '' );
	$type  = (string) ( $row['field']['type'] ?? '' );
	// A display-only row (a section label, an info block) has no answer to
	// test, so it is never offered as a trigger. A hidden field is deliberately
	// no trigger either direction (its value is the merchant's own note), and
	// an amount they choose must never gate what they see: pay-more-see-more
	// is the pattern this fence exists to make unbuildable.
	$types = addon_boss_personalisation_field_types();
	if ( ! empty( $types[ $type ]['display_only'] ) || ! empty( $types[ $type ]['admin_only'] ) || ! empty( $types[ $type ]['own_amount'] ) ) {
		return;
	}
	$earlier[ $key ] = array(
		'label' => '' !== $label ? $label : $key,
		'type'  => $type,
	);
}

/**
 * One sibling-field entry read whichever way it was handed over: the map is
 * [label, type] now, and a bare string is still read as a name.
 *
 * @param mixed $entry The map entry.
 * @param string $key  Its key, as the last-resort name.
 * @return array{label:string,type:string}
 */
function addon_boss_sibling_field( $entry, string $key ): array {
	if ( is_array( $entry ) ) {
		return array(
			'label' => (string) ( $entry['label'] ?? $key ),
			'type'  => (string) ( $entry['type'] ?? '' ),
		);
	}
	return array( 'label' => '' !== (string) $entry ? (string) $entry : $key, 'type' => '' );
}

/** A set-or-field CHILD row (used both top-level and inside a group). */
function addon_boss_render_product_child_row( $i, array $row, array $sets, array $attached, array $sibling_fields = array() ): void {
	if ( ( $row['row_type'] ?? '' ) === 'field' ) {
		addon_boss_render_product_field_row( $i, (array) ( $row['field'] ?? array() ), (array) ( $row['when'] ?? array() ), $attached, $sibling_fields );
		return;
	}
	addon_boss_render_product_set_row( $i, $row, $sets, $attached );
}

/** The product-editor JS for field rows: add, type-change, live summary. */
function addon_boss_product_fields_admin_script(): void {
	if ( ! function_exists( 'addon_boss_personalisation_field_types' ) ) {
		return;
	}
	$sym = html_entity_decode( get_woocommerce_currency_symbol() );
	?>
	<?php ob_start(); try { ?>
	jQuery( function ( $ ) {
		var panel = $( '#bundle_boss_options_panel' );
		if ( ! panel.length ) { return; }

		// "Not on this product" answers as it is ticked. The is-off class was
		// only ever printed by PHP, so ticking the box struck nothing through
		// and dimmed nothing until the product was saved and the page came
		// back: the only feedback was the focus ring sitting on the box until
		// it moved to the next one, which reads as a stuck highlight rather
		// than a choice being refused.
		panel.on( 'change', '.bb-ovr-offcb', function () {
			$( this ).closest( '.bb-ovr-cell' ).toggleClass( 'is-off', this.checked );
		} );

		var pfNext = 100000; // field rows take a high, non-colliding index base
		var L = {
			newField: <?php echo wp_json_encode( __( 'New field', 'addon-boss' ) ); ?>,
			optional: <?php echo wp_json_encode( __( 'Optional', 'addon-boss' ) ); ?>,
			required: <?php echo wp_json_encode( __( 'Required', 'addon-boss' ) ); ?>,
			sym: <?php echo wp_json_encode( $sym ); ?>,
			modes: <?php echo wp_json_encode( addon_boss_fee_modes() ); ?>,
			shorts: <?php echo wp_json_encode( addon_boss_fee_mode_shorts() ); ?>
		};
		function summarise( row ) {
			var lbl = $.trim( row.find( '.bb-pf-label' ).val() || '' );
			row.find( '.bb-pf-headlabel' ).text( lbl || L.newField );
			var reqmode = row.find( '.bb-pf-require' ).prop( 'checked' ) ? 'always' : '';
			var bits = [ reqmode === 'always' ? L.required : L.optional ];
			var fee = parseFloat( row.find( '.bb-pf-fee' ).val() );
			var fmode = row.find( '.bb-pf-feemode' ).val();
			var ftype = row.find( '.bb-pf-type' ).val();
			if ( fee > 0 ) {
				// A type or mode whose charge reads in its own words says so
				// through the module that registered it; the fallback reads from
				// the mode menu's own wording.
				var ownBit = null;
				( window.addonBossFeeBits || [] ).some( function ( f ) {
					var b = f( ftype, fmode, fee, row, L );
					if ( null !== b && undefined !== b ) { ownBit = b; return true; }
					return false;
				} );
				bits.push( null !== ownBit ? ownBit : '+' + L.sym + fee + ' ' + ( L.shorts[ fmode ] || L.modes[ fmode ] || fmode || '' ) );
			}
			// A module's own summary bits (an upload field's image-handling note)
			// join here, after the engine's.
			( window.addonBossSummarise || [] ).forEach( function ( f ) { bits = f( bits, ftype, row ) || bits; } );
			row.find( '.bb-pf-sum' ).text( bits.join( ' · ' ) );
		}
		// The money box wears the currency by default; a mode priced as a share
		// of something (a percentage) swaps it through its module's own sync,
		// registered on addonBossTypeSync below.
		function feeSymSync( row ) {
			row.find( '.bb-pf-feesym' ).prop( 'hidden', false );
			row.find( '.bb-pf-feepct' ).prop( 'hidden', true );
			( window.addonBossFeeSyms || [] ).forEach( function ( f ) { f( row ); } );
		}
		/**
		 * A group is only shown when at least one control inside it is relevant to
		 * this field type, and a LONE remaining group drops its heading so a simple
		 * field still reads as one flat row rather than a lonely titled section.
		 * Type-conditional display is the cheapest disclosure there is: automatic,
		 * predictable, and with no discoverability cost, which is why it does the
		 * heavy lifting here instead of a fold.
		 */
		function grpSync( row ) {
			var shown = [];
			row.find( '.bb-pf-grp' ).each( function () {
				var g    = $( this );
				// A summary line IS the group's content when its controls are folded
				// away behind Edit. Without it the ancestor test above (correctly)
				// finds every control inside a closed panel and hides the whole
				// group, summary and all, which is the opposite of the point.
				var kids = g.find( '.bb-pf-ctl, .bb-pf-imgrow, .bb-pf-sumbar, .bb-pf-choicerows' );
				var any  = false;
				kids.each( function () {
					// A control inside a hidden PANEL is not on screen, even though it
					// carries no hidden flag of its own. Reading only its own flag is
					// why "Tidying what they send" stood as a heading over NOTHING on
					// every field type that is not a file: the crop, rotate, shrink and
					// quality controls live inside .bb-pf-imgpanel, which is hidden,
					// and each of them answered "not hidden" for itself.
					//
					// parentsUntil( g ) so the group's own flag, set on the previous
					// pass, cannot make every group look empty forever.
					if ( $( this ).prop( 'hidden' ) ) { return; }
					if ( $( this ).parentsUntil( g ).filter( '[hidden]' ).length ) { return; }
					any = true;
				} );
				g.prop( 'hidden', ! any );
				if ( any ) { shown.push( g ); }
			} );
			// Heading only earns its space once there is more than one group to tell
			// apart.
			var solo = shown.length < 2;
			shown.forEach( function ( g ) { g.find( '> .bb-pf-grph' ).prop( 'hidden', solo ); } );
		}
		function typeSync( row ) {
			var t = row.find( '.bb-pf-type' ).val();
			row.attr( 'data-type', t );
			row.find( '.bb-pf-settings' ).prop( 'hidden', t === 'heading' || t === 'html' );
			row.find( '.bb-pf-htmlbox' ).prop( 'hidden', t !== 'html' );
			row.find( '.bb-pf-max' ).prop( 'hidden', ! ( t === 'text' || t === 'textarea' ) );
			// Types that carry their money in the value (a colour's swatch, the
			// shopper's own amount) or carry none at all (hidden) lose the Charge
			// box; hidden loses the Answer control too, because an invisible thing cannot be
			// required. Each type's own controls appear in the same breath.
			row.find( '.bb-pf-charge' ).prop( 'hidden', t === 'color' || t === 'price' || t === 'hidden' || t === 'select' );
			row.find( '.bb-pf-require' ).closest( '.bb-pf-ctl' ).prop( 'hidden', t === 'hidden' );
			row.find( '.bb-pf-numlo, .bb-pf-numhi, .bb-pf-numwhole' ).prop( 'hidden', t !== 'number' );
			row.find( '.bb-pf-pricemin, .bb-pf-pricemax, .bb-pf-pricesug, .bb-pf-priceamts' ).prop( 'hidden', t !== 'price' );
			row.find( '.bb-pf-hiddenval, .bb-pf-hiddenurl' ).prop( 'hidden', t !== 'hidden' );
			row.find( '.bb-pf-colourgrp' ).prop( 'hidden', t !== 'color' )
				.find( '.bb-pf-ctl' ).prop( 'hidden', t !== 'color' );
			// The choices content carries the type flag itself, the same as the
			// colour rows: grpSync derives a group's visibility from its CHILDREN,
			// so a group whose only content is rows and a button was re-hidden in
			// the same tick that showed it, and a Dropdown offered nowhere to
			// type its choices.
			row.find( '.bb-pf-choicegrp' ).prop( 'hidden', t !== 'select' )
				.find( '.bb-pf-choicerows' ).prop( 'hidden', t !== 'select' );
			// Each module's own type behaviours (a measured size's unit picker, a
			// mode that only suits certain types) run here, after the engine's
			// own decisions and before the groups settle.
			( window.addonBossTypeSync || [] ).forEach( function ( f ) { f( row, t ); } );
			feeSymSync( row );
			// Groups settle AFTER every per-control decision above, since a group's
			// visibility is derived from its children's.
			grpSync( row );
			// The charge reads differently per type ("per square m" vs "for
			// each"), so the summary follows the type, not just the fee.
			summarise( row );
		}
		panel.on( 'change', '.bb-pf-add', function () {
			var t = $( this ).val();
			if ( ! t ) { return; }
			var tmpl = document.getElementById( 'bb-pf-row-template' );
			if ( ! tmpl ) { return; }
			var row = $( tmpl.innerHTML.replace( /__PFIDX__/g, String( pfNext ) ) );
			row.find( '.bb-pf-type' ).val( t );
			// A new field lands in the ungrouped area, before the first group, so
			// it never auto-joins a group; the merchant drags it in deliberately.
			var $pfRows = $( '#bb-product-option-rows' ), $pfG = $pfRows.children( '.bb-po-grouprow' ).first();
			if ( $pfG.length ) { $pfG.before( row ); } else { $pfRows.append( row ); }
			row.find( '.bb-po-body' ).prop( 'hidden', false );
			typeSync( row );
			feeSymSync( row );
			var bbSegs = window.addonBossBuildSegs || window.bundleBossBuildSegs; // theirs, when BundleBoss's admin.js was the one loaded
			if ( bbSegs ) { bbSegs( row ); }
			row.find( '.bb-pf-label' ).trigger( 'focus' );
			$( this ).val( '' ).trigger( 'change.select2' );
			pfNext++;
			panel.trigger( 'bb-pf-changed' );
		} );
		panel.on( 'change', '.bb-pf-type', function () { typeSync( $( this ).closest( '.bb-po-fieldrow' ) ); } );
		// The note under Charge follows the menu, so what it says is what this
		// field will actually do.
		function chargeNoteSync( row ) {
			row.find( '.bb-pf-charge-note' ).each( function () {
				var mode = row.find( '.bb-pf-feemode' ).val() || '';
				var txt  = this.getAttribute( 'data-note-' + mode ) || '';
				this.textContent = txt;
				this.hidden = ( '' === txt );
			} );
		}
		panel.on( 'change', '.bb-pf-feemode', function () {
			var row = $( this ).closest( '.bb-po-fieldrow' );
			feeSymSync( row );
			chargeNoteSync( row );
		} );
		panel.find( '.bb-po-fieldrow' ).each( function () { chargeNoteSync( $( this ) ); } );

		// The add bar's hint line speaks for whichever control the merchant is
		// on, and goes back to the general line when they leave it.
		( function () {
			var bar  = panel.find( '.bb-po-addbar' );
			var line = panel.find( '.bb-po-addhint' );
			if ( ! bar.length || ! line.length ) { return; }
			line.attr( 'data-bb-default', $.trim( line.text() ) );
			function say( wrap ) {
				var t = wrap ? $.trim( wrap.find( '.bb-ctl-hint-onfocus' ).text() ) : '';
				line.text( t || line.attr( 'data-bb-default' ) );
			}
			bar.on( 'mouseenter focusin', '.bb-po-addctl-wrap', function () { say( $( this ) ); } );
			bar.on( 'mouseleave focusout', '.bb-po-addctl-wrap', function () { say( null ); } );
		} )();
		// ---- the colour field's swatch rows ---------------------------------
		panel.on( 'click', '.bb-pf-colouradd', function () {
			var ix   = $( this ).data( 'ix' );
			var rows = $( this ).siblings( '.bb-pf-colourrows' );
			var n    = rows.children().length;
			// Names mirror the server-rendered rows exactly; the value slug is
			// derived from the label on save, so the hidden carrier posts empty.
			var sym  = $( this ).closest( '.bb-po-fieldrow' ).find( '.bb-pf-feesym' ).first().text() || '';
			rows.append(
				'<div class="bb-pf-colourrow">'
				+ '<input type="text" name="bb_pf[' + ix + '][options][' + n + '][label]" value="" class="bb-pf-colourlabel" placeholder="' + ( window.addonBossAdmin && addonBossAdmin.colourNamePh ? addonBossAdmin.colourNamePh : 'Colour name' ) + '">'
				+ '<input type="color" name="bb_pf[' + ix + '][options][' + n + '][color]" value="#cccccc" class="bb-pf-colourpick">'
				+ '<span class="bb-pf-feebox"><span class="bb-pf-feesym">' + sym + '</span><input type="text" name="bb_pf[' + ix + '][options][' + n + '][fee]" value="" class="bb-pf-colourfee" placeholder="0"></span>'
				+ '<input type="hidden" name="bb_pf[' + ix + '][options][' + n + '][value]" value="">'
				+ '<button type="button" class="bb-po-remove bb-pf-colourdel">&#10005;</button>'
				+ '</div>'
			);
			rows.children().last().find( '.bb-pf-colourlabel' ).trigger( 'focus' );
			panel.trigger( 'bb-pf-changed' );
		} );
		panel.on( 'click', '.bb-pf-colourdel', function () {
			$( this ).closest( '.bb-pf-colourrow' ).remove();
			panel.trigger( 'bb-pf-changed' );
		} );
		// ---- the dropdown field's choice rows -------------------------------
		panel.on( 'click', '.bb-pf-choiceadd', function () {
			var ix   = $( this ).data( 'ix' );
			var rows = $( this ).siblings( '.bb-pf-choicerows' );
			var n    = rows.children().length;
			var sym  = $( this ).closest( '.bb-po-fieldrow' ).find( '.bb-pf-feesym' ).first().text() || '';
			rows.append(
				'<div class="bb-pf-colourrow bb-pf-choicerow">'
				+ '<input type="text" name="bb_pf[' + ix + '][options][' + n + '][label]" value="" class="bb-pf-colourlabel bb-pf-choicelabel" placeholder="' + ( window.addonBossAdmin && addonBossAdmin.choiceNamePh ? addonBossAdmin.choiceNamePh : 'Choice name' ) + '">'
				+ '<span class="bb-pf-feebox"><span class="bb-pf-feesym">' + sym + '</span><input type="text" name="bb_pf[' + ix + '][options][' + n + '][fee]" value="" class="bb-pf-colourfee bb-pf-choicefee" placeholder="0"></span>'
				+ '<input type="hidden" name="bb_pf[' + ix + '][options][' + n + '][value]" value="">'
				+ '<button type="button" class="bb-po-remove bb-pf-choicedel">&#10005;</button>'
				+ '</div>'
			);
			rows.children().last().find( '.bb-pf-choicelabel' ).trigger( 'focus' );
			panel.trigger( 'bb-pf-changed' );
		} );
		panel.on( 'click', '.bb-pf-choicedel', function () {
			$( this ).closest( '.bb-pf-choicerow' ).remove();
			panel.trigger( 'bb-pf-changed' );
		} );
		panel.on( 'change', '.bb-pf-colourallow', function () {
			$( this ).siblings( '.bb-pf-colourcfee' ).prop( 'hidden', ! this.checked );
		} );
		// A module whose controls appear or leave (the repeat panel following
		// its mode menu) says so through this event, and the grouping is
		// resettled the same way the summary is refreshed.
		panel.on( 'bb-pf-regroup', '.bb-po-fieldrow', function () { grpSync( $( this ) ); } );

		// ---- which variations a field is for --------------------------------
		// "All of them" is the plain-English default. Unticking it reveals the
		// list; ticking it again clears every pick, so the stored rule and what
		// the merchant sees can never disagree.
		panel.on( 'change', '.bb-pf-varall-cb', function () {
			var wrap = $( this ).closest( '.bb-pf-vars' );
			var list = wrap.find( '.bb-pf-varlist' );
			if ( this.checked ) {
				list.prop( 'hidden', true ).find( 'input[type=checkbox]' ).prop( 'checked', false );
			} else {
				list.prop( 'hidden', false );
			}
		} );
		// Unticking every variation means "all of them" again, rather than a rule
		// that matches nothing and silently hides the field everywhere.
		panel.on( 'change', '.bb-pf-varlist input[type=checkbox]', function () {
			var wrap = $( this ).closest( '.bb-pf-vars' );
			if ( ! wrap.find( '.bb-pf-varlist input[type=checkbox]:checked' ).length ) {
				wrap.find( '.bb-pf-varall-cb' ).prop( 'checked', true );
				wrap.find( '.bb-pf-varlist' ).prop( 'hidden', true );
			}
		} );

		panel.on( 'input change', '.bb-po-fieldrow .bb-pf-label, .bb-po-fieldrow .bb-pf-fee, .bb-po-fieldrow .bb-pf-feemode, .bb-po-fieldrow .bb-pf-unit, .bb-po-fieldrow select[name$="[require]"]', function () {
			summarise( $( this ).closest( '.bb-po-fieldrow' ) );
		} );
		// A module that changed something the closed row summarises asks for a
		// rewrite through this event rather than reaching into this scope.
		panel.on( 'bb-pf-resummarise', '.bb-po-fieldrow', function () { summarise( $( this ) ); } );
	} );
	<?php } finally { addon_boss_inline_js( ob_get_clean() ); } ?>
	<?php
}

/**
 * The guidance under a Product options control: said out loud, on the screen.
 *
 * This used to be a 15px circle with an "i" in it that opened a bubble on
 * hover. It dodged the letter of the house rule, which bans NATIVE tooltips,
 * while breaking the whole point of it: nine real sentences a merchant needs
 * were hidden behind a hover, unreadable on a touch screen and invisible to
 * anyone scanning the form. "Your server allows up to 20 MB" is exactly the
 * kind of thing that stops someone typing 25 and wondering why it will not
 * stick, and it cannot do that from inside a tooltip.
 *
 * The panel already talks this way everywhere else -- the upload field prints
 * "Shoppers will see: JPG, PNG, GIF, WebP, PDF, up to 20 MB" as plain text an
 * inch away -- so this is the odd one out being brought into line rather than
 * a new pattern being invented.
 */
function addon_boss_options_addctl_tip( string $text, string $when = 'always' ): void {
	// 'always' is the house standard: guidance a merchant reads without hunting
	// for it, never a tooltip.
	//
	// 'focus' is for a ROW of controls. Three sentences sitting beside three
	// controls made each one 600 to 850px wide inside an 878px bar, so the row
	// broke into a column and the menus were squeezed to nothing. The words are
	// still on the page and still plain text; they are shown on the one hint
	// line under the bar, for the control the merchant is actually on.
	printf(
		'<em class="bb-hint bb-ctl-hint%1$s"%2$s>%3$s</em>',
		'focus' === $when ? ' bb-ctl-hint-onfocus' : '',
		'focus' === $when ? ' hidden' : '',
		esc_html( $text )
	);
}


function addon_boss_product_options_panel(): void {
	global $post;
	$product = $post ? wc_get_product( $post->ID ) : null;
	$config  = $product ? addon_boss_product_option_config( $product ) : array();
	$sets    = addon_boss_option_sets();
	// The sets attached to THIS product: the reveal-rule triggers a field may
	// point at (a field shown "only when" one of these is picked a certain way).
	$bb_attached = array();
	foreach ( addon_boss_flatten_option_config( $config ) as $bb_crow ) {
		$bb_csid = (string) ( $bb_crow['set'] ?? '' );
		if ( '' !== $bb_csid && isset( $sets[ $bb_csid ] ) ) {
			$bb_attached[ $bb_csid ] = $sets[ $bb_csid ];
		}
	}
	?>
	<div id="bundle_boss_options_panel" class="panel woocommerce_options_panel"
		data-bb-product="<?php echo (int) ( $post ? $post->ID : 0 ); ?>"
		<?php do_action( 'addon_boss_options_panel_attrs', $post ); ?>>
		<?php
		// How the groups are arranged, offered once there is more than one group
		// to arrange. A single group has nothing to fold or step through, so the
		// control would be a decision about nothing.
		$bb_layouts = addon_boss_options_layouts();
		$bb_layout  = $product ? addon_boss_options_layout( $product ) : 'stacked';
		if ( count( $bb_layouts ) > 1 && count( addon_boss_flatten_option_config( $config ) ) > 1 ) :
			?>
		<div class="options_group bb-product-layout">
			<p class="form-field bb-layout-field">
				<label for="bb_options_layout"><?php esc_html_e( 'Show the groups', 'addon-boss' ); ?></label>
				<select id="bb_options_layout" name="bb_options_layout" class="bb-layout-sel">
					<?php foreach ( $bb_layouts as $bb_lk => $bb_ln ) : ?>
						<option value="<?php echo esc_attr( $bb_lk ); ?>" <?php selected( $bb_layout, $bb_lk ); ?>><?php echo esc_html( $bb_ln ); ?></option>
					<?php endforeach; ?>
				</select>
				<span class="description bb-layout-note">
					<?php esc_html_e( 'Whichever you choose, a group the shopper has to answer is never folded away, and a folded group\'s header always shows the current choice.', 'addon-boss' ); ?>
				</span>
			</p>
		</div>
		<?php endif; ?>
		<div class="options_group bb-product-options">
			<div class="bb-panelhead">
				<b><?php esc_html_e( 'Options this product comes in', 'addon-boss' ); ?></b>
				<span class="bb-by-badge"><?php echo esc_html( (string) apply_filters( 'addon_boss_engine_brand_name', '' ) ); ?></span>
			</div>
			<p class="bb-panel-sub">
				<?php if ( $product && $product->is_type( 'variable' ) ) : ?>
					<?php esc_html_e( 'This product is variable. Its variations keep owning colour, size, stock and photos; option sets ride along as extras on top, priced per pick.', 'addon-boss' ); ?>
				<?php else : ?>
					<?php
					// The engine is shared, but the sentence is not: AddOnBoss has no
					// bundles, so promising that "every bundle inherits them" there
					// describes a feature the merchant does not have.
					if ( addon_boss_engine_host_has_bundles() ) {
						esc_html_e( 'Attach the sets this product offers. Every bundle that includes it inherits them; shoppers pick for each one they buy. No variations are created.', 'addon-boss' );
					} else {
						esc_html_e( 'Attach the sets this product offers. Shoppers pick from them on the product page. No variations are created.', 'addon-boss' );
					}
					?>
				<?php endif; ?>
				<a href="<?php echo esc_url( admin_url( 'admin.php?page=addon-boss-option-sets' ) ); ?>"><?php esc_html_e( 'Manage option sets', 'addon-boss' ); ?> &rarr;</a>
			</p>
			<?php
			// For a variable product: one clean toggle to order every colour and
			// size at once (the quantity grid) instead of one variation per add.
			// A build without the grid orders one at a time, so it offers no
			// control for a choice it cannot carry out.
			if ( addon_boss_engine_can( 'grid' ) && function_exists( 'addon_boss_order_layout_control' ) ) {
				addon_boss_order_layout_control( $product );
			}
			?>
			<?php
			// A simple product with no price is not purchasable, so WooCommerce
			// renders no add-to-cart area and the options never show. Warn right
			// here, and let JS clear the notice the moment a price is typed.
			if ( $product instanceof WC_Product && ! $product->is_type( 'variable' ) ) :
				$bb_has_price = '' !== (string) $product->get_price( 'edit' );
				?>
				<p class="bb-po-noprice"<?php echo $bb_has_price ? ' hidden' : ''; ?>><?php esc_html_e( 'This product has no price, so its options will not show on the storefront. Set your cheapest everyday price on the General tab and each option adds on top, or 0 if the options are meant to be the whole price.', 'addon-boss' ); ?></p>
				<?php ob_start(); try { ?>
				jQuery( function ( $ ) {
					var $n = $( '.bb-po-noprice' ), $rp = $( '#_regular_price' );
					if ( ! $n.length || ! $rp.length ) { return; }
					function bbNoPriceSync() { $n.prop( 'hidden', '' !== $.trim( $rp.val() || '' ) ); }
					$rp.on( 'input change', bbNoPriceSync );
					bbNoPriceSync();
				} );
				<?php } finally { addon_boss_inline_js( ob_get_clean() ); } ?>
			<?php endif; ?>
			<?php if ( ! $sets ) : ?>
				<p class="bb-po-empty" style="padding:0 12px"><em><?php
				echo wp_kses_post(
					sprintf(
						/* translators: %s: a link labelled "the Option sets library" */
						__( 'No option sets exist yet. Start one in %s, where ready-made starting points are a click away.', 'addon-boss' ),
						'<a href="' . esc_url( admin_url( 'admin.php?page=addon-boss-option-sets' ) ) . '">' . esc_html__( 'the Option sets library', 'addon-boss' ) . '</a>'
					)
				);
				?></em></p>
			<?php else : ?>
									<div class="bb-po-list" id="bb-product-option-rows">
						<?php
						// The one arranged list. A GROUP renders as a real container: its header
						// plus a .bb-po-grouplist holding its children, so drag in/out is explicit
						// and moving a group never sweeps up neighbours. Every row gets a unique
						// DOM index; the save reads its data by that index.
						$bb_ri = 0;
						// Field key => label, of every field ALREADY drawn. A rule
						// may only point at one of these, which is what makes a
						// cycle impossible and reads as "you cannot depend on an
						// answer that has not been asked yet".
						$bb_earlier = array();
						foreach ( $config as $bb_lrow ) {
							if ( ( $bb_lrow['row_type'] ?? '' ) === 'group' ) {
								echo '<div class="bb-po-row bb-po-grouprow" data-idx="' . (int) $bb_ri . '">';
								addon_boss_render_product_group_head( $bb_ri, (array) $bb_lrow );
								echo '<div class="bb-po-grouplist" data-empty="' . esc_attr__( 'Drag sets and fields in here', 'addon-boss' ) . '">';
								$bb_ri++;
								foreach ( (array) ( $bb_lrow['children'] ?? array() ) as $bb_child ) {
									addon_boss_render_product_child_row( $bb_ri, (array) $bb_child, $sets, $bb_attached, $bb_earlier );
									addon_boss_note_earlier_field( $bb_child, $bb_earlier );
									$bb_ri++;
								}
								echo '</div></div>';
							} else {
								addon_boss_render_product_child_row( $bb_ri, (array) $bb_lrow, $sets, $bb_attached, $bb_earlier );
								addon_boss_note_earlier_field( $bb_lrow, $bb_earlier );
								$bb_ri++;
							}
						}
						?>
				</div>
				<div class="bb-po-addbar">
						<span class="bb-po-addctl-wrap">
							<select id="bb-po-attach" class="bb-po-addctl bb-po-attach">
								<option value=""><?php esc_html_e( 'Attach an option set…', 'addon-boss' ); ?></option>
								<?php
								// Folder-aware, but only where folders exist: a library
								// with none renders exactly the flat list it always did.
								$bb_by_group = addon_boss_option_sets_by_group();
								$bb_folders  = array_diff( array_keys( $bb_by_group ), array( '' ) );
								foreach ( $bb_by_group as $bb_gname => $bb_gsets ) :
									if ( '' === $bb_gname ) :
										// Loose sets: under a heading of their own only when
										// there are folders for them to stand apart from.
										if ( $bb_folders ) :
											?>
											<optgroup label="<?php esc_attr_e( 'Not in a group', 'addon-boss' ); ?>">
											<?php
										endif;
										foreach ( $bb_gsets as $bb_sid => $bb_sname ) :
											?>
											<option value="<?php echo esc_attr( $bb_sid ); ?>"><?php echo esc_html( $bb_sname ); ?></option>
											<?php
										endforeach;
										if ( $bb_folders ) :
											?>
											</optgroup>
											<?php
										endif;
										continue;
									endif;
									?>
									<optgroup label="<?php echo esc_attr( $bb_gname ); ?>">
										<?php
										// The whole folder in one pick. It carries its members
										// so the row builder never has to ask the server what
										// is in there, and they arrive in library order.
										?>
										<option value="bbfolder:<?php echo esc_attr( $bb_gname ); ?>" data-bb-folder="<?php echo esc_attr( implode( ',', array_keys( $bb_gsets ) ) ); ?>">
											<?php
											printf(
												/* translators: %d: how many option sets the folder holds */
												esc_html( _n( 'Everything in here (%d set)', 'Everything in here (%d sets)', count( $bb_gsets ), 'addon-boss' ) ),
												(int) count( $bb_gsets )
											);
											?>
										</option>
										<?php foreach ( $bb_gsets as $bb_sid => $bb_sname ) : ?>
											<option value="<?php echo esc_attr( $bb_sid ); ?>"><?php echo esc_html( $bb_sname ); ?></option>
										<?php endforeach; ?>
									</optgroup>
								<?php endforeach; ?>
							</select>
							<?php addon_boss_options_addctl_tip( __( 'A reusable list of choices, like Size or Colour.', 'addon-boss' ), 'focus' ); ?>
						</span>
						<?php if ( function_exists( 'addon_boss_personalisation_field_types' ) ) : ?>
						<span class="bb-po-addctl-wrap">
							<select id="bb-pf-add" class="bb-po-addctl bb-pf-add" aria-label="<?php esc_attr_e( 'Add a field customers fill in', 'addon-boss' ); ?>">
								<option value=""><?php esc_html_e( 'Add a field…', 'addon-boss' ); ?></option>
									<?php
									// Every type the registry offers, in the registry's own menu
									// words. This list was once written by hand and fell seven
									// types behind the registry, so half the fields could only be
									// reached by adding a text field and changing its type inside
									// the row (his QA, 2 Sept). It now shares one list with the
									// picker inside each field's row, so neither can drift again.
									foreach ( addon_boss_field_type_menu() as $bb_ftype => $bb_fwords ) :
										?>
									<option value="<?php echo esc_attr( (string) $bb_ftype ); ?>"><?php echo esc_html( $bb_fwords ); ?></option>
									<?php endforeach; ?>
							</select>
							<?php addon_boss_options_addctl_tip( __( 'A box the customer fills in: a name, a message, a logo.', 'addon-boss' ), 'focus' ); ?>
						</span>
						<?php endif; ?>
						<span class="bb-po-addctl-wrap">
							<button type="button" id="bb-po-add-group" class="bb-po-addctl bb-po-add-group"><?php esc_html_e( 'Add a section', 'addon-boss' ); ?></button>
							<?php addon_boss_options_addctl_tip( __( 'Groups options under one title. Can repeat the whole block.', 'addon-boss' ), 'focus' ); ?>
						</span>
						<?php
						// A module with an add-bar entry of its own (the sides
						// manager) prints it here, beside the engine's.
						do_action( 'addon_boss_options_addbar_extra', $product );
						?>
					</div>
					<p class="bb-po-hint bb-po-addhint" data-bb-default=""><?php
						echo esc_html( (string) apply_filters(
							'addon_boss_options_addbar_hint',
							__( 'Add an option set, a field, or a section.', 'addon-boss' ),
							$product
						) );
						?></p>
				<?php
				// A module's own panel sections (the sides manager and its
				// script) render between the add bar and the areas control.
				do_action( 'addon_boss_options_panel_extras', $product );
				?>
				<?php
				// Which named areas this product offers, taken from the reusable
				// library, with its own prices and its own aim. Rendered right after
				// Sides because a position lives ON a side and the wording leans on
				// them being visible just above.
				if ( function_exists( 'addon_boss_product_positions_control' ) ) {
					addon_boss_product_positions_control( $product );
				}
				?>
				<template id="bb-po-group-template"><div class="bb-po-row bb-po-grouprow" data-idx="__PGIDX__"><?php addon_boss_render_product_group_head( '__PGIDX__', array() ); ?><div class="bb-po-grouplist" data-empty="<?php esc_attr_e( 'Drag sets and fields in here', 'addon-boss' ); ?>"></div></div></template>
				<?php if ( function_exists( 'addon_boss_personalisation_field_types' ) ) : ?>
				<template id="bb-pf-row-template"><?php addon_boss_render_product_field_row( '__PFIDX__', array(), array(), $bb_attached, array(), true ); ?></template>
				<?php addon_boss_product_fields_admin_script(); ?>
				<?php endif; ?>
					<p class="bb-po-hint bb-po-foot"><?php esc_html_e( 'Sets are shared: edit one once and every product offering it follows.', 'addon-boss' ); ?></p>
				
				<?php ob_start(); try { ?>
				jQuery( function ( $ ) {
					var next = <?php echo (int) count( $config ); ?>;
					// Set id => name, so a whole folder can build its rows with real
					// names on them without a round trip to the server.
					window.addonBossSetNames = <?php echo wp_json_encode( wp_list_pluck( $sets, 'name' ) ); ?>;
					<?php
					// Field key => the two words that type uses for "there is an
					// answer" and "there is not", so a rule builder can re-word
					// itself the moment its trigger changes.
					$bb_op_words = array();
					foreach ( addon_boss_standalone_product_fields( $product ) as $bb_fd ) {
						$bb_fkey = (string) ( $bb_fd['key'] ?? '' );
						if ( '' === $bb_fkey ) {
							continue;
						}
						$bb_w                   = addon_boss_field_op_words( (string) ( $bb_fd['type'] ?? '' ) );
						$bb_op_words[ $bb_fkey ] = array( $bb_w['filled'], $bb_w['empty'] );
					}
					?>
					window.addonBossFieldOps = <?php echo wp_json_encode( $bb_op_words ); ?>;
					
					// The rows fold like every other family row; controls do not toggle.
					$( '#bundle_boss_options_panel' ).on( 'click', '.bb-po-line', function ( e ) {
						if ( $( e.target ).closest( 'select, button, input, label, a, .bb-seg' ).length ) {
							return;
						}
						var body = $( this ).siblings( '.bb-po-body' )[ 0 ];
						if ( body ) {
							body.hidden = ! body.hidden;
							$( this ).find( '.bb-po-caret' ).html( body.hidden ? '&#9656;' : '&#9662;' );
						}
					} );
					// Nested drag: the top-level list and every group's list are connected, so
					// a row drags between them. A group header stays a top-level item and never
					// nests inside another group. The container IS the boundary, so moving a
					// group carries its members and can never sweep up neighbours.
					var bbSortOpts = {
						handle: '.bb-po-line',
						items: '> .bb-po-row',
						distance: 6,
						cancel: 'select, button, input, textarea, a, label, .bb-seg',
						placeholder: 'bb-po-placeholder',
						forcePlaceholderSize: true,
						connectWith: '.bb-po-list, .bb-po-grouplist',
						over: function () { $( this ).closest( '.bb-po-grouprow' ).addClass( 'bb-po-groupactive' ); },
						out: function () { $( '.bb-po-grouprow' ).removeClass( 'bb-po-groupactive' ); },
						stop: function () { $( '.bb-po-grouprow' ).removeClass( 'bb-po-groupactive' ); },
						receive: function ( e, ui ) {
							if ( ui.item.hasClass( 'bb-po-grouprow' ) && $( this ).hasClass( 'bb-po-grouplist' ) ) { $( ui.sender ).sortable( 'cancel' ); }
						}
					};
					function bbMakeSortable( el ) { if ( el && $.fn.sortable && ! $( el ).hasClass( 'ui-sortable' ) ) { $( el ).sortable( bbSortOpts ); } }
					function bbInitSortables() { bbMakeSortable( document.getElementById( 'bb-product-option-rows' ) ); $( '.bb-po-grouplist' ).each( function () { bbMakeSortable( this ); } ); }
					bbInitSortables();
					// On save, serialise the DOM tree into bb_po_order[] with group / gend
					// markers so the exact nesting is stored.
					function bbRowKey( $el ) { return $el.children( '.bb-po-line' ).find( '.bb-po-orderkey' ).val() || ''; }
					$( '#bundle_boss_options_panel' ).closest( 'form' ).on( 'submit', function () {
						var $list = $( '#bb-product-option-rows' );
						$list.find( 'input[name="bb_po_order[]"]' ).remove();
						var seq = [];
						$list.children( '.bb-po-row' ).each( function () {
							var $el = $( this );
							seq.push( bbRowKey( $el ) );
							if ( $el.hasClass( 'bb-po-grouprow' ) ) {
								$el.children( '.bb-po-grouplist' ).children( '.bb-po-row' ).each( function () { seq.push( bbRowKey( $( this ) ) ); } );
								seq.push( 'gend-' + bbRowKey( $el ).replace( 'group-', '' ) );
							}
						} );
						var frag = document.createDocumentFragment();
						seq.forEach( function ( k ) { var inp = document.createElement( 'input' ); inp.type = 'hidden'; inp.name = 'bb_po_order[]'; inp.value = k; frag.appendChild( inp ); } );
						$list[0].appendChild( frag );
					} );
					// Add a group: append a fresh section header to name, then drag
					// sets and fields beneath it.
					var pgNext = 200000;
					$( '#bb-po-add-group' ).on( 'click', function () {
						var tmpl = document.getElementById( 'bb-po-group-template' );
						if ( ! tmpl ) { return; }
						var row = $( tmpl.innerHTML.replace( /__PGIDX__/g, String( pgNext ) ) );
						$( '#bb-product-option-rows' ).append( row );
						row.find( '.bb-po-grouplabel' ).trigger( 'focus' );
						bbMakeSortable( row.find( '.bb-po-grouplist' )[0] ); // connect the new group's drop zone
						pgNext++;
					} );
					// Searchable, consistent add controls: hundreds of option sets stay
					// usable. select2 (loaded on the product screen) powers the search;
					// the field picker keeps its short list with no search box.
					// A folder is found by ITS name, not only by its members'.
					//
					// select2 matches an option's own text. A folder's heading is an
					// optgroup label, which no browser lets anyone select, and the
					// "Everything in here" row inside it does not repeat the folder's
					// name. So searching "Sweatshirt" showed the heading with the one
					// row that answers it filtered out, and the only way through was to
					// clear the search and scroll (a founding customer's find, 7 Sept).
					//
					// A folder whose name matches now keeps ALL of its rows, so the
					// search answers both questions a merchant asks: which set, and
					// which folder.
					function bbFolderAwareMatch( params, data ) {
						var term = $.trim( ( params && params.term ) || '' ).toLowerCase();
						if ( '' === term ) { return data; }
						var mine = ( data.text || '' ).toLowerCase().indexOf( term ) > -1;
						if ( ! data.children ) { return mine ? data : null; }
						if ( mine ) { return data; } // the folder itself, whole
						var kept = [];
						for ( var k = 0; k < data.children.length; k++ ) {
							if ( ( data.children[ k ].text || '' ).toLowerCase().indexOf( term ) > -1 ) {
								kept.push( data.children[ k ] );
							}
						}
						if ( ! kept.length ) { return null; }
						// A shallow copy: handing back the original with its children
						// replaced would edit the list every later keystroke filters.
						var few = $.extend( {}, data );
						few.children = kept;
						return few;
					}
					if ( $.fn.select2 ) {
						$( '#bb-po-attach' ).select2( { width: '205px', placeholder: $( '#bb-po-attach option:first' ).text(), dropdownCssClass: 'bb-po-dropdown', matcher: bbFolderAwareMatch } );
						if ( $( '#bb-pf-add' ).length ) {
							$( '#bb-pf-add' ).select2( { width: '168px', placeholder: $( '#bb-pf-add option:first' ).text(), minimumResultsForSearch: Infinity, dropdownCssClass: 'bb-po-dropdown' } );
						}
					}
					// One row per set, whether it arrived alone or with its folder.
					function bbAttachSet( setId, label, folder ) {
						if ( ! setId ) { return false; }
						// Already here: two rows for one set share a field name, so the
						// second silently eats the first. Say so on the row that exists
						// rather than making a broken one.
						var $have = $( '#bb-product-option-rows' ).find( 'input[name^="bb_po_set"]' ).filter( function () {
							return $( this ).val() === setId;
						} ).first();
						if ( $have.length ) {
							var $seen = $have.closest( '.bb-po-row' );
							$seen.addClass( 'bb-po-already' );
							window.setTimeout( function () { $seen.removeClass( 'bb-po-already' ); }, 1400 );
							return false;
						}
						var row = $(
							'<div class="bb-po-row"><div class="bb-po-line"><span class="bb-po-caret" aria-hidden="true">&#9656;</span><b></b>' +
							'<a class="bb-po-editset" target="_blank" rel="noopener"><?php echo esc_js( __( 'Edit set', 'addon-boss' ) ); ?><span aria-hidden="true">&#8599;</span></a>' +
							'<span class="bb-po-note"><?php echo esc_js( __( 'Save the product to edit its charges.', 'addon-boss' ) ); ?></span>' +
							'<select class="bb-seg-auto bb-po-req" name="bb_po_required[' + next + ']">' +
							'<option value=""><?php echo esc_js( __( 'Optional', 'addon-boss' ) ); ?></option>' +
							'<option value="1" selected><?php echo esc_js( __( 'Required', 'addon-boss' ) ); ?></option></select>' +
							'<button type="button" class="bb-po-remove" aria-label="<?php echo esc_attr( esc_js( __( 'Remove this set from the product', 'addon-boss' ) ) ); ?>">&#10005;</button>' +
							'<input type="hidden" name="bb_po_set[' + next + ']">' +
							'<input type="hidden" class="bb-po-fromgroup" name="bb_po_fromgroup[' + next + ']">' +
							'<input type="hidden" class="bb-po-orderkey" value="set-' + next + '"></div></div>'
						);
						row.find( 'b' ).text( label );
						row.find( '.bb-po-editset' ).attr( 'href', '<?php echo esc_js( admin_url( 'admin.php?page=addon-boss-option-sets&set=' ) ); ?>' + encodeURIComponent( setId ) );
						// Set ONLY the set-id input; the .bb-po-orderkey carrier must keep
						// its "set-<n>" value or the save drops the row (it fails the
						// "set-" prefix check). Blanket-setting every hidden input here was
						// the 4.16.0 regression that stopped newly attached sets saving.
						row.find( 'input[name^="bb_po_set"]' ).val( setId );
						row.find( '.bb-po-fromgroup' ).val( folder || '' );
						// A new set lands in the ungrouped area too, before any group.
						var $poRows = $( '#bb-product-option-rows' ), $poG = $poRows.children( '.bb-po-grouprow' ).first();
						if ( $poG.length ) { $poG.before( row ); } else { $poRows.append( row ); }
						var bbSegs2 = window.addonBossBuildSegs || window.bundleBossBuildSegs; // theirs, when BundleBoss's admin.js was the one loaded
						if ( bbSegs2 ) {
							bbSegs2( row );
						}
						next++;
						return true;
					}
					$( '#bb-po-attach' ).on( 'change', function () {
						var sel = $( this ), val = sel.val();
						if ( ! val ) {
							return;
						}
						var $opt = sel.find( 'option:selected' );
						if ( val.indexOf( 'bbfolder:' ) === 0 ) {
							// The whole folder. Its members ride on the option, so the
							// order they were arranged in is the order they arrive in,
							// and anything already on the product is left alone.
							var folder = val.slice( 9 );
							var ids = ( $opt.attr( 'data-bb-folder' ) || '' ).split( ',' );
							var names = window.addonBossSetNames || {};
							$.each( ids, function ( i, id ) {
								id = $.trim( id );
								if ( id ) { bbAttachSet( id, names[ id ] || id, folder ); }
							} );
						} else {
							bbAttachSet( val, $opt.text(), $opt.closest( 'optgroup' ).attr( 'label' ) || '' );
						}
						sel.val( '' ).trigger( 'change.select2' );
					} );
					$( document ).on( 'click', '.bb-po-remove', function () {
						var $row = $( this ).closest( '.bb-po-row' );
						if ( ! $row.hasClass( 'bb-po-grouprow' ) ) { $row.remove(); return; }
						var $items = $row.children( '.bb-po-grouplist' ).children( '.bb-po-row' );
						if ( ! $items.length ) { $row.remove(); return; } // an empty group just goes.
						bbGroupDelete( $row, $items.length ); // non-empty: ask before losing work.
					} );
					var bbGL = {
						sub: <?php echo wp_json_encode( __( 'What should happen to the items inside?', 'addon-boss' ) ); ?>,
						keep: <?php echo wp_json_encode( __( 'Keep the items, remove the group only', 'addon-boss' ) ); ?>,
						del: <?php echo wp_json_encode( __( 'Delete the group and its items', 'addon-boss' ) ); ?>,
						cancel: <?php echo wp_json_encode( __( 'Cancel', 'addon-boss' ) ); ?>,
						group: <?php echo wp_json_encode( __( 'This group', 'addon-boss' ) ); ?>
					};
					function bbGroupDelete( $group, n ) {
						var name = $.trim( $group.find( '.bb-po-grouplabel' ).val() || '' ) || bbGL.group;
						var $ov = $( '<div class="bb-po-modal-ov"></div>' );
						var $m = $( '<div class="bb-po-modal" role="dialog" aria-modal="true"></div>' ).appendTo( $ov );
						$( '<p class="bb-po-modal-msg"></p>' ).text( '“' + name + '”' ).appendTo( $m );
						$( '<p class="bb-po-modal-sub"></p>' ).text( bbGL.sub ).appendTo( $m );
						var $a = $( '<div class="bb-po-modal-acts"></div>' ).appendTo( $m );
						var $keep = $( '<button type="button" class="button bb-cta bb-po-modal-keep"></button>' ).text( bbGL.keep ).appendTo( $a );
						$( '<button type="button" class="button bb-po-modal-del"></button>' ).text( bbGL.del ).appendTo( $a );
						$( '<button type="button" class="button bb-po-modal-cancel"></button>' ).text( bbGL.cancel ).appendTo( $a );
						function close() { $ov.remove(); $( document ).off( 'keydown.bbgd' ); }
						$a.on( 'click', '.bb-po-modal-keep', function () {
							$group.after( $group.children( '.bb-po-grouplist' ).children( '.bb-po-row' ) ); // extract to top level
							$group.remove();
							if ( $.fn.sortable ) { $( '#bb-product-option-rows' ).sortable( 'refresh' ); }
							close();
						} );
						$a.on( 'click', '.bb-po-modal-del', function () { $group.remove(); close(); } );
						$a.on( 'click', '.bb-po-modal-cancel', close );
						$ov.on( 'click', function ( e ) { if ( e.target === $ov[0] ) { close(); } } );
						$( document ).on( 'keydown.bbgd', function ( e ) { if ( e.key === 'Escape' ) { close(); } } );
						$( 'body' ).append( $ov );
						$keep.trigger( 'focus' );
					}

				} );
				<?php } finally { addon_boss_inline_js( ob_get_clean() ); } ?>
			<?php endif; ?>
		</div>
	</div>
	<?php
}

// =================================================================
// ADMIN (cont.): option-image suggest AJAX, the product-options save handler,
// and the product-options tab chrome (icon CSS + chip expander). Lifted from
// slot-options at the split.
// =================================================================


/**
 * Save the panel via Woo's product-object hook (Woo persists once, after).
 *
 * The nonce is verified here rather than relied upon. WooCommerce checks this
 * same nonce in its product-data metabox before it fires the hook we are on, so
 * nothing that reaches this function could have skipped it, which makes the
 * check below free in production. What it buys is that the verification is
 * visible IN the function that reads the request, instead of being an assertion
 * about a caller. Every superglobal read after it is provably behind a verified
 * nonce.
 */
function addon_boss_product_options_save( $product ): void {
	if ( ! isset( $_POST['woocommerce_meta_nonce'] )
		|| ! wp_verify_nonce( sanitize_key( wp_unslash( $_POST['woocommerce_meta_nonce'] ) ), 'woocommerce_save_data' ) ) {
		return;
	}
	// The last clause runs the one-time artwork-box migration on any product
	// still carrying the retired upload config.
	if ( ! $product instanceof WC_Product || ( ! isset( $_POST['bb_po_set'] ) && ! isset( $_POST['bb_pf'] ) && ! isset( $_POST['bb_po_group_label'] ) && ! isset( $_POST['bb_po_upload_mode'] ) && ! $product->get_meta( ADDON_BOSS_STANDALONE_UPLOAD_META ) ) ) {
		return;
	}
	// Every panel input is read ONCE, unslashed and sanitised here at the
	// boundary, into plain locals the builders below close over. Flat scalar
	// arrays (ids, labels, keys, rule values) take sanitize_text_field per
	// leaf; attachment ids take absint; the field definitions take
	// wp_kses_post per leaf, because an info block's content is legitimate
	// markup that a text sanitiser would destroy. The structured sanitisers
	// further down then enforce shape, types and money on the result, exactly
	// as before; nothing below this block touches the request again.
	$raw          = array();
	$set_rows     = isset( $_POST['bb_po_set'] ) ? array_map( 'sanitize_text_field', wp_unslash( (array) $_POST['bb_po_set'] ) ) : array();
	$field_rows   = isset( $_POST['bb_pf'] ) ? map_deep( wp_unslash( (array) $_POST['bb_pf'] ), 'wp_kses_post' ) : array();
	$group_lbls   = isset( $_POST['bb_po_group_label'] ) ? array_map( 'sanitize_text_field', wp_unslash( (array) $_POST['bb_po_group_label'] ) ) : array();
	$group_rpt    = isset( $_POST['bb_po_group_repeat'] ) ? array_map( 'sanitize_text_field', wp_unslash( (array) $_POST['bb_po_group_repeat'] ) ) : array();
	$group_rmax   = isset( $_POST['bb_po_group_repeat_max'] ) ? array_map( 'absint', wp_unslash( (array) $_POST['bb_po_group_repeat_max'] ) ) : array();
	$group_rlbl   = isset( $_POST['bb_po_group_repeat_label'] ) ? array_map( 'sanitize_text_field', wp_unslash( (array) $_POST['bb_po_group_repeat_label'] ) ) : array();
	$set_required = isset( $_POST['bb_po_required'] ) ? array_map( 'absint', wp_unslash( (array) $_POST['bb_po_required'] ) ) : array();
	$set_deltas   = isset( $_POST['bb_po_delta'] ) ? map_deep( wp_unslash( (array) $_POST['bb_po_delta'] ), 'sanitize_text_field' ) : array();
	$set_images   = isset( $_POST['bb_po_image'] ) ? map_deep( wp_unslash( (array) $_POST['bb_po_image'] ), 'absint' ) : array();
	// A measured set's rate for THIS product, one per row; empty means the
	// set's own rate. The row sanitiser owns the number rules.
	$set_rate     = isset( $_POST['bb_po_rate'] ) ? array_map( 'sanitize_text_field', wp_unslash( (array) $_POST['bb_po_rate'] ) ) : array();
	// Which choices this product refuses: set index => option key => 1. Absent
	// means nothing refused, which is what a form from any older build (or one
	// saved before this control existed) posts, so a save can never invent a
	// restriction the merchant did not ask for.
	$set_hide     = isset( $_POST['bb_po_hide'] ) ? map_deep( wp_unslash( (array) $_POST['bb_po_hide'] ), 'absint' ) : array();
	$set_fromgrp  = isset( $_POST['bb_po_fromgroup'] ) ? array_map( 'sanitize_text_field', wp_unslash( (array) $_POST['bb_po_fromgroup'] ) ) : array();
	$set_when_set = isset( $_POST['bb_po_when_set'] ) ? array_map( 'sanitize_text_field', wp_unslash( (array) $_POST['bb_po_when_set'] ) ) : array();
	$set_when_is  = isset( $_POST['bb_po_when_is'] ) ? array_map( 'sanitize_text_field', wp_unslash( (array) $_POST['bb_po_when_is'] ) ) : array();
	// The builder posts a whole rule as ONE json field per row; the shape
	// mapper is its sanitiser (whitelisted operators, bounded lists, every
	// string through sanitize_text_field). The scattered per-condition names
	// below stay readable for older forms and hidden carriers.
	// phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- decoded and sanitised leaf by leaf in addon_boss_when_to_groups().
	$set_when_json = isset( $_POST['bb_po_when_json'] ) ? wp_unslash( (array) $_POST['bb_po_when_json'] ) : array();
	// phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- decoded and sanitised leaf by leaf in addon_boss_when_to_groups().
	$pf_when_json  = isset( $_POST['bb_pf_when_json'] ) ? wp_unslash( (array) $_POST['bb_pf_when_json'] ) : array();
	// One posted json rule, read to the storage shape, or null when the row
	// posted none (an older form): the caller then falls back to the scattered
	// names. An unreadable json is an EMPTY rule rather than a fallback,
	// because the builder always posts it; half of it surviving as a stale
	// scattered-field rule would resurrect what the merchant just deleted.
	$bb_when_from_json = static function ( $i, array $bag ) {
		if ( ! isset( $bag[ $i ] ) || ! is_string( $bag[ $i ] ) ) {
			return null;
		}
		$bb_decoded = json_decode( (string) $bag[ $i ], true );
		return addon_boss_when_store_shape( addon_boss_when_to_groups( is_array( $bb_decoded ) ? $bb_decoded : array() ) );
	};
	$pf_when_set  = isset( $_POST['bb_pf_when_set'] ) ? array_map( 'sanitize_text_field', wp_unslash( (array) $_POST['bb_pf_when_set'] ) ) : array();
	$pf_when_is   = isset( $_POST['bb_pf_when_is'] ) ? array_map( 'sanitize_text_field', wp_unslash( (array) $_POST['bb_pf_when_is'] ) ) : array();
	$pf_when_op   = isset( $_POST['bb_pf_when_op'] ) ? array_map( 'sanitize_text_field', wp_unslash( (array) $_POST['bb_pf_when_op'] ) ) : array();
	$pf_when_more = isset( $_POST['bb_pf_when_more'] ) ? map_deep( wp_unslash( (array) $_POST['bb_pf_when_more'] ), 'sanitize_text_field' ) : array();
	$pf_when_match = isset( $_POST['bb_pf_when_match'] ) ? array_map( 'sanitize_text_field', wp_unslash( (array) $_POST['bb_pf_when_match'] ) ) : array();
	// Show or hide. Absent is show, which is what every form built before this
	// posts and what every rule already stored means.
	$pf_when_act   = isset( $_POST['bb_pf_when_act'] ) ? array_map( 'sanitize_text_field', wp_unslash( (array) $_POST['bb_pf_when_act'] ) ) : array();
	// The merchant's arrangement rides bb_po_order[]: one key per row in DOM
	// order, with group-<i> / gend-<i> markers bounding each group's children,
	// so the exact nesting is stored (a group is a real container). An older
	// form with no order keys falls back to the flat numeric index.
	$order     = isset( $_POST['bb_po_order'] ) ? array_map( 'sanitize_text_field', wp_unslash( (array) $_POST['bb_po_order'] ) ) : array();
	$cur_group = null; // index into $raw of the currently open group, or null.
	$build_set = static function ( $i ) use ( $set_rows, $set_required, $set_deltas, $set_images, $set_hide, $set_rate, $set_fromgrp, $set_when_set, $set_when_is, $set_when_json, $bb_when_from_json ) {
		$bb_when = $bb_when_from_json( $i, $set_when_json );
		if ( null === $bb_when ) {
			$bb_when = array(
				'set' => (string) ( $set_when_set[ $i ] ?? '' ),
				'is'  => (string) ( $set_when_is[ $i ] ?? '' ),
			);
		}
		// Modules read their own per-row fields off the same form by index, so
		// a row never posts a control nothing collects.
		return (array) apply_filters( 'addon_boss_collect_set_row', array(
			'set'        => (string) $set_rows[ $i ],
			'required'   => ! empty( $set_required[ $i ] ),
			'deltas'     => (array) ( $set_deltas[ $i ] ?? array() ),
			'images'     => (array) ( $set_images[ $i ] ?? array() ),
			'hide'       => (array) ( $set_hide[ $i ] ?? array() ),
			'rate'       => (string) ( $set_rate[ $i ] ?? '' ),
			'from_group' => (string) ( $set_fromgrp[ $i ] ?? '' ),
			'when'       => $bb_when,
		), (int) $i );
	};
	$build_field = static function ( $i ) use ( $field_rows, $pf_when_set, $pf_when_is, $pf_when_op, $pf_when_more, $pf_when_match, $pf_when_act, $pf_when_json, $bb_when_from_json ) {
		// The builder's whole rule rides one json field when present.
		$bb_json_when = $bb_when_from_json( $i, $pf_when_json );
		if ( null !== $bb_json_when ) {
			return array(
				'row_type' => 'field',
				'field'    => (array) $field_rows[ $i ],
				'when'     => $bb_json_when,
			);
		}
		// The first condition still posts in the original two fields, so an older
		// form (or a browser with the extras stripped) saves exactly as it did.
		// Any further conditions ride bb_pf_when_more, and the whole lot is handed
		// to the canonical normaliser.
		$first_set = (string) ( $pf_when_set[ $i ] ?? '' );
		$first_is  = (string) ( $pf_when_is[ $i ] ?? '' );
		$first_op  = in_array( (string) ( $pf_when_op[ $i ] ?? '' ), array( 'is', 'is_not', 'filled', 'empty' ), true ) ? (string) $pf_when_op[ $i ] : 'is';
		// The trigger dropdown carries sets and fields in one list; a field's
		// entry wears the prefix, so one control posts either kind.
		$bb_cond = static function ( string $trigger, string $op, string $value ): array {
			$bb_field = 0 === strpos( $trigger, ADDON_BOSS_FIELD_RULE_KEY )
				? substr( $trigger, strlen( ADDON_BOSS_FIELD_RULE_KEY ) )
				: '';
			return array(
				'set'   => '' === $bb_field ? $trigger : '',
				'field' => $bb_field,
				'op'    => in_array( $op, array( 'is', 'is_not', 'filled', 'empty' ), true ) ? $op : 'is',
				'value' => $value,
			);
		};

		$conds = array();
		if ( '' !== $first_set ) {
			$conds[] = $bb_cond( $first_set, $first_op, $first_is );
		}
		foreach ( (array) ( $pf_when_more[ $i ] ?? array() ) as $extra ) {
			if ( ! is_array( $extra ) ) {
				continue;
			}
			$set = (string) ( $extra['set'] ?? '' );
			if ( '' === $set ) {
				continue; // a half-finished row is dropped rather than saved broken
			}
			$conds[] = $bb_cond( $set, (string) ( $extra['op'] ?? '' ), (string) ( $extra['value'] ?? '' ) );
		}
		$bb_act = ( 'hide' === (string) ( $pf_when_act[ $i ] ?? '' ) ) ? 'hide' : 'show';
		// One plain SHOW condition on a set stores in the legacy shape, so
		// nothing about an ordinary single-rule field changes on disk.
		if ( 1 === count( $conds ) && 'is' === $conds[0]['op'] && '' === $conds[0]['field'] && 'show' === $bb_act ) {
			$when = array( 'set' => $conds[0]['set'], 'is' => $conds[0]['value'] );
		} elseif ( $conds ) {
			$when = array(
				'match'      => ( 'any' === (string) ( $pf_when_match[ $i ] ?? 'all' ) ) ? 'any' : 'all',
				'conditions' => $conds,
			);
			if ( 'hide' === $bb_act ) {
				$when = array( 'act' => 'hide' ) + $when;
			}
		} else {
			$when = array();
		}

		return array(
			'row_type' => 'field',
			'field'    => (array) $field_rows[ $i ],
			'when'     => $when,
		);
	};
	if ( $order ) {
		foreach ( $order as $okey ) {
			$okey = sanitize_text_field( (string) $okey );
			if ( 0 === strpos( $okey, 'gend-' ) ) {
				$cur_group = null; // close the current group container.
				continue;
			}
			if ( 0 === strpos( $okey, 'group-' ) && isset( $group_lbls[ substr( $okey, 6 ) ] ) ) {
				$gi        = substr( $okey, 6 );
				$raw[]     = array(
					'row_type'     => 'group',
					'label'        => sanitize_text_field( (string) ( $group_lbls[ $gi ] ?? '' ) ),
					'children'     => array(),
					// The group's repeat panel (or its hidden carriers); the
					// structured sanitiser whitelists and bounds these below.
					'repeat'       => (string) ( $group_rpt[ $gi ] ?? '' ),
					'repeat_max'   => (int) ( $group_rmax[ $gi ] ?? 0 ),
					'repeat_label' => (string) ( $group_rlbl[ $gi ] ?? '' ),
				);
				$cur_group = count( $raw ) - 1;
				continue;
			}
			$rowdata = null;
			if ( 0 === strpos( $okey, 'set-' ) && isset( $set_rows[ substr( $okey, 4 ) ] ) ) {
				$rowdata = $build_set( substr( $okey, 4 ) );
			} elseif ( 0 === strpos( $okey, 'field-' ) && isset( $field_rows[ substr( $okey, 6 ) ] ) ) {
				$rowdata = $build_field( substr( $okey, 6 ) );
			}
			if ( null === $rowdata ) {
				continue;
			}
			if ( null !== $cur_group ) {
				$raw[ $cur_group ]['children'][] = $rowdata; // a child of the open group.
			} else {
				$raw[] = $rowdata; // top-level, ungrouped.
			}
		}
	} else {
		// No order keys (an old cached form): flat numeric index, no groups.
		$indices = array_keys( $set_rows + $field_rows );
		sort( $indices, SORT_NUMERIC );
		foreach ( $indices as $i ) {
			$raw[] = isset( $set_rows[ $i ] ) ? $build_set( $i ) : $build_field( $i );
		}
	}
	// Fold a retired artwork box into a file field, once. The dedicated box is
	// gone from the admin; a product that still carries the old upload config
	// keeps working via back-compat read until it is next saved, when the
	// config converts to a file-field row and the old meta is dropped. This is
	// non-destructive: no bulk rewrite runs, only this per-product pass, and
	// the file field carries the same label, required-ness, template link and
	// reveal rule the box had.
	$bb_old_upload = $product->get_meta( ADDON_BOSS_STANDALONE_UPLOAD_META );
	if ( is_array( $bb_old_upload ) && '' !== (string) ( $bb_old_upload['mode'] ?? '' ) ) {
		$raw[] = array(
			'row_type' => 'field',
			'field'    => array(
				'type'      => 'file',
				'label'     => '' !== (string) ( $bb_old_upload['label'] ?? '' ) ? (string) $bb_old_upload['label'] : __( 'Your artwork', 'addon-boss' ),
				'require'   => 'required' === ( $bb_old_upload['mode'] ?? '' ) ? 'always' : '',
				'template'  => (string) ( $bb_old_upload['template'] ?? '' ),
				'filetypes' => (string) ( $bb_old_upload['filetypes'] ?? '' ),
			),
			'when'     => is_array( $bb_old_upload['when'] ?? null ) ? $bb_old_upload['when'] : array(),
		);
		$product->delete_meta_data( ADDON_BOSS_STANDALONE_UPLOAD_META );
	}
	// How the groups are arranged on the page. Read only when the control was
	// actually on the screen that posted, so a surface without the picker can
	// never blank a choice made somewhere that has it.
	if ( isset( $_POST['bb_options_layout'] ) ) {
		addon_boss_save_options_layout( $product, sanitize_key( wp_unslash( $_POST['bb_options_layout'] ) ) );
	}
	$clean = addon_boss_sanitize_product_option_config( $raw );
	if ( $clean ) {
		$product->update_meta_data( ADDON_BOSS_PRODUCT_OPTIONS_META, $clean );
	} else {
		$product->delete_meta_data( ADDON_BOSS_PRODUCT_OPTIONS_META );
	}
}

// The product-tab icon rule used to live here. It was dead: it was guarded on
// function_exists( 'addon_boss_menu_icon' ), and no such function exists in this
// plugin or in BundleBoss, so the whole thing returned at the first line and had
// never once run. What it left behind was a phpcs:ignore sitting on an echo into
// a CSS url(), a context where neither esc_attr nor esc_url is the right
// escaper, waiting for someone to define that name and make it live.
//
// Deleted rather than repointed. The coral square in admin.css was always doing
// this job; nothing on screen changes.

add_action( 'admin_footer', 'addon_boss_option_chip_expander_js' );

function addon_boss_option_chip_expander_js(): void {
	$screen = function_exists( 'get_current_screen' ) ? get_current_screen() : null;
	if ( ! $screen ) {
		return;
	}
	$is_ours = 'product' === $screen->id
		|| false !== strpos( (string) $screen->id, 'addon-boss-option-sets' );
	if ( ! $is_ours ) {
		return;
	}
	?>
	<?php ob_start(); try { ?>
	jQuery( function ( $ ) {
		$( document ).on( 'click', 'button.bb-opt-more', function () {
			var b = $( this ), row = b.closest( '.bb-chiprow' );
			var open = row.toggleClass( 'is-expanded' ).hasClass( 'is-expanded' );
			b.attr( 'aria-expanded', open ? 'true' : 'false' )
				.text( open ? b.data( 'lessLabel' ) : b.data( 'moreLabel' ) );
		} );
	} );
	<?php } finally { addon_boss_inline_js( ob_get_clean() ); } ?>
	<?php
}

// -----------------------------------------------------------------
// GDPR: export and erase what a shopper typed.
//
// This plugin has custom fields, so it stores names to engrave and messages to
// print. That is personal data by any reading, and readme.txt tells people that
// a data request returns it and an erase request deletes it, so the handlers
// belong here, in the plugin proper, next to the code that wrote the data.
//
// The one call that touches a file on disk is guarded on the upload module,
// since only a build with uploads has a file to find. Nothing else here needs
// anything beyond the order metas it walks.
//
// The metas keep their historical `_bundle_boss_*` key names on purpose, so
// orders taken before the plugins split stay covered.
// -----------------------------------------------------------------

/**
 * Delete a stored upload if this build has the module that can resolve one.
 *
 * A multi-file field stores its references comma joined in a single string, so
 * split before resolving. Passing the joined string straight through resolves
 * to nothing, which silently left every file of a multi-file field on disk
 * after a valid erasure request. The gathering side has always split; this side
 * did not.
 */
function addon_boss_privacy_forget_upload( string $ref ): void {
	if ( '' === $ref || ! function_exists( 'addon_boss_standalone_delete_upload_file' ) ) {
		return;
	}
	foreach ( explode( ',', $ref ) as $one ) {
		$one = trim( $one );
		if ( '' !== $one ) {
			addon_boss_standalone_delete_upload_file( $one );
		}
	}
}

add_filter( 'wp_privacy_personal_data_exporters', 'addon_boss_standalone_register_exporter' );

function addon_boss_standalone_register_exporter( $exporters ) {
	$exporters['addon-boss-standalone'] = array(
		'exporter_friendly_name' => __( 'Product options and personalisation', 'addon-boss' ),
		'callback'               => 'addon_boss_standalone_exporter',
	);
	return $exporters;
}

function addon_boss_standalone_exporter( $email, $page = 1 ) {
	$orders = wc_get_orders(
		array(
			'billing_email' => $email,
			'limit'         => 20,
			'paged'         => max( 1, (int) $page ),
			'type'          => 'shop_order',
			'orderby'       => 'ID',
			'order'         => 'ASC',
		)
	);
	$export = array();
	foreach ( (array) $orders as $order ) {
		foreach ( $order->get_items() as $item ) {
			$rows = addon_boss_standalone_privacy_rows( $item );
			if ( $rows ) {
				$export[] = array(
					'group_id'    => 'addon-boss-standalone',
					'group_label' => __( 'Product options and personalisation', 'addon-boss' ),
					'item_id'     => 'order-' . $order->get_id(),
					'data'        => $rows,
				);
			}
		}
	}
	return array(
		'data' => $export,
		'done' => count( (array) $orders ) < 20,
	);
}

/**
 * Flatten one order line's personal data (entered fields, option picks, and on
 * a build with the upload module, the upload and chosen areas) into WordPress exporter rows.
 */
function addon_boss_standalone_privacy_rows( $item ): array {
	$rows = array();

	$up = $item->get_meta( ADDON_BOSS_STANDALONE_UPLOAD_META );
	if ( is_array( $up ) && '' !== (string) ( $up['name'] ?? '' ) ) {
		$value = (string) $up['name'];
		if ( ! empty( $up['url'] ) ) {
			$value .= ' (' . $up['url'] . ')';
		}
		$rows[] = array(
			'name'  => '' !== (string) ( $up['label'] ?? '' ) ? (string) $up['label'] : __( 'Your file', 'addon-boss' ),
			'value' => $value,
		);
	}

	foreach ( (array) $item->get_meta( ADDON_BOSS_PRODUCT_FIELDS_META ) as $f ) {
		$disp = (string) ( $f['display'] ?? '' );
		if ( '' === $disp ) {
			continue;
		}
		if ( ! empty( $f['url'] ) ) {
			$disp .= ' (' . $f['url'] . ')';
		}
		$rows[] = array(
			'name'  => '' !== (string) ( $f['label'] ?? '' ) ? (string) $f['label'] : __( 'Detail', 'addon-boss' ),
			'value' => $disp,
		);
	}

	foreach ( (array) $item->get_meta( '_bundle_boss_standalone_options' ) as $s ) {
		$label = (string) ( $s['label'] ?? '' );
		if ( '' === $label ) {
			continue;
		}
		$rows[] = array(
			'name'  => '' !== (string) ( $s['set_name'] ?? '' ) ? (string) $s['set_name'] : __( 'Option', 'addon-boss' ),
			'value' => $label,
		);
	}

	// Chosen areas. A shopper's own logo and the words they asked to have
	// printed are as personal as anything above, and were being left out of
	// both the export and the erasure.
	foreach ( (array) $item->get_meta( '_bundle_boss_positions' ) as $pos ) {
		$parts = array();
		if ( '' !== (string) ( $pos['text'] ?? '' ) ) {
			$parts[] = (string) $pos['text'];
		}
		if ( '' !== (string) ( $pos['file_name'] ?? '' ) ) {
			$file = (string) $pos['file_name'];
			if ( ! empty( $pos['file_url'] ) ) {
				$file .= ' (' . $pos['file_url'] . ')';
			}
			$parts[] = $file;
		}
		if ( ! $parts ) {
			continue;
		}
		$rows[] = array(
			'name'  => '' !== (string) ( $pos['name'] ?? '' ) ? (string) $pos['name'] : __( 'Print area', 'addon-boss' ),
			'value' => implode( ', ', $parts ),
		);
	}

	return $rows;
}

add_filter( 'wp_privacy_personal_data_erasers', 'addon_boss_standalone_register_eraser' );

function addon_boss_standalone_register_eraser( $erasers ) {
	$erasers['addon-boss-standalone'] = array(
		'eraser_friendly_name' => __( 'Product options and personalisation', 'addon-boss' ),
		'callback'             => 'addon_boss_standalone_eraser',
	);
	return $erasers;
}

function addon_boss_standalone_eraser( $email, $page = 1 ) {
	$orders  = wc_get_orders(
		array(
			'billing_email' => $email,
			'limit'         => 20,
			'paged'         => max( 1, (int) $page ),
			'type'          => 'shop_order',
			'orderby'       => 'ID',
			'order'         => 'ASC',
		)
	);
	$removed = false;
	foreach ( (array) $orders as $order ) {
		foreach ( $order->get_items() as $item ) {
			$changed = false;

			// The standalone artwork upload: delete the file, drop the meta and
			// its readable row.
			$up = $item->get_meta( ADDON_BOSS_STANDALONE_UPLOAD_META );
			if ( is_array( $up ) ) {
				addon_boss_privacy_forget_upload( (string) ( $up['ref'] ?? '' ) );
				$item->delete_meta_data( ADDON_BOSS_STANDALONE_UPLOAD_META );
				if ( ! empty( $up['label'] ) ) {
					$item->delete_meta_data( (string) $up['label'] );
				}
				$changed = true;
			}

			// Product fields: entered text and any uploaded files are personal.
			// A file field stores its reference as the field value, so try both
			// keys; resolving returns nothing for a plain text value, so text
			// fields are simply skipped by the deleter and dropped below.
			$fsnaps = $item->get_meta( ADDON_BOSS_PRODUCT_FIELDS_META );
			if ( is_array( $fsnaps ) && $fsnaps ) {
				foreach ( $fsnaps as $f ) {
					foreach ( array( $f['value'] ?? '', $f['ref'] ?? '' ) as $maybe_ref ) {
						if ( '' !== (string) $maybe_ref ) {
							addon_boss_privacy_forget_upload( (string) $maybe_ref );
						}
					}
					if ( ! empty( $f['label'] ) ) {
						$item->delete_meta_data( (string) $f['label'] );
					}
				}
				$item->delete_meta_data( ADDON_BOSS_PRODUCT_FIELDS_META );
				$changed = true;
			}

			// Chosen areas: the artwork they uploaded and the words they asked to
			// have printed. Both the structured snapshot and the readable row the
			// order screen shows have to go, or an erasure leaves the personal
			// data sitting in plain sight on the order.
			$psnaps = $item->get_meta( '_bundle_boss_positions' );
			if ( is_array( $psnaps ) && $psnaps ) {
				foreach ( $psnaps as $pos ) {
					if ( '' !== (string) ( $pos['file'] ?? '' ) ) {
						addon_boss_privacy_forget_upload( (string) $pos['file'] );
					}
					if ( ! empty( $pos['name'] ) ) {
						$item->delete_meta_data( (string) $pos['name'] );
					}
				}
				$item->delete_meta_data( '_bundle_boss_positions' );
				$changed = true;
			}

			if ( $changed ) {
				$item->save();
				$removed = true;
			}
		}

		// The per-order copy folder. Deleting the originals above does not touch
		// it, because it holds COPIES, and the orphan sweep skips it on purpose.
		// Without this an honoured erasure left a complete second copy of the
		// customer's artwork on disk. Only a build with the uploads module has
		// such a folder, so the call is guarded like the file deleter above.
		if ( function_exists( 'addon_boss_standalone_forget_order_folder' ) ) {
			addon_boss_standalone_forget_order_folder( (int) $order->get_id() );
		}
	}
	return array(
		'items_removed'  => $removed,
		'items_retained' => false,
		'messages'       => array(),
		'done'           => count( (array) $orders ) < 20,
	);
}
// =================================================================
// Apply this setup to other products: a COPY, never a live link.
// The merchant perfects one product, picks the parts and a category,
// reads a review naming what happens to every product, then applies.
// Receivers end up with their own editable setup; house precedent
// (the starter shelf, the price-table gallery) is copy-not-link, so
// nothing a merchant owns ever changes behind their back.
// =================================================================

/**
 * The parts a copy can carry. Photo overrides never travel with the
 * option rows: the blue photo of this polo is not the blue photo of
 * that hoodie, so each row's images stay behind by design.
 *
 * @return array<string,string> part key => merchant-facing name.
 */
function addon_boss_copy_parts(): array {
	return array(
		// Sets and fields are TWO parts, not one. Taking a setup used to write
		// over everything the receiver had, so the fix was to let a merchant
		// take one kind and keep the other. 'positions' keeps its key, so the
		// setups already saved still resolve, and wears the name the rest of
		// the admin now uses.
		'sets'      => __( 'Option sets', 'addon-boss' ),
		'fields'    => __( 'Fields', 'addon-boss' ),
		'positions' => __( 'Print areas', 'addon-boss' ),
		'breaks'    => __( 'Quantity breaks', 'addon-boss' ),
		'layout'    => __( 'Layout', 'addon-boss' ),
	);
}

/**
 * Which part a stored row belongs to: 'sets', 'fields', or '' for a row that
 * is neither, which today means a section.
 */
function addon_boss_copy_row_part( $row ): string {
	if ( ! is_array( $row ) ) {
		return '';
	}
	if ( 'field' === ( $row['row_type'] ?? '' ) ) {
		return 'fields';
	}
	if ( isset( $row['set'] ) && '' !== $row['set'] ) {
		return 'sets';
	}
	return '';
}

/**
 * Keep only the rows belonging to the wanted parts, sections included.
 *
 * A section is a container, so it survives when any of its children do and
 * carries just those children. Lifting a field out of its heading would land
 * it loose at the end of the list under nothing, which is not the arrangement
 * it came from.
 *
 * Sections are NESTED in storage: one 'group' row holding 'children'. The flat
 * group_open / group_close pair belongs to the render sequence
 * (addon_boss_config_render_sequence) and never reaches the database.
 */
function addon_boss_copy_filter_rows( array $config, array $parts ): array {
	$out = array();
	foreach ( $config as $row ) {
		if ( ! is_array( $row ) ) {
			continue;
		}
		if ( 'group' === ( $row['row_type'] ?? '' ) ) {
			$kids = addon_boss_copy_filter_rows( (array) ( $row['children'] ?? array() ), $parts );
			if ( $kids ) {
				$row['children'] = $kids;
				$out[]           = $row;
			}
			continue;
		}
		if ( in_array( addon_boss_copy_row_part( $row ), $parts, true ) ) {
			$out[] = $row;
		}
	}
	return $out;
}

/**
 * Photo overrides never travel: the blue photo of this polo is not the blue
 * photo of that hoodie. Recursive, so a section's children are stripped too.
 */
function addon_boss_copy_strip_images( array $row ): array {
	unset( $row['images'] );
	if ( isset( $row['children'] ) && is_array( $row['children'] ) ) {
		$row['children'] = array_map(
			static function ( $kid ) {
				return is_array( $kid ) ? addon_boss_copy_strip_images( $kid ) : $kid;
			},
			$row['children']
		);
	}
	return $row;
}

/**
 * The products a category offers as receivers: anything a merchant is
 * still working on counts (published, draft, pending, private), the
 * source itself never does.
 *
 * @return int[] Product ids.
 */
function addon_boss_copy_targets( int $source_id, int $term_id ): array {
	$ids = get_posts(
		array(
			'post_type'      => 'product',
			'post_status'    => array( 'publish', 'draft', 'pending', 'private' ),
			'posts_per_page' => 200,
			'fields'         => 'ids',
			'orderby'        => 'title',
			'order'          => 'ASC',
			'tax_query'      => array( // phpcs:ignore WordPress.DB.SlowDBQuery.slow_db_query_tax_query -- the one honest way to list a category.
				array(
					'taxonomy' => 'product_cat',
					'terms'    => $term_id,
				),
			),
		)
	);
	return array_values( array_filter( array_map( 'intval', $ids ), static fn( $id ) => $id !== $source_id ) );
}

/**
 * What the apply WOULD do, product by product, before anything does:
 * the review the bulk-editing pattern libraries call for and the same
 * look-it-over-first habit the StockBoss bulk build keeps.
 *
 * @return array<int,array{id:int,name:string,has_own:bool,will:bool}>
 */
function addon_boss_copy_outcomes( int $source_id, int $term_id, bool $replace ): array {
	$out = array();
	foreach ( addon_boss_copy_targets( $source_id, $term_id ) as $id ) {
		$target = wc_get_product( $id );
		if ( ! $target instanceof WC_Product ) {
			continue;
		}
		$has_own = (bool) addon_boss_product_option_config( $target );
		$out[]   = array(
			'id'      => $id,
			'name'    => $target->get_name(),
			'has_own' => $has_own,
			'will'    => $replace || ! $has_own,
		);
	}
	return $out;
}

/**
 * The copy itself. Each ticked part lands on every willing receiver as
 * the source has it - a part the source carries copies over, a part the
 * source does not carry clears, which is what "apply THIS setup" means.
 * Receivers that already have an options setup are skipped unless the
 * merchant ticked replace, and the source is never touched.
 *
 * @param int   $source_id The product being copied from.
 * @param int   $term_id   The receiving category.
 * @param array $parts     Part keys from addon_boss_copy_parts().
 * @param bool  $replace   Overwrite receivers that have their own setup.
 * @return array{applied:int,skipped:int}
 */
function addon_boss_copy_apply( int $source_id, int $term_id, array $parts, bool $replace ): array {
	$source = wc_get_product( $source_id );
	if ( ! $source instanceof WC_Product ) {
		return array( 'applied' => 0, 'skipped' => 0 );
	}
	$parts = array_values( array_intersect( array_keys( addon_boss_copy_parts() ), array_map( 'strval', $parts ) ) );

	// The source's options config with every per-row photo override
	// stripped, prepared once for all receivers.
	$config = array();
	foreach ( addon_boss_product_option_config( $source ) as $row ) {
		if ( is_array( $row ) ) {
			unset( $row['images'] );
			$config[] = $row;
		}
	}
	// Storage names, not module constants: a free build carries no positions
	// or breaks module, and copying their stored rows as dormant data is
	// exactly how the engine treats every setup a build cannot speak for.
	$raw_metas = addon_boss_copy_raw_metas();

	$applied = 0;
	$skipped = 0;
	foreach ( addon_boss_copy_outcomes( $source_id, $term_id, $replace ) as $row ) {
		if ( ! $row['will'] ) {
			++$skipped;
			continue;
		}
		$target = wc_get_product( $row['id'] );
		if ( ! $target instanceof WC_Product ) {
			continue;
		}
		// The same merge the single-product take uses: an unticked kind on the
		// receiver is kept, never written over. $config is the source's rows,
		// already photo-stripped above.
		$taking = array_values( array_intersect( array( 'sets', 'fields' ), $parts ) );
		if ( $taking ) {
			$keeping = array_values( array_diff( array( 'sets', 'fields' ), $taking ) );
			$merged  = addon_boss_copy_filter_rows( addon_boss_product_option_config( $target ), $keeping );
			foreach ( addon_boss_copy_filter_rows( $config, $taking ) as $incoming ) {
				$merged[] = $incoming;
			}
			addon_boss_save_product_option_config( $target, $merged );
			$target = wc_get_product( $row['id'] ); // the save persisted; reread so raw metas stack cleanly.
		}
		foreach ( $raw_metas as $part => $keys ) {
			if ( ! in_array( $part, $parts, true ) ) {
				continue;
			}
			foreach ( $keys as $key ) {
				$value = get_post_meta( $source_id, $key, true );
				if ( '' === $value || null === $value || array() === $value ) {
					delete_post_meta( $row['id'], $key );
				} else {
					update_post_meta( $row['id'], $key, $value );
				}
			}
		}
		++$applied;
	}
	return array( 'applied' => $applied, 'skipped' => $skipped );
}

/**
 * "Take the setup from another product" - the pull surface, Stefanos's
 * Design A (23 Aug 2026). It stands on the product BEING SET UP and
 * takes a finished product's setup; nothing here ever edits another
 * product, per the house rule. The engine above (parts, outcomes,
 * apply) is unchanged; a future Products-list bulk action would reuse
 * it from the list screen, never from inside a product.
 */

/** The stored meta keys each raw part travels by. */
function addon_boss_copy_raw_metas(): array {
	return array(
		'positions' => array(
			'_bundle_boss_position_sets',
			'_bundle_boss_position_overrides',
			'_bundle_boss_positions_label',
			'_bundle_boss_positions_entry',
		),
		'breaks'    => array( '_addon_boss_qty_discount' ),
		'layout'    => array( ADDON_BOSS_OPTIONS_LAYOUT_META ),
	);
}

/**
 * A retired artwork box, spoken as the file-field row the save path folds it
 * into. The box is gone from the admin and a product's next save converts it,
 * but that fold lives in the FORM handler, so a product nobody has re-saved
 * since the box retired still carries the old meta and nothing else. The copy
 * engine and the transfer file both read the config, where such a product's
 * upload does not appear — so without this they hand a setup over with the
 * artwork question silently missing: mode, label, template link and reveal
 * rule, all of it. Same mapping as the save-path fold, and the meta is left
 * in place: only a real save retires it.
 *
 * @param WC_Product $product The product whose meta to read.
 * @return array<string,mixed>|null The field row, or null when there is none.
 */
function addon_boss_legacy_upload_field_row( WC_Product $product ): ?array {
	$old = $product->get_meta( ADDON_BOSS_STANDALONE_UPLOAD_META );
	if ( ! is_array( $old ) || '' === (string) ( $old['mode'] ?? '' ) ) {
		return null;
	}
	return array(
		'row_type' => 'field',
		'field'    => array(
			'type'      => 'file',
			'label'     => '' !== (string) ( $old['label'] ?? '' ) ? (string) $old['label'] : __( 'Your artwork', 'addon-boss' ),
			'require'   => 'required' === ( $old['mode'] ?? '' ) ? 'always' : '',
			'template'  => (string) ( $old['template'] ?? '' ),
			'filetypes' => (string) ( $old['filetypes'] ?? '' ),
		),
		'when'     => is_array( $old['when'] ?? null ) ? $old['when'] : array(),
	);
}

/**
 * Land the source's ticked parts on ONE receiver, as the source has
 * them: photo overrides stripped, a ticked part the source lacks
 * CLEARS (taking THIS setup includes its absences), unticked parts are
 * never touched, and the source is never written. A take is explicit,
 * so it always replaces what the receiver had in the ticked parts.
 */
function addon_boss_copy_apply_one( int $source_id, int $receiver_id, array $parts ): bool {
	$source   = wc_get_product( $source_id );
	$receiver = wc_get_product( $receiver_id );
	if ( ! $source instanceof WC_Product || ! $receiver instanceof WC_Product || $source_id === $receiver_id ) {
		return false;
	}
	$parts = array_values( array_intersect( array_keys( addon_boss_copy_parts() ), array_map( 'strval', $parts ) ) );
	if ( ! $parts ) {
		return false;
	}
	// Option sets and fields share one ordered list on the product, so taking
	// one kind without the other is a MERGE, never a write-over. It used to be
	// a write-over: taking the fields off another product silently replaced
	// whatever sets the receiver had, and the loss only showed on the
	// storefront. David, 1 Sept.
	$taking = array_values( array_intersect( array( 'sets', 'fields' ), $parts ) );
	if ( $taking ) {
		$keeping = array_values( array_diff( array( 'sets', 'fields' ), $taking ) );

		// What the receiver keeps, in the order it already had.
		$config = addon_boss_copy_filter_rows(
			addon_boss_product_option_config( $receiver ),
			$keeping
		);

		// What arrives, in the source's order, photo overrides left behind:
		// the blue photo of this polo is not the blue photo of that hoodie.
		foreach ( addon_boss_copy_filter_rows( addon_boss_product_option_config( $source ), $taking ) as $row ) {
			$config[] = addon_boss_copy_strip_images( $row );
		}

		// A source not saved since the artwork box retired carries its upload
		// only as the old meta; taking the fields hands it over as the row it
		// folds into. And taking the fields includes the RECEIVER'S old box's
		// absence, or the receiver would answer the artwork question twice.
		if ( in_array( 'fields', $taking, true ) ) {
			$bb_legacy = addon_boss_legacy_upload_field_row( $source );
			if ( $bb_legacy ) {
				$config[] = addon_boss_copy_strip_images( $bb_legacy );
			}
			delete_post_meta( $receiver_id, ADDON_BOSS_STANDALONE_UPLOAD_META );
		}

		addon_boss_save_product_option_config( $receiver, $config );
	}
	foreach ( addon_boss_copy_raw_metas() as $part => $keys ) {
		if ( ! in_array( $part, $parts, true ) ) {
			continue;
		}
		foreach ( $keys as $key ) {
			$value = get_post_meta( $source_id, $key, true );
			if ( '' === $value || null === $value || array() === $value ) {
				delete_post_meta( $receiver_id, $key );
			} else {
				update_post_meta( $receiver_id, $key, $value );
			}
		}
	}
	return true;
}

/**
 * What a product's setup carries, part by part, in shop words: the
 * ticks' captions and the search rows' chips both read from this, so
 * the merchant can tell they have the right product BEFORE taking.
 *
 * @return array<int,array{key:string,label:string,have:bool,bits:string}>
 */
function addon_boss_take_summary( int $product_id ): array {
	$product = wc_get_product( $product_id );
	if ( ! $product instanceof WC_Product ) {
		return array();
	}
	$out = array();
	foreach ( addon_boss_copy_parts() as $key => $label ) {
		$have = false;
		$bits = '';
		if ( 'sets' === $key || 'fields' === $key ) {
			// Sections hold rows too, so read the flattened sequence: a set
			// living under a heading still counts as a set the product carries.
			$names = array();
			foreach ( addon_boss_config_render_sequence( addon_boss_product_option_config( $product ) ) as $row ) {
				if ( ! is_array( $row ) || addon_boss_copy_row_part( $row ) !== $key ) {
					continue;
				}
				if ( 'sets' === $key ) {
					$set = addon_boss_option_set( (string) $row['set'] );
					if ( $set ) {
						$names[] = (string) $set['name'];
					}
					continue;
				}
				// Its own variable: reusing $label here clobbered the PART's
				// caption, so the "Fields" tick was titled after whichever
				// field happened to come last.
				$field_label = trim( (string) ( $row['field']['label'] ?? '' ) );
				$names[]     = '' !== $field_label ? $field_label : __( 'Field', 'addon-boss' );
			}
			$have = (bool) $names;
			$keep = array_slice( $names, 0, 3 );
			if ( count( $names ) > 3 ) {
				/* translators: %s: how many more option groups the product carries. */
				$keep[] = sprintf( __( '+%s more', 'addon-boss' ), number_format_i18n( count( $names ) - 3 ) );
			}
			$bits = implode( ', ', $keep );
		} elseif ( 'positions' === $key ) {
			$sets = get_post_meta( $product_id, '_bundle_boss_position_sets', true );
			$n    = is_array( $sets ) ? count( $sets ) : 0;
			$have = $n > 0;
			/* translators: %s: how many print/embroidery positions the product carries. */
			$bits = $have ? sprintf( _n( '%s position', '%s print areas', $n, 'addon-boss' ), number_format_i18n( $n ) ) : '';
		} elseif ( 'breaks' === $key ) {
			$meta = get_post_meta( $product_id, '_addon_boss_qty_discount', true );
			$have = is_array( $meta ) && ! empty( $meta['enabled'] );
			if ( $have ) {
				$list  = ! empty( $meta['source'] ) && function_exists( 'addon_boss_break_list' ) ? addon_boss_break_list( (string) $meta['source'] ) : null;
				$bands = count( (array) ( $meta['bands'] ?? array() ) );
				if ( $list ) {
					/* translators: %s: the saved break list's name. */
					$bits = sprintf( __( 'list: %s', 'addon-boss' ), (string) $list['name'] );
				} elseif ( $bands > 0 ) {
					/* translators: %s: how many quantity bands the product carries. */
					$bits = sprintf( _n( '%s band', '%s bands', $bands, 'addon-boss' ), number_format_i18n( $bands ) );
				}
				// Enabled with no bands and no list says nothing beyond the label.
			}
		} else {
			$have = '' !== (string) get_post_meta( $product_id, ADDON_BOSS_OPTIONS_LAYOUT_META, true );
		}
		$out[] = array(
			'key'   => (string) $key,
			'label' => (string) $label,
			'have'  => $have,
			'bits'  => $bits,
		);
	}
	return $out;
}

/**
 * Products worth taking from: they HAVE a setup, they are not the
 * product being edited, and they match by name OR by SKU (a shop that
 * lives in SKUs finds by SKU). An empty search suggests the edited
 * product's own categories first, so the likely source is one tap
 * away even in a big catalogue.
 *
 * @return int[] Product ids, best first, capped.
 */
function addon_boss_take_candidates( string $q, int $receiver_id, int $cap = 20 ): array {
	$base = array(
		'type'   => array( 'simple', 'variable' ),
		'status' => 'publish',
		'limit'  => $cap * 3,
		'return' => 'ids',
	);
	$ids = array();
	if ( '' !== $q ) {
		$byname = wc_get_products( array_merge( $base, array( 's' => $q ) ) );
		$bysku  = wc_get_products( array_merge( $base, array( 'sku' => $q ) ) );
		$ids    = array_merge( (array) $byname, (array) $bysku );
	} else {
		$cats = wc_get_product_term_ids( $receiver_id, 'product_cat' );
		if ( $cats ) {
			$ids = (array) wc_get_products( array_merge( $base, array( 'category' => array_map( static fn( $t ) => get_term( $t, 'product_cat' )->slug ?? '', $cats ) ) ) );
		}
		$ids = array_merge( $ids, (array) wc_get_products( array_merge( $base, array( 'orderby' => 'date', 'order' => 'DESC' ) ) ) );
	}
	$out = array();
	foreach ( array_unique( array_map( 'intval', $ids ) ) as $id ) {
		if ( $id === $receiver_id ) {
			continue;
		}
		$candidate = wc_get_product( $id );
		if ( ! $candidate instanceof WC_Product || ! addon_boss_product_option_config( $candidate ) ) {
			continue;
		}
		$out[] = $id;
		if ( count( $out ) >= $cap ) {
			break;
		}
	}
	return $out;
}

/** Search, for the picker: rows with name, SKU and what-it-carries chips. */
function addon_boss_take_search_ajax(): void {
	check_ajax_referer( 'bb_take' );
	if ( ! current_user_can( 'manage_woocommerce' ) ) {
		wp_send_json_error( array( 'message' => __( 'You are not allowed to do that.', 'addon-boss' ) ), 403 );
	}
	$q        = isset( $_GET['q'] ) ? sanitize_text_field( wp_unslash( $_GET['q'] ) ) : '';
	$receiver = isset( $_GET['product'] ) ? (int) $_GET['product'] : 0;
	$rows     = array();
	foreach ( addon_boss_take_candidates( $q, $receiver ) as $id ) {
		$candidate = wc_get_product( $id );
		$chips     = array();
		foreach ( addon_boss_take_summary( $id ) as $part ) {
			if ( ! $part['have'] ) {
				continue;
			}
			// Sets and fields now name themselves in $part['bits'], so the chip
			// is the same shape for every part. It used to count config rows as
			// "sets", which counted fields and sections as sets too.
			if ( 'layout' !== $part['key'] ) {
				$chips[] = '' !== $part['bits'] ? $part['bits'] : $part['label'];
			}
		}
		$rows[] = array(
			'id'   => $id,
			'text' => $candidate->get_name(),
			'sku'  => (string) $candidate->get_sku(),
			'bits' => $chips,
		);
	}
	wp_send_json( array( 'results' => $rows ) );
}
add_action( 'wp_ajax_addon_boss_take_search', 'addon_boss_take_search_ajax' );

/** Peek, for the ticks: the picked source's parts with captions. */
function addon_boss_take_peek_ajax(): void {
	check_ajax_referer( 'bb_take' );
	if ( ! current_user_can( 'manage_woocommerce' ) ) {
		wp_send_json_error( array( 'message' => __( 'You are not allowed to do that.', 'addon-boss' ) ), 403 );
	}
	$source = isset( $_POST['source'] ) ? (int) $_POST['source'] : 0;
	wp_send_json_success( array( 'parts' => addon_boss_take_summary( $source ) ) );
}
add_action( 'wp_ajax_addon_boss_take_peek', 'addon_boss_take_peek_ajax' );

/** The take itself: the ticked parts land on the product being edited. */
function addon_boss_take_apply_ajax(): void {
	check_ajax_referer( 'bb_take' );
	if ( ! current_user_can( 'manage_woocommerce' ) ) {
		wp_send_json_error( array( 'message' => __( 'You are not allowed to do that.', 'addon-boss' ) ), 403 );
	}
	$source   = isset( $_POST['source'] ) ? (int) $_POST['source'] : 0;
	$receiver = isset( $_POST['product'] ) ? (int) $_POST['product'] : 0;
	$parts    = isset( $_POST['parts'] ) ? array_map( 'sanitize_key', (array) wp_unslash( $_POST['parts'] ) ) : array();
	if ( ! addon_boss_copy_apply_one( $source, $receiver, $parts ) ) {
		wp_send_json_error( array( 'message' => __( 'Nothing was taken. Pick a product and at least one part.', 'addon-boss' ) ), 400 );
	}
	wp_send_json_success();
}
add_action( 'wp_ajax_addon_boss_take_apply', 'addon_boss_take_apply_ajax' );

/**
 * The card on the Options tab. A product with no setup gets it open,
 * ready; a product that already has one keeps it folded behind a quiet
 * "Start from another product" line, because then it is the rarer path.
 */
function addon_boss_take_panel( $product ): void {
	if ( ! $product instanceof WC_Product || ! current_user_can( 'manage_woocommerce' ) ) {
		return;
	}
	$has_own = (bool) addon_boss_product_option_config( $product );
	$card    = static function () use ( $product, $has_own ): void {
		?>
		<div class="bb-take" id="bb-take"
			data-product="<?php echo esc_attr( (string) $product->get_id() ); ?>"
			data-nonce="<?php echo esc_attr( wp_create_nonce( 'bb_take' ) ); ?>"
			data-has-own="<?php echo esc_attr( $has_own ? '1' : '0' ); ?>"
			data-say-none="<?php esc_attr_e( 'none to take', 'addon-boss' ); ?>"
			data-say-search="<?php esc_attr_e( 'Search finished products by name or SKU', 'addon-boss' ); ?>"
			<?php /* translators: %s: the product name whose setup already exists here. */ ?>
			data-say-warn="<?php esc_attr_e( 'This product already has a setup. Taking these parts replaces it; anything not ticked is left as it is.', 'addon-boss' ); ?>">
			<h4><?php esc_html_e( 'Take the setup from another product', 'addon-boss' ); ?></h4>
			<p class="bb-take-why"><?php esc_html_e( 'A copy, not a link: this product gets its own editable setup. Photo overrides stay behind.', 'addon-boss' ); ?></p>
			<select id="bb-take-src" style="width:380px"></select>
			<div class="bb-take-parts" id="bb-take-parts" hidden></div>
			<div class="bb-take-warn" id="bb-take-warn" hidden></div>
			<p class="bb-take-acts">
				<button type="button" class="button bb-cta" id="bb-take-go" disabled><?php esc_html_e( 'Take these parts', 'addon-boss' ); ?></button>
				<button type="button" class="button" id="bb-take-cancel" hidden><?php esc_html_e( 'Cancel', 'addon-boss' ); ?></button>
			</p>
			<div class="bb-take-dirty" id="bb-take-dirty" hidden>
				<p class="bb-take-dirty-say"><?php esc_html_e( 'This page has unsaved changes. Taking this setup reloads the page and loses them.', 'addon-boss' ); ?></p>
				<p class="bb-take-dirty-acts">
					<button type="button" class="button bb-cta" id="bb-take-force"><?php esc_html_e( 'Take anyway', 'addon-boss' ); ?></button>
					<button type="button" class="button" id="bb-take-keep"><?php esc_html_e( 'Keep my changes', 'addon-boss' ); ?></button>
				</p>
			</div>
		</div>
		<?php
	};
	if ( $has_own ) {
		echo '<details class="bb-take-fold"><summary class="bb-take-fold-sum">'
			. '<span class="bb-take-fold-chev" aria-hidden="true">&#9656;</span>'
			. '<span class="bb-take-fold-word"><b>' . esc_html__( 'Start from another product', 'addon-boss' ) . '</b>'
			. '<i>' . esc_html__( 'Copy the sets, print areas and breaks of a finished product into this one.', 'addon-boss' ) . '</i></span>'
			. '</summary>';
		$card();
		echo '</details>';
	} else {
		$card();
	}
	addon_boss_take_panel_js();
}
add_action( 'addon_boss_options_panel_extras', 'addon_boss_take_panel', 5 );

/** The card's behaviour: search, peek, take, then reload to show it. */
function addon_boss_take_panel_js(): void {
	ob_start();
	?>
	( function () {
		var root = document.getElementById( 'bb-take' );
		if ( ! root || root.dataset.bbTakeBooted || ! window.jQuery || ! jQuery.fn.select2 ) { return; }
		root.dataset.bbTakeBooted = '1';
		var $src  = jQuery( '#bb-take-src' );
		var parts = document.getElementById( 'bb-take-parts' );
		var warn  = document.getElementById( 'bb-take-warn' );
		var go    = document.getElementById( 'bb-take-go' );
		var stop  = document.getElementById( 'bb-take-cancel' );
		var dirty = document.getElementById( 'bb-take-dirty' );
		var force = document.getElementById( 'bb-take-force' );
		var keep  = document.getElementById( 'bb-take-keep' );
		var acts  = root.querySelector( '.bb-take-acts' );
		// Taking a setup reloads the page, and a reload throws away whatever
		// the merchant typed elsewhere on it: the page's own form is printed
		// once it has settled and compared again at the click. Unchanged
		// reloads freely; changed asks first. Nonces refresh on their own
		// heartbeat and this card is part of the flow, so neither counts as
		// the merchant's work.
		function formPrint() {
			var form = document.getElementById( 'post' );
			if ( ! form ) { return ''; }
			if ( window.tinyMCE && window.tinyMCE.triggerSave ) { window.tinyMCE.triggerSave(); }
			var out = [];
			Array.prototype.forEach.call( form.querySelectorAll( 'input, select, textarea' ), function ( el ) {
				if ( ! el.name || /nonce|_wp_http_referer/i.test( el.name ) ) { return; }
				if ( root.contains( el ) ) { return; }
				if ( ( 'checkbox' === el.type || 'radio' === el.type ) && ! el.checked ) { return; }
				out.push( el.name + '=' + el.value );
			} );
			return out.join( '&' );
		}
		// The snapshot waits for ready: this script runs mid-form, before the
		// fields below the panel have even parsed.
		var cleanPrint = null;
		jQuery( function () { cleanPrint = formPrint(); } );
		function calm() {
			dirty.hidden = true;
			acts.hidden  = false;
		}
		$src.select2( {
			placeholder: root.dataset.saySearch,
			allowClear: true,
			// Its own dropdown class only: bb-po-dropdown carries a blue
			// highlighted-row rule that erases the carries-line.
			dropdownCssClass: 'bb-take-drop',
			ajax: {
				url: window.ajaxurl,
				delay: 250,
				data: function ( q ) {
					return { action: 'addon_boss_take_search', _wpnonce: root.dataset.nonce, product: root.dataset.product, q: q.term || '' };
				}
			},
			templateResult: function ( row ) {
				if ( ! row.id ) { return row.text; }
				var el = document.createElement( 'div' );
				el.className = 'bb-take-row';
				var top = document.createElement( 'span' );
				top.className = 'bb-take-row-top';
				var nm = document.createElement( 'b' );
				nm.textContent = row.text;
				top.appendChild( nm );
				if ( row.sku ) {
					var sk = document.createElement( 'small' );
					sk.textContent = row.sku;
					top.appendChild( sk );
				}
				el.appendChild( top );
				var line = document.createElement( 'span' );
				line.className = 'bb-take-row-sub';
				line.textContent = ( row.bits || [] ).join( ' \u00b7 ' );
				el.appendChild( line );
				return jQuery( el );
			}
		} );
		function reset() {
			parts.hidden = true;
			parts.textContent = '';
			warn.hidden = true;
			go.disabled = true;
			stop.hidden = true;
			calm();
		}
		$src.on( 'select2:clear', reset );
		$src.on( 'select2:select', function ( e ) {
			calm();
			var data = new FormData();
			data.append( 'action', 'addon_boss_take_peek' );
			data.append( '_wpnonce', root.dataset.nonce );
			data.append( 'source', String( e.params.data.id ) );
			fetch( window.ajaxurl, { method: 'POST', body: data, credentials: 'same-origin' } )
				.then( function ( r ) { return r.json(); } )
				.then( function ( res ) {
					if ( ! res || ! res.success ) { return; }
					parts.textContent = '';
					res.data.parts.forEach( function ( p ) {
						var row = document.createElement( 'label' );
						row.className = 'bb-take-part' + ( p.have ? '' : ' is-empty' );
						var cb = document.createElement( 'input' );
						cb.type    = 'checkbox';
						cb.value   = p.key;
						cb.checked = p.have && 'layout' !== p.key;
						cb.disabled = ! p.have;
						row.appendChild( cb );
						var txt = document.createElement( 'span' );
						var nm  = document.createElement( 'b' );
						nm.textContent = p.label;
						txt.appendChild( nm );
						var bits = document.createElement( 'i' );
						bits.textContent = ' · ' + ( p.have ? ( p.bits || '' ) : root.dataset.sayNone );
						if ( p.have && ! p.bits ) { bits.textContent = ''; }
						txt.appendChild( bits );
						row.appendChild( txt );
						parts.appendChild( row );
					} );
					parts.hidden = false;
					stop.hidden  = false;
					go.disabled  = false;
					if ( '1' === root.dataset.hasOwn ) {
						warn.textContent = root.dataset.sayWarn;
						warn.hidden = false;
					}
				} );
		} );
		stop.addEventListener( 'click', function () {
			$src.val( null ).trigger( 'change' );
			reset();
		} );
		function apply() {
			var picked = $src.select2( 'data' );
			if ( ! picked || ! picked.length ) { return; }
			go.disabled    = true;
			force.disabled = true;
			var data = new FormData();
			data.append( 'action', 'addon_boss_take_apply' );
			data.append( '_wpnonce', root.dataset.nonce );
			data.append( 'source', String( picked[ 0 ].id ) );
			data.append( 'product', root.dataset.product );
			root.querySelectorAll( '.bb-take-part input:checked' ).forEach( function ( c ) { data.append( 'parts[]', c.value ); } );
			fetch( window.ajaxurl, { method: 'POST', body: data, credentials: 'same-origin' } )
				.then( function ( r ) { return r.json(); } )
				.then( function ( res ) {
					if ( res && res.success ) {
						// The taken setup is best shown by the editor itself.
						window.location.reload();
					} else {
						go.disabled    = false;
						force.disabled = false;
					}
				} );
		}
		go.addEventListener( 'click', function () {
			if ( null !== cleanPrint && formPrint() !== cleanPrint ) {
				acts.hidden  = true;
				dirty.hidden = false;
				return;
			}
			apply();
		} );
		force.addEventListener( 'click', apply );
		keep.addEventListener( 'click', calm );
	} )();
	<?php
	addon_boss_inline_js( (string) ob_get_clean() );
}

// -----------------------------------------------------------------
// The express-pay guard: hidden exactly where it would lie.
//
// An Apple Pay or Google Pay button on the PRODUCT PAGE skips the option
// form entirely: the sheet buys the bare product, the required engraving is
// never asked for, and the order arrives unmakeable (or, gateway depending,
// mispriced - the documented Stripe sheet drops fees). So on a product that
// REQUIRES an answer, the product-page express buttons are removed - hidden,
// never greyed, because a disabled Pay button breaks the wallets' own brand
// rules and absence is the WooCommerce convention. Products whose options
// are all optional KEEP their buttons: a skipped optional gift wrap is
// foregone revenue on an honest fast sale, not a corrupt order. Cart,
// mini-cart and checkout express stay untouched everywhere - they purchase
// the existing cart, whose lines already carry the chosen options.
//
// Zero settings. One filter for developers, addon_boss_allow_express_pay,
// to force the buttons back on (or off) per product.
// -----------------------------------------------------------------

/**
 * Must this product be answered before it can be bought?
 *
 * True when any attached option set or personalisation field is REQUIRED -
 * including a conditional one, because a rule can fire and make it due. The
 * result is what the express guard acts on, inverted through the developer
 * filter so a site can overrule either way.
 */
function addon_boss_express_blocked( $product ): bool {
	if ( ! $product instanceof WC_Product ) {
		$product = wc_get_product( $product );
	}
	if ( ! $product instanceof WC_Product ) {
		return false;
	}
	static $bb_cache = array();
	$bb_id = $product->get_id();
	if ( isset( $bb_cache[ $bb_id ] ) ) {
		return $bb_cache[ $bb_id ];
	}
	// A quantity-grid product sells through its cells and pills: an express
	// sheet buys one bare unit with nothing picked, so the buttons lie there
	// whatever the required flags say.
	$bb_need = addon_boss_product_uses_grid( $product );
	if ( ! $bb_need ) {
		foreach ( addon_boss_standalone_option_sets( $product ) as $bb_set ) {
			if ( ! empty( $bb_set['required'] ) ) {
				$bb_need = true;
				break;
			}
		}
	}
	if ( ! $bb_need ) {
		foreach ( addon_boss_standalone_product_fields( $product ) as $bb_f ) {
			if ( ! empty( $bb_f['required'] ) ) {
				$bb_need = true;
				break;
			}
		}
	}
	/**
	 * Whether express-pay buttons may show on this product's page.
	 *
	 * @param bool       $allow   True unless the product requires an answer.
	 * @param WC_Product $product The product.
	 */
	$bb_allow           = (bool) apply_filters( 'addon_boss_allow_express_pay', ! $bb_need, $product );
	$bb_cache[ $bb_id ] = ! $bb_allow;
	return $bb_cache[ $bb_id ];
}

/** The guard applies to THIS page: a product page showing a guarded product. */
function addon_boss_express_guard_here(): bool {
	if ( ! function_exists( 'is_product' ) || ! is_product() ) {
		return false;
	}
	return addon_boss_express_blocked( get_queried_object_id() );
}

// WooPayments: its own per-product seam. Scoped to the product page so the
// cart and checkout sheets - which buy lines that already carry the options -
// are never touched.
add_filter(
	'wcpay_payment_request_is_product_supported',
	function ( $supported, $product = null ) {
		if ( $supported && function_exists( 'is_product' ) && is_product()
			&& $product instanceof WC_Product && addon_boss_express_blocked( $product ) ) {
			return false;
		}
		return $supported;
	},
	20,
	2
);

// Stripe: the product-page hide filter, deprecated once and un-deprecated
// for exactly this dynamic case.
add_filter(
	'wc_stripe_hide_payment_request_on_product_page',
	function ( $hide, $post = null ) {
		if ( ! $hide && $post instanceof WP_Post && addon_boss_express_blocked( $post->ID ) ) {
			return true;
		}
		return $hide;
	},
	20,
	2
);

// PayPal Payments: its per-product support seam for the smart buttons.
add_filter(
	'woocommerce_paypal_payments_product_supports_payment_request_button',
	function ( $supports, $product = null ) {
		if ( $supports && $product instanceof WC_Product && addon_boss_express_blocked( $product ) ) {
			return false;
		}
		return $supports;
	},
	20,
	2
);

// Square: wallets are enabled per PAGE, so on a guarded product page the
// 'product' entry is taken out of the list for that request only.
add_filter(
	'wc_square_display_digital_wallet_on_pages',
	function ( $pages ) {
		if ( is_array( $pages ) && addon_boss_express_guard_here() ) {
			$pages = array_values( array_diff( $pages, array( 'product' ) ) );
		}
		return $pages;
	},
	20
);

/**
 * The last resort for gateways with no per-product seam (Mollie's wallet
 * button, a standalone Amazon Pay): remove their known product-page wrappers
 * from the DOM, and keep watching, because wallet buttons render themselves
 * asynchronously after their eligibility checks. Robust rather than
 * contract-backed - which is why the majors above ride real filters and this
 * list is filterable.
 */
function addon_boss_express_guard_script(): void {
	if ( ! addon_boss_express_guard_here() ) {
		return;
	}
	$bb_selectors = apply_filters(
		'addon_boss_express_dom_selectors',
		array(
			'#pay_with_amazon',
			'.amazon-pay-button',
			'#mollie-applepay-button',
			'.mollie-applepay-direct-button',
		)
	);
	if ( ! $bb_selectors ) {
		return;
	}
	ob_start();
	?>
	( function () {
		var kill = <?php echo wp_json_encode( implode( ',', array_map( 'strval', (array) $bb_selectors ) ) ); ?>;
		function sweep( root ) {
			( root.querySelectorAll ? root : document ).querySelectorAll( kill ).forEach( function ( n ) { n.remove(); } );
		}
		sweep( document );
		if ( window.MutationObserver ) {
			new MutationObserver( function () { sweep( document ); } )
				.observe( document.body, { childList: true, subtree: true } );
		}
	} )();
	<?php
	addon_boss_inline_js( (string) ob_get_clean() );
}
add_action( 'wp_footer', 'addon_boss_express_guard_script', 5 );