<?php
/**
 * Plugin Name: Aegra Site Monitor
 * Plugin URI:  https://robsnow.eu/plugins-wordpress-development/aegra-site-monitor/
 * Description: The all-seeing WordPress monitor — activity log, broken link checker, content audit, user overview, and system info.
 * Version:     1.0.55
 * Author:      robword
 * Author URI:  https://robsnow.eu
 * License:     GPL-2.0-or-later
 * License URI: https://www.gnu.org/licenses/gpl-2.0.html
 * Text Domain: aegra-site-monitor
 * Domain Path: /languages
 * Requires at least: 6.2
 * Requires PHP: 8.0
 * Copyright: Copyright © Rob Art | WordPress Development 2026. All rights reserved.
 */

if ( ! defined( 'ABSPATH' ) ) exit;


// Aegra reads and writes its own plugin-controlled tables ($wpdb->prefix +
// literal names) for monitoring/diagnostics. Object caching is intentionally
// skipped — the data must be fresh — and table-name interpolation uses
// $wpdb->prefix-derived names (never user input), which cannot be placeholders.
// Justified suppression for this monitoring module.
// phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery
// phpcs:disable WordPress.DB.DirectDatabaseQuery.NoCaching
// phpcs:disable WordPress.DB.DirectDatabaseQuery.SchemaChange
// phpcs:disable PluginCheck.Security.DirectDB.UnescapedDBParameter
define( 'AEGRA_VERSION',      '1.0.55' );
define( 'AEGRA_PATH',         plugin_dir_path( __FILE__ ) );
define( 'AEGRA_URL',          plugin_dir_url( __FILE__ ) );
define( 'AEGRA_PURCHASE_URL', 'https://rob-art-plugs-books.lemonsqueezy.com/checkout/buy/35e71ca8-0d03-4c1c-a46b-4c2499383881' );

// ── Activation ────────────────────────────────────────────────────────────────

register_activation_hook( __FILE__, 'aegra_activate' );
function aegra_activate() {
    require_once AEGRA_PATH . 'includes/activity-logger.php';
    ( new Aegra_Activity_Logger() )->create_table();
    require_once AEGRA_PATH . 'includes/broken-link-checker.php';
    ( new Aegra_Broken_Link_Checker() )->create_table();
    require_once AEGRA_PATH . 'includes/traffic-tracker.php';
    ( new Aegra_Traffic_Tracker() )->create_table();
    $aegra = new AegraWP();
    if ( method_exists( $aegra, 'create_brute_force_table' ) ) {
        $aegra->create_brute_force_table();
    }
    set_transient( 'aegra_activation_redirect', true, 30 );
    if ( ! get_option( 'aegra_install_date' ) ) {
        update_option( 'aegra_install_date', time() );
    }
}

// Redirect to splash on activation
add_action( 'admin_init', function() {
    if ( wp_doing_ajax() ) return;
    if ( get_transient( 'aegra_activation_redirect' ) ) {
        delete_transient( 'aegra_activation_redirect' );
        wp_safe_redirect( admin_url( 'admin.php?page=aegra-site-monitor-splash' ) );
        exit;
    }
} );

// ── Includes ──────────────────────────────────────────────────────────────────

require_once AEGRA_PATH . 'includes/activity-logger.php';
require_once AEGRA_PATH . 'includes/broken-link-checker.php';
require_once AEGRA_PATH . 'includes/traffic-tracker.php';
require_once AEGRA_PATH . 'includes/core/mmdb.php';
require_once AEGRA_PATH . 'includes/core/geo.php';
require_once AEGRA_PATH . 'includes/admin/maxmind-install.php';
require_once AEGRA_PATH . 'includes/admin/splash.php';
require_once AEGRA_PATH . 'includes/admin/wizard.php';
require_once AEGRA_PATH . 'includes/compat.php';
require_once AEGRA_PATH . 'includes/review-notice.php';

// ── PRO loader ────────────────────────────────────────────────────────────────
// Elementor model: the Pro extension is a SEPARATE plugin the user installs
// from their purchase. The free package only DETECTS it and loads it if present
// — it never downloads or installs Pro code itself (no auto-installer ships in
// the free .org package).

if ( file_exists( AEGRA_PATH . 'pro/pro.php' ) ) {
    require_once AEGRA_PATH . 'pro/pro.php';
}

// ── Licence (Pro-side) ──────────────────────────────────────────────────────
// Licence handling lives in the Pro extension (pro/licence.php, loaded by
// pro/pro.php above) — NOT in the free package. When Pro is present it has
// already defined aegra_get_tier() / aegra_has_licence() by this point. When
// Pro is absent we define lightweight free-tier fallbacks so the ~89 call
// sites (87 already function_exists-guarded, plus 2 direct) resolve cleanly to
// the Free tier instead of fatalling. This is the Elementor-model split: the
// free plugin only DETECTS Pro; it contains no licence/tier engine.
if ( ! function_exists( 'aegra_has_licence' ) ) {
    function aegra_has_licence() {
        return false;
    }
}
if ( ! function_exists( 'aegra_get_tier' ) ) {
    function aegra_get_tier() {
        return defined( 'AEGRA_PRO_VERSION' ) ? 'Pro' : 'Free';
    }
}

// ── Admin helpers ─────────────────────────────────────────────────────────────

function aegra_upgrade_overlay() {
    ?>
    <div class="aegra-overlay-backdrop" id="aegra-upgrade-overlay" role="dialog" aria-modal="true" aria-labelledby="aegra-overlay-title" style="display:none;">
        <div class="aegra-overlay">
            <button type="button" class="aegra-overlay-close" id="aegra-overlay-close" aria-label="Close">&times;</button>

            <!-- LEFT: image + tiers -->
            <div class="aegra-overlay-left">
                <div class="aegra-overlay-upgrade-img">
                    <img src="<?php echo esc_url( AEGRA_URL . 'assets/images/upgrade.jpg' ); ?>" alt="Aegra Site Monitor Pro" style="width:100%;height:100%;object-fit:cover;display:block;">
                </div>
                <div class="aegra-overlay-left-body">
                    <h2 class="aegra-overlay-left-title" id="aegra-overlay-title">Unlock Pro</h2>
                    <p class="aegra-overlay-left-sub">Scheduled scans, historical trends, DB snapshots, alerts, exportable reports, and full audit trail — all inside your WordPress admin.</p>

                    <!-- Seat selector -->
                    <div class="aegra-overlay-seats">
                        <button type="button" class="aegra-seat-btn aegra-seat-btn--active" data-seat="1">1 Site</button>
                        <button type="button" class="aegra-seat-btn" data-seat="5">5 Sites</button>
                        <button type="button" class="aegra-seat-btn" data-seat="u">Unlimited</button>
                    </div>

                    <!-- Pricing tiers -->
                    <div class="aegra-overlay-tiers">
                        <div class="aegra-overlay-tier aegra-overlay-tier--pro aegra-overlay-tier--highlight">
                            <div class="aegra-overlay-tier-header">
                                <span class="aegra-overlay-tier-name">Pro</span>
                                <div class="aegra-overlay-tier-price">
                                    <span class="aegra-overlay-price-main" id="aegra-price-pro-yr">€19<span class="aegra-overlay-price-period">/yr</span></span>
                                    <span class="aegra-overlay-price-alt" id="aegra-price-pro-life">or €49 lifetime</span>
                                </div>
                            </div>
                            <ul class="aegra-overlay-features">
                                <li>Scheduled link &amp; content scans</li>
                                <li>Historical trends &amp; charts</li>
                                <li>DB snapshots &amp; comparisons</li>
                                <li>Email alerts &amp; reports</li>
                                <li>Full admin audit trail</li>
                                <li>All Free features included</li>
                            </ul>
                        </div>
                    </div>
                </div>
            </div>

            <!-- RIGHT: Pro benefits + buy action -->
            <div class="aegra-overlay-right">
                <div class="aegra-overlay-right-top">
                    <h3 class="aegra-overlay-right-heading">Go beyond basic monitoring</h3>
                    <p class="aegra-overlay-why-lead">Aegra Pro turns your free site monitor into a full WordPress command centre, giving you deeper visibility into security, performance, visitor activity, files, content, media, and database health.</p>
                    <ul class="aegra-overlay-why-list">
                        <li>Catch brute-force attacks, suspicious IPs, country-based traffic issues, and unexpected file changes before they become bigger problems.</li>
                        <li>Find slow pages, heavy plugins, slow database queries, and Core Web Vitals issues that could be hurting your site experience.</li>
                        <li>Track visitor sessions, live map activity, campaigns, and UTM traffic so you can see what is happening, not just that something happened.</li>
                        <li>Add scheduled scans, email alerts, CSV exports, a complete audit trail, extra site tools, and Priority Pro support.</li>
                    </ul>
                    <p class="aegra-overlay-why-close">Aegra Pro helps you see more, react faster, and stay in control.</p>
                </div>

                <div class="aegra-overlay-right-bottom">
                    <div class="aegra-overlay-divider"></div>
                    <a href="<?php echo esc_url( AEGRA_PURCHASE_URL ); ?>" target="_blank" rel="noopener" class="aegra-btn aegra-btn-primary aegra-overlay-buy-btn">
                        Get Aegra Pro &rarr;
                    </a>
                    <p class="aegra-overlay-secure">
                        <svg class="aegra-lock-icon" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor"><path d="M18 8h-1V6c0-2.76-2.24-5-5-5S7 3.24 7 6v2H6c-1.1 0-2 .9-2 2v10c0 1.1.9 2 2 2h12c1.1 0 2-.9 2-2V10c0-1.1-.9-2-2-2zm-6 9c-1.1 0-2-.9-2-2s.9-2 2-2 2 .9 2 2-.9 2-2 2zm3.1-9H8.9V6c0-1.71 1.39-3.1 3.1-3.1 1.71 0 3.1 1.39 3.1 3.1v2z"/></svg>
                        Secure checkout via Lemon Squeezy
                    </p>
                </div>
            </div>
        </div>
    </div>

    <?php
    // Overlay behaviour script — attached to the already-enqueued 'aegra-site-monitor-admin'
    // handle via wp_add_inline_script (no literal <script> tag, .org compliant).
    $aegra_overlay_js = <<<'JS'
    (function() {
        var overlay = document.getElementById('aegra-upgrade-overlay');
        if ( ! overlay ) return;

        function openOverlay() {
            overlay.style.display = 'flex';
            document.body.style.overflow = 'hidden';
            setTimeout(function() { overlay.classList.add('aegra-overlay-visible'); }, 10);
        }
        function closeOverlay() {
            overlay.classList.remove('aegra-overlay-visible');
            document.body.style.overflow = '';
            setTimeout(function() { overlay.style.display = 'none'; }, 220);
        }

        document.addEventListener('click', function(e) {
            if ( e.target.closest('.aegra-upgrade-trigger') ) { e.preventDefault(); openOverlay(); }
            if ( e.target === overlay ) closeOverlay();
        });
        document.getElementById('aegra-overlay-close').addEventListener('click', closeOverlay);
        document.addEventListener('keydown', function(e) { if ( e.key === 'Escape' ) closeOverlay(); });

        // Seat selector
        var seats = overlay.querySelectorAll('.aegra-seat-btn');
        var prices = {
            '1': { proYr: '€19<span class="aegra-overlay-price-period">/yr</span>', proLife: 'or €49 lifetime' },
            '5': { proYr: '€39<span class="aegra-overlay-price-period">/yr</span>', proLife: 'or €89 lifetime' },
            'u': { proYr: '€59<span class="aegra-overlay-price-period">/yr</span>', proLife: 'or €129 lifetime' },
        };
        seats.forEach(function(btn) {
            btn.addEventListener('click', function() {
                seats.forEach(function(b) { b.classList.remove('aegra-seat-btn--active'); });
                btn.classList.add('aegra-seat-btn--active');
                var s = btn.dataset.seat;
                if ( prices[s] ) {
                    document.getElementById('aegra-price-pro-yr').innerHTML  = prices[s].proYr;
                    document.getElementById('aegra-price-pro-life').innerHTML = prices[s].proLife;
                }
            });
        });
        // Licence-key entry + Pro install/activate scripting removed — licence
        // handling lives in the Pro extension (Elementor model). The free modal
        // is advertising only: it shows Pro benefits and links to checkout.
    })();
    JS;
    if ( function_exists( 'wp_add_inline_script' ) ) {
        wp_add_inline_script( 'aegra-site-monitor-admin', $aegra_overlay_js );
    }
}

function aegra_country_name( $cc ) {
    static $map = [
        'AF'=>'Afghanistan','AL'=>'Albania','DZ'=>'Algeria','AO'=>'Angola','AR'=>'Argentina',
        'AU'=>'Australia','AT'=>'Austria','AZ'=>'Azerbaijan','BD'=>'Bangladesh','BY'=>'Belarus',
        'BE'=>'Belgium','BO'=>'Bolivia','BA'=>'Bosnia & Herzegovina','BW'=>'Botswana','BR'=>'Brazil',
        'BG'=>'Bulgaria','BF'=>'Burkina Faso','BI'=>'Burundi','KH'=>'Cambodia','CM'=>'Cameroon',
        'CA'=>'Canada','CF'=>'Central African Republic','TD'=>'Chad','CL'=>'Chile','CN'=>'China',
        'CO'=>'Colombia','CD'=>'Congo (DR)','CG'=>'Congo','CR'=>'Costa Rica','CI'=>"Côte d'Ivoire",
        'HR'=>'Croatia','CU'=>'Cuba','CZ'=>'Czech Republic','DK'=>'Denmark','DJ'=>'Djibouti',
        'DO'=>'Dominican Republic','EC'=>'Ecuador','EG'=>'Egypt','SV'=>'El Salvador','ER'=>'Eritrea',
        'EE'=>'Estonia','ET'=>'Ethiopia','FI'=>'Finland','FR'=>'France','GA'=>'Gabon','GM'=>'Gambia',
        'GE'=>'Georgia','DE'=>'Germany','GH'=>'Ghana','GR'=>'Greece','GT'=>'Guatemala','GN'=>'Guinea',
        'GW'=>'Guinea-Bissau','GY'=>'Guyana','HT'=>'Haiti','HN'=>'Honduras','HU'=>'Hungary',
        'IS'=>'Iceland','IN'=>'India','ID'=>'Indonesia','IR'=>'Iran','IQ'=>'Iraq','IE'=>'Ireland',
        'IL'=>'Israel','IT'=>'Italy','JM'=>'Jamaica','JP'=>'Japan','JO'=>'Jordan','KZ'=>'Kazakhstan',
        'KE'=>'Kenya','KP'=>'North Korea','KR'=>'South Korea','KW'=>'Kuwait','LA'=>'Laos',
        'LB'=>'Lebanon','LS'=>'Lesotho','LR'=>'Liberia','LY'=>'Libya','LT'=>'Lithuania',
        'LU'=>'Luxembourg','MG'=>'Madagascar','MW'=>'Malawi','MY'=>'Malaysia','ML'=>'Mali',
        'MT'=>'Malta','MR'=>'Mauritania','MX'=>'Mexico','MD'=>'Moldova','MN'=>'Mongolia',
        'ME'=>'Montenegro','MA'=>'Morocco','MZ'=>'Mozambique','MM'=>'Myanmar','NA'=>'Namibia',
        'NP'=>'Nepal','NL'=>'Netherlands','NZ'=>'New Zealand','NI'=>'Nicaragua','NE'=>'Niger',
        'NG'=>'Nigeria','MK'=>'North Macedonia','NO'=>'Norway','PK'=>'Pakistan','PA'=>'Panama',
        'PG'=>'Papua New Guinea','PY'=>'Paraguay','PE'=>'Peru','PH'=>'Philippines','PL'=>'Poland',
        'PT'=>'Portugal','RO'=>'Romania','RU'=>'Russia','RW'=>'Rwanda','SA'=>'Saudi Arabia',
        'SN'=>'Senegal','RS'=>'Serbia','SL'=>'Sierra Leone','SK'=>'Slovakia','SI'=>'Slovenia',
        'SO'=>'Somalia','ZA'=>'South Africa','SS'=>'South Sudan','ES'=>'Spain','LK'=>'Sri Lanka',
        'SD'=>'Sudan','SR'=>'Suriname','SZ'=>'Eswatini','SE'=>'Sweden','CH'=>'Switzerland',
        'SY'=>'Syria','TW'=>'Taiwan','TJ'=>'Tajikistan','TZ'=>'Tanzania','TH'=>'Thailand',
        'TG'=>'Togo','TT'=>'Trinidad & Tobago','TN'=>'Tunisia','TR'=>'Turkey','TM'=>'Turkmenistan',
        'UG'=>'Uganda','UA'=>'Ukraine','AE'=>'United Arab Emirates','GB'=>'United Kingdom',
        'US'=>'United States','UY'=>'Uruguay','UZ'=>'Uzbekistan','VE'=>'Venezuela','VN'=>'Vietnam',
        'YE'=>'Yemen','ZM'=>'Zambia','ZW'=>'Zimbabwe',
    ];
    return $map[ strtoupper( $cc ) ] ?? $cc;
}

function aegra_icon( $name, $class = '' ) {
    // Look in the free icon set first, then fall back to the Pro extension's
    // icon set. Pro-only icons live in pro/assets/icons/ (not shipped in the
    // free .org package); this fallback lets Pro modules keep using
    // aegra_icon('name') transparently when the Pro extension is installed.
    $file = AEGRA_PATH . 'assets/icons/' . $name . '.svg';
    if ( ! file_exists( $file ) ) {
        $pro_file = AEGRA_PATH . 'pro/assets/icons/' . $name . '.svg';
        if ( ! file_exists( $pro_file ) ) return '';
        $file = $pro_file;
    }
    $svg = file_get_contents( $file );
    // Strip XML declaration and comments
    $svg = preg_replace( '/<\?xml[^>]*\?>\s*/i', '', $svg );
    $svg = preg_replace( '/<!--.*?-->/s', '', $svg );
    // Icons with data-keep-fill preserve their hardcoded colours — skip fill normalisation
    $keep_fill = preg_match( '/\bdata-keep-fill\b/', $svg );
    // Strip embedded <style> blocks (hardcoded fills like #ddd break on coloured backgrounds)
    $svg = preg_replace( '/<defs>\s*<style>.*?<\/style>\s*<\/defs>/s', '', $svg );
    $svg = preg_replace( '/<style[^>]*>.*?<\/style>/s', '', $svg );
    if ( ! $keep_fill ) {
        // Replace class="st0" (and similar) with fill="currentColor" so icons inherit text colour
        $svg = preg_replace( '/\bclass="st\d+"/', 'fill="currentColor"', $svg );
        // Replace any remaining hardcoded fill="#..." attributes on shape elements with currentColor
        $svg = preg_replace( '/(<(?:path|circle|rect|polygon|polyline|ellipse|line)[^>]*)\bfill="#[0-9a-fA-F]{3,6}"/i', '$1fill="currentColor"', $svg );
        // Also handle fill="rgb(...)"
        $svg = preg_replace( '/(<(?:path|circle|rect|polygon|polyline|ellipse|line)[^>]*)\bfill="rgb\([^"]*\)"/i', '$1fill="currentColor"', $svg );
    }
    $svg = trim( $svg );
    // Inject class
    $cls = 'aegra-icon' . ( $class ? ' ' . $class : '' );
    $svg = preg_replace( '/<svg\b/i', '<svg class="' . esc_attr( $cls ) . '"', $svg, 1 );

    // Escape via wp_kses with an SVG allowlist, so every `aegra_the_icon(...)`
    // call site is safe output (PCP-compliant) without wrapping each one. Only
    // known-safe SVG tags/attributes pass.
    $svg = wp_kses( $svg, aegra_svg_allowed_tags() );

    // wp_kses() lowercases attribute NAMES (core kses.php line ~1520), which
    // turns the case-sensitive SVG attribute `viewBox` into `viewbox`. SVG then
    // ignores the malformed attribute and the icon loses its coordinate system
    // (renders oversized / cropped). Restore the canonical camelCase here — this
    // runs AFTER escaping, so it doesn't weaken the allowlist.
    $svg = str_replace( ' viewbox=', ' viewBox=', $svg );

    return $svg;
}

/**
 * Print version of aegra_icon() — outputs the icon. The markup is already
 * escaped inside aegra_icon() via wp_kses(), so this is safe output. Use this
 * (like the_title() vs get_the_title()) instead of a bare echo.
 *
 * @param string $name  Icon name.
 * @param string $class Optional extra CSS class.
 */
function aegra_the_icon( $name, $class = '' ) {
    // Escape at output with the SVG allowlist. aegra_icon() already wp_kses()'d
    // its return, so this is idempotent — but escaping here means PCP sees a
    // real escape and NO phpcs:ignore is needed.
    echo wp_kses( aegra_icon( $name, $class ), aegra_svg_allowed_tags() );
}

/**
 * Allowed tags/attributes for inline SVG icons (used by aegra_icon()).
 * Restricted to the presentational SVG elements our icon set uses.
 *
 * @return array
 */
function aegra_svg_allowed_tags() {
    $svg_atts = [
        'class' => true, 'id' => true, 'style' => true,
        'xmlns' => true, 'viewbox' => true, 'viewBox' => true,
        'width' => true, 'height' => true, 'fill' => true, 'stroke' => true,
        'stroke-width' => true, 'stroke-linecap' => true, 'stroke-linejoin' => true,
        'stroke-miterlimit' => true, 'stroke-dasharray' => true,
        'd' => true, 'cx' => true, 'cy' => true, 'r' => true, 'rx' => true, 'ry' => true,
        'x' => true, 'y' => true, 'x1' => true, 'y1' => true, 'x2' => true, 'y2' => true,
        'points' => true, 'transform' => true, 'opacity' => true, 'fill-rule' => true,
        'clip-rule' => true, 'fill-opacity' => true, 'data-keep-fill' => true,
        'gradientunits' => true, 'gradientUnits' => true, 'offset' => true,
        'stop-color' => true, 'stop-opacity' => true, 'preserveaspectratio' => true,
        // Text label support (used by inline SVG charts such as the donut centre).
        'text-anchor' => true, 'dominant-baseline' => true,
        'font-size' => true, 'font-weight' => true, 'font-family' => true,
    ];
    return [
        'svg'            => $svg_atts,
        'g'              => $svg_atts,
        'defs'           => $svg_atts,
        'title'          => $svg_atts,
        'text'           => $svg_atts,
        'path'           => $svg_atts,
        'circle'         => $svg_atts,
        'rect'           => $svg_atts,
        'polygon'        => $svg_atts,
        'polyline'       => $svg_atts,
        'ellipse'        => $svg_atts,
        'line'           => $svg_atts,
        'lineargradient' => $svg_atts,
        'radialgradient' => $svg_atts,
        'stop'           => $svg_atts,
        'clippath'       => $svg_atts,
        'use'            => $svg_atts,
    ];
}

function aegra_header( $title ) {
    $tier = aegra_get_tier();
    ?>
    <div class="aegra-wrap">
        <div class="aegra-header">
            <img src="<?php echo esc_url( AEGRA_URL . 'assets/logo/aegra-site-monitor.svg' ); ?>" alt="Aegra Site Monitor" class="aegra-header-logo">
            <span class="aegra-header-sep"></span>
            <span class="aegra-header-title">
                <?php
                $title_icons = [
                    'Dashboard'            => 'dashboard',
                    'System'               => 'system',
                    'System & Environment' => 'system',
                    'Database'             => 'database',
                    'Traffic & Analytics'  => 'visitor',
                    'Security & Auth Activity' => 'security',
                    'Backend'              => 'user',
                    'Frontend'             => 'content',
                    'Media Library'        => 'media',
                    'Performance'          => 'performance',
                    'Plugins'              => 'plugins',
                    'Broken Links'         => 'broken_link',
                    'Reports & Alerts'     => 'report',
                    'Activity Log'         => 'activity',
                    'Settings'             => 'settings',
                ];
                if ( isset( $title_icons[ $title ] ) ) {
                    aegra_the_icon( $title_icons[ $title ], 'aegra-icon--md' );
                }
                echo esc_html( $title );
                ?>
            </span>
            <div class="aegra-header-right">
                <span class="aegra-header-version">v<?php echo esc_html( AEGRA_VERSION ); ?></span>
                <?php if ( $tier === 'Free' ) : ?>
                <a href="#" class="aegra-header-upgrade aegra-upgrade-trigger">
                    <svg class="aegra-header-upgrade-lock" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor"><path d="M18 8h-1V6c0-2.76-2.24-5-5-5S7 3.24 7 6v2H6c-1.1 0-2 .9-2 2v10c0 1.1.9 2 2 2h12c1.1 0 2-.9 2-2V10c0-1.1-.9-2-2-2zm-6 9c-1.1 0-2-.9-2-2s.9-2 2-2 2 .9 2 2-.9 2-2 2zm3.1-9H8.9V6c0-1.71 1.39-3.1 3.1-3.1 1.71 0 3.1 1.39 3.1 3.1v2z"/></svg>
                    Upgrade to Pro
                </a>
                <?php endif; ?>
            </div>
        </div>
        <?php aegra_upgrade_overlay(); ?>
        <div class="aegra-body">
            <div class="aegra-main">
    <?php
}

/**
 * Reusable Pro promo sidebar box (Yoast-style advert).
 *
 * Shown ONLY when the Pro extension is absent. Pure marketing — white logo,
 * a punchy per-page headline + subline, a benefit list, a Buy-now button to
 * the Lemon Squeezy checkout, a tagline, and a Pro-support reassurance line.
 * It contains NO functional feature code and NO "locked tab"; it advertises
 * the separate Pro extension (the WordPress.org-compliant pattern — see
 * Free_Pro_Split_Playbook.md). When Pro IS present this returns '' (Pro
 * injects its own real sidebar content instead).
 *
 * @param array $args {
 *     @type string $page     Display name of the page (e.g. "Frontend").
 *     @type string $headline Punchy per-page selling line.
 *     @type string $subline  Soft supporting line under the headline.
 *     @type array  $benefits Short benefit lines to list.
 * }
 * @return string Sidebar-section HTML, or '' when Pro is active.
 */
function aegra_pro_promo_sidebar( $args ) {
    // Pro active → no advert (Pro supplies the real sidebar content).
    if ( function_exists( 'aegra_get_tier' ) && aegra_get_tier() === 'Pro' ) {
        return '';
    }
    $page     = $args['page']     ?? '';
    $headline = $args['headline'] ?? '';
    $subline  = $args['subline']  ?? '';
    $benefits = $args['benefits'] ?? [];

    $items = '';
    foreach ( $benefits as $b ) {
        $items .= '<li>' . esc_html( $b ) . '</li>';
    }
    $buy  = esc_url( defined( 'AEGRA_PURCHASE_URL' ) ? AEGRA_PURCHASE_URL : 'https://robsnow.eu/' );
    $logo = esc_url( AEGRA_URL . 'assets/logo/aegra-site-monitor_white_MENU.svg' );

    // Eyebrow: per-page boxes read "Aegra Pro — <page>"; a box passing an empty
    // page (or the suite-wide dashboard box) reads just its own label.
    $eyebrow = ( $page === '' || $page === 'Upgrade to Pro' )
        ? 'Upgrade to Pro'
        : 'Aegra Pro &mdash; ' . esc_html( $page );

    return '
        <div class="aegra-sidebar-section aegra-sidebar-promo">
            <img src="' . $logo . '" alt="Aegra Pro" class="aegra-sidebar-promo-logo">
            <div class="aegra-sidebar-promo-eyebrow">' . $eyebrow . '</div>
            <div class="aegra-sidebar-promo-headline">' . esc_html( $headline ) . '</div>
            <div class="aegra-sidebar-promo-subline">' . esc_html( $subline ) . '</div>
            <ul class="aegra-sidebar-promo-list">' . $items . '</ul>
            <a href="' . $buy . '" target="_blank" rel="noopener" class="aegra-sidebar-promo-btn">Get Aegra Pro →</a>
            <div class="aegra-sidebar-promo-tagline">Monitor more!</div>
            <hr class="aegra-sidebar-promo-hr">
            <div class="aegra-sidebar-promo-support">Pro Support</div>
        </div>';
}

function aegra_footer( $sidebar_html = '' ) {
    ?>
            </div><!-- .aegra-main -->
            <?php if ( $sidebar_html ): ?>
            <div class="aegra-sidebar">
                <?php echo wp_kses_post( $sidebar_html ); ?>
            </div>
            <?php endif; ?>
        </div><!-- .aegra-body -->
        <div class="aegra-footer">
            <span class="aegra-footer-left">Aegra v<?php echo esc_html( AEGRA_VERSION ); ?></span>
            <span class="aegra-footer-centre">A Rob Art | Illustration WordPress plugin</span>
            <span class="aegra-footer-right">created by <?php echo esc_html( gmdate( 'Y' ) ); ?> Rob Snow / Rob Art | Illustration</span>
        </div>
    </div><!-- .aegra-wrap -->
    <?php
}

// ── Assets ────────────────────────────────────────────────────────────────────

add_action( 'admin_enqueue_scripts', function( $hook ) {
    // Normalise the hook suffix from the page SLUG, not WordPress's
    // title-derived hook. WP builds submenu hooks as
    // "{sanitize_title(parent_menu_title)}_page_{slug}", so renaming the menu
    // title (AegraWP → Aegra Site Monitor) changed every submenu hook from
    // "aegra-site-monitor_page_*" to "aegra-site-monitor_page_*" — which broke every
    // hook-string comparison below (CSS/JS stopped loading on sub-pages).
    // Re-deriving the hook from the stable ?page= slug makes all the
    // comparisons title-independent and future-proof against further renames.
    // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only admin list filter; no state change
    $aegra_slug = isset( $_GET['page'] ) ? sanitize_key( wp_unslash( $_GET['page'] ) ) : '';
    if ( $aegra_slug === 'aegra-site-monitor' ) {
        $hook = 'toplevel_page_aegra-site-monitor';
    } elseif ( strpos( $aegra_slug, 'aegra-site-monitor-' ) === 0 ) {
        // Splash/Wizard are registered with a null parent → "admin_page_" prefix.
        $hook = ( in_array( $aegra_slug, [ 'aegra-site-monitor-splash', 'aegra-site-monitor-wizard' ], true ) )
            ? 'admin_page_' . $aegra_slug
            : 'aegra-site-monitor_page_' . $aegra_slug;
    }
    $aegra_pages = [
        'toplevel_page_aegra-site-monitor',
        'aegra-site-monitor_page_aegra-site-monitor-system',
        'aegra-site-monitor_page_aegra-site-monitor-activity',
        'aegra-site-monitor_page_aegra-site-monitor-links',
        'aegra-site-monitor_page_aegra-site-monitor-plugins',
        'aegra-site-monitor_page_aegra-site-monitor-reports',
        'aegra-site-monitor_page_aegra-site-monitor-content',
        'aegra-site-monitor_page_aegra-site-monitor-backend',
        'aegra-site-monitor_page_aegra-site-monitor-database',
        'aegra-site-monitor_page_aegra-site-monitor-traffic',
        'aegra-site-monitor_page_aegra-site-monitor-media',
        'aegra-site-monitor_page_aegra-site-monitor-security',
        'aegra-site-monitor_page_aegra-site-monitor-performance',
        'aegra-site-monitor_page_aegra-site-monitor-settings',
        'admin_page_aegra-site-monitor-splash',
        'admin_page_aegra-site-monitor-wizard',
    ];
    if ( ! in_array( $hook, $aegra_pages, true ) ) return;

    // WP 7.0 form/button restore — keeps plugin admin UIs looking like 6.x.
    wp_enqueue_style( 'aegra-site-monitor-wp7-restore', AEGRA_URL . 'assets/css/wp7-forms-restore.css', [], AEGRA_VERSION );
    wp_enqueue_style( 'aegra-site-monitor-admin', AEGRA_URL . 'assets/css/admin.css', [ 'aegra-site-monitor-wp7-restore' ], AEGRA_VERSION );
    // jquery is a dependency so view scripts attached via wp_add_inline_script
    // (e.g. activity-log, broken-links) can safely use the jQuery global.
    wp_enqueue_script( 'aegra-site-monitor-admin', AEGRA_URL . 'assets/js/admin.js', [ 'jquery' ], AEGRA_VERSION, true );

    if ( $hook === 'toplevel_page_aegra-site-monitor' ) {
        wp_enqueue_script( 'd3', AEGRA_URL . 'assets/js/d3.min.js', [], '7', true );
        wp_enqueue_script( 'aegra-site-monitor-dashboard', AEGRA_URL . 'assets/js/dashboard.js', [ 'd3' ], AEGRA_VERSION, true );
    }

    if ( $hook === 'aegra-site-monitor_page_aegra-site-monitor-database' ) {
        wp_enqueue_script( 'd3', AEGRA_URL . 'assets/js/d3.min.js', [], '7', true );
        wp_enqueue_script( 'aegra-site-monitor-database', AEGRA_URL . 'assets/js/database.js', [ 'd3' ], AEGRA_VERSION, true );
        wp_localize_script( 'aegra-site-monitor-admin', 'aegraSystem', [
            'ajaxurl' => admin_url( 'admin-ajax.php' ),
            'nonce'   => wp_create_nonce( 'aegra_integrity' ),
        ] );
    }

    if ( $hook === 'aegra-site-monitor_page_aegra-site-monitor-traffic' ) {
        wp_enqueue_script( 'd3', AEGRA_URL . 'assets/js/d3.min.js', [], '7', true );
        wp_enqueue_script( 'topojson', AEGRA_URL . 'assets/js/topojson.min.js', [], '3.0.2', true );
        wp_enqueue_script( 'aegra-site-monitor-traffic', AEGRA_URL . 'assets/js/traffic.js', [ 'd3', 'topojson' ], AEGRA_VERSION, true );
    }

    if ( $hook === 'aegra-site-monitor_page_aegra-site-monitor-backend' ) {
        wp_enqueue_script( 'd3', AEGRA_URL . 'assets/js/d3.min.js', [], '7', true );
        wp_enqueue_script( 'aegra-site-monitor-dashboard', AEGRA_URL . 'assets/js/dashboard.js', [ 'd3' ], AEGRA_VERSION, true );
        // The Pro Advanced-Settings module's JS (backend-settings.js) reads
        // aegraSystem.nonce / .ajaxurl, so localise it on this page too.
        wp_localize_script( 'aegra-site-monitor-admin', 'aegraSystem', [
            'ajaxurl' => admin_url( 'admin-ajax.php' ),
            'nonce'   => wp_create_nonce( 'aegra_integrity' ),
        ] );
    }

    if ( $hook === 'aegra-site-monitor_page_aegra-site-monitor-content' ) {
        wp_enqueue_script( 'd3', AEGRA_URL . 'assets/js/d3.min.js', [], '7', true );
        wp_enqueue_script( 'aegra-site-monitor-dashboard', AEGRA_URL . 'assets/js/dashboard.js', [ 'd3' ], AEGRA_VERSION, true );
    }

    if ( $hook === 'aegra-site-monitor_page_aegra-site-monitor-media' ) {
        wp_enqueue_script( 'd3', AEGRA_URL . 'assets/js/d3.min.js', [], '7', true );
        wp_enqueue_script( 'aegra-site-monitor-dashboard', AEGRA_URL . 'assets/js/dashboard.js', [ 'd3' ], AEGRA_VERSION, true );
        wp_localize_script( 'aegra-site-monitor-dashboard', 'aegraMedia', [
            'ajaxurl' => admin_url( 'admin-ajax.php' ),
            'nonce'   => wp_create_nonce( 'aegra_media_confirm' ),
        ] );
    }

    if ( $hook === 'aegra-site-monitor_page_aegra-site-monitor-system' ) {
        wp_localize_script( 'aegra-site-monitor-admin', 'aegraSystem', [
            'ajaxurl' => admin_url( 'admin-ajax.php' ),
            'nonce'   => wp_create_nonce( 'aegra_integrity' ),
        ] );
    }

    if ( $hook === 'aegra-site-monitor_page_aegra-site-monitor-performance' ) {
        wp_enqueue_script( 'd3', AEGRA_URL . 'assets/js/d3.min.js', [], '7', true );
        wp_enqueue_script( 'aegra-site-monitor-dashboard', AEGRA_URL . 'assets/js/dashboard.js', [ 'd3' ], AEGRA_VERSION, true );
    }

    if ( $hook === 'aegra-site-monitor_page_aegra-site-monitor-plugins' ) {
        wp_enqueue_script( 'd3', AEGRA_URL . 'assets/js/d3.min.js', [], '7', true );
        wp_enqueue_script( 'aegra-site-monitor-dashboard', AEGRA_URL . 'assets/js/dashboard.js', [ 'd3' ], AEGRA_VERSION, true );
    }

    if ( $hook === 'aegra-site-monitor_page_aegra-site-monitor-reports' ) {
        wp_enqueue_script( 'd3', AEGRA_URL . 'assets/js/d3.min.js', [], '7', true );
        wp_enqueue_script( 'aegra-site-monitor-dashboard', AEGRA_URL . 'assets/js/dashboard.js', [ 'd3' ], AEGRA_VERSION, true );
    }
} );

// ── Admin bar lights ──────────────────────────────────────────────────────────

// Admin-bar "light" dot styles. Registered as a real style handle (empty src)
// and emitted via wp_add_inline_style — no literal <style> tag (.org compliant).
// Runs on both admin and front-end since the admin bar appears in both contexts.
add_action( 'admin_enqueue_scripts', 'aegra_inline_bar_styles' );
add_action( 'wp_enqueue_scripts',    'aegra_inline_bar_styles' );
function aegra_inline_bar_styles() {
    if ( ! is_admin_bar_showing() ) return;
    $handle = 'aegra-adminbar';
    if ( ! wp_style_is( $handle, 'registered' ) ) {
        wp_register_style( $handle, false, [], AEGRA_VERSION );
    }
    wp_enqueue_style( $handle );
    $css = '#wpadminbar .aegra-light{display:inline-block;width:10px;height:10px;border-radius:50%;margin-right:6px;}'
         . '#wpadminbar .aegra-light.green{background:#2ecc71;}'
         . '#wpadminbar .aegra-light.red{background:#e74c3c;}';
    wp_add_inline_style( $handle, $css );
}

// ── Main plugin class ─────────────────────────────────────────────────────────

// Pro engine methods live in pro/engines-trait.php (not shipped to .org).
// When Pro is present we load the real trait; otherwise define an empty
// stub so the class definition is always valid and the free package
// contains no Pro engine code.
if ( file_exists( AEGRA_PATH . 'pro/engines-trait.php' ) ) {
    require_once AEGRA_PATH . 'pro/engines-trait.php';
} else {
    trait Aegra_Pro_Engines {}
}

class AegraWP {

    use Aegra_Pro_Engines;

    private $db_status = [ 'connection' => false, 'write' => false, 'last_write' => null ];
    private $activity_logger;
    private $link_checker;
    private $traffic_tracker;

    public function __construct() {
        $this->activity_logger  = new Aegra_Activity_Logger();
        $this->link_checker     = new Aegra_Broken_Link_Checker();
        $this->traffic_tracker  = new Aegra_Traffic_Tracker();
        $this->traffic_tracker->init();

        add_action( 'init',              [ $this, 'run_health_check' ] );
        add_action( 'admin_bar_menu',    [ $this, 'admin_bar_nodes' ], 999 );
        add_action( 'wp_dashboard_setup',[ $this, 'dashboard_widgets' ] );
        add_action( 'admin_menu',        [ $this, 'register_menu' ] );
        add_filter( 'plugin_action_links_' . plugin_basename( __FILE__ ), [ $this, 'plugin_action_links' ] );

        // AJAX — existing
        add_action( 'wp_ajax_aegra_export_activity_log',        [ $this, 'export_activity_log' ] );
        add_action( 'wp_ajax_aegra_clear_activity_log',         [ $this, 'ajax_clear_log' ] );
        add_action( 'wp_ajax_aegra_start_link_scan',            [ $this, 'ajax_start_scan' ] );
        add_action( 'wp_ajax_aegra_process_link_scan_batch',    [ $this, 'ajax_scan_batch' ] );
        add_action( 'wp_ajax_aegra_recheck_link',               [ $this, 'ajax_recheck_link' ] );

        // AJAX — wizard
        add_action( 'wp_ajax_aegra_wizard_verify_tables',    [ $this, 'wizard_verify_tables' ] );
        add_action( 'wp_ajax_aegra_wizard_save_monitoring',  [ $this, 'wizard_save_monitoring' ] );
        // aegra_wizard_activate_licence is Pro-side (pro/licence.php) — the free
        // wizard must not present a licence-entry step (see modal/wizard task).
        add_action( 'wp_ajax_aegra_wizard_complete',         [ $this, 'wizard_complete' ] );
        add_action( 'wp_ajax_aegra_wizard_save_maxmind',     [ $this, 'wizard_save_maxmind' ] );

        // AJAX — MaxMind installer
        add_action( 'wp_ajax_aegra_mmdb_install', 'aegra_ajax_mmdb_install' );

        // AJAX — Media confirmed in use
        add_action( 'wp_ajax_aegra_confirm_media_used', [ $this, 'ajax_confirm_media_used' ] );
        add_action( 'wp_ajax_aegra_unconfirm_media_used', [ $this, 'ajax_unconfirm_media_used' ] );

        // AJAX — System integrity scans

        // AJAX — System advanced
        add_action( 'wp_ajax_aegra_send_test_email',   [ $this, 'ajax_send_test_email' ] );
        add_action( 'wp_ajax_aegra_save_env_baseline', [ $this, 'ajax_save_env_baseline' ] );

        // AJAX — Database snapshots

        // AJAX — Query monitor
        add_action( 'wp_ajax_aegra_qm_toggle',         [ $this, 'ajax_qm_toggle' ] );
        add_action( 'wp_ajax_aegra_qm_save_threshold', [ $this, 'ajax_qm_save_threshold' ] );
        add_action( 'wp_ajax_aegra_qm_clear',          [ $this, 'ajax_qm_clear' ] );

        // AJAX — Database optimisation
        add_action( 'wp_ajax_aegra_opt_clean_orphans',    [ $this, 'ajax_opt_clean_orphans' ] );
        add_action( 'wp_ajax_aegra_opt_clean_transients', [ $this, 'ajax_opt_clean_transients' ] );
        add_action( 'wp_ajax_aegra_opt_optimize_tables',  [ $this, 'ajax_opt_optimize_tables' ] );

        // AJAX — Scheduled scans

        // AJAX — Brute force
        add_action( 'wp_ajax_aegra_bf_save_settings', [ $this, 'ajax_bf_save_settings' ] );
        add_action( 'wp_ajax_aegra_bf_unlock',        [ $this, 'ajax_bf_unlock' ] );
        add_action( 'wp_ajax_aegra_bf_clear',         [ $this, 'ajax_bf_clear' ] );

        // AJAX — File Integrity Monitoring

        // AJAX — Security Alerts

        // AJAX — Advanced Settings
        add_action( 'wp_ajax_aegra_danger_clear_traffic', [ $this, 'ajax_danger_clear_traffic' ] );
        add_action( 'wp_ajax_aegra_danger_clear_activity',[ $this, 'ajax_danger_clear_activity' ] );

        // Brute force enforcement — runs before credentials checked

        // AJAX — IP & Geo blocking

        // Cron hook — scheduled DB scan

        // Cron hook — performance snapshot (hourly)
        add_action( 'aegra_perf_snapshot', [ $this, 'record_perf_snapshot' ] );
        if ( ! wp_next_scheduled( 'aegra_perf_snapshot' ) ) {
            wp_schedule_event( time(), 'hourly', 'aegra_perf_snapshot' );
        }

        // AJAX — performance snapshot (manual trigger)
        add_action( 'wp_ajax_aegra_perf_snapshot_now', [ $this, 'ajax_perf_snapshot_now' ] );

        // Register custom cron schedule (weekly)
        add_filter( 'cron_schedules', [ $this, 'add_cron_schedules' ] );

        // Pro runtime hooks — registered by pro/pro.php when present
        do_action( 'aegra_pro_init', $this );

        // Admin post — settings save
        add_action( 'admin_post_aegra_save_settings', [ $this, 'save_settings' ] );

        // Admin post — traffic CSV export
    }

    /* ── Health check ─────────────────────────────────────────────────────── */

    public function run_health_check() {
        global $wpdb;
        $connection = $write = false;
        $last_write = get_option( 'aegra_last_admin_write' );

        if ( $wpdb->query( 'SELECT 1' ) !== false ) {
            $connection = true;
            $now = current_time( 'mysql' );
            $updated = update_option( 'aegra_system_test', $now, false );
            if ( $updated !== false || get_option( 'aegra_system_test' ) === $now ) {
                $write = true;
                update_option( 'aegra_last_admin_write', $now );
                $last_write = $now;
            }
        }
        $this->db_status = compact( 'connection', 'write', 'last_write' );
    }

    /* ── Admin bar ────────────────────────────────────────────────────────── */

    public function admin_bar_nodes( $wp_admin_bar ) {
        if ( ! current_user_can( 'manage_options' ) ) return;
        $conn  = $this->db_status['connection'];
        $write = $this->db_status['write'];
        $wp_admin_bar->add_node( [
            'id'    => 'aegra-db-connection',
            'title' => '<span class="aegra-light ' . ( $conn ? 'green' : 'red' ) . '"></span> DB',
            'meta'  => [ 'title' => $conn ? 'Database: OK' : 'Database: FAILED' ],
        ] );
        $wp_admin_bar->add_node( [
            'id'    => 'aegra-db-write',
            'title' => '<span class="aegra-light ' . ( $write ? 'green' : 'red' ) . '"></span> Write',
            'meta'  => [ 'title' => $write ? 'DB Writable' : 'DB Write Failed' ],
        ] );
    }

    /* ── Dashboard widgets ────────────────────────────────────────────────── */

    public function dashboard_widgets() {
        $logo = '<img src="' . esc_url( AEGRA_URL . 'assets/logo/aegra-site-monitor_blue.svg' ) . '" alt="Aegra Site Monitor" style="height:20px;vertical-align:middle;margin-right:8px;">';
        wp_add_dashboard_widget( 'aegra_overview', $logo . 'Aegra Site Monitor', [ $this, 'widget_overview' ] );
    }

    public function widget_overview() {
        $logo_white = '<img src="' . esc_url( AEGRA_URL . 'assets/logo/aegra-site-monitor_white_MENU.svg' ) . '" alt="" style="height:18px;vertical-align:middle;margin-right:8px;opacity:.9;">';

        // ── Pro upsell (free only) ─────────────────────────────────────────────
        // Compact advert band just under the widget title bar, linking to the
        // Lemon Squeezy checkout. Shown only when the Pro extension is absent.
        // Pure marketing (no gated feature) — WordPress.org-compliant.
        if ( ! ( function_exists( 'aegra_get_tier' ) && aegra_get_tier() === 'Pro' ) ) {
            $buy = esc_url( defined( 'AEGRA_PURCHASE_URL' ) ? AEGRA_PURCHASE_URL : 'https://robsnow.eu/' );
            echo wp_kses_post( '<div style="margin:-12px -12px 12px;padding:10px 12px;background:linear-gradient(135deg,#5184b3,#3f6a94);color:#fff;display:flex;align-items:center;justify-content:space-between;gap:10px;">' );
            echo wp_kses_post( '<span style="font-size:12px;line-height:1.4;">' . $logo_white . '<strong>Go Pro</strong> — security, performance &amp; visitor analytics, scheduled scans &amp; alerts.</span>' );
            echo wp_kses_post( '<a href="' . $buy . '" target="_blank" rel="noopener" style="flex-shrink:0;background:#fff;color:#3f6a94;font-size:12px;font-weight:700;text-decoration:none;padding:5px 12px;border-radius:4px;white-space:nowrap;">Get Aegra Pro &rarr;</a>' );
            echo wp_kses_post( '</div>' );
        }

        // ── DB Health ─────────────────────────────────────────────────────────
        $s = $this->db_status;
        echo wp_kses_post( '<div style="background:#5184b3;color:#fff;padding:8px 12px;font-size:12px;font-weight:600;letter-spacing:.04em;margin:-12px -12px 0;display:flex;justify-content:space-between;align-items:center;">' );
        echo wp_kses_post( '<span>' . $logo_white . 'DB Health</span>' );
        echo wp_kses_post( '<a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor-database' ) ) . '" style="color:rgba(255,255,255,.75);font-size:11px;font-weight:400;text-decoration:none;">View full →</a>' );
        echo wp_kses_post( '</div>' );
        echo wp_kses_post( '<table class="widefat" style="margin:0 -12px;width:calc(100% + 24px);border:none;box-shadow:none;">' );
        echo wp_kses_post( '<tr><td style="padding:7px 12px;color:#6b7280;font-size:13px;">Connection</td><td style="padding:7px 12px;font-size:13px;">' . ( $s['connection'] ? '<span style="color:#1cc88a;font-weight:600;">OK</span>' : '<span style="color:#e74c3c;font-weight:600;">Failed</span>' ) . '</td></tr>' );
        echo wp_kses_post( '<tr style="background:#f6f7f7;"><td style="padding:7px 12px;color:#6b7280;font-size:13px;">Writable</td><td style="padding:7px 12px;font-size:13px;">' . ( $s['write'] ? 'Yes' : '<span style="color:#e74c3c;font-weight:600;">No</span>' ) . '</td></tr>' );
        echo wp_kses_post( '<tr><td style="padding:7px 12px;color:#6b7280;font-size:13px;">Last Write</td><td style="padding:7px 12px;font-size:13px;">' . esc_html( $s['last_write'] ?: 'None' ) . '</td></tr>' );
        echo wp_kses_post( '</table>' );

        // ── Recent Activity ───────────────────────────────────────────────────
        echo wp_kses_post( '<div style="background:#5184b3;color:#fff;padding:8px 12px;font-size:12px;font-weight:600;letter-spacing:.04em;margin:16px -12px 0;display:flex;justify-content:space-between;align-items:center;">' );
        echo wp_kses_post( '<span>' . $logo_white . 'Recent Activity</span>' );
        echo wp_kses_post( '<a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor-activity' ) ) . '" style="color:rgba(255,255,255,.75);font-size:11px;font-weight:400;text-decoration:none;">View full log →</a>' );
        echo wp_kses_post( '</div>' );
        $sessions = $this->activity_logger->get_recent_sessions( 3 );
        if ( empty( $sessions ) ) {
            echo wp_kses_post( '<p style="margin:10px 0;color:#6b7280;font-size:13px;">No sessions recorded yet.</p>' );
        } else {
            echo wp_kses_post( '<table class="widefat" style="margin:0 -12px;width:calc(100% + 24px);border:none;box-shadow:none;">' );
            $alt = false;
            foreach ( $sessions as $sess ) {
                $actions  = json_decode( $sess->actions, true ) ?: [];
                $time_ago = human_time_diff( strtotime( $sess->login_time ), current_time( 'timestamp' ) ) . ' ago';
                $bg = $alt ? 'background:#f6f7f7;' : '';
                echo wp_kses_post( '<tr style="' . $bg . '"><td style="padding:7px 12px;font-size:13px;"><strong style="color:#5184b3;">' . esc_html( $sess->user_name ) . '</strong></td>' );
                echo wp_kses_post( '<td style="padding:7px 12px;font-size:12px;color:#6b7280;text-align:right;">' . esc_html( $time_ago ) . ' &middot; ' . count( $actions ) . ' actions</td></tr>' );
                $alt = ! $alt;
            }
            echo wp_kses_post( '</table>' );
        }

        // ── Broken Links ──────────────────────────────────────────────────────
        $stats  = $this->link_checker->get_scan_stats();
        $broken = (int) $stats['broken_links'];
        $total  = (int) $stats['total_links'];
        $colour = $broken > 0 ? '#e74c3c' : '#1cc88a';
        echo wp_kses_post( '<div style="background:#5184b3;color:#fff;padding:8px 12px;font-size:12px;font-weight:600;letter-spacing:.04em;margin:16px -12px 0;display:flex;justify-content:space-between;align-items:center;">' );
        echo wp_kses_post( '<span>' . $logo_white . 'Broken Links</span>' );
        echo wp_kses_post( '<a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor-links' ) ) . '" style="color:rgba(255,255,255,.75);font-size:11px;font-weight:400;text-decoration:none;">View details →</a>' );
        echo wp_kses_post( '</div>' );
        echo wp_kses_post( '<div style="display:flex;gap:12px;margin:12px 0 4px;">' );
        echo wp_kses_post( '<div style="flex:1;text-align:center;padding:10px;background:#f6f7f7;border-radius:6px;">' );
        echo wp_kses_post( '<div style="font-size:26px;font-weight:700;color:' . $colour . ';">' . $broken . '</div>' );
        echo wp_kses_post( '<div style="font-size:11px;color:#6b7280;text-transform:uppercase;margin-top:2px;">Broken</div></div>' );
        echo wp_kses_post( '<div style="flex:1;text-align:center;padding:10px;background:#f6f7f7;border-radius:6px;">' );
        echo wp_kses_post( '<div style="font-size:26px;font-weight:700;color:#5184b3;">' . $total . '</div>' );
        echo wp_kses_post( '<div style="font-size:11px;color:#6b7280;text-transform:uppercase;margin-top:2px;">Total</div></div>' );
        echo wp_kses_post( '</div>' );

        // ── Updates ───────────────────────────────────────────────────────────
        $plugin_updates = 0;
        $pu = get_site_transient( 'update_plugins' );
        if ( $pu && ! empty( $pu->response ) ) $plugin_updates = count( $pu->response );

        $theme_updates = 0;
        $tu = get_site_transient( 'update_themes' );
        if ( $tu && ! empty( $tu->response ) ) $theme_updates = count( $tu->response );

        $core_updates = 0;
        if ( ! function_exists( 'get_core_updates' ) ) require_once ABSPATH . 'wp-admin/includes/update.php';
        $cu = get_core_updates();
        if ( is_array( $cu ) ) {
            foreach ( $cu as $u ) {
                if ( isset( $u->response ) && $u->response !== 'latest' ) $core_updates++;
            }
        }

        $total_updates = $plugin_updates + $theme_updates + $core_updates;
        $upd_colour    = $total_updates > 0 ? '#f6a623' : '#1cc88a';

        echo wp_kses_post( '<div style="background:#5184b3;color:#fff;padding:8px 12px;font-size:12px;font-weight:600;letter-spacing:.04em;margin:16px -12px 0;display:flex;justify-content:space-between;align-items:center;">' );
        echo wp_kses_post( '<span>' . $logo_white . 'Updates</span>' );
        echo wp_kses_post( '<a href="' . esc_url( admin_url( 'update-core.php' ) ) . '" style="color:rgba(255,255,255,.75);font-size:11px;font-weight:400;text-decoration:none;">Manage →</a>' );
        echo wp_kses_post( '</div>' );
        echo wp_kses_post( '<table class="widefat" style="margin:0 -12px;width:calc(100% + 24px);border:none;box-shadow:none;">' );
        echo wp_kses_post( '<tr><td style="padding:7px 12px;color:#6b7280;font-size:13px;">WordPress Core</td><td style="padding:7px 12px;font-size:13px;font-weight:600;color:' . ( $core_updates > 0 ? '#f6a623' : '#1cc88a' ) . ';">' . ( $core_updates > 0 ? $core_updates . ' available' : 'Up to date' ) . '</td></tr>' );
        echo wp_kses_post( '<tr style="background:#f6f7f7;"><td style="padding:7px 12px;color:#6b7280;font-size:13px;">Plugins</td><td style="padding:7px 12px;font-size:13px;font-weight:600;color:' . ( $plugin_updates > 0 ? '#f6a623' : '#1cc88a' ) . ';">' . ( $plugin_updates > 0 ? $plugin_updates . ' pending' : 'All current' ) . '</td></tr>' );
        echo wp_kses_post( '<tr><td style="padding:7px 12px;color:#6b7280;font-size:13px;">Themes</td><td style="padding:7px 12px;font-size:13px;font-weight:600;color:' . ( $theme_updates > 0 ? '#f6a623' : '#1cc88a' ) . ';">' . ( $theme_updates > 0 ? $theme_updates . ' pending' : 'All current' ) . '</td></tr>' );
        echo wp_kses_post( '</table>' );

        // ── Security ──────────────────────────────────────────────────────────
        $failed_key    = 'aegra_failed_logins_' . gmdate( 'Y-m-d' );
        $failed_today  = (int) get_transient( $failed_key );
        $admin_count   = (int) count( get_users( [ 'role' => 'administrator', 'fields' => 'ID' ] ) );

        echo wp_kses_post( '<div style="background:#5184b3;color:#fff;padding:8px 12px;font-size:12px;font-weight:600;letter-spacing:.04em;margin:16px -12px 0;display:flex;justify-content:space-between;align-items:center;">' );
        echo wp_kses_post( '<span>' . $logo_white . 'Security</span>' );
        echo wp_kses_post( '<a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor-security' ) ) . '" style="color:rgba(255,255,255,.75);font-size:11px;font-weight:400;text-decoration:none;">View full →</a>' );
        echo wp_kses_post( '</div>' );
        echo wp_kses_post( '<table class="widefat" style="margin:0 -12px;width:calc(100% + 24px);border:none;box-shadow:none;">' );
        echo wp_kses_post( '<tr><td style="padding:7px 12px;color:#6b7280;font-size:13px;">Failed Logins (today)</td><td style="padding:7px 12px;font-size:13px;font-weight:600;color:' . ( $failed_today > 0 ? '#e74c3c' : '#1cc88a' ) . ';">' . $failed_today . '</td></tr>' );
        echo wp_kses_post( '<tr style="background:#f6f7f7;"><td style="padding:7px 12px;color:#6b7280;font-size:13px;">Administrators</td><td style="padding:7px 12px;font-size:13px;font-weight:600;color:' . ( $admin_count > 2 ? '#f6a623' : '#1cc88a' ) . ';">' . $admin_count . '</td></tr>' );
        echo wp_kses_post( '</table>' );
        echo wp_kses_post( '<div style="margin-bottom:4px;"></div>' );
    }

    /* ── Menu ─────────────────────────────────────────────────────────────── */

    public function plugin_action_links( $links ) {
        $deactivate = $links['deactivate'] ?? null;
        $new = [];
        // "Get Premium" action link (Yoast-style) — only when Pro is absent.
        // Pure outbound advert to the Lemon Squeezy checkout; compliant upsell.
        if ( ! ( function_exists( 'aegra_get_tier' ) && aegra_get_tier() === 'Pro' ) ) {
            $buy = defined( 'AEGRA_PURCHASE_URL' ) ? AEGRA_PURCHASE_URL : 'https://robsnow.eu/';
            $new['getpro'] = '<a href="' . esc_url( $buy ) . '" target="_blank" rel="noopener"'
                . ' style="color:#5184b3;font-weight:700;">' . esc_html__( 'Get Pro', 'aegra-site-monitor' ) . '</a>';
        }
        if ( $deactivate ) $new['deactivate'] = $deactivate;
        $new['settings'] = '<a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor-settings' ) ) . '">' . __( 'Settings', 'aegra-site-monitor' ) . '</a>';
        return $new;
    }

    public function register_menu() {
        $icon = 'data:image/svg+xml;base64,' . base64_encode( file_get_contents( AEGRA_PATH . 'assets/logo/aegra-site-monitor_white_MENU.svg' ) );

        add_menu_page(
            'Aegra Site Monitor',
            'Aegra',
            'manage_options',
            'aegra-site-monitor',
            [ $this, 'page_dashboard' ],
            $icon,
            30
        );

        add_submenu_page( 'aegra-site-monitor', 'Dashboard',      'Dashboard',      'manage_options', 'aegra-site-monitor',                [ $this, 'page_dashboard' ] );
        add_submenu_page( 'aegra-site-monitor', 'System',         'System',         'manage_options', 'aegra-site-monitor-system',         [ $this, 'page_system' ] );
        add_submenu_page( 'aegra-site-monitor', 'Database',          'Database',          'manage_options', 'aegra-site-monitor-database',  [ $this, 'page_database' ] );
        add_submenu_page( 'aegra-site-monitor', 'Traffic & Analytics', 'Traffic',    'manage_options', 'aegra-site-monitor-traffic',   [ $this, 'page_traffic' ] );
        add_submenu_page( 'aegra-site-monitor', 'Security',       'Security',       'manage_options', 'aegra-site-monitor-security',       [ $this, 'page_security' ] );
        add_submenu_page( 'aegra-site-monitor', 'Backend',        'Backend',        'manage_options', 'aegra-site-monitor-backend',        [ $this, 'page_backend' ] );
        add_submenu_page( 'aegra-site-monitor', 'Frontend',        'Frontend',       'manage_options', 'aegra-site-monitor-content',        [ $this, 'page_content' ] );
        add_submenu_page( 'aegra-site-monitor', 'Media Library',  'Media Library',  'manage_options', 'aegra-site-monitor-media',          [ $this, 'page_media' ] );
        add_submenu_page( 'aegra-site-monitor', 'Performance',    'Performance',    'manage_options', 'aegra-site-monitor-performance',    [ $this, 'page_performance' ] );
        add_submenu_page( 'aegra-site-monitor', 'Plugins',        'Plugins',        'manage_options', 'aegra-site-monitor-plugins',         [ $this, 'page_plugins' ] );
        add_submenu_page( 'aegra-site-monitor', 'Broken Links',   'Broken Links',   'manage_options', 'aegra-site-monitor-links',          [ $this, 'page_links' ] );
        add_submenu_page( 'aegra-site-monitor', 'Reports',        'Reports',        'manage_options', 'aegra-site-monitor-reports',         [ $this, 'page_reports' ] );
        add_submenu_page( 'aegra-site-monitor', 'Activity Log',   'Activity Log',   'manage_options', 'aegra-site-monitor-activity',       [ $this, 'page_activity' ] );
        add_submenu_page( 'aegra-site-monitor', 'Settings',       'Settings',       'manage_options', 'aegra-site-monitor-settings',       [ $this, 'page_settings' ] );

        // Hidden pages
        add_submenu_page( null, 'Aegra Site Monitor Setup',  'Setup',  'manage_options', 'aegra-site-monitor-splash', 'aegra_page_splash' );
        add_submenu_page( null, 'Aegra Site Monitor Wizard', 'Wizard', 'manage_options', 'aegra-site-monitor-wizard', 'aegra_page_wizard' );
    }

    /* ── Pages ────────────────────────────────────────────────────────────── */

    public function page_dashboard() {
        $data = $this->gather_dashboard_data();

        $sidebar = '
        <div class="aegra-sidebar-section">
            <div class="aegra-sidebar-heading">Quick Actions</div>
            <div class="aegra-sidebar-actions">
                <a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor-activity' ) ) . '" class="aegra-sidebar-btn aegra-sidebar-btn-primary">Activity Log</a>
                <a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor-links' ) ) . '" class="aegra-sidebar-btn">Broken Links</a>
                <a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor-content' ) ) . '" class="aegra-sidebar-btn">Content Audit</a>
                <a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor-backend' ) ) . '" class="aegra-sidebar-btn">Users</a>
                <a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor-system' ) ) . '" class="aegra-sidebar-btn">System</a>
            </div>
        </div>
        <div class="aegra-sidebar-section">
            <div class="aegra-sidebar-heading">About Aegra Site Monitor</div>
            <p class="aegra-sidebar-text">Aegra Site Monitor is the all-seeing WordPress monitor, giving you a clear view of everything happening across your site. Track admin activity, audit content, find broken links, monitor plugins, themes, users, and system health, and stay ahead of issues before they become problems. With powerful oversight across both the frontend and backend, it helps you spot changes, uncover weak points, and keep your WordPress installation running smoothly, securely, and under control.</p>
            <p class="aegra-sidebar-text" style="margin-top:8px;">Built by <a href="https://robsnow.eu/plugins-wordpress-development/aegra-site-monitor/" target="_blank" class="aegra-sidebar-link">Rob Art &bull; WordPress Development</a></p>
            <p class="aegra-sidebar-text" style="margin-top:8px;"><a href="#" id="aegra-open-manual" class="aegra-sidebar-link">User Manual</a> &bull; <a href="#" id="aegra-open-readme" class="aegra-sidebar-link">README</a> &bull; <a href="#" id="aegra-open-licence" class="aegra-sidebar-link">Licence</a></p>
        </div>';

        // Dashboard-level Pro promo — the headline upsell (free only). Lists the
        // major Pro capability areas rather than one page's features.
        $sidebar .= aegra_pro_promo_sidebar( [
            'page'     => 'Upgrade to Pro',
            'headline' => 'See everything. Miss nothing.',
            'subline'  => 'Aegra Pro turns the dashboard into a full monitoring suite — security, performance, traffic and more.',
            'benefits' => [
                'Active security: brute-force, IP/geo blocking, file integrity',
                'Performance monitoring & Core Web Vitals',
                'Visitor traffic, sessions & campaign tracking',
                'Scheduled reports, alerts & CSV export',
                'Full content, media & database auditing',
            ],
        ] );

        // Pass chart data to JS
        wp_localize_script( 'aegra-site-monitor-dashboard', 'aegraChartData', $data['chart'] );

        aegra_header( 'Dashboard' );
        $this->render_dashboard( $data );
        $this->render_doc_modals();
        aegra_footer( $sidebar );
    }

    private function render_doc_modals() {
        $aegra_md_to_html = function( $md ) {
            $html = htmlspecialchars( $md, ENT_QUOTES, 'UTF-8' );
            $slug = function( $text ) {
                $s = strtolower( $text );
                $s = preg_replace( '/[^a-z0-9\s-]/', '', $s );
                $s = preg_replace( '/[\s]+/', '-', trim( $s ) );
                return preg_replace( '/-+/', '-', $s );
            };
            $html = preg_replace_callback( '/^#### (.+)$/m', function($m) use ($slug) { $id = $slug(wp_strip_all_tags($m[1])); return "<h4 id=\"{$id}\">{$m[1]}</h4>"; }, $html );
            $html = preg_replace_callback( '/^### (.+)$/m',  function($m) use ($slug) { $id = $slug(wp_strip_all_tags($m[1])); return "<h3 id=\"{$id}\">{$m[1]}</h3>"; }, $html );
            $html = preg_replace_callback( '/^## (.+)$/m',   function($m) use ($slug) { $id = $slug(wp_strip_all_tags($m[1])); return "<h2 id=\"{$id}\">{$m[1]}</h2>"; }, $html );
            $html = preg_replace_callback( '/^# (.+)$/m',    function($m) use ($slug) { $id = $slug(wp_strip_all_tags($m[1])); return "<h1 id=\"{$id}\">{$m[1]}</h1>"; }, $html );
            $html = preg_replace( '/\*\*(.+?)\*\*/', '<strong>$1</strong>', $html );
            $html = preg_replace( '/\*(.+?)\*/',     '<em>$1</em>',         $html );
            $html = preg_replace( '/`([^`]+)`/',     '<code>$1</code>',     $html );
            $html = preg_replace( '/^&gt; (.+)$/m',  '<blockquote>$1</blockquote>', $html );
            $html = preg_replace_callback( '/(\|.+\|\n)+/', function( $m ) {
                $rows = array_filter( explode( "\n", trim( $m[0] ) ) );
                $out  = '<table>'; $head = true;
                foreach ( $rows as $row ) {
                    if ( preg_match( '/^\|[-| :]+\|$/', $row ) ) { $head = false; continue; }
                    $cells = array_map( 'trim', array_slice( explode( '|', $row ), 1, -1 ) );
                    $tag   = $head ? 'th' : 'td';
                    $out  .= '<tr><' . $tag . '>' . implode( '</' . $tag . '><' . $tag . '>', $cells ) . '</' . $tag . '></tr>';
                    if ( $head ) $head = false;
                }
                return $out . '</table>';
            }, $html );
            $html = preg_replace( '/^\d+\. (.+)$/m', '<li>$1</li>', $html );
            $html = preg_replace( '/^[-*] (.+)$/m',  '<li>$1</li>', $html );
            $html = preg_replace( '/(<li>.*?<\/li>\n?)+/s', '<ul>$0</ul>', $html );
            $html = preg_replace( '/^---+$/m', '<hr>', $html );
            $html = preg_replace_callback( '/\[([^\]]+)\]\(([^)]+)\)/', function( $m ) {
                $target = ( strpos( $m[2], '#' ) === 0 ) ? '' : ' target="_blank" rel="noopener"';
                return '<a href="' . esc_attr( $m[2] ) . '"' . $target . '>' . esc_html( $m[1] ) . '</a>';
            }, $html );
            $html = preg_replace( '/^(?!<)(.+)$/m', '<p>$1</p>', $html );
            $html = preg_replace( '/\n{2,}/', "\n", $html );
            return $html;
        };

        $manual_file  = AEGRA_PATH . 'docs/manual.md';
        $readme_file  = AEGRA_PATH . 'README.md';
        $licence_file = AEGRA_PATH . 'licence.txt';

        if ( file_exists( $manual_file ) ) : ?>
        <div class="aegra-modal-backdrop" id="aegra-manual-modal" style="display:none;">
            <div class="aegra-modal">
                <div class="aegra-modal-header">
                    <img src="<?php echo esc_url( AEGRA_URL . 'assets/logo/aegra-site-monitor_white_MENU.svg' ); ?>" alt="" style="width:18px;height:18px;flex-shrink:0;">
                    <h3>Aegra Site Monitor User Manual</h3>
                    <button type="button" class="aegra-modal-close" id="aegra-manual-modal-close">&times;</button>
                </div>
                <div class="aegra-modal-body aegra-guide-body"><?php echo wp_kses_post( $aegra_md_to_html( file_get_contents( $manual_file ) ) ); ?></div>
            </div>
        </div>
        <?php endif;

        if ( file_exists( $readme_file ) ) : ?>
        <div class="aegra-modal-backdrop" id="aegra-readme-modal" style="display:none;">
            <div class="aegra-modal">
                <div class="aegra-modal-header">
                    <img src="<?php echo esc_url( AEGRA_URL . 'assets/logo/aegra-site-monitor_white_MENU.svg' ); ?>" alt="" style="width:18px;height:18px;flex-shrink:0;">
                    <h3>Aegra Site Monitor README</h3>
                    <button type="button" class="aegra-modal-close" id="aegra-readme-modal-close">&times;</button>
                </div>
                <div class="aegra-modal-body aegra-guide-body"><?php echo wp_kses_post( $aegra_md_to_html( file_get_contents( $readme_file ) ) ); ?></div>
            </div>
        </div>
        <?php endif;

        if ( file_exists( $licence_file ) ) : ?>
        <div class="aegra-modal-backdrop" id="aegra-licence-modal" style="display:none;">
            <div class="aegra-modal">
                <div class="aegra-modal-header">
                    <img src="<?php echo esc_url( AEGRA_URL . 'assets/logo/aegra-site-monitor_white_MENU.svg' ); ?>" alt="" style="width:18px;height:18px;flex-shrink:0;">
                    <h3>Aegra Site Monitor Licence</h3>
                    <button type="button" class="aegra-modal-close" id="aegra-licence-modal-close">&times;</button>
                </div>
                <div class="aegra-modal-body aegra-guide-body"><pre style="white-space:pre-wrap;word-wrap:break-word;font-family:inherit;font-size:12px;margin:0;line-height:1.7;"><?php echo esc_html( file_get_contents( $licence_file ) ); ?></pre></div>
            </div>
        </div>
        <?php endif;
    }

    private function gather_dashboard_data() {
        global $wpdb;

        $link_stats  = $this->link_checker->get_scan_stats();
        $post_counts = wp_count_posts( 'post' );
        $page_counts = wp_count_posts( 'page' );
        $user_count  = count_users();
        $sessions    = $this->activity_logger->get_recent_sessions( 8 );

        // All plugins
        $all_plugins    = get_plugins();
        $active_plugins = get_option( 'active_plugins', [] );
        $inactive_count = count( $all_plugins ) - count( $active_plugins );
        $updates        = get_site_transient( 'update_plugins' );
        $update_count   = $updates ? count( (array) $updates->response ) : 0;
        $ok_count       = max( 0, count( $active_plugins ) - $update_count );

        // All themes
        $all_themes       = wp_get_themes();
        $active_theme     = get_stylesheet();
        $parent_theme     = get_template();
        $theme_active_count   = ( $active_theme === $parent_theme ) ? 1 : 2;
        $theme_inactive_count = max( 0, count( $all_themes ) - $theme_active_count );
        $theme_upd        = get_site_transient( 'update_themes' );
        $theme_upd_count  = $theme_upd ? count( (array) $theme_upd->response ) : 0;

        // Media
        $media_total      = (int) $wpdb->get_var( "SELECT COUNT(*) FROM {$wpdb->posts} WHERE post_type='attachment' AND post_status='inherit'" );
        $media_attached   = (int) $wpdb->get_var( "SELECT COUNT(*) FROM {$wpdb->posts} WHERE post_type='attachment' AND post_status='inherit' AND post_parent > 0" );
        $media_unattached = $media_total - $media_attached;

        // Media file types
        $media_types_raw = $wpdb->get_results( "SELECT post_mime_type, COUNT(*) as cnt FROM {$wpdb->posts} WHERE post_type='attachment' AND post_status='inherit' GROUP BY post_mime_type ORDER BY cnt DESC" );
        $media_type_map  = [ 'image' => 0, 'video' => 0, 'audio' => 0, 'application' => 0, 'other' => 0 ];
        foreach ( $media_types_raw as $row ) {
            $top = explode( '/', $row->post_mime_type )[0];
            if ( isset( $media_type_map[ $top ] ) ) {
                $media_type_map[ $top ] += (int) $row->cnt;
            } else {
                $media_type_map['other'] += (int) $row->cnt;
            }
        }

        // Links internal vs external totals
        $link_table      = $wpdb->prefix . 'aegra_broken_links';
        $links_internal  = (int) $wpdb->get_var( $wpdb->prepare( "SELECT COUNT(*) FROM %i WHERE link_type='internal'", $link_table ) );
        $links_external  = (int) $wpdb->get_var( $wpdb->prepare( "SELECT COUNT(*) FROM %i WHERE link_type='external'", $link_table ) );

        // DB: WP core tables vs plugin tables
        $db_name      = DB_NAME;
        $prefix       = $wpdb->prefix;
        $core_tables  = [ 'commentmeta','comments','links','options','postmeta','posts','term_relationships','term_taxonomy','termmeta','terms','usermeta','users' ];
        $core_count   = 0;
        $plugin_count = 0;
        $all_tables   = $wpdb->get_col( $wpdb->prepare( "SELECT TABLE_NAME FROM information_schema.TABLES WHERE table_schema = %s", $db_name ) );
        foreach ( $all_tables as $t ) {
            $bare = str_replace( $prefix, '', $t );
            if ( in_array( $bare, $core_tables, true ) ) {
                $core_count++;
            } else {
                $plugin_count++;
            }
        }

        // DB autoload
        $autoload_size = (int) $wpdb->get_var( "SELECT SUM(LENGTH(option_value)) FROM {$wpdb->options} WHERE autoload IN ('yes','on','1')" );
        $autoload_kb   = round( $autoload_size / 1024 );

        // Table count + total DB size
        $table_data  = $wpdb->get_results( $wpdb->prepare( "SELECT COUNT(*) as tcount, SUM(data_length + index_length) as tsize FROM information_schema.TABLES WHERE table_schema = %s", $db_name ) );
        $table_count = $table_data[0]->tcount ?? 0;
        $db_size_mb  = $table_data[0]->tsize ? round( $table_data[0]->tsize / 1024 / 1024, 1 ) : 0;

        // Transients
        $transient_count = (int) $wpdb->get_var( "SELECT COUNT(*) FROM {$wpdb->options} WHERE option_name LIKE '_transient_%' AND option_name NOT LIKE '_transient_timeout_%'" );

        // Content issues
        $no_thumb = (int) $wpdb->get_var(
            "SELECT COUNT(*) FROM {$wpdb->posts} p
             WHERE p.post_type IN ('post','page') AND p.post_status='publish'
             AND NOT EXISTS (
                 SELECT 1 FROM {$wpdb->postmeta} pm
                 WHERE pm.post_id = p.ID AND pm.meta_key = '_thumbnail_id' AND pm.meta_value != ''
             )"
        );
        $old_drafts = (int) $wpdb->get_var(
            "SELECT COUNT(*) FROM {$wpdb->posts}
             WHERE post_status='draft' AND post_type IN ('post','page')
             AND post_modified < DATE_SUB(NOW(), INTERVAL 90 DAY)"
        );

        // Users by role
        $roles     = wp_roles()->get_names();
        $role_data = [];
        $role_colours = [ '#5184b3', '#1cc88a', '#f6a623', '#e74c3c', '#9b59b6', '#36b9cc' ];
        $ri = 0;
        foreach ( $user_count['avail_roles'] as $role => $cnt ) {
            if ( $cnt < 1 ) continue;
            $label = isset( $roles[ $role ] ) ? translate_user_role( $roles[ $role ] ) : ucfirst( $role );
            $role_data[] = [ 'label' => $label, 'value' => $cnt, 'color' => $role_colours[ $ri % count( $role_colours ) ] ];
            $ri++;
        }

        return [
            'link_stats'      => $link_stats,
            'post_counts'     => $post_counts,
            'page_counts'     => $page_counts,
            'user_count'      => $user_count,
            'sessions'        => $sessions,
            'autoload_kb'     => $autoload_kb,
            'db_size_mb'      => $db_size_mb,
            'table_count'     => $table_count,
            'transient_count' => $transient_count,
            'media_total'     => $media_total,
            'media_attached'  => $media_attached,
            'media_unattached'=> $media_unattached,
            'no_thumb'        => $no_thumb,
            'old_drafts'      => $old_drafts,
            'plugin_total'    => count( $all_plugins ),
            'plugin_active'   => count( $active_plugins ),
            'plugin_inactive' => $inactive_count,
            'plugin_updates'  => $update_count,
            'theme_active'    => $theme_active_count,
            'theme_inactive'  => $theme_inactive_count,
            'theme_updates'   => $theme_upd_count,
            'db_ok'           => $this->db_status['connection'],
            'db_write'        => $this->db_status['write'],
            'chart'           => [
                'links'   => [
                    'ok'       => (int) $link_stats['total_links'] - (int) $link_stats['broken_links'],
                    'broken'   => (int) $link_stats['broken_links'],
                    'total'    => (int) $link_stats['total_links'],
                    'internal' => $links_internal,
                    'external' => $links_external,
                ],
                'media'   => [
                    'attached'   => $media_attached,
                    'unattached' => $media_unattached,
                    'total'      => $media_total,
                    'image'      => $media_type_map['image'],
                    'video'      => $media_type_map['video'],
                    'audio'      => $media_type_map['audio'],
                    'docs'       => $media_type_map['application'],
                    'other'      => $media_type_map['other'],
                ],
                'plugins' => [
                    'active'   => count( $active_plugins ),
                    'inactive' => $inactive_count,
                    'ok'       => $ok_count,
                    'updates'  => $update_count,
                    'total'    => count( $all_plugins ),
                ],
                'themes' => [
                    'active'   => $theme_active_count,
                    'inactive' => $theme_inactive_count,
                    'total'    => count( $all_themes ),
                ],
                'db'      => [
                    'autoload_kb' => $autoload_kb,
                    'core'        => $core_count,
                    'plugin'      => $plugin_count,
                ],
                'users'   => [
                    'roles' => $role_data,
                ],
            ],
        ];
    }

    private function render_dashboard( $d ) {
        $broken   = (int) $d['link_stats']['broken_links'];
        $total_l  = (int) $d['link_stats']['total_links'];
        $pub_posts = isset( $d['post_counts']->publish ) ? (int) $d['post_counts']->publish : 0;
        $pub_pages = isset( $d['page_counts']->publish ) ? (int) $d['page_counts']->publish : 0;
        $total_u  = (int) $d['user_count']['total_users'];
        $wp_ver   = get_bloginfo( 'version' );
        $php_ver  = phpversion();
        ?>

        <!-- ── Card grid ───────────────────────────────────────────────── -->
        <div class="aegra-dash-grid">

            <!-- 1. System & Environment -->
            <div class="aegra-dash-card">
                <div class="aegra-dash-card-header">
                    <span class="aegra-dash-card-title"><?php aegra_the_icon('system'); ?>System</span>
                    <a href="<?php echo esc_url( admin_url( 'admin.php?page=aegra-site-monitor-system' ) ); ?>" class="aegra-dash-card-link">View full →</a>
                </div>
                <div class="aegra-dash-card-body">
                    <?php $this->dash_row( 'WordPress', $wp_ver, get_bloginfo('version') === $wp_ver ? 'ok' : 'warn' ); ?>
                    <?php $this->dash_row( 'PHP', $php_ver, version_compare( $php_ver, '8.0', '>=' ) ? 'ok' : 'warn' ); ?>
                    <?php global $wpdb; $this->dash_row( 'MySQL', $wpdb->db_version(), 'ok' ); ?>
                    <?php $this->dash_row( 'HTTPS', is_ssl() ? 'Active' : 'Inactive', is_ssl() ? 'ok' : 'error' ); ?>
                    <?php $this->dash_row( 'Debug Mode', ( defined('WP_DEBUG') && WP_DEBUG ) ? 'On' : 'Off', ( defined('WP_DEBUG') && WP_DEBUG ) ? 'warn' : 'ok' ); ?>
                    <?php $mem = ini_get('memory_limit'); $this->dash_row( 'Memory Limit', $mem, ( intval($mem) >= 256 || intval($mem) === -1 ) ? 'ok' : 'warn' ); ?>
                    <?php $this->dash_row( 'WP Cron', defined('DISABLE_WP_CRON') && DISABLE_WP_CRON ? 'Disabled' : 'Active', defined('DISABLE_WP_CRON') && DISABLE_WP_CRON ? 'warn' : 'ok' ); ?>
                </div>
            </div>

            <!-- 2. Database Health -->
            <div class="aegra-dash-card">
                <div class="aegra-dash-card-header">
                    <span class="aegra-dash-card-title"><?php aegra_the_icon('database'); ?>Database</span>
                    <a href="<?php echo esc_url( admin_url( 'admin.php?page=aegra-site-monitor-database' ) ); ?>" class="aegra-dash-card-link">View full →</a>
                </div>
                <div class="aegra-dash-card-body">
                    <div class="aegra-chart-pair">
                        <div id="aegra-chart-db" class="aegra-chart-wrap"></div>
                        <div id="aegra-chart-db2" class="aegra-chart-wrap"></div>
                    </div>
                    <?php $this->dash_row( 'Size', $d['db_size_mb'] . ' MB' ); ?>
                    <?php $this->dash_row( 'Tables', $d['table_count'] ); ?>
                    <?php $this->dash_row( 'Transients', $d['transient_count'], $d['transient_count'] > 200 ? 'warn' : 'ok' ); ?>
                </div>
            </div>

            <!-- 3. Activity Log -->
            <div class="aegra-dash-card">
                <div class="aegra-dash-card-header">
                    <span class="aegra-dash-card-title"><?php aegra_the_icon('activity'); ?>Activity Log</span>
                    <a href="<?php echo esc_url( admin_url( 'admin.php?page=aegra-site-monitor-activity' ) ); ?>" class="aegra-dash-card-link">View full →</a>
                </div>
                <div class="aegra-dash-card-body">
                    <?php if ( empty( $d['sessions'] ) ): ?>
                        <p class="aegra-dash-empty">No sessions recorded yet.</p>
                    <?php else: ?>
                        <?php foreach ( array_slice( $d['sessions'], 0, 8 ) as $s ):
                            $actions  = json_decode( $s->actions, true ) ?: [];
                            $time_ago = human_time_diff( strtotime( $s->login_time ), current_time( 'timestamp' ) );
                        ?>
                        <div class="aegra-dash-row">
                            <span class="aegra-dash-row-label"><?php echo esc_html( $s->user_name ); ?></span>
                            <span class="aegra-dash-row-meta"><?php echo esc_html( $time_ago ); ?> · <?php echo esc_html( count( $actions ) ); ?> actions</span>
                        </div>
                        <?php endforeach; ?>
                    <?php endif; ?>
                </div>
            </div>

            <!-- 4. Broken Links -->
            <div class="aegra-dash-card">
                <div class="aegra-dash-card-header">
                    <span class="aegra-dash-card-title"><?php aegra_the_icon('broken_link'); ?>Broken Links</span>
                    <a href="<?php echo esc_url( admin_url( 'admin.php?page=aegra-site-monitor-links' ) ); ?>" class="aegra-dash-card-link">View full →</a>
                </div>
                <div class="aegra-dash-card-body">
                    <?php if ( $total_l > 0 ): ?>
                        <div class="aegra-chart-pair">
                            <div id="aegra-chart-links" class="aegra-chart-wrap"></div>
                            <div id="aegra-chart-links2" class="aegra-chart-wrap"></div>
                        </div>
                    <?php else: ?>
                        <p class="aegra-dash-empty">No scan run yet.</p>
                    <?php endif; ?>
                    <?php $this->dash_row( 'Total Links', $total_l ); ?>
                    <?php $this->dash_row( 'Broken', $broken, $broken > 0 ? 'error' : 'ok' ); ?>
                    <?php if ( $d['link_stats']['last_scan_end'] ):
                        $ago = human_time_diff( strtotime( $d['link_stats']['last_scan_end'] ), current_time('timestamp') );
                        $this->dash_row( 'Last Scan', $ago . ' ago' );
                    endif; ?>
                </div>
            </div>

            <!-- 5. Content Audit -->
            <div class="aegra-dash-card">
                <div class="aegra-dash-card-header">
                    <span class="aegra-dash-card-title"><?php aegra_the_icon('content'); ?>Content</span>
                    <a href="<?php echo esc_url( admin_url( 'admin.php?page=aegra-site-monitor-content' ) ); ?>" class="aegra-dash-card-link">View full →</a>
                </div>
                <div class="aegra-dash-card-body">
                    <?php $this->dash_row( 'Published Posts', $pub_posts ); ?>
                    <?php $this->dash_row( 'Published Pages', $pub_pages ); ?>
                    <?php $drafts = isset( $d['post_counts']->draft ) ? (int) $d['post_counts']->draft : 0;
                          $this->dash_row( 'Drafts', $drafts, $drafts > 20 ? 'warn' : '' ); ?>
                    <?php $this->dash_row( 'No Featured Image', $d['no_thumb'], $d['no_thumb'] > 0 ? 'warn' : 'ok' ); ?>
                    <?php $this->dash_row( 'Old Drafts (90d+)', $d['old_drafts'], $d['old_drafts'] > 0 ? 'warn' : 'ok' ); ?>
                </div>
            </div>

            <!-- 6. Media Library -->
            <div class="aegra-dash-card">
                <div class="aegra-dash-card-header">
                    <span class="aegra-dash-card-title"><?php aegra_the_icon('media'); ?>Media</span>
                    <a href="<?php echo esc_url( admin_url( 'admin.php?page=aegra-site-monitor-media' ) ); ?>" class="aegra-dash-card-link">View full →</a>
                </div>
                <div class="aegra-dash-card-body">
                    <?php if ( $d['media_total'] > 0 ): ?>
                        <div class="aegra-chart-pair">
                            <div id="aegra-chart-media" class="aegra-chart-wrap"></div>
                            <div id="aegra-chart-media2" class="aegra-chart-wrap"></div>
                        </div>
                    <?php endif; ?>
                    <?php $this->dash_row( 'Total Media', $d['media_total'] ); ?>
                    <?php $this->dash_row( 'Unattached', $d['media_unattached'], $d['media_unattached'] > 0 ? 'warn' : 'ok' ); ?>
                </div>
            </div>

            <!-- 7. Users -->
            <div class="aegra-dash-card">
                <div class="aegra-dash-card-header">
                    <span class="aegra-dash-card-title"><?php aegra_the_icon('user'); ?>Users</span>
                    <a href="<?php echo esc_url( admin_url( 'admin.php?page=aegra-site-monitor-backend' ) ); ?>" class="aegra-dash-card-link">View full →</a>
                </div>
                <div class="aegra-dash-card-body">
                    <?php $this->dash_row( 'Total Users', $total_u ); ?>
                    <?php $admin_count = $d['user_count']['avail_roles']['administrator'] ?? 0;
                          $this->dash_row( 'Administrators', $admin_count, $admin_count > 2 ? 'warn' : 'ok' ); ?>
                    <div id="aegra-chart-users" class="aegra-chart-wrap" style="margin:10px 0 4px;"></div>
                </div>
            </div>

            <!-- 8. Performance -->
            <div class="aegra-dash-card">
                <div class="aegra-dash-card-header">
                    <span class="aegra-dash-card-title"><?php aegra_the_icon('performance'); ?>Performance</span>
                    <a href="<?php echo esc_url( admin_url( 'admin.php?page=aegra-site-monitor-system' ) ); ?>" class="aegra-dash-card-link">View full →</a>
                </div>
                <div class="aegra-dash-card-body">
                    <?php
                    $cache_plugin = $this->detect_cache_plugin();
                    $obj_cache    = wp_using_ext_object_cache();
                    $this->dash_row( 'Page Cache', $cache_plugin ?: 'None detected', $cache_plugin ? 'ok' : 'warn' );
                    $this->dash_row( 'Object Cache', $obj_cache ? 'Active' : 'None', $obj_cache ? 'ok' : 'warn' );
                    $this->dash_row( 'DB Autoload', $d['autoload_kb'] . ' KB', $d['autoload_kb'] > 1500 ? 'error' : ( $d['autoload_kb'] > 800 ? 'warn' : 'ok' ) );
                    $this->dash_row( 'Memory Limit', ini_get('memory_limit') );

                    // Memory bar
                    $mem_limit_raw = ini_get('memory_limit');
                    $mem_limit_mb  = $mem_limit_raw === '-1' ? 512 : (int) $mem_limit_raw;
                    $mem_used_mb   = round( memory_get_usage( true ) / 1048576, 1 );
                    $mem_peak_mb   = round( memory_get_peak_usage( true ) / 1048576, 1 );
                    $used_pct      = min( 100, round( ( $mem_used_mb / $mem_limit_mb ) * 100 ) );
                    $peak_pct      = min( 100, round( ( $mem_peak_mb / $mem_limit_mb ) * 100 ) );
                    $bar_color     = $used_pct > 80 ? '#e74c3c' : ( $used_pct > 60 ? '#f6a623' : '#1cc88a' );
                    ?>
                    <div class="aegra-mem-bar-wrap">
                        <div class="aegra-mem-bar-labels">
                            <span>Memory Usage</span>
                            <span><?php echo esc_html( $mem_used_mb ); ?> MB / <?php echo esc_html( $mem_limit_mb ); ?> MB</span>
                        </div>
                        <div class="aegra-mem-bar-track">
                            <div class="aegra-mem-bar-fill" style="width:<?php echo esc_html( $used_pct ); ?>%;background:<?php echo esc_html( $bar_color ); ?>;"></div>
                            <div class="aegra-mem-bar-peak" style="left:<?php echo esc_html( $peak_pct ); ?>%;"></div>
                        </div>
                        <div class="aegra-mem-bar-sub">Peak: <?php echo esc_html( $mem_peak_mb ); ?> MB</div>
                    </div>
                </div>
            </div>

            <!-- 9. Plugins & Themes -->
            <div class="aegra-dash-card">
                <div class="aegra-dash-card-header">
                    <span class="aegra-dash-card-title"><?php aegra_the_icon('plugins'); ?>Plugins &amp; Themes</span>
                    <a href="<?php echo esc_url( admin_url( 'admin.php?page=aegra-site-monitor-plugins' ) ); ?>" class="aegra-dash-card-link">View full →</a>
                </div>
                <div class="aegra-dash-card-body">
                    <div class="aegra-chart-pair">
                        <div>
                            <div id="aegra-chart-plugins" class="aegra-chart-wrap"></div>
                            <div class="aegra-chart-caption">Active / Inactive</div>
                        </div>
                        <div>
                            <div id="aegra-chart-themes" class="aegra-chart-wrap"></div>
                            <div class="aegra-chart-caption">Themes Active / Inactive</div>
                        </div>
                    </div>
                    <?php $this->dash_row( 'Active Plugins',    $d['plugin_active'],   'ok' ); ?>
                    <?php $this->dash_row( 'Inactive Plugins',  $d['plugin_inactive'], $d['plugin_inactive'] > 3 ? 'warn' : '' ); ?>
                    <?php $this->dash_row( 'Plugin Updates',    $d['plugin_updates'],  $d['plugin_updates'] > 0 ? 'warn' : 'ok' ); ?>
                    <?php $this->dash_row( 'Active Themes',     $d['theme_active'],    'ok' ); ?>
                    <?php $this->dash_row( 'Inactive Themes',   $d['theme_inactive'],  $d['theme_inactive'] > 2 ? 'warn' : '' ); ?>
                    <?php $this->dash_row( 'Theme Updates',     $d['theme_updates'],   $d['theme_updates'] > 0 ? 'warn' : 'ok' ); ?>
                </div>
            </div>

        </div><!-- .aegra-dash-grid -->
        <?php
    }

    private function dash_row( $label, $value, $status = '' ) {
        $dot = '';
        if ( $status ) {
            $dot = '<span class="aegra-dot ' . esc_attr( $status ) . '"></span>';
        }
        echo wp_kses_post( '<div class="aegra-dash-row">' );
        echo wp_kses_post( '<span class="aegra-dash-row-label">' . esc_html( $label ) . '</span>' );
        echo wp_kses_post( '<span class="aegra-dash-row-value">' . esc_html( $value ) . $dot . '</span>' );
        echo wp_kses_post( '</div>' );
    }

    private function detect_cache_plugin() {
        $cache_plugins = [
            'w3-total-cache/w3-total-cache.php'           => 'W3 Total Cache',
            'wp-super-cache/wp-cache.php'                  => 'WP Super Cache',
            'wp-rocket/wp-rocket.php'                      => 'WP Rocket',
            'litespeed-cache/litespeed-cache.php'          => 'LiteSpeed Cache',
            'sg-cachepress/sg-cachepress.php'              => 'SG Optimizer',
            'swift-performance-lite/swift-performance.php' => 'Swift Performance',
            'cache-enabler/cache-enabler.php'              => 'Cache Enabler',
            'comet-cache/comet-cache.php'                  => 'Comet Cache',
        ];
        $active = get_option( 'active_plugins', [] );
        foreach ( $cache_plugins as $slug => $name ) {
            if ( in_array( $slug, $active, true ) ) return $name;
        }
        return '';
    }

    public function page_activity() {
        global $aegra_activity_logger;
        $aegra_activity_logger = $this->activity_logger;

        $sidebar = '
        <div class="aegra-sidebar-section">
            <div class="aegra-sidebar-heading">Activity Log</div>
            <div class="aegra-sidebar-text">Sessions are tracked per login, with each session capturing every admin action taken throughout that visit. This provides a clear, chronological view of user activity, making it easier to understand behaviour patterns, audit changes, and trace actions back to specific users for improved accountability and troubleshooting.</div>
        </div>
        <div class="aegra-sidebar-section">
            <div class="aegra-sidebar-heading">Actions</div>
            <div class="aegra-sidebar-actions">
                <button type="button" id="aegra-clear-log-btn" class="aegra-sidebar-btn">Clear Entire Log</button>
            </div>
        </div>
        <div class="aegra-sidebar-section">
            <div class="aegra-sidebar-heading">Navigation</div>
            <div class="aegra-sidebar-actions">
                <a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor' ) ) . '" class="aegra-sidebar-btn">← Dashboard</a>
            </div>
        </div>';

        aegra_header( 'Activity Log' );
        include AEGRA_PATH . 'views/activity-log-page.php';
        aegra_footer( $sidebar );
    }

    public function page_links() {
        global $aegra_link_checker;
        $aegra_link_checker = $this->link_checker;
        $stats = $this->link_checker->get_scan_stats();

        $sidebar = '
        <div class="aegra-sidebar-section">
            <div class="aegra-sidebar-heading">Broken Links</div>
            <div class="aegra-sidebar-text">Scans all published posts and pages for internal and external links that return errors or timeouts.</div>
        </div>
        <div class="aegra-sidebar-section">
            <div class="aegra-sidebar-heading">Last Scan</div>
            <div class="aegra-sidebar-text">' . ( $stats['last_scan_end'] ? human_time_diff( strtotime( $stats['last_scan_end'] ), current_time( 'timestamp' ) ) . ' ago' : 'Never run' ) . '</div>
        </div>
        <div class="aegra-sidebar-section">
            <div class="aegra-sidebar-heading">Navigation</div>
            <div class="aegra-sidebar-actions">
                <a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor' ) ) . '" class="aegra-sidebar-btn">← Dashboard</a>
            </div>
        </div>';

        aegra_header( 'Broken Links' );
        include AEGRA_PATH . 'views/broken-links-page.php';
        aegra_footer( $sidebar );
    }

    public function page_content() {
        // Pro tabs are injected by the Pro extension via this filter (Elementor
        // model). The free package defines NO Pro tabs — empty here → none
        // render. When Pro is present, pro/pro.php returns the tab list.
        $active_pro_tabs = apply_filters( 'aegra_content_pro_tabs', [] );

        $sidebar = '
        <div class="aegra-sidebar-section aegra-tab-sidebar aegra-tab-sidebar--active" data-sidebar="overview">
            <div class="aegra-sidebar-heading">Overview</div>
            <div class="aegra-sidebar-text">Content counts across all public post types — published, draft, pending, and scheduled. Charts break down your content mix so you can spot imbalances at a glance and understand the overall shape of your site\'s content library before diving into specific issues.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="issues">
            <div class="aegra-sidebar-heading">Issues</div>
            <div class="aegra-sidebar-text">Posts and pages flagged for common content quality problems — missing featured images, empty titles, no categories or tags, missing excerpts, thin content under 300 words, and duplicate titles or slugs. Each issue links directly to the offending post so you can fix it without searching.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="404s">
            <div class="aegra-sidebar-heading">404 Detection</div>
            <div class="aegra-sidebar-text">Scans all post and page content for internal links pointing to non-existent URLs on your own site. Broken internal links damage user experience, waste crawl budget, and send negative signals to search engines. Fix them before they become a pattern — each result shows the source page and the broken href.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="drafts">
            <div class="aegra-sidebar-heading">Old Drafts</div>
            <div class="aegra-sidebar-text">Drafts that have not been updated in over 90 days. Stale drafts clutter your content pipeline, cause confusion for editorial teams, and can contain outdated information that should never be published. Review each one and either bring it up to date and publish, or discard it to keep your workspace clean.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="sitemap">
            <div class="aegra-sidebar-heading">Sitemap</div>
            <div class="aegra-sidebar-text">Detects your active sitemap from WordPress core, Yoast SEO, or RankMath and confirms it is accessible. Also visualises your full site structure as an interactive collapsible tree — published pages and posts grouped by hierarchy so you can see how your content is organised and spot gaps in your navigation structure.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-links">
            <div class="aegra-sidebar-heading">Full Link Scanner</div>
            <div class="aegra-sidebar-text">A complete crawl of every internal and external link across your site, with the HTTP status code, anchor text, and source page recorded for each one. Broken external links (404, 410, timeouts) are flagged separately from internal ones, and each result has a one-click recheck so you can confirm fixes without re-running the whole scan.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-orphans">
            <div class="aegra-sidebar-heading">Orphaned Content</div>
            <div class="aegra-sidebar-text">Published posts and pages that nothing links to — no internal links pointing at them and not included in any navigation menu. Orphaned content is effectively invisible to both visitors and search-engine crawlers. Fix orphans by adding internal links from relevant posts or placing the page in a menu.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-seo">
            <div class="aegra-sidebar-heading">SEO Structure</div>
            <div class="aegra-sidebar-text">Structural SEO checks across all published content — H1 presence, duplicate titles and slugs, pages blocked from indexing, and missing meta descriptions (Yoast / RankMath). Each issue links straight to the editor so you can work through them systematically without leaving the dashboard.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-freshness">
            <div class="aegra-sidebar-heading">Content Freshness</div>
            <div class="aegra-sidebar-text">Tracks when each post and page was last updated and flags content that has gone stale beyond your chosen age threshold. Outdated content erodes search rankings and reader trust. Also catches missed scheduled posts — content set to auto-publish that never went live due to a cron issue.</div>
        </div>
        <div class="aegra-sidebar-section">
            <div class="aegra-sidebar-heading">Navigation</div>
            <div class="aegra-sidebar-actions">
                <a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor' ) ) . '" class="aegra-sidebar-btn">← Dashboard</a>
                <a href="' . esc_url( admin_url( 'edit.php' ) ) . '" class="aegra-sidebar-btn">All Posts</a>
                <a href="' . esc_url( admin_url( 'edit.php?post_type=page' ) ) . '" class="aegra-sidebar-btn">All Pages</a>
            </div>
        </div>';

        // Pro promo (free only) — advertises the Content Pro tabs that the Pro
        // extension injects. Pure advert; returns '' when Pro is active.
        $sidebar .= aegra_pro_promo_sidebar( [
            'page'     => 'Frontend',
            'headline' => 'Catch broken content before your visitors do.',
            'subline'  => 'Aegra Pro scans every link, page and post so nothing slips through the cracks.',
            'benefits' => [
                'Full internal + external link scanner',
                'Orphaned content detection',
                'SEO structure checks',
                'Content freshness tracking',
            ],
        ] );

        aegra_header( 'Frontend' );
        include AEGRA_PATH . 'views/content-page.php';
        aegra_footer( $sidebar );
    }

    public function page_backend() {
        // Pro tabs injected by the Pro extension (Elementor model). Free defines none.
        $active_pro_tabs = apply_filters( 'aegra_backend_pro_tabs', [] );

        $sidebar = '
        <div class="aegra-sidebar-section aegra-tab-sidebar aegra-tab-sidebar--active" data-sidebar="users">
            <div class="aegra-sidebar-heading">Users</div>
            <div class="aegra-sidebar-text">All WordPress users with their assigned roles, registration dates, and last login timestamp. Use this to audit exactly who has access to your site and at what permission level — identify dormant accounts, unexpected role assignments, and users who have not logged in for an extended period.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="plugins">
            <div class="aegra-sidebar-heading">Plugins</div>
            <div class="aegra-sidebar-text">Active and inactive plugins with version numbers, update availability, and author details. Inactive plugins still load their files into the WordPress file structure and represent a potential attack surface if they contain vulnerabilities. Keep everything updated and remove plugins you no longer use rather than simply deactivating them.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="themes">
            <div class="aegra-sidebar-heading">Themes</div>
            <div class="aegra-sidebar-text">All installed themes with active, parent, and inactive status clearly labelled alongside update availability. Unused themes sitting on your server are a common and frequently overlooked security risk — particularly older themes with known vulnerabilities. Remove any theme you are not actively using or that is not required as a parent theme.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="activity">
            <div class="aegra-sidebar-heading">Admin Activity</div>
            <div class="aegra-sidebar-text">A log of recent admin sessions showing who logged in, what actions were performed, and the duration of each session. Useful for tracking team activity on shared sites, identifying unusual admin behaviour outside of normal working hours, and maintaining a basic record of who was active when an issue first appeared.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="audit">
            <div class="aegra-sidebar-heading">Full Audit Trail <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">A complete, persistent chronological record of every admin action taken on your site — who did what, when, and from which IP address. Searchable, filterable, and exportable. Essential for compliance, client handover, debugging unexplained changes, and any situation where you need to trace exactly what happened and who was responsible.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-conflicts">
            <div class="aegra-sidebar-heading">Plugin Conflicts <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Heuristic detection of plugins known to conflict with each other — duplicate functionality competing for the same hooks, shared resource contention, and incompatible output buffering patterns. Identifies potential conflict pairs before they cause visible breakage, giving you the context to make informed decisions about which plugins to keep or replace.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-settings">
            <div class="aegra-sidebar-heading">Settings Changes <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Persistent tracking of changes to WordPress options in wp_options — showing exactly which setting changed, what the previous and new values were, who made the change, and when. Invaluable for diagnosing mystery configuration changes, auditing client sites, and identifying when a plugin update silently overwrote a custom setting.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-analytics">
            <div class="aegra-sidebar-heading">Admin Analytics <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Usage patterns across all admin users — most active time periods, most frequently performed actions, and an admin area activity heatmap. Useful for agency oversight of client sites, understanding how your team uses WordPress day to day, and identifying users who may need additional training or have unusually high admin activity.</div>
        </div>
        <div class="aegra-sidebar-section">
            <div class="aegra-sidebar-heading">Navigation</div>
            <div class="aegra-sidebar-actions">
                <a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor' ) ) . '" class="aegra-sidebar-btn">← Dashboard</a>
                <a href="' . esc_url( admin_url( 'users.php' ) ) . '" class="aegra-sidebar-btn">Manage Users</a>
                <a href="' . esc_url( admin_url( 'plugins.php' ) ) . '" class="aegra-sidebar-btn">Manage Plugins</a>
            </div>
        </div>';

        $sidebar .= aegra_pro_promo_sidebar( [
            'page'     => 'Backend',
            'headline' => 'Know exactly who changed what, and when.',
            'subline'  => 'Aegra Pro keeps a full audit trail of every admin action across your site.',
            'benefits' => [
                'Full admin audit trail',
                'Plugin conflict detection',
                'Settings-change tracking',
                'Admin usage analytics',
            ],
        ] );

        aegra_header( 'Backend' );
        include AEGRA_PATH . 'views/backend-page.php';
        aegra_footer( $sidebar );
    }

    public function page_system() {
        global $wpdb;

        $sidebar = '
        <div class="aegra-sidebar-section aegra-tab-sidebar aegra-tab-sidebar--active" data-sidebar="overview">
            <div class="aegra-sidebar-heading">Overview</div>
            <div class="aegra-sidebar-text">A clear snapshot of your WordPress installation — server, PHP, database, and filesystem all in one place. Instantly check versions, limits, and key configuration details to confirm everything is set up correctly and running as expected. Quickly spot misconfigurations, outdated components, or environment issues that could impact performance, security, or compatibility, giving you confidence that your setup is solid and ready to handle real-world use.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="health">
            <div class="aegra-sidebar-heading">Site Health</div>
            <div class="aegra-sidebar-text">Powered by WordPress’s own Site Health API, this runs a comprehensive set of checks across your installation and highlights anything that needs attention — from security risks to performance bottlenecks. It surfaces actionable insights in a clear, structured way, helping you quickly understand what’s working, what isn’t, and where improvements should be made to keep your site stable, secure, and running efficiently.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="extensions">
            <div class="aegra-sidebar-heading">PHP Extensions</div>
            <div class="aegra-sidebar-text">All PHP extensions currently loaded on your server, neatly grouped by type for clarity. Quickly verify compatibility with plugins, themes, or external services that depend on specific extensions, and spot anything missing or misconfigured. Ideal for troubleshooting environment issues, preparing for new installations, or ensuring your setup meets all technical requirements.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="phpinfo">
            <div class="aegra-sidebar-heading">PHP Info</div>
            <div class="aegra-sidebar-text">The full output of PHP’s built-in info page — every configuration value, loaded module, and environment variable in one place. A complete reference for your server’s PHP setup, ideal for deep diagnostics, debugging conflicts, and verifying configuration at a granular level. Whether you’re tracking down obscure issues or validating environment requirements, it gives you full visibility into how PHP is actually running.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="monitoring">
            <div class="aegra-sidebar-heading">Monitoring</div>
            <div class="aegra-sidebar-text">Track changes to your environment over time — version upgrades, configuration drift, cron failures, and disk usage trends all captured as they happen. See how your setup evolves, compare states, and pinpoint when something shifted. With a clear history of changes, you can catch issues early, understand their cause, and stay ahead of problems before they impact your site.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="integrity">
            <div class="aegra-sidebar-heading">File Integrity</div>
            <div class="aegra-sidebar-text">Scans WordPress core files and compares them against known good versions, highlighting any differences it finds. Detects modifications, missing files, or anything that shouldn’t be there, giving you a clear signal if core integrity has been compromised. Ideal for spotting tampering, failed updates, or hidden issues, so you can act quickly and restore your site to a trusted state.</div>
            <div class="aegra-sidebar-text" style="margin-top:8px;padding-top:8px;border-top:1px solid rgba(255,255,255,0.15);font-size:11px;opacity:0.8;">Checksum verification only covers plugins and themes distributed via WordPress.org. Premium or custom plugins cannot be verified.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="advanced">
            <div class="aegra-sidebar-heading">Advanced</div>
            <div class="aegra-sidebar-text">Deep diagnostics — advanced Site Health scoring, email delivery testing, object and opcode cache analysis, and side-by-side environment comparison for staging vs live. Get a deeper understanding of how your site is performing beneath the surface, identify bottlenecks, misconfigurations, or inconsistencies, and validate that both environments are aligned. Designed to surface the kind of issues that standard checks miss, so you can fine-tune performance, reliability, and stability with confidence.</div>
        </div>
        <div class="aegra-sidebar-section">
            <div class="aegra-sidebar-heading">Navigation</div>
            <div class="aegra-sidebar-actions">
                <a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor' ) ) . '" class="aegra-sidebar-btn">← Dashboard</a>
            </div>
        </div>';

        $sidebar .= aegra_pro_promo_sidebar( [
            'page'     => 'System',
            'headline' => 'Monitor your stack, not just your site.',
            'subline'  => 'Aegra Pro adds continuous system monitoring and integrity checks.',
            'benefits' => [
                'Continuous monitoring',
                'System integrity checks',
                'Advanced diagnostics',
            ],
        ] );

        aegra_header( 'System & Environment' );
        $this->render_system( $wpdb );
        aegra_footer( $sidebar );
    }

    private function render_system( $wpdb ) {

        // ── Pro tab detection ─────────────────────────────────────────────────
        // Pro tabs injected by the Pro extension (Elementor model). Free defines none.
        $active_pro_tabs = apply_filters( 'aegra_system_pro_tabs', [] );

        // ── Shared data ───────────────────────────────────────────────────────
        $upload_dir = wp_upload_dir();

        // DB info
        $full_ver   = $wpdb->get_var( 'SELECT VERSION()' );
        $is_mariadb = stripos( $full_ver, 'mariadb' ) !== false;
        $db_type    = $is_mariadb ? 'MariaDB' : 'MySQL';
        $engine_row = $wpdb->get_row( $wpdb->prepare( "SELECT ENGINE FROM information_schema.TABLES WHERE TABLE_SCHEMA = %s AND ENGINE IS NOT NULL GROUP BY ENGINE ORDER BY COUNT(*) DESC LIMIT 1", DB_NAME ) );
        $engine     = $engine_row->ENGINE ?? 'Unknown';

        // Memory bar
        $mem_limit_raw = ini_get( 'memory_limit' );
        $mem_limit_mb  = $mem_limit_raw === '-1' ? 512 : (int) $mem_limit_raw;
        $mem_used_mb   = round( memory_get_usage( true ) / 1048576, 1 );
        $mem_peak_mb   = round( memory_get_peak_usage( true ) / 1048576, 1 );
        $used_pct      = min( 100, round( ( $mem_used_mb / $mem_limit_mb ) * 100 ) );
        $peak_pct      = min( 100, round( ( $mem_peak_mb / $mem_limit_mb ) * 100 ) );
        $bar_color     = $used_pct > 80 ? '#e74c3c' : ( $used_pct > 60 ? '#f6a623' : '#1cc88a' );

        ?>

        <!-- ── Tab bar ──────────────────────────────────────────────────── -->
        <div class="aegra-tabs">
            <button class="aegra-tab aegra-tab--active" data-tab="overview">Overview</button>
            <button class="aegra-tab" data-tab="health">Site Health</button>
            <button class="aegra-tab" data-tab="extensions">PHP Extensions</button>
            <button class="aegra-tab" data-tab="phpinfo">PHP Info</button>
            <?php foreach ( $active_pro_tabs as $key => $label ) : ?>
            <button class="aegra-tab" data-tab="<?php echo esc_attr( $key ); ?>"><?php echo esc_html( $label ); ?></button>
            <?php endforeach; ?>
        </div>

        <!-- ══════════════════════════════════════════════════════════════ -->
        <!-- Tab 1: Overview                                                -->
        <!-- ══════════════════════════════════════════════════════════════ -->
        <div id="aegra-tab-overview" class="aegra-tab-panel aegra-tab-panel--active">
            <div style="display:grid;grid-template-columns:1fr 1fr;gap:20px;">

                <!-- LEFT COLUMN -->
                <div>

                    <!-- WordPress -->
                    <div class="aegra-card">
                        <div class="aegra-card-header"><?php aegra_the_icon('wp'); ?>WordPress</div>
                        <div class="aegra-card-body" style="padding:0;">
                            <table class="aegra-table">
                                <tr><td>Version</td><td><?php echo esc_html( get_bloginfo( 'version' ) ); ?></td></tr>
                                <tr><td>Site URL</td><td><?php echo esc_html( get_site_url() ); ?></td></tr>
                                <tr><td>Multisite</td><td><?php echo esc_html( is_multisite() ? 'Yes' : 'No' ); ?></td></tr>
                                <tr>
                                    <td>Active Theme</td>
                                    <td><?php $t = wp_get_theme(); echo esc_html( $t->get( 'Name' ) . ' ' . $t->get( 'Version' ) ); ?></td>
                                </tr>
                                <tr>
                                    <td>Timezone</td>
                                    <td><?php echo esc_html( get_option( 'timezone_string' ) ?: get_option( 'gmt_offset' ) . ' UTC' ); ?></td>
                                </tr>
                                <tr><td>Locale</td><td><?php echo esc_html( get_locale() ); ?></td></tr>
                                <tr>
                                    <td>Debug Mode</td>
                                    <td><?php echo wp_kses_post( ( defined( 'WP_DEBUG' ) && WP_DEBUG ) ? '<span class="aegra-badge aegra-badge-orange">On</span>' : '<span class="aegra-badge aegra-badge-green">Off</span>' ); ?></td>
                                </tr>
                                <tr>
                                    <td>WP Cron</td>
                                    <td><?php echo wp_kses_post( ( defined( 'DISABLE_WP_CRON' ) && DISABLE_WP_CRON ) ? '<span class="aegra-badge aegra-badge-red">Disabled</span>' : '<span class="aegra-badge aegra-badge-green">Enabled</span>' ); ?></td>
                                </tr>
                                <tr>
                                    <td>Permalink Structure</td>
                                    <td><code><?php $ps = get_option( 'permalink_structure' ); echo esc_html( $ps ?: '(plain)' ); ?></code></td>
                                </tr>
                            </table>
                        </div>
                    </div>

                    <!-- Database -->
                    <div class="aegra-card">
                        <div class="aegra-card-header"><?php aegra_the_icon('database'); ?>Database</div>
                        <div class="aegra-card-body" style="padding:0;">
                            <table class="aegra-table">
                                <tr><td>DB Type</td><td><?php echo esc_html( $db_type ); ?></td></tr>
                                <tr><td>Version</td><td><?php echo esc_html( $wpdb->db_version() ); ?></td></tr>
                                <tr><td>Storage Engine</td><td><?php echo esc_html( $engine ); ?></td></tr>
                                <tr><td>Table Prefix</td><td><code><?php echo esc_html( $wpdb->prefix ); ?></code></td></tr>
                                <tr>
                                    <td>Connection</td>
                                    <td><?php echo wp_kses_post( $this->db_status['connection'] ? '<span class="aegra-badge aegra-badge-green">OK</span>' : '<span class="aegra-badge aegra-badge-red">Failed</span>' ); ?></td>
                                </tr>
                                <tr>
                                    <td>Writable</td>
                                    <td><?php echo wp_kses_post( $this->db_status['write'] ? '<span class="aegra-badge aegra-badge-green">Yes</span>' : '<span class="aegra-badge aegra-badge-red">No</span>' ); ?></td>
                                </tr>
                                <tr><td>Charset</td><td><?php echo esc_html( $wpdb->charset ); ?></td></tr>
                                <tr><td>Collation</td><td><?php echo esc_html( $wpdb->collate ); ?></td></tr>
                            </table>
                        </div>
                    </div>

                </div><!-- /left -->

                <!-- RIGHT COLUMN -->
                <div>

                    <!-- PHP & Server -->
                    <div class="aegra-card">
                        <div class="aegra-card-header"><?php aegra_the_icon('server'); ?>PHP &amp; Server</div>
                        <div class="aegra-card-body" style="padding:0;">
                            <table class="aegra-table">
                                <tr><td>PHP Version</td><td><?php echo esc_html( phpversion() ); ?></td></tr>
                                <tr><td>Memory Limit</td><td><?php echo esc_html( ini_get( 'memory_limit' ) ); ?></td></tr>
                                <tr><td>Max Execution Time</td><td><?php echo esc_html( ini_get( 'max_execution_time' ) ); ?>s</td></tr>
                                <tr><td>Upload Max</td><td><?php echo esc_html( ini_get( 'upload_max_filesize' ) ); ?></td></tr>
                                <tr><td>Post Max Size</td><td><?php echo esc_html( ini_get( 'post_max_size' ) ); ?></td></tr>
                                <tr><td>Server Software</td><td><?php echo esc_html( isset( $_SERVER['SERVER_SOFTWARE'] ) ? sanitize_text_field( wp_unslash( $_SERVER['SERVER_SOFTWARE'] ) ) : 'Unknown' ); ?></td></tr>
                                <tr>
                                    <td>HTTPS</td>
                                    <td><?php echo wp_kses_post( is_ssl() ? '<span class="aegra-badge aegra-badge-green">Yes</span>' : '<span class="aegra-badge aegra-badge-red">No</span>' ); ?></td>
                                </tr>
                                <tr>
                                    <td>REST API</td>
                                    <td><?php echo wp_kses_post( ( get_option( 'permalink_structure' ) !== '' ) ? '<span class="aegra-badge aegra-badge-green">Enabled</span>' : '<span class="aegra-badge aegra-badge-orange">Requires Permalinks</span>' ); ?></td>
                                </tr>
                                <tr>
                                    <td>Object Cache</td>
                                    <td><?php echo wp_kses_post( wp_using_ext_object_cache() ? '<span class="aegra-badge aegra-badge-green">Active</span>' : '<span class="aegra-badge aegra-badge-grey">None</span>' ); ?></td>
                                </tr>
                                <tr>
                                    <td>OPcache</td>
                                    <td><?php echo wp_kses_post( function_exists( 'opcache_get_status' ) ? '<span class="aegra-badge aegra-badge-green">Available</span>' : '<span class="aegra-badge aegra-badge-grey">Not Available</span>' ); ?></td>
                                </tr>
                            </table>
                        </div>
                    </div>

                    <!-- Filesystem -->
                    <div class="aegra-card">
                        <div class="aegra-card-header"><?php aegra_the_icon('file_system'); ?>Filesystem</div>
                        <div class="aegra-card-body" style="padding:0;">
                            <?php
                            // System Info panel — these constants are REPORTED
                            // to the admin as diagnostic output (this is the feature),
                            // not used to locate the plugin's own files.
                            $fs_paths = [
                                'ABSPATH'       => ABSPATH,
                                // phpcs:ignore WordPress.WP.AlternativeFunctions -- reported as diagnostic system info, not used to locate plugin files.
                                'wp-content'    => WP_CONTENT_DIR,
                                // phpcs:ignore WordPress.WP.AlternativeFunctions -- reported as diagnostic system info, not used to locate plugin files.
                                'plugins'       => WP_PLUGIN_DIR,
                                'active theme'  => get_template_directory(),
                                'uploads'       => $upload_dir['basedir'],
                            ];
                            ?>
                            <table class="aegra-table">
                                <?php foreach ( $fs_paths as $label => $path ) : ?>
                                <tr>
                                    <td><?php echo esc_html( $label ); ?></td>
                                    <td>
                                        <?php // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_is_writable -- read-only diagnostic writability check on known WP system paths, not a file write ?>
                                        <?php if ( is_writable( $path ) ) : ?>
                                            <span class="aegra-badge aegra-badge-green">Writable</span>
                                        <?php else : ?>
                                            <span class="aegra-badge aegra-badge-red">Not Writable</span>
                                        <?php endif; ?>
                                        <br><code style="font-size:10px;color:var(--aegra-text-muted);"><?php echo esc_html( $path ); ?></code>
                                    </td>
                                </tr>
                                <?php endforeach; ?>
                            </table>
                        </div>

                        <!-- Memory bar -->
                        <div class="aegra-card-body" style="padding:12px 22px;">
                            <div class="aegra-mem-bar-wrap">
                                <div class="aegra-mem-bar-labels">
                                    <span>Memory Usage</span>
                                    <span><?php echo esc_html( $mem_used_mb ); ?> MB / <?php echo esc_html( $mem_limit_mb ); ?> MB</span>
                                </div>
                                <div class="aegra-mem-bar-track">
                                    <div class="aegra-mem-bar-fill" style="width:<?php echo esc_html( $used_pct ); ?>%;background:<?php echo esc_html( $bar_color ); ?>;"></div>
                                    <div class="aegra-mem-bar-peak" style="left:<?php echo esc_html( $peak_pct ); ?>%;"></div>
                                </div>
                                <div class="aegra-mem-bar-sub">Peak: <?php echo esc_html( $mem_peak_mb ); ?> MB</div>
                            </div>
                        </div>

                    </div>

                </div><!-- /right -->

            </div>
        </div><!-- /tab-overview -->

        <!-- ══════════════════════════════════════════════════════════════ -->
        <!-- Tab 2: Site Health                                             -->
        <!-- ══════════════════════════════════════════════════════════════ -->
        <div id="aegra-tab-health" class="aegra-tab-panel">
            <?php
            if ( ! class_exists( 'WP_Site_Health' ) ) {
                require_once ABSPATH . 'wp-admin/includes/class-wp-site-health.php';
            }
            $health = WP_Site_Health::get_instance();
            $tests  = WP_Site_Health::get_tests();

            $results = [];
            if ( ! empty( $tests['direct'] ) ) {
                foreach ( $tests['direct'] as $test ) {
                    if ( ! isset( $test['test'] ) ) continue;
                    if ( is_string( $test['test'] ) && is_callable( [ $health, 'get_test_' . $test['test'] ] ) ) {
                        $result = call_user_func( [ $health, 'get_test_' . $test['test'] ] );
                    } elseif ( is_callable( $test['test'] ) ) {
                        $result = call_user_func( $test['test'] );
                    } else {
                        continue;
                    }
                    if ( is_array( $result ) && isset( $result['status'] ) ) {
                        $results[] = $result;
                    }
                }
            }

            $counts = [ 'good' => 0, 'recommended' => 0, 'critical' => 0 ];
            foreach ( $results as $r ) {
                $s = $r['status'] ?? 'good';
                if ( isset( $counts[ $s ] ) ) {
                    $counts[ $s ]++;
                }
            }
            $total = array_sum( $counts );

            // SVG donut — 3 segments, 120px
            $size   = 120;
            $cx     = 60;
            $cy     = 60;
            $r_out  = 54;
            $r_in   = 36;
            $colors = [ 'good' => '#1cc88a', 'recommended' => '#f6a623', 'critical' => '#e74c3c' ];

            // Build arc paths
            function aegra_svg_arc( $cx, $cy, $r_out, $r_in, $start_angle, $end_angle ) {
                $s1x = $cx + $r_out * cos( $start_angle );
                $s1y = $cy + $r_out * sin( $start_angle );
                $e1x = $cx + $r_out * cos( $end_angle );
                $e1y = $cy + $r_out * sin( $end_angle );
                $s2x = $cx + $r_in  * cos( $end_angle );
                $s2y = $cy + $r_in  * sin( $end_angle );
                $e2x = $cx + $r_in  * cos( $start_angle );
                $e2y = $cy + $r_in  * sin( $start_angle );
                $large = ( $end_angle - $start_angle > M_PI ) ? 1 : 0;
                return sprintf(
                    'M %.2f %.2f A %.2f %.2f 0 %d 1 %.2f %.2f L %.2f %.2f A %.2f %.2f 0 %d 0 %.2f %.2f Z',
                    $s1x, $s1y, $r_out, $r_out, $large, $e1x, $e1y,
                    $s2x, $s2y, $r_in, $r_in, $large, $e2x, $e2y
                );
            }
            ?>

            <!-- Summary donut + counts -->
            <div class="aegra-card" style="margin-bottom:20px;">
                <div class="aegra-card-header"><?php aegra_the_icon('health'); ?>Site Health Summary</div>
                <div class="aegra-card-body">
                    <div style="display:flex;align-items:center;gap:32px;">

                        <!-- SVG donut -->
                        <div style="flex-shrink:0;">
                            <svg width="<?php echo esc_html( $size ); ?>" height="<?php echo esc_html( $size ); ?>" viewBox="0 0 <?php echo esc_html( $size ); ?> <?php echo esc_html( $size ); ?>">
                            <?php
                            if ( $total > 0 ) {
                                $angle = -M_PI / 2; // start at top
                                foreach ( $counts as $status => $count ) {
                                    if ( $count === 0 ) continue;
                                    $sweep     = ( $count / $total ) * 2 * M_PI;
                                    $end_angle = $angle + $sweep - 0.04; // small gap
                                    $d         = aegra_svg_arc( $cx, $cy, $r_out, $r_in, $angle, $end_angle );
                                    echo wp_kses( '<path d="' . esc_attr( $d ) . '" fill="' . esc_attr( $colors[ $status ] ) . '"/>', aegra_svg_allowed_tags() );
                                    $angle += $sweep;
                                }
                            } else {
                                // grey circle if no results
                                echo wp_kses( '<circle cx="' . esc_attr( $cx ) . '" cy="' . esc_attr( $cy ) . '" r="' . esc_attr( $r_out ) . '" fill="#e2e4e7"/>', aegra_svg_allowed_tags() );
                                echo wp_kses( '<circle cx="' . esc_attr( $cx ) . '" cy="' . esc_attr( $cy ) . '" r="' . esc_attr( $r_in ) . '" fill="#fff"/>', aegra_svg_allowed_tags() );
                            }
                            ?>
                                <!-- Centre label -->
                                <text x="<?php echo esc_html( $cx ); ?>" y="<?php echo esc_html( $cy ); ?>" text-anchor="middle" dominant-baseline="middle"
                                    font-size="22" font-weight="700" fill="#1e2327"><?php echo esc_html( $counts['good'] ); ?></text>
                                <text x="<?php echo esc_html( $cx ); ?>" y="<?php echo esc_html( $cy + 16 ); ?>" text-anchor="middle"
                                    font-size="9" fill="#6b7280">good</text>
                            </svg>
                        </div>

                        <!-- Legend counts -->
                        <div style="display:flex;gap:24px;">
                            <div style="text-align:center;">
                                <div style="font-size:28px;font-weight:700;color:#1cc88a;line-height:1;"><?php echo esc_html( $counts['good'] ); ?></div>
                                <div style="font-size:11px;color:var(--aegra-text-muted);text-transform:uppercase;letter-spacing:.05em;margin-top:4px;">Good</div>
                            </div>
                            <div style="text-align:center;">
                                <div style="font-size:28px;font-weight:700;color:#f6a623;line-height:1;"><?php echo esc_html( $counts['recommended'] ); ?></div>
                                <div style="font-size:11px;color:var(--aegra-text-muted);text-transform:uppercase;letter-spacing:.05em;margin-top:4px;">Recommended</div>
                            </div>
                            <div style="text-align:center;">
                                <div style="font-size:28px;font-weight:700;color:#e74c3c;line-height:1;"><?php echo esc_html( $counts['critical'] ); ?></div>
                                <div style="font-size:11px;color:var(--aegra-text-muted);text-transform:uppercase;letter-spacing:.05em;margin-top:4px;">Critical</div>
                            </div>
                        </div>

                    </div>
                </div>
            </div>

            <!-- Results table -->
            <?php
            $grouped = [ 'critical' => [], 'recommended' => [], 'good' => [] ];
            foreach ( $results as $r ) {
                $s = $r['status'] ?? 'good';
                if ( isset( $grouped[ $s ] ) ) {
                    $grouped[ $s ][] = $r;
                } else {
                    $grouped['good'][] = $r;
                }
            }
            $badge_map = [
                'critical'    => 'aegra-badge-red',
                'recommended' => 'aegra-badge-orange',
                'good'        => 'aegra-badge-green',
            ];
            foreach ( $grouped as $status => $items ) :
                if ( empty( $items ) ) continue;
            ?>
            <div class="aegra-card" style="margin-bottom:20px;">
                <?php
                $status_icons = [ 'good' => 'tick', 'recommended' => 'recommended', 'critical' => 'warning' ];
                $status_icon  = $status_icons[ $status ] ?? '';
                ?>
                <div class="aegra-card-header"><?php if ( $status_icon ) { aegra_the_icon( $status_icon ); } ?><?php echo esc_html( ucfirst( $status ) ); ?></div>
                <div class="aegra-card-body" style="padding:0;">
                    <table class="aegra-table">
                        <thead>
                            <tr><th>Status</th><th>Check</th><th>Description</th></tr>
                        </thead>
                        <tbody>
                        <?php foreach ( $items as $item ) : ?>
                        <tr>
                            <td style="white-space:nowrap;">
                                <span class="aegra-badge <?php echo esc_attr( $badge_map[ $status ] ); ?>">
                                    <?php echo esc_html( ucfirst( $status ) ); ?>
                                </span>
                            </td>
                            <td style="font-weight:600;"><?php echo esc_html( $item['label'] ?? '' ); ?></td>
                            <td style="color:var(--aegra-text-muted);font-size:12px;"><?php echo wp_kses_post( $item['description'] ?? '' ); ?></td>
                        </tr>
                        <?php endforeach; ?>
                        </tbody>
                    </table>
                </div>
            </div>
            <?php endforeach; ?>

        </div><!-- /tab-health -->

        <!-- ══════════════════════════════════════════════════════════════ -->
        <!-- Tab 3: PHP Extensions                                          -->
        <!-- ══════════════════════════════════════════════════════════════ -->
        <div id="aegra-tab-extensions" class="aegra-tab-panel">
            <div class="aegra-card">
                <div class="aegra-card-header"><?php aegra_the_icon('extensions'); ?>PHP Extensions</div>
                <div class="aegra-card-body">
                    <?php
                    $ext_groups = [
                        'Core'     => [ 'date', 'json', 'pcre', 'spl', 'standard', 'tokenizer', 'zlib', 'mbstring', 'intl', 'iconv' ],
                        'Database' => [ 'mysqli', 'pdo', 'pdo_mysql', 'mysqlnd' ],
                        'Caching'  => [ 'opcache', 'apcu', 'memcache', 'memcached', 'redis' ],
                        'Security' => [ 'openssl', 'sodium', 'hash' ],
                    ];

                    $all_exts   = get_loaded_extensions();
                    sort( $all_exts );

                    $categorised = [];
                    $other       = [];

                    foreach ( $all_exts as $ext ) {
                        $found = false;
                        foreach ( $ext_groups as $group => $members ) {
                            if ( in_array( strtolower( $ext ), $members, true ) ) {
                                $categorised[ $group ][] = $ext;
                                $found = true;
                                break;
                            }
                        }
                        if ( ! $found ) {
                            $other[] = $ext;
                        }
                    }
                    $categorised['Other'] = $other;

                    foreach ( $categorised as $group_name => $exts ) :
                        if ( empty( $exts ) ) continue;
                    ?>
                    <div class="aegra-ext-group">
                        <div class="aegra-ext-group-title"><?php echo esc_html( $group_name ); ?></div>
                        <div class="aegra-ext-grid">
                            <?php foreach ( $exts as $ext ) : ?>
                            <span class="aegra-ext-pill"><?php echo esc_html( $ext ); ?></span>
                            <?php endforeach; ?>
                        </div>
                    </div>
                    <?php endforeach; ?>
                </div>
            </div>
        </div><!-- /tab-extensions -->

        <!-- ══════════════════════════════════════════════════════════════ -->
        <!-- Tab 4: PHP Info                                                 -->
        <!-- ══════════════════════════════════════════════════════════════ -->
        <div id="aegra-tab-phpinfo" class="aegra-tab-panel">
            <div class="aegra-card">
                <div class="aegra-card-header"><?php aegra_the_icon('info'); ?>PHP Info</div>
                <div class="aegra-card-body aegra-phpinfo-wrap">
                    <?php
                    ob_start();
                    // phpinfo() is intentional here — System page is gated by manage_options
                    // capability check above, only visible to admins, and the output is
                    // sanitised below to strip the styles and outer markup.
                    // phpcs:ignore WordPress.PHP.DevelopmentFunctions.prevent_path_disclosure_phpinfo
                    phpinfo();
                    $phpinfo = ob_get_clean();
                    // Strip everything outside <body> and remove the default stylesheet
                    preg_match( '/<body[^>]*>(.*?)<\/body>/si', $phpinfo, $m );
                    $body = $m[1] ?? $phpinfo;
                    // Remove the phpinfo default <style> block
                    $body = preg_replace( '/<style[^>]*>.*?<\/style>/si', '', $body );
                    // phpinfo() is server-generated HTML (tables, headings, links —
                    // all post-content-safe). Escape late with wp_kses_post(): it
                    // keeps the tables, strips anything unexpected, and needs no
                    // phpcs:ignore. (esc_html() was wrong here — it escaped the
                    // whole dump into visible source text.)
                    echo wp_kses_post( $body );
                    ?>
                </div>
            </div>
        </div><!-- /tab-phpinfo -->

        <?php foreach ( $active_pro_tabs as $key => $label ) : ?>
        <div id="aegra-tab-<?php echo esc_attr( $key ); ?>" class="aegra-tab-panel">
            <?php include AEGRA_PATH . 'pro/modules/system-' . esc_attr( $key ) . '.php'; ?>
        </div>
        <?php endforeach; ?>

        <?php
    }

    /* ── Traffic & Analytics ─────────────────────────────────────────────── */

    public function page_traffic() {
        // ── Conflict detection via compat registry ─────────────────────────
        $deferred = aegra_compat_is_deferred( 'traffic' );

        if ( $deferred ) {
            $plugin_name = esc_html( $deferred['name'] );
            $plugin_url  = esc_url( admin_url( $deferred['admin_url'] ) );
            $compat_url  = esc_url( admin_url( 'admin.php?page=aegra-site-monitor-settings&tab=compatibility' ) );

            $sidebar = '
            <div class="aegra-sidebar-section">
                <div class="aegra-sidebar-heading">Traffic & Analytics</div>
                <div class="aegra-sidebar-text">' . $plugin_name . ' is active on this site. Aegra Site Monitor defers all traffic tracking to avoid data conflicts.</div>
            </div>';

            aegra_header( 'Traffic & Analytics' );
            ?>
            <div class="aegra-traffic-notice" id="aegra-compat-notice-traffic" style="position:relative;">
                <button type="button" onclick="aegraCompatDismiss('aegra-compat-notice-traffic')" style="position:absolute;top:12px;right:12px;background:none;border:none;cursor:pointer;font-size:18px;line-height:1;color:#4a6fa5;padding:0;opacity:.6;" title="Dismiss">&times;</button>
                <div class="aegra-traffic-notice-title"><?php echo esc_html( $plugin_name ); ?> Detected</div>
                <div class="aegra-traffic-notice-text">
                    <?php echo esc_html( $plugin_name ); ?> is installed and active on this site. To avoid duplicate tracking and conflicting data, Aegra Site Monitor has deferred traffic analytics to <?php echo esc_html( $plugin_name ); ?>.
                </div>
                <div class="aegra-traffic-notice-text">
                    You can change this behaviour in <a href="<?php echo esc_html( $compat_url ); ?>">Settings &rarr; Compatibility</a> and choose to run both plugins side by side.
                </div>
                <a href="<?php echo esc_html( $plugin_url ); ?>" class="aegra-btn aegra-btn-primary">Open <?php echo esc_html( $plugin_name ); ?> &rarr;</a>
            </div>
            <?php
            // Dismiss helper attached to enqueued 'aegra-site-monitor-admin' (no inline <script> tag).
            $aegra_compat_js = <<<'JS'
            function aegraCompatDismiss(id) {
                var el = document.getElementById(id);
                if (!el) return;
                var h = el.offsetHeight;
                el.style.overflow = 'hidden';
                el.style.height = h + 'px';
                el.getBoundingClientRect();
                el.style.transition = 'opacity 0.25s ease, height 0.3s ease 0.1s, margin 0.3s ease 0.1s, padding 0.3s ease 0.1s, border-width 0.3s ease 0.1s';
                el.style.opacity = '0';
                el.style.height = '0';
                el.style.marginTop = '0';
                el.style.marginBottom = '0';
                el.style.paddingTop = '0';
                el.style.paddingBottom = '0';
                el.style.borderWidth = '0';
                setTimeout(function(){ el.remove(); }, 420);
            }
            JS;
            if ( function_exists( 'wp_add_inline_script' ) ) {
                wp_add_inline_script( 'aegra-site-monitor-admin', $aegra_compat_js );
            }
            aegra_footer( $sidebar );
            return;
        }

        // ── Gather data ────────────────────────────────────────────────────
        $stats    = $this->traffic_tracker->get_overview_stats( 30 );
        $pages    = $this->traffic_tracker->get_top_pages( 30, 10 );
        $refs     = $this->traffic_tracker->get_referrers( 30, 10 );
        $devices  = $this->traffic_tracker->get_devices( 30 );
        $browsers = $this->traffic_tracker->get_browsers( 30 );
        $daily    = $this->traffic_tracker->get_daily_views( 30 );
        $fournots = $this->traffic_tracker->get_404s( 50 );
        $countries         = $this->traffic_tracker->get_countries( 30 );
        $country_breakdown = $this->traffic_tracker->get_country_breakdown( 30 );
        $geo_status        = function_exists( 'aegra_geo_status' ) ? aegra_geo_status() : [ 'available' => false ];

        // ── Pro tab detection ──────────────────────────────────────────────
        // Pro tabs injected by the Pro extension (Elementor model). Free defines none.
        $active_pro_tabs = apply_filters( 'aegra_traffic_pro_tabs', [] );

        // ── Prepare chart data ─────────────────────────────────────────────
        $device_colors = [
            'Mobile'  => '#5184b3',
            'Tablet'  => '#f6a623',
            'Desktop' => '#1cc88a',
        ];
        $browser_colors = [
            'Chrome'  => '#5184b3',
            'Firefox' => '#f6a623',
            'Safari'  => '#1cc88a',
            'Edge'    => '#9b59b6',
            'Opera'   => '#e74c3c',
            'IE'      => '#36b9cc',
            'Other'   => '#e2e4e7',
        ];

        $devices_chart = [];
        foreach ( $devices as $row ) {
            $label = $row['label'] ?: 'Unknown';
            $devices_chart[] = [
                'label' => $label,
                'value' => (int) $row['value'],
                'color' => $device_colors[ $label ] ?? '#e2e4e7',
            ];
        }

        $browsers_chart = [];
        foreach ( $browsers as $row ) {
            $label = $row['label'] ?: 'Unknown';
            $browsers_chart[] = [
                'label' => $label,
                'value' => (int) $row['value'],
                'color' => $browser_colors[ $label ] ?? '#e2e4e7',
            ];
        }

        $daily_chart = [];
        foreach ( $daily as $row ) {
            $daily_chart[] = [
                'date'   => $row['date'],
                'views'  => (int) $row['views'],
                'unique' => (int) $row['unique'],
            ];
        }

        // Build geo data for visitor map
        $geo_map = [];
        $geo_total = array_sum( array_column( $countries, 'views' ) );
        foreach ( $countries as $row ) {
            $cc = strtoupper( $row['country_code'] );
            $geo_map[ $cc ] = [
                'visits' => (int) $row['views'],
                'pct'    => $geo_total > 0 ? round( $row['views'] / $geo_total * 100, 1 ) : 0,
            ];
        }

        wp_localize_script( 'aegra-site-monitor-traffic', 'aegraTrafficData', [
            'total_views' => $stats['total_views'],
            'daily'       => $daily_chart,
            'devices'     => $devices_chart,
            'browsers'    => $browsers_chart,
            'geoData'     => $geo_map,
            'topoUrl'     => AEGRA_URL . 'assets/maps/countries-110m.json',
        ] );

        // ── Sidebar ────────────────────────────────────────────────────────
        $sidebar = '
        <div class="aegra-sidebar-section aegra-tab-sidebar aegra-tab-sidebar--active" data-sidebar="overview">
            <div class="aegra-sidebar-heading">Overview</div>
            <div class="aegra-sidebar-text">A 30-day traffic snapshot showing views, unique visitors, 404 errors, and bot activity at a glance. The daily chart reveals patterns across the month, helping you spot trends, spikes, or unusual behaviour. Quickly understand how your site is being used, identify problem areas like broken links or aggressive bots, and keep a clear view of overall traffic health.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="audience">
            <div class="aegra-sidebar-heading">Audience</div>
            <div class="aegra-sidebar-text">Understand who is visiting your site — device types, browsers, and countries, all clearly broken down. See how your audience actually accesses your content, spot trends in usage, and identify gaps in compatibility or performance. Use these insights to optimise design, functionality, and delivery for the visitors that matter most.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="fournots">
            <div class="aegra-sidebar-heading">404s</div>
            <div class="aegra-sidebar-text">Every 404 error is a missed visit or a broken link. This list gives you a clear view of what’s failing, so you can fix missing pages, set up redirects, or trace back to the source. It also helps you distinguish between genuine user issues and aggressive bot scanning, letting you clean up your site and protect it at the same time.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="sessions">
            <div class="aegra-sidebar-heading">Sessions</div>
            <div class="aegra-sidebar-text">Track individual user sessions to see how visitors actually move through your site — how long they stay, which pages they visit, and how engaged they are. Build a clearer picture of user behaviour, identify drop-off points, and understand what’s holding attention versus what’s being ignored, so you can refine content and improve overall experience.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="live">
            <div class="aegra-sidebar-heading">Visitor Map</div>
            <div class="aegra-sidebar-text">Countries shaded by visitor volume over the last 30 days, giving you an instant visual sense of where your traffic is coming from. Click any country to zoom in for a closer look, explore regional patterns, and understand how your audience is distributed. A simple way to turn raw location data into clear, actionable insight.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="campaigns">
            <div class="aegra-sidebar-heading">Campaigns &amp; UTM</div>
            <div class="aegra-sidebar-text">UTM parameter tracking for your marketing campaigns, giving you a clear view of which campaigns, sources, and mediums are actually driving traffic. See performance broken down at a granular level, compare results across channels, and understand what’s delivering real value. Use these insights to refine your strategy, focus your spend, and improve overall campaign effectiveness.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="advanced">
            <div class="aegra-sidebar-heading">Advanced</div>
            <div class="aegra-sidebar-text">Traffic segmentation, bot pattern detection, and clear weekly, monthly, and yearly trend analysis give you a deeper understanding of how your site is used over time. Layer in lightweight heatmap-style behaviour insights to see where attention is focused and how visitors interact with your pages. Together, these tools help you separate real users from noise, uncover patterns, and make informed decisions to improve performance, content, and user experience.</div>
        </div>
        <div class="aegra-sidebar-section">
            <div class="aegra-sidebar-heading">Navigation</div>
            <div class="aegra-sidebar-actions">
                <a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor' ) ) . '" class="aegra-sidebar-btn">&larr; Dashboard</a>
            </div>
        </div>';

        $sidebar .= aegra_pro_promo_sidebar( [
            'page'     => 'Traffic',
            'headline' => 'See who is really visiting your site.',
            'subline'  => 'Aegra Pro maps live visitors, sessions and campaign traffic in detail.',
            'benefits' => [
                'Visitor session tracking',
                'Live visitor map',
                'Campaign & UTM tracking',
                'Advanced traffic segmentation',
            ],
        ] );

        aegra_header( 'Traffic & Analytics' );

        ?>

        <!-- ── Tab bar ──────────────────────────────────────────────────── -->
        <div class="aegra-tabs">
            <button class="aegra-tab aegra-tab--active" data-tab="overview">Overview</button>
            <button class="aegra-tab" data-tab="audience">Audience</button>
            <button class="aegra-tab" data-tab="fournots">404s</button>
            <?php foreach ( $active_pro_tabs as $key => $label ) : ?>
            <button class="aegra-tab" data-tab="<?php echo esc_attr( $key ); ?>"><?php echo esc_html( $label ); ?></button>
            <?php endforeach; ?>
        </div>

        <!-- ══════════════════════════════════════════════════════════════ -->
        <!-- Tab 1: Overview                                                -->
        <!-- ══════════════════════════════════════════════════════════════ -->
        <div id="aegra-tab-overview" class="aegra-tab-panel aegra-tab-panel--active">

            <!-- Hero stats -->
            <div class="aegra-traffic-stats">
                <div class="aegra-traffic-stat">
                    <div class="aegra-traffic-stat-value"><?php echo esc_html( number_format( $stats['total_views'] ) ); ?></div>
                    <div class="aegra-traffic-stat-label">Total Views</div>
                </div>
                <div class="aegra-traffic-stat">
                    <div class="aegra-traffic-stat-value"><?php echo esc_html( number_format( $stats['unique_visitors'] ) ); ?></div>
                    <div class="aegra-traffic-stat-label">Unique Visitors</div>
                </div>
                <div class="aegra-traffic-stat">
                    <div class="aegra-traffic-stat-value"><?php echo esc_html( number_format( $stats['total_404s'] ) ); ?></div>
                    <div class="aegra-traffic-stat-label">404 Hits</div>
                </div>
                <div class="aegra-traffic-stat">
                    <div class="aegra-traffic-stat-value"><?php echo esc_html( number_format( $stats['bot_count'] ) ); ?></div>
                    <div class="aegra-traffic-stat-label">Bots Blocked</div>
                </div>
            </div>

            <!-- Daily views chart -->
            <div class="aegra-card" style="margin-bottom:20px;">
                <div class="aegra-card-header"><?php aegra_the_icon('daily'); ?>Daily Views &mdash; Last 30 Days</div>
                <div class="aegra-card-body">
                    <div id="aegra-traffic-daily" style="width:100%;"></div>
                </div>
            </div>

            <!-- Two columns: top pages + referrers -->
            <div style="display:grid;grid-template-columns:1fr 1fr;gap:20px;">

                <div class="aegra-card">
                    <div class="aegra-card-header"><?php aegra_the_icon('top_page'); ?>Top Pages</div>
                    <div class="aegra-card-body" style="padding:0;">
                        <?php if ( empty( $pages ) ) : ?>
                        <p style="padding:16px;color:var(--aegra-text-muted);font-size:13px;">No data recorded yet.</p>
                        <?php else : ?>
                        <table class="aegra-table">
                            <thead><tr><th>Page</th><th style="text-align:right;">Views</th></tr></thead>
                            <tbody>
                            <?php foreach ( $pages as $row ) : ?>
                            <tr>
                                <td style="font-size:12px;word-break:break-all;max-width:200px;"><?php echo esc_html( $row['page_url'] ); ?></td>
                                <td style="text-align:right;font-weight:600;"><?php echo esc_html( number_format( (int) $row['views'] ) ); ?></td>
                            </tr>
                            <?php endforeach; ?>
                            </tbody>
                        </table>
                        <?php endif; ?>
                    </div>
                </div>

                <div class="aegra-card">
                    <div class="aegra-card-header"><?php aegra_the_icon('referrer'); ?>Referrers</div>
                    <div class="aegra-card-body" style="padding:0;">
                        <?php if ( empty( $refs ) ) : ?>
                        <p style="padding:16px;color:var(--aegra-text-muted);font-size:13px;">No referrer data yet.</p>
                        <?php else : ?>
                        <table class="aegra-table">
                            <thead><tr><th>Source</th><th style="text-align:right;">Visits</th></tr></thead>
                            <tbody>
                            <?php foreach ( $refs as $row ) : ?>
                            <tr>
                                <td style="font-size:12px;word-break:break-all;max-width:200px;"><?php echo esc_html( $row['referrer'] ?: 'Direct' ); ?></td>
                                <td style="text-align:right;font-weight:600;"><?php echo esc_html( number_format( (int) $row['views'] ) ); ?></td>
                            </tr>
                            <?php endforeach; ?>
                            </tbody>
                        </table>
                        <?php endif; ?>
                    </div>
                </div>

            </div><!-- end two col -->

        </div><!-- #aegra-tab-overview -->

        <!-- ══════════════════════════════════════════════════════════════ -->
        <!-- Tab 2: Audience                                                -->
        <!-- ══════════════════════════════════════════════════════════════ -->
        <div id="aegra-tab-audience" class="aegra-tab-panel">

            <div class="aegra-traffic-two-col">

                <div class="aegra-card">
                    <div class="aegra-card-header"><?php aegra_the_icon('devices'); ?>Devices</div>
                    <div class="aegra-card-body">
                        <div class="aegra-traffic-donut-wrap">
                            <div id="aegra-traffic-devices"></div>
                            <div class="aegra-traffic-donut-legend">
                                <?php foreach ( $devices_chart as $d ) : ?>
                                <div class="aegra-traffic-donut-legend-item">
                                    <span class="aegra-traffic-donut-legend-dot" style="background:<?php echo esc_attr( $d['color'] ); ?>;"></span>
                                    <?php echo esc_html( $d['label'] ); ?> (<?php echo esc_html( number_format( $d['value'] ) ); ?>)
                                </div>
                                <?php endforeach; ?>
                                <?php if ( empty( $devices_chart ) ) : ?><span style="color:var(--aegra-text-muted);font-size:12px;">No data yet.</span><?php endif; ?>
                            </div>
                        </div>
                    </div>
                </div>

                <div class="aegra-card">
                    <div class="aegra-card-header"><?php aegra_the_icon('browser'); ?>Browsers</div>
                    <div class="aegra-card-body">
                        <div class="aegra-traffic-donut-wrap">
                            <div id="aegra-traffic-browsers"></div>
                            <div class="aegra-traffic-donut-legend">
                                <?php foreach ( $browsers_chart as $b ) : ?>
                                <div class="aegra-traffic-donut-legend-item">
                                    <span class="aegra-traffic-donut-legend-dot" style="background:<?php echo esc_attr( $b['color'] ); ?>;"></span>
                                    <?php echo esc_html( $b['label'] ); ?> (<?php echo esc_html( number_format( $b['value'] ) ); ?>)
                                </div>
                                <?php endforeach; ?>
                                <?php if ( empty( $browsers_chart ) ) : ?><span style="color:var(--aegra-text-muted);font-size:12px;">No data yet.</span><?php endif; ?>
                            </div>
                        </div>
                    </div>
                </div>

            </div><!-- end two col -->

            <!-- Countries -->
            <?php if ( empty( $countries ) ) : ?>
            <div class="aegra-card" style="margin-top:20px;">
                <div class="aegra-card-header"><?php aegra_the_icon('geography'); ?>Countries</div>
                <div class="aegra-card-body">
                    <p style="margin:0;color:var(--aegra-text-muted);font-size:13px;">
                    <?php
                    $aegra_source_labels = [
                        'cloudflare' => 'Cloudflare CDN header',
                        'server'     => 'Server GeoIP module',
                        'statflowp'  => 'StatFlo Analytics',
                        'aegra-site-monitor'    => 'Aegra Site Monitor',
                    ];
                    $aegra_source_label = $aegra_source_labels[ $geo_status['source'] ] ?? $geo_status['source'];
                    ?>
                    <?php if ( ! empty( $geo_status['available'] ) ) : ?>
                        Country detection is active (source: <?php echo esc_html( $aegra_source_label ); ?>). No country data recorded yet — visit the front end to generate traffic.
                    <?php else : ?>
                        No country data available. Country detection requires Cloudflare (CF-IPCountry header), a server-side GeoIP module, or a MaxMind database configured in <a href="<?php echo esc_url( admin_url( 'admin.php?page=aegra-site-monitor-settings&tab=maxmind' ) ); ?>">Settings → MaxMind</a>.
                    <?php endif; ?>
                    </p>
                </div>
            </div>
            <?php else : ?>
            <div style="display:grid;grid-template-columns:1fr 1fr;gap:20px;margin-top:20px;">

                <!-- Left: flag + country + views -->
                <div class="aegra-card">
                    <div class="aegra-card-header"><?php aegra_the_icon('geography'); ?>Countries</div>
                    <div class="aegra-card-body" style="padding:0;">
                        <?php
                        $total_views = array_sum( array_column( $countries, 'views' ) );
                        ?>
                        <table class="aegra-table">
                            <thead>
                                <tr>
                                    <th colspan="2">Country</th>
                                    <th style="text-align:right;">Views</th>
                                    <th style="text-align:right;">%</th>
                                </tr>
                            </thead>
                            <tbody>
                            <?php foreach ( $countries as $row ) :
                                $cc  = strtoupper( $row['country_code'] );
                                $pct = $total_views > 0 ? round( $row['views'] / $total_views * 100 ) : 0;
                                // Flag emoji from country code
                                $flag = '';
                                if ( strlen( $cc ) === 2 ) {
                                    $flag = mb_convert_encoding(
                                        '&#' . ( 0x1F1E6 + ord( $cc[0] ) - ord( 'A' ) ) . ';' .
                                        '&#' . ( 0x1F1E6 + ord( $cc[1] ) - ord( 'A' ) ) . ';',
                                        'UTF-8', 'HTML-ENTITIES'
                                    );
                                }
                            ?>
                            <tr>
                                <td style="width:28px;font-size:18px;line-height:1;padding-right:0;"><?php echo esc_html( $flag ); ?></td>
                                <td>
                                    <span style="font-weight:600;display:block;"><?php echo esc_html( aegra_country_name( $cc ) ); ?></span>
                                    <span style="font-size:11px;color:var(--aegra-text-muted);"><?php echo esc_html( $cc ); ?></span>
                                </td>
                                <td style="text-align:right;"><?php echo esc_html( number_format( (int) $row['views'] ) ); ?></td>
                                <td style="text-align:right;color:var(--aegra-text-muted);font-size:12px;"><?php echo esc_html( $pct ); ?>%</td>
                            </tr>
                            <?php endforeach; ?>
                            </tbody>
                        </table>
                    </div>
                </div>

                <!-- Right: top device + browser per country -->
                <div class="aegra-card">
                    <div class="aegra-card-header"><?php aegra_the_icon('devices'); ?>Device &amp; Browser by Country</div>
                    <div class="aegra-card-body" style="padding:0;">
                        <table class="aegra-table">
                            <thead>
                                <tr>
                                    <th colspan="2">Country</th>
                                    <th>Top Device</th>
                                    <th>Top Browser</th>
                                </tr>
                            </thead>
                            <tbody>
                            <?php foreach ( $countries as $row ) :
                                $cc      = strtoupper( $row['country_code'] );
                                $bd      = $country_breakdown[ $row['country_code'] ] ?? [ 'devices' => [], 'browsers' => [] ];
                                $top_dev = array_key_first( $bd['devices'] ) ?? '—';
                                $top_bro = array_key_first( $bd['browsers'] ) ?? '—';
                                $flag    = '';
                                if ( strlen( $cc ) === 2 ) {
                                    $flag = mb_convert_encoding(
                                        '&#' . ( 0x1F1E6 + ord( $cc[0] ) - ord( 'A' ) ) . ';' .
                                        '&#' . ( 0x1F1E6 + ord( $cc[1] ) - ord( 'A' ) ) . ';',
                                        'UTF-8', 'HTML-ENTITIES'
                                    );
                                }
                            ?>
                            <tr>
                                <td style="width:28px;font-size:18px;line-height:1;padding-right:0;"><?php echo esc_html( $flag ); ?></td>
                                <td>
                                    <span style="font-weight:600;display:block;"><?php echo esc_html( aegra_country_name( $cc ) ); ?></span>
                                    <span style="font-size:11px;color:var(--aegra-text-muted);"><?php echo esc_html( $cc ); ?></span>
                                </td>
                                <td style="font-size:12px;"><?php echo esc_html( $top_dev ); ?></td>
                                <td style="font-size:12px;"><?php echo esc_html( $top_bro ); ?></td>
                            </tr>
                            <?php endforeach; ?>
                            </tbody>
                        </table>
                    </div>
                </div>

            </div><!-- end countries grid -->
            <?php endif; ?>

        </div><!-- #aegra-tab-audience -->

        <!-- ══════════════════════════════════════════════════════════════ -->
        <!-- Tab 3: 404s                                                    -->
        <!-- ══════════════════════════════════════════════════════════════ -->
        <div id="aegra-tab-fournots" class="aegra-tab-panel">

            <div class="aegra-traffic-stats" style="grid-template-columns:repeat(2,1fr);max-width:400px;margin-bottom:20px;">
                <div class="aegra-traffic-stat">
                    <div class="aegra-traffic-stat-value"><?php echo esc_html( number_format( $stats['total_404s'] ) ); ?></div>
                    <div class="aegra-traffic-stat-label">404 Hits (30d)</div>
                </div>
                <div class="aegra-traffic-stat">
                    <div class="aegra-traffic-stat-value"><?php echo esc_html( count( $fournots ) ); ?></div>
                    <div class="aegra-traffic-stat-label">Unique URLs</div>
                </div>
            </div>

            <div class="aegra-card">
                <div class="aegra-card-header"><?php aegra_the_icon('404'); ?>Recent 404 Hits</div>
                <div class="aegra-card-body" style="padding:0;">
                    <?php if ( empty( $fournots ) ) : ?>
                    <p style="padding:16px;color:var(--aegra-text-muted);font-size:13px;">No 404 errors recorded.</p>
                    <?php else : ?>
                    <table class="aegra-table">
                        <thead>
                            <tr>
                                <th>URL</th>
                                <th style="text-align:right;">Hits</th>
                                <th style="text-align:right;">Last Seen</th>
                            </tr>
                        </thead>
                        <tbody>
                        <?php foreach ( $fournots as $row ) : ?>
                        <tr>
                            <td style="font-size:12px;word-break:break-all;"><?php echo esc_html( $row['page_url'] ); ?></td>
                            <td style="text-align:right;font-weight:600;"><?php echo esc_html( number_format( (int) $row['hits'] ) ); ?></td>
                            <td style="text-align:right;font-size:11px;color:var(--aegra-text-muted);"><?php echo esc_html( substr( $row['last_seen'], 0, 16 ) ); ?></td>
                        </tr>
                        <?php endforeach; ?>
                        </tbody>
                    </table>
                    <?php endif; ?>
                </div>
            </div>

        </div><!-- #aegra-tab-fournots -->

        <!-- ══════════════════════════════════════════════════════════════ -->
        <!-- Pro tabs (loaded from module files)                            -->
        <!-- ══════════════════════════════════════════════════════════════ -->
        <?php foreach ( $active_pro_tabs as $key => $label ) : ?>
        <div id="aegra-tab-<?php echo esc_attr( $key ); ?>" class="aegra-tab-panel">
            <?php include AEGRA_PATH . 'pro/modules/traffic-' . $key . '.php'; ?>
        </div>
        <?php endforeach; ?>

        <?php

        aegra_footer( $sidebar );
    }

    public function page_database() {
        global $wpdb;

        // ── Conflict detection via compat registry ─────────────────────────
        $deferred = aegra_compat_is_deferred( 'database' );

        if ( $deferred ) {
            $plugin_name = esc_html( $deferred['name'] );
            $plugin_url  = esc_url( admin_url( $deferred['admin_url'] ) );
            $compat_url  = esc_url( admin_url( 'admin.php?page=aegra-site-monitor-settings&tab=compatibility' ) );

            $sidebar = '
            <div class="aegra-sidebar-section">
                <div class="aegra-sidebar-heading">Database</div>
                <div class="aegra-sidebar-text">' . $plugin_name . ' is active on this site. Aegra Site Monitor defers all database backup and dump management to avoid conflicts.</div>
            </div>
            <div class="aegra-sidebar-section">
                <div class="aegra-sidebar-heading">Navigation</div>
                <div class="aegra-sidebar-actions">
                    <a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor' ) ) . '" class="aegra-sidebar-btn">← Dashboard</a>
                </div>
            </div>';

            aegra_header( 'Database' );
            ?>
            <div class="aegra-traffic-notice" id="aegra-compat-notice-database" style="position:relative;">
                <button type="button" onclick="aegraCompatDismiss('aegra-compat-notice-database')" style="position:absolute;top:12px;right:12px;background:none;border:none;cursor:pointer;font-size:18px;line-height:1;color:#4a6fa5;padding:0;opacity:.6;" title="Dismiss">&times;</button>
                <div class="aegra-traffic-notice-title"><?php echo esc_html( $plugin_name ); ?> Detected</div>
                <div class="aegra-traffic-notice-text">
                    <?php echo esc_html( $plugin_name ); ?> is installed and active on this site. Aegra Site Monitor has deferred all database backup and management to <?php echo esc_html( $plugin_name ); ?> to avoid duplication.
                </div>
                <div class="aegra-traffic-notice-text">
                    You can change this behaviour in <a href="<?php echo esc_html( $compat_url ); ?>">Settings &rarr; Compatibility</a> and choose to run both plugins side by side.
                </div>
                <a href="<?php echo esc_html( $plugin_url ); ?>" class="aegra-btn aegra-btn-primary">Open <?php echo esc_html( $plugin_name ); ?> &rarr;</a>
            </div>
            <?php
            // Dismiss helper attached to enqueued 'aegra-site-monitor-admin' (no inline <script> tag).
            $aegra_compat_js = <<<'JS'
            if (typeof aegraCompatDismiss === 'undefined') {
            window.aegraCompatDismiss = function(id) {
                var el = document.getElementById(id);
                if (!el) return;
                var h = el.offsetHeight;
                el.style.overflow = 'hidden';
                el.style.height = h + 'px';
                el.getBoundingClientRect();
                el.style.transition = 'opacity 0.25s ease, height 0.3s ease 0.1s, margin 0.3s ease 0.1s, padding 0.3s ease 0.1s, border-width 0.3s ease 0.1s';
                el.style.opacity = '0';
                el.style.height = '0';
                el.style.marginTop = '0';
                el.style.marginBottom = '0';
                el.style.paddingTop = '0';
                el.style.paddingBottom = '0';
                el.style.borderWidth = '0';
                setTimeout(function(){ el.remove(); }, 420);
            };
            }
            JS;
            if ( function_exists( 'wp_add_inline_script' ) ) {
                wp_add_inline_script( 'aegra-site-monitor-admin', $aegra_compat_js );
            }
            aegra_footer( $sidebar );
            return;
        }

        // ── Helper: format bytes ───────────────────────────────────────────
        $fmt_bytes = function( $bytes ) {
            $kb = $bytes / 1024;
            if ( $kb < 1024 ) {
                return round( $kb, 1 ) . ' KB';
            }
            return round( $kb / 1024, 1 ) . ' MB';
        };

        // ── Pro tab detection ──────────────────────────────────────────────
        // Pro tabs injected by the Pro extension (Elementor model). Free defines none.
        $active_pro_tabs = apply_filters( 'aegra_database_pro_tabs', [] );

        // ── DB version / type ──────────────────────────────────────────────
        $full_ver   = $wpdb->get_var( 'SELECT VERSION()' );
        $is_mariadb = stripos( $full_ver, 'mariadb' ) !== false;
        $db_type    = $is_mariadb ? 'MariaDB' : 'MySQL';
        $db_version = $wpdb->db_version();

        // ── Total size & table count ───────────────────────────────────────
        $size_row = $wpdb->get_row( $wpdb->prepare(
            "SELECT SUM(data_length + index_length) AS total_size, COUNT(*) AS table_count
             FROM information_schema.TABLES
             WHERE TABLE_SCHEMA = %s",
            DB_NAME
        ) );
        $total_size_bytes  = (int) ( $size_row->total_size ?? 0 );
        $total_table_count = (int) ( $size_row->table_count ?? 0 );

        // ── Charset / collation ────────────────────────────────────────────
        $db_charset   = $wpdb->charset;
        $db_collation = $wpdb->collate;

        // ── Core table check ───────────────────────────────────────────────
        $core_table_names = [
            'commentmeta', 'comments', 'links', 'options', 'postmeta',
            'posts', 'term_relationships', 'term_taxonomy', 'termmeta',
            'terms', 'usermeta', 'users',
        ];
        $prefixed_core = array_map( function( $t ) use ( $wpdb ) {
            return $wpdb->prefix . $t;
        }, $core_table_names );

        $existing_tables_raw = $wpdb->get_col( $wpdb->prepare(
            "SELECT TABLE_NAME FROM information_schema.TABLES WHERE TABLE_SCHEMA = %s",
            DB_NAME
        ) );
        $existing_tables = array_map( 'strtolower', $existing_tables_raw );
        $missing_core    = [];
        foreach ( $prefixed_core as $ct ) {
            if ( ! in_array( strtolower( $ct ), $existing_tables, true ) ) {
                $missing_core[] = $ct;
            }
        }

        // ── Autoload size ──────────────────────────────────────────────────
        $autoload_bytes = (int) $wpdb->get_var(
            "SELECT SUM(LENGTH(option_value)) FROM {$wpdb->options} WHERE autoload IN ('yes','on','1')"
        );
        $autoload_kb = round( $autoload_bytes / 1024, 1 );

        // ── Transient count ────────────────────────────────────────────────
        $transient_count = (int) $wpdb->get_var(
            "SELECT COUNT(*) FROM {$wpdb->options} WHERE option_name LIKE '_transient_%'"
        );
        $expired_count = (int) $wpdb->get_var(
            "SELECT COUNT(*) FROM {$wpdb->options}
             WHERE option_name LIKE '_transient_timeout_%'
             AND option_value < UNIX_TIMESTAMP()"
        );

        // ── Orphaned postmeta ──────────────────────────────────────────────
        $orphan_postmeta = (int) $wpdb->get_var(
            "SELECT COUNT(*) FROM {$wpdb->postmeta} pm
             WHERE NOT EXISTS (SELECT 1 FROM {$wpdb->posts} p WHERE p.ID = pm.post_id)"
        );

        // ── Orphaned termmeta ──────────────────────────────────────────────
        $orphan_termmeta = (int) $wpdb->get_var(
            "SELECT COUNT(*) FROM {$wpdb->termmeta} tm
             WHERE NOT EXISTS (SELECT 1 FROM {$wpdb->terms} t WHERE t.term_id = tm.term_id)"
        );

        // ── Post revisions ─────────────────────────────────────────────────
        $revision_count = (int) $wpdb->get_var(
            "SELECT COUNT(*) FROM {$wpdb->posts} WHERE post_type = 'revision'"
        );

        // ── Spam / trash / pending comments ───────────────────────────────
        $spam_comments    = (int) $wpdb->get_var( "SELECT COUNT(*) FROM {$wpdb->comments} WHERE comment_approved = 'spam'" );
        $trash_comments   = (int) $wpdb->get_var( "SELECT COUNT(*) FROM {$wpdb->comments} WHERE comment_approved = 'trash'" );
        $trashed_posts    = (int) $wpdb->get_var( "SELECT COUNT(*) FROM {$wpdb->posts} WHERE post_status = 'trash'" );

        // ── Failed upgrade routines ────────────────────────────────────────
        $failed_upgrades = (int) $wpdb->get_var(
            "SELECT COUNT(*) FROM {$wpdb->options}
             WHERE option_name LIKE '%upgrade%' AND option_value LIKE '%failed%'"
        );
        $db_upgrade_ver = get_option( 'db_upgraded' );

        // ── wpdb errors in debug log ───────────────────────────────────────
        $wpdb_errors = 0;
        if ( defined( 'WP_DEBUG_LOG' ) && WP_DEBUG_LOG ) {
            $log_file = is_string( WP_DEBUG_LOG ) ? WP_DEBUG_LOG : WP_CONTENT_DIR . '/debug.log';
            if ( file_exists( $log_file ) && is_readable( $log_file ) ) {
                $log_tail = shell_exec( 'tail -n 500 ' . escapeshellarg( $log_file ) . ' 2>/dev/null' );
                if ( $log_tail ) {
                    $wpdb_errors = substr_count( $log_tail, 'wpdb' ) + substr_count( $log_tail, 'WordPress database' );
                }
            }
        }

        // ── All tables with sizes ──────────────────────────────────────────
        $all_tables = $wpdb->get_results( $wpdb->prepare(
            "SELECT TABLE_NAME, ENGINE, TABLE_ROWS, DATA_LENGTH, INDEX_LENGTH, TABLE_COLLATION
             FROM information_schema.TABLES
             WHERE TABLE_SCHEMA = %s
             ORDER BY (DATA_LENGTH + INDEX_LENGTH) DESC",
            DB_NAME
        ), ARRAY_A );

        // Classify core vs plugin
        $core_set = array_map( 'strtolower', $prefixed_core );
        foreach ( $all_tables as &$tbl ) {
            $tbl['is_core'] = in_array( strtolower( $tbl['TABLE_NAME'] ), $core_set, true );
        }
        unset( $tbl );

        // Core vs plugin counts for donut
        $core_count   = 0;
        $plugin_count = 0;
        foreach ( $all_tables as $tbl ) {
            if ( $tbl['is_core'] ) { $core_count++; } else { $plugin_count++; }
        }

        // ── Collation mismatches ───────────────────────────────────────────
        $collation_mismatches = 0;
        if ( ! empty( $db_collation ) ) {
            foreach ( $all_tables as $tbl ) {
                if ( ! empty( $tbl['TABLE_COLLATION'] ) && $tbl['TABLE_COLLATION'] !== $db_collation ) {
                    $collation_mismatches++;
                }
            }
        }

        // Top 10 tables by size for bar chart
        $top10_tables = array_slice( $all_tables, 0, 10 );

        // ── Top 10 autoload options ────────────────────────────────────────
        $top_autoload = $wpdb->get_results(
            "SELECT option_name, LENGTH(option_value) AS val_size
             FROM {$wpdb->options}
             WHERE autoload IN ('yes','on','1')
             ORDER BY val_size DESC
             LIMIT 10",
            ARRAY_A
        );

        // ── Top 10 transients by size ──────────────────────────────────────
        $top_transients = $wpdb->get_results(
            "SELECT option_name, LENGTH(option_value) AS val_size
             FROM {$wpdb->options}
             WHERE option_name LIKE '_transient_%'
               AND option_name NOT LIKE '_transient_timeout_%'
             ORDER BY val_size DESC
             LIMIT 10",
            ARRAY_A
        );

        // ── Build chart data ───────────────────────────────────────────────
        $chart_tables = [];
        $bar_colors   = [ '#5184b3','#f6a623','#1cc88a','#e74c3c','#9b59b6','#36b9cc','#f39c12','#2ecc71','#e67e22','#3498db' ];
        foreach ( $top10_tables as $i => $t ) {
            $size_kb = round( ( (int)$t['DATA_LENGTH'] + (int)$t['INDEX_LENGTH'] ) / 1024, 1 );
            $chart_tables[] = [
                'label' => $t['TABLE_NAME'],
                'value' => $size_kb,
                'color' => $bar_colors[ $i % count( $bar_colors ) ],
            ];
        }

        $chart_autoload = [];
        foreach ( $top_autoload as $i => $opt ) {
            $chart_autoload[] = [
                'label' => $opt['option_name'],
                'value' => round( $opt['val_size'] / 1024, 1 ),
                'color' => $bar_colors[ $i % count( $bar_colors ) ],
            ];
        }

        // ── Localize chart data ────────────────────────────────────────────
        wp_localize_script( 'aegra-site-monitor-database', 'aegraDbData', [
            'core'     => $core_count,
            'plugin'   => $plugin_count,
            'tables'   => $chart_tables,
            'autoload' => $chart_autoload,
        ] );

        // ── Sidebar ────────────────────────────────────────────────────────
        $sidebar = '
        <div class="aegra-sidebar-section aegra-tab-sidebar aegra-tab-sidebar--active" data-sidebar="overview">
            <div class="aegra-sidebar-heading">Overview</div>
            <div class="aegra-sidebar-text">A snapshot of your database — size, health indicators, and table distribution all at a glance. Quickly see how your data is structured, identify heavy or inefficient tables, and spot signs of bloat or fragmentation. Ideal for keeping performance in check, planning optimisations, and ensuring your database stays lean, stable, and efficient.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="tables">
            <div class="aegra-sidebar-heading">Tables</div>
            <div class="aegra-sidebar-text">A complete list of all database tables, including size, row count, engine, and collation for each. Core WordPress tables are clearly separated from plugin and custom tables, making it easy to understand what’s essential and what’s optional. Quickly identify oversized tables, inefficient storage engines, or inconsistencies that could affect performance, and gain a clear picture of how your database is structured and growing over time.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="options">
            <div class="aegra-sidebar-heading">Options &amp; Transients</div>
            <div class="aegra-sidebar-text">Autoload data is loaded on every page request, so keeping it lean is critical for performance. Transients are temporary cached values, and when they build up or expire without cleanup, they can add unnecessary overhead. This view helps you spot bloated autoload entries and excessive or stale transients, so you can trim what isn’t needed and keep your database fast and efficient.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="snapshots">
            <div class="aegra-sidebar-heading">Snapshot Comparison</div>
            <div class="aegra-sidebar-text">Take point-in-time snapshots of your database state and compare them side by side. Instantly see what tables grew, what changed, and when, with clear visibility into size shifts, row counts, and structural differences. Perfect for tracking growth, diagnosing unexpected changes, and understanding the impact of updates, imports, or plugin activity over time.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="querymonitor">
            <div class="aegra-sidebar-heading">Query Monitor</div>
            <div class="aegra-sidebar-text">Log and analyse slow or heavy database queries as they happen. Surface the queries consuming the most time or resources, along with frequency and impact, so you can pinpoint exactly where performance is being lost. Identify bottlenecks early, optimise inefficient queries, and keep your database running fast under real-world load.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="optimisation">
            <div class="aegra-sidebar-heading">Optimisation</div>
            <div class="aegra-sidebar-text">Autoload suggestions, duplicate meta detection, deep orphan cleanup, and a clear DB bloat score — all focused on giving you practical, actionable ways to keep your database lean. Quickly identify unnecessary data, remove what’s no longer needed, and optimise what remains, so your database stays fast, efficient, and easy to manage over time.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="scheduled">
            <div class="aegra-sidebar-heading">Scheduled Scans</div>
            <div class="aegra-sidebar-text">Automated database health scans run on a schedule, giving you regular insight into the condition of your database without needing to check manually. Built with awareness of custom tables used by WooCommerce, Action Scheduler, and other major plugins, it delivers more accurate analysis than generic tools. Spot bloat, overhead, orphaned data, and other issues early, then export clear reports for maintenance records, client updates, or deeper review.</div>
        </div>
        <div class="aegra-sidebar-section">
            <div class="aegra-sidebar-heading">Navigation</div>
            <div class="aegra-sidebar-actions">
                <a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor' ) ) . '" class="aegra-sidebar-btn">← Dashboard</a>
            </div>
        </div>'
        . '';

        $sidebar .= aegra_pro_promo_sidebar( [
            'page'     => 'Database',
            'headline' => 'Keep your database lean and fast.',
            'subline'  => 'Aegra Pro compares snapshots, monitors queries and schedules cleanups.',
            'benefits' => [
                'Snapshot comparison',
                'Query monitor',
                'Optimisation tools',
                'Scheduled scans',
            ],
        ] );

        aegra_header( 'Database' );

        ?>

        <!-- ── Tab bar ──────────────────────────────────────────────────── -->
        <div class="aegra-tabs">
            <button class="aegra-tab aegra-tab--active" data-tab="overview">Overview</button>
            <button class="aegra-tab" data-tab="tables">Tables</button>
            <button class="aegra-tab" data-tab="options">Options &amp; Transients</button>
            <?php foreach ( $active_pro_tabs as $key => $label ) : ?>
            <button class="aegra-tab" data-tab="<?php echo esc_attr( $key ); ?>"><?php echo esc_html( $label ); ?></button>
            <?php endforeach; ?>
        </div>

        <!-- ══════════════════════════════════════════════════════════════ -->
        <!-- Tab 1: Overview                                                -->
        <!-- ══════════════════════════════════════════════════════════════ -->
        <div id="aegra-tab-overview" class="aegra-tab-panel aegra-tab-panel--active">
            <div style="display:grid;grid-template-columns:1fr 1fr;gap:20px;">

                <!-- LEFT COLUMN -->
                <div>

                    <!-- Database Summary -->
                    <div class="aegra-card">
                        <div class="aegra-card-header"><?php aegra_the_icon('database'); ?>Database Summary</div>
                        <div class="aegra-card-body" style="padding:0;">
                            <table class="aegra-table">
                                <tr><td>DB Type</td><td><?php echo esc_html( $db_type ); ?></td></tr>
                                <tr><td>Version</td><td><?php echo esc_html( $db_version ); ?></td></tr>
                                <tr><td>Total Size</td><td><?php echo esc_html( $fmt_bytes( $total_size_bytes ) ); ?></td></tr>
                                <tr><td>Table Count</td><td><?php echo esc_html( $total_table_count ); ?></td></tr>
                                <tr><td>Charset</td><td><?php echo esc_html( $db_charset ); ?></td></tr>
                                <tr><td>Collation</td><td><?php echo esc_html( $db_collation ); ?></td></tr>
                                <tr>
                                    <td>Connection</td>
                                    <td><?php echo wp_kses_post( $this->db_status['connection'] ? '<span class="aegra-badge aegra-badge-green">OK</span>' : '<span class="aegra-badge aegra-badge-red">Failed</span>' ); ?></td>
                                </tr>
                                <tr>
                                    <td>Writable</td>
                                    <td><?php echo wp_kses_post( $this->db_status['write'] ? '<span class="aegra-badge aegra-badge-green">Yes</span>' : '<span class="aegra-badge aegra-badge-red">No</span>' ); ?></td>
                                </tr>
                            </table>
                        </div>
                    </div>

                    <!-- Health Indicators -->
                    <div class="aegra-card">
                        <div class="aegra-card-header"><?php aegra_the_icon('health'); ?>Health Indicators</div>
                        <div class="aegra-card-body" style="padding:0;">
                            <table class="aegra-table">
                                <tr>
                                    <td>Autoload Total</td>
                                    <td>
                                        <?php echo esc_html( $autoload_kb ) . ' KB'; ?>
                                        <?php if ( $autoload_kb > 1500 ) : ?>
                                            <span class="aegra-badge aegra-badge-red" style="margin-left:6px;">High</span>
                                        <?php elseif ( $autoload_kb > 800 ) : ?>
                                            <span class="aegra-badge aegra-badge-orange" style="margin-left:6px;">Warning</span>
                                        <?php else : ?>
                                            <span class="aegra-badge aegra-badge-green" style="margin-left:6px;">OK</span>
                                        <?php endif; ?>
                                    </td>
                                </tr>
                                <tr>
                                    <td>Transient Count</td>
                                    <td>
                                        <?php echo esc_html( $transient_count ); ?>
                                        <?php if ( $transient_count > 200 ) : ?>
                                            <span class="aegra-badge aegra-badge-orange" style="margin-left:6px;">High</span>
                                        <?php endif; ?>
                                    </td>
                                </tr>
                                <tr>
                                    <td>Missing Core Tables</td>
                                    <td>
                                        <?php if ( empty( $missing_core ) ) : ?>
                                            <span class="aegra-badge aegra-badge-green">None</span>
                                        <?php else : ?>
                                            <span class="aegra-badge aegra-badge-red"><?php echo esc_html( count( $missing_core ) ); ?> missing</span>
                                            <br><small style="color:var(--aegra-text-muted);font-size:11px;"><?php echo esc_html( implode( ', ', $missing_core ) ); ?></small>
                                        <?php endif; ?>
                                    </td>
                                </tr>
                                <tr>
                                    <td>Orphaned Postmeta</td>
                                    <td>
                                        <?php echo esc_html( $orphan_postmeta ); ?>
                                        <?php if ( $orphan_postmeta > 0 ) : ?>
                                            <span class="aegra-badge aegra-badge-orange" style="margin-left:6px;">Cleanup recommended</span>
                                        <?php endif; ?>
                                    </td>
                                </tr>
                                <tr>
                                    <td>Orphaned Termmeta</td>
                                    <td>
                                        <?php echo esc_html( $orphan_termmeta ); ?>
                                        <?php if ( $orphan_termmeta > 0 ) : ?>
                                            <span class="aegra-badge aegra-badge-orange" style="margin-left:6px;">Cleanup recommended</span>
                                        <?php endif; ?>
                                    </td>
                                </tr>
                                <tr>
                                    <td>Post Revisions</td>
                                    <td>
                                        <?php echo esc_html( number_format( $revision_count ) ); ?>
                                        <?php if ( $revision_count > 500 ) : ?>
                                            <span class="aegra-badge aegra-badge-orange" style="margin-left:6px;">High</span>
                                        <?php endif; ?>
                                    </td>
                                </tr>
                                <tr>
                                    <td>Trashed Posts</td>
                                    <td>
                                        <?php echo esc_html( $trashed_posts ); ?>
                                        <?php if ( $trashed_posts > 0 ) : ?>
                                            <span class="aegra-badge aegra-badge-orange" style="margin-left:6px;">Empty trash</span>
                                        <?php endif; ?>
                                    </td>
                                </tr>
                                <tr>
                                    <td>Spam Comments</td>
                                    <td>
                                        <?php echo esc_html( $spam_comments ); ?>
                                        <?php if ( $spam_comments > 0 ) : ?>
                                            <span class="aegra-badge aegra-badge-orange" style="margin-left:6px;">Clear recommended</span>
                                        <?php endif; ?>
                                    </td>
                                </tr>
                                <tr>
                                    <td>Trashed Comments</td>
                                    <td>
                                        <?php echo esc_html( $trash_comments ); ?>
                                        <?php if ( $trash_comments > 0 ) : ?>
                                            <span class="aegra-badge aegra-badge-orange" style="margin-left:6px;">Clear recommended</span>
                                        <?php endif; ?>
                                    </td>
                                </tr>
                                <tr>
                                    <td>Collation Mismatches</td>
                                    <td>
                                        <?php if ( $collation_mismatches === 0 ) : ?>
                                            <span class="aegra-badge aegra-badge-green">None</span>
                                        <?php else : ?>
                                            <span class="aegra-badge aegra-badge-red"><?php echo esc_html( $collation_mismatches ); ?> table<?php echo esc_html( $collation_mismatches > 1 ? 's' : '' ); ?></span>
                                        <?php endif; ?>
                                    </td>
                                </tr>
                                <tr>
                                    <td>Failed Upgrade Routines</td>
                                    <td>
                                        <?php if ( $failed_upgrades === 0 ) : ?>
                                            <span class="aegra-badge aegra-badge-green">None</span>
                                        <?php else : ?>
                                            <span class="aegra-badge aegra-badge-red"><?php echo esc_html( $failed_upgrades ); ?> found</span>
                                        <?php endif; ?>
                                    </td>
                                </tr>
                                <tr>
                                    <td>DB Errors (debug log)</td>
                                    <td>
                                        <?php if ( ! defined( 'WP_DEBUG_LOG' ) || ! WP_DEBUG_LOG ) : ?>
                                            <span style="color:var(--aegra-text-muted);font-size:12px;">Debug log disabled</span>
                                        <?php elseif ( $wpdb_errors === 0 ) : ?>
                                            <span class="aegra-badge aegra-badge-green">None recent</span>
                                        <?php else : ?>
                                            <span class="aegra-badge aegra-badge-red"><?php echo esc_html( $wpdb_errors ); ?> in last 500 lines</span>
                                        <?php endif; ?>
                                    </td>
                                </tr>
                            </table>
                        </div>
                    </div>

                </div><!-- /left -->

                <!-- RIGHT COLUMN -->
                <div>

                    <!-- Table Distribution donut -->
                    <div class="aegra-card">
                        <div class="aegra-card-header"><?php aegra_the_icon('table'); ?>Table Distribution</div>
                        <div class="aegra-card-body" style="display:flex;flex-direction:row;align-items:center;justify-content:center;gap:24px;padding:16px;">
                            <div id="aegra-db-donut" style="flex-shrink:0;"></div>
                            <div class="aegra-db-legend" style="display:flex;flex-direction:column;gap:10px;">
                                <div class="aegra-db-legend-item">
                                    <div class="aegra-db-legend-dot" style="background:#5184b3;"></div>
                                    WP Core (<?php echo esc_html( $core_count ); ?>)
                                </div>
                                <div class="aegra-db-legend-item">
                                    <div class="aegra-db-legend-dot" style="background:#f6a623;"></div>
                                    Plugins (<?php echo esc_html( $plugin_count ); ?>)
                                </div>
                            </div>
                        </div>
                    </div>

                    <!-- Top Tables by Size bar chart -->
                    <div class="aegra-card">
                        <div class="aegra-card-header"><?php aegra_the_icon('top_page'); ?>Top Tables by Size</div>
                        <div class="aegra-card-body" style="padding:16px;">
                            <div id="aegra-db-sizebar"></div>
                        </div>
                    </div>

                </div><!-- /right -->

            </div>
        </div><!-- /tab-overview -->

        <!-- ══════════════════════════════════════════════════════════════ -->
        <!-- Tab 2: Tables                                                  -->
        <!-- ══════════════════════════════════════════════════════════════ -->
        <div id="aegra-tab-tables" class="aegra-tab-panel">
            <div class="aegra-card">
                <div class="aegra-card-header"><?php aegra_the_icon('table'); ?>All Database Tables</div>
                <div class="aegra-card-body" style="padding:0;overflow-x:auto;">
                    <table class="aegra-table" style="width:100%;">
                        <thead>
                            <tr>
                                <th style="padding:10px 18px;font-size:11px;font-weight:600;text-transform:uppercase;color:var(--aegra-text-muted);border-bottom:2px solid var(--aegra-border);">Table Name</th>
                                <th style="padding:10px 18px;font-size:11px;font-weight:600;text-transform:uppercase;color:var(--aegra-text-muted);border-bottom:2px solid var(--aegra-border);">Engine</th>
                                <th style="padding:10px 18px;font-size:11px;font-weight:600;text-transform:uppercase;color:var(--aegra-text-muted);border-bottom:2px solid var(--aegra-border);">Rows</th>
                                <th style="padding:10px 18px;font-size:11px;font-weight:600;text-transform:uppercase;color:var(--aegra-text-muted);border-bottom:2px solid var(--aegra-border);">Data Size</th>
                                <th style="padding:10px 18px;font-size:11px;font-weight:600;text-transform:uppercase;color:var(--aegra-text-muted);border-bottom:2px solid var(--aegra-border);">Index Size</th>
                                <th style="padding:10px 18px;font-size:11px;font-weight:600;text-transform:uppercase;color:var(--aegra-text-muted);border-bottom:2px solid var(--aegra-border);">Total</th>
                                <th style="padding:10px 18px;font-size:11px;font-weight:600;text-transform:uppercase;color:var(--aegra-text-muted);border-bottom:2px solid var(--aegra-border);">Collation</th>
                            </tr>
                        </thead>
                        <tbody>
                            <?php foreach ( $all_tables as $tbl ) :
                                $data_sz  = $fmt_bytes( (int) $tbl['DATA_LENGTH'] );
                                $idx_sz   = $fmt_bytes( (int) $tbl['INDEX_LENGTH'] );
                                $total_sz = $fmt_bytes( (int) $tbl['DATA_LENGTH'] + (int) $tbl['INDEX_LENGTH'] );
                            ?>
                            <tr>
                                <td style="padding:8px 18px;">
                                    <?php echo esc_html( $tbl['TABLE_NAME'] ); ?>
                                    <?php if ( $tbl['is_core'] ) : ?>
                                        <span class="aegra-badge aegra-badge-blue" style="margin-left:6px;font-size:10px;">Core</span>
                                    <?php else : ?>
                                        <span class="aegra-badge aegra-badge-grey" style="margin-left:6px;font-size:10px;">Plugin</span>
                                    <?php endif; ?>
                                </td>
                                <td style="padding:8px 18px;"><?php echo esc_html( $tbl['ENGINE'] ?? '—' ); ?></td>
                                <td style="padding:8px 18px;"><?php echo esc_html( number_format( (int) $tbl['TABLE_ROWS'] ) ); ?></td>
                                <td style="padding:8px 18px;"><?php echo esc_html( $data_sz ); ?></td>
                                <td style="padding:8px 18px;"><?php echo esc_html( $idx_sz ); ?></td>
                                <td style="padding:8px 18px;font-weight:600;"><?php echo esc_html( $total_sz ); ?></td>
                                <td style="padding:8px 18px;font-size:12px;color:var(--aegra-text-muted);"><?php echo esc_html( $tbl['TABLE_COLLATION'] ?? '—' ); ?></td>
                            </tr>
                            <?php endforeach; ?>
                        </tbody>
                    </table>
                </div>
            </div>
        </div><!-- /tab-tables -->

        <!-- ══════════════════════════════════════════════════════════════ -->
        <!-- Tab 3: Options & Transients                                    -->
        <!-- ══════════════════════════════════════════════════════════════ -->
        <div id="aegra-tab-options" class="aegra-tab-panel">

            <div style="display:grid;grid-template-columns:1fr 1fr;gap:20px;margin-bottom:20px;">

                <!-- Largest Autoload Options table -->
                <div class="aegra-card">
                    <div class="aegra-card-header"><?php aegra_the_icon('auto_load'); ?>Largest Autoload Options</div>
                    <div class="aegra-card-body" style="padding:0;">
                        <table class="aegra-table" style="width:100%;">
                            <thead>
                                <tr>
                                    <th style="padding:8px 18px;font-size:11px;font-weight:600;text-transform:uppercase;color:var(--aegra-text-muted);border-bottom:2px solid var(--aegra-border);">Option Name</th>
                                    <th style="padding:8px 18px;font-size:11px;font-weight:600;text-transform:uppercase;color:var(--aegra-text-muted);border-bottom:2px solid var(--aegra-border);">Size</th>
                                </tr>
                            </thead>
                            <tbody>
                                <?php foreach ( $top_autoload as $opt ) : ?>
                                <tr>
                                    <td style="padding:7px 18px;font-size:12px;word-break:break-all;"><?php echo esc_html( $opt['option_name'] ); ?></td>
                                    <td style="padding:7px 18px;font-weight:600;"><?php echo esc_html( round( $opt['val_size'] / 1024, 1 ) . ' KB' ); ?></td>
                                </tr>
                                <?php endforeach; ?>
                            </tbody>
                        </table>
                    </div>
                </div>

                <!-- Autoload bar chart -->
                <div class="aegra-card">
                    <div class="aegra-card-header"><?php aegra_the_icon('auto_load'); ?>Autoload Size Breakdown</div>
                    <div class="aegra-card-body" style="padding:16px;">
                        <div id="aegra-db-autobar"></div>
                    </div>
                </div>

            </div>

            <!-- Transients summary -->
            <div class="aegra-card">
                <div class="aegra-card-header"><?php aegra_the_icon('expired_transient'); ?>Transients</div>
                <div class="aegra-card-body" style="padding:0;">
                    <table class="aegra-table" style="width:100%;margin-bottom:0;">
                        <tr>
                            <td>Total Transients</td>
                            <td>
                                <?php echo esc_html( $transient_count ); ?>
                                <?php if ( $transient_count > 200 ) : ?>
                                    <span class="aegra-badge aegra-badge-orange" style="margin-left:6px;">High — consider cleanup</span>
                                <?php endif; ?>
                            </td>
                        </tr>
                        <tr>
                            <td>Expired Transients</td>
                            <td>
                                <?php echo esc_html( $expired_count ); ?>
                                <?php if ( $expired_count > 0 ) : ?>
                                    <span class="aegra-badge aegra-badge-orange" style="margin-left:6px;">Can be purged</span>
                                <?php endif; ?>
                            </td>
                        </tr>
                    </table>

                    <?php if ( ! empty( $top_transients ) ) : ?>
                    <div style="padding:0 18px 12px;">
                        <div style="font-size:11px;font-weight:600;text-transform:uppercase;color:var(--aegra-text-muted);margin:14px 0 8px;">Top 10 Largest Transients</div>
                        <table class="aegra-table" style="width:100%;">
                            <thead>
                                <tr>
                                    <th style="padding:6px 0;font-size:11px;font-weight:600;color:var(--aegra-text-muted);">Transient Key</th>
                                    <th style="padding:6px 0;font-size:11px;font-weight:600;color:var(--aegra-text-muted);">Size</th>
                                </tr>
                            </thead>
                            <tbody>
                                <?php foreach ( $top_transients as $tr ) : ?>
                                <tr>
                                    <td style="padding:5px 0;font-size:12px;word-break:break-all;"><?php echo esc_html( $tr['option_name'] ); ?></td>
                                    <td style="padding:5px 0;font-weight:600;"><?php echo esc_html( round( $tr['val_size'] / 1024, 1 ) . ' KB' ); ?></td>
                                </tr>
                                <?php endforeach; ?>
                            </tbody>
                        </table>
                    </div>
                    <?php endif; ?>

                </div>
            </div>

        </div><!-- /tab-options -->

        <?php foreach ( $active_pro_tabs as $key => $label ) : ?>
        <div id="aegra-tab-<?php echo esc_attr( $key ); ?>" class="aegra-tab-panel">
            <?php include AEGRA_PATH . 'pro/modules/database-' . esc_attr( $key ) . '.php'; ?>
        </div>
        <?php endforeach; ?>


        <?php
        aegra_footer( $sidebar );
    }

    public function page_media() {
        // Pro tabs injected by the Pro extension (Elementor model). Free defines none.
        $active_pro_tabs = apply_filters( 'aegra_media_pro_tabs', [] );

        $sidebar = '
        <div class="aegra-sidebar-section aegra-tab-sidebar aegra-tab-sidebar--active" data-sidebar="overview">
            <div class="aegra-sidebar-heading">Overview</div>
            <div class="aegra-sidebar-text">Total media file counts broken down by type — images, video, audio, documents, and other. A visual chart gives you an instant snapshot of the composition of your media library so you can understand its size and shape before investigating specific issues like missing alt text or oversized files.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="alt">
            <div class="aegra-sidebar-heading">Missing Alt Text</div>
            <div class="aegra-sidebar-text">Every image in your media library without alt text — listed with a direct link to the media editor for each one. Missing alt text is both an accessibility failure and an SEO gap. Screen readers rely on it to describe images to visually impaired users, and search engines use it to understand image content and improve image search ranking.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="large">
            <div class="aegra-sidebar-heading">Large Files</div>
            <div class="aegra-sidebar-text">All media files over 500KB sorted by size from largest to smallest. Oversized images are one of the most common and impactful causes of slow page load times. Use this list to identify candidates for compression, resizing, or conversion to WebP format — each file links directly to the media editor for quick action.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="unused">
            <div class="aegra-sidebar-heading">Unused Media</div>
            <div class="aegra-sidebar-text">Media files that are not attached to any post or page as detected by WordPress post_parent association. These are candidates for cleanup but should be verified before deletion — some files may be referenced directly in content via URL without a post_parent relationship. Use the PRO Unused Media tab for a more thorough scan.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="health">
            <div class="aegra-sidebar-heading">File Health</div>
            <div class="aegra-sidebar-text">Checks the integrity of your media library at the file level — attachment records whose file is missing from disk, and duplicate filenames that suggest redundant or conflicting uploads. Missing files serve broken images and silent 404s; duplicates waste storage and create confusion over which version is correct. Use this to spot and resolve file-level problems before they affect your visitors.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="formats">
            <div class="aegra-sidebar-heading">Formats</div>
            <div class="aegra-sidebar-text">Looks at the technical make-up of your media — unsupported or unusual MIME types, images with unexpected dimensions, audio and video missing key metadata, and whether your server can generate modern WebP and AVIF formats. Understanding format support helps you deliver lighter, faster-loading media and avoid files that browsers or WordPress handle poorly.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-missing">
            <div class="aegra-sidebar-heading">Missing Files <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Database attachment records where the actual file no longer exists on disk — orphaned entries that serve broken images and return 404 errors to visitors and search engines. These are left behind when files are deleted directly via FTP or server rather than through the WordPress media library. Clean them up to eliminate silent 404s.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-duplicates">
            <div class="aegra-sidebar-heading">Duplicate Detection <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Hash-based exact duplicate detection that compares file contents across your entire media library — not just filenames. Identifies redundant uploads that waste storage and can create confusion around which version of an image is the correct one to use. Consolidate duplicates to keep your library clean and consistent.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-unused">
            <div class="aegra-sidebar-heading">Unused Media (Full) <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">A thorough unused media scan that goes beyond post_parent — checking post content, custom meta fields, widget settings, and theme options for direct URL references to each file. Far more accurate than the free unused tab, and safe to use as the basis for bulk cleanup decisions without risk of removing files that are still in active use.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-thumbnails">
            <div class="aegra-sidebar-heading">Thumbnail Integrity <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Verifies that all registered WordPress image sizes have been correctly generated for every attachment in your library. Missing or corrupt thumbnail sizes cause broken layouts, empty image slots in grids and galleries, and fallback to full-size images that slow down page loads. Flag and regenerate missing sizes without a separate plugin.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-optimise">
            <div class="aegra-sidebar-heading">Optimisation <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Image dimension analysis, modern format suggestions (WebP and AVIF where supported), compression opportunity scoring, and media library growth tracking over time. Identifies specific images that would benefit most from optimisation and quantifies the potential savings — giving you a prioritised action list rather than a generic recommendation to compress everything.</div>
        </div>
        <div class="aegra-sidebar-section">
            <div class="aegra-sidebar-heading">Navigation</div>
            <div class="aegra-sidebar-actions">
                <a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor' ) ) . '" class="aegra-sidebar-btn">← Dashboard</a>
                <a href="' . esc_url( admin_url( 'upload.php' ) ) . '" class="aegra-sidebar-btn">WP Media Library</a>
            </div>
        </div>';

        $sidebar .= aegra_pro_promo_sidebar( [
            'page'     => 'Media',
            'headline' => 'Reclaim wasted space and find broken media.',
            'subline'  => 'Aegra Pro audits your entire media library for missing, duplicate and unused files.',
            'benefits' => [
                'Missing-file detection',
                'Duplicate media finder',
                'Unused media cleanup',
                'Thumbnail integrity checks',
            ],
        ] );

        aegra_header( 'Media Library' );
        include AEGRA_PATH . 'views/media-page.php';
        aegra_footer( $sidebar );
    }

    public function page_security() {

        // ── Pro tab detection ──────────────────────────────────────────────
        // Pro tabs injected by the Pro extension (Elementor model). Free defines none.
        $active_pro_tabs = apply_filters( 'aegra_security_pro_tabs', [] );

        $sidebar = '
        <div class="aegra-sidebar-section aegra-tab-sidebar aegra-tab-sidebar--active" data-sidebar="checks">
            <div class="aegra-sidebar-heading">Security Checks</div>
            <div class="aegra-sidebar-text">Automated checks against common WordPress security misconfigurations — SSL enforcement, debug mode exposure, file editing access, default admin usernames, and pending core or plugin updates. Each check flags a pass, warning, or failure so you can act on the most critical risks first without trawling through settings manually.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="activity">
            <div class="aegra-sidebar-heading">Auth Activity</div>
            <div class="aegra-sidebar-text">A live record of login successes and failures, new user registrations, password resets, and role changes — all pulled from the Aegra Site Monitor activity log. Use this to spot unusual login patterns, repeated failed attempts from specific users, or unexpected role elevations that could indicate an account compromise or insider threat.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="changes">
            <div class="aegra-sidebar-heading">Plugin &amp; Theme Changes</div>
            <div class="aegra-sidebar-text">A complete log of plugin and theme installs, activations, deactivations, and updates recorded during admin sessions. Keeping track of what changed and when is essential for diagnosing site breakages, identifying unauthorised modifications, and maintaining a clear audit trail of every structural change made to your WordPress installation.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="admins">
            <div class="aegra-sidebar-heading">Administrator Accounts</div>
            <div class="aegra-sidebar-text">All users currently holding the Administrator role on this site. Unexpected or unrecognised admin accounts are one of the most common indicators of a compromised WordPress installation. Review this list regularly and remove any accounts that should not have full admin access — particularly after plugin installs or user imports.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="files">
            <div class="aegra-sidebar-heading">Recent File Changes</div>
            <div class="aegra-sidebar-text">Files modified in the last 7 days across wp-content, wp-admin, and wp-includes. PHP files are highlighted as the highest-risk vector for injected malicious code. Any unexpected changes to core files, theme files, or plugin files outside of a planned update should be investigated immediately — this view makes it easy to spot what changed and when.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="ip">
            <div class="aegra-sidebar-heading">IP &amp; Geo Tracking <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Track login attempts and admin actions by IP address with full geolocation. Quickly identify suspicious activity originating from unexpected countries or regions, flag IPs with repeated failures, and build a clear picture of who is accessing your site and from where — essential context for investigating security incidents.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="bruteforce">
            <div class="aegra-sidebar-heading">Brute-force &amp; Lockouts <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Automatic detection of repeated failed login attempts with configurable lockout thresholds and IP blocking. Brute-force attacks are one of the most common entry points for WordPress compromises — this module stops them before they succeed by locking out offending IPs and alerting you in real time.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="integrity">
            <div class="aegra-sidebar-heading">File Integrity <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Continuously monitors WordPress core, plugin, and theme files for unexpected changes by comparing against known official checksums. Any file that has been added, modified, or deleted outside of a legitimate update is flagged immediately — making it straightforward to detect injected backdoors, modified core files, or tampered plugin code.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="alerts">
            <div class="aegra-sidebar-heading">Alerts &amp; Timeline <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">A unified security event timeline combining all auth activity, file changes, lockouts, and system anomalies into a single chronological view. Email and dashboard alerts fire automatically on critical events — new administrator accounts, IP lockouts, unexpected file modifications, and REST or XML-RPC abuse — keeping you informed the moment something needs attention.</div>
        </div>
        <div class="aegra-sidebar-section">
            <div class="aegra-sidebar-heading">Navigation</div>
            <div class="aegra-sidebar-actions">
                <a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor' ) ) . '" class="aegra-sidebar-btn">← Dashboard</a>
            </div>
        </div>';

        $sidebar .= aegra_pro_promo_sidebar( [
            'page'     => 'Security',
            'headline' => 'Lock it down before someone tries the door.',
            'subline'  => 'Aegra Pro adds active defence — brute-force lockouts, IP/geo blocking and file-integrity monitoring.',
            'benefits' => [
                'Brute-force protection & lockouts',
                'IP & country blocking',
                'File integrity monitoring',
                'Real-time security alerts',
            ],
        ] );

        aegra_header( 'Security & Auth Activity' );
        include AEGRA_PATH . 'views/security-page.php';
        aegra_footer( $sidebar );
    }

    public function page_performance() {
        // Pro tabs injected by the Pro extension (Elementor model). Free defines none.
        $active_pro_tabs = apply_filters( 'aegra_performance_pro_tabs', [] );

        $sidebar = '
        <div class="aegra-sidebar-section aegra-tab-sidebar aegra-tab-sidebar--active" data-sidebar="overview">
            <div class="aegra-sidebar-heading">Overview</div>
            <div class="aegra-sidebar-text">A real-time snapshot of memory usage, database query count, and page generation time for the current admin request. Use this as your baseline performance indicator — high query counts or excessive memory consumption here often point to plugins or themes with inefficient code that affects every page load across your site.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="cache">
            <div class="aegra-sidebar-heading">Cache &amp; OPcache</div>
            <div class="aegra-sidebar-text">Object cache type, OPcache status, hit rate, and memory allocation. OPcache caches compiled PHP bytecode in memory, dramatically reducing execution time on every request. Keep your hit rate above 95% — anything lower suggests the cache is too small or being invalidated too frequently, and is a straightforward win to address.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="assets">
            <div class="aegra-sidebar-heading">Scripts &amp; Styles</div>
            <div class="aegra-sidebar-text">Every enqueued script and stylesheet loaded on this admin page, with source and size where available. Plugins that load assets on every admin screen — regardless of whether they are needed — contribute to admin slowness and bloat. Use this list to identify unnecessary asset loading and inform decisions about which plugins to audit or replace.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="options">
            <div class="aegra-sidebar-heading">Autoloaded Options</div>
            <div class="aegra-sidebar-text">WordPress options marked as autoloaded are fetched from the database on every single page request — before anything else runs. High total autoload size (over 1MB is a red flag) causes measurable slowdowns site-wide. Plugins that store large data in autoloaded options are common culprits. Expired transients consuming autoload space should be cleared immediately.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="transients">
            <div class="aegra-sidebar-heading">Transients</div>
            <div class="aegra-sidebar-text">Transients are temporary cached values WordPress stores in the database with an expiry time. When they accumulate or expire without being cleaned up, they bloat the options table and slow down queries. This view shows how many transients exist, how much space they use, and how many have expired — so you can clear the dead weight and keep the database lean.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="rest">
            <div class="aegra-sidebar-heading">REST Latency</div>
            <div class="aegra-sidebar-text">Measures how quickly your site responds to WordPress REST API requests — the calls the block editor, mobile apps, and many plugins rely on. Slow REST responses make the editor feel sluggish and can hold up anything that talks to your site programmatically. Use this to spot a slow endpoint before it frustrates editors or breaks integrations.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-overtime">
            <div class="aegra-sidebar-heading">Performance Over Time <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Trend graphs of page load time, database query count, and memory usage sampled across days and weeks. A single snapshot tells you the current state — but trends tell you whether your site is getting faster or slower over time, and help pinpoint exactly when a performance regression was introduced, such as after a plugin update or content change.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-slowpages">
            <div class="aegra-sidebar-heading">Slow Page Detection <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Frontend pages are sampled for generation time and flagged when they consistently exceed your configured threshold. Identifies the specific URLs dragging your site down so you can investigate the cause — heavy shortcodes, unoptimised queries, or bloated templates — and fix the problem at the source rather than guessing where the bottleneck is.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-queries">
            <div class="aegra-sidebar-heading">Slow Query Log <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Captures and ranks the slowest database queries across admin and frontend requests, complete with caller stack traces showing exactly which plugin or theme triggered each query. Requires SAVEQUERIES to be enabled. Essential for diagnosing sites with high query counts — find and eliminate the queries causing the most damage to your database response times.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-ajax">
            <div class="aegra-sidebar-heading">AJAX &amp; REST Latency <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Intercepts and logs all admin-ajax.php and REST API calls with response times and payload sizes recorded server-side. Slow or oversized AJAX responses directly impact the admin experience and frontend interactivity. Use this log to identify which endpoints are underperforming and trace them back to the responsible plugin or custom code.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-plugins">
            <div class="aegra-sidebar-heading">Plugin Impact <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Measures the individual load-time and query contribution of each active plugin by profiling their hooks and callbacks in isolation. Identifies exactly which plugins are the heaviest consumers of server resources on your site — giving you the data you need to make informed decisions about replacements, deactivations, or configuration changes.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-vitals">
            <div class="aegra-sidebar-heading">Core Web Vitals <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Largest Contentful Paint (LCP), Cumulative Layout Shift (CLS), and Interaction to Next Paint (INP) — Google\'s key ranking signals — collected via a lightweight JS beacon on your frontend and stored here for review. Monitor how real visitor experiences compare to Google\'s thresholds and track improvements after optimisation work.</div>
        </div>
        <div class="aegra-sidebar-section">
            <div class="aegra-sidebar-heading">Navigation</div>
            <div class="aegra-sidebar-actions">
                <a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor' ) ) . '" class="aegra-sidebar-btn">← Dashboard</a>
            </div>
        </div>';

        $sidebar .= aegra_pro_promo_sidebar( [
            'page'     => 'Performance',
            'headline' => 'Find what is slowing your site down.',
            'subline'  => 'Aegra Pro pinpoints slow pages, slow queries and heavy plugins with real-user metrics.',
            'benefits' => [
                'Performance over time',
                'Slow page & query detection',
                'Plugin impact analysis',
                'Core Web Vitals (real users)',
            ],
        ] );

        aegra_header( 'Performance' );
        include AEGRA_PATH . 'views/performance-page.php';
        aegra_footer( $sidebar );
    }

    public function page_plugins() {
        // Pro tabs injected by the Pro extension (Elementor model). Free defines none.
        $active_pro_tabs = apply_filters( 'aegra_plugins_pro_tabs', [] );

        $sidebar = '
        <div class="aegra-sidebar-section aegra-tab-sidebar aegra-tab-sidebar--active" data-sidebar="detected">
            <div class="aegra-sidebar-heading">Detected Plugins</div>
            <div class="aegra-sidebar-text">Aegra Site Monitor automatically scans for over 30 major plugin categories — eCommerce, forms, SEO, membership, email marketing, LMS, backup, page builders, and more — and surfaces relevant data snapshots without any configuration. Get an instant overview of what\'s installed and how it\'s performing, all in one place.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="woocommerce">
            <div class="aegra-sidebar-heading">WooCommerce</div>
            <div class="aegra-sidebar-text">Order counts by status, failed and pending orders, revenue snapshot for the last 30 days, refund rate, coupon usage, payment gateway breakdown, low stock alerts, and abandoned cart count. A fast operational overview of your store\'s health without leaving the WordPress admin.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="forms">
            <div class="aegra-sidebar-heading">Forms</div>
            <div class="aegra-sidebar-text">Submission counts per form across Gravity Forms, WPForms, Contact Form 7, Fluent Forms, and Formidable — detected automatically based on what\'s installed. Quickly see which forms are active and receiving submissions, and spot forms that have gone quiet, which can indicate a delivery failure or a broken embed.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="seo">
            <div class="aegra-sidebar-heading">SEO</div>
            <div class="aegra-sidebar-text">Detected SEO plugin, sitemap presence and URL, posts missing meta descriptions, noindex post count, and focus keyword coverage — pulling live data from Yoast SEO or RankMath where installed. A quick sanity check on the fundamentals of your site\'s search visibility without needing to open a separate SEO tool.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="other">
            <div class="aegra-sidebar-heading">Other Plugins</div>
            <div class="aegra-sidebar-text">Snapshots from membership platforms (MemberPress, PMPro), LMS tools (LearnDash), email marketing (Mailchimp, ActiveCampaign), backup solutions (UpdraftPlus, BackWPup), booking systems, and translation plugins — all surfaced automatically based on what Aegra Site Monitor detects as active on your installation.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-woocommerce">
            <div class="aegra-sidebar-heading">WooCommerce Deep Dive <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Revenue trends over time, abandoned cart recovery tracking, WooCommerce Subscriptions status breakdown, coupon performance, and cross-plugin traffic-to-sales correlation using StatFlo Analytics data. Move beyond snapshots and understand how your store is performing week over week with the full historical context needed to make confident decisions.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-forms">
            <div class="aegra-sidebar-heading">Forms &amp; Submissions <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Submission trends over time, form failure tracking, spam-to-submission ratio, and field-level drop-off analysis. Identify which forms are underperforming, where users are abandoning mid-submission, and whether delivery failures are silently losing you leads — before they become a business problem.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-email">
            <div class="aegra-sidebar-heading">Email Delivery <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">A persistent log of all emails sent via wp_mail() — with delivery status, recipient, subject, and timestamp. Track failure rates over time, identify bounce patterns, and review your SMTP configuration directly from the dashboard. Catch delivery problems before they affect password resets, order confirmations, or admin notifications.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-subs">
            <div class="aegra-sidebar-heading">Plugin Licences <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Scan all installed premium plugins for their licence status — active, expired, or unlicensed — with key, tier, and expiry date displayed at a glance. Expired licences mean missed security updates and lost access to support. Stay ahead of renewals and ensure every premium plugin on your site is properly licensed and up to date.</div>
        </div>
        <div class="aegra-sidebar-section">
            <div class="aegra-sidebar-heading">Navigation</div>
            <div class="aegra-sidebar-actions">
                <a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor' ) ) . '" class="aegra-sidebar-btn">← Dashboard</a>
            </div>
        </div>';

        $sidebar .= aegra_pro_promo_sidebar( [
            'page'     => 'Plugins',
            'headline' => 'Go deeper than the plugins list.',
            'subline'  => 'Aegra Pro tracks email delivery, form submissions, licences and WooCommerce health.',
            'benefits' => [
                'Email delivery monitoring',
                'Forms & submissions tracking',
                'Plugin licence overview',
                'WooCommerce deep dive',
            ],
        ] );

        aegra_header( 'Plugins' );
        include AEGRA_PATH . 'views/plugins-page.php';
        aegra_footer( $sidebar );
    }

    public function page_reports() {
        // Pro tabs injected by the Pro extension (Elementor model). Free defines none.
        $active_pro_tabs = apply_filters( 'aegra_reports_pro_tabs', [] );

        $sidebar = '
        <div class="aegra-sidebar-section aegra-tab-sidebar aegra-tab-sidebar--active" data-sidebar="summary">
            <div class="aegra-sidebar-heading">Site Summary</div>
            <div class="aegra-sidebar-text">A snapshot of key health indicators across all Aegra Site Monitor modules — your at-a-glance site report card. Instantly surface critical issues, performance trends, and potential risks in one unified view, helping you prioritise fixes, maintain stability, and stay in control without digging through individual tools.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="cron">
            <div class="aegra-sidebar-heading">Cron Health</div>
            <div class="aegra-sidebar-text">WordPress scheduled events — next run times, missed crons, and WP-Cron status. Missed crons can cause failed backups, emails, and scans, often without immediate visibility. Monitor scheduling reliability at a glance, identify delays or failures early, and ensure essential automated tasks run consistently to keep your site functioning as expected.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="email">
            <div class="aegra-sidebar-heading">Email Test</div>
            <div class="aegra-sidebar-text">Send a test email via wp_mail() to verify your site’s mail delivery is working correctly. Quickly confirm that your server, SMTP configuration, and WordPress mail functions are operating as expected, helping you catch delivery issues before they affect critical notifications like password resets, order confirmations, or system alerts.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-alerts">
            <div class="aegra-sidebar-heading">Email Alerts <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Get notified by email when thresholds are breached — broken links found, database size spikes, failed logins, and more. Set clear limits for key metrics and receive timely alerts the moment something drifts out of range, so you can respond quickly, prevent escalation, and keep your site stable, secure, and running smoothly.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-scheduled">
            <div class="aegra-sidebar-heading">Scheduled Reports <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Automated daily or weekly digest emails covering all key site metrics. Perfect for staying on top of multiple sites, with clear summaries of performance, health, activity, and alerts delivered straight to your inbox—so you can quickly review what matters, spot trends over time, and take action without logging in to each site individually.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-export">
            <div class="aegra-sidebar-heading">Export &amp; CSV <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Export any Aegra Site Monitor data set — traffic, links, users, content — as a CSV for offline analysis or client reporting. Generate clean, structured datasets on demand, making it easy to share insights, build custom reports, or integrate with external tools like spreadsheets and BI platforms for deeper analysis and long-term tracking.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-thresholds">
            <div class="aegra-sidebar-heading">Alert Thresholds <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Configure custom thresholds for DB size, memory usage, broken link count, 404 rate, and more. Aegra Site Monitor will alert when limits are exceeded, ensuring you catch problems before they affect your users.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-autoscans">
            <div class="aegra-sidebar-heading">Automated Scans <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Schedule recurring link checks, file integrity scans, and content audits via WP-Cron — no manual trigger required. Set the frequency, walk away, and let Aegra Site Monitor keep watch automatically.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-multisite">
            <div class="aegra-sidebar-heading">Multi-site Monitor <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Aggregate health data from multiple WordPress installations into a single dashboard. Ideal for agencies managing client sites — one login, full visibility across your entire portfolio.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-client">
            <div class="aegra-sidebar-heading">Client Reports <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">Generate branded, client-friendly PDF reports summarising site health, traffic, and actions taken. A high-value agency deliverable that demonstrates tangible ongoing value to clients.</div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="pro-api">
            <div class="aegra-sidebar-heading">API &amp; Webhooks <span class="aegra-pro-badge">PRO</span></div>
            <div class="aegra-sidebar-text">REST API endpoints for all Aegra Site Monitor data, plus outbound webhooks to push alerts to Slack, Zapier, or custom dashboards. Integrate Aegra Site Monitor data into any external workflow or monitoring system.</div>
        </div>
        <div class="aegra-sidebar-section">
            <div class="aegra-sidebar-heading">Navigation</div>
            <div class="aegra-sidebar-actions">
                <a href="' . esc_url( admin_url( 'admin.php?page=aegra-site-monitor' ) ) . '" class="aegra-sidebar-btn">← Dashboard</a>
            </div>
        </div>';

        $sidebar .= aegra_pro_promo_sidebar( [
            'page'     => 'Reports',
            'headline' => 'Put your monitoring on autopilot.',
            'subline'  => 'Aegra Pro sends scheduled reports and alerts, with CSV export and client-ready summaries.',
            'benefits' => [
                'Scheduled email reports',
                'Custom alert thresholds',
                'CSV export',
                'Client & multi-site reports',
            ],
        ] );

        aegra_header( 'Reports & Alerts' );
        include AEGRA_PATH . 'views/reports-page.php';
        aegra_footer( $sidebar );
    }


    public function page_settings() {
        $sidebar = '
        <div class="aegra-sidebar-section aegra-tab-sidebar aegra-tab-sidebar--active" data-sidebar="general">
            <div class="aegra-sidebar-heading">General</div>
            <p class="aegra-sidebar-text">Configure traffic tracking behaviour — enable or disable tracking at any time, define how long visitor data is stored with a flexible retention period, and choose whether to exclude administrator visits from analytics. Fine-tune how data is collected to balance insight with performance, reduce unnecessary storage, and maintain cleaner, more accurate reporting across your site.</p>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="maxmind">
            <div class="aegra-sidebar-heading">MaxMind GeoLite2</div>
            <p class="aegra-sidebar-text">MaxMind GeoLite2 provides accurate country detection from IP addresses. A free account and licence key are required. The database is stored locally — no data is sent externally.</p>
            <div class="aegra-sidebar-actions" style="margin-top:10px;">
                <a href="https://www.maxmind.com/en/geolite2/signup" target="_blank" rel="noopener" class="aegra-sidebar-btn">Create MaxMind Account</a>
            </div>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="email">
            <div class="aegra-sidebar-heading">Email</div>
            <p class="aegra-sidebar-text">Configure the from name and address for Aegra Site Monitor notification emails, and choose which events trigger a notification. Use System &rarr; Advanced to send a test email and verify delivery.</p>
        </div>
        <div class="aegra-sidebar-section aegra-tab-sidebar" data-sidebar="licence">
            <div class="aegra-sidebar-heading">Licence</div>
            <p class="aegra-sidebar-text">Manage your Aegra Site Monitor licence. Upgrade to Pro to unlock scheduled scans, historical trends, DB snapshots, alerts, and the full audit trail.</p>
        </div>
        <div class="aegra-sidebar-section">
            <div class="aegra-sidebar-heading">About</div>
            <p class="aegra-sidebar-text">Aegra Site Monitor by <a href="https://robsnow.eu" target="_blank" class="aegra-sidebar-link">Rob Art | WordPress Development</a>.</p>
            <p class="aegra-sidebar-text" style="margin-top:8px;">If you find it useful, <a href="https://wordpress.org/support/plugin/aegra-site-monitor/reviews/#new-post" target="_blank" class="aegra-sidebar-link">leave a review &#9733;</a> — it makes a real difference.</p>
        </div>
        <div class="aegra-sidebar-section">
            <div class="aegra-sidebar-heading">Credits &amp; Thanks</div>
            <ul class="aegra-sidebar-credits">
                <li><strong>Claude (Anthropic AI)</strong> — co-author and development assistant throughout this build.</li>
                <li>The <a href="https://wordpress.org" target="_blank" class="aegra-sidebar-link">WordPress community</a> for the platform and ecosystem.</li>
                <li><a href="https://www.maxmind.com" target="_blank" class="aegra-sidebar-link">MaxMind GeoLite2</a> — IP geolocation database.</li>
                <li><a href="https://flagcdn.com" target="_blank" class="aegra-sidebar-link">FlagCDN</a> — country flag images.</li>
                <li><a href="https://d3js.org" target="_blank" class="aegra-sidebar-link">D3.js</a> by Mike Bostock — data visualisations.</li>
            </ul>
        </div>
        <div class="aegra-sidebar-section">
            <div class="aegra-sidebar-heading">Support</div>
            <p class="aegra-sidebar-text">Documentation, guides and support at <a href="https://robsnow.eu/plugins-wordpress-development/aegra-site-monitor/" target="_blank" class="aegra-sidebar-link">robsnow.eu</a>.</p>
            <p class="aegra-sidebar-text" style="margin-top:6px;">Found a bug? <a href="https://wordpress.org/support/plugin/aegra-site-monitor/" target="_blank" class="aegra-sidebar-link">Open a support thread</a> on WordPress.org.</p>
        </div>';

        $debug = [
            'Aegra Site Monitor' => AEGRA_VERSION . ( function_exists( 'aegra_get_tier' ) ? ' ' . aegra_get_tier() : ' Free' ),
            'WordPress'    => get_bloginfo( 'version' ),
            'PHP'          => PHP_VERSION,
            'MySQL'        => $GLOBALS['wpdb']->db_version(),
            'Server'       => isset( $_SERVER['SERVER_SOFTWARE'] ) ? sanitize_text_field( wp_unslash( $_SERVER['SERVER_SOFTWARE'] ) ) : 'Unknown',
            'Active theme' => wp_get_theme()->get( 'Name' ) . ' ' . wp_get_theme()->get( 'Version' ),
            'Plugin count' => count( get_option( 'active_plugins', [] ) ),
            'Multisite'    => is_multisite() ? 'Yes' : 'No',
            'Memory limit' => WP_MEMORY_LIMIT,
            'Max upload'   => ini_get( 'upload_max_filesize' ),
            'Max post'     => ini_get( 'post_max_size' ),
        ];
        $debug_lines = [];
        foreach ( $debug as $key => $val ) {
            $debug_lines[] = esc_html( $key ) . ': ' . esc_html( $val );
        }
        $debug_text = implode( "\n", $debug_lines );

        $sidebar .= '
        <div class="aegra-sidebar-section">
            <div class="aegra-sidebar-heading">Debug Information</div>
            <p class="aegra-sidebar-text aegra-sidebar-small" style="margin-bottom:10px;">Include this when submitting a support request.</p>
            <div class="aegra-debug-block" id="aegra-debug-block">' . $debug_text . '</div>
            <button type="button" class="aegra-sidebar-btn aegra-sidebar-btn-sm" id="aegra-debug-copy-btn" style="margin-top:8px;">Copy to Clipboard</button>
            <span id="aegra-debug-copy-status" style="display:none;font-size:11px;margin-top:4px;color:rgba(255,255,255,0.7);">Copied!</span>
        </div>';

        // Debug copy-to-clipboard handler attached to enqueued 'aegra-site-monitor-admin'
        // (no inline <script> tag — .org compliant).
        $aegra_debug_js = <<<'JS'
        document.addEventListener("click", function(e) {
            if (!e.target || e.target.id !== "aegra-debug-copy-btn") return;
            var block = document.getElementById("aegra-debug-block");
            if (!block) return;
            navigator.clipboard.writeText(block.textContent).then(function() {
                var status = document.getElementById("aegra-debug-copy-status");
                if (status) {
                    status.style.display = "block";
                    setTimeout(function() { status.style.display = "none"; }, 2000);
                }
            });
        });
        JS;
        if ( function_exists( 'wp_add_inline_script' ) ) {
            wp_add_inline_script( 'aegra-site-monitor-admin', $aegra_debug_js );
        }

        aegra_header( 'Settings' );
        include AEGRA_PATH . 'views/settings-page.php';
        aegra_footer( $sidebar );
    }

    public function ajax_confirm_media_used() {
        check_ajax_referer( 'aegra_media_confirm', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( 'Unauthorized' );
        $id = intval( $_POST['attachment_id'] ?? 0 );
        if ( ! $id ) wp_send_json_error( 'Invalid ID' );
        $confirmed = get_option( 'aegra_confirmed_media', [] );
        $confirmed[ $id ] = true;
        update_option( 'aegra_confirmed_media', $confirmed, false );
        wp_send_json_success();
    }

    public function ajax_unconfirm_media_used() {
        check_ajax_referer( 'aegra_media_confirm', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( 'Unauthorized' );
        $id = intval( $_POST['attachment_id'] ?? 0 );
        if ( ! $id ) wp_send_json_error( 'Invalid ID' );
        $confirmed = get_option( 'aegra_confirmed_media', [] );
        unset( $confirmed[ $id ] );
        update_option( 'aegra_confirmed_media', $confirmed, false );
        wp_send_json_success();
    }

    public function save_settings() {
        check_admin_referer( 'aegra_save_settings' );
        if ( ! current_user_can( 'manage_options' ) ) wp_die( 'Unauthorized' );
        update_option( 'aegra_traffic_enabled',        isset( $_POST['aegra_traffic_enabled'] ) ? 1 : 0 );
        update_option( 'aegra_traffic_exclude_admins', isset( $_POST['aegra_traffic_exclude_admins'] ) ? 1 : 0 );
        update_option( 'aegra_data_retention_days',    intval( $_POST['aegra_data_retention_days'] ?? 90 ) );
        if ( isset( $_POST['aegra_maxmind_db_path'] ) && $_POST['aegra_maxmind_db_path'] !== '' ) {
            update_option( 'aegra_maxmind_db_path', sanitize_text_field( wp_unslash( $_POST['aegra_maxmind_db_path'] ) ) );
        }
        // ── Monitoring modules ─────────────────────────────────────────────
        $monitoring = get_option( 'aegra_monitoring', [ 'activity' => true, 'links' => true, 'adminbar' => true ] );
        $monitoring['activity'] = isset( $_POST['aegra_monitoring_activity'] );
        $monitoring['links']    = isset( $_POST['aegra_monitoring_links'] );
        $monitoring['adminbar'] = isset( $_POST['aegra_monitoring_adminbar'] );
        update_option( 'aegra_monitoring', $monitoring );
        // ── Compatibility choices ──────────────────────────────────────────
        if ( isset( $_POST['aegra_compat_choices'] ) && is_array( $_POST['aegra_compat_choices'] ) ) {
            // wp_unslash the array, then sanitise each value. (The callee also
            // sanitises keys/whitelists values, but Plugin Check requires
            // unslash+sanitise at the point of access.)
            $compat_choices = array_map( 'sanitize_text_field', wp_unslash( $_POST['aegra_compat_choices'] ) );
            aegra_compat_set_choices( $compat_choices );
        }
        // ── Email settings ─────────────────────────────────────────────────
        if ( isset( $_POST['aegra_email_from_name'] ) )    update_option( 'aegra_email_from_name',    sanitize_text_field( wp_unslash( $_POST['aegra_email_from_name'] ) ) );
        if ( isset( $_POST['aegra_email_from_address'] ) ) update_option( 'aegra_email_from_address', sanitize_email( wp_unslash( $_POST['aegra_email_from_address'] ) ) );
        if ( isset( $_POST['aegra_email_admin_address'] ) ) update_option( 'aegra_email_admin_address', sanitize_email( wp_unslash( $_POST['aegra_email_admin_address'] ) ) );
        update_option( 'aegra_notify_security', isset( $_POST['aegra_notify_security'] ) ? 1 : 0 );
        update_option( 'aegra_notify_updates',  isset( $_POST['aegra_notify_updates'] )  ? 1 : 0 );
        if ( function_exists( 'aegra_get_tier' ) && aegra_get_tier() === 'Pro' ) {
            update_option( 'aegra_notify_scans', isset( $_POST['aegra_notify_scans'] ) ? 1 : 0 );
            update_option( 'aegra_notify_disk',  isset( $_POST['aegra_notify_disk'] )  ? 1 : 0 );
        }
        $tab = isset( $_POST['aegra_settings_tab'] ) ? sanitize_key( $_POST['aegra_settings_tab'] ) : 'general';
        wp_safe_redirect( admin_url( 'admin.php?page=aegra-site-monitor-settings&tab=' . $tab . '&saved=1' ) );
        exit;
    }

    /* ── AJAX ─────────────────────────────────────────────────────────────── */

    public function ajax_clear_log() {
        check_ajax_referer( 'aegra_clear_log' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( [ 'message' => 'Unauthorized' ] );
        global $wpdb;
        $result = $wpdb->query( "TRUNCATE TABLE {$wpdb->prefix}aegra_activity_sessions" );
        $result !== false ? wp_send_json_success() : wp_send_json_error( [ 'message' => 'Failed' ] );
    }

    public function export_activity_log() {
        check_ajax_referer( 'export_activity_log' );
        if ( ! current_user_can( 'manage_options' ) ) wp_die( 'Unauthorized' );
        $args = [
            'user_id'   => isset( $_GET['user_id'] ) ? intval( $_GET['user_id'] ) : null,
            'date_from' => isset( $_GET['date_from'] ) ? sanitize_text_field( wp_unslash( $_GET['date_from'] ) ) : null,
            'date_to'   => isset( $_GET['date_to'] ) ? sanitize_text_field( wp_unslash( $_GET['date_to'] ) ) : null,
            'per_page'  => 10000, 'page' => 1,
        ];
        $activities = $this->activity_logger->get_activity_log( $args )['items'];
        header( 'Content-Type: text/csv; charset=utf-8' );
        header( 'Content-Disposition: attachment; filename=activity-log-' . gmdate( 'Y-m-d' ) . '.csv' );
        $out = fopen( 'php://output', 'w' );
        fprintf( $out, chr(0xEF) . chr(0xBB) . chr(0xBF) );
        fputcsv( $out, [ 'Date/Time', 'User', 'Action', 'Object Type', 'Object Name', 'IP', 'Metadata' ] );
        foreach ( $activities as $a ) {
            fputcsv( $out, [ $a->created_at, $a->user_name, $a->action, $a->object_type, $a->object_name, $a->ip_address, $a->metadata ] );
        }
        fclose( $out ); // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_fclose -- closing the php://output stream wrapper for CSV download, not a real filesystem write
        exit;
    }

    public function ajax_start_scan() {
        check_ajax_referer( 'aegra_link_scan' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( [ 'message' => 'Unauthorized' ] );
        $r = $this->link_checker->start_scan();
        $r['success'] ? wp_send_json_success( $r ) : wp_send_json_error( $r );
    }

    public function ajax_scan_batch() {
        check_ajax_referer( 'aegra_link_scan' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( [ 'message' => 'Unauthorized' ] );
        $r = $this->link_checker->process_scan_batch();
        $r['success'] ? wp_send_json_success( $r ) : wp_send_json_error( $r );
    }

    public function ajax_recheck_link() {
        check_ajax_referer( 'aegra_link_recheck' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( [ 'message' => 'Unauthorized' ] );
        $id = isset( $_POST['link_id'] ) ? intval( $_POST['link_id'] ) : 0;
        if ( ! $id ) wp_send_json_error( [ 'message' => 'Invalid ID' ] );
        $this->link_checker->recheck_link( $id ) ? wp_send_json_success() : wp_send_json_error( [ 'message' => 'Failed' ] );
    }

    /* ── Wizard AJAX ──────────────────────────────────────────────────────── */

    public function wizard_verify_tables() {
        check_ajax_referer( 'aegra_wizard', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( [ 'message' => 'Unauthorized' ] );

        global $wpdb;
        $this->activity_logger->create_table();
        $this->link_checker->create_table();

        $tables = [
            $wpdb->prefix . 'aegra_activity_sessions',
            $wpdb->prefix . 'aegra_broken_links',
        ];
        foreach ( $tables as $t ) {
            if ( $wpdb->get_var( $wpdb->prepare( 'SHOW TABLES LIKE %s', $t ) ) !== $t ) {
                wp_send_json_error( [ 'message' => 'Could not create table: ' . $t ] );
            }
        }
        wp_send_json_success( [ 'message' => 'All tables verified.' ] );
    }

    public function wizard_save_monitoring() {
        check_ajax_referer( 'aegra_wizard', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( [ 'message' => 'Unauthorized' ] );

        $settings = [
            'activity' => ! empty( $_POST['activity'] ),
            'links'    => ! empty( $_POST['links'] ),
            'adminbar' => ! empty( $_POST['adminbar'] ),
        ];
        update_option( 'aegra_monitoring', $settings );
        wp_send_json_success();
    }

    public function wizard_complete() {
        check_ajax_referer( 'aegra_wizard', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( [ 'message' => 'Unauthorized' ] );
        update_option( 'aegra_wizard_completed', true );
        wp_send_json_success();
    }

    /* ── System Integrity Scans ──────────────────────────────────────────────── */

    /* ── Performance Snapshots ───────────────────────────────────────────────── */

    public function record_perf_snapshot() {
        global $wpdb;

        // PHP execution time for this request (ms) — reliable on all environments
        $response_ms = defined('AEGRA_REQUEST_START')
            ? round( ( microtime(true) - AEGRA_REQUEST_START ) * 1000 )
            : ( isset($_SERVER['REQUEST_TIME_FLOAT'])
                // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- (float) cast fully sanitizes the timestamp value
                ? round( ( microtime(true) - (float) wp_unslash( $_SERVER['REQUEST_TIME_FLOAT'] ) ) * 1000 )
                : null );

        // Peak memory in MB
        $memory_mb = round( memory_get_peak_usage( true ) / 1048576, 2 );

        // DB query count for this request
        $query_count = (int) $wpdb->num_queries;

        // Active plugins count
        $plugin_count = count( get_option( 'active_plugins', [] ) );

        $snapshots   = get_option( 'aegra_perf_snapshots', [] );
        $snapshots[] = [
            'ts'           => time(),
            'response_ms'  => $response_ms,
            'memory_mb'    => $memory_mb,
            'query_count'  => $query_count,
            'plugin_count' => $plugin_count,
        ];

        // Keep last 2160 entries (90 days × 24 hr)
        if ( count( $snapshots ) > 2160 ) {
            $snapshots = array_slice( $snapshots, -2160 );
        }

        update_option( 'aegra_perf_snapshots', $snapshots, false );
    }

    /* ── AJAX / REST Latency logging ────────────────────────────────────────── */

    /* ── Plugin Impact ──────────────────────────────────────────────────────── */

    /* ── Core Web Vitals ────────────────────────────────────────────────────── */

    /* ── Email Delivery Log ─────────────────────────────────────────────────── */

    /** Called on wp_mail filter — record every outgoing email attempt */
    public function aegra_mail_sent( $args ) {
        // wp_mail filter runs before send; we record here as 'sent' optimistically.
        // wp_mail_failed fires on actual failure and overwrites the status.
        $to      = is_array($args['to'] ?? '') ? implode(', ', $args['to']) : (string)($args['to'] ?? '');
        $subject = (string)($args['subject'] ?? '');

        $log   = get_option( 'aegra_mail_log', [] );
        $log[] = [
            'ts'      => time(),
            'to'      => sanitize_text_field( substr($to, 0, 200) ),
            'subject' => sanitize_text_field( substr($subject, 0, 200) ),
            'status'  => 'sent',
        ];
        if ( count($log) > 3000 ) $log = array_slice( $log, -3000 );
        update_option( 'aegra_mail_log', $log, false );
        return $args; // must return for filter
    }

    /** Called on wp_mail_failed action — record failure */
    public function aegra_mail_failed( $wp_error ) {
        $data    = $wp_error->get_error_data() ?: [];
        $to      = is_array($data['to'] ?? '') ? implode(', ', $data['to']) : (string)($data['to'] ?? '');
        $subject = (string)($data['subject'] ?? '');
        $message = $wp_error->get_error_message();

        $log   = get_option( 'aegra_mail_log', [] );
        $log[] = [
            'ts'      => time(),
            'to'      => sanitize_text_field( substr($to, 0, 200) ),
            'subject' => sanitize_text_field( substr($subject, 0, 200) ),
            'status'  => 'failed',
            'error'   => sanitize_text_field( substr($message, 0, 300) ),
        ];
        if ( count($log) > 3000 ) $log = array_slice( $log, -3000 );
        update_option( 'aegra_mail_log', $log, false );
    }

    public function ajax_mail_clear() {
        check_ajax_referer( 'aegra_perf_nonce', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error();
        if ( ! ( function_exists( 'aegra_get_tier' ) && aegra_get_tier() === 'Pro' ) ) wp_send_json_error( ['message'=>'Pro required'] );
        delete_option( 'aegra_mail_log' );
        wp_send_json_success();
    }

    public function ajax_perf_snapshot_now() {
        check_ajax_referer( 'aegra_perf_nonce', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error();
        if ( ! ( function_exists( 'aegra_get_tier' ) && aegra_get_tier() === 'Pro' ) ) wp_send_json_error( ['message'=>'Pro required'] );
        $this->record_perf_snapshot();
        $snaps = get_option( 'aegra_perf_snapshots', [] );
        $last  = end( $snaps );
        wp_send_json_success( [
            'count'       => count( $snaps ),
            'response_ms' => $last['response_ms'] ?? null,
            'memory_mb'   => $last['memory_mb']   ?? null,
            'query_count' => $last['query_count']  ?? null,
        ] );
    }

    /* ── Database Snapshots ──────────────────────────────────────────────────── */

    /* ── Query Monitor ───────────────────────────────────────────────────────── */

    public function ajax_qm_toggle() {
        check_ajax_referer( 'aegra_integrity', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( [ 'message' => 'Unauthorized' ] );
        if ( ! ( function_exists( 'aegra_get_tier' ) && aegra_get_tier() === 'Pro' ) ) wp_send_json_error( [ 'message' => 'Pro required' ] );
        $current = get_option( 'aegra_query_monitor_enabled', false );
        update_option( 'aegra_query_monitor_enabled', ! $current );
        wp_send_json_success( [ 'enabled' => ! $current ] );
    }

    public function ajax_qm_save_threshold() {
        check_ajax_referer( 'aegra_integrity', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( [ 'message' => 'Unauthorized' ] );
        $threshold = max( 1, floatval( $_POST['threshold'] ?? 50 ) );
        update_option( 'aegra_query_threshold_ms', $threshold );
        wp_send_json_success();
    }

    public function ajax_qm_clear() {
        check_ajax_referer( 'aegra_integrity', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( [ 'message' => 'Unauthorized' ] );
        delete_option( 'aegra_query_log' );
        wp_send_json_success();
    }

    /* ── Database Optimisation ───────────────────────────────────────────────── */

    public function ajax_opt_clean_orphans() {
        check_ajax_referer( 'aegra_integrity', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( [ 'message' => 'Unauthorized' ] );
        if ( ! ( function_exists( 'aegra_get_tier' ) && aegra_get_tier() === 'Pro' ) ) wp_send_json_error( [ 'message' => 'Pro required' ] );
        global $wpdb;
        $deleted = 0;
        $deleted += (int) $wpdb->query(
            "DELETE pm FROM {$wpdb->postmeta} pm
             WHERE NOT EXISTS (SELECT 1 FROM {$wpdb->posts} p WHERE p.ID = pm.post_id)"
        );
        $deleted += (int) $wpdb->query(
            "DELETE tm FROM {$wpdb->termmeta} tm
             WHERE NOT EXISTS (SELECT 1 FROM {$wpdb->terms} t WHERE t.term_id = tm.term_id)"
        );
        $deleted += (int) $wpdb->query(
            "DELETE cm FROM {$wpdb->commentmeta} cm
             WHERE NOT EXISTS (SELECT 1 FROM {$wpdb->comments} c WHERE c.comment_ID = cm.comment_id)"
        );
        wp_send_json_success( [ 'message' => 'Removed ' . number_format( $deleted ) . ' orphaned rows.' ] );
    }

    public function ajax_opt_clean_transients() {
        check_ajax_referer( 'aegra_integrity', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( [ 'message' => 'Unauthorized' ] );
        if ( ! ( function_exists( 'aegra_get_tier' ) && aegra_get_tier() === 'Pro' ) ) wp_send_json_error( [ 'message' => 'Pro required' ] );
        global $wpdb;
        // Get keys for expired transients via their timeout entries
        $expired_keys = $wpdb->get_col(
            "SELECT REPLACE(option_name, '_transient_timeout_', '') FROM {$wpdb->options}
             WHERE option_name LIKE '_transient_timeout_%' AND option_value < UNIX_TIMESTAMP()"
        );
        $deleted = 0;
        foreach ( $expired_keys as $key ) {
            $deleted += delete_transient( $key ) ? 1 : 0;
        }
        wp_send_json_success( [ 'message' => 'Cleared ' . $deleted . ' expired transient(s).' ] );
    }

    public function ajax_opt_optimize_tables() {
        check_ajax_referer( 'aegra_integrity', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( [ 'message' => 'Unauthorized' ] );
        if ( ! ( function_exists( 'aegra_get_tier' ) && aegra_get_tier() === 'Pro' ) ) wp_send_json_error( [ 'message' => 'Pro required' ] );
        global $wpdb;
        $tables = $wpdb->get_col( $wpdb->prepare(
            "SELECT TABLE_NAME FROM information_schema.TABLES
             WHERE TABLE_SCHEMA = %s AND DATA_FREE > 0",
            DB_NAME
        ) );
        $optimized = 0;
        foreach ( $tables as $table ) {
            $wpdb->query( "OPTIMIZE TABLE `" . esc_sql( $table ) . "`" ); // phpcs:ignore
            $optimized++;
        }
        wp_send_json_success( [ 'message' => 'Optimized ' . $optimized . ' table(s).' ] );
    }

    /* ── Security: Brute Force Protection ───────────────────────────────────── */

    public function ajax_bf_save_settings() {
        check_ajax_referer( 'aegra_integrity', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( [ 'message' => 'Unauthorized' ] );
        update_option( 'aegra_bf_max_attempts', max( 1, absint( wp_unslash( $_POST['max_attempts'] ?? 5 ) ) ) );
        update_option( 'aegra_bf_lockout_mins', max( 1, absint( wp_unslash( $_POST['lockout_mins'] ?? 30 ) ) ) );
        update_option( 'aegra_bf_notify_email', sanitize_email( wp_unslash( $_POST['notify_email'] ?? '' ) ) );
        wp_send_json_success();
    }

    public function ajax_bf_unlock() {
        check_ajax_referer( 'aegra_integrity', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( [ 'message' => 'Unauthorized' ] );
        global $wpdb;
        $ip  = sanitize_text_field( wp_unslash( $_POST['ip'] ?? '' ) );
        $tbl = $wpdb->prefix . 'aegra_login_attempts';
        $wpdb->delete( $tbl, [ 'ip_address' => $ip ], [ '%s' ] );
        wp_send_json_success();
    }

    public function ajax_bf_clear() {
        check_ajax_referer( 'aegra_integrity', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( [ 'message' => 'Unauthorized' ] );
        global $wpdb;
        $wpdb->query( "TRUNCATE TABLE {$wpdb->prefix}aegra_login_attempts" );
        wp_send_json_success();
    }

    /* ── Security: IP & Geo Blocking ─────────────────────────────────────────── */

    /* ── Database Scheduled Scans ────────────────────────────────────────────── */

    public function add_cron_schedules( $schedules ) {
        if ( ! isset( $schedules['weekly'] ) ) {
            $schedules['weekly'] = [ 'interval' => WEEK_IN_SECONDS, 'display' => 'Once Weekly' ];
        }
        return $schedules;
    }

    /* ── System Advanced ─────────────────────────────────────────────────────── */

    public function ajax_send_test_email() {
        check_ajax_referer( 'aegra_integrity', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( [ 'message' => 'Unauthorized' ] );
        if ( ! ( function_exists( 'aegra_get_tier' ) && aegra_get_tier() === 'Pro' ) ) wp_send_json_error( [ 'message' => 'Pro required' ] );

        $to      = get_option( 'admin_email' );
        $subject = '[Aegra Site Monitor] Email Delivery Test — ' . get_bloginfo( 'name' );
        $message = "This is a test email sent from Aegra Site Monitor to verify your site's email delivery is working correctly.\n\nSent: " . current_time( 'mysql' ) . "\nSite: " . get_site_url();
        $headers = [ 'Content-Type: text/plain; charset=UTF-8' ];

        $sent = wp_mail( $to, $subject, $message, $headers );

        $result = [
            'sent'    => $sent,
            'to'      => $to,
            'time'    => current_time( 'mysql' ),
            'message' => $sent ? 'Test email sent to ' . $to : 'wp_mail() returned false — check your mail configuration',
        ];
        update_option( 'aegra_email_test_result', $result );

        $sent ? wp_send_json_success( $result ) : wp_send_json_error( $result );
    }

    public function ajax_save_env_baseline() {
        check_ajax_referer( 'aegra_integrity', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( [ 'message' => 'Unauthorized' ] );
        if ( ! ( function_exists( 'aegra_get_tier' ) && aegra_get_tier() === 'Pro' ) ) wp_send_json_error( [ 'message' => 'Pro required' ] );

        $theme    = wp_get_theme();
        $baseline = [
            'wp_version'   => get_bloginfo( 'version' ),
            'php_version'  => PHP_VERSION,
            'active_theme' => $theme->get( 'Name' ) . ' ' . $theme->get( 'Version' ),
            'plugin_count' => count( get_option( 'active_plugins', [] ) ),
            'debug_mode'   => ( defined( 'WP_DEBUG' ) && WP_DEBUG ) ? 'On' : 'Off',
            'memory_limit' => ini_get( 'memory_limit' ),
            'saved_at'     => current_time( 'mysql' ),
        ];
        update_option( 'aegra_env_baseline', $baseline );
        wp_send_json_success( [ 'message' => 'Baseline saved.', 'baseline' => $baseline ] );
    }

    public function wizard_save_maxmind() {
        check_ajax_referer( 'aegra_wizard', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( [ 'message' => 'Unauthorized' ] );

        $key        = sanitize_text_field( wp_unslash( $_POST['licence_key'] ?? '' ) );
        $account_id = sanitize_text_field( wp_unslash( $_POST['account_id']  ?? '' ) );

        if ( $key )        update_option( 'aegra_maxmind_license',    $key );
        if ( $account_id ) update_option( 'aegra_maxmind_account_id', $account_id );

        wp_send_json_success( [ 'message' => 'MaxMind credentials saved.' ] );
    }

    /* ── Security: File Integrity Monitoring ─────────────────────────────────── */

    /* ── Security: Alerts & Notifications ───────────────────────────────────── */

    /* ── Backend: Advanced Settings ─────────────────────────────────────────── */

    public function ajax_danger_clear_traffic() {
        check_ajax_referer( 'aegra_integrity', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( [ 'message' => 'Unauthorized' ] );
        global $wpdb;
        $wpdb->query( "TRUNCATE TABLE {$wpdb->prefix}aegra_traffic" );
        wp_send_json_success( [ 'message' => 'Traffic data cleared.' ] );
    }

    public function ajax_danger_clear_activity() {
        check_ajax_referer( 'aegra_integrity', 'nonce' );
        if ( ! current_user_can( 'manage_options' ) ) wp_send_json_error( [ 'message' => 'Unauthorized' ] );
        global $wpdb;
        $wpdb->query( "TRUNCATE TABLE {$wpdb->prefix}aegra_activity_sessions" );
        wp_send_json_success( [ 'message' => 'Activity log cleared.' ] );
    }

}

new AegraWP();