<?php
/**
 * AgentInStore admin UI, settings, and REST helpers.
 *
 * @package CheckoutAgent
 * @license GPL-2.0-or-later
 */

if (!defined('ABSPATH')) {
    exit;
}

class AGENTI_Admin {
    public static function init() {
        add_action('admin_menu', [__CLASS__, 'menu']);
        add_action('admin_init', [__CLASS__, 'register_settings']);
        add_action('admin_init', [__CLASS__, 'maybe_prefills_from_query']);
        add_action('admin_enqueue_scripts', [__CLASS__, 'enqueue_assets']);
        add_action('admin_notices', [__CLASS__, 'maybe_notice_missing_wc']);
        add_action('rest_api_init', [__CLASS__, 'register_rest']);
    }

    /**
     * Whether the current request is our settings screen.
     *
     * @return bool
     */
    private static function is_settings_screen() {
        // phpcs:ignore WordPress.Security.NonceVerification.Recommended
        return isset($_GET['page']) && sanitize_text_field(wp_unslash($_GET['page'])) === 'agentinstore';
    }

    public static function register_rest() {
        // Minimal public probe used by AgentInStore dashboard to verify the plugin is installed.
        register_rest_route('agentinstore/v1', '/status', [
            'methods'             => 'GET',
            'permission_callback' => '__return_true',
            'callback'            => function () {
                return [
                    'ok'          => true,
                    'plugin'      => 'agentinstore',
                    'version'     => AGENTI_PLUGIN_VERSION,
                    'connected'   => (int) get_option('agenti_store_connected', 0) === 1,
                    'woocommerce' => class_exists('WooCommerce'),
                ];
            },
        ]);

        // Remote disconnect from AgentInStore dashboard (auth via shared webhook secret).
        register_rest_route('agentinstore/v1', '/disconnect', [
            'methods'             => 'POST',
            'permission_callback' => [__CLASS__, 'rest_verify_webhook_secret'],
            'callback'            => function () {
                AGENTI_API::disconnect();
                return ['ok' => true, 'connected' => false];
            },
        ]);
    }

    /**
     * REST permission: require matching webhook secret (not open to the world).
     *
     * @param WP_REST_Request $request Request.
     * @return bool|WP_Error
     */
    public static function rest_verify_webhook_secret($request) {
        $secret = '';
        if (is_object($request) && method_exists($request, 'get_param')) {
            $secret = (string) $request->get_param('webhook_secret');
            if ($secret === '' && method_exists($request, 'get_header')) {
                $secret = (string) $request->get_header('x-ca-webhook-secret');
            }
        }
        $local = (string) get_option('agenti_webhook_secret', '');
        if (!$local || !$secret || !hash_equals($local, $secret)) {
            return new WP_Error('agenti_forbidden', __('Invalid webhook secret', 'agentinstore'), ['status' => 403]);
        }
        return true;
    }

    public static function enqueue_assets($hook) {
        // Always constrain the admin-menu icon (large PNGs otherwise spill across the sidebar).
        wp_register_style('agenti-admin-menu', false, [], AGENTI_PLUGIN_VERSION);
        wp_enqueue_style('agenti-admin-menu');
        wp_add_inline_style(
            'agenti-admin-menu',
            '#adminmenu #toplevel_page_agentinstore .wp-menu-image img{'
            . 'width:20px!important;height:20px!important;max-width:20px!important;max-height:20px!important;'
            . 'padding:7px 0 0!important;object-fit:contain;opacity:.85}'
            . '#adminmenu #toplevel_page_agentinstore:hover .wp-menu-image img,'
            . '#adminmenu #toplevel_page_agentinstore.wp-has-current-submenu .wp-menu-image img,'
            . '#adminmenu #toplevel_page_agentinstore.current .wp-menu-image img{opacity:1}'
        );

        if ($hook !== 'toplevel_page_agentinstore') {
            return;
        }

        // Keep our settings page clean , hide other plugins' promotional admin notices.
        remove_all_actions('admin_notices');
        remove_all_actions('all_admin_notices');
        remove_all_actions('network_admin_notices');
        remove_all_actions('user_admin_notices');
        add_action('admin_notices', [__CLASS__, 'maybe_notice_missing_wc']);

        wp_register_style('agenti-admin', false, [], AGENTI_PLUGIN_VERSION);
        wp_enqueue_style('agenti-admin');
        wp_add_inline_style('agenti-admin', self::admin_css());
    }

    private static function admin_css() {
        return '
        .agenti-wrap{max-width:920px;margin:20px 20px 40px 0}
        .agenti-wrap h1.agenti-title{margin:0 0 1rem;font-size:1.5rem;font-weight:650;color:#0f172a}
        .agenti-hero{display:flex;gap:1rem;align-items:flex-start;justify-content:space-between;flex-wrap:wrap;margin:0 0 1.25rem}
        .agenti-hero-brand{display:flex;gap:1rem;align-items:center}
        .agenti-hero-brand img.agenti-logo{height:72px;width:auto;max-width:240px;object-fit:contain;background:transparent}
        .agenti-hero p{margin:0;color:#64748b;max-width:46ch;line-height:1.5}
        .agenti-pill{display:inline-flex;align-items:center;gap:.35rem;padding:.28rem .7rem;border-radius:999px;font-size:12px;font-weight:700}
        .agenti-pill.on{background:#d1fae5;color:#065f46}
        .agenti-pill.off{background:#ffedd5;color:#9a3412}
        .agenti-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(180px,1fr));gap:.85rem;margin:0 0 1.15rem}
        .agenti-stat{background:#fff;border:1px solid #e2e8f0;border-radius:14px;padding:1rem 1.1rem;box-shadow:0 1px 2px rgba(15,23,42,.04)}
        .agenti-stat .lbl{font-size:11px;text-transform:uppercase;letter-spacing:.06em;color:#64748b;font-weight:700}
        .agenti-stat .val{margin-top:.35rem;font-size:1.05rem;font-weight:750;color:#0f172a;word-break:break-word}
        .agenti-card{background:#fff;border:1px solid #e2e8f0;border-radius:16px;padding:1.2rem 1.25rem;margin:0 0 1rem;box-shadow:0 1px 2px rgba(15,23,42,.04)}
        .agenti-card h2{margin:0 0 .35rem;font-size:1.05rem}
        .agenti-card .sub{margin:0 0 1rem;color:#64748b;font-size:13px;line-height:1.45}
        .agenti-row{display:grid;grid-template-columns:160px minmax(0,1fr);gap:.75rem 1rem;align-items:start;margin:0 0 .95rem}
        .agenti-row label{font-weight:650;padding-top:.45rem;color:#334155}
        .agenti-row input[type=url],.agenti-row input[type=text],.agenti-row input[type=color],.agenti-row textarea{
          width:100%;max-width:420px;border:1px solid #cbd5e1;border-radius:10px;padding:.55rem .7rem
        }
        .agenti-row input[type=color]{width:64px;height:40px;padding:3px;cursor:pointer}
        .agenti-hint{margin:.35rem 0 0;color:#64748b;font-size:12px;line-height:1.4}
        .agenti-actions{display:flex;flex-wrap:wrap;gap:.55rem;align-items:center;margin-top:.35rem}
        .agenti-actions .button-primary{background:#0d9488!important;border-color:#0f766e!important;text-shadow:none;box-shadow:none}
        .agenti-actions .button-primary:hover{background:#0f766e!important;border-color:#115e59!important}
        .agenti-actions .button-danger{color:#b91c1c;border-color:#fecaca;background:#fff}
        .agenti-actions .button-danger:hover{background:#fef2f2;border-color:#fca5a5;color:#991b1b}
        .agenti-confirm{background:#f0fdfa;border:1px solid #99f6e4;border-radius:14px;padding:1rem 1.1rem;margin:0 0 1rem}
        .agenti-sku{display:flex;flex-wrap:wrap;gap:.55rem;align-items:end}
        .agenti-sku input{flex:1 1 260px;min-width:0;border:1px solid #cbd5e1;border-radius:10px;padding:.55rem .7rem}
        .agenti-foot{margin-top:.5rem;color:#94a3b8;font-size:12px;line-height:1.5}
        .agenti-foot a{color:#0f766e}
        @media (max-width:720px){
          .agenti-row{grid-template-columns:1fr}
          .agenti-row label{padding-top:0}
        }';
    }

    /**
     * Prefill from AgentInStore one-click link.
     * Credentials stay in a user transient until confirmed via POST.
     */
    public static function maybe_prefills_from_query() {
        if (!current_user_can('manage_options')) {
            return;
        }
        if (!self::is_settings_screen()) {
            return;
        }
        $api = isset($_GET['agenti_api_base']) ? esc_url_raw(wp_unslash($_GET['agenti_api_base'])) : '';
        $key = isset($_GET['agenti_public_key']) ? sanitize_text_field(wp_unslash($_GET['agenti_public_key'])) : '';
        if (!$api && !$key) {
            return;
        }
        $uid     = get_current_user_id();
        $pending = [
            'api_base'   => $api,
            'public_key' => $key,
        ];
        set_transient('agenti_pending_connect_' . $uid, $pending, 10 * MINUTE_IN_SECONDS);
        $auto    = isset($_GET['agenti_auto']) ? sanitize_text_field(wp_unslash($_GET['agenti_auto'])) : '';
        $done    = isset($_GET['agenti_done']) ? sanitize_text_field(wp_unslash($_GET['agenti_done'])) : '';
        $confirm = isset($_GET['agenti_confirm']) ? sanitize_text_field(wp_unslash($_GET['agenti_confirm'])) : '';
        if ($auto !== '' && $api && $key && $done === '' && $confirm === '') {
            set_transient('agenti_pending_autoconnect_' . $uid, 1, 10 * MINUTE_IN_SECONDS);
            wp_safe_redirect(admin_url('admin.php?page=agentinstore&agenti_confirm=1'));
            exit;
        }
    }

    /**
     * @return array{api_base:string,public_key:string}
     */
    private static function pending_connect_creds() {
        $pending = get_transient('agenti_pending_connect_' . get_current_user_id());
        if (!is_array($pending)) {
            return ['api_base' => '', 'public_key' => ''];
        }
        return [
            'api_base'   => isset($pending['api_base']) ? (string) $pending['api_base'] : '',
            'public_key' => isset($pending['public_key']) ? (string) $pending['public_key'] : '',
        ];
    }

    public static function menu() {
        $icon = plugins_url('assets/menu-icon.png', AGENTI_PLUGIN_FILE);
        add_menu_page(
            __('AgentInStore', 'agentinstore'),
            __('AgentInStore', 'agentinstore'),
            'manage_options',
            'agentinstore',
            [__CLASS__, 'render_page'],
            $icon,
            58
        );
    }

    public static function register_settings() {
        register_setting('agenti_settings', 'agenti_api_base', ['sanitize_callback' => 'esc_url_raw']);
        register_setting('agenti_settings', 'agenti_public_key', ['sanitize_callback' => 'sanitize_text_field']);
        register_setting('agenti_settings', 'agenti_bot_color', ['sanitize_callback' => 'sanitize_hex_color']);
        register_setting('agenti_settings', 'agenti_widget_enabled', [
            'type'              => 'boolean',
            'sanitize_callback' => function ($v) {
                return $v ? 1 : 0;
            },
            'default'           => 1,
        ]);
    }

    public static function maybe_notice_missing_wc() {
        if (!current_user_can('manage_options') || !self::is_settings_screen()) {
            return;
        }
        if (!class_exists('WooCommerce')) {
            echo '<div class="notice notice-warning"><p>';
            echo wp_kses(
                __('AgentInStore works best with <strong>WooCommerce</strong> for product sync. The chat widget still works without it.', 'agentinstore'),
                ['strong' => []]
            );
            echo '</p></div>';
        }
    }

    public static function render_page() {
        if (!current_user_can('manage_options')) {
            return;
        }

        $notice = '';
        if (isset($_GET['agenti_ok']) && sanitize_text_field(wp_unslash($_GET['agenti_ok'])) !== '') {
            $queued = isset($_GET['agenti_synced']) ? absint($_GET['agenti_synced']) : -1;
            if ($queued === 0 || (isset($_GET['agenti_sync_bg']) && sanitize_text_field(wp_unslash($_GET['agenti_sync_bg'])) !== '')) {
                $notice = '<div class="notice notice-success is-dismissible"><p>' . esc_html__('Connected to AgentInStore. Product catalog sync is running in the background , you will see products appear shortly. New changes sync automatically.', 'agentinstore') . '</p></div>';
            } else {
                $n      = $queued >= 0 ? $queued : (int) get_option('agenti_last_full_sync_count', 0);
                $notice = '<div class="notice notice-success is-dismissible"><p>' . esc_html(sprintf(
                    /* translators: %d: product count */
                    __('Connected to AgentInStore. Catalog sync status: %d products. New changes sync automatically.', 'agentinstore'),
                    intval($n)
                )) . '</p></div>';
            }
        } elseif (isset($_GET['agenti_saved']) && sanitize_text_field(wp_unslash($_GET['agenti_saved'])) !== '') {
            $extra  = (isset($_GET['agenti_color_pushed']) && sanitize_text_field(wp_unslash($_GET['agenti_color_pushed'])) === '1')
                ? ' ' . __('and widget color synced to your AgentInStore dashboard', 'agentinstore')
                : '';
            $notice = '<div class="notice notice-success is-dismissible"><p>' . esc_html__('Settings saved', 'agentinstore') . esc_html($extra) . '.</p></div>';
        } elseif (isset($_GET['agenti_disconnected']) && sanitize_text_field(wp_unslash($_GET['agenti_disconnected'])) !== '') {
            $notice = '<div class="notice notice-success is-dismissible"><p>' . esc_html__('Disconnected from AgentInStore.', 'agentinstore') . '</p></div>';
        } elseif (isset($_GET['agenti_resync']) && sanitize_text_field(wp_unslash($_GET['agenti_resync'])) !== '') {
            $notice = '<div class="notice notice-success is-dismissible"><p>' . esc_html__('Full catalog refresh queued in the background. AgentInStore will show updated counts and product images shortly.', 'agentinstore') . '</p></div>';
        } elseif (isset($_GET['agenti_sku_n'])) {
            $n    = absint($_GET['agenti_sku_n']);
            $fail = isset($_GET['agenti_sku_fail']) ? absint($_GET['agenti_sku_fail']) : 0;
            $miss = isset($_GET['agenti_sku_miss']) ? absint($_GET['agenti_sku_miss']) : 0;
            if ($fail || $miss) {
                $notice = '<div class="notice notice-warning is-dismissible"><p>' . esc_html(sprintf(
                    /* translators: 1: ok count, 2: failed, 3: missing */
                    __('SKU sync: %1$d pushed, %2$d failed, %3$d SKU(s) not found.', 'agentinstore'),
                    $n,
                    $fail,
                    $miss
                )) . '</p></div>';
            } else {
                $notice = '<div class="notice notice-success is-dismissible"><p>' . esc_html(sprintf(
                    /* translators: %d: product count */
                    __('Synced %d product(s) by SKU.', 'agentinstore'),
                    $n
                )) . '</p></div>';
            }
        } elseif (!empty($_GET['agenti_error'])) {
            $err    = sanitize_text_field(wp_unslash($_GET['agenti_error']));
            $notice = '<div class="notice notice-error is-dismissible"><p>' . esc_html($err) . '</p></div>';
        }

        if (isset($_POST['agenti_confirm_connect']) && check_admin_referer('agenti_confirm_connect_action')) {
            $uid = get_current_user_id();
            delete_transient('agenti_pending_autoconnect_' . $uid);
            $pending = self::pending_connect_creds();
            if (!empty($pending['api_base'])) {
                update_option('agenti_api_base', esc_url_raw($pending['api_base']), false);
            }
            if (!empty($pending['public_key'])) {
                update_option('agenti_public_key', sanitize_text_field($pending['public_key']), false);
            }
            delete_transient('agenti_pending_connect_' . $uid);
            $result   = AGENTI_API::handshake();
            $redirect = admin_url('admin.php?page=agentinstore&agenti_done=1');
            if (is_wp_error($result)) {
                $redirect = add_query_arg('agenti_error', rawurlencode($result->get_error_message()), $redirect);
            } else {
                $queued   = !empty($result['sync_queued']);
                $n        = isset($result['synced_count']) ? (int) $result['synced_count'] : (int) get_option('agenti_last_full_sync_count', 0);
                $redirect = add_query_arg([
                    'agenti_ok'      => '1',
                    'agenti_synced'  => $n,
                    'agenti_sync_bg' => $queued ? '1' : '0',
                ], $redirect);
            }
            wp_safe_redirect($redirect);
            exit;
        }

        if (isset($_POST['agenti_save_settings']) && check_admin_referer('agenti_save_settings_action')) {
            $color = sanitize_hex_color(wp_unslash($_POST['agenti_bot_color'] ?? '#0d9488'));
            update_option('agenti_bot_color', $color ? $color : '#0d9488');
            update_option('agenti_widget_enabled', !empty($_POST['agenti_widget_enabled']) ? 1 : 0);
            $pushed = false;
            if ((int) get_option('agenti_store_connected', 0) === 1) {
                $res    = AGENTI_API::push_settings();
                $pushed = !is_wp_error($res);
            }
            wp_safe_redirect(add_query_arg([
                'agenti_saved'        => '1',
                'agenti_color_pushed' => $pushed ? '1' : '0',
            ], admin_url('admin.php?page=agentinstore')));
            exit;
        }

        if (isset($_POST['agenti_connect']) && check_admin_referer('agenti_connect_action')) {
            $base = esc_url_raw(wp_unslash($_POST['agenti_api_base'] ?? ''));
            $key  = sanitize_text_field(wp_unslash($_POST['agenti_public_key'] ?? ''));
            if (!AGENTI_API::is_valid_api_base($base)) {
                $notice = '<div class="notice notice-error"><p>' . esc_html__('API base URL must be a valid http or https URL.', 'agentinstore') . '</p></div>';
            } else {
                update_option('agenti_api_base', $base, false);
                update_option('agenti_public_key', $key, false);
                delete_transient('agenti_pending_connect_' . get_current_user_id());
                $result = AGENTI_API::handshake();
                if (is_wp_error($result)) {
                    $detail = $result->get_error_message();
                    $data   = $result->get_error_data();
                    if (is_array($data) && !empty($data['detail'])) {
                        $detail .= ' , ' . (is_string($data['detail']) ? $data['detail'] : wp_json_encode($data['detail']));
                    }
                    $notice = '<div class="notice notice-error"><p>' . esc_html($detail) . '</p></div>';
                } else {
                    $queued = !empty($result['sync_queued']);
                    $n      = isset($result['synced_count']) ? (int) $result['synced_count'] : (int) get_option('agenti_last_full_sync_count', 0);
                    wp_safe_redirect(add_query_arg([
                        'agenti_ok'      => '1',
                        'agenti_synced'  => $n,
                        'agenti_sync_bg' => $queued ? '1' : '0',
                    ], admin_url('admin.php?page=agentinstore&agenti_done=1')));
                    exit;
                }
            }
        }

        if (isset($_POST['agenti_disconnect']) && check_admin_referer('agenti_disconnect_action')) {
            $confirm = isset($_POST['agenti_disconnect_confirm'])
                ? strtoupper(trim(sanitize_text_field(wp_unslash($_POST['agenti_disconnect_confirm']))))
                : '';
            $checked = !empty($_POST['agenti_disconnect_check']);
            if (!$checked || $confirm !== 'DISCONNECT') {
                $notice = '<div class="notice notice-error"><p>' . esc_html__('Disconnect cancelled. Check the box and type DISCONNECT to confirm.', 'agentinstore') . '</p></div>';
            } else {
                AGENTI_API::disconnect();
                wp_safe_redirect(add_query_arg('agenti_disconnected', '1', admin_url('admin.php?page=agentinstore')));
                exit;
            }
        }

        if (isset($_POST['agenti_sync_skus']) && check_admin_referer('agenti_sync_skus_action')) {
            $raw     = isset($_POST['agenti_skus']) ? sanitize_text_field(wp_unslash($_POST['agenti_skus'])) : '';
            $result  = AGENTI_API::sync_by_skus($raw);
            $n       = is_array($result) ? (int) ($result['ok'] ?? 0) : (int) $result;
            $failed  = is_array($result) ? (int) ($result['failed'] ?? 0) : 0;
            $missing = is_array($result) ? (int) ($result['missing'] ?? 0) : 0;
            wp_safe_redirect(add_query_arg([
                'agenti_sku_ok'   => $failed || $missing ? '0' : '1',
                'agenti_sku_n'    => $n,
                'agenti_sku_fail' => $failed,
                'agenti_sku_miss' => $missing,
            ], admin_url('admin.php?page=agentinstore')));
            exit;
        }

        if (isset($_POST['agenti_resync_catalog']) && check_admin_referer('agenti_resync_catalog_action')) {
            if ((int) get_option('agenti_store_connected', 0) === 1) {
                AGENTI_API::kick_full_sync(false);
            }
            wp_safe_redirect(add_query_arg('agenti_resync', '1', admin_url('admin.php?page=agentinstore')));
            exit;
        }

        $api_base   = esc_attr(get_option('agenti_api_base', ''));
        $public_key = esc_attr(get_option('agenti_public_key', ''));
        $pending    = self::pending_connect_creds();
        if (!$api_base && !empty($pending['api_base'])) {
            $api_base = esc_attr($pending['api_base']);
        }
        if (!$public_key && !empty($pending['public_key'])) {
            $public_key = esc_attr($pending['public_key']);
        }
        // If AgentInStore admin disconnected us, clear local "Linked" on this page load.
        if ((int) get_option('agenti_store_connected', 0) === 1) {
            AGENTI_API::heartbeat(true);
        }

        $color        = esc_attr(get_option('agenti_bot_color', '#0d9488') ?: '#0d9488');
        $enabled      = (int) get_option('agenti_widget_enabled', 1);
        $connected    = (int) get_option('agenti_store_connected', 0);
        $secret       = get_option('agenti_webhook_secret', '');
        $last_sync    = get_option('agenti_last_full_sync_at', '');
        $catalog_used = (int) get_option('agenti_catalog_used', get_option('agenti_last_full_sync_count', 0));
        $catalog_max  = (int) get_option('agenti_catalog_max', 0);
        $last_count   = $catalog_used > 0 ? $catalog_used : (int) get_option('agenti_last_full_sync_count', 0);
        $last_skipped = (int) get_option('agenti_last_full_sync_skipped', 0);
        $last_sync_h  = '';
        if ($last_sync) {
            $ts = strtotime((string) $last_sync);
            if ($ts) {
                $last_sync_h = date_i18n(
                    get_option('date_format') . ' ' . get_option('time_format'),
                    $ts
                );
            } else {
                $last_sync_h = (string) $last_sync;
            }
        }
        $pending_auto = (bool) get_transient('agenti_pending_autoconnect_' . get_current_user_id())
            || (isset($_GET['agenti_confirm']) && sanitize_text_field(wp_unslash($_GET['agenti_confirm'])) !== '');
        ?>
        <div class="wrap agenti-wrap">
            <h1 class="agenti-title screen-reader-text"><?php esc_html_e('AgentInStore', 'agentinstore'); ?></h1>
            <div class="agenti-hero">
                <div class="agenti-hero-brand">
                    <img class="agenti-logo" src="<?php echo esc_url(plugins_url('assets/logo.png', AGENTI_PLUGIN_FILE)); ?>" alt="<?php echo esc_attr__('AgentInStore', 'agentinstore'); ?>" />
                    <div>
                        <p><?php esc_html_e('Connect once. After that, products sync live on create / update / delete. Widget color saves without re-syncing your catalog.', 'agentinstore'); ?></p>
                    </div>
                </div>
                <span class="agenti-pill <?php echo $connected ? 'on' : 'off'; ?>">
                    <?php echo $connected ? esc_html__('Connected', 'agentinstore') : esc_html__('Not connected', 'agentinstore'); ?>
                </span>
            </div>

            <?php echo $notice; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>

            <?php if ($pending_auto && $api_base && $public_key && !$connected) : ?>
            <div class="agenti-confirm">
                <p style="margin:0 0 10px"><strong><?php esc_html_e('Confirm connection', 'agentinstore'); ?></strong> <?php echo esc_html(sprintf(/* translators: %s: API base URL */ __('to %s?', 'agentinstore'), $pending['api_base'] ?: get_option('agenti_api_base', ''))); ?></p>
                <p class="agenti-hint" style="margin:0 0 12px"><?php esc_html_e('This links your store and starts a one-time catalog sync in the background (safe for large catalogs). Later product edits sync individually.', 'agentinstore'); ?></p>
                <form method="post" style="margin:0">
                    <?php wp_nonce_field('agenti_confirm_connect_action'); ?>
                    <div class="agenti-actions">
                        <button type="submit" name="agenti_confirm_connect" class="button button-primary"><?php esc_html_e('Yes, connect now', 'agentinstore'); ?></button>
                        <a class="button" href="<?php echo esc_url(admin_url('admin.php?page=agentinstore')); ?>"><?php esc_html_e('Cancel', 'agentinstore'); ?></a>
                    </div>
                </form>
            </div>
            <?php endif; ?>

            <div class="agenti-grid">
                <div class="agenti-stat">
                    <div class="lbl"><?php esc_html_e('Status', 'agentinstore'); ?></div>
                    <div class="val" style="color:<?php echo $connected ? '#0d9488' : '#b45309'; ?>">
                        <?php echo $connected ? esc_html__('Linked', 'agentinstore') : esc_html__('Waiting to connect', 'agentinstore'); ?>
                    </div>
                </div>
                <div class="agenti-stat">
                    <div class="lbl"><?php esc_html_e('Catalog on AgentInStore', 'agentinstore'); ?></div>
                    <div class="val">
                        <?php
                        if ($connected && ($last_count > 0 || $catalog_max > 0)) {
                            if ($catalog_max > 0) {
                                echo esc_html(intval($last_count) . ' / ' . intval($catalog_max));
                            } else {
                                echo esc_html(intval($last_count));
                            }
                            if ($last_sync_h) {
                                echo ' <span style="font-size:.75rem;font-weight:500;color:#64748b">· ' . esc_html($last_sync_h) . '</span>';
                            }
                            if ($last_skipped > 0) {
                                echo '<div style="font-size:.75rem;font-weight:500;color:#b45309;margin-top:.2rem">'
                                    . esc_html(sprintf(
                                        /* translators: %d: skipped count */
                                        __('%d+ skipped (plan limit)', 'agentinstore'),
                                        intval($last_skipped)
                                    ))
                                    . '</div>';
                            }
                        } else {
                            echo ',';
                        }
                        ?>
                    </div>
                </div>
                <div class="agenti-stat">
                    <div class="lbl"><?php esc_html_e('Live updates', 'agentinstore'); ?></div>
                    <div class="val"><?php echo $connected ? esc_html__('On (per product)', 'agentinstore') : esc_html__('Off until connected', 'agentinstore'); ?></div>
                </div>
            </div>

            <div class="agenti-card">
                <h2><?php esc_html_e('Widget appearance', 'agentinstore'); ?></h2>
                <p class="sub"><?php echo wp_kses(__('Change color or visibility anytime. This does <strong>not</strong> reconnect or re-sync products. When connected, color also updates your AgentInStore dashboard Settings.', 'agentinstore'), ['strong' => []]); ?></p>
                <form method="post">
                    <?php wp_nonce_field('agenti_save_settings_action'); ?>
                    <div class="agenti-row">
                        <label for="agenti_bot_color"><?php esc_html_e('Widget color', 'agentinstore'); ?></label>
                        <div>
                            <input name="agenti_bot_color" id="agenti_bot_color" type="color" value="<?php echo $color; ?>" />
                            <p class="agenti-hint"><?php esc_html_e('Matches the chat bubble / brand accent on your storefront.', 'agentinstore'); ?></p>
                        </div>
                    </div>
                    <div class="agenti-row">
                        <label><?php esc_html_e('Enable widget', 'agentinstore'); ?></label>
                        <div>
                            <label><input type="checkbox" name="agenti_widget_enabled" value="1" <?php checked($enabled, 1); ?> /> <?php esc_html_e('Show chat bubble on storefront', 'agentinstore'); ?></label>
                        </div>
                    </div>
                    <div class="agenti-actions">
                        <button type="submit" name="agenti_save_settings" class="button button-primary"><?php esc_html_e('Save settings', 'agentinstore'); ?></button>
                    </div>
                </form>
            </div>

            <div class="agenti-card">
                <h2><?php echo $connected ? esc_html__('Connection', 'agentinstore') : esc_html__('Connect to AgentInStore', 'agentinstore'); ?></h2>
                <p class="sub">
                    <?php
                    if ($connected) {
                        esc_html_e('Your store is linked. Use Disconnect only if you need to switch workspaces or stop sync.', 'agentinstore');
                    } else {
                        esc_html_e('Paste the API base URL and public widget key from AgentInStore → Integrations, then Connect once.', 'agentinstore');
                    }
                    ?>
                </p>
                <form method="post">
                    <?php wp_nonce_field('agenti_connect_action'); ?>
                    <div class="agenti-row">
                        <label for="agenti_api_base"><?php esc_html_e('API base URL', 'agentinstore'); ?></label>
                        <div>
                            <input name="agenti_api_base" id="agenti_api_base" type="url" value="<?php echo $api_base; ?>" placeholder="https://agentinstore.com" <?php echo $connected ? '' : 'required'; ?> />
                            <p class="agenti-hint"><?php esc_html_e('Live: https://agentinstore.com , local development may use http://127.0.0.1:8000.', 'agentinstore'); ?></p>
                        </div>
                    </div>
                    <div class="agenti-row">
                        <label for="agenti_public_key"><?php esc_html_e('Public widget key', 'agentinstore'); ?></label>
                        <div>
                            <input name="agenti_public_key" id="agenti_public_key" type="text" value="<?php echo $public_key; ?>" placeholder="pk_..." <?php echo $connected ? '' : 'required'; ?> />
                            <p class="agenti-hint"><?php echo wp_kses(__('From AgentInStore → Integrations (starts with <code>pk_</code>).', 'agentinstore'), ['code' => []]); ?></p>
                        </div>
                    </div>
                    <?php if ($secret) : ?>
                    <div class="agenti-row">
                        <label><?php esc_html_e('Webhook secret', 'agentinstore'); ?></label>
                        <div>
                            <code style="user-select:all"><?php echo esc_html('••••••••' . substr((string) $secret, -4)); ?></code>
                            <p class="agenti-hint"><?php esc_html_e('Stored securely on this site. Only the last 4 characters are shown.', 'agentinstore'); ?></p>
                        </div>
                    </div>
                    <?php endif; ?>
                    <div class="agenti-actions">
                        <?php if (!$connected) : ?>
                        <button type="submit" name="agenti_connect" class="button button-primary"><?php esc_html_e('Connect', 'agentinstore'); ?></button>
                        <?php else : ?>
                        <button type="submit" name="agenti_connect" class="button"><?php esc_html_e('Reconnect', 'agentinstore'); ?></button>
                        <?php endif; ?>
                    </div>
                </form>

                <?php if ($connected) : ?>
                <hr style="border:none;border-top:1px solid #e2e8f0;margin:1.15rem 0" />
                <form method="post" onsubmit="return confirm('<?php echo esc_js(__('Disconnect AgentInStore from this store?', 'agentinstore')); ?>');">
                    <?php wp_nonce_field('agenti_disconnect_action'); ?>
                    <p class="sub" style="margin-bottom:.65rem"><?php esc_html_e('Double confirmation required.', 'agentinstore'); ?></p>
                    <label style="display:flex;gap:.45rem;align-items:flex-start;margin-bottom:.55rem;font-size:13px">
                        <input type="checkbox" name="agenti_disconnect_check" value="1" required />
                        <span><?php esc_html_e('I understand product sync will stop until I connect again.', 'agentinstore'); ?></span>
                    </label>
                    <div class="agenti-row" style="margin-bottom:.65rem">
                        <label for="agenti_disconnect_confirm"><?php esc_html_e('Type DISCONNECT', 'agentinstore'); ?></label>
                        <div>
                            <input name="agenti_disconnect_confirm" id="agenti_disconnect_confirm" type="text" autocomplete="off" placeholder="DISCONNECT" required />
                        </div>
                    </div>
                    <div class="agenti-actions">
                        <button type="submit" name="agenti_disconnect" class="button button-danger"><?php esc_html_e('Disconnect', 'agentinstore'); ?></button>
                    </div>
                </form>
                <?php endif; ?>
            </div>

            <?php if ($connected && class_exists('WooCommerce')) : ?>
            <div class="agenti-card">
                <h2><?php esc_html_e('Catalog sync', 'agentinstore'); ?></h2>
                <p class="sub"><?php echo wp_kses(__('Create, update, and delete in WooCommerce sync <strong>that product only</strong> in realtime.', 'agentinstore'), ['strong' => []]); ?></p>
                <form method="post" style="margin:.75rem 0 1rem">
                    <?php wp_nonce_field('agenti_resync_catalog_action'); ?>
                    <button type="submit" name="agenti_resync_catalog" class="button button-secondary"><?php esc_html_e('Refresh full catalog', 'agentinstore'); ?></button>
                    <p class="agenti-hint" style="margin:.4rem 0 0"><?php esc_html_e('Re-pushes products so AgentInStore catalog count and images match your plan limit (runs in the background).', 'agentinstore'); ?></p>
                </form>
                <p class="sub"><?php esc_html_e('Or sync specific SKUs (comma-separated).', 'agentinstore'); ?></p>
                <form method="post">
                    <?php wp_nonce_field('agenti_sync_skus_action'); ?>
                    <div class="agenti-sku">
                        <input name="agenti_skus" type="text" placeholder="SKU-001, SKU-002, …" required />
                        <button type="submit" name="agenti_sync_skus" class="button button-primary"><?php esc_html_e('Sync these SKUs', 'agentinstore'); ?></button>
                    </div>
                    <p class="agenti-hint"><?php esc_html_e('Only matching products are pushed. Variations are included with their parent.', 'agentinstore'); ?></p>
                </form>
            </div>
            <?php endif; ?>

            <p class="agenti-foot">
                <?php
                echo esc_html(sprintf(
                    /* translators: %s: plugin version */
                    __('AgentInStore plugin v%s', 'agentinstore'),
                    AGENTI_PLUGIN_VERSION
                ));
                ?>
                ,
                <?php
                echo wp_kses(
                    sprintf(
                        /* translators: %s: author site URL */
                        __('Connects to your configured AgentInStore API. Author/support: <a href="%s" target="_blank" rel="noopener noreferrer">agentinstore.com</a>.', 'agentinstore'),
                        'https://agentinstore.com/'
                    ),
                    [
                        'a' => ['href' => [], 'target' => [], 'rel' => []],
                    ]
                );
                ?>
            </p>
        </div>
        <?php
    }
}