<?php
// If this file is called directly, abort.
if ( ! defined( 'WPINC' ) ) {
	die;
}

/**
 * Smart Speed Analyzer Engine
 * 1. Local Instant Speed Audit (< 2s loopback + DB + Media + Server diagnostics with 1-Click Fix metadata)
 * 2. Google PageSpeed Insights API v5 Live Lighthouse Runner (Mobile & Desktop Core Web Vitals)
 */
class AIO_Speed_Analyzer {

	public function __construct() {
		add_action( 'wp_ajax_aio_run_local_speed_audit', array( $this, 'ajax_run_local_audit' ) );
		add_action( 'wp_ajax_aio_run_pagespeed_api', array( $this, 'ajax_run_pagespeed_api' ) );
	}

	/**
	 * Run 100% local loopback + server + database + media diagnostic scan.
	 */
	public function ajax_run_local_audit() {
		check_ajax_referer( 'aio-settings-nonce', 'security' );
		if ( ! current_user_can( 'manage_options' ) ) {
			wp_send_json_error( __( 'Unauthorized', 'aio-tools' ) );
		}

		global $wpdb;
		$options     = get_option( 'aio_options', array() );
		$perf_active = aio_is_module_active( 'opt-module-performance' );
		$home_url    = home_url( '/' );
		$home_host   = strtolower( (string) wp_parse_url( $home_url, PHP_URL_HOST ) );

		$request_args = array(
			'timeout'     => 12,
			'redirection' => 3,
			'sslverify'   => false,
			'cookies'     => array(),
			'headers'     => array(
				'Accept-Encoding' => 'gzip',
				'User-Agent'      => 'Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36 AIO-Speed-Audit/' . ( defined( 'AIO_VERSION' ) ? AIO_VERSION : '3.1.0' ),
			),
		);

		$t0       = microtime( true );
		$response = wp_remote_get( $home_url, $request_args );
		$ttfb_ms  = (int) round( ( microtime( true ) - $t0 ) * 1000 );

		$loopback_ok  = ! is_wp_error( $response ) && wp_remote_retrieve_response_code( $response ) === 200;
		$loopback_err = is_wp_error( $response ) ? $response->get_error_message() : '';
		$html         = $loopback_ok ? (string) wp_remote_retrieve_body( $response ) : '';
		$headers      = $loopback_ok ? wp_remote_retrieve_headers( $response ) : array();

		$aio_cache_hdr = $loopback_ok ? strtoupper( (string) wp_remote_retrieve_header( $response, 'x-aio-cache' ) ) : '';

		// If Page Cache is enabled and first request just warmed the cache (MISS), measure warm HIT TTFB!
		if ( $loopback_ok && ! empty( $options['optEnablePageCache'] ) && $aio_cache_hdr === 'MISS' ) {
			$t1      = microtime( true );
			$res2    = wp_remote_get( $home_url, array_merge( $request_args, array( 'timeout' => 5 ) ) );
			$warm_ms = (int) round( ( microtime( true ) - $t1 ) * 1000 );
			if ( ! is_wp_error( $res2 ) && wp_remote_retrieve_response_code( $res2 ) === 200 ) {
				$ttfb_ms       = $warm_ms;
				$aio_cache_hdr = strtoupper( (string) wp_remote_retrieve_header( $res2, 'x-aio-cache' ) );
			}
		}

		// Detect active caching layer
		$third_party_cache = '';
		if ( defined( 'LSCACHE_V' ) || class_exists( 'LiteSpeed_Cache' ) || ( $loopback_ok && wp_remote_retrieve_header( $response, 'x-litespeed-cache' ) ) ) {
			$third_party_cache = 'LiteSpeed Cache';
		} elseif ( defined( 'WP_ROCKET_VERSION' ) ) {
			$third_party_cache = 'WP Rocket';
		} elseif ( $loopback_ok && strtolower( (string) wp_remote_retrieve_header( $response, 'cf-cache-status' ) ) === 'hit' ) {
			$third_party_cache = 'Cloudflare Edge';
		}

		$cache_status = 'OFF';
		if ( ! empty( $aio_cache_hdr ) && strpos( $aio_cache_hdr, 'HIT' ) === 0 ) {
			$cache_status = $aio_cache_hdr;
		} elseif ( ! empty( $third_party_cache ) ) {
			$cache_status = $third_party_cache;
		} elseif ( $perf_active && ! empty( $options['optEnablePageCache'] ) ) {
			$cache_status = 'WARMING';
		}

		// Analyze HTML structure if loopback succeeded
		$html_kb               = $loopback_ok ? round( strlen( $html ) / 1024, 1 ) : 0;
		$dom_nodes             = 0;
		$blocking_css          = 0;
		$blocking_js           = 0;
		$missing_dims          = 0;
		$lcp_lazy_issue        = false;
		$lcp_missing_priority  = false;
		$youtube_iframes       = 0;
		$google_fonts_noswap   = false;
		$google_fonts_remote   = false;
		$hardcoded_raster_imgs = 0;
		$has_dashicons_guest   = false;
		$has_jq_migrate_guest  = false;
		$has_wp_emoji_guest    = false;
		$detected_trackers     = array();
		$suggested_preconnect  = array();

		if ( $loopback_ok && $html !== '' ) {
			// Strip script/style/noscript/template before counting DOM elements & inspecting <img> / <iframe>
			$html_no_code = preg_replace( '#<(script|style|noscript|template|textarea)\b[^>]*>.*?</\1>#is', '', $html );
			if ( $html_no_code === null ) {
				$html_no_code = $html;
			}

			$dom_nodes = (int) preg_match_all( '/<[a-zA-Z][a-zA-Z0-9:-]*(?=[\s>\/])/', $html_no_code );

			// Inspect <head> for render-blocking CSS & synchronous JS
			$head_html = '';
			if ( preg_match( '#<head\b[^>]*>(.*?)</head>#is', $html, $hm ) ) {
				$head_html = $hm[1];
			}

			if ( $head_html !== '' ) {
				if ( preg_match_all( '/<link\b[^>]*rel=(["\'])stylesheet\1[^>]*>/i', $head_html, $css_m ) ) {
					foreach ( $css_m[0] as $link_tag ) {
						if ( ! preg_match( '/\bmedia=(["\'])print\1/i', $link_tag ) && stripos( $link_tag, 'onload=' ) === false && stripos( $link_tag, 'data-aio-async' ) === false ) {
							$blocking_css++;
						}
					}
				}
				if ( preg_match_all( '/<script\b[^>]*\bsrc=(["\'])[^"\']+\1[^>]*>/i', $head_html, $js_m ) ) {
					foreach ( $js_m[0] as $script_tag ) {
						if ( ! preg_match( '/\b(?:defer|async)\b/i', $script_tag ) && stripos( $script_tag, 'aio-delayed-script' ) === false ) {
							$blocking_js++;
						}
					}
				}
			}

			// Detect un-delayed 3rd-party heavy trackers & chat widgets
			$tracker_map = array(
				'Google Tag Manager' => 'googletagmanager.com/gtm.js',
				'Google Analytics'   => 'googletagmanager.com/gtag/js',
				'Google Analytics 3' => 'google-analytics.com/analytics.js',
				'Facebook Pixel'     => 'connect.facebook.net',
				'Tawk.to LiveChat'   => 'embed.tawk.to',
				'Chative LiveChat'   => 'chative.io',
				'TikTok Pixel'       => 'analytics.tiktok.com',
				'Zalo SDK'           => 'sp.zalo.me',
				'Hotjar'             => 'static.hotjar.com',
				'Microsoft Clarity'  => 'clarity.ms',
				'Google AdSense'     => 'adsbygoogle.js',
			);
			if ( preg_match_all( '#<script\b([^>]*)>(.*?)</script>#is', $html, $all_scripts, PREG_SET_ORDER ) ) {
				foreach ( $all_scripts as $sc ) {
					// Already delayed by AIO Tools -> not blocking TBT!
					if ( stripos( $sc[1], 'aio-delayed-script' ) !== false ) {
						continue;
					}
					$full_sc = $sc[0];
					foreach ( $tracker_map as $label => $needle ) {
						if ( stripos( $full_sc, $needle ) !== false ) {
							$detected_trackers[ $label ] = true;
						}
					}
				}
			}
			$detected_trackers = array_keys( $detected_trackers );

			// Inspect <img> tags for LCP mistakes & missing width/height (CLS)
			if ( preg_match_all( '/<img\b[^>]*>/i', $html_no_code, $img_matches ) ) {
				$lcp_checked = false;
				foreach ( $img_matches[0] as $img_tag ) {
					if ( stripos( $img_tag, 'src="data:' ) !== false || stripos( $img_tag, "src='data:" ) !== false ) {
						continue;
					}
					$has_w = (bool) preg_match( '/\bwidth\s*=\s*["\']?\d+/i', $img_tag );
					$has_h = (bool) preg_match( '/\bheight\s*=\s*["\']?\d+/i', $img_tag );
					if ( ! $has_w || ! $has_h ) {
						$missing_dims++;
					}
					if ( preg_match( '/\bsrc=(["\'])[^"\']*\/uploads\/[^"\']+\.(?:jpe?g|png)(?:\?[^"\']*)?\1/i', $img_tag ) ) {
						$hardcoded_raster_imgs++;
					}

					$is_small_or_logo = preg_match( '/\bclass=(["\'])[^"\']*\b(?:avatar|custom-logo|wp-smiley|emoji)\b[^"\']*\1/i', $img_tag );
					if ( ! $lcp_checked && ! $is_small_or_logo && strpos( $img_tag, 'i.ytimg.com/vi/' ) === false ) {
						$lcp_checked = true;
						if ( preg_match( '/\bloading\s*=\s*["\']?lazy\b/i', $img_tag ) ) {
							$lcp_lazy_issue = true;
						}
						if ( stripos( $img_tag, 'fetchpriority=' ) === false ) {
							$lcp_missing_priority = true;
						}
					}
				}
			}

			// Detect raw YouTube iframes
			$youtube_iframes = (int) preg_match_all( '/<iframe\b[^>]*\bsrc=(["\'])(?:https?:)?\/\/(?:www\.)?(?:youtube\.com|youtube-nocookie\.com)\/embed\//i', $html_no_code );

			// Detect Google Fonts missing display=swap or still fetched from external Google servers
			if ( preg_match_all( '/<link\b[^>]*\bhref=(["\'])([^"\']*fonts\.googleapis\.com\/css2?[^"\']*)\1[^>]*>/i', $html, $gf_m ) ) {
				$google_fonts_remote = true;
				foreach ( $gf_m[2] as $gf_url ) {
					if ( stripos( $gf_url, 'display=' ) === false ) {
						$google_fonts_noswap = true;
						break;
					}
				}
			}

			// Detect WP Core Guest Bloat
			$has_dashicons_guest  = stripos( $html, 'dashicons.min.css' ) !== false || stripos( $html, '/css/dashicons.css' ) !== false;
			$has_jq_migrate_guest = stripos( $html, 'jquery-migrate' ) !== false;
			$has_wp_emoji_guest   = stripos( $html, 'wp-emoji-release.min.js' ) !== false;

			// Discover external origins on homepage not yet in optPrefetchDomains
			$existing_prefetch = array();
			if ( ! empty( $options['optPrefetchDomains'] ) ) {
				foreach ( preg_split( '/[\r\n,\s]+/', (string) $options['optPrefetchDomains'] ) as $d ) {
					$d = trim( $d );
					if ( $d === '' ) {
						continue;
					}
					if ( strpos( $d, '//' ) === 0 ) {
						$d = 'https:' . $d;
					} elseif ( ! preg_match( '#^https?://#i', $d ) ) {
						$d = 'https://' . ltrim( $d, '/' );
					}
					$h = strtolower( (string) wp_parse_url( $d, PHP_URL_HOST ) );
					if ( $h !== '' ) {
						$existing_prefetch[ $h ] = true;
					}
				}
			}
			// Also check existing <link rel="preconnect"> in HTML
			if ( preg_match_all( '/<link\b[^>]*rel=(["\'])preconnect\1[^>]*href=(["\'])([^"\']+)\2/i', $html, $pc_m ) ) {
				foreach ( $pc_m[3] as $pc_url ) {
					$h = strtolower( (string) wp_parse_url( $pc_url, PHP_URL_HOST ) );
					if ( $h !== '' ) {
						$existing_prefetch[ $h ] = true;
					}
				}
			}

			if ( preg_match_all( '/\b(?:src|href)=(["\'])((?:https?:)?\/\/[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}[^"\']*)\1/i', $html, $ext_m ) ) {
				$found_hosts = array();
				foreach ( $ext_m[2] as $ext_url ) {
					$norm = strpos( $ext_url, '//' ) === 0 ? 'https:' . $ext_url : $ext_url;
					$host = strtolower( (string) wp_parse_url( $norm, PHP_URL_HOST ) );
					if ( $host === '' || $host === $home_host || isset( $existing_prefetch[ $host ] ) ) {
						continue;
					}
					// Only suggest asset/CDN/font/API origins (skip regular outbound social profile links in <a href>)
					if ( preg_match( '/(?:fonts\.googleapis|fonts\.gstatic|cdnjs|jsdelivr|unpkg|cloudflare|ytimg|youtube|googletagmanager|google-analytics|facebook\.net|tawk\.to|chative|zalo|tiktok|hotjar|clarity|gravatar|wp\.com|cdn)/i', $host ) ) {
						$found_hosts[ 'https://' . $host ] = true;
					}
					if ( count( $found_hosts ) >= 6 ) {
						break;
					}
				}
				$suggested_preconnect = array_keys( $found_hosts );
			}
		}

		// Database & Media Library checks
		$unconverted_webp = (int) $wpdb->get_var(
			"SELECT COUNT(p.ID) FROM {$wpdb->posts} p
			LEFT JOIN {$wpdb->postmeta} pm ON (p.ID = pm.post_id AND pm.meta_key = '_aio_webp_converted')
			WHERE p.post_type = 'attachment'
			AND p.post_mime_type IN ('image/jpeg', 'image/png')
			AND pm.meta_id IS NULL"
		);

		$autoload_bytes = (int) $wpdb->get_var(
			"SELECT SUM(LENGTH(option_value)) FROM {$wpdb->options} WHERE autoload IN ('yes', 'on', 'auto', 'auto-on')"
		);
		$autoload_kb     = round( $autoload_bytes / 1024, 1 );
		$revisions_count = (int) $wpdb->get_var(
			"SELECT COUNT(ID) FROM {$wpdb->posts} WHERE post_type = 'revision'"
		);

		$htaccess_status = class_exists( 'AIO_Htaccess_Cache' ) ? AIO_Htaccess_Cache::get_status() : array( 'supported' => false, 'writable' => false, 'active' => false );

		// Build prioritized diagnostic items + calculate weighted 0-100 Speed Score
		$score = 100;
		$items = array();

		// 1. Module active check
		if ( ! $perf_active ) {
			$score  -= 25;
			$items[] = array(
				'id'        => 'module_off',
				'category'  => 'Core',
				'status'    => 'high',
				'title'     => __( 'Speed & Optimize module is currently disabled', 'aio-tools' ),
				'desc'      => __( 'Enable the Speed & Optimize module to activate caching and Core Web Vitals optimization engines.', 'aio-tools' ),
				'fix_type'  => 'toggle',
				'fix_key'   => 'opt-module-performance',
				'fix_label' => __( 'Enable Module Now', 'aio-tools' ),
			);
		}

		// 2. TTFB & Page Cache
		$page_cache_on = ( $perf_active && ! empty( $options['optEnablePageCache'] ) ) || ! empty( $third_party_cache );
		$turbo_tier_on = strpos( $aio_cache_hdr, 'DROPIN' ) !== false || strpos( $aio_cache_hdr, 'SERVER' ) !== false;
		if ( ! $page_cache_on ) {
			$score  -= 18;
			$items[] = array(
				'id'        => 'page_cache',
				'category'  => 'TTFB',
				'status'    => 'high',
				/* translators: %d: current TTFB in milliseconds */
				'title'     => sprintf( __( 'Static Page Cache is disabled (Current TTFB: %dms)', 'aio-tools' ), $ttfb_ms ),
				'desc'      => __( '3-Tier Disk Page Cache (.htaccess + advanced-cache.php + .html.gz) reduces server response time (TTFB) below 30ms.', 'aio-tools' ),
				'fix_type'  => 'toggle',
				'fix_key'   => 'optEnablePageCache',
				'fix_label' => __( 'Enable Page Cache', 'aio-tools' ),
			);
		} elseif ( $loopback_ok && $ttfb_ms > 600 ) {
			$score  -= 8;
			$items[] = array(
				'id'        => 'ttfb_slow',
				'category'  => 'TTFB',
				'status'    => 'medium',
				/* translators: %d: current TTFB in milliseconds */
				'title'     => sprintf( __( 'Server response time (TTFB) is still high (%dms)', 'aio-tools' ), $ttfb_ms ),
				'desc'      => ! $turbo_tier_on
					? __( 'Page Cache is enabled without the Turbo Drop-in / .htaccess layer. Enable advanced-cache.php Drop-in to serve pages without booting MySQL.', 'aio-tools' )
					: __( 'Page Cache is active, yet server response exceeds 600ms. Check Object Cache (Redis) or PHP hosting resources.', 'aio-tools' ),
				'fix_type'  => 'subtab',
				'fix_key'   => ! $turbo_tier_on ? 'page-cache' : 'object-cache',
				'fix_label' => ! $turbo_tier_on ? __( 'Open Page Cache Settings', 'aio-tools' ) : __( 'Open Object Cache', 'aio-tools' ),
			);
		} else {
			$items[] = array(
				'id'        => 'page_cache_ok',
				'category'  => 'TTFB',
				'status'    => 'passed',
				/* translators: 1: TTFB in ms, 2: cache status label */
				'title'     => sprintf( __( 'Fast TTFB & Page Cache active (%1$dms — %2$s)', 'aio-tools' ), $ttfb_ms, $cache_status ),
				'desc'      => __( 'Homepage is being served rapidly from static cache.', 'aio-tools' ),
				'fix_type'  => '',
				'fix_key'   => '',
				'fix_label' => '',
			);
		}

		// 3. Smart LCP Hero Image
		if ( ( $lcp_lazy_issue || $lcp_missing_priority ) && empty( $options['optEnableSmartLcp'] ) ) {
			$score  -= 14;
			$items[] = array(
				'id'        => 'smart_lcp',
				'category'  => 'LCP',
				'status'    => 'high',
				'title'     => $lcp_lazy_issue
					? __( 'Hero image (LCP) has loading="lazy" delaying initial paint!', 'aio-tools' )
					: __( 'Hero image (LCP) is missing fetchpriority="high"', 'aio-tools' ),
				'desc'      => __( 'Smart LCP strips lazy-load from the above-the-fold hero image, injects fetchpriority="high", and preloads featured images.', 'aio-tools' ),
				'fix_type'  => 'toggle',
				'fix_key'   => 'optEnableSmartLcp',
				'fix_label' => __( 'Optimize LCP Now', 'aio-tools' ),
			);
		} else {
			$items[] = array(
				'id'        => 'smart_lcp_ok',
				'category'  => 'LCP',
				'status'    => 'passed',
				'title'     => __( 'Hero image optimized (Smart LCP & FetchPriority)', 'aio-tools' ),
				'desc'      => __( 'Above-the-fold hero image is not blocked by lazy-loading and is prioritized early.', 'aio-tools' ),
				'fix_type'  => '',
				'fix_key'   => '',
				'fix_label' => '',
			);
		}

		// 4. Delay 3rd-Party JS / TBT
		if ( ! empty( $detected_trackers ) && empty( $options['optEnableDelayJS'] ) ) {
			$score  -= 14;
			$items[] = array(
				'id'        => 'delay_js',
				'category'  => 'TBT',
				'status'    => 'high',
				/* translators: %d: number of detected 3rd-party trackers */
				'title'     => sprintf( __( 'Detected %d 3rd-party tracking/chat script(s) inflating Total Blocking Time (TBT)', 'aio-tools' ), count( $detected_trackers ) ),
				/* translators: %s: comma-separated list of tracker names */
				'desc'      => sprintf( __( 'Loading early: %s. Delaying until user interaction dramatically boosts Google PageSpeed Mobile scores.', 'aio-tools' ), implode( ', ', $detected_trackers ) ),
				'fix_type'  => 'toggle',
				'fix_key'   => 'optEnableDelayJS',
				'fix_label' => __( 'Enable Delay JS', 'aio-tools' ),
			);
		} elseif ( empty( $options['optEnableDelayJS'] ) ) {
			$score  -= 4;
			$items[] = array(
				'id'        => 'delay_js_suggest',
				'category'  => 'TBT',
				'status'    => 'medium',
				'title'     => __( 'Delay 3rd-Party JavaScript Execution is not enabled', 'aio-tools' ),
				'desc'      => __( 'Enable Targeted mode to automatically defer GTM, Analytics, Pixel, and LiveChat widgets until user interaction.', 'aio-tools' ),
				'fix_type'  => 'toggle',
				'fix_key'   => 'optEnableDelayJS',
				'fix_label' => __( 'Enable Delay JS', 'aio-tools' ),
			);
		} else {
			$items[] = array(
				'id'        => 'delay_js_ok',
				'category'  => 'TBT',
				'status'    => 'passed',
				'title'     => __( 'Delay JavaScript active to minimize main-thread blocking (TBT/INP)', 'aio-tools' ),
				'desc'      => __( 'Heavy scripts are intelligently deferred until first user interaction.', 'aio-tools' ),
				'fix_type'  => '',
				'fix_key'   => '',
				'fix_label' => '',
			);
		}

		// 5. Render-Blocking JS (Defer JS)
		if ( $blocking_js > 0 && empty( $options['optEnableDeferJS'] ) ) {
			$score  -= 10;
			$items[] = array(
				'id'        => 'defer_js',
				'category'  => 'LCP',
				'status'    => 'high',
				/* translators: %d: number of render-blocking JS files */
				'title'     => sprintf( __( 'Found %d render-blocking JavaScript file(s) in <head>', 'aio-tools' ), $blocking_js ),
				'desc'      => __( 'Automatically adds defer to non-critical scripts so the browser renders page layout immediately.', 'aio-tools' ),
				'fix_type'  => 'toggle',
				'fix_key'   => 'optEnableDeferJS',
				'fix_label' => __( 'Enable Defer JS', 'aio-tools' ),
			);
		} else {
			$items[] = array(
				'id'        => 'defer_js_ok',
				'category'  => 'LCP',
				'status'    => 'passed',
				'title'     => __( 'Render-blocking JavaScript controlled (Defer JS)', 'aio-tools' ),
				'desc'      => __( 'No synchronous JS bottlenecks detected in initial document rendering.', 'aio-tools' ),
				'fix_type'  => '',
				'fix_key'   => '',
				'fix_label' => '',
			);
		}

		// 5b. Render-Blocking CSS (Async CSS + Critical CSS)
		if ( $blocking_css > 0 && empty( $options['optEnableAsyncCss'] ) ) {
			$score  -= ( $blocking_css >= 5 ? 8 : 5 );
			$items[] = array(
				'id'        => 'async_css',
				'category'  => 'LCP',
				'status'    => $blocking_css >= 5 ? 'high' : 'medium',
				/* translators: %d: number of render-blocking CSS files */
				'title'     => sprintf( __( 'Found %d render-blocking CSS stylesheet(s) in <head>', 'aio-tools' ), $blocking_css ),
				'desc'      => __( 'Asynchronous CSS delivery combined with Critical CSS lets the browser paint above-the-fold layout immediately, boosting FCP & LCP.', 'aio-tools' ),
				'fix_type'  => 'toggle',
				'fix_key'   => 'optEnableAsyncCss',
				'fix_label' => __( 'Enable Async CSS', 'aio-tools' ),
			);
		} else {
			$items[] = array(
				'id'        => 'async_css_ok',
				'category'  => 'LCP',
				'status'    => 'passed',
				'title'     => __( 'Render-blocking CSS optimized (Async CSS)', 'aio-tools' ),
				'desc'      => __( 'Stylesheets are not blocking initial above-the-fold rendering.', 'aio-tools' ),
				'fix_type'  => '',
				'fix_key'   => '',
				'fix_label' => '',
			);
		}

		// 6. CLS Missing Image Dimensions
		if ( $missing_dims > 0 && empty( $options['optEnableAutoImageDims'] ) ) {
			$score  -= 10;
			$items[] = array(
				'id'        => 'auto_dims',
				'category'  => 'CLS',
				'status'    => 'high',
				/* translators: %d: number of img tags missing width/height */
				'title'     => sprintf( __( 'Detected %d <img> tag(s) missing width/height attributes (CLS risk)', 'aio-tools' ), $missing_dims ),
				'desc'      => __( 'Automatically measures and injects intrinsic dimensions for local images so browsers reserve exact layout space (CLS = 0).', 'aio-tools' ),
				'fix_type'  => 'toggle',
				'fix_key'   => 'optEnableAutoImageDims',
				'fix_label' => __( 'Auto-Fill Width/Height', 'aio-tools' ),
			);
		} else {
			$items[] = array(
				'id'        => 'auto_dims_ok',
				'category'  => 'CLS',
				'status'    => 'passed',
				'title'     => __( 'Layout stability protected against shift (CLS Image Dimensions)', 'aio-tools' ),
				'desc'      => __( 'Image tags include explicit dimensions or Auto Image Dimensions is active.', 'aio-tools' ),
				'fix_type'  => '',
				'fix_key'   => '',
				'fix_label' => '',
			);
		}

		// 7. YouTube Smart Facade
		if ( $youtube_iframes > 0 && empty( $options['optEnableYoutubeFacade'] ) ) {
			$score  -= 12;
			$items[] = array(
				'id'        => 'yt_facade',
				'category'  => 'TBT',
				'status'    => 'high',
				/* translators: %d: number of raw YouTube iframes */
				'title'     => sprintf( __( 'Detected %d embedded YouTube iframe(s) (~800KB JS per video)', 'aio-tools' ), $youtube_iframes ),
				'desc'      => __( 'Replaces heavy YouTube iframes with a lightweight thumbnail + SVG Play button, loading the player only on click.', 'aio-tools' ),
				'fix_type'  => 'toggle',
				'fix_key'   => 'optEnableYoutubeFacade',
				'fix_label' => __( 'Enable YouTube Facade', 'aio-tools' ),
			);
		}

		// 8. Google Fonts Swap
		if ( $google_fonts_noswap && empty( $options['optEnableFontSwap'] ) ) {
			$score  -= 5;
			$items[] = array(
				'id'        => 'font_swap',
				'category'  => 'LCP',
				'status'    => 'medium',
				'title'     => __( 'Google Fonts missing display=swap (causes invisible text FOIT)', 'aio-tools' ),
				'desc'      => __( 'Injects display=swap and preconnects to fonts.gstatic.com so text remains visible during webfont load.', 'aio-tools' ),
				'fix_type'  => 'toggle',
				'fix_key'   => 'optEnableFontSwap',
				'fix_label' => __( 'Optimize Google Fonts', 'aio-tools' ),
			);
		}

		if ( $google_fonts_remote && empty( $options['optSelfHostGoogleFonts'] ) ) {
			$score  -= 3;
			$items[] = array(
				'id'        => 'self_host_fonts',
				'category'  => 'LCP',
				'status'    => 'medium',
				'title'     => __( 'Google Fonts are fetched from external Google servers instead of locally hosted', 'aio-tools' ),
				'desc'      => __( 'Downloads CSS & .woff2 font files into uploads/aio-fonts/ with Preload to eliminate 3rd-party DNS/TLS lookups.', 'aio-tools' ),
				'fix_type'  => 'toggle',
				'fix_key'   => 'optSelfHostGoogleFonts',
				'fix_label' => __( 'Self-Host Google Fonts', 'aio-tools' ),
			);
		}

		// 9. Suggested Preconnect Domains
		if ( ! empty( $suggested_preconnect ) ) {
			$score  -= 4;
			$items[] = array(
				'id'        => 'preconnect_domains',
				'category'  => 'LCP',
				'status'    => 'medium',
				/* translators: %d: number of external asset origins */
				'title'     => sprintf( __( 'Detected %d external asset origin(s) without Preconnect hints', 'aio-tools' ), count( $suggested_preconnect ) ),
				'desc'      => implode( ', ', $suggested_preconnect ),
				'fix_type'  => 'preconnect',
				'fix_key'   => 'optPrefetchDomains',
				'fix_label' => __( 'Auto-Fill Preconnect', 'aio-tools' ),
				'fix_data'  => $suggested_preconnect,
			);
		}

		// 10. Browser Cache & Gzip (.htaccess)
		if ( ! empty( $htaccess_status['writable'] ) && empty( $options['optEnableBrowserCache'] ) && ! $htaccess_status['active'] ) {
			$score  -= 6;
			$items[] = array(
				'id'        => 'browser_cache',
				'category'  => 'TTFB',
				'status'    => 'medium',
				'title'     => __( 'Browser Cache (1-year Cache-Control) & Gzip compression are disabled in .htaccess', 'aio-tools' ),
				'desc'      => __( 'Resolves Google Lighthouse "Serve static assets with an efficient cache policy" warnings.', 'aio-tools' ),
				'fix_type'  => 'toggle',
				'fix_key'   => 'optEnableBrowserCache',
				'fix_label' => __( 'Enable Browser Cache', 'aio-tools' ),
			);
		}

		// 11. Safe HTML Minify
		if ( empty( $options['optEnableMinify'] ) ) {
			$score  -= 3;
			$items[] = array(
				'id'        => 'minify_html',
				'category'  => 'TTFB',
				'status'    => 'medium',
				'title'     => __( 'Safe HTML Minifier is not enabled', 'aio-tools' ),
				'desc'      => __( 'Strips redundant whitespace and HTML comments to shrink document payload size safely.', 'aio-tools' ),
				'fix_type'  => 'toggle',
				'fix_key'   => 'optEnableMinify',
				'fix_label' => __( 'Enable HTML Minify', 'aio-tools' ),
			);
		}

		// 12. WP Core Guest Bloat (Dashicons / jQuery Migrate / Emoji)
		if ( $has_dashicons_guest && empty( $options['optDisableDashicons'] ) ) {
			$score  -= 3;
			$items[] = array(
				'id'        => 'guest_dashicons',
				'category'  => 'LCP',
				'status'    => 'medium',
				'title'     => __( 'Loading unused dashicons.min.css (~36KB render-blocking CSS) for guest visitors', 'aio-tools' ),
				'desc'      => __( 'Dequeues admin Dashicons stylesheet on guest frontend views while keeping it intact for logged-in Admin Bar users.', 'aio-tools' ),
				'fix_type'  => 'toggle',
				'fix_key'   => 'optDisableDashicons',
				'fix_label' => __( 'Disable Guest Dashicons', 'aio-tools' ),
			);
		}

		if ( $has_jq_migrate_guest && empty( $options['optDisableJqueryMigrate'] ) ) {
			$score  -= 2;
			$items[] = array(
				'id'        => 'jq_migrate',
				'category'  => 'TBT',
				'status'    => 'medium',
				'title'     => __( 'Loading unnecessary jquery-migrate.min.js on the frontend', 'aio-tools' ),
				'desc'      => __( 'Modern WordPress themes and plugins no longer need legacy jQuery 1.x migration shims.', 'aio-tools' ),
				'fix_type'  => 'toggle',
				'fix_key'   => 'optDisableJqueryMigrate',
				'fix_label' => __( 'Disable jQuery Migrate', 'aio-tools' ),
			);
		}

		if ( $has_wp_emoji_guest && empty( $options['opt-perf-disable-emoji'] ) ) {
			$score  -= 2;
			$items[] = array(
				'id'        => 'wp_emoji',
				'category'  => 'TBT',
				'status'    => 'medium',
				'title'     => __( 'Loading default WordPress wp-emoji-release.min.js script', 'aio-tools' ),
				'desc'      => __( 'Modern OS and browsers render native emojis without needing extra WordPress JS.', 'aio-tools' ),
				'fix_type'  => 'toggle',
				'fix_key'   => 'opt-perf-disable-emoji',
				'fix_label' => __( 'Disable WP Emoji', 'aio-tools' ),
			);
		}

		// 13. WebP Media Backlog
		if ( $unconverted_webp > 0 ) {
			$score  -= min( 8, $unconverted_webp > 20 ? 8 : 4 );
			$items[] = array(
				'id'        => 'webp_backlog',
				'category'  => 'Media',
				'status'    => $unconverted_webp > 20 ? 'high' : 'medium',
				/* translators: %d: number of unconverted JPG/PNG images */
				'title'     => sprintf( __( '%d JPG/PNG image(s) in Media Library have not been converted to WebP', 'aio-tools' ), $unconverted_webp ),
				'desc'      => __( 'Converting to WebP cuts image weight by 30–70% and resolves "Serve images in next-gen formats".', 'aio-tools' ),
				'fix_type'  => 'bulk_webp',
				'fix_key'   => 'opt-perf-webp',
				'fix_label' => __( 'Convert to WebP Now', 'aio-tools' ),
			);
		} else {
			$items[] = array(
				'id'        => 'webp_ok',
				'category'  => 'Media',
				'status'    => 'passed',
				'title'     => __( 'Media Library optimized with next-gen WebP format', 'aio-tools' ),
				'desc'      => __( 'No unconverted JPG/PNG backlog remaining.', 'aio-tools' ),
				'fix_type'  => '',
				'fix_key'   => '',
				'fix_label' => '',
			);
		}

		if ( $hardcoded_raster_imgs > 0 && empty( $options['optEnableWebpRewrite'] ) ) {
			$score  -= 4;
			$items[] = array(
				'id'        => 'webp_rewrite',
				'category'  => 'Media',
				'status'    => 'medium',
				/* translators: %d: number of raster images on homepage */
				'title'     => sprintf( __( 'Detected %d .jpg/.png image(s) on homepage not automatically served as WebP', 'aio-tools' ), $hardcoded_raster_imgs ),
				'desc'      => __( 'Automatically rewrites image URLs in existing posts & .htaccess to .webp when WebP counterparts exist on disk.', 'aio-tools' ),
				'fix_type'  => 'toggle',
				'fix_key'   => 'optEnableWebpRewrite',
				'fix_label' => __( 'Enable Auto WebP Delivery', 'aio-tools' ),
			);
		}

		if ( class_exists( 'WooCommerce' ) && empty( $options['optOptimizeWcFragments'] ) ) {
			$score  -= 3;
			$items[] = array(
				'id'        => 'wc_fragments',
				'category'  => 'TTFB',
				'status'    => 'medium',
				'title'     => __( 'WooCommerce Cart Fragments runs background AJAX even when cart is empty', 'aio-tools' ),
				'desc'      => __( 'Skips ?wc-ajax=get_refreshed_fragments for empty-cart visitors while updating immediately when items are added.', 'aio-tools' ),
				'fix_type'  => 'toggle',
				'fix_key'   => 'optOptimizeWcFragments',
				'fix_label' => __( 'Optimize Cart Fragments', 'aio-tools' ),
			);
		}

		// 14. DOM Complexity & Database Autoload Health
		if ( $dom_nodes > 1400 ) {
			$score  -= 4;
			$items[] = array(
				'id'        => 'dom_bloat',
				'category'  => 'TBT',
				'status'    => 'medium',
				/* translators: %d: DOM element count */
				'title'     => sprintf( __( 'Large HTML DOM tree (%d elements — recommended < 1,400)', 'aio-tools' ), $dom_nodes ),
				'desc'      => __( 'Deeply nested page builder elements increase CSS/Layout recalculation cost on mobile devices.', 'aio-tools' ),
				'fix_type'  => '',
				'fix_key'   => '',
				'fix_label' => '',
			);
		}

		if ( $autoload_kb > 800 || $revisions_count > 100 ) {
			$score  -= 4;
			$items[] = array(
				'id'        => 'db_health',
				'category'  => 'DB',
				'status'    => 'medium',
				/* translators: 1: autoloaded options size in KB, 2: post revisions count */
				'title'     => sprintf( __( 'Database cleanup recommended (Autoload: %1$s KB · Revisions: %2$d)', 'aio-tools' ), number_format_i18n( $autoload_kb, 0 ), $revisions_count ),
				'desc'      => __( 'Clean post revisions, expired transients, and heavy autoloaded options in Database Cleaner to reduce per-request MySQL overhead.', 'aio-tools' ),
				'fix_type'  => 'goto_tab',
				'fix_key'   => 'db_cleaner',
				'fix_label' => __( 'Open Database Cleaner', 'aio-tools' ),
			);
		} else {
			$items[] = array(
				'id'        => 'db_health_ok',
				'category'  => 'DB',
				'status'    => 'passed',
				/* translators: 1: autoloaded options size in KB, 2: post revisions count */
				'title'     => sprintf( __( 'Lean database health (Autoload: %1$s KB · Revisions: %2$d)', 'aio-tools' ), number_format_i18n( $autoload_kb, 0 ), $revisions_count ),
				'desc'      => __( 'Autoloaded options size is well within optimal threshold (< 800 KB).', 'aio-tools' ),
				'fix_type'  => '',
				'fix_key'   => '',
				'fix_label' => '',
			);
		}

		// 14b. Persistent Object Cache (Redis / Memcached / APCu)
		$ext_obj_cache = function_exists( 'wp_using_ext_object_cache' ) && wp_using_ext_object_cache();
		if ( ! $ext_obj_cache ) {
			$score  -= 4;
			$items[] = array(
				'id'        => 'object_cache',
				'category'  => 'DB',
				'status'    => 'medium',
				'title'     => __( 'Persistent RAM Object Cache (Redis / Memcached / APCu) is not active', 'aio-tools' ),
				'desc'      => __( 'Caching WordPress objects in RAM accelerates WP-Admin, WooCommerce cart/checkout, and offloads MySQL.', 'aio-tools' ),
				'fix_type'  => 'subtab',
				'fix_key'   => 'object-cache',
				'fix_label' => __( 'Configure Object Cache', 'aio-tools' ),
			);
		} else {
			$items[] = array(
				'id'        => 'object_cache_ok',
				'category'  => 'DB',
				'status'    => 'passed',
				'title'     => __( 'Persistent RAM Object Cache is active', 'aio-tools' ),
				'desc'      => __( 'WordPress object queries are accelerated directly in RAM.', 'aio-tools' ),
				'fix_type'  => '',
				'fix_key'   => '',
				'fix_label' => '',
			);
		}

		// Sort items: high -> medium -> passed
		$order = array(
			'high'   => 1,
			'medium' => 2,
			'passed' => 3,
		);
		usort(
			$items,
			function ( $a, $b ) use ( $order ) {
				$oa = isset( $order[ $a['status'] ] ) ? $order[ $a['status'] ] : 9;
				$ob = isset( $order[ $b['status'] ] ) ? $order[ $b['status'] ] : 9;
				return $oa - $ob;
			}
		);

		$score = max( 15, min( 100, (int) $score ) );
		$grade = $score >= 90 ? 'good' : ( $score >= 55 ? 'needs_improvement' : 'poor' );

		wp_send_json_success(
			array(
				'score'          => $score,
				'grade'          => $grade,
				'scanned_at'     => current_time( 'H:i:s' ),
				'loopback_ok'    => $loopback_ok,
				'loopback_error' => $loopback_err,
				'htaccess'       => $htaccess_status,
				'metrics'        => array(
					'ttfb_ms'              => $loopback_ok ? $ttfb_ms : null,
					'cache_status'         => $cache_status,
					'object_cache_on'      => $ext_obj_cache,
					'html_kb'              => $html_kb,
					'dom_nodes'            => $dom_nodes,
					'blocking_assets'      => $blocking_css + $blocking_js,
					'blocking_css'         => $blocking_css,
					'blocking_js'          => $blocking_js,
					'missing_dims'         => $missing_dims,
					'unconverted_webp'     => $unconverted_webp,
					'autoload_kb'          => $autoload_kb,
					'revisions_count'      => $revisions_count,
					'detected_trackers'    => $detected_trackers,
					'suggested_preconnect' => $suggested_preconnect,
				),
				'items'          => $items,
			)
		);
	}

	/**
	 * Run live Google PageSpeed Insights API v5 audit (Mobile or Desktop).
	 */
	public function ajax_run_pagespeed_api() {
		check_ajax_referer( 'aio-settings-nonce', 'security' );
		if ( ! current_user_can( 'manage_options' ) ) {
			wp_send_json_error( __( 'Unauthorized', 'aio-tools' ) );
		}

		$raw_url  = isset( $_POST['url'] ) ? trim( sanitize_text_field( wp_unslash( $_POST['url'] ) ) ) : '';
		$url      = ! empty( $raw_url ) ? esc_url_raw( $raw_url ) : home_url( '/' );
		$strategy = isset( $_POST['strategy'] ) && $_POST['strategy'] === 'desktop' ? 'desktop' : 'mobile';
		$force    = ! empty( $_POST['force'] );

		$parsed = wp_parse_url( $url );
		$host   = isset( $parsed['host'] ) ? strtolower( $parsed['host'] ) : '';
		if ( empty( $host ) || ! in_array( strtolower( (string) ( $parsed['scheme'] ?? '' ) ), array( 'http', 'https' ), true ) ) {
			wp_send_json_error( __( 'Invalid URL for PageSpeed audit.', 'aio-tools' ) );
		}

		// Detect localhost / private development domains unreachable by Google's cloud servers
		$is_local = in_array( $host, array( 'localhost', '127.0.0.1', '::1' ), true )
			|| preg_match( '/\.(?:local|test|localhost|invalid|example)$/i', $host )
			|| ( filter_var( $host, FILTER_VALIDATE_IP ) !== false && filter_var( $host, FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE ) === false );

		if ( $is_local ) {
			wp_send_json_error(
				__( 'Google PageSpeed Insights cloud servers cannot reach private/local domains (localhost / .local / .test). Use the "Local Instant Audit" tab on local environments, or enter a public Internet URL to test!', 'aio-tools' )
			);
		}

		$cache_key = 'aio_psi_' . md5( $strategy . '|' . $url );
		if ( ! $force ) {
			$cached = get_transient( $cache_key );
			if ( is_array( $cached ) ) {
				$cached['cached'] = true;
				wp_send_json_success( $cached );
			}
		}

		$posted_key = isset( $_POST['api_key'] ) ? trim( sanitize_text_field( wp_unslash( $_POST['api_key'] ) ) ) : '';
		if ( $posted_key !== '' && $posted_key !== '********' ) {
			$api_key = $posted_key;
		} else {
			$api_key = AIO_Crypto::decrypt( (string) aio_get_option( 'txtPagespeedApiKey', '' ) );
		}

		$psi_locale = strtolower( substr( (string) get_locale(), 0, 2 ) );
		if ( '' === $psi_locale ) {
			$psi_locale = 'en';
		}

		$query_args = array(
			'url'      => $url,
			'strategy' => $strategy,
			'category' => 'performance',
			'locale'   => $psi_locale,
		);
		if ( ! empty( $api_key ) ) {
			$query_args['key'] = $api_key;
		}

		$endpoint = add_query_arg( $query_args, 'https://www.googleapis.com/pagespeedonline/v5/runPagespeed' );
		$response = wp_remote_get(
			$endpoint,
			array(
				'timeout' => 60,
			)
		);

		if ( is_wp_error( $response ) ) {
			/* translators: %s: error message */
			wp_send_json_error( sprintf( __( 'Error connecting to Google PageSpeed API: %s', 'aio-tools' ), $response->get_error_message() ) );
		}

		$code = wp_remote_retrieve_response_code( $response );
		$body = json_decode( wp_remote_retrieve_body( $response ), true );

		if ( $code !== 200 || empty( $body['lighthouseResult'] ) ) {
			$api_msg = isset( $body['error']['message'] ) ? sanitize_text_field( $body['error']['message'] ) : __( 'No Lighthouse data received from Google.', 'aio-tools' );
			if ( $code === 429 && empty( $api_key ) ) {
				$api_msg = __( 'Google shared IP quota temporarily reached (HTTP 429). Paste a free Google PageSpeed API Key in the field next to the URL for unlimited runs!', 'aio-tools' );
			}
			wp_send_json_error( $api_msg );
		}

		$lh        = $body['lighthouseResult'];
		$raw_score = isset( $lh['categories']['performance']['score'] ) ? (float) $lh['categories']['performance']['score'] : 0;
		$score     = (int) round( $raw_score * 100 );
		$audits    = isset( $lh['audits'] ) && is_array( $lh['audits'] ) ? $lh['audits'] : array();

		$metric_defs = array(
			'largest-contentful-paint' => 'LCP (Largest Contentful Paint)',
			'total-blocking-time'      => 'TBT (Total Blocking Time)',
			'cumulative-layout-shift'  => 'CLS (Cumulative Layout Shift)',
			'first-contentful-paint'   => 'FCP (First Contentful Paint)',
			'speed-index'              => 'Speed Index',
			'server-response-time'     => 'TTFB (Server Response)',
		);

		$cwv = array();
		foreach ( $metric_defs as $audit_id => $label ) {
			if ( empty( $audits[ $audit_id ] ) ) {
				continue;
			}
			$a       = $audits[ $audit_id ];
			$m_score = isset( $a['score'] ) && $a['score'] !== null ? (float) $a['score'] : 1.0;
			$cwv[]   = array(
				'id'    => $audit_id,
				'label' => $label,
				'value' => isset( $a['displayValue'] ) ? sanitize_text_field( $a['displayValue'] ) : '—',
				'state' => $m_score >= 0.9 ? 'good' : ( $m_score >= 0.5 ? 'average' : 'poor' ),
			);
		}

		$opportunities = array();
		foreach ( $audits as $aid => $audit ) {
			if ( ! isset( $audit['score'] ) || $audit['score'] === null || (float) $audit['score'] >= 0.9 ) {
				continue;
			}
			$type = isset( $audit['details']['type'] ) ? $audit['details']['type'] : '';
			if ( ! in_array( $type, array( 'opportunity', 'table' ), true ) ) {
				continue;
			}
			if ( in_array( $aid, array_keys( $metric_defs ), true ) ) {
				continue;
			}
			$savings = isset( $audit['details']['overallSavingsMs'] ) ? (float) $audit['details']['overallSavingsMs'] : ( isset( $audit['numericValue'] ) ? (float) $audit['numericValue'] : 0 );
			$opportunities[] = array(
				'title'   => isset( $audit['title'] ) ? sanitize_text_field( $audit['title'] ) : $aid,
				'display' => isset( $audit['displayValue'] ) ? sanitize_text_field( $audit['displayValue'] ) : '',
				'score'   => (float) $audit['score'],
				'weight'  => $savings,
			);
		}

		usort(
			$opportunities,
			function ( $a, $b ) {
				return $b['weight'] <=> $a['weight'];
			}
		);
		$opportunities = array_slice( $opportunities, 0, 6 );

		$result = array(
			'score'         => $score,
			'grade'         => $score >= 90 ? 'good' : ( $score >= 50 ? 'needs_improvement' : 'poor' ),
			'strategy'      => $strategy,
			'url'           => $url,
			'fetched_at'    => current_time( 'H:i:s d/m/Y' ),
			'cached'        => false,
			'cwv'           => $cwv,
			'opportunities' => $opportunities,
		);

		set_transient( $cache_key, $result, 10 * MINUTE_IN_SECONDS );
		wp_send_json_success( $result );
	}
}