<?php

declare (strict_types = 1);
namespace WebCalendar\WP\Admin;

defined( 'ABSPATH' ) || exit;
use WebCalendar\WP\TimezoneCheck;
/**
 * Handles the plugin settings page.
 */
class Settings {
    /**
     * Initialize the settings page.
     */
    public function init() : void {
        add_action( 'admin_menu', [$this, 'add_menu_page'] );
        add_action( 'admin_menu', [$this, 'add_settings_submenu'], 20 );
        add_action( 'admin_init', [$this, 'register_settings'] );
        add_action( 'admin_init', [$this, 'handle_feed_token_regenerate'] );
        add_action( 'admin_enqueue_scripts', [$this, 'enqueue_assets'] );
        add_action(
            'update_option_webcal_single_event_pages',
            [$this, 'flush_rewrite_on_setting_change'],
            10,
            0
        );
        add_action(
            'add_option_webcal_single_event_pages',
            [$this, 'flush_rewrite_on_setting_change'],
            10,
            0
        );
    }

    /**
     * Flush rewrite rules when the single event pages setting changes.
     */
    public function flush_rewrite_on_setting_change() : void {
        $value = get_option( 'webcal_single_event_pages', 'off' );
        if ( is_scalar( $value ) && (string) $value !== 'off' ) {
            $event_page = new \WebCalendar\WP\SingleEventPage();
            $event_page->add_rewrite_rules();
        }
        flush_rewrite_rules();
    }

    /**
     * Enqueue admin assets.
     */
    public function enqueue_assets( string $hook ) : void {
        $allowed_hooks = [
            'toplevel_page_webcalendar',
            'webcalendar_page_webcalendar-categories',
            'webcalendar_page_webcalendar-remote',
            'webcalendar_page_webcalendar-holidays',
            'webcalendar_page_webcalendar-shared',
            'webcalendar_page_webcalendar-layers',
            'webcalendar_page_webcalendar-submissions',
            'webcalendar_page_webcalendar-places',
            'webcalendar_page_webcalendar-extra-fields'
        ];
        if ( !in_array( $hook, $allowed_hooks, true ) ) {
            return;
        }
        wp_enqueue_media();
        $asset_file = WEBCALENDAR_WP_PATH . 'build/index.asset.php';
        if ( !file_exists( $asset_file ) ) {
            return;
        }
        $assets = (require $asset_file);
        wp_enqueue_script(
            'webcalendar-admin',
            WEBCALENDAR_WP_URL . 'build/index.js',
            $assets['dependencies'],
            $assets['version'],
            true
        );
        // The admin bundle carries the bulk of the plugin's translatable JS.
        // Without this, WordPress never loads the JSON catalogue for it and
        // every __() in the React admin stays in English.
        wp_set_script_translations( 'webcalendar-admin', 'agenticdaisy-calendar', WEBCALENDAR_WP_PATH . 'languages' );
        // Build layer data for admin color matching (mirrors Plugin.php frontend logic)
        $layers_data = [];
        if ( is_user_logged_in() ) {
            $layer_service = \WebCalendar\WP\Container::get_instance()->get_layer_service();
            $layers = $layer_service->getLayersForUser( wp_get_current_user()->user_login );
            foreach ( $layers as $layer ) {
                $layer_name = $layer->layerUser();
                $wp_layer_user = get_user_by( 'login', $layer->layerUser() );
                if ( $wp_layer_user ) {
                    $layer_name = $wp_layer_user->display_name;
                } else {
                    $resource_repo = \WebCalendar\WP\Container::get_instance()->get_resource_repository();
                    $resource = $resource_repo->findByLogin( $layer->layerUser() );
                    if ( $resource !== null ) {
                        $layer_name = $resource->name();
                    }
                }
                $layers_data[] = [
                    'layerUser'      => $layer->layerUser(),
                    'color'          => $layer->color(),
                    'showDuplicates' => $layer->showDuplicates(),
                    'name'           => $layer_name,
                ];
            }
        }
        wp_localize_script( 'webcalendar-admin', 'webcalApiSettings', [
            'root'             => esc_url_raw( rest_url() ),
            'nonce'            => wp_create_nonce( 'wp_rest' ),
            'timeFormat'       => webcal_time_format(),
            'dateFormat'       => webcal_date_format(),
            'startOfWeek'      => $this->start_of_week(),
            'mapProvider'      => get_option( 'webcal_map_provider', 'osm' ),
            'googleMapsApiKey' => get_option( 'webcal_google_maps_api_key', '' ),
            'currentUser'      => wp_get_current_user()->user_login,
            'canEditOthers'    => current_user_can( 'webcal_can_edit_others' ),
            'licenseTier'      => \WebCalendar\WP\Container::get_instance()->get_license()->get_tier(),
            'upgradeUrl'       => esc_url_raw( $this->get_upgrade_url() ),
            'layers'           => $layers_data,
            'features'         => webcal_feature_flags(),
        ] );
        // wp-components is declared as a dependency rather than merely enqueued,
        // so WordPress loads it before our overrides.
        //
        // The React admin is built from @wordpress/components, and listing
        // wp-components among the *script* dependencies does not load its
        // stylesheet. WordPress 7.x enqueues that stylesheet by itself, which
        // is why this was invisible: on 6.6 -- the version this plugin declares
        // as its minimum -- it is registered and never enqueued, so every
        // component renders unstyled. The event editor is the visible casualty:
        // .components-modal__screen-overlay falls back to position: static and
        // lays out in document flow instead of covering the viewport, leaving
        // the admin menu (z-index: 9990) painted over the modal.
        wp_enqueue_style(
            'webcalendar-admin',
            WEBCALENDAR_WP_URL . 'build/index.css',
            ['wp-components'],
            $assets['version']
        );
        // Premium admin bundles. Each built file is stripped from the free build
        // via @fs_premium_only, so enqueue_premium_bundle() no-ops there.
        $premium_admin = [
            'webcalendar_page_webcalendar-remote'      => 'premium-remote-calendars',
            'webcalendar_page_webcalendar-submissions' => 'premium-submissions',
        ];
        if ( isset( $premium_admin[$hook] ) ) {
            $this->enqueue_premium_bundle( $premium_admin[$hook] );
        }
    }

    /**
     * Enqueue a premium UI bundle if it exists in this build.
     *
     * Premium bundles (build/premium-*.js) are stripped from the auto-generated
     * free build via the @fs_premium_only header, so file_exists() is false
     * there and nothing is enqueued. The bundle depends on webcalendar-admin so
     * React, webcalApiSettings, and apiFetch middleware are already available.
     *
     * @param string $name Bundle base name, e.g. "premium-remote-calendars".
     */
    private function enqueue_premium_bundle( string $name ) : void {
        $asset_path = WEBCALENDAR_WP_PATH . 'build/' . $name . '.asset.php';
        $js_path = WEBCALENDAR_WP_PATH . 'build/' . $name . '.js';
        if ( !file_exists( $asset_path ) || !file_exists( $js_path ) ) {
            return;
        }
        $asset = (require $asset_path);
        wp_enqueue_script(
            'webcal-' . $name,
            WEBCALENDAR_WP_URL . 'build/' . $name . '.js',
            array_merge( $asset['dependencies'], ['webcalendar-admin'] ),
            $asset['version'],
            true
        );
    }

    /**
     * Add the menu page.
     */
    public function add_menu_page() : void {
        add_menu_page(
            __( 'WebCalendar', 'agenticdaisy-calendar' ),
            __( 'WebCalendar', 'agenticdaisy-calendar' ),
            'webcal_can_view_calendar',
            'webcalendar',
            [$this, 'render_calendar_page'],
            'dashicons-calendar-alt'
        );
        // Rename the auto-created first submenu item to "Calendar".
        add_submenu_page(
            'webcalendar',
            __( 'Calendar', 'agenticdaisy-calendar' ),
            __( 'Calendar', 'agenticdaisy-calendar' ),
            'webcal_can_view_calendar',
            'webcalendar',
            [$this, 'render_calendar_page']
        );
        add_submenu_page(
            'webcalendar',
            __( 'Categories', 'agenticdaisy-calendar' ),
            __( 'Categories', 'agenticdaisy-calendar' ),
            'webcal_can_manage_categories',
            'webcalendar-categories',
            [$this, 'render_categories_page']
        );
        add_submenu_page(
            'webcalendar',
            __( 'Custom Fields', 'agenticdaisy-calendar' ),
            __( 'Custom Fields', 'agenticdaisy-calendar' ),
            'webcal_can_manage_categories',
            'webcalendar-extra-fields',
            [$this, 'render_extra_fields_page']
        );
        add_submenu_page(
            'webcalendar',
            __( 'Venues & Organizers', 'agenticdaisy-calendar' ),
            __( 'Venues & Organizers', 'agenticdaisy-calendar' ),
            'webcal_can_manage_categories',
            'webcalendar-places',
            [$this, 'render_places_page']
        );
        // Submissions submenu with pending count badge
        if ( webcal_feature_available( 'frontend_submission' ) && function_exists( 'webcal_fs' ) ) {
        }
    }

    /**
     * Add the Settings submenu at a later priority so it appears last.
     */
    public function add_settings_submenu() : void {
        add_submenu_page(
            'webcalendar',
            __( 'Settings', 'agenticdaisy-calendar' ),
            __( 'Settings', 'agenticdaisy-calendar' ),
            'webcal_can_manage_settings',
            'webcalendar-settings',
            [$this, 'render_settings_page']
        );
    }

    /**
     * Render the full calendar page.
     */
    public function render_calendar_page() : void {
        ?>
		<div class="wrap">
			<h1><?php 
        esc_html_e( 'Calendar', 'agenticdaisy-calendar' );
        ?></h1>
			<div id="webcalendar-admin-root"></div>
		</div>
		<?php 
    }

    /**
     * Render the submissions management page.
     */
    public function render_submissions_page() : void {
        ?>
		<div class="wrap">
			<h1><?php 
        esc_html_e( 'Event Submissions', 'agenticdaisy-calendar' );
        ?></h1>
			<div id="webcalendar-submissions-root"></div>
		</div>
		<?php 
    }

    /**
     * Render the categories management page.
     */
    public function render_categories_page() : void {
        ?>
		<div class="wrap">
			<h1><?php 
        esc_html_e( 'Categories', 'agenticdaisy-calendar' );
        ?></h1>
			<div id="webcalendar-categories-root"></div>
		</div>
		<?php 
    }

    /**
     * Render the custom event fields page.
     */
    public function render_extra_fields_page() : void {
        ?>
		<div class="wrap">
			<h1><?php 
        esc_html_e( 'Custom Fields', 'agenticdaisy-calendar' );
        ?></h1>
			<p class="description">
				<?php 
        esc_html_e( 'Extra fields that appear on every event, in addition to the built-in ones. Removing a field here hides it; the values already entered are kept, and come back if the field is added again.', 'agenticdaisy-calendar' );
        ?>
			</p>
			<div id="webcalendar-extra-fields-root"></div>
		</div>
		<?php 
    }

    /**
     * Render the venue and organizer management page.
     *
     * Both on one screen: they are the same kind of record, a site has a
     * handful of each, and two menu entries for that is two too many.
     */
    public function render_places_page() : void {
        ?>
		<div class="wrap">
			<h1><?php 
        esc_html_e( 'Venues & Organizers', 'agenticdaisy-calendar' );
        ?></h1>
			<p class="description">
				<?php 
        esc_html_e( 'Places your events happen and the people or groups running them. Events imported from The Events Calendar bring theirs with them.', 'agenticdaisy-calendar' );
        ?>
			</p>

			<h2><?php 
        esc_html_e( 'Venues', 'agenticdaisy-calendar' );
        ?></h2>
			<div id="webcalendar-venues-root"></div>

			<h2><?php 
        esc_html_e( 'Organizers', 'agenticdaisy-calendar' );
        ?></h2>
			<div id="webcalendar-organizers-root"></div>
		</div>
		<?php 
    }

    /**
     * Register plugin settings.
     */
    public function register_settings() : void {
        register_setting( 'webcalendar_settings', 'webcal_config_TIME_FORMAT', [
            'type'              => 'string',
            'sanitize_callback' => 'sanitize_text_field',
            'default'           => '12',
        ] );
        register_setting( 'webcalendar_settings', 'webcal_config_DATE_FORMAT', [
            'type'              => 'string',
            'sanitize_callback' => 'sanitize_text_field',
            'default'           => '',
        ] );
        register_setting( 'webcalendar_settings', 'webcal_calendar_page', [
            'type'              => 'integer',
            'sanitize_callback' => 'absint',
            'default'           => 0,
        ] );
        register_setting( 'webcalendar_settings', 'webcal_single_event_pages', [
            'type'              => 'string',
            'sanitize_callback' => [$this, 'sanitize_single_event_pages'],
            'default'           => 'off',
        ] );
        register_setting( 'webcalendar_settings', 'webcal_map_provider', [
            'type'              => 'string',
            'sanitize_callback' => [$this, 'sanitize_map_provider'],
            'default'           => 'osm',
        ] );
        register_setting( 'webcalendar_settings', 'webcal_google_maps_api_key', [
            'type'              => 'string',
            'sanitize_callback' => [$this, 'sanitize_google_maps_key'],
            'default'           => '',
        ] );
        register_setting( 'webcalendar_settings', 'webcal_import_max_events', [
            'type'              => 'integer',
            'sanitize_callback' => [$this, 'sanitize_import_max_events'],
            'default'           => 5000,
        ] );
        register_setting( 'webcalendar_settings', 'webcal_delete_data_on_uninstall', [
            'type'              => 'string',
            'sanitize_callback' => 'sanitize_text_field',
            'default'           => 'no',
        ] );
        register_setting( 'webcalendar_settings', 'webcal_enable_mcp', [
            'type'              => 'string',
            'sanitize_callback' => [$this, 'sanitize_enable_mcp'],
            'default'           => 'yes',
        ] );
        register_setting( 'webcalendar_settings', 'webcal_mcp_read_only', [
            'type'              => 'string',
            'sanitize_callback' => [$this, 'sanitize_yes_no'],
            'default'           => 'no',
        ] );
        register_setting( 'webcalendar_settings', 'webcal_mcp_audience', [
            'type'              => 'string',
            'sanitize_callback' => [$this, 'sanitize_mcp_audience'],
            'default'           => 'admins',
        ] );
        register_setting( 'webcalendar_settings', 'webcal_frontend_submission', [
            'type'              => 'string',
            'sanitize_callback' => [$this, 'sanitize_yes_no'],
            'default'           => 'no',
        ] );
        register_setting( 'webcalendar_settings', 'webcal_submission_requires_approval', [
            'type'              => 'string',
            'sanitize_callback' => [$this, 'sanitize_yes_no'],
            'default'           => 'yes',
        ] );
        register_setting( 'webcalendar_settings', 'webcal_submission_show_location', [
            'type'              => 'string',
            'sanitize_callback' => [$this, 'sanitize_yes_no'],
            'default'           => 'yes',
        ] );
        register_setting( 'webcalendar_settings', 'webcal_popup_share_links', [
            'type'              => 'string',
            'sanitize_callback' => [$this, 'sanitize_yes_no'],
            'default'           => 'yes',
        ] );
        register_setting( 'webcalendar_settings', 'webcal_rate_limit', [
            'type'              => 'integer',
            'sanitize_callback' => 'absint',
            'default'           => 100,
        ] );
        register_setting( 'webcalendar_settings', 'webcal_rate_limit_period', [
            'type'              => 'integer',
            'sanitize_callback' => 'absint',
            'default'           => 60,
        ] );
        // Dev override fields only where the override can apply: WP_DEBUG on
        // and a local or development environment (License::dev_override_allowed()).
        if ( $this->dev_override_allowed() ) {
            register_setting( 'webcalendar_settings', 'webcal_license_tier', [
                'type'              => 'string',
                'sanitize_callback' => 'sanitize_text_field',
                'default'           => 'free',
            ] );
            register_setting( 'webcalendar_settings', 'webcal_license_dev_override', [
                'type'              => 'string',
                'sanitize_callback' => 'sanitize_text_field',
                'default'           => 'no',
            ] );
        }
        add_settings_section(
            'webcalendar_general',
            __( 'General Settings', 'agenticdaisy-calendar' ),
            [$this, 'render_general_section'],
            'webcalendar-settings'
        );
        add_settings_section(
            'webcalendar_maps',
            __( 'Maps', 'agenticdaisy-calendar' ),
            [$this, 'render_maps_section'],
            'webcalendar-settings'
        );
        add_settings_section(
            'webcalendar_license',
            __( 'License Settings', 'agenticdaisy-calendar' ),
            [$this, 'render_license_section'],
            'webcalendar-settings'
        );
        add_settings_field(
            'webcal_time_format',
            __( 'Time Format', 'agenticdaisy-calendar' ),
            [$this, 'render_time_format_field'],
            'webcalendar-settings',
            'webcalendar_general'
        );
        add_settings_field(
            'webcal_date_format',
            __( 'Date Format', 'agenticdaisy-calendar' ),
            [$this, 'render_date_format_field'],
            'webcalendar-settings',
            'webcalendar_general'
        );
        add_settings_field(
            'webcal_single_event_pages',
            __( 'Single Event Pages', 'agenticdaisy-calendar' ),
            [$this, 'render_single_event_pages_field'],
            'webcalendar-settings',
            'webcalendar_general'
        );
        add_settings_field(
            'webcal_calendar_page',
            __( 'Calendar Page', 'agenticdaisy-calendar' ),
            [$this, 'render_calendar_page_field'],
            'webcalendar-settings',
            'webcalendar_general'
        );
        add_settings_field(
            'webcal_import_max_events',
            __( 'Import Event Limit', 'agenticdaisy-calendar' ),
            [$this, 'render_import_max_events_field'],
            'webcalendar-settings',
            'webcalendar_general'
        );
        add_settings_field(
            'webcal_rate_limit',
            __( 'API Rate Limit', 'agenticdaisy-calendar' ),
            [$this, 'render_rate_limit_field'],
            'webcalendar-settings',
            'webcalendar_general'
        );
        add_settings_field(
            'webcal_delete_data_on_uninstall',
            __( 'Delete Data on Uninstall', 'agenticdaisy-calendar' ),
            [$this, 'render_delete_data_field'],
            'webcalendar-settings',
            'webcalendar_general'
        );
        add_settings_field(
            'webcal_enable_mcp',
            __( 'AI/MCP Integration', 'agenticdaisy-calendar' ),
            [$this, 'render_enable_mcp_field'],
            'webcalendar-settings',
            'webcalendar_general'
        );
        add_settings_field(
            'webcal_mcp_read_only',
            __( 'AI Read-Only Mode', 'agenticdaisy-calendar' ),
            [$this, 'render_mcp_read_only_field'],
            'webcalendar-settings',
            'webcalendar_general'
        );
        add_settings_field(
            'webcal_mcp_audience',
            __( 'AI Access', 'agenticdaisy-calendar' ),
            [$this, 'render_mcp_audience_field'],
            'webcalendar-settings',
            'webcalendar_general'
        );
        add_settings_section(
            'webcalendar_submission',
            __( 'Frontend Event Submission', 'agenticdaisy-calendar' ),
            [$this, 'render_submission_section'],
            'webcalendar-settings'
        );
        add_settings_field(
            'webcal_frontend_submission',
            __( 'Enable Frontend Submission', 'agenticdaisy-calendar' ),
            [$this, 'render_frontend_submission_field'],
            'webcalendar-settings',
            'webcalendar_submission'
        );
        add_settings_field(
            'webcal_submission_requires_approval',
            __( 'Require Approval', 'agenticdaisy-calendar' ),
            [$this, 'render_submission_approval_field'],
            'webcalendar-settings',
            'webcalendar_submission'
        );
        add_settings_field(
            'webcal_submission_show_location',
            __( 'Location Field', 'agenticdaisy-calendar' ),
            [$this, 'render_submission_location_field'],
            'webcalendar-settings',
            'webcalendar_submission'
        );
        add_settings_field(
            'webcal_popup_share_links',
            __( 'Share Links in Popups', 'agenticdaisy-calendar' ),
            [$this, 'render_popup_share_links_field'],
            'webcalendar-settings',
            'webcalendar_general'
        );
        add_settings_field(
            'webcal_map_provider',
            __( 'Map Provider', 'agenticdaisy-calendar' ),
            [$this, 'render_map_provider_field'],
            'webcalendar-settings',
            'webcalendar_maps'
        );
        add_settings_field(
            'webcal_google_maps_api_key',
            __( 'Google Maps API Key', 'agenticdaisy-calendar' ),
            [$this, 'render_google_maps_key_field'],
            'webcalendar-settings',
            'webcalendar_maps'
        );
        add_settings_field(
            'webcal_license_status',
            __( 'License Status', 'agenticdaisy-calendar' ),
            [$this, 'render_license_status_field'],
            'webcalendar-settings',
            'webcalendar_license'
        );
        // Dev override fields only where the override can apply.
        if ( $this->dev_override_allowed() ) {
            add_settings_field(
                'webcal_license_dev_override',
                __( 'Dev Override', 'agenticdaisy-calendar' ),
                [$this, 'render_dev_override_field'],
                'webcalendar-settings',
                'webcalendar_license'
            );
            add_settings_field(
                'webcal_license_tier',
                __( 'Dev Tier', 'agenticdaisy-calendar' ),
                [$this, 'render_license_tier_field'],
                'webcalendar-settings',
                'webcalendar_license'
            );
        }
        add_settings_section(
            'webcalendar_feed',
            __( 'iCal Subscription Feed', 'agenticdaisy-calendar' ),
            [$this, 'render_feed_section'],
            'webcalendar-settings'
        );
        add_settings_field(
            'webcal_feed_urls',
            __( 'Feed URLs', 'agenticdaisy-calendar' ),
            [$this, 'render_feed_urls_field'],
            'webcalendar-settings',
            'webcalendar_feed'
        );
        add_settings_section(
            'webcalendar_system_info',
            __( 'System Info', 'agenticdaisy-calendar' ),
            [$this, 'render_system_info_section'],
            'webcalendar-settings'
        );
    }

    /**
     * Render general section description.
     */
    public function render_general_section() : void {
        echo '<p>' . esc_html__( 'Configure basic calendar behavior.', 'agenticdaisy-calendar' ) . '</p>';
        // The timezone itself lives in WordPress General Settings, but its effect
        // on stored event times is a calendar concern, so surface it here too.
        ( new TimezoneCheck() )->render_notice();
    }

    /**
     * Render maps section description.
     */
    public function render_maps_section() : void {
        echo '<p>' . esc_html__( 'Configure how event location maps are displayed on single event pages and calendar popups.', 'agenticdaisy-calendar' ) . '</p>';
    }

    /**
     * Render the map provider dropdown.
     */
    public function render_map_provider_field() : void {
        $value = get_option( 'webcal_map_provider', 'osm' );
        $value = ( is_scalar( $value ) ? (string) $value : 'osm' );
        ?>
		<select name="webcal_map_provider" id="webcal_map_provider">
			<option value="osm" <?php 
        selected( $value, 'osm' );
        ?>>
				<?php 
        esc_html_e( 'OpenStreetMap (free, no API key required)', 'agenticdaisy-calendar' );
        ?>
			</option>
			<option value="google" <?php 
        selected( $value, 'google' );
        ?>>
				<?php 
        esc_html_e( 'Google Maps (requires API key)', 'agenticdaisy-calendar' );
        ?>
			</option>
			<option value="none" <?php 
        selected( $value, 'none' );
        ?>>
				<?php 
        esc_html_e( 'None (no maps or map links)', 'agenticdaisy-calendar' );
        ?>
			</option>
		</select>
		<p class="description">
			<?php 
        esc_html_e( 'Choose which map service to embed on event pages. OpenStreetMap works out of the box with no configuration. None shows the location as text only.', 'agenticdaisy-calendar' );
        ?>
		</p>
		<?php 
        wp_enqueue_script(
            'webcal-admin-settings',
            WEBCALENDAR_WP_URL . 'includes/js/admin-settings.js',
            [],
            WEBCALENDAR_WP_VERSION,
            true
        );
        wp_localize_script( 'webcal-admin-settings', 'webcalSettings', [
            'mapsKeyError' => __( 'Please enter a Google Maps API key, or switch to OpenStreetMap.', 'agenticdaisy-calendar' ),
        ] );
    }

    /**
     * Render Google Maps API key field.
     */
    public function render_google_maps_key_field() : void {
        $raw_val = get_option( 'webcal_google_maps_api_key', '' );
        $value = ( is_scalar( $raw_val ) ? (string) $raw_val : '' );
        ?>
		<input type="text" name="webcal_google_maps_api_key" id="webcal_google_maps_api_key"
			value="<?php 
        echo esc_attr( $value );
        ?>" class="regular-text"
			placeholder="<?php 
        esc_attr_e( 'AIza...', 'agenticdaisy-calendar' );
        ?>">
		<p class="description">
			<?php 
        printf( 
            /* translators: %s: URL to Google Cloud Console */
            esc_html__( 'Enter your Google Maps Embed API key. Get one at %s. Restrict the key to the Maps Embed API and your site\'s domain for security.', 'agenticdaisy-calendar' ),
            '<a href="https://console.cloud.google.com/apis/credentials" target="_blank" rel="noopener noreferrer">Google Cloud Console</a>'
         );
        ?>
		</p>
		<?php 
    }

    /**
     * Sanitize map provider setting.
     *
     * @param mixed $value The submitted value.
     * @return string
     */
    public function sanitize_map_provider( $value ) : string {
        $value = ( is_scalar( $value ) ? (string) $value : 'osm' );
        return ( in_array( $value, ['osm', 'google', 'none'], true ) ? $value : 'osm' );
    }

    /**
     * Sanitize Google Maps API key with conditional validation.
     *
     * When the map provider is set to 'google', the API key is required.
     * If missing, an error is added and the provider falls back to 'osm'.
     *
     * @param mixed $value The submitted value.
     * @return string
     */
    public function sanitize_google_maps_key( $value ) : string {
        $value = sanitize_text_field( ( is_scalar( $value ) ? (string) $value : '' ) );
        // Nonce verified by options.php before sanitize callbacks fire.
        // phpcs:disable WordPress.Security.NonceVerification.Missing -- Settings API nonce handled by options.php
        $provider = ( isset( $_POST['webcal_map_provider'] ) && is_string( $_POST['webcal_map_provider'] ) ? sanitize_text_field( wp_unslash( $_POST['webcal_map_provider'] ) ) : 'osm' );
        // phpcs:enable WordPress.Security.NonceVerification.Missing
        if ( $provider === 'google' && $value === '' ) {
            add_settings_error(
                'webcal_google_maps_api_key',
                'webcal_maps_key_required',
                __( 'A Google Maps API key is required when Google Maps is selected as the map provider. The map provider has been reset to OpenStreetMap.', 'agenticdaisy-calendar' ),
                'error'
            );
            update_option( 'webcal_map_provider', 'osm' );
        }
        return $value;
    }

    /**
     * Render import max events field.
     */
    public function render_import_max_events_field() : void {
        $raw_val = get_option( 'webcal_import_max_events', 5000 );
        $value = ( is_scalar( $raw_val ) ? (int) $raw_val : 5000 );
        ?>
		<input type="number" name="webcal_import_max_events" value="<?php 
        echo esc_attr( (string) $value );
        ?>" min="100" max="50000" step="100" class="small-text">
		<p class="description"><?php 
        esc_html_e( 'Maximum number of events allowed per ICS file import (100–50,000).', 'agenticdaisy-calendar' );
        ?></p>
		<?php 
    }

    /**
     * Sanitize the import max events setting.
     *
     * @param mixed $value Raw input.
     * @return int Clamped between 100 and 50000.
     */
    public function sanitize_import_max_events( $value ) : int {
        $value = ( is_scalar( $value ) ? (int) $value : 5000 );
        return max( 100, min( 50000, $value ) );
    }

    /**
     * Render rate limit field.
     */
    public function render_rate_limit_field() : void {
        $raw_limit = get_option( 'webcal_rate_limit', 100 );
        $limit = ( is_scalar( $raw_limit ) ? (int) $raw_limit : 100 );
        $raw_period = get_option( 'webcal_rate_limit_period', 60 );
        $period = ( is_scalar( $raw_period ) ? (int) $raw_period : 60 );
        ?>
		<input type="number" name="webcal_rate_limit" value="<?php 
        echo esc_attr( (string) $limit );
        ?>" min="10" max="10000" step="10" class="small-text">
		<?php 
        esc_html_e( 'requests per', 'agenticdaisy-calendar' );
        ?>
		<input type="number" name="webcal_rate_limit_period" value="<?php 
        echo esc_attr( (string) $period );
        ?>" min="10" max="3600" step="10" class="small-text">
		<?php 
        esc_html_e( 'seconds', 'agenticdaisy-calendar' );
        ?>
		<p class="description"><?php 
        esc_html_e( 'Maximum REST API requests per client. Set higher for API-heavy integrations.', 'agenticdaisy-calendar' );
        ?></p>
		<?php 
    }

    /**
     * Render delete data field.
     */
    public function render_delete_data_field() : void {
        $value = get_option( 'webcal_delete_data_on_uninstall', 'no' );
        ?>
		<input type="checkbox" name="webcal_delete_data_on_uninstall" value="yes" <?php 
        checked( $value, 'yes' );
        ?>>
		<p class="description"><?php 
        esc_html_e( 'Check this to delete all calendar data when the plugin is uninstalled.', 'agenticdaisy-calendar' );
        ?></p>
		<?php 
    }

    /**
     * Render AI/MCP integration checkbox.
     */
    public function render_enable_mcp_field() : void {
        $available = webcal_feature_available( 'mcp' );
        $value = get_option( 'webcal_enable_mcp', 'yes' );
        $checked = $available && is_scalar( $value ) && (string) $value === 'yes';
        ?>
		<input type="checkbox" name="webcal_enable_mcp" value="yes" <?php 
        checked( $checked );
        ?> <?php 
        disabled( !$available );
        ?>>
		<p class="description"><?php 
        esc_html_e( 'Allow AI assistants to access calendar data via the built-in MCP server. Works on any supported WordPress version. On WP 6.9+, tools are also registered with the WordPress Abilities API.', 'agenticdaisy-calendar' );
        ?></p>
		<?php 
        if ( !$available ) {
            \webcal_upgrade_notice( 'mcp' );
        }
    }

    /**
     * Sanitize the AI/MCP integration setting.
     *
     * @param mixed $value Raw input.
     * @return string 'yes' or 'no'.
     */
    public function sanitize_enable_mcp( $value ) : string {
        return ( is_scalar( $value ) && (string) $value === 'yes' ? 'yes' : 'no' );
    }

    /**
     * Render the AI read-only mode checkbox.
     *
     * When enabled, AI assistants may view calendar data through the MCP server
     * but cannot create, update, or delete events.
     */
    public function render_mcp_read_only_field() : void {
        $mcp_raw = get_option( 'webcal_enable_mcp', 'yes' );
        $mcp_enabled = is_scalar( $mcp_raw ) && (string) $mcp_raw === 'yes';
        $value = get_option( 'webcal_mcp_read_only', 'no' );
        $checked = is_scalar( $value ) && (string) $value === 'yes';
        ?>
		<input type="checkbox" name="webcal_mcp_read_only" value="yes" <?php 
        checked( $checked );
        ?>>
		<p class="description">
			<?php 
        esc_html_e( 'Restrict AI assistants to read-only access. They can list and view events and categories, but cannot create, update, or delete events. Applies to every connected assistant.', 'agenticdaisy-calendar' );
        ?>
			<?php 
        if ( !$mcp_enabled ) {
            ?>
				<br><em><?php 
            esc_html_e( 'Takes effect once AI/MCP integration is enabled above.', 'agenticdaisy-calendar' );
            ?></em>
			<?php 
        }
        ?>
		</p>
		<?php 
    }

    /**
     * Render the AI access (audience) select.
     *
     * Controls who may connect an AI assistant to the MCP endpoint, and who sees
     * the AI setup page. Each connection is still scoped by the user's own
     * capabilities and the plugin's access filtering.
     */
    public function render_mcp_audience_field() : void {
        $raw = get_option( 'webcal_mcp_audience', 'admins' );
        $value = ( is_scalar( $raw ) && (string) $raw === 'all' ? 'all' : 'admins' );
        ?>
		<select name="webcal_mcp_audience">
			<option value="admins" <?php 
        selected( $value, 'admins' );
        ?>><?php 
        esc_html_e( 'Administrators only', 'agenticdaisy-calendar' );
        ?></option>
			<option value="all" <?php 
        selected( $value, 'all' );
        ?>><?php 
        esc_html_e( 'All calendar users', 'agenticdaisy-calendar' );
        ?></option>
		</select>
		<p class="description">
			<?php 
        esc_html_e( 'Who may connect an AI assistant to this site. "Administrators only" limits the MCP endpoint (and the AI setup page) to admins. "All calendar users" lets any user who can view the calendar connect their own assistant, scoped to their own permissions.', 'agenticdaisy-calendar' );
        ?>
		</p>
		<?php 
    }

    /**
     * Sanitize the AI access (audience) setting.
     *
     * @param mixed $value Raw input.
     * @return string 'admins' or 'all'.
     */
    public function sanitize_mcp_audience( $value ) : string {
        return ( is_scalar( $value ) && (string) $value === 'all' ? 'all' : 'admins' );
    }

    /**
     * Render submission section description.
     */
    public function render_submission_section() : void {
        $available = webcal_feature_available( 'frontend_submission' );
        if ( !$available ) {
            echo '<p>' . esc_html__( 'Allow visitors to submit events from the frontend. Requires Business plan or higher.', 'agenticdaisy-calendar' ) . '</p>';
            return;
        }
        echo '<p>' . esc_html__( 'Allow logged-in users to submit events from the frontend using the [webcalendar-submit] shortcode or Submit Event block.', 'agenticdaisy-calendar' ) . '</p>';
    }

    /**
     * Render the frontend submission enable checkbox.
     */
    public function render_frontend_submission_field() : void {
        $available = webcal_feature_available( 'frontend_submission' );
        $raw_val = get_option( 'webcal_frontend_submission', 'no' );
        $checked = is_scalar( $raw_val ) && (string) $raw_val === 'yes';
        ?>
		<input type="checkbox" name="webcal_frontend_submission" value="yes" <?php 
        checked( $checked );
        ?> <?php 
        disabled( !$available );
        ?>>
		<p class="description">
			<?php 
        if ( $available ) {
            ?>
				<?php 
            esc_html_e( 'Allow logged-in users with the "Submit" capability to submit events for review.', 'agenticdaisy-calendar' );
            ?>
			<?php 
        } else {
            ?>
				<?php 
            esc_html_e( 'This feature requires the Business plan or higher.', 'agenticdaisy-calendar' );
            ?>
			<?php 
        }
        ?>
		</p>
		<?php 
    }

    /**
     * Render the submission approval checkbox.
     */
    public function render_submission_approval_field() : void {
        $available = webcal_feature_available( 'frontend_submission' );
        $raw_val = get_option( 'webcal_submission_requires_approval', 'yes' );
        $checked = $available && is_scalar( $raw_val ) && (string) $raw_val === 'yes';
        ?>
		<input type="checkbox" name="webcal_submission_requires_approval" value="yes" <?php 
        checked( $checked );
        ?> <?php 
        disabled( !$available );
        ?>>
		<p class="description"><?php 
        esc_html_e( 'When enabled, submitted events require admin approval before appearing on the calendar. When disabled, events are published immediately.', 'agenticdaisy-calendar' );
        ?></p>
		<?php 
    }

    /**
     * Render the Calendar Page dropdown: where "Back to Calendar" leads.
     */
    public function render_calendar_page_field() : void {
        $raw = get_option( \WebCalendar\WP\CalendarPageLocator::OPTION, 0 );
        wp_dropdown_pages( [
            'name'              => 'webcal_calendar_page',
            'selected'          => ( is_scalar( $raw ) ? absint( $raw ) : 0 ),
            'show_option_none'  => esc_html__( 'Automatic (the page showing the calendar)', 'agenticdaisy-calendar' ),
            'option_none_value' => '0',
        ] );
        ?>
		<p class="description"><?php 
        esc_html_e( 'Where "Back to Calendar" on an event page leads. Visitors who clicked an event on one of your pages go back to that page either way.', 'agenticdaisy-calendar' );
        ?></p>
		<?php 
    }

    /**
     * Render the submission form's Location checkbox.
     */
    public function render_submission_location_field() : void {
        $available = webcal_feature_available( 'frontend_submission' );
        $raw_val = get_option( 'webcal_submission_show_location', 'yes' );
        $checked = !is_scalar( $raw_val ) || (string) $raw_val !== 'no';
        ?>
		<input type="hidden" name="webcal_submission_show_location" value="no">
		<label>
			<input type="checkbox" name="webcal_submission_show_location" value="yes" <?php 
        checked( $checked );
        ?> <?php 
        disabled( !$available );
        ?>>
			<?php 
        esc_html_e( 'Ask for a location on the Submit Event form', 'agenticdaisy-calendar' );
        ?>
		</label>
		<p class="description"><?php 
        esc_html_e( 'Turn off if your events are all in one place; submitters can still mention it in the description.', 'agenticdaisy-calendar' );
        ?></p>
		<?php 
    }

    /**
     * Render the popup share-links checkbox.
     */
    public function render_popup_share_links_field() : void {
        $raw_val = get_option( 'webcal_popup_share_links', 'yes' );
        $checked = !is_scalar( $raw_val ) || (string) $raw_val !== 'no';
        ?>
		<input type="hidden" name="webcal_popup_share_links" value="no">
		<label>
			<input type="checkbox" name="webcal_popup_share_links" value="yes" <?php 
        checked( $checked );
        ?>>
			<?php 
        esc_html_e( 'Show share links in the event popup on the calendar', 'agenticdaisy-calendar' );
        ?>
		</label>
		<p class="description"><?php 
        esc_html_e( "The event's own page keeps its share links either way.", 'agenticdaisy-calendar' );
        ?></p>
		<?php 
    }

    /**
     * Sanitize a yes/no setting value.
     *
     * @param mixed $value Raw input.
     * @return string 'yes' or 'no'.
     */
    public function sanitize_yes_no( $value ) : string {
        return ( is_scalar( $value ) && (string) $value === 'yes' ? 'yes' : 'no' );
    }

    /**
     * Render single event pages field.
     */
    public function render_single_event_pages_field() : void {
        $raw_val = get_option( 'webcal_single_event_pages', 'off' );
        $value = ( is_scalar( $raw_val ) ? (string) $raw_val : 'off' );
        ?>
		<select name="webcal_single_event_pages">
			<option value="off" <?php 
        selected( $value, 'off' );
        ?>><?php 
        esc_html_e( 'Off', 'agenticdaisy-calendar' );
        ?></option>
			<option value="public" <?php 
        selected( $value, 'public' );
        ?>><?php 
        esc_html_e( 'Public events only', 'agenticdaisy-calendar' );
        ?></option>
			<option value="all" <?php 
        selected( $value, 'all' );
        ?>><?php 
        esc_html_e( 'All events', 'agenticdaisy-calendar' );
        ?></option>
		</select>
		<p class="description"><?php 
        esc_html_e( 'Generate SEO-friendly permalink pages for events. "Off" is recommended for personal calendars.', 'agenticdaisy-calendar' );
        ?></p>
		<?php 
    }

    /**
     * Render license section description.
     */
    public function render_license_section() : void {
        echo '<p>' . esc_html__( 'Manage your WebCalendar license and features.', 'agenticdaisy-calendar' ) . '</p>';
    }

    /**
     * Render the license status field.
     */
    public function render_license_status_field() : void {
        $license = \WebCalendar\WP\Container::get_instance()->get_license();
        $tier = $license->get_tier();
        $tier_labels = [
            'free'     => __( 'Free', 'agenticdaisy-calendar' ),
            'starter'  => __( 'Starter', 'agenticdaisy-calendar' ),
            'business' => __( 'Business', 'agenticdaisy-calendar' ),
            'agency'   => __( 'Agency', 'agenticdaisy-calendar' ),
        ];
        $label = $tier_labels[$tier] ?? ucfirst( $tier );
        echo '<strong>' . esc_html( $label ) . '</strong>';
        if ( $license->is_freemius_active() ) {
            $fs = $license->get_freemius();
            if ( $fs !== null ) {
                $account_url = $fs->get_account_url();
                echo ' &mdash; <a href="' . esc_url( $account_url ) . '">' . esc_html__( 'Manage Account', 'agenticdaisy-calendar' ) . '</a>';
            }
        }
        if ( $tier === 'free' ) {
            $upgrade_url = $this->get_upgrade_url();
            echo '<p class="description"><a href="' . esc_url( $upgrade_url ) . '" target="_blank">' . esc_html__( 'Upgrade to unlock more features.', 'agenticdaisy-calendar' ) . '</a></p>';
        }
    }

    /**
     * Sanitize the single event pages setting to an allowed value.
     *
     * @param mixed $value Raw input.
     * @return string 'off', 'public', or 'all'.
     */
    public function sanitize_single_event_pages( $value ) : string {
        $value = ( is_scalar( $value ) ? (string) $value : 'off' );
        return ( in_array( $value, ['off', 'public', 'all'], true ) ? $value : 'off' );
    }

    /**
     * Render the dev override checkbox (WP_DEBUG only).
     */
    public function render_dev_override_field() : void {
        $value = get_option( 'webcal_license_dev_override', 'no' );
        $checked = is_scalar( $value ) && (string) $value === 'yes';
        ?>
		<input type="checkbox" name="webcal_license_dev_override" value="yes" <?php 
        checked( $checked );
        ?>>
		<p class="description"><?php 
        esc_html_e( 'Override Freemius tier with the Dev Tier dropdown below (debug mode only).', 'agenticdaisy-calendar' );
        ?></p>
		<?php 
    }

    /**
     * Render license tier dropdown (WP_DEBUG dev override only).
     */
    public function render_license_tier_field() : void {
        $raw_val = get_option( 'webcal_license_tier', 'free' );
        $value = ( is_scalar( $raw_val ) ? (string) $raw_val : 'free' );
        ?>
		<select name="webcal_license_tier">
			<option value="free" <?php 
        selected( $value, 'free' );
        ?>><?php 
        esc_html_e( 'Free', 'agenticdaisy-calendar' );
        ?></option>
			<option value="starter" <?php 
        selected( $value, 'starter' );
        ?>><?php 
        esc_html_e( 'Starter', 'agenticdaisy-calendar' );
        ?></option>
			<option value="business" <?php 
        selected( $value, 'business' );
        ?>><?php 
        esc_html_e( 'Business', 'agenticdaisy-calendar' );
        ?></option>
			<option value="agency" <?php 
        selected( $value, 'agency' );
        ?>><?php 
        esc_html_e( 'Agency', 'agenticdaisy-calendar' );
        ?></option>
		</select>
		<p class="description"><?php 
        esc_html_e( 'Simulated tier for development testing. Requires Dev Override enabled above.', 'agenticdaisy-calendar' );
        ?></p>
		<?php 
    }

    /**
     * WordPress' "week starts on" setting, 0 (Sunday) to 6.
     *
     * Mirrors Plugin.php's handling for the frontend: the option can be an
     * empty string on a fresh install, so it is validated rather than cast.
     */
    private function start_of_week() : int {
        $raw = filter_var( get_option( 'start_of_week', 0 ), FILTER_VALIDATE_INT );
        return ( false === $raw ? 0 : $raw );
    }

    /**
     * Get the upgrade URL (Freemius checkout or static fallback).
     *
     * @return string
     */
    public function get_upgrade_url() : string {
        $license = \WebCalendar\WP\Container::get_instance()->get_license();
        if ( $license->is_freemius_active() ) {
            $fs = $license->get_freemius();
            if ( $fs !== null ) {
                return $fs->get_upgrade_url();
            }
        }
        return \WebCalendar\WP\License\License::PRICING_URL;
    }

    /**
     * Whether the dev tier override can apply on this site, so its fields are
     * not offered where they would do nothing.
     */
    private function dev_override_allowed() : bool {
        return \WebCalendar\WP\Container::get_instance()->get_license()->dev_override_allowed();
    }

    /**
     * Render time format field.
     */
    public function render_time_format_field() : void {
        $value = webcal_time_format();
        ?>
		<select name="webcal_config_TIME_FORMAT">
			<option value="12" <?php 
        selected( $value, '12' );
        ?>><?php 
        esc_html_e( '12-hour (1:00 PM)', 'agenticdaisy-calendar' );
        ?></option>
			<option value="24" <?php 
        selected( $value, '24' );
        ?>><?php 
        esc_html_e( '24-hour (13:00)', 'agenticdaisy-calendar' );
        ?></option>
		</select>
		<?php 
    }

    /**
     * Render date format field.
     */
    public function render_date_format_field() : void {
        $raw_val = get_option( 'webcal_config_DATE_FORMAT', '' );
        $value = ( is_scalar( $raw_val ) ? (string) $raw_val : '' );
        // "Ymd" was this field's old pre-filled value and is read as blank
        // (see webcal_date_format()), so show it as blank too.
        if ( 'Ymd' === $value ) {
            $value = '';
        }
        $wp_raw = get_option( 'date_format', '' );
        $wp_format = ( is_scalar( $wp_raw ) ? (string) $wp_raw : '' );
        ?>
		<input type="text" name="webcal_config_DATE_FORMAT" value="<?php 
        echo esc_attr( $value );
        ?>" placeholder="<?php 
        echo esc_attr( $wp_format );
        ?>" class="regular-text">
		<p class="description"><?php 
        esc_html_e( 'Standard PHP date format (e.g., d.m.Y, m/d/Y). Leave blank to use the WordPress date format from Settings → General.', 'agenticdaisy-calendar' );
        ?></p>
		<?php 
    }

    /**
     * Render the settings page.
     */
    public function render_settings_page() : void {
        ?>
		<div class="wrap">
			<h1><?php 
        echo esc_html( get_admin_page_title() );
        ?></h1>
			<?php 
        settings_errors( 'webcal_google_maps_api_key' );
        // phpcs:disable WordPress.Security.NonceVerification.Recommended -- read-only display flag, no state change
        $regen_val = ( isset( $_GET['webcal_token_regenerated'] ) && is_string( $_GET['webcal_token_regenerated'] ) ? sanitize_text_field( wp_unslash( $_GET['webcal_token_regenerated'] ) ) : '' );
        // phpcs:enable WordPress.Security.NonceVerification.Recommended
        if ( $regen_val === '1' ) {
            ?>
				<div class="notice notice-success is-dismissible">
					<p><?php 
            esc_html_e( 'Feed token regenerated successfully. Update the personal URL in your calendar app.', 'agenticdaisy-calendar' );
            ?></p>
				</div>
				<?php 
        }
        $this->render_status_panel();
        ?>
			<form action="options.php" method="post">
				<?php 
        settings_fields( 'webcalendar_settings' );
        do_settings_sections( 'webcalendar-settings' );
        submit_button();
        ?>
			</form>
		</div>
		<?php 
    }

    /**
     * Render the calendar status panel at the top of the settings page.
     */
    public function render_status_panel() : void {
        global $wpdb;
        if ( !$wpdb instanceof \wpdb ) {
            return;
        }
        // phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
        $event_count = (int) $wpdb->get_var( $wpdb->prepare( 'SELECT COUNT(*) FROM %i', $wpdb->prefix . 'webcal_entry' ) );
        $category_count = (int) $wpdb->get_var( $wpdb->prepare( 'SELECT COUNT(*) FROM %i', $wpdb->prefix . 'webcal_categories' ) );
        $user_count = (int) $wpdb->get_var( $wpdb->prepare( 'SELECT COUNT(DISTINCT cal_login) FROM %i', $wpdb->prefix . 'webcal_entry_user' ) );
        // Only count rows with a URL — internal shared/nonuser calendars
        // (cal_url IS NULL) are not "remote" and the Remote Calendars admin
        // page filters them out.
        /** @psalm-suppress TooManyArguments -- wpdb::prepare is variadic; Psalm stub is fixed-arity. */
        $remote_count = (int) $wpdb->get_var( $wpdb->prepare( 'SELECT COUNT(*) FROM %i WHERE cal_url IS NOT NULL AND cal_url <> %s', $wpdb->prefix . 'webcal_nonuser_cals', '' ) );
        // phpcs:enable
        $next_sync = wp_next_scheduled( 'webcal_sync_remote_calendars' );
        $last_sync_raw = get_option( 'webcal_last_sync_time', '' );
        $last_sync = ( is_string( $last_sync_raw ) ? $last_sync_raw : '' );
        ?>
		<div class="webcal-status-panel" style="display:flex;flex-wrap:wrap;gap:12px;margin:20px 0;">
			<?php 
        $this->render_status_card( __( 'Total Events', 'agenticdaisy-calendar' ), number_format_i18n( $event_count ), 'calendar-alt' );
        $this->render_status_card( __( 'Categories', 'agenticdaisy-calendar' ), number_format_i18n( $category_count ), 'category' );
        $this->render_status_card( __( 'Active Users', 'agenticdaisy-calendar' ), number_format_i18n( $user_count ), 'groups' );
        $this->render_status_card( __( 'Remote Calendars', 'agenticdaisy-calendar' ), number_format_i18n( $remote_count ), 'update' );
        if ( $remote_count > 0 ) {
            if ( !empty( $last_sync ) ) {
                $sync_label = __( 'Last Sync', 'agenticdaisy-calendar' );
                $sync_display = sprintf( 
                    /* translators: %s is a human-readable time difference like "2 hours ago". */
                    __( '%s ago', 'agenticdaisy-calendar' ),
                    human_time_diff( intval( $last_sync ), time() )
                 );
            } elseif ( $next_sync !== false ) {
                $sync_label = __( 'Next Sync', 'agenticdaisy-calendar' );
                $sync_display = sprintf( 
                    /* translators: %s is a human-readable time until next sync like "45 minutes". */
                    __( 'in %s', 'agenticdaisy-calendar' ),
                    human_time_diff( time(), $next_sync )
                 );
            } else {
                $sync_label = __( 'Sync', 'agenticdaisy-calendar' );
                $sync_display = __( 'Not scheduled', 'agenticdaisy-calendar' );
            }
            $this->render_status_card( $sync_label, $sync_display, 'clock' );
        }
        ?>
		</div>
		<?php 
    }

    /**
     * Render a single status card.
     *
     * @param string $label  The card label.
     * @param string $value  The card value.
     * @param string $icon   Dashicon name (without dashicons- prefix).
     */
    private function render_status_card( string $label, string $value, string $icon ) : void {
        ?>
		<div style="background:#fff;border:1px solid #c3c4c7;border-radius:4px;padding:16px 24px;min-width:140px;text-align:center;">
			<div style="margin-bottom:8px;">
				<span class="dashicons dashicons-<?php 
        echo esc_attr( $icon );
        ?>" style="font-size:24px;width:24px;height:24px;color:#2271b1;"></span>
			</div>
			<div style="font-size:28px;font-weight:600;color:#1d2327;line-height:1.2;">
				<?php 
        echo esc_html( $value );
        ?>
			</div>
			<div style="font-size:13px;color:#646970;margin-top:4px;">
				<?php 
        echo esc_html( $label );
        ?>
			</div>
		</div>
		<?php 
    }

    /**
     * Render feed section description.
     */
    public function render_feed_section() : void {
        echo '<p>' . esc_html__( 'Subscribe to your calendar from external apps like Google Calendar, Apple Calendar, or Outlook.', 'agenticdaisy-calendar' ) . '</p>';
    }

    /**
     * Render the system info section showing dependency versions.
     */
    public function render_system_info_section() : void {
        $health = new SiteHealth();
        $fields = $health->get_version_fields();
        echo '<table class="widefat striped" style="max-width:500px;">';
        echo '<tbody>';
        foreach ( $fields as $field ) {
            echo '<tr>';
            echo '<td><strong>' . esc_html( $field['label'] ) . '</strong></td>';
            echo '<td><code>' . esc_html( $field['value'] ) . '</code></td>';
            echo '</tr>';
        }
        echo '</tbody>';
        echo '</table>';
    }

    /**
     * Render the feed URLs field with public/personal URLs and regenerate button.
     */
    public function render_feed_urls_field() : void {
        $public_url = rest_url( 'webcal/v1/feed' );
        $token_manager = new \WebCalendar\WP\FeedTokenManager();
        $user_id = get_current_user_id();
        $token = $token_manager->get_token( $user_id );
        $personal_url = add_query_arg( 'token', $token, $public_url );
        $webcal_public = preg_replace( '/^https?:/', 'webcal:', $public_url );
        $webcal_personal = preg_replace( '/^https?:/', 'webcal:', $personal_url );
        ?>
		<table class="form-table" role="presentation" style="margin:0;">
			<tr>
				<th scope="row" style="padding-left:0;"><?php 
        esc_html_e( 'Public Feed (public events only)', 'agenticdaisy-calendar' );
        ?></th>
				<td>
					<input type="text" readonly class="large-text code" value="<?php 
        echo esc_attr( (string) $public_url );
        ?>" onclick="this.select();">
					<p class="description">
						<a href="<?php 
        echo esc_url( (string) $webcal_public );
        ?>"><?php 
        esc_html_e( 'Subscribe with webcal://', 'agenticdaisy-calendar' );
        ?></a>
					</p>
				</td>
			</tr>
			<tr>
				<th scope="row" style="padding-left:0;"><?php 
        esc_html_e( 'Personal Feed (includes your private events)', 'agenticdaisy-calendar' );
        ?></th>
				<td>
					<input type="text" readonly class="large-text code" value="<?php 
        echo esc_attr( (string) $personal_url );
        ?>" onclick="this.select();">
					<p class="description">
						<a href="<?php 
        echo esc_url( (string) $webcal_personal );
        ?>"><?php 
        esc_html_e( 'Subscribe with webcal://', 'agenticdaisy-calendar' );
        ?></a>
						&mdash; <?php 
        esc_html_e( 'Keep this URL private. Anyone with it can see your private events.', 'agenticdaisy-calendar' );
        ?>
					</p>
					<?php 
        $regenerate_url = wp_nonce_url( admin_url( 'admin.php?page=webcalendar-settings&webcal_regenerate_feed_token=1' ), 'webcal_regenerate_feed_token', 'webcal_feed_token_nonce' );
        ?>
					<p>
						<a href="<?php 
        echo esc_url( $regenerate_url );
        ?>" class="button" onclick="return confirm('<?php 
        echo esc_js( __( 'Regenerate token? External apps using the old personal URL will stop working.', 'agenticdaisy-calendar' ) );
        ?>');">
							<?php 
        esc_html_e( 'Regenerate Token', 'agenticdaisy-calendar' );
        ?>
						</a>
					</p>
					<p class="description"><?php 
        esc_html_e( 'Invalidates the current personal feed URL and issues a new one. Apps using the old URL will stop syncing.', 'agenticdaisy-calendar' );
        ?></p>
				</td>
			</tr>
		</table>
		<?php 
    }

    /**
     * Handle feed token regeneration via GET link.
     */
    public function handle_feed_token_regenerate() : void {
        if ( !isset( $_GET['webcal_regenerate_feed_token'] ) ) {
            // phpcs:ignore WordPress.Security.ValidatedSanitizedInput -- only checking isset
            return;
        }
        // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized,WordPress.Security.ValidatedSanitizedInput.MissingUnslash -- sanitized + unslashed below after string narrowing
        $nonce_raw = $_GET['webcal_feed_token_nonce'] ?? '';
        if ( !is_string( $nonce_raw ) || !wp_verify_nonce( sanitize_text_field( wp_unslash( $nonce_raw ) ), 'webcal_regenerate_feed_token' ) ) {
            return;
        }
        $user_id = get_current_user_id();
        if ( $user_id === 0 ) {
            return;
        }
        $token_manager = new \WebCalendar\WP\FeedTokenManager();
        $token_manager->regenerate_token( $user_id );
        $redirect_url = add_query_arg( 'webcal_token_regenerated', '1', admin_url( 'admin.php?page=webcalendar-settings' ) );
        wp_safe_redirect( (string) $redirect_url );
        exit;
    }

}