<?php
/**
 * Settings page: connection to the AIGeschikt platform (WordPress.org build).
 *
 * Only used in the WordPress.org build, where it replaces inc/settings.php of the
 * self-hosted build. The "measure AI bots on cached pages" section talks about
 * advanced-cache.php + WP_CACHE instead of a wp-config.php include.
 *
 * @package AIGeschikt
 */

defined( 'ABSPATH' ) || exit;

add_action( 'init', 'aigeschikt_load_textdomain' );

/**
 * Load the bundled translations (languages/). A language pack from translate.wordpress.org,
 * when there is one for the site's language, takes precedence over these.
 */
function aigeschikt_load_textdomain() {
	load_plugin_textdomain( 'aigeschikt-connector', false, dirname( plugin_basename( AIGESCHIKT_FILE ) ) . '/languages' ); // phpcs:ignore PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFound -- bundled nl_NL until the translate.wordpress.org language pack covers this plugin; a downloaded pack still takes precedence.
}

add_action( 'admin_menu', 'aigeschikt_admin_menu' );
add_action( 'admin_init', 'aigeschikt_register_settings' );

/**
 * Add a top-level admin menu item so the plugin is easy to find.
 */
function aigeschikt_admin_menu() {
	add_menu_page(
		'AIGeschikt Connector',          // Page title.
		'AIGeschikt',                    // Menu label.
		'manage_options',
		'aigeschikt',
		'aigeschikt_render_settings_page',
		aigeschikt_menu_icon(),          // Own brand icon (monochrome SVG), dashicon fallback.
		58                               // Position: just below Comments / above Appearance.
	);
}

/**
 * Menu icon as a base64 data URI (WordPress tints a monochrome SVG to match the
 * admin colour scheme). Falls back to a dashicon.
 *
 * @return string
 */
function aigeschikt_menu_icon() {
	$svg = AIGESCHIKT_DIR . 'assets/menu-icon.svg';
	if ( is_readable( $svg ) ) {
		$data = file_get_contents( $svg ); // phpcs:ignore WordPress.WP.AlternativeFunctions -- local plugin asset.
		if ( $data ) {
			return 'data:image/svg+xml;base64,' . base64_encode( $data ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- WordPress expects a data URI for menu icons.
		}
	}
	return 'dashicons-visibility';
}

/**
 * Register the options.
 */
function aigeschikt_register_settings() {
	register_setting( 'aigeschikt', 'aigeschikt_site_id', array( 'sanitize_callback' => 'sanitize_text_field' ) );
	register_setting( 'aigeschikt', 'aigeschikt_api_url', array( 'sanitize_callback' => 'aigeschikt_sanitize_api_url_setting' ) );
	register_setting( 'aigeschikt', 'aigeschikt_api_key', array( 'sanitize_callback' => 'aigeschikt_sanitize_api_key_setting' ) );
	register_setting(
		'aigeschikt',
		'aigeschikt_schema_mode',
		array(
			'sanitize_callback' => function ( $v ) {
				return 'replace' === $v ? 'replace' : 'add';
			},
			'default'           => 'add',
		)
	);
}

/**
 * https only. Invalid input keeps the stored value and says so, instead of
 * silently saving an empty or insecure URL.
 *
 * @param mixed $v Input.
 * @return string
 */
function aigeschikt_sanitize_api_url_setting( $v ) {
	$schoon = aigeschikt_sanitize_api_url( $v );
	if ( '' === $schoon && '' !== trim( (string) $v ) ) {
		add_settings_error( 'aigeschikt_api_url', 'aigeschikt_api_url_https', __( 'The API URL must start with https://; the previous value was kept.', 'aigeschikt-connector' ) );
		return (string) get_option( 'aigeschikt_api_url', '' );
	}
	return $schoon;
}

/**
 * The key field is write-only: leaving it empty keeps the stored key. The stored
 * key never appears in the HTML of the settings page again.
 *
 * @param mixed $v Input.
 * @return string
 */
function aigeschikt_sanitize_api_key_setting( $v ) {
	$v = sanitize_text_field( (string) $v );
	return '' === $v ? (string) get_option( 'aigeschikt_api_key', '' ) : $v;
}

/**
 * Notices of the buttons travel through a per-user transient instead of as text
 * in the URL — a URL parameter that is shown as a success message is a free
 * social-engineering channel to an administrator.
 *
 * @param string $tekst Message.
 * @param string $terug URL to return to.
 * @return string The return URL with the flag.
 */
function aigeschikt_melding_url( $tekst, $terug ) {
	set_transient( 'aigeschikt_melding_' . get_current_user_id(), (string) $tekst, 120 );
	return add_query_arg( 'aigeschikt_melding', '1', $terug );
}

/**
 * Read and consume the current user's notice.
 *
 * @return string
 */
function aigeschikt_lees_melding() {
	$sleutel = 'aigeschikt_melding_' . get_current_user_id();
	$tekst   = get_transient( $sleutel );
	if ( false !== $tekst ) {
		delete_transient( $sleutel );
	}
	return is_string( $tekst ) ? $tekst : '';
}

/**
 * Where the buttons send you back to.
 *
 * @return string
 */
function aigeschikt_settings_back_url() {
	$back = wp_get_referer();
	return $back ? $back : admin_url( 'admin.php?page=aigeschikt' );
}

/**
 * Render the settings page.
 */
function aigeschikt_render_settings_page() {
	if ( ! current_user_can( 'manage_options' ) ) {
		return;
	}
	$aig_ok = array(
		'code'   => array(),
		'strong' => array(),
	);
	?>
	<div class="wrap">
		<h1 style="display:flex;align-items:center;gap:12px">
			<svg width="30" height="30" viewBox="0 0 740 740" fill="#151B23" aria-hidden="true">
				<path d="M252.426,17.574A60,60 0 0 1 294.853,0L470,0L470,150A120,120 0 0 0 590,270L740,270L740,445.147A60,60 0 0 1 722.426,487.574L487.574,722.426A60,60 0 0 1 445.147,740L135.208,740A15,15 0 0 1 124.602,714.393L369.497,469.497A70,70 0 0 0 369.497,370.503A70,70 0 0 0 270.503,370.503L25.607,615.398A15,15 0 0 1 0,604.792L0,294.853A60,60 0 0 1 17.574,252.426Z"/>
				<path d="M530,0L680,0A60,60 0 0 1 740,60L740,210L590,210A60,60 0 0 1 530,150Z"/>
			</svg>
			AIGeschikt Connector
		</h1>
		<p>
			<?php esc_html_e( 'Status:', 'aigeschikt-connector' ); ?>
			<strong><?php echo esc_html( aigeschikt_is_connected() ? __( 'connected', 'aigeschikt-connector' ) : __( 'not connected yet', 'aigeschikt-connector' ) ); ?></strong>
		</p>
		<?php $aig_melding = isset( $_GET['aigeschikt_melding'] ) ? aigeschikt_lees_melding() : ''; // phpcs:ignore WordPress.Security.NonceVerification -- only a flag; the message itself is read from a per-user transient. ?>
		<?php if ( '' !== $aig_melding ) : ?>
			<div class="notice notice-success is-dismissible"><p><?php echo esc_html( $aig_melding ); ?></p></div>
		<?php endif; ?>
		<?php settings_errors( 'aigeschikt_api_url' ); ?>
		<form method="post" action="options.php">
			<?php settings_fields( 'aigeschikt' ); ?>
			<table class="form-table" role="presentation">
				<tr>
					<th scope="row"><label for="aigeschikt_site_id"><?php esc_html_e( 'Site ID', 'aigeschikt-connector' ); ?></label></th>
					<td><input name="aigeschikt_site_id" id="aigeschikt_site_id" type="text" class="regular-text code" value="<?php echo esc_attr( get_option( 'aigeschikt_site_id' ) ); ?>"></td>
				</tr>
				<tr>
					<th scope="row"><label for="aigeschikt_api_url"><?php esc_html_e( 'AIGeschikt API URL', 'aigeschikt-connector' ); ?></label></th>
					<td><input name="aigeschikt_api_url" id="aigeschikt_api_url" type="url" class="regular-text" value="<?php echo esc_attr( get_option( 'aigeschikt_api_url' ) ); ?>" placeholder="https://aigeschikt.nl"></td>
				</tr>
				<tr>
					<th scope="row"><label for="aigeschikt_api_key"><?php esc_html_e( 'API key', 'aigeschikt-connector' ); ?></label></th>
					<td>
						<input name="aigeschikt_api_key" id="aigeschikt_api_key" type="password" class="regular-text" value="" autocomplete="new-password" placeholder="<?php echo esc_attr( aigeschikt_api_key() ? __( 'set — leave empty to keep it', 'aigeschikt-connector' ) : __( 'not set yet', 'aigeschikt-connector' ) ); ?>">
						<p class="description"><?php esc_html_e( 'Used for outgoing calls to the platform (for example bot events). Incoming edits use Application Passwords. The stored key is never shown; only enter something to replace it.', 'aigeschikt-connector' ); ?></p>
					</td>
				</tr>
				<tr>
					<th scope="row"><label for="aigeschikt_schema_mode"><?php esc_html_e( 'Schema mode (default)', 'aigeschikt-connector' ); ?></label></th>
					<td>
						<?php $mode = get_option( 'aigeschikt_schema_mode', 'add' ); ?>
						<select name="aigeschikt_schema_mode" id="aigeschikt_schema_mode">
							<option value="add" <?php selected( $mode, 'add' ); ?>><?php esc_html_e( 'Add — alongside Rank Math / Yoast', 'aigeschikt-connector' ); ?></option>
							<option value="replace" <?php selected( $mode, 'replace' ); ?>><?php esc_html_e( 'Replace — suppress Rank Math / Yoast schema on pages with AIGeschikt schema', 'aigeschikt-connector' ); ?></option>
						</select>
						<p class="description"><?php echo wp_kses( __( 'Can be overridden per page with the <code>mode</code> field of <code>PUT /schema/{id}</code>.', 'aigeschikt-connector' ), $aig_ok ); ?></p>
					</td>
				</tr>
			</table>
			<?php submit_button(); ?>
		</form>
		<hr>
		<h2><?php esc_html_e( 'Measure AI bots on cached pages', 'aigeschikt-connector' ); ?></h2>
		<?php
		$aig_early_on  = function_exists( 'aigeschikt_early_enabled' ) && aigeschikt_early_enabled();
		$aig_bevestigd = function_exists( 'aigeschikt_early_seen_recently' ) && aigeschikt_early_seen_recently();
		$aig_cache     = function_exists( 'aigeschikt_detect_page_cache' ) ? aigeschikt_detect_page_cache() : null;
		$aig_cache_nm  = ( $aig_cache && function_exists( 'aigeschikt_page_cache_label' ) ) ? aigeschikt_page_cache_label( $aig_cache ) : '';
		$aig_serverlvl = function_exists( 'aigeschikt_cache_is_server_level' ) && aigeschikt_cache_is_server_level( $aig_cache );
		$aig_dropped   = (int) get_option( 'aigeschikt_spool_dropped_total', 0 );
		$aig_err       = get_option( 'aigeschikt_early_config_error' );
		$aig_seen      = (int) get_option( 'aigeschikt_early_seen', 0 );
		$aig_cfg       = function_exists( 'aigeschikt_advanced_cache_status' )
			? aigeschikt_advanced_cache_status()
			: array( 'bestaat' => false, 'van_ons' => false, 'schrijfbaar_wp_content' => false, 'cache_const' => 'ontbreekt', 'backup_bestaat' => false );
		$aig_wpc_pad   = function_exists( 'aigeschikt_wp_config_path' ) ? aigeschikt_wp_config_path() : '';
		// Enabling it ourselves needs: wp-content writable, and — when WP_CACHE is not
		// set anywhere yet — a findable, writable wp-config.php (for that one line).
		// If WP_CACHE is already on (another cache plugin set it), the latter is not needed.
		$aig_kan_zelf  = ! is_multisite() && $aig_cfg['schrijfbaar_wp_content']
			&& ( 'ontbreekt' !== $aig_cfg['cache_const'] || ( '' !== $aig_wpc_pad && wp_is_writable( $aig_wpc_pad ) ) );
		?>
		<p style="max-width:720px">
			<?php if ( $aig_cache ) : ?>
				<?php
				printf(
					/* translators: %s: name of the detected page cache. */
					esc_html__( 'This site uses %s. Visitors then get a stored copy of your page and WordPress does not start for them, so this plugin does not run and an AI bot that fetches such a stored page does not show up in your numbers.', 'aigeschikt-connector' ),
					'<strong>' . esc_html( $aig_cache_nm ) . '</strong>'
				);
				?>
			<?php else : ?>
				<?php esc_html_e( 'If your site uses a caching plugin, visitors get a stored copy of your page without WordPress starting. This plugin then does not run, and AI bots that fetch such a page do not show up in your numbers.', 'aigeschikt-connector' ); ?>
			<?php endif; ?>
		</p>
		<p style="max-width:720px">
			<?php echo wp_kses( __( 'Early measurement solves that through <code>advanced-cache.php</code> — WordPress’ own, documented mechanism for early logic, the same hook caching plugins rely on. Nothing changes for your visitors: they get the same page, just as fast. If a caching plugin already has its own <code>advanced-cache.php</code>, it keeps working — our measurement is placed in front of it, not in its place.', 'aigeschikt-connector' ), $aig_ok ); ?>
		</p>

		<?php
		$aig_early_error   = function_exists( 'aigeschikt_early_flag_path' ) && @is_file( aigeschikt_early_flag_path() ); // phpcs:ignore WordPress.PHP.NoSilencedErrors -- a missing/unreadable flag simply means no error.
		$aig_breaker_trips = (int) get_option( 'aigeschikt_breaker_trips', 0 );
		?>

		<?php if ( $aig_serverlvl ) : ?>
			<div class="notice notice-warning inline" style="margin:12px 0"><p>
				<?php
				printf(
					/* translators: %s: name of the detected page cache. */
					esc_html__( 'Note: %s serves pages before PHP gets a turn. Early measurement does not see those visits either; only what does pass through PHP is counted, so your numbers remain a lower bound.', 'aigeschikt-connector' ),
					'<strong>' . esc_html( $aig_cache_nm ) . '</strong>'
				);
				?>
			</p></div>
		<?php endif; ?>
		<?php if ( $aig_early_error ) : ?>
			<div class="notice notice-error inline" style="margin:12px 0"><p>
				<?php echo wp_kses( __( '<strong>Early measurement could not load.</strong> The safety layer caught the error — your site keeps running, only the measurement is paused. You do not need to do anything.', 'aigeschikt-connector' ), $aig_ok ); ?>
			</p></div>
		<?php endif; ?>
		<?php if ( $aig_early_on ) : ?>
			<p>
				<span style="display:inline-block;padding:4px 10px;border-radius:99px;background:#edfaef;color:#116329;font-weight:600"><?php esc_html_e( 'Enabled', 'aigeschikt-connector' ); ?></span>
				<span class="description">
					<?php if ( $aig_bevestigd ) : ?>
						<?php
						printf(
							/* translators: %s: date and time of the last measured visit. */
							esc_html__( 'Working — last seen: %s.', 'aigeschikt-connector' ),
							esc_html( wp_date( 'j F Y, H:i', $aig_seen ) )
						);
						?>
					<?php else : ?>
						<?php esc_html_e( 'Not confirmed yet. Visit your site once (or wait for the first visit) and you will see here that it works.', 'aigeschikt-connector' ); ?>
					<?php endif; ?>
				</span>
			</p>
			<?php if ( $aig_breaker_trips > 0 ) : ?>
				<p class="description">
					<?php
					printf(
						esc_html(
							/* translators: %d: number of times the safety breaker paused the measurement. */
							_n(
								'Safety breaker: the measurement paused itself %d time after an interrupted measurement (for example memory pressure). Your site does not notice.',
								'Safety breaker: the measurement paused itself %d times after interrupted measurements (for example memory pressure). Your site does not notice.',
								$aig_breaker_trips,
								'aigeschikt-connector'
							)
						),
						(int) $aig_breaker_trips
					);
					?>
				</p>
			<?php endif; ?>
			<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" style="margin:10px 0">
				<input type="hidden" name="action" value="aigeschikt_early_toggle">
				<input type="hidden" name="doel" value="uit">
				<?php wp_nonce_field( 'aigeschikt_early_toggle' ); ?>
				<button type="submit" class="button"><?php esc_html_e( 'Turn off again', 'aigeschikt-connector' ); ?></button>
			</form>
		<?php else : ?>
			<p>
				<span style="display:inline-block;padding:4px 10px;border-radius:99px;background:#f0f0f1;color:#50575e;font-weight:600"><?php esc_html_e( 'Disabled', 'aigeschikt-connector' ); ?></span>
				<?php if ( $aig_cache ) : ?>
					<span class="description"><?php esc_html_e( 'Your AI bot numbers are a lower bound for now.', 'aigeschikt-connector' ); ?></span>
				<?php endif; ?>
			</p>

			<?php if ( $aig_kan_zelf ) : ?>
				<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" style="margin:14px 0">
					<input type="hidden" name="action" value="aigeschikt_early_toggle">
					<input type="hidden" name="doel" value="aan">
					<?php wp_nonce_field( 'aigeschikt_early_toggle' ); ?>
					<button type="submit" class="button button-primary"><?php esc_html_e( 'Turn on', 'aigeschikt-connector' ); ?></button>
					<span class="description" style="margin-left:10px">
						<?php
						echo wp_kses(
							'ontbreekt' === $aig_cfg['cache_const']
								? __( 'We set up <code>advanced-cache.php</code> for you (and the matching WP_CACHE setting). The same button turns it off again.', 'aigeschikt-connector' )
								: __( 'We set up <code>advanced-cache.php</code> for you. The same button turns it off again.', 'aigeschikt-connector' ),
							$aig_ok
						);
						?>
					</span>
				</form>
			<?php else : ?>
				<div class="notice notice-info inline" style="margin:14px 0">
					<p>
						<?php if ( is_multisite() ) : ?>
							<?php esc_html_e( 'Early measurement is not available on multisite networks: all sites share one wp-content folder, so a visit cannot be attributed to the right site before WordPress has started. AI crawler visits that reach WordPress are still measured.', 'aigeschikt-connector' ); ?>
						<?php elseif ( ! $aig_cfg['schrijfbaar_wp_content'] ) : ?>
							<?php
							printf(
								/* translators: %s: path of the wp-content directory. */
								esc_html__( 'The folder %s is not writable for the plugin.', 'aigeschikt-connector' ),
								'<code>' . esc_html( WP_CONTENT_DIR ) . '</code>'
							);
							?>
						<?php elseif ( 'uit' === $aig_cfg['cache_const'] ) : ?>
							<?php echo wp_kses( __( '<code>WP_CACHE</code> is explicitly turned off (by another plugin or your host) — we do not change that automatically.', 'aigeschikt-connector' ), $aig_ok ); ?>
						<?php else : ?>
							<?php echo wp_kses( __( 'We could not find wp-config.php, or could not write the <code>WP_CACHE</code> line to it.', 'aigeschikt-connector' ), $aig_ok ); ?>
						<?php endif; ?>
						<?php if ( ! is_multisite() ) : ?>
							<?php esc_html_e( 'Follow the manual steps below instead.', 'aigeschikt-connector' ); ?>
						<?php endif; ?>
					</p>
				</div>
			<?php endif; ?>
		<?php endif; ?>

		<?php if ( $aig_err ) : ?>
			<div class="notice notice-error inline" style="margin:12px 0"><p>
				<?php
				printf(
					/* translators: %s: error message. */
					esc_html__( 'The settings could not be saved: %s', 'aigeschikt-connector' ),
					esc_html( (string) $aig_err )
				);
				?>
			</p></div>
		<?php endif; ?>
		<?php if ( $aig_dropped > 0 ) : ?>
			<div class="notice notice-warning inline" style="margin:12px 0"><p>
				<?php
				printf(
					/* translators: %s: number of visits that were not counted. */
					esc_html__( '%s visits were not counted because the queue filled up. Check that WP-Cron is running and that this site is connected to AIGeschikt.', 'aigeschikt-connector' ),
					esc_html( number_format_i18n( $aig_dropped ) )
				);
				?>
			</p></div>
		<?php endif; ?>

		<?php if ( ! is_multisite() ) : ?>
		<details style="max-width:820px;margin:16px 0">
			<summary style="cursor:pointer;font-weight:600"><?php esc_html_e( 'Prefer to do it yourself? Manual steps (5 minutes)', 'aigeschikt-connector' ); ?></summary>
			<p style="margin-top:12px">
				<?php esc_html_e( 'No programming needed. There are two small pieces, and you usually do not need the second one.', 'aigeschikt-connector' ); ?>
			</p>
			<ol style="max-width:760px;line-height:1.7">
				<li><?php echo wp_kses( __( 'Log in at your hosting provider and open the <strong>file manager</strong> (often called “File Manager” or “FTP”). If you work with a web developer, ask them.', 'aigeschikt-connector' ), $aig_ok ); ?></li>
				<li><?php echo wp_kses( __( 'Open the folder of your website (recognisable by <code>wp-admin</code>, <code>wp-content</code>, <code>wp-includes</code>) and create a new file <code>advanced-cache.php</code> in <code>wp-content</code> with the contents below. <strong>Is there already an <code>advanced-cache.php</code> from another caching plugin?</strong> Do not overwrite it — contact AIGeschikt and we will chain the two for you.', 'aigeschikt-connector' ), $aig_ok ); ?></li>
				<li><?php echo wp_kses( __( 'Only if your site does not use a caching plugin yet: open <code>wp-config.php</code>, find the line with <code>require_once ABSPATH . \'wp-settings.php\';</code> near the bottom and paste the second line below directly above it, on its own line.', 'aigeschikt-connector' ), $aig_ok ); ?></li>
				<li><?php esc_html_e( 'Save, then reload this page. The status above switches to “Enabled”.', 'aigeschikt-connector' ); ?></li>
			</ol>
			<p><label for="aigeschikt_cache_file"><strong><?php esc_html_e( '1. wp-content/advanced-cache.php:', 'aigeschikt-connector' ); ?></strong></label></p>
			<textarea id="aigeschikt_cache_file" class="large-text code" rows="8" readonly style="max-width:900px"><?php echo esc_textarea( function_exists( 'aigeschikt_advanced_cache_preview' ) ? aigeschikt_advanced_cache_preview() : '' ); ?></textarea>
			<p><label for="aigeschikt_cache_const"><strong><?php esc_html_e( '2. In wp-config.php (only if you do not have a caching plugin yet):', 'aigeschikt-connector' ); ?></strong></label></p>
			<textarea id="aigeschikt_cache_const" class="large-text code" rows="2" readonly style="max-width:900px"><?php echo esc_textarea( function_exists( 'aigeschikt_cache_constant_line' ) ? aigeschikt_cache_constant_line() : '' ); ?></textarea>
			<p class="description" style="max-width:760px">
				<?php esc_html_e( 'Both pieces are generated for this installation. If you remove the plugin later they no longer do anything — your site keeps working.', 'aigeschikt-connector' ); ?>
			</p>
		</details>
		<?php endif; ?>

		<?php if ( aigeschikt_is_connected() ) : ?>
			<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" style="margin:10px 0">
				<input type="hidden" name="action" value="aigeschikt_send_now">
				<?php wp_nonce_field( 'aigeschikt_send_now' ); ?>
				<button type="submit" class="button"><?php esc_html_e( 'Send to AIGeschikt now', 'aigeschikt-connector' ); ?></button>
				<span class="description" style="margin-left:10px">
					<?php esc_html_e( 'This normally happens every hour on its own. Handy to check a test right away.', 'aigeschikt-connector' ); ?>
				</span>
			</form>
		<?php endif; ?>

		<?php
		$aig_recent = array();
		if ( function_exists( 'aigeschikt_bot_table' ) ) {
			global $wpdb;
			$aig_tab = aigeschikt_bot_table();
			if ( $wpdb->get_var( $wpdb->prepare( 'SHOW TABLES LIKE %s', $aig_tab ) ) === $aig_tab ) { // phpcs:ignore WordPress.DB.DirectDatabaseQuery -- own buffer table; must be read live.
				$aig_recent = (array) $wpdb->get_results( $wpdb->prepare( 'SELECT bot_name, detection_layer, url_path, http_status, synced, created_at FROM %i ORDER BY id DESC LIMIT 15', $aig_tab ), ARRAY_A ); // phpcs:ignore WordPress.DB.DirectDatabaseQuery -- own buffer table; must be read live.
			}
		}
		$aig_lagen = array(
			'early_php' => __( 'before the cache', 'aigeschikt-connector' ),
			'ua_match'  => __( 'via WordPress', 'aigeschikt-connector' ),
			'ip_only'   => __( 'by IP address', 'aigeschikt-connector' ),
		);
		?>
		<h3 style="margin-top:26px"><?php esc_html_e( 'Latest measured visits', 'aigeschikt-connector' ); ?></h3>
		<?php if ( empty( $aig_recent ) ) : ?>
			<p class="description"><?php esc_html_e( 'Nothing measured yet. As soon as an AI bot visits, it appears here.', 'aigeschikt-connector' ); ?></p>
		<?php else : ?>
			<table class="widefat striped" style="max-width:900px">
				<thead><tr>
					<th style="width:130px"><?php esc_html_e( 'When', 'aigeschikt-connector' ); ?></th>
					<th style="width:150px"><?php esc_html_e( 'Bot', 'aigeschikt-connector' ); ?></th>
					<th style="width:130px"><?php esc_html_e( 'Measured', 'aigeschikt-connector' ); ?></th>
					<th><?php esc_html_e( 'Page', 'aigeschikt-connector' ); ?></th>
					<th style="width:110px"><?php esc_html_e( 'Sent to AIGeschikt', 'aigeschikt-connector' ); ?></th>
				</tr></thead>
				<tbody>
				<?php foreach ( $aig_recent as $aig_r ) : ?>
					<tr>
						<td><?php echo esc_html( get_date_from_gmt( (string) $aig_r['created_at'], 'j M H:i' ) ); ?></td>
						<td><?php echo esc_html( (string) $aig_r['bot_name'] ); ?></td>
						<td>
							<?php
							$aig_l = (string) $aig_r['detection_layer'];
							echo esc_html( isset( $aig_lagen[ $aig_l ] ) ? $aig_lagen[ $aig_l ] : $aig_l );
							?>
						</td>
						<td style="word-break:break-all">
							<?php
							$aig_u = (string) $aig_r['url_path'];
							echo esc_html( strlen( $aig_u ) > 90 ? substr( $aig_u, 0, 90 ) . '…' : $aig_u );
							?>
						</td>
						<td><?php echo esc_html( 1 === (int) $aig_r['synced'] ? __( 'sent', 'aigeschikt-connector' ) : __( 'queued', 'aigeschikt-connector' ) ); ?></td>
					</tr>
				<?php endforeach; ?>
				</tbody>
			</table>
			<p class="description" style="max-width:760px">
				<?php echo wp_kses( __( '<strong>before the cache</strong> = counted before your cache served the page — those visits never reached WordPress and were invisible without this plugin. <strong>via WordPress</strong> = a visit where WordPress started normally. Every visit should appear here once.', 'aigeschikt-connector' ), $aig_ok ); ?>
			</p>
		<?php endif; ?>
		<hr>
		<h2><?php esc_html_e( 'Have changes removed', 'aigeschikt-connector' ); ?></h2>
		<p class="description" style="max-width:640px">
			<?php esc_html_e( 'Removing AIGeschikt changes goes through AIGeschikt — like the actions in your dashboard you request it here and we roll it back for you (overlays and schema back to the original; blogs to the trash). That way nothing gets lost by accident.', 'aigeschikt-connector' ); ?>
		</p>
		<?php if ( aigeschikt_is_connected() ) : ?>
		<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>">
			<input type="hidden" name="action" value="aigeschikt_request_removal">
			<?php wp_nonce_field( 'aigeschikt_request_removal' ); ?>
			<p><label><input type="checkbox" name="edits" value="1" checked> <?php esc_html_e( 'Page overlays (text edits)', 'aigeschikt-connector' ); ?></label></p>
			<p><label><input type="checkbox" name="schema" value="1" checked> <?php esc_html_e( 'Schema.org (JSON-LD)', 'aigeschikt-connector' ); ?></label></p>
			<p><label><input type="checkbox" name="blogs" value="1"> <?php esc_html_e( 'Blogs created by AIGeschikt', 'aigeschikt-connector' ); ?></label></p>
			<p><textarea name="note" rows="2" class="large-text" style="max-width:640px" placeholder="<?php echo esc_attr__( 'Note (optional)', 'aigeschikt-connector' ); ?>"></textarea></p>
			<?php submit_button( __( 'Request removal', 'aigeschikt-connector' ) ); ?>
		</form>
		<?php else : ?>
		<p class="description"><?php esc_html_e( 'Connect to AIGeschikt first (API URL + key above) to be able to send a removal request.', 'aigeschikt-connector' ); ?></p>
		<?php endif; ?>
		<hr>
		<p class="description">
			<?php esc_html_e( 'REST namespace:', 'aigeschikt-connector' ); ?> <code><?php echo esc_html( rest_url( AIGESCHIKT_REST_NS ) ); ?></code><br>
			<?php echo wp_kses( __( 'Incoming authentication: <strong>Application Passwords</strong> (Users → Profile → Application Passwords).', 'aigeschikt-connector' ), $aig_ok ); ?>
		</p>
	</div>
	<?php
}

/* --------------------------------------------------------------------- */
/* Buttons on the settings page                                           */
/* --------------------------------------------------------------------- */

add_action( 'admin_post_aigeschikt_early_toggle', 'aigeschikt_handle_early_toggle' );

/**
 * Turn early measurement on or off (advanced-cache.php + WP_CACHE). Never
 * automatic on activation: the administrator presses the button.
 */
function aigeschikt_handle_early_toggle() {
	if ( ! current_user_can( 'manage_options' ) ) {
		wp_die( esc_html__( 'You do not have permission to do that.', 'aigeschikt-connector' ), '', array( 'response' => 403 ) );
	}
	check_admin_referer( 'aigeschikt_early_toggle' );

	$back = aigeschikt_settings_back_url();
	$aan  = isset( $_POST['doel'] ) && 'aan' === sanitize_key( wp_unslash( $_POST['doel'] ) );

	if ( $aan && ! function_exists( 'aigeschikt_install_early_advanced_cache' ) ) {
		wp_safe_redirect( aigeschikt_melding_url( __( 'This plugin version cannot do that yet.', 'aigeschikt-connector' ), $back ) );
		exit;
	}

	$res = $aan ? aigeschikt_install_early_advanced_cache() : aigeschikt_remove_early_advanced_cache();
	wp_safe_redirect( aigeschikt_melding_url( $res['melding'], $back ) );
	exit;
}

add_action( 'admin_post_aigeschikt_send_now', 'aigeschikt_handle_send_now' );

/**
 * Send what is in the queue to AIGeschikt right away, instead of waiting for the
 * hourly cron.
 */
function aigeschikt_handle_send_now() {
	if ( ! current_user_can( 'manage_options' ) ) {
		wp_die( esc_html__( 'You do not have permission to do that.', 'aigeschikt-connector' ), '', array( 'response' => 403 ) );
	}
	check_admin_referer( 'aigeschikt_send_now' );

	$back = aigeschikt_settings_back_url();

	if ( ! aigeschikt_is_connected() ) {
		wp_safe_redirect( aigeschikt_melding_url( __( 'This site is not connected to AIGeschikt yet.', 'aigeschikt-connector' ), $back ) );
		exit;
	}

	if ( function_exists( 'aigeschikt_early_spool_flush' ) ) {
		aigeschikt_early_spool_flush();
	}
	$open_voor = 0;
	if ( function_exists( 'aigeschikt_bot_table' ) ) {
		global $wpdb;
		$open_voor = (int) $wpdb->get_var( $wpdb->prepare( 'SELECT COUNT(*) FROM %i WHERE synced = 0', aigeschikt_bot_table() ) ); // phpcs:ignore WordPress.DB.DirectDatabaseQuery -- own buffer table; must be read live.
	}
	if ( function_exists( 'aigeschikt_bot_sync_buffer' ) ) {
		aigeschikt_bot_sync_buffer();
	}
	$open_na = 0;
	if ( function_exists( 'aigeschikt_bot_table' ) ) {
		global $wpdb;
		$open_na = (int) $wpdb->get_var( $wpdb->prepare( 'SELECT COUNT(*) FROM %i WHERE synced = 0', aigeschikt_bot_table() ) ); // phpcs:ignore WordPress.DB.DirectDatabaseQuery -- own buffer table; must be read live.
	}

	$verstuurd = max( 0, $open_voor - $open_na );
	if ( $open_na > 0 ) {
		/* translators: 1: number of visits sent, 2: number of visits still queued. */
		$msg = sprintf( __( '%1$d visits sent, %2$d remain queued (sending failed — the next round tries again).', 'aigeschikt-connector' ), $verstuurd, $open_na );
	} elseif ( $verstuurd > 0 ) {
		/* translators: %d: number of visits sent. */
		$msg = sprintf( __( '%d visits sent to AIGeschikt.', 'aigeschikt-connector' ), $verstuurd );
	} else {
		$msg = __( 'There was nothing waiting to be sent.', 'aigeschikt-connector' );
	}
	wp_safe_redirect( aigeschikt_melding_url( $msg, $back ) );
	exit;
}

/* --------------------------------------------------------------------- */
/* Privacy policy suggestion                                              */
/* --------------------------------------------------------------------- */

add_action( 'admin_init', 'aigeschikt_add_privacy_policy_content' );

/**
 * Suggested text for Tools → Privacy → Policy Guide.
 */
function aigeschikt_add_privacy_policy_content() {
	if ( ! function_exists( 'wp_add_privacy_policy_content' ) ) {
		return;
	}
	$content = '<p class="privacy-policy-tutorial">' . esc_html__( 'The AIGeschikt Connector keeps a list of visits by AI crawlers (for example GPTBot or ClaudeBot) and, when the site is connected to AIGeschikt, sends it to AIGeschikt. Regular visitors are not recorded.', 'aigeschikt-connector' ) . '</p>'
		. '<p><strong class="privacy-policy-tutorial">' . esc_html__( 'Suggested text:', 'aigeschikt-connector' ) . '</strong> '
		. esc_html__( 'When an AI crawler visits this site we record the crawler\'s name, its IP address, the visited page (URL, and the title if the page is published), the HTTP status and the time. This is stored for up to 90 days and shared with AIGeschikt (https://aigeschikt.nl), which uses it to report on this site\'s visibility in AI search. Visits of regular visitors are not recorded.', 'aigeschikt-connector' ) . '</p>';
	wp_add_privacy_policy_content( 'AIGeschikt Connector', wp_kses_post( $content ) );
}