ProcessNativeAnalytics.module.php

<?php namespace ProcessWire;

class ProcessNativeAnalytics extends Process {

    public static function getModuleInfo() {
        return [
            'title' => 'NativeAnalytics Dashboard',
            'summary' => 'Dashboard for the NativeAnalytics module.',
            'version' => 1037,
            'author' => 'Pyxios - Roych (www.pyxios.com)',
            'permission' => 'nativeanalytics-view',
            'icon' => 'area-chart',
            'requires' => ['NativeAnalytics'],
            'page' => [
                'name' => 'native-analytics',
                'title' => 'Analytics',
            ],
        ];
    }


    /**
     * Return the nonce attribute for inline admin scripts when a CSP nonce exists.
     */
    protected function getScriptNonceAttribute() {
        try {
            $analytics = $this->wire('modules')->get('NativeAnalytics');
            if($analytics && method_exists($analytics, 'getScriptNonceAttribute')) {
                return (string) $analytics->getScriptNonceAttribute();
            }
        } catch(\Throwable $e) {
        }

        $nonce = '';
        $config = $this->wire('config');

        try {
            if($config && method_exists($config, 'cspNonce')) {
                $value = $config->cspNonce();
                if(is_string($value) && $value !== '') $nonce = $value;
            }
        } catch(\Throwable $e) {
            $nonce = '';
        }

        if($nonce === '' && $config) {
            try {
                $value = $config->get('cspNonce');
                if(is_string($value) && $value !== '') $nonce = $value;
                elseif($value === null) {
                    $value = $config->cspNonce;
                    if(is_string($value) && $value !== '') $nonce = $value;
                }
            } catch(\Throwable $e) {
                $nonce = '';
            }
        }

        if($nonce === '') {
            $headers = function_exists('headers_list') ? headers_list() : [];
            if($headers) {
                $headerText = implode("\n", $headers);
                if(preg_match('#^Content-Security-Policy(?:-Report-Only)?:.*\s(?:script-src|script-src-elem)\s+(?:[^;]+\s)?\'nonce-([A-Za-z0-9+/_=-]+)\'#mi', $headerText, $m)) {
                    $nonce = (string) $m[1];
                }
            }
        }

        $nonce = trim((string) $nonce);
        if($nonce === '' || !preg_match('/^[A-Za-z0-9+\/_=-]+$/', $nonce)) return '';
        return ' nonce="' . $this->sanitizer->entities($nonce) . '"';
    }

    public function uninstall() {
        // The dashboard/process module must only remove its own admin page and registry
        // data. It must not cascade into uninstalling NativeAnalytics itself, because
        // the main module uninstall is the operation that intentionally drops stored
        // analytics tables. This keeps a direct dashboard uninstall non-destructive.
        try {
            $this->cleanupAdminPages();
            $this->cleanupModuleRegistry(['ProcessNativeAnalytics']);
            try {
                $this->wire('modules')->refresh();
            } catch(\Throwable $e) {
                $this->wire('log')->save('native-analytics', 'Modules refresh after dashboard uninstall failed: ' . $e->getMessage());
            }
        } finally {
            try {
                $session = $this->wire('session');
                if((string) $session->getFor('NativeAnalytics', 'uninstall_mode') === 'dashboard-direct') {
                    $session->removeFor('NativeAnalytics', 'uninstall_mode');
                }
            } catch(\Throwable $e) {
                // non-fatal during uninstall cleanup
            }
        }
    }

    protected function cleanupAdminPages() {
        try {
            $pages = $this->wire('pages');
            $adminRoot = (int) $this->wire('config')->adminRootPageID;
            $candidates = [];

            foreach(['native-analytics', 'analytics'] as $name) {
                try {
                    $found = $pages->find('template=admin, include=all, name=' . $name . ', sort=-id');
                    foreach($found as $item) $candidates[$item->id] = $item;
                } catch(\Throwable $e) {
                }
            }

            if($adminRoot) {
                try {
                    $admin = $pages->get($adminRoot);
                    if($admin && $admin->id) {
                        foreach($admin->children('include=all, sort=-id') as $item) {
                            $processName = '';
                            try {
                                $proc = $item->get('process');
                                if(is_object($proc)) {
                                    if(isset($proc->className)) $processName = (string) $proc->className;
                                    elseif(isset($proc->name)) $processName = (string) $proc->name;
                                    else $processName = get_class($proc);
                                } else {
                                    $processName = (string) $proc;
                                }
                            } catch(\Throwable $e) {
                                $processName = '';
                            }
                            if($item->name === 'native-analytics' || ($item->name === 'analytics' && stripos($processName, 'ProcessNativeAnalytics') !== false) || stripos($processName, 'ProcessNativeAnalytics') !== false) {
                                $candidates[$item->id] = $item;
                            }
                        }
                    }
                } catch(\Throwable $e) {
                }
            }

            foreach($candidates as $item) {
                try {
                    foreach($item->children('include=all, sort=-id') as $child) {
                        $child->delete(true);
                    }
                } catch(\Throwable $e) {
                }
                try {
                    if(method_exists($item, 'setOutputFormatting')) $item->setOutputFormatting(false);
                    if(defined('ProcessWire\Page::statusSystem') && isset($item->status)) {
                        $item->status = $item->status & ~Page::statusSystem;
                    }
                    $item->delete(true);
                } catch(\Throwable $e) {
                    $this->wire('log')->save('native-analytics', 'Dashboard admin page delete failed for #' . (int) $item->id . ': ' . $e->getMessage());
                }
            }
        } catch(\Throwable $e) {
            $this->wire('log')->save('native-analytics', 'Dashboard admin page cleanup failed: ' . $e->getMessage());
        }
    }

    protected function cleanupModuleRegistry(array $classes) {
        try {
            $db = $this->wire('database');
            $prefix = (string) ($this->wire('config')->dbTablePrefix ?? '');
            $table = $prefix . 'modules';
            foreach($classes as $class) {
                $stmt = $db->prepare('DELETE FROM `' . $table . '` WHERE `class` = :class');
                $stmt->execute([':class' => $class]);
            }
        } catch(\Throwable $e) {
            $this->wire('log')->save('native-analytics', 'Module registry cleanup failed: ' . $e->getMessage());
        }
    }

public function ___execute() {
    /** @var NativeAnalytics $analytics */
    $analytics = $this->modules->get('NativeAnalytics');
    if(!$analytics) return '<p>NativeAnalytics is not available.</p>';

    if($this->user->hasPermission('nativeanalytics-manage') && $this->input->post('pwna_action')) {
        $this->handlePostActions($analytics);
    }

    $rangeMeta = $this->getRangeMeta($analytics);
    $rangeSpec = $rangeMeta['rangeSpec'];
    $pageId = (int) $this->input->get('page_id');
    $template = $this->sanitizer->name($this->input->get('template'));
    $activeTab = $this->getActiveTab();
    $filters = [];
    if($pageId > 0) $filters['page_id'] = $pageId;
    if($template !== '') $filters['template'] = $template;

    $summary = $analytics->getSummary($rangeSpec, $filters);
    $quality = $analytics->getSessionQuality($rangeSpec, $filters);
    $current = $analytics->getCurrentVisitorsSummary((int) $analytics->realtimeWindowMinutes, $filters);
    $summary404 = $analytics->get404Summary($rangeSpec);
    $series = $analytics->getDailySeries($rangeSpec, $filters);
    $hourlySeries = $analytics->getHourlySeries($rangeMeta['rangeSpec']['end_date'] ?? date('Y-m-d'), $filters);
    $pages = $analytics->getTopPages($rangeSpec, 15, $filters);
    $landing = $analytics->getTopLandingPages($rangeSpec, 10, $filters);
    $exits = $analytics->getTopExitPages($rangeSpec, 10, $filters);
    $currentVisitors = $analytics->getCurrentVisitors((int) $analytics->realtimeWindowMinutes, 25, $filters);
    $top404 = $analytics->getTop404Paths($rangeSpec, 12);
    $referrers = $analytics->getTopReferrers($rangeSpec, 10, $filters);
    $searchTerms = $analytics->getTopSearchTerms($rangeSpec, 10, $filters);
    $campaigns = $analytics->getTopCampaigns($rangeSpec, 10, $filters);
    $channels = $analytics->getTopChannels($rangeSpec, 12, $filters);
    $attributedCampaigns = $analytics->getAttributedCampaigns($rangeSpec, 10, $filters);
    $browsers = $analytics->getBreakdown('browser', $rangeSpec, 10, $filters);
    $devices = $analytics->getBreakdown('device_type', $rangeSpec, 10, $filters);
    $os = $analytics->getBreakdown('os', $rangeSpec, 10, $filters);
    $templates = $analytics->getBreakdown('template', $rangeSpec, 20, []);
    $health = $analytics->getHealthSnapshot();
    $compareMeta = $this->getCompareMeta($analytics, $rangeMeta);

    $compareSummary = [];
    $compareQuality = [];
    $compareSummary404 = [];
    $compareSeries = [];
    if($compareMeta['enabled']) {
        $compareSummary = $analytics->getSummary($compareMeta['rangeSpec'], $filters);
        $compareQuality = $analytics->getSessionQuality($compareMeta['rangeSpec'], $filters);
        $compareSummary404 = $analytics->get404Summary($compareMeta['rangeSpec']);
        $compareSeries = $analytics->getDailySeries($compareMeta['rangeSpec'], $filters);
    }

    $eventSummary = $analytics->getEventSummary($rangeSpec, $filters);
    $eventFormSummary = $analytics->getEventSummary($rangeSpec, $filters, 'form');
    $eventDownloadSummary = $analytics->getEventSummary($rangeSpec, $filters, 'download');
    $eventContactSummary = $analytics->getEventSummary($rangeSpec, $filters, 'contact');
    $eventNavigationSummary = $analytics->getEventSummary($rangeSpec, $filters, 'navigation');
    $eventSeries = $analytics->getEventDailySeries($rangeSpec, $filters);
    $topEvents = $analytics->getTopEvents($rangeSpec, 12, $filters);
    $topDownloads = $analytics->getTopEvents($rangeSpec, 10, $filters, 'download');
    $topForms = $analytics->getTopEvents($rangeSpec, 10, $filters, 'form');
    $topContacts = $analytics->getTopEvents($rangeSpec, 10, $filters, 'contact');
    $topEventTargets = $analytics->getTopEventTargets($rangeSpec, 12, $filters);
    $goalStats = $analytics->getGoalStats($rangeSpec, $filters, true);
    $goalSeries = $analytics->getGoalDailySeries($rangeSpec, $filters);

    $this->config->styles->add($analytics->getAssetUrl('assets/admin.css') . '?v=' . rawurlencode($analytics->getAssetVersion('assets/admin.css')));
    $wireTabs = null;
    try {
        $wireTabs = $this->modules->get('JqueryWireTabs');
    } catch(\Throwable $e) {
        $wireTabs = null;
    }
    $this->headline($this->_('Analytics'));

    $out = '';
    $out .= $this->renderInlineCssFallback();
    $out .= '<div class="pwna-app">';
    $out .= $this->renderBrandHeader($analytics);
    $engagementView = $this->getEngagementView();

    $overviewContent = $this->renderToolbar($rangeMeta, $pageId, $template, $templates, 'overview');
    $overviewContent .= $this->renderCards($summary, $current, $summary404, $quality);
    $overviewContent .= '<div class="pwna-grid-2">';
    $overviewContent .= '<div class="pwna-panel"><h2>Traffic trend</h2><p class="pwna-note">Daily totals for the selected period.</p>' . $analytics->renderLineChart($series, 'views', 'Traffic trend by day', [], 'daily') . '</div>';
    $overviewContent .= '<div class="pwna-panel"><h2>Traffic by hour</h2><p class="pwna-note">Hover a point to see the hour, views, uniques and sessions for the last day in the selected range.</p>' . $analytics->renderLineChart($hourlySeries, 'views', 'Traffic by hour for selected day', [], 'hourly') . '</div>';
    $overviewContent .= '</div>';
    $overviewContent .= '<div class="pwna-grid-2">';
    $overviewContent .= $this->renderSimpleTable('Top pages', ['Page', 'Views', 'Uniques', 'Sessions'], $this->mapTopPages($pages), true);
    $overviewContent .= $this->renderCurrentVisitorsPanel($analytics, $currentVisitors, (int) $analytics->realtimeWindowMinutes);
    $overviewContent .= '</div>';
    $overviewContent .= '<div class="pwna-grid-2">';
    $overviewContent .= $this->renderSimpleTable('Top landing pages', ['Landing page', 'Sessions started'], $this->mapSessionPageRows($landing));
    $overviewContent .= $this->renderSimpleTable('Top exit pages', ['Exit page', 'Sessions ended'], $this->mapSessionPageRows($exits));
    $overviewContent .= '</div>';

    $compareContent = $this->renderCompareToolbar($rangeMeta, $compareMeta, $pageId, $template, $templates);
    $compareContent .= $this->renderComparePanel($analytics, $rangeMeta, $compareMeta, $summary, $compareSummary, $quality, $compareQuality, $summary404, $compareSummary404, $series, $compareSeries, $pageId, $template, $templates);

    $engagementMetricsContent = $this->renderEventCards($eventSummary, $eventFormSummary, $eventDownloadSummary, $eventContactSummary, $eventNavigationSummary);
    $engagementMetricsContent .= '<div class="pwna-panel"><h2>Engagement trend</h2><p class="pwna-note">Tracked actions over time for the selected period.</p>' . $analytics->renderLineChart($eventSeries, 'views', 'Tracked actions by day', ['views' => 'Events', 'uniques' => 'Uniques', 'sessions' => 'Sessions'], 'events') . '</div>';
    $engagementMetricsContent .= '<div class="pwna-grid-2">';
    $engagementMetricsContent .= $this->renderSimpleTable('Top tracked actions', ['Action', 'Events', 'Unique visitors', 'Sessions'], $this->mapEventRows($topEvents), true);
    $engagementMetricsContent .= $this->renderSimpleTable('Top action targets', ['Target', 'Group', 'Events', 'Sessions'], $this->mapEventTargetRows($topEventTargets), true);
    $engagementMetricsContent .= '</div>';
    $engagementMetricsContent .= '<div class="pwna-grid-3">';
    $engagementMetricsContent .= $this->renderSimpleTable('Top form submits', ['Action', 'Events', 'Sessions'], $this->mapEventRowsCompact($topForms));
    $engagementMetricsContent .= $this->renderSimpleTable('Top downloads', ['Action', 'Events', 'Sessions'], $this->mapEventRowsCompact($topDownloads));
    $engagementMetricsContent .= $this->renderSimpleTable('Top contact clicks', ['Action', 'Events', 'Sessions'], $this->mapEventRowsCompact($topContacts));
    $engagementMetricsContent .= '</div>';

    $engagementContent = $this->renderToolbar($rangeMeta, $pageId, $template, $templates, 'engagement');
    $engagementContent .= $this->renderEngagementSubnav($engagementView);
    $engagementContent .= $this->renderEngagementPanels($engagementMetricsContent, $this->renderEventHelperPanel(), $engagementView);

    $goalSuggestions = $this->buildGoalSuggestions($topEvents, $topEventTargets, $pages, $landing);
    $goalsContent = $this->renderToolbar($rangeMeta, $pageId, $template, $templates, 'goals');
    $goalsContent .= $this->renderGoalsIntroPanel();
    $goalsContent .= $this->renderGoalCards($goalStats);
    $goalsContent .= $this->renderGoalTrendPanel($analytics, $goalSeries, $goalStats);
    $goalsContent .= '<div class="pwna-grid-2">';
    $goalsContent .= $this->renderSimpleTable('Goals and conversion rates', ['Goal', 'Rule', 'Type', 'Conversions', 'Unique visitors', 'Sessions', 'Rate'], $this->mapGoalRows($goalStats));
    $goalsContent .= $this->renderGoalQuickGuidePanel();
    $goalsContent .= '</div>';
    $goalsContent .= $this->renderGoalBuilderPanel($analytics, $goalStats, $goalSuggestions);

    $funnelContent = $this->renderToolbar($rangeMeta, $pageId, $template, $templates, 'funnel');
    $funnelContent .= $this->renderFunnelPanel($analytics, $rangeSpec, $filters);

    $sourcesContent = $this->renderToolbar($rangeMeta, $pageId, $template, $templates, 'sources');
    $sourcesContent .= '<div class="pwna-grid-2">';
    $sourcesContent .= $this->renderSimpleTable('Channels (first-touch sessions)', ['Channel', 'Sessions', 'Unique visitors'], $this->mapSessionRows($channels));
    $sourcesContent .= $this->renderSimpleTable('Campaigns (first-touch sessions)', ['Campaign', 'Sessions', 'Unique visitors'], $this->mapSessionRows($attributedCampaigns));
    $sourcesContent .= '</div>';
    $sourcesContent .= '<div class="pwna-grid-2">';
    $sourcesContent .= $this->renderSimpleTable('Top referrers', ['Referrer', 'Views'], $this->mapGenericRows($referrers, 'referrer_host'), true);
    $sourcesContent .= $this->renderSimpleTable('Internal search terms', ['Search term', 'Views'], $this->mapGenericRows($searchTerms, 'search_term'));
    $sourcesContent .= '</div>';
    $sourcesContent .= '<div class="pwna-grid-2">';
    $sourcesContent .= $this->renderSimpleTable('Campaigns / UTM traffic', ['Campaign', 'Views', 'Uniques', 'Sessions'], $this->mapCampaignRows($campaigns));
    $sourcesContent .= $this->renderSimpleTable('404 pages', ['Missing path', 'Hits', 'Unique visitors'], $this->map404Rows($top404), true);
    $sourcesContent .= '</div>';

    $contentFilters = $template !== '' ? ['template' => $template] : [];
    $contentContent = $this->renderToolbar($rangeMeta, $pageId, $template, $templates, 'content');
    $contentContent .= $this->renderContentInsights($analytics, $rangeSpec, $contentFilters);

    $techContent = $this->renderToolbar($rangeMeta, $pageId, $template, $templates, 'tech');
    $techContent .= '<div class="pwna-grid-3">';
    $techContent .= $this->renderSimpleTable('Browsers', ['Browser', 'Views'], $this->mapGenericRows($browsers));
    $techContent .= $this->renderSimpleTable('Devices', ['Device', 'Views'], $this->mapGenericRows($devices));
    $techContent .= $this->renderSimpleTable('Operating systems', ['OS', 'Views'], $this->mapGenericRows($os));
    $techContent .= '</div>';
    $techContent .= $this->renderBotTrafficPanel($analytics->getBotTrafficByReason($rangeSpec));
    if($this->user->hasPermission('nativeanalytics-manage')) {
        $techContent .= $this->renderManageActions();
        $techContent .= $this->renderHealthPanel($health);
    }

    $tabLabels = $this->getTabLabels();
    $tabContent = $this->getTabs([
        'overview' => $overviewContent,
        'engagement' => $engagementContent,
        'goals' => $goalsContent,
        'funnel' => $funnelContent,
        'compare' => $compareContent,
        'sources' => $sourcesContent,
        'content' => $contentContent,
        'tech' => $techContent,
    ]);
    if(!isset($tabContent[$activeTab])) {
        $keys = array_keys($tabContent);
        $activeTab = $keys ? (string) reset($keys) : 'overview';
    }
    $activeContent = $tabContent[$activeTab] ?? '';

    if($wireTabs) {
        $wireTabItems = [];
        foreach($tabContent as $key => $content) {
            $wireTabItems[$tabLabels[$key] ?? ucfirst((string) $key)] = $content;
        }
        $out .= '<div id="pwna-wiretabs" class="pwna-wiretabs pwna-tabs-booting">';
        $out .= $wireTabs->render($wireTabItems);
        $out .= '</div>';
    } else {
        $out .= '<div id="pwna-wiretabs" class="pwna-wiretabs">';
        $out .= $this->renderTabNav($activeTab, $rangeMeta, $pageId, $template, $compareMeta['selected']);
        $out .= '<div class="pwna-tab-panels"><section class="pwna-tab-panel">' . $activeContent . '</section></div>';
        $out .= '</div>';
    }

    $out .= $this->renderChartTooltipScript();
    $out .= $this->renderTableSearchScript();
    $out .= $this->renderExportDropdownScript();
    $out .= $this->renderHelperToolsScript();
    $out .= $this->renderAutoRefreshScript($rangeMeta, (int) $analytics->realtimeWindowMinutes, $pageId, $template);
    $out .= $this->renderPageSearchScript();
    if($wireTabs) $out .= $this->renderWireTabsScript($activeTab, $engagementView);
    $out .= '</div>';
    return $out;
}

    public function ___executeExport() {
        /** @var NativeAnalytics $analytics */
        $analytics = $this->modules->get('NativeAnalytics');
        $rangeMeta = $this->getRangeMeta($analytics);
        $pageId = (int) $this->input->get('page_id');
        $template = $this->sanitizer->name($this->input->get('template'));
        $exportType = $this->sanitizer->name($this->input->get('export_type') ?: 'pages');
        $filters = [];
        if($pageId > 0) $filters['page_id'] = $pageId;
        if($template !== '') $filters['template'] = $template;

        $fp = fopen('php://temp', 'r+');
        fputcsv($fp, ['range', $rangeMeta['label']], ',', '"', '\\');

        if($exportType === 'referrers') {
            $rows = $analytics->getTopReferrers($rangeMeta['rangeSpec'], 500, $filters);
            fputcsv($fp, ['referrer', 'views'], ',', '"', '\\');
            foreach($rows as $row) fputcsv($fp, [$row['referrer_host'], $row['views']], ',', '"', '\\');
        } elseif($exportType === '404s') {
            $rows = $analytics->getTop404Paths($rangeMeta['rangeSpec'], 500);
            fputcsv($fp, ['path', 'hits', 'unique_visitors'], ',', '"', '\\');
            foreach($rows as $row) fputcsv($fp, [$row['path'], $row['views'], $row['uniques']], ',', '"', '\\');
        } elseif($exportType === 'events') {
            $rows = $analytics->getTopEvents($rangeMeta['rangeSpec'], 500, $filters);
            fputcsv($fp, ['event_name', 'event_group', 'event_label', 'events', 'unique_visitors', 'sessions'], ',', '"', '\\');
            foreach($rows as $row) fputcsv($fp, [$row['event_name'], $row['event_group'], $row['event_label'], $row['events'], $row['uniques'], $row['sessions']], ',', '"', '\\');
        } else {
            // Default: pages
            $rows = $analytics->getTopPages($rangeMeta['rangeSpec'], 500, $filters);
            fputcsv($fp, ['page_id', 'title', 'template', 'path', 'views', 'uniques', 'sessions'], ',', '"', '\\');
            foreach($rows as $row) fputcsv($fp, [$row['page_id'], $row['page_title'], $row['template'], $row['path'], $row['views'], $row['uniques'], $row['sessions']], ',', '"', '\\');
        }

        rewind($fp);
        $csv = stream_get_contents($fp);
        fclose($fp);
        $this->sendDownloadResponse((string) $csv, 'text/csv; charset=utf-8', 'native-analytics-' . $exportType . '-' . date('Ymd-His') . '.csv');
    }

    public function ___executePdf() {
        /** @var NativeAnalytics $analytics */
        $analytics = $this->modules->get('NativeAnalytics');
        $report = $this->buildReportData($analytics);
        $lines = $this->buildReportLines($report);
        $pdf = $this->buildSimplePdf($lines);
        $this->sendDownloadResponse($pdf, 'application/pdf', 'native-analytics-report-' . date('Ymd-His') . '.pdf');
    }

    public function ___executeDocx() {
        /** @var NativeAnalytics $analytics */
        $analytics = $this->modules->get('NativeAnalytics');
        if(!class_exists('ZipArchive')) {
            throw new WireException('ZipArchive is required for DOCX export.');
        }
        $report = $this->buildReportData($analytics);
        $lines = $this->buildReportLines($report);
        $docx = $this->buildSimpleDocx($lines);
        $this->sendDownloadResponse($docx, 'application/vnd.openxmlformats-officedocument.wordprocessingml.document', 'native-analytics-report-' . date('Ymd-His') . '.docx');
    }

    protected function sendJsonResponse(array $payload, $statusCode = 200) {
        if(function_exists('session_write_close')) @session_write_close();
        while(ob_get_level() > 0) {
            @ob_end_clean();
        }
        http_response_code((int) $statusCode);
        header('Content-Type: application/json; charset=utf-8');
        header('Cache-Control: no-store, no-cache, must-revalidate');
        header('X-Content-Type-Options: nosniff');
        echo json_encode($payload, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE | JSON_HEX_TAG | JSON_HEX_AMP | JSON_HEX_APOS | JSON_HEX_QUOT);
        exit;
    }

    public function ___executePageSearch() {
        if(!$this->user->hasPermission('nativeanalytics-view')) {
            $this->sendJsonResponse(['ok' => false, 'results' => []], 403);
        }
        /** @var NativeAnalytics $analytics */
        $analytics = $this->modules->get('NativeAnalytics');
        $term = trim((string) $this->input->get('q'));
        $limit = max(1, min(20, (int) ($this->input->get('limit') ?: 10)));
        $termLength = function_exists('mb_strlen') ? mb_strlen($term) : strlen($term);
        if($term === '' || $termLength < 2 || !$analytics || !method_exists($analytics, 'searchPagesWithData')) {
            $this->sendJsonResponse(['ok' => true, 'results' => []]);
        }
        $rows = $analytics->searchPagesWithData($term, $limit);
        $results = [];
        foreach($rows as $row) {
            $pageId = (int) ($row['page_id'] ?? 0);
            $title = trim(strip_tags((string) ($row['page_title'] ?? '')));
            $path = (string) ($row['path'] ?? '');
            $template = (string) ($row['template'] ?? '');
            $label = ($title !== '' ? $title : ($path !== '' ? $path : ('Page #' . $pageId)));
            if($path !== '') $label .= ' — ' . $path;
            $results[] = [
                'page_id' => $pageId,
                'title' => $title,
                'path' => $path,
                'template' => $template,
                'views' => (int) ($row['views'] ?? 0),
                'label' => $label,
            ];
        }
        $this->sendJsonResponse(['ok' => true, 'results' => $results]);
    }

    protected function sendDownloadResponse($content, $contentType, $filename) {
        if(function_exists('session_write_close')) @session_write_close();
        while(ob_get_level() > 0) {
            @ob_end_clean();
        }
        header('Content-Type: ' . $contentType);
        header('Content-Disposition: attachment; filename="' . str_replace('"', '', (string) $filename) . '"');
        header('Content-Length: ' . strlen((string) $content));
        header('Cache-Control: private, must-revalidate');
        header('Pragma: public');
        header('X-Content-Type-Options: nosniff');
        echo $content;
        exit;
    }

protected function buildReportData(NativeAnalytics $analytics) {
    $rangeMeta = $this->getRangeMeta($analytics);
    $pageId = (int) $this->input->get('page_id');
    $template = $this->sanitizer->name($this->input->get('template'));
    $filters = [];
    if($pageId > 0) $filters['page_id'] = $pageId;
    if($template !== '') $filters['template'] = $template;
    $compareMeta = $this->getCompareMeta($analytics, $rangeMeta);
    $report = [
        'generated_at' => $analytics->formatDisplayDateTime(date('Y-m-d H:i:s')), 
        'range_label' => $rangeMeta['label'],
        'filters_label' => $this->buildFilterLabel($filters),
        'compare_meta' => $compareMeta,
        'summary' => $analytics->getSummary($rangeMeta['rangeSpec'], $filters),
        'quality' => $analytics->getSessionQuality($rangeMeta['rangeSpec'], $filters),
        'summary404' => $analytics->get404Summary($rangeMeta['rangeSpec']),
        'top_pages' => $analytics->getTopPages($rangeMeta['rangeSpec'], 10, $filters),
        'landing' => $analytics->getTopLandingPages($rangeMeta['rangeSpec'], 10, $filters),
        'exits' => $analytics->getTopExitPages($rangeMeta['rangeSpec'], 10, $filters),
        'referrers' => $analytics->getTopReferrers($rangeMeta['rangeSpec'], 10, $filters),
        'search_terms' => $analytics->getTopSearchTerms($rangeMeta['rangeSpec'], 10, $filters),
        'campaigns' => $analytics->getTopCampaigns($rangeMeta['rangeSpec'], 10, $filters),
        'paths404' => $analytics->getTop404Paths($rangeMeta['rangeSpec'], 10),
        'event_summary' => $analytics->getEventSummary($rangeMeta['rangeSpec'], $filters),
        'top_events' => $analytics->getTopEvents($rangeMeta['rangeSpec'], 10, $filters),
        'top_event_targets' => $analytics->getTopEventTargets($rangeMeta['rangeSpec'], 10, $filters),
    ];
    if($compareMeta['enabled']) {
        $report['compare'] = [
            'label' => $compareMeta['label'],
            'summary' => $analytics->getSummary($compareMeta['rangeSpec'], $filters),
            'quality' => $analytics->getSessionQuality($compareMeta['rangeSpec'], $filters),
            'summary404' => $analytics->get404Summary($compareMeta['rangeSpec']),
        ];
    }
    return $report;
}

protected function buildReportLines(array $report) {
    $lines = [];
    $lines[] = 'NativeAnalytics report';
    $lines[] = 'Generated: ' . $report['generated_at'];
    $lines[] = 'Range: ' . $report['range_label'];
    $lines[] = 'Filters: ' . $report['filters_label'];
    $lines[] = '';
    $lines[] = 'Summary';
    $lines[] = 'Views: ' . number_format((int) ($report['summary']['views'] ?? 0));
    $lines[] = 'Unique visitors: ' . number_format((int) ($report['summary']['uniques'] ?? 0));
    $lines[] = 'Sessions: ' . number_format((int) ($report['summary']['sessions'] ?? 0));
    $lines[] = 'Avg pages / session: ' . number_format((float) ($report['quality']['avg_pages_per_session'] ?? 0), 2);
    $lines[] = 'Single-page rate: ' . number_format((float) ($report['quality']['single_page_rate'] ?? 0), 1) . '%';
    $lines[] = '404 hits: ' . number_format((int) ($report['summary404']['views'] ?? 0));
    $lines[] = 'Tracked actions: ' . number_format((int) ($report['event_summary']['events'] ?? 0));
    $lines[] = 'Action sessions: ' . number_format((int) ($report['event_summary']['sessions'] ?? 0));
    $lines[] = '';

    if(!empty($report['compare'])) {
        $lines[] = 'Comparison';
        $lines[] = 'Compared against: ' . (string) ($report['compare']['label'] ?? '');
        $lines[] = 'Views: ' . number_format((int) ($report['compare']['summary']['views'] ?? 0)) . ' (' . $this->formatDeltaText((float) ($report['summary']['views'] ?? 0), (float) ($report['compare']['summary']['views'] ?? 0)) . ')';
        $lines[] = 'Unique visitors: ' . number_format((int) ($report['compare']['summary']['uniques'] ?? 0)) . ' (' . $this->formatDeltaText((float) ($report['summary']['uniques'] ?? 0), (float) ($report['compare']['summary']['uniques'] ?? 0)) . ')';
        $lines[] = 'Sessions: ' . number_format((int) ($report['compare']['summary']['sessions'] ?? 0)) . ' (' . $this->formatDeltaText((float) ($report['summary']['sessions'] ?? 0), (float) ($report['compare']['summary']['sessions'] ?? 0)) . ')';
        $lines[] = 'Avg pages / session: ' . number_format((float) ($report['compare']['quality']['avg_pages_per_session'] ?? 0), 2) . ' (' . $this->formatDeltaText((float) ($report['quality']['avg_pages_per_session'] ?? 0), (float) ($report['compare']['quality']['avg_pages_per_session'] ?? 0), 1) . ')';
        $lines[] = 'Single-page rate: ' . number_format((float) ($report['compare']['quality']['single_page_rate'] ?? 0), 1) . '% (' . $this->formatDeltaText((float) ($report['quality']['single_page_rate'] ?? 0), (float) ($report['compare']['quality']['single_page_rate'] ?? 0), 1) . ')';
        $lines[] = '404 hits: ' . number_format((int) ($report['compare']['summary404']['views'] ?? 0)) . ' (' . $this->formatDeltaText((float) ($report['summary404']['views'] ?? 0), (float) ($report['compare']['summary404']['views'] ?? 0)) . ')';
        $lines[] = '';
    }

    $sections = [
        'Top pages' => [$report['top_pages'], 'page'],
        'Top landing pages' => [$report['landing'], 'session_page'],
        'Top exit pages' => [$report['exits'], 'session_page'],
        'Top referrers' => [$report['referrers'], 'referrer'],
        'Internal search terms' => [$report['search_terms'], 'search'],
        'Campaigns / UTM traffic' => [$report['campaigns'], 'campaign'],
        '404 pages' => [$report['paths404'], '404'],
        'Top tracked actions' => [$report['top_events'], 'event'],
        'Top action targets' => [$report['top_event_targets'], 'event_target'],
    ];

    foreach($sections as $title => $bundle) {
        [$rows, $type] = $bundle;
        $lines[] = $title;
        if(!$rows) {
            $lines[] = 'No data.';
            $lines[] = '';
            continue;
        }
        $i = 1;
        foreach($rows as $row) {
            $lines[] = $this->formatReportRow($row, $type, $i);
            $i++;
        }
        $lines[] = '';
    }

    return $lines;
}

    protected function formatReportRow(array $row, $type, $index) {
        if($type === 'page') {
            $label = trim(strip_tags((string) (($row['page_title'] ?? '') ?: ($row['path'] ?? ''))));
            return $index . '. ' . $label . ' | ' . (string) ($row['path'] ?? '/') . ' | views ' . (int) ($row['views'] ?? 0) . ', uniques ' . (int) ($row['uniques'] ?? 0) . ', sessions ' . (int) ($row['sessions'] ?? 0);
        }
        if($type === 'session_page') {
            $label = trim(strip_tags((string) (($row['page_title'] ?? '') ?: ($row['path'] ?? ''))));
            return $index . '. ' . $label . ' | ' . (string) ($row['path'] ?? '/') . ' | sessions ' . (int) ($row['sessions'] ?? 0);
        }
        if($type === 'referrer') {
            return $index . '. ' . (string) ($row['referrer_host'] ?? '—') . ' | views ' . (int) ($row['views'] ?? 0);
        }
        if($type === 'search') {
            return $index . '. ' . (string) ($row['search_term'] ?? '—') . ' | views ' . (int) ($row['views'] ?? 0);
        }
        if($type === 'campaign') {
            return $index . '. ' . (string) ($row['label'] ?? '—') . ' | views ' . (int) ($row['views'] ?? 0) . ', uniques ' . (int) ($row['uniques'] ?? 0) . ', sessions ' . (int) ($row['sessions'] ?? 0);
        }
        if($type === '404') {
            return $index . '. ' . (string) ($row['path'] ?? '—') . ' | hits ' . (int) ($row['views'] ?? 0) . ', uniques ' . (int) ($row['uniques'] ?? 0);
        }
        if($type === 'event') {
            return $index . '. ' . (string) ($row['event_group'] ?? 'custom') . ' / ' . (string) ($row['event_name'] ?? 'event') . ' | ' . (string) ($row['event_label'] ?? '') . ' | events ' . (int) ($row['events'] ?? 0) . ', sessions ' . (int) ($row['sessions'] ?? 0);
        }
        if($type === 'event_target') {
            return $index . '. ' . (string) ($row['event_target'] ?? '—') . ' | ' . (string) ($row['event_group'] ?? '') . ' | events ' . (int) ($row['events'] ?? 0) . ', sessions ' . (int) ($row['sessions'] ?? 0);
        }
        return $index . '. ' . json_encode($row);
    }

    protected function buildSimplePdf(array $lines) {
        $pages = array_chunk($lines, 44);
        $objects = [];
        $objects[1] = '<< /Type /Font /Subtype /Type1 /BaseFont /Helvetica /Encoding /WinAnsiEncoding >>';
        $objects[2] = 'PAGES_PLACEHOLDER';
        $pageNum = 3;
        $kids = [];

        foreach($pages as $pageLines) {
            $pageObj = $pageNum;
            $contentObj = $pageNum + 1;
            $kids[] = $pageObj . ' 0 R';
            $stream = "BT
/F1 10 Tf
14 TL
50 790 Td
";
            foreach($pageLines as $line) {
                $stream .= '(' . $this->escapePdfText($this->toPdfEncoding($line)) . ") Tj
T*
";
            }
            $stream .= "ET";
            $objects[$pageObj] = '<< /Type /Page /Parent 2 0 R /MediaBox [0 0 595 842] /Resources << /Font << /F1 1 0 R >> >> /Contents ' . $contentObj . ' 0 R >>';
            $objects[$contentObj] = '<< /Length ' . strlen($stream) . " >>
stream
" . $stream . "
endstream";
            $pageNum += 2;
        }

        $objects[2] = '<< /Type /Pages /Kids [' . implode(' ', $kids) . '] /Count ' . count($kids) . ' >>';
        $catalogNum = $pageNum;
        $objects[$catalogNum] = '<< /Type /Catalog /Pages 2 0 R >>';

        ksort($objects);
        $pdf = "%PDF-1.4
";
        $offsets = [0];
        foreach($objects as $num => $obj) {
            $offsets[$num] = strlen($pdf);
            $pdf .= $num . " 0 obj
" . $obj . "
endobj
";
        }
        $xrefPos = strlen($pdf);
        $pdf .= 'xref' . "
0 " . (count($objects) + 1) . "
";
        $pdf .= sprintf("%010d %05d f 
", 0, 65535);
        for($i = 1; $i <= count($objects); $i++) {
            $pdf .= sprintf("%010d %05d n 
", $offsets[$i], 0);
        }
        $pdf .= 'trailer << /Size ' . (count($objects) + 1) . ' /Root ' . $catalogNum . " 0 R >>
startxref
" . $xrefPos . "
%%EOF";
        return $pdf;
    }

    protected function buildSimpleDocx(array $lines) {
        $tmp = tempnam(sys_get_temp_dir(), 'pwna_docx_');
        $zip = new \ZipArchive();
        $zip->open($tmp, \ZipArchive::OVERWRITE);
        $docBody = '';
        foreach($lines as $line) {
            if($line === '') {
                $docBody .= '<w:p/>';
                continue;
            }
            $docBody .= '<w:p><w:r><w:t xml:space="preserve">' . htmlspecialchars($line, ENT_XML1 | ENT_COMPAT, 'UTF-8') . '</w:t></w:r></w:p>';
        }
        $zip->addFromString('[Content_Types].xml', '<?xml version="1.0" encoding="UTF-8"?><Types xmlns="http://schemas.openxmlformats.org/package/2006/content-types"><Default Extension="rels" ContentType="application/vnd.openxmlformats-package.relationships+xml"/><Default Extension="xml" ContentType="application/xml"/><Override PartName="/word/document.xml" ContentType="application/vnd.openxmlformats-officedocument.wordprocessingml.document.main+xml"/></Types>');
        $zip->addFromString('_rels/.rels', '<?xml version="1.0" encoding="UTF-8"?><Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships"><Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/officeDocument" Target="word/document.xml"/></Relationships>');
        $zip->addFromString('word/document.xml', '<?xml version="1.0" encoding="UTF-8"?><w:document xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main"><w:body>' . $docBody . '<w:sectPr><w:pgSz w:w="11906" w:h="16838"/><w:pgMar w:top="1440" w:right="1440" w:bottom="1440" w:left="1440"/></w:sectPr></w:body></w:document>');
        $zip->close();
        $binary = file_get_contents($tmp);
        @unlink($tmp);
        return $binary === false ? '' : $binary;
    }

    protected function escapePdfText($text) {
        return str_replace(['\\', '(', ')'], ['\\\\', '\\(', '\\)'], $text);
    }

    protected function toPdfEncoding($text) {
        $converted = @iconv('UTF-8', 'Windows-1252//TRANSLIT//IGNORE', (string) $text);
        return $converted !== false ? $converted : (string) $text;
    }

    protected function handlePostActions(NativeAnalytics $analytics) {
        $this->session->CSRF->validate();
        $action = $this->input->post('pwna_action');
        if($action === 'save_goal') {
            $analytics->saveGoal($this->input->post->getArray());
            $this->message('Goal saved.');
        }
        if($action === 'delete_goal') {
            $analytics->deleteGoal((int) $this->input->post('goal_id'));
            $this->warning('Goal deleted.');
        }
        if($action === 'save_funnel') {
            $analytics->saveFunnelSteps((string) $this->input->post('funnel_steps'));
            $this->message('Funnel updated.');
        }
        if($action === 'rebuild_today') {
            $day = date('Y-m-d');
            $analytics->rebuildDailyAggregate($day);
            $analytics->rebuildEventDailyAggregate($day);
            $analytics->rebuildGoalDailyAggregate($day);
            $this->message("Rebuilt today's aggregate data.");
        }
        if($action === 'rebuild_yesterday') {
            $day = date('Y-m-d', strtotime('-1 day'));
            $analytics->rebuildDailyAggregate($day);
            $analytics->rebuildEventDailyAggregate($day);
            $analytics->rebuildGoalDailyAggregate($day);
            $this->message("Rebuilt yesterday's aggregate data.");
        }
        if($action === 'purge_hits') {
            $analytics->purgeOldHits();
            $this->message('Old raw hits purged.');
        }
        if($action === 'purge_events') {
            $analytics->purgeOldEvents();
            $this->message('Old raw events purged.');
        }
        if($action === 'purge_realtime') {
            $analytics->purgeOldRealtimeSessions();
            $this->message('Old realtime sessions purged.');
        }
        if($action === 'cleanup_404s') {
            $removed = $analytics->cleanupResolvable404s();
            if($removed > 0) {
                $this->message("Cleaned up {$removed} resolvable 404 record(s) — these paths now redirect to valid pages.");
            } else {
                $this->message('No resolvable 404 records found.');
            }
        }
        if($action === 'cleanup_suspicious') {
            $removed = $analytics->cleanupSuspiciousPaths();
            if($removed > 0) {
                $this->message("Cleaned up {$removed} suspicious probe record(s) from analytics data.");
            } else {
                $this->message('No suspicious probe records found.');
            }
        }
        if($action === 'block_ip') {
            $ipHash = trim((string) $this->input->post('ip_hash'));
            if($ipHash !== '' && preg_match('/^[a-f0-9]{40,128}$/i', $ipHash)) {
                $analytics->addIpToBlocklist('hash:' . $ipHash);
                // Also remove this visitor's data from live sessions so they disappear immediately.
                // The sessions table doesn't store ip_hash, so we bridge through hits via visitor_hash.
                try {
                    $db = $this->wire('database');
                    $vstmt = $db->prepare("SELECT DISTINCT visitor_hash FROM `pwna_hits` WHERE ip_hash = :h");
                    $vstmt->execute([':h' => $ipHash]);
                    $visitors = $vstmt->fetchAll(\PDO::FETCH_COLUMN) ?: [];
                    if($visitors) {
                        $ph = implode(',', array_fill(0, count($visitors), '?'));
                        $del = $db->prepare("DELETE FROM `pwna_sessions` WHERE visitor_hash IN ({$ph})");
                        $del->execute($visitors);
                    }
                } catch(\Throwable $e) {}
                $this->message('IP blocked. This visitor will no longer be tracked.');
            } else {
                $this->error('Invalid IP hash.');
            }
        }
        if($action === 'reset_analytics_data') {
            $analytics->resetAnalyticsData();
            $this->warning('All analytics data has been reset.');
        }
    }

    protected function formatDate(NativeAnalytics $analytics, $value) {
        return $analytics->formatDisplayDate($value);
    }

    protected function formatDateTime(NativeAnalytics $analytics, $value) {
        return $analytics->formatDisplayDateTime($value);
    }

    protected function getRangeMeta(NativeAnalytics $analytics) {
        $selectedRange = (string) $this->input->get('range');
        if($selectedRange === '') $selectedRange = (string) $analytics->dashboardDefaultRange;
        $rangeDays = ['7d' => 7, '30d' => 30, '90d' => 90, '365d' => 365][$selectedRange] ?? 30;
        $fromDate = trim((string) $this->input->get('from_date'));
        $toDate = trim((string) $this->input->get('to_date'));
        $custom = ($fromDate !== '' || $toDate !== '');
        $rangeSpec = $custom ? $analytics->getDateRangeBetween($fromDate, $toDate, $rangeDays) : $analytics->getDateRangeForDays($rangeDays);
        $label = $custom ? $analytics->formatDisplayRange($rangeSpec) : ('Last ' . $rangeDays . ' days');
        return [
            'selectedRange' => $selectedRange,
            'rangeDays' => $rangeDays,
            'fromDate' => $custom ? $rangeSpec['start_date'] : '',
            'toDate' => $custom ? $rangeSpec['end_date'] : '',
            'rangeSpec' => $rangeSpec,
            'label' => $label,
        ];
    }

protected function renderBrandHeader(NativeAnalytics $analytics) {
    $version = 'v' . NativeAnalytics::VERSION;
    $sponsorUrl = 'https://github.com/sponsors/Roychgod';
    $settingsUrl = $this->wire('config')->urls->admin . 'module/edit?name=NativeAnalytics';
    $canManageModules = $this->user->isSuperuser() || $this->user->hasPermission('module-admin');
    $out = '<section class="pwna-brand pwna-panel">';
    $out .= '<div class="pwna-brand-title">';
    $out .= '<i class="fa fa-bar-chart pwna-brand-icon" aria-hidden="true"></i>';
    $out .= '<span>NativeAnalytics</span>';
    $out .= '<span class="pwna-brand-version">' . $this->sanitizer->entities($version) . '</span>';
    $out .= '<a class="pwna-donate-btn pwna-sponsor-btn" href="' . $this->sanitizer->entities($sponsorUrl) . '" target="_blank" rel="noopener noreferrer" title="Support NativeAnalytics development on GitHub Sponsors"><span aria-hidden="true">&#9829;</span> Sponsor</a>';
    $out .= '</div>';
    if($canManageModules) {
        $out .= '<div class="pwna-brand-actions">';
        $out .= '<a class="pwna-settings-btn" href="' . $this->sanitizer->entities($settingsUrl) . '" title="Open NativeAnalytics module settings"><i class="fa fa-cog" aria-hidden="true"></i><span>Module settings</span></a>';
        $out .= '</div>';
    }
    $out .= '</section>';
    return $out;
}

protected function renderInlineCssFallback() {
    $file = __DIR__ . '/assets/admin.css';
    if(!is_file($file) || !is_readable($file)) return '';
    $css = (string) file_get_contents($file);
    if($css === '') return '';
    $css = preg_replace('!\/\*.*?\*\/!s', '', $css);
    $css = preg_replace('/\s+/', ' ', $css);
    return '<style>' . trim($css) . '</style>';
}


    protected function renderHealthPanel(array $health) {
        $rows = [
            ['Module folder', $this->sanitizer->entities((string) ($health['module_dir'] ?? ''))],
            ['Raw hits rows', '<span id="pwna-health-hits">' . number_format((int) ($health['hits_count'] ?? 0)) . '</span>'],
            ['Realtime sessions rows', '<span id="pwna-health-sessions">' . number_format((int) ($health['sessions_count'] ?? 0)) . '</span>'],
            ['Daily aggregate rows', '<span id="pwna-health-daily">' . number_format((int) ($health['daily_count'] ?? 0)) . '</span>'],
            ['Tracked events rows', '<span id="pwna-health-events">' . number_format((int) ($health['events_count'] ?? 0)) . '</span>'],
            ['Event aggregate rows', number_format((int) ($health['event_daily_count'] ?? 0))],
            ['Configured goals', number_format((int) ($health['goals_count'] ?? 0))],
            ['Goal aggregate rows', number_format((int) ($health['goal_daily_count'] ?? 0))],
            ['Last raw hit', '<span id="pwna-health-last-hit">' . $this->sanitizer->entities((string) ($health['last_hit_at'] ?? '—')) . '</span>'],
            ['Last realtime session', '<span id="pwna-health-last-session">' . $this->sanitizer->entities((string) ($health['last_session_at'] ?? '—')) . '</span>'],
            ['Last tracked event', '<span id="pwna-health-last-event">' . $this->sanitizer->entities((string) ($health['last_event_at'] ?? '—')) . '</span>'],
        ];
        return $this->renderSimpleTable('Diagnostics', ['Check', 'Value'], $rows);
    }

protected function renderToolbar(array $rangeMeta, $pageId, $template, array $templates, $activeTab = 'overview') {
    $params = [
        'range' => $rangeMeta['selectedRange'],
        'from_date' => $rangeMeta['fromDate'],
        'to_date' => $rangeMeta['toDate'],
        'tab' => $activeTab,
    ];
    $engagementView = $activeTab === 'engagement' ? $this->getEngagementView() : 'metrics';
    if($activeTab === 'engagement' && $engagementView !== 'metrics') $params['engage_view'] = $engagementView;
    if($pageId > 0) $params['page_id'] = (int) $pageId;
    if($template !== '') $params['template'] = $template;
    $csvUrl = './export/?' . http_build_query($params);
    $pdfUrl = './pdf/?' . http_build_query($params);
    $docxUrl = './docx/?' . http_build_query($params);

    $out = '<form class="pwna-toolbar pwna-panel pwna-toolbar-panel" method="get">';
    $out .= $this->renderHelpIcon('The From and To fields override the quick range dropdown for the main analytics view.', 'Overview filters help', 'pwna-help-tip-corner pwna-help-tip-panel-corner');
    $out .= '<input type="hidden" name="tab" value="' . $this->sanitizer->entities($activeTab) . '">';
    if($activeTab === 'engagement') {
        $out .= '<input type="hidden" name="engage_view" value="' . $this->sanitizer->entities($engagementView) . '" data-pwna-engage-input="1">';
    }
    $out .= '<div class="pwna-toolbar-main">';
    $out .= '<div class="pwna-toolbar-left">';
    $out .= '<label>Quick range <select name="range">';
    foreach($this->getRangeOptions() as $value => $label) {
        $out .= '<option value="' . $this->sanitizer->entities($value) . '"' . ($rangeMeta['selectedRange'] === $value ? ' selected' : '') . '>' . $this->sanitizer->entities($label) . '</option>';
    }
    $out .= '</select></label>';
    $out .= '<label>From <input type="date" name="from_date" value="' . $this->sanitizer->entities($rangeMeta['fromDate']) . '"></label>';
    $out .= '<label>To <input type="date" name="to_date" value="' . $this->sanitizer->entities($rangeMeta['toDate']) . '"></label>';
    $out .= '<label>Page ID <input type="number" min="1" name="page_id" value="' . ($pageId > 0 ? (int) $pageId : '') . '"></label>';
    $out .= '<label class="pwna-pagefinder-label">Find page <input type="search" class="pwna-pagefinder" data-pwna-page-search="./page-search/" data-pwna-page-target="page_id" placeholder="Title, path or ID" autocomplete="off"></label>';
    $out .= '<label>Template <select name="template"><option value="">All templates</option>';
    foreach($templates as $row) {
        $value = $row['label'];
        $out .= '<option value="' . $this->sanitizer->entities($value) . '"' . ($template === $value ? ' selected' : '') . '>' . $this->sanitizer->entities($value) . ' (' . (int) $row['views'] . ')</option>';
    }
    $out .= '</select></label>';
    $out .= '<button class="ui-button" type="submit">Apply</button></div>';
    $out .= '<div class="pwna-toolbar-right"><div class="pwna-export-actions">';
    $out .= '<button class="pwna-secondary-btn pwna-refresh-btn" type="submit">Refresh now</button>';
    $ddId = 'pwna-export-dd-' . $this->sanitizer->name($activeTab);
    $menuId = $ddId . '-menu';
    $out .= '<div class="pwna-export-dropdown" id="' . $ddId . '">';
    $out .= '<button type="button" class="pwna-secondary-btn pwna-export-dropdown-btn" aria-haspopup="true" aria-expanded="false" aria-controls="' . $menuId . '">Export</button>';
    $out .= '<div class="pwna-export-dropdown-menu" id="' . $menuId . '" role="menu">';
    $out .= '<span class="pwna-export-dropdown-label">Full report</span>';
    $out .= '<a href="' . $this->sanitizer->entities($pdfUrl) . '" role="menuitem">Export PDF (all data)</a>';
    $out .= '<a href="' . $this->sanitizer->entities($docxUrl) . '" role="menuitem">Export DOCX (all data)</a>';
    $out .= '<div class="pwna-export-dropdown-divider"></div>';
    $out .= '<span class="pwna-export-dropdown-label">CSV by section</span>';
    $out .= '<a href="' . $this->sanitizer->entities($csvUrl) . '" role="menuitem">Pages CSV</a>';
    $out .= '<a href="' . $this->sanitizer->entities($csvUrl . '&export_type=referrers') . '" role="menuitem">Referrers CSV</a>';
    $out .= '<a href="' . $this->sanitizer->entities($csvUrl . '&export_type=404s') . '" role="menuitem">404 pages CSV</a>';
    $out .= '<a href="' . $this->sanitizer->entities($csvUrl . '&export_type=events') . '" role="menuitem">Events CSV</a>';
    $out .= '</div></div>';
    $out .= '</div></div>';
    $out .= '</div>';
    $out .= '<div class="pwna-toolbar-meta">';
    $out .= '<div class="pwna-toolbar-status"><span class="pwna-note">Range: ' . $this->sanitizer->entities($rangeMeta['label']) . '</span></div>';
    $out .= '</div>';
    $out .= '</form>';
    return $out;
}

protected function renderCompareToolbar(array $rangeMeta, array $compareMeta, $pageId, $template, array $templates) {
    $params = [
        'range' => $rangeMeta['selectedRange'],
        'from_date' => $rangeMeta['fromDate'],
        'to_date' => $rangeMeta['toDate'],
        'tab' => 'compare',
        'compare' => $compareMeta['selected'],
    ];
    if($pageId > 0) $params['page_id'] = (int) $pageId;
    if($template !== '') $params['template'] = $template;
    $csvUrl = './export/?' . http_build_query($params);
    $pdfUrl = './pdf/?' . http_build_query($params);
    $docxUrl = './docx/?' . http_build_query($params);

    $out = '<form class="pwna-toolbar pwna-panel pwna-toolbar-panel" method="get">';
    $out .= $this->renderHelpIcon('Quick compare buttons apply ready-made period pairs. Use From and To only when you want a custom main period, then choose how it should be compared.', 'Compare help', 'pwna-help-tip-corner pwna-help-tip-panel-corner');
    $out .= '<input type="hidden" name="tab" value="compare">';
    $out .= '<input type="hidden" name="range" value="' . $this->sanitizer->entities($rangeMeta['selectedRange']) . '">';
    $out .= '<div class="pwna-toolbar-main">';
    $out .= '<div class="pwna-toolbar-left">';
    $out .= '<label>From <input type="date" name="from_date" value="' . $this->sanitizer->entities($rangeMeta['fromDate']) . '"></label>';
    $out .= '<label>To <input type="date" name="to_date" value="' . $this->sanitizer->entities($rangeMeta['toDate']) . '"></label>';
    $out .= '<label>Compare against <select name="compare">';
    foreach(['previous_period' => 'Previous period', 'previous_year' => 'Same period last year', 'none' => 'No comparison'] as $value => $label) {
        $out .= '<option value="' . $this->sanitizer->entities($value) . '"' . ($compareMeta['selected'] === $value ? ' selected' : '') . '>' . $this->sanitizer->entities($label) . '</option>';
    }
    $out .= '</select></label>';
    $out .= '<label>Page ID <input type="number" min="1" name="page_id" value="' . ($pageId > 0 ? (int) $pageId : '') . '"></label>';
    $out .= '<label class="pwna-pagefinder-label">Find page <input type="search" class="pwna-pagefinder" data-pwna-page-search="./page-search/" data-pwna-page-target="page_id" placeholder="Title, path or ID" autocomplete="off"></label>';
    $out .= '<label>Template <select name="template"><option value="">All templates</option>';
    foreach($templates as $row) {
        $value = $row['label'];
        $out .= '<option value="' . $this->sanitizer->entities($value) . '"' . ($template === $value ? ' selected' : '') . '>' . $this->sanitizer->entities($value) . ' (' . (int) $row['views'] . ')</option>';
    }
    $out .= '</select></label>';
    $out .= '<button class="ui-button" type="submit">Apply comparison</button></div>';
    $out .= '<div class="pwna-toolbar-right"><div class="pwna-export-actions">';
    $out .= '<button class="pwna-secondary-btn pwna-refresh-btn" type="submit">Refresh now</button>';
    $out .= '<div class="pwna-export-dropdown" id="pwna-export-dd-compare">';
    $out .= '<button type="button" class="pwna-secondary-btn pwna-export-dropdown-btn" aria-haspopup="true" aria-expanded="false" aria-controls="pwna-export-dd-compare-menu">Export</button>';
    $out .= '<div class="pwna-export-dropdown-menu" id="pwna-export-dd-compare-menu" role="menu">';
    $out .= '<span class="pwna-export-dropdown-label">Full report</span>';
    $out .= '<a href="' . $this->sanitizer->entities($pdfUrl) . '" role="menuitem">Export PDF (all data)</a>';
    $out .= '<a href="' . $this->sanitizer->entities($docxUrl) . '" role="menuitem">Export DOCX (all data)</a>';
    $out .= '<div class="pwna-export-dropdown-divider"></div>';
    $out .= '<span class="pwna-export-dropdown-label">CSV by section</span>';
    $out .= '<a href="' . $this->sanitizer->entities($csvUrl) . '" role="menuitem">Pages CSV</a>';
    $out .= '</div></div>';
    $out .= '</div></div>';
    $out .= '</div>';
    $out .= '<div class="pwna-toolbar-meta">';
    $out .= '<div class="pwna-toolbar-status">';
    $out .= '<span class="pwna-note">Selected period: ' . $this->sanitizer->entities($rangeMeta['label']) . '</span>';
    if($compareMeta['enabled']) {
        $out .= '<span class="pwna-note">Compared with: ' . $this->sanitizer->entities($compareMeta['label']) . '</span>';
    }
    $out .= '</div>';
    $out .= '<div class="pwna-export-actions">';
    $out .= '</div>';
    $out .= '<div class="pwna-quick-links">';
    $out .= '<span class="pwna-quick-links-label">Quick compare</span>';
    foreach($this->getCompareQuickPresets($pageId, $template) as $preset) {
        $out .= '<a class="ui-button pwna-quick-link" href="./?' . $this->sanitizer->entities(http_build_query($preset['params'])) . '">' . $this->sanitizer->entities($preset['label']) . '</a>';
    }
    $out .= '</div>';
    $out .= '</div>';
    $out .= '</form>';
    return $out;
}

protected function getRangeOptions($includeShort = true) {
    $options = [
        '30d' => 'Last 30 days',
        '90d' => 'Last 90 days',
        '365d' => 'Last 365 days',
    ];
    if($includeShort) {
        $options = ['7d' => 'Last 7 days'] + $options;
    }
    return $options;
}

protected function getCompareQuickPresets($pageId = 0, $template = '') {
    $today = date('Y-m-d');
    $presets = [];

    $items = [
        [
            'label' => 'Last 7 vs previous 7',
            'params' => [
                'tab' => 'compare',
                'range' => '30d',
                'from_date' => date('Y-m-d', strtotime('-6 days')),
                'to_date' => $today,
                'compare' => 'previous_period',
            ],
        ],
        [
            'label' => 'Last 30 vs previous 30',
            'params' => [
                'tab' => 'compare',
                'range' => '30d',
                'from_date' => date('Y-m-d', strtotime('-29 days')),
                'to_date' => $today,
                'compare' => 'previous_period',
            ],
        ],
        [
            'label' => 'Month to date vs previous period',
            'params' => [
                'tab' => 'compare',
                'range' => '30d',
                'from_date' => date('Y-m-01'),
                'to_date' => $today,
                'compare' => 'previous_period',
            ],
        ],
        [
            'label' => 'Year to date vs last year',
            'params' => [
                'tab' => 'compare',
                'range' => '365d',
                'from_date' => date('Y-01-01'),
                'to_date' => $today,
                'compare' => 'previous_year',
            ],
        ],
    ];

    foreach($items as $item) {
        if($pageId > 0) $item['params']['page_id'] = (int) $pageId;
        if($template !== '') $item['params']['template'] = (string) $template;
        $presets[] = $item;
    }

    return $presets;
}

protected function getEngagementView() {
    $view = $this->sanitizer->name((string) $this->input->get('engage_view'));
    if(!in_array($view, ['metrics', 'helper'], true)) $view = 'metrics';
    return $view;
}

protected function renderWireTab($id, $title, $content, $isActive = false, $extraClass = '') {
    $classes = trim('WireTab pwna-wiretab ' . (string) $extraClass . ($isActive ? ' pwna-wiretab-initial' : ''));
    return '<div class="' . $this->sanitizer->entities($classes) . '" id="' . $this->sanitizer->entities($id) . '" title="' . $this->sanitizer->entities($title) . '">' . $content . '</div>';
}

protected function renderWireTabsScript($activeTab, $engagementView) {
    $labels = $this->getTabLabels();
    $payload = [
        'initialSlug' => in_array($activeTab, array_keys($labels), true) ? $activeTab : 'overview',
        'hasExplicitMainTab' => $this->input->get('tab') ? true : false,
        'storageKey' => 'pwna:main-tab',
        'labels' => $labels,
    ];
    $json = json_encode($payload, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE | JSON_HEX_TAG | JSON_HEX_AMP | JSON_HEX_APOS | JSON_HEX_QUOT);
    if($json === false) $json = '{}';
    $nonceAttr = $this->getScriptNonceAttribute();
    $script = <<<'HTML'
<script__PWNA_NONCE__>
(function($){
  function revealTabs(){
    var el = document.getElementById('pwna-wiretabs');
    if(el && el.classList) el.classList.remove('pwna-tabs-booting');
  }
  if(!$){ revealTabs(); return; }
  function getStore(){
    try { return window.sessionStorage; } catch(e) { return null; }
  }
  function readStored(key) {
    var store = getStore();
    if(!store || !key) return '';
    try { return String(store.getItem(key) || ''); } catch(e) { return ''; }
  }
  function writeStored(key, value) {
    var store = getStore();
    if(!store || !key) return;
    try { store.setItem(key, String(value || '')); } catch(e) {}
  }
  function readUrlParam(name) {
    try { return new URL(window.location.href).searchParams.get(name) || ''; } catch(e) { return ''; }
  }
  function updateUrlParam(name, value) {
    if(!window.history || !window.history.replaceState) return;
    try {
      var url = new URL(window.location.href);
      if(value) url.searchParams.set(name, value);
      else url.searchParams.delete(name);
      window.history.replaceState({}, document.title, url.toString());
    } catch(e) {}
  }
  function normLabel(s) {
    return $.trim(String(s || '')).replace(/\s+/g, ' ').toLowerCase();
  }
  function slugFromLabel(cfg, label) {
    var labels = (cfg && cfg.labels) || {};
    var target = normLabel(label);
    if(!target) return '';
    // Exact (normalized) match first.
    for(var key in labels) {
      if(Object.prototype.hasOwnProperty.call(labels, key) && normLabel(labels[key]) === target) return key;
    }
    // Fall back to substring match, so an icon glyph, badge, or extra markup
    // inside the tab anchor (common with WireTabs / admin themes) still maps
    // to the right slug instead of returning '' and breaking tab tracking.
    for(var key2 in labels) {
      if(!Object.prototype.hasOwnProperty.call(labels, key2)) continue;
      var lab = normLabel(labels[key2]);
      if(lab && (target.indexOf(lab) !== -1 || lab.indexOf(target) !== -1)) return key2;
    }
    return '';
  }
  function getNavAnchors(rootSelector, cfg) {
    var $root = $(rootSelector);
    if(!$root.length) return $();
    return $root.find('ul.WireTabs a, ul.ui-tabs-nav a, .WireTabsNav a').filter(function(){
      return !!slugFromLabel(cfg, $(this).text());
    });
  }
  function activateBySlug(rootSelector, cfg, slug) {
    if(!slug || !cfg.labels || !cfg.labels[slug]) return;
    var label = cfg.labels[slug];
    var tryActivate = function() {
      var $links = getNavAnchors(rootSelector, cfg);
      if(!$links.length) return false;
      var $link = $links.filter(function(){
        return slugFromLabel(cfg, $(this).text()) === slug;
      }).first();
      if(!$link.length) return false;
      $link.trigger('click');
      return true;
    };
    if(!tryActivate()) {
      setTimeout(tryActivate, 50);
      setTimeout(tryActivate, 150);
      setTimeout(tryActivate, 300);
    }
  }
  function panelIdForSlug(cfg, slug) {
    var $links = getNavAnchors('#pwna-wiretabs', cfg);
    var $link = $links.filter(function(){
      return slugFromLabel(cfg, $(this).text()) === slug;
    }).first();
    if(!$link.length) return '';
    var href = String($link.attr('href') || '');
    return href.charAt(0) === '#' ? href.slice(1) : '';
  }
  function revealWhenActive(cfg, slug, attempts) {
    var id = panelIdForSlug(cfg, slug);
    var panel = id ? document.getElementById(id) : null;
    var panels = document.querySelectorAll('#pwna-wiretabs .pw-wiretabs-item, #pwna-wiretabs .WireTab');
    var visible = 0, requestedVisible = false, i;
    for(i = 0; i < panels.length; i++) {
      if(getComputedStyle(panels[i]).display !== 'none') {
        visible++;
        if(panels[i] === panel) requestedVisible = true;
      }
    }
    if(panel && requestedVisible && visible === 1) { revealTabs(); return; }
    if(attempts <= 0) { revealTabs(); return; }
    setTimeout(function(){ revealWhenActive(cfg, slug, attempts - 1); }, 30);
  }
  function writeTabState(cfg, slug) {
    var label = (cfg.labels && cfg.labels[slug]) ? cfg.labels[slug] : 'Overview';
    writeStored(cfg.storageKey, label);
    updateUrlParam('tab', slug);
    if(slug !== 'engagement') updateUrlParam('engage_view', '');
  }
  $(document).ready(function(){
    var cfg = __PWNA_JSON__ || {};
    var explicit = readUrlParam('tab');
    var preferredSlug = (explicit && cfg.labels && cfg.labels[explicit]) ? explicit : '';
    if(!preferredSlug && !cfg.hasExplicitMainTab) {
      var storedLabel = readStored(cfg.storageKey);
      var storedSlug = slugFromLabel(cfg, storedLabel);
      if(storedSlug) preferredSlug = storedSlug;
    }
    if(!preferredSlug) preferredSlug = cfg.initialSlug || 'overview';

    activateBySlug('#pwna-wiretabs', cfg, preferredSlug);
    revealWhenActive(cfg, preferredSlug, 50);

    // Gate URL writes until after the initial WireTabs widget-creation fires.
    // jQuery UI fires tabsactivate once during init for the default tab — we
    // must not write that to the URL before activateBySlug switches to the
    // URL-requested tab.
    var initialTabActivated = false;
    var initTimer = setTimeout(function(){ initialTabActivated = true; }, 2000);

    // Primary URL-sync: jQuery UI's tabsactivate fires AFTER the new tab is
    // fully active and exposes ui.newTab directly — no DOM-polling race.
    $('#pwna-wiretabs').on('tabsactivate', function(event, ui){
      var $a = ui.newTab ? ui.newTab.find('a').first() : $();
      var slug = slugFromLabel(cfg, $a.text());
      if(!slug) return;
      if(!initialTabActivated) {
        // The URL-requested tab just activated — open the gate.
        if(slug === preferredSlug) {
          initialTabActivated = true;
          clearTimeout(initTimer);
          revealTabs();
        }
        return;
      }
      writeTabState(cfg, slug);
    });

    // Defensive fallback for non-jQuery-UI implementations: filter to real
    // user events only (event.originalEvent is undefined for .trigger() calls,
    // which covers WireTabs init clicks and activateBySlug's own trigger).
    function bindNav() {
      var $links = getNavAnchors('#pwna-wiretabs', cfg);
      if(!$links.length) return false;
      $links.each(function(){
        var $link = $(this);
        if($link.data('pwnaTabBound')) return;
        $link.data('pwnaTabBound', 1);
        $link.on('click', function(e){
          if(!e.originalEvent) return; // programmatic click — ignore
          var clickedSlug = slugFromLabel(cfg, $link.text()) || preferredSlug || 'overview';
          writeTabState(cfg, clickedSlug);
        });
      });
      return true;
    }

    if(!bindNav()) {
      setTimeout(bindNav, 80);
      setTimeout(bindNav, 180);
      setTimeout(bindNav, 320);
    }
  });
})(window.jQuery);
</script>
HTML;
    return str_replace(['__PWNA_NONCE__', '__PWNA_JSON__'], [$nonceAttr, $json], $script);
}


protected function renderEngagementSubnav($activeView) {
    $items = [
        'metrics' => 'Engagement data',
        'helper' => 'Tracking helper',
    ];
    $out = '<div class="pwna-subtabs-wrap"><nav class="pwna-subtabs" aria-label="Engagement sections">';
    foreach($items as $key => $label) {
        $class = 'pwna-subtab' . ($activeView === $key ? ' is-active' : '');
        $pressed = $activeView === $key ? 'true' : 'false';
        $out .= '<button type="button" class="' . $class . '" data-pwna-engage-switch="' . $this->sanitizer->entities($key) . '" aria-pressed="' . $pressed . '">' . $this->sanitizer->entities($label) . '</button>';
    }
    $out .= '</nav></div>';
    return $out;
}

protected function renderEngagementPanels($metricsContent, $helperContent, $activeView = 'metrics') {
    $metricsHidden = $activeView === 'helper' ? ' hidden' : '';
    $helperHidden = $activeView === 'helper' ? '' : ' hidden';
    $out = '<div class="pwna-engagement-panels">';
    $out .= '<div class="pwna-engagement-panel" data-pwna-engage-panel="metrics"' . $metricsHidden . '>' . $metricsContent . '</div>';
    $out .= '<div class="pwna-engagement-panel" data-pwna-engage-panel="helper"' . $helperHidden . '>' . $helperContent . '</div>';
    $out .= '</div>';
    return $out;
}

public function ___getTabLabels() {
    return [
        'overview' => 'Overview',
        'engagement' => 'Engagement',
        'goals' => 'Goals',
        'funnel' => 'Funnel',
        'compare' => 'Compare',
        'sources' => 'Sources',
        'content' => 'Content',
        'tech' => 'System',
    ];
}

public function ___getTabs(array $tabs) {
    return $tabs;
}

protected function getActiveTab() {
    $labels = $this->getTabLabels();
    $tab = $this->sanitizer->name((string) $this->input->get('tab'));
    if(!isset($labels[$tab])) $tab = 'overview';
    return $tab;
}

protected function getCompareMeta(NativeAnalytics $analytics, array $rangeMeta) {
    $selected = (string) $this->input->get('compare');
    if(!in_array($selected, ['none', 'previous_period', 'previous_year'], true)) $selected = 'previous_period';
    if($selected === 'none') {
        return ['selected' => 'none', 'enabled' => false, 'rangeSpec' => [], 'label' => 'No comparison'];
    }
    $current = $rangeMeta['rangeSpec'];
    $startTs = strtotime((string) $current['start_date']);
    $endTs = strtotime((string) $current['end_date']);
    $days = (int) floor(($endTs - $startTs) / 86400) + 1;
    if($selected === 'previous_year') {
        $compare = $analytics->getDateRangeBetween(date('Y-m-d', strtotime('-1 year', $startTs)), date('Y-m-d', strtotime('-1 year', $endTs)), $days);
        $label = $analytics->formatDisplayRange($compare) . ' (same period last year)';
        return ['selected' => $selected, 'enabled' => true, 'rangeSpec' => $compare, 'label' => $label];
    }
    $compareEndTs = strtotime('-1 day', $startTs);
    $compareStartTs = strtotime('-' . max(0, $days - 1) . ' days', $compareEndTs);
    $compare = $analytics->getDateRangeBetween(date('Y-m-d', $compareStartTs), date('Y-m-d', $compareEndTs), $days);
    $label = $analytics->formatDisplayRange($compare) . ' (previous period)';
    return ['selected' => $selected, 'enabled' => true, 'rangeSpec' => $compare, 'label' => $label];
}

protected function renderTabNav($activeTab, array $rangeMeta, $pageId, $template, $selectedCompare) {
    $tabs = $this->getTabLabels();
    $out = '<ul class="WireTabs">';
    foreach($tabs as $key => $label) {
        $params = ['tab' => $key, 'range' => $rangeMeta['selectedRange'], 'from_date' => $rangeMeta['fromDate'], 'to_date' => $rangeMeta['toDate']];
        if($pageId > 0) $params['page_id'] = (int) $pageId;
        if($template !== '') $params['template'] = $template;
        if($key === 'compare') $params['compare'] = $selectedCompare;
        if($key === 'engagement') $params['engage_view'] = $this->getEngagementView();
        $liClass = $activeTab === $key ? ' class="uk-active"' : '';
        $out .= '<li' . $liClass . '><a href="?' . http_build_query($params) . '">' . $this->sanitizer->entities($label) . '</a></li>';
    }
    $out .= '</ul>';
    return $out;
}


protected function renderGoalsIntroPanel() {
    $out = '<div class="pwna-panel pwna-goals-intro-panel">';
    $out .= '<div class="pwna-goals-intro-main">';
    $out .= '<h2>Goals turn tracked actions into conversions</h2>';
    $out .= '<p class="pwna-note">Use Goals when a normal page view or engagement event means business value: a submitted form, a booking button click, a downloaded price list, a phone/email click, or a visit to a thank-you page.</p>';
    $out .= '</div>';
    $out .= '<div class="pwna-goal-steps">';
    $out .= '<div><strong>1</strong><span>Choose an event or page rule</span></div>';
    $out .= '<div><strong>2</strong><span>NativeAnalytics counts matching conversions</span></div>';
    $out .= '<div><strong>3</strong><span>Rate = conversions / sessions or visitors</span></div>';
    $out .= '</div>';
    $out .= '</div>';
    return $out;
}

protected function renderGoalQuickGuidePanel() {
    $out = '<div class="pwna-panel pwna-goal-guide-panel">';
    $out .= '<h2>Goal examples</h2>';
    $out .= '<p class="pwna-note">Start with one or two important conversions. You can always add more later.</p>';
    $out .= '<div class="pwna-goal-example-list">';
    $out .= '<div class="pwna-goal-example"><strong>Contact form conversion</strong><span>Goal type: Event based<br>Event group: <code>form</code><br>Event name: <code>form_submit</code></span></div>';
    $out .= '<div class="pwna-goal-example"><strong>Important CTA click</strong><span>Goal type: Event based<br>Event group: <code>lead</code> or <code>custom</code><br>Event name: your <code>data-pwna-event</code> value</span></div>';
    $out .= '<div class="pwna-goal-example"><strong>Thank-you page</strong><span>Goal type: Page/path based<br>Page/path contains: <code>/thank-you/</code>, <code>/thanks/</code> or your confirmation page path</span></div>';
    $out .= '</div>';
    $out .= '</div>';
    return $out;
}

protected function buildGoalSuggestions(array $topEvents, array $topEventTargets, array $pages, array $landing) {
    $suggestions = [
        'groups' => [],
        'names' => [],
        'labels' => [],
        'targets' => [],
        'paths' => [],
        'events' => [],
        'pages' => [],
    ];

    foreach($topEvents as $row) {
        $group = (string) ($row['event_group'] ?? '');
        $name = (string) ($row['event_name'] ?? '');
        $label = (string) ($row['event_label'] ?? '');
        $target = (string) ($row['event_target'] ?? '');
        $events = (int) ($row['events'] ?? 0);
        $this->addUniqueSuggestion($suggestions['groups'], $group);
        $this->addUniqueSuggestion($suggestions['names'], $name);
        $this->addUniqueSuggestion($suggestions['labels'], $label);
        $this->addUniqueSuggestion($suggestions['targets'], $target);
        if($group !== '' || $name !== '') {
            $key = md5($group . '|' . $name . '|' . $label . '|' . $target);
            if(!isset($suggestions['events'][$key])) {
                $title = trim(($label !== '' ? $label : $name) . ' — ' . trim($group . ' / ' . $name, ' /'));
                if($events > 0) $title .= ' (' . number_format($events) . ')';
                $suggestions['events'][$key] = [
                    'title' => $title,
                    'event_group' => $group,
                    'event_name' => $name,
                    'event_label' => $label,
                    'event_target' => $target,
                ];
            }
        }
    }

    foreach($topEventTargets as $row) {
        $this->addUniqueSuggestion($suggestions['groups'], (string) ($row['event_group'] ?? ''));
        $this->addUniqueSuggestion($suggestions['targets'], (string) ($row['event_target'] ?? ''));
    }

    foreach(array_merge($pages, $landing) as $row) {
        $path = (string) ($row['path'] ?? '');
        if($path === '') continue;
        $label = (string) ($row['page_title'] ?? '');
        if($label === '') $label = $path;
        else $label .= ' (' . $path . ')';
        $this->addUniqueSuggestion($suggestions['paths'], $path, $label);
        if(!isset($suggestions['pages'][$path])) {
            $suggestions['pages'][$path] = ['path' => $path, 'label' => $label];
        }
    }

    foreach(['groups', 'names', 'labels', 'targets', 'paths'] as $key) {
        $suggestions[$key] = array_slice($suggestions[$key], 0, 40, true);
    }
    $suggestions['events'] = array_slice($suggestions['events'], 0, 40, true);
    $suggestions['pages'] = array_slice($suggestions['pages'], 0, 40, true);
    return $suggestions;
}

protected function addUniqueSuggestion(array &$list, $value, $label = '') {
    $value = trim(strip_tags((string) $value));
    if($value === '') return;
    if(!isset($list[$value])) $list[$value] = trim(strip_tags((string) $label)) ?: $value;
}

protected function renderGoalCards(array $goals) {
    $active = 0;
    $conversions = 0;
    $sessions = 0;
    $bestRate = 0.0;
    foreach($goals as $goal) {
        if(!empty($goal['active'])) $active++;
        if(empty($goal['active'])) continue;
        $conversions += (int) ($goal['conversions'] ?? 0);
        $sessions += (int) ($goal['sessions'] ?? 0);
        $bestRate = max($bestRate, (float) ($goal['conversion_rate'] ?? 0));
    }
    $cards = [
        ['Configured goals', count($goals), 'Goal definitions'],
        ['Active goals', $active, 'Included in reports'],
        ['Goal conversions', $conversions, 'Matching events/page hits'],
        ['Goal sessions', $sessions, 'Sessions matched by active goals'],
        ['Best rate', number_format($bestRate, 2) . '%', 'Highest conversion rate'],
    ];
    $out = '<div class="pwna-cards pwna-goal-cards">';
    foreach($cards as $card) {
        $out .= '<div class="pwna-card pwna-goal-card"><div class="pwna-card-label">' . $this->sanitizer->entities($card[0]) . '</div><div class="pwna-card-value">' . $this->sanitizer->entities((string) $card[1]) . '</div><div class="pwna-card-sub">' . $this->sanitizer->entities($card[2]) . '</div></div>';
    }
    $out .= '</div>';
    return $out;
}

protected function renderGoalTrendPanel(NativeAnalytics $analytics, array $goalSeries, array $goals) {
    $configured = count($goals);
    $active = 0;
    $hasConversions = false;
    foreach($goals as $goal) {
        if(!empty($goal['active'])) $active++;
    }
    foreach($goalSeries as $row) {
        if((int) ($row['views'] ?? 0) > 0 || (int) ($row['sessions'] ?? 0) > 0 || (int) ($row['uniques'] ?? 0) > 0) {
            $hasConversions = true;
            break;
        }
    }

    $out = '<div class="pwna-panel pwna-goal-trend-panel"><h2>Goal trend</h2>';
    if($configured < 1) {
        $out .= '<p class="pwna-empty pwna-empty-state">No goals configured yet. Create your first event-based or page/path-based goal below, then conversions will appear here.</p>';
        return $out . '</div>';
    }
    if($active < 1) {
        $out .= '<p class="pwna-empty pwna-empty-state">All configured goals are inactive. Activate at least one goal to include it in conversion reports.</p>';
        return $out . '</div>';
    }
    if(!$hasConversions) {
        $out .= '<p class="pwna-empty pwna-empty-state">No goal conversions found in the selected date range yet. The trend chart will appear as soon as one of the active goal rules matches a tracked event or page hit.</p>';
        return $out . '</div>';
    }

    $out .= '<p class="pwna-note">Daily goal completions for active goals in the selected period.</p>';
    $out .= $analytics->renderLineChart($goalSeries, 'views', 'Goal conversions by day', ['views' => 'Conversions', 'uniques' => 'Unique visitors', 'sessions' => 'Sessions'], 'goals');
    $out .= '</div>';
    return $out;
}

protected function mapGoalRows(array $goals) {
    $rows = [];
    foreach($goals as $goal) {
        $title = (string) ($goal['title'] ?? 'Untitled goal');
        if(empty($goal['active'])) $title .= ' (inactive)';
        $type = (string) ($goal['goal_type'] ?? 'event') === 'page' ? 'Page/path' : 'Event';
        $rate = number_format((float) ($goal['conversion_rate'] ?? 0), 2) . '% of ' . (string) ($goal['conversion_base_label'] ?? 'sessions');
        $rows[] = [
            $this->sanitizer->entities($title),
            '<span class="pwna-break">' . $this->describeGoalRule($goal) . '</span>',
            $this->sanitizer->entities($type),
            number_format((int) ($goal['conversions'] ?? 0)),
            number_format((int) ($goal['uniques'] ?? 0)),
            number_format((int) ($goal['sessions'] ?? 0)),
            $this->sanitizer->entities($rate),
        ];
    }
    if(!$rows) $rows[] = ['No goals configured yet.', '', '', '', '', '', ''];
    return $rows;
}

protected function describeGoalRule(array $goal) {
    if((string) ($goal['goal_type'] ?? 'event') === 'page') {
        $path = (string) ($goal['path_contains'] ?? '');
        return $path !== '' ? 'Path contains <code>' . $this->sanitizer->entities($path) . '</code>' : '<span class="pwna-muted">No page/path rule yet</span>';
    }
    $parts = [];
    if((string) ($goal['event_group'] ?? '') !== '') $parts[] = 'Group = <code>' . $this->sanitizer->entities((string) $goal['event_group']) . '</code>';
    if((string) ($goal['event_name'] ?? '') !== '') $parts[] = 'Event = <code>' . $this->sanitizer->entities((string) $goal['event_name']) . '</code>';
    if((string) ($goal['event_label_contains'] ?? '') !== '') $parts[] = 'Label contains <code>' . $this->sanitizer->entities((string) $goal['event_label_contains']) . '</code>';
    if((string) ($goal['event_target_contains'] ?? '') !== '') $parts[] = 'Target contains <code>' . $this->sanitizer->entities((string) $goal['event_target_contains']) . '</code>';
    if(!$parts) return '<span class="pwna-muted">No event rule yet</span>';
    return implode('<br>', $parts);
}

protected function renderFunnelPanel(NativeAnalytics $analytics, $rangeSpec, array $filters) {
    $raw = (string) $analytics->funnelSteps;
    $steps = $analytics->parseFunnelSteps($raw);
    $csrfName = $this->session->CSRF->getTokenName();
    $csrfValue = $this->session->CSRF->getTokenValue();

    $out = '<div class="pwna-panel"><h2>Conversion funnel</h2>';
    $out .= '<p class="pwna-note">Define an ordered list of steps — one per line — to see how many sessions move from one step to the next within the selected date range. A session counts for a step only if it reached it after the previous step. The date range above applies; the page/template filters do not.</p>';

    // Definition form
    $out .= '<form method="post" class="pwna-funnel-form">';
    $out .= '<input type="hidden" name="' . $this->sanitizer->entities($csrfName) . '" value="' . $this->sanitizer->entities($csrfValue) . '">';
    $out .= '<input type="hidden" name="pwna_action" value="save_funnel">';
    $out .= '<label class="pwna-field pwna-span-all"><span>Funnel steps</span>';
    $out .= '<textarea name="funnel_steps" rows="6" class="pwna-funnel-input" placeholder="/&#10;Product page = /shop/*&#10;event:cta/add_to_cart&#10;Thank you = /checkout/thank-you/">' . $this->sanitizer->entities($raw) . '</textarea>';
    $out .= '<small class="pwna-field-help">One step per line. Page steps: <code>/exact/path/</code> or <code>/section/*</code> (prefix). Event steps: <code>event:group</code>, <code>event:group/name</code> or <code>event:group/name/label</code>. Prefix any line with <code>Label = </code> for a custom label. Page and event steps can be mixed. Up to 8 steps.</small></label>';
    $out .= '<div class="pwna-funnel-actions"><button type="submit" class="ui-button">Save &amp; run funnel</button></div>';
    $out .= '</form>';

    if(count($steps) < 2) {
        $out .= '<p class="pwna-empty">Add at least two steps above to build a funnel.</p></div>';
        return $out;
    }

    $report = $analytics->getFunnelReport($steps, $rangeSpec, $filters);
    $rows = $report['steps'] ?? [];
    $entered = (int) ($report['entered'] ?? 0);

    if($entered === 0) {
        $out .= '<p class="pwna-empty">No sessions matched the first step in this date range. Check the paths against your Top pages, and remember paths are stored without query strings when that option is enabled.</p></div>';
        return $out;
    }

    $out .= '<div class="pwna-funnel-chart">';
    $lastIndex = count($rows) - 1;
    foreach($rows as $i => $row) {
        $width = max(2, (float) ($row['conv_from_start'] ?? 0));
        $stepNo = $i + 1;
        $out .= '<div class="pwna-funnel-step">';
        $badge = ((string) ($row['type'] ?? 'path') === 'event')
            ? ' <span class="pwna-funnel-badge pwna-funnel-badge-event">event</span>'
            : ' <span class="pwna-funnel-badge">page</span>';
        $out .= '<div class="pwna-funnel-step-head"><span class="pwna-funnel-step-label"><strong>' . $stepNo . '.</strong> ' . $this->sanitizer->entities((string) $row['label']) . $badge . '</span>';
        $out .= '<span class="pwna-funnel-step-meta">' . number_format((int) $row['sessions']) . ' sessions · ' . rtrim(rtrim((string) $row['conv_from_start'], '0'), '.') . '% of start</span></div>';
        $out .= '<div class="pwna-funnel-bar-track"><div class="pwna-funnel-bar" style="width:' . $width . '%;"></div></div>';
        if($i > 0) {
            $drop = (int) $row['dropoff'];
            $convPrev = rtrim(rtrim((string) $row['conv_from_prev'], '0'), '.');
            $out .= '<div class="pwna-funnel-transition">' . $convPrev . '% continued from previous · ' . number_format($drop) . ' dropped off</div>';
        }
        $out .= '</div>';
    }
    $out .= '</div>';

    // Summary table
    $tableRows = [];
    foreach($rows as $i => $row) {
        $tableRows[] = [
            '<strong>' . ($i + 1) . '.</strong> ' . $this->sanitizer->entities((string) $row['label']),
            number_format((int) $row['sessions']),
            rtrim(rtrim((string) $row['conv_from_start'], '0'), '.') . '%',
            $i === 0 ? '—' : rtrim(rtrim((string) $row['conv_from_prev'], '0'), '.') . '%',
            $i === 0 ? '—' : number_format((int) $row['dropoff']),
        ];
    }
    $overall = $rows ? $rows[$lastIndex] : null;
    if($overall) {
        $out .= '<p class="pwna-note">Overall completion: <strong>' . rtrim(rtrim((string) $overall['conv_from_start'], '0'), '.') . '%</strong> of the '
            . number_format($entered) . ' sessions that entered step 1 reached the final step.</p>';
    }
    $out .= $this->renderSimpleTable('Funnel steps', ['Step', 'Sessions', '% of start', '% from previous', 'Drop-off'], $tableRows);

    $out .= '</div>';
    return $out;
}

protected function renderGoalBuilderPanel(NativeAnalytics $analytics, array $goals, array $suggestions = []) {    if(!$this->user->hasPermission('nativeanalytics-manage')) {
        return '<div class="pwna-panel"><h2>Goal setup</h2><p class="pwna-note">You need the nativeanalytics-manage permission to create or edit goals.</p></div>';
    }
    $out = '<div class="pwna-panel pwna-helper-panel pwna-goal-builder-panel"><h2>Goal setup</h2>';
    $out .= '<p class="pwna-note">Create goals from existing NativeAnalytics events or from thank-you / confirmation page paths. Use the quick setup and recent tracked values to avoid typing when possible. You can still type custom values into every field.</p>';
    $out .= $this->renderGoalDatalists($suggestions);
    $out .= '<h3>Create a new goal</h3>';
    $out .= $this->renderGoalForm([], $suggestions);
    if($goals) {
        $out .= '<h3 class="pwna-configured-goals-title">Configured goals</h3>';
        foreach($goals as $goal) {
            $out .= '<details class="pwna-goal-detail"><summary>' . $this->sanitizer->entities((string) ($goal['title'] ?? 'Untitled goal')) . (empty($goal['active']) ? ' <span class="pwna-muted">(inactive)</span>' : '') . '</summary>';
            $out .= $this->renderGoalForm($goal, $suggestions);
            $out .= $this->renderDeleteGoalForm((int) ($goal['id'] ?? 0));
            $out .= '</details>';
        }
    }
    $out .= '</div>';
    return $out;
}

protected function renderGoalDatalists(array $suggestions) {
    $map = [
        'groups' => 'pwna-goal-groups',
        'names' => 'pwna-goal-names',
        'labels' => 'pwna-goal-labels',
        'targets' => 'pwna-goal-targets',
        'paths' => 'pwna-goal-paths',
    ];
    $out = '';
    foreach($map as $key => $id) {
        $out .= '<datalist id="' . $this->sanitizer->entities($id) . '">';
        foreach((array) ($suggestions[$key] ?? []) as $value => $label) {
            $out .= '<option value="' . $this->sanitizer->entities((string) $value) . '">' . $this->sanitizer->entities((string) $label) . '</option>';
        }
        $out .= '</datalist>';
    }
    return $out;
}

protected function renderGoalForm(array $goal, array $suggestions = []) {
    $csrfName = $this->session->CSRF->getTokenName();
    $csrfValue = $this->session->CSRF->getTokenValue();
    $id = (int) ($goal['id'] ?? 0);
    $type = (string) ($goal['goal_type'] ?? 'event');
    if(!in_array($type, ['event', 'page'], true)) $type = 'event';
    $base = (string) ($goal['conversion_base'] ?? 'sessions');
    if(!in_array($base, ['sessions', 'uniques'], true)) $base = 'sessions';
    $active = array_key_exists('active', $goal) ? !empty($goal['active']) : true;
    $out = '<form method="post" class="pwna-goal-form" data-pwna-goal-form="1">';
    $out .= '<input type="hidden" name="' . $this->sanitizer->entities($csrfName) . '" value="' . $this->sanitizer->entities($csrfValue) . '">';
    $out .= '<input type="hidden" name="pwna_action" value="save_goal">';
    $out .= '<input type="hidden" name="id" value="' . $id . '">';

    $out .= '<div class="pwna-goal-section"><h3>1. Goal basics</h3><div class="pwna-gen-grid">';
    $out .= $this->renderGoalPresetSelect();
    $out .= $this->renderGoalInput('title', 'Goal name', (string) ($goal['title'] ?? ''), 'Contact form submitted', 'A readable name used in the Goals table and conversion reports.');
    $out .= '<label class="pwna-field"><span>Goal type</span><select name="goal_type" data-pwna-goal-type><option value="event"' . ($type === 'event' ? ' selected' : '') . '>Event based</option><option value="page"' . ($type === 'page' ? ' selected' : '') . '>Page/path based</option></select><small class="pwna-field-help">Event goals match tracked actions. Page/path goals match visits to confirmation or thank-you pages.</small></label>';
    $out .= '<label class="pwna-field"><span>Conversion base</span><select name="conversion_base"><option value="sessions"' . ($base === 'sessions' ? ' selected' : '') . '>Sessions</option><option value="uniques"' . ($base === 'uniques' ? ' selected' : '') . '>Unique visitors</option></select><small class="pwna-field-help">Choose what the conversion rate is measured against. Sessions is usually best for leads and forms.</small></label>';
    $out .= '<label class="pwna-field pwna-checkbox-field"><span>Active</span><label><input type="checkbox" name="active" value="1"' . ($active ? ' checked' : '') . '> Include this goal in reports</label><small class="pwna-field-help">Turn this off to keep the goal definition but exclude it from cards, trend charts and conversion rates.</small></label>';
    $out .= '</div></div>';

    $out .= '<div class="pwna-goal-section" data-pwna-goal-event-section><h3>2. Event rule</h3>';
    $out .= '<p class="pwna-note">Use this when the conversion is a tracked action, for example a form submit, download, phone click or custom CTA click.</p>';
    $out .= '<div class="pwna-gen-grid">';
    $out .= $this->renderRecentEventSelect($suggestions);
    $out .= $this->renderGoalInput('event_group', 'Event group', (string) ($goal['event_group'] ?? ''), 'form, lead, download, contact', 'Exact match. Pick from recent values or type your own group.', 'pwna-goal-groups');
    $out .= $this->renderGoalInput('event_name', 'Event name', (string) ($goal['event_name'] ?? ''), 'form_submit, cta_contact', 'Exact match. For custom CTA buttons this is the data-pwna-event value.', 'pwna-goal-names');
    $out .= $this->renderGoalInput('event_label_contains', 'Event label contains', (string) ($goal['event_label_contains'] ?? ''), 'Contact, Demo, Booking', 'Optional. Use this to narrow the goal to a specific button/form label.', 'pwna-goal-labels');
    $out .= $this->renderGoalInput('event_target_contains', 'Event target contains', (string) ($goal['event_target_contains'] ?? ''), '/contact/ or file name', 'Optional. Use this to narrow the goal to a specific link target, file, phone number or URL.', 'pwna-goal-targets');
    $out .= '</div></div>';

    $out .= '<div class="pwna-goal-section" data-pwna-goal-page-section><h3>2. Page/path rule</h3>';
    $out .= '<p class="pwna-note">Use this when the conversion happens after a visitor reaches a confirmation page, for example after a form, checkout or booking flow.</p>';
    $out .= '<div class="pwna-gen-grid">';
    $out .= $this->renderRecentPageSelect($suggestions);
    $out .= $this->renderGoalInput('path_contains', 'Page/path contains', (string) ($goal['path_contains'] ?? ''), '/thank-you/', 'Contains match. Pick a recent path or type only the stable part of the URL, for example /thank-you/ instead of a full URL.', 'pwna-goal-paths');
    $out .= '</div></div>';

    $out .= '<div class="pwna-helper-actions"><button class="ui-button" type="submit">' . ($id > 0 ? 'Save goal' : 'Create goal') . '</button></div>';
    $out .= '</form>';
    return $out;
}

protected function renderGoalPresetSelect() {
    $out = '<label class="pwna-field"><span>Quick setup</span><select data-pwna-goal-preset><option value="">Choose a ready-made goal...</option>';
    $out .= '<option value="contact_form">Contact form submitted</option>';
    $out .= '<option value="lead_cta">Lead / CTA button clicked</option>';
    $out .= '<option value="download">File downloaded</option>';
    $out .= '<option value="contact_click">Phone or email clicked</option>';
    $out .= '<option value="thank_you">Thank-you page reached</option>';
    $out .= '</select><small class="pwna-field-help">Optional helper. It fills the main fields with common goal patterns.</small></label>';
    return $out;
}

protected function renderRecentEventSelect(array $suggestions) {
    $events = (array) ($suggestions['events'] ?? []);
    $out = '<label class="pwna-field pwna-span-all"><span>Choose recent tracked event</span><select data-pwna-goal-event-select><option value="">Select from recent Engagement data...</option>';
    if($events) {
        $i = 0;
        foreach($events as $event) {
            $out .= '<option value="' . (++$i) . '" data-event-group="' . $this->sanitizer->entities((string) ($event['event_group'] ?? '')) . '" data-event-name="' . $this->sanitizer->entities((string) ($event['event_name'] ?? '')) . '" data-event-label="' . $this->sanitizer->entities((string) ($event['event_label'] ?? '')) . '" data-event-target="' . $this->sanitizer->entities((string) ($event['event_target'] ?? '')) . '">' . $this->sanitizer->entities((string) ($event['title'] ?? 'Tracked event')) . '</option>';
        }
    } else {
        $out .= '<option value="" disabled>No tracked events found in the selected range yet</option>';
    }
    $out .= '</select><small class="pwna-field-help">This fills event group, name, label and target from real tracked actions. You can edit the values after selecting.</small></label>';
    return $out;
}

protected function renderRecentPageSelect(array $suggestions) {
    $pages = (array) ($suggestions['pages'] ?? []);
    $out = '<label class="pwna-field pwna-span-all"><span>Choose recent page/path</span><select data-pwna-goal-page-select><option value="">Select from recent traffic...</option>';
    if($pages) {
        foreach($pages as $page) {
            $path = (string) ($page['path'] ?? '');
            $label = (string) ($page['label'] ?? $path);
            $out .= '<option value="' . $this->sanitizer->entities($path) . '" data-path="' . $this->sanitizer->entities($path) . '">' . $this->sanitizer->entities($label) . '</option>';
        }
    } else {
        $out .= '<option value="" disabled>No recent page paths found in the selected range yet</option>';
    }
    $out .= '</select><small class="pwna-field-help">Useful for confirmation pages. The path field below remains editable for custom contains matching.</small></label>';
    return $out;
}

protected function renderGoalInput($name, $label, $value, $placeholder = '', $help = '', $listId = '') {
    $list = $listId !== '' ? ' list="' . $this->sanitizer->entities($listId) . '"' : '';
    $out = '<label class="pwna-field"><span>' . $this->sanitizer->entities($label) . '</span><input type="text" name="' . $this->sanitizer->entities($name) . '" value="' . $this->sanitizer->entities((string) $value) . '" placeholder="' . $this->sanitizer->entities((string) $placeholder) . '"' . $list . '>';
    if($help !== '') $out .= '<small class="pwna-field-help">' . $this->sanitizer->entities($help) . '</small>';
    $out .= '</label>';
    return $out;
}

protected function renderDeleteGoalForm($goalId) {
    if($goalId < 1) return '';
    $csrfName = $this->session->CSRF->getTokenName();
    $csrfValue = $this->session->CSRF->getTokenValue();
    $out = '<form method="post" class="pwna-delete-goal-form" onsubmit="return confirm(\'Delete this goal? Existing analytics data is not deleted.\');">';
    $out .= '<input type="hidden" name="' . $this->sanitizer->entities($csrfName) . '" value="' . $this->sanitizer->entities($csrfValue) . '">';
    $out .= '<input type="hidden" name="pwna_action" value="delete_goal">';
    $out .= '<input type="hidden" name="goal_id" value="' . (int) $goalId . '">';
    $out .= '<button class="ui-button pwna-danger-button" type="submit">Delete goal</button>';
    $out .= '</form>';
    return $out;
}

protected function renderComparePanel(NativeAnalytics $analytics, array $rangeMeta, array $compareMeta, array $summary, array $compareSummary, array $quality, array $compareQuality, array $summary404, array $compareSummary404, array $series, array $compareSeries, $pageId = 0, $template = '', array $templates = []) {
    if(!$compareMeta['enabled']) {
        return '<div class="pwna-panel"><h2>Compare periods</h2><p class="pwna-note">Use the compare filters above to choose the main date range and the comparison mode for this tab.</p></div>';
    }

    $out = '<div class="pwna-panel"><h2>Compare periods</h2><p class="pwna-note">Selected period: ' . $this->sanitizer->entities($rangeMeta['label']) . '<br>Compared against: ' . $this->sanitizer->entities($compareMeta['label']) . '</p>';
    $out .= '<div class="pwna-legend"><span class="pwna-legend-item"><span class="pwna-swatch"></span>Selected period</span><span class="pwna-legend-item"><span class="pwna-swatch compare"></span>Comparison period</span></div>';
    $out .= $this->renderComparisonCards($summary, $compareSummary, $quality, $compareQuality, $summary404, $compareSummary404);
    $out .= '</div>';

    $out .= '<div class="pwna-grid-2">';
    $out .= '<div class="pwna-panel"><h2>Views comparison</h2><p class="pwna-note">The chart aligns both periods by slot so you can compare like-for-like days across the selected range.</p>' . $analytics->renderComparisonChart($series, $compareSeries, 'views', 'Views comparison chart', 'Selected period', 'Comparison period') . '</div>';
    $out .= '<div class="pwna-panel"><h2>Comparison summary</h2>' . $this->renderComparisonSummaryTable($summary, $compareSummary, $quality, $compareQuality, $summary404, $compareSummary404) . '</div>';
    $out .= '</div>';

    return $out;
}

protected function renderComparisonCards(array $summary, array $compareSummary, array $quality, array $compareQuality, array $summary404, array $compareSummary404) {
    $cards = [
        ['Views', (float) ($summary['views'] ?? 0), (float) ($compareSummary['views'] ?? 0), 0],
        ['Unique visitors', (float) ($summary['uniques'] ?? 0), (float) ($compareSummary['uniques'] ?? 0), 0],
        ['Sessions', (float) ($summary['sessions'] ?? 0), (float) ($compareSummary['sessions'] ?? 0), 0],
        ['Avg pages / session', (float) ($quality['avg_pages_per_session'] ?? 0), (float) ($compareQuality['avg_pages_per_session'] ?? 0), 2],
        ['Single-page rate', (float) ($quality['single_page_rate'] ?? 0), (float) ($compareQuality['single_page_rate'] ?? 0), 1],
        ['404 hits', (float) ($summary404['views'] ?? 0), (float) ($compareSummary404['views'] ?? 0), 0],
    ];
    $out = '<div class="pwna-compare-cards">';
    foreach($cards as $card) {
        [$label, $currentValue, $compareValue, $decimals] = $card;
        $currentText = number_format($currentValue, $decimals);
        $compareText = number_format($compareValue, $decimals);
        if($label === 'Single-page rate') {
            $currentText .= '%';
            $compareText .= '%';
        }
        $out .= '<div class="pwna-compare-card">';
        $out .= '<div class="pwna-card-label">' . $this->sanitizer->entities($label) . '</div>';
        $out .= '<div class="pwna-card-value">' . $currentText . '</div>';
        $out .= '<div class="pwna-card-sub">Comparison: ' . $compareText . '</div>';
        $out .= '<div class="pwna-compare-meta"><span>Change</span>' . $this->renderDeltaBadge($currentValue, $compareValue, $decimals) . '</div>';
        $out .= '</div>';
    }
    $out .= '</div>';
    return $out;
}

protected function renderComparisonSummaryTable(array $summary, array $compareSummary, array $quality, array $compareQuality, array $summary404, array $compareSummary404) {
    $rows = [
        ['Views', number_format((int) ($summary['views'] ?? 0)), number_format((int) ($compareSummary['views'] ?? 0)), $this->renderDeltaBadge((float) ($summary['views'] ?? 0), (float) ($compareSummary['views'] ?? 0))],
        ['Unique visitors', number_format((int) ($summary['uniques'] ?? 0)), number_format((int) ($compareSummary['uniques'] ?? 0)), $this->renderDeltaBadge((float) ($summary['uniques'] ?? 0), (float) ($compareSummary['uniques'] ?? 0))],
        ['Sessions', number_format((int) ($summary['sessions'] ?? 0)), number_format((int) ($compareSummary['sessions'] ?? 0)), $this->renderDeltaBadge((float) ($summary['sessions'] ?? 0), (float) ($compareSummary['sessions'] ?? 0))],
        ['Avg pages / session', number_format((float) ($quality['avg_pages_per_session'] ?? 0), 2), number_format((float) ($compareQuality['avg_pages_per_session'] ?? 0), 2), $this->renderDeltaBadge((float) ($quality['avg_pages_per_session'] ?? 0), (float) ($compareQuality['avg_pages_per_session'] ?? 0), 1)],
        ['Single-page rate', number_format((float) ($quality['single_page_rate'] ?? 0), 1) . '%', number_format((float) ($compareQuality['single_page_rate'] ?? 0), 1) . '%', $this->renderDeltaBadge((float) ($quality['single_page_rate'] ?? 0), (float) ($compareQuality['single_page_rate'] ?? 0), 1)],
        ['404 hits', number_format((int) ($summary404['views'] ?? 0)), number_format((int) ($compareSummary404['views'] ?? 0)), $this->renderDeltaBadge((float) ($summary404['views'] ?? 0), (float) ($compareSummary404['views'] ?? 0))],
    ];
    return $this->renderSimpleTableBodyOnly(['Metric', 'Selected period', 'Comparison', 'Change'], $rows);
}

protected function renderDeltaBadge($current, $compare, $decimals = 0) {
    $delta = $this->calculateDelta($current, $compare);
    $text = $this->formatDeltaText($current, $compare, $decimals);
    $class = 'pwna-delta is-flat';
    if($delta > 0.001) $class = 'pwna-delta is-up';
    elseif($delta < -0.001) $class = 'pwna-delta is-down';
    return '<span class="' . $class . '">' . $this->sanitizer->entities($text) . '</span>';
}

protected function calculateDelta($current, $compare) {
    $current = (float) $current;
    $compare = (float) $compare;
    if(abs($compare) < 0.00001) {
        if(abs($current) < 0.00001) return 0.0;
        return 100.0;
    }
    return (($current - $compare) / $compare) * 100;
}

protected function formatDeltaText($current, $compare, $decimals = 0) {
    $delta = $this->calculateDelta($current, $compare);
    if(abs((float) $compare) < 0.00001 && abs((float) $current) < 0.00001) return '0%';
    if(abs((float) $compare) < 0.00001) return 'new';
    $prefix = $delta > 0 ? '+' : '';
    return $prefix . number_format($delta, max(0, (int) $decimals)) . '%';
}

protected function renderHelpIcon($text, $label = 'Help', $extraClass = '') {
    $text = trim((string) $text);
    if($text === '') return '';
    $class = trim('pwna-help-tip ' . (string) $extraClass);
    return '<span class="' . $this->sanitizer->entities($class) . '" tabindex="0" aria-label="' . $this->sanitizer->entities($label) . '"><span class="pwna-help-tip-icon">?</span><span class="pwna-help-tip-bubble">' . nl2br($this->sanitizer->entities($text)) . '</span></span>';
}

    protected function renderManageActions() {
        if(!$this->user->hasPermission('nativeanalytics-manage')) return '';
        $csrfName = $this->session->CSRF->getTokenName();
        $csrfValue = $this->session->CSRF->getTokenValue();
        $actions = [
            'rebuild_today' => [
                'label' => 'Rebuild today',
                'help' => "Recalculates today's daily summary from raw tracked hits. Useful after testing or when you want to refresh today's totals immediately.",
            ],
            'rebuild_yesterday' => [
                'label' => 'Rebuild yesterday',
                'help' => "Recalculates yesterday's daily summary from raw tracked hits.",
            ],
            'purge_hits' => [
                'label' => 'Purge old raw hits',
                'help' => 'Deletes older raw page-hit records according to the module retention rules. Aggregated summary data stays available.',
            ],
            'purge_events' => [
                'label' => 'Purge old raw events',
                'help' => 'Deletes older raw engagement events according to the module retention rules. Event and goal aggregates stay available.',
            ],
            'purge_realtime' => [
                'label' => 'Purge old realtime sessions',
                'help' => 'Removes stale current-visitor rows that are older than the realtime visitor window.',
            ],
            'cleanup_404s' => [
                'label' => 'Cleanup resolvable 404s',
                'help' => 'Removes 404 hits whose paths now resolve to a valid page via PagePathHistory, ProcessRedirects or Jumplinks. Useful after renaming pages or adding redirects.',
            ],
            'cleanup_suspicious' => [
                'label' => 'Cleanup suspicious probes',
                'help' => 'Removes tracked hits whose paths match the suspicious-path patterns from the module config (e.g. /wp-admin, /.env, /xmlrpc.php). Useful for cleaning out probe attempts logged before the filter was configured.',
            ],
        ];
        $out = '<div class="pwna-panel"><h2>Maintenance</h2><div class="pwna-actions">';
        foreach($actions as $value => $item) {
            $out .= '<div class="pwna-action-item">';
            $out .= '<div class="pwna-action-button-wrap">';
            $out .= '<form method="post">';
            $out .= '<input type="hidden" name="' . $this->sanitizer->entities($csrfName) . '" value="' . $this->sanitizer->entities($csrfValue) . '">';
            $out .= '<input type="hidden" name="pwna_action" value="' . $this->sanitizer->entities($value) . '">';
            $out .= '<button class="ui-button pwna-button-tip" type="submit" data-pwna-tip="' . $this->sanitizer->entities($item['help']) . '">' . $this->sanitizer->entities($item['label']) . '</button></form>';
            $out .= '</div>';
            $out .= '</div>';
        }
        $out .= '</div>';
        $out .= '<div class="pwna-danger-zone">';
        $out .= '<h3>Danger zone</h3>';
        $out .= '<p class="pwna-note">Reset analytics data permanently deletes all tracked page views, sessions, daily aggregates, goal aggregates and engagement events. Goal definitions stay intact. Module settings and dashboard pages stay intact.</p>';
        $out .= "<form method=\"post\" onsubmit=\"return confirm('Are you sure you want to reset all analytics data? This cannot be undone.');\">";
        $out .= '<input type="hidden" name="' . $this->sanitizer->entities($csrfName) . '" value="' . $this->sanitizer->entities($csrfValue) . '">';
        $out .= '<input type="hidden" name="pwna_action" value="reset_analytics_data">';
        $out .= '<button class="ui-button pwna-danger-button" type="submit">Reset analytics data</button>';
        $out .= '</form>';
        $out .= '</div></div>';
        return $out;
    }

    protected function renderCards(array $summary, array $current, array $summary404, array $quality) {
        $avgTime = (int) ($quality['avg_time_on_page'] ?? 0);
        $avgTimeLabel = $avgTime > 0 ? ($avgTime >= 60 ? floor($avgTime / 60) . 'm ' . ($avgTime % 60) . 's' : $avgTime . 's') : '—';
        $cards = [
            ['Views', number_format((int) ($summary['views'] ?? 0)), 'views'],
            ['Unique visitors', number_format((int) ($summary['uniques'] ?? 0)), 'uniques'],
            ['Sessions', number_format((int) ($summary['sessions'] ?? 0)), 'sessions'],
            ['Avg pages / session', number_format((float) ($quality['avg_pages_per_session'] ?? 0), 2), 'avg_pages_per_session'],
            ['Single-page rate', number_format((float) ($quality['single_page_rate'] ?? 0), 1) . '%', 'single_page_rate'],
            ['Avg active time / session', $avgTimeLabel, 'avg_time_on_page'],
            ['Current visitors', number_format((int) ($current['current_uniques'] ?? $current['current_visitors'] ?? 0)), 'current_visitors'],
            ['404 hits', number_format((int) ($summary404['views'] ?? 0)), 'hits_404'],
        ];
        $out = '<div class="pwna-cards">';
        foreach($cards as $card) {
            $out .= '<div class="pwna-card"><div class="pwna-card-label">' . $this->sanitizer->entities($card[0]) . '</div><div class="pwna-card-value" data-pwna-card="' . $this->sanitizer->entities($card[2]) . '">' . $card[1] . '</div></div>';
        }
        $out .= '</div>';
        return $out;
    }

    protected function renderCurrentVisitorsPanel(NativeAnalytics $analytics, array $rows, $minutes) {
        $out = '<div class="pwna-panel" id="pwna-current-panel"><h2>Current visitors <span id="pwna-live-status" class="pwna-live-status" data-state=""></span></h2>';
        $out .= '<p class="pwna-note" id="pwna-current-note">Active in the last ' . (int) $minutes . ' minutes.</p>';
        if(!$rows) {
            $out .= '<div id="pwna-current-body"><p class="pwna-empty">No active visitors right now.</p></div></div>';
            return $out;
        }
        $canBlock = $this->user->hasPermission('nativeanalytics-manage');
        $csrfName = $this->session->CSRF->getTokenName();
        $csrfValue = $this->session->CSRF->getTokenValue();

        // The sessions table does not store ip_hash (only visitor_hash). To still
        // offer the "Block" action we resolve each visitor_hash to its most recent
        // ip_hash from the hits table in a single bulk query.
        $visitorIpMap = [];
        if($canBlock) {
            $visitorHashes = [];
            foreach($rows as $row) {
                if(!empty($row['visitor_hash'])) $visitorHashes[(string) $row['visitor_hash']] = true;
            }
            $visitorHashes = array_keys($visitorHashes);
            if($visitorHashes) {
                try {
                    $db = $this->wire('database');
                    $placeholders = implode(',', array_fill(0, count($visitorHashes), '?'));
                    $stmt = $db->prepare("SELECT visitor_hash, ip_hash
                                          FROM `pwna_hits`
                                          WHERE visitor_hash IN ({$placeholders})
                                            AND ip_hash <> ''
                                          ORDER BY created_at DESC");
                    $stmt->execute($visitorHashes);
                    while($r = $stmt->fetch(\PDO::FETCH_ASSOC)) {
                        $vh = (string) $r['visitor_hash'];
                        if(!isset($visitorIpMap[$vh])) $visitorIpMap[$vh] = (string) $r['ip_hash'];
                    }
                } catch(\Throwable $e) {
                    // ignore - Block buttons just won't render
                }
            }
        }

        $mapped = [];
        foreach($rows as $row) {
            $pageLabel = $this->sanitizer->entities($row['current_path']);
            if(!empty($row['page_title'])) {
                $pageLabel = '<strong>' . $this->sanitizer->entities(strip_tags((string) $row['page_title'])) . '</strong><br><span class="pwna-muted">' . $this->sanitizer->entities((string) $row['current_path']) . '</span>';
            }
            if((int) ($row['status_code'] ?? 200) === 404) {
                $pageLabel .= '<br><span class="pwna-badge">404</span>';
            }
            // Block IP button (only for users with manage permission, only if we have an ip_hash)
            $actionCell = '';
            $rowIpHash = '';
            if(!empty($row['visitor_hash']) && isset($visitorIpMap[(string) $row['visitor_hash']])) {
                $rowIpHash = $visitorIpMap[(string) $row['visitor_hash']];
            }
            if($canBlock && $rowIpHash !== '') {
                $hashShort = substr($rowIpHash, 0, 12);
                $actionCell = '<form method="post" style="display:inline" onsubmit="return confirm(\'Block this IP from future tracking? This will silently drop all requests from this visitor.\');">'
                    . '<input type="hidden" name="' . $this->sanitizer->entities($csrfName) . '" value="' . $this->sanitizer->entities($csrfValue) . '">'
                    . '<input type="hidden" name="pwna_action" value="block_ip">'
                    . '<input type="hidden" name="ip_hash" value="' . $this->sanitizer->entities($rowIpHash) . '">'
                    . '<button type="submit" class="pwna-secondary-btn" title="Block this visitor IP (hash: ' . $this->sanitizer->entities($hashShort) . '…)" style="padding:2px 8px;font-size:11px;">Block</button>'
                    . '</form>';
            }
            $rowCells = [
                $pageLabel,
                $this->sanitizer->entities((string) $row['device_type']),
                $this->sanitizer->entities((string) $row['browser']),
                $this->sanitizer->entities($this->formatDateTime($analytics, $row['last_seen_at'])),
            ];
            if($canBlock) $rowCells[] = $actionCell;
            $mapped[] = $rowCells;
        }
        $headers = ['Page', 'Device', 'Browser', 'Last seen'];
        if($canBlock) $headers[] = 'Action';
        $out .= '<div id="pwna-current-body">' . $this->renderSimpleTableBodyOnly($headers, $mapped) . '</div>';
        $out .= '</div>';
        return $out;
    }

    protected function renderSimpleTable($title, array $headers, array $rows, $searchable = false) {
        $out = '<div class="pwna-panel"><h2>' . $this->sanitizer->entities($title) . '</h2>';
        if(!$rows) return $out . '<p class="pwna-empty">No data yet.</p></div>';
        if($searchable && count($rows) > 10) {
            $uid = 'pwna-search-' . substr(md5($title), 0, 8);
            $out .= '<div class="pwna-table-search-wrap"><input type="search" class="pwna-table-search" data-pwna-table="' . $uid . '" placeholder="Filter ' . $this->sanitizer->entities(strtolower($title)) . '…" aria-label="Filter table"></div>';
            return $out . $this->renderSimpleTableBodyOnly($headers, $rows, $uid) . '</div>';
        }
        return $out . $this->renderSimpleTableBodyOnly($headers, $rows) . '</div>';
    }

    protected function renderSimpleTableBodyOnly(array $headers, array $rows, $tableId = '') {
        $idAttr = $tableId ? ' id="' . $this->sanitizer->entities($tableId) . '"' : '';
        $out = '<div class="pwna-table-wrap"><table class="pwna-table"' . $idAttr . '><thead><tr>';
        foreach($headers as $header) $out .= '<th>' . $this->sanitizer->entities($header) . '</th>';
        $out .= '</tr></thead><tbody>';
        foreach($rows as $row) {
            $out .= '<tr>';
            foreach($row as $cell) $out .= '<td>' . $cell . '</td>';
            $out .= '</tr>';
        }
        $out .= '</tbody></table></div>';
        return $out;
    }

protected function renderTableSearchScript() {
    $nonce = $this->getScriptNonceAttribute();
    return '<script' . $nonce . '>(function(){
function initSearch(input) {
  if(input.dataset.pwnaSearchInit === "1") return;
  input.dataset.pwnaSearchInit = "1";
  var tableId = input.getAttribute("data-pwna-table");
  var table = tableId ? document.getElementById(tableId) : null;
  if(!table) return;
  input.addEventListener("input", function() {
    var q = input.value.toLowerCase().trim();
    var rows = table.querySelectorAll("tbody tr");
    var shown = 0;
    rows.forEach(function(row) {
      var text = row.textContent.toLowerCase();
      var match = !q || text.indexOf(q) !== -1;
      row.style.display = match ? "" : "none";
      if(match) shown++;
    });
    // Show "no results" row if all hidden
    var noResults = table.querySelector("tr.pwna-no-results");
    if(!noResults) {
      noResults = document.createElement("tr");
      noResults.className = "pwna-no-results";
      var td = document.createElement("td");
      td.colSpan = table.querySelectorAll("thead th").length || 99;
      td.style.cssText = "text-align:center;padding:12px;color:#888;font-style:italic";
      td.textContent = "No results match your search.";
      noResults.appendChild(td);
      table.querySelector("tbody").appendChild(noResults);
    }
    noResults.style.display = (q && shown === 0) ? "" : "none";
  });
}
function init() {
  document.querySelectorAll(".pwna-table-search").forEach(initSearch);
}
if(document.readyState === "loading") { document.addEventListener("DOMContentLoaded", init); } else { init(); }
})();</script>';
}

protected function renderExportDropdownScript() {
    $nonce = $this->getScriptNonceAttribute();
    return '<script' . $nonce . '>(function(){
function init() {
  document.querySelectorAll(".pwna-export-dropdown").forEach(function(dd) {
    if(dd.dataset.pwnaDropInit === "1") return;
    dd.dataset.pwnaDropInit = "1";
    var btn = dd.querySelector(".pwna-export-dropdown-btn");
    if(!btn) return;
    btn.addEventListener("click", function(e) {
      e.stopPropagation();
      var open = dd.classList.toggle("is-open");
      btn.setAttribute("aria-expanded", open ? "true" : "false");
    });
  });
  document.addEventListener("click", function() {
    document.querySelectorAll(".pwna-export-dropdown.is-open").forEach(function(dd) {
      dd.classList.remove("is-open");
      var btn = dd.querySelector(".pwna-export-dropdown-btn");
      if(btn) btn.setAttribute("aria-expanded", "false");
    });
  });
  document.addEventListener("keydown", function(e) {
    if(e.key === "Escape") {
      document.querySelectorAll(".pwna-export-dropdown.is-open").forEach(function(dd) {
        dd.classList.remove("is-open");
        var btn = dd.querySelector(".pwna-export-dropdown-btn");
        if(btn) { btn.setAttribute("aria-expanded", "false"); btn.focus(); }
      });
    }
  });
}
if(document.readyState === "loading") { document.addEventListener("DOMContentLoaded", init); } else { init(); }
})();</script>';
}

protected function renderChartTooltipScript() {
    $nonce = $this->getScriptNonceAttribute();
    return '<script' . $nonce . '>(function(){function init(){document.querySelectorAll(".pwna-chart-wrap").forEach(function(wrap){if(wrap.dataset.pwnaTooltipInit==="1")return;wrap.dataset.pwnaTooltipInit="1";var tip=wrap.querySelector(".pwna-chart-tooltip");if(!tip)return;var dayEl=tip.querySelector(".pwna-chart-tooltip-day:not([data-pwna-tip])");var timeEl=tip.querySelector(".pwna-chart-tooltip-time");var viewsEl=tip.querySelector("[data-pwna-tip=views]");var uniquesEl=tip.querySelector("[data-pwna-tip=uniques]");var sessionsEl=tip.querySelector("[data-pwna-tip=sessions]");var compareWrap=tip.querySelector(".pwna-chart-tooltip-compare");var compareDay=tip.querySelector("[data-pwna-tip=compare-day]");var compareViews=tip.querySelector("[data-pwna-tip=compare-views]");var compareUniques=tip.querySelector("[data-pwna-tip=compare-uniques]");var compareSessions=tip.querySelector("[data-pwna-tip=compare-sessions]");function place(ev){if(!ev)return;var rect=wrap.getBoundingClientRect();var x=(ev.clientX-rect.left)+14;var y=(ev.clientY-rect.top)-12;var maxX=Math.max(8,rect.width-tip.offsetWidth-8);var maxY=Math.max(8,rect.height-tip.offsetHeight-8);tip.style.left=Math.max(8,Math.min(x,maxX))+"px";tip.style.top=Math.max(8,Math.min(y,maxY))+"px";}function activate(point,ev){wrap.querySelectorAll(".pwna-point.is-active").forEach(function(el){el.classList.remove("is-active");});point.classList.add("is-active");if(dayEl)dayEl.textContent=point.getAttribute("data-label")||"";var timeText=point.getAttribute("data-time")||"";if(timeEl){timeEl.textContent=timeText;timeEl.hidden=!timeText;}if(viewsEl)viewsEl.textContent=point.getAttribute("data-views")||"0";if(uniquesEl)uniquesEl.textContent=point.getAttribute("data-uniques")||"0";if(sessionsEl)sessionsEl.textContent=point.getAttribute("data-sessions")||"0";var hasCompare=point.hasAttribute("data-compare-label");if(compareWrap){compareWrap.hidden=!hasCompare;if(hasCompare){if(compareDay)compareDay.textContent=point.getAttribute("data-compare-label")||"";if(compareViews)compareViews.textContent=point.getAttribute("data-compare-views")||"0";if(compareUniques)compareUniques.textContent=point.getAttribute("data-compare-uniques")||"0";if(compareSessions)compareSessions.textContent=point.getAttribute("data-compare-sessions")||"0";}}tip.hidden=false;place(ev);}wrap.querySelectorAll(".pwna-point").forEach(function(point){if(point.dataset.pwnaTooltipPoint==="1")return;point.dataset.pwnaTooltipPoint="1";point.addEventListener("mouseenter",function(ev){activate(point,ev);});point.addEventListener("mousemove",function(ev){place(ev);});});wrap.addEventListener("mouseleave",function(){wrap.querySelectorAll(".pwna-point.is-active").forEach(function(el){el.classList.remove("is-active");});tip.hidden=true;});});}window.PWNA_initChartTooltips=init;if(document.readyState==="loading"){document.addEventListener("DOMContentLoaded",init);}else{init();}})();</script>';
}
        protected function renderAutoRefreshScript(array $rangeMeta, $minutes, $pageId, $template) {
        /** @var NativeAnalytics $analytics */
        $analytics = $this->modules->get('NativeAnalytics');
        $endpoint = $analytics->getRealtimeEndpointUrl();
        $payload = [
            'endpoint' => $endpoint,
            'rangeDays' => max(1, (int) $rangeMeta['rangeDays']),
            'fromDate' => (string) $rangeMeta['fromDate'],
            'toDate' => (string) $rangeMeta['toDate'],
            'minutes' => (int) $minutes,
            'pageId' => (int) $pageId,
            'template' => (string) $template,
            'canBlock' => $this->user->hasPermission('nativeanalytics-manage'),
            'csrfName' => $this->session->CSRF->getTokenName(),
            'csrfValue' => $this->session->CSRF->getTokenValue(),
            'chartGeometry' => $analytics->getChartGeometry(),
            'liveCharts' => ((string) $rangeMeta['fromDate'] === '' && (string) $rangeMeta['toDate'] === ''),
            'refreshMs' => (function() use ($analytics) {
                $secs = (int) $analytics->realtimeRefreshSeconds;
                if($secs <= 0) return 0;
                return max(5, min(300, $secs)) * 1000;
            })(),
        ];
        $json = json_encode($payload, JSON_UNESCAPED_SLASHES | JSON_HEX_TAG | JSON_HEX_AMP | JSON_HEX_APOS | JSON_HEX_QUOT);
        if($json === false) $json = '{}';
        $nonceAttr = $this->getScriptNonceAttribute();
        $script = <<<'HTML'
<script__PWNA_NONCE__>
(function(){
  var cfg = __PWNA_JSON__;
  if(!cfg || !cfg.endpoint || !window.fetch) return;
  function fmt(n, d, suf) {
    var num = Number(n || 0);
    try {
      var out = new Intl.NumberFormat(undefined, { minimumFractionDigits: d || 0, maximumFractionDigits: d || 0 }).format(num);
      return out + (suf || '');
    } catch(e) { return String(num) + (suf || ''); }
  }
  function esc(s) { return String(s == null ? '' : s).replace(/[&<>"]/g, function(c){ return {'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;'}[c] || c; }); }
  function attrEsc(s) { return String(s == null ? '' : s).replace(/\\/g,'\\\\').replace(/"/g,'\\"'); }
  function setText(sel, val) { var el = document.querySelector(sel); if(el) el.textContent = val; }
  function updateCards(data) {
    if(!data) return;
    setText('[data-pwna-card=views]', fmt(data.summary && data.summary.views));
    setText('[data-pwna-card=uniques]', fmt(data.summary && data.summary.uniques));
    setText('[data-pwna-card=sessions]', fmt(data.summary && data.summary.sessions));
    setText('[data-pwna-card=avg_pages_per_session]', fmt(data.sessionQuality && data.sessionQuality.avg_pages_per_session, 2));
    setText('[data-pwna-card=single_page_rate]', fmt(data.sessionQuality && data.sessionQuality.single_page_rate, 1, '%'));
    (function(){ var secs = data.sessionQuality && data.sessionQuality.avg_time_on_page ? parseInt(data.sessionQuality.avg_time_on_page, 10) : 0; var label = secs > 0 ? (secs >= 60 ? Math.floor(secs/60) + 'm ' + (secs%60) + 's' : secs + 's') : '—'; setText('[data-pwna-card=avg_time_on_page]', label); }());
    setText('[data-pwna-card=current_visitors]', fmt(data.current && (data.current.current_uniques || data.current.current_visitors)));
    setText('[data-pwna-card=hits_404]', fmt(data.summary404 && data.summary404.views));
    setText('#pwna-health-hits', fmt(data.health && data.health.hits_count));
    setText('#pwna-health-sessions', fmt(data.health && data.health.sessions_count));
    setText('#pwna-health-daily', fmt(data.health && data.health.daily_count));
    setText('#pwna-health-events', fmt(data.health && data.health.events_count));
    setText('#pwna-health-last-hit', (data.health && data.health.last_hit_at) || '—');
    setText('#pwna-health-last-session', (data.health && data.health.last_session_at) || '—');
    setText('#pwna-health-last-event', (data.health && data.health.last_event_at) || '—');
  }
  function blockForm(hash) {
    if(!cfg.canBlock || !hash) return '';
    var shortHash = String(hash).substring(0, 12);
    return '<form method="post" style="display:inline" onsubmit="return confirm(\'Block this IP from future tracking? This will silently drop all requests from this visitor.\');">'
      + '<input type="hidden" name="' + esc(cfg.csrfName || '') + '" value="' + esc(cfg.csrfValue || '') + '">'
      + '<input type="hidden" name="pwna_action" value="block_ip">'
      + '<input type="hidden" name="ip_hash" value="' + esc(hash) + '">'
      + '<button type="submit" class="pwna-secondary-btn" title="Block this visitor IP (hash: ' + esc(shortHash) + '…)" style="padding:2px 8px;font-size:11px;">Block</button>'
      + '</form>';
  }
  function renderCurrent(rows) {
    var note = document.getElementById('pwna-current-note');
    if(note) note.textContent = 'Active in the last ' + cfg.minutes + ' minutes.';
    var wrap = document.getElementById('pwna-current-body');
    if(!wrap) return;
    if(!rows || !rows.length) { wrap.innerHTML = '<p class="pwna-empty">No active visitors right now.</p>'; return; }
    var heads = cfg.canBlock ? '<th>Action</th>' : '';
    var html = '<div class="pwna-table-wrap"><table class="pwna-table"><thead><tr><th>Page</th><th>Device</th><th>Browser</th><th>Last seen</th>' + heads + '</tr></thead><tbody>';
    rows.forEach(function(row){
      var page = esc(row.current_path || '/');
      var title = String(row.page_title || '').replace(/<[^>]*>/g, '').trim();
      if(title) page = '<strong>' + esc(title) + '</strong><br><span class="pwna-muted">' + esc(row.current_path || '/') + '</span>';
      if(Number(row.status_code || 200) === 404) page += '<br><span class="pwna-badge">404</span>';
      html += '<tr><td>' + page + '</td><td>' + esc(row.device_type || '') + '</td><td>' + esc(row.browser || '') + '</td><td>' + esc(row.last_seen_at || '') + '</td>';
      if(cfg.canBlock) html += '<td>' + blockForm(row.ip_hash || '') + '</td>';
      html += '</tr>';
    });
    html += '</tbody></table></div>';
    wrap.innerHTML = html;
  }
  function updateCharts(slots) {
    if(!slots || !cfg.liveCharts || !cfg.chartGeometry) return;
    Object.keys(slots).forEach(function(id){
      var wrap = document.querySelector('[data-pwna-chart-live="' + attrEsc(id) + '"]');
      var slot = slots[id];
      if(!wrap || !slot) return;
      var key = String(slot.key == null ? '' : slot.key);
      var point = wrap.querySelector('.pwna-point[data-key="' + attrEsc(key) + '"]');
      if(!point) { refetchCharts(); return; }
      var g = cfg.chartGeometry;
      var metric = Number(slot.views || 0);
      var max = 1;
      wrap.querySelectorAll('.pwna-point').forEach(function(p){ max = Math.max(max, Number(p.getAttribute('data-views') || 0), metric); });
      var points = [];
      var all = Array.prototype.slice.call(wrap.querySelectorAll('.pwna-point'));
      all.forEach(function(p){
        if(p === point) {
          p.setAttribute('data-label', slot.label || p.getAttribute('data-label') || '');
          if(slot.time) p.setAttribute('data-time', slot.time);
          p.setAttribute('data-views', String(slot.views || 0));
          p.setAttribute('data-uniques', String(slot.uniques || 0));
          p.setAttribute('data-sessions', String(slot.sessions || 0));
        }
        var val = Number(p.getAttribute('data-views') || 0);
        var y = Number(g.padY) + Number(g.plotHeight) - ((val / max) * Number(g.plotHeight));
        p.setAttribute('cy', String(Math.round(y * 100) / 100));
        points.push((p.getAttribute('cx') || '0') + ',' + p.getAttribute('cy'));
      });
      var line = wrap.querySelector('.pwna-line');
      if(line) line.setAttribute('points', points.join(' '));
      for(var i=0;i<=4;i++){
        var v = Math.round((max / 4) * i);
        var y2 = Number(g.padY) + Number(g.plotHeight) - ((v / max) * Number(g.plotHeight));
        var grid = wrap.querySelector('[data-pwna-grid="' + i + '"]');
        var label = wrap.querySelector('[data-pwna-grid-label="' + i + '"]');
        if(grid){ grid.setAttribute('y1', String(Math.round(y2 * 100) / 100)); grid.setAttribute('y2', String(Math.round(y2 * 100) / 100)); }
        if(label){ label.setAttribute('y', String(Math.round((y2 + 4) * 100) / 100)); label.textContent = String(v); }
      }
    });
  }
  var refetchingCharts = false;
  function refetchCharts() {
    if(refetchingCharts || !cfg.liveCharts) return;
    var live = Array.prototype.slice.call(document.querySelectorAll('[data-pwna-chart-live]')).map(function(el){ return el.getAttribute('data-pwna-chart-live'); }).filter(Boolean);
    if(!live.length) return;
    refetchingCharts = true;
    var url = buildUrl();
    url.searchParams.set('render_charts', live.join(','));
    fetch(url.toString(), { credentials: 'same-origin' })
      .then(function(r){ return r.ok ? r.json() : null; })
      .then(function(data){
        if(!data || data.ok === false || !data.chartHtml) return;
        Object.keys(data.chartHtml).forEach(function(id){
          var wrap = document.querySelector('[data-pwna-chart-live="' + attrEsc(id) + '"]');
          if(!wrap) return;
          var holder = document.createElement('div');
          holder.innerHTML = data.chartHtml[id];
          var next = holder.firstElementChild;
          if(next) wrap.replaceWith(next);
        });
        if(window.PWNA_initChartTooltips) window.PWNA_initChartTooltips();
      })
      .catch(function(){})
      .then(function(){ refetchingCharts = false; });
  }
  function buildUrl() {
    var url = new URL(cfg.endpoint, window.location.origin);
    url.searchParams.set('range_days', String(cfg.rangeDays));
    url.searchParams.set('minutes', String(cfg.minutes));
    if(cfg.fromDate) url.searchParams.set('from_date', cfg.fromDate);
    if(cfg.toDate) url.searchParams.set('to_date', cfg.toDate);
    if(cfg.pageId > 0) url.searchParams.set('page_id', String(cfg.pageId));
    if(cfg.template) url.searchParams.set('template', cfg.template);
    return url;
  }
  function setLiveStatus(text, state) {
    var el = document.getElementById('pwna-live-status');
    if(!el) return;
    el.textContent = text;
    el.setAttribute('data-state', state || '');
  }
  function refresh() {
    fetch(buildUrl().toString(), { credentials: 'same-origin' })
      .then(function(r){ return r.ok ? r.json() : null; })
      .then(function(data){
        if(!data || data.ok === false) { setLiveStatus('Update failed', 'error'); return; }
        updateCards(data); updateCharts(data.chartLatest || {}); renderCurrent(data.currentVisitors || []);
        setLiveStatus(cfg.refreshMs > 0 ? 'Live · updated just now' : 'Updated just now', 'live');
      })
      .catch(function(){ setLiveStatus('Update failed', 'error'); });
  }

  var refreshMs = Number(cfg.refreshMs || 0);
  var timer = null;
  function tick(){ if(!document.hidden) refresh(); }
  function start(){ if(timer || refreshMs < 1000) return; timer = setInterval(tick, refreshMs); }
  function stop(){ if(timer){ clearInterval(timer); timer = null; } }

  refresh();
  if(refreshMs >= 1000) {
    start();
    document.addEventListener('visibilitychange', function(){
      if(document.hidden){ stop(); setLiveStatus('Paused (tab hidden)', 'paused'); }
      else { refresh(); start(); }
    });
  }
})();
</script>
HTML;
        return str_replace(['__PWNA_NONCE__', '__PWNA_JSON__'], [$nonceAttr, $json], $script);
    }


    protected function renderPageSearchScript() {
        $nonce = $this->getScriptNonceAttribute();
        $script = <<<'HTML'
<script__PWNA_NONCE__>
(function(){
  if(!window.fetch) return;
  function esc(s){return String(s==null?'':s).replace(/[&<>"]/g,function(c){return {'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;'}[c]||c;});}
  function closeAll(except){document.querySelectorAll('.pwna-pagefinder-results').forEach(function(el){if(el!==except)el.remove();});}
  function endpoint(input){return input.getAttribute('data-pwna-page-search') || './page-search/';}
  function target(input){var form=input.closest('form');return form?form.querySelector('input[name="'+(input.getAttribute('data-pwna-page-target')||'page_id')+'"]'):null;}
  function render(input, rows){
    closeAll();
    if(!rows || !rows.length) return;
    var box=document.createElement('div');
    box.className='pwna-pagefinder-results';
    rows.forEach(function(row){
      var btn=document.createElement('button');
      btn.type='button';
      btn.className='pwna-pagefinder-result';
      btn.innerHTML='<strong>'+esc(row.title || row.path || ('Page #'+row.page_id))+'</strong><span>'+esc(row.path || '')+'</span><em>'+esc(row.template || '')+' · '+esc(row.views || 0)+' views</em>';
      btn.addEventListener('click',function(){var t=target(input);if(t)t.value=row.page_id||'';input.value=row.title||row.path||row.label||'';closeAll();});
      box.appendChild(btn);
    });
    input.parentNode.appendChild(box);
  }
  document.querySelectorAll('.pwna-pagefinder').forEach(function(input){
    if(input.dataset.pwnaPageFinderInit==='1')return;
    input.dataset.pwnaPageFinderInit='1';
    var timer=null;
    input.addEventListener('input',function(){
      var q=input.value.trim();
      clearTimeout(timer);
      if(q.length<2){closeAll();return;}
      timer=setTimeout(function(){
        var url=new URL(endpoint(input), window.location.href);
        url.searchParams.set('q', q);
        url.searchParams.set('limit', '10');
        fetch(url.toString(), {credentials:'same-origin'})
          .then(function(r){return r.ok?r.json():null;})
          .then(function(data){if(!data||data.ok===false)return;render(input,data.results||[]);})
          .catch(function(){});
      },180);
    });
    input.addEventListener('focus',function(){ if(input.value.trim().length>=2) input.dispatchEvent(new Event('input')); });
  });
  document.addEventListener('click',function(ev){ if(!ev.target.closest('.pwna-pagefinder-label')) closeAll(); });
})();
</script>
HTML;
        return str_replace('__PWNA_NONCE__', $nonce, $script);
    }

    /**
     * Content tab: declining / growing pages and pages nobody visited.
     */
    protected function renderContentInsights(NativeAnalytics $analytics, $rangeSpec, array $filters) {
        $declining = $analytics->getPageTrends($rangeSpec, 'down', 15, 10, $filters);
        $growing = $analytics->getPageTrends($rangeSpec, 'up', 15, 10, $filters);
        $unvisited = $analytics->getPagesWithoutVisits($rangeSpec, 50, $filters);

        $out = '<div class="pwna-panel"><h2>Content insights</h2><p class="pwna-note">'
            . 'Compares the selected period with the previous period of the same length, and lists published pages that got no visits. '
            . 'Pages need at least 10 views in the busier period to appear in the trend tables. Bot traffic is excluded.</p></div>';
        $out .= '<div class="pwna-grid-2">';
        $out .= $this->renderSimpleTable('Declining pages', ['Page', 'Previous', 'Current', 'Change'], $this->mapTrendRows($declining), true);
        $out .= $this->renderSimpleTable('Growing pages', ['Page', 'Previous', 'Current', 'Change'], $this->mapTrendRows($growing), true);
        $out .= '</div>';

        $title = 'Pages without visits';
        $note = $unvisited['total'] > 0
            ? number_format($unvisited['total']) . ' of ' . number_format($unvisited['checked']) . ' published pages had no visits in this period'
                . ($unvisited['total'] > count($unvisited['rows']) ? ' (showing the ' . count($unvisited['rows']) . ' most recently modified)' : '') . '.'
            : 'Every published page created before this period was visited at least once.';
        if($unvisited['capped']) $note .= ' Only the 5,000 most recently modified pages were checked.';
        $note .= ' Candidates to update, link better, merge or retire. Pages created during the period are not listed.';

        $rows = [];
        foreach($unvisited['rows'] as $row) {
            $label = '<strong>' . $this->sanitizer->entities(strip_tags((string) $row['page_title'])) . '</strong><br><span class="pwna-muted">' . $this->sanitizer->entities((string) $row['path']) . '</span>';
            $edit = $row['edit_url'] !== '' ? '<a href="' . $this->sanitizer->entities($row['edit_url']) . '">Edit</a>' : '';
            $rows[] = [$label, $this->sanitizer->entities((string) $row['template']), $this->sanitizer->entities($this->formatDate($analytics, $row['modified'])), $edit];
        }
        $table = $this->renderSimpleTable($title, ['Page', 'Template', 'Last modified', ''], $rows, true);
        // Inject the explanatory note under the heading.
        $out .= preg_replace('~</h2>~', '</h2><p class="pwna-note">' . $this->sanitizer->entities($note) . '</p>', $table, 1);
        return $out;
    }

    protected function mapTrendRows(array $rows) {
        $mapped = [];
        foreach($rows as $row) {
            $label = $this->sanitizer->entities((string) $row['path']);
            if(!empty($row['page_title'])) {
                $label = '<strong>' . $this->sanitizer->entities(strip_tags((string) $row['page_title'])) . '</strong><br><span class="pwna-muted">' . $this->sanitizer->entities((string) $row['path']) . '</span>';
            }
            $pct = $row['change_pct'];
            $change = $pct === null ? 'new' : (($pct > 0 ? '+' : '') . number_format((float) $pct, 1) . ' %');
            $mapped[] = [$label, number_format((int) $row['previous']), number_format((int) $row['current']), $this->sanitizer->entities($change)];
        }
        return $mapped;
    }

    /**
     * System tab: bot-flagged traffic by detection reason.
     */
    protected function renderBotTrafficPanel(array $report) {
        $botHits = (int) ($report['bot_hits'] ?? 0);
        $humanHits = (int) ($report['human_hits'] ?? 0);
        $total = $botHits + $humanHits;
        $share = $total > 0 ? round($botHits / $total * 100, 1) : 0;

        $rows = [];
        foreach($report['rows'] ?? [] as $r) {
            $rows[] = [
                $this->sanitizer->entities((string) $r['label']) . ($r['reason'] !== '' ? ' <span class="pwna-muted">' . $this->sanitizer->entities((string) $r['reason']) . '</span>' : ''),
                number_format((int) $r['hits']),
                number_format((int) $r['sessions']),
                number_format((int) $r['events']),
            ];
        }
        $table = $this->renderSimpleTable('Bot traffic', ['Detection reason', 'Pageviews', 'Sessions', 'Events'], $rows);
        $note = $botHits > 0
            ? number_format($botHits) . ' flagged pageviews in this period (' . $share . ' % of recorded pageviews). These are kept for review but excluded from all reports.'
            : 'No flagged bot traffic in this period. Known crawlers are filtered before they are recorded and are not counted here.';
        return preg_replace('~</h2>~', '</h2><p class="pwna-note">' . $this->sanitizer->entities($note) . '</p>', $table, 1);
    }

    protected function mapTopPages(array $rows) {
        $mapped = [];
        foreach($rows as $row) {
            $pageLabel = $this->sanitizer->entities($row['path']);
            if(!empty($row['page_title'])) {
                $pageLabel = '<strong>' . $this->sanitizer->entities(strip_tags((string) $row['page_title'])) . '</strong><br><span class="pwna-muted">' . $this->sanitizer->entities((string) $row['path']) . '</span>'; 
            }
            $mapped[] = [$pageLabel, number_format((int) $row['views']), number_format((int) $row['uniques']), number_format((int) $row['sessions'])];
        }
        return $mapped;
    }

    protected function mapSessionPageRows(array $rows) {
        $mapped = [];
        foreach($rows as $row) {
            $pageLabel = $this->sanitizer->entities($row['path']);
            if(!empty($row['page_title'])) {
                $pageLabel = '<strong>' . $this->sanitizer->entities(strip_tags((string) $row['page_title'])) . '</strong><br><span class="pwna-muted">' . $this->sanitizer->entities((string) $row['path']) . '</span>'; 
            }
            $mapped[] = [$pageLabel, number_format((int) ($row['sessions'] ?? 0))];
        }
        return $mapped;
    }

    protected function mapCampaignRows(array $rows) {
        $mapped = [];
        foreach($rows as $row) {
            $mapped[] = [
                '<span class="pwna-break">' . $this->sanitizer->entities((string) ($row['label'] ?? '—')) . '</span>',
                number_format((int) ($row['views'] ?? 0)),
                number_format((int) ($row['uniques'] ?? 0)),
                number_format((int) ($row['sessions'] ?? 0)),
            ];
        }
        return $mapped;
    }

    protected function mapSessionRows(array $rows) {
        $mapped = [];
        foreach($rows as $row) {
            $label = (string) ($row['label'] ?? '');
            if($label === '') $label = '—';
            $mapped[] = [
                '<span class="pwna-break">' . $this->sanitizer->entities($label) . '</span>',
                number_format((int) ($row['sessions'] ?? 0)),
                number_format((int) ($row['uniques'] ?? 0)),
            ];
        }
        return $mapped;
    }

    protected function map404Rows(array $rows) {
        $mapped = [];
        foreach($rows as $row) {
            $mapped[] = [
                '<span class="pwna-break">' . $this->sanitizer->entities($row['path']) . '</span>',
                number_format((int) $row['views']),
                number_format((int) $row['uniques']),
            ];
        }
        return $mapped;
    }

    protected function mapGenericRows(array $rows, $field = 'label') {
        $mapped = [];
        foreach($rows as $row) {
            $label = isset($row[$field]) ? $row[$field] : ($row['label'] ?? '—');
            $mapped[] = [$this->sanitizer->entities((string) $label), number_format((int) ($row['views'] ?? 0))];
        }
        return $mapped;
    }




protected function renderEventHelperPanel() {
    $linkSnippet = '<a href="/kontakt/" data-pwna-event="cta_contact" data-pwna-group="custom" data-pwna-label="Hero contact CTA">Contact</a>';
    $buttonSnippet = '<button type="button" data-pwna-event="cta_demo" data-pwna-group="custom" data-pwna-label="Homepage demo button">Demo</button>';
    $generatedDefault = '<a href="/kontakt/" data-pwna-event="cta_contact" data-pwna-group="custom" data-pwna-label="Hero contact CTA">Contact</a>';

    $html = '<div class="pwna-panel pwna-helper-panel">';
    $html .= '<h2>Tracking helper</h2>';
    $html .= '<p class="pwna-note">Use these examples and the generator below when you want custom CTA buttons or other important actions to appear in the <strong>Engagement</strong> tab.</p>';
    $html .= '<div class="pwna-helper-inner">';
    $html .= '<div class="pwna-helper-block">';
    $html .= '<h3>1. Add a custom CTA to a link</h3>';
    $html .= '<p class="pwna-note">Good for hero buttons, contact links, pricing CTAs, booking links, demo requests and similar actions.</p>';
    $html .= '<div class="pwna-code-row"><span class="pwna-copy-note">Copy-paste example</span><button type="button" class="pwna-secondary-btn pwna-copy-btn" data-pwna-copy-target="#pwna-code-link">Copy</button></div>';
    $html .= '<pre class="pwna-code" id="pwna-code-link"><code>' . $this->sanitizer->entities($linkSnippet) . '</code></pre>';
    $html .= '</div>';

    $html .= '<div class="pwna-helper-block">';
    $html .= '<h3>2. Add a custom CTA to a button</h3>';
    $html .= '<p class="pwna-note">Useful for JS buttons, modal openers, AJAX actions, tabs, configurators and other buttons that do not behave like normal links.</p>';
    $html .= '<div class="pwna-code-row"><span class="pwna-copy-note">Copy-paste example</span><button type="button" class="pwna-secondary-btn pwna-copy-btn" data-pwna-copy-target="#pwna-code-button">Copy</button></div>';
    $html .= '<pre class="pwna-code" id="pwna-code-button"><code>' . $this->sanitizer->entities($buttonSnippet) . '</code></pre>';
    $html .= '</div>';

    $html .= '<div class="pwna-helper-grid">';
    $html .= '<div class="pwna-helper-block pwna-generator" data-pwna-generator="1">';
    $html .= '<h3>Mini snippet generator</h3>';
    $html .= '<p class="pwna-note">Fill in the fields below and the module will build a ready-to-paste HTML snippet for your templates.</p>';
    $html .= '<div class="pwna-gen-grid">';
    $html .= '<label class="pwna-field"><span>Element type</span><select data-pwna-gen="element"><option value="a">Link</option><option value="button">Button</option></select></label>';
    $html .= '<label class="pwna-field"><span>Visible text</span><input type="text" value="Contact" data-pwna-gen="text"></label>';
    $html .= '<label class="pwna-field"><span>Target URL</span><input type="text" value="/kontakt/" data-pwna-gen="href"></label>';
    $html .= '<label class="pwna-field"><span>Button type</span><select data-pwna-gen="button-type"><option value="button">button</option><option value="submit">submit</option></select></label>';
    $html .= '<label class="pwna-field"><span>Event name</span><input type="text" value="cta_contact" data-pwna-gen="event"></label>';
    $html .= '<label class="pwna-field"><span>Group</span><input type="text" value="custom" data-pwna-gen="group"></label>';
    $html .= '<label class="pwna-field pwna-span-all"><span>Label shown in analytics</span><input type="text" value="Hero contact CTA" data-pwna-gen="label"></label>';
    $html .= '</div>';
    $html .= '<div class="pwna-helper-actions"><button type="button" class="pwna-secondary-btn" data-pwna-generate="1">Generate snippet</button><button type="button" class="pwna-secondary-btn pwna-copy-btn" data-pwna-copy-target="#pwna-generated-code">Copy generated</button></div>';
    $html .= '<div class="pwna-generated-wrap"><span class="pwna-copy-note">Generated HTML snippet</span><pre class="pwna-code" id="pwna-generated-code"><code>' . $this->sanitizer->entities($generatedDefault) . '</code></pre></div>';
    $html .= '</div>';

    $html .= '<div class="pwna-helper-block">';
    $html .= '<h3>What each attribute means</h3>';
    $html .= '<ul class="pwna-list">';
    $html .= '<li><code>data-pwna-event</code> = internal action name, for example <code>cta_contact</code>, <code>cta_demo</code>, <code>cta_book</code></li>';
    $html .= '<li><code>data-pwna-group</code> = action group, for example <code>custom</code>, <code>lead</code>, <code>sales</code>, <code>navigation</code></li>';
    $html .= '<li><code>data-pwna-label</code> = readable label shown in analytics, for example <code>Hero contact CTA</code></li>';
    $html .= '</ul>';
    $html .= '</div>';
    $html .= '</div>';

    $html .= '<div class="pwna-helper-grid">';
    $html .= '<div class="pwna-helper-block">';
    $html .= '<h3>Where to add it</h3>';
    $html .= '<ul class="pwna-list">';
    $html .= '<li>Directly in your template markup, for example in <code>_main.php</code>, <code>home.php</code> or a section include.</li>';
    $html .= '<li>On links and buttons inside repeaters, blocks, hero sections or cards.</li>';
    $html .= '<li>On important conversion actions only, so the Engagement tab stays clean and useful.</li>';
    $html .= '</ul>';
    $html .= '</div>';

    $html .= '<div class="pwna-helper-block">';
    $html .= '<h3>Auto-tracked already</h3>';
    $html .= '<ul class="pwna-list">';
    $html .= '<li>Form submissions</li>';
    $html .= '<li>File downloads such as PDF, DOCX, XLSX, ZIP and CSV</li>';
    $html .= '<li><code>tel:</code> clicks</li>';
    $html .= '<li><code>mailto:</code> clicks</li>';
    $html .= '<li>Outbound link clicks</li>';
    $html .= '</ul>';
    $html .= '</div>';
    $html .= '</div>';

    $html .= '<div class="pwna-helper-grid">';
    $html .= '<div class="pwna-helper-block">';
    $html .= '<h3>Tips for cleaner reports</h3>';
    $html .= '<ul class="pwna-list">';
    $html .= '<li>Use short and consistent event names such as <code>cta_contact</code>, <code>cta_offer</code>, <code>cta_buy</code>.</li>';
    $html .= '<li>Use labels for placement details, for example <code>Footer contact CTA</code> or <code>Sidebar demo CTA</code>.</li>';
    $html .= '<li>Avoid tracking every tiny click. Track actions that actually matter for leads, sales or engagement.</li>';
    $html .= '</ul>';
    $html .= '</div>';

    $html .= '<div class="pwna-helper-block">';
    $html .= '<h3>Recommended naming pattern</h3>';
    $html .= '<ul class="pwna-list">';
    $html .= '<li><code>cta_*</code> for important call-to-action clicks</li>';
    $html .= '<li><code>lead_*</code> for lead generation actions</li>';
    $html .= '<li><code>sales_*</code> for product and checkout actions</li>';
    $html .= '<li><code>nav_*</code> for strategic navigation clicks you want to monitor</li>';
    $html .= '</ul>';
    $html .= '</div>';
    $html .= '</div>';
    $html .= '</div>';
    $html .= '</div>';
    return $html;
}

protected function renderEventCards(array $all, array $forms, array $downloads, array $contacts, array $navigation) {
        $cards = [
            ['Tracked actions', (int) ($all['events'] ?? 0)],
            ['Form submits', (int) ($forms['events'] ?? 0)],
            ['Downloads', (int) ($downloads['events'] ?? 0)],
            ['Contact clicks', (int) ($contacts['events'] ?? 0)],
            ['Outbound clicks', (int) ($navigation['events'] ?? 0)],
        ];
        $out = '<div class="pwna-cards">';
        foreach($cards as $card) {
            $out .= '<div class="pwna-card"><div class="pwna-card-label">' . $this->sanitizer->entities($card[0]) . '</div><div class="pwna-card-value">' . number_format((int) $card[1]) . '</div></div>';
        }
        $out .= '</div>';
        return $out;
    }

    protected function mapEventRows(array $rows) {
        $mapped = [];
        foreach($rows as $row) {
            $primary = (string) (($row['event_label'] ?? '') ?: ($row['event_name'] ?? 'event'));
            $label = '<strong>' . $this->sanitizer->entities($primary) . '</strong>';
            $meta = (string) ($row['event_group'] ?? 'custom');
            if(!empty($row['event_target'])) $meta .= ' · ' . (string) $row['event_target'];
            $label .= '<br><span class="pwna-muted pwna-break">' . $this->sanitizer->entities($meta) . '</span>';
            $mapped[] = [$label, number_format((int) ($row['events'] ?? 0)), number_format((int) ($row['uniques'] ?? 0)), number_format((int) ($row['sessions'] ?? 0))];
        }
        return $mapped;
    }

    protected function mapEventRowsCompact(array $rows) {
        $mapped = [];
        foreach($rows as $row) {
            $primary = (string) (($row['event_label'] ?? '') ?: ($row['event_name'] ?? 'event'));
            $label = '<strong>' . $this->sanitizer->entities($primary) . '</strong>';
            if(!empty($row['event_target'])) $label .= '<br><span class="pwna-muted pwna-break">' . $this->sanitizer->entities((string) $row['event_target']) . '</span>';
            $mapped[] = [$label, number_format((int) ($row['events'] ?? 0)), number_format((int) ($row['sessions'] ?? 0))];
        }
        return $mapped;
    }

    protected function mapEventTargetRows(array $rows) {
        $mapped = [];
        foreach($rows as $row) {
            $mapped[] = [
                '<span class="pwna-break">' . $this->sanitizer->entities((string) ($row['event_target'] ?? '—')) . '</span>',
                $this->sanitizer->entities((string) ($row['event_group'] ?? 'custom')),
                number_format((int) ($row['events'] ?? 0)),
                number_format((int) ($row['sessions'] ?? 0)),
            ];
        }
        return $mapped;
    }



    protected function renderHelperToolsScript() {
        $nonceAttr = $this->getScriptNonceAttribute();
        $script = <<<'HTML'
<script__PWNA_NONCE__>
(function(){
  function escAttr(v){
    return String(v == null ? '' : v)
      .replace(/&/g, '&amp;')
      .replace(/</g, '&lt;')
      .replace(/>/g, '&gt;')
      .replace(/"/g, '&quot;');
  }
  function safeEvent(v){
    v = String(v == null ? '' : v).trim().toLowerCase().replace(/\s+/g, '_').replace(/[^a-z0-9_\-]/g, '');
    return v || 'cta_custom';
  }
  function copyText(text){
    if(navigator.clipboard && navigator.clipboard.writeText){
      return navigator.clipboard.writeText(text);
    }
    return new Promise(function(resolve, reject){
      try {
        var ta = document.createElement('textarea');
        ta.value = text;
        ta.setAttribute('readonly', '');
        ta.style.position = 'absolute';
        ta.style.left = '-9999px';
        document.body.appendChild(ta);
        ta.select();
        document.execCommand('copy');
        document.body.removeChild(ta);
        resolve();
      } catch(err) {
        reject(err);
      }
    });
  }
  function initCopyButtons(){
    document.querySelectorAll('.pwna-copy-btn').forEach(function(btn){
      if(btn.dataset.pwnaInitCopy === '1') return;
      btn.dataset.pwnaInitCopy = '1';
      btn.addEventListener('click', function(){
        var sel = btn.getAttribute('data-pwna-copy-target');
        var target = sel ? document.querySelector(sel) : null;
        if(!target) return;
        var code = target.querySelector('code');
        var text = (code ? code.textContent : target.textContent) || '';
        var original = btn.textContent;
        copyText(text.trim()).then(function(){
          btn.textContent = 'Copied';
          setTimeout(function(){ btn.textContent = original; }, 1200);
        }).catch(function(){
          btn.textContent = 'Failed';
          setTimeout(function(){ btn.textContent = original; }, 1200);
        });
      });
    });
  }
  function initGenerators(){
    document.querySelectorAll("[data-pwna-generator='1']").forEach(function(box){
      if(box.dataset.pwnaInitGen === '1') return;
      box.dataset.pwnaInitGen = '1';
      function field(name){
        return box.querySelector("[data-pwna-gen='" + name + "']");
      }
      function build(){
        var element = (field('element') && field('element').value) || 'a';
        var text = (field('text') && field('text').value) || 'CTA';
        var href = (field('href') && field('href').value) || '/kontakt/';
        var buttonType = (field('button-type') && field('button-type').value) || 'button';
        var eventName = safeEvent(field('event') && field('event').value);
        var group = ((field('group') && field('group').value) || 'custom').trim() || 'custom';
        var label = ((field('label') && field('label').value) || text).trim() || text;
        var attrs = ' data-pwna-event="' + escAttr(eventName) + '" data-pwna-group="' + escAttr(group) + '" data-pwna-label="' + escAttr(label) + '"';
        var snippet = '';
        if(element === 'button') {
          snippet = '<button type="' + escAttr(buttonType) + '"' + attrs + '>' + text + '</button>';
        } else {
          snippet = '<a href="' + escAttr(href) + '"' + attrs + '>' + text + '</a>';
        }
        var out = box.querySelector('#pwna-generated-code code');
        if(out) out.textContent = snippet;
      }
      box.querySelectorAll('input,select').forEach(function(el){
        el.addEventListener('input', build);
        el.addEventListener('change', build);
      });
      var genBtn = box.querySelector("[data-pwna-generate='1']");
      if(genBtn) genBtn.addEventListener('click', build);
      build();
    });
  }
  function getStore(){
    try { return window.sessionStorage; } catch(e) { return null; }
  }
  function readStored(key) {
    var store = getStore();
    if(!store || !key) return '';
    try { return String(store.getItem(key) || ''); } catch(e) { return ''; }
  }
  function writeStored(key, value) {
    var store = getStore();
    if(!store || !key) return;
    try { store.setItem(key, String(value || '')); } catch(e) {}
  }
  function applyEngagementView(view){
    view = view === 'helper' ? 'helper' : 'metrics';
    document.querySelectorAll('[data-pwna-engage-switch]').forEach(function(link){
      var active = link.getAttribute('data-pwna-engage-switch') === view;
      link.classList.toggle('is-active', active);
      link.setAttribute('aria-pressed', active ? 'true' : 'false');
    });
    document.querySelectorAll('[data-pwna-engage-panel]').forEach(function(panel){
      panel.hidden = panel.getAttribute('data-pwna-engage-panel') !== view;
    });
  }
  function updateUrlParam(name, value) {
    if(!window.history || !window.history.replaceState) return;
    try {
      var url = new URL(window.location.href);
      if(value) url.searchParams.set(name, value);
      else url.searchParams.delete(name);
      window.history.replaceState({}, document.title, url.toString());
    } catch(e) {}
  }
  function initEngagementSwitch(){
    var explicit = '';
    try {
      explicit = new URL(window.location.href).searchParams.get('engage_view') || '';
    } catch(e) {}
    var initial = explicit || readStored('pwna:engagement-view') || 'metrics';
    applyEngagementView(initial);
    document.querySelectorAll('[data-pwna-engage-input="1"]').forEach(function(input){ input.value = initial; });
    document.querySelectorAll('[data-pwna-engage-switch]').forEach(function(btn){
      if(btn.dataset.pwnaInitEngage === '1') return;
      btn.dataset.pwnaInitEngage = '1';
      btn.addEventListener('click', function(){
        var view = btn.getAttribute('data-pwna-engage-switch') || 'metrics';
        writeStored('pwna:engagement-view', view);
        updateUrlParam('tab', 'engagement');
        updateUrlParam('engage_view', view === 'helper' ? 'helper' : 'metrics');
        document.querySelectorAll('[data-pwna-engage-input="1"]').forEach(function(input){ input.value = view; });
        applyEngagementView(view);
      });
    });
  }
  function initAdaptiveTooltips(){
    var tip = document.getElementById('pwna-floating-tip');
    if(!tip){
      tip = document.createElement('div');
      tip.id = 'pwna-floating-tip';
      tip.className = 'pwna-floating-tip';
      tip.hidden = true;
      tip.innerHTML = '<div class="pwna-floating-tip-inner"></div><div class="pwna-floating-tip-arrow"></div>';
      document.body.appendChild(tip);
    }
    var inner = tip.querySelector('.pwna-floating-tip-inner');
    var active = null;
    function getHtml(el){
      if(!el) return '';
      if(el.classList.contains('pwna-help-tip')){
        var bubble = el.querySelector('.pwna-help-tip-bubble');
        return bubble ? bubble.innerHTML : '';
      }
      if(el.classList.contains('pwna-button-tip')){
        return escAttr(el.getAttribute('data-pwna-tip') || '').replace(/\r\n|\r|\n/g, '<br>');
      }
      return '';
    }
    function pickSide(rect, tw, th){
      var margin = 12;
      var spaces = {
        top: rect.top - margin,
        bottom: window.innerHeight - rect.bottom - margin,
        left: rect.left - margin,
        right: window.innerWidth - rect.right - margin
      };
      if(spaces.bottom >= th + 14) return 'bottom';
      if(spaces.top >= th + 14) return 'top';
      if(spaces.right >= tw + 14) return 'right';
      if(spaces.left >= tw + 14) return 'left';
      var best = 'bottom';
      var bestVal = spaces.bottom;
      Object.keys(spaces).forEach(function(key){ if(spaces[key] > bestVal){ best = key; bestVal = spaces[key]; } });
      return best;
    }
    function place(){
      if(!active || tip.hidden) return;
      var rect = active.getBoundingClientRect();
      var margin = 8;
      var tw = tip.offsetWidth;
      var th = tip.offsetHeight;
      var side = pickSide(rect, tw, th);
      var left = 0, top = 0, arrowX = tw / 2, arrowY = th / 2;
      if(side === 'bottom' || side === 'top'){
        left = rect.left + (rect.width / 2) - (tw / 2);
        left = Math.max(margin, Math.min(left, window.innerWidth - tw - margin));
        arrowX = Math.max(14, Math.min((rect.left + rect.width / 2) - left, tw - 14));
        top = side === 'bottom' ? rect.bottom + 12 : rect.top - th - 12;
        top = Math.max(margin, Math.min(top, window.innerHeight - th - margin));
      } else {
        top = rect.top + (rect.height / 2) - (th / 2);
        top = Math.max(margin, Math.min(top, window.innerHeight - th - margin));
        arrowY = Math.max(14, Math.min((rect.top + rect.height / 2) - top, th - 14));
        left = side === 'right' ? rect.right + 12 : rect.left - tw - 12;
        left = Math.max(margin, Math.min(left, window.innerWidth - tw - margin));
      }
      tip.dataset.side = side;
      tip.style.left = left + 'px';
      tip.style.top = top + 'px';
      tip.style.setProperty('--pwna-arrow-x', arrowX + 'px');
      tip.style.setProperty('--pwna-arrow-y', arrowY + 'px');
    }
    function show(el){
      var html = getHtml(el);
      if(!html) return;
      active = el;
      inner.innerHTML = html;
      tip.hidden = false;
      el.classList.add('pwna-tip-managed');
      place();
    }
    function hide(el){
      if(el) el.classList.add('pwna-tip-managed');
      if(active && el && active !== el) return;
      active = null;
      tip.hidden = true;
      tip.removeAttribute('data-side');
    }
    function bind(el){
      if(!el || el.dataset.pwnaTipInit === '1') return;
      el.dataset.pwnaTipInit = '1';
      el.classList.add('pwna-tip-managed');
      el.addEventListener('mouseenter', function(){ show(el); });
      el.addEventListener('focus', function(){ show(el); });
      el.addEventListener('mouseleave', function(){ hide(el); });
      el.addEventListener('blur', function(){ hide(el); });
    }
    document.querySelectorAll('.pwna-help-tip, .pwna-button-tip').forEach(bind);
    window.addEventListener('scroll', place, {passive:true});
    window.addEventListener('resize', place);
  }
  function triggerChange(el){
    if(!el) return;
    if(typeof Event === 'function') el.dispatchEvent(new Event('change', {bubbles:true}));
    else {
      var ev = document.createEvent('Event');
      ev.initEvent('change', true, true);
      el.dispatchEvent(ev);
    }
  }
  function goalField(form, name){
    return form ? form.querySelector('[name="' + name + '"]') : null;
  }
  function setGoalField(form, name, value){
    var el = goalField(form, name);
    if(el) el.value = value == null ? '' : String(value);
  }
  function setGoalType(form, type){
    var el = form ? form.querySelector('[data-pwna-goal-type]') : null;
    if(el){ el.value = type === 'page' ? 'page' : 'event'; triggerChange(el); }
  }
  function applyGoalSectionVisibility(form){
    if(!form) return;
    var typeEl = form.querySelector('[data-pwna-goal-type]');
    var type = typeEl && typeEl.value === 'page' ? 'page' : 'event';
    var eventSection = form.querySelector('[data-pwna-goal-event-section]');
    var pageSection = form.querySelector('[data-pwna-goal-page-section]');
    if(eventSection) eventSection.hidden = type !== 'event';
    if(pageSection) pageSection.hidden = type !== 'page';
  }
  function applyGoalPreset(form, preset){
    if(!form || !preset) return;
    var data = {
      contact_form: {title:'Contact form submitted', type:'event', group:'form', name:'form_submit', label:'', target:'', path:'', base:'sessions'},
      lead_cta: {title:'Lead / CTA button clicked', type:'event', group:'lead', name:'cta_contact', label:'', target:'', path:'', base:'sessions'},
      download: {title:'File downloaded', type:'event', group:'download', name:'download_file', label:'', target:'', path:'', base:'sessions'},
      contact_click: {title:'Phone or email clicked', type:'event', group:'contact', name:'', label:'', target:'', path:'', base:'sessions'},
      thank_you: {title:'Thank-you page reached', type:'page', group:'', name:'', label:'', target:'', path:'/thank-you/', base:'sessions'}
    }[preset];
    if(!data) return;
    setGoalType(form, data.type);
    setGoalField(form, 'title', data.title);
    setGoalField(form, 'event_group', data.group);
    setGoalField(form, 'event_name', data.name);
    setGoalField(form, 'event_label_contains', data.label);
    setGoalField(form, 'event_target_contains', data.target);
    setGoalField(form, 'path_contains', data.path);
    setGoalField(form, 'conversion_base', data.base);
  }
  function initGoalForms(){
    document.querySelectorAll('[data-pwna-goal-form="1"]').forEach(function(form){
      if(form.dataset.pwnaGoalInit === '1') return;
      form.dataset.pwnaGoalInit = '1';
      var typeEl = form.querySelector('[data-pwna-goal-type]');
      if(typeEl) typeEl.addEventListener('change', function(){ applyGoalSectionVisibility(form); });
      var preset = form.querySelector('[data-pwna-goal-preset]');
      if(preset) preset.addEventListener('change', function(){ applyGoalPreset(form, preset.value); });
      var eventSelect = form.querySelector('[data-pwna-goal-event-select]');
      if(eventSelect) eventSelect.addEventListener('change', function(){
        var opt = eventSelect.options[eventSelect.selectedIndex];
        if(!opt || !eventSelect.value) return;
        setGoalType(form, 'event');
        var group = opt.getAttribute('data-event-group') || '';
        var name = opt.getAttribute('data-event-name') || '';
        var label = opt.getAttribute('data-event-label') || '';
        var target = opt.getAttribute('data-event-target') || '';
        var titleEl = goalField(form, 'title');
        if(titleEl && !titleEl.value) setGoalField(form, 'title', label || name || 'Tracked event goal');
        setGoalField(form, 'event_group', group);
        setGoalField(form, 'event_name', name);
        setGoalField(form, 'event_label_contains', label);
        setGoalField(form, 'event_target_contains', target);
      });
      var pageSelect = form.querySelector('[data-pwna-goal-page-select]');
      if(pageSelect) pageSelect.addEventListener('change', function(){
        var opt = pageSelect.options[pageSelect.selectedIndex];
        var path = opt ? (opt.getAttribute('data-path') || pageSelect.value || '') : '';
        if(!path) return;
        setGoalType(form, 'page');
        var titleEl = goalField(form, 'title');
        if(titleEl && !titleEl.value) setGoalField(form, 'title', 'Page reached: ' + path);
        setGoalField(form, 'path_contains', path);
      });
      applyGoalSectionVisibility(form);
    });
  }
  function init(){
    initCopyButtons();
    initGenerators();
    initEngagementSwitch();
    initAdaptiveTooltips();
    initGoalForms();
  }
  if(document.readyState === 'loading') {
    document.addEventListener('DOMContentLoaded', init);
  } else {
    init();
  }
})();
</script>
HTML;
        return str_replace('__PWNA_NONCE__', $nonceAttr, $script);
    }

    protected function buildFilterLabel(array $filters) {
        $parts = [];
        if(!empty($filters['page_id'])) $parts[] = 'page ID ' . (int) $filters['page_id'];
        if(!empty($filters['template'])) $parts[] = 'template ' . (string) $filters['template'];
        return $parts ? implode(', ', $parts) : 'All pages and templates';
    }

    protected function relativeTime($datetime) {
        $ts = strtotime((string) $datetime);
        if(!$ts) return '—';
        $diff = max(0, time() - $ts);
        if($diff < 60) return $diff . 's ago';
        if($diff < 3600) return floor($diff / 60) . 'm ago';
        return floor($diff / 3600) . 'h ago';
    }
}