Changeset 3748247

techwave-form-sync-for-zoho/trunk/assets/css/admin.css

-              r3649280
+              r3748247
 /**
  * Techwave Form Sync for Zoho — admin UI design system.
+ * FormBridge for Zoho — admin UI design system.
+ *
  * Everything is scoped to `.form2zoho` (the wrapper every screen prints) so
 …
         --f2z-label-w: 200px;
         --f2z-measure: 760px;
+        /* One field's column, in the two-column grid a group of them lays out in.
+           A single control that would otherwise stretch the width of a card sits
+           on this too, so a lone input never runs to 1100px while the pair beside
+           it is half that. */
+        --f2z-field-col: 560px;
+        /* And the narrower one, for a step that asks a single question down the
+           middle of the card. The width of a form field is a claim about how long
+           its answer is: a feed title and a form name are short, and a 560px box
+           for either is an oversized target that also drags the eye across more
+           screen than the reading needs. Nothing is centred on both measures at
+           once, so the two never meet. */
+        --f2z-field-col-sm: 430px;
+}
+/* The plugin's own base, on the plugin's own wrapper.
+ *
+ * These five used to sit in the :root block above, next to the tokens. :root
+ * is <html>, so `font-size: 13px` there did not just set a base for this
+ * plugin — it redefined what 1rem means for the whole document, and all of
+ * wp-admin's own CSS is written in rem. Every rem measurement core makes on
+ * these screens came out at 13/16ths of its intended size, including the
+ * checkbox mark (21px drawn as 17px) and core's 25px touch-size checkbox
+ * below 783px (drawn as 20px, missing the tap target it exists for).
+ * `color`, `line-height` and `max-width` leaked onto <html> the same way.
+ *
+ * Every screen this stylesheet loads on prints a .form2zoho wrapper — the
+ * feeds screen, the settings screen and the deactivation modal on
+ * plugins.php — so nothing loses the base by moving it here.
+ *
+ * Each component still declares its own size; this only catches what would
+ * otherwise be inherited. */
+.form2zoho {
         max-width: 100%;
-        margin-bottom: var(--f2z-space-8);
         color: var(--f2z-text);
-        /* The plugin's own base size, so nothing inside inherits wp-admin's 14px
-           in one place and 13px in another. Every component still declares its
-           own size; this only catches what would otherwise be inherited. */
         font-size: var(--f2z-fs-base);
         line-height: var(--f2z-lh);
+}
+/* Not on .form2zoho itself: the deactivation modal's wrapper is a
+   .form2zoho too, and it sits on plugins.php holding nothing but a
+   position:fixed overlay. Giving that 32px of bottom margin would push
+   the plugins list down for a dialog that is not even open. */
+.form2zoho.wrap {
+        margin-bottom: var(--f2z-space-8);
+}
 …
+}
+/* A control that asked for the full width keeps it inside a row too.
+ *
+ * The 420px cap above is for a control standing on its own, where it is what
+ * stops one select stretching across a whole card. A control carrying
+ * .form2zoho-control--full is not standing on its own — it is one field in a
+ * column of them, and it has to end where the others end. Left capped, the
+ * Form select stopped 140px short of the Feed title box directly above it and
+ * its reload button floated in the gap; the account picker did the same beside
+ * the app picker. The cell's own measure, set below, is what limits it now. */
+.form2zoho-fieldset .form2zoho-control-row > select.form2zoho-control--full,
+.form2zoho-fieldset .form2zoho-control-row > input.form2zoho-control--full,
+.form2zoho-grid .form2zoho-control-row > select.form2zoho-control--full,
+.form2zoho-grid .form2zoho-control-row > input.form2zoho-control--full {
+        max-width: none;
+}
 /* A multi-select in a control row keeps its list-box height; it is the only
    control here that is taller than one line, so the row aligns to its top. */
 …
+}
+/* Centre core's tick in the box, and pin it to the same unit the box uses.
+ *
+ * Core draws the mark as an SVG floated into the box, and sizes it in rem
+ * (1.3125rem on a -0.25rem left margin) against a box it also sizes in rem
+ * (1rem). Both scale together, so core's own checkbox is centred whatever
+ * 1rem happens to be. The rule above pins the box at 16px instead, which
+ * breaks that pairing: the mark keeps scaling with the root font size while
+ * the box no longer does, and the tick drifts off centre by an amount that
+ * depends on a value this file does not control.
+ *
+ * So the mark is pinned in px too. 21px is what 1.3125rem is meant to be,
+ * and the margins are core's -3px/-4px with half a pixel taken off the left:
+ * the tick inside the 20x20 artwork spans x 5.78-16.17, so its own centre is
+ * ~1 unit right of the artwork's, which is the offset core's -4px leaves
+ * behind. Vertically core is already within 0.03px.
+ *
+ * Below 783px the box goes back to core's rem touch size, so the responsive
+ * section hands the mark back with it rather than leaving px against rem. */
+.form2zoho input[type="checkbox"]:checked::before {
+        width: 21px;
+        height: 21px;
+        margin: -3px 0 0 -4.5px;
+}
 .form2zoho input[type="checkbox"]:hover:not(:disabled),
 .form2zoho input[type="radio"]:hover:not(:disabled) {
 …
+}
+.form2zoho-copy-text.is-copied {
+/* Copied: a tick in place of the copy icon, on green, for a moment.
+   The :hover selector matters. The pointer is still over the button straight
+   after the click, and the shared hover rule further down comes later at the
+   same specificity, so without it the button turned blue at once and the
+   confirmation never showed.
+   Two classes deep on the hidden tick, because `.form2zoho svg` near the top of
+   this file sets every icon to display:block and outranks a single class. */
+.form2zoho-copy-text .form2zoho-copy-text__done {
+        display: none;
+}
+.form2zoho-copy-text.is-copied .form2zoho-copy-text__icon {
+        display: none;
+}
+.form2zoho-copy-text.is-copied .form2zoho-copy-text__done {
+        display: block;
+}
+.form2zoho-copy-text.is-copied,
+.form2zoho-copy-text.is-copied:hover {
         background: var(--f2z-ok-bg);
         border-color: var(--f2z-ok-border);
 …
 .form2zoho .form2zoho-remove-row,
 .form2zoho .button-link.form2zoho-remove-row {
+        padding: var(--f2z-space-1) var(--f2z-space-2);
+        border-radius: var(--f2z-radius-sm);
+        color: var(--f2z-muted);
+        font-weight: var(--f2z-fw-medium);
+        transition: background-color var(--f2z-transition), color var(--f2z-transition);
+}
+/* Grey until it is aimed at. A row of red "Remove" links reads as a table
+   full of errors, and the destructive one of the five controls in a mapping
+   row should not be the one the eye lands on first. It turns red on hover and
+   on focus, which is when the colour is actually saying something. */
+.form2zoho .form2zoho-remove-row:hover,
+.form2zoho .form2zoho-remove-row:focus {
+        background: var(--f2z-bad-bg);
         color: var(--f2z-bad);
+}
+.form2zoho .form2zoho-remove-row[hidden] {
+        display: none;
+}
+/* In place of Remove on a row a required Zoho field depends on. The same size
+   and colour as the link it replaces, so the column stays lined up, but with
+   no hover: there is nothing here to press. */
+.f2z-map-required {
+        display: inline-flex;
+        align-items: center;
+        gap: var(--f2z-space-1);
+        padding: var(--f2z-space-1) var(--f2z-space-2);
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-base);
         font-weight: var(--f2z-fw-medium);
+}
+.form2zoho .form2zoho-remove-row:hover {
+        color: var(--f2z-bad);
+        white-space: nowrap;
+        cursor: default;
+}
 …
+}
+/* --- "Fetching" ---------------------------------------------------------
+ *
+ * Every list in the editor is filled from Zoho or from the site, and a list
+ * that is loading looks exactly like a list that is stale unless it says so.
+ *
+ * Two ways to say it, because there are two kinds of control: the ones with a
+ * reload button beside them spin that button (the rule above), and the ones
+ * without get this. Drawn in CSS rather than as an image because a background
+ * image cannot be rotated — an animated SVG does not animate when it is used
+ * as a background — and an element that can carry a border can. */
+.form2zoho-spinner {
+        display: inline-block;
+        flex-shrink: 0;
+        width: 16px;
+        height: 16px;
+        border: 2px solid var(--f2z-border);
+        border-top-color: var(--f2z-brand);
+        border-radius: 50%;
+        animation: form2zoho-spin .7s linear infinite;
+}
+/* The control itself while it waits. The caret goes, because a caret says
+   "open me and choose" about a list that is not there yet. */
+.form2zoho select.is-loading {
+        background-image: none;
+        color: var(--f2z-placeholder);
+        cursor: progress;
+}
+/* An action waiting on the server rather than a list: the feeds-list switch,
+   the clone menu item. Dimmed and un-clickable for the round trip, so the
+   control visibly registered the press instead of appearing to ignore it. */
+.form2zoho .is-busy,
+.form2zoho-switch.is-busy {
+        opacity: .55;
+        cursor: progress;
+}
+/* --- Loading card ------------------------------------------------------
+ *
+ * The wait for the Zoho field list, which every row of the mapping table
+ * depends on. Built from the dialog's parts (surface, brand top edge, card
+ * radius, overlay shadow, entrance) so it reads as the product pausing, not as
+ * the page breaking. It names what it is fetching, and says so when Zoho is
+ * slow, so a wait of several seconds never looks frozen.
+ *
+ * admin.js moves it to <body>, so position:fixed covers the screen whatever
+ * the editor's own layout does. Over the admin bar (99999), under the nav
+ * progress bar (100001). */
+.form2zoho-page-loader {
+        position: fixed;
+        inset: 0;
+        z-index: 100000;
+        display: flex;
+        align-items: center;
+        justify-content: center;
+        padding: var(--f2z-space-4);
+        /* Lighter than a dialog's backdrop: a pause, not a question. */
+        background: rgba(20, 26, 33, .28);
+        -webkit-backdrop-filter: blur(2px);
+        backdrop-filter: blur(2px);
+        cursor: progress;
+        animation: form2zoho-fade-in .18s ease-out both;
+}
+/* Its own [hidden] rule. On <body> it is outside .form2zoho, whose [hidden]
+   rule no longer reaches it, and display:flex above beats the browser's. */
+.form2zoho-page-loader[hidden] {
+        display: none !important;
+}
+.form2zoho-loader-card {
+        display: flex;
+        flex-direction: column;
+        align-items: center;
+        box-sizing: border-box;
+        width: 340px;
+        max-width: 100%;
+        padding: var(--f2z-space-8) var(--f2z-space-6) var(--f2z-space-6);
+        background: var(--f2z-surface);
+        border-top: 3px solid var(--f2z-brand);
+        border-radius: var(--f2z-radius-card);
+        box-shadow: var(--f2z-shadow-overlay);
+        text-align: center;
+        animation: form2zoho-modal-in .22s cubic-bezier(.2, .7, .3, 1) both;
+}
+/* The mark sits still in a tinted disc and the ring turns around it, so the
+   motion reads as "working" rather than as a logo spinning for its own sake. */
+.form2zoho-loader-card__badge {
+        position: relative;
+        display: flex;
+        align-items: center;
+        justify-content: center;
+        width: 64px;
+        height: 64px;
+        margin-bottom: var(--f2z-space-5);
+        background: var(--f2z-brand-tint);
+        border-radius: 50%;
+}
+/* An arc that fades into its own tail: a conic gradient cut to a 3px ring. */
+.form2zoho-loader-card__ring {
+        position: absolute;
+        inset: -6px;
+        border-radius: 50%;
+        background: conic-gradient(from 0deg, rgba(33, 106, 174, 0) 0 35%, var(--f2z-brand) 100%);
+        -webkit-mask: radial-gradient(farthest-side, transparent calc(100% - 3px), #000 calc(100% - 3px));
+        mask: radial-gradient(farthest-side, transparent calc(100% - 3px), #000 calc(100% - 3px));
+        animation: form2zoho-spin .9s linear infinite;
+}
+.form2zoho-loader-card__mark {
+        display: block;
+        width: 34px;
+        height: 34px;
+}
+/* Margins set outright: on <body> these paragraphs get wp-admin's own. */
+.form2zoho-loader-card__title {
+        margin: 0;
+        color: var(--f2z-heading);
+        font-size: var(--f2z-fs-lg);
+        font-weight: var(--f2z-fw-semibold);
+        line-height: 1.4;
+}
+.form2zoho-loader-card__text {
+        margin: var(--f2z-space-1) 0 0;
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-base);
+        line-height: 1.5;
+}
+.form2zoho-loader-card__slow {
+        margin: var(--f2z-space-4) 0 0;
+        padding: var(--f2z-space-2) var(--f2z-space-3);
+        background: var(--f2z-surface-subtle);
+        border-radius: var(--f2z-radius-control);
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-sm);
+        line-height: 1.5;
+        animation: form2zoho-fade-in .25s ease-out both;
+}
 /* Destructive icon buttons. */
 .form2zoho-bulk-delete {
 …
+}
-/* The "Back / Next" and "Back / Save" row at the foot of each editor tab. */
-.form2zoho-tab-footer {
-        display: flex;
-        align-items: center;
-        justify-content: space-between;
-        gap: var(--f2z-space-3);
-        margin-top: var(--f2z-space-6);
-        padding-top: var(--f2z-space-4);
-        border-top: 1px solid var(--f2z-border);
+}
-.form2zoho-tab-footer .button {
-        min-width: 104px;
+}
 /* The Logs toolbar is the Feeds list's `.form2zoho-listbar` — same two-group
    layout, same spacing — so it only needs its own bottom margin. It used to
    be a separate flex rule with its own gap. */
+/* The Logs toolbar sits directly under the tab bar's rule, and a row of
+ * bordered buttons landing there reads as attached to it — the button's own
+ * border and the tab bar's border become one line to the eye.
+ *
+ * The space is padding rather than margin on purpose. Margins collapse against
+ * the tab bar's own margin-bottom, so the two would fight and the larger alone
+ * would win; padding is added to it and always applies. That also makes this
+ * the one place to change if the row needs more air, instead of a number on
+ * the tab bar that every other panel silently inherits. */
 .form2zoho-logs-toolbar {
+        padding-top: var(--f2z-space-5);
         margin-bottom: var(--f2z-space-4);
+}
 …
  * used to be declared through four parallel `.form2zoho-page-* .form2zoho-hero`
  * selector lists repeated across five rules; the class is unique to those
+ * screens, so one selector does the same job. */
+ * screens, so one selector does the same job.
+ *
+ * It was a dark purple gradient band with the lockup sitting on it as a white
+ * pill, and the page's card pulled up to overlap its lower edge. Three
+ * decisions that only held each other up: the pill existed because the band
+ * was dark, and the overlap existed to give the band something to be behind.
+ * None of it belonged to wp-admin, which is a light grey document surface,
+ * and a dark slab across the top of it reads as a marketing banner rather
+ * than as a tool.
+ *
+ * What replaces it is a plain white bar with a hairline under it — the same
+ * device wp-admin uses everywhere to say "this is the top of the screen" —
+ * with the mark and the name at the left and the version at the right. */
 .form2zoho-hero {
         display: flex;
         align-items: center;
         justify-content: space-between;
+        gap: var(--f2z-space-3);
+        margin: -20px -20px 0; /* cancels #wpbody-content's padding, full-bleed. */
+        padding: var(--f2z-space-8) var(--f2z-space-5) 46px;
+        background: linear-gradient(160deg, #1c0f33, #150a26);
+        gap: var(--f2z-space-4);
+        /* Full-bleed: cancels #wpbody-content's 20px padding so the bar runs the
+           width of the screen and its hairline reads as an edge, not a rule
+           floating inside the content. */
+        margin: -20px -20px 0;
+        padding: var(--f2z-space-5);
+        background: var(--f2z-surface);
+        border-bottom: 1px solid var(--f2z-border);
+}
+/* The version, on the far side of the bar. Quiet on purpose: it is reference
+   information, wanted about once — when reporting a problem — and it must not
+   compete with the product's name at the other end. */
+.form2zoho-hero-version {
+        flex-shrink: 0;
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-sm);
+        font-variant-numeric: tabular-nums;
+}
 …
         display: inline-flex;
         align-items: center;
+        gap: var(--f2z-space-2);
+        padding: 6px var(--f2z-space-4) 6px 6px;
+        background: var(--f2z-surface);
+        /* Card radius, not a pill: the badge holds a square-ish icon tile, and a
+px outer corner against that tile's 6px one read as two unrelated
+           shapes stacked together. --f2z-radius-card is the 12px tier every other
+           container on these screens already uses. */
+        border-radius: var(--f2z-radius-card);
+        box-shadow: 0 2px 6px rgba(0, 0, 0, .25);
+        gap: var(--f2z-space-3);
+        min-width: 0;
+        /* No plate, no shadow, no radius. All three were there to lift the lockup
+           off the dark band; on a white bar a white pill is an invisible box that
+           only casts a shadow. */
         color: var(--f2z-brand-dark);
+        font-size: var(--f2z-fs-md);
+        font-size: var(--f2z-fs-xl);
+        line-height: 1;
+}
+/* The mark itself, with no plate behind it. It inherits the lockup's colour
+   through currentColor, and `display: block` keeps it off the text baseline
+   — left inline it reserves descender space underneath and rides high
+   against the name. */
+.form2zoho-hero-logo-mark {
+        display: block;
+        flex-shrink: 0;
+}
+.form2zoho-hero-logo-name strong {
         font-weight: var(--f2z-fw-bold);
+}
+.form2zoho-hero-logo-icon {
+        display: inline-flex;
+        align-items: center;
+        justify-content: center;
+        flex-shrink: 0;
+        width: var(--f2z-control-h-sm);
+        height: var(--f2z-control-h-sm);
+        background: linear-gradient(135deg, var(--f2z-brand), var(--f2z-brand-dark));
+        border-radius: var(--f2z-radius-control);
+        color: #fff;
+        font-size: 10px;
+        font-weight: var(--f2z-fw-bold);
+        letter-spacing: .3px;
+/* The name's quieter half. Zoho is somebody else's trademark, so it says
+   what the plugin connects to without dressing up as part of the product's
+   own name. */
+.form2zoho-hero-logo-sub {
+        color: var(--f2z-muted);
+        font-weight: var(--f2z-fw-medium);
+}
 …
 .form2zoho-settings-pop {
         position: relative;
+        margin: 0;
+        /* The gap under the masthead. Unconditional, unlike the negative pull it
+           replaced, so an admin notice appearing between the two cannot change
+           it. */
+        margin: var(--f2z-space-5) 0 0;
         padding: var(--f2z-space-6);
         background: var(--f2z-surface);
+        border-radius: var(--f2z-radius-overlay);
+        box-shadow: var(--f2z-shadow-overlay);
+}
+/* The card is pulled up into the hero's bottom padding for the "popped"
+ * overlap. That is only correct while the card really is the next thing
+ * after the header. WordPress relocates every admin notice to directly
+ * after .wp-header-end (wp-admin/js/common.js: insertAfter( $headerEnd )),
+ * which lands it between the hero and the card on the feeds screens — an
+ * unconditional -32px then covers the notice's last 32px instead of the
+ * hero, hiding whatever it was trying to say. Applying the pull by
+ * adjacency keeps the design when there is no notice and lets a notice
+ * push the card down when there is one.
+        /* A hairline and a shallow shadow, not the overlay shadow these carried
+           while they were pulled up over a dark band. That shadow is 50px of
+           blur: against wp-admin's light grey it stopped reading as depth and
+           started reading as a grey haze around the card, which is also why the
+           radius comes down a tier — 16px belongs to things that float over the
+           page, and this sits on it. */
+        border: 1px solid var(--f2z-border);
+        border-radius: var(--f2z-radius-card);
+        box-shadow: var(--f2z-shadow-sm);
+}
+/* The cards used to be pulled up 32px to overlap the dark band, and only
+ * when they were still adjacent to the header — WordPress moves every admin
+ * notice to directly after .wp-header-end (wp-admin/js/common.js:
+ * insertAfter( $headerEnd )), and an unconditional pull covered the notice
+ * instead of the header, hiding whatever it was trying to say.
+ *
+ * The settings screen prints its .wp-header-end inside the card, so its
+ * notices land within the card and it stays adjacent to the hero either
+ * way — hence the different selector for it. */
+.wp-header-end + .form2zoho-card-pop,
+.wp-header-end + .form2zoho-editor-pop,
+.form2zoho-hero + .form2zoho-settings-pop {
+        margin-top: -32px;
+}
+/* Give a relocated notice room, or it sits flush against the dark hero
+ * above it and the card below. Scoped to direct children of .wrap so the
+ * settings screen's in-card notices keep their own spacing. */
+ * There is no band to overlap now, so the pull is gone and with it that whole
+ * hazard: the cards carry an ordinary top margin, which is right whether a
+ * notice lands above them or not. The margin is declared with the cards
+ * themselves, in the rule above.
+ *
+ * Give a relocated notice room of its own, so it is not flush against the
+ * header above it and the card below. Scoped to direct children of .wrap so
+ * the settings screen's in-card notices keep their own spacing. */
 .wrap.form2zoho > .wp-header-end ~ .notice,
 .wrap.form2zoho > .wp-header-end ~ div.updated,
 …
+}
+.form2zoho-editor-pop {
+        max-width: 900px;
+        margin-left: auto;
+        margin-right: auto;
+        padding: var(--f2z-space-8);
+}
+.form2zoho-editor-wrap h1 {
+        margin: 0 0 var(--f2z-space-5);
+        font-size: var(--f2z-fs-2xl);
+        font-weight: var(--f2z-fw-bold);
+        text-align: center;
+}
+/* The editor is the same panel as the feeds list, at the same width. It used
+   to be a 900px column centred in the page, which made moving between the
+   list and the editor look like moving between two products. The measure it
+   was protecting is still protected, just closer in: --f2z-control-max-w caps
+   every input at 420px, so a wide panel widens the panel and not the fields.
+   It no longer prints an <h1>: each step heads itself, and "Add feed" over
+   "Please select a trigger" was two titles for one screen. */
 /* --- Screen header row (title + primary action) ------------------------ */
 …
+}
-.form2zoho-dedupe-extra {
-        margin-top: var(--f2z-space-2);
+}
-.form2zoho-dedupe-grid {
-        display: flex;
-        flex-wrap: wrap;
-        gap: var(--f2z-space-2) var(--f2z-space-6);
+}
 .form2zoho-apps-grid {
         display: grid;
 …
+}
 /* "All applications" is the master toggle that disables the rest, so it owns
    a full row with a rule under it. It has to stay in the same container as
    the per-app boxes — admin.js finds them together via closest('td, p'). */
+/* "All applications" is the select-all over the rest, so it owns a full row
+   with a rule under it. It has to stay in the same container as the per-app
+   boxes — admin.js pairs them by closest('.form2zoho-apps-grid'). */
 .form2zoho-app-check-all {
         grid-column: 1 / -1;
 …
+}
-.form2zoho-mapping-section h2 {
-        margin-top: 0;
+}
 /* ==========================================================================
 . NAVIGATION
 …
    selector, rather than the settings bar carrying its own near-copy of the
    same six declarations. */
-.form2zoho-tabs,
 /* Element-qualified and three classes deep on purpose. Core declares this at
    `.wrap h2.nav-tab-wrapper` (0,2,1) — see the comment in its own source,
 …
         flex-wrap: wrap;
         gap: var(--f2z-space-1);
+        /* The gap under the tab bar.
+         *
+         * Deliberately modest, because it is a *margin* and a margin here is
+         * fragile: it collapses against whatever the tab panel puts first, so the
+         * real distance depends on that element rather than on this number. The
+         * panels that need more room take it as padding of their own, which
+         * cannot collapse — see .form2zoho-logs-toolbar. */
         margin: 0 0 var(--f2z-space-6);
         padding: 0;
 …
+}
-.form2zoho-tab-btn,
 .form2zoho .form2zoho-settings-tabs .nav-tab {
         appearance: none;
 …
+}
+.form2zoho-tab-btn:hover,
+/* "Back to feeds", at the far end of the tab bar. A link, not a tab: it
+   leaves this screen rather than switching panels, so it takes the back
+   link's quieter look instead of a tab's. */
+.form2zoho .form2zoho-settings-tabs .form2zoho-tabs-back {
+        display: inline-flex;
+        align-items: center;
+        align-self: center;
+        gap: var(--f2z-space-2);
+        margin-left: auto;
+        padding: var(--f2z-space-2) var(--f2z-space-3);
+        border-radius: var(--f2z-radius-control);
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-base);
+        font-weight: var(--f2z-fw-semibold);
+        line-height: var(--f2z-lh);
+        text-decoration: none;
+        transition: background var(--f2z-transition), color var(--f2z-transition);
+}
+.form2zoho .form2zoho-settings-tabs .form2zoho-tabs-back:hover,
+.form2zoho .form2zoho-settings-tabs .form2zoho-tabs-back:focus {
+        background: var(--f2z-brand-tint);
+        color: var(--f2z-brand-dark);
+        box-shadow: none;
+}
+.form2zoho .form2zoho-settings-tabs .form2zoho-tabs-back:focus-visible {
+        box-shadow: var(--f2z-ring);
+        outline: none;
+}
 .form2zoho .form2zoho-settings-tabs .nav-tab:hover,
 .form2zoho .form2zoho-settings-tabs .nav-tab:focus {
 …
+}
-.form2zoho-tab-btn.is-active,
 .form2zoho .form2zoho-settings-tabs .nav-tab-active,
 .form2zoho .form2zoho-settings-tabs .nav-tab-active:hover,
 …
+}
+.form2zoho-tab-panel {
+/* --- The feed editor: a four-step wizard --------------------------------
+ *
+ * Four screens shown one at a time. Each is only answerable once the one
+ * before it has been — the trigger decides which forms exist, the form decides
+ * which fields exist, the Zoho module decides what those fields can be mapped
+ * to — so the sequence is the design, and the rail below is a map of it.
+ *
+ * Every step is built from the same three parts, in the same order, whatever
+ * it is asking for:
+ *
+ *   .form2zoho-step-head    what this step wants, in one line and one sentence
+ *   .form2zoho-step-body    the answering — a grid, a fieldset, or groups
+ *   .form2zoho-step-footer  Back, and the one action that moves forward
+ *
+ * That is what makes four unlike screens read as one flow. Before this, step
+ * three was a WordPress two-column form-table and step two a centred column,
+ * so moving between them looked like moving between two products. */
+.form2zoho-step {
         display: none;
+        padding-top: var(--f2z-space-2);
+}
+.form2zoho-tab-panel.is-active {
+        /* A floor, so the panel does not collapse around whichever step happens to
+           be the shortest. The one that says a trigger's plugin is not running is
+           a card and a sentence, and without this the whole editor shrank to a
+           band barely taller than the card — which reads as an error page rather
+           than as one step of four. */
+        min-height: 420px;
+}
+/* goToStep() focuses the panel so the step change is announced. It is not in
+   the tab order and nobody reached it by pressing Tab, so it draws no ring:
+   the step swapping and the rail marker moving are the visible indicator, and
+   a 460px-tall outline around the whole panel is not one. */
+.form2zoho-step:focus {
+        outline: none;
+}
+.form2zoho-step.is-active {
+        display: flex;
+        /* Column, so the footer can be pushed to the bottom of a short step
+           instead of floating just under a two-line body. */
+        flex-direction: column;
+        animation: form2zoho-step-in 220ms ease both;
+}
+/* The body takes the slack; the footer never floats mid-panel. */
+.form2zoho-step-body {
+        flex: 1 1 auto;
+}
+/* --- The rail ----------------------------------------------------------
+ *
+ * Not a progress bar. There is no filling track and nothing measures how
+ * "done" the form is; each step is a marker with its own name, which is the
+ * part a bar cannot give — "where am I, what did I already answer, what is
+ * still coming, and how do I get back to one of them".
+ *
+ * Markers above, names below. The connecting line then runs between the
+ * circles at their own height, with nothing to collide with, which is why the
+ * text is centred under them rather than beside them. */
+.form2zoho-stepper {
+        /* Bleeds to the card's edges (the card pads by --f2z-space-6) so the rule
+           under the rail reaches both sides, the way a header does. */
+        margin: 0 calc(-1 * var(--f2z-space-6)) var(--f2z-space-6);
+        padding: 0 var(--f2z-space-6) var(--f2z-space-5);
+        border-bottom: 1px solid var(--f2z-border-subtle);
+}
+.form2zoho-stepper__list {
+        display: grid;
+        /* Equal columns, so the connectors are equal lengths and the rail reads as
+           a scale rather than as four items of assorted importance. */
+        grid-auto-flow: column;
+        grid-auto-columns: 1fr;
+        margin: 0;
+        padding: 0;
+        list-style: none;
+}
+.form2zoho-stepper__item {
+        position: relative;
+        margin: 0;
+}
+/* The line to the next marker. Drawn from this item's centre to the next
+   one's, so it starts and stops exactly at the circles' edges however wide
+   the column is. */
+.form2zoho-stepper__item:not(:last-child)::after {
+        content: '';
+        position: absolute;
+        top: 21px;
+        left: calc(50% + 22px);
+        right: calc(-50% + 22px);
+        height: 2px;
+        background: var(--f2z-border);
+        transition: background-color var(--f2z-transition);
+}
+/* Behind the marker, never over it. */
+.form2zoho-stepper__item.is-done::after {
+        background: var(--f2z-brand);
+}
+.form2zoho-stepper__btn {
+        position: relative;
+        z-index: 1;
+        display: flex;
+        flex-direction: column;
+        align-items: center;
+        gap: var(--f2z-space-2);
+        width: 100%;
+        padding: var(--f2z-space-2) var(--f2z-space-2) 0;
+        background: none;
+        border: 0;
+        color: inherit;
+        font: inherit;
+        text-align: center;
+        cursor: pointer;
+}
+/* A step not yet reached. Disabled, not merely faded: the rail must not be a
+   way around the order the Continue buttons enforce, and `disabled` is what
+   says so to the keyboard and to a screen reader as well as to the eye. */
+.form2zoho-stepper__btn:disabled {
+        cursor: default;
+}
+.form2zoho-stepper__marker {
+        display: inline-flex;
+        align-items: center;
+        justify-content: center;
+        width: 30px;
+        height: 30px;
+        background: var(--f2z-surface);
+        border: 2px solid var(--f2z-border);
+        border-radius: var(--f2z-radius-pill);
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-sm);
+        font-weight: var(--f2z-fw-bold);
+        line-height: 1;
+        transition: background-color var(--f2z-transition), border-color var(--f2z-transition), color var(--f2z-transition);
+}
+.form2zoho-stepper__item.is-current .form2zoho-stepper__marker {
+        background: var(--f2z-brand);
+        border-color: var(--f2z-brand);
+        color: #fff;
+        box-shadow: 0 0 0 4px var(--f2z-brand-tint);
+}
+/* A step already answered shows a tick rather than its number: the number
+   said where it sat in the queue, which stops being the useful fact once the
+   question has been answered. font-size:0 hides the digit without removing it
+   — the marker is aria-hidden either way, and the step's own name carries
+   "Step 2 of 4" for assistive technology. */
+.form2zoho-stepper__item.is-done .form2zoho-stepper__marker {
+        background: var(--f2z-brand);
+        border-color: var(--f2z-brand);
+        font-size: 0;
+        background-image: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24' fill='none' stroke='white' stroke-width='3.2' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpolyline points='20 6 9 17 4 12'/%3E%3C/svg%3E");
+        background-repeat: no-repeat;
+        background-position: center;
+        background-size: 15px 15px;
+}
+/* A saved feed's trigger: answered, and fixed. A lock instead of the tick, so
+   the one done step that will not open says why before anyone tries it. */
+.form2zoho-stepper__item.is-locked .form2zoho-stepper__marker {
+        background-image: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24' fill='none' stroke='white' stroke-width='2.8' stroke-linecap='round' stroke-linejoin='round'%3E%3Crect x='4' y='11' width='16' height='10' rx='2'/%3E%3Cpath d='M8 11V7a4 4 0 0 1 8 0v4'/%3E%3C/svg%3E");
+        background-size: 14px 14px;
+}
+.form2zoho-stepper__text {
         display: block;
+        min-width: 0;
+}
+.form2zoho-stepper__title {
+        display: block;
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-base);
+        font-weight: var(--f2z-fw-semibold);
+        line-height: var(--f2z-lh-tight);
+        transition: color var(--f2z-transition);
+}
+.form2zoho-stepper__item.is-current .form2zoho-stepper__title {
+        color: var(--f2z-brand);
+}
+.form2zoho-stepper__item.is-done .form2zoho-stepper__title {
+        color: var(--f2z-heading);
+}
+.form2zoho-stepper__hint {
+        display: block;
+        margin-top: 2px;
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-xs);
+        line-height: var(--f2z-lh-tight);
+}
+/* Hover only where pressing does something. */
+.form2zoho-stepper__btn:not(:disabled):hover .form2zoho-stepper__title {
+        color: var(--f2z-brand-dark);
+}
+.form2zoho-stepper__btn:not(:disabled):hover .form2zoho-stepper__marker {
+        border-color: var(--f2z-brand);
+}
+.form2zoho-stepper__btn:focus-visible {
+        border-radius: var(--f2z-radius-control);
+        outline: 2px solid var(--f2z-brand);
+        outline-offset: 2px;
+}
+/* --- Each step's own heading ------------------------------------------- */
+.form2zoho-step-head {
+        margin-bottom: var(--f2z-space-6);
+}
+.form2zoho-step-head h2 {
+        margin: 0 0 var(--f2z-space-1);
+        color: var(--f2z-heading);
+        font-size: var(--f2z-fs-xl);
+        font-weight: var(--f2z-fw-semibold);
+        letter-spacing: -.01em;
+        line-height: var(--f2z-lh-tight);
+}
+.form2zoho-step-head .description {
+        margin: 0;
+        max-width: var(--f2z-measure);
+}
+/* The way out to the documentation for this step. Muted until it is wanted:
+   it answers a question only some people have, and on a screen whose whole
+   job is to get one choice made it must not read as a second thing to do. */
+.form2zoho a.form2zoho-step-docs {
+        display: inline-flex;
+        align-items: center;
+        gap: var(--f2z-space-1);
+        margin-top: var(--f2z-space-2);
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-base);
+        text-decoration: none;
+}
+.form2zoho a.form2zoho-step-docs:hover,
+.form2zoho a.form2zoho-step-docs:focus {
+        color: var(--f2z-brand);
+        text-decoration: underline;
+}
+.form2zoho-step-docs svg {
+        flex: 0 0 auto;
+        opacity: .8;
+}
+/* The recording, beside the page that covers the same ground.
+ *
+ * Two links on one line, so the second needs a gap. In the dialog footer the
+ * first carries margin-left:auto to push the pair to the right-hand end of
+ * the bar; overriding it on the second is what keeps them together there
+ * rather than splitting them across it. */
+.form2zoho a.form2zoho-step-docs + a.form2zoho-step-docs,
+.form2zoho-modal-docs + .form2zoho-modal-docs {
+        margin-left: var(--f2z-space-4);
+}
+/* In a zero state the link is alone under the button, in a centred column,
+   and wants the same air the button above it has. */
+.form2zoho .form2zoho-emptystate .form2zoho-video-link {
+        margin-top: var(--f2z-space-4);
+}
+/* Steps one and two are single questions, so they are centred: a heading, one
+   thing to do, and nothing in the margins to look at. Steps three and four are
+   forms with many fields and stay left-aligned. */
+.form2zoho-step-head--center {
+        text-align: center;
+}
+.form2zoho-step-head--center .description {
+        margin-left: auto;
+        margin-right: auto;
+}
+/* --- The action bar ----------------------------------------------------
+ *
+ * Sticky, and bled to the card's edges so it reads as a bar rather than as a
+ * pair of buttons that happen to be last. The mapping step is a table, a
+ * conditional-logic panel and a test tool tall — its Save button used to sit
+ * two screens below the fold, which is a long way to scroll to find out that
+ * a required field on step three was never filled in. */
+.form2zoho-step-footer {
+        position: sticky;
+        bottom: 0;
+        z-index: 3;
+        display: flex;
+        align-items: center;
+        justify-content: space-between;
+        gap: var(--f2z-space-3);
+        /* The negative margin matches the card's padding exactly (--f2z-space-6),
+           and the bottom one cancels it so the bar sits on the card's own edge. */
+        margin: var(--f2z-space-6) calc(-1 * var(--f2z-space-6)) calc(-1 * var(--f2z-space-6));
+        padding: var(--f2z-space-4) var(--f2z-space-6);
+        background: var(--f2z-surface);
+        border-top: 1px solid var(--f2z-border);
+        border-radius: 0 0 var(--f2z-radius-card) var(--f2z-radius-card);
+}
+.form2zoho-step-footer .button {
+        min-width: 112px;
+}
+/* Step one on a saved feed has no Back — the grid *is* the first question —
+   so an empty span holds the Continue button over on the right. */
+.form2zoho-step-footer__spacer {
+        flex: 1 1 auto;
+}
+/* --- Step one: finding a trigger among twenty-seven -------------------- */
+.form2zoho-trigger-filter {
+        position: relative;
+        max-width: 420px;
+        margin: 0 auto var(--f2z-space-6);
+}
+.form2zoho-trigger-filter-icon {
+        position: absolute;
+        top: 50%;
+        left: var(--f2z-space-3);
+        color: var(--f2z-placeholder);
+        transform: translateY(-50%);
+        pointer-events: none;
+}
+.form2zoho input[type="search"].form2zoho-trigger-search {
+        width: 100%;
+        /* Room for the icon on the left; the right side keeps the browser's own
+           clear button clear of the text. */
+        padding-left: calc(var(--f2z-space-3) + 16px + var(--f2z-space-2));
+}
+/* Centred, because the row is centred and a left-aligned grid under a centred
+   heading and a centred search box reads as a mistake. */
+.form2zoho-step[data-step="trigger"] .form2zoho-source-grid {
+        justify-content: center;
+        margin-bottom: var(--f2z-space-2);
+}
+/* The filter hides tiles; it must not leave gaps in the grid, so display
+   rather than visibility. */
+.form2zoho-source-tile.is-filtered-out {
+        display: none;
+}
+.form2zoho-trigger-none {
+        margin: var(--f2z-space-6) 0 0;
+        color: var(--f2z-muted);
+        text-align: center;
+}
+/* --- Step two: the trigger just chosen --------------------------------- *
+ *
+ * A summary row, not a second copy of the tile. It used to be a 132px square
+ * standing alone in the middle of a full-width card, which gave the answer to
+ * a question already asked more visual weight than the two fields still to be
+ * filled in. Laid on its side it says the same thing in a band, directly above
+ * the fields it governs, and leaves the emphasis where the work is. */
+.form2zoho-chosen {
+        /* width:100% is not redundant. This is a flex item of .form2zoho-step
+           (a column flex container), and `margin-left/right: auto` on a flex item
+           overrides the default stretch — so without a stated width the card
+           shrank to fit its own text and sat 290px wide above the column of
+           fields, with both edges out of line. */
+        width: 100%;
+        max-width: var(--f2z-field-col-sm);
+        margin: 0 auto var(--f2z-space-5);
+}
+.form2zoho-chosen-card {
+        display: flex;
+        align-items: center;
+        gap: var(--f2z-space-3);
+        padding: var(--f2z-space-3);
+        background: var(--f2z-brand-tint);
+        border: 1px solid var(--f2z-brand-tint-strong);
+        border-radius: var(--f2z-radius-card);
+}
+.form2zoho-chosen-icon {
+        display: inline-flex;
+        flex: 0 0 auto;
+        align-items: center;
+        justify-content: center;
+        width: 44px;
+        height: 44px;
+        background: var(--f2z-surface);
+        border: 1px solid var(--f2z-border);
+        border-radius: var(--f2z-radius-control);
+}
+.form2zoho-chosen-icon img {
+        width: 30px;
+        height: 30px;
+        object-fit: contain;
+}
+.form2zoho-chosen-text {
+        display: flex;
+        flex: 1 1 auto;
+        flex-direction: column;
+        min-width: 0;
+}
+.form2zoho-chosen-eyebrow {
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-xs);
+        font-weight: var(--f2z-fw-semibold);
+        letter-spacing: .04em;
+        line-height: 1.4;
+        text-transform: uppercase;
+}
+.form2zoho-chosen-label {
+        overflow: hidden;
+        color: var(--f2z-heading);
+        font-size: var(--f2z-fs-md);
+        font-weight: var(--f2z-fw-semibold);
+        line-height: var(--f2z-lh-tight);
+        text-overflow: ellipsis;
+        white-space: nowrap;
+}
+/* "Change", with the word visible rather than a bare ✕. A cross on a card
+   means "remove this" at least as often as it means "pick another", and there
+   is nothing here to remove. */
+.form2zoho-chosen-clear {
+        display: inline-flex;
+        flex: 0 0 auto;
+        align-items: center;
+        gap: var(--f2z-space-2);
+        min-height: var(--f2z-control-h-sm);
+        padding: 0 var(--f2z-space-3);
+        background: var(--f2z-surface);
+        border: 1px solid var(--f2z-border);
+        border-radius: var(--f2z-radius-control);
+        color: var(--f2z-brand);
+        font-size: var(--f2z-fs-sm);
+        font-weight: var(--f2z-fw-semibold);
+        cursor: pointer;
+        transition: background-color var(--f2z-transition), border-color var(--f2z-transition);
+}
+.form2zoho-chosen-clear:hover,
+.form2zoho-chosen-clear:focus {
+        background: var(--f2z-surface-hover);
+        border-color: var(--f2z-brand);
+        color: var(--f2z-brand-dark);
+}
+/* A saved feed's trigger: stated, not offered. It sits where Change would,
+   with no border, fill or pointer, so it does not read as something to press. */
+.form2zoho-chosen-lock {
+        display: inline-flex;
+        flex: 0 0 auto;
+        align-items: center;
+        gap: var(--f2z-space-1);
+        min-height: var(--f2z-control-h-sm);
+        padding: 0 var(--f2z-space-2);
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-sm);
+        font-weight: var(--f2z-fw-semibold);
+}
+.form2zoho-chosen-note {
+        margin: var(--f2z-space-2) 0 0;
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-sm);
+        line-height: 1.5;
+        text-align: center;
+}
+/* --- A stacked column of fields ---------------------------------------- *
+ *
+ * Not WordPress's two-column form-table: two fields under one summary card do
+ * not need a label column, and a label a third of the screen from its field
+ * only gets worse as the panel gets wider. */
+.form2zoho-fieldset {
+        max-width: var(--f2z-field-col-sm);
+        margin: 0 auto;
+}
+.form2zoho-field + .form2zoho-field {
+        margin-top: var(--f2z-space-5);
+}
+.form2zoho-field > label {
+        display: block;
+        margin-bottom: var(--f2z-space-2);
+        color: var(--f2z-heading);
+        font-size: var(--f2z-fs-base);
+        font-weight: var(--f2z-fw-semibold);
+}
+.form2zoho-field .description {
+        margin: var(--f2z-space-2) 0 0;
+}
+/* "Connect a new account", in the destination group's header.
+ *
+ * A link rather than a button because it goes somewhere — the Connections
+ * screen — and quiet, because it answers a question most people will not be
+ * asking: the account they want is usually already in the list. */
+.form2zoho a.form2zoho-add-connection {
+        display: inline-flex;
+        flex: 0 0 auto;
+        align-items: center;
+        gap: var(--f2z-space-1);
+        color: var(--f2z-brand);
+        font-size: var(--f2z-fs-base);
+        font-weight: var(--f2z-fw-semibold);
+        text-decoration: none;
+        white-space: nowrap;
+}
+.form2zoho a.form2zoho-add-connection:hover,
+.form2zoho a.form2zoho-add-connection:focus {
+        color: var(--f2z-brand-dark);
+        text-decoration: underline;
+}
+.form2zoho-add-connection svg {
+        flex: 0 0 auto;
+}
+/* The "leaves this page" arrow. Quieter than the words, because it is a
+   qualifier on them rather than a second thing to read — and it is what makes
+   the new tab visible rather than only announced. */
+.form2zoho-add-connection .form2zoho-extlink {
+        margin-left: 1px;
+        opacity: .75;
+}
+/* Required, said in the label rather than only discovered on Continue. The
+   asterisk is aria-hidden — the control's own `required` is what assistive
+   technology reads, and "Feed title star" is not a field name. */
+.form2zoho-req {
+        color: var(--f2z-bad);
+        font-weight: var(--f2z-fw-bold);
+}
+/* The browser's own validation message, left under the field.
+ *
+ * The native bubble says the right thing in the right place and then vanishes
+ * on the next click — on a stepped form that can be before the person has
+ * looked away from the button they pressed. The text is validationMessage
+ * verbatim, so it stays the browser's wording in the browser's language. */
+.form2zoho-field__error {
+        margin: var(--f2z-space-2) 0 0;
+        color: var(--f2z-bad);
+        font-size: var(--f2z-fs-sm);
+        font-weight: var(--f2z-fw-medium);
+        line-height: var(--f2z-lh);
+}
+/* Colour is not the only carrier: the message above says what is wrong in
+   words, and the control keeps `aria-invalid` for anything not reading either. */
+.form2zoho .is-invalid,
+.form2zoho .is-invalid:focus {
+        border-color: var(--f2z-bad);
+        box-shadow: var(--f2z-ring-bad);
+}
+/* Said under the summary card when the chosen trigger's plugin is not
+   running, in place of the fields. In the warning colour rather than the muted
+   one: it is the reason nothing else is on screen, not a footnote. */
+.form2zoho-trigger-unavailable {
+        /* Same flex-item rule as .form2zoho-chosen above. */
+        width: 100%;
+        max-width: var(--f2z-field-col-sm);
+        margin: 0 auto;
+        padding: var(--f2z-space-4);
+        background: var(--f2z-warn-bg);
+        border: 1px solid var(--f2z-warn-border);
+        border-radius: var(--f2z-radius-card);
+        color: var(--f2z-warn);
+        font-size: var(--f2z-fs-md);
+        text-align: center;
+}
+/* --- Steps three and four: grouped fields ------------------------------ *
+ *
+ * A group is one question with its own heading — "Zoho destination",
+ * "Duplicate handling", "Field mapping" — rather than a run of rows in one
+ * table. The two-column form-table it replaces gave a single select and a
+ * five-control duplicate-matching block exactly the same weight, so there was
+ * nothing on screen to say that the second one was optional and the first was
+ * the whole point of the step. */
+.form2zoho-group {
+        background: var(--f2z-surface);
+        border: 1px solid var(--f2z-border);
+        border-radius: var(--f2z-radius-card);
+}
+.form2zoho-group + .form2zoho-group {
+        margin-top: var(--f2z-space-4);
+}
+/* A row, so a group can carry one action opposite its name. The action is
+   deliberately up here rather than beside the field it serves: inside the grid
+   it made its own cell half as tall again as its neighbour. */
+.form2zoho-group__head {
+        display: flex;
+        flex-wrap: wrap;
+        align-items: center;
+        justify-content: space-between;
+        gap: var(--f2z-space-2) var(--f2z-space-4);
+        padding: var(--f2z-space-3) var(--f2z-space-5);
+        background: var(--f2z-surface-subtle);
+        border-bottom: 1px solid var(--f2z-border-subtle);
+        border-radius: var(--f2z-radius-card) var(--f2z-radius-card) 0 0;
+}
+/* The heading and its sentence are one item of that row, not two. */
+.form2zoho-group__title {
+        min-width: 0;
+}
+.form2zoho-group__head h3 {
+        margin: 0;
+        color: var(--f2z-heading);
+        font-size: var(--f2z-fs-md);
+        font-weight: var(--f2z-fw-semibold);
+        line-height: var(--f2z-lh-tight);
+}
+.form2zoho-group__head .description {
+        margin: var(--f2z-space-1) 0 0;
+}
+.form2zoho-group__body {
+        padding: var(--f2z-space-5);
+}
+.form2zoho-group__action {
+        margin: var(--f2z-space-4) 0 0;
+}
+/* The table already sits inside a group card, so its own border, radius and
+   shadow drew a second card 20px inside the first. It keeps its horizontal
+   scrolling — that is the part that matters on a narrow screen — and bleeds
+   to the group's edges, where a table belongs. */
+.form2zoho-group__body > .form2zoho-table-scroll {
+        margin: 0 calc(-1 * var(--f2z-space-5));
+        /* Definite, not auto.
+         *
+         * The base rule caps this box at max-width:100% — 100% of the group's
+         * *content* box — so with the negative margins alone it moved left without
+         * widening, overhanging one side and falling 40px short of the other.
+         * Lifting the cap fixed that and broke something worse: with width:auto
+         * and no cap the box shrank to fit the table's own min-width, so on a
+         * phone the table stopped scrolling inside its box and pushed the page
+         * sideways instead. A stated width is both: exactly the group's width plus
+         * its two paddings, and a box that overflows rather than grows. */
+        width: calc(100% + 2 * var(--f2z-space-5));
+        max-width: none;
+        border-right: 0;
+        border-left: 0;
+        border-radius: 0;
+        box-shadow: none;
+}
+/* Two columns of fields, one row per pair. --f2z-control-max-w caps each
+   control at 420px on its own, so the pair fills a wide card without either
+   input growing to a width no one can scan. */
+.form2zoho-grid {
+        display: grid;
+        grid-template-columns: repeat(2, minmax(0, 1fr));
+        gap: var(--f2z-space-5) var(--f2z-space-6);
+}
+/* Fields whose value is long, or whose help text is: the module picker and
+   the topic list both read badly in half a card. */
+.form2zoho-field--wide {
+        grid-column: 1 / -1;
+}
+/* One measure for every field in a group, whatever shape its cell is.
+ *
+ * A two-column cell is about 560px on a wide card, so that is the number, and
+ * it is the same one the editor's centred fieldset uses. Without it the two
+ * kinds of cell disagreed twice over: a field spanning the full row would have
+ * grown to 1150px, and on a narrow card — where the grid is one column — every
+ * field would have. Capping the cell rather than the control means the label,
+ * the control and the help text under it all stop at the same place. */
+/* Three classes deep on purpose: .form2zoho input.form2zoho-control--full
+   lifts the cap for controls that asked for the full width, and it would
+   otherwise beat this. A control that asked to fill its cell still has to stop
+   where its neighbour does — the app picker was left 1px wider than the
+   account picker beside it, which is exactly the kind of near-miss that reads
+   as a wobble rather than as a difference. */
+.form2zoho .form2zoho-grid > .form2zoho-field > * {
+        max-width: var(--f2z-field-col);
+}
+/* A cell spanning both columns needs the column's measure, not the cell's.
+ *
+ * --f2z-field-col is what a two-column cell is worth on a wide card, which is
+ * the right cap for a cell that IS one column. A .form2zoho-field--wide cell
+ * is the whole row, so that number stops being a description of anything: the
+ * module picker held 560px while the account picker beside it shrank with its
+ * column, and the two rows ended 6px apart at 1440px, 86px at 1280px and 176px
+ * at 1100px — the narrower the card, the further the module picker's reload
+ * button hung past the one above it.
+ *
+ * Half the row, less the column gap, is what one column actually measures at
+ * any card width. min() keeps the old cap for cards wide enough that a column
+ * exceeds it, so nothing on a large screen changes. The span itself still
+ * means something: nothing shares the row with these fields, which is what the
+ * topic list needs when it grows tall. */
+.form2zoho .form2zoho-grid > .form2zoho-field--wide > * {
+        max-width: min( var(--f2z-field-col), calc( ( 100% - var(--f2z-space-6) ) / 2 ) );
+}
+/* A field inside a grid is already spaced by the grid's own gap. */
+.form2zoho-grid > .form2zoho-field + .form2zoho-field {
+        margin-top: 0;
+}
+/* --- Checkboxes that lead a group -------------------------------------- */
+.form2zoho-check {
+        display: flex;
+        align-items: flex-start;
+        gap: var(--f2z-space-2);
+        color: var(--f2z-text);
+        font-size: var(--f2z-fs-base);
+        line-height: var(--f2z-lh);
+        cursor: pointer;
+}
+.form2zoho-check input[type="checkbox"] {
+        flex: 0 0 auto;
+        margin: 1px 0 0;
+}
+.form2zoho-check--lead {
+        color: var(--f2z-heading);
+        font-size: var(--f2z-fs-md);
+        font-weight: var(--f2z-fw-semibold);
+}
+/* What the switch above controls, indented under it and dimmed while it is
+   off. Dimmed only — every control stays live and still saves, because the
+   values are worth keeping between one visit and the next. This is the same
+   treatment the conditional-logic panel gives its rules. */
+.form2zoho-dedupe-body {
+        margin-top: var(--f2z-space-4);
+        padding-left: calc(var(--f2z-space-4) + var(--f2z-space-2));
+        transition: opacity var(--f2z-transition);
+}
+.form2zoho-group__body:has(input[name="dedupe_enabled"]:not(:checked)) .form2zoho-dedupe-body {
+        opacity: .6;
+}
+.form2zoho-dedupe-grid {
+        display: flex;
+        flex-wrap: wrap;
+        gap: var(--f2z-space-3) var(--f2z-space-6);
+        margin: var(--f2z-space-3) 0 var(--f2z-space-5);
+}
+/* The unique-field boxes and their note keep to the step's reading width
+   rather than running the whole width of the card. */
+.form2zoho-dedupe-body .form2zoho-field,
+.form2zoho-dedupe-none {
+        max-width: var(--f2z-field-col);
+}
+.form2zoho-dedupe-body .form2zoho-field {
+        max-width: var(--f2z-field-col);
+}
 …
         align-items: center;
         gap: var(--f2z-space-2);
         margin: 0 0 var(--f2z-space-3);
+        margin: 0 0 var(--f2z-space-4);
         color: var(--f2z-muted);
         font-size: var(--f2z-fs-base);
 …
 /* Fixed width so a long "Created At" value cannot squeeze the toggle onto a
+   second line. */
+.form2zoho-integrations-table th[data-col="status"],
+.form2zoho-integrations-table td[data-col="status"] {
+   second line. Centred, heading included: `.form2zoho .widefat thead th`
+   left-aligns every heading at (0,2,2), which beat the plain column rule and
+   left STATUS sitting to the left of the switches under it. */
+.form2zoho .form2zoho-integrations-table th[data-col="status"],
+.form2zoho .form2zoho-integrations-table td[data-col="status"] {
         width: 90px;
         min-width: 90px;
 …
+}
+.form2zoho-actions-col {
+.form2zoho-actions-col,
+.form2zoho .form2zoho-integrations-table th.form2zoho-actions-col {
         width: 72px;
         text-align: center;
 …
 .form2zoho-map-table td {
         vertical-align: middle;
+}
+/* A static value its Zoho field will not accept: the same red as an unfinished
+   row, on the box that needs changing, with the reason under it. */
+.form2zoho .form2zoho-map-table .f2z-map-static.is-invalid {
+        border-color: var(--f2z-bad);
+        box-shadow: var(--f2z-ring-bad);
+}
+.f2z-map-static-error {
+        margin: var(--f2z-space-1) 0 0;
+        color: var(--f2z-bad);
+        font-size: var(--f2z-fs-sm);
+        line-height: 1.4;
+        white-space: normal;
+}
+/* "Combine fields": the fields the template uses, above the picker that adds
+   them. The brand tint of the "info" pill, so they read as picked values
+   rather than as statuses. */
+.f2z-map-tokens {
+        display: flex;
+        flex-wrap: wrap;
+        gap: var(--f2z-space-1);
+        margin-bottom: var(--f2z-space-2);
+}
+.f2z-map-token {
+        display: inline-flex;
+        align-items: center;
+        gap: 2px;
+        max-width: 100%;
+        padding: 1px 2px 1px var(--f2z-space-2);
+        background: var(--f2z-brand-tint);
+        border: 1px solid var(--f2z-brand-tint-strong);
+        border-radius: var(--f2z-radius-pill);
+        color: var(--f2z-brand-dark);
+        font-size: var(--f2z-fs-sm);
+        font-weight: var(--f2z-fw-semibold);
+        line-height: var(--f2z-lh);
+}
+.f2z-map-token__label {
+        min-width: 0;
+        overflow: hidden;
+        text-overflow: ellipsis;
+        white-space: nowrap;
+}
+/* Two classes, to get past the `.form2zoho button` reset. */
+.form2zoho .f2z-map-token__remove {
+        display: inline-flex;
+        flex: 0 0 auto;
+        align-items: center;
+        justify-content: center;
+        width: 18px;
+        height: 18px;
+        margin: 0;
+        padding: 0;
+        background: transparent;
+        border: 0;
+        border-radius: 50%;
+        color: inherit;
+        line-height: 0;
+        cursor: pointer;
+}
+/* Block, so no baseline gap pushes the cross off the circle's centre. */
+.form2zoho .f2z-map-token__remove svg {
+        display: block;
+        flex: 0 0 auto;
+}
+.form2zoho .f2z-map-token__remove:hover,
+.form2zoho .f2z-map-token__remove:focus-visible {
+        background: var(--f2z-brand);
+        color: #fff;
+}
 …
         gap: var(--f2z-space-3);
         min-width: 0;
+}
+/* Room for the name and data centre, so a wide "Authorized for" cell cannot
+   squeeze a short name like "Developer" onto two lines. */
+.form2zoho-conn-table td:first-child {
+        min-width: 190px;
+}
 …
+}
+/* fit-content, then centre inside it: the column shrinks to the pill row —
+   its widest child — so the block still sits at the cell's left edge under the
+   "Authorized for" heading, while "Edit access" centres under the pills rather
+   than hanging off their left corner. Centring without fit-content would move
+   the pills themselves to the middle of the column, away from the heading. */
+/* fit-content, so the block is as wide as its pill row and "Edit access"
+   centres under the pills; auto margins then put that block in the middle of
+   the column, under its centred "Authorized for" heading. */
 .form2zoho-authorized-cell {
         display: flex;
 …
         width: fit-content;
         max-width: 100%;
+}
+        margin: 0 auto;
+}
+/* Centred, so pills that wrap onto a second line stay in the middle too. */
 .form2zoho-authorized-pills {
         display: flex;
         flex-wrap: wrap;
+        justify-content: center;
         gap: var(--f2z-space-1);
+}
+/* The folded-away apps join the same row of pills when opened. */
+.form2zoho-authorized-more-list {
+        display: contents;
+}
 .form2zoho-conn-status-cell {
         display: flex;
         align-items: center;
+        justify-content: center;
         gap: var(--f2z-space-1);
+}
 …
 .form2zoho-conn-error-note {
         margin: 2px 0 0;
+        margin: 2px auto 0;
         max-width: 260px;
+}
 …
         text-align: right;
         white-space: nowrap;
+}
+/* Authorized for and Status: heading and contents centred in their column. */
+.form2zoho .form2zoho-conn-table thead th.form2zoho-col-center,
+.form2zoho .form2zoho-conn-table td.form2zoho-col-center {
+        text-align: center;
+}
 …
+}
+/* --- Paging the log ------------------------------------------------------
+ *
+ * The same bar as the Feeds list, driven differently: the Logs screen is a tab
+ * and fetches its rows rather than reloading, so the controls are buttons and
+ * the table dims while the next page is on its way. */
+.form2zoho-logs-pagination {
+        margin-top: var(--f2z-space-4);
+}
+/* Dimmed, not emptied. Blanking the table for the length of a request makes
+   the page jump to nothing and back; leaving the old rows in place, greyed and
+   inert, keeps the height and says plainly that they are on their way out. */
+.form2zoho-logs tbody.is-loading {
+        opacity: .45;
+        pointer-events: none;
+        transition: opacity var(--f2z-transition);
+}
 /* ==========================================================================
 . FEEDBACK
 …
         color: var(--f2z-brand-dark);
         font-weight: var(--f2z-fw-semibold);
+}
+/* "+N more": a pill that reads as a control — brand-tinted, with a pointer
+   and a focus ring — so it is not mistaken for one more app name. */
+.form2zoho-conn .form2zoho-authorized-pills .form2zoho-authorized-more {
+        background: var(--f2z-brand-tint);
+        border-color: var(--f2z-brand-tint-strong);
+        color: var(--f2z-brand-dark);
+        font-family: inherit;
+        font-weight: var(--f2z-fw-semibold);
+        line-height: inherit;
+        cursor: pointer;
+}
+.form2zoho-conn .form2zoho-authorized-pills .form2zoho-authorized-more:hover {
+        background: var(--f2z-brand-tint-strong);
+}
+.form2zoho-conn .form2zoho-authorized-pills .form2zoho-authorized-more:focus-visible {
+        outline: 2px solid var(--f2z-brand);
+        outline-offset: 1px;
+}
 …
+}
+/* The documentation link at the far end of a dialog's footer. Pushed there by
+   margin rather than by justify-content, so the buttons keep their own
+   grouping at the near end and the link is plainly not one of them. */
+.form2zoho-modal-docs {
+        display: inline-flex;
+        align-items: center;
+        gap: var(--f2z-space-1);
+        margin-left: auto;
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-base);
+        text-decoration: none;
+}
+.form2zoho-modal-docs:hover,
+.form2zoho-modal-docs:focus {
+        color: var(--f2z-brand);
+        text-decoration: underline;
+}
 /* `.form-table` already carries table-layout:fixed (see section 6); the
    dialog only needs its label column not to collapse. */
 …
+}
+/* --- The Pro dialog ----------------------------------------------------
+ *
+ * What a locked source tile opens. Same overlay, same close button, same
+ * Escape and focus handling as the other four dialogs — the difference is
+ * that this one has a job the others do not: it has to answer "what is this
+ * greyed-out tile?" convincingly enough to be worth the click, without
+ * feeling like an advert that ambushed someone.
+ *
+ * So the head is the answer, not the pitch: the logo of the tile that was
+ * actually pressed, and one sentence about what that one source does. The
+ * general case — everything else Pro adds — comes after, where someone who
+ * is now interested will read it and someone who is not can close the box.
+ *
+ * Three bands in a flex column, the middle one scrolling, which is the shape
+ * .form2zoho-modal-fields and the timeline dialog already use. It matters
+ * here for the same reason: the action row has to stay reachable on a 700px
+ * laptop viewport. */
+.form2zoho-modal-pro {
+        display: flex;
+        flex-direction: column;
+        width: 580px;
+        padding: 0;
+        overflow: hidden;
+}
+/* --- Head --- */
+.form2zoho-pro-head {
+        position: relative;
+        flex: 0 0 auto;
+        padding: var(--f2z-space-8) var(--f2z-space-6) var(--f2z-space-6);
+        background: linear-gradient(168deg, var(--f2z-brand-tint) 0%, var(--f2z-surface) 72%);
+        border-bottom: 1px solid var(--f2z-border-subtle);
+        text-align: center;
+}
+/* A soft brand glow behind the mark, so the logo sits on something rather
+   than floating on flat tint. Decorative and unreachable — it is a
+   pseudo-element on a container, so it costs no markup and no alt text. */
+.form2zoho-pro-head::before {
+        content: '';
+        position: absolute;
+        top: -60px;
+        left: 50%;
+        z-index: 0;
+        width: 260px;
+        height: 200px;
+        background: radial-gradient(closest-side, rgba(33, 106, 174, .18), rgba(33, 106, 174, 0));
+        transform: translateX(-50%);
+        pointer-events: none;
+}
+/* The clicked tile's logo, at the size a product mark wants to be read at.
+   Same white chip and border as the picker's own icons — the dialog should
+   look like the tile grew, not like a different design. */
+.form2zoho-pro-mark {
+        position: relative;
+        z-index: 1;
+        display: inline-flex;
+        align-items: center;
+        justify-content: center;
+        width: 76px;
+        height: 76px;
+        margin-bottom: var(--f2z-space-4);
+        background: var(--f2z-surface);
+        border: 1px solid var(--f2z-border);
+        border-radius: var(--f2z-radius-overlay);
+        box-shadow: var(--f2z-shadow-lg);
+}
+.form2zoho-pro-mark-img {
+        width: 48px;
+        height: 48px;
+        object-fit: contain;
+}
+/* The same badge component the locked tile carries, pushed just outside the
+   mark's corner. Keeping the class means the two can never drift apart in
+   colour or shape — which would read as two different "Pro"s. */
+.form2zoho-pro-mark .form2zoho-source-badge {
+        top: -8px;
+        right: -14px;
+        box-shadow: 0 0 0 2px var(--f2z-surface);
+}
+/* (0,2,1), which beats the (0,1,1) `.form2zoho h2.form2zoho-modal-title`
+   rule in section 10. That one sets a 32px right gutter to clear the close
+   button and a bottom margin sized for a left-aligned head; this head is
+   centred and its own subline supplies the spacing. */
+.form2zoho .form2zoho-modal-pro h2.form2zoho-pro-title {
+        position: relative;
+        z-index: 1;
+        margin: 0 0 var(--f2z-space-2);
+        font-size: var(--f2z-fs-xl);
+        font-weight: var(--f2z-fw-bold);
+        letter-spacing: -.01em;
+}
+/* Capped by characters rather than pixels: the sentence is the one thing in
+   the dialog that is actually read rather than scanned, and a 65-character
+   line is where reading stops being comfortable. */
+.form2zoho-pro-blurb {
+        position: relative;
+        z-index: 1;
+        max-width: 46ch;
+        margin: 0 auto;
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-md);
+        line-height: var(--f2z-lh-loose);
+}
+/* --- Body --- */
+.form2zoho-modal-pro .form2zoho-modal-scroll {
+        padding-top: var(--f2z-space-6);
+        padding-bottom: var(--f2z-space-5);
+}
+/* Two columns on a 580px dialog gives each benefit about 250px — enough for
+   a two-line title and three lines of text without either column becoming a
+   ladder of single words. */
+.form2zoho-pro-benefits {
+        display: grid;
+        grid-template-columns: 1fr 1fr;
+        gap: var(--f2z-space-5) var(--f2z-space-6);
+        margin: 0;
+        padding: 0;
+        list-style: none;
+}
+/* The tick is a background image on the item, not a list marker: markers
+   cannot be positioned against the first line of a two-line title, and this
+   one has to sit on the title's optical centre rather than the item's. */
+.form2zoho-pro-benefit {
+        margin: 0;
+        padding-left: 26px;
+        background-image: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24' fill='none' stroke='%23216aae' stroke-width='3' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpolyline points='20 6 9 17 4 12'/%3E%3C/svg%3E");
+        background-repeat: no-repeat;
+        background-position: 0 3px;
+        background-size: 15px 15px;
+}
+.form2zoho-pro-benefit strong {
+        display: block;
+        margin-bottom: 2px;
+        color: var(--f2z-heading);
+        font-size: var(--f2z-fs-base);
+        font-weight: var(--f2z-fw-semibold);
+        line-height: var(--f2z-lh-tight);
+}
+.form2zoho-pro-benefit span {
+        display: block;
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-sm);
+        line-height: var(--f2z-lh);
+}
+/* Ten names in a sentence is a list nobody finishes. Ten logos is one
+   glance, and they are already on disk for the picker. */
+.form2zoho-pro-strip {
+        margin-top: var(--f2z-space-6);
+        padding: var(--f2z-space-4);
+        background: var(--f2z-surface-subtle);
+        border: 1px solid var(--f2z-border-subtle);
+        border-radius: var(--f2z-radius-card);
+        text-align: center;
+}
+.form2zoho-pro-strip-label {
+        display: block;
+        margin-bottom: var(--f2z-space-3);
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-xs);
+        font-weight: var(--f2z-fw-semibold);
+        letter-spacing: .06em;
+        text-transform: uppercase;
+}
+.form2zoho-pro-strip-logos {
+        display: flex;
+        flex-wrap: wrap;
+        gap: var(--f2z-space-2);
+        justify-content: center;
+}
+/* Chips rather than bare logos: ten marks on ten different backgrounds, at
+px, turn into visual noise without a shared frame around them. */
+.form2zoho-pro-strip-logo {
+        width: 34px;
+        height: 34px;
+        padding: 4px;
+        background: var(--f2z-surface);
+        border: 1px solid var(--f2z-border);
+        border-radius: var(--f2z-radius-control);
+        box-shadow: var(--f2z-shadow-sm);
+        object-fit: contain;
+}
+/* --- Foot --- */
+.form2zoho-pro-foot {
+        display: flex;
+        flex: 0 0 auto;
+        align-items: center;
+        justify-content: center;
+        gap: var(--f2z-space-4);
+        padding: var(--f2z-space-4) var(--f2z-space-6);
+        background: var(--f2z-surface-subtle);
+        border-top: 1px solid var(--f2z-border);
+}
+/* WordPress's own .button-hero is 46px tall with a 14px font. Left alone it
+   towers over the "Maybe later" link beside it; these bring it back to a
+   height that belongs in a 580px dialog. */
+.form2zoho-pro-foot .form2zoho-pro-cta {
+        height: auto;
+        min-height: 40px;
+        padding: 0 var(--f2z-space-6);
+        font-size: var(--f2z-fs-md);
+        line-height: 38px;
+}
+/* Deliberately quiet. A second button styled like a real one turns a dialog
+   into a decision; this is a way out, and it should look like one. */
+.form2zoho-pro-foot .form2zoho-pro-dismiss {
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-base);
+        text-decoration: none;
+}
+.form2zoho-pro-foot .form2zoho-pro-dismiss:hover,
+.form2zoho-pro-foot .form2zoho-pro-dismiss:focus {
+        color: var(--f2z-text);
+        text-decoration: underline;
+}
+/* A locked tile does something now, so it stops looking inert. It still
+   reads as unavailable — muted logo, muted label, Pro badge — but the
+   pointer, the hover lift and the press feedback are back, because the
+   promise they make ("this button works") is one it keeps. */
+.form2zoho-source-tile.is-locked {
+        cursor: pointer;
+}
+.form2zoho-source-tile.is-locked:hover {
+        background: var(--f2z-brand-tint);
+        box-shadow: var(--f2z-shadow-sm);
+}
+.form2zoho-source-tile.is-locked:hover .form2zoho-source-icon,
+.form2zoho-source-tile.is-locked:hover .form2zoho-source-label {
+        opacity: 1;
+}
+.form2zoho-source-tile.is-locked:active {
+        transform: scale(.98);
+}
 /* ==========================================================================
 . COMPONENTS
 …
+}
+/* The two groups inside a listbar.
+ *
+ * Same gap as the listbar itself. They used to sit at 8px inside a container
+ * spacing its own children at 12px, so the buttons read as one welded block
+ * while the block itself had room around it — the tighter spacing inside the
+ * looser one is what made them look stuck together rather than adjacent. */
 .form2zoho-toolbar-left,
 .form2zoho-toolbar-right {
 …
         align-items: center;
         flex-wrap: wrap;
         gap: var(--f2z-space-2);
+        gap: var(--f2z-space-3);
         min-width: 0;
+}
+/* "Select failed" helps you *make* a selection; the two beside it act on one.
+ * A little more air after it separates the two kinds without a divider rule,
+ * which at this size would be more furniture than the row can carry. */
+#form2zoho-logs-select-failed {
+        margin-right: var(--f2z-space-1);
+}
 …
         border-radius: 50%;
         box-shadow: 0 0 0 2px var(--f2z-surface);
+}
+/* --- A source the Pro add-on provides ---------------------------------- *
+ *
+ * Drawn rather than hidden. Leaving it out answers "no" to "does this work
+ * with WooCommerce?", when the answer is "yes, with the add-on" — and a
+ * customer who cannot see that a thing exists cannot go and get it.
+ *
+ * The tile keeps its shape and its coloured mark so the grid still reads as
+ * one row of equals; what changes is that it stops inviting a click. The
+ * `disabled` attribute on the button is what actually prevents one and takes
+ * it out of the tab order — these rules only make that visible. */
+.form2zoho-source-tile.is-locked {
+        background: var(--f2z-surface-subtle);
+        cursor: default;
+}
+/* Hover and press feedback both suppressed: a tile that lifts under the
+   pointer is promising something it will not do. */
+.form2zoho-source-tile.is-locked:hover {
+        background: var(--f2z-surface-subtle);
+        box-shadow: none;
+}
+.form2zoho-source-tile.is-locked:active {
+        transform: none;
+}
+/* Muted, not invisible. Enough to read as unavailable at a glance, still
+   legible enough to tell which product it is — which is the entire point of
+   showing it. */
+.form2zoho-source-tile.is-locked .form2zoho-source-icon,
+.form2zoho-source-tile.is-locked .form2zoho-source-label {
+        opacity: .55;
+}
+/* The badge sits where the selected tile's check badge sits. They can never
+   collide: a locked tile cannot be the active one. */
+.form2zoho-source-badge {
+        position: absolute;
+        top: var(--f2z-space-2);
+        right: var(--f2z-space-2);
+        z-index: 2;
+        padding: 2px 7px;
+        background: var(--f2z-brand);
+        border-radius: var(--f2z-radius-pill);
+        color: #fff;
+        font-size: var(--f2z-fs-xs);
+        font-weight: var(--f2z-fw-bold);
+        line-height: 1.5;
+        letter-spacing: .02em;
+        text-transform: uppercase;
+}
 …
+}
+/* The Details disclosure on a timeline entry. .form2zoho-detail-wrap and
+   .form2zoho-json are the log table's own, reused as-is so the JSON reads
+   identically in both places; only the spacing around the button is new. */
+.form2zoho-timeline-details {
+        margin-top: var(--f2z-space-2);
+}
+.form2zoho-timeline-details .form2zoho-detail-wrap {
+        margin-top: var(--f2z-space-2);
+}
 /* Size comes from `.button.button-small` on the same element; only its
    position in the timeline entry is this rule's business. */
 …
                 min-width: 560px;
+        }
+        /* The rail and the action bar bleed to the card's edges by negating its
+           padding exactly. The padding just changed, so these have to change with
+           it or the bar hangs 8px over both sides and the page scrolls sideways. */
+        .form2zoho-stepper {
+                margin: 0 calc(-1 * var(--f2z-space-4)) var(--f2z-space-5);
+                padding: 0 var(--f2z-space-4) var(--f2z-space-4);
+        }
+        .form2zoho-step-footer {
+                margin: var(--f2z-space-5) calc(-1 * var(--f2z-space-4)) calc(-1 * var(--f2z-space-4));
+                padding: var(--f2z-space-3) var(--f2z-space-4);
+        }
+        /* Two columns of fields need about 760px of card to stay readable. Below
+           that they stack — one question per line, which is what the fieldset on
+           step two does at every width. */
+        .form2zoho-grid {
+                grid-template-columns: minmax(0, 1fr);
+                gap: var(--f2z-space-5);
+        }
+        /* One column, so a spanning cell is the same cell as any other and takes
+           the ordinary measure back. Halving it here would make the module picker
+           half the width of the account picker directly above it. */
+        .form2zoho .form2zoho-grid > .form2zoho-field--wide > * {
+                max-width: var(--f2z-field-col);
+        }
+        /* The names stay; the one-line explanations go. Four hints across a
+           narrow card wrap to three lines each and the rail becomes taller than
+           the step it introduces. */
+        .form2zoho-stepper__hint {
+                display: none;
+        }
+}
+/* Height, not width. On a laptop viewport under about 760px the Pro dialog's
+   scrolling middle band is left with roughly 190px, which cuts the benefit
+   list off mid-sentence — a dialog that fits looks like one that broke.
+   The head is where the space is: the mark and its padding are worth 130px
+   between them, and shrinking those costs far less than losing half the
+   content behind a scrollbar. */
+@media (max-height: 760px) {
+        .form2zoho-modal-pro {
+                max-height: 92vh;
+        }
+        .form2zoho-pro-head {
+                padding: var(--f2z-space-5) var(--f2z-space-6) var(--f2z-space-4);
+        }
+        .form2zoho-pro-mark {
+                width: 60px;
+                height: 60px;
+                margin-bottom: var(--f2z-space-3);
+        }
+        .form2zoho-pro-mark-img {
+                width: 38px;
+                height: 38px;
+        }
+        .form2zoho .form2zoho-modal-pro h2.form2zoho-pro-title {
+                font-size: var(--f2z-fs-lg);
+        }
+        .form2zoho-pro-blurb {
+                font-size: var(--f2z-fs-base);
+        }
+        .form2zoho-pro-benefits {
+                gap: var(--f2z-space-4) var(--f2z-space-6);
+        }
+}
 @media (max-width: 782px) {
+        .form2zoho-group__head,
+        .form2zoho-group__body {
+                padding: var(--f2z-space-4);
+        }
+        /* Follows the padding it negates — see the rule it overrides. */
+        .form2zoho-group__body > .form2zoho-table-scroll {
+                margin: 0 calc(-1 * var(--f2z-space-4));
+                width: calc(100% + 2 * var(--f2z-space-4));
+        }
+        /* Numbers only. "Destination" over a 70px column breaks mid-word, and the
+           markers plus the current step's own heading already say where you are. */
+        .form2zoho-stepper__text {
+                display: none;
+        }
+        .form2zoho-stepper__item.is-current .form2zoho-stepper__text {
+                display: block;
+        }
+        /* With one name shown and three hidden, the rail no longer needs equal
+           columns — the current step gets the room its name needs. */
+        .form2zoho-stepper__list {
+                grid-auto-columns: auto;
+                justify-content: center;
+                gap: var(--f2z-space-5);
+        }
+        /* The connectors were drawn between the centres of equal columns. Those
+           are gone, so the line is drawn to the gap instead. */
+        .form2zoho-stepper__item:not(:last-child)::after {
+                left: calc(100% + 2px);
+                right: calc(-1 * var(--f2z-space-5) + 2px);
+        }
+        /* The dialog fills a phone, so the two benefit columns become one rather
+           than two 130px ladders, and the foot stacks with the primary action
+           full width and on top. */
+        .form2zoho-modal-pro {
+                width: 100%;
+        }
+        .form2zoho-pro-benefits {
+                grid-template-columns: 1fr;
+        }
+        .form2zoho-pro-foot {
+                flex-direction: column-reverse;
+                gap: var(--f2z-space-2);
+        }
+        .form2zoho-pro-foot .form2zoho-pro-cta {
+                width: 100%;
+                text-align: center;
+        }
+        /* The bleed cancels wp-admin's own insets, and wp-admin changes them here:
+           #wpcontent's left padding drops from 20px to 10px and .wrap's right
+           margin from 20px to 12px. The desktop -20px/-20px therefore over-pulled
+           by 10px on the left and 8px on the right, which is the whole of the
+           sideways scroll this page had on a phone. */
         .form2zoho-hero {
+                padding: var(--f2z-space-5) var(--f2z-space-4) 42px;
+                margin: -10px -12px 0 -10px;
+                padding: var(--f2z-space-4);
+        }
 …
         /* The tab bar scrolls sideways rather than wrapping to two rows, which
            would push the panel below the fold. */
-        .form2zoho-tabs,
         .form2zoho .form2zoho-settings-tabs {
                 flex-wrap: nowrap;
 …
                 padding-left: var(--f2z-space-4);
                 padding-right: var(--f2z-space-4);
+        }
+        /* The footer wraps and its buttons go full width at this size, so an auto
+           margin would strand the documentation link alone on a right-aligned
+           line. Let it sit where it falls. */
+        .form2zoho-modal-docs {
+                margin-left: 0;
+        }
 …
+        }
+        /* The box is core's rem touch size again here, so the mark goes back to
+           core's rem geometry with it. It has to be said explicitly: the px rule
+           above outranks core's own (0,3,2 against 0,2,2) and would otherwise
+           leave a 21px mark on a 25px box. */
+        .form2zoho input[type="checkbox"]:checked::before {
+                width: 1.875rem;
+                height: 1.875rem;
+                margin: -0.1875rem -0.3125rem;
+        }
         /* …except the one inside a switch, which is a transparent overlay rather
            than a visible box: it has to keep covering its own 40x22 track. Sizing
 …
 @media (max-width: 600px) {
+        .form2zoho-hero {
+                flex-direction: column;
+                align-items: flex-start;
+                gap: var(--f2z-space-2);
+        /* The version drops out rather than taking a line of its own. Both items
+           need about 310px before padding and this is a 320px viewport; stacking
+           them spent a whole row of a phone screen on a number wanted once, when
+           reporting a problem — and the Plugins screen still shows it. The hero
+           stays a row, so the lockup keeps the bar to itself. */
+        .form2zoho-hero-version {
+                display: none;
+        }
+        /* The lockup is sized for the desktop hero. At this width the name would
+           run to about 270px before its padding, which does not fit a 320px
+           viewport once the hero's own inset is taken off. The mark's width and
+           height are attributes on the <svg>, and a rule beats an attribute. */
+        .form2zoho-hero-logo {
+                font-size: var(--f2z-fs-lg);
+        }
+        .form2zoho-hero-logo-mark {
+                width: 28px;
+                height: 28px;
+        }
 …
+        }
-        .form2zoho-editor-wrap h1 {
-                font-size: var(--f2z-fs-xl);
+        }
         /* Tap targets get the full width; the pair still reads as one group. */
         .form2zoho-tab-footer {
+        .form2zoho-step-footer {
                 flex-wrap: wrap;
+        }
+        .form2zoho-tab-footer .button {
+                margin: var(--f2z-space-5) calc(-1 * var(--f2z-space-3)) calc(-1 * var(--f2z-space-3));
+                padding: var(--f2z-space-3);
+        }
+        .form2zoho-step-footer .button {
                 flex: 1 1 auto;
                 min-width: 0;
+        }
+        .form2zoho-stepper {
+                margin: 0 calc(-1 * var(--f2z-space-3)) var(--f2z-space-4);
+                padding: 0 var(--f2z-space-3) var(--f2z-space-4);
+        }
+        /* The summary card's Change button drops under the name rather than
+           squeezing it to three characters and an ellipsis. */
+        .form2zoho-chosen-card {
+                flex-wrap: wrap;
+        }
+        .form2zoho-chosen-clear {
+                flex: 1 1 100%;
+                justify-content: center;
+        }
 …
 . MOTION & CONTRAST PREFERENCES
    ========================================================================== */
+/* One step of the feed editor arriving. Short and small on purpose: it says
+   "this is a different screen" without making anyone wait to read it. */
+@keyframes form2zoho-step-in {
+        from {
+                opacity: 0;
+                transform: translateY(6px);
+        }
+        to {
+                opacity: 1;
+                transform: none;
+        }
+}
 @keyframes form2zoho-spin {
 …
                 border: 1px solid CanvasText;
+        }
+}
+        /* In forced colours every background is repainted, so "current" and
+           "done" stop being told apart by the brand fill — and the tick is a
+           background-image, which is dropped outright. Weight and a border carry
+           it instead: the current marker gets a thick ring, a finished one keeps
+           its number rather than showing a tick that is not there. */
+        .form2zoho-stepper__item.is-current .form2zoho-stepper__marker {
+                border-width: 3px;
+                box-shadow: none;
+        }
+        .form2zoho-stepper__item.is-done .form2zoho-stepper__marker {
+                font-size: var(--f2z-fs-sm);
+                background-image: none;
+        }
+        .form2zoho-stepper__btn:disabled .form2zoho-stepper__marker,
+        .form2zoho-stepper__btn:disabled .form2zoho-stepper__title {
+                color: GrayText;
+        }
+}
+/* ==========================================================================
+. SEARCHABLE FIELD PICKERS (mapping table)
+   ==========================================================================
+   The <select> is kept and only hidden from sight: it still carries the name,
+   still holds the value, and is still what every handler in admin.js reads.
+   Hiding it with `display:none` would take it out of the accessibility tree
+   for the screen readers that do use it, so it is clipped instead — the same
+   trick .screen-reader-text uses — and the text input above carries the
+   combobox role. */
+.f2z-combo {
+        position: relative;
+}
+.f2z-combo__native {
+        position: absolute;
+        width: 1px;
+        height: 1px;
+        padding: 0;
+        margin: -1px;
+        overflow: hidden;
+        clip: rect(0 0 0 0);
+        white-space: nowrap;
+        border: 0;
+}
+.f2z-combo__input {
+        width: 100%;
+}
+/* The caret every select in the plugin draws (4.2), at the same offset, so a
+   searchable picker reads as a dropdown and not as a box to type a sentence
+   into. It points up while the list is open, and is paler on a box that
+   cannot be opened. Three classes, to outrank the text-input rules and their
+   `background` shorthand. */
+.form2zoho .f2z-combo .f2z-combo__input {
+        padding-right: 30px;
+        background-image: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 20 20' width='16' height='16'%3E%3Cpath d='M6 8l4 4 4-4' fill='none' stroke='%235b6470' stroke-width='1.6' stroke-linecap='round' stroke-linejoin='round'/%3E%3C/svg%3E");
+        background-repeat: no-repeat;
+        background-position: right 9px center;
+        text-overflow: ellipsis;
+        cursor: pointer;
+}
+.form2zoho .f2z-combo.is-open .f2z-combo__input {
+        background-image: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 20 20' width='16' height='16'%3E%3Cpath d='M6 12l4-4 4 4' fill='none' stroke='%235b6470' stroke-width='1.6' stroke-linecap='round' stroke-linejoin='round'/%3E%3C/svg%3E");
+        cursor: text;
+}
+.form2zoho .f2z-combo .f2z-combo__input:disabled {
+        background-image: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 20 20' width='16' height='16'%3E%3Cpath d='M6 8l4 4 4-4' fill='none' stroke='%23b4bac2' stroke-width='1.6' stroke-linecap='round' stroke-linejoin='round'/%3E%3C/svg%3E");
+        cursor: default;
+}
+/* Fixed, not absolute, and placed by admin.js from the input's own rectangle.
+   The mapping table sits in .form2zoho-table-scroll, which sets overflow-x
+   for narrow screens — and a box that scrolls on one axis clips on both, so
+   an absolutely positioned list was cut off at the table's edge with a
+   scrollbar of its own. Fixed positioning leaves that clipping box entirely.
+   There is no transformed ancestor between here and the viewport to spoil it;
+   the only transforms in this file are on toasts and modals.
+   Positioned in script rather than in CSS because a fixed element has nothing
+   to anchor to: see comboPosition(), which also flips it above the input when
+   the row is near the bottom of the window. */
+.f2z-combo__list {
+        position: fixed;
+        z-index: 100;
+        /* The width and max-height are set in script from the input's rectangle,
+           so they have to mean the same thing here as they do there — border-box,
+           or the padding and border below push the list wider than the field and
+           past the bottom of the window. */
+        box-sizing: border-box;
+        max-height: 240px;
+        overflow-y: auto;
+        margin: 0;
+        padding: var(--f2z-space-1);
+        list-style: none;
+        background: var(--f2z-surface);
+        border: 1px solid var(--f2z-border);
+        border-radius: var(--f2z-radius-control);
+        box-shadow: var(--f2z-shadow-lg);
+}
+.f2z-combo__opt {
+        margin: 0;
+        padding: var(--f2z-space-2) var(--f2z-space-3);
+        border-radius: var(--f2z-radius-control);
+        cursor: pointer;
+        font-size: var(--f2z-fs-sm);
+        line-height: 1.4;
+}
+.f2z-combo__opt:hover,
+.f2z-combo__opt.is-active {
+        background: var(--f2z-surface-subtle);
+}
+/* Keyboard focus has to be visible on its own, because the focus ring stays on
+   the input while the highlight moves down the list. */
+.f2z-combo__opt.is-active {
+        box-shadow: inset 2px 0 0 var(--f2z-brand);
+}
+.f2z-combo__empty {
+        margin: 0;
+        padding: var(--f2z-space-2) var(--f2z-space-3);
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-sm);
+}
+/* The unique-field boxes under Duplicate handling. Its own label rather than a
+   <label for>, because the group has no single control to point at. */
+.form2zoho-dedupe-unique__label {
+        display: block;
+        margin-bottom: var(--f2z-space-2);
+        color: var(--f2z-text);
+        font-weight: var(--f2z-fw-semibold);
+        font-size: var(--f2z-fs-sm);
+}
+/* ==========================================================================
+   TOP BAR NAVIGATION & DASHBOARD
+   The screens are listed in the masthead (HeaderNav) instead of the sidebar
+   submenu, and the Dashboard screen (DashboardPage) sits under it.
+   ========================================================================== */
+.form2zoho-topbar {
+        justify-content: flex-start;
+        flex-wrap: wrap;
+        /* Room above and below the links, and the same inset on both sides as
+           the card under the bar, so the logo lines up with the card's edge. */
+        padding: var(--f2z-space-4) var(--f2z-space-6);
+        column-gap: var(--f2z-space-5);
+        /* Up by .wrap's own 10px top margin and no more. The hero's -20px pulled
+           the bar 10px under the admin toolbar, cutting off its top padding. */
+        margin-top: -10px;
+}
+.form2zoho-topbar .form2zoho-topnav {
+        margin-left: 0;
+}
+/* The links sit at the right-hand end of the bar. An auto margin rather than
+   justify-content: when the links outgrow the bar it falls to zero, so the
+   first ones stay reachable by scrolling instead of being cut off. */
+.form2zoho-topbar .form2zoho-topnav > :first-child {
+        margin-left: auto;
+}
+.form2zoho-topbar .form2zoho-hero-logo {
+        font-size: var(--f2z-fs-lg);
+}
+.form2zoho-topbar .form2zoho-hero-logo-mark {
+        width: 30px;
+        height: 30px;
+}
+.form2zoho-topnav {
+        display: flex;
+        flex: 1 1 0;
+        align-items: center;
+        gap: var(--f2z-space-1);
+        min-width: 0;
+        margin-left: var(--f2z-space-4);
+        overflow-x: auto;
+        scrollbar-width: none;
+}
+.form2zoho-topnav::-webkit-scrollbar {
+        display: none;
+}
+.form2zoho-topnav-link {
+        display: inline-flex;
+        align-items: center;
+        gap: 6px;
+        padding: 6px var(--f2z-space-3);
+        border-radius: var(--f2z-radius-control);
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-base);
+        font-weight: var(--f2z-fw-medium);
+        text-decoration: none;
+        white-space: nowrap;
+}
+.form2zoho-topnav-link:hover,
+.form2zoho-topnav-link:focus {
+        background: var(--f2z-surface-subtle);
+        color: var(--f2z-text);
+}
+.form2zoho-topnav-link:focus-visible {
+        outline: 2px solid var(--f2z-brand);
+        outline-offset: 1px;
+        box-shadow: none;
+}
+.form2zoho-topnav-link.is-active {
+        background: var(--f2z-surface-head);
+        color: var(--f2z-heading);
+        font-weight: var(--f2z-fw-semibold);
+}
+.form2zoho-topbar-actions {
+        display: flex;
+        align-items: center;
+        gap: var(--f2z-space-3);
+        margin-left: auto;
+}
+.form2zoho-topbar-status {
+        display: inline-flex;
+        align-items: center;
+        gap: 6px;
+        padding: 4px 10px;
+        border: 1px solid var(--f2z-ok-border);
+        border-radius: var(--f2z-radius-pill);
+        background: var(--f2z-ok-bg);
+        color: var(--f2z-ok);
+        font-size: var(--f2z-fs-sm);
+        font-weight: var(--f2z-fw-medium);
+        text-decoration: none;
+        white-space: nowrap;
+}
+.form2zoho-topbar-status.is-off {
+        border-color: var(--f2z-warn-border);
+        background: var(--f2z-warn-bg);
+        color: var(--f2z-warn);
+}
+.form2zoho-topbar-status:hover,
+.form2zoho-topbar-status:focus {
+        color: inherit;
+        filter: brightness(.97);
+}
+.form2zoho-topbar-dot,
+.form2zoho-dash-dot {
+        flex-shrink: 0;
+        width: 8px;
+        height: 8px;
+        border-radius: 50%;
+        background: currentColor;
+}
+.wrap.form2zoho .form2zoho-topbar-new {
+        display: inline-flex;
+        align-items: center;
+        gap: 6px;
+        white-space: nowrap;
+}
+/* --- Dashboard ---------------------------------------------------------
+ * Four stat cards, then the period's chart beside a health summary, then the
+ * lists. Soft cards on the page's grey: a hairline border and a faint shadow
+ * rather than a drawn box, so the numbers carry the screen.
+ *
+ * The four hues (blue, purple, green, red) name the four cards and nothing
+ * else; on the chart, blue is what was sent and red what failed, the same
+ * meaning red has everywhere in the plugin. */
+.form2zoho-dash {
+        --f2z-dash-blue: #2f6fed;
+        --f2z-dash-blue-bg: #eaf1ff;
+        --f2z-dash-purple: #7c3aed;
+        --f2z-dash-purple-bg: #f3ebff;
+        --f2z-dash-green: #0e9f6e;
+        --f2z-dash-green-bg: #e3f8ef;
+        --f2z-dash-red: #e02424;
+        --f2z-dash-red-bg: #fdecec;
+        --f2z-dash-amber: #b7791f;
+        --f2z-dash-amber-bg: #fdf3dc;
+        max-width: 1240px;
+        margin: var(--f2z-space-6) auto 0;
+        color: var(--f2z-text);
+}
+.form2zoho-dash-card {
+        padding: var(--f2z-space-5);
+        border: 1px solid var(--f2z-border-subtle);
+        border-radius: 14px;
+        background: var(--f2z-surface);
+        box-shadow: 0 1px 2px rgba(16, 24, 40, .04), 0 4px 14px rgba(16, 24, 40, .04);
+}
+/* --- Stat cards --- */
+.form2zoho-dash-stats {
+        display: grid;
+        grid-template-columns: repeat(4, minmax(0, 1fr));
+        gap: var(--f2z-space-4);
+        margin-bottom: var(--f2z-space-4);
+}
+.form2zoho-dash-stat {
+        display: flex;
+        align-items: center;
+        gap: var(--f2z-space-4);
+        min-width: 0;
+}
+.form2zoho-dash-stat.is-blue,
+.form2zoho-dash-tile.is-blue {
+        --f2z-dash-hue: var(--f2z-dash-blue);
+        --f2z-dash-hue-bg: var(--f2z-dash-blue-bg);
+}
+.form2zoho-dash-stat.is-purple {
+        --f2z-dash-hue: var(--f2z-dash-purple);
+        --f2z-dash-hue-bg: var(--f2z-dash-purple-bg);
+}
+.form2zoho-dash-stat.is-green,
+.form2zoho-dash-tile.is-green {
+        --f2z-dash-hue: var(--f2z-dash-green);
+        --f2z-dash-hue-bg: var(--f2z-dash-green-bg);
+}
+.form2zoho-dash-stat.is-red {
+        --f2z-dash-hue: var(--f2z-dash-red);
+        --f2z-dash-hue-bg: var(--f2z-dash-red-bg);
+}
+.form2zoho-dash-tile.is-amber {
+        --f2z-dash-hue: var(--f2z-dash-amber);
+        --f2z-dash-hue-bg: var(--f2z-dash-amber-bg);
+}
+.form2zoho-dash-stat-icon {
+        display: inline-flex;
+        flex: 0 0 52px;
+        align-items: center;
+        justify-content: center;
+        width: 52px;
+        height: 52px;
+        border-radius: 12px;
+        background: var(--f2z-dash-hue-bg);
+        color: var(--f2z-dash-hue);
+}
+.form2zoho-dash-stat-body {
+        display: flex;
+        flex: 1 1 auto;
+        flex-direction: column;
+        min-width: 0;
+}
+.form2zoho-dash-stat-label {
+        overflow: hidden;
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-xs);
+        font-weight: var(--f2z-fw-semibold);
+        letter-spacing: .04em;
+        text-overflow: ellipsis;
+        text-transform: uppercase;
+        white-space: nowrap;
+}
+.form2zoho-dash-stat-value {
+        margin: 2px 0 4px;
+        color: var(--f2z-heading);
+        font-size: 28px;
+        font-weight: var(--f2z-fw-bold);
+        line-height: 1.15;
+        font-variant-numeric: tabular-nums;
+}
+/* The success rate and the failures wear their card's colour, as the
+   reference does: they are the two numbers read as a verdict. */
+.form2zoho-dash-stat.is-green .form2zoho-dash-stat-value,
+.form2zoho-dash-stat.is-red .form2zoho-dash-stat-value {
+        color: var(--f2z-dash-hue);
+}
+.form2zoho-dash-stat-note {
+        display: flex;
+        flex-wrap: wrap;
+        align-items: center;
+        gap: 6px;
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-xs);
+}
+.form2zoho-dash-delta {
+        display: inline-flex;
+        align-items: center;
+        gap: 3px;
+        padding: 1px 8px;
+        border-radius: var(--f2z-radius-pill);
+        background: var(--f2z-disabled-bg);
+        color: var(--f2z-muted);
+        font-weight: var(--f2z-fw-semibold);
+        white-space: nowrap;
+        font-variant-numeric: tabular-nums;
+}
+.form2zoho-dash-delta.is-good {
+        background: var(--f2z-dash-green-bg);
+        color: #057a55;
+}
+.form2zoho-dash-delta.is-bad {
+        background: var(--f2z-dash-red-bg);
+        color: #c81e1e;
+}
+.form2zoho-dash a.form2zoho-dash-stat-go {
+        display: inline-flex;
+        flex: 0 0 32px;
+        align-items: center;
+        justify-content: center;
+        width: 32px;
+        height: 32px;
+        border-radius: 50%;
+        background: var(--f2z-dash-hue-bg);
+        color: var(--f2z-dash-hue);
+        text-decoration: none;
+        transition: background-color var(--f2z-transition), color var(--f2z-transition);
+}
+.form2zoho-dash a.form2zoho-dash-stat-go:hover,
+.form2zoho-dash a.form2zoho-dash-stat-go:focus {
+        background: var(--f2z-dash-hue);
+        color: #fff;
+}
+/* --- The two columns under the cards --- */
+.form2zoho-dash-grid {
+        display: grid;
+        grid-template-columns: minmax(0, 2fr) minmax(0, 1fr);
+        gap: var(--f2z-space-4);
+        align-items: start;
+}
+.form2zoho-dash-main,
+.form2zoho-dash-side {
+        display: grid;
+        gap: var(--f2z-space-4);
+        min-width: 0;
+}
+.form2zoho-dash-card-head {
+        display: flex;
+        flex-wrap: wrap;
+        align-items: center;
+        justify-content: space-between;
+        gap: var(--f2z-space-3);
+        margin-bottom: var(--f2z-space-4);
+}
+.wrap.form2zoho .form2zoho-dash-card-head h2 {
+        display: flex;
+        align-items: center;
+        gap: var(--f2z-space-2);
+        margin: 0;
+        padding: 0;
+        color: var(--f2z-heading);
+        font-size: var(--f2z-fs-lg);
+        font-weight: var(--f2z-fw-bold);
+}
+.form2zoho-dash-card-head h2 svg {
+        flex: 0 0 auto;
+        color: var(--f2z-dash-blue);
+}
+.form2zoho-dash-card-head p {
+        margin: 2px 0 0;
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-sm);
+}
+/* --- Performance Overview --- */
+.form2zoho-dash-range {
+        display: inline-flex;
+        flex-wrap: wrap;
+        gap: 6px;
+}
+.form2zoho-dash .form2zoho-dash-range a {
+        padding: 6px 12px;
+        border: 1px solid transparent;
+        border-radius: 8px;
+        background: var(--f2z-surface-head);
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-sm);
+        font-weight: var(--f2z-fw-medium);
+        text-decoration: none;
+        white-space: nowrap;
+}
+.form2zoho-dash .form2zoho-dash-range a:hover,
+.form2zoho-dash .form2zoho-dash-range a:focus {
+        color: var(--f2z-heading);
+}
+.form2zoho-dash .form2zoho-dash-range a.is-active {
+        border-color: #c9dbff;
+        background: var(--f2z-dash-blue-bg);
+        color: #1d4fd8;
+        font-weight: var(--f2z-fw-semibold);
+}
+.form2zoho-dash-legend {
+        display: flex;
+        justify-content: flex-end;
+        gap: var(--f2z-space-4);
+        margin-bottom: var(--f2z-space-3);
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-xs);
+}
+.form2zoho-dash-legend span::before {
+        content: "";
+        display: inline-block;
+        width: 8px;
+        height: 8px;
+        margin-right: 6px;
+        border-radius: 50%;
+        background: var(--f2z-dash-blue);
+}
+.form2zoho-dash-legend .is-failed::before {
+        background: var(--f2z-dash-red);
+}
+/* The plot: a y-axis column, then the lines. The lines are one SVG stretched
+   to the plot; the gridlines behind it and the hover columns over it are
+   HTML, so the labels stay upright at any width. */
+.form2zoho-dash-chart {
+        display: flex;
+        gap: var(--f2z-space-3);
+        height: 240px;
+}
+.form2zoho-dash-yaxis {
+        display: flex;
+        flex-direction: column;
+        justify-content: space-between;
+        min-width: 24px;
+        margin: -7px 0;
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-xs);
+        line-height: 14px;
+        text-align: right;
+        font-variant-numeric: tabular-nums;
+}
+.form2zoho-dash-yaxis span {
+        min-height: 14px;
+}
+.form2zoho-dash-plot {
+        position: relative;
+        flex: 1;
+        min-width: 0;
+        border-bottom: 1px solid var(--f2z-border);
+        background: repeating-linear-gradient(to bottom, var(--f2z-border-subtle) 0, var(--f2z-border-subtle) 1px, transparent 1px, transparent 25%);
+}
+.form2zoho-dash-lines {
+        position: absolute;
+        inset: 0;
+        width: 100%;
+        height: 100%;
+        overflow: visible;
+        color: var(--f2z-dash-blue);
+}
+.form2zoho-dash-lines path {
+        fill: none;
+        stroke-width: 2;
+        stroke-linecap: round;
+        stroke-linejoin: round;
+        vector-effect: non-scaling-stroke;
+}
+.form2zoho-dash-lines .is-area {
+        fill: url(#f2z-dash-fill);
+        stroke: none;
+}
+.form2zoho-dash-lines .is-sent {
+        stroke: var(--f2z-dash-blue);
+}
+.form2zoho-dash-lines .is-failed {
+        stroke: var(--f2z-dash-red);
+}
+.form2zoho-dash-cols {
+        position: absolute;
+        inset: 0;
+        display: flex;
+}
+.form2zoho-dash-col {
+        position: relative;
+        flex: 1;
+        min-width: 0;
+        height: 100%;
+        outline: none;
+}
+/* The guide down the hovered day. */
+.form2zoho-dash-col::before {
+        content: "";
+        position: absolute;
+        top: 0;
+        bottom: 0;
+        left: 50%;
+        width: 1px;
+        background: var(--f2z-control-border);
+        opacity: 0;
+}
+.form2zoho-dash-point {
+        position: absolute;
+        left: 50%;
+        width: 10px;
+        height: 10px;
+        margin: 0 0 -5px -5px;
+        border: 2px solid var(--f2z-surface);
+        border-radius: 50%;
+        background: var(--f2z-dash-blue);
+        opacity: 0;
+}
+.form2zoho-dash-point.is-failed {
+        background: var(--f2z-dash-red);
+}
+.form2zoho-dash-col:hover::before,
+.form2zoho-dash-col:focus-visible::before,
+.form2zoho-dash-col:hover .form2zoho-dash-point,
+.form2zoho-dash-col:focus-visible .form2zoho-dash-point {
+        opacity: 1;
+}
+.form2zoho-dash-col:hover::after,
+.form2zoho-dash-col:focus-visible::after {
+        content: attr(data-tip);
+        position: absolute;
+        top: 6px;
+        left: 50%;
+        z-index: 2;
+        padding: 5px 9px;
+        border-radius: 6px;
+        background: var(--f2z-heading);
+        color: #fff;
+        font-size: var(--f2z-fs-xs);
+        white-space: nowrap;
+        transform: translateX(-50%);
+        pointer-events: none;
+}
+/* Near an edge the tip opens inwards, so it is never cut off by the card. */
+.form2zoho-dash-col:nth-child(-n+4):hover::after,
+.form2zoho-dash-col:nth-child(-n+4):focus-visible::after {
+        left: 0;
+        transform: none;
+}
+.form2zoho-dash-col:nth-last-child(-n+4):hover::after,
+.form2zoho-dash-col:nth-last-child(-n+4):focus-visible::after {
+        right: 0;
+        left: auto;
+        transform: none;
+}
+/* One slot per day, so a date sits under its own point. */
+.form2zoho-dash-xaxis {
+        display: flex;
+        margin: var(--f2z-space-2) 0 0 36px;
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-xs);
+}
+.form2zoho-dash-xaxis span {
+        flex: 1;
+        min-width: 0;
+        overflow: visible;
+        text-align: center;
+        white-space: nowrap;
+}
+.form2zoho-dash-chart-note {
+        margin: var(--f2z-space-3) 0 0;
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-xs);
+}
+/* --- Sync Health --- */
+.form2zoho-dash-health.is-good {
+        --f2z-dash-ring: var(--f2z-dash-green);
+        --f2z-dash-ring-bg: var(--f2z-dash-green-bg);
+        --f2z-dash-ring-ink: #057a55;
+}
+.form2zoho-dash-health.is-ok {
+        --f2z-dash-ring: var(--f2z-dash-blue);
+        --f2z-dash-ring-bg: var(--f2z-dash-blue-bg);
+        --f2z-dash-ring-ink: #1d4fd8;
+}
+.form2zoho-dash-health.is-warn {
+        --f2z-dash-ring: #d69e2e;
+        --f2z-dash-ring-bg: var(--f2z-dash-amber-bg);
+        --f2z-dash-ring-ink: #8a5000;
+}
+.form2zoho-dash-health.is-bad {
+        --f2z-dash-ring: var(--f2z-dash-red);
+        --f2z-dash-ring-bg: var(--f2z-dash-red-bg);
+        --f2z-dash-ring-ink: #c81e1e;
+}
+.form2zoho-dash-health.is-none {
+        --f2z-dash-ring: var(--f2z-border);
+        --f2z-dash-ring-bg: var(--f2z-surface-head);
+        --f2z-dash-ring-ink: var(--f2z-muted);
+}
+.form2zoho-dash-ring {
+        position: relative;
+        width: 132px;
+        height: 132px;
+        margin: 0 auto var(--f2z-space-4);
+}
+.form2zoho-dash-ring circle {
+        fill: none;
+        stroke-width: 12;
+}
+.form2zoho-dash-ring .is-track {
+        stroke: var(--f2z-border-subtle);
+}
+.form2zoho-dash-ring .is-value {
+        stroke: var(--f2z-dash-ring);
+        stroke-linecap: round;
+}
+.form2zoho-dash-ring-text {
+        position: absolute;
+        inset: 0;
+        display: flex;
+        flex-direction: column;
+        align-items: center;
+        justify-content: center;
+        text-align: center;
+}
+.form2zoho-dash-ring-text strong {
+        color: var(--f2z-heading);
+        font-size: 30px;
+        font-weight: var(--f2z-fw-bold);
+        line-height: 1.1;
+        font-variant-numeric: tabular-nums;
+}
+.form2zoho-dash-ring-text span {
+        max-width: 84px;
+        color: var(--f2z-dash-ring-ink);
+        font-size: 10px;
+        font-weight: var(--f2z-fw-bold);
+        letter-spacing: .04em;
+        line-height: 1.2;
+        text-transform: uppercase;
+}
+.form2zoho-dash-tiles {
+        display: grid;
+        grid-template-columns: repeat(3, minmax(0, 1fr));
+        gap: var(--f2z-space-2);
+        margin-bottom: var(--f2z-space-4);
+}
+.form2zoho-dash-tile {
+        display: flex;
+        flex-direction: column;
+        gap: 6px;
+        min-width: 0;
+        padding: var(--f2z-space-3);
+        border: 1px solid var(--f2z-border-subtle);
+        border-radius: 10px;
+        background: var(--f2z-surface-subtle);
+}
+.form2zoho-dash-tile-icon {
+        display: inline-flex;
+        align-items: center;
+        justify-content: center;
+        width: 28px;
+        height: 28px;
+        border-radius: 8px;
+        background: var(--f2z-dash-hue-bg);
+        color: var(--f2z-dash-hue);
+}
+.form2zoho-dash-tile > span:last-child {
+        display: flex;
+        flex-direction: column;
+        min-width: 0;
+}
+.form2zoho-dash-tile strong {
+        color: var(--f2z-heading);
+        font-size: var(--f2z-fs-lg);
+        font-weight: var(--f2z-fw-bold);
+        line-height: 1.2;
+        font-variant-numeric: tabular-nums;
+}
+.form2zoho-dash-tile strong + span {
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-xs);
+        line-height: 1.3;
+}
+.form2zoho-dash-health-note {
+        display: flex;
+        align-items: flex-start;
+        gap: var(--f2z-space-2);
+        margin: 0;
+        padding: var(--f2z-space-3);
+        border-radius: 10px;
+        background: var(--f2z-dash-ring-bg);
+        color: var(--f2z-dash-ring-ink);
+        font-size: var(--f2z-fs-sm);
+        font-weight: var(--f2z-fw-semibold);
+        line-height: 1.4;
+}
+/* With failures to look at, the line is a warning whatever the score. */
+.form2zoho-dash-health-note.is-warn {
+        background: var(--f2z-dash-amber-bg);
+        color: #8a5000;
+}
+.form2zoho-dash-health-note svg {
+        flex: 0 0 auto;
+        margin-top: 1px;
+}
+.form2zoho-dash-more {
+        display: inline-flex;
+        align-items: center;
+        gap: 2px;
+        color: var(--f2z-heading);
+        font-size: var(--f2z-fs-sm);
+        font-weight: var(--f2z-fw-medium);
+        text-decoration: none;
+        white-space: nowrap;
+}
+.form2zoho-dash-icon-link {
+        display: inline-flex;
+        flex-shrink: 0;
+        padding: 2px;
+        border-radius: var(--f2z-radius-sm);
+        color: var(--f2z-muted);
+}
+.form2zoho-dash-icon-link:hover,
+.form2zoho-dash-icon-link:focus {
+        color: var(--f2z-brand);
+}
+.form2zoho-dash-empty {
+        margin: 0;
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-sm);
+}
+.form2zoho-dash ul {
+        margin: 0;
+        padding: 0;
+        list-style: none;
+}
+.form2zoho-dash-feeds {
+        margin: 0 calc(-1 * var(--f2z-space-5)) calc(-1 * var(--f2z-space-5)) !important;
+        border-top: 1px solid var(--f2z-border-subtle);
+}
+.form2zoho-dash-feeds li {
+        display: flex;
+        align-items: center;
+        gap: var(--f2z-space-3);
+        margin: 0;
+        padding: var(--f2z-space-3) var(--f2z-space-5);
+        border-bottom: 1px solid var(--f2z-border-subtle);
+}
+.form2zoho-dash-feeds li:last-child {
+        border-bottom: 0;
+}
+.form2zoho-dash-feed-icon {
+        display: inline-flex;
+        flex-shrink: 0;
+        align-items: center;
+        justify-content: center;
+        width: 32px;
+        height: 32px;
+        border-radius: var(--f2z-radius-control);
+        background: var(--f2z-brand-tint);
+        color: #fff;
+        font-size: var(--f2z-fs-xs);
+        font-weight: var(--f2z-fw-bold);
+}
+.form2zoho-dash-feed-main,
+.form2zoho-dash-recent-main,
+.form2zoho-dash-conns li > span:last-child {
+        display: flex;
+        flex: 1;
+        flex-direction: column;
+        min-width: 0;
+}
+.form2zoho-dash-feed-main a {
+        overflow: hidden;
+        color: var(--f2z-heading);
+        font-weight: var(--f2z-fw-semibold);
+        text-decoration: none;
+        text-overflow: ellipsis;
+        white-space: nowrap;
+}
+.form2zoho-dash-feed-main a:hover {
+        color: var(--f2z-brand);
+}
+.form2zoho-dash-feed-main > span,
+.form2zoho-dash-feed-runs > span,
+.form2zoho-dash-recent-main > span:last-child,
+.form2zoho-dash-conns li > span:last-child > span {
+        overflow: hidden;
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-xs);
+        text-overflow: ellipsis;
+        white-space: nowrap;
+}
+.form2zoho-dash-feed-runs {
+        display: flex;
+        flex-direction: column;
+        align-items: flex-end;
+        flex-shrink: 0;
+        font-size: var(--f2z-fs-sm);
+        font-variant-numeric: tabular-nums;
+}
+.form2zoho-dash-pill {
+        flex-shrink: 0;
+        padding: 2px 8px;
+        border-radius: var(--f2z-radius-pill);
+        font-size: var(--f2z-fs-xs);
+        font-weight: var(--f2z-fw-medium);
+}
+.form2zoho-dash-pill.is-on {
+        background: var(--f2z-ok-bg);
+        color: var(--f2z-ok);
+}
+.form2zoho-dash-pill.is-off {
+        background: var(--f2z-disabled-bg);
+        color: var(--f2z-disabled-text);
+}
+.form2zoho-dash-conns li {
+        display: flex;
+        align-items: center;
+        gap: var(--f2z-space-3);
+        margin: 0 0 var(--f2z-space-2);
+        padding: var(--f2z-space-2) var(--f2z-space-3);
+        border: 1px solid var(--f2z-border);
+        border-radius: var(--f2z-radius-control);
+}
+.form2zoho-dash-conns li:last-child,
+.form2zoho-dash-recent li:last-child {
+        margin-bottom: 0;
+}
+.form2zoho-dash-recent li {
+        display: flex;
+        align-items: flex-start;
+        gap: var(--f2z-space-3);
+        margin: 0 0 var(--f2z-space-3);
+}
+.form2zoho-dash-recent .form2zoho-dash-dot {
+        margin-top: 5px;
+}
+.form2zoho-dash-dot.is-ok {
+        color: var(--f2z-ok);
+}
+.form2zoho-dash-dot.is-off {
+        color: var(--f2z-warn);
+}
+.form2zoho-dash-dot.is-bad {
+        color: var(--f2z-bad);
+}
+.form2zoho-dash-version {
+        margin: var(--f2z-space-5) 0 0;
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-xs);
+}
+@media (max-width: 1100px) {
+        .form2zoho-topnav {
+                order: 3;
+                flex: 1 1 100%;
+                margin: var(--f2z-space-2) 0 0;
+        }
+        .form2zoho-topbar-actions {
+                order: 2;
+        }
+}
+@media (max-width: 992px) {
+        .form2zoho-dash-stats {
+                grid-template-columns: repeat(2, minmax(0, 1fr));
+        }
+        .form2zoho-dash-grid {
+                grid-template-columns: minmax(0, 1fr);
+        }
+}
+@media (max-width: 600px) {
+        .form2zoho-topbar-status {
+                display: none;
+        }
+        .form2zoho-dash-stats {
+                grid-template-columns: minmax(0, 1fr);
+        }
+        .form2zoho-dash-card {
+                padding: var(--f2z-space-4);
+        }
+        .form2zoho-dash-chart {
+                height: 200px;
+        }
+        .form2zoho-dash-feeds {
+                margin: 0 calc(-1 * var(--f2z-space-4)) calc(-1 * var(--f2z-space-4)) !important;
+        }
+        .form2zoho-dash-feeds li {
+                flex-wrap: wrap;
+                padding: var(--f2z-space-3) var(--f2z-space-4);
+        }
+}
+/* --- Feed editor: "Zoho destination" card ------------------------------
+ * Docs, YouTube and Connect account share the card header, split by thin
+ * rules; the pickers below sit on one row (Account, Zoho app, Module, and any
+ * field an add-on adds such as Layout) and wrap when the card narrows. */
+.form2zoho-dest-links {
+        display: flex;
+        flex-wrap: wrap;
+        align-items: center;
+        gap: var(--f2z-space-2) 0;
+}
+.form2zoho-dest-links > a:not([hidden]) {
+        display: inline-flex;
+        align-items: center;
+        gap: var(--f2z-space-1);
+        margin: 0;
+        padding: 0 var(--f2z-space-3);
+        border-left: 1px solid var(--f2z-border);
+        line-height: 1.2;
+}
+.form2zoho .form2zoho-dest-links > a.form2zoho-step-docs {
+        margin: 0;
+        color: var(--f2z-text);
+        font-size: var(--f2z-fs-base);
+}
+.form2zoho-dest-links > a:not([hidden]):first-child,
+.form2zoho-dest-links > a[hidden] + a:not([hidden]) {
+        padding-left: 0;
+        border-left: 0;
+}
+.form2zoho-dest-links > a:last-child {
+        padding-right: 0;
+}
+.form2zoho-youtube-link svg {
+        opacity: 1;
+}
+.form2zoho-grid--dest {
+        grid-template-columns: repeat(auto-fit, minmax(190px, 1fr));
+        gap: var(--f2z-space-4);
+}
+.form2zoho-grid--dest > .form2zoho-field--wide {
+        grid-column: auto;
+}
+.form2zoho .form2zoho-grid--dest > .form2zoho-field > * {
+        max-width: none;
+}
+/* --- Feed list: the name and the trigger open the feed ---------------- */
+.form2zoho a.form2zoho-row-open {
+        color: inherit;
+        text-decoration: none;
+}
+.form2zoho a.form2zoho-row-open:hover strong,
+.form2zoho a.form2zoho-row-open:focus strong,
+.form2zoho a.form2zoho-row-open:hover .form2zoho-trigger-chip,
+.form2zoho a.form2zoho-row-open:focus .form2zoho-trigger-chip {
+        color: var(--f2z-brand);
+        text-decoration: underline;
+}
+/* --- Docs & Support tab ------------------------------------------------ */
+.form2zoho-support {
+        display: grid;
+        gap: var(--f2z-space-4);
+        margin-top: var(--f2z-space-5);
+}
+.form2zoho-support-cards {
+        display: grid;
+        grid-template-columns: repeat(auto-fit, minmax(280px, 1fr));
+        gap: var(--f2z-space-4);
+}
+.form2zoho-support-card {
+        display: flex;
+        flex-direction: column;
+        align-items: flex-start;
+        gap: var(--f2z-space-2);
+        padding: var(--f2z-space-5);
+        border: 1px solid var(--f2z-border);
+        border-radius: var(--f2z-radius-card);
+        background: var(--f2z-surface);
+}
+.wrap.form2zoho .form2zoho-support-card h3,
+.wrap.form2zoho .form2zoho-support-heading {
+        margin: 0;
+        color: var(--f2z-heading);
+        font-size: var(--f2z-fs-lg);
+        font-weight: var(--f2z-fw-semibold);
+}
+/* The icon tile and the title on one line, the tile a little ahead of it. */
+.wrap.form2zoho .form2zoho-support-card h3 {
+        display: flex;
+        align-items: center;
+        gap: var(--f2z-space-3);
+        margin-bottom: var(--f2z-space-1);
+}
+.form2zoho-support-card p {
+        flex: 1;
+        margin: 0 0 var(--f2z-space-2);
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-base);
+        line-height: var(--f2z-lh);
+}
+.form2zoho a.form2zoho-support-link {
+        display: inline-flex;
+        align-items: center;
+        gap: var(--f2z-space-1);
+        color: var(--f2z-brand);
+        font-weight: var(--f2z-fw-semibold);
+        text-decoration: none;
+}
+.form2zoho a.form2zoho-support-link:hover,
+.form2zoho a.form2zoho-support-link:focus {
+        text-decoration: underline;
+}
+.wrap.form2zoho .form2zoho-support-heading {
+        margin-top: var(--f2z-space-3);
+        font-size: var(--f2z-fs-md);
+}
+.form2zoho ul.form2zoho-support-list {
+        margin: 0;
+        padding: 0;
+        border: 1px solid var(--f2z-border);
+        border-radius: var(--f2z-radius-card);
+        background: var(--f2z-surface);
+        list-style: none;
+}
+.form2zoho-support-list li {
+        margin: 0;
+        border-top: 1px solid var(--f2z-border-subtle);
+}
+.form2zoho-support-list li:first-child {
+        border-top: 0;
+}
+.form2zoho-support-list a {
+        display: flex;
+        align-items: center;
+        gap: var(--f2z-space-3);
+        padding: var(--f2z-space-3) var(--f2z-space-5);
+        color: inherit;
+        text-decoration: none;
+}
+.form2zoho-support-list a:hover,
+.form2zoho-support-list a:focus {
+        background: var(--f2z-surface-hover);
+}
+.form2zoho-support-icon {
+        display: inline-flex;
+        flex: 0 0 36px;
+        align-items: center;
+        justify-content: center;
+        width: 36px;
+        height: 36px;
+        border-radius: var(--f2z-radius-control);
+        background: var(--f2z-brand-tint);
+        color: var(--f2z-brand);
+}
+.form2zoho-support-icon.is-video {
+        background: #fdecec;
+}
+.form2zoho-support-item {
+        display: flex;
+        flex: 1;
+        flex-direction: column;
+        min-width: 0;
+}
+.form2zoho-support-item strong {
+        color: var(--f2z-heading);
+        font-weight: var(--f2z-fw-semibold);
+}
+.form2zoho-support-item span {
+        color: var(--f2z-muted);
+        font-size: var(--f2z-fs-sm);
+}
+.form2zoho-support-list .form2zoho-support-ext {
+        flex-shrink: 0;
+        color: var(--f2z-muted);
+}
+/* The top bar's own inset on small screens, where wp-admin's gutter is 10px. */
+@media (max-width: 782px) {
+        .form2zoho-topbar {
+                padding: var(--f2z-space-3) var(--f2z-space-4);
+                column-gap: var(--f2z-space-3);
+        }
+}
+/* --- Feed editor: "Zoho destination" card, compact pickers --------------
+ * The heading carries a small brand badge; each list that has a reload
+ * button holds it inside its own box, between the value and the arrow, so
+ * the four pickers read as four equal controls on one row. */
+.form2zoho-group__head h3 {
+        display: inline-flex;
+        align-items: center;
+        gap: var(--f2z-space-2);
+}
+.form2zoho-group__icon {
+        display: inline-flex;
+        align-items: center;
+        justify-content: center;
+        flex: 0 0 auto;
+        width: 28px;
+        height: 28px;
+        background: var(--f2z-brand);
+        border-radius: var(--f2z-radius-control);
+        color: #fff;
+}
+/* The leaves-the-site arrow after a guide or video link, wherever one is:
+   quieter than the icon that says what the link is. */
+.form2zoho-dest-links .form2zoho-extlink,
+.form2zoho-step-docs .form2zoho-extlink,
+.form2zoho-modal-docs .form2zoho-extlink {
+        flex: 0 0 auto;
+        opacity: .75;
+}
+.form2zoho-modal-docs svg {
+        flex: 0 0 auto;
+}
+.form2zoho-grid--dest .form2zoho-control-row:has(> .form2zoho-reload-btn) {
+        position: relative;
+}
+.form2zoho .form2zoho-grid--dest .form2zoho-control-row:has(> .form2zoho-reload-btn) > select {
+        flex: 1 1 100%;
+        padding-right: 72px;
+        background-position: right 10px top 55%;
+}
+.form2zoho .form2zoho-grid--dest .form2zoho-control-row > .form2zoho-reload-btn {
+        position: absolute;
+        top: 50%;
+        right: 30px;
+        width: 34px;
+        height: 22px;
+        margin: 0;
+        border-width: 0 1px;
+        border-color: var(--f2z-border);
+        border-radius: 0;
+        background: transparent;
+        transform: translateY(-50%);
+}
+.form2zoho .form2zoho-grid--dest .form2zoho-control-row > .form2zoho-reload-btn:hover:not(:disabled) {
+        border-color: var(--f2z-border);
+        background: var(--f2z-brand-tint);
+}
+/* A short explanation behind an "i", for a field whose help would otherwise
+   make its cell taller than the others on the row. */
+.form2zoho-info {
+        display: inline-flex;
+        align-items: center;
+        margin-left: var(--f2z-space-1);
+        color: var(--f2z-muted);
+        vertical-align: middle;
+        cursor: help;
+}
+.form2zoho-info:hover,
+.form2zoho-info:focus {
+        color: var(--f2z-brand);
+}

techwave-form-sync-for-zoho/trunk/assets/js/admin-nav.js

-              r3649280
+              r3748247
 /**
  * Techwave Form Sync for Zoho — in-plugin AJAX navigation.
+ * FormBridge for Zoho — in-plugin AJAX navigation.
+ *
  * Every link inside the plugin (pagination, feed search/filter, tabs,
 …
                         return false;
+                }
+                var page = ( a.search.match( /[?&]page=([^&]*)/ ) || [] )[ 1 ] || '';
+                return 0 === decodeURIComponent( page ).indexOf( 'form2zoho' );
+                var page = decodeURIComponent( ( a.search.match( /[?&]page=([^&]*)/ ) || [] )[ 1 ] || '' );
+                // These two exactly. A "formbridge" prefix would also take in the Pro
+                // add-on's licence screen, which is not built to be swapped in.
+                return 'formbridge' === page || 'formbridge-feeds' === page || 'formbridge-dashboard' === page;
+        }
 …
+        }
+        /**
+         * The classes wp-admin uses to say which menu item you are on.
+         *
+         * Only these are copied. The rest of a menu item's classes are structural
+         * (`menu-top`, `wp-has-submenu`) or runtime state WordPress's own script
+         * owns (`opensub`, added on hover), and replacing those wholesale would
+         * hand the menu a stale copy of something it is in the middle of using.
+         */
+        var MENU_STATE_CLASSES = [
+                'current',
+                'wp-has-current-submenu',
+                'wp-not-current-submenu',
+                'wp-menu-open'
+        ];
+        /**
+         * Move the sidebar's "you are here" to match the page just swapped in.
+         *
+         * A swap replaces `.wrap.form2zoho` and nothing else, so the sidebar kept
+         * pointing at whichever screen the person came *from* — click Connections
+         * from Forms and the page changed while the menu still said Forms.
+         *
+         * Copied from the fetched document rather than worked out here: the
+         * server already decided which item is current, and it knows about things
+         * this could only guess at — a submenu item whose URL carries extra query
+         * args, a screen registered by the add-on. Matched by position, because
+         * both documents are the same menu rendered for the same user moments
+         * apart; if that is somehow not true the counts differ and this leaves
+         * the menu alone rather than scrambling it.
+         *
+         * @param {Document} doc The parsed response for the page being shown.
+         */
+        function syncAdminMenu( doc ) {
+                var fresh = doc.getElementById( 'adminmenu' );
+                var live = document.getElementById( 'adminmenu' );
+                if ( ! fresh || ! live ) {
+                        return;
+                }
+                var freshItems = fresh.querySelectorAll( 'li' );
+                var liveItems = live.querySelectorAll( 'li' );
+                if ( ! freshItems.length || freshItems.length !== liveItems.length ) {
+                        return;
+                }
+                for ( var i = 0; i < liveItems.length; i++ ) {
+                        copyMenuState( freshItems[ i ], liveItems[ i ] );
+                        var freshLink = freshItems[ i ].querySelector( ':scope > a' );
+                        var liveLink = liveItems[ i ].querySelector( ':scope > a' );
+                        if ( freshLink && liveLink ) {
+                                copyMenuState( freshLink, liveLink );
+                                // Not a class, and the one part of this a screen reader uses.
+                                if ( freshLink.hasAttribute( 'aria-current' ) ) {
+                                        liveLink.setAttribute( 'aria-current', freshLink.getAttribute( 'aria-current' ) );
+                                } else {
+                                        liveLink.removeAttribute( 'aria-current' );
+                                }
+                        }
+                }
+        }
+        /**
+         * Give `to` the same state classes `from` has, and no others.
+         *
+         * @param {Element} from Element in the freshly fetched document.
+         * @param {Element} to   The live element to bring into line.
+         */
+        function copyMenuState( from, to ) {
+                MENU_STATE_CLASSES.forEach( function ( name ) {
+                        to.classList.toggle( name, from.classList.contains( name ) );
+                } );
+        }
+        /**
+         * Does the fetched page load a script or stylesheet this one has not?
+         *
+         * Only the wrap is swapped and only admin.js is re-run, so a screen whose
+         * own files are not on this page yet (the Pro add-on's feed editor
+         * scripts, reached from Dashboard or Connections) would arrive without
+         * them: its panels stay hidden and nothing on them responds. Such a
+         * screen is loaded normally instead. Compared by path, so a changed
+         * ?ver= is left to syncAssets().
+         *
+         * @param {Document} doc Freshly fetched, parsed document.
+         * @return {boolean}
+         */
+        function needsAssets( doc ) {
+                var have = {};
+                Array.prototype.forEach.call(
+                        document.querySelectorAll( 'script[src], link[rel="stylesheet"][href]' ),
+                        function ( el ) {
+                                have[ parseUrl( el.src || el.href ).pathname ] = true;
+                        }
+                );
+                return Array.prototype.some.call(
+                        doc.querySelectorAll( 'script[src], link[rel="stylesheet"][href]' ),
+                        function ( el ) {
+                                return ! have[ parseUrl( el.getAttribute( 'src' ) || el.getAttribute( 'href' ) ).pathname ];
+                        }
+                );
+        }
         function swap( url, pushHistory ) {
                 // Don't show the spinner for fast responses — only if the request
 …
                                 var doc = new window.DOMParser().parseFromString( html, 'text/html' );
                                 var newWrap = doc.querySelector( '.wrap.form2zoho' );
                                 if ( ! newWrap ) {
+                                if ( ! newWrap || needsAssets( doc ) ) {
                                         window.location.href = url;
                                         return;
 …
+                                }
                                 document.querySelector( '.wrap.form2zoho' ).outerHTML = newWrap.outerHTML;
+                                syncAdminMenu( doc );
                                 playEnter( '.wrap.form2zoho' );
                                 if ( pushHistory ) {
 …
                 a.href = url;
                 var page = decodeURIComponent( ( a.search.match( /[?&]page=([^&]*)/ ) || [] )[ 1 ] || '' );
                 return 'form2zoho' === page;
+        }
         /**
          * Is this a Connections/Logs/Settings/Version tab link (page=form2zoho,
          * exactly — not the feed-builder pages, which use page=form2zoho-feeds)?
+                return 'formbridge' === page;
+        }
+        /**
+         * Is this a Connections/Logs/Settings/Version tab link (page=formbridge,
+         * exactly — not the feed-builder pages, which use page=formbridge-feeds)?
          * These four share one PHP class and only ever swap one fragment, so
          * they get the fast AJAX path instead of a full page fetch.
 …
                 $body.html( data.html );
                 playEnter( $body );
+                markNav( url );
+                markSidebar( url );
                 if ( data.title ) {
                         document.title = data.title;
 …
                 syncAssets( data );
                 reboot();
+        }
+        /**
+         * Move the masthead's "you are here" to the tab just swapped in. A tab
+         * swap replaces only #form2zoho-tab-body, so the masthead above it keeps
+         * whatever it said before.
+         *
+         * @param {string} url Page URL of the tab now showing.
+         */
+        function markNav( url ) {
+                var tab = decodeURIComponent( ( parseUrl( url ).search.match( /[?&]tab=([^&]*)/ ) || [] )[ 1 ] || 'connections' );
+                $( '.form2zoho-topnav-link' ).each( function () {
+                        var on = this.getAttribute( 'data-nav' ) === tab;
+                        this.classList.toggle( 'is-active', on );
+                        if ( on ) {
+                                this.setAttribute( 'aria-current', 'page' );
+                        } else {
+                                this.removeAttribute( 'aria-current' );
+                        }
+                } );
+        }
+        /**
+         * Move the sidebar's "you are here" with a tab swap.
+         *
+         * Logs, Connections, Settings and Docs & Support are sidebar entries for
+         * tabs of one screen, and a tab swap replaces only the tab's body — so
+         * the sidebar kept the entry the person came from in bold. The entry
+         * whose link names this tab is the current one; a tab with no entry of
+         * its own belongs to the entry that names no tab, Connections.
+         *
+         * @param {string} url Page URL of the tab now showing.
+         */
+        function markSidebar( url ) {
+                var arg = function ( search, name ) {
+                        var m = String( search || '' ).match( new RegExp( '[?&]' + name + '=([^&#]*)' ) );
+                        return m ? decodeURIComponent( m[ 1 ] ) : '';
+                };
+                var page = arg( parseUrl( url ).search, 'page' );
+                var tab = arg( parseUrl( url ).search, 'tab' );
+                var links = [].filter.call( document.querySelectorAll( '#adminmenu .wp-submenu a' ), function ( a ) {
+                        return page && arg( a.search, 'page' ) === page;
+                } );
+                var hit = links.filter( function ( a ) {
+                        return tab && arg( a.search, 'tab' ) === tab;
+                } )[ 0 ] || links.filter( function ( a ) {
+                        return ! arg( a.search, 'tab' );
+                } )[ 0 ];
+                if ( ! hit ) {
+                        return;
+                }
+                links.forEach( function ( a ) {
+                        var on = a === hit;
+                        a.classList.toggle( 'current', on );
+                        if ( a.parentNode ) {
+                                a.parentNode.classList.toggle( 'current', on );
+                        }
+                        if ( on ) {
+                                a.setAttribute( 'aria-current', 'page' );
+                        } else {
+                                a.removeAttribute( 'aria-current' );
+                        }
+                } );
+        }

techwave-form-sync-for-zoho/trunk/assets/js/admin.js

-              r3649280
+              r3748247
 /**
  * Techwave Form Sync for Zoho — admin helper.
+ * FormBridge for Zoho — admin helper.
+ *
  * Drives the "Modules & fields" discovery panel on the Connections tab. It
  * never saves anything; it just lets an admin look up the exact Zoho API names
  * to use in the form-to-Zoho mapping under Techwave Form Sync for Zoho \u2192 Forms.
+ * to use in the form-to-Zoho mapping under FormBridge for Zoho \u2192 Forms.
  */
 ( function ( $ ) {
 …
         // Clearing our own namespace first stops handlers from stacking up.
         $( document ).off( '.f2zNav' );
+        // The field-list spinner lives on <body> once used (see fieldsLoading()),
+        // so a swap to another screen would leave the old one behind. The swapped-in
+        // markup brings its own.
+        $( 'body > #f2z_fields_loading' ).remove();
         /**
 …
          */
         function status( $panel, text ) {
+                clearStatus( $panel );
+                $panel.append( $( '<p class="form2zoho-status description"></p>' ).text( text ) );
+        }
+        function clearStatus( $panel ) {
                 $panel.find( '.form2zoho-status' ).remove();
-                $panel.append( $( '<p class="form2zoho-status description"></p>' ).text( text ) );
+        }
 …
         $( document ).on( 'click.f2zNav', '.form2zoho-close', function () {
                 $( '#form2zoho-browse-panel' ).attr( 'hidden', 'hidden' ).empty();
+        } );
+        // Switching app clears what the previous one left behind.
+        //
+        // The organization picker is the one that matters. Zoho Books and Desk are
+        // the only apps with organizations, so choosing Books builds a picker and
+        // a "Select an organization" line under the panel — and switching to Zoho
+        // CRM used to leave both sitting there, asking for something CRM does not
+        // have and making the panel look like it was still waiting on an answer.
+        $( document ).on( 'change.f2zNav', '.form2zoho-sel-int', function () {
+                var $panel = $( '#form2zoho-browse-panel' );
+                $panel.find( '.form2zoho-org-slot' ).empty();
+                $panel.find( '.form2zoho-modules-out' ).empty();
+                clearStatus( $panel );
         } );
 …
                                 var data = res.data || {};
+                                // Whatever is on screen describes the last app asked about.
+                                // Cleared here as well as on the app dropdown, because the
+                                // answer to "does this one need an organization?" only arrives
+                                // with the response.
+                                clearStatus( $panel );
+                                if ( ! data.needs_organization ) {
+                                        $ctrl.find( '.form2zoho-org-slot' ).empty();
+                                }
                                 // Render organization picker if needed and not already chosen.
 …
                 ( items || [] ).forEach( function ( it ) {
                         var o = new Option( it.label, it.value );
+                        // Zoho's own name for the field's type, carried so the row can
+                        // save it. Only the Zoho-field select ever receives items that
+                        // have one; for every other select this is simply absent.
+                        if ( it.type ) {
+                                o.setAttribute( 'data-type', it.type );
+                        }
+                        // A form field that takes an upload. Only the Form-field select
+                        // receives these.
+                        if ( it.file ) {
+                                o.setAttribute( 'data-file', '1' );
+                        }
                         if ( String( it.value ) === String( current ) ) {
                                 o.selected = true;
 …
                 var needsOrg = cfg.needsOrg || {};
                 var deptApps = cfg.deptApps || [];
+                var noConnApps = cfg.noConnApps || [];
                 var state = { forms: [], zohoFields: [] };
 …
                 var $module = $( '#f2z_module' );
+                /**
+                 * Whether the chosen destination is reached through a Zoho account.
+                 *
+                 * Everything the free plugin ships is. An add-on may add a destination
+                 * that is simply a URL, and for that one the account picker is not an
+                 * unanswered question — it is the wrong question.
+                 */
+                function needsConnection() {
+                        return noConnApps.indexOf( $intgr.val() ) === -1;
+                }
+                /**
+                 * Hide the account picker for a destination that has no account.
+                 *
+                 * `required` comes off with it. A hidden control that still blocks the
+                 * form is the worst of both: Continue refuses, and the browser cannot
+                 * show you the field it is refusing over.
+                 */
+                function toggleConnection() {
+                        var on = needsConnection();
+                        $( '#f2z_conn_row' ).toggle( on );
+                        $conn.prop( 'required', on );
+                        // Updating a matching Zoho record means nothing to a URL, and the
+                        // destination never reads the setting, so the box goes with the
+                        // account picker and is cleared.
+                        $( '#f2z_dedupe_row' ).toggle( on );
+                        if ( ! on ) {
+                                $( 'input[name="dedupe_enabled"]' ).prop( 'checked', false ).trigger( 'change' );
+                        }
+                        if ( ! on ) {
+                                // Cleared rather than left behind, so a feed saved against a
+                                // URL destination does not keep pointing at a Zoho account it
+                                // never used — which the feeds list would then show as its
+                                // destination.
+                                $conn.val( '' );
+                                // With no account left to narrow it by, every app comes back.
+                                // Otherwise switching back from such a destination would only
+                                // offer the previous account's apps, with the account picker
+                                // that could widen the list hidden until one was chosen.
+                                filterApps( true );
+                        }
+                }
                 // Show the org row only for org-scoped apps (Books / Desk / Bigin).
                 function toggleOrg() {
 …
                 var connectionApps = cfg.connectionApps || {};
                 var appLabels = cfg.appLabels || {};
+                // Every app the page rendered, before anything is filtered out.
+                var allApps = $intgr.find( 'option' ).map( function () {
+                        return { value: this.value, label: this.text };
+                } ).get();
+                /**
+                 * Whether an app may be picked with this account.
+                 *
+                 * An account authorised for "all" allows every Zoho app, and a
+                 * destination that needs no account is allowed with any. No account
+                 * chosen allows everything: the list is not narrowed until there is
+                 * an account to narrow it by.
+                 */
+                function appAllowed( app, connId ) {
+                        if ( ! connId || noConnApps.indexOf( app ) > -1 ) {
+                                return true;
+                        }
+                        var apps = connectionApps[ connId ] || [ 'all' ];
+                        return apps.indexOf( 'all' ) > -1 || apps.indexOf( app ) > -1;
+                }
+                /**
+                 * Offer only the apps the chosen account is authorised for.
+                 *
+                 * Picking an app the account cannot reach used to be possible, and
+                 * only produced a warning here and a scope error from Zoho on the first
+                 * real submission.
+                 *
+                 * @param {boolean} keepCurrent Keep an app that is not allowed, labelled
+                 *     as such, instead of switching away from it — a saved feed being
+                 *     opened must not be repointed without anybody choosing to.
+                 * @return {boolean} Whether the chosen app changed.
+                 */
+                function filterApps( keepCurrent ) {
+                        var connId  = $conn.val() || '';
+                        var current = $intgr.val() || '';
+                        var allowed = allApps.filter( function ( app ) {
+                                return appAllowed( app.value, connId );
+                        } );
+                        var kept = allowed.some( function ( app ) {
+                                return app.value === current;
+                        } );
+                        $intgr.empty();
+                        allowed.forEach( function ( app ) {
+                                $intgr.append( new Option( app.label, app.value ) );
+                        } );
+                        if ( current && ! kept && keepCurrent ) {
+                                var saved = allApps.filter( function ( app ) {
+                                        return app.value === current;
+                                } )[ 0 ];
+                                $intgr.append( new Option( ( i18n.appNotPermitted || '%s' ).replace( '%s', saved ? saved.label : current ), current ) );
+                                kept = true;
+                        }
+                        if ( kept ) {
+                                $intgr.val( current );
+                                return false;
+                        }
+                        // A Zoho app before a destination that needs no account: an account
+                        // was just chosen, and that is what it was chosen for.
+                        var first = allowed.filter( function ( app ) {
+                                return noConnApps.indexOf( app.value ) === -1;
+                        } )[ 0 ] || allowed[ 0 ];
+                        $intgr.val( first ? first.value : '' );
+                        return true;
+                }
                 function checkAppAuthorization() {
 …
                                 );
+                        }
+                }
+                /**
+                 * Re-read the saved connections, without reloading the page.
+                 *
+                 * The account picker is the one list in this editor that is not filled
+                 * from Zoho — it is filled from this site, and the way it grows is
+                 * that someone goes to the Connections screen and authorizes an
+                 * account. That used to mean abandoning a half-built feed, so the
+                 * editor now links there in a new tab and this brings the result back.
+                 *
+                 * @return {jqXHR|Object} The request, so a caller can chain .always().
+                 */
+                function loadConnections() {
+                        var $notice = $( '#f2z_conn_notice' );
+                        if ( ! $conn.length ) {
+                                return $.Deferred().resolve().promise();
+                        }
+                        busy( $conn, true );
+                        return post( 'form2zoho_list_connections' )
+                                .always( function () {
+                                        busy( $conn, false );
+                                } )
+                                .done( function ( res ) {
+                                        if ( ! res || ! res.success ) {
+                                                $notice.text( ( res && res.data && res.data.message ) || i18n.error ).prop( 'hidden', false );
+                                                return;
+                                        }
+                                        $notice.prop( 'hidden', true ).text( '' );
+                                        var rows = res.data.connections || [];
+                                        var before = $conn.val();
+                                        // Read back rather than translated again: PHP already
+                                        // wrote this placeholder, and a second copy of the string
+                                        // is a second thing for a translator to keep in step.
+                                        var placeholder = $conn.find( 'option[value=""]' ).first().text();
+                                        var byId = {};
+                                        rows.forEach( function ( row ) {
+                                                byId[ row.id ] = row;
+                                                // The app-authorization warning reads this map, which
+                                                // is localized once at page load — so without this an
+                                                // account connected since then would be the one the
+                                                // warning could say nothing about.
+                                                connectionApps[ row.id ] = row.apps || [ 'all' ];
+                                        } );
+                                        buildOptions(
+                                                $conn,
+                                                rows.map( function ( row ) {
+                                                        return { value: row.id, label: row.label };
+                                                } ),
+                                                placeholder
+                                        );
+                                        // Not read by anything here, but the server writes it on
+                                        // the options it renders and the rebuilt ones should not
+                                        // be the odd pair out.
+                                        $conn.find( 'option' ).each( function () {
+                                                if ( byId[ this.value ] ) {
+                                                        this.setAttribute( 'data-dc', byId[ this.value ].dc );
+                                                }
+                                        } );
+                                        if ( $conn.val() === before ) {
+                                                // Same account still chosen, but it may have been
+                                                // re-authorised for different apps in the other tab,
+                                                // so the app list is narrowed again from the map just
+                                                // refreshed.
+                                                if ( before && filterApps( false ) ) {
+                                                        $intgr.trigger( 'change' );
+                                                        return;
+                                                }
+                                                checkAppAuthorization();
+                                                return;
+                                        }
+                                        // The chosen account went away while this tab was open.
+                                        // Every list below it — modules, fields — belongs to an
+                                        // account that no longer exists, so this is a real change
+                                        // and the change handler is what clears them.
+                                        $conn.trigger( 'change' );
+                                } )
+                                .fail( function () {
+                                        $notice.text( i18n.error ).prop( 'hidden', false );
+                                } );
+                }
 …
+                }
+                function loadTopics() {
+                /**
+                 * Say that a list is being fetched, and stop saying it.
+                 *
+                 * Every list in the editor is filled from Zoho or from the site, and
+                 * a list that is loading looks exactly like a list that is stale
+                 * unless it says so. There are two ways to say it because there are
+                 * two kinds of control: the ones with a reload button beside them
+                 * spin that button, and the ones without have a spinner of their own
+                 * in the markup. Both are toggled from here so no caller has to know
+                 * which kind it is holding.
+                 *
+                 * @param {jQuery}  $control The select being filled.
+                 * @param {boolean} on       Whether the fetch is running.
+                 */
+                function busy( $control, on ) {
+                        if ( ! $control || ! $control.length ) {
+                                return;
+                        }
+                        var $row = $control.closest( '.form2zoho-control-row' );
+                        $control.toggleClass( 'is-loading', !! on );
+                        $row.find( '.form2zoho-reload-btn, .form2zoho-reload-forms' ).toggleClass( 'is-spinning', !! on );
+                        $row.find( '.form2zoho-spinner' ).prop( 'hidden', ! on );
+                }
+                // `fresh` is the reload button: the server keeps each list for a few
+                // minutes, and that button must really ask Zoho.
+                function loadTopics( fresh ) {
                         if ( ! isCampaignsApp() || ! $conn.val() ) {
                                 return $.Deferred().resolve().promise();
+                        }
                         var ctx = contextKey();
+                        busy( $( '#f2z_topics' ), true );
                         return post( 'form2zoho_browse_topics', {
                                 connection_id: $conn.val(),
+                                integration: $intgr.val()
+                                integration: $intgr.val(),
+                                fresh: fresh ? 1 : 0
+                        } ).always( function () {
+                                busy( $( '#f2z_topics' ), false );
                         } ).done( function ( res ) {
                                 if ( ctx !== contextKey() ) {
 …
+                }
                 function loadTags() {
+                function loadTags( fresh ) {
                         // Tags exist only in Zoho Campaigns — Marketing Automation has
                         // no tags feature, so never call the tags endpoint for it.
 …
+                        }
                         var ctx = contextKey();
+                        busy( $( '#f2z_tag' ), true );
                         return post( 'form2zoho_browse_tags', {
                                 connection_id: $conn.val(),
+                                integration: $intgr.val()
+                                integration: $intgr.val(),
+                                fresh: fresh ? 1 : 0
+                        } ).always( function () {
+                                busy( $( '#f2z_tag' ), false );
                         } ).done( function ( res ) {
                                 if ( ctx !== contextKey() ) {
 …
                                 return;
+                        }
+                        busy( $dept, true );
                         post( 'form2zoho_browse_departments', {
                                 connection_id: conn,
                                 integration: integration,
                                 org_id: org
+                        } ).always( function () {
+                                busy( $dept, false );
                         } ).done( function ( res ) {
                                 if ( res && res.success ) {
 …
                 function fillFormFieldSelects() {
                         var items = currentFormFields().map( function ( fl ) {
                                 return { value: fl.id, label: fl.label };
+                                return { value: fl.id, label: fl.label, file: !! fl.file };
                         } );
                         $( '.f2z-map-form' ).each( function () {
                                 buildOptions( $( this ), items, i18n.selectField );
                         } );
+                        enhanceMappingSelects();
+                        // The options carry the labels, so chips drawn before they arrived
+                        // swap their field ids for names now.
+                        renderAllTemplateTokens();
+                }
+                /**
+                 * Give every field Zoho insists on a row of its own.
+                 *
+                 * Zoho refuses the whole record when a mandatory field is missing, and
+                 * the only sign of it beforehand was an asterisk in a dropdown of
+                 * sixty. Somebody mapping a Contacts feed had to notice Last Name was
+                 * starred, add a row, and find it again — and the cost of not
+                 * noticing was every submission failing.
+                 *
+                 * Rows are only ever added, never removed or repointed: a row the
+                 * person is already using for that field counts as done, whether it
+                 * came from a saved feed or from the last thirty seconds. A blank row
+                 * is filled before a new one is appended, so the common case — a fresh
+                 * feed, one empty row waiting — does not leave a stray blank behind.
+                 *
+                 * The select's options have not been built yet when this runs, which
+                 * is why the choice goes into data-selected: buildOptions() reads it
+                 * as the value to re-select, and the caller fills the selects next.
+                 */
+                /**
+                 * A row with nothing in it that this can safely take over.
+                 *
+                 * Not rowIsUntouched(): that reads the selects' values, and a row
+                 * restored from a saved feed has none yet — its field is waiting in
+                 * data-selected until the options arrive. Reusing one of those would
+                 * quietly repoint a mapping somebody had already made.
+                 */
+                function rowIsSpare( $row ) {
+                        function picked( sel ) {
+                                var $el = $row.find( sel );
+                                return $el.val() || $el.attr( 'data-selected' ) || '';
+                        }
+                        return '' === picked( '.f2z-map-zoho' )
+                                && '' === picked( '.f2z-map-form' )
+                                && '' === ( $row.find( '.f2z-map-static' ).val() || '' ).trim();
+                }
+                function addRequiredRows() {
+                        var required = state.zohoFields.filter( function ( f ) {
+                                return f.required;
+                        } );
+                        var $body = $( '.form2zoho-map-rows' );
+                        var tpl   = $( '#form2zoho-row-template' ).html();
+                        if ( ! required.length || ! $body.length || ! tpl ) {
+                                return;
+                        }
+                        var taken = {};
+                        $body.find( '.f2z-map-zoho' ).each( function () {
+                                var v = $( this ).val() || $( this ).attr( 'data-selected' ) || '';
+                                if ( v ) {
+                                        taken[ v ] = true;
+                                }
+                        } );
+                        required.forEach( function ( f ) {
+                                if ( taken[ f.value ] ) {
+                                        return;
+                                }
+                                var $row = $body.find( '.form2zoho-map-row' ).filter( function () {
+                                        return rowIsSpare( $( this ) );
+                                } ).first();
+                                if ( ! $row.length ) {
+                                        $row = $( tpl ).appendTo( $body );
+                                        syncRowSource( $row );
+                                }
+                                $row.find( '.f2z-map-zoho' ).val( f.value ).attr( 'data-selected', f.value );
+                                taken[ f.value ] = true;
+                        } );
+                }
+                /**
+                 * Lock the row that carries each field Zoho insists on.
+                 *
+                 * addRequiredRows() makes sure the row exists; this keeps it there. Its
+                 * Zoho field cannot be repointed and the row cannot be removed, because
+                 * either takes away the one mapping every record needs, and the first
+                 * sign would be Zoho refusing each submission. Source and value stay
+                 * editable: which answer fills the field is still the person's call.
+                 *
+                 * Only the first row per field is locked, so a second row aimed at the
+                 * same field can still be changed or removed. Runs whenever the field
+                 * list is refilled, which is also what frees every row when the app or
+                 * module changes and the list is emptied.
+                 */
+                function syncRequiredRows() {
+                        var required = {};
+                        var locked   = {};
+                        state.zohoFields.forEach( function ( f ) {
+                                if ( f.required ) {
+                                        required[ f.value ] = true;
+                                }
+                        } );
+                        $( '.form2zoho-map-rows .form2zoho-map-row' ).each( function () {
+                                var $row = $( this );
+                                var v    = $row.find( '.f2z-map-zoho' ).val() || '';
+                                var lock = '' !== v && !! required[ v ] && ! locked[ v ];
+                                if ( lock ) {
+                                        locked[ v ] = true;
+                                }
+                                setRowRequired( $row, lock );
+                        } );
+                }
+                /**
+                 * Lock or free one mapping row. See syncRequiredRows().
+                 *
+                 * The Zoho field select is disabled and its hidden twin posts the value
+                 * instead: a disabled control is not submitted, and collect_mapping()
+                 * reads map_zoho[] by index, so every row must still send exactly one.
+                 */
+                function setRowRequired( $row, lock ) {
+                        var $sel    = $row.find( '.f2z-map-zoho' );
+                        var $remove = $row.find( '.form2zoho-remove-row' );
+                        $row.toggleClass( 'is-required', lock );
+                        $sel.prop( 'disabled', lock );
+                        $row.find( '.f2z-map-zoho-slot' ).prop( 'disabled', ! lock ).val( lock ? $sel.val() : '' );
+                        comboSyncDisabled( $sel );
+                        $remove.prop( 'hidden', lock );
+                        $row.find( '.f2z-map-required' ).remove();
+                        if ( lock ) {
+                                $( '<span class="f2z-map-required"></span>' )
+                                        .attr( 'title', i18n.requiredRowHint || '' )
+                                        .append( '<svg width="13" height="13" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.4" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="4" y="11" width="16" height="10" rx="2"/><path d="M8 11V7a4 4 0 0 1 8 0v4"/></svg>' )
+                                        .append( $( '<span></span>' ).text( i18n.requiredRow || '' ) )
+                                        .append( $( '<span class="screen-reader-text"></span>' ).text( i18n.requiredRowHint || '' ) )
+                                        .insertAfter( $remove );
+                        }
+                }
+                /**
+                 * Offer the module's unique fields as duplicate-match boxes.
+                 *
+                 * Zoho only lets an upsert match on fields it enforces uniqueness for,
+                 * and the module's field list already says which ones they are. With
+                 * none ticked, or none to tick, CRM and Bigin still upsert and Zoho
+                 * applies its own duplicate check, which #f2z_dedupe_none explains.
+                 */
+                var DEDUPE_FIELD_APPS = [ 'crm', 'bigin' ];
+                function fillUniqueDedupeFields() {
+                        var $wrap   = $( '#f2z_dedupe_unique' );
+                        var $list   = $( '#f2z_dedupe_unique_list' );
+                        var $none   = $( '#f2z_dedupe_none' );
+                        var $loaded = $( '#f2z_dedupe_loaded' );
+                        if ( ! $wrap.length ) {
+                                return;
+                        }
+                        // What to tick: whatever is ticked now and, until a field list has
+                        // loaded once, what the feed was saved with.
+                        var current = $list.find( 'input:checked' ).map( function () {
+                                return this.value;
+                        } ).get();
+                        if ( '1' !== $loaded.val() ) {
+                                ( $( '#f2z_dedupe_saved' ).val() || '' ).split( ',' ).forEach( function ( name ) {
+                                        name = name.trim();
+                                        if ( name && current.indexOf( name ) === -1 ) {
+                                                current.push( name );
+                                        }
+                                } );
+                        }
+                        var unique = state.zohoFields.filter( function ( f ) {
+                                return f.unique;
+                        } );
+                        $list.empty();
+                        unique.forEach( function ( f ) {
+                                var $label = $( '<label class="form2zoho-dedupe-field"></label>' );
+                                var $box   = $( '<input type="checkbox" name="dedupe_unique[]" />' ).val( f.value );
+                                $box.prop( 'checked', current.indexOf( f.value ) > -1 );
+                                // .text(), so a field label from Zoho is never treated as
+                                // markup on the way in.
+                                $label.append( $box ).append( $( '<span></span>' ).text( f.label ) );
+                                $list.append( $label );
+                        } );
+                        $wrap.prop( 'hidden', ! unique.length );
+                        // Only once the list has really arrived, and only for an app whose
+                        // delivery would use these fields. Before that, "none" is a guess.
+                        $none.prop( 'hidden', ! ( state.fieldsLoaded && ! unique.length && DEDUPE_FIELD_APPS.indexOf( $intgr.val() ) > -1 ) );
+                        // From here on the boxes are the answer, and saving uses them.
+                        if ( state.fieldsLoaded ) {
+                                $loaded.val( '1' );
+                        }
+                }
                 // Refill every "Zoho field" select from the loaded module fields.
                 function fillZohoFieldSelects() {
+                        fillUniqueDedupeFields();
+                        // Before the options are built, so a row added for a mandatory
+                        // field is filled in the same pass as every other row.
+                        addRequiredRows();
                         var items = state.zohoFields.map( function ( f ) {
                                 return { value: f.value, label: f.label + ( f.required ? ' *' : '' ) };
+                                return { value: f.value, label: f.label + ( f.required ? ' *' : '' ), type: f.type };
                         } );
                         $( '.f2z-map-zoho' ).each( function () {
                                 buildOptions( $( this ), items, i18n.selectZoho );
+                                // The list has only just arrived, so a row restored from a
+                                // saved feed learns its field's type here rather than on a
+                                // change nobody is going to make.
+                                syncRowZohoType( $( this ).closest( '.form2zoho-map-row' ) );
                         } );
+                        // After the options are built, so each row's field is really
+                        // selected, and before fillFormFieldSelects() wraps any new row's
+                        // select: the searchable box copies the disabled state it finds.
+                        syncRequiredRows();
+                        // A row appended above has an empty "Form field" select until the
+                        // form's own list is put into it. That call ends with
+                        // enhanceMappingSelects(), which is what picks up any new row.
+                        fillFormFieldSelects();
+                }
+                /**
+                 * The wording for the chosen trigger: a form plugin's feed listens
+                 * to a form, every other trigger's to an event on the site.
+                 *
+                 * @param {string} formKey  i18n key of the form wording.
+                 * @param {string} eventKey i18n key of the event wording.
+                 * @return {string}
+                 */
+                function formWord( formKey, eventKey ) {
+                        return i18n[ isEventSource( $formType.val() ) ? eventKey : formKey ] || i18n[ formKey ];
+                }
                 // Load the site's forms from the currently chosen form plugin.
+                function loadForms( fresh ) {
+                        return post( 'form2zoho_list_forms', { fresh: fresh ? 1 : 0, form_type: $formType.val() || 'elementor' } ).done( function ( res ) {
+                function loadForms( fresh, force ) {
+                        var type = $formType.val();
+                        // A new feed starts with no trigger chosen, so there is no list of
+                        // forms to ask for. Falling back to a default here would fetch one
+                        // plugin's forms and offer them under a trigger nobody picked.
+                        if ( ! type ) {
+                                buildOptions( $form, [], formWord( 'selectForm', 'selectEvent' ) );
+                                setTriggerAvailable( true );
+                                return $.Deferred().resolve().promise();
+                        }
+                        // The tile already knows whether its plugin is running, and a
+                        // plugin that is not running has no forms to list. Skipping the
+                        // request is most of the wait: admin-ajax boots WordPress and
+                        // every active plugin before reaching our handler, which on a
+                        // site with a couple of dozen of them is seconds regardless of
+                        // what is being asked.
+                        //
+                        // `force` is the reload button beside the Form select, and that must
+                        // always really ask: data-available is this page's view of the
+                        // world, and the plugin may have been switched on in another tab
+                        // since. `fresh` is not the same thing — it only means "skip the
+                        // server's cache", and the trigger-change path sets it too.
+                        if ( ! force && ! triggerIsAvailable() ) {
+                                buildOptions( $form, [], formWord( 'selectForm', 'selectEvent' ) );
+                                setTriggerAvailable( false, unavailableMessage() );
+                                return $.Deferred().resolve().promise();
+                        }
+                        // The forms list itself still has to be fetched, and that is the
+                        // same slow admin-ajax boot, so the wait is shown the same way
+                        // every other list in the editor shows it.
+                        busy( $form, true );
+                        return post( 'form2zoho_list_forms', { fresh: fresh ? 1 : 0, form_type: type } ).always( function () {
+                                busy( $form, false );
+                        } ).done( function ( res ) {
                                 if ( res && res.success ) {
                                         state.forms = res.data.forms || [];
 …
                                                 $form,
                                                 state.forms.map( function ( f ) {
+                                                        return { value: f.name, label: f.name };
+                                                        // A source may give its entry a readable label; the
+                                                        // value stays the name feeds are matched on.
+                                                        return { value: f.name, label: f.label || f.name };
                                                 } ),
                                                 i18n.selectForm
+                                                formWord( 'selectForm', 'selectEvent' )
                                         );
                                         fillFormFieldSelects();
 …
                                         } );
+                                        // The chosen trigger's plugin is not running. Step two has
+                                        // nothing left to ask — there is no form list to pick from
+                                        // — so it says so and stops, rather than showing two fields
+                                        // that cannot be completed. The ✕ on the tile above is the
+                                        // way out, which is why the footer goes with the rest.
+                                        setTriggerAvailable( false !== res.data.available, res.data.message );
                                         if ( false === res.data.available ) {
                                                 $help.text( res.data.message || i18n.cf7Unavailable ).addClass( 'form2zoho-form-help-warn' );
                                         } else if ( ! stillExists ) {
                                                 $help.text( i18n.formStale ).addClass( 'form2zoho-form-help-warn' );
+                                                $help.text( formWord( 'formStale', 'eventStale' ) ).addClass( 'form2zoho-form-help-warn' );
                                         } else {
                                                 $help.text( i18n.formHelp ).removeClass( 'form2zoho-form-help-warn' );
+                                                $help.text( formWord( 'formHelp', 'eventHelp' ) ).removeClass( 'form2zoho-form-help-warn' );
+                                        }
+                                        // The list arrives long after the page does, and until it
+                                        // lands the Form select is empty and therefore invalid.
+                                        // Whatever is watching step two's Next needs telling.
+                                        $( document ).trigger( 'f2z:formsLoaded' );
+                                }
                         } );
+                }
+                // An organization and department picked for one app or account mean
+                // nothing to the next. Books and Desk organization ids differ, so a
+                // Books one left selected after switching to Desk showed as "not
+                // found" and was sent to Desk, which refused the departments lookup.
+                function clearOrganization() {
+                        $org.val( '' );
+                        buildOptions( $org, [], i18n.selectOrg );
+                        $dept.val( '' );
+                        buildOptions( $dept, [], i18n.selectDept );
+                }
+                // Apps whose module list is the same whatever organization is chosen.
+                var orgFreeModuleApps = [ 'desk' ];
                 // Load modules (and organizations) for the chosen app + account.
+                function loadModules() {
+                //
+                // `forOrg` is a new organization being picked: its list is already on
+                // the page, so it neither spins nor is fetched again. `fresh` is the
+                // reload button, which skips the server's cached custom modules.
+                function loadModules( forOrg, fresh ) {
                         var integration = $intgr.val();
                         var conn = $conn.val();
                         if ( ! integration || ! conn ) {
                                 return;
+                        if ( ! integration || ( needsConnection() && ! conn ) ) {
+                                return $.Deferred().resolve().promise();
+                        }
                         toggleOrg();
                         toggleDept();
                         var ctx = contextKey();
+                        post( 'form2zoho_browse_modules', {
+                        var orgId = $org.val() || '';
+                        busy( $module, true );
+                        if ( ! forOrg ) {
+                                busy( $org, true );
+                        }
+                        return post( 'form2zoho_browse_modules', {
                                 connection_id: conn,
                                 integration: integration,
+                                org_id: $org.val() || ''
+                                org_id: orgId,
+                                have_organizations: forOrg ? 1 : 0,
+                                fresh: fresh ? 1 : 0
+                        } ).always( function () {
+                                busy( $module, false );
+                                if ( ! forOrg ) {
+                                        busy( $org, false );
+                                }
                         } ).done( function ( res ) {
+                                if ( ctx !== contextKey() ) {
+                                // A second organization picked before this one answered.
+                                if ( ctx !== contextKey() || orgId !== ( $org.val() || '' ) ) {
                                         return;
+                                }
 …
                                 loadDepartments();
                                 loadFields();
+                                loadFields( fresh );
                         } );
+                }
+                // The loading card over the page while Zoho's field list is on its way.
+                // Moved to <body>, so nothing in the editor's own layout can clip or
+                // offset it. Shown only once the wait outlasts a moment, so a quick
+                // answer does not flash, and counted, so a second load started before
+                // the first returns does not take it down early.
+                var fieldLoads     = 0;
+                var fieldLoadTimer = null;
+                var fieldSlowTimer = null;
+                // "Fetching Leads fields from Zoho CRM…", from what is selected now.
+                // Empty when there is nothing to name, and the card keeps its default.
+                function loadingFieldsText() {
+                        var app    = $.trim( $intgr.find( 'option:selected' ).text() );
+                        var module = $module.val() ? $.trim( $module.find( 'option:selected' ).text() ) : '';
+                        if ( app && module && ! isCampaignsApp() && i18n.loadingFieldsOf ) {
+                                return i18n.loadingFieldsOf.replace( '%1$s', module ).replace( '%2$s', app );
+                        }
+                        return app && i18n.loadingFieldsFrom ? i18n.loadingFieldsFrom.replace( '%s', app ) : '';
+                }
+                function fieldsLoading( on ) {
+                        var $loader = $( '#f2z_fields_loading' );
+                        var $slow   = $loader.find( '.form2zoho-loader-card__slow' );
+                        if ( ! $loader.length ) {
+                                return;
+                        }
+                        if ( ! $loader.parent().is( 'body' ) ) {
+                                $loader.appendTo( document.body );
+                        }
+                        fieldLoads = Math.max( 0, fieldLoads + ( on ? 1 : -1 ) );
+                        clearTimeout( fieldLoadTimer );
+                        clearTimeout( fieldSlowTimer );
+                        if ( ! fieldLoads ) {
+                                $loader.prop( 'hidden', true );
+                                $slow.prop( 'hidden', true );
+                                return;
+                        }
+                        var text = loadingFieldsText();
+                        if ( text ) {
+                                $loader.find( '.form2zoho-loader-card__text' ).text( text );
+                        }
+                        fieldLoadTimer = setTimeout( function () {
+                                $loader.prop( 'hidden', false );
+                        }, 200 );
+                        // Several seconds is Zoho being slow, not the page being stuck, and
+                        // without a word a long wait reads as the second.
+                        fieldSlowTimer = setTimeout( function () {
+                                $slow.prop( 'hidden', false );
+                        }, 6000 );
+                }
 …
                 // mailing list), so for those two apps this only needs the
                 // account, not a chosen module.
+                function loadFields() {
+                //
+                // Several things lead here at once: choosing an app asks for the
+                // fields directly and again once its modules arrive, and opening a
+                // saved feed asks before and after its module list. A list already
+                // loaded, or on its way, for the same app, account, organization and
+                // module is not asked for twice. Campaigns/Marketing Automation fields
+                // do not depend on the list, so picking a list does not reload them.
+                var fieldsKey = '';
+                function loadFields( fresh ) {
                         var integration = $intgr.val();
                         var conn = $conn.val();
                         var module = $module.val();
                         var needsModule = ! isCampaignsApp();
+                        if ( ! integration || ! conn || ( needsModule && ! module ) ) {
+                        if ( needsConnection() ) {
+                                syncPassthrough( false );
+                        }
+                        if ( ! integration || ( needsConnection() && ! conn ) || ( needsModule && ! module ) ) {
                                 return;
+                        }
+                        var key = [ integration, conn, $org.val() || '', needsModule ? module : '' ].join( '|' );
+                        if ( ! fresh && key === fieldsKey ) {
+                                return;
+                        }
+                        fieldsKey = key;
                         var ctx = contextKey();
+                        // A URL destination answers from this site, not from Zoho, so the
+                        // "Loading Zoho fields" card would only say something untrue.
+                        var overlay = needsConnection();
+                        if ( overlay ) {
+                                fieldsLoading( true );
+                        }
                         post( 'form2zoho_browse_fields', {
                                 connection_id: conn,
                                 integration: integration,
                                 org_id: $org.val() || '',
+                                module: module
+                                module: module,
+                                fresh: fresh ? 1 : 0
+                        } ).always( function () {
+                                if ( overlay ) {
+                                        fieldsLoading( false );
+                                }
                         } ).done( function ( res ) {
+                                if ( key !== fieldsKey ) {
+                                        // A different module or organization was picked meanwhile.
+                                        return;
+                                }
                                 if ( ctx !== contextKey() ) {
                                         return;
 …
                                 if ( res && res.success ) {
                                         state.zohoFields = res.data.fields || [];
+                                        state.fieldsLoaded = true;
                                         fillZohoFieldSelects();
                                         $( '#f2z_fields_notice' ).prop( 'hidden', true );
+                                        syncPassthrough( ! needsConnection() && ! state.zohoFields.length );
                                 } else {
+                                        $( '#f2z_fields_notice' ).text( ( res && res.data && res.data.message ) || i18n.error ).prop( 'hidden', false );
+                                        fieldsKey = '';
+                                        showFieldsError( ( res && res.data && res.data.message ) || i18n.error );
+                                }
                         } ).fail( function () {
+                                if ( key !== fieldsKey ) {
+                                        return;
+                                }
+                                fieldsKey = '';
                                 if ( ctx !== contextKey() ) {
                                         return;
+                                }
                                 $( '#f2z_fields_notice' ).text( i18n.error ).prop( 'hidden', false );
+                                showFieldsError( i18n.error );
                         } );
+                }
+                // A URL destination with no field names of its own sends the whole
+                // submission (the Pro webhook: no mapping rows means everything),
+                // so the mapping table is replaced by a line saying so. A feed that
+                // already has rows keeps them on show, so nothing saved is hidden.
+                function syncPassthrough( on ) {
+                        if ( on ) {
+                                on = ! $( '.form2zoho-map-rows tr' ).filter( function () {
+                                        var $r = $( this );
+                                        return !! ( $r.find( '.f2z-map-zoho' ).val() || $r.find( '.f2z-map-form' ).val() || $.trim( $r.find( '.f2z-map-static' ).val() || '' ) );
+                                } ).length;
+                        }
+                        $( '#f2z_passthrough_notice' ).prop( 'hidden', ! on );
+                        $( '.form2zoho-mapping-section .form2zoho-table-scroll, .form2zoho-mapping-section .form2zoho-add-row' ).toggle( ! on );
+                }
+                // A field list that did not load says why, and offers to ask again.
+                // The usual cause is Zoho being briefly out of reach, and the only way
+                // to retry used to be picking the module a second time.
+                function showFieldsError( message ) {
+                        $( '#f2z_fields_notice' )
+                                .empty()
+                                .append( document.createTextNode( message + ' ' ) )
+                                .append( $( '<button type="button" class="button-link f2z-fields-retry"></button>' ).text( i18n.tryAgain || 'Try again' ) )
+                                .prop( 'hidden', false );
+                }
+                $( document ).on( 'click.f2zNav', '.f2z-fields-retry', function () {
+                        $( '#f2z_fields_notice' ).prop( 'hidden', true );
+                        loadFields();
+                } );
                 // Every mapping row names a field of one specific module, inside one
 …
                         // switching app on a brand-new feed shouldn't raise a warning
                         // about mapping the person never made.
+                        //
+                        // A Zoho field on its own does not count, because addRequiredRows()
+                        // puts one there unasked: pick CRM Leads and the first row fills
+                        // with Last_Name before anybody has touched it. Changing module
+                        // then cleared that row, announced a mapping had been lost, and
+                        // the very next field load put Last_Name straight back — a warning
+                        // about nothing, on the one screen where a warning should mean
+                        // "your work is gone". The row it sits on is marked is-required by
+                        // syncRequiredRows(), which is what tells the two apart: a person
+                        // who really mapped that field chose a form field or typed a
+                        // static value beside it, and either of those still counts.
                         var hadMapping = $rows.filter( function () {
+                                var $row = $( this );
+                                return ( $row.find( '.f2z-map-zoho' ).val() || '' ) !== ''
+                                        || ( $row.find( '.f2z-map-form' ).val() || '' ) !== ''
+                                        || ( $row.find( '.f2z-map-static' ).val() || '' ) !== '';
+                                var $row   = $( this );
+                                var form   = ( $row.find( '.f2z-map-form' ).val() || '' ) !== '';
+                                var stat   = ( $row.find( '.f2z-map-static' ).val() || '' ) !== '';
+                                var zoho   = ( $row.find( '.f2z-map-zoho' ).val() || '' ) !== '';
+                                return form || stat || ( zoho && ! $row.hasClass( 'is-required' ) );
                         } ).length > 0;
+                        // Any dropdown open in the table is closed before rows go, for the
+                        // same reason as the Remove button.
+                        comboCloseWithin( $rows );
                         $rows.slice( 1 ).remove();
                         var $first = $rows.first().removeClass( 'is-incomplete' );
 …
                         // refill put the old field straight back in.
                         $first.find( '.f2z-map-zoho, .f2z-map-form' ).val( '' ).removeAttr( 'data-selected' );
+                        // Unlocked with it: the row no longer carries the required field it
+                        // was locked for, and left locked it showed "Required" beside an
+                        // empty Zoho field nobody could pick.
+                        setRowRequired( $first, false );
                         $first.find( '.f2z-map-static' ).val( '' );
                         $first.find( '.f2z-map-source' ).val( 'field' );
+                        syncRowSource( $first );
+                        // The search boxes show what their select holds, so they have to
+                        // be told the select was just emptied.
+                        enhanceMappingSelects();
                         $( '#f2z-mapping-alert' ).prop( 'hidden', true );
 …
                 // Events.
                 $form.on( 'change', fillFormFieldSelects );
+                // A row added with "+ Add mapping row" is filled from the lists already
+                // on the page. It used to fire change on the form and module selects to
+                // get there, which re-ran everything a real change does: the Zoho field
+                // list was fetched again, and with the add-on the endpoint list and the
+                // action hook status too, on every press. Only a list that has actually
+                // arrived is used, so rows are never refilled from an empty one, which
+                // would mark every saved choice as not found.
+                $( document ).on( 'f2z:mappingRowAdded.f2zNav', function () {
+                        if ( currentFormFields().length ) {
+                                fillFormFieldSelects();
+                        }
+                        if ( state.fieldsLoaded ) {
+                                fillZohoFieldSelects();
+                        }
+                } );
                 $intgr.on( 'change', function () {
                         // A module/topic/tag id from a *different* Zoho app is
 …
                         // from.
                         $module.val( '' );
+                        // The old app's module name must not follow the feed to the new
+                        // app, or a CRM "Leads" feed goes on showing Books' "Invoices".
+                        $( '#f2z_module_label_value' ).val( '' );
                         // The module select is being emptied here, so its remembered
                         // value has to follow — otherwise picking the new app's first
 …
                         $( '#f2z_topics' ).val( [] ).trigger( 'f2z:optionsUpdated' );
                         $( '#f2z_tag' ).val( [] ).trigger( 'f2z:optionsUpdated' );
+                        clearOrganization();
                         state.zohoFields = [];
+                        state.fieldsLoaded = false;
+                        fieldsKey = '';
                         fillZohoFieldSelects();
+                        // Before loadModules(), which asks whether this destination needs
+                        // an account before deciding it has enough to go on.
+                        toggleConnection();
                         loadModules();
                         checkAppAuthorization();
 …
                                 resetMapping();
+                        }
+                        // Organizations belong to an account as well.
+                        clearOrganization();
+                        // A different account may not reach the app that was chosen. When
+                        // the app has to change, its own change handler reloads everything
+                        // below it, so doing it here as well would load it all twice.
+                        if ( filterApps( false ) ) {
+                                $intgr.trigger( 'change' );
+                                return;
+                        }
                         loadModules();
                         checkAppAuthorization();
 …
                 loadTopics();
                 loadTags();
+                // The module list, not just the fields: an organisation's custom
+                // modules belong to it, so a list loaded before one was chosen has
+                // only the built-in resources in it. loadModules() goes on to load
+                // the departments and the fields itself.
                 $org.on( 'change', function () {
+                        loadDepartments();
+                        loadFields();
+                        // Desk's modules are the same three for every organization, so
+                        // only what does depend on it is asked for again.
+                        if ( orgFreeModuleApps.indexOf( $intgr.val() ) > -1 && $module.find( 'option' ).length > 1 ) {
+                                loadDepartments();
+                                loadFields();
+                                return;
+                        }
+                        loadModules( true );
                 } );
                 // Keep the hidden module_label input in sync with the selected
 …
                 // Automation. Synced on change and again on save, in case options
                 // were rebuilt after the last change event.
                 function syncModuleLabel() {
+                function syncModuleLabel( picked ) {
                         var val  = $module.val() || '';
                         var text = $.trim( $module.find( 'option:selected' ).text() );
 …
                         // older feed, the pre-filled option's text is the raw value
                         // itself — keep whatever label is already saved in that case.
+                        if ( text && text !== val ) {
+                        // A module picked from the loaded list is always a real label,
+                        // even when it reads the same as its value (CRM's "Leads").
+                        if ( text && ( text !== val || true === picked ) ) {
                                 $( '#f2z_module_label_value' ).val( text );
+                        }
+                }
                 $module.on( 'change', function () {
+                        if ( targetChanged( 'module', $module ) ) {
+                        var reset = targetChanged( 'module', $module );
+                        var asked = fieldsKey;
+                        if ( reset ) {
                                 resetMapping();
+                        }
                         syncModuleLabel();
+                        syncModuleLabel( true );
                         loadFields();
+                        // Campaigns and Marketing Automation fields belong to the account,
+                        // not the list, so picking a list asks for nothing new — and
+                        // nothing then gave the required fields their rows back after the
+                        // reset above. Contact Email only returned once "+ Add mapping
+                        // row" happened to refill the table. When no new list is on its
+                        // way, the one already here is put back now.
+                        if ( reset && asked === fieldsKey && state.fieldsLoaded ) {
+                                fillZohoFieldSelects();
+                        }
                 } );
                 $module.closest( 'form' ).on( 'submit', syncModuleLabel );
 …
                         e.preventDefault();
                         var $btn = $( this ).addClass( 'is-spinning' ).prop( 'disabled', true );
+                        loadForms( true ).always( function () {
+                        // The one caller that really wants the server asked, whatever the
+                        // tile on the page believes.
+                        loadForms( true, true ).always( function () {
+                                $btn.removeClass( 'is-spinning' ).prop( 'disabled', false );
+                        } );
+                } );
+                $( document ).on( 'click.f2zNav', '.form2zoho-reload-connections', function ( e ) {
+                        e.preventDefault();
+                        var $btn = $( this ).addClass( 'is-spinning' ).prop( 'disabled', true );
+                        loadConnections().always( function () {
                                 $btn.removeClass( 'is-spinning' ).prop( 'disabled', false );
                         } );
 …
                         e.preventDefault();
                         var $btn = $( this ).addClass( 'is-spinning' ).prop( 'disabled', true );
+                        loadModules();
+                        // loadModules() doesn't return its own promise, so just give the
+                        // spinner a beat to be visible instead of chaining .always().
+                        setTimeout( function () {
+                        loadModules( false, true ).always( function () {
                                 $btn.removeClass( 'is-spinning' ).prop( 'disabled', false );
+                        }, 500 );
+                        } );
+                } );
+                // The organization list comes back with the modules, so reloading it
+                // is the module reload; busy() spins this button while it runs.
+                $( document ).on( 'click.f2zNav', '.form2zoho-reload-orgs', function ( e ) {
+                        e.preventDefault();
+                        var $btn = $( this ).prop( 'disabled', true );
+                        loadModules( false, true ).always( function () {
+                                $btn.prop( 'disabled', false );
+                        } );
+                } );
+                $( document ).on( 'click.f2zNav', '.form2zoho-reload-depts', function ( e ) {
+                        e.preventDefault();
+                        loadDepartments();
                 } );
                 $( document ).on( 'click.f2zNav', '.form2zoho-reload-topics', function ( e ) {
                         e.preventDefault();
                         var $btn = $( this ).addClass( 'is-spinning' ).prop( 'disabled', true );
                         loadTopics().always( function () {
+                        loadTopics( true ).always( function () {
                                 $btn.removeClass( 'is-spinning' ).prop( 'disabled', false );
                         } );
 …
                         e.preventDefault();
                         var $btn = $( this ).addClass( 'is-spinning' ).prop( 'disabled', true );
                         loadTags().always( function () {
+                        loadTags( true ).always( function () {
                                 $btn.removeClass( 'is-spinning' ).prop( 'disabled', false );
                         } );
 …
                 // need to know the picker is tiles rather than a plain dropdown.
                 $( document ).on( 'click.f2zNav', '.form2zoho-source-tile', function () {
+                        // A locked tile advertises a source the Pro add-on provides. It
+                        // is a real, focusable button — it opens the Pro dialog — so this
+                        // handler has to be the thing that stops it selecting anything.
+                        // Falling through would set a form_type the server then rejects,
+                        // leaving the picker showing a selection the saved feed does not
+                        // have.
+                        if ( $( this ).hasClass( 'is-locked' ) ) {
+                                openProModal( $( this ) );
+                                return;
+                        }
+                        // A saved feed's trigger cannot be changed. Its grid is never on
+                        // screen, so this only stops a click that arrives some other way.
+                        if ( triggerLocked() ) {
+                                return;
+                        }
                         var key = $( this ).data( 'source' );
                         $( '.form2zoho-source-tile' ).removeClass( 'is-active' ).attr( 'aria-checked', 'false' );
                         $( this ).addClass( 'is-active' ).attr( 'aria-checked', 'true' );
                         $formType.val( key ).trigger( 'change' );
+                        // Picking a trigger is the whole of step one, so answering it
+                        // carries on rather than leaving the person to find the button —
+                        // including when they have come back to change it, which is the
+                        // same question being answered again. Guarded on the step so the
+                        // picker can be printed somewhere else one day without silently
+                        // moving people off that screen.
+                        syncChosenTrigger();
+                        syncAppDocs();
+                        // Before anything is requested. The tile carries the answer, so
+                        // step two is already right by the time it comes into view rather
+                        // than showing two fields and correcting itself seconds later.
+                        setTriggerAvailable( triggerIsAvailable(), unavailableMessage() );
+                        if ( 'trigger' === $( this ).closest( '.form2zoho-step' ).data( 'step' ) ) {
+                                goToStep( 'details' );
+                        }
                 } );
 …
                 // Initial load.
+                renderAllTemplateTokens();
+                filterApps( true );
+                toggleConnection();
                 toggleOrg();
                 toggleDept();
                 toggleCampaignsUi();
                 loadForms( false );
+                if ( feed.connection_id && feed.integration ) {
+                // A destination with no account has nothing to wait for, so its module
+                // list is fetched on the strength of the integration alone.
+                if ( feed.integration && ( feed.connection_id || ! needsConnection() ) ) {
                         loadModules();
+                        // The saved module is already in its select, so its fields need
+                        // not wait for the module list. loadModules() asks again when it
+                        // is done, and loadFields() skips that as already on its way.
+                        loadFields();
                         // loadModules() only chains loadFields() (via its own done
                         // callback) — Topics/Tags were never being fetched on the
 …
+        }
+        // Add a blank mapping row, then fill its dropdowns from current state.
+        /* ---- Searchable field pickers ----
+         *
+         * A CRM Contacts module has sixty-one fields and a Books custom module can
+         * have more, all in one <select>. A native dropdown only type-aheads on
+         * the start of a label, so finding "Secondary Email" meant scrolling past
+         * everything alphabetically before it.
+         *
+         * The <select> is not replaced. It stays in the DOM, keeps its name, and
+         * remains the only thing that is read on save and by every other handler
+         * here — buildOptions() still refills it, syncRowZohoType() still reads
+         * its selected option. What follows is a text input drawn on top of it,
+         * which filters a list and then writes the chosen value back through
+         * .val().trigger('change'). With scripting off, or if any of this throws,
+         * the plain select is still there and still works.
+         */
+        var comboSeq  = 0;
+        /**
+         * The one open list, and where it belongs when it closes.
+         *
+         * Only one can be open — focusing another input blurs the first, which
+         * closes it — so a single reference is enough, and it is what lets the
+         * list live somewhere other than inside its own combo while it is open.
+         */
+        var comboOpen = null;
+        /**
+         * A combo's list, wherever it currently is.
+         *
+         * Not $combo.find(): while the list is open it is a child of <body>, not
+         * of the combo. See comboFilter() for why it has to be.
+         */
+        function comboList( $combo ) {
+                // A plain property rather than jQuery data: removing a mapping row runs
+                // jQuery's cleanData over everything inside it, which wiped the old
+                // data entry. An open list then could not be found to close, and was
+                // left floating on <body> after its row had gone.
+                var el = $combo.get( 0 );
+                return el && el.f2zList ? $( el.f2zList ) : $combo.find( '.f2z-combo__list' );
+        }
+        /**
+         * Close the open list if its combo is inside something about to be removed.
+         *
+         * Called before a mapping row is taken away. Waiting for the input's blur
+         * is not enough: that close is deliberately delayed, the row is gone by
+         * the time it runs, and with keyboard focus still in the box there is no
+         * blur at all.
+         *
+         * @param {jQuery} $container What is about to be removed.
+         */
+        function comboCloseWithin( $container ) {
+                if ( ! comboOpen ) {
+                        return;
+                }
+                var open = comboOpen.get( 0 );
+                $container.each( function () {
+                        if ( this === open || $.contains( this, open ) ) {
+                                comboClose( comboOpen );
+                                return false;
+                        }
+                } );
+        }
+        function comboOptions( $select ) {
+                return $select.find( 'option' ).map( function () {
+                        return { value: this.value, label: this.text, type: this.getAttribute( 'data-type' ) || '' };
+                } ).get();
+        }
+        // Zoho's names for the field types that hold an uploaded file.
+        var FILE_TYPES = [ 'fileupload', 'imageupload' ];
+        function isFileType( type ) {
+                return FILE_TYPES.indexOf( type ) > -1;
+        }
+        /** The row sends a form field, and that field is an upload. */
+        function rowSendsFile( $row ) {
+                return 'field' === $row.find( '.f2z-map-source' ).val()
+                        && '1' === $row.find( '.f2z-map-form option:selected' ).attr( 'data-file' );
+        }
+        /** The module's field list has somewhere a file can go. */
+        function hasFileFields( $select ) {
+                return $select.find( 'option' ).filter( function () {
+                        return isFileType( this.getAttribute( 'data-type' ) );
+                } ).length > 0;
+        }
+        /**
+         * Only offer file fields to a row whose form field is an upload.
+         *
+         * Skipped when the module has no file field at all (Books, Desk, or a CRM
+         * module without one): the upload's file name can still go to a text
+         * field, and an empty list would take that away with nothing in its place.
+         */
+        function rowWantsFileFields( $row ) {
+                return rowSendsFile( $row ) && hasFileFields( $row.find( '.f2z-map-zoho' ) );
+        }
+        /** The label to show when the box is not being typed in. */
+        function comboLabel( $select ) {
+                var $picked = $select.find( 'option:selected' );
+                // The placeholder option is a prompt, not a choice — showing it as
+                // text would make an empty box look filled in.
+                return $picked.length && '' !== $picked.val() ? $picked.text() : '';
+        }
+        /**
+         * Carry the select's disabled state onto the box that stands in for it.
+         *
+         * syncRowSource() disables the Form field select on a "Static value" row,
+         * but that select is hidden inside the combobox. Without this the box a
+         * person actually sees stayed live: it looked enabled, opened, and let a
+         * form field be picked into a row that would never send it.
+         */
+        function comboSyncDisabled( $select ) {
+                var $combo = $select.closest( '.f2z-combo' );
+                var off    = !! $select.prop( 'disabled' );
+                if ( ! $combo.length ) {
+                        return;
+                }
+                if ( off && $combo.hasClass( 'is-open' ) ) {
+                        comboClose( $combo );
+                }
+                $combo.toggleClass( 'is-disabled', off ).find( '.f2z-combo__input' ).prop( 'disabled', off );
+        }
+        /**
+         * Put the open list under (or over) its input.
+         *
+         * The list is position:fixed and lives on <body> while open, so its
+         * coordinates are read off the input every time it opens and again
+         * whenever anything scrolls underneath it.
+         *
+         * It flips above the input when there is more room there. A mapping table
+         * grows downwards and the newest row is the one being filled in, so the
+         * row that most needs this is always the one nearest the bottom.
+         */
+        function comboPosition( $combo ) {
+                var $list = comboList( $combo );
+                var input = $combo.find( '.f2z-combo__input' ).get( 0 );
+                if ( ! input || $list.prop( 'hidden' ) ) {
+                        return;
+                }
+                var r      = input.getBoundingClientRect();
+                var gap    = 2;
+                var margin = 8;
+                var below  = window.innerHeight - r.bottom - margin;
+                var above  = r.top - margin;
+                var up     = below < 160 && above > below;
+                var room   = Math.max( 120, Math.min( 240, up ? above : below ) );
+                $list.css( {
+                        left: Math.round( r.left ) + 'px',
+                        width: Math.round( r.width ) + 'px',
+                        'max-height': Math.round( room ) + 'px',
+                        top: up ? 'auto' : Math.round( r.bottom + gap ) + 'px',
+                        bottom: up ? Math.round( window.innerHeight - r.top + gap ) + 'px' : 'auto'
+                } );
+        }
+        // Anything that moves the page moves the input the list is pinned to.
+        // Capture phase, because the mapping table's own scroll box does not
+        // bubble a scroll event.
+        function comboReposition() {
+                if ( ! comboOpen ) {
+                        return;
+                }
+                // Its input has left the page by some route that did not close it
+                // first. There is nothing to pin the list to, so it goes.
+                if ( ! document.body.contains( comboOpen.get( 0 ) ) ) {
+                        comboClose( comboOpen );
+                        return;
+                }
+                comboPosition( comboOpen );
+        }
+        window.addEventListener( 'scroll', comboReposition, true );
+        window.addEventListener( 'resize', comboReposition );
+        function comboClose( $combo ) {
+                var $list = comboList( $combo );
+                $combo.removeClass( 'is-open' );
+                // Home again, so the list is never orphaned on <body> if the row it
+                // belongs to is removed while it happens to be open.
+                $list.prop( 'hidden', true ).empty().removeAttr( 'style' ).appendTo( $combo );
+                $combo.find( '.f2z-combo__input' ).attr( 'aria-expanded', 'false' ).removeAttr( 'aria-activedescendant' );
+                if ( comboOpen && comboOpen.get( 0 ) === $combo.get( 0 ) ) {
+                        comboOpen = null;
+                }
+        }
+        /**
+         * Draw the options matching what has been typed.
+         *
+         * Matching is a plain case-insensitive substring over the label, which is
+         * the whole point: "email" has to find "Secondary Email", and that is
+         * exactly what the native control could not do.
+         *
+         * The list is moved onto <body> to be shown. Two ancestors make that
+         * necessary and neither can be worked around from here: the mapping table
+         * sits in .form2zoho-table-scroll, and a box that scrolls on one axis
+         * clips on both — so a list drawn inside it is cut off at the table's
+         * edge. Escaping that with position:fixed then runs into the step panel's
+         * entry animation, which puts a transform on the section and so becomes
+         * the containing block for anything fixed inside it, leaving the list
+         * pinned to the panel rather than to the viewport. Out on <body> there is
+         * nothing above it to clip it or to anchor it.
+         */
+        function comboFilter( $combo, query ) {
+                var $select = $combo.find( '.f2z-combo__native' );
+                var $list   = comboList( $combo );
+                var needle  = ( query || '' ).trim().toLowerCase();
+                var id      = $list.attr( 'id' );
+                // A Zoho field another row already sends to is not offered here. One
+                // field holds one value, so a second row aimed at it cannot also
+                // arrive — it used to be selectable, and then quietly disappeared on
+                // save. The row's own current field stays in the list, or changing
+                // your mind about it would mean losing it first.
+                var taken    = {};
+                var fileOnly = false;
+                if ( $select.hasClass( 'f2z-map-zoho' ) ) {
+                        var mine = $select.val();
+                        $( '.form2zoho-map-rows .f2z-map-zoho' ).not( $select ).each( function () {
+                                var v = $( this ).val() || $( this ).attr( 'data-selected' ) || '';
+                                if ( v && v !== mine ) {
+                                        taken[ v ] = true;
+                                }
+                        } );
+                        fileOnly = rowWantsFileFields( $select.closest( '.form2zoho-map-row' ) );
+                }
+                var matches = comboOptions( $select ).filter( function ( o ) {
+                        // The placeholder is never offered as a match; clearing the box is
+                        // what unsets the field.
+                        return '' !== o.value
+                                && ! taken[ o.value ]
+                                && ( ! fileOnly || isFileType( o.type ) )
+                                && ( '' === needle || o.label.toLowerCase().indexOf( needle ) > -1 );
+                } );
+                $list.empty();
+                if ( ! matches.length ) {
+                        $list.append( $( '<li class="f2z-combo__empty"></li>' ).text( i18n.comboNoMatch || 'No field matches' ) );
+                } else {
+                        var current = $select.val();
+                        matches.forEach( function ( o, i ) {
+                                var $li = $( '<li class="f2z-combo__opt" role="option"></li>' )
+                                        .attr( 'id', id + '-o' + i )
+                                        .attr( 'data-value', o.value )
+                                        .attr( 'aria-selected', o.value === current ? 'true' : 'false' )
+                                        .text( o.label );
+                                if ( o.value === current ) {
+                                        $li.addClass( 'is-active' );
+                                }
+                                $list.append( $li );
+                        } );
+                }
+                if ( comboOpen && comboOpen.get( 0 ) !== $combo.get( 0 ) ) {
+                        comboClose( comboOpen );
+                }
+                $list.prop( 'hidden', false ).appendTo( document.body );
+                $combo.addClass( 'is-open' );
+                $combo.find( '.f2z-combo__input' ).attr( 'aria-expanded', 'true' );
+                comboOpen = $combo;
+                comboPosition( $combo );
+        }
+        function comboPick( $combo, value ) {
+                var $select = $combo.find( '.f2z-combo__native' );
+                // .trigger('change') on purpose: every other handler in this file
+                // listens to the select, not to this box, so the change has to arrive
+                // the way it always did.
+                $select.val( value ).trigger( 'change' );
+                $combo.find( '.f2z-combo__input' ).val( comboLabel( $select ) );
+                comboClose( $combo );
+        }
+        function comboMove( $combo, step ) {
+                var $opts = comboList( $combo ).find( '.f2z-combo__opt' );
+                if ( ! $opts.length ) {
+                        return;
+                }
+                var at   = $opts.filter( '.is-active' ).index();
+                var next = at + step;
+                if ( next < 0 ) {
+                        next = $opts.length - 1;
+                } else if ( next >= $opts.length ) {
+                        next = 0;
+                }
+                $opts.removeClass( 'is-active' ).attr( 'aria-selected', 'false' );
+                var $to = $opts.eq( next ).addClass( 'is-active' ).attr( 'aria-selected', 'true' );
+                $combo.find( '.f2z-combo__input' ).attr( 'aria-activedescendant', $to.attr( 'id' ) );
+                var el = $to.get( 0 );
+                if ( el && el.scrollIntoView ) {
+                        el.scrollIntoView( { block: 'nearest' } );
+                }
+        }
+        /** Wrap one select, or refresh the box if it is already wrapped. */
+        function enhanceSelect( select ) {
+                var $select = $( select );
+                var $combo  = $select.closest( '.f2z-combo' );
+                if ( $combo.length ) {
+                        // Already wrapped. buildOptions() has just refilled the select, so
+                        // only the visible label can be out of date.
+                        $combo.find( '.f2z-combo__input' ).val( comboLabel( $select ) );
+                        comboSyncDisabled( $select );
+                        return;
+                }
+                var id = 'f2z-combo-' + ( ++comboSeq );
+                $combo = $( '<div class="f2z-combo"></div>' );
+                $select.addClass( 'f2z-combo__native' ).before( $combo );
+                $combo.append( $select );
+                $( '<input type="text" class="f2z-combo__input" role="combobox" autocomplete="off" spellcheck="false" />' )
+                        .attr( 'aria-expanded', 'false' )
+                        .attr( 'aria-controls', id )
+                        .attr( 'aria-autocomplete', 'list' )
+                        .attr( 'placeholder', $select.find( 'option' ).first().text() || i18n.comboSearch || '' )
+                        .val( comboLabel( $select ) )
+                        .prependTo( $combo );
+                var $list = $( '<ul class="f2z-combo__list" role="listbox" hidden></ul>' ).attr( 'id', id ).appendTo( $combo );
+                // Remembered, because once it is open the list is no longer a
+                // descendant of this element. See comboList() for why a property.
+                $combo.get( 0 ).f2zList = $list.get( 0 );
+                comboSyncDisabled( $select );
+        }
+        function enhanceMappingSelects() {
+                $( '.form2zoho-map-rows .f2z-map-zoho, .form2zoho-map-rows .f2z-map-form' ).each( function () {
+                        enhanceSelect( this );
+                } );
+        }
+        $( document ).on( 'focus.f2zNav click.f2zNav', '.f2z-combo__input', function () {
+                // A box standing in for a disabled select, such as the Zoho field on a
+                // row a required field depends on, never opens. A pointer cannot reach
+                // it, but a focus sent by script still arrives here.
+                if ( this.disabled ) {
+                        return;
+                }
+                var $combo = $( this ).closest( '.f2z-combo' );
+                if ( ! $combo.hasClass( 'is-open' ) ) {
+                        // Opening shows everything, not the matches for the label already
+                        // sitting in the box — that would offer one option and look broken.
+                        comboFilter( $combo, '' );
+                }
+        } );
+        $( document ).on( 'input.f2zNav', '.f2z-combo__input', function () {
+                comboFilter( $( this ).closest( '.f2z-combo' ), $( this ).val() );
+        } );
+        $( document ).on( 'keydown.f2zNav', '.f2z-combo__input', function ( e ) {
+                var $combo = $( this ).closest( '.f2z-combo' );
+                if ( 'ArrowDown' === e.key || 'ArrowUp' === e.key ) {
+                        e.preventDefault();
+                        if ( ! $combo.hasClass( 'is-open' ) ) {
+                                comboFilter( $combo, '' );
+                        }
+                        comboMove( $combo, 'ArrowDown' === e.key ? 1 : -1 );
+                        return;
+                }
+                if ( 'Enter' === e.key && $combo.hasClass( 'is-open' ) ) {
+                        var $active = comboList( $combo ).find( '.f2z-combo__opt.is-active' );
+                        if ( $active.length ) {
+                                // Only when the list is open and something is highlighted, so
+                                // Enter still submits the form the rest of the time.
+                                e.preventDefault();
+                                comboPick( $combo, $active.attr( 'data-value' ) );
+                        }
+                        return;
+                }
+                if ( 'Escape' === e.key && $combo.hasClass( 'is-open' ) ) {
+                        e.preventDefault();
+                        var $sel = $combo.find( '.f2z-combo__native' );
+                        comboClose( $combo );
+                        $( this ).val( comboLabel( $sel ) );
+                }
+        } );
+        // mousedown, not click: the input's blur fires first and would close the
+        // list out from under the pointer. The list is on <body> by now, so the
+        // combo it belongs to is the open one rather than an ancestor.
+        $( document ).on( 'mousedown.f2zNav', '.f2z-combo__opt', function ( e ) {
+                e.preventDefault();
+                if ( comboOpen ) {
+                        comboPick( comboOpen, $( this ).attr( 'data-value' ) );
+                }
+        } );
+        $( document ).on( 'blur.f2zNav', '.f2z-combo__input', function () {
+                var $combo = $( this ).closest( '.f2z-combo' );
+                var $input = $( this );
+                // Whatever was half-typed is discarded and the real selection shown
+                // again: the box reports the select's state, it does not hold its own.
+                setTimeout( function () {
+                        comboClose( $combo );
+                        $input.val( comboLabel( $combo.find( '.f2z-combo__native' ) ) );
+                }, 120 );
+        } );
+        /**
+         * Copy the chosen Zoho field's type into the row's hidden input.
+         *
+         * The type is what tells delivery whether it is filling a checkbox or a
+         * multi-select rather than a text field, and it has to travel with the
+         * saved feed: asking Zoho for the field list again on every submission
+         * would put an API call in front of every visitor.
+         *
+         * Left alone when the option carries no type. A field list that never
+         * reported one (an app whose fields are curated rather than fetched, or a
+         * row rebuilt from a feed saved before this existed) should keep whatever
+         * the server rendered instead of being blanked by a refill.
+         */
+        function syncRowZohoType( $row ) {
+                var $sel = $row.find( '.f2z-map-zoho' );
+                var type = $sel.find( 'option:selected' ).attr( 'data-type' );
+                if ( 'undefined' !== typeof type ) {
+                        $row.find( '.f2z-map-type' ).val( type );
+                }
+        }
+        $( document ).on( 'change.f2zNav', '.f2z-map-zoho', function () {
+                syncRowZohoType( $( this ).closest( '.form2zoho-map-row' ) );
+        } );
+        // Picking an upload as the form field lets go of a Zoho field that is not
+        // a file field, so the box never shows a choice its own list no longer
+        // offers. Only on a change somebody makes: a saved feed being filled back
+        // in does not fire this, and is left exactly as it was saved.
+        $( document ).on( 'change.f2zNav', '.form2zoho-map-rows .f2z-map-form', function () {
+                var $row  = $( this ).closest( '.form2zoho-map-row' );
+                var $zoho = $row.find( '.f2z-map-zoho' );
+                // Never on a row a required field depends on: its Zoho field is locked,
+                // and blanking it would leave that field unmapped behind a lock.
+                if ( ! $zoho.val() || $row.hasClass( 'is-required' ) || ! rowWantsFileFields( $row ) ) {
+                        return;
+                }
+                if ( ! isFileType( $zoho.find( 'option:selected' ).attr( 'data-type' ) ) ) {
+                        $zoho.val( '' ).trigger( 'change' );
+                        $row.find( '.f2z-map-type' ).val( '' );
+                        enhanceSelect( $zoho.get( 0 ) );
+                }
+        } );
+        // Add a blank mapping row, then fill its dropdowns from the lists already
+        // on the page (see the f2z:mappingRowAdded listener in the editor). Nothing
+        // is fetched: neither the form nor the module has changed.
         $( document ).on( 'click.f2zNav', '.form2zoho-add-row', function () {
                 var tpl = $( '#form2zoho-row-template' ).html();
 …
                         return;
+                }
+                $( tpl ).appendTo( '.form2zoho-map-rows' );
+                syncRowSource( $( tpl ).appendTo( '.form2zoho-map-rows' ) );
+                enhanceMappingSelects();
                 if ( $editor.length ) {
+                        // Repopulate selects (existing selections are preserved).
+                        $( '#f2z_form' ).trigger( 'change' );
+                        $( '#f2z_module' ).trigger( 'change' );
+                        $( document ).trigger( 'f2z:mappingRowAdded' );
+                }
         } );
 …
         // Remove a mapping row (keep at least one).
         $( document ).on( 'click.f2zNav', '.form2zoho-remove-row', function () {
+                // A row a required Zoho field depends on shows no Remove; this stops a
+                // click that arrives some other way. See syncRequiredRows().
+                if ( $( this ).closest( '.form2zoho-map-row' ).hasClass( 'is-required' ) ) {
+                        return;
+                }
                 var $rows = $( '.form2zoho-map-rows .form2zoho-map-row' );
                 if ( $rows.length > 1 ) {
+                        $( this ).closest( '.form2zoho-map-row' ).remove();
+                        var $gone = $( this ).closest( '.form2zoho-map-row' );
+                        // A dropdown open on this row is closed first, or its list stays
+                        // on the page with no row under it.
+                        comboCloseWithin( $gone );
+                        $gone.remove();
                 } else {
+                        $( this ).closest( '.form2zoho-map-row' ).find( 'input, select' ).val( '' );
+                        // The last row is emptied rather than removed. The Source select
+                        // is put back to "Form field" explicitly: .val('') on a select
+                        // with no empty option leaves it unchanged, so without this the
+                        // cleared row could keep a Source of "Static value" while its
+                        // static box had just been wiped.
+                        var $row = $( this ).closest( '.form2zoho-map-row' );
+                        // .f2z-combo__input is excluded for the same reason .f2z-map-source
+                        // is: it is not a mapping value, and enhanceMappingSelects() below
+                        // re-reads it from the select that was just cleared.
+                        $row.find( 'input, select' ).not( '.f2z-map-source, .f2z-combo__input' ).val( '' );
+                        $row.find( '.f2z-map-source' ).val( 'field' );
+                        syncRowSource( $row );
+                        enhanceMappingSelects();
+                }
         } );
 …
         // contradictory sources at once, so clear it when the source flips.
         $( document ).on( 'change.f2zNav', '.f2z-map-source', function () {
+                if ( 'static' !== $( this ).val() ) {
+                var $row = $( this ).closest( '.form2zoho-map-row' );
+                if ( 'field' !== $( this ).val() ) {
+                        // data-selected is buildOptions' fallback for an empty select, so
+                        // it has to go too — otherwise the next refill puts the field
+                        // right back. True of "Combine fields" as well: there the select
+                        // is an insert button, and a value left sitting in it would read
+                        // as the row's source.
+                        $row.find( '.f2z-map-form' ).val( '' ).removeAttr( 'data-selected' );
+                        enhanceMappingSelects();
+                }
+                syncRowSource( $row );
+        } );
+        /* ---- "Combine fields": the Form field select inserts a placeholder ----
+         *
+         * The template is written in field *ids* and the picker lists *labels*, so
+         * without this somebody would have to know that "Your email" is
+         * `your-email` before they could write anything. Choosing a field appends
+         * its placeholder and puts the select back to its prompt, so it reads as
+         * an insert button rather than as a selection that did not stick.
+         */
+        $( document ).on( 'change.f2zNav', '.f2z-map-form', function () {
+                var $sel = $( this );
+                var $row = $sel.closest( '.form2zoho-map-row' );
+                if ( 'template' !== $row.find( '.f2z-map-source' ).val() ) {
                         return;
+                }
+                // data-selected is buildOptions' fallback for an empty select, so it
+                // has to go too — otherwise the next refill puts the field right back.
+                $( this ).closest( '.form2zoho-map-row' )
+                        .find( '.f2z-map-form' ).val( '' ).removeAttr( 'data-selected' );
+                var field = $sel.val() || '';
+                if ( '' === field ) {
+                        return;
+                }
+                var $box = $row.find( '.f2z-map-static' );
+                var text = $box.val() || '';
+                // A space between placeholders is what the common case — a first and
+                // last name — wants, and it is easier to delete than to add.
+                $box.val( text + ( '' === text || / $/.test( text ) ? '' : ' ' ) + '{' + field + '}' );
+                renderTemplateTokens( $row );
+                $sel.val( '' ).removeAttr( 'data-selected' );
+                enhanceMappingSelects();
+        } );
+        /*
+         * The fields a template uses, shown above the picker as chips that can be
+         * removed.
+         *
+         * The picker goes back to its prompt after every insert, so on its own it
+         * never showed what had been added. The only record was the text box, and
+         * that names field ids, not the labels the picker lists. The chips are
+         * read back out of that text whenever it changes, so typing in the box and
+         * pressing a chip's remove button can never disagree.
+         */
+        // The rule FieldMapper::render() applies on delivery: "{{" and "}}" are
+        // literal braces, anything else in braces names a field. A new expression
+        // each time, so no caller inherits another's lastIndex.
+        function templateToken() {
+                return /\{\{|\}\}|\{([^{}]+)\}/g;
+        }
+        function templateFields( text ) {
+                var ids = [];
+                ( text || '' ).replace( templateToken(), function ( m, name ) {
+                        name = ( name || '' ).trim();
+                        if ( name && ids.indexOf( name ) === -1 ) {
+                                ids.push( name );
+                        }
+                        return m;
+                } );
+                return ids;
+        }
+        function renderTemplateTokens( $row ) {
+                var $wrap = $row.find( '.f2z-map-tokens' );
+                if ( ! $wrap.length ) {
+                        return;
+                }
+                var $sel = $row.find( '.f2z-map-form' );
+                var ids  = 'template' === $row.find( '.f2z-map-source' ).val() ? templateFields( $row.find( '.f2z-map-static' ).val() ) : [];
+                $wrap.empty();
+                ids.forEach( function ( id ) {
+                        // The label the picker shows once the form's fields have loaded;
+                        // the id before that, or for a field the form no longer has.
+                        var $opt  = $sel.find( 'option' ).filter( function () {
+                                return this.value === id;
+                        } ).first();
+                        var label = $opt.length && $opt.text() ? $opt.text() : id;
+                        $wrap.append(
+                                $( '<span class="f2z-map-token"></span>' ).attr( 'title', '{' + id + '}' ).append(
+                                        $( '<span class="f2z-map-token__label"></span>' ).text( label ),
+                                        // A drawn cross, not the &times; character: that glyph sits
+                                        // below the middle of its line box in most fonts, so it
+                                        // never centred in the round hover background.
+                                        $( '<button type="button" class="f2z-map-token__remove"><svg width="10" height="10" viewBox="0 0 10 10" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" aria-hidden="true"><path d="M2 2l6 6M8 2l-6 6"/></svg></button>' )
+                                                .attr( 'data-field', id )
+                                                .attr( 'aria-label', ( i18n.removeTemplateField || 'Remove %s' ).replace( '%s', label ) )
+                                )
+                        );
+                } );
+                $wrap.prop( 'hidden', ! ids.length );
+        }
+        function renderAllTemplateTokens() {
+                $( '.form2zoho-map-rows .form2zoho-map-row' ).each( function () {
+                        renderTemplateTokens( $( this ) );
+                } );
+        }
+        $( document ).on( 'input.f2zNav', '.form2zoho-map-rows .f2z-map-static', function () {
+                renderTemplateTokens( $( this ).closest( '.form2zoho-map-row' ) );
+        } );
+        // Take every placeholder for that field out of the template, with the one
+        // space that separated it from its neighbour, so "{first} {last}" loses
+        // "{last}" without leaving a trailing space behind.
+        $( document ).on( 'click.f2zNav', '.f2z-map-token__remove', function () {
+                var $row = $( this ).closest( '.form2zoho-map-row' );
+                var id   = $( this ).attr( 'data-field' );
+                var $box = $row.find( '.f2z-map-static' );
+                var text = $box.val() || '';
+                var kept = '';
+                var from = 0;
+                text.replace( templateToken(), function ( m, name, offset ) {
+                        if ( ! name || name.trim() !== id ) {
+                                return m;
+                        }
+                        var start = offset;
+                        var end   = offset + m.length;
+                        if ( ' ' === text.charAt( end ) && ( 0 === start || ' ' === text.charAt( start - 1 ) ) ) {
+                                end++;
+                        } else if ( ' ' === text.charAt( start - 1 ) ) {
+                                start--;
+                        }
+                        kept += text.slice( from, Math.max( from, start ) );
+                        from  = end;
+                        return m;
+                } );
+                kept += text.slice( from );
+                // trigger('input'): the chips redraw from the text, and a row marked
+                // unfinished clears the moment it is fine again, as it does for typing.
+                $box.val( kept ).trigger( 'input' ).trigger( 'focus' );
+        } );
+        // Toggle a timeline entry's JSON detail. Its own handler rather than
+        // .form2zoho-log-toggle, which reaches its panel with .next() on a table
+        // row — the timeline is a list, and the detail is a child of the entry.
+        $( document ).on( 'click.f2zNav', '.form2zoho-timeline-toggle', function () {
+                var $btn  = $( this );
+                var $wrap = $btn.siblings( '.form2zoho-detail-wrap' );
+                var show  = $wrap.prop( 'hidden' );
+                $wrap.prop( 'hidden', ! show );
+                $btn.attr( 'aria-expanded', show ? 'true' : 'false' );
         } );
 …
                 $( document ).on( 'change.f2zNav', '.form2zoho-log-check', refreshToolbar );
+                // Paging replaces the tbody wholesale, so every checkbox this toolbar
+                // was counting is gone with it. No DOM event fires for that, so the
+                // pager says so rather than this guessing.
+                $( document ).on( 'f2z:logsPageChanged.f2zNav', refreshToolbar );
                 $selectFailedBtn.on( 'click', function () {
                         var turnOn = ! allFailedSelected();
 …
                                                         setLogsEmptyState( true );
+                                                }
+                                                // The page count changed and this page has holes in it.
+                                                // The live-log block owns the paging, so it is told
+                                                // rather than reached into.
+                                                $( document ).trigger( 'f2z:logsDeleted' );
                                         } else {
                                                 showToast( ( res && res.data && res.data.message ) || i18n.logsDeleteFailed, true );
 …
         var $logsTable = $( '#form2zoho-logs-table' );
         if ( $logsTable.length ) {
                 var pillClass = { success: 'form2zoho-pill-ok', failed: 'form2zoho-pill-bad', error: 'form2zoho-pill-bad', retry: 'form2zoho-pill-warn', suppressed: 'form2zoho-pill-warn' };
+                var pillClass = { success: 'form2zoho-pill-ok', failed: 'form2zoho-pill-bad', error: 'form2zoho-pill-bad', retry: 'form2zoho-pill-warn', suppressed: 'form2zoho-pill-warn', skipped: 'form2zoho-pill-warn' };
                 // Translated, via shared_i18n(). These were English literals, so a
                 // translated site showed the polled rows in English right underneath
 …
                         retry: i18n.statusRetry,
                         info: i18n.statusInfo,
+                        suppressed: i18n.statusSuppressed
+                        suppressed: i18n.statusSuppressed,
+                        skipped: i18n.statusSkipped
                 };
 …
                         html += '<td><span class="form2zoho-pill ' + cls + '">' + esc( label ) + '</span></td>';
                         html += '<td>' + esc( appLabel ) + '</td>';
                         html += '<td>' + ( row.module ? '<code>' + esc( row.module ) + '</code>' : '\u2014' ) + '</td>';
                         html += '<td>' + ( row.form_id ? esc( row.form_id ) : '\u2014' ) + '</td>';
                         html += '<td>' + ( row.record_id ? '<code>' + esc( row.record_id ) + '</code>' : '\u2014' ) + '</td>';
+                        html += '<td>' + ( row.module ? '<code>' + esc( row.module ) + '</code>' : '-' ) + '</td>';
+                        html += '<td>' + ( row.form_id ? esc( row.form_id ) : '-' ) + '</td>';
+                        html += '<td>' + ( row.record_id ? '<code>' + esc( row.record_id ) + '</code>' : '-' ) + '</td>';
                         html += '<td>' + esc( row.message ) + '</td>';
                         html += '<td><button type="button" class="button-link form2zoho-log-toggle">' + esc( i18n.details ) + '</button></td>';
 …
+                }
+                var pollTimer = null;
+                /* ---- Paging ----
+                 *
+                 * The log is read a page at a time from the database. The bar carries
+                 * the state, because the server is the only thing that knows how many
+                 * pages there are — a number that changes under the screen every time
+                 * a form is submitted.
+                 */
+                var $paging = $( '#form2zoho-logs-pagination' );
+                function pagingState() {
+                        return {
+                                paged: parseInt( $paging.attr( 'data-paged' ), 10 ) || 1,
+                                pages: parseInt( $paging.attr( 'data-pages' ), 10 ) || 1,
+                                perPage: parseInt( $paging.attr( 'data-per-page' ), 10 ) || 20,
+                                total: parseInt( $paging.attr( 'data-total' ), 10 ) || 0
+                        };
+                }
+                /** Whether the newest rows belong on the page being looked at. */
+                function onFirstPage() {
+                        return ! $paging.length || pagingState().paged <= 1;
+                }
+                /**
+                 * Fetch one page of the log and put it on screen.
+                 *
+                 * @param {number} paged   1-based page to show.
+                 * @param {number} perPage Rows per page.
+                 * @return {jqXHR|Object} The request.
+                 */
+                function loadLogsPage( paged, perPage ) {
+                        if ( ! $paging.length ) {
+                                return $.Deferred().resolve().promise();
+                        }
+                        var $tbody = $( '#form2zoho-logs-tbody' );
+                        $paging.addClass( 'is-busy' ).find( 'button, select' ).prop( 'disabled', true );
+                        $tbody.addClass( 'is-loading' );
+                        return post( 'form2zoho_logs_page', { log_paged: paged, log_per_page: perPage } )
+                                .always( function () {
+                                        $paging.removeClass( 'is-busy' );
+                                        $tbody.removeClass( 'is-loading' );
+                                } )
+                                .done( function ( res ) {
+                                        if ( ! res || ! res.success ) {
+                                                showToast( ( res && res.data && res.data.message ) || i18n.error, true );
+                                                syncPagingControls();
+                                                return;
+                                        }
+                                        var d = res.data;
+                                        $tbody.html( d.html );
+                                        $paging.attr( {
+                                                'data-paged': d.paged,
+                                                'data-pages': d.pages,
+                                                'data-per-page': d.perPage,
+                                                'data-total': d.total
+                                        } );
+                                        $( '#form2zoho-logs-pageinfo' ).text( d.pageInfo );
+                                        $( '#form2zoho-logs-perpage' ).val( String( d.perPage ) );
+                                        // The poll counts from the newest row in the table, not
+                                        // from the newest one on screen — see Logger::newest_id().
+                                        $logsTable.attr( 'data-after-id', d.newestId );
+                                        setLogsEmptyState( 0 === d.total );
+                                        $paging.prop( 'hidden', 0 === d.total );
+                                        syncPagingControls();
+                                        // Every checkbox on the old page went with it, so the
+                                        // bulk-action bar has to stop claiming a selection.
+                                        $( document ).trigger( 'f2z:logsPageChanged' );
+                                } )
+                                .fail( function () {
+                                        showToast( i18n.error, true );
+                                        syncPagingControls();
+                                } );
+                }
+                /** Prev/Next are off at the ends of the list. */
+                function syncPagingControls() {
+                        if ( ! $paging.length ) {
+                                return;
+                        }
+                        var st = pagingState();
+                        $paging.find( 'select' ).prop( 'disabled', false );
+                        $paging.find( '.form2zoho-logs-prev' ).prop( 'disabled', st.paged <= 1 );
+                        $paging.find( '.form2zoho-logs-next' ).prop( 'disabled', st.paged >= st.pages );
+                }
+                $( document ).on( 'click.f2zNav', '.form2zoho-logs-prev', function () {
+                        var st = pagingState();
+                        if ( st.paged > 1 ) {
+                                loadLogsPage( st.paged - 1, st.perPage );
+                        }
+                } );
+                $( document ).on( 'click.f2zNav', '.form2zoho-logs-next', function () {
+                        var st = pagingState();
+                        if ( st.paged < st.pages ) {
+                                loadLogsPage( st.paged + 1, st.perPage );
+                        }
+                } );
+                // Back to page one: the row that was third on a page of twenty is not
+                // the third row of a page of a hundred, so staying put would land
+                // somewhere nobody chose.
+                $( document ).on( 'change.f2zNav', '#form2zoho-logs-perpage', function () {
+                        loadLogsPage( 1, parseInt( $( this ).val(), 10 ) || 20 );
+                } );
+                // Deleting rows changes how many pages there are, so the page is
+                // re-read rather than patched. It also refills the gap the deleted
+                // rows left, instead of leaving a page of twelve.
+                $( document ).on( 'f2z:logsDeleted.f2zNav', function () {
+                        var st = pagingState();
+                        loadLogsPage( st.paged, st.perPage );
+                } );
                 function pollLogs() {
                         if ( ! $( '#form2zoho-live-switch' ).is( ':checked' ) ) {
                                 return;
+                                return $.Deferred().resolve().promise();
+                        }
                         var after = parseInt( $logsTable.attr( 'data-after-id' ), 10 ) || 0;
                         post( 'form2zoho_recent_logs', { after_id: after } ).done( function ( res ) {
+                        return post( 'form2zoho_recent_logs', { after_id: after } ).done( function ( res ) {
                                 if ( ! res || ! res.success || ! res.data.rows || ! res.data.rows.length ) {
                                         return;
 …
                                 var $tbody = $( '#form2zoho-logs-tbody' );
                                 var maxId = after;
+                                var arrived = res.data.rows.length;
+                                // The cursor moves whichever page is on screen. Not moving it
+                                // would make every later poll re-fetch the same rows, and
+                                // coming back to page one would then show them twice.
                                 res.data.rows.forEach( function ( row ) {
-                                        $tbody.prepend( logRowHtml( row ) );
                                         maxId = Math.max( maxId, row.id );
                                 } );
                                 $logsTable.attr( 'data-after-id', maxId );
+                                if ( $paging.length ) {
+                                        // The log grew, so the page count may have too.
+                                        var st = pagingState();
+                                        $paging.attr( 'data-total', st.total + arrived );
+                                        $paging.attr( 'data-pages', Math.max( 1, Math.ceil( ( st.total + arrived ) / st.perPage ) ) );
+                                        $( '#form2zoho-logs-pageinfo' ).text(
+                                                ( i18n.logsPageInfo || 'Page %1$s of %2$s · %3$s entries' )
+                                                        .replace( '%1$s', pagingState().paged )
+                                                        .replace( '%2$s', pagingState().pages )
+                                                        .replace( '%3$s', pagingState().total )
+                                        );
+                                        syncPagingControls();
+                                }
+                                // A new row belongs at the top of page one. On any other page
+                                // it would be an interruption in the middle of older rows, in
+                                // the wrong order, and pushing a row off the bottom that the
+                                // page is supposed to be showing.
+                                if ( ! onFirstPage() ) {
+                                        return;
+                                }
+                                res.data.rows.forEach( function ( row ) {
+                                        $tbody.prepend( logRowHtml( row ) );
+                                } );
+                                // Page one holds a page's worth. Prepending without this made
+                                // it grow by one row per submission until it was the whole log
+                                // again, which is what the paging is for.
+                                trimToPage( $tbody );
                                 setLogsEmptyState( false );
+                                $paging.prop( 'hidden', false );
                                 setTimeout( function () {
                                         $tbody.find( '.form2zoho-log-row-new' ).removeClass( 'form2zoho-log-row-new' );
 …
+                }
+                /**
+                 * Drop rows that have fallen off the end of page one.
+                 *
+                 * Each log entry is two <tr> — the row and its hidden detail — so this
+                 * counts entries and removes both halves of the ones past the end.
+                 *
+                 * @param {jQuery} $tbody The logs tbody.
+                 */
+                function trimToPage( $tbody ) {
+                        if ( ! $paging.length ) {
+                                return;
+                        }
+                        var perPage = pagingState().perPage;
+                        $tbody.find( '.form2zoho-log-row' ).slice( perPage ).each( function () {
+                                $( this ).next( '.form2zoho-log-detail' ).remove();
+                                $( this ).remove();
+                        } );
+                }
+                /* ---- When to poll again ----
+                 *
+                 * This was setInterval(pollLogs, 4000): a request every four seconds
+                 * whatever happened to the last one. On a site where admin-ajax takes
+                 * longer than four seconds to answer — and it can, because every
+                 * plugin on the site boots before our handler is reached — that is not
+                 * one poll every four seconds, it is a growing pile of them, each
+                 * booting WordPress again, each making the next one slower. The screen
+                 * then blames whatever the person clicked.
+                 *
+                 * So: schedule the next poll when the last one comes back, never
+                 * before, and space them by what the server is actually managing. A
+                 * server answering in 200ms keeps the four-second rhythm; one taking
+                 * ten seconds is asked every twenty instead of being given four
+                 * requests to juggle.
+                 */
+                var POLL_MIN = 4000;
+                var POLL_MAX = 60000;
+                var pollDelay = POLL_MIN;
+                // admin.js is re-executed after every in-plugin navigation, so more
+                // than one copy of this closure can be alive at once — an older one
+                // with a request still in flight, about to schedule its next poll.
+                // Bumping a counter on window and checking it is what makes only the
+                // newest run poll. Clearing the timer is not enough on its own: it
+                // cannot cancel a request that has already gone out.
+                var pollGen = window.form2zohoPollGen = ( window.form2zohoPollGen || 0 ) + 1;
+                function pollIsCurrent() {
+                        return pollGen === window.form2zohoPollGen &&
+                                null !== document.getElementById( 'form2zoho-logs-table' );
+                }
+                function schedulePoll( delay ) {
+                        if ( ! pollIsCurrent() ) {
+                                return;
+                        }
+                        window.form2zohoPollTimer = setTimeout( runPoll, delay );
+                }
+                function runPoll() {
+                        if ( ! pollIsCurrent() ) {
+                                return;
+                        }
+                        // A background tab is nobody watching. Browsers throttle the timer
+                        // but not the request it fires, so without this a Logs tab left
+                        // open all day keeps a server busy for an audience of no one.
+                        if ( document.hidden || ! $( '#form2zoho-live-switch' ).is( ':checked' ) ) {
+                                schedulePoll( POLL_MIN );
+                                return;
+                        }
+                        var started = Date.now();
+                        pollLogs().always( function () {
+                                // Twice what the last answer cost, floored at four seconds and
+                                // capped at a minute. Twice, so the server spends at most half
+                                // its time answering this screen.
+                                var took = Date.now() - started;
+                                pollDelay = Math.min( POLL_MAX, Math.max( POLL_MIN, took * 2 ) );
+                                schedulePoll( pollDelay );
+                        } );
+                }
+                // admin.js is re-executed after every in-plugin navigation, so a timer
+                // from the previous run has to be cleared or they accumulate — one
+                // more poller per visit to this tab.
                 if ( window.form2zohoPollTimer ) {
+                        clearInterval( window.form2zohoPollTimer );
+                }
+                window.form2zohoPollTimer = setInterval( pollLogs, 4000 );
+                        clearTimeout( window.form2zohoPollTimer );
+                }
+                schedulePoll( POLL_MIN );
                 $( '#form2zoho-live-switch' ).on( 'change', function () {
+                        $( '.form2zoho-live-dot' ).toggleClass( 'is-paused', ! $( this ).is( ':checked' ) );
+                        var on = $( this ).is( ':checked' );
+                        $( '.form2zoho-live-dot' ).toggleClass( 'is-paused', ! on );
+                        // Switching Live back on should show something now, not after
+                        // whatever back-off the last slow answer earned.
+                        if ( on ) {
+                                clearTimeout( window.form2zohoPollTimer );
+                                pollDelay = POLL_MIN;
+                                schedulePoll( 0 );
+                        }
+                } );
+                // Same when the tab is brought back to the front.
+                $( document ).on( 'visibilitychange.f2zNav', function () {
+                        if ( ! document.hidden && $( '#form2zoho-live-switch' ).is( ':checked' ) ) {
+                                clearTimeout( window.form2zohoPollTimer );
+                                schedulePoll( 0 );
+                        }
                 } );
         } else if ( window.form2zohoPollTimer ) {
                 // Navigated away from the Logs tab — stop polling in the background.
                 clearInterval( window.form2zohoPollTimer );
+                clearTimeout( window.form2zohoPollTimer );
                 window.form2zohoPollTimer = null;
+        }
 …
          * @return {void}
          */
+        /**
+         * How long a confirmation stays on screen before it clears itself.
+         *
+         * One value for both kinds — the toast that appears in place and the
+         * banner that comes back after a save or a delete. They are the same thing
+         * from the reader's side, and they were 2600ms and 5000ms: the banner sat
+         * there long after the toast had gone, which is what made saving feel like
+         * it had left something behind.
+         *
+         * Only ever used for a confirmation. A warning or an error is the one
+         * thing on the page worth reading twice and is never put on a timer.
+         */
+        var NOTICE_LINGER = 2600;
         function showToast( message, isError ) {
                 var $stack = $( '.form2zoho-toast-stack' );
 …
                                 setTimeout( function () { $toast.remove(); }, 200 );
                         },
+                        NOTICE_LINGER
                 );
+        }
 …
         } );
+        /**
+         * Say that a control is doing something, and stop saying it.
+         *
+         * For actions rather than lists: a switch being flipped, a feed being
+         * cloned. Every one of these is an admin-ajax round trip, which on a site
+         * with a couple of dozen plugins is seconds before the handler is even
+         * reached — long enough that a control which does not react reads as one
+         * that did not register the click.
+         *
+         * Disabled as well as marked, so the same request cannot be sent twice
+         * while the first is still out.
+         *
+         * @param {jQuery}  $el The control that was used.
+         * @param {boolean} on  Whether its request is running.
+         */
+        function actionBusy( $el, on ) {
+                if ( ! $el || ! $el.length ) {
+                        return;
+                }
+                $el.prop( 'disabled', !! on ).toggleClass( 'is-busy', !! on );
+                $el.closest( '.form2zoho-switch' ).toggleClass( 'is-busy', !! on );
+        }
         $( document ).on( 'change.f2zNav', '.form2zoho-feed-toggle', function () {
                 var $cb = $( this );
                 var id  = $cb.data( 'feed-id' );
+                actionBusy( $cb, true );
                 post( 'form2zoho_toggle_feed', { feed_id: id } )
+                        .always( function () {
+                                actionBusy( $cb, false );
+                        } )
                         .done( function () {
                                 showToast( i18n.statusChanged );
 …
         } );
+        // Row menu: send a real test record with the saved feed, the same
+        // request the editor's "Send test record" button makes.
+        $( document ).on( 'click.f2zNav', '.form2zoho-action-test', function () {
+                var $item = $( this );
+                var id = $item.data( 'feed-id' );
+                askConfirm( { message: i18n.testConfirm, label: i18n.sendAction, danger: false }, function () {
+                        actionBusy( $item, true );
+                        post( 'form2zoho_test_feed', { feed_id: id } )
+                                .always( function () {
+                                        actionBusy( $item, false );
+                                } )
+                                .done( function ( res ) {
+                                        if ( res && res.success ) {
+                                                showToast( i18n.testSuccess + ': ' + res.data.message );
+                                        } else {
+                                                showToast( i18n.testFailed + ': ' + ( ( res && res.data && res.data.message ) || i18n.error ), true );
+                                        }
+                                } )
+                                .fail( function () {
+                                        showToast( i18n.testFailed + ': ' + i18n.error, true );
+                                } );
+                } );
+        } );
         $( document ).on( 'click.f2zNav', '.form2zoho-action-clone', function () {
+                var id = $( this ).data( 'feed-id' );
+                post( 'form2zoho_clone_feed', { feed_id: id } ).done( function ( res ) {
+                        if ( res && res.success ) {
+                                window.location.reload();
+                        }
+                } );
+        } );
+                var $item = $( this );
+                var id = $item.data( 'feed-id' );
+                actionBusy( $item, true );
+                post( 'form2zoho_clone_feed', { feed_id: id } )
+                        // Restored even though success reloads the page: a failure has to
+                        // leave the menu item usable again, and a reload that never comes
+                        // must not leave it dead.
+                        .always( function () {
+                                actionBusy( $item, false );
+                        } )
+                        .done( function ( res ) {
+                                if ( res && res.success ) {
+                                        window.location.reload();
+                                }
+                        } );
+        } );
+        /**
+         * Open the Pro dialog for one locked source tile.
+         *
+         * The dialog's benefit list and logo strip are the same whichever tile was
+         * pressed; the mark, the headline and the one-line answer are not. They
+         * come off the tile as data attributes rather than being assembled here,
+         * so every string in the dialog stays in PHP where it can be translated —
+         * this function only moves text it never reads.
+         *
+         * @param {jQuery} $tile The locked tile that was clicked.
+         */
+        function openProModal( $tile ) {
+                var $modal = $( '#form2zoho-pro-modal' );
+                if ( ! $modal.length ) {
+                        return;
+                }
+                var icon = $tile.data( 'pro-icon' ) || '';
+                var $img = $modal.find( '.form2zoho-pro-mark-img' );
+                // .attr(), not .text(): these are attribute and text-node writes on
+                // values that came from esc_attr() in PHP, and jQuery escapes on the
+                // way in. Nothing here builds HTML from them.
+                $modal.find( '.form2zoho-pro-title' ).text( $tile.data( 'pro-title' ) || '' );
+                $modal.find( '.form2zoho-pro-blurb' ).text( $tile.data( 'pro-blurb' ) || '' );
+                if ( icon ) {
+                        $img.attr( 'src', icon ).show();
+                } else {
+                        $img.removeAttr( 'src' ).hide();
+                }
+                openModal( $modal );
+        }
         function openModal( $modal ) {
 …
                 $modal.find( '.form2zoho-modal' ).attr( 'tabindex', '-1' ).trigger( 'focus' );
+        }
         $( document ).on( 'click.f2zNav', '.form2zoho-modal-close, .form2zoho-modal-overlay', function ( e ) {
+        $( document ).on( 'click.f2zNav', '.form2zoho-modal-close, .form2zoho-pro-dismiss, .form2zoho-modal-overlay', function ( e ) {
                 if ( e.target === this ) {
                         closeModal( $( this ).closest( '.form2zoho-modal-overlay' ) );
 …
+                                }
                                 var d = res.data;
                                 var dedupe = ( d.dedupe || [] ).join( ', ' ) || '\u2014';
+                                var dedupe = ( d.dedupe || [] ).join( ', ' ) || '-';
                                 // Same title class as the other three dialogs — a bare <h2> picks
                                 // up the generic `.form2zoho h2` margins instead, which put an
 …
                                 html += '<tr><th scope="row">' + esc( i18n.colForm ) + '</th><td><code>' + esc( d.form_name ) + '</code></td></tr>';
                                 html += '<tr><th scope="row">' + esc( i18n.colFormPlugin ) + '</th><td>' + esc( d.form_type ) + '</td></tr>';
                                 html += '<tr><th scope="row">' + esc( i18n.colDestination ) + '</th><td>' + esc( d.app ) + ( d.module ? ' \u2014 ' + esc( d.module ) : '' ) + '</td></tr>';
+                                html += '<tr><th scope="row">' + esc( i18n.colDestination ) + '</th><td>' + esc( d.app ) + ( d.module ? ' - ' + esc( d.module ) : '' ) + '</td></tr>';
                                 html += '<tr><th scope="row">' + esc( i18n.colStatus ) + '</th><td>' + ( d.enabled ? '<span class="form2zoho-pill form2zoho-pill-ok">' + esc( i18n.enabled ) + '</span>' : '<span class="form2zoho-pill form2zoho-pill-bad">' + esc( i18n.disabled ) + '</span>' ) + '</td></tr>';
                                 html += '<tr><th scope="row">' + esc( i18n.colMapped ) + '</th><td>' + esc( d.mapping_count ) + '</td></tr>';
 …
                 var $modal = $( '#form2zoho-timeline-modal' );
                 var $body = $modal.find( '.form2zoho-timeline' ).html( '<p>' + esc( i18n.loading ) + '</p>' );
                 $modal.find( '.form2zoho-modal-title' ).text( title + ' \u2014 ' + i18n.timeline );
+                $modal.find( '.form2zoho-modal-title' ).text( i18n.timeline + ': ' + title );
                 openModal( $modal );
                 post( 'form2zoho_feed_timeline', { feed_id: id } )
 …
                                         html += '<span class="form2zoho-timeline-dot"></span>';
                                         html += '<div class="form2zoho-timeline-content">';
                                         html += '<div class="form2zoho-timeline-meta"><strong>' + esc( row.created_at ) + '</strong> UTC</div>';
+                                        html += '<div class="form2zoho-timeline-meta"><strong>' + esc( row.created_at ) + '</strong> ' + esc( res.data.timezone || '' ) + '</div>';
                                         html += '<div>' + esc( row.message ) + '</div>';
                                         // No deep link for Campaigns / Marketing Automation — Zoho
 …
                                                 html += '</div>';
+                                        }
+                                        // The same JSON the Logs tab hides behind its own Details
+                                        // button, and the same markup, so the copy button and the
+                                        // <pre> styling are the ones that already exist.
+                                        //
+                                        // The timeline is where somebody goes when a feed is
+                                        // misbehaving, and it was showing the outcome without any
+                                        // of the context that explains it: which field names the
+                                        // form actually submitted, how many attempts it took,
+                                        // whether the failure was worth retrying. All of that was
+                                        // already in the response — format_row() sends it — and
+                                        // reading it meant leaving for the Logs tab and finding
+                                        // the row again by timestamp.
+                                        if ( row.context ) {
+                                                html += '<div class="form2zoho-timeline-details">';
+                                                html += '<button type="button" class="button-link form2zoho-timeline-toggle" aria-expanded="false">' + esc( i18n.details ) + '</button>';
+                                                html += '<div class="form2zoho-detail-wrap" hidden>';
+                                                html += '<button type="button" class="button form2zoho-copy" title="' + esc( i18n.copyToClipboard ) + '">' +
+                                                        '<svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="9" y="9" width="13" height="13" rx="2"/><path d="M5 15H4a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h9a2 2 0 0 1 2 2v1"/></svg>' +
+                                                        '<span>' + esc( i18n.copy ) + '</span></button>';
+                                                html += '<pre class="form2zoho-json">' + esc( row.context ) + '</pre>';
+                                                html += '</div></div>';
+                                        }
                                         html += '</div></li>';
                                 } );
 …
                         return 'is-success';
+                }
                 if ( 'suppressed' === status ) {
+                if ( 'suppressed' === status || 'skipped' === status ) {
                         return 'is-warning';
+                }
 …
                 var show = $( this ).is( ':checked' );
                 $( '.form2zoho-integrations-table [data-col="' + col + '"]' ).toggleClass( 'form2zoho-col-hidden', ! show );
+                // Remembered for next time. The table is already showing the new
+                // state, so nothing here waits for or reacts to the answer: a failed
+                // save costs the preference, not the click that was just made.
+                var hidden = $( '.form2zoho-colvis-input' ).not( ':checked' ).map( function () {
+                        return $( this ).data( 'col' );
+                } ).get();
+                // An empty list still has to be sent, or switching the last hidden
+                // column back on would leave the old list stored and the column would
+                // come back hidden on the next load.
+                post( 'form2zoho_save_columns', { 'hidden[]': hidden.length ? hidden : [ '' ] } );
         } );
 …
                                 }, 1500 );
                         } else {
+                                var originalTitle = $btn.attr( 'title' );
+                                $btn.addClass( 'is-copied' ).attr( 'title', i18n.copied );
+                                setTimeout( function () {
+                                        $btn.removeClass( 'is-copied' ).attr( 'title', originalTitle );
+                                }, 1500 );
+                                // An icon button: the stylesheet swaps its copy icon for a tick
+                                // while .is-copied is on. The title is remembered once, and a
+                                // second click restarts the timer, so a quick double click can
+                                // neither end the tick early nor leave the title reading "Copied".
+                                if ( undefined === $btn.data( 'f2zTitle' ) ) {
+                                        $btn.data( 'f2zTitle', $btn.attr( 'title' ) || '' );
+                                }
+                                clearTimeout( $btn.data( 'f2zCopiedTimer' ) );
+                                $btn.addClass( 'is-copied' ).attr( 'title', i18n.copied || $btn.data( 'f2zTitle' ) );
+                                $btn.data( 'f2zCopiedTimer', setTimeout( function () {
+                                        $btn.removeClass( 'is-copied' ).attr( 'title', $btn.data( 'f2zTitle' ) );
+                                }, 2000 ) );
+                        }
                 };
 …
+        }
+        /* ---- Feed editor: tabs ---- */
+        function activateTab( tab ) {
+                $( '.form2zoho-tab-btn' ).removeClass( 'is-active' );
+                $( '.form2zoho-tab-btn[data-tab="' + tab + '"]' ).addClass( 'is-active' );
+                $( '.form2zoho-tab-panel' ).removeClass( 'is-active' );
+                $( '.form2zoho-tab-panel[data-tab-panel="' + tab + '"]' ).addClass( 'is-active' );
+        }
+        $( document ).on( 'click.f2zNav', '.form2zoho-tab-btn', function () {
+                activateTab( $( this ).data( 'tab' ) );
+        } );
+        $( document ).on( 'click.f2zNav', '.form2zoho-tab-next', function () {
+                var $panel = $( this ).closest( '.form2zoho-tab-panel' );
+                var valid = true;
+                $panel.find( 'input, select, textarea' ).each( function () {
+                        if ( this.willValidate && ! this.checkValidity() ) {
+                                this.reportValidity();
+                                valid = false;
+        /* ---- Feed editor: steps ----
+         *
+         * The editor is a four-step sequence, not a set of tabs. Each step is
+         * only answerable once the one before it has been — the trigger decides
+         * which forms exist, the form decides which fields exist, the Zoho module
+         * decides what those fields can map to — so the navigation enforces the
+         * order forwards and leaves it open backwards.
+         */
+        function stepKeys() {
+                return $( '#f2z-feed-editor .form2zoho-step' ).map( function () {
+                        return $( this ).data( 'step' );
+                } ).get();
+        }
+        /* How far into the sequence anyone has actually got.
+         *
+         * The rail at the top can go back to any step already answered, and to
+         * none that is not. Without this it would be a way around the very order
+         * the Continue buttons exist to enforce — the mapping step cannot be
+         * filled in before a module has been chosen, so it must not be reachable
+         * before then either. It only ever grows, so stepping back to change an
+         * earlier answer does not take the later steps away again. */
+        var furthestStep = 0;
+        function showStep( step ) {
+                var $steps = $( '#f2z-feed-editor .form2zoho-step' );
+                var keys = stepKeys();
+                var at = $.inArray( step, keys );
+                if ( at < 0 ) {
+                        return;
+                }
+                $steps.removeClass( 'is-active' );
+                $steps.filter( '[data-step="' + step + '"]' ).addClass( 'is-active' );
+                if ( at > furthestStep ) {
+                        furthestStep = at;
+                }
+                syncStepper( keys, at );
+        }
+        /**
+         * Redraw the rail: which step is here, which are behind, which are shut.
+         *
+         * `is-done` rather than only `is-current`, because "three of these four
+         * questions are answered" is the thing a person wants to know on arriving
+         * back at a half-finished editor, and a single highlight cannot say it.
+         *
+         * The disabled attribute — not a class — is what actually stops a forward
+         * jump, so it holds for the keyboard and for assistive technology, not
+         * just for the pointer.
+         *
+         * @param {Array}  keys Step names in order.
+         * @param {number} at   Index of the step now on screen.
+         */
+        function syncStepper( keys, at ) {
+                $( '#f2z-feed-editor .form2zoho-stepper__item' ).each( function ( i ) {
+                        var $item = $( this );
+                        $item.toggleClass( 'is-current', i === at )
+                                .toggleClass( 'is-done', i < at );
+                        $item.find( '.form2zoho-stepper__btn' )
+                                .prop( 'disabled', i > furthestStep || ( 'trigger' === keys[ i ] && triggerLocked() ) )
+                                .attr( 'aria-current', i === at ? 'step' : null );
+                } );
+        }
+        /**
+         * Write the browser's own validation message under the field it belongs to.
+         *
+         * The native bubble says the right thing and says it in the right place,
+         * but it is gone on the next click — so on a four-step form the reason a
+         * step will not advance can disappear before the person has looked away
+         * from the button they pressed. This leaves the same sentence in the page,
+         * under the control, until the control is fixed.
+         *
+         * The text is `validationMessage`, never a string of ours: the browser
+         * already knows whether the field is empty, too short or a malformed
+         * email, and it says so in the user's own language.
+         *
+         * @param {Element} el The control that failed.
+         */
+        function setFieldError( el ) {
+                var $c = $( el );
+                var $field = $c.closest( '.form2zoho-field' );
+                if ( ! $field.length ) {
+                        return;
+                }
+                var $msg = $field.children( '.form2zoho-field__error' );
+                if ( ! $msg.length ) {
+                        // role="alert" so it is announced when it appears. It is created
+                        // on demand rather than sitting empty in the markup, because an
+                        // empty live region that gains text is announced; one that is
+                        // merely unhidden is not, reliably.
+                        $msg = $( '<p class="form2zoho-field__error" role="alert"></p>' );
+                        if ( el.id ) {
+                                $msg.attr( 'id', el.id + '-error' );
+                        }
+                        $field.append( $msg );
+                }
+                $msg.text( el.validationMessage );
+                $c.addClass( 'is-invalid' ).attr( 'aria-invalid', 'true' );
+                if ( el.id ) {
+                        $c.attr( 'aria-describedby', el.id + '-error' );
+                }
+        }
+        /** Take the message and the invalid styling back off. */
+        function clearFieldError( el ) {
+                var $c = $( el );
+                var $field = $c.closest( '.form2zoho-field' );
+                $c.removeClass( 'is-invalid' ).removeAttr( 'aria-invalid' );
+                // Only ours. This runs over every valid control on a step, so an
+                // aria-describedby pointing at a help paragraph rather than at our
+                // error line must survive it.
+                if ( el.id && $c.attr( 'aria-describedby' ) === el.id + '-error' ) {
+                        $c.removeAttr( 'aria-describedby' );
+                }
+                if ( ! $field.length ) {
+                        return;
+                }
+                // Only the message this control put there. Two controls can share one
+                // field wrapper — the Module picker sits beside the hidden input that
+                // carries its label — and taking away every message in the wrapper
+                // meant the hidden input's turn through the loop below deleted the
+                // picker's, since a hidden input never validates and so always lands
+                // in the clearing branch. What was left was a red border with nothing
+                // beside it saying why, on the one field most likely to be empty.
+                $field.children( '.form2zoho-field__error' ).filter( function () {
+                        return ! el.id || this.id === el.id + '-error';
+                } ).remove();
+        }
+        /** Whether every constrained control on one step passes the browser's own validation. */
+        function stepIsValid( step ) {
+                var first = null;
+                $( '#f2z-feed-editor .form2zoho-step[data-step="' + step + '"]' )
+                        .find( 'input, select, textarea' )
+                        .each( function () {
+                                // .validity.valid, never .checkValidity(): the method fires an
+                                // `invalid` event on every control it rejects, and the capture
+                                // listener at the foot of this file answers that event by
+                                // showing the control's step. Asking a question would then
+                                // move the page — so on load, before anyone had typed a
+                                // character, the editor opened on step two with "Please fill
+                                // out this field" already under the title box. The property
+                                // reads the same state and fires nothing.
+                                if ( this.willValidate && ! this.validity.valid ) {
+                                        setFieldError( this );
+                                        // Every offender is marked, but only the first is
+                                        // reported: the browser shows one bubble at a time, and
+                                        // pointing it at the last field on the step would send
+                                        // someone to the bottom of it to fix the top.
+                                        if ( ! first ) {
+                                                first = this;
+                                        }
+                                } else {
+                                        clearFieldError( this );
+                                }
+                        } );
+                if ( first ) {
+                        // Reported, not just counted: a step can be scrolled past the
+                        // failing control, and the browser's own bubble is the thing that
+                        // points at it.
+                        showStep( step );
+                        first.reportValidity();
+                        return false;
+                }
+                return true;
+        }
+        // The moment it is fixed, not the next time Continue is pressed. Delegated
+        // from document so it survives the client-side page swap in admin-nav.js.
+        $( document ).on( 'input.f2zNav change.f2zNav', '#f2z-feed-editor .is-invalid', function () {
+                if ( this.willValidate && this.validity.valid ) {
+                        clearFieldError( this );
+                }
+        } );
+        /*
+         * A mark means "you pressed Continue and this was wrong". Change the
+         * destination and that verdict was about a different question: which
+         * fields this step even asks for depends on the app, and one of them
+         * stops being required altogether when the destination needs no account.
+         * So the marks come off, and come back on the next Continue if they are
+         * still deserved.
+         *
+         * Without this, marking Module empty while on a destination that needs no
+         * account, then switching to a Zoho app, left the Module picker red on a
+         * step where nothing had been submitted yet — and left it red alone, with
+         * the equally empty Connected account beside it unmarked, because that one
+         * had not been required at the time.
+         */
+        $( document ).on( 'change.f2zNav', '#f2z-feed-editor #f2z_intgr', function () {
+                $( '#f2z-feed-editor .form2zoho-step[data-step="connection"]' )
+                        .find( 'input, select, textarea' )
+                        .each( function () {
+                                clearFieldError( this );
+                        } );
+        } );
+        /**
+         * Move to a step, checking everything between here and there.
+         *
+         * Backwards is always allowed — going back to change an earlier answer is
+         * the whole reason the progress bar is clickable. Forwards has to pass
+         * every step it skips over, or the last two steps could be reached with
+         * no form chosen and nothing to map.
+         */
+        function goToStep( step ) {
+                var keys = stepKeys();
+                var from = $.inArray( $( '#f2z-feed-editor .form2zoho-step.is-active' ).data( 'step' ), keys );
+                var to = $.inArray( step, keys );
+                var i;
+                // A saved feed's trigger is fixed, so its grid is not a step it has.
+                if ( to < 0 || ( 'trigger' === step && triggerLocked() ) ) {
+                        return;
+                }
+                for ( i = from; i < to; i++ ) {
+                        if ( ! stepIsValid( keys[ i ] ) ) {
+                                return;
+                        }
+                }
+                showStep( step );
+                // The whole content of the panel has just been replaced. Sighted users
+                // see that; a screen-reader user is still sitting on the button they
+                // pressed, on a step that is no longer on screen, unless focus moves.
+                // The panel itself takes it — it carries role="group" and is labelled
+                // by its own heading, so focusing it announces which step this is and
+                // what is in it. preventScroll because the animation below owns the
+                // scrolling; without it the browser jumps first and the page then
+                // slides, twice.
+                var panel = document.querySelector(
+                        '#f2z-feed-editor .form2zoho-step[data-step="' + step + '"]'
+                );
+                if ( panel ) {
+                        try {
+                                panel.focus( { preventScroll: true } );
+                        } catch ( e ) {
+                                panel.focus();
+                        }
+                }
+                // Back to the top of the editor. Each step is a screen of its own, and
+                // arriving halfway down one because the last one was longer is how a
+                // heading gets missed.
+                var $top = $( '#f2z-feed-editor' ).closest( '.form2zoho-editor-pop' );
+                if ( $top.length ) {
+                        $( 'html, body' ).animate( { scrollTop: $top.offset().top - 40 }, 200 );
+                }
+        }
+        /**
+         * Redraw step two's header card from whichever tile is selected.
+         *
+         * Step two never shows the grid, so this card is the only place the answer
+         * to step one is visible once you have left it. Copied from the tile
+         * rather than looked up: the tile already holds the icon and the label the
+         * person just clicked, and a second source for them is a second thing to
+         * keep in step.
+         */
+        function syncChosenTrigger() {
+                var $tile = $( '.form2zoho-source-tile.is-active' ).first();
+                var $card = $( '.form2zoho-chosen-card' );
+                // A locked trigger's card is drawn by PHP, including for a source
+                // whose tile cannot be selected, and nothing here can change it.
+                if ( ! $card.length || triggerLocked() ) {
+                        return;
+                }
+                if ( ! $tile.length ) {
+                        $card.attr( 'data-source', '' ).find( '.form2zoho-chosen-icon' ).empty();
+                        $card.find( '.form2zoho-chosen-label' ).text( '' );
+                        return;
+                }
+                var $img = $tile.find( '.form2zoho-source-icon img' );
+                $card.attr( 'data-source', $tile.data( 'source' ) );
+                $card.find( '.form2zoho-chosen-icon' ).html(
+                        $img.length ? $( '<img>' ).attr( 'src', $img.attr( 'src' ) ).attr( 'alt', '' ) : ''
+                );
+                $card.find( '.form2zoho-chosen-label' ).text( $tile.find( '.form2zoho-source-label' ).text() );
+                syncTriggerDocs( $tile.data( 'source' ) );
+                syncFormWording( $tile.data( 'source' ) );
+        }
+        /**
+         * Whether a trigger is something that happens on the site rather than a
+         * form plugin. Every source the server did not list as a form is one.
+         *
+         * @param {string} source Source key; empty while none is chosen.
+         * @return {boolean}
+         */
+        function isEventSource( source ) {
+                return !! source && -1 === $.inArray( source, Form2Zoho.formSources || [] );
+        }
+        /**
+         * Word step two's picker for the chosen trigger: "Form" for a form
+         * plugin, "Event" for anything else. The page printed it for the trigger
+         * it was rendered with; this keeps it right when that changes.
+         *
+         * @param {string} source The chosen source key.
+         */
+        function syncFormWording( source ) {
+                var t = Form2Zoho.i18n || {};
+                var event = isEventSource( source );
+                var reload = event ? t.reloadEvents : t.reloadForms;
+                $( '.form2zoho-form-word' ).text( ( event ? t.eventLabel : t.formLabel ) || '' );
+                $( '.form2zoho-details-help' ).text( ( event ? t.detailsEvent : t.detailsForm ) || '' );
+                $( '.form2zoho-reload-forms' ).attr( { 'aria-label': reload, title: reload } );
+                // Not while it is saying something is wrong.
+                $( '.form2zoho-form-help' ).not( '.form2zoho-form-help-warn' ).text( ( event ? t.eventHelp : t.formHelp ) || '' );
+        }
+        /**
+         * Point step two's guide at the chosen trigger, or hide it.
+         *
+         * The link is rendered by PHP for whichever trigger the step opened with,
+         * and the trigger can then be changed without a page load — so this is the
+         * half that keeps the two in step. A source with no page of its own, which
+         * is every Pro trigger, hides the link rather than leaving it pointing at
+         * the last one that had one.
+         *
+         * @param {string} source The chosen source key.
+         */
+        function syncTriggerDocs( source ) {
+                var $link = $( '.form2zoho-trigger-docs' );
+                if ( ! $link.length ) {
+                        return;
+                }
+                var docs = ( Form2Zoho.triggerDocs || {} )[ source ];
+                if ( ! docs || ! docs.url ) {
+                        $link.prop( 'hidden', true ).attr( 'href', '' );
+                        return;
+                }
+                $link
+                        .attr( 'href', docs.url )
+                        .attr( 'aria-label', ( Form2Zoho.i18n.docsNewTab || '%s' ).replace( '%s', docs.label ) )
+                        .prop( 'hidden', false )
+                        .find( 'span' ).text( docs.label );
+        }
+        /**
+         * Point the destination step's guide at the chosen Zoho app, or hide it.
+         *
+         * The twin of syncTriggerDocs(), for the other picker that changes what
+         * the person is being asked to do. A destination an add-on registers has
+         * no row unless a site filters one in, and then the link hides rather
+         * than pointing at whichever Zoho app was chosen before it.
+         */
+        function syncAppDocs() {
+                var $link = $( '.form2zoho-app-docs' );
+                if ( ! $link.length ) {
+                        return;
+                }
+                var docs = ( Form2Zoho.appDocs || {} )[ $( '#f2z_intgr' ).val() ];
+                if ( ! docs || ! docs.url ) {
+                        $link.prop( 'hidden', true ).attr( 'href', '' );
+                        return;
+                }
+                // The visible text stays "Docs"; the app's name is in the accessible name.
+                $link
+                        .attr( 'href', docs.url )
+                        .attr( 'aria-label', ( Form2Zoho.i18n.docsNewTab || '%s' ).replace( '%s', docs.label ) )
+                        .prop( 'hidden', false );
+        }
+        // Delegated, and bound once: the editor is swapped in and out of the page
+        // by admin-nav.js without this file being re-run, so a handler bound to
+        // the select itself would be bound to a node that was thrown away.
+        $( document ).on( 'change.f2zDocs', '#f2z-feed-editor #f2z_intgr', syncAppDocs );
+        /** Whether the editor holds a saved feed, whose trigger cannot be changed. */
+        function triggerLocked() {
+                return '1' === $( '#f2z-feed-editor' ).attr( 'data-trigger-locked' );
+        }
+        /** The selected tile, or an empty set when nothing is chosen yet. */
+        function activeTile() {
+                return $( '.form2zoho-source-tile.is-active' ).first();
+        }
+        /** Whether the chosen trigger's plugin was running when this page rendered. */
+        function triggerIsAvailable() {
+                var $tile = activeTile();
+                // No tile selected is not "unavailable" — it is "not asked yet", and
+                // the step has its own reason to be empty then.
+                return ! $tile.length || 1 === parseInt( $tile.attr( 'data-available' ), 10 );
+        }
+        /** "<name> is not installed or activated.", built from the tile's own label. */
+        function unavailableMessage() {
+                var label = activeTile().find( '.form2zoho-source-label' ).text();
+                return ( i18n.notInstalled || '%s is not installed or activated.' ).replace( '%s', label );
+        }
+        /**
+         * Show step two either as a form to fill in, or as "that plugin is not
+         * running".
+         *
+         * @param {boolean} available Whether the chosen trigger's plugin is there.
+         * @param {string}  message   What to say when it is not.
+         */
+        function setTriggerAvailable( available, message ) {
+                var $step = $( '#f2z-feed-editor .form2zoho-step[data-step="details"]' );
+                if ( ! $step.length ) {
+                        return;
+                }
+                $step.find( '.form2zoho-trigger-unavailable' )
+                        .text( message || '' )
+                        .prop( 'hidden', !! available );
+                // All hidden together: the heading that asks for a feed title, the
+                // fields that would take one, and the button that would carry someone
+                // past them. Leaving "Name this feed" above "that plugin is not
+                // running" asks for something and refuses it in the same breath.
+                $step.find( '.form2zoho-step-head, .form2zoho-step-body, .form2zoho-step-footer' )
+                        .prop( 'hidden', ! available );
+        }
+        /**
+         * Step two's Next is off until both of its fields are answered.
+         *
+         * The browser's own validity, not a length test: `required` is already
+         * declared on both controls, so the browser is the one thing that cannot
+         * disagree with what the form will do when it is submitted. Read as a
+         * property rather than through checkValidity(), which fires `invalid` —
+         * see the note in stepIsValid().
+         */
+        function syncDetailsNext() {
+                var $step = $( '#f2z-feed-editor .form2zoho-step[data-step="details"]' );
+                var ready = true;
+                if ( ! $step.length ) {
+                        return;
+                }
+                $step.find( 'input, select, textarea' ).each( function () {
+                        if ( this.willValidate && ! this.validity.valid ) {
+                                ready = false;
                                 return false;
+                        }
                 } );
+                if ( ! valid ) {
+                $step.find( '.form2zoho-step-next' ).prop( 'disabled', ! ready );
+        }
+        // Every control in the editor, not only step two's own. Changing the
+        // trigger clears the Form select on the spot — the form chosen for the old
+        // trigger does not exist under the new one — and that clearing happens
+        // before the replacement list has been asked for, let alone arrived. Watch
+        // only step two and the button stays live over an empty Form for as long
+        // as the request takes.
+        $( document ).on(
+                'input.f2zNav change.f2zNav',
+                '#f2z-feed-editor input, #f2z-feed-editor select, #f2z-feed-editor textarea',
+                syncDetailsNext
+        );
+        // The forms list arrives by ajax well after the page does, so the gate has
+        // to be re-checked when it lands, not only when someone types.
+        $( document ).on( 'f2z:formsLoaded.f2zNav', syncDetailsNext );
+        // "Change" on the summary card is the way back to the grid.
+        $( document ).on( 'click.f2zNav', '.form2zoho-chosen-clear', function () {
+                goToStep( 'trigger' );
+        } );
+        // PHP renders both of these correctly for the feed being edited; running
+        // them once on ready is what covers the case where it could not — a saved
+        // feed whose form plugin has since been deactivated, so no tile is active.
+        $( syncChosenTrigger );
+        $( syncDetailsNext );
+        /* Open the whole rail for a feed that already exists.
+         *
+         * furthestStep is there to stop someone reaching a question before the
+         * answer it depends on has been given. On a saved feed every one of them
+         * has been given — that is what saving it meant — so starting at step one
+         * with steps two to four shut would make editing an existing feed slower
+         * than creating a new one, four clicks to reach the mapping. */
+        $( function () {
+                var $editor = $( '#f2z-feed-editor' );
+                if ( ! $editor.length ) {
                         return;
+                }
+                activateTab( $( this ).data( 'next' ) );
+                $( 'html, body' ).animate( { scrollTop: $( '.form2zoho-tabs' ).offset().top - 40 }, 200 );
+        } );
+        $( document ).on( 'click.f2zNav', '.form2zoho-tab-back', function () {
+                activateTab( $( this ).data( 'back' ) );
+                $( 'html, body' ).animate( { scrollTop: $( '.form2zoho-tabs' ).offset().top - 40 }, 200 );
+                if ( $editor.find( 'input[name="feed_id"]' ).val() ) {
+                        furthestStep = stepKeys().length - 1;
+                }
+                // Draws the rail for whichever step is open — showStep() is what keeps
+                // it in step afterwards, and nothing has called it yet.
+                showStep( $editor.find( '.form2zoho-step.is-active' ).data( 'step' ) );
+        } );
+        /* ---- Feed editor: filtering the trigger grid ---- */
+        $( document ).on( 'input.f2zNav', '#f2z_trigger_search', function () {
+                var needle = $.trim( this.value ).toLowerCase();
+                var shown = 0;
+                $( '.form2zoho-source-tile' ).each( function () {
+                        var $tile = $( this );
+                        // The label is what people search by; the key catches the ones
+                        // whose product name and tile label differ ("wpforms" for
+                        // "WPForms Lite", "wcbookings" for "WooCommerce Bookings").
+                        var hay = ( $tile.find( '.form2zoho-source-label' ).text() + ' ' + ( $tile.data( 'source' ) || '' ) ).toLowerCase();
+                        var hit = '' === needle || hay.indexOf( needle ) !== -1;
+                        $tile.toggleClass( 'is-filtered-out', ! hit );
+                        if ( hit ) {
+                                shown++;
+                        }
+                } );
+                $( '.form2zoho-trigger-none' ).prop( 'hidden', 0 !== shown );
+        } );
+        // The rail. Its forward markers are disabled until their step is reached,
+        // so this can only ever go back — through goToStep(), the same door the
+        // Back buttons use.
+        $( document ).on( 'click.f2zNav', '.form2zoho-stepper__btn', function () {
+                goToStep( $( this ).data( 'goto' ) );
+        } );
+        $( document ).on( 'click.f2zNav', '.form2zoho-step-next', function () {
+                goToStep( $( this ).data( 'next' ) );
+        } );
+        $( document ).on( 'click.f2zNav', '.form2zoho-step-back', function () {
+                goToStep( $( this ).data( 'back' ) );
+        } );
+        /* Enter in a field, before the last step, means Next — never Save.
+         *
+         * Left alone, Enter submits the whole form. The browser then points at the
+         * first empty required field wherever it is, the invalid handler below
+         * opens that field's step, and a person on step two landed on step three
+         * with the Continue button they could not press still greyed out behind
+         * them. With every field filled it was worse: the feed saved half-built.
+         * So Enter does exactly what the step's own button would, and nothing
+         * when that button is disabled. */
+        $( document ).on( 'keydown.f2zNav', '#f2z-feed-editor', function ( e ) {
+                if ( 'Enter' !== e.key || e.isDefaultPrevented() || e.shiftKey || e.ctrlKey || e.metaKey || e.altKey || e.originalEvent && e.originalEvent.isComposing ) {
+                        return;
+                }
+                // A textarea takes the newline, and a button or link its own press.
+                if ( ! $( e.target ).is( 'input' ) || $( e.target ).is( ':button, :submit, :reset, :checkbox, :radio, :file' ) ) {
+                        return;
+                }
+                var $step = $( e.target ).closest( '.form2zoho-step' );
+                var keys = stepKeys();
+                // The last step has no Next; Enter there is the save it always was.
+                if ( ! $step.length || $.inArray( $step.data( 'step' ), keys ) === keys.length - 1 ) {
+                        return;
+                }
+                e.preventDefault();
+                var $next = $step.find( '.form2zoho-step-next' ).first();
+                if ( $next.length && ! $next.prop( 'disabled' ) ) {
+                        $next.trigger( 'click' );
+                } else if ( $next.length ) {
+                        // Say what is missing, the way pressing Continue would have.
+                        stepIsValid( $step.data( 'step' ) );
+                }
         } );
 …
+        }
+        // Enable whichever of Form field / Static value the row's Source names, and
+        // disable the other, so a row cannot be left saying two contradictory
+        // things at once.
+        //
+        // Each control is paired with a hidden input of the same name and exactly
+        // one of the pair is enabled at a time. That pairing is load-bearing: a
+        // browser does not submit a disabled control, and collect_mapping() in
+        // FeedsPage.php reads map_zoho/map_source/map_form/map_static *by index*.
+        // Disabling a control without its twin taking over would drop one entry
+        // and silently pair every later row with the wrong value.
+        function syncRowSource( $row ) {
+                var src = $row.find( '.f2z-map-source' ).val();
+                // "Combine fields" is the row that uses both controls at once: the
+                // text box holds the template, and the Form field select is how a
+                // {placeholder} is put into it. Exactly one of each name is still
+                // enabled per row, which is what keeps the parallel arrays in
+                // collect_mapping() lined up.
+                var usesText = 'static' === src || 'template' === src;
+                var usesForm = 'static' !== src;
+                $row.find( '.f2z-map-form' ).prop( 'disabled', ! usesForm );
+                $row.find( '.f2z-map-form-slot' ).prop( 'disabled', usesForm );
+                $row.find( '.f2z-map-static' ).prop( 'disabled', ! usesText );
+                $row.find( '.f2z-map-static-slot' ).prop( 'disabled', usesText );
+                // The Form field select sits hidden inside a searchable box, and the
+                // box is what has to look and act disabled.
+                comboSyncDisabled( $row.find( '.f2z-map-form' ) );
+                // The chips belong to "Combine fields" only, and go with it.
+                renderTemplateTokens( $row );
+                var $box = $row.find( '.f2z-map-static' );
+                $box.attr( 'placeholder', 'template' === src ? ( i18n.templateHint || '' ) : '' );
+        }
         // Whether a mapping row actually carries something to send: a form field
         // picked, or a static value typed. Mirrors collect_mapping() in
         // FeedsPage.php, which drops rows that fail this on save.
         function rowIsFilled( $row ) {
+                return 'static' === $row.find( '.f2z-map-source' ).val()
+                        ? '' !== ( $row.find( '.f2z-map-static' ).val() || '' ).trim()
+                        : '' !== ( $row.find( '.f2z-map-form' ).val() || '' );
+                var src = $row.find( '.f2z-map-source' ).val();
+                return 'field' === src
+                        ? '' !== ( $row.find( '.f2z-map-form' ).val() || '' )
+                        : '' !== ( $row.find( '.f2z-map-static' ).val() || '' ).trim();
+        }
 …
                 return '' !== ( $row.find( '.f2z-map-zoho' ).val() || '' ) && rowIsFilled( $row );
+        }
+        /*
+         * A static value checked against the kind of Zoho field it is aimed at.
+         *
+         * A static value is sent exactly as typed, so a Phone field given letters
+         * reached Zoho that way, and Zoho refused the record or stored the junk.
+         * The same rules run again on save in Support\StaticValue: keep the two in
+         * step. Only types with a shape Zoho enforces are listed; text, picklists
+         * and checkboxes are left alone, and "Combine fields" is not checked,
+         * because its {placeholders} are only filled at delivery.
+         */
+        var STATIC_KINDS = {
+                phone: 'phone',
+                email: 'email',
+                integer: 'integer',
+                bigint: 'integer',
+                double: 'decimal',
+                currency: 'decimal',
+                percent: 'decimal',
+                decimal: 'decimal',
+                date: 'date',
+                datetime: 'datetime',
+                website: 'url',
+                url: 'url'
+        };
+        function isCalendarDate( ymd ) {
+                var d = new Date( ymd + 'T00:00:00Z' );
+                return ! isNaN( d.getTime() ) && d.toISOString().slice( 0, 10 ) === ymd;
+        }
+        // The rule a value breaks for a field type, or '' when it is fine.
+        function staticValueProblem( ztype, value ) {
+                var kind = STATIC_KINDS[ String( ztype || '' ).toLowerCase() ];
+                var ok;
+                value = String( value || '' ).trim();
+                if ( ! kind || '' === value ) {
+                        return '';
+                }
+                switch ( kind ) {
+                        case 'phone':
+                                ok = /^\+?[0-9\s().\-]+$/.test( value ) && ( value.match( /[0-9]/g ) || [] ).length >= 3 && value.length <= 30;
+                                break;
+                        case 'email':
+                                ok = /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test( value );
+                                break;
+                        case 'integer':
+                                ok = /^-?[0-9]+$/.test( value );
+                                break;
+                        case 'decimal':
+                                ok = /^-?[0-9]+(\.[0-9]+)?$/.test( value );
+                                break;
+                        case 'date':
+                                ok = /^[0-9]{4}-[0-9]{2}-[0-9]{2}$/.test( value ) && isCalendarDate( value );
+                                break;
+                        case 'datetime':
+                                ok = /^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}(:[0-9]{2})?(Z|[+\-][0-9]{2}:[0-9]{2})?$/.test( value ) && isCalendarDate( value.slice( 0, 10 ) );
+                                break;
+                        default:
+                                ok = /^(https?:[/][/])?[^\s/.]+(\.[^\s/.]+)+([/]\S*)?$/i.test( value );
+                }
+                return ok ? '' : kind;
+        }
+        function rowZohoLabel( $row ) {
+                var label = $.trim( $row.find( '.f2z-map-zoho option:selected' ).text() ).replace( /\s*\*$/, '' );
+                return label || $row.find( '.f2z-map-zoho' ).val() || '';
+        }
+        function rowStaticProblem( $row ) {
+                if ( 'static' !== $row.find( '.f2z-map-source' ).val() ) {
+                        return '';
+                }
+                var type = $row.find( '.f2z-map-zoho option:selected' ).attr( 'data-type' ) || $row.find( '.f2z-map-type' ).val() || '';
+                return staticValueProblem( type, $row.find( '.f2z-map-static' ).val() );
+        }
+        function staticValueMessage( kind, label ) {
+                var keys = { phone: 'staticPhone', email: 'staticEmail', integer: 'staticInteger', decimal: 'staticDecimal', date: 'staticDate', datetime: 'staticDatetime', url: 'staticUrl' };
+                return ( i18n[ keys[ kind ] ] || '%s' ).replace( '%s', label );
+        }
+        // Mark the box and say under it what the Zoho field wants there. Returns
+        // the message, or '' once the value is fine.
+        function showStaticProblem( $row ) {
+                var kind    = rowStaticProblem( $row );
+                var $box    = $row.find( '.f2z-map-static' );
+                var $msg    = $row.find( '.f2z-map-static-error' );
+                var message = kind ? staticValueMessage( kind, rowZohoLabel( $row ) ) : '';
+                $box.toggleClass( 'is-invalid', !! kind ).attr( 'aria-invalid', kind ? 'true' : null );
+                if ( ! kind ) {
+                        $msg.remove();
+                        return '';
+                }
+                if ( ! $msg.length ) {
+                        $msg = $( '<p class="f2z-map-static-error" role="alert"></p>' );
+                        $box.after( $msg );
+                }
+                $msg.text( message );
+                return message;
+        }
+        // Checked when the box is left rather than on every key, so a number is
+        // not scolded half-typed. Once flagged it is checked as it is typed, so the
+        // message goes the moment the value is right. A change of Zoho field or of
+        // Source changes the rule, so those check again too.
+        $( document ).on( 'change.f2zNav', '.form2zoho-map-rows .f2z-map-static', function () {
+                showStaticProblem( $( this ).closest( '.form2zoho-map-row' ) );
+        } );
+        $( document ).on( 'input.f2zNav', '.form2zoho-map-rows .f2z-map-static.is-invalid', function () {
+                showStaticProblem( $( this ).closest( '.form2zoho-map-row' ) );
+        } );
+        $( document ).on( 'change.f2zNav', '.form2zoho-map-rows .f2z-map-zoho, .form2zoho-map-rows .f2z-map-source', function () {
+                var $row = $( this ).closest( '.form2zoho-map-row' );
+                if ( '' !== ( $row.find( '.f2z-map-static' ).val() || '' ).trim() || $row.find( '.f2z-map-static' ).hasClass( 'is-invalid' ) ) {
+                        showStaticProblem( $row );
+                }
+        } );
         // Block "Save feed" on three mapping problems, and point the person at
 …
         //      silent disappearance, and it is the easier mistake to make —
         //      "+ Add mapping row" leaves the new row blank by design.
+        //   4. A static value its Zoho field will not accept, such as letters in
+        //      a phone number. Zoho would refuse the record or store the junk.
         $( document ).on( 'submit.f2zNav', '#f2z-feed-editor', function ( e ) {
                 var required = {};
 …
                 var satisfied = {};
                 var incomplete = [];
+                var invalid = [];
                 var blank = 0;
                 var $rows = $( '.form2zoho-map-row' );
 …
                         if ( rowIsFilled( $row ) ) {
                                 satisfied[ zoho ] = true;
+                                var problem = showStaticProblem( $row );
+                                if ( problem ) {
+                                        invalid.push( problem );
+                                }
                                 return;
+                        }
 …
                 var $alert = $( '#f2z-mapping-alert' );
                 if ( ! missing.length && ! incomplete.length && ! blank ) {
+                if ( ! missing.length && ! incomplete.length && ! blank && ! invalid.length ) {
                         $alert.prop( 'hidden', true );
                         return;
 …
                         parts.push( i18n.blankRows );
+                }
+                if ( invalid.length ) {
+                        parts.push( invalid.join( ' ' ) );
+                }
                 if ( missing.length ) {
                         parts.push( ( i18n.missingRequired ).replace( '%s', missing.join( ', ' ) ) );
 …
                 $alert.find( 'strong' ).text(
                         ( incomplete.length || blank ) ? i18n.incompleteRowsTitle : i18n.missingRequiredTitle
+                        ( incomplete.length || blank ) ? i18n.incompleteRowsTitle : ( invalid.length ? i18n.staticInvalidTitle : i18n.missingRequiredTitle )
                 );
                 $alert.find( 'p' ).text( parts.join( ' ' ) );
                 $alert.prop( 'hidden', false );
+                if ( typeof activateTab === 'function' ) {
+                        activateTab( 'mapping' );
+                }
+                // The alert is inside the mapping step, so it is no use unless that
+                // step is the one on screen. showStep(), not goToStep(): this is a
+                // save that already failed on the mapping, and re-running the earlier
+                // steps' validation on the way there would hide that behind an
+                // unrelated bubble.
+                showStep( 'mapping' );
                 $( 'html, body' ).animate( { scrollTop: $alert.offset().top - 40 }, 200 );
         } );
 …
         );
+        // If a required field on a hidden tab fails validation, switch to that
+        // tab so the browser's native validation bubble points at something visible.
+        $( document ).on( 'invalid.f2zNav', '#f2z-feed-editor *', function () {
+                var $panel = $( this ).closest( '.form2zoho-tab-panel' );
+                if ( $panel.length && ! $panel.hasClass( 'is-active' ) ) {
+                        activateTab( $panel.data( 'tab-panel' ) );
+        /* A required field on a step that is not on screen still blocks the save.
+         * Show its step, so the browser's native bubble points at something the
+         * person can actually see — and leave the message under the field, which
+         * outlasts the bubble.
+         *
+         * Bound natively, on document, in the capture phase. `invalid` is one of
+         * the handful of DOM events declared non-bubbling, so a delegated jQuery
+         * handler never hears it however the selector is written; capture runs on
+         * the way down and therefore does. On document rather than on the form so
+         * it survives the client-side page swap in admin-nav.js, which replaces
+         * the whole wrap. */
+        // Native listeners have no namespace to clear, and admin-nav.js re-executes
+        // this whole file after every in-plugin navigation, so the previous one is
+        // removed by hand. Leaving them to stack would keep the *first* run's
+        // closure alive, and with it a furthestStep belonging to an editor that is
+        // no longer on the page.
+        if ( window.form2zohoInvalidHandler ) {
+                document.removeEventListener( 'invalid', window.form2zohoInvalidHandler, true );
+        }
+        window.form2zohoInvalidHandler = function ( e ) {
+                var el = e.target;
+                if ( ! el || ! el.closest || ! el.closest( '#f2z-feed-editor' ) ) {
+                        return;
+                }
+                setFieldError( el );
+                var step = el.closest( '.form2zoho-step' );
+                if ( ! step || step.classList.contains( 'is-active' ) ) {
+                        return;
+                }
+                // Back to an earlier step only. A field further on than the step on
+                // screen is one nobody has reached yet; opening its step would skip
+                // the checks the Next button makes on the way there.
+                var keys = stepKeys();
+                var at = $.inArray( $( '#f2z-feed-editor .form2zoho-step.is-active' ).data( 'step' ), keys );
+                if ( at < 0 || $.inArray( step.getAttribute( 'data-step' ), keys ) < at ) {
+                        showStep( step.getAttribute( 'data-step' ) );
+                }
+        };
+        document.addEventListener( 'invalid', window.form2zohoInvalidHandler, true );
+        /* ---- Connection dialog: the API console link follows the data centre ----
+         *
+         * Zoho runs a separate console per region, and a client registered in one
+         * does not exist in the others. Sending someone to the .com console when
+         * their account is on .eu shows them an empty console, which looks exactly
+         * like having lost their clients — so the link has to move with the
+         * picker. The map comes from PHP, which is where the hosts are written
+         * down, so this only chooses between them.
+         */
+        $( document ).on( 'change.f2zNav', '#form2zoho_data_center', function () {
+                var urls = ( window.Form2Zoho && Form2Zoho.consoleUrls ) || {};
+                var url = urls[ $( this ).val() ];
+                if ( url ) {
+                        $( '.form2zoho-console-link' ).attr( 'href', url );
+                }
         } );
 …
         } );
+        // "All applications" and the individual per-app checkboxes are mutually
+        // exclusive from the account's point of view (picking "all" already
+        // covers every app), so keep them from disagreeing with each other
+        // instead of letting the person submit a confusing mixed state.
+        /* ---- Success messages clear themselves ----
+         *
+         * "Feed saved." is the answer to a question nobody is still asking by the
+         * time they have read it, and it sat on the screen until it was clicked
+         * away — pushing the feed list down, and on a screen where saving happens
+         * repeatedly, stacking up as a row of stale confirmations.
+         *
+         * Only success. A warning about rows that were left out, or an error from
+         * Zoho, is the one thing on the page worth reading twice, and taking it
+         * away on a timer is how somebody saves a broken feed twice over.
+         *
+         * The timer is paused while the pointer is over the box or the focus is
+         * inside it, because both mean somebody is still dealing with it — the
+         * dismiss button is focusable, and a message that vanishes as it is being
+         * reached for is worse than one that stays.
+         */
+        $( function () {
+                $( '.form2zoho-alert-success.is-dismissible' ).each( function () {
+                        var $alert = $( this );
+                        var timer  = null;
+                        function go() {
+                                timer = window.setTimeout( function () {
+                                        $alert.fadeOut( 200, function () {
+                                                $( this ).remove();
+                                        } );
+                                }, NOTICE_LINGER );
+                        }
+                        function hold() {
+                                window.clearTimeout( timer );
+                        }
+                        $alert.on( 'mouseenter.f2zNav focusin.f2zNav', hold );
+                        $alert.on( 'mouseleave.f2zNav focusout.f2zNav', function () {
+                                hold();
+                                go();
+                        } );
+                        go();
+                } );
+        } );
+        // "All applications" is a select-all over the per-app boxes, and it has to
+        // stay honest in both directions.
+        //
+        // It matters more than a tidy tick, because "all" is not a seventh app: a
+        // submission carrying it is a request for every scope the plugin supports,
+        // so the server grants everything regardless of what else is ticked. Edit
+        // access renders every per-app box ticked for a connection authorized for
+        // "all", and unticking Zoho CRM there used to leave the master box on —
+        // the POST still said "all", and the connection was re-authorized for CRM
+        // anyway, with the person having just watched themselves remove it.
+        //
+        // So: unticking any single app clears the master box, which is what makes
+        // the narrowed list the thing actually submitted. Ticking every app sets
+        // it again, so a hand-assembled full house is stored as "all" and keeps
+        // covering apps this plugin has not shipped yet.
+        function syncAppsAll( $grid ) {
+                var $one = $grid.find( '.form2zoho-apps-one' );
+                $grid
+                        .find( '.form2zoho-apps-all' )
+                        .prop( 'checked', $one.length > 0 && $one.filter( ':checked' ).length === $one.length );
+        }
+        // On load, for every grid on the screen — the Create Connection dialog and
+        // one Edit access panel per connection. Those panels are hidden rather
+        // than absent, so their inputs are here to be read. Wrapped in ready()
+        // like the editor's own start-up above: this file is enqueued in the
+        // footer today, and a direct call would be the one thing that broke if it
+        // were ever moved. Re-running it after an in-plugin AJAX navigation is
+        // wanted, and ready() fires straight away by then.
+        $( function () {
+                $( '.form2zoho-apps-grid' ).each( function () {
+                        syncAppsAll( $( this ) );
+                } );
+        } );
         $( document ).on( 'change.f2zNav', '.form2zoho-apps-all', function () {
+                var $row = $( this ).closest( 'td, p' );
+                var checked = $( this ).is( ':checked' );
+                $row.find( '.form2zoho-apps-one' ).prop( 'disabled', checked );
+                if ( checked ) {
+                        $row.find( '.form2zoho-apps-one' ).prop( 'checked', false );
+                }
+        } );
+                $( this )
+                        .closest( '.form2zoho-apps-grid' )
+                        .find( '.form2zoho-apps-one' )
+                        .prop( 'checked', $( this ).is( ':checked' ) );
+        } );
         $( document ).on( 'change.f2zNav', '.form2zoho-apps-one', function () {
+                if ( $( this ).is( ':checked' ) ) {
+                        $( this ).closest( 'td, p' ).find( '.form2zoho-apps-all' ).prop( 'checked', false );
+                }
+                syncAppsAll( $( this ).closest( '.form2zoho-apps-grid' ) );
         } );
 …
         // always come back with no fields/tags, because the access token
         // itself was never granted that scope).
+        // "+N more" in a connection's "Authorized for" cell: the rest of the
+        // granted apps open in place, and the button then offers to fold them.
+        $( document ).on( 'click.f2zNav', '.form2zoho-authorized-more', function () {
+                var $btn = $( this );
+                var open = 'true' !== $btn.attr( 'aria-expanded' );
+                $( '#' + $btn.attr( 'aria-controls' ) ).prop( 'hidden', ! open );
+                $btn.attr( 'aria-expanded', open ? 'true' : 'false' ).text( open ? $btn.data( 'less' ) : $btn.data( 'more' ) );
+        } );
         $( document ).on( 'click.f2zNav', '.form2zoho-toggle-edit-apps', function () {
                 var connId = $( this ).data( 'conn' );
 …
                 } );
         } );
+        // One save per press of "Create feed" / "Save feed".
+        //
+        // Nothing stopped a second press while the first was still on its way, and
+        // a new feed has no id until the server stores it, so every press created
+        // one more feed. The button is disabled the moment a save really goes
+        // ahead, and FeedsPage::handle_save() files a repeated post under the same
+        // new id for any press that gets past this anyway.
+        function setSaving( form, saving ) {
+                var creating = '' === ( $( form ).find( 'input[name="feed_id"]' ).val() || '' );
+                form.f2zSaving = saving;
+                clearTimeout( form.f2zSavingTimer );
+                $( form ).attr( 'aria-busy', saving ? 'true' : null );
+                $( form ).find( '.form2zoho-step-footer' ).find( 'input[type="submit"], button[type="submit"]' ).each( function () {
+                        var $btn = $( this );
+                        var prop = $btn.is( 'input' ) ? 'value' : 'textContent';
+                        if ( saving ) {
+                                $btn.data( 'f2zLabel', this[ prop ] );
+                                this[ prop ] = ( creating ? i18n.creatingFeed : i18n.savingFeed ) || this[ prop ];
+                        } else if ( undefined !== $btn.data( 'f2zLabel' ) ) {
+                                this[ prop ] = $btn.data( 'f2zLabel' );
+                                $btn.removeData( 'f2zLabel' );
+                        }
+                        $btn.prop( 'disabled', saving );
+                } );
+        }
+        // Bound last, so it only locks once every check above has let the submit
+        // through — a save stopped by the mapping check keeps its button.
+        $( document ).on( 'submit.f2zNav', '#f2z-feed-editor', function ( e ) {
+                var form = this;
+                if ( form.f2zSaving ) {
+                        e.preventDefault();
+                        return;
+                }
+                if ( e.isDefaultPrevented() ) {
+                        return;
+                }
+                setSaving( form, true );
+                // A handler bound after this one, an add-on's, may still cancel the
+                // submit. Hand the button back if one did.
+                setTimeout( function () {
+                        if ( e.isDefaultPrevented() || ( e.originalEvent && e.originalEvent.defaultPrevented ) ) {
+                                setSaving( form, false );
+                        }
+                }, 0 );
+                // Stopping the page load (Esc, the browser's X) leaves this page on
+                // screen with nothing to re-enable the button. It comes back after a
+                // while; a press then is safe, the server files it under the same id.
+                form.f2zSavingTimer = setTimeout( function () {
+                        setSaving( form, false );
+                }, 15000 );
+        } );
+        // Back to this page from the browser's history cache, which keeps the page
+        // exactly as it was left, disabled button included.
+        $( window ).off( 'pageshow.f2zNav' ).on( 'pageshow.f2zNav', function ( e ) {
+                var form = document.getElementById( 'f2z-feed-editor' );
+                if ( e.originalEvent && e.originalEvent.persisted && form && form.f2zSaving ) {
+                        setSaving( form, false );
+                }
+        } );
 } )( jQuery );

techwave-form-sync-for-zoho/trunk/includes/Admin/Ajax.php

-              r3649280
+              r3748247
 use Form2Zoho\Support\DataCenters;
 use Form2Zoho\Support\FormSources;
+use Form2Zoho\Support\ErrorTranslator;
+use Form2Zoho\Support\SiteTime;
+use Form2Zoho\Support\PhpMail;
 defined( 'ABSPATH' ) || exit;
 …
                 add_action( 'wp_ajax_form2zoho_browse_tags', array( $this, 'browse_tags' ) );
                 add_action( 'wp_ajax_form2zoho_list_forms', array( $this, 'list_forms' ) );
+                add_action( 'wp_ajax_form2zoho_list_connections', array( $this, 'list_connections' ) );
                 add_action( 'wp_ajax_form2zoho_recent_logs', array( $this, 'recent_logs' ) );
                 add_action( 'wp_ajax_form2zoho_feed_timeline', array( $this, 'feed_timeline' ) );
+                add_action( 'wp_ajax_form2zoho_save_columns', array( $this, 'save_columns' ) );
                 add_action( 'wp_ajax_form2zoho_toggle_feed', array( $this, 'toggle_feed' ) );
                 add_action( 'wp_ajax_form2zoho_clone_feed', array( $this, 'clone_feed' ) );
 …
          * correct the whole time. This answers the question on the spot.
+         *
+         * A success here means WordPress handed the message to a mailer, not
+         * that it arrived: it can still bounce or be filtered afterwards, which
+         * no plugin can observe. The wording says as much.
+         * Sent the same way the notifications are, through wp_mail() (see
+         * Support\PhpMail), so the answer is true of the notifications too,
+         * whether an SMTP plugin sends them or PHP's mail() does.
+         *
+         * A success here means the mailer accepted the message, not that it arrived:
+         * it can still bounce or be filtered afterwards, which no plugin can
+         * observe. The wording says as much.
+         *
          * @return void
 …
                         "\n",
                         array(
                                 __( 'This is a test message from Techwave Form Sync for Zoho.', 'techwave-form-sync-for-zoho' ),
+                                __( 'This is a test message from FormBridge for Zoho.', 'techwave-form-sync-for-zoho' ),
                                 '',
                                 __( 'If you are reading it, this site can send the notification emails the plugin offers under Settings → Notifications.', 'techwave-form-sync-for-zoho' ),
 …
                 );
                 $sent = wp_mail(
+                $sent = PhpMail::send(
                         $to,
                         /* translators: %s: site name. */
                         sprintf( __( '[%s] Techwave Form Sync test email', 'techwave-form-sync-for-zoho' ), $site ),
+                        sprintf( __( '[%s] FormBridge test email', 'techwave-form-sync-for-zoho' ), $site ),
                         $body
                 );
                 if ( ! $sent ) {
+                if ( is_wp_error( $sent ) ) {
                         wp_send_json_error(
                                 array(
+                                        'message' => __( 'This site could not send the email. WordPress refused to hand it to a mailer, which usually means no mail transport is configured — many hosts need an SMTP plugin such as WP Mail SMTP. Notification emails will not arrive until that is fixed.', 'techwave-form-sync-for-zoho' ),
+                                        'message' => sprintf(
+                                                /* translators: %s: the mailer's own reason, e.g. "Could not instantiate mail function." */
+                                                __( 'This site could not send the email. Reason: %s If an SMTP plugin is installed, check its settings. If not, install one, or ask your hosting provider to enable PHP mail (sendmail). Notification emails will not arrive until that is fixed.', 'techwave-form-sync-for-zoho' ),
+                                                $sent->get_error_message()
+                                        ),
+                                )
                         );
 …
                                 'message' => sprintf(
                                         /* translators: %s: administration email address. */
                                         __( 'Test email sent to %s. Check that inbox — if it never arrives, the message left WordPress but was rejected or filtered further down the line.', 'techwave-form-sync-for-zoho' ),
+                                        __( 'Test email sent to %s. Check that inbox. If it never arrives, the message left this server but was rejected or filtered further down the line.', 'techwave-form-sync-for-zoho' ),
                                         $to
                                 ),
 …
                 $rows = $this->logger->for_feed( $feed_id, 100 );
+                wp_send_json_success( array( 'rows' => array_map( array( $this, 'format_row' ), $rows ) ) );
+                wp_send_json_success(
+                        array(
+                                'rows'     => array_map( array( $this, 'format_row' ), $rows ),
+                                // Printed beside each entry's time, which is already on the site's clock.
+                                'timezone' => SiteTime::zone(),
+                        )
+                );
+        }
+        /**
+         * Remember which feed-list columns this person has switched off.
+         *
+         * Saved per user, so the screen comes back the way it was left instead of
+         * resetting to all five on every page load — which is what made the toggle
+         * feel like it had not worked.
+         *
+         * Only the hidden ones are stored. An empty list is the default and means
+         * "show everything", so a new column added by a later version appears for
+         * everybody rather than being invisible to anyone who had ever touched
+         * this menu.
+         *
+         * @return void
+         */
+        public function save_columns() {
+                if ( ! current_user_can( self::CAP ) ) {
+                        wp_send_json_error( array( 'message' => __( 'Permission denied.', 'techwave-form-sync-for-zoho' ) ), 403 );
+                }
+                check_ajax_referer( self::NONCE, 'nonce' );
+                $known = array_keys( FeedsPage::columns() );
+                // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- every element goes through sanitize_key() and an allowlist in the loop below.
+                $sent = isset( $_POST['hidden'] ) ? (array) wp_unslash( $_POST['hidden'] ) : array();
+                $hidden = array();
+                foreach ( $sent as $key ) {
+                        $key = sanitize_key( $key );
+                        // Allowlisted against the columns that actually exist. This lands
+                        // in user meta and comes back out as markup decisions, so an
+                        // unknown key has no business being stored.
+                        if ( in_array( $key, $known, true ) ) {
+                                $hidden[] = $key;
+                        }
+                }
+                update_user_meta( get_current_user_id(), FeedsPage::HIDDEN_COLUMNS_META, array_values( array_unique( $hidden ) ) );
+                wp_send_json_success( array( 'hidden' => $hidden ) );
+        }
 …
                 $feed['title']   = $title;
                 $feed['enabled'] = false;
+                $new_id          = $this->feeds->save( $feed );
+                // A copy is a new feed, created now. Carrying the original's date made
+                // it read, and sort, as though it had existed all along.
+                $feed['created_at']     = current_time( 'mysql' );
+                $feed['created_at_gmt'] = current_time( 'mysql', true );
+                $new_id                 = $this->feeds->save( $feed );
                 wp_send_json_success( array( 'id' => $new_id ) );
 …
                 if ( ! empty( $feed['dedupe_enabled'] ) && ! empty( $feed['dedupe_fields'] ) ) {
                         $dupe = array_filter( array_map( 'trim', explode( ',', (string) $feed['dedupe_fields'] ) ) );
+                } elseif ( ! empty( $feed['dedupe_enabled'] ) && in_array( $integration, array( 'crm', 'bigin' ), true ) ) {
+                        // Nothing ticked still updates matching records there, so "-"
+                        // would read as duplicate handling being off.
+                        $dupe = array( __( "Zoho's own duplicate check", 'techwave-form-sync-for-zoho' ) );
+                }
 …
                 $status = isset( $context['status'] ) ? (string) $context['status'] : '';
                 if ( 'success' !== $status && 'suppressed' !== $status ) {
+                if ( 'success' !== $status && 'suppressed' !== $status && 'skipped' !== $status ) {
                         $status = 'error';
+                }
 …
                 // page-loaded one, with the form name, timestamp, and a readable
                 // app name included alongside the rest of the context.
                 $context_out        = array( 'time' => $row->created_at . ' UTC' ) + $context;
+                $context_out        = array( 'time' => SiteTime::from_gmt( $row->created_at ) . ' (' . SiteTime::zone() . ')' ) + $context;
                 $context_out['app'] = $app_label;
                 if ( '' !== (string) $row->form_id ) {
 …
                 return array(
                         'id'          => (int) $row->id,
+                        'created_at'  => (string) $row->created_at,
+                        // Stored in UTC; sent on the site's clock. The live view pages by
+                        // id, never by this, so converting it changes only what is read.
+                        'created_at'  => SiteTime::from_gmt( (string) $row->created_at ),
                         'level'       => (string) $row->level,
                         'status'      => $status,
 …
                         'record_id'   => $record_id,
                         'view_url'    => '' !== $view_url ? esc_url_raw( $view_url, array( 'http', 'https' ) ) : '',
                         'message'     => (string) $row->message,
+                        'message'     => Logger::display_message( (string) $row->message ),
                         'context'     => wp_json_encode( $context_out, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE ),
                 );
 …
+                }
+                $topics = $integration->get_topics( $context );
+                // phpcs:ignore WordPress.Security.NonceVerification.Missing -- capability + nonce verified in guard() above.
+                $fresh = ! empty( $_POST['fresh'] );
+                $topics = $this->remembered(
+                        $integration,
+                        array( 'topics', $context['integration'], $context['connection_id'] ),
+                        $fresh,
+                        function () use ( $integration, $context ) {
+                                return $integration->get_topics( $context );
+                        }
+                );
                 $this->bail_on_error( $topics );
 …
+                }
+                $tags = $integration->get_tags( $context );
+                // phpcs:ignore WordPress.Security.NonceVerification.Missing -- capability + nonce verified in guard() above.
+                $fresh = ! empty( $_POST['fresh'] );
+                $tags = $this->remembered(
+                        $integration,
+                        array( 'tags', $context['integration'], $context['connection_id'] ),
+                        $fresh,
+                        function () use ( $integration, $context ) {
+                                return $integration->get_tags( $context );
+                        }
+                );
                 $this->bail_on_error( $tags );
                 wp_send_json_success( array( 'tags' => $this->flatten( $tags ) ) );
+        }
+        /**
+         * Return the saved Zoho connections, for the feed editor's account picker.
+         *
+         * Exists so that connecting an account no longer costs a half-built feed.
+         * The editor links to the Connections screen in a new tab; this is what
+         * brings the account made there into the list here, without the page load
+         * that would throw away everything already typed.
+         *
+         * `apps` rides along because the editor warns when a connection was
+         * authorized for a different Zoho app than the one chosen. That map is
+         * localized once at page load, so a connection made after it would
+         * otherwise be the one connection the warning could say nothing about.
+         *
+         * No secrets are returned: the id, the label someone typed, the data
+         * centre and the authorized app list — the same four facts the page
+         * already prints into its own <select>.
+         *
+         * @return void
+         */
+        public function list_connections() {
+                if ( ! current_user_can( self::CAP ) ) {
+                        wp_send_json_error( array( 'message' => __( 'Permission denied.', 'techwave-form-sync-for-zoho' ) ), 403 );
+                }
+                check_ajax_referer( self::NONCE, 'nonce' );
+                $out = array();
+                foreach ( $this->connections->all() as $id => $conn ) {
+                        // The same rule as the list the page renders: a draft that never
+                        // finished authorising cannot deliver, so reloading must not bring
+                        // it back into the account picker.
+                        if ( ! ConnectionManager::is_authorised( $conn ) ) {
+                                continue;
+                        }
+                        $apps  = isset( $conn['apps'] ) && is_array( $conn['apps'] ) ? array_values( $conn['apps'] ) : array( 'all' );
+                        $out[] = array(
+                                'id'    => (string) $id,
+                                'label' => isset( $conn['label'] ) ? (string) $conn['label'] : (string) $id,
+                                'dc'    => isset( $conn['data_center'] ) ? (string) $conn['data_center'] : 'us',
+                                'apps'  => array_map( 'strval', $apps ),
+                        );
+                }
+                wp_send_json_success( array( 'connections' => $out ) );
+        }
 …
                                         'available' => false,
                                         /* translators: %s: form plugin name, e.g. "Contact Form 7". */
                                         'message'   => sprintf( __( '%s is not active on this site.', 'techwave-form-sync-for-zoho' ), FormSources::label( $form_type ) ),
+                                        'message'   => sprintf( __( '%s is not installed or activated.', 'techwave-form-sync-for-zoho' ), FormSources::label( $form_type ) ),
+                                )
                         );
 …
                 );
+                if ( $integration->needs_organization() ) {
+                        $orgs = $integration->get_organizations( $context['connection_id'] );
+                // phpcs:disable WordPress.Security.NonceVerification.Missing -- capability + nonce verified in guard() above.
+                // Choosing an organization reloads the modules, and the organization
+                // list is already on the page by then. Asking Zoho for it again was a
+                // whole extra round trip on every pick, so the editor says it has one.
+                $have_orgs = ! empty( $_POST['have_organizations'] );
+                // The reload button beside the module select, which must really ask.
+                $fresh = ! empty( $_POST['fresh'] );
+                // phpcs:enable WordPress.Security.NonceVerification.Missing
+                if ( $integration->needs_organization() && ! $have_orgs ) {
+                        $orgs = $this->remembered(
+                                $integration,
+                                array( 'organizations', $context['integration'], $context['connection_id'] ),
+                                $fresh,
+                                function () use ( $integration, $context ) {
+                                        return $integration->get_organizations( $context['connection_id'] );
+                                }
+                        );
                         $this->bail_on_error( $orgs );
                         $payload['organizations'] = $this->flatten( $orgs );
+                }
+                $modules = $integration->get_modules(
+                        array(
+                                'connection_id' => $context['connection_id'],
+                                'org_id'        => $context['org_id'],
+                        )
+                $modules = $this->remembered(
+                        $integration,
+                        array( 'modules', $context['integration'], $context['connection_id'], $context['org_id'] ),
+                        $fresh,
+                        function () use ( $integration, $context, $fresh ) {
+                                return $integration->get_modules(
+                                        array(
+                                                'connection_id' => $context['connection_id'],
+                                                'org_id'        => $context['org_id'],
+                                                'fresh'         => $fresh,
+                                        )
+                                );
+                        }
                 );
                 $this->bail_on_error( $modules );
                 $payload['modules'] = $this->flatten( $modules );
-                // Desk-style integrations expose departments (needed for tickets).
-                $payload['departments'] = array();
-                if ( method_exists( $integration, 'get_departments' ) && '' !== $context['org_id'] ) {
-                        $departments = $integration->get_departments( $context['connection_id'], $context['org_id'] );
-                        if ( ! is_wp_error( $departments ) ) {
-                                $payload['departments'] = $this->flatten( $departments );
+                        }
+                }
                 wp_send_json_success( $payload );
 …
+                }
+                $fields = $integration->get_fields(
+                        array(
+                                'connection_id' => $context['connection_id'],
+                                'org_id'        => $context['org_id'],
+                                'module'        => $module,
+                        )
+                // phpcs:ignore WordPress.Security.NonceVerification.Missing -- capability + nonce verified in guard() above.
+                $fresh = ! empty( $_POST['fresh'] );
+                $fields = $this->remembered(
+                        $integration,
+                        array( 'fields', $context['integration'], $context['connection_id'], $context['org_id'], $no_module_needed ? '' : $module ),
+                        $fresh,
+                        function () use ( $integration, $context, $module, $fresh ) {
+                                return $integration->get_fields(
+                                        array(
+                                                'connection_id' => $context['connection_id'],
+                                                'org_id'        => $context['org_id'],
+                                                'module'        => $module,
+                                                'fresh'         => $fresh,
+                                        )
+                                );
+                        }
                 );
                 $this->bail_on_error( $fields );
                 wp_send_json_success( array( 'fields' => $this->flatten( $fields ) ) );
+        }
+        /**
+         * A Zoho list for the editor, kept for ten minutes.
+         *
+         * Every pick in the editor used to go back to Zoho: switching a CRM feed
+         * from Leads to Contacts and back was three field lookups, and opening a
+         * saved feed fetched its modules and fields again each time, a second or
+         * more apiece. The reload buttons pass $fresh, so something just created
+         * in Zoho still shows up. Errors are never kept, and a destination that
+         * is not a Zoho app (its lists come from this site) is always asked.
+         *
+         * @param mixed    $integration The integration.
+         * @param array    $parts       What identifies the list.
+         * @param bool     $fresh       Skip what is kept.
+         * @param callable $load        Fetches the list.
+         * @return mixed The list, or the WP_Error the fetch returned.
+         */
+        private function remembered( $integration, array $parts, $fresh, callable $load ) {
+                if ( ! self::needs_connection( $integration ) ) {
+                        return $load();
+                }
+                $key = 'form2zoho_ui_' . md5( (string) wp_json_encode( $parts ) );
+                if ( ! $fresh ) {
+                        $kept = get_transient( $key );
+                        if ( is_array( $kept ) ) {
+                                return $kept;
+                        }
+                }
+                $list = $load();
+                if ( is_array( $list ) ) {
+                        set_transient( $key, $list, 10 * MINUTE_IN_SECONDS );
+                }
+                return $list;
+        }
+        /**
+         * Whether a destination is reached through a saved Zoho connection.
+         *
+         * Asked rather than assumed, and assumed true when the integration cannot
+         * answer: an older integration that predates the question is a Zoho one,
+         * and the safe reading of silence here is the stricter check.
+         *
+         * @param mixed $integration The integration, or null.
+         * @return bool
+         */
+        private static function needs_connection( $integration ) {
+                if ( null === $integration || ! method_exists( $integration, 'needs_connection' ) ) {
+                        return true;
+                }
+                return (bool) $integration->needs_connection();
+        }
 …
                 $org_id        = isset( $_POST['org_id'] ) ? sanitize_text_field( wp_unslash( $_POST['org_id'] ) ) : '';
-                if ( '' === $connection_id || null === $this->connections->get( $connection_id ) ) {
-                        wp_send_json_error( array( 'message' => __( 'Unknown or disconnected account.', 'techwave-form-sync-for-zoho' ) ) );
+                }
                 if ( '' === $integration ) {
                         wp_send_json_error( array( 'message' => __( 'No integration selected.', 'techwave-form-sync-for-zoho' ) ) );
+                }
+                // A destination that is reached through a Zoho account must name a
+                // real one. A destination that is just a URL has no account to name,
+                // and demanding one would make its module and field lists unreachable
+                // — see AbstractIntegration::needs_connection().
+                if ( self::needs_connection( $this->registry->get( $integration ) )
+                        && ( '' === $connection_id || null === $this->connections->get( $connection_id ) ) ) {
+                        wp_send_json_error( array( 'message' => __( 'Unknown or disconnected account.', 'techwave-form-sync-for-zoho' ) ) );
+                }
+                $this->guard_app_access( $integration, $connection_id );
                 return array(
 …
         /**
+         * Stop early when the account was never authorized for the app being asked
+         * about.
+         *
+         * A connection carries only the Zoho permissions it asked for at
+         * authorization time, so pointing a CRM-only account at Zoho Books gets an
+         * HTTP 401 and the message "Zoho rejected the access token." That is
+         * accurate and no help at all: it reads as a broken or expired connection,
+         * and the two things somebody then tries — reconnecting, or making a new
+         * connection — both rebuild the same CRM-only grant and fail again.
+         *
+         * The stored app list already knows the answer, so it is given here
+         * instead, before a request is spent discovering it. Named apps only: a
+         * connection authorized for "all" covers everything, and one whose list is
+         * missing is left alone for the API to judge rather than guessed about.
+         *
+         * @param string $integration_id Integration id, e.g. "books".
+         * @param string $connection_id  Connection id.
+         * @return void
+         */
+        private function guard_app_access( $integration_id, $connection_id ) {
+                $integration = $this->registry->get( $integration_id );
+                // A destination that is just a URL has no Zoho grant to check.
+                if ( null === $integration || ! self::needs_connection( $integration ) ) {
+                        return;
+                }
+                $conn = $this->connections->get( $connection_id );
+                if ( ! is_array( $conn ) || ! isset( $conn['apps'] ) || ! is_array( $conn['apps'] ) ) {
+                        return;
+                }
+                if ( in_array( 'all', $conn['apps'], true ) || in_array( $integration_id, $conn['apps'], true ) ) {
+                        return;
+                }
+                wp_send_json_error(
+                        array(
+                                'message' => sprintf(
+                                        /* translators: 1: Zoho app name, e.g. "Zoho Books". 2: the same app name. */
+                                        __( 'This connection is not authorized for %1$s. Use "Edit access" on the connection, tick %2$s, then press Update & Reauthorize.', 'techwave-form-sync-for-zoho' ),
+                                        $integration->label(),
+                                        $integration->label()
+                                ),
+                        )
+                );
+        }
+        /**
          * Convert a WP_Error result into a JSON error response and stop.
+         *
+         * A request that never reached Zoho is described in words, with the host
+         * it could not reach, instead of cURL's own "cURL error 28: Connection
+         * timed out after 10002 milliseconds".
+         *
          * @param mixed $maybe_error Possible WP_Error.
 …
         private function bail_on_error( $maybe_error ) {
                 if ( is_wp_error( $maybe_error ) ) {
+                        wp_send_json_error( array( 'message' => $maybe_error->get_error_message() ) );
+                        $data    = $maybe_error->get_error_data();
+                        $host    = is_array( $data ) && isset( $data['host'] ) ? (string) $data['host'] : '';
+                        $network = ErrorTranslator::transport( $maybe_error->get_error_message(), $host, true );
+                        wp_send_json_error( array( 'message' => '' !== $network ? $network : $maybe_error->get_error_message() ) );
+                }
+        }
 …
                                 $required = ! empty( $value['required'] );
+                                $type     = isset( $value['type'] ) ? (string) $value['type'] : '';
+                                $unique   = ! empty( $value['unique'] );
                         } else {
                                 $val      = is_int( $key ) ? $value : $key;
                                 $label    = $value;
                                 $required = false;
+                                $type     = '';
+                                $unique   = false;
+                        }
 …
                                 'label'    => (string) $label,
                                 'required' => (bool) $required,
+                                // Empty for module/organisation rows and for the apps whose
+                                // field lists are curated rather than fetched; the mapping
+                                // falls back to plain text when it is, which is what those
+                                // apps want anyway.
+                                'type'     => $type,
+                                'unique'   => $unique,
                         );
+                }

techwave-form-sync-for-zoho/trunk/includes/Admin/DeactivationFeedback.php

-              r3649280
+              r3748247
 /**
  * Asks why, once, on the Plugins screen, when someone deactivates Techwave Form Sync for Zoho.
+ * Asks why, once, on the Plugins screen, when someone deactivates FormBridge for Zoho.
+ *
  * Entirely voluntary and entirely skippable. The modal is an overlay on the
 …
                 echo '<div class="form2zoho-modal-scroll">';
                 echo '<p class="description">' . esc_html__( 'If you have a moment, what made you deactivate Techwave Form Sync for Zoho? Answering is entirely optional — nothing is sent unless you choose to send it.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '<p class="description">' . esc_html__( 'If you have a moment, what made you deactivate FormBridge for Zoho? Answering is entirely optional, and nothing is sent unless you choose to send it.', 'techwave-form-sync-for-zoho' ) . '</p>';
                 echo '<div class="form2zoho-deactivate-reasons" role="radiogroup" aria-label="' . esc_attr__( 'Reason for deactivating', 'techwave-form-sync-for-zoho' ) . '">';

techwave-form-sync-for-zoho/trunk/includes/Admin/FeedsPage.php

-              r3649280
+              r3748247
 use Form2Zoho\Logging\Logger;
 use Form2Zoho\Support\Assets;
+use Form2Zoho\Support\Branding;
 use Form2Zoho\Support\ErrorTranslator;
+use Form2Zoho\Support\FieldMapper;
 use Form2Zoho\Support\FormSources;
+use Form2Zoho\Support\VideoGuide;
 use Form2Zoho\Support\Markup;
+use Form2Zoho\Support\SiteTime;
+use Form2Zoho\Support\StaticValue;
 defined( 'ABSPATH' ) || exit;
 …
          * plugin's whole top-level menu slug. SettingsPage registers itself
          * underneath it, so this one is public.
+         */
+        public const MENU_SLUG = 'form2zoho-feeds';
+         *
+         * It was `form2zoho-feeds` before the plugin took its own name, and
+         * LegacyPageSlugs sends that address here.
+         */
+        public const MENU_SLUG = 'formbridge-feeds';
+        /**
+         * Where each person's column choice is kept.
+         *
+         * User meta rather than an option, because this is a preference and not a
+         * setting: two admins looking at the same feeds should not be able to
+         * rearrange each other's screen. That is also how wp-admin stores its own
+         * Screen Options column toggles, so it behaves the way the rest of the
+         * dashboard already does.
+         */
+        public const HIDDEN_COLUMNS_META = 'form2zoho_hidden_columns';
+        /**
+         * The feed list's optional columns, and what they are called.
+         *
+         * One definition, read by the menu that toggles them, the table that draws
+         * them and the endpoint that saves the choice — so a column cannot be
+         * toggleable but unsaveable, or saved under a key nothing renders.
+         *
+         * @return array<string,string>
+         */
+        public static function columns() {
+                return array(
+                        'trigger' => __( 'Feed Name', 'techwave-form-sync-for-zoho' ),
+                        'source'  => __( 'Trigger', 'techwave-form-sync-for-zoho' ),
+                        'action'  => __( 'Action Name', 'techwave-form-sync-for-zoho' ),
+                        'created' => __( 'Created At', 'techwave-form-sync-for-zoho' ),
+                        'status'  => __( 'Status', 'techwave-form-sync-for-zoho' ),
+                );
+        }
+        /**
+         * The class that hides one column, when this person has hidden it.
+         *
+         * Rendered by the server rather than left to the script that toggles it.
+         * Adding the class on load would mean every page draw showing the full
+         * table for a moment and then snapping narrower, which reads as a bug even
+         * though the end state is right.
+         *
+         * @param string            $key    Column key.
+         * @param array<int,string> $hidden Columns this person has switched off.
+         * @return string Class name, or '' when the column is shown.
+         */
+        private static function col_class( $key, array $hidden ) {
+                return in_array( $key, $hidden, true ) ? 'form2zoho-col-hidden' : '';
+        }
+        /**
+         * The columns this person has switched off.
+         *
+         * Filtered against columns() on the way out, so a key left behind by an
+         * older version cannot hide a column that no longer answers to it.
+         *
+         * @return array<int,string>
+         */
+        public static function hidden_columns() {
+                $saved = get_user_meta( get_current_user_id(), self::HIDDEN_COLUMNS_META, true );
+                if ( ! is_array( $saved ) ) {
+                        return array();
+                }
+                return array_values( array_intersect( $saved, array_keys( self::columns() ) ) );
+        }
         private const SLUG = self::MENU_SLUG;
 …
         public function add_menu() {
                 $this->hook_suffix = add_menu_page(
                         __( 'Techwave Form Sync for Zoho', 'techwave-form-sync-for-zoho' ),
+                        __( 'FormBridge for Zoho', 'techwave-form-sync-for-zoho' ),
                         // Shortened for the sidebar only. The full name is the page title
                         // above; once the icon and padding are taken out, a WordPress menu
                         // label has room for about fourteen characters before it wraps onto
                         // a second line — "Techwave Form Sync" did, and sat two lines tall
+                        // a second line — "FormBridge for Zoho" did, and sat two lines tall
                         // next to single-line neighbours like "WPForms". Every in-product
                         // reference to the menu ("Techwave Sync → Forms") uses this same
+                        // reference to the menu ("FormBridge → All Feeds") uses this same
                         // shortened form, so what the docs say to click matches what is on
                         // screen.
                         __( 'Techwave Sync', 'techwave-form-sync-for-zoho' ),
+                        self::menu_title(),
                         self::CAP,
                         self::SLUG,
 …
                 // WordPress auto-creates a first submenu duplicating the parent as soon
                 // as any submenu is added, and labels it with the parent's menu title —
                 // leaving a meaningless "Techwave Sync > Techwave Sync" entry in the
+                // leaving a meaningless "FormBridge > FormBridge" entry in the
                 // sidebar.
                 // Registering it explicitly against the same slug replaces that
 …
                 add_submenu_page(
                         self::SLUG,
                         __( 'Forms', 'techwave-form-sync-for-zoho' ),
                         __( 'Forms', 'techwave-form-sync-for-zoho' ),
+                        __( 'All Feeds', 'techwave-form-sync-for-zoho' ),
+                        __( 'All Feeds', 'techwave-form-sync-for-zoho' ),
                         self::CAP,
                         self::SLUG,
 …
         /**
+         * The sidebar label for the top-level menu.
+         *
+         * Filterable so an add-on can say which edition is installed — the
+         * companion Pro plugin renames this to "FormBridge Pro" — without the two
+         * plugins each registering a menu and the site ending up with both.
+         *
+         * Keep any replacement to roughly fourteen characters. Once the icon and
+         * padding are taken out that is all a WordPress menu label has room for
+         * before it wraps onto a second line and sits two lines tall next to
+         * single-line neighbours like "WPForms". A longer label is not rejected
+         * here — a filter that silently discarded what it was given would be
+         * worse — but it will look wrong.
+         *
+         * @return string
+         */
+        private static function menu_title() {
+                $default = __( 'FormBridge', 'techwave-form-sync-for-zoho' );
+                /**
+                 * Filter the plugin's top-level admin menu label.
+                 *
+                 * @param string $title The label. Around fourteen characters fits.
+                 */
+                $title = apply_filters( 'form2zoho_menu_title', $default );
+                // An empty label is an invisible menu item: the entry is still there
+                // and still clickable, but there is nothing to read or aim at. Falling
+                // back is the only outcome that leaves the site usable.
+                return is_string( $title ) && '' !== trim( $title ) ? $title : $default;
+        }
+        /**
          * Menu icon as an inline SVG data URI.
+         *
+         * Previously 'dashicons-update' — the circular-arrows mark WordPress uses
+         * for its own Updates screen, so in the sidebar it read as "something
+         * needs updating" rather than as this plugin. An inline SVG also costs no
+         * extra HTTP request.
+         *
+         * fill="black" is deliberate: WordPress only recolours a data-URI menu
+         * icon to match the active admin colour scheme when the source is a flat
+         * single colour.
+         * The plugin's own glyph rather than a dashicon, so the menu entry reads
+         * as this plugin. It costs no extra request either, being inline.
+         *
+         * fill on the <svg> and nowhere else, which is the part that matters.
+         * WordPress hands a base64 icon to CSS as a background-image (see
+         * menu-header.php) and then wp-admin/js/svg-painter.js decodes it on
+         * DOMReady and rewrites every `fill="..."` to the active colour scheme's
+         * icon colour. One fill on the wrapper is therefore the one thing it
+         * changes, and the glyph follows the scheme on all nine of them — which
+         * is why the value below is only what shows if that script never runs.
+         *
+         * What the same script does to anything else is why two hand-drawn
+         * replacements for this icon had to be reverted: it rewrites `fill="none"`
+         * as well, so an outline comes back filled solid, and it leaves `stroke`
+         * alone, so a stroked shape keeps this file's colour while everything
+         * around it follows the scheme.
+         *
          * @return string
          */
         private static function menu_icon() {
+                $svg = '<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 20 20" fill="black">'
+                        . '<path d="M3 4.5A1.5 1.5 0 0 1 4.5 3h4a1.5 1.5 0 0 1 0 3h-4A1.5 1.5 0 0 1 3 4.5Z"/>'
+                        . '<path d="M3 10a1.5 1.5 0 0 1 1.5-1.5h3a1.5 1.5 0 0 1 0 3h-3A1.5 1.5 0 0 1 3 10Z"/>'
+                        . '<path d="M3 15.5A1.5 1.5 0 0 1 4.5 14h4a1.5 1.5 0 0 1 0 3h-4A1.5 1.5 0 0 1 3 15.5Z"/>'
+                        . '<path d="M12.4 5.3a1.2 1.2 0 0 1 1.7 0l3.6 3.85a1.2 1.2 0 0 1 0 1.7l-3.6 3.85a1.2 1.2 0 1 1-1.75-1.64L14 11.2h-2.3a1.2 1.2 0 1 1 0-2.4H14l-1.65-1.86a1.2 1.2 0 0 1 .05-1.64Z"/>'
+                // Same fill core declares for its own menu icons, as the plain
+                // fallback beside its rgba() value.
+                $svg = '<svg xmlns="http://www.w3.org/2000/svg" viewBox="' . Branding::MENU_VIEWBOX . '" fill="#a7aaad">'
+                        . Branding::menu_mark()
                         . '</svg>';
 …
                 $needs_org = array();
                 $dept_apps = array();
+                // Destinations that are reached without a Zoho account. The editor
+                // hides the account picker for these and stops treating an empty one
+                // as a reason not to load the rest of the step.
+                $no_conn_apps = array();
                 foreach ( $this->registry->all() as $id => $integration ) {
                         $needs_org[ $id ] = (bool) $integration->needs_organization();
                         if ( method_exists( $integration, 'get_departments' ) ) {
                                 $dept_apps[] = $id;
+                        }
+                        if ( method_exists( $integration, 'needs_connection' ) && ! $integration->needs_connection() ) {
+                                $no_conn_apps[] = $id;
+                        }
+                }
 …
                                 'ajaxUrl'        => admin_url( 'admin-ajax.php' ),
                                 'nonce'          => wp_create_nonce( 'form2zoho_ajax' ),
+                                // The triggers that are form plugins. Any other is an event,
+                                // and step two words its picker that way.
+                                'formSources'    => FormSources::form_keys(),
                                 'needsOrg'       => $needs_org,
                                 'deptApps'       => $dept_apps,
+                                'noConnApps'     => $no_conn_apps,
                                 'connectionApps' => $conn_apps,
                                 'appLabels'      => $app_labels,
+                                'connectionsUrl' => admin_url( 'admin.php?page=form2zoho' ),
+                                'connectionsUrl' => admin_url( 'admin.php?page=' . SettingsPage::SLUG ),
+                                // Keyed by source, so the Details step's guide can follow a
+                                // trigger changed without a page load.
+                                'triggerDocs'    => self::trigger_docs_for_js(),
+                                // The same, for the Zoho app picker on the destination step.
+                                'appDocs'        => $this->app_docs_for_js(),
                                 'i18n'           => array(
                                         'loading'                  => __( 'Loading…', 'techwave-form-sync-for-zoho' ),
+                                        /* translators: %s: link text, e.g. "Contact Form 7 guide". */
+                                        'docsNewTab'               => __( '%s (opens in a new tab)', 'techwave-form-sync-for-zoho' ),
                                         'viewInZoho'               => __( 'View Record in Zoho', 'techwave-form-sync-for-zoho' ),
                                         'recordId'                 => __( 'Record ID', 'techwave-form-sync-for-zoho' ),
                                         'error'                    => __( 'Request failed.', 'techwave-form-sync-for-zoho' ),
                                         'statusChanged'            => __( 'Status changed successfully', 'techwave-form-sync-for-zoho' ),
+                                        'selectForm'               => __( '— Select a form —', 'techwave-form-sync-for-zoho' ),
+                                        'selectOrg'                => __( '— Select organization —', 'techwave-form-sync-for-zoho' ),
+                                        'selectMod'                => __( '— Select module —', 'techwave-form-sync-for-zoho' ),
+                                        'selectDept'               => __( '— Select department —', 'techwave-form-sync-for-zoho' ),
+                                        'selectZoho'               => __( '— Select Zoho field —', 'techwave-form-sync-for-zoho' ),
+                                        'selectField'              => __( '— Select form field —', 'techwave-form-sync-for-zoho' ),
+                                        'selectForm'               => __( 'Select a form', 'techwave-form-sync-for-zoho' ),
+                                        'selectEvent'              => __( 'Select an event', 'techwave-form-sync-for-zoho' ),
+                                        'formLabel'                => __( 'Form', 'techwave-form-sync-for-zoho' ),
+                                        'eventLabel'               => __( 'Event', 'techwave-form-sync-for-zoho' ),
+                                        'reloadForms'              => __( 'Reload forms', 'techwave-form-sync-for-zoho' ),
+                                        'reloadEvents'             => __( 'Reload events', 'techwave-form-sync-for-zoho' ),
+                                        'detailsForm'              => __( 'Give the feed a name you will recognise later, and pick the form it listens to.', 'techwave-form-sync-for-zoho' ),
+                                        'detailsEvent'             => __( 'Give the feed a name you will recognise later, and pick the event it listens to.', 'techwave-form-sync-for-zoho' ),
+                                        'eventHelp'                => __( 'Pick the event that sends a record to Zoho.', 'techwave-form-sync-for-zoho' ),
+                                        'eventStale'               => __( 'This event could not be found in the current list. Please pick the event again and save, or nothing will ever match.', 'techwave-form-sync-for-zoho' ),
+                                        'selectOrg'                => __( 'Select organization', 'techwave-form-sync-for-zoho' ),
+                                        'selectMod'                => __( 'Select module', 'techwave-form-sync-for-zoho' ),
+                                        'selectDept'               => __( 'Select department', 'techwave-form-sync-for-zoho' ),
+                                        'selectZoho'               => __( 'Select Zoho field', 'techwave-form-sync-for-zoho' ),
+                                        'selectField'              => __( 'Select form field', 'techwave-form-sync-for-zoho' ),
+                                        // The searchable field pickers in the mapping table.
+                                        'comboSearch'              => __( 'Type to search', 'techwave-form-sync-for-zoho' ),
+                                        'comboNoMatch'             => __( 'No field matches', 'techwave-form-sync-for-zoho' ),
+                                        /* translators: shown in the mapping row's text box when the row combines several form fields. */
+                                        'templateHint'             => __( 'e.g. {first-name} {last-name}. Pick a form field to insert one', 'techwave-form-sync-for-zoho' ),
+                                        /* translators: %d: number of matching fields. */
+                                        'comboCount'               => __( '%d fields match', 'techwave-form-sync-for-zoho' ),
                                         'mailingList'              => __( 'Mailing List', 'techwave-form-sync-for-zoho' ),
                                         'mailingListHelp'          => __( 'Loaded from Zoho once the account is chosen.', 'techwave-form-sync-for-zoho' ),
                                         'moduleResource'           => __( 'Module / resource', 'techwave-form-sync-for-zoho' ),
+                                        'moduleResource'           => __( 'Module', 'techwave-form-sync-for-zoho' ),
                                         'moduleHelp'               => __( 'Loaded from Zoho once the app and account are chosen.', 'techwave-form-sync-for-zoho' ),
                                         'noMailingListsCampaigns'  => __( 'No Mailing Lists found in Zoho Campaigns.', 'techwave-form-sync-for-zoho' ),
 …
                                         'noMatches'                => __( 'No matches', 'techwave-form-sync-for-zoho' ),
                                         /* translators: %s: the stale saved value that no longer matches anything Zoho returned. */
+                                        'staleValueLabel'          => __( '%s (not found — please reselect)', 'techwave-form-sync-for-zoho' ),
+                                        'staleValueLabel'          => __( '%s (not found, please reselect)', 'techwave-form-sync-for-zoho' ),
+                                        /* translators: %s: Zoho app name. */
+                                        'appNotPermitted'          => __( '%s (not authorised for this account)', 'techwave-form-sync-for-zoho' ),
                                         'testConfirm'              => __( 'Send one real test record to Zoho now?', 'techwave-form-sync-for-zoho' ),
                                         'testSuccess'              => __( 'Test successful', 'techwave-form-sync-for-zoho' ),
 …
                                         'formStale'                => __( 'This form could not be found in the current list. Please pick the form again and save, or submissions will never match.', 'techwave-form-sync-for-zoho' ),
                                         'cf7Unavailable'           => __( 'Contact Form 7 is not active on this site.', 'techwave-form-sync-for-zoho' ),
+                                        /* translators: %s: form plugin name, e.g. "Contact Form 7". */
+                                        'notInstalled'             => __( '%s is not installed or activated.', 'techwave-form-sync-for-zoho' ),
                                         /* translators: %s: comma-separated list of required Zoho field names that are still unmapped. */
                                         'missingRequired'          => __( 'These required Zoho fields are not mapped yet: %s. Map them (or set a static value) before saving.', 'techwave-form-sync-for-zoho' ),
                                         'missingRequiredTitle'     => __( 'Missing required fields', 'techwave-form-sync-for-zoho' ),
                                         /* translators: %s: comma-separated list of Zoho field names whose mapping row is unfinished. */
                                         'incompleteRows'           => __( 'These rows name a Zoho field but have nothing to send: %s. Pick a form field or type a static value, or remove the row — otherwise it will not be saved.', 'techwave-form-sync-for-zoho' ),
+                                        'incompleteRows'           => __( 'These rows name a Zoho field but have nothing to send: %s. Pick a form field or type a static value, or remove the row. Otherwise it will not be saved.', 'techwave-form-sync-for-zoho' ),
                                         'incompleteRowsTitle'      => __( 'Unfinished mapping rows', 'techwave-form-sync-for-zoho' ),
+                                        'blankRows'                => __( 'Every mapping row needs a Zoho field. The highlighted rows have none — pick a Zoho field for each, or remove the row.', 'techwave-form-sync-for-zoho' ),
+                                        'mappingReset'             => __( 'The field mapping was cleared because the Zoho app, account or module changed — the previous fields belong to the target you just switched away from. Please map the fields again.', 'techwave-form-sync-for-zoho' ),
+                                        'blankRows'                => __( 'Every mapping row needs a Zoho field. The highlighted rows have none. Pick a Zoho field for each, or remove the row.', 'techwave-form-sync-for-zoho' ),
+                                        'creatingFeed'             => __( 'Creating feed…', 'techwave-form-sync-for-zoho' ),
+                                        'savingFeed'               => __( 'Saving feed…', 'techwave-form-sync-for-zoho' ),
+                                        /* translators: %s: a form field's label. */
+                                        'removeTemplateField'      => __( 'Remove %s', 'techwave-form-sync-for-zoho' ),
+                                        'tryAgain'                 => __( 'Try again', 'techwave-form-sync-for-zoho' ),
+                                        /* translators: 1: Zoho module name, e.g. "Leads". 2: Zoho app name, e.g. "Zoho CRM". */
+                                        'loadingFieldsOf'          => __( 'Fetching %1$s fields from %2$s…', 'techwave-form-sync-for-zoho' ),
+                                        /* translators: %s: Zoho app name, e.g. "Zoho Campaigns". */
+                                        'loadingFieldsFrom'        => __( 'Fetching fields from %s…', 'techwave-form-sync-for-zoho' ),
+                                        'staticInvalidTitle'       => __( 'Static values Zoho will not accept', 'techwave-form-sync-for-zoho' ),
+                                        'requiredRow'              => __( 'Required', 'techwave-form-sync-for-zoho' ),
+                                        'requiredRowHint'          => __( 'Zoho needs this field on every record, so this row cannot be removed or pointed at another field.', 'techwave-form-sync-for-zoho' ),
+                                        /* translators: %s: Zoho field name, e.g. "Phone". */
+                                        'staticPhone'              => __( '%s needs a phone number: digits, spaces and + - ( ) only.', 'techwave-form-sync-for-zoho' ),
+                                        /* translators: %s: Zoho field name, e.g. "Email". */
+                                        'staticEmail'              => __( '%s needs an email address, such as name@example.com.', 'techwave-form-sync-for-zoho' ),
+                                        /* translators: %s: Zoho field name, e.g. "No. of Employees". */
+                                        'staticInteger'            => __( '%s needs a whole number.', 'techwave-form-sync-for-zoho' ),
+                                        /* translators: %s: Zoho field name, e.g. "Annual Revenue". */
+                                        'staticDecimal'            => __( '%s needs a number, such as 12.50.', 'techwave-form-sync-for-zoho' ),
+                                        /* translators: %s: Zoho field name, e.g. "Date of Birth". */
+                                        'staticDate'               => __( '%s needs a date written as YYYY-MM-DD.', 'techwave-form-sync-for-zoho' ),
+                                        /* translators: %s: Zoho field name, e.g. "Follow-up Time". */
+                                        'staticDatetime'           => __( '%s needs a date and time written as YYYY-MM-DDTHH:MM:SS.', 'techwave-form-sync-for-zoho' ),
+                                        /* translators: %s: Zoho field name, e.g. "Website". */
+                                        'staticUrl'                => __( '%s needs a web address, such as https://example.com.', 'techwave-form-sync-for-zoho' ),
+                                        'mappingReset'             => __( 'The field mapping was cleared because the Zoho app, account or module changed. The previous fields belong to the target you just switched away from. Please map the fields again.', 'techwave-form-sync-for-zoho' ),
                                         /* translators: 1: currently authorized app(s), 2: app the person just picked. */
                                         'appNotAuthorized'         => __( 'This account is only authorized for %1$s. You need to re-authorize it for %2$s before you can fetch this data.', 'techwave-form-sync-for-zoho' ),
 …
                         'statusInfo'            => __( 'Info', 'techwave-form-sync-for-zoho' ),
                         'statusSuppressed'      => __( 'Suppressed', 'techwave-form-sync-for-zoho' ),
+                        'statusSkipped'         => __( 'Skipped', 'techwave-form-sync-for-zoho' ),
                         'details'               => __( 'Details', 'techwave-form-sync-for-zoho' ),
                         'copy'                  => __( 'Copy', 'techwave-form-sync-for-zoho' ),
 …
                         /* translators: %d: number of log entries. */
                         'logsResendMany'        => __( 'Resend %d selected entries to Zoho now?', 'techwave-form-sync-for-zoho' ),
                         'logsResubmittedOne'    => __( 'Entry resubmitted — check the log for the result.', 'techwave-form-sync-for-zoho' ),
+                        'logsResubmittedOne'    => __( 'Entry resubmitted. Check the log for the result.', 'techwave-form-sync-for-zoho' ),
                         /* translators: %d: number of log entries. */
                         'logsResubmittedMany'   => __( '%d entries resubmitted — check the log for the result.', 'techwave-form-sync-for-zoho' ),
+                        'logsResubmittedMany'   => __( '%d entries resubmitted. Check the log for the result.', 'techwave-form-sync-for-zoho' ),
                         'logsNothingToResubmit' => __( 'Nothing to resubmit.', 'techwave-form-sync-for-zoho' ),
                         'logsResubmitFailed'    => __( 'Could not resubmit the selected entries.', 'techwave-form-sync-for-zoho' ),
+                        /* translators: 1: current page number, 2: total pages, 3: total number of log entries. Kept in step with SettingsPage::logs_page_info(), which renders the same line on page load; this copy is only redrawn when live polling grows the count, so it never has to say "1 entry". */
+                        'logsPageInfo'          => __( 'Page %1$s of %2$s · %3$s entries', 'techwave-form-sync-for-zoho' ),
                 );
+        }
 …
                 if ( 'edit' === $action || 'new' === $action ) {
+                        // Same dark hero masthead as the feeds list ("home") screen, so
+                        // both pages look like one product.
+                        echo '<div class="form2zoho-hero">';
+                        echo '<span class="form2zoho-hero-logo"><span class="form2zoho-hero-logo-icon">' . esc_html__( 'TFS', 'techwave-form-sync-for-zoho' ) . '</span>' . esc_html__( 'Techwave Form Sync for Zoho', 'techwave-form-sync-for-zoho' ) . '</span>';
+                        echo '</div>';
+                        // The same masthead as the feeds list ("home") screen, so both
+                        // pages look like one product.
+                        HeaderNav::render( 'integrations' );
                         echo '<hr class="wp-header-end" />';
                         $this->render_editor();
                 } else {
+                        // Feeds list ("home") screen: dark hero bar with the plugin logo
+                        // on the left, matching the requested reference design. The
+                        // white feeds card is rendered by render_list() and overlaps
+                        // the bottom of this bar via CSS only.
+                        echo '<div class="form2zoho-hero">';
+                        echo '<span class="form2zoho-hero-logo"><span class="form2zoho-hero-logo-icon">' . esc_html__( 'TFS', 'techwave-form-sync-for-zoho' ) . '</span>' . esc_html__( 'Techwave Form Sync for Zoho', 'techwave-form-sync-for-zoho' ) . '</span>';
+                        echo '</div>';
+                        // Feeds list ("home") screen. The card below is rendered by
+                        // render_list(); the masthead only introduces the product.
+                        HeaderNav::render( 'integrations' );
                         echo '<hr class="wp-header-end" />';
                         $this->render_list();
 …
          */
         private function render_list() {
+                // Read once for the whole screen: the toggle menu, the header row and
+                // every body row all draw from it.
+                $hidden_cols = self::hidden_columns();
                 $new_url = add_query_arg(
                         array(
 …
                 $this->maybe_notice();
                 // Newest feeds first. Sort by created_at when present (falls back to
                 // reversing insertion order for legacy feeds saved before created_at
                 // existed), so a freshly added feed always lands at the top.
+                // Newest feeds first, by creation time (see SiteTime::feed_timestamp()
+                // for feeds saved before it was kept in UTC), so a freshly added feed
+                // always lands at the top.
                 $feeds = $this->feeds->all();
                 uasort(
                         $feeds,
                         function ( $a, $b ) {
                                 $at = isset( $a['created_at'] ) ? strtotime( (string) $a['created_at'] ) : 0;
                                 $bt = isset( $b['created_at'] ) ? strtotime( (string) $b['created_at'] ) : 0;
+                                $at = SiteTime::feed_timestamp( (array) $a );
+                                $bt = SiteTime::feed_timestamp( (array) $b );
                                 if ( $at === $bt ) {
                                         return 0;
 …
                         echo '<span>' . esc_html__( 'Add New Feed', 'techwave-form-sync-for-zoho' ) . '</span>';
                         echo '</a>';
+                        // The whole job, start to finish. Offered here and on the
+                        // Connections zero state and nowhere else: this is the one moment
+                        // somebody has nothing set up and no picture of what setting it up
+                        // involves, which is the only question a full walkthrough answers
+                        // better than a page about one step.
+                        VideoGuide::render( 'setup', __( 'Watch the full setup', 'techwave-form-sync-for-zoho' ) );
                         echo '</div>';
                         echo '</div>'; // Close .form2zoho-card-pop.
 …
                 echo '<select class="form2zoho-app-filter" data-base="' . esc_url( $base ) . '">';
                 echo '<option value="">' . esc_html__( 'All apps', 'techwave-form-sync-for-zoho' ) . '</option>';
+                echo '<option value="">' . esc_html__( 'All Apps', 'techwave-form-sync-for-zoho' ) . '</option>';
                 foreach ( $labels as $key => $label ) {
                         echo '<option value="' . esc_attr( $key ) . '" ' . selected( $app_filter, $key, false ) . '>' . esc_html( $label ) . '</option>';
 …
                 echo '</button>';
                 echo '<div class="form2zoho-colvis-menu" hidden>';
+                $columns = array(
+                        'trigger' => __( 'Feed Name', 'techwave-form-sync-for-zoho' ),
+                        'source'  => __( 'Trigger', 'techwave-form-sync-for-zoho' ),
+                        'action'  => __( 'Action Name', 'techwave-form-sync-for-zoho' ),
+                        'created' => __( 'Created At', 'techwave-form-sync-for-zoho' ),
+                        'status'  => __( 'Status', 'techwave-form-sync-for-zoho' ),
+                );
+                foreach ( $columns as $key => $label ) {
+                        echo '<label class="form2zoho-colvis-item"><input type="checkbox" class="form2zoho-colvis-input" data-col="' . esc_attr( $key ) . '" checked /> ' . esc_html( $label ) . '</label>';
+                foreach ( self::columns() as $key => $label ) {
+                        echo '<label class="form2zoho-colvis-item"><input type="checkbox" class="form2zoho-colvis-input" data-col="' . esc_attr( $key ) . '" ' . checked( ! in_array( $key, $hidden_cols, true ), true, false ) . ' /> ' . esc_html( $label ) . '</label>';
+                }
                 echo '</div>';
 …
                 echo '<thead><tr>';
                 echo '<th scope="col" class="form2zoho-check-col"><span class="form2zoho-check-wrap"><label class="screen-reader-text" for="form2zoho-select-all-feeds">' . esc_html__( 'Select all feeds', 'techwave-form-sync-for-zoho' ) . '</label><input type="checkbox" id="form2zoho-select-all-feeds" class="form2zoho-select-all" /></span></th>';
                 echo '<th scope="col" data-col="trigger">' . esc_html__( 'Feed Name', 'techwave-form-sync-for-zoho' ) . '</th>';
                 echo '<th scope="col" data-col="source">' . esc_html__( 'Trigger', 'techwave-form-sync-for-zoho' ) . '</th>';
                 echo '<th scope="col" data-col="action">' . esc_html__( 'Action Name', 'techwave-form-sync-for-zoho' ) . '</th>';
                 echo '<th scope="col" data-col="created">' . esc_html__( 'Created At', 'techwave-form-sync-for-zoho' ) . '</th>';
                 echo '<th scope="col" data-col="status">' . esc_html__( 'Status', 'techwave-form-sync-for-zoho' ) . '</th>';
+                echo '<th scope="col" data-col="trigger" class="' . esc_attr( self::col_class( 'trigger', $hidden_cols ) ) . '">' . esc_html__( 'Feed Name', 'techwave-form-sync-for-zoho' ) . '</th>';
+                echo '<th scope="col" data-col="source" class="' . esc_attr( self::col_class( 'source', $hidden_cols ) ) . '">' . esc_html__( 'Trigger', 'techwave-form-sync-for-zoho' ) . '</th>';
+                echo '<th scope="col" data-col="action" class="' . esc_attr( self::col_class( 'action', $hidden_cols ) ) . '">' . esc_html__( 'Action Name', 'techwave-form-sync-for-zoho' ) . '</th>';
+                echo '<th scope="col" data-col="created" class="' . esc_attr( self::col_class( 'created', $hidden_cols ) ) . '">' . esc_html__( 'Created At', 'techwave-form-sync-for-zoho' ) . '</th>';
+                echo '<th scope="col" data-col="status" class="' . esc_attr( self::col_class( 'status', $hidden_cols ) ) . '">' . esc_html__( 'Status', 'techwave-form-sync-for-zoho' ) . '</th>';
                 echo '<th scope="col" class="form2zoho-actions-col">' . esc_html__( 'Actions', 'techwave-form-sync-for-zoho' ) . '</th>';
                 echo '</tr></thead><tbody>';
 …
                         $app     = isset( $labels[ $feed['integration'] ] ) ? $labels[ $feed['integration'] ] : $feed['integration'];
+                        $created = ! empty( $feed['created_at'] ) ? mysql2date( 'Y-m-d H:i:s', $feed['created_at'] ) : '—';
+                        // On the site's clock, in the timezone from Settings > General.
+                        $created = SiteTime::feed_created( $feed );
+                        $created = '' !== $created ? $created : '-';
                         $is_on   = ! empty( $feed['enabled'] );
                         // Prefer the saved human-readable module label (e.g. the mailing
 …
                                 $module_disp = substr( $module_disp, 0, 10 ) . '…';
+                        }
                         $action_nm = trim( $app . ( '' !== $module_disp ? ' — ' . $module_disp : '' ) );
+                        $action_nm = trim( $app . ( '' !== $module_disp ? ' - ' . $module_disp : '' ) );
                         echo '<tr data-feed-id="' . esc_attr( $feed['id'] ) . '" data-integration="' . esc_attr( $feed['integration'] ) . '">';
 …
                         $tile = FormSources::tile_for( isset( $feed['form_type'] ) ? (string) $feed['form_type'] : 'elementor' );
+                        echo '<td data-col="trigger"><strong>' . esc_html( $feed['title'] ? $feed['title'] : __( 'Untitled feed', 'techwave-form-sync-for-zoho' ) ) . '</strong></td>';
+                        echo '<td data-col="source"><span class="form2zoho-trigger-chip">';
+                        // The name and the trigger both open the feed, the same page the
+                        // row menu's Edit goes to.
+                        echo '<td data-col="trigger" class="' . esc_attr( self::col_class( 'trigger', $hidden_cols ) ) . '"><a class="form2zoho-row-open" href="' . esc_url( $edit ) . '"><strong>' . esc_html( $feed['title'] ? $feed['title'] : __( 'Untitled feed', 'techwave-form-sync-for-zoho' ) ) . '</strong></a></td>';
+                        echo '<td data-col="source" class="' . esc_attr( self::col_class( 'source', $hidden_cols ) ) . '"><a class="form2zoho-row-open" href="' . esc_url( $edit ) . '"><span class="form2zoho-trigger-chip">';
                         echo esc_html( $tile['label'] );
                         echo '</span><br/><span class="form2zoho-subtle">' . esc_html( $feed['form_name'] ) . '</span></td>';
                         echo '<td data-col="action">' . esc_html( $action_nm ) . '</td>';
                         echo '<td data-col="created">' . esc_html( $created ) . '</td>';
                         echo '<td data-col="status">';
+                        echo '</span><br/><span class="form2zoho-subtle">' . esc_html( $feed['form_name'] ) . '</span></a></td>';
+                        echo '<td data-col="action" class="' . esc_attr( self::col_class( 'action', $hidden_cols ) ) . '">' . esc_html( $action_nm ) . '</td>';
+                        echo '<td data-col="created" class="' . esc_attr( self::col_class( 'created', $hidden_cols ) ) . '">' . esc_html( $created ) . '</td>';
+                        echo '<td data-col="status" class="' . esc_attr( self::col_class( 'status', $hidden_cols ) ) . '">';
                         echo '<label class="form2zoho-switch">';
                         printf(
 …
                         echo '<svg class="form2zoho-menu-icon" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M11 4H4a2 2 0 0 0-2 2v14a2 2 0 0 0 2 2h14a2 2 0 0 0 2-2v-7"/><path d="M18.5 2.5a2.121 2.121 0 0 1 3 3L12 15l-4 1 1-4 9.5-9.5Z"/></svg>';
                         echo '<span>' . esc_html__( 'Edit', 'techwave-form-sync-for-zoho' ) . '</span></a>';
+                        // The same test as the editor's "Send test record", from the list.
+                        echo '<button type="button" class="form2zoho-menu-item form2zoho-action-test" data-feed-id="' . esc_attr( $feed['id'] ) . '">';
+                        echo '<svg class="form2zoho-menu-icon" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><line x1="22" y1="2" x2="11" y2="13"/><polygon points="22 2 15 22 11 13 2 9 22 2"/></svg>';
+                        echo '<span>' . esc_html__( 'Send test record', 'techwave-form-sync-for-zoho' ) . '</span></button>';
                         echo '<button type="button" class="form2zoho-menu-item form2zoho-action-clone" data-feed-id="' . esc_attr( $feed['id'] ) . '">';
 …
                 $feed = is_array( $feed ) ? $feed : array();
+                $title     = isset( $feed['title'] ) ? $feed['title'] : '';
+                $enabled   = isset( $feed['enabled'] ) ? (bool) $feed['enabled'] : true;
+                $form      = isset( $feed['form_name'] ) ? $feed['form_name'] : '';
+                $form_type = isset( $feed['form_type'] ) && '' !== $feed['form_type'] ? $feed['form_type'] : 'elementor';
+                $title = isset( $feed['title'] ) ? $feed['title'] : '';
+                $form  = isset( $feed['form_name'] ) ? $feed['form_name'] : '';
+                // Empty for a new feed: nothing is chosen until someone chooses it, and
+                // a tile showing a green tick before the question has been answered is
+                // a wrong answer already given. An existing feed keeps what it stored,
+                // and one saved before form_type existed still means Elementor — the
+                // only source there was then. See FeedsRepository::for_form().
+                $form_type = isset( $feed['form_type'] ) && '' !== $feed['form_type']
+                        ? $feed['form_type']
+                        : ( $id ? 'elementor' : '' );
                 $intgr     = isset( $feed['integration'] ) ? $feed['integration'] : 'crm';
                 $conn      = isset( $feed['connection_id'] ) ? $feed['connection_id'] : '';
 …
                 $mapping   = isset( $feed['mapping'] ) && is_array( $feed['mapping'] ) ? $feed['mapping'] : array();
+                // A saved feed's trigger cannot be changed. The form it listens to, the
+                // fields that form has and every mapping row were chosen for that
+                // trigger, and none of them would mean anything under another one.
+                $trigger_locked = ! empty( $feed );
                 $list_url = add_query_arg( array( 'page' => self::SLUG ), admin_url( 'admin.php' ) );
                 echo '<div class="form2zoho-editor-pop">';
+                echo '<div class="form2zoho-editor-pop form2zoho-wizard">';
                 echo '<div class="form2zoho-editor-wrap">';
                 echo '<a href="' . esc_url( $list_url ) . '" class="form2zoho-back-link">';
 …
                 echo '</a>';
+                echo '<h1>' . ( $id ? esc_html__( 'Edit feed', 'techwave-form-sync-for-zoho' ) : esc_html__( 'Add feed', 'techwave-form-sync-for-zoho' ) ) . '</h1>';
+                $conn_choices = $this->connections->choices();
+                // Only accounts that finished authorising. A draft — details saved, Zoho's
+                // consent screen never completed — cannot deliver a record, so offering
+                // it only let a feed be pointed at an account that would fail every
+                // submission.
+                $conn_choices = $this->connections->authorised_choices();
                 if ( empty( $conn_choices ) ) {
                         $this->render_alert(
 …
                                         /* translators: %s: link to the Connections tab. */
                                         __( 'No Zoho accounts connected yet. Connect one under %s first.', 'techwave-form-sync-for-zoho' ),
                                         '<a href="' . esc_url( admin_url( 'admin.php?page=form2zoho' ) ) . '">' . esc_html__( 'Techwave Sync → Connections', 'techwave-form-sync-for-zoho' ) . '</a>'
+                                        '<a href="' . esc_url( admin_url( 'admin.php?page=' . SettingsPage::SLUG ) ) . '">' . esc_html__( 'FormBridge → Connections', 'techwave-form-sync-for-zoho' ) . '</a>'
+                                )
+                        );
+                }
+                // A saved feed keeps the account it names even when that account is no
+                // longer authorised, so opening the feed does not silently repoint it.
+                // Labelled, so the reason it needs attention is on screen.
+                $saved_conn = '' !== (string) $conn ? $this->connections->get( (string) $conn ) : null;
+                if ( null !== $saved_conn && ! isset( $conn_choices[ $conn ] ) ) {
+                        $conn_choices[ $conn ] = sprintf(
+                                /* translators: %s: connected account name. */
+                                __( '%s (not authorised)', 'techwave-form-sync-for-zoho' ),
+                                isset( $saved_conn['label'] ) ? $saved_conn['label'] : $conn
                         );
+                }
 …
                 );
                 echo '<form method="post" action="' . esc_url( admin_url( 'admin-post.php' ) ) . '" class="form2zoho-form" id="f2z-feed-editor" data-feed="' . esc_attr( $feed_js ) . '">';
+                echo '<form method="post" action="' . esc_url( admin_url( 'admin-post.php' ) ) . '" class="form2zoho-form" id="f2z-feed-editor" data-feed="' . esc_attr( $feed_js ) . '"' . ( $trigger_locked ? ' data-trigger-locked="1"' : '' ) . '>';
                 wp_nonce_field( 'form2zoho_save_feed' );
                 echo '<input type="hidden" name="action" value="form2zoho_save_feed" />';
                 echo '<input type="hidden" name="feed_id" value="' . esc_attr( $id ) . '" />';
                 echo '<div class="form2zoho-tabs" role="tablist">';
                 echo '<button type="button" class="form2zoho-tab-btn is-active" data-tab="general">' . esc_html__( 'General', 'techwave-form-sync-for-zoho' ) . '</button>';
                 echo '<button type="button" class="form2zoho-tab-btn" data-tab="connection">' . esc_html__( 'Zoho Connection', 'techwave-form-sync-for-zoho' ) . '</button>';
                 echo '<button type="button" class="form2zoho-tab-btn" data-tab="mapping">' . esc_html__( 'Field Mapping', 'techwave-form-sync-for-zoho' ) . '</button>';
                 echo '</div>';
+                echo '<div class="form2zoho-tab-panel is-active" data-tab-panel="general">';
                 echo '<table class="form-table" role="presentation"><tbody>';
                 // Title.
                 echo '<tr><th><label for="f2z_title">' . esc_html__( 'Feed title', 'techwave-form-sync-for-zoho' ) . '</label></th><td>';
                 echo '<input type="text" class="regular-text" id="f2z_title" name="title" value="' . esc_attr( $title ) . '" required />';
                 echo '</td></tr>';
                 // Enabled.
                 echo '<tr><th>' . esc_html__( 'Enabled', 'techwave-form-sync-for-zoho' ) . '</th><td>';
                 // Same switch component the feeds list uses for this very same
                 // property (see .form2zoho-switch in admin.css). It was a bare
                 // checkbox here, so the one setting a person flips in two places
                 // looked like two different controls. Wrapped in a <label> so the
                 // sentence beside it names the input — the row's "Enabled" heading
                 // is a <th>, which is not a label for anything.
                 echo '<label class="form2zoho-switch-field">';
                 echo '<span class="form2zoho-switch">';
+                // A new feed is given the id it will be stored under now, while the
+                // editor is drawn, so a second press of "Create feed" posts the same
+                // id and handle_save() files it on the feed the first press made.
+                if ( ! $id ) {
+                        echo '<input type="hidden" name="new_feed_id" value="' . esc_attr( $this->feeds->generate_id() ) . '" />';
+                }
+                $this->render_stepper( $trigger_locked );
+                // ---- Step 1: the trigger ----------------------------------------
+                //
+                // On its own, and first, because it decides the content of everything
+                // after it: the list of forms, the fields those forms have, and in the
+                // add-on the whole shape of the record. Asking for a feed title before
+                // this was asking someone to name something they had not chosen yet.
+                // tabindex="-1" so goToStep() can put focus on the panel. A wizard that
+                // swaps its whole content without moving focus leaves a screen-reader
+                // user reading the step they just left. The panel rather than its
+                // heading, because role="group" + aria-labelledby means focusing it
+                // announces the step's name and what is inside it — and because a
+                // focus ring drawn round a heading after a mouse click reads as a
+                // defect rather than as an indicator.
+                // Not the opening step for a saved feed: its trigger is locked, so the
+                // editor opens on step two instead and this step is never shown.
                 printf(
                         '<input type="checkbox" name="enabled" value="1" %s />',
                         checked( true, $enabled, false ) // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- checked() returns a fixed attribute string.
+                        '<section class="form2zoho-step%s" data-step="trigger" tabindex="-1" role="group" aria-labelledby="f2z-step-trigger-title">',
+                        $trigger_locked ? '' : ' is-active'
                 );
+                echo '<span class="form2zoho-switch__track" aria-hidden="true"><span class="form2zoho-switch__thumb"></span></span>';
+                echo '</span>';
+                echo '<span>' . esc_html__( 'Send submissions for this feed.', 'techwave-form-sync-for-zoho' ) . '</span>';
+                echo '</label>';
+                echo '</td></tr>';
+                // Form plugin (Elementor, Contact Form 7, WPForms, Fluent Forms, Forminator, Ninja Forms, Gravity Forms).
+                echo '<tr><th>' . esc_html__( 'Form plugin', 'techwave-form-sync-for-zoho' ) . '</th><td>';
+                echo '<div class="form2zoho-source-grid" role="radiogroup" aria-label="' . esc_attr__( 'Form plugin', 'techwave-form-sync-for-zoho' ) . '">';
+                echo '<div class="form2zoho-step-body">';
+                echo '<div class="form2zoho-step-head form2zoho-step-head--center">';
+                echo '<h2 id="f2z-step-trigger-title">' . esc_html__( 'Choose a trigger', 'techwave-form-sync-for-zoho' ) . '</h2>';
+                echo '<p class="description">' . esc_html__( 'Which form or event should send records to Zoho? Picking one moves you straight on.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                // Twenty-seven tiles is the one screen in this editor where someone
+                // can be unsure what they are even choosing between, so the guide is
+                // offered here rather than as a general "Help" on every step. The
+                // documentation is per-step; so is the link.
+                self::render_docs_link( 'trigger', __( 'Trigger guide', 'techwave-form-sync-for-zoho' ) );
+                // And the recording of the same ground. This is the step where a
+                // person is most likely to be looking at a name they do not recognise,
+                // so it is worth offering both here rather than only the page.
+                VideoGuide::render( 'triggers', __( 'Watch: every trigger', 'techwave-form-sync-for-zoho' ) );
+                echo '</div>';
+                // A filter, not a search: it hides tiles that do not match and touches
+                // nothing else. Twenty-seven tiles is more than a screen and more than
+                // anyone wants to read through, and the answer is nearly always a
+                // product whose name the person already knows.
+                //
+                // type="search" for the browser's own clear button, and a label rather
+                // than the placeholder alone — a placeholder is gone the moment
+                // anything is typed, which is exactly when a screen reader user needs
+                // to know what the box is.
+                echo '<div class="form2zoho-trigger-filter">';
+                echo '<label class="screen-reader-text" for="f2z_trigger_search">' . esc_html__( 'Search triggers', 'techwave-form-sync-for-zoho' ) . '</label>';
+                echo '<svg class="form2zoho-trigger-filter-icon" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><circle cx="11" cy="11" r="8"/><line x1="21" y1="21" x2="16.65" y2="16.65"/></svg>';
+                echo '<input type="search" id="f2z_trigger_search" class="form2zoho-trigger-search" autocomplete="off" placeholder="' . esc_attr__( 'Search triggers…', 'techwave-form-sync-for-zoho' ) . '" />';
+                echo '</div>';
+                // Elementor, Contact Form 7, WPForms, Fluent Forms, Forminator, Ninja
+                // Forms, Gravity Forms — and, with the add-on, seventeen more.
+                echo '<div class="form2zoho-source-grid" role="radiogroup" aria-label="' . esc_attr__( 'Trigger', 'techwave-form-sync-for-zoho' ) . '">';
                 foreach ( FormSources::tiles() as $tile ) {
+                        $is_active = ( $form_type === $tile['key'] );
+                        echo '<button type="button" class="form2zoho-source-tile' . ( $is_active ? ' is-active' : '' ) . '" data-source="' . esc_attr( $tile['key'] ) . '" role="radio" aria-checked="' . ( $is_active ? 'true' : 'false' ) . '">';
+                        $locked    = ! empty( $tile['locked'] );
+                        $is_active = ( ! $locked && $form_type === $tile['key'] );
+                        $classes = 'form2zoho-source-tile';
+                        if ( $is_active ) {
+                                $classes .= ' is-active';
+                        }
+                        if ( $locked ) {
+                                $classes .= ' is-locked';
+                        }
+                        // A locked tile is deliberately NOT `disabled`, and deliberately
+                        // not a radio either. It is not an option that happens to be
+                        // unavailable — it is a button that explains an add-on, and it
+                        // opens a dialog. Marking it up as a disabled radio would say
+                        // "this is a choice you cannot make" to a screen reader while
+                        // being, in fact, a working button; `aria-haspopup="dialog"` is
+                        // what it actually is. Nothing can be selected by clicking it:
+                        // the JS handler returns early on .is-locked, the hidden select
+                        // carries no option for it, and sanitize_form_type() rejects the
+                        // key even if one is posted by hand.
+                        if ( $locked ) {
+                                printf(
+                                        '<button type="button" class="%s" data-source="%s" data-pro-title="%s" data-pro-blurb="%s" data-pro-icon="%s" aria-haspopup="dialog">',
+                                        esc_attr( $classes ),
+                                        esc_attr( $tile['key'] ),
+                                        esc_attr( ProUpsell::headline( $tile['key'], $tile['label'] ) ),
+                                        esc_attr( ProUpsell::blurb( $tile['key'] ) ),
+                                        esc_url( $tile['icon'] )
+                                );
+                        } else {
+                                // data-available is what stops the next step waiting on a
+                                // round trip to learn something this page already knows.
+                                // admin-ajax boots the whole of WordPress and every active
+                                // plugin before it reaches our handler — measured at two to
+                                // four seconds on this install for a request that does no
+                                // work at all — so asking it "is this plugin running?" made
+                                // the answer arrive long after the screen that needed it.
+                                printf(
+                                        '<button type="button" class="%s" data-source="%s" data-available="%d" role="radio" aria-checked="%s">',
+                                        esc_attr( $classes ),
+                                        esc_attr( $tile['key'] ),
+                                        FormSources::is_available( $tile['key'] ) ? 1 : 0,
+                                        $is_active ? 'true' : 'false'
+                                );
+                        }
                         if ( ! empty( $tile['icon'] ) ) {
                                 echo '<span class="form2zoho-source-icon form2zoho-source-icon-img"><img src="' . esc_url( $tile['icon'] ) . '" alt="" loading="lazy" /></span>';
 …
+                        }
                         echo '<span class="form2zoho-source-label">' . esc_html( $tile['label'] ) . '</span>';
+                        if ( $locked ) {
+                                // Inside the button so it is read out with the label rather
+                                // than as a stray word after it.
+                                echo '<span class="form2zoho-source-badge">' . esc_html__( 'Pro', 'techwave-form-sync-for-zoho' ) . '</span>';
+                                // "WooCommerce Customer Pro" does not tell anyone what
+                                // pressing this does. This does, and only to a screen reader
+                                // — sighted users get the same answer from the badge plus the
+                                // dialog that opens.
+                                echo '<span class="screen-reader-text">' . esc_html__( 'Available in FormBridge Pro. Opens a dialog.', 'techwave-form-sync-for-zoho' ) . '</span>';
+                        }
                         echo '</button>';
+                }
                 echo '</div>';
                 echo '<select id="f2z_form_type" name="form_type" class="form2zoho-source-select" hidden>';
+                // A browser selects the first option of a select that has none marked,
+                // so "nothing chosen" has to be an option of its own or the hidden
+                // field would quietly post the alphabetically first source.
+                if ( '' === $form_type ) {
+                        echo '<option value="" selected></option>';
+                }
                 foreach ( FormSources::labels() as $key => $label ) {
+                        // The tiles drive this select, and a locked tile cannot be
+                        // clicked — but the select is what the form actually posts, so
+                        // leaving the option in it would let the value be set another way.
+                        if ( FormSources::is_locked( $key ) ) {
+                                continue;
+                        }
                         echo '<option value="' . esc_attr( $key ) . '" ' . selected( $form_type, $key, false ) . '>' . esc_html( $label ) . '</option>';
+                }
                 echo '</select>';
+                echo '<p class="description">' . esc_html__( 'Choose which form plugin this feed listens to.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '</td></tr>';
+                // Shown by the filter when nothing matches, so an empty grid is not
+                // left to be read as "there are no triggers".
+                echo '<p class="form2zoho-trigger-none" hidden>' . esc_html__( 'No trigger matches that search.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '</div>';
+                // No Next here on purpose: choosing a tile *is* the answer to this
+                // step, and a button beside it would be a second way to do the same
+                // thing that could be pressed without doing it at all. A saved feed
+                // never shows this step, so it needs no way past it either.
+                echo '</section>';
+                // ---- Step 2: what to call it, and which form ---------------------
+                //
+                // Opens with the trigger just chosen, drawn as a summary row rather
+                // than a second copy of the grid. The grid is not on screen any more,
+                // so without this the answer to step one is invisible from step two —
+                // and "Change" is the shortest way back to a different answer.
+                printf(
+                        '<section class="form2zoho-step%s" data-step="details" tabindex="-1" role="group" aria-labelledby="f2z-step-details-title">',
+                        $trigger_locked ? ' is-active' : ''
+                );
+                $chosen = null;
+                foreach ( FormSources::tiles() as $tile ) {
+                        if ( empty( $tile['locked'] ) && $form_type === $tile['key'] ) {
+                                $chosen = $tile;
+                                break;
+                        }
+                }
+                // A saved feed from a Pro source, opened while the add-on is off, has
+                // no selectable tile to copy. Its trigger is still the one it was saved
+                // with, so the card still names it.
+                if ( null === $chosen && $trigger_locked ) {
+                        $chosen = FormSources::tile_for( $form_type );
+                }
+                // Centred with the summary card and the fields under it. Steps one and
+                // two ask one question each and centre on the same axis; steps three
+                // and four are full-width forms and stay left-aligned. A left heading
+                // over a centred column reads as a column that failed to line up.
+                echo '<div class="form2zoho-step-head form2zoho-step-head--center">';
+                echo '<h2 id="f2z-step-details-title">' . esc_html__( 'Name this feed', 'techwave-form-sync-for-zoho' ) . '</h2>';
+                // A form plugin's trigger listens to a form; every other trigger
+                // listens to something that happens on the site. admin.js keeps the
+                // wording in step when the trigger is changed without a page load.
+                $is_event = '' !== (string) $form_type && ! FormSources::is_form( (string) $form_type );
+                echo '<p class="description form2zoho-details-help">' . esc_html( $is_event ? __( 'Give the feed a name you will recognise later, and pick the event it listens to.', 'techwave-form-sync-for-zoho' ) : __( 'Give the feed a name you will recognise later, and pick the form it listens to.', 'techwave-form-sync-for-zoho' ) ) . '</p>';
+                // The guide for the one trigger that was chosen, rather than the page
+                // listing all of them: by this step the question has stopped being
+                // "which of these?" and become "how do I wire this one up?", and the
+                // answer is a different page per form plugin.
+                self::render_trigger_docs_link( $chosen ? (string) $chosen['key'] : '' );
+                echo '</div>';
+                echo '<div class="form2zoho-chosen">';
+                echo '<div class="form2zoho-chosen-card" data-source="' . esc_attr( $chosen ? $chosen['key'] : '' ) . '">';
+                echo '<span class="form2zoho-chosen-icon">';
+                if ( $chosen && ! empty( $chosen['icon'] ) ) {
+                        echo '<img src="' . esc_url( $chosen['icon'] ) . '" alt="" />';
+                }
+                echo '</span>';
+                echo '<span class="form2zoho-chosen-text">';
+                echo '<span class="form2zoho-chosen-eyebrow">' . esc_html__( 'Trigger', 'techwave-form-sync-for-zoho' ) . '</span>';
+                echo '<span class="form2zoho-chosen-label">' . esc_html( $chosen ? $chosen['label'] : '' ) . '</span>';
+                echo '</span>';
+                if ( $trigger_locked ) {
+                        // A badge where Change would be, so the card says the trigger is
+                        // fixed rather than looking like it lost a button.
+                        echo '<span class="form2zoho-chosen-lock">';
+                        echo '<svg width="13" height="13" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.4" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="4" y="11" width="16" height="10" rx="2"/><path d="M8 11V7a4 4 0 0 1 8 0v4"/></svg>';
+                        echo '<span>' . esc_html__( 'Locked', 'techwave-form-sync-for-zoho' ) . '</span>';
+                        echo '</span>';
+                } else {
+                        // The visible word is part of the accessible name (WCAG 2.5.3), so
+                        // aria-label extends "Change" rather than replacing it with something
+                        // a speech-input user cannot say.
+                        printf(
+                                '<button type="button" class="form2zoho-chosen-clear" aria-label="%s">',
+                                esc_attr__( 'Change trigger', 'techwave-form-sync-for-zoho' )
+                        );
+                        echo '<svg width="13" height="13" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.4" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="23 4 23 10 17 10"/><path d="M20.49 15a9 9 0 1 1-2.12-9.36L23 10"/></svg>';
+                        echo '<span>' . esc_html__( 'Change', 'techwave-form-sync-for-zoho' ) . '</span>';
+                        echo '</button>';
+                }
+                echo '</div>';
+                if ( $trigger_locked ) {
+                        echo '<p class="form2zoho-chosen-note">' . esc_html( self::locked_trigger_note() ) . '</p>';
+                }
+                echo '</div>';
+                // Filled and shown by admin.js when the chosen trigger's plugin turns
+                // out not to be running. It replaces the rest of the step rather than
+                // sitting above it: there is no form list to pick from and no feed to
+                // name, so leaving those on screen would be offering work that cannot
+                // be finished.
+                echo '<p class="form2zoho-trigger-unavailable" hidden></p>';
+                echo '<div class="form2zoho-step-body">';
+                // A stacked column rather than WordPress's two-column form-table: two
+                // fields under one summary card do not need a label column, and a
+                // label sitting a third of the screen away from its field is worse the
+                // wider the panel gets.
+                echo '<div class="form2zoho-fieldset">';
+                // Title.
+                echo '<div class="form2zoho-field">';
+                echo '<label for="f2z_title">' . esc_html__( 'Feed title', 'techwave-form-sync-for-zoho' ) . ' <span class="form2zoho-req" aria-hidden="true">*</span></label>';
+                echo '<input type="text" class="form2zoho-control--full" id="f2z_title" name="title" value="' . esc_attr( $title ) . '" placeholder="' . esc_attr__( 'Contact form → Zoho CRM leads', 'techwave-form-sync-for-zoho' ) . '" required />';
+                echo '<p class="description">' . esc_html__( 'Only used inside WordPress. It is how this feed is listed here and named in the delivery log.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '</div>';
                 // Form name (dropdown of discovered forms from the chosen plugin).
+                echo '<tr id="f2z_form_row"><th><label for="f2z_form">' . esc_html__( 'Form', 'techwave-form-sync-for-zoho' ) . '</label></th><td>';
+                echo '<div class="form2zoho-field">';
+                echo '<label for="f2z_form"><span class="form2zoho-form-word">' . esc_html( $is_event ? __( 'Event', 'techwave-form-sync-for-zoho' ) : __( 'Form', 'techwave-form-sync-for-zoho' ) ) . '</span> <span class="form2zoho-req" aria-hidden="true">*</span></label>';
                 // .form2zoho-control-row keeps the select and its reload button on one
+                // line and vertically centred (see admin.css section 4.3).
+                // line and vertically centred (see admin.css section 4.3), and busy()
+                // finds the reload button through it.
                 echo '<div class="form2zoho-control-row">';
                 echo '<select id="f2z_form" name="form_name" required>';
+                echo '<select id="f2z_form" name="form_name" class="form2zoho-control--full" required>';
                 if ( '' !== $form ) {
                         echo '<option value="' . esc_attr( $form ) . '" selected>' . esc_html( $form ) . '</option>';
                 } else {
                         echo '<option value="">' . esc_html__( 'Loading forms…', 'techwave-form-sync-for-zoho' ) . '</option>';
+                        echo '<option value="">' . esc_html( $is_event ? __( 'Loading events…', 'techwave-form-sync-for-zoho' ) : __( 'Loading forms…', 'techwave-form-sync-for-zoho' ) ) . '</option>';
+                }
                 echo '</select>';
+                echo '<button type="button" class="form2zoho-reload-forms" aria-label="' . esc_attr__( 'Reload forms', 'techwave-form-sync-for-zoho' ) . '" title="' . esc_attr__( 'Reload forms', 'techwave-form-sync-for-zoho' ) . '"><svg class="form2zoho-reload-icon" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="23 4 23 10 17 10"/><polyline points="1 20 1 14 7 14"/><path d="M3.51 9a9 9 0 0 1 14.85-3.36L23 10M1 14l4.64 4.36A9 9 0 0 0 20.49 15"/></svg></button>';
+                echo '</div>';
+                echo '<p class="description form2zoho-form-help">' . esc_html__( 'Pick the form to connect. The list is read from your saved forms.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '</td></tr>';
+                echo '</tbody></table>';
+                echo '<div class="form2zoho-tab-footer">';
+                echo '<span></span>';
+                echo '<button type="button" class="button button-primary form2zoho-tab-next" data-next="connection">' . esc_html__( 'Next', 'techwave-form-sync-for-zoho' ) . ' &rsaquo;</button>';
+                echo '</div>';
+                echo '</div>';
+                echo '<div class="form2zoho-tab-panel" data-tab-panel="connection">';
+                echo '<table class="form-table" role="presentation"><tbody>';
+                // Integration.
+                echo '<tr><th><label for="f2z_intgr">' . esc_html__( 'Zoho app', 'techwave-form-sync-for-zoho' ) . '</label></th><td>';
+                echo '<select id="f2z_intgr" name="integration">';
+                foreach ( $this->registry->choices() as $key => $label ) {
+                        echo '<option value="' . esc_attr( $key ) . '" ' . selected( $intgr, $key, false ) . '>' . esc_html( $label ) . '</option>';
+                }
+                echo '</select>';
+                echo '<p class="form2zoho-app-auth-warning" hidden></p>';
+                echo '</td></tr>';
+                // Connection.
+                echo '<tr><th><label for="f2z_conn">' . esc_html__( 'Connected account', 'techwave-form-sync-for-zoho' ) . '</label></th><td>';
+                echo '<select id="f2z_conn" name="connection_id" required>';
+                echo '<option value="">' . esc_html__( '— Select —', 'techwave-form-sync-for-zoho' ) . '</option>';
+                echo '<button type="button" class="form2zoho-reload-forms" aria-label="' . esc_attr( $is_event ? __( 'Reload events', 'techwave-form-sync-for-zoho' ) : __( 'Reload forms', 'techwave-form-sync-for-zoho' ) ) . '" title="' . esc_attr( $is_event ? __( 'Reload events', 'techwave-form-sync-for-zoho' ) : __( 'Reload forms', 'techwave-form-sync-for-zoho' ) ) . '"><svg class="form2zoho-reload-icon" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="23 4 23 10 17 10"/><polyline points="1 20 1 14 7 14"/><path d="M3.51 9a9 9 0 0 1 14.85-3.36L23 10M1 14l4.64 4.36A9 9 0 0 0 20.49 15"/></svg></button>';
+                echo '</div>';
+                echo '<p class="description form2zoho-form-help">' . esc_html( $is_event ? __( 'Pick the event that sends a record to Zoho.', 'techwave-form-sync-for-zoho' ) : __( 'Pick the form to connect. The list is read from your saved forms.', 'techwave-form-sync-for-zoho' ) ) . '</p>';
+                echo '</div>';
+                /**
+                 * Renders extra fields on the feed editor's second step, under the
+                 * Form picker and inside the same column.
+                 *
+                 * The companion hook to form2zoho_feed_editor_fields, which draws at
+                 * the foot of the form on the last step. This one is for a source that
+                 * needs something said about *which* form was chosen before the person
+                 * moves on — an add-on whose "forms" are endpoints it owns, say, and
+                 * which has to show the URL for the one selected.
+                 *
+                 * Whatever is printed here posts along with the feed; store it by
+                 * hooking form2zoho_save_feed. Escape your own output.
+                 *
+                 * @param array  $feed The feed being edited. Empty for a new one.
+                 * @param string $id   The feed id. Empty for a new one.
+                 */
+                do_action( 'form2zoho_feed_editor_details_fields', $feed, $id );
+                echo '</div>';
+                echo '</div>';
+                // Disabled until both fields are filled, and re-checked on every
+                // keystroke by admin.js. The attribute is set here rather than left to
+                // the script so the button is never briefly live before the page has
+                // finished loading.
+                echo '<div class="form2zoho-step-footer">';
+                // Back from here is back to the trigger grid, which a saved feed does
+                // not get. The spacer keeps Continue on the right.
+                if ( $trigger_locked ) {
+                        echo '<span class="form2zoho-step-footer__spacer"></span>';
+                } else {
+                        echo '<button type="button" class="button form2zoho-step-back" data-back="trigger">' . esc_html__( 'Back', 'techwave-form-sync-for-zoho' ) . '</button>';
+                }
+                printf(
+                        '<button type="button" class="button button-primary form2zoho-step-next" data-next="connection"%s>%s</button>',
+                        ( '' !== $title && '' !== $form ) ? '' : ' disabled',
+                        esc_html__( 'Continue', 'techwave-form-sync-for-zoho' )
+                );
+                echo '</div>';
+                echo '</section>';
+                // ---- Step 3: where the records go --------------------------------
+                //
+                // Two questions, not seven fields: "which Zoho account receives this"
+                // and "what should happen when the record is already there". They are
+                // two groups with their own headings, because a two-column form-table
+                // gave a single select and a five-control duplicate-matching block the
+                // same visual weight.
+                echo '<section class="form2zoho-step" data-step="connection" tabindex="-1" role="group" aria-labelledby="f2z-step-connection-title">';
+                echo '<div class="form2zoho-step-head">';
+                echo '<h2 id="f2z-step-connection-title">' . esc_html__( 'Where should records go?', 'techwave-form-sync-for-zoho' ) . '</h2>';
+                echo '<p class="description">' . esc_html__( 'Pick the account, then the Zoho app it is authorised for, and the kind of record to create.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '</div>';
+                echo '<div class="form2zoho-step-body">';
+                // --- Group: destination ---
+                echo '<section class="form2zoho-group">';
+                echo '<div class="form2zoho-group__head">';
+                echo '<div class="form2zoho-group__title">';
+                echo '<h3><span class="form2zoho-group__icon" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" focusable="false"><path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"/><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"/></svg></span>' . esc_html__( 'Zoho destination', 'techwave-form-sync-for-zoho' ) . '</h3>';
+                echo '</div>';
+                // The action sits in the group's header rather than under the account
+                // picker. Under it, this was two lines of link and explanation inside
+                // one grid cell, which made that cell half as tall again as the app
+                // picker beside it — and left a hole under the app picker that read as
+                // a missing field. Here it is out of the grid entirely, both cells are
+                // a label and a control, and the row is level.
+                //
+                // The app's guide and the video sit beside it, in the same header, so
+                // the fields below stay one level row.
+                echo '<div class="form2zoho-dest-links">';
+                $this->render_app_docs_link( (string) $intgr );
+                $video = VideoGuide::url( 'actions' );
+                if ( '' !== $video ) {
+                        printf(
+                                '<a class="form2zoho-step-docs form2zoho-video-link form2zoho-youtube-link" href="%1$s" target="_blank" rel="noopener noreferrer" aria-label="%2$s"><svg width="16" height="16" viewBox="0 0 24 24" aria-hidden="true" focusable="false"><rect x="1" y="4" width="22" height="16" rx="5" fill="#ff0000"/><polygon points="10 8.5 16 12 10 15.5" fill="#fff"/></svg><span>%3$s</span><svg class="form2zoho-extlink" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M18 13v6a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2h6"/><polyline points="15 3 21 3 21 9"/><line x1="10" y1="14" x2="21" y2="3"/></svg></a>',
+                                esc_url( $video ),
+                                esc_attr__( 'Watch: every Zoho app, on YouTube (opens in a new tab)', 'techwave-form-sync-for-zoho' ),
+                                esc_html__( 'YouTube', 'techwave-form-sync-for-zoho' )
+                        );
+                }
+                printf(
+                        '<a href="%s" class="form2zoho-add-connection" target="_blank" rel="noopener noreferrer" aria-label="%s"><svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" aria-hidden="true"><line x1="12" y1="5" x2="12" y2="19"/><line x1="5" y1="12" x2="19" y2="12"/></svg><span>%s</span></a>',
+                        esc_url( admin_url( 'admin.php?page=' . SettingsPage::SLUG ) ),
+                        // The visible words are the start of the accessible name, so a
+                        // speech-input user can say what they can see (WCAG 2.5.3) and the
+                        // arrow icon's meaning is spelled out for anyone not seeing it.
+                        esc_attr__( 'Connect account (opens in a new tab)', 'techwave-form-sync-for-zoho' ),
+                        esc_html__( 'Connect account', 'techwave-form-sync-for-zoho' )
+                );
+                echo '</div>';
+                echo '</div>';
+                echo '<div class="form2zoho-group__body form2zoho-grid form2zoho-grid--dest">';
+                // Connection — first, because the app list below depends on it: each
+                // account is authorised for its own set of Zoho apps, and admin.js
+                // narrows the app picker to those once an account is chosen.
+                //
+                // The list has a reload button and a way to add to it, because the
+                // answer to "which account?" is quite often "one I have not connected
+                // yet" — and until now that meant leaving a half-built feed to go and
+                // make one. The link opens the Connections screen in a new tab so this
+                // one survives; the reload button then brings the new account into
+                // this list without a page load, so nothing typed here is lost.
+                echo '<div class="form2zoho-field" id="f2z_conn_row">';
+                echo '<label for="f2z_conn">' . esc_html__( 'Account', 'techwave-form-sync-for-zoho' ) . ' <span class="form2zoho-req" aria-hidden="true">*</span></label>';
+                echo '<div class="form2zoho-control-row">';
+                echo '<select id="f2z_conn" name="connection_id" class="form2zoho-control--full" required>';
+                echo '<option value="">' . esc_html__( 'Select', 'techwave-form-sync-for-zoho' ) . '</option>';
                 foreach ( $conn_choices as $cid => $clabel ) {
                         $conn_row = $this->connections->get( $cid );
 …
+                }
                 echo '</select>';
+                echo '</td></tr>';
+                echo '<button type="button" class="form2zoho-reload-btn form2zoho-reload-connections" aria-label="' . esc_attr__( 'Reload connected accounts', 'techwave-form-sync-for-zoho' ) . '" title="' . esc_attr__( 'Reload connected accounts', 'techwave-form-sync-for-zoho' ) . '"><svg class="form2zoho-reload-icon" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="23 4 23 10 17 10"/><polyline points="1 20 1 14 7 14"/><path d="M3.51 9a9 9 0 0 1 14.85-3.36L23 10M1 14l4.64 4.36A9 9 0 0 0 20.49 15"/></svg></button>';
+                echo '</div>';
+                echo '<p class="description form2zoho-form-help-warn" id="f2z_conn_notice" hidden></p>';
+                echo '</div>';
+                // Integration. Every app is rendered; admin.js removes the ones the
+                // chosen account is not authorised for.
+                echo '<div class="form2zoho-field">';
+                echo '<label for="f2z_intgr">' . esc_html__( 'Zoho app', 'techwave-form-sync-for-zoho' ) . '</label>';
+                echo '<select id="f2z_intgr" name="integration" class="form2zoho-control--full">';
+                foreach ( $this->registry->choices() as $key => $label ) {
+                        echo '<option value="' . esc_attr( $key ) . '" ' . selected( $intgr, $key, false ) . '>' . esc_html( $label ) . '</option>';
+                }
+                echo '</select>';
+                // The guide for the chosen app and the video are in the group header
+                // above; see the "Zoho destination" heading.
+                echo '<p class="form2zoho-app-auth-warning" hidden></p>';
+                echo '</div>';
                 // Organization — used by Books/Desk (required) and by Bigin
 …
                 // instead (see DataCenters::record_url()'s 'campaigns'/'automation'
                 // cases) rather than offering a field that can't really be filled.
+                echo '<tr id="f2z_org_row"><th><label for="f2z_org">' . esc_html__( 'Organization', 'techwave-form-sync-for-zoho' ) . '</label></th><td>';
+                echo '<select id="f2z_org" name="org_id">';
+                echo '<option value="">' . esc_html__( '— None —', 'techwave-form-sync-for-zoho' ) . '</option>';
+                //
+                // The id stays on the wrapper because admin.js shows and hides this
+                // field by it — it was a <tr>, it is a <div>, and jQuery .toggle()
+                // treats both the same.
+                echo '<div class="form2zoho-field" id="f2z_org_row">';
+                echo '<label for="f2z_org">' . esc_html__( 'Organization', 'techwave-form-sync-for-zoho' ) . '</label>';
+                echo '<div class="form2zoho-control-row">';
+                echo '<select id="f2z_org" name="org_id" class="form2zoho-control--full">';
+                echo '<option value="">' . esc_html__( 'None', 'techwave-form-sync-for-zoho' ) . '</option>';
                 if ( '' !== $org ) {
                         echo '<option value="' . esc_attr( $org ) . '" selected>' . esc_html( $org ) . '</option>';
+                }
                 echo '</select>';
+                echo '<p class="description" id="f2z_org_help">' . esc_html__( 'Required for Zoho Books and Zoho Desk. (Bigin does not use this field — its organization is captured automatically when the connection is authorized.)', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '</td></tr>';
+                // A reload button inside the box, as the Module picker has, rather
+                // than a spinner beside it: the two pickers sat side by side saying
+                // "loading" two different ways. The button spins while the list is
+                // on its way, the way every reloadable list in the editor does.
+                echo '<button type="button" class="form2zoho-reload-btn form2zoho-reload-orgs" aria-label="' . esc_attr__( 'Reload organizations', 'techwave-form-sync-for-zoho' ) . '" title="' . esc_attr__( 'Reload organizations', 'techwave-form-sync-for-zoho' ) . '"><svg class="form2zoho-reload-icon" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="23 4 23 10 17 10"/><polyline points="1 20 1 14 7 14"/><path d="M3.51 9a9 9 0 0 1 14.85-3.36L23 10M1 14l4.64 4.36A9 9 0 0 0 20.49 15"/></svg></button>';
+                echo '</div>';
+                echo '<p class="description" id="f2z_org_help">' . esc_html__( 'Required for Zoho Books and Zoho Desk. Bigin captures its own organization when the connection is authorized.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '</div>';
                 // Department (Zoho Desk only).
+                echo '<tr id="f2z_dept_row"><th><label for="f2z_dept">' . esc_html__( 'Department', 'techwave-form-sync-for-zoho' ) . '</label></th><td>';
+                echo '<select id="f2z_dept" name="department_id">';
+                echo '<option value="">' . esc_html__( '— None —', 'techwave-form-sync-for-zoho' ) . '</option>';
+                echo '<div class="form2zoho-field" id="f2z_dept_row">';
+                echo '<label for="f2z_dept">' . esc_html__( 'Department', 'techwave-form-sync-for-zoho' ) . '</label>';
+                echo '<div class="form2zoho-control-row">';
+                echo '<select id="f2z_dept" name="department_id" class="form2zoho-control--full">';
+                echo '<option value="">' . esc_html__( 'None', 'techwave-form-sync-for-zoho' ) . '</option>';
                 if ( '' !== $dept ) {
                         echo '<option value="' . esc_attr( $dept ) . '" selected>' . esc_html( $dept ) . '</option>';
+                }
                 echo '</select>';
+                echo '<button type="button" class="form2zoho-reload-btn form2zoho-reload-depts" aria-label="' . esc_attr__( 'Reload departments', 'techwave-form-sync-for-zoho' ) . '" title="' . esc_attr__( 'Reload departments', 'techwave-form-sync-for-zoho' ) . '"><svg class="form2zoho-reload-icon" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="23 4 23 10 17 10"/><polyline points="1 20 1 14 7 14"/><path d="M3.51 9a9 9 0 0 1 14.85-3.36L23 10M1 14l4.64 4.36A9 9 0 0 0 20.49 15"/></svg></button>';
+                echo '</div>';
                 echo '<p class="description">' . esc_html__( 'Required for Zoho Desk tickets. Loads after you pick the organization.', 'techwave-form-sync-for-zoho' ) . '</p>';
                 echo '</td></tr>';
+                echo '</div>';
                 // Module (dropdown loaded from Zoho for the chosen app + account).
                 // Relabelled to "Mailing List" by JS, and hidden entirely in favour
                 // of the Campaigns/Marketing Automation section below, when one of
+                // of the Campaigns/Marketing Automation group below, when one of
                 // those two apps is selected — both reuse this same field to store
                 // the chosen list, they just present it differently.
+                echo '<tr id="f2z_module_row"><th><label for="f2z_module" id="f2z_module_label">' . esc_html__( 'Module / resource', 'techwave-form-sync-for-zoho' ) . '</label></th><td>';
+                echo '<div class="form2zoho-field form2zoho-field--wide" id="f2z_module_row">';
+                echo '<label for="f2z_module" id="f2z_module_label">' . esc_html__( 'Module', 'techwave-form-sync-for-zoho' ) . ' <span class="form2zoho-req" aria-hidden="true">*</span></label>';
                 echo '<div class="form2zoho-control-row">';
                 echo '<select id="f2z_module" name="module" required>';
+                echo '<select id="f2z_module" name="module" class="form2zoho-control--full" aria-describedby="f2z_module_help" required>';
                 if ( '' !== $module ) {
                         echo '<option value="' . esc_attr( $module ) . '" selected>' . esc_html( $module ) . '</option>';
                 } else {
                         echo '<option value="">' . esc_html__( '— Select an account first —', 'techwave-form-sync-for-zoho' ) . '</option>';
+                        echo '<option value="">' . esc_html__( 'Select an account first', 'techwave-form-sync-for-zoho' ) . '</option>';
+                }
                 echo '</select>';
 …
                 echo '<button type="button" class="form2zoho-reload-btn form2zoho-reload-module" aria-label="' . esc_attr__( 'Reload mailing lists', 'techwave-form-sync-for-zoho' ) . '" title="' . esc_attr__( 'Reload mailing lists', 'techwave-form-sync-for-zoho' ) . '"><svg class="form2zoho-reload-icon" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="23 4 23 10 17 10"/><polyline points="1 20 1 14 7 14"/><path d="M3.51 9a9 9 0 0 1 14.85-3.36L23 10M1 14l4.64 4.36A9 9 0 0 0 20.49 15"/></svg></button>';
                 echo '</div>';
                 echo '<p class="description" id="f2z_module_help">' . esc_html__( 'Loaded from Zoho once the app and account are chosen.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '<p class="description screen-reader-text" id="f2z_module_help">' . esc_html__( 'Loaded from Zoho once the app and account are chosen.', 'techwave-form-sync-for-zoho' ) . '</p>';
                 echo '<p class="description form2zoho-form-help-warn" id="f2z_module_empty_notice" hidden>' . esc_html__( 'No Mailing Lists found in Zoho Campaigns.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '</td></tr>';
+                // Campaigns / Marketing Automation — dedicated fields, hidden for
+                // every other app. Mirrors Zoho's own "Add Contact" screen.
+                echo '</div>';
+                /**
+                 * Fires inside the destination group, after the module picker.
+                 *
+                 * For one more answer about *this* Zoho account and module — the
+                 * shape the Organization and Department fields above already have.
+                 * Print a `.form2zoho-field` and it lines up with them.
+                 *
+                 * The other seam on this step, form2zoho_feed_editor_connection_fields,
+                 * fires below the whole group and is for a destination that needs
+                 * settings of its own; a single field printed there reads as an
+                 * orphan under the card rather than as part of it.
+                 *
+                 * Whatever is printed here posts along with the feed; store it by
+                 * hooking form2zoho_save_feed. Escape your own output.
+                 *
+                 * @param array  $feed The feed being edited. Empty for a new one.
+                 * @param string $id   The feed id. Empty for a new one.
+                 */
+                do_action( 'form2zoho_feed_editor_destination_fields', $feed, $id );
+                echo '</div>';
+                echo '</section>';
+                /**
+                 * Renders extra groups on the feed editor's third step, under the
+                 * destination group and above duplicate handling.
+                 *
+                 * For a destination that needs settings of its own — one that is not a
+                 * Zoho account, and so has nothing the Connected account and Module
+                 * pickers can describe. Print a `.form2zoho-group` section to sit with
+                 * the rest.
+                 *
+                 * Whatever is printed here posts along with the feed; store it by
+                 * hooking form2zoho_save_feed. Escape your own output.
+                 *
+                 * @param array  $feed The feed being edited. Empty for a new one.
+                 * @param string $id   The feed id. Empty for a new one.
+                 */
+                do_action( 'form2zoho_feed_editor_connection_fields', $feed, $id );
+                // --- Group: Campaigns / Marketing Automation ---
+                // Dedicated fields, hidden for every other app. Mirrors Zoho's own
+                // "Add Contact" screen. The id is the one admin.js toggles.
                 $camp_sub     = isset( $feed['campaigns_subscription_type'] ) ? (string) $feed['campaigns_subscription_type'] : '';
                 $camp_tag_raw = isset( $feed['campaigns_tag'] ) ? $feed['campaigns_tag'] : array();
 …
                 $camp_topics  = isset( $feed['campaigns_topics'] ) && is_array( $feed['campaigns_topics'] ) ? $feed['campaigns_topics'] : array();
+                echo '</tbody><tbody id="f2z_campaigns_extra" hidden>';
+                echo '<tr><th><label for="f2z_subscription_type">' . esc_html__( 'Subscription Type', 'techwave-form-sync-for-zoho' ) . '</label></th><td>';
+                echo '<select id="f2z_subscription_type" name="campaigns_subscription_type">';
+                echo '<section class="form2zoho-group" id="f2z_campaigns_extra" hidden>';
+                echo '<div class="form2zoho-group__head">';
+                echo '<div class="form2zoho-group__title">';
+                echo '<h3>' . esc_html__( 'Contact options', 'techwave-form-sync-for-zoho' ) . '</h3>';
+                echo '<p class="description">' . esc_html__( 'How the contact is subscribed, and what it is filed under.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '</div>';
+                echo '</div>';
+                echo '<div class="form2zoho-group__body form2zoho-grid">';
+                echo '<div class="form2zoho-field">';
+                echo '<label for="f2z_subscription_type">' . esc_html__( 'Subscription type', 'techwave-form-sync-for-zoho' ) . '</label>';
+                echo '<select id="f2z_subscription_type" name="campaigns_subscription_type" class="form2zoho-control--full">';
                 foreach ( array(
                         'Marketing'     => __( 'Marketing', 'techwave-form-sync-for-zoho' ),
 …
+                }
                 echo '</select>';
+                echo '</td></tr>';
+                echo '<tr><th><label for="f2z_topics">' . esc_html__( 'Associate contacts with the following Topics', 'techwave-form-sync-for-zoho' ) . '</label></th><td>';
+                echo '</div>';
+                // Zoho adds a contact to a list whose sign-up form is on only once they
+                // confirm by email, so a feed that relied on that looked as though it
+                // ignored the list. "Right away" adds them directly; the other choice
+                // keeps Zoho's double opt-in. See CampaignsIntegration::send().
+                $camp_list_add = isset( $feed['campaigns_list_add'] ) && 'confirm' === $feed['campaigns_list_add'] ? 'confirm' : 'direct';
+                echo '<div class="form2zoho-field">';
+                echo '<label for="f2z_list_add">' . esc_html__( 'Add to list', 'techwave-form-sync-for-zoho' ) . '</label>';
+                echo '<select id="f2z_list_add" name="campaigns_list_add" class="form2zoho-control--full">';
+                foreach ( array(
+                        'direct'  => __( 'Right away', 'techwave-form-sync-for-zoho' ),
+                        'confirm' => __( 'After they confirm by email', 'techwave-form-sync-for-zoho' ),
+                ) as $val => $label ) {
+                        echo '<option value="' . esc_attr( $val ) . '" ' . selected( $camp_list_add, $val, false ) . '>' . esc_html( $label ) . '</option>';
+                }
+                echo '</select>';
+                echo '<p class="description">' . esc_html__( 'Right away puts the contact in the selected list immediately. After they confirm sends the confirmation email Zoho uses for a list with its sign-up form on, and adds the contact once it is clicked.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '</div>';
+                echo '<div class="form2zoho-field" id="f2z_tag_row">';
+                echo '<label for="f2z_tag">' . esc_html__( 'Contact tags', 'techwave-form-sync-for-zoho' ) . '</label>';
                 echo '<div class="form2zoho-control-row">';
+                echo '<select id="f2z_topics" name="campaigns_topics[]" multiple>';
+                echo '<select id="f2z_tag" name="campaigns_tag[]" class="form2zoho-control--full" multiple>';
+                foreach ( $camp_tag as $tval ) {
+                        echo '<option value="' . esc_attr( $tval ) . '" selected>' . esc_html( $tval ) . '</option>';
+                }
+                echo '</select>';
+                echo '<button type="button" class="form2zoho-reload-btn form2zoho-reload-tags" aria-label="' . esc_attr__( 'Reload tags', 'techwave-form-sync-for-zoho' ) . '" title="' . esc_attr__( 'Reload tags', 'techwave-form-sync-for-zoho' ) . '"><svg class="form2zoho-reload-icon" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="23 4 23 10 17 10"/><polyline points="1 20 1 14 7 14"/><path d="M3.51 9a9 9 0 0 1 14.85-3.36L23 10M1 14l4.64 4.36A9 9 0 0 0 20.49 15"/></svg></button>';
+                echo '</div>';
+                echo '<p class="description">' . esc_html__( 'Optional. Pick one or more existing tags. Loads after you pick an account. Hold Ctrl/Cmd to pick more than one.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '<p class="description form2zoho-form-help-warn" id="f2z_tag_notice" hidden></p>';
+                echo '</div>';
+                echo '<div class="form2zoho-field form2zoho-field--wide">';
+                echo '<label for="f2z_topics">' . esc_html__( 'Associate contacts with these topics', 'techwave-form-sync-for-zoho' ) . '</label>';
+                echo '<div class="form2zoho-control-row">';
+                echo '<select id="f2z_topics" name="campaigns_topics[]" class="form2zoho-control--full" multiple>';
                 foreach ( $camp_topics as $tid ) {
                         echo '<option value="' . esc_attr( $tid ) . '" selected>' . esc_html( $tid ) . '</option>';
 …
                 echo '<button type="button" class="form2zoho-reload-btn form2zoho-reload-topics" aria-label="' . esc_attr__( 'Reload topics', 'techwave-form-sync-for-zoho' ) . '" title="' . esc_attr__( 'Reload topics', 'techwave-form-sync-for-zoho' ) . '"><svg class="form2zoho-reload-icon" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="23 4 23 10 17 10"/><polyline points="1 20 1 14 7 14"/><path d="M3.51 9a9 9 0 0 1 14.85-3.36L23 10M1 14l4.64 4.36A9 9 0 0 0 20.49 15"/></svg></button>';
                 echo '</div>';
                 echo '<p class="description">' . esc_html__( 'Optional — leave empty to skip topic association entirely. Loads after you pick an account. Hold Ctrl/Cmd to pick more than one.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '<p class="description">' . esc_html__( 'Optional. Leave empty to skip topic association entirely. Loads after you pick an account. Hold Ctrl/Cmd to pick more than one.', 'techwave-form-sync-for-zoho' ) . '</p>';
                 echo '<p class="description form2zoho-form-help-warn" id="f2z_topics_notice" hidden></p>';
+                echo '</td></tr>';
+                echo '<tr id="f2z_tag_row"><th><label for="f2z_tag">' . esc_html__( 'Contact Tags', 'techwave-form-sync-for-zoho' ) . '</label></th><td>';
+                echo '<div class="form2zoho-control-row">';
+                echo '<select id="f2z_tag" name="campaigns_tag[]" multiple>';
+                foreach ( $camp_tag as $tval ) {
+                        echo '<option value="' . esc_attr( $tval ) . '" selected>' . esc_html( $tval ) . '</option>';
+                }
+                echo '</select>';
+                echo '<button type="button" class="form2zoho-reload-btn form2zoho-reload-tags" aria-label="' . esc_attr__( 'Reload tags', 'techwave-form-sync-for-zoho' ) . '" title="' . esc_attr__( 'Reload tags', 'techwave-form-sync-for-zoho' ) . '"><svg class="form2zoho-reload-icon" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="23 4 23 10 17 10"/><polyline points="1 20 1 14 7 14"/><path d="M3.51 9a9 9 0 0 1 14.85-3.36L23 10M1 14l4.64 4.36A9 9 0 0 0 20.49 15"/></svg></button>';
+                echo '</div>';
+                echo '<p class="description">' . esc_html__( 'Optional. Pick one or more existing tags. Loads after you pick an account. Hold Ctrl/Cmd to pick more than one.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '<p class="description form2zoho-form-help-warn" id="f2z_tag_notice" hidden></p>';
+                echo '</td></tr>';
+                echo '</tbody><tbody>';
+                // Dedupe — shown for every app, including Campaigns/Marketing
+                // Automation. Note: Campaigns/Marketing Automation already treat
+                // the contact's email as the natural unique key (re-subscribing the
+                // same email updates that contact instead of creating a new one),
+                // so this box has no extra effect for those two apps beyond what
+                // already happens automatically.
+                $dd_list  = array_filter( array_map( 'trim', explode( ',', (string) $dd_flds ) ) );
+                $dd_email = in_array( 'Email', $dd_list, true );
+                $dd_phone = in_array( 'Phone', $dd_list, true );
+                $dd_extra = trim( implode( ',', array_diff( $dd_list, array( 'Email', 'Phone' ) ) ) );
+                echo '<tr id="f2z_dedupe_row"><th>' . esc_html__( 'Duplicate check', 'techwave-form-sync-for-zoho' ) . '</th><td>';
+                echo '<label><input type="checkbox" name="dedupe_enabled" value="1" ' . checked( true, $dd_on, false ) . ' /> ' . esc_html__( 'Update the matching Zoho record instead of creating a duplicate.', 'techwave-form-sync-for-zoho' ) . '</label>';
+                echo '<p class="description">' . esc_html__( 'Each box below is checked independently — a record counts as a match if it shares the same email OR the same phone, not only when both match.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '<div class="form2zoho-dedupe-grid">';
+                echo '<label class="form2zoho-dedupe-field"><input type="checkbox" name="dedupe_email" value="1" ' . checked( true, $dd_email, false ) . ' /> ' . esc_html__( 'Match by Email', 'techwave-form-sync-for-zoho' ) . '</label>';
+                echo '<label class="form2zoho-dedupe-field"><input type="checkbox" name="dedupe_phone" value="1" ' . checked( true, $dd_phone, false ) . ' /> ' . esc_html__( 'Match by Phone', 'techwave-form-sync-for-zoho' ) . '</label>';
+                echo '</div>';
+                echo '<input type="text" class="regular-text form2zoho-dedupe-extra" name="dedupe_extra" value="' . esc_attr( $dd_extra ) . '" placeholder="' . esc_attr__( 'Other Zoho field API names, comma-separated', 'techwave-form-sync-for-zoho' ) . '" />';
+                echo '<p class="description">' . esc_html__( 'Optional: any other Zoho field API names to also check, comma-separated.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '</td></tr>';
+                echo '</tbody></table>';
+                echo '<div class="form2zoho-tab-footer">';
+                echo '<button type="button" class="button form2zoho-tab-back" data-back="general">&lsaquo; ' . esc_html__( 'Back', 'techwave-form-sync-for-zoho' ) . '</button>';
+                echo '<button type="button" class="button button-primary form2zoho-tab-next" data-next="mapping">' . esc_html__( 'Next', 'techwave-form-sync-for-zoho' ) . ' &rsaquo;</button>';
+                echo '</div>';
+                echo '</div>';
+                // Mapping.
+                echo '<div class="form2zoho-tab-panel" data-tab-panel="mapping">';
+                echo '<div class="form2zoho-mapping-section">';
+                echo '<h2>' . esc_html__( 'Field mapping', 'techwave-form-sync-for-zoho' ) . '</h2>';
+                echo '<p class="description">' . esc_html__( 'Map each Zoho field to a form field or a fixed value. Both lists load automatically: Zoho fields from the chosen module, form fields from the chosen form.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '</div>';
+                echo '</div>';
+                echo '</section>';
+                // --- Group: duplicate handling ---
+                // Shown for every app, including Campaigns/Marketing Automation.
+                // Note: those two already treat the contact's email as the natural
+                // unique key (re-subscribing the same email updates that contact
+                // instead of creating a new one), so this group has no extra effect
+                // for them beyond what already happens automatically.
+                //
+                // A feed matches only on fields Zoho marks unique, offered as boxes
+                // once the module's fields load. With none ticked, CRM and Bigin still
+                // update rather than insert, and Zoho applies its own duplicate check
+                // (Email on Leads and Contacts, for example).
+                echo '<section class="form2zoho-group" id="f2z_dedupe_row">';
+                echo '<div class="form2zoho-group__head">';
+                echo '<div class="form2zoho-group__title">';
+                echo '<h3>' . esc_html__( 'Duplicate handling', 'techwave-form-sync-for-zoho' ) . '</h3>';
+                echo '<p class="description">' . esc_html__( 'What to do when Zoho already holds a record for the same person.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '</div>';
+                echo '</div>';
+                echo '<div class="form2zoho-group__body">';
+                // The switch first, then what it controls — the boxes below only mean
+                // something once it is on, and .form2zoho-dedupe-body dims them until
+                // it is (CSS :has(), no script).
+                echo '<label class="form2zoho-check form2zoho-check--lead">';
+                echo '<input type="checkbox" name="dedupe_enabled" value="1" ' . checked( true, $dd_on, false ) . ' />';
+                echo '<span>' . esc_html__( 'Update the matching Zoho record instead of creating a duplicate.', 'techwave-form-sync-for-zoho' ) . '</span>';
+                echo '</label>';
+                echo '<div class="form2zoho-dedupe-body">';
+                // What the feed was saved with, and whether the boxes below have been
+                // built from a field list that actually loaded. Until one has, saving
+                // keeps the stored list as it was, so a Zoho request that failed or is
+                // still on its way cannot quietly empty it. See collect_dedupe_fields().
+                echo '<input type="hidden" name="dedupe_saved" id="f2z_dedupe_saved" value="' . esc_attr( (string) $dd_flds ) . '" />';
+                echo '<input type="hidden" name="dedupe_loaded" id="f2z_dedupe_loaded" value="" />';
+                // Filled by admin.js once the module's fields arrive: one box per
+                // field Zoho itself enforces uniqueness on. Those are the fields a
+                // duplicate check is actually allowed to use.
+                //
+                // Rendered empty rather than omitted so the script has somewhere to
+                // put them, and hidden until there is something in it.
+                echo '<div class="form2zoho-field form2zoho-dedupe-unique" id="f2z_dedupe_unique" hidden>';
+                echo '<span class="form2zoho-dedupe-unique__label">' . esc_html__( 'Fields Zoho marks unique', 'techwave-form-sync-for-zoho' ) . '</span>';
+                echo '<p class="description">' . esc_html__( 'A record counts as a match if it shares any one of the ticked values. Leave them all unticked to use Zoho\'s own duplicate check.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '<div class="form2zoho-dedupe-grid" id="f2z_dedupe_unique_list"></div>';
+                echo '</div>';
+                // Said in place of the boxes when the module has none, for the apps
+                // whose delivery would have used them. admin.js decides when.
+                echo '<p class="description form2zoho-dedupe-none" id="f2z_dedupe_none" hidden>' . esc_html__( 'This module has no fields that Zoho marks as unique, so Zoho\'s own duplicate check is used instead (Email on Leads and Contacts, for example). If the module has no duplicate check of its own, each submission creates a new record. To match on a field of your choice, set that field to not allow duplicate values in Zoho, then reload the module.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '</div>';
+                echo '</div>';
+                echo '</section>';
+                echo '</div>';
+                echo '<div class="form2zoho-step-footer">';
+                echo '<button type="button" class="button form2zoho-step-back" data-back="details">' . esc_html__( 'Back', 'techwave-form-sync-for-zoho' ) . '</button>';
+                echo '<button type="button" class="button button-primary form2zoho-step-next" data-next="mapping">' . esc_html__( 'Continue', 'techwave-form-sync-for-zoho' ) . '</button>';
+                echo '</div>';
+                echo '</section>';
+                // ---- Step 4: the mapping, and the save ---------------------------
+                echo '<section class="form2zoho-step" data-step="mapping" tabindex="-1" role="group" aria-labelledby="f2z-step-mapping-title">';
+                echo '<div class="form2zoho-step-head">';
+                echo '<h2 id="f2z-step-mapping-title">' . esc_html__( 'Match the fields', 'techwave-form-sync-for-zoho' ) . '</h2>';
+                echo '<p class="description">' . esc_html__( 'Send each Zoho field a form field or a fixed value. Both lists load on their own: Zoho fields from the chosen module, form fields from the chosen form.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '</div>';
+                echo '<div class="form2zoho-step-body">';
+                echo '<section class="form2zoho-group form2zoho-mapping-section">';
+                echo '<div class="form2zoho-group__head">';
+                echo '<div class="form2zoho-group__title">';
+                echo '<h3>' . esc_html__( 'Field mapping', 'techwave-form-sync-for-zoho' ) . '</h3>';
+                echo '</div>';
+                echo '</div>';
+                echo '<div class="form2zoho-group__body">';
                 echo '<p class="description form2zoho-form-help-warn" id="f2z_fields_notice" hidden></p>';
+                // For a destination that is only a URL and names no fields of its own:
+                // nothing needs matching, the whole submission is sent. admin.js shows
+                // this in place of the table. See syncPassthrough().
+                echo '<p class="description" id="f2z_passthrough_notice" hidden>' . esc_html__( 'Nothing to match here: every submitted field, uploaded files included, is sent to this URL as it is. To send only some fields or rename them, list the field names in the endpoint settings on the previous step.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                // The Zoho field list fills every select in the table below, so while it
+                // is on its way a loading card pauses the page, rather than a line of
+                // text sitting in this card. admin.js moves it to <body>, names what it
+                // is fetching, and shows it.
+                echo '<div class="form2zoho-page-loader" id="f2z_fields_loading" hidden>';
+                echo '<div class="form2zoho-loader-card" role="status" aria-live="polite">';
+                echo '<span class="form2zoho-loader-card__badge" aria-hidden="true">';
+                echo '<span class="form2zoho-loader-card__ring"></span>';
+                echo '<img class="form2zoho-loader-card__mark" src="' . esc_url( FORM2ZOHO_URL . 'assets/images/plugin_icon.png' ) . '" width="34" height="34" alt="" />';
+                echo '</span>';
+                echo '<p class="form2zoho-loader-card__title">' . esc_html__( 'Loading Zoho fields', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '<p class="form2zoho-loader-card__text">' . esc_html__( 'Fetching the field list from Zoho…', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '<p class="form2zoho-loader-card__slow" hidden>' . esc_html__( 'This is taking longer than usual. Zoho can be slow to answer, and the editor will carry on as soon as it does.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '</div>';
+                echo '</div>';
                 // Filled from JS (i18n.mappingReset) when switching the Zoho app,
                 // account or module clears the rows below.
 …
                 echo '<div class="form2zoho-table-scroll">';
                 echo '<table class="widefat form2zoho-map-table"><thead><tr>';
+                echo '<th scope="col">' . esc_html__( 'Zoho field', 'techwave-form-sync-for-zoho' ) . '</th>';
+                // Source first, because it decides which of the two columns after it is
+                // the live one — reading left to right now follows the order the row is
+                // actually filled in, rather than naming the destination before the
+                // question of where the value comes from has been asked.
                 echo '<th scope="col">' . esc_html__( 'Source', 'techwave-form-sync-for-zoho' ) . '</th>';
                 echo '<th scope="col">' . esc_html__( 'Form field', 'techwave-form-sync-for-zoho' ) . '</th>';
+                echo '<th scope="col">' . esc_html__( 'Zoho field', 'techwave-form-sync-for-zoho' ) . '</th>';
                 echo '<th scope="col">' . esc_html__( 'Static value', 'techwave-form-sync-for-zoho' ) . '</th>';
                 echo '<th></th>';
+                echo '<th scope="col"><span class="screen-reader-text">' . esc_html__( 'Actions', 'techwave-form-sync-for-zoho' ) . '</span></th>';
                 echo '</tr></thead><tbody class="form2zoho-map-rows">';
 …
                                 'source' => isset( $rule['type'] ) ? (string) $rule['type'] : 'field',
                                 'form'   => ( isset( $rule['type'] ) && 'field' === $rule['type'] ) ? (string) $rule['value'] : '',
+                                'static' => ( isset( $rule['type'] ) && 'static' === $rule['type'] ) ? (string) $rule['value'] : '',
+                                'static' => ( isset( $rule['type'] ) && in_array( $rule['type'], array( 'static', FieldMapper::TYPE_TEMPLATE ), true ) ) ? (string) $rule['value'] : '',
+                                'ztype'  => isset( $rule['zoho_type'] ) ? (string) $rule['zoho_type'] : '',
                         );
+                }
 …
                 echo '</tbody></table>';
                 echo '</div>';
+                echo '<p><button type="button" class="button form2zoho-add-row">' . esc_html__( '+ Add mapping row', 'techwave-form-sync-for-zoho' ) . '</button></p>';
+                echo '</div>';
+                echo '<p class="form2zoho-group__action"><button type="button" class="button form2zoho-add-row">' . esc_html__( '+ Add mapping row', 'techwave-form-sync-for-zoho' ) . '</button></p>';
+                echo '</div>';
+                echo '</section>';
                 // Row template for JS cloning.
 …
                 );
                 echo '</script>';
+                echo '<div class="form2zoho-tab-footer">';
+                echo '<button type="button" class="button form2zoho-tab-back" data-back="connection">&lsaquo; ' . esc_html__( 'Back', 'techwave-form-sync-for-zoho' ) . '</button>';
+                submit_button( $id ? __( 'Save feed', 'techwave-form-sync-for-zoho' ) : __( 'Create feed', 'techwave-form-sync-for-zoho' ), 'primary', 'submit', false );
+                echo '</div>';
+                echo '</div>';
+                echo '</form>';
+                // Test tool — only useful once the feed is saved.
+                /**
+                 * Renders extra fields at the foot of the feed editor, still inside
+                 * the form and just above its Save button.
+                 *
+                 * Whatever is printed here posts along with the feed; store it by
+                 * hooking form2zoho_save_feed, and put it back on the outgoing job
+                 * with form2zoho_build_job. Per-feed conditional logic is the
+                 * intended use.
+                 *
+                 * Escape your own output: this prints straight into the page rather
+                 * than going through wp_kses() the way the mapping rows do.
+                 *
+                 * @param array  $feed The feed being edited. Empty for a new one.
+                 * @param string $id   The feed id. Empty for a new one.
+                 */
+                do_action( 'form2zoho_feed_editor_fields', $feed, $id );
+                // Test tool — only useful once the feed is saved, and it belongs to
+                // this step rather than under the whole editor: sitting outside the
+                // steps, it used to appear below the trigger grid and below the
+                // connection form too, offering to test a feed the person was in the
+                // middle of changing.
                 if ( $id ) {
+                        echo '<hr />';
+                        echo '<h2>' . esc_html__( 'Test', 'techwave-form-sync-for-zoho' ) . '</h2>';
+                        echo '<p class="description">' . esc_html__( 'Sends one real test record to Zoho using this saved feed. Static values are sent as-is; mapped form fields get realistic sample data (a valid email, phone, etc.).', 'techwave-form-sync-for-zoho' ) . '</p>';
+                        echo '<section class="form2zoho-group">';
+                        echo '<div class="form2zoho-group__head">';
+                        echo '<div class="form2zoho-group__title">';
+                        echo '<h3>' . esc_html__( 'Test this feed', 'techwave-form-sync-for-zoho' ) . '</h3>';
+                        echo '<p class="description">' . esc_html__( 'Sends one real test record to Zoho using the feed as last saved. Static values are sent as-is; mapped form fields get realistic sample data (a valid email, phone, and so on).', 'techwave-form-sync-for-zoho' ) . '</p>';
+                        echo '</div>';
+                        echo '</div>';
+                        echo '<div class="form2zoho-group__body">';
                         echo '<p><button type="button" class="button form2zoho-test" data-feed="' . esc_attr( $id ) . '">' . esc_html__( 'Send test record', 'techwave-form-sync-for-zoho' ) . '</button></p>';
                         echo '<div class="form2zoho-test-result"></div>';
+                }
+                echo '</div>';
+                echo '</div>';
+                        echo '</div>';
+                        echo '</section>';
+                }
+                echo '</div>';
+                echo '<div class="form2zoho-step-footer">';
+                echo '<button type="button" class="button form2zoho-step-back" data-back="connection">' . esc_html__( 'Back', 'techwave-form-sync-for-zoho' ) . '</button>';
+                submit_button( $id ? __( 'Save feed', 'techwave-form-sync-for-zoho' ) : __( 'Create feed', 'techwave-form-sync-for-zoho' ), 'primary', 'submit', false );
+                echo '</div>';
+                echo '</section>';
+                echo '</form>';
+                echo '</div>';
+                echo '</div>';
+                // Outside .form2zoho-editor-pop and outside the form: the overlay is
+                // position:fixed, so nesting it would change nothing about where it
+                // draws and everything about what a stray Enter inside it submits.
+                // Prints nothing at all once the add-on is installed and no tile is
+                // left locked.
+                ProUpsell::render_modal();
+        }
+        /**
+         * A quiet link out to the documentation for one step.
+         *
+         * Quiet on purpose: it is there for the person who is stuck, and it must
+         * not compete with the thing the step is actually asking them to do. The
+         * new tab is deliberate — losing a half-built feed to read about it would
+         * be a poor trade — and it is said in the accessible name rather than left
+         * for the person to discover (WCAG 3.2.5), with the arrow carrying the
+         * same fact for anyone reading the screen rather than hearing it.
+         *
+         * @param string $step  Step key, e.g. 'trigger'.
+         * @param string $label Visible link text.
+         * @return void
+         */
+        private static function render_docs_link( $step, $label ) {
+                $url = self::docs_url( $step );
+                if ( '' === $url ) {
+                        return;
+                }
+                printf(
+                        '<a class="form2zoho-step-docs" href="%s" target="_blank" rel="noopener noreferrer" aria-label="%s">',
+                        esc_url( $url ),
+                        esc_attr( self::docs_link_aria( $label ) )
+                );
+                echo '<svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8Z"/><polyline points="14 2 14 8 20 8"/><line x1="8" y1="13" x2="16" y2="13"/><line x1="8" y1="17" x2="16" y2="17"/></svg>';
+                echo '<span>' . esc_html( $label ) . '</span>';
+                echo '<svg class="form2zoho-extlink" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M18 13v6a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2h6"/><polyline points="15 3 21 3 21 9"/><line x1="10" y1="14" x2="21" y2="3"/></svg>';
+                echo '</a>';
+        }
+        /**
+         * The "<trigger> guide" link on the Details step.
+         *
+         * Always printed, and hidden rather than omitted when the chosen trigger
+         * has no page: the trigger can be changed without a page load, so the
+         * anchor has to already exist for admin.js to point somewhere else. A
+         * source with no documentation — every Pro trigger, and any a site adds
+         * through `form2zoho_form_sources` — simply keeps it hidden.
+         *
+         * @param string $source Chosen source key, or '' when none is chosen yet.
+         * @return void
+         */
+        private static function render_trigger_docs_link( $source ) {
+                $url   = '' === $source ? '' : self::trigger_docs_url( $source );
+                $label = '' === $source ? '' : self::trigger_docs_label( FormSources::label( $source ) );
+                printf(
+                        '<a class="form2zoho-step-docs form2zoho-trigger-docs" href="%s" target="_blank" rel="noopener noreferrer" aria-label="%s"%s>',
+                        esc_url( $url ),
+                        esc_attr( '' === $label ? '' : self::docs_link_aria( $label ) ),
+                        '' === $url ? ' hidden' : '' // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- a literal.
+                );
+                echo '<svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8Z"/><polyline points="14 2 14 8 20 8"/><line x1="8" y1="13" x2="16" y2="13"/><line x1="8" y1="17" x2="16" y2="17"/></svg>';
+                echo '<span>' . esc_html( $label ) . '</span>';
+                echo '<svg class="form2zoho-extlink" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M18 13v6a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2h6"/><polyline points="15 3 21 3 21 9"/><line x1="10" y1="14" x2="21" y2="3"/></svg>';
+                echo '</a>';
+        }
+        /**
+         * The "Docs" link to the chosen app's guide, in the destination header.
+         *
+         * Always printed and hidden when empty, for the same reason the trigger's
+         * is: the app can be changed without a page load, so the anchor has to be
+         * there for admin.js to point somewhere else.
+         *
+         * @param string $app Chosen integration id, or '' when none.
+         * @return void
+         */
+        private function render_app_docs_link( $app ) {
+                $url   = '' === $app ? '' : self::app_docs_url( $app );
+                $label = '' === $url ? '' : $this->app_docs_label( $app );
+                printf(
+                        '<a class="form2zoho-step-docs form2zoho-app-docs" href="%s" target="_blank" rel="noopener noreferrer" aria-label="%s"%s>',
+                        esc_url( $url ),
+                        esc_attr( '' === $label ? '' : self::docs_link_aria( $label ) ),
+                        '' === $url ? ' hidden' : '' // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- a literal.
+                );
+                echo '<svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8Z"/><polyline points="14 2 14 8 20 8"/><line x1="8" y1="13" x2="16" y2="13"/><line x1="8" y1="17" x2="16" y2="17"/></svg>';
+                echo '<span>' . esc_html__( 'Docs', 'techwave-form-sync-for-zoho' ) . '</span>';
+                echo '<svg class="form2zoho-extlink" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M18 13v6a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2h6"/><polyline points="15 3 21 3 21 9"/><line x1="10" y1="14" x2="21" y2="3"/></svg>';
+                echo '</a>';
+        }
+        /**
+         * "Zoho CRM guide", from the app's own name.
+         *
+         * The name the picker shows, read back from the registry rather than
+         * written out again here — an add-on registers its own label, and a
+         * second copy of the free plugin's six would go stale the first time one
+         * was reworded.
+         *
+         * @param string $app Integration id.
+         * @return string
+         */
+        private function app_docs_label( $app ) {
+                $labels = $this->registry->choices();
+                $label  = isset( $labels[ $app ] ) ? (string) $labels[ $app ] : $app;
+                /* translators: %s: a Zoho app's name, e.g. "Zoho CRM". */
+                return sprintf( __( '%s guide', 'techwave-form-sync-for-zoho' ), $label );
+        }
+        /**
+         * Where one Zoho app is documented.
+         *
+         * Only the apps this plugin ships. A destination an add-on registers —
+         * Zoho Inventory, a plain webhook — has no row here: its documentation
+         * belongs with the add-on, and a link offered from the free plugin would
+         * be one more thing to keep in step with a product it does not ship.
+         *
+         * @param string $app Integration id.
+         * @return string URL, or '' when that app has no page.
+         */
+        private static function app_docs_url( $app ) {
+                $base = 'https://techwavesolutions.net/formbridge-zoho/action/';
+                $urls = array(
+                        // Not "wordpress-to-…" like its neighbours: the page was
+                        // published under this slug and the matching one is taken by an
+                        // older copy of it.
+                        'crm'        => $base . 'wordpress-zoho-crm-integration/',
+                        'books'      => $base . 'wordpress-to-zoho-books-integration/',
+                        'desk'       => $base . 'wordpress-to-zoho-desk-integration/',
+                        'bigin'      => $base . 'wordpress-to-zoho-bigin-integration/',
+                        'campaigns'  => $base . 'wordpress-to-zoho-campaigns-integration/',
+                        'automation' => $base . 'wordpress-to-zoho-marketing-automation-integration/',
+                );
+                $url = isset( $urls[ $app ] ) ? $urls[ $app ] : '';
+                /**
+                 * Filter one Zoho app's documentation link.
+                 *
+                 * @param string $url URL, or '' for none.
+                 * @param string $app Integration id, e.g. "crm".
+                 */
+                return (string) apply_filters( 'form2zoho_docs_app_url', $url, $app );
+        }
+        /**
+         * Every Zoho app that has a guide, as the editor script needs it.
+         *
+         * Keyed over what the registry actually holds, so an add-on's destination
+         * is included the moment a site filters a URL in for it.
+         *
+         * @return array<string,array{url:string,label:string}>
+         */
+        private function app_docs_for_js() {
+                $out = array();
+                foreach ( array_keys( $this->registry->choices() ) as $app ) {
+                        $url = self::app_docs_url( (string) $app );
+                        if ( '' === $url ) {
+                                continue;
+                        }
+                        $out[ $app ] = array(
+                                'url'   => $url,
+                                'label' => $this->app_docs_label( (string) $app ),
+                        );
+                }
+                return $out;
+        }
+        /**
+         * "Contact Form 7 guide", from the trigger's own label.
+         *
+         * The plugin's label, not the documentation page's title: the two differ
+         * ("Contact Form 7" against "Contact Forms 7"), and the name to echo back
+         * is the one on the tile the person just clicked.
+         *
+         * @param string $label Source label.
+         * @return string
+         */
+        private static function trigger_docs_label( $label ) {
+                /* translators: %s: a form plugin's name, e.g. "Contact Form 7". */
+                return sprintf( __( '%s guide', 'techwave-form-sync-for-zoho' ), $label );
+        }
+        /**
+         * The accessible name for a documentation link.
+         *
+         * @param string $label Visible link text.
+         * @return string
+         */
+        private static function docs_link_aria( $label ) {
+                /* translators: %s: link text, e.g. "Trigger guide". */
+                return sprintf( __( '%s (opens in a new tab)', 'techwave-form-sync-for-zoho' ), $label );
+        }
+        /**
+         * Where one trigger is documented.
+         *
+         * Only the sources this plugin provides itself. A Pro trigger has no row
+         * here — the page that documents it belongs with the add-on, and a link
+         * offered from the free plugin would be one more thing to keep in step
+         * with a product it does not ship.
+         *
+         * Filterable per source, so a site hosting its own copy of the
+         * documentation can point at that instead — the same hook shape as
+         * docs_url() above.
+         *
+         * @param string $source Source key.
+         * @return string URL, or '' when that trigger has no page.
+         */
+        private static function trigger_docs_url( $source ) {
+                $base = 'https://techwavesolutions.net/formbridge-zoho/trigger/';
+                $urls = array(
+                        'elementor'  => $base . 'elementor-forms-zoho-integration/',
+                        'cf7'        => $base . 'contact-form-7-zoho-integration/',
+                        'wpforms'    => $base . 'wpforms-zoho-integration/',
+                        'fluent'     => $base . 'fluent-forms-zoho-integration/',
+                        'forminator' => $base . 'forminator-forms-zoho-integration/',
+                        'ninja'      => $base . 'ninja-forms-zoho-integration/',
+                        'gravity'    => $base . 'gravity-forms-zoho-integration/',
+                        'formidable' => $base . 'formidable-forms-zoho-integration/',
+                        'happyforms' => $base . 'happyforms-zoho-integration/',
+                        'sureforms'  => $base . 'sureforms-zoho-integration/',
+                );
+                $url = isset( $urls[ $source ] ) ? $urls[ $source ] : '';
+                /**
+                 * Filter one trigger's documentation link.
+                 *
+                 * @param string $url    Documentation URL, or '' for none.
+                 * @param string $source Source key, e.g. "cf7".
+                 */
+                return (string) apply_filters( 'form2zoho_docs_trigger_url', $url, $source );
+        }
+        /**
+         * Every trigger that has a guide, as the editor script needs it.
+         *
+         * Built through trigger_docs_url() rather than from the array directly so
+         * a site's filter reaches the client side too; the ones it leaves empty
+         * are dropped, which is what keeps the link hidden for them.
+         *
+         * @return array<string,array{url:string,label:string}>
+         */
+        private static function trigger_docs_for_js() {
+                $out = array();
+                foreach ( FormSources::keys() as $key ) {
+                        $url = self::trigger_docs_url( $key );
+                        if ( '' === $url ) {
+                                continue;
+                        }
+                        $out[ $key ] = array(
+                                'url'   => $url,
+                                'label' => self::trigger_docs_label( FormSources::label( $key ) ),
+                        );
+                }
+                return $out;
+        }
+        /**
+         * The documentation page for one step of the editor.
+         *
+         * Keyed by step rather than one link for the whole editor: "how do I set
+         * this up" is four different questions here, and a link that answers the
+         * wrong one is worse than none — it costs a click and a page load to find
+         * that out. Steps with no page of their own return an empty string, and
+         * render_docs_link() then prints nothing at all.
+         *
+         * Filterable so a site hosting its own copy of the documentation can point
+         * at that instead of sending its users to ours — the same hook shape as
+         * SettingsPage::docs_url().
+         *
+         * @param string $step Step key.
+         * @return string URL, or '' when that step has no documentation.
+         */
+        private static function docs_url( $step ) {
+                $urls = array(
+                        'trigger' => 'https://techwavesolutions.net/formbridge-zoho/trigger/',
+                );
+                $url = isset( $urls[ $step ] ) ? $urls[ $step ] : '';
+                /**
+                 * Filter a feed-editor step's documentation link.
+                 *
+                 * @param string $url  Documentation URL, or '' for none.
+                 * @param string $step Step key: trigger, details, connection, mapping.
+                 */
+                return (string) apply_filters( 'form2zoho_docs_feed_step_url', $url, $step );
+        }
+        /**
+         * The four-step rail across the top of the editor.
+         *
+         * The editor is a sequence, and a sequence with no map is four unrelated
+         * screens: the person cannot see how much is left, cannot tell which
+         * answers are already given, and has only a "Back" button to return by.
+         * This is that map — and, for the steps already passed, the way back to
+         * any of them in one click.
+         *
+         * It is not a progress bar. There is no filling track; each step is a
+         * marker with its own name, which is the part that was missing. admin.js
+         * keeps the is-current / is-done classes in step with the panel on screen
+         * and disables the markers for steps not yet reached, so this can never
+         * be used to skip a question the next step depends on.
+         *
+         * @param bool $trigger_locked Whether the feed is saved: the editor opens on
+         *                             step two, and the trigger step is drawn done
+         *                             and cannot be opened.
+         * @return void
+         */
+        private function render_stepper( $trigger_locked = false ) {
+                $steps = array(
+                        'trigger'    => array(
+                                'title' => __( 'Trigger', 'techwave-form-sync-for-zoho' ),
+                                'hint'  => __( 'Where records come from', 'techwave-form-sync-for-zoho' ),
+                        ),
+                        'details'    => array(
+                                'title' => __( 'Details', 'techwave-form-sync-for-zoho' ),
+                                'hint'  => __( 'Name and form', 'techwave-form-sync-for-zoho' ),
+                        ),
+                        'connection' => array(
+                                'title' => __( 'Destination', 'techwave-form-sync-for-zoho' ),
+                                'hint'  => __( 'Zoho app and account', 'techwave-form-sync-for-zoho' ),
+                        ),
+                        'mapping'    => array(
+                                'title' => __( 'Mapping', 'techwave-form-sync-for-zoho' ),
+                                'hint'  => __( 'Match the fields', 'techwave-form-sync-for-zoho' ),
+                        ),
+                );
+                $total = count( $steps );
+                $n     = 0;
+                echo '<nav class="form2zoho-stepper" aria-label="' . esc_attr__( 'Feed setup', 'techwave-form-sync-for-zoho' ) . '">';
+                echo '<ol class="form2zoho-stepper__list">';
+                foreach ( $steps as $key => $step ) {
+                        ++$n;
+                        $locked  = $trigger_locked && 'trigger' === $key;
+                        $current = $trigger_locked ? ( 'details' === $key ) : ( 1 === $n );
+                        printf(
+                                '<li class="form2zoho-stepper__item%s" data-step-for="%s"%s>',
+                                ( $current ? ' is-current' : '' ) . ( $locked ? ' is-done is-locked' : '' ),
+                                esc_attr( $key ),
+                                $locked ? ' title="' . esc_attr( self::locked_trigger_note() ) . '"' : ''
+                        );
+                        printf(
+                                '<button type="button" class="form2zoho-stepper__btn" data-goto="%s"%s%s>',
+                                esc_attr( $key ),
+                                $current ? ' aria-current="step"' : '',
+                                // Every step after the first starts unreachable. admin.js
+                                // enables each one as it is reached, so the rail can move
+                                // backwards freely and never forwards past an unanswered
+                                // question — the same rule the Continue buttons enforce.
+                                // A saved feed has answered them all, and only its locked
+                                // trigger stays shut.
+                                ( $trigger_locked ? $locked : 1 !== $n ) ? ' disabled' : ''
+                        );
+                        echo '<span class="form2zoho-stepper__marker" aria-hidden="true">' . esc_html( number_format_i18n( $n ) ) . '</span>';
+                        echo '<span class="form2zoho-stepper__text">';
+                        echo '<span class="form2zoho-stepper__title">';
+                        printf(
+                                /* translators: 1: step number, 2: total number of steps. */
+                                '<span class="screen-reader-text">' . esc_html__( 'Step %1$s of %2$s:', 'techwave-form-sync-for-zoho' ) . ' </span>',
+                                esc_html( number_format_i18n( $n ) ),
+                                esc_html( number_format_i18n( $total ) )
+                        );
+                        echo esc_html( $step['title'] );
+                        if ( $locked ) {
+                                echo ' <span class="screen-reader-text">' . esc_html__( '(locked)', 'techwave-form-sync-for-zoho' ) . '</span>';
+                        }
+                        echo '</span>';
+                        echo '<span class="form2zoho-stepper__hint">' . esc_html( $step['hint'] ) . '</span>';
+                        echo '</span>';
+                        echo '</button>';
+                        echo '</li>';
+                }
+                echo '</ol>';
+                echo '</nav>';
+        }
+        /**
+         * Why a saved feed's trigger cannot be changed, and what to do instead.
+         *
+         * Shown under the trigger card on step two and as the locked rail step's
+         * tooltip.
+         *
+         * @return string
+         */
+        private static function locked_trigger_note() {
+                return __( 'A saved feed keeps its trigger. To send a different form or event to Zoho, create a new feed.', 'techwave-form-sync-for-zoho' );
+        }
 …
                 $form   = isset( $row['form'] ) ? (string) $row['form'] : '';
                 $static = isset( $row['static'] ) ? (string) $row['static'] : '';
+                $ztype  = isset( $row['ztype'] ) ? (string) $row['ztype'] : '';
+                // Both of these put the row's value in the text box rather than in the
+                // Form field select.
+                $is_static = ( 'static' === $source || FieldMapper::TYPE_TEMPLATE === $source );
+                // ...but "Combine fields" keeps the Form field select live, because
+                // that is how a placeholder gets inserted.
+                $keeps_form = ( 'static' !== $source );
+                /*
+                 * Only one of Form field / Static value applies to a row, and the other
+                 * is disabled so the editor cannot be left saying two contradictory
+                 * things at once.
+                 *
+                 * Each disabled control is paired with a hidden input of the same name,
+                 * and exactly one of the pair is ever enabled. That is not decoration:
+                 * a browser does not submit a disabled control, and collect_mapping()
+                 * reads these four arrays *by index* — map_zoho[3] belongs with
+                 * map_static[3]. Drop one entry and every row after it silently pairs
+                 * with the wrong value, which would corrupt mappings rather than fail.
+                 * The hidden twin keeps one entry per row in every array.
+                 */
+                $off = ' disabled="disabled"';
                 $html = '<tr class="form2zoho-map-row">';
-                // Zoho field select — JS fills options from the module's fields; the
-                // saved value is kept selected via data-selected even before load.
-                $html .= '<td><select name="map_zoho[]" class="f2z-map-zoho" data-selected="' . esc_attr( $zoho ) . '">';
-                $html .= '<option value="">' . esc_html__( '— Select Zoho field —', 'techwave-form-sync-for-zoho' ) . '</option>';
-                if ( '' !== $zoho ) {
-                        $html .= '<option value="' . esc_attr( $zoho ) . '" selected>' . esc_html( $zoho ) . '</option>';
+                }
-                $html .= '</select></td>';
                 // Source.
 …
                 $html .= '<option value="field" ' . selected( $source, 'field', false ) . '>' . esc_html__( 'Form field', 'techwave-form-sync-for-zoho' ) . '</option>';
                 $html .= '<option value="static" ' . selected( $source, 'static', false ) . '>' . esc_html__( 'Static value', 'techwave-form-sync-for-zoho' ) . '</option>';
+                // One Zoho field, several answers. The value is written in the Static
+                // box as text with {field_id} placeholders, and the Form field select
+                // beside it stays usable as the way to insert one without having to
+                // know its id.
+                $html .= '<option value="' . esc_attr( FieldMapper::TYPE_TEMPLATE ) . '" ' . selected( $source, FieldMapper::TYPE_TEMPLATE, false ) . '>' . esc_html__( 'Combine fields', 'techwave-form-sync-for-zoho' ) . '</option>';
                 $html .= '</select></td>';
                 // Form field select — JS fills options from the chosen form's fields.
+                $html .= '<td><select name="map_form[]" class="f2z-map-form" data-selected="' . esc_attr( $form ) . '">';
+                $html .= '<option value="">' . esc_html__( '— Select form field —', 'techwave-form-sync-for-zoho' ) . '</option>';
+                // Above it, on a "Combine fields" row, admin.js lists the fields the
+                // template uses, each with a button that takes it back out.
+                $html .= '<td><div class="f2z-map-tokens" hidden></div>';
+                $html .= '<select name="map_form[]" class="f2z-map-form" data-selected="' . esc_attr( $form ) . '"' . ( $keeps_form ? '' : $off ) . '>';
+                $html .= '<option value="">' . esc_html__( 'Select form field', 'techwave-form-sync-for-zoho' ) . '</option>';
                 if ( '' !== $form ) {
                         $html .= '<option value="' . esc_attr( $form ) . '" selected>' . esc_html( $form ) . '</option>';
+                }
+                $html .= '</select></td>';
+                $html .= '</select>';
+                $html .= '<input type="hidden" name="map_form[]" class="f2z-map-form-slot" value=""' . ( $keeps_form ? $off : '' ) . ' /></td>';
+                // Zoho field select — JS fills options from the module's fields; the
+                // saved value is kept selected via data-selected even before load.
+                $html .= '<td><select name="map_zoho[]" class="f2z-map-zoho" data-selected="' . esc_attr( $zoho ) . '">';
+                $html .= '<option value="">' . esc_html__( 'Select Zoho field', 'techwave-form-sync-for-zoho' ) . '</option>';
+                if ( '' !== $zoho ) {
+                        $html .= '<option value="' . esc_attr( $zoho ) . '" selected>' . esc_html( $zoho ) . '</option>';
+                }
+                $html .= '</select>';
+                // Posts the Zoho field in place of the select once admin.js locks a row
+                // that a required field depends on, since a disabled select is not
+                // submitted. Disabled until then, so every row sends exactly one.
+                $html .= '<input type="hidden" name="map_zoho[]" class="f2z-map-zoho-slot" value="" disabled />';
+                // The type of the Zoho field selected above, so the delivery path knows
+                // whether it is filling a checkbox, a multi-select or plain text
+                // without asking Zoho again on every submission. Written by admin.js
+                // from the chosen option, and re-rendered here from the saved feed.
+                //
+                // Never disabled, unlike the pairs above: collect_mapping() reads these
+                // arrays by index, so every row must contribute exactly one entry to
+                // this one too.
+                $html .= '<input type="hidden" name="map_type[]" class="f2z-map-type" value="' . esc_attr( $ztype ) . '" /></td>';
                 // Static value.
+                $html .= '<td><input type="text" name="map_static[]" class="f2z-map-static" value="' . esc_attr( $static ) . '" /></td>';
+                $html .= '<td><input type="text" name="map_static[]" class="f2z-map-static" value="' . esc_attr( $static ) . '"' . ( $is_static ? '' : $off ) . ' />';
+                $html .= '<input type="hidden" name="map_static[]" class="f2z-map-static-slot" value=""' . ( $is_static ? $off : '' ) . ' /></td>';
                 $html .= '<td><button type="button" class="button-link form2zoho-remove-row">' . esc_html__( 'Remove', 'techwave-form-sync-for-zoho' ) . '</button></td>';
 …
                         // exists in Zoho) instead of silently defaulting.
                         'campaigns_subscription_type' => isset( $feed['campaigns_subscription_type'] ) ? (string) $feed['campaigns_subscription_type'] : '',
+                        'campaigns_list_add'          => isset( $feed['campaigns_list_add'] ) ? (string) $feed['campaigns_list_add'] : '',
                         'campaigns_tag'               => isset( $feed['campaigns_tag'] ) ? array_values( array_filter( array_map( 'trim', (array) $feed['campaigns_tag'] ) ) ) : array(),
                         'campaigns_topics'            => isset( $feed['campaigns_topics'] ) && is_array( $feed['campaigns_topics'] ) ? $feed['campaigns_topics'] : array(),
+                        // Same two the queue passes, so a log line an integration writes
+                        // itself (a Campaigns tag Zoho would not attach, say) belongs to
+                        // this feed here as well.
+                        'feed_id'                     => $id,
+                        'form_id'                     => isset( $feed['form_name'] ) ? (string) $feed['form_name'] : '',
                 );
 …
                                 $values[ (string) $rule['value'] ] = $this->sample_value( (string) $zoho_field );
+                        }
+                }
+                // What an add-on puts on a live job through form2zoho_build_job (the
+                // Pro Actions' workflow setting, a CRM layout, an assignment rule)
+                // goes on the test as well, or "Workflows: None" would still run
+                // Zoho's workflows for every test record. Only keys this array does
+                // not already set are taken.
+                $job = FeedsRepository::build_job( $feed, $settings['form_id'], $values );
+                if ( isset( $job['settings'] ) && is_array( $job['settings'] ) ) {
+                        $settings += $job['settings'];
+                }
 …
                         $message = '' !== $record_id
                                 /* translators: %s: Zoho record id. */
                                 ? sprintf( __( 'Success — record updated in Zoho (id %s).', 'techwave-form-sync-for-zoho' ), $record_id )
                                 : __( 'Success — a record was updated in Zoho.', 'techwave-form-sync-for-zoho' );
+                                ? sprintf( __( 'Success: record updated in Zoho (id %s).', 'techwave-form-sync-for-zoho' ), $record_id )
+                                : __( 'Success: a record was updated in Zoho.', 'techwave-form-sync-for-zoho' );
                 } else {
                         $message = '' !== $record_id
                                 /* translators: %s: Zoho record id. */
                                 ? sprintf( __( 'Success — record created in Zoho (id %s).', 'techwave-form-sync-for-zoho' ), $record_id )
                                 : __( 'Success — a test record was created in Zoho.', 'techwave-form-sync-for-zoho' );
+                                ? sprintf( __( 'Success: record created in Zoho (id %s).', 'techwave-form-sync-for-zoho' ), $record_id )
+                                : __( 'Success: a test record was created in Zoho.', 'techwave-form-sync-for-zoho' );
+                }
 …
+                }
                 if ( false !== strpos( $name, 'name' ) ) {
                         return 'Techwave Form Sync Test';
+                }
                 return 'Techwave Form Sync test';
+                        return 'FormBridge Test';
+                }
+                return 'FormBridge test';
+        }
 …
         /**
+         * Compose the stored comma-separated dedupe field list from the separate
+         * Email / Phone checkboxes plus any extra field names typed in. Zoho's
+         * upsert API matches a record as a duplicate if it shares *any one* of
+         * these fields, so Email and Phone are effectively checked independently.
+         * The comma-separated list of fields a duplicate check matches on.
+         *
+         * Only the unique-field boxes fill it. Zoho's upsert treats a record as a
+         * duplicate if it shares any one of these, and with none ticked CRM and
+         * Bigin still upsert, leaving the choice of field to Zoho's own check.
+         *
+         * Until the editor has built those boxes from a field list that loaded,
+         * the stored list is kept as it was: a Zoho request that failed must not
+         * empty it on save.
+         *
          * @return string
          */
         private function collect_dedupe_fields() {
-                // Nonce already verified in handle_save().
                 // phpcs:disable WordPress.Security.NonceVerification.Missing -- check_admin_referer() ran in handle_save().
+                if ( empty( $_POST['dedupe_loaded'] ) ) {
+                        $posted = isset( $_POST['dedupe_saved'] ) ? explode( ',', sanitize_text_field( wp_unslash( $_POST['dedupe_saved'] ) ) ) : array();
+                } else {
+                        // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- each element must match a Zoho API name exactly below, which is stricter than any sanitiser here.
+                        $posted = ! empty( $_POST['dedupe_unique'] ) && is_array( $_POST['dedupe_unique'] ) ? wp_unslash( $_POST['dedupe_unique'] ) : array();
+                }
+                // phpcs:enable WordPress.Security.NonceVerification.Missing
                 $fields = array();
+                if ( ! empty( $_POST['dedupe_email'] ) ) {
+                        $fields[] = 'Email';
+                }
+                if ( ! empty( $_POST['dedupe_phone'] ) ) {
+                        $fields[] = 'Phone';
+                }
+                if ( ! empty( $_POST['dedupe_extra'] ) ) {
+                        $extra  = sanitize_text_field( wp_unslash( $_POST['dedupe_extra'] ) );
+                        $fields = array_merge( $fields, array_filter( array_map( 'trim', explode( ',', $extra ) ) ) );
+                }
+                // phpcs:enable WordPress.Security.NonceVerification.Missing
+                foreach ( $posted as $name ) {
+                        $name = trim( (string) $name );
+                        // Allowlisted against Zoho's API-name shape, and rejected rather
+                        // than repaired: this ends up in an upsert's duplicate_check_fields,
+                        // and stripping a hand-made value down to something that looks like
+                        // a field name would send Zoho a duplicate check nobody chose.
+                        if ( 1 === preg_match( '/^[A-Za-z0-9_]+$/', $name ) ) {
+                                $fields[] = $name;
+                        }
+                }
                 return implode( ',', array_unique( $fields ) );
+        }
 …
          * to Elementor for anything unrecognised.
+         *
+         * A locked key is rejected the same way. It is a real key — the picker
+         * draws a tile for it — but nothing on this site can read the submissions
+         * a feed pointed at it would describe, so accepting one would save a feed
+         * that silently never delivers. The disabled tile and the missing <option>
+         * stop it in the browser; this is the check that matters, because a POST
+         * does not have to come from that form.
+         *
          * @param string $raw Posted value.
          * @return string
 …
         private function sanitize_form_type( $raw ) {
                 $key = sanitize_key( (string) $raw );
+                return in_array( $key, FormSources::keys(), true ) ? $key : 'elementor';
+                if ( ! in_array( $key, FormSources::keys(), true ) || FormSources::is_locked( $key ) ) {
+                        return 'elementor';
+                }
+                return $key;
+        }
 …
                 // phpcs:ignore WordPress.Security.NonceVerification.Missing -- check_admin_referer() ran above.
                 $existing_id = isset( $_POST['feed_id'] ) ? sanitize_text_field( wp_unslash( $_POST['feed_id'] ) ) : '';
+                $existing    = '' !== $existing_id ? $this->feeds->get( $existing_id ) : null;
+                // A new feed arrives with the id the editor picked for it. A double
+                // click, or a slow page pressed again, posts that same id twice, and
+                // saving under it updates the feed the first post created instead of
+                // adding a copy beside it.
+                if ( '' === $existing_id && isset( $_POST['new_feed_id'] ) ) {
+                        $new_id = sanitize_text_field( wp_unslash( $_POST['new_feed_id'] ) );
+                        if ( preg_match( '/^f_[a-f0-9]{12}$/', $new_id ) ) {
+                                $existing_id = $new_id;
+                        }
+                }
+                $existing = '' !== $existing_id ? $this->feeds->get( $existing_id ) : null;
                 // Filled in by collect_mapping() below, and reported after the redirect.
+                $mapping_skipped = 0;
+                $mapping_skipped    = 0;
+                $mapping_duplicates = 0;
+                $mapping_invalid    = 0;
                 $feed = array(
                         'id'                          => isset( $_POST['feed_id'] ) ? sanitize_text_field( wp_unslash( $_POST['feed_id'] ) ) : '',
+                        'id'                          => $existing_id,
                         'title'                       => isset( $_POST['title'] ) ? sanitize_text_field( wp_unslash( $_POST['title'] ) ) : '',
+                        'enabled'                     => ! empty( $_POST['enabled'] ),
+                        // Not posted by the editor any more — switching a feed on and off
+                        // belongs to the list, where the toggle sits beside the feed it
+                        // governs and takes one click. Reading the absent field as "off"
+                        // would have turned every feed off the first time it was saved,
+                        // so an existing feed keeps what it had and a new one starts on.
+                        'enabled'                     => is_array( $existing ) ? ! empty( $existing['enabled'] ) : true,
                         'form_name'                   => isset( $_POST['form_name'] ) ? sanitize_text_field( wp_unslash( $_POST['form_name'] ) ) : '',
+                        // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- sanitize_form_type() applies sanitize_key() + an allowlist.
+                        'form_type'                   => $this->sanitize_form_type( isset( $_POST['form_type'] ) ? wp_unslash( $_POST['form_type'] ) : '' ),
+                        // A saved feed keeps the trigger it was created with, whatever is
+                        // posted. The editor no longer offers the change; this is the check
+                        // that holds when a POST does not come from the editor. An old feed
+                        // stored before form_type existed means Elementor, as it does in
+                        // render_editor().
+                        'form_type'                   => is_array( $existing )
+                                ? ( '' !== (string) ( $existing['form_type'] ?? '' ) ? (string) $existing['form_type'] : 'elementor' )
+                                // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- sanitize_form_type() applies sanitize_key() + an allowlist.
+                                : $this->sanitize_form_type( isset( $_POST['form_type'] ) ? wp_unslash( $_POST['form_type'] ) : '' ),
                         'integration'                 => isset( $_POST['integration'] ) ? sanitize_key( wp_unslash( $_POST['integration'] ) ) : 'crm',
                         'connection_id'               => isset( $_POST['connection_id'] ) ? sanitize_text_field( wp_unslash( $_POST['connection_id'] ) ) : '',
 …
                         'module_label'                => isset( $_POST['module_label'] ) ? sanitize_text_field( wp_unslash( $_POST['module_label'] ) ) : '',
                         'campaigns_subscription_type' => isset( $_POST['campaigns_subscription_type'] ) ? sanitize_text_field( wp_unslash( $_POST['campaigns_subscription_type'] ) ) : '',
+                        'campaigns_list_add'          => isset( $_POST['campaigns_list_add'] ) && 'confirm' === sanitize_key( wp_unslash( $_POST['campaigns_list_add'] ) ) ? 'confirm' : 'direct',
                         'campaigns_tag'               => isset( $_POST['campaigns_tag'] ) && is_array( $_POST['campaigns_tag'] ) ? array_values( array_filter( array_map( 'sanitize_text_field', wp_unslash( $_POST['campaigns_tag'] ) ) ) ) : array(),
                         'campaigns_topics'            => isset( $_POST['campaigns_topics'] ) && is_array( $_POST['campaigns_topics'] ) ? array_map( 'sanitize_text_field', wp_unslash( $_POST['campaigns_topics'] ) ) : array(),
                         'dedupe_enabled'              => ! empty( $_POST['dedupe_enabled'] ),
                         'dedupe_fields'               => $this->collect_dedupe_fields(),
                         'mapping'                     => $this->collect_mapping( $mapping_skipped ),
+                        'mapping'                     => $this->collect_mapping( $mapping_skipped, $mapping_duplicates, $mapping_invalid ),
                         'created_at'                  => is_array( $existing ) && ! empty( $existing['created_at'] ) ? $existing['created_at'] : current_time( 'mysql' ),
+                        // The same moment in UTC, which is what the list converts to the
+                        // site's timezone when it shows it. A feed from before this existed
+                        // keeps an empty one rather than a guessed one.
+                        'created_at_gmt'              => is_array( $existing ) ? (string) ( $existing['created_at_gmt'] ?? '' ) : current_time( 'mysql', true ),
                 );
                 $feed['title'] = $this->unique_title( $feed['title'], $feed['id'] );
+                /**
+                 * Filter a feed as it is about to be stored.
+                 *
+                 * Where an add-on persists the fields it printed through
+                 * form2zoho_feed_editor_fields: read them off $_POST — handle_save()
+                 * has already run both the capability check and
+                 * check_admin_referer() by this point — sanitize them, and return
+                 * them as extra keys on the feed.
+                 *
+                 * Deliberately placed before this method's own validation, so an
+                 * integration or connection id a callback writes is still checked
+                 * against what actually exists before anything is saved. A return
+                 * value that is not an array with an 'id' is ignored.
+                 *
+                 * @param array      $feed     Sanitized feed about to be saved.
+                 * @param array|null $existing The stored feed being replaced, null for a new one.
+                 */
+                $filtered = apply_filters( 'form2zoho_save_feed', $feed, $existing );
+                if ( is_array( $filtered ) && isset( $filtered['id'] ) ) {
+                        $feed = $filtered;
+                }
                 // Guard against an unknown integration id.
 …
                 // Carried separately from $message so it can be reported alongside
                 // whichever save outcome happened, rather than replacing it.
+                if ( $mapping_duplicates > 0 ) {
+                        $args['duplicates'] = $mapping_duplicates;
+                }
                 if ( $mapping_skipped > 0 ) {
                         $args['skipped'] = $mapping_skipped;
+                }
+                if ( $mapping_invalid > 0 ) {
+                        $args['invalid'] = $mapping_invalid;
+                }
 …
          * Turn the parallel mapping arrays from the form into the stored shape.
+         *
+         * @param int $skipped Out: how many rows named a Zoho field but carried
+         *                     no value, and were therefore left out.
+         * @param int $skipped    Out: how many rows named a Zoho field but carried
+         *                         no value, and were therefore left out.
+         * @param int $duplicates Out: how many rows aimed at a Zoho field an
+         *                         earlier row had already taken.
+         * @param int $invalid    Out: how many static values were not the kind
+         *                         of value their Zoho field accepts.
          * @return array<string,array{type:string,value:string}>
          */
         private function collect_mapping( &$skipped = 0 ) {
+        private function collect_mapping( &$skipped = 0, &$duplicates = 0, &$invalid = 0 ) {
                 // Nonce already verified in handle_save(); every element of these four
                 // parallel arrays is passed through sanitize_text_field() in the loop below.
 …
                 $form   = isset( $_POST['map_form'] ) ? (array) wp_unslash( $_POST['map_form'] ) : array();
                 $stat   = isset( $_POST['map_static'] ) ? (array) wp_unslash( $_POST['map_static'] ) : array();
+                $ztypes = isset( $_POST['map_type'] ) ? (array) wp_unslash( $_POST['map_type'] ) : array();
                 // phpcs:enable WordPress.Security.NonceVerification.Missing, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
+                $mapping = array();
+                $skipped = 0;
+                $mapping    = array();
+                $skipped    = 0;
+                $duplicates = 0;
+                $invalid    = 0;
                 foreach ( $zoho as $i => $field ) {
 …
+                        }
+                        $type = isset( $source[ $i ] ) && 'static' === $source[ $i ] ? 'static' : 'field';
+                        if ( 'static' === $type ) {
+                        $row_source = isset( $source[ $i ] ) ? $source[ $i ] : 'field';
+                        $type       = in_array( $row_source, array( 'static', FieldMapper::TYPE_TEMPLATE ), true ) ? $row_source : 'field';
+                        if ( 'field' !== $type ) {
                                 $value = isset( $stat[ $i ] ) ? sanitize_text_field( $stat[ $i ] ) : '';
                         } else {
 …
+                        }
+                        // A static value the Zoho field will not accept: letters in a phone
+                        // number, text in a number field. It is sent exactly as typed, so
+                        // Zoho would refuse the record or store the junk. The editor stops
+                        // the save before this; here it is left out and reported, for a
+                        // request that did not come through the editor. See StaticValue.
+                        $posted_ztype = isset( $ztypes[ $i ] ) ? sanitize_key( $ztypes[ $i ] ) : '';
+                        if ( 'static' === $type && '' !== StaticValue::problem( $posted_ztype, $value ) ) {
+                                ++$invalid;
+                                continue;
+                        }
+                        // One Zoho field holds one value, so a second row aimed at the
+                        // same field cannot also be sent. This used to overwrite: the
+                        // later row won, the earlier one vanished on save, and the editor
+                        // came back showing one row where two had been typed. The first
+                        // is kept and the rest are counted, because the alternative —
+                        // last-one-wins — silently discards the row somebody wrote first.
+                        //
+                        // The editor no longer offers a field another row has taken, so
+                        // reaching this needs scripting off or a hand-made request. It is
+                        // still worth catching: the cost of not catching it is losing
+                        // somebody's work without a word.
+                        if ( isset( $mapping[ $field ] ) ) {
+                                ++$duplicates;
+                                continue;
+                        }
                         $mapping[ $field ] = array(
                                 'type'  => $type,
                                 'value' => $value,
                         );
+                        // What kind of Zoho field this row targets, when the app told us.
+                        // Stored for every type, not only the ones the mapper converts:
+                        // delivery also needs to know which rows are file fields, and a
+                        // row with no type then means only "saved before types were
+                        // stored", which delivery can still work out on its own.
+                        $ztype = isset( $ztypes[ $i ] ) ? sanitize_key( $ztypes[ $i ] ) : '';
+                        if ( '' !== $ztype ) {
+                                $mapping[ $field ]['zoho_type'] = $ztype;
+                        }
+                }
 …
                         $this->render_alert(
                                 'warning',
                                 __( 'Feed saved, but the Zoho account it referred to no longer exists. The feed has been switched off — pick a connected account and enable it again.', 'techwave-form-sync-for-zoho' )
+                                __( 'Feed saved, but the Zoho account it referred to no longer exists. The feed has been switched off. Pick a connected account and enable it again.', 'techwave-form-sync-for-zoho' )
                         );
                 } elseif ( 'deleted' === $message ) {
 …
                 // Reported on top of the save outcome above, not instead of it: a feed
                 // can both lose its connection and have unfinished mapping rows.
+                // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- display-only count.
+                $duplicates = isset( $_GET['duplicates'] ) ? absint( wp_unslash( $_GET['duplicates'] ) ) : 0;
+                if ( $duplicates > 0 ) {
+                        $this->render_alert(
+                                'warning',
+                                sprintf(
+                                        /* translators: %d: number of mapping rows that aimed at a Zoho field another row had already taken. */
+                                        _n(
+                                                '%d mapping row was left out because another row already sends to that Zoho field. A field can only hold one value. Use the "Combine fields" source if you need several answers in one.',
+                                                '%d mapping rows were left out because other rows already send to those Zoho fields. A field can only hold one value. Use the "Combine fields" source if you need several answers in one.',
+                                                $duplicates,
+                                                'techwave-form-sync-for-zoho'
+                                        ),
+                                        $duplicates
+                                )
+                        );
+                }
                 // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- display-only count.
                 $skipped = isset( $_GET['skipped'] ) ? absint( wp_unslash( $_GET['skipped'] ) ) : 0;
 …
                         );
+                }
+                // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- display-only count.
+                $invalid = isset( $_GET['invalid'] ) ? absint( wp_unslash( $_GET['invalid'] ) ) : 0;
+                if ( $invalid > 0 ) {
+                        $this->render_alert(
+                                'warning',
+                                sprintf(
+                                        /* translators: %d: number of mapping rows whose static value their Zoho field would not accept. */
+                                        _n(
+                                                '%d mapping row was left out because its static value is not the kind of value its Zoho field accepts, such as letters in a phone number. Correct it and save again.',
+                                                '%d mapping rows were left out because their static values are not the kind of value their Zoho fields accept, such as letters in a phone number. Correct them and save again.',
+                                                $invalid,
+                                                'techwave-form-sync-for-zoho'
+                                        ),
+                                        $invalid
+                                )
+                        );
+                }
+        }
+}

techwave-form-sync-for-zoho/trunk/includes/Admin/FeedsRepository.php

-              r3649280
+              r3748247
+ *
  * Feeds replace per-form configuration inside the Elementor editor — everything
  * is managed from WP Admin → Techwave Sync → Forms.
+ * is managed from WP Admin → FormBridge → All Feeds.
+ *
  * @package TechwaveFormSyncForZoho
 …
          * @param string $form_id     Form identifier to record on the job.
          * @param array  $form_values Submitted field values.
+         * @param array  $files       Field id => absolute paths this submission
+         *                            uploaded. Empty for a resubmit, and for any
+         *                            form plugin whose adapter does not collect
+         *                            them.
          * @return array
          */
         public static function build_job( array $feed, $form_id, array $form_values ) {
                 return array(
+        public static function build_job( array $feed, $form_id, array $form_values, array $files = array() ) {
+                $job = array(
                         'integration' => isset( $feed['integration'] ) ? sanitize_key( $feed['integration'] ) : '',
                         'form_id'     => (string) $form_id,
 …
                                 'mapping'                     => isset( $feed['mapping'] ) && is_array( $feed['mapping'] ) ? $feed['mapping'] : array(),
                                 'campaigns_subscription_type' => isset( $feed['campaigns_subscription_type'] ) ? (string) $feed['campaigns_subscription_type'] : '',
+                                'campaigns_list_add'          => isset( $feed['campaigns_list_add'] ) ? (string) $feed['campaigns_list_add'] : '',
                                 'campaigns_tag'               => isset( $feed['campaigns_tag'] ) ? array_values( array_filter( array_map( 'trim', (array) $feed['campaigns_tag'] ) ) ) : array(),
                                 'campaigns_topics'            => isset( $feed['campaigns_topics'] ) && is_array( $feed['campaigns_topics'] ) ? $feed['campaigns_topics'] : array(),
                         ),
                         'form_values' => $form_values,
+                        /*
+                         * Absolute paths to anything the submission uploaded, keyed by the
+                         * same field id the values use.
+                         *
+                         * Kept out of 'form_values' deliberately. Those are the things a
+                         * mapping row can point at, and they are shown in the editor and
+                         * written to the log; a server path is neither, and putting one
+                         * there would offer it as a mappable field and print it into
+                         * somebody's CRM as text.
+                         *
+                         * Contact Form 7 and Elementor hand their uploads over and their
+                         * adapters pass them in. Every other form plugin submits where it
+                         * stored the file (a URL, an attachment id), so for each row that
+                         * sends a form field to a Zoho file field the file is found from
+                         * that value here. That also covers a Logs-screen resubmit, as
+                         * long as the form plugin has kept the file.
+                         */
+                        'files'       => \Form2Zoho\Support\UploadedFiles::for_mapping(
+                                isset( $feed['mapping'] ) && is_array( $feed['mapping'] ) ? $feed['mapping'] : array(),
+                                $form_values,
+                                $files,
+                                // Empty on a feed saved before form_type existed, which means
+                                // Elementor, as it does everywhere else.
+                                isset( $feed['form_type'] ) && '' !== $feed['form_type'] ? (string) $feed['form_type'] : 'elementor',
+                                (string) $form_id
+                        ),
                 );
+                /**
+                 * Filter the job built from a feed, before it is delivered.
+                 *
+                 * 'settings' is deliberately a whitelist of the keys this plugin
+                 * itself understands, so per-feed settings an add-on stored through
+                 * form2zoho_save_feed do not reach the integration on their own —
+                 * this is where they get copied across.
+                 *
+                 * Also runs for a Logs-screen resubmit, which rebuilds the job from
+                 * the feed's current configuration rather than the original request.
+                 *
+                 * @param array  $job         The job about to be delivered.
+                 * @param array  $feed        The feed it was built from.
+                 * @param string $form_id     Form identifier recorded on the job.
+                 * @param array  $form_values Field id => submitted value.
+                 */
+                $filtered = apply_filters( 'form2zoho_build_job', $job, $feed, (string) $form_id, $form_values );
+                // A job with no integration id is dropped by Dispatcher::process_job()
+                // without a log row, so a filter returning something unusable would
+                // lose the submission silently rather than noisily.
+                if ( is_array( $filtered ) && ! empty( $filtered['integration'] ) && isset( $filtered['settings'], $filtered['form_values'] ) ) {
+                        return $filtered;
+                }
+                return $job;
+        }

techwave-form-sync-for-zoho/trunk/includes/Admin/SettingsPage.php

-              r3649280
+              r3748247
 use Form2Zoho\Logging\Logger;
 use Form2Zoho\Support\Assets;
+use Form2Zoho\Support\Branding;
 use Form2Zoho\Support\DataCenters;
 use Form2Zoho\Support\Encryption;
 use Form2Zoho\Support\Markup;
 use Form2Zoho\Support\Settings;
+use Form2Zoho\Support\VideoGuide;
+use Form2Zoho\Integrations\IntegrationRegistry;
+use Form2Zoho\Core\Plugin;
 defined( 'ABSPATH' ) || exit;
 …
 final class SettingsPage {
+        private const CAP  = 'manage_options';
+        private const SLUG = 'form2zoho';
+        private const CAP = 'manage_options';
+        /**
+         * This screen's slug, the plugin's name as the address shows it.
+         *
+         * Public, so every link to Connections is built from it rather than typed
+         * out. It was `form2zoho`, and LegacyPageSlugs sends that address here.
+         */
+        public const SLUG = 'formbridge';
         /**
 …
                 add_action( 'admin_post_form2zoho_clear_logs', array( $this, 'handle_clear_logs' ) );
                 add_action( 'wp_ajax_form2zoho_render_tab', array( $this, 'ajax_render_tab' ) );
+                add_filter( 'submenu_file', array( $this, 'current_submenu' ) );
+                add_action( 'wp_ajax_form2zoho_logs_page', array( $this, 'ajax_logs_page' ) );
+        }
 …
          */
         public function add_menu() {
+                // Connections is a submenu, not the landing screen. FeedsPage owns the
+                // top-level entry (see FeedsPage::add_menu(), which runs first on a
+                // lower priority) because Forms is the screen someone opens every day
+                // while this one is visited once, during setup.
+                $this->hook_suffix = add_submenu_page(
+                        FeedsPage::MENU_SLUG,
+                        __( 'Connections', 'techwave-form-sync-for-zoho' ),
+                        __( 'Connections', 'techwave-form-sync-for-zoho' ),
+                        self::CAP,
+                        self::SLUG,
+                        array( $this, 'render' )
+                );
+                // One sidebar entry per tab of this screen, in the order the masthead
+                // lists them, so the two menus offer the same places: Logs,
+                // Connections, Settings, Docs & Support, then any tab an add-on
+                // added. Only Connections is a registered screen. The rest take the
+                // tab's own URL for a slug, the way ProUpsell adds its link: there is
+                // no screen of their own to register, they are tabs of this one.
+                $tabs = self::tab_labels();
+                unset( $tabs['connections'] );
+                $order = array();
+                foreach ( array( 'logs', 'connections', 'settings' ) as $tab ) {
+                        if ( 'connections' === $tab || isset( $tabs[ $tab ] ) ) {
+                                $order[] = $tab;
+                        }
+                }
+                $order = array_merge( $order, array_diff( array_keys( $tabs ), $order ) );
+                foreach ( $order as $tab ) {
+                        if ( 'connections' === $tab ) {
+                                // A submenu, not the landing screen. FeedsPage owns the
+                                // top-level entry (see FeedsPage::add_menu(), which runs first
+                                // on a lower priority) because Forms is the screen someone
+                                // opens every day while this one is visited once, during setup.
+                                $this->hook_suffix = add_submenu_page(
+                                        FeedsPage::MENU_SLUG,
+                                        __( 'Connections', 'techwave-form-sync-for-zoho' ),
+                                        __( 'Connections', 'techwave-form-sync-for-zoho' ),
+                                        self::CAP,
+                                        self::SLUG,
+                                        array( $this, 'render' )
+                                );
+                                continue;
+                        }
+                        add_submenu_page(
+                                FeedsPage::MENU_SLUG,
+                                (string) $tabs[ $tab ],
+                                esc_html( (string) $tabs[ $tab ] ),
+                                self::CAP,
+                                self::tab_menu_slug( (string) $tab )
+                        );
+                }
+        }
+        /**
+         * A tab's sidebar entry's slug: the tab's own URL.
+         *
+         * @param string $tab Tab slug.
+         * @return string
+         */
+        private static function tab_menu_slug( $tab ) {
+                return admin_url( 'admin.php?page=' . self::SLUG . '&tab=' . rawurlencode( $tab ) );
+        }
+        /**
+         * Mark the tab on screen, not Connections, as the sidebar's current item.
+         *
+         * WordPress picks the current item by the `page` argument alone, and
+         * every tab's entry shares it — so Logs, Settings and Docs & Support
+         * were all shown with Connections in bold. Naming the entry here is how
+         * core itself is told otherwise.
+         *
+         * @param mixed $submenu_file The submenu entry WordPress is about to mark.
+         * @return mixed
+         */
+        public function current_submenu( $submenu_file ) {
+                // phpcs:disable WordPress.Security.NonceVerification.Recommended -- read-only routing.
+                $page = isset( $_GET['page'] ) ? sanitize_key( wp_unslash( $_GET['page'] ) ) : '';
+                $tab  = isset( $_GET['tab'] ) ? sanitize_key( wp_unslash( $_GET['tab'] ) ) : '';
+                // phpcs:enable
+                if ( self::SLUG === $page && '' !== $tab && 'connections' !== $tab && array_key_exists( $tab, self::tab_labels() ) ) {
+                        // Through plugin_basename(), as add_submenu_page() stored it.
+                        return plugin_basename( self::tab_menu_slug( $tab ) );
+                }
+                return $submenu_file;
+        }
 …
                                 'nonce'        => wp_create_nonce( 'form2zoho_ajax' ),
                                 'integrations' => $integrations,
+                                'consoleUrls'  => DataCenters::console_urls(),
                                 'i18n'         => array(
                                         'pickInt'     => __( 'Select a Zoho service', 'techwave-form-sync-for-zoho' ),
 …
                                         'label'       => __( 'Label', 'techwave-form-sync-for-zoho' ),
                                         'required'    => __( 'Required', 'techwave-form-sync-for-zoho' ),
                                         'copyHint'    => __( 'Copy these API names into a feed under Techwave Sync → Forms.', 'techwave-form-sync-for-zoho' ),
+                                        'copyHint'    => __( 'Copy these API names into a feed under FormBridge → All Feeds.', 'techwave-form-sync-for-zoho' ),
                                         'noResults'   => __( 'Nothing returned.', 'techwave-form-sync-for-zoho' ),
                                         'sendingTest' => __( 'Sending…', 'techwave-form-sync-for-zoho' ),
 …
+                }
+                $tab = isset( $_GET['tab'] ) ? sanitize_key( wp_unslash( $_GET['tab'] ) ) : 'connections'; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
+                $tab  = isset( $_GET['tab'] ) ? sanitize_key( wp_unslash( $_GET['tab'] ) ) : 'connections'; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
+                $tabs = $this->tab_list();
+                if ( ! isset( $tabs[ $tab ] ) ) {
+                        $tab = 'connections';
+                }
                 echo '<div class="wrap form2zoho form2zoho-page-settings">';
+                echo '<div class="form2zoho-hero">';
+                echo '<span class="form2zoho-hero-logo"><span class="form2zoho-hero-logo-icon">' . esc_html__( 'TFS', 'techwave-form-sync-for-zoho' ) . '</span>' . esc_html__( 'Techwave Form Sync for Zoho', 'techwave-form-sync-for-zoho' ) . '</span>';
+                echo '</div>';
+                HeaderNav::render( $tab );
                 echo '<div class="form2zoho-settings-pop" id="form2zoho-tab-body">';
                 $this->render_tab_body( $tab );
 …
                 $this->oauth_notice();
                 $this->action_notice();
-                $this->tabs( $tab );
                 if ( 'logs' === $tab ) {
 …
                 } elseif ( 'settings' === $tab ) {
                         $this->render_settings();
+                } elseif ( 'connections' === $tab ) {
+                        $this->render_connections();
+                } elseif ( 'support' === $tab ) {
+                        $this->render_support();
                 } else {
+                        $this->render_connections();
+                        /**
+                         * Renders the body of a tab added through form2zoho_settings_tabs.
+                         *
+                         * Only ever fires for a slug that filter registered — both entry
+                         * points check the tab against the list first and fall back to
+                         * Connections — so a callback does not have to guard against
+                         * being called for somebody else's tab, only its own.
+                         *
+                         * Escape your own output: this prints straight into the page.
+                         *
+                         * @param string $tab Active tab slug.
+                         */
+                        do_action( 'form2zoho_render_settings_tab', $tab );
+                }
+        }
 …
                 check_ajax_referer( 'form2zoho_ajax', 'nonce' );
+                $tab = isset( $_GET['tab'] ) ? sanitize_key( wp_unslash( $_GET['tab'] ) ) : 'connections';
+                if ( ! in_array( $tab, array( 'connections', 'logs', 'settings' ), true ) ) {
+                $tab  = isset( $_GET['tab'] ) ? sanitize_key( wp_unslash( $_GET['tab'] ) ) : 'connections';
+                $tabs = $this->tab_list();
+                if ( ! isset( $tabs[ $tab ] ) ) {
                         $tab = 'connections';
+                }
 …
         /**
+         * Tab navigation.
+         *
+         * @param string $current Active tab.
+         * @return void
+         */
+        private function tabs( $current ) {
+         * Tab slug => label for every tab on this screen.
+         *
+         * Deliberately one list rather than three: the tab bar, the AJAX
+         * tab-switch allowlist and the body dispatcher all read it, so an added
+         * tab cannot end up rendered but unclickable, or clickable but rejected
+         * as unknown.
+         *
+         * @return array<string,string>
+         */
+        private function tab_list() {
+                return self::tab_labels();
+        }
+        /**
+         * The same list as tab_list(), for callers outside this class — the
+         * masthead's navigation (HeaderNav) draws a link for every tab.
+         *
+         * @return array<string,string>
+         */
+        public static function tab_labels() {
                 $tabs = array(
                         'connections' => __( 'Connections', 'techwave-form-sync-for-zoho' ),
                         'logs'        => __( 'Logs', 'techwave-form-sync-for-zoho' ),
                         'settings'    => __( 'Settings', 'techwave-form-sync-for-zoho' ),
+                );
+                echo '<h2 class="nav-tab-wrapper form2zoho-settings-tabs">';
+                foreach ( $tabs as $slug => $label ) {
+                        $url = add_query_arg(
+                                array(
+                                        'page' => self::SLUG,
+                                        'tab'  => $slug,
+                                ),
+                                admin_url( 'admin.php' )
+                        );
+                        printf(
+                                '<a href="%s" class="nav-tab %s">%s</a>',
+                                esc_url( $url ),
+                                $slug === $current ? 'nav-tab-active' : '',
+                                esc_html( $label )
+                        );
+                }
+                echo '</h2>';
+                        'support'     => __( 'Docs & Support', 'techwave-form-sync-for-zoho' ),
+                );
+                /**
+                 * Filter the tabs on the plugin's settings screen.
+                 *
+                 * An added tab is drawn by hooking form2zoho_render_settings_tab,
+                 * which receives the slug. A licence screen for an add-on belongs
+                 * here.
+                 *
+                 * The three built-in tabs are put back afterwards if a callback
+                 * drops one: the screen has nowhere to send a person whose tab
+                 * vanished, and Connections is where every other fallback lands.
+                 *
+                 * @param array $tabs Tab slug => label.
+                 */
+                $filtered = apply_filters( 'form2zoho_settings_tabs', $tabs );
+                return is_array( $filtered ) ? array_merge( $tabs, $filtered ) : $tabs;
+        }
 …
                         $this->render_alert(
                                 'error',
                                 __( 'This server is missing PHP\'s OpenSSL extension (with AES-256-GCM), so Zoho credentials cannot be encrypted. Adding a connection is disabled until your host enables it — the plugin will not store a client secret or refresh token unencrypted.', 'techwave-form-sync-for-zoho' ),
+                                __( 'This server is missing PHP\'s OpenSSL extension (with AES-256-GCM), so Zoho credentials cannot be encrypted. Adding a connection is disabled until your host enables it. The plugin will not store a client secret or refresh token unencrypted.', 'techwave-form-sync-for-zoho' ),
                                 __( 'Cannot store credentials securely', 'techwave-form-sync-for-zoho' )
                         );
 …
                 echo '<div class="form2zoho-modal-head">';
                 echo '<h2 class="form2zoho-modal-title" id="form2zoho-add-connection-title">' . esc_html__( 'Create a connection', 'techwave-form-sync-for-zoho' ) . '</h2>';
+                echo '<p class="description form2zoho-modal-sub">' . esc_html__( 'Register this site as a Server-based Applications in the Zoho API console, then paste the credentials below.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                // "Zoho API console" is the link, not a URL printed in the sentence:
+                // the URL is long, region-dependent and nobody needs to read it. Its
+                // href follows the data centre picker below — the console is a
+                // different host per region, and the wrong one shows a console with
+                // none of your clients in it, which looks exactly like having lost
+                // them. admin.js keeps it in step; this is the starting value.
+                echo '<p class="description form2zoho-modal-sub">';
+                printf(
+                        /* translators: %s: link to the Zoho API console, reading "Zoho API console". */
+                        esc_html__( 'Register this site as a Server-based Application in the %s, then paste the credentials below.', 'techwave-form-sync-for-zoho' ),
+                        sprintf(
+                                '<a href="%s" class="form2zoho-console-link" target="_blank" rel="noopener noreferrer">%s</a>',
+                                esc_url( DataCenters::console_url( 'us' ) ),
+                                esc_html__( 'Zoho API console', 'techwave-form-sync-for-zoho' )
+                        )
+                );
+                echo '</p>';
                 echo '</div>';
 …
                 echo '<code title="' . esc_attr( $redirect ) . '">' . esc_html( $redirect ) . '</code>';
                 echo '<button type="button" class="form2zoho-copy-text" data-copy="' . esc_attr( $redirect ) . '" title="' . esc_attr__( 'Copy to clipboard', 'techwave-form-sync-for-zoho' ) . '">';
+                echo '<svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="9" y="9" width="13" height="13" rx="2"/><path d="M5 15H4a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h9a2 2 0 0 1 2 2v1"/></svg>';
+                // Both icons are printed. The stylesheet shows the tick while the
+                // button carries .is-copied, so the copy is confirmed where it was
+                // pressed.
+                echo '<svg class="form2zoho-copy-text__icon" width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="9" y="9" width="13" height="13" rx="2"/><path d="M5 15H4a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h9a2 2 0 0 1 2 2v1"/></svg>';
+                echo '<svg class="form2zoho-copy-text__done" width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="20 6 9 17 4 12"/></svg>';
                 echo '</button>';
                 echo '</span>';
 …
                 echo '<tr><th scope="row">' . esc_html__( 'Authorize for', 'techwave-form-sync-for-zoho' ) . '</th><td>';
                 // Same grid as the Edit access drawer, so the two app pickers match.
                 // Still a <p>: admin.js scopes the checkbox interlock with
                 // closest( 'td, p' ), and this <p> becomes that container.
+                // The class is what admin.js scopes the "All applications" / per-app
+                // interlock to, so it has to stay on the element wrapping both.
                 echo '<p class="form2zoho-apps-grid">';
                 // Nothing is pre-selected, and "All applications" in particular is not
 …
+                }
                 echo '</p>';
                 echo '<p class="description">' . esc_html__( 'Check only the Zoho apps this account will actually send to — Zoho asks permission for exactly what you pick here, and nothing else. You can add more later with "Edit access" on the connection, without deleting it. "All applications" requests every permission the plugin supports at once and is rarely what you want.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '<p class="description">' . esc_html__( 'Check only the Zoho apps this account will actually send to. Zoho asks permission for exactly what you pick here, and nothing else. You can add more later with "Edit access" on the connection, without deleting it. "All applications" requests every permission the plugin supports at once and is rarely what you want.', 'techwave-form-sync-for-zoho' ) . '</p>';
                 echo '</td></tr>';
 …
                 submit_button( __( 'Connect with Zoho', 'techwave-form-sync-for-zoho' ), 'primary', 'submit', false );
                 echo '<button type="button" class="button form2zoho-cancel-add-connection">' . esc_html__( 'Cancel', 'techwave-form-sync-for-zoho' ) . '</button>';
+                // The written-out version of this dialog, at the far end of the row.
+                //
+                // Here rather than in the sentence at the top, which already carries
+                // the one link that is part of the task — the console someone has to
+                // open to get the credentials. A second link beside it would compete
+                // with it, and these are different kinds of thing: that one is a step,
+                // this one is help for when the steps are not enough. The footer is
+                // also the half of the dialog that does not scroll, so it stays
+                // reachable from the bottom of a long form on a short screen.
+                printf(
+                        '<a class="form2zoho-modal-docs" href="%s" target="_blank" rel="noopener noreferrer">',
+                        esc_url( self::docs_url() )
+                );
+                echo '<svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8Z"/><polyline points="14 2 14 8 20 8"/><line x1="8" y1="13" x2="16" y2="13"/><line x1="8" y1="17" x2="16" y2="17"/></svg>';
+                echo '<span>' . esc_html__( 'Setup guide', 'techwave-form-sync-for-zoho' ) . '</span>';
+                echo '<svg class="form2zoho-extlink" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M18 13v6a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2h6"/><polyline points="15 3 21 3 21 9"/><line x1="10" y1="14" x2="21" y2="3"/></svg>';
+                echo '</a>';
+                // The same ground, watched rather than read. Registering an
+                // application in the Zoho console is the step people get stuck on, and
+                // it is far easier to follow somebody doing it than to read it.
+                VideoGuide::render(
+                        'connections',
+                        __( 'Watch: connect an account', 'techwave-form-sync-for-zoho' ),
+                        'form2zoho-modal-docs'
+                );
                 echo '</div>';
                 echo '</form>';
 …
                 echo '</div>';
+        }
+        /**
+         * The documentation for creating a connection.
+         *
+         * A page about this one task, so there is no anchor to land on and none
+         * to go stale: the previous link pointed into a page about installing the
+         * plugin — which someone reading this dialog has already done — and
+         * needed a fragment to reach the part that was relevant.
+         *
+         * Filterable so a site that hosts its own copy of the documentation can
+         * point at that instead of sending its users off to ours.
+         *
+         * @return string
+         */
+        private static function docs_url() {
+                $url = 'https://techwavesolutions.net/formbridge-zoho/zoho-connection/create-zoho-connection/';
+                /**
+                 * Filter the "Setup guide" link in the connection dialog.
+                 *
+                 * @param string $url Documentation URL.
+                 */
+                return (string) apply_filters( 'form2zoho_docs_connection_url', $url );
+        }
 …
                                 echo '</button>';
+                        }
+                        /* This link is documented in FeedsPage's own zero state. */
+                        VideoGuide::render( 'setup', __( 'Watch the full setup', 'techwave-form-sync-for-zoho' ) );
                         echo '</div>';
                         return;
 …
                 echo '<table class="form2zoho-conn-table"><thead><tr>';
                 echo '<th scope="col">' . esc_html__( 'Account', 'techwave-form-sync-for-zoho' ) . '</th>';
                 echo '<th scope="col">' . esc_html__( 'Authorized for', 'techwave-form-sync-for-zoho' ) . '</th>';
                 echo '<th scope="col">' . esc_html__( 'Status', 'techwave-form-sync-for-zoho' ) . '</th>';
+                echo '<th scope="col" class="form2zoho-col-center">' . esc_html__( 'Authorized for', 'techwave-form-sync-for-zoho' ) . '</th>';
+                echo '<th scope="col" class="form2zoho-col-center">' . esc_html__( 'Status', 'techwave-form-sync-for-zoho' ) . '</th>';
                 echo '<th scope="col" class="form2zoho-col-actions">' . esc_html__( 'Actions', 'techwave-form-sync-for-zoho' ) . '</th>';
                 echo '</tr></thead><tbody>';
 …
                         echo '</td>';
                         echo '<td>';
+                        echo '<td class="form2zoho-col-center">';
                         echo '<div class="form2zoho-authorized-cell">';
                         echo '<div class="form2zoho-authorized-pills">';
 …
                                 echo '<span class="form2zoho-pill form2zoho-pill-all">' . esc_html__( 'All applications', 'techwave-form-sync-for-zoho' ) . '</span>';
                         } else {
+                                $names = array();
                                 foreach ( $conn_apps as $app ) {
                                         if ( isset( $app_labels[ $app ] ) ) {
                                                 echo '<span class="form2zoho-pill">' . esc_html( $app_labels[ $app ] ) . '</span>';
+                                                $names[] = $app_labels[ $app ];
+                                        }
+                                }
+                                // A long grant is a wall of pills that pushes the row several
+                                // lines tall. The first few stay in view and the rest open in
+                                // place behind a "+N more" button; its title lists them all
+                                // for a quick look without a click.
+                                $shown = count( $names ) > 4 ? 3 : count( $names );
+                                foreach ( array_slice( $names, 0, $shown ) as $name ) {
+                                        echo '<span class="form2zoho-pill">' . esc_html( $name ) . '</span>';
+                                }
+                                $rest = array_slice( $names, $shown );
+                                if ( array() !== $rest ) {
+                                        $list_id = 'form2zoho-apps-more-' . sanitize_html_class( $id );
+                                        echo '<span class="form2zoho-authorized-more-list" id="' . esc_attr( $list_id ) . '" hidden>';
+                                        foreach ( $rest as $name ) {
+                                                echo '<span class="form2zoho-pill">' . esc_html( $name ) . '</span>';
+                                        }
+                                        echo '</span>';
+                                        /* translators: %d: number of further Zoho apps. */
+                                        $more = sprintf( _n( '+%d more', '+%d more', count( $rest ), 'techwave-form-sync-for-zoho' ), count( $rest ) );
+                                        echo '<button type="button" class="form2zoho-pill form2zoho-authorized-more" aria-expanded="false" aria-controls="' . esc_attr( $list_id ) . '" title="' . esc_attr( implode( ', ', $rest ) ) . '" data-more="' . esc_attr( $more ) . '" data-less="' . esc_attr__( 'Show less', 'techwave-form-sync-for-zoho' ) . '">' . esc_html( $more ) . '</button>';
+                                }
+                        }
 …
                         echo '</div>';
                         echo '</td>';
                         echo '<td>';
+                        echo '<td class="form2zoho-col-center">';
                         echo '<div class="form2zoho-conn-status-cell">';
                         if ( $connected ) {
 …
                         echo '</a>';
                         echo '</div>';
+                        if ( ! empty( $conn['bigin_org_error'] ) ) {
+                        // Only while this connection is still meant to reach Bigin: a
+                        // warning about an app it no longer covers is just noise, and one
+                        // saved before Bigin was unticked would otherwise keep showing.
+                        $covers_bigin = in_array( 'bigin', $conn_apps, true ) || in_array( 'all', $conn_apps, true );
+                        if ( $covers_bigin && ! empty( $conn['bigin_org_error'] ) ) {
                                 echo '<div class="form2zoho-conn-warn">';
                                 echo '<span class="form2zoho-pill form2zoho-pill-warn">' . esc_html__( 'Bigin org lookup failed', 'techwave-form-sync-for-zoho' ) . '</span>';
 …
                         echo '<input type="hidden" name="conn" value="' . esc_attr( $id ) . '" />';
                         echo '<p class="description form2zoho-edit-apps-hint">' . esc_html__( 'Check every Zoho app this connection should have access to, then reauthorize. Zoho will ask you to approve the updated list.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                        // Stays a <p>: admin.js scopes the "All applications" / per-app
+                        // checkbox interlock with closest( 'td, p' ), so this element is
+                        // the group container that logic relies on.
+                        // The class is the group container admin.js scopes the
+                        // "All applications" / per-app interlock to.
                         echo '<p class="form2zoho-apps-grid">';
                         echo '<label class="form2zoho-app-check form2zoho-app-check-all"><input type="checkbox" name="apps[]" value="all" ' . checked( $is_all, true, false ) . ' class="form2zoho-apps-all" /> <span>' . esc_html__( 'All applications', 'techwave-form-sync-for-zoho' ) . '</span></label>';
+                        // A connection authorized for "all" ticks every app, not none —
+                        // which is both the truth about what it can reach and the starting
+                        // point for narrowing the grant: untick the ones to drop and
+                        // admin.js clears "All applications" for you, so what gets
+                        // submitted is the shorter list rather than "all" again.
                         foreach ( $app_labels as $app_key => $app_label ) {
                                 echo '<label class="form2zoho-app-check"><input type="checkbox" name="apps[]" value="' . esc_attr( $app_key ) . '" ' . checked( $is_all || in_array( $app_key, $conn_apps, true ), true, false ) . ' class="form2zoho-apps-one" /> <span>' . esc_html( $app_label ) . '</span></label>';
 …
                 echo '<div class="form2zoho-modal-head">';
                 echo '<h2 class="form2zoho-modal-title" id="form2zoho-fields-title"></h2>';
                 echo '<p class="description form2zoho-modal-sub">' . esc_html__( 'Copy an API name into a feed under Techwave Sync → Forms.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '<p class="description form2zoho-modal-sub">' . esc_html__( 'Copy an API name into a feed under FormBridge → All Feeds.', 'techwave-form-sync-for-zoho' ) . '</p>';
                 echo '</div>';
                 echo '<div class="form2zoho-modal-scroll"><div class="form2zoho-fields-out"></div></div>';
 …
          */
         private function render_logs() {
+                $rows    = $this->logger->recent( 200 );
+                $last_id = ! empty( $rows ) ? (int) $rows[0]->id : 0;
+                $paging = $this->logs_paging_state();
+                $rows   = $this->logger->page( ( $paging['paged'] - 1 ) * $paging['per_page'], $paging['per_page'] );
+                // The newest id in the table, not the newest row on this page. On page
+                // two the newest row on screen is an old one, and starting the live
+                // poll from its id would fetch everything above it — the whole of page
+                // one — and prepend it here.
+                $last_id = $this->logger->newest_id();
                 $has_rows = ! empty( $rows );
 …
                 echo '</span>';
                 echo '<h2 class="form2zoho-emptystate__title">' . esc_html__( 'No log entries yet', 'techwave-form-sync-for-zoho' ) . '</h2>';
                 echo '<p class="form2zoho-emptystate__text">' . esc_html__( 'Every delivery to Zoho is recorded here — successes, failures and the exact data sent. New submissions appear instantly while Live is on.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                echo '<p class="form2zoho-emptystate__text">' . esc_html__( 'Every delivery to Zoho is recorded here: successes, failures and the exact data sent. New submissions appear instantly while Live is on.', 'techwave-form-sync-for-zoho' ) . '</p>';
                 echo '</div>';
 …
                 echo '<table class="widefat striped form2zoho-logs" id="form2zoho-logs-table" data-after-id="' . esc_attr( (string) $last_id ) . '" ' . ( empty( $rows ) ? 'hidden' : '' ) . '><thead><tr>';
                 echo '<th scope="col" class="form2zoho-logs-checkcol"><label class="screen-reader-text" for="form2zoho-logs-select-all">' . esc_html__( 'Select all log entries', 'techwave-form-sync-for-zoho' ) . '</label><input type="checkbox" id="form2zoho-logs-select-all" /></th>';
                 echo '<th scope="col">' . esc_html__( 'Time (UTC)', 'techwave-form-sync-for-zoho' ) . '</th>';
+                echo '<th scope="col">' . esc_html( sprintf( /* translators: %s: the site's timezone, e.g. Asia/Dhaka or UTC+06:00. */ __( 'Time (%s)', 'techwave-form-sync-for-zoho' ), \Form2Zoho\Support\SiteTime::zone() ) ) . '</th>';
                 echo '<th scope="col">' . esc_html__( 'Status', 'techwave-form-sync-for-zoho' ) . '</th>';
                 echo '<th scope="col">' . esc_html__( 'App', 'techwave-form-sync-for-zoho' ) . '</th>';
 …
                 echo '<th scope="col"><span class="screen-reader-text">' . esc_html__( 'Details', 'techwave-form-sync-for-zoho' ) . '</span></th>';
                 echo '</tr></thead><tbody id="form2zoho-logs-tbody">';
+                $this->render_logs_rows( $rows );
+                echo '</tbody></table>';
+                echo '</div>';
+                $this->render_logs_pagination( $paging, $has_rows );
+        }
+        /**
+         * The rows of the logs table, and nothing around them.
+         *
+         * Its own method because two callers need exactly these rows and nothing
+         * else: the page render, and the paging endpoint, which buffers this and
+         * hands back the markup for the tbody. One renderer means a row fetched by
+         * pressing Next cannot drift from a row that was there on load.
+         *
+         * @param array<int,object> $rows Log rows, newest first.
+         * @return void
+         */
+        private function render_logs_rows( array $rows ) {
                 // Human-readable app names for the "App" column and the copyable
                 // JSON detail — the raw integration id (e.g. "automation") is
 …
                         'automation' => __( 'Zoho Marketing Automation', 'techwave-form-sync-for-zoho' ),
                 );
+                // Anything an add-on registered, named the way the feed editor names
+                // it. The list above is only what this plugin ships; without this a
+                // destination added by the add-on showed its bare id in the App
+                // column — "webhook" sitting under a heading whose other rows all say
+                // "Zoho CRM". The hard-coded rows win, so a translation here is never
+                // overridden by a registry that has not been translated.
+                //
+                // Read from the container rather than injected: this screen does not
+                // otherwise need the registry, and widening its constructor for one
+                // column of one table would put the dependency on every caller.
+                $registry = Plugin::instance()->get( 'registry' );
+                if ( $registry instanceof IntegrationRegistry ) {
+                        foreach ( $registry->choices() as $app_id => $app_label ) {
+                                if ( ! isset( $app_labels[ $app_id ] ) ) {
+                                        $app_labels[ $app_id ] = $app_label;
+                                }
+                        }
+                }
                 // Map feed id => [module, module_label] once, so each row below can
 …
                         } elseif ( 'suppressed' === $status ) {
                                 $pill = '<span class="form2zoho-pill form2zoho-pill-warn">' . esc_html__( 'Suppressed', 'techwave-form-sync-for-zoho' ) . '</span>';
+                        } elseif ( 'skipped' === $status ) {
+                                // Held back by the feed's conditions: not sent, and not a failure.
+                                $pill = '<span class="form2zoho-pill form2zoho-pill-warn">' . esc_html__( 'Skipped', 'techwave-form-sync-for-zoho' ) . '</span>';
                         } else {
                                 $pill = '<span class="form2zoho-pill form2zoho-pill-bad">' . esc_html__( 'Error', 'techwave-form-sync-for-zoho' ) . '</span>';
+                        }
                         $pretty_data        = array( 'time' => $row->created_at . ' UTC' ) + $context;
+                        $pretty_data        = array( 'time' => \Form2Zoho\Support\SiteTime::from_gmt( $row->created_at ) . ' (' . \Form2Zoho\Support\SiteTime::zone() . ')' ) + $context;
                         $pretty_data['app'] = isset( $app_labels[ $row->integration ] ) ? $app_labels[ $row->integration ] : $row->integration;
                         if ( '' !== (string) $row->form_id ) {
 …
                         echo '<tr class="form2zoho-log-row" data-row-id="' . esc_attr( (string) $row->id ) . '">';
                         echo '<td class="form2zoho-logs-checkcol"><input type="checkbox" class="form2zoho-log-check" value="' . esc_attr( (string) $row->id ) . '" /></td>';
+                        echo '<td>' . esc_html( $row->created_at ) . '</td>';
+                        // Stored in UTC; shown in the timezone from Settings > General.
+                        echo '<td>' . esc_html( \Form2Zoho\Support\SiteTime::from_gmt( $row->created_at ) ) . '</td>';
                         echo '<td>' . wp_kses( $pill, Markup::pill() ) . '</td>';
                         echo '<td>' . esc_html( $app_label ) . '</td>';
                         echo '<td>' . ( '' !== $module ? '<code>' . esc_html( $module ) . '</code>' : '—' ) . '</td>';
                         echo '<td>' . ( '' !== (string) $row->form_id ? esc_html( $row->form_id ) : '—' ) . '</td>';
                         echo '<td>' . ( '' !== $rec_id ? '<code>' . esc_html( $rec_id ) . '</code>' : '—' ) . '</td>';
                         echo '<td>' . esc_html( $row->message ) . '</td>';
+                        echo '<td>' . ( '' !== $module ? '<code>' . esc_html( $module ) . '</code>' : '-' ) . '</td>';
+                        echo '<td>' . ( '' !== (string) $row->form_id ? esc_html( $row->form_id ) : '-' ) . '</td>';
+                        echo '<td>' . ( '' !== $rec_id ? '<code>' . esc_html( $rec_id ) . '</code>' : '-' ) . '</td>';
+                        echo '<td>' . esc_html( Logger::display_message( (string) $row->message ) ) . '</td>';
                         echo '<td><button type="button" class="button-link form2zoho-log-toggle">' . esc_html__( 'Details', 'techwave-form-sync-for-zoho' ) . '</button></td>';
                         echo '</tr>';
 …
                         echo '</td></tr>';
+                }
+                echo '</tbody></table>';
+        }
+        /**
+         * Which page of the log is being asked for, and how big a page is.
+         *
+         * Read from the query string on a page load and from the request body on
+         * the paging endpoint, so both arrive at the same numbers through the same
+         * clamping. `paged` is clamped against the real page count rather than
+         * trusted: ?log_paged=9999 should land on the last page, not on an empty
+         * table that looks like a lost log.
+         *
+         * @param array $source Values to read (defaults to $_GET).
+         * @return array{paged:int,per_page:int,total:int,pages:int,allowed:int[]}
+         */
+        private function logs_paging_state( array $source = null ) {
+                // Twenty is a screenful. The screen used to render the newest 200 rows
+                // whatever it was showing — 200 rows of markup, each carrying a hidden
+                // <pre> of the full JSON payload, built and parsed to look at a dozen.
+                $allowed = array( 20, 50, 100 );
+                if ( null === $source ) {
+                        // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only paging, no state changes.
+                        $source = wp_unslash( $_GET );
+                }
+                $per_page = isset( $source['log_per_page'] ) ? (int) $source['log_per_page'] : 20;
+                if ( ! in_array( $per_page, $allowed, true ) ) {
+                        $per_page = 20;
+                }
+                $paged = isset( $source['log_paged'] ) ? max( 1, (int) $source['log_paged'] ) : 1;
+                $total = $this->logger->count();
+                $pages = max( 1, (int) ceil( $total / $per_page ) );
+                $paged = min( $paged, $pages );
+                return array(
+                        'paged'    => $paged,
+                        'per_page' => $per_page,
+                        'total'    => $total,
+                        'pages'    => $pages,
+                        'allowed'  => $allowed,
+                );
+        }
+        /**
+         * The bar under the logs table: how big a page is, and which one this is.
+         *
+         * Buttons rather than links, unlike the Feeds list's identical-looking bar.
+         * The Logs screen is a tab, and admin-nav.js answers any link to a tab URL
+         * by re-fetching the whole tab — which would drop the paging arguments and
+         * land back on page one. A button asks the paging endpoint for the rows and
+         * swaps the tbody, which is also the cheaper thing to do.
+         *
+         * @param array $paging   From logs_paging_state().
+         * @param bool  $has_rows Whether this page has anything on it.
+         * @return void
+         */
+        private function render_logs_pagination( array $paging, $has_rows ) {
+                printf(
+                        '<div class="form2zoho-pagination form2zoho-logs-pagination" id="form2zoho-logs-pagination" data-paged="%d" data-pages="%d" data-per-page="%d" data-total="%d"%s>',
+                        (int) $paging['paged'],
+                        (int) $paging['pages'],
+                        (int) $paging['per_page'],
+                        (int) $paging['total'],
+                        $has_rows ? '' : ' hidden'
+                );
+                echo '<label class="form2zoho-perpage-wrap">' . esc_html__( 'Show', 'techwave-form-sync-for-zoho' ) . ' ';
+                // Deliberately NOT .form2zoho-perpage: that class is bound to a handler
+                // that navigates using a data-base URL, which is the Feeds list's way
+                // of paging and would reload this whole screen.
+                echo '<select class="form2zoho-logs-perpage" id="form2zoho-logs-perpage">';
+                foreach ( $paging['allowed'] as $pp ) {
+                        echo '<option value="' . esc_attr( (string) $pp ) . '" ' . selected( $pp, $paging['per_page'], false ) . '>' . esc_html( number_format_i18n( $pp ) ) . '</option>';
+                }
+                echo '</select> ' . esc_html__( 'per page', 'techwave-form-sync-for-zoho' ) . '</label>';
+                echo '<div class="form2zoho-pagenav">';
+                printf(
+                        '<button type="button" class="button form2zoho-logs-prev"%s>&lsaquo; %s</button>',
+                        $paging['paged'] <= 1 ? ' disabled' : '',
+                        esc_html__( 'Prev', 'techwave-form-sync-for-zoho' )
+                );
+                echo '<span class="form2zoho-pageinfo" id="form2zoho-logs-pageinfo">' . esc_html( self::logs_page_info( $paging ) ) . '</span>';
+                printf(
+                        '<button type="button" class="button form2zoho-logs-next"%s>%s &rsaquo;</button>',
+                        $paging['paged'] >= $paging['pages'] ? ' disabled' : '',
+                        esc_html__( 'Next', 'techwave-form-sync-for-zoho' )
+                );
+                echo '</div>';
+                echo '</div>';
+        }
+        /**
+         * "Page 2 of 7 · 132 entries".
+         *
+         * The total is worth the words. "Page 2 of 7" alone leaves the size of the
+         * log to be guessed at from the page count and whatever the per-page box
+         * happens to say.
+         *
+         * @param array $paging From logs_paging_state().
+         * @return string
+         */
+        private static function logs_page_info( array $paging ) {
+                return sprintf(
+                        /* translators: 1: current page number, 2: total pages, 3: total number of log entries. */
+                        _n( 'Page %1$s of %2$s · %3$s entry', 'Page %1$s of %2$s · %3$s entries', (int) $paging['total'], 'techwave-form-sync-for-zoho' ),
+                        number_format_i18n( (int) $paging['paged'] ),
+                        number_format_i18n( (int) $paging['pages'] ),
+                        number_format_i18n( (int) $paging['total'] )
+                );
+        }
+        /**
+         * AJAX: one page of the log, rendered.
+         *
+         * Returns the tbody's markup plus the numbers the bar prints, so the
+         * screen never has to work out for itself how many pages there are — a
+         * count it would get wrong the moment another submission landed.
+         *
+         * @return void
+         */
+        public function ajax_logs_page() {
+                if ( ! current_user_can( self::CAP ) ) {
+                        wp_send_json_error( array( 'message' => __( 'Permission denied.', 'techwave-form-sync-for-zoho' ) ), 403 );
+                }
+                check_ajax_referer( 'form2zoho_ajax', 'nonce' );
+                // phpcs:ignore WordPress.Security.NonceVerification.Missing -- check_ajax_referer() ran above.
+                $paging = $this->logs_paging_state( wp_unslash( $_POST ) );
+                $rows   = $this->logger->page( ( $paging['paged'] - 1 ) * $paging['per_page'], $paging['per_page'] );
+                ob_start();
+                $this->render_logs_rows( $rows );
+                $html = ob_get_clean();
+                wp_send_json_success(
+                        array(
+                                'html'     => $html,
+                                'paged'    => $paging['paged'],
+                                'pages'    => $paging['pages'],
+                                'total'    => $paging['total'],
+                                'perPage'  => $paging['per_page'],
+                                'pageInfo' => self::logs_page_info( $paging ),
+                                'newestId' => $this->logger->newest_id(),
+                        )
+                );
+        }
+        /**
+         * The Docs & Support tab: where the documentation is, how to reach a
+         * person, and the video walkthroughs.
+         *
+         * Every link is one this plugin already uses elsewhere, and each is
+         * filterable (form2zoho_support_links), so a site or the Pro add-on can
+         * add a support email, a forum or a community page without a template.
+         *
+         * @return void
+         */
+        private function render_support() {
+                $ext = '<svg class="form2zoho-support-ext" width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M18 13v6a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2h6"/><polyline points="15 3 21 3 21 9"/><line x1="10" y1="14" x2="21" y2="3"/></svg>';
+                /**
+                 * Filter the links on the Docs & Support tab.
+                 *
+                 * 'docs' and 'contact' are the two cards at the top; 'community' is
+                 * the list below them. Each item: url, title, text.
+                 *
+                 * @param array $links Links, grouped.
+                 */
+                $links = (array) apply_filters(
+                        'form2zoho_support_links',
+                        array(
+                                'docs'      => array(
+                                        'url'   => 'https://techwavesolutions.net/formbridge-zoho/',
+                                        'title' => __( 'Read the documentation', 'techwave-form-sync-for-zoho' ),
+                                        'text'  => __( 'Step-by-step guides for every trigger and every Zoho app. When a trigger, a destination or a field mapping is not behaving the way you expect, start here.', 'techwave-form-sync-for-zoho' ),
+                                        'label' => __( 'Browse the docs', 'techwave-form-sync-for-zoho' ),
+                                ),
+                                'contact'   => array(
+                                        'url'   => 'https://techwavesolutions.net/contact/',
+                                        'title' => __( 'Talk to a human', 'techwave-form-sync-for-zoho' ),
+                                        'text'  => __( 'Stuck on something the docs do not cover? Get in touch and our team will pick it up.', 'techwave-form-sync-for-zoho' ),
+                                        'label' => __( 'Contact us', 'techwave-form-sync-for-zoho' ),
+                                ),
+                                'community' => array(
+                                        array(
+                                                'url'   => VideoGuide::url( 'setup' ),
+                                                'title' => __( 'Video: the full setup', 'techwave-form-sync-for-zoho' ),
+                                                'text'  => __( 'From connecting Zoho to a first record, on YouTube.', 'techwave-form-sync-for-zoho' ),
+                                        ),
+                                        array(
+                                                'url'   => VideoGuide::url( 'connections' ),
+                                                'title' => __( 'Video: connecting a Zoho account', 'techwave-form-sync-for-zoho' ),
+                                                'text'  => __( 'Creating the Zoho API client and authorising it.', 'techwave-form-sync-for-zoho' ),
+                                        ),
+                                        array(
+                                                'url'   => VideoGuide::url( 'triggers' ),
+                                                'title' => __( 'Video: every trigger', 'techwave-form-sync-for-zoho' ),
+                                                'text'  => __( 'Each form plugin and event a feed can listen to.', 'techwave-form-sync-for-zoho' ),
+                                        ),
+                                        array(
+                                                'url'   => VideoGuide::url( 'actions' ),
+                                                'title' => __( 'Video: every Zoho app', 'techwave-form-sync-for-zoho' ),
+                                                'text'  => __( 'Sending records to CRM, Bigin, Desk, Books, Campaigns and Marketing Automation.', 'techwave-form-sync-for-zoho' ),
+                                        ),
+                                        array(
+                                                'url'   => self::docs_url(),
+                                                'title' => __( 'Guide: create a Zoho connection', 'techwave-form-sync-for-zoho' ),
+                                                'text'  => __( 'The written version of the connection setup.', 'techwave-form-sync-for-zoho' ),
+                                        ),
+                                ),
+                        )
+                );
+                echo '<div class="form2zoho-support">';
+                echo '<div class="form2zoho-support-cards">';
+                foreach ( array( 'docs', 'contact' ) as $key ) {
+                        $card = isset( $links[ $key ] ) && is_array( $links[ $key ] ) ? $links[ $key ] : array();
+                        if ( empty( $card['url'] ) ) {
+                                continue;
+                        }
+                        // An icon beside each heading, in the tile the list below uses for
+                        // its rows: an open book for the documentation, a headset for the
+                        // people who answer.
+                        $icon = 'docs' === $key
+                                ? '<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" focusable="false"><path d="M2 3h6a4 4 0 0 1 4 4v14a3 3 0 0 0-3-3H2z"/><path d="M22 3h-6a4 4 0 0 0-4 4v14a3 3 0 0 1 3-3h7z"/></svg>'
+                                : '<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" focusable="false"><path d="M3 18v-6a9 9 0 0 1 18 0v6"/><path d="M21 19a2 2 0 0 1-2 2h-1a2 2 0 0 1-2-2v-3a2 2 0 0 1 2-2h3zM3 19a2 2 0 0 0 2 2h1a2 2 0 0 0 2-2v-3a2 2 0 0 0-2-2H3z"/></svg>';
+                        echo '<div class="form2zoho-support-card">';
+                        echo '<h3><span class="form2zoho-support-icon" aria-hidden="true">' . $icon . '</span><span>' . esc_html( (string) ( $card['title'] ?? '' ) ) . '</span></h3>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- static SVG literals above.
+                        echo '<p>' . esc_html( (string) ( $card['text'] ?? '' ) ) . '</p>';
+                        printf(
+                                '<a class="%1$s" href="%2$s" target="_blank" rel="noopener noreferrer">%3$s%4$s<span class="screen-reader-text"> %5$s</span></a>',
+                                'docs' === $key ? 'form2zoho-support-link' : 'button button-primary form2zoho-support-button',
+                                esc_url( (string) $card['url'] ),
+                                esc_html( (string) ( $card['label'] ?? '' ) ),
+                                'docs' === $key ? $ext : '', // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- static SVG literal above.
+                                esc_html__( '(opens in a new tab)', 'techwave-form-sync-for-zoho' )
+                        );
+                        echo '</div>';
+                }
+                echo '</div>';
+                $items = isset( $links['community'] ) && is_array( $links['community'] ) ? $links['community'] : array();
+                $items = array_filter(
+                        $items,
+                        static function ( $item ) {
+                                return is_array( $item ) && ! empty( $item['url'] );
+                        }
+                );
+                if ( array() !== $items ) {
+                        echo '<h3 class="form2zoho-support-heading">' . esc_html__( 'Videos & guides', 'techwave-form-sync-for-zoho' ) . '</h3>';
+                        echo '<ul class="form2zoho-support-list">';
+                        foreach ( $items as $item ) {
+                                $video = false !== strpos( (string) $item['url'], 'youtube.com' );
+                                printf(
+                                        '<li><a href="%1$s" target="_blank" rel="noopener noreferrer"><span class="form2zoho-support-icon%2$s" aria-hidden="true">%3$s</span><span class="form2zoho-support-item"><strong>%4$s</strong><span>%5$s</span></span>%6$s<span class="screen-reader-text"> %7$s</span></a></li>',
+                                        esc_url( (string) $item['url'] ),
+                                        $video ? ' is-video' : '',
+                                        $video
+                                                ? '<svg width="18" height="18" viewBox="0 0 24 24" aria-hidden="true"><rect x="1" y="4" width="22" height="16" rx="5" fill="#ff0000"/><polygon points="10 8.5 16 12 10 15.5" fill="#fff"/></svg>'
+                                                : '<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M4 19.5A2.5 2.5 0 0 1 6.5 17H20"/><path d="M6.5 2H20v20H6.5A2.5 2.5 0 0 1 4 19.5v-15A2.5 2.5 0 0 1 6.5 2z"/></svg>', // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- static SVG literals.
+                                        esc_html( (string) ( $item['title'] ?? '' ) ),
+                                        esc_html( (string) ( $item['text'] ?? '' ) ),
+                                        $ext, // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- static SVG literal above.
+                                        esc_html__( '(opens in a new tab)', 'techwave-form-sync-for-zoho' )
+                                );
+                        }
+                        echo '</ul>';
+                }
                 echo '</div>';
+        }
 …
                         'shield',
                         __( 'Store submitted values in the log', 'techwave-form-sync-for-zoho' ),
                         __( 'Off by default. When off, only the field names are recorded, never what a visitor typed. Turn it on only if you need the Logs screen\'s one-click Resubmit, which replays the stored values — anything your forms collect, including personal data, is then kept in the log table for the retention period below.', 'techwave-form-sync-for-zoho' )
+                        __( 'Off by default. When off, only the field names are recorded, never what a visitor typed. Turn it on only if you need the Logs screen\'s one-click Resubmit, which replays the stored values. Anything your forms collect, including personal data, is then kept in the log table until the entry is deleted.', 'techwave-form-sync-for-zoho' )
                 );
 …
                         'trash',
                         __( 'Delete log entries automatically', 'techwave-form-sync-for-zoho' ),
                         __( 'Deletes log entries older than this many days, once a day.', 'techwave-form-sync-for-zoho' ),
+                        __( 'Off by default, so log entries stay until you delete them. When on, entries older than this many days are deleted once a day.', 'techwave-form-sync-for-zoho' ),
                         '<label class="screen-reader-text" for="form2zoho_log_retention_days">' . esc_html__( 'Days to keep log entries', 'techwave-form-sync-for-zoho' ) . '</label>'
                         . '<span class="form2zoho-unitfield">'
 …
                 printf(
                         /* translators: %s: administration email address. */
                         esc_html__( 'Sends one message to %s to check this site can send mail at all.', 'techwave-form-sync-for-zoho' ),
+                        esc_html__( 'Sends one message to %s, the same way the notifications are sent.', 'techwave-form-sync-for-zoho' ),
                         esc_html( (string) get_option( 'admin_email' ) )
                 );
 …
                         'trash',
                         __( 'Erase all plugin data when the plugin is deleted', 'techwave-form-sync-for-zoho' ),
                         __( 'Drops the log table and removes every connection, feed, stored token and scheduled event. Off by default so deactivating and reinstalling does not destroy your setup. This cannot be undone.', 'techwave-form-sync-for-zoho' )
+                        __( 'Drops the log table and removes every connection, feed and stored token. Off by default so deactivating and reinstalling does not destroy your setup. This cannot be undone.', 'techwave-form-sync-for-zoho' )
                 );
                 $this->settings_section_close();
 …
                 printf(
                         /* translators: %s: version number, e.g. 1.0.0. */
                         esc_html__( 'Techwave Form Sync for Zoho version %s', 'techwave-form-sync-for-zoho' ),
+                        esc_html__( 'FormBridge for Zoho version %s', 'techwave-form-sync-for-zoho' ),
                         esc_html( defined( 'FORM2ZOHO_VERSION' ) ? FORM2ZOHO_VERSION : '' )
                 );

techwave-form-sync-for-zoho/trunk/includes/Api/AbstractClient.php

-              r3649280
+              r3748247
          */
         protected $connection_id;
+        /**
+         * The access token the last request was sent with, so a 401 forgets only
+         * that one and not a newer token another request has saved since.
+         *
+         * @var string
+         */
+        private $last_token = '';
         /**
 …
         /**
+         * Whether a field's metadata says a submitted value can never fill it.
+         *
+         * A mapping row puts one form value into one Zoho field, and most field
+         * types take that happily. Two kinds cannot, and offering them in the
+         * mapping dropdown is how somebody ends up with a feed that looks
+         * configured and fails on every single submission.
+         *
+         * Uploads. Zoho's own docs are explicit that a File Upload field is
+         * written as [ { "File_Id__s": "..." } ], where the id comes back from a
+         * separate upload call to /crm/v6/file. No string a form can submit
+         * satisfies that, so mapping a file field returned "INVALID_DATA: invalid
+         * data (Files)" — and because Zoho rejects the whole request, the name,
+         * email and message went nowhere either. Losing the lead over an
+         * attachment is the expensive half of that.
+         *
+         * Subforms, which are a table of rows rather than a value, and the record
+         * image, which is another upload wearing a different type name. All three
+         * fail identically and for the same reason.
+         *
+         * The substring rule carries the intent — anything Zoho calls an upload —
+         * so a type added later is covered without this list being extended. The
+         * two exact names are the ones that do not say "upload" and still are one.
+         * A live Leads module confirms the shape: fileupload x2, imageupload,
+         * profileimage and subform all come back read_only=false, which is why
+         * they were being offered.
+         *
+         * Distinct from read_only, which the callers check separately: those
+         * fields cannot be written at all, whereas these can — just not from a
+         * form field.
+         *
+         * @param array $field One row of Zoho's fields metadata.
+         * @return bool
+         */
+        protected static function is_unfillable_field( array $field ) {
+                $type = strtolower( (string) ( isset( $field['data_type'] ) ? $field['data_type'] : '' ) );
+                // An upload type is only offered by an app that can actually be handed
+                // a file. Where it can, the mapped value is uploaded on the way out
+                // and the record carries the id (see CrmIntegration::send). Where it
+                // cannot, a form value could only ever arrive as text and Zoho would
+                // refuse the whole record over it, so the field stays hidden.
+                if ( false !== strpos( $type, 'upload' ) ) {
+                        return ! static::supports_file_upload();
+                }
+                return in_array( $type, array( 'subform', 'profileimage' ), true );
+        }
+        /**
+         * Whether this app has a file upload this plugin knows how to drive.
+         *
+         * False here on purpose: an app is opted in by its own client once both
+         * halves exist — somewhere to post the bytes, and a documented shape for
+         * naming the result in a record.
+         *
+         * @return bool
+         */
+        protected static function supports_file_upload() {
+                return false;
+        }
+        /**
+         * POST one file as multipart/form-data.
+         *
+         * Separate from request(), which encodes everything as JSON. WordPress has
+         * no multipart helper, so the body is assembled here — it is a few lines
+         * and the alternative is a dependency for one request.
+         *
+         * The file is read into memory. Zoho caps an upload at 20MB, and
+         * max_upload_size() below refuses anything larger before it is read, so
+         * the ceiling is known rather than whatever the file happened to be.
+         *
+         * No 401 retry loop: this is called on the delivery path, once, with a
+         * token the caller has just used successfully for the record itself.
+         *
+         * @param string $path      Path beginning with a slash.
+         * @param string $file      Absolute path to the file on disk.
+         * @param string $part_name Name of the multipart part.
+         * @return array|WP_Error Decoded body or error.
+         */
+        protected function upload( $path, $file, $part_name = 'file', array $headers = array() ) {
+                if ( ! is_readable( $file ) ) {
+                        return new WP_Error(
+                                'form2zoho_file_unreadable',
+                                /* translators: %s: file path. */
+                                sprintf( __( 'The uploaded file could not be read from %s.', 'techwave-form-sync-for-zoho' ), $file )
+                        );
+                }
+                $size = (int) filesize( $file );
+                // A budget for the whole request, not just this file. Each upload is
+                // read into memory whole and copied once more into the multipart
+                // body, so a submission naming several large files could exhaust the
+                // PHP memory limit and take the visitor's submission down with it.
+                if ( self::$uploaded_bytes + $size > self::MAX_REQUEST_BYTES ) {
+                        return new WP_Error(
+                                'form2zoho_upload_budget',
+                                sprintf(
+                                        /* translators: %d: the limit in megabytes. */
+                                        __( 'This submission has already sent %dMB of files, which is all this request will carry.', 'techwave-form-sync-for-zoho' ),
+                                        (int) ( self::MAX_REQUEST_BYTES / 1048576 )
+                                )
+                        );
+                }
+                if ( $size > self::MAX_UPLOAD_BYTES ) {
+                        return new WP_Error(
+                                'form2zoho_file_too_large',
+                                sprintf(
+                                        /* translators: 1: file name, 2: Zoho's limit in megabytes. */
+                                        __( '%1$s is larger than the %2$dMB Zoho accepts for a file field.', 'techwave-form-sync-for-zoho' ),
+                                        basename( $file ),
+                                        (int) ( self::MAX_UPLOAD_BYTES / 1048576 )
+                                )
+                        );
+                }
+                $token = $this->connections->get_access_token( $this->connection_id );
+                if ( is_wp_error( $token ) ) {
+                        return $token;
+                }
+                // phpcs:ignore WordPress.WP.AlternativeFunctions.file_get_contents_file_get_contents -- reading a local upload this site just received, not a remote resource; WP_Filesystem is not initialised on a front-end submission.
+                $contents = file_get_contents( $file );
+                if ( is_string( $contents ) ) {
+                        self::$uploaded_bytes += strlen( $contents );
+                }
+                if ( false === $contents ) {
+                        return new WP_Error( 'form2zoho_file_unreadable', __( 'The uploaded file could not be read.', 'techwave-form-sync-for-zoho' ) );
+                }
+                $boundary = 'f2z' . wp_generate_password( 24, false, false );
+                $name     = str_replace( array( '"', "\r", "\n" ), '', basename( $file ) );
+                $body  = '--' . $boundary . "\r\n";
+                $body .= 'Content-Disposition: form-data; name="' . $part_name . '"; filename="' . $name . '"' . "\r\n";
+                $body .= 'Content-Type: application/octet-stream' . "\r\n\r\n";
+                $body .= $contents . "\r\n";
+                $body .= '--' . $boundary . '--' . "\r\n";
+                $response = wp_remote_post(
+                        $this->connections->api_base( $this->connection_id, $this->service() ) . $path,
+                        array(
+                                // Longer than a JSON call on the front end: this carries the
+                                // file itself, and ten seconds dropped larger uploads on slower
+                                // hosts while smaller ones got through.
+                                /** This filter is documented in includes/Api/AbstractClient.php */
+                                'timeout' => (int) apply_filters( 'form2zoho_api_timeout', 30, $this->service() ),
+                                // Extra headers first, so the three this request depends on
+                                // cannot be overridden by them. Zoho Desk is the reason the
+                                // parameter exists: every Desk call, uploads included, has to
+                                // carry the organisation as an orgId header.
+                                'headers' => array_merge(
+                                        $headers,
+                                        array(
+                                                'Authorization' => 'Zoho-oauthtoken ' . $token,
+                                                'Accept'        => 'application/json',
+                                                'Content-Type'  => 'multipart/form-data; boundary=' . $boundary,
+                                        )
+                                ),
+                                'body'    => $body,
+                        )
+                );
+                if ( is_wp_error( $response ) ) {
+                        $response->add_data( array( 'host' => (string) wp_parse_url( $this->connections->api_base( $this->connection_id, $this->service() ), PHP_URL_HOST ) ) );
+                        return $response;
+                }
+                $status = (int) wp_remote_retrieve_response_code( $response );
+                $data   = json_decode( (string) wp_remote_retrieve_body( $response ), true );
+                $data   = is_array( $data ) ? $data : array();
+                if ( $status < 200 || $status >= 300 ) {
+                        $detail = $this->extract_error( $data );
+                        // The one refusal with a specific fix. Uploading needs a
+                        // permission the plugin only started asking Zoho for recently, and
+                        // Zoho grants the permissions that were requested when a
+                        // connection was authorised — not the ones the plugin asks for
+                        // today. So a connection made before then keeps working for
+                        // everything except this, and says so in a way that reads like a
+                        // bug unless the remedy is spelled out.
+                        if ( 401 === $status || false !== stripos( $detail, 'OAUTH_SCOPE_MISMATCH' ) ) {
+                                return new WP_Error(
+                                        'form2zoho_http_' . $status,
+                                        __( 'This connection was authorised before the plugin could upload files, so Zoho refused it. Open Connections, use "Edit access" on the account, and press Update & Reauthorize, then submit the form again.', 'techwave-form-sync-for-zoho' ),
+                                        $data
+                                );
+                        }
+                        return new WP_Error(
+                                'form2zoho_http_' . $status,
+                                sprintf(
+                                        /* translators: 1: HTTP status code, 2: detail from Zoho. */
+                                        __( 'Zoho refused the file upload. HTTP %1$d. %2$s', 'techwave-form-sync-for-zoho' ),
+                                        $status,
+                                        $detail
+                                ),
+                                $data
+                        );
+                }
+                return $data;
+        }
+        /**
+         * The largest file Zoho will take on a single upload.
+         *
+         * Its own documented limit, not a guess: "the maximum size of each file is
+         * 20MB". Checked here so an oversized file is reported as itself rather
+         * than as whatever Zoho returns after the bytes have been sent.
+         */
+        private const MAX_UPLOAD_BYTES = 20971520;
+        /**
+         * Bytes of file this request may upload in total, across every file and
+         * every feed. Two 20MB files already sit above a default WordPress
+         * memory limit once each is held in memory twice.
+         */
+        private const MAX_REQUEST_BYTES = 41943040;
+        /**
+         * Bytes uploaded so far in this request.
+         *
+         * @var int
+         */
+        private static $uploaded_bytes = 0;
+        /**
          * Perform an authenticated JSON request with one automatic retry on 401.
+         *
 …
                 // Retry once if the token was rejected — covers tokens that expired mid-flight.
                 if ( is_wp_error( $result ) && 'form2zoho_http_401' === $result->get_error_code() ) {
                         delete_transient( 'form2zoho_at_' . $this->connection_id );
+                        $this->connections->forget_access_token( $this->connection_id, $this->last_token );
                         $result = $this->dispatch( $method, $path, $args );
+                }
+                // A read that never reached Zoho gets one more try when an admin is
+                // waiting on it, such as the editor loading a module's fields: a
+                // brief network hiccup should not surface as an error. Only a read,
+                // because a write that timed out may still have landed, and
+                // Dispatcher retries deliveries in the background anyway. Only for an
+                // admin, so a visitor's form submission never waits twice.
+                if ( is_wp_error( $result )
+                        && self::never_reached_zoho( $result )
+                        && in_array( strtoupper( $method ), array( 'GET', 'HEAD' ), true )
+                        && is_admin()
+                        && current_user_can( 'manage_options' ) ) {
+                        $result = $this->dispatch( $method, $path, $args );
+                }
                 return $result;
+        }
+        /**
+         * Several GETs at once, each answered as request() would answer it.
+         *
+         * For lookups an admin is waiting on that take one request per item, where
+         * one after another adds up to seconds. Zoho's answers read exactly as
+         * request() reads them. Only what never got one, or got a rejected token,
+         * is asked again through request(), which refreshes the token and retries.
+         *
+         * @param string[] $paths Paths beginning with a slash, keyed however the caller likes.
+         * @param array    $args  Optional 'query' and 'headers', shared by every request.
+         * @return array<string|int,array|WP_Error> Keyed as $paths.
+         */
+        protected function get_many( array $paths, array $args = array() ) {
+                $out = array();
+                if ( count( $paths ) > 1 && class_exists( '\WpOrg\Requests\Requests' ) ) {
+                        $token = $this->connections->get_access_token( $this->connection_id );
+                        if ( ! is_wp_error( $token ) ) {
+                                $headers = array(
+                                        'Authorization' => 'Zoho-oauthtoken ' . $token,
+                                        'Accept'        => 'application/json',
+                                );
+                                if ( isset( $args['headers'] ) && is_array( $args['headers'] ) ) {
+                                        $headers = array_merge( $headers, $args['headers'] );
+                                }
+                                $requests = array();
+                                foreach ( $paths as $key => $path ) {
+                                        $url = $this->connections->api_base( $this->connection_id, $this->service() ) . $path;
+                                        if ( ! empty( $args['query'] ) && is_array( $args['query'] ) ) {
+                                                $url = add_query_arg( array_map( 'rawurlencode', $args['query'] ), $url );
+                                        }
+                                        $requests[ $key ] = array(
+                                                'url'     => $url,
+                                                'headers' => $headers,
+                                                'type'    => 'GET',
+                                        );
+                                }
+                                try {
+                                        $responses = \WpOrg\Requests\Requests::request_multiple(
+                                                $requests,
+                                                array(
+                                                        'timeout'          => $this->timeout(),
+                                                        'useragent'        => 'WordPress/' . get_bloginfo( 'version' ) . '; ' . home_url( '/' ),
+                                                        // The certificates WordPress itself uses for every HTTPS request.
+                                                        'verify'           => ABSPATH . WPINC . '/certificates/ca-bundle.crt',
+                                                        // This path does not go through the WordPress HTTP
+                                                        // API, so nothing else would stop a redirect from
+                                                        // leading somewhere other than the Zoho host asked
+                                                        // for. These endpoints answer directly.
+                                                        'follow_redirects' => false,
+                                                )
+                                        );
+                                } catch ( \Exception $e ) {
+                                        $responses = array();
+                                }
+                                foreach ( $responses as $key => $response ) {
+                                        if ( $response instanceof \WpOrg\Requests\Response && $response->status_code && 401 !== (int) $response->status_code ) {
+                                                $out[ $key ] = $this->result( (int) $response->status_code, (string) $response->body, $paths[ $key ], false );
+                                        }
+                                }
+                        }
+                }
+                // In the order asked, whatever order the answers came back in.
+                $ordered = array();
+                foreach ( $paths as $key => $path ) {
+                        $ordered[ $key ] = array_key_exists( $key, $out ) ? $out[ $key ] : $this->request( 'GET', $path, $args );
+                }
+                return $ordered;
+        }
+        /**
+         * Seconds a Zoho request may take.
+         *
+         * @return int
+         */
+        private function timeout() {
+                /**
+                 * Filter the Zoho API request timeout, in seconds.
+                 *
+                 * Shorter on the front end on purpose. Delivery is synchronous
+                 * (see Queue\Dispatcher for why), so this number is added directly
+                 * to how long a visitor waits after pressing Submit — and with the
+                 * token refresh and the one automatic 401 retry stacked on top, a
+                 * flat 25 could hold a PHP worker for over a minute per feed while
+                 * Zoho was slow. A transport timeout carries no "form2zoho_http_*"
+                 * code, so Dispatcher::is_retryable() already treats it as
+                 * transient: the submission moves to a background retry rather
+                 * than being lost.
+                 *
+                 * @param int    $timeout Seconds.
+                 * @param string $service Service key (crm|books|desk|...).
+                 */
+                return (int) apply_filters( 'form2zoho_api_timeout', is_admin() ? 25 : 10, $this->service() );
+        }
+        /**
+         * Whether an error came from the transport rather than from Zoho or from
+         * this plugin. The same reading as Dispatcher::is_retryable(): every error
+         * this plugin builds carries a "form2zoho_" code, and one that does not
+         * came from wp_remote_request() itself.
+         *
+         * @param WP_Error $error The error.
+         * @return bool
+         */
+        private static function never_reached_zoho( WP_Error $error ) {
+                return 0 !== strpos( (string) $error->get_error_code(), 'form2zoho_' );
+        }
 …
                         return $token;
+                }
+                $this->last_token = $token;
                 $url = $this->connections->api_base( $this->connection_id, $this->service() ) . $path;
 …
                 $request = array(
                         'method'  => strtoupper( $method ),
+                        /**
+                         * Filter the Zoho API request timeout, in seconds.
+                         *
+                         * Shorter on the front end on purpose. Delivery is synchronous
+                         * (see Queue\Dispatcher for why), so this number is added directly
+                         * to how long a visitor waits after pressing Submit — and with the
+                         * token refresh and the one automatic 401 retry stacked on top, a
+                         * flat 25 could hold a PHP worker for over a minute per feed while
+                         * Zoho was slow. A transport timeout carries no "form2zoho_http_*"
+                         * code, so Dispatcher::is_retryable() already treats it as
+                         * transient: the submission moves to a background retry rather
+                         * than being lost.
+                         *
+                         * @param int    $timeout Seconds.
+                         * @param string $service Service key (crm|books|desk|...).
+                         */
+                        'timeout' => (int) apply_filters( 'form2zoho_api_timeout', is_admin() ? 25 : 10, $this->service() ),
+                        'timeout' => $this->timeout(),
                         'headers' => $headers,
                 );
 …
                 if ( is_wp_error( $response ) ) {
+                        // Which host could not be reached, for the message the editor
+                        // shows (see ErrorTranslator::transport()). The code is left as it
+                        // is, so Dispatcher still reads it as worth retrying.
+                        $response->add_data( array( 'host' => (string) wp_parse_url( $url, PHP_URL_HOST ) ) );
                         return $response;
+                }
+                $status = (int) wp_remote_retrieve_response_code( $response );
+                $raw    = (string) wp_remote_retrieve_body( $response );
+                $data   = json_decode( $raw, true );
+                $data   = is_array( $data ) ? $data : array();
+                return $this->result(
+                        (int) wp_remote_retrieve_response_code( $response ),
+                        (string) wp_remote_retrieve_body( $response ),
+                        $path,
+                        $is_write
+                );
+        }
+        /**
+         * A Zoho response as the caller gets it: the decoded body, or an error.
+         *
+         * @param int    $status   HTTP status.
+         * @param string $raw      Response body.
+         * @param string $path     Path asked for.
+         * @param bool   $is_write Whether the request was a write.
+         * @return array|WP_Error
+         */
+        private function result( $status, $raw, $path, $is_write ) {
+                $data = json_decode( $raw, true );
+                $data = is_array( $data ) ? $data : array();
                 if ( 401 === $status ) {
+                        return new WP_Error( 'form2zoho_http_401', __( 'Zoho rejected the access token.', 'techwave-form-sync-for-zoho' ), $data );
+                        return new WP_Error(
+                                'form2zoho_http_401',
+                                // Reached when the stored app list looked fine but the grant
+                                // behind it does not match — an app added to a connection and
+                                // never reauthorized, or access revoked at Zoho's end. Says
+                                // what to do about it, because "rejected the access token"
+                                // on its own reads as a fault rather than as an instruction.
+                                __( 'Zoho rejected the access token. The connection may need reauthorizing: open Connections, use "Edit access", and press Update & Reauthorize.', 'techwave-form-sync-for-zoho' ),
+                                $data
+                        );
+                }

techwave-form-sync-for-zoho/trunk/includes/Api/BiginClient.php

-              r3649280
+              r3748247
                 $out = array();
                 foreach ( (array) ( $res['fields'] ?? array() ) as $field ) {
                         if ( ! empty( $field['read_only'] ) ) {
+                        if ( ! empty( $field['read_only'] ) || self::is_unfillable_field( $field ) ) {
                                 continue;
+                        }
 …
                                 'label'    => (string) $field['field_label'],
                                 'required' => ! empty( $field['system_mandatory'] ) || ! empty( $field['required'] ),
+                                // Carried through to the mapping row and saved with it. A form
+                                // value is text whatever it came from, and Zoho wants a real
+                                // boolean for a checkbox and a real array for a multi-select —
+                                // so the feed has to remember which of those it is aiming at.
+                                // See FieldMapper::coerce().
+                                'type'     => strtolower( (string) ( isset( $field['data_type'] ) ? $field['data_type'] : '' ) ),
+                                // Whether Zoho refuses two records with the same value here.
+                                // Present on every field and empty when it is not unique, so
+                                // this is a real answer rather than an absence. The duplicate
+                                // handling on the Destination step offers exactly these,
+                                // instead of asking somebody to type API names from memory.
+                                'unique'   => ! empty( $field['unique'] ),
                         );
+                }
 …
         /**
          * Create a record.
+         * Create a record, or update the one it duplicates.
+         *
+         * @param string $module          Module API name.
+         * @param array  $record          Field => value pairs.
+         * @param array  $duplicate_fields Fields used for upsert duplicate check (empty = plain insert).
+         * @param string    $module           Module API name.
+         * @param array     $record           Field => value pairs.
+         * @param array     $duplicate_fields Unique fields to match an existing record on.
+         * @param bool|null $upsert           Update a matching record instead of inserting. Null keeps
+         *                                    the older rule: upsert only when fields are named.
          * @return array|WP_Error
          */
+        public function create_record( $module, array $record, array $duplicate_fields = array() ) {
+                if ( ! empty( $duplicate_fields ) ) {
+        public function create_record( $module, array $record, array $duplicate_fields = array(), $upsert = null, array $extras = array() ) {
+                if ( null === $upsert ? ! empty( $duplicate_fields ) : $upsert ) {
+                        $body = self::with_extras( array( 'data' => array( $record ) ), $extras );
+                        // Left out rather than sent empty when nothing is named, so Bigin
+                        // applies its own duplicate check. See CrmClient::create_record().
+                        if ( ! empty( $duplicate_fields ) ) {
+                                $body['duplicate_check_fields'] = array_values( $duplicate_fields );
+                        }
                         return $this->request(
                                 'POST',
                                 '/bigin/v2/' . rawurlencode( $module ) . '/upsert',
+                                array(
+                                        'body' => array(
+                                                'data'                   => array( $record ),
+                                                'duplicate_check_fields' => array_values( $duplicate_fields ),
+                                        ),
+                                )
+                                array( 'body' => $body )
                         );
+                }
 …
                         'POST',
                         '/bigin/v2/' . rawurlencode( $module ),
                         array( 'body' => array( 'data' => array( $record ) ) )
+                        array( 'body' => self::with_extras( array( 'data' => array( $record ) ), $extras ) )
                 );
+        }
+        /**
+         * Add the one request-level key Bigin documents: which automations run.
+         *
+         * Passed through even when empty — an empty list means run nothing, and
+         * leaving the key out means run what Bigin has set up for the API.
+         *
+         * @param array $body   The request body so far.
+         * @param array $extras What an add-on asked for.
+         * @return array
+         */
+        private static function with_extras( array $body, array $extras ) {
+                if ( array_key_exists( 'trigger', $extras ) && is_array( $extras['trigger'] ) ) {
+                        $body['trigger'] = array_values( array_intersect( array( 'workflow', 'approval', 'blueprint' ), array_map( 'strval', $extras['trigger'] ) ) );
+                }
+                return $body;
+        }
+}

techwave-form-sync-for-zoho/trunk/includes/Api/BooksClient.php

-              r3649280
+              r3748247
         /**
+         * Whether this lookup must skip the cached settings (a reload button).
+         *
+         * @var bool
+         */
+        private $skip_cache = false;
+        /**
          * {@inheritDoc}
          */
 …
+                        }
                         if ( '' !== $plan ) {
                                 $name .= ' — ' . $plan;
+                                $name .= ' (' . $plan . ')';
+                        }
 …
          * form usually cannot supply.
+         *
+         * @param string $org_id Books organisation id. Without it only the
+         *                       built-in resources are listed, because a custom
+         *                       module belongs to an organisation.
+         * @param bool   $fresh  Ask Books even when the custom modules are cached.
          * @return array<int,array>
          */
+        public function modules() {
+        public function modules( $org_id = '', $fresh = false ) {
+                $built_in         = self::built_in_modules();
+                $this->skip_cache = (bool) $fresh;
+                if ( '' === (string) $org_id ) {
+                        return $built_in;
+                }
+                return array_merge( $built_in, $this->cached_custom_modules( $org_id, $fresh ) );
+        }
+        /**
+         * The organisation's custom modules, kept for ten minutes.
+         *
+         * Finding them can take several requests (see custom_modules_one_by_one()),
+         * seconds in all, and the editor asks every time an organisation is picked.
+         * A module created in Books meanwhile shows up through the reload button
+         * beside the module select, which passes $fresh.
+         *
+         * @param string $org_id Books organisation id.
+         * @param bool   $fresh  Skip the cache.
+         * @return array<int,array{api_name:string,label:string}>
+         */
+        private function cached_custom_modules( $org_id, $fresh ) {
+                $key = 'form2zoho_books_cm_' . md5( $this->connection_id . '|' . $org_id );
+                if ( ! $fresh ) {
+                        $cached = get_transient( $key );
+                        if ( is_array( $cached ) ) {
+                                return $cached;
+                        }
+                }
+                $modules = $this->custom_modules( $org_id );
+                // Not kept when Books could not be asked at all, so a brief outage
+                // does not hide the custom modules for the next ten minutes.
+                if ( null !== $modules ) {
+                        set_transient( $key, $modules, 10 * MINUTE_IN_SECONDS );
+                }
+                return (array) $modules;
+        }
+        /**
+         * The custom modules this organisation has, as resources a feed can target.
+         *
+         * Books lets an organisation define its own modules, and until this was
+         * asked for the picker showed only the eight built-in resources — so a
+         * module somebody had created for their own business was simply absent,
+         * with nothing on screen to say why.
+         *
+         * Failure is silent on purpose. This runs alongside a list that is already
+         * correct, and an organisation with no custom modules, an older API, or a
+         * grant that does not cover settings should still get the eight built-ins
+         * rather than an error where the module picker used to be.
+         *
+         * @param string $org_id Books organisation id.
+         * @return array<int,array{api_name:string,label:string}>|null Null when
+         *                                                         Books could not be asked.
+         */
+        private function custom_modules( $org_id ) {
+                // An organisation that refuses the list keeps refusing it, and asking
+                // anyway cost a second on every lookup before the fallback could start.
+                $refused = 'form2zoho_books_cm_refused_' . md5( $this->connection_id . '|' . $org_id );
+                if ( get_transient( $refused ) ) {
+                        return $this->custom_modules_one_by_one( $org_id );
+                }
+                $res = $this->request(
+                        'GET',
+                        '/books/v3/settings/modules',
+                        array( 'query' => array( 'organization_id' => (string) $org_id ) )
+                );
+                if ( is_wp_error( $res ) ) {
+                        $data = $res->get_error_data();
+                        // Only Zoho's own no, not a network error that may pass.
+                        if ( is_array( $data ) && isset( $data['http_status'] ) ) {
+                                set_transient( $refused, 1, DAY_IN_SECONDS );
+                        }
+                        return $this->custom_modules_one_by_one( $org_id );
+                }
+                $out = array();
+                foreach ( (array) ( $res['modules'] ?? array() ) as $module ) {
+                        $row = self::module_row( (array) $module );
+                        if ( null !== $row ) {
+                                $out[] = $row;
+                        }
+                }
+                return $out;
+        }
+        /**
+         * Find the custom modules when Books will not list them.
+         *
+         * Some organisations refuse the list call outright ("You don't have
+         * permission to perform this operation"), even for an admin whose grant
+         * covers settings — while still answering for each module by name. The
+         * names are in the custom-field settings, where every field of a custom
+         * module reports it as its `search_entity`, so each one found there is
+         * asked for in turn.
+         *
+         * Asking one at a time is also what separates a module from the table
+         * inside one: a table's fields report a `cm_` entity too, but Books does
+         * not answer for it as a module, so it is left out here.
+         *
+         * A module with no custom fields of its own does not appear in those
+         * settings, and so cannot be found this way.
+         *
+         * @param string $org_id Books organisation id.
+         * @return array<int,array{api_name:string,label:string}>|null Null when
+         *                                                         Books could not be asked.
+         */
+        private function custom_modules_one_by_one( $org_id ) {
+                $query    = array( 'query' => array( 'organization_id' => (string) $org_id ) );
+                $settings = $this->custom_field_settings( $org_id );
+                if ( is_wp_error( $settings ) ) {
+                        return null;
+                }
+                $names = array();
+                foreach ( $settings as $group ) {
+                        foreach ( (array) $group as $field ) {
+                                $entity = is_array( $field ) && isset( $field['search_entity'] ) ? (string) $field['search_entity'] : '';
+                                if ( 0 === strpos( $entity, 'cm_' ) ) {
+                                        $names[ $entity ] = true;
+                                }
+                        }
+                }
+                $paths = array();
+                foreach ( array_keys( $names ) as $name ) {
+                        $paths[ $name ] = '/books/v3/settings/modules/' . rawurlencode( $name );
+                }
+                // Asked together: one at a time was a second per module.
+                $out = array();
+                foreach ( $this->get_many( $paths, $query ) as $one ) {
+                        if ( is_wp_error( $one ) ) {
+                                continue;
+                        }
+                        $row = self::module_row( (array) ( $one['module'] ?? array() ) );
+                        if ( null !== $row ) {
+                                $out[] = $row;
+                        }
+                }
+                return $out;
+        }
+        /**
+         * One custom module, as a row of the module picker.
+         *
+         * @param array $module A module from Books' module settings.
+         * @return array{api_name:string,label:string}|null Null without an api name.
+         */
+        private static function module_row( array $module ) {
+                $api_name = isset( $module['api_name'] ) ? (string) $module['api_name'] : '';
+                if ( '' === $api_name ) {
+                        return null;
+                }
+                $label = isset( $module['plural_name'] ) && '' !== $module['plural_name']
+                        ? (string) $module['plural_name']
+                        : $api_name;
+                return array(
+                        'api_name' => $api_name,
+                        'label'    => $label,
+                );
+        }
+        /**
+         * The eight resources this plugin can create from a form.
+         *
+         * @return array<int,array>
+         */
+        private static function built_in_modules() {
                 return array(
                         array(
 …
+         *
          * @param string $resource_key Resource key.
+         * @param string $org_id       Books organisation id, needed to read the
+         *                             fields of a custom module.
+         * @param bool   $fresh        Ask Books even when its field settings are cached.
          * @return array<int,array>
          */
+        public function fields( $resource_key ) {
+                $map = array(
+        public function fields( $resource_key, $org_id = '', $fresh = false ) {
+                $this->skip_cache = (bool) $fresh;
+                $resource_key     = (string) $resource_key;
+                $org_id       = (string) $org_id;
+                $curated      = self::curated_fields();
+                // A custom module has no built-in fields at all — everything on it is
+                // a custom field — so its list is only what the account reports.
+                if ( ! isset( $curated[ $resource_key ] ) ) {
+                        return '' === $org_id ? array() : $this->custom_fields( $resource_key, $org_id );
+                }
+                $fields = self::shape_fields( $curated, $resource_key );
+                if ( '' === $org_id ) {
+                        return $fields;
+                }
+                // A built-in resource gets both. An organisation that has added, say,
+                // a "Payment Mode" field to its invoices could not map anything to it
+                // before: the curated list is what this plugin knows how to send, and
+                // it has no way of knowing about a field somebody created last week.
+                return array_merge( $fields, $this->custom_fields( self::ENTITIES[ $resource_key ], $org_id ) );
+        }
+        /**
+         * Books' own name for each resource, as its custom fields report it.
+         *
+         * The customfields endpoint tags every field with the entity it belongs
+         * to, in the singular — "item" for the resource this plugin calls
+         * "items" — so the two vocabularies have to be matched up somewhere. Here,
+         * written out, rather than by trimming an "s" and hoping Books never adds
+         * a resource whose plural is irregular.
+         */
+        private const ENTITIES = array(
+                'contacts'       => 'contact',
+                'items'          => 'item',
+                'invoices'       => 'invoice',
+                'estimates'      => 'estimate',
+                'salesorders'    => 'salesorder',
+                'purchaseorders' => 'purchaseorder',
+                'bills'          => 'bill',
+                'expenses'       => 'expense',
+        );
+        /**
+         * The organisation's own fields for one Books entity.
+         *
+         * Books returns every custom field the organisation has from one endpoint,
+         * grouped, with each field naming the module it belongs to in
+         * `search_entity`. There is no per-module call, so the whole set is fetched
+         * and filtered here.
+         *
+         * Uploads and tables are dropped for the same reason they are on the CRM
+         * side: a form submits text, and a field that wants a file reference or a
+         * grid of rows cannot be filled from one. See
+         * AbstractClient::is_unfillable_field().
+         *
+         * @param string $entity Books entity name: "item", "invoice", or a custom
+         *                       module's api name such as "cm_sales_return2".
+         * @param string $org_id Books organisation id.
+         * @return array<int,array{api_name:string,label:string,required:bool}>
+         */
+        private function custom_fields( $entity, $org_id ) {
+                $settings = $this->custom_field_settings( $org_id );
+                if ( is_wp_error( $settings ) ) {
+                        return array();
+                }
+                // Autonumber and formula fields are filled in by Books itself, and
+                // refuse a value sent to them.
+                $unfillable = array( 'image', 'table', 'file', 'attachment', 'autonumber', 'formula' );
+                $out  = array();
+                $seen = array();
+                foreach ( $settings as $group ) {
+                        foreach ( (array) $group as $field ) {
+                                if ( ! is_array( $field ) ) {
+                                        continue;
+                                }
+                                $owner = isset( $field['search_entity'] ) ? (string) $field['search_entity'] : '';
+                                $name  = isset( $field['api_name'] ) ? (string) $field['api_name'] : '';
+                                if ( $owner !== $entity || '' === $name || empty( $field['is_active'] ) ) {
+                                        continue;
+                                }
+                                // One field can be reported under more than one group — a
+                                // contact's fields come back again under "practice_client" —
+                                // and a second row for it would offer the same field twice.
+                                if ( isset( $seen[ $name ] ) ) {
+                                        continue;
+                                }
+                                $seen[ $name ] = true;
+                                if ( in_array( strtolower( (string) ( $field['data_type'] ?? '' ) ), $unfillable, true ) ) {
+                                        continue;
+                                }
+                                $out[] = array(
+                                        'api_name' => $name,
+                                        'label'    => isset( $field['label'] ) && '' !== $field['label'] ? (string) $field['label'] : $name,
+                                        'required' => ! empty( $field['is_mandatory'] ),
+                                        'id'       => isset( $field['customfield_id'] ) ? (string) $field['customfield_id'] : '',
+                                );
+                        }
+                }
+                return $out;
+        }
+        /**
+         * Every custom field the organisation has, grouped as Books reports them.
+         *
+         * One call answers for every module, and the editor asked it again for
+         * each module picked and once more for the module list, a second each
+         * time. Kept for ten minutes; the reload button beside the module select
+         * skips it, so a field added in Books meanwhile can be picked up.
+         *
+         * @param string $org_id Books organisation id.
+         * @return array|WP_Error
+         */
+        private function custom_field_settings( $org_id ) {
+                $key = 'form2zoho_books_cfs_' . md5( $this->connection_id . '|' . $org_id );
+                if ( ! $this->skip_cache ) {
+                        $cached = get_transient( $key );
+                        if ( is_array( $cached ) ) {
+                                return $cached;
+                        }
+                }
+                $res = $this->request(
+                        'GET',
+                        '/books/v3/settings/customfields',
+                        array( 'query' => array( 'organization_id' => (string) $org_id ) )
+                );
+                if ( is_wp_error( $res ) ) {
+                        return $res;
+                }
+                $settings = (array) ( $res['customfields'] ?? array() );
+                set_transient( $key, $settings, 10 * MINUTE_IN_SECONDS );
+                return $settings;
+        }
+        /**
+         * Curated writable fields per built-in Books resource.
+         *
+         * @return array<string,array<string,bool>>
+         */
+        private static function curated_fields() {
+                return array(
                         'contacts'       => array(
                                 'contact_name' => true,
 …
                         ),
                 );
+        }
+        /**
+         * Turn the curated map into the row shape the editor renders.
+         *
+         * @param array<string,array<string,bool>> $map          Curated map.
+         * @param string                           $resource_key Resource key.
+         * @return array<int,array{api_name:string,label:string,required:bool}>
+         */
+        private static function shape_fields( array $map, $resource_key ) {
                 $fields = isset( $map[ $resource_key ] ) ? $map[ $resource_key ] : array();
 …
+                }
+                $record = $this->pack_custom_fields( $record, $org_id );
                 return $this->request(
                         'POST',
 …
+                        )
                 );
+        }
+        /**
+         * Move an organisation's own fields into the array Books reads them from.
+         *
+         * A mapped custom field arrives here as a plain `cf_something` key,
+         * because that is its API name and that is what the mapping table offers.
+         * Books does not read it there. Its documented shape is
+         * `custom_fields: [ { customfield_id, value } ]`, and a `cf_` key at the
+         * top level of the body is not rejected — it is ignored. That is the worst
+         * of the two outcomes: the record is created, the log says success, and
+         * the field somebody mapped is simply not there.
+         *
+         * The ids come from the same settings call the mapping table was built
+         * from, cached per organisation. It is one extra request at most once an
+         * hour, and only on a feed that actually maps one of these — a record with
+         * no `cf_` keys never asks.
+         *
+         * @param array  $record Mapped values, possibly containing cf_* keys.
+         * @param string $org_id Books organisation id.
+         * @return array
+         */
+        private function pack_custom_fields( array $record, $org_id ) {
+                $named = array();
+                foreach ( $record as $key => $value ) {
+                        if ( 0 === strpos( (string) $key, 'cf_' ) ) {
+                                $named[ (string) $key ] = $value;
+                        }
+                }
+                if ( array() === $named ) {
+                        return $record;
+                }
+                $ids = $this->custom_field_ids( $org_id );
+                $out = isset( $record['custom_fields'] ) && is_array( $record['custom_fields'] ) ? $record['custom_fields'] : array();
+                foreach ( $named as $key => $value ) {
+                        unset( $record[ $key ] );
+                        // A field whose id cannot be resolved is dropped rather than sent
+                        // in a shape Books will ignore. Either way it does not arrive; the
+                        // difference is that this way the request stays the documented
+                        // one.
+                        if ( empty( $ids[ $key ] ) ) {
+                                continue;
+                        }
+                        $out[] = array(
+                                'customfield_id' => $ids[ $key ],
+                                'value'          => $value,
+                        );
+                }
+                if ( array() !== $out ) {
+                        $record['custom_fields'] = $out;
+                }
+                return $record;
+        }
+        /**
+         * api_name => customfield_id for one organisation, cached for an hour.
+         *
+         * @param string $org_id Books organisation id.
+         * @return array<string,string>
+         */
+        private function custom_field_ids( $org_id ) {
+                $key    = 'form2zoho_books_cf_' . md5( (string) $org_id );
+                $cached = get_transient( $key );
+                if ( is_array( $cached ) ) {
+                        return $cached;
+                }
+                $res = $this->request(
+                        'GET',
+                        '/books/v3/settings/customfields',
+                        array( 'query' => array( 'organization_id' => (string) $org_id ) )
+                );
+                $ids = array();
+                if ( ! is_wp_error( $res ) ) {
+                        foreach ( (array) ( $res['customfields'] ?? array() ) as $group ) {
+                                foreach ( (array) $group as $field ) {
+                                        if ( is_array( $field ) && ! empty( $field['api_name'] ) && ! empty( $field['customfield_id'] ) ) {
+                                                $ids[ (string) $field['api_name'] ] = (string) $field['customfield_id'];
+                                        }
+                                }
+                        }
+                }
+                // Cached even when empty, so a failed or genuinely empty lookup does
+                // not re-ask on every submission.
+                set_transient( $key, $ids, HOUR_IN_SECONDS );
+                return $ids;
+        }

techwave-form-sync-for-zoho/trunk/includes/Api/CampaignsClient.php

-              r3649280
+              r3748247
 final class CampaignsClient extends AbstractClient {
+        /** Mailing lists asked for per page. */
+        private const LIST_PAGE = 200;
+        /** Topics asked for per page. */
+        private const TOPIC_PAGE = 100;
+        /** Pages read at most, for lists and for topics. */
+        private const MAX_PAGES = 25;
         /**
          * {@inheritDoc}
 …
          */
         public function lists() {
-                $res = $this->request(
-                        'GET',
-                        '/api/v1.1/getmailinglists',
-                        array(
-                                'query' => array(
-                                        'resfmt'    => 'JSON',
-                                        'sort'      => 'desc',
-                                        'fromindex' => 1,
-                                        'range'     => 200,
-                                ),
+                        )
-                );
-                if ( is_wp_error( $res ) ) {
-                        return $res;
+                }
                 $out = array();
+                foreach ( (array) ( $res['list_of_details'] ?? array() ) as $row ) {
+                        $key = isset( $row['listkey'] ) ? (string) $row['listkey'] : '';
+                        if ( '' === $key ) {
+                                continue;
+                        }
+                        $out[] = array(
+                                'api_name' => $key,
+                                'label'    => isset( $row['listname'] ) ? (string) $row['listname'] : $key,
+                // A page at a time: one call stopped at the first 200 lists, and an
+                // account with more could not pick the rest. Capped, and stopped as
+                // soon as a page brings nothing new, in case Zoho ever answers every
+                // page with the first one.
+                for ( $page = 0; $page < self::MAX_PAGES; $page++ ) {
+                        $res = $this->request(
+                                'GET',
+                                '/api/v1.1/getmailinglists',
+                                array(
+                                        'query' => array(
+                                                'resfmt'    => 'JSON',
+                                                'sort'      => 'desc',
+                                                'fromindex' => 1 + $page * self::LIST_PAGE,
+                                                'range'     => self::LIST_PAGE,
+                                        ),
+                                )
                         );
+                }
+                return $out;
+                        if ( is_wp_error( $res ) ) {
+                                // A later page failing still leaves the lists already read.
+                                return $page ? array_values( $out ) : $res;
+                        }
+                        $rows  = (array) ( $res['list_of_details'] ?? array() );
+                        $added = 0;
+                        foreach ( $rows as $row ) {
+                                $key = isset( $row['listkey'] ) ? (string) $row['listkey'] : '';
+                                if ( '' === $key || isset( $out[ $key ] ) ) {
+                                        continue;
+                                }
+                                $out[ $key ] = array(
+                                        'api_name' => $key,
+                                        'label'    => isset( $row['listname'] ) ? (string) $row['listname'] : $key,
+                                );
+                                ++$added;
+                        }
+                        if ( count( $rows ) < self::LIST_PAGE || ! $added ) {
+                                break;
+                        }
+                }
+                return array_values( $out );
+        }
 …
          */
         public function topics() {
+                $res = $this->request(
+                        'GET',
+                        '/api/v1.1/topics',
+                        array(
+                                'query' => array(
+                                        'details' => wp_json_encode(
+                                                array(
+                                                        'from_index' => 0,
+                                                        'range'      => 100,
+                                                )
+                $out  = array();
+                $seen = array();
+                // Paged the same way as lists(): one call stopped at 100 topics.
+                for ( $page = 0; $page < self::MAX_PAGES; $page++ ) {
+                        $res = $this->request(
+                                'GET',
+                                '/api/v1.1/topics',
+                                array(
+                                        'query' => array(
+                                                'details' => wp_json_encode(
+                                                        array(
+                                                                'from_index' => $page * self::TOPIC_PAGE,
+                                                                'range'      => self::TOPIC_PAGE,
+                                                        )
+                                                ),
                                         ),
+                                ),
+                        )
+                );
+                if ( is_wp_error( $res ) ) {
+                        return $res;
+                }
+                $out = array();
+                foreach ( (array) ( $res['topicDetails'] ?? array() ) as $row ) {
+                        $id   = isset( $row['topicId'] ) ? (string) $row['topicId'] : '';
+                        $name = isset( $row['topicName'] ) ? trim( (string) $row['topicName'] ) : '';
+                        if ( '' === $id || '' === $name ) {
+                                continue;
+                        }
+                        $out[] = array(
+                                'id'   => $id,
+                                'name' => $name,
+                                )
                         );
+                }
+                        if ( is_wp_error( $res ) ) {
+                                return $page ? $out : $res;
+                        }
+                        $rows  = (array) ( $res['topicDetails'] ?? array() );
+                        $added = 0;
+                        foreach ( $rows as $row ) {
+                                $id   = isset( $row['topicId'] ) ? (string) $row['topicId'] : '';
+                                $name = isset( $row['topicName'] ) ? trim( (string) $row['topicName'] ) : '';
+                                if ( '' === $id || isset( $seen[ $id ] ) ) {
+                                        continue;
+                                }
+                                $seen[ $id ] = true;
+                                ++$added;
+                                if ( '' === $name ) {
+                                        continue;
+                                }
+                                $out[] = array(
+                                        'id'   => $id,
+                                        'name' => $name,
+                                );
+                        }
+                        if ( count( $rows ) < self::TOPIC_PAGE || ! $added ) {
+                                break;
+                        }
+                }
                 return $out;
+        }
 …
                         'resfmt'      => 'JSON',
                         'listkey'     => $listkey,
                         'contactinfo' => $this->pseudo_json( $contactinfo ),
                         'source'      => 'Techwave Form Sync for Zoho',
+                        'contactinfo' => '',
+                        'source'      => 'FormBridge for Zoho',
                 );
                 if ( '' !== $topic_id ) {
                         $query['topic_id'] = $topic_id;
+                }
+                return $this->request( 'POST', '/api/v1.1/json/listsubscribe', array( 'query' => $query ) );
+                return $this->post_info( '/api/v1.1/json/listsubscribe', $query, 'contactinfo', $contactinfo );
+        }
+        /**
+         * Add a contact to a list directly, with no confirmation email.
+         *
+         * Zoho's addlistsubscribersinbulk takes email addresses only, and adds
+         * them to the list straight away even when its sign-up form is on, where
+         * listsubscribe would only send a confirmation email. The contact's other
+         * fields still go through subscribe().
+         *
+         * @param string $listkey Mailing list key.
+         * @param string $email   Contact email.
+         * @return array|WP_Error
+         */
+        public function add_to_list( $listkey, $email ) {
+                return $this->request(
+                        'POST',
+                        '/api/v1.1/addlistsubscribersinbulk',
+                        array(
+                                'query' => array(
+                                        'resfmt'   => 'JSON',
+                                        'listkey'  => $listkey,
+                                        'emailids' => $email,
+                                ),
+                        )
+                );
+        }
 …
                         'resfmt'      => 'JSON',
                         'listkey'     => $listkey,
                         'contactinfo' => $this->pseudo_json( $contactinfo ),
+                        'contactinfo' => '',
                 );
                 if ( '' !== $topic_id ) {
                         $query['topic_id'] = $topic_id;
+                }
+                return $this->request( 'POST', '/api/v1.1/json/listunsubscribe', array( 'query' => $query ) );
+                return $this->post_info( '/api/v1.1/json/listunsubscribe', $query, 'contactinfo', $contactinfo );
+        }
+        /**
+         * Post one contact payload, as JSON Zoho's own parser will accept.
+         *
+         * Zoho documents this parameter unquoted — {First Name:mac,Contact
+         * Email:x@y.com} — a shape with no way to write a value containing the
+         * comma that separates the pairs or the colon that separates a pair.
+         * Building it meant replacing a comma in an address or a company name
+         * with a space, and a colon in a subject line could end the payload
+         * early. Real JSON quotes every key and value, so both survive.
+         *
+         * The documented shape is still tried when Zoho answers "please enter
+         * correct XML(or)JSON format" (code 2001), so an account whose parser
+         * only takes that shape keeps working exactly as before.
+         *
+         * @param string $path     API path.
+         * @param array  $query    Query parameters, with the info key empty.
+         * @param string $info_key 'contactinfo'.
+         * @param array  $fields   Human-labelled field => value pairs.
+         * @return array|WP_Error
+         */
+        private function post_info( $path, array $query, $info_key, array $fields ) {
+                // The documented shape first, because it is the one Zoho's own
+                // examples use and the one every account has always been sent.
+                if ( ! self::needs_quoting( $fields ) ) {
+                        $query[ $info_key ] = $this->pseudo_json( $fields );
+                        return $this->request( 'POST', $path, array( 'query' => $query ) );
+                }
+                $query[ $info_key ] = (string) wp_json_encode( $fields );
+                $res = $this->request( 'POST', $path, array( 'query' => $query ) );
+                if ( ! self::refused( $res ) ) {
+                        return $res;
+                }
+                // Zoho would not take it quoted, so it goes the documented way,
+                // which costs the comma or colon inside the value but sends the
+                // submission.
+                $query[ $info_key ] = $this->pseudo_json( $fields );
+                return $this->request( 'POST', $path, array( 'query' => $query ) );
+        }
+        /**
+         * Whether any value would lose something in the documented shape.
+         *
+         * @param array $fields Field => value pairs.
+         * @return bool
+         */
+        private static function needs_quoting( array $fields ) {
+                foreach ( $fields as $value ) {
+                        if ( is_array( $value ) ) {
+                                return true;
+                        }
+                        if ( preg_match( '/[,:{}]/', (string) $value ) ) {
+                                return true;
+                        }
+                }
+                return false;
+        }
+        /**
+         * Whether Zoho turned an attempt down, whatever reason it gave.
+         *
+         * Read widely on purpose: this decides only whether to try the same
+         * submission again in the documented shape, and Zoho answers a payload
+         * it could not read with more than one code ("please enter correct
+         * XML(or)JSON format", but also a complaint about the email it failed
+         * to find in it).
+         *
+         * @param array|WP_Error $res Zoho's answer.
+         * @return bool
+         */
+        private static function refused( $res ) {
+                if ( is_wp_error( $res ) ) {
+                        return true;
+                }
+                if ( ! is_array( $res ) ) {
+                        return false;
+                }
+                $body   = ( isset( $res['response'] ) && is_array( $res['response'] ) ) ? $res['response'] : $res;
+                $status = isset( $body['status'] ) ? strtolower( trim( (string) $body['status'] ) ) : '';
+                $code   = isset( $body['code'] ) ? trim( (string) $body['code'] ) : '';
+                return ! ( 'success' === $status || ( '' === $status && '0' === $code ) );
+        }
+}

techwave-form-sync-for-zoho/trunk/includes/Api/CrmClient.php

-              r3649280
+              r3748247
         /**
+         * Put one file in Zoho's file store and return the id a record refers to.
+         *
+         * The two-step flow Zoho documents for a File Upload field: the bytes go
+         * to /files, and the record then carries
+         * [ { "File_Id__s": "<id>" } ] — there is no way to put a file straight
+         * into a record.
+         *
+         * @param string $file Absolute path to the file on disk.
+         * @return string|WP_Error The encrypted file id.
+         */
+        public function upload_file( $file ) {
+                $res = $this->upload( '/crm/v6/files', $file );
+                if ( is_wp_error( $res ) ) {
+                        return $res;
+                }
+                $id = isset( $res['data'][0]['details']['id'] ) ? (string) $res['data'][0]['details']['id'] : '';
+                if ( '' === $id ) {
+                        return new WP_Error(
+                                'form2zoho_file_no_id',
+                                __( 'Zoho accepted the file but returned no id for it.', 'techwave-form-sync-for-zoho' ),
+                                $res
+                        );
+                }
+                return $id;
+        }
+        /**
+         * Zoho CRM can be given a file, so its upload fields are worth offering.
+         *
+         * {@inheritDoc}
+         */
+        protected static function supports_file_upload() {
+                return true;
+        }
+        /**
          * List writable fields for a module.
+         *
 …
                 $out = array();
                 foreach ( (array) ( $res['fields'] ?? array() ) as $field ) {
                         if ( ! empty( $field['read_only'] ) ) {
+                        if ( ! empty( $field['read_only'] ) || self::is_unfillable_field( $field ) ) {
                                 continue;
+                        }
 …
                                 'label'    => (string) $field['field_label'],
                                 'required' => ! empty( $field['system_mandatory'] ) || ! empty( $field['required'] ),
+                                // Carried through to the mapping row and saved with it. A form
+                                // value is text whatever it came from, and Zoho wants a real
+                                // boolean for a checkbox and a real array for a multi-select —
+                                // so the feed has to remember which of those it is aiming at.
+                                // See FieldMapper::coerce().
+                                'type'     => strtolower( (string) ( isset( $field['data_type'] ) ? $field['data_type'] : '' ) ),
+                                // Whether Zoho refuses two records with the same value here.
+                                // Present on every field and empty when it is not unique, so
+                                // this is a real answer rather than an absence. The duplicate
+                                // handling on the Destination step offers exactly these,
+                                // instead of asking somebody to type API names from memory.
+                                'unique'   => ! empty( $field['unique'] ),
                         );
+                }
 …
         /**
+         * Create a record.
+         *
+         * @param string $module          Module API name.
+         * @param array  $record          Field => value pairs.
+         * @param array  $duplicate_fields Fields used for upsert duplicate check (empty = plain insert).
+         * Create a record, or update the one it duplicates.
+         *
+         * @param string    $module           Module API name.
+         * @param array     $record           Field => value pairs.
+         * @param array     $duplicate_fields Unique fields to match an existing record on.
+         * @param bool|null $upsert           Update a matching record instead of inserting. Null keeps
+         *                                    the older rule: upsert only when fields are named.
          * @return array|WP_Error
          */
+        public function create_record( $module, array $record, array $duplicate_fields = array() ) {
+                if ( ! empty( $duplicate_fields ) ) {
+        public function create_record( $module, array $record, array $duplicate_fields = array(), $upsert = null, array $extras = array() ) {
+                if ( null === $upsert ? ! empty( $duplicate_fields ) : $upsert ) {
+                        $body = self::with_extras( array( 'data' => array( $record ) ), $extras, true );
+                        // Left out rather than sent empty when nothing is named: Zoho then
+                        // checks its own system-defined duplicate fields (Email on Leads
+                        // and Contacts, for example) and the module's unique fields.
+                        if ( ! empty( $duplicate_fields ) ) {
+                                $body['duplicate_check_fields'] = array_values( $duplicate_fields );
+                        }
                         // Upsert merges into an existing record when a duplicate is found.
                         return $this->request(
                                 'POST',
                                 '/crm/v6/' . rawurlencode( $module ) . '/upsert',
+                                array(
+                                        'body' => array(
+                                                'data'                   => array( $record ),
+                                                'duplicate_check_fields' => array_values( $duplicate_fields ),
+                                        ),
+                                )
+                                array( 'body' => $body )
                         );
+                }
 …
                         'POST',
                         '/crm/v6/' . rawurlencode( $module ),
                         array( 'body' => array( 'data' => array( $record ) ) )
+                        array( 'body' => self::with_extras( array( 'data' => array( $record ) ), $extras, false ) )
                 );
+        }
+        /**
+         * Add the request-level keys Zoho documents for this endpoint, and only
+         * those.
+         *
+         * The two endpoints do not accept the same set, and sending one the
+         * endpoint does not document is a request Zoho may refuse outright:
+         *
+         *   insert  trigger (workflow, approval, blueprint, pathfinder,
+         *           orchestration), lar_id, apply_feature_execution,
+         *           skip_feature_execution
+         *   upsert  trigger (workflow, approval, blueprint),
+         *           apply_feature_execution
+         *
+         * `trigger` is passed through even when empty, because an empty list is
+         * an instruction — run nothing — and not the same as leaving it out,
+         * which runs the automations Zoho has set up for the API.
+         *
+         * @param array $body   The request body so far.
+         * @param array $extras What an add-on asked for.
+         * @param bool  $upsert Whether this is the upsert endpoint.
+         * @return array
+         */
+        private static function with_extras( array $body, array $extras, $upsert ) {
+                if ( array_key_exists( 'trigger', $extras ) && is_array( $extras['trigger'] ) ) {
+                        $allowed = $upsert
+                                ? array( 'workflow', 'approval', 'blueprint' )
+                                : array( 'workflow', 'approval', 'blueprint', 'pathfinder', 'orchestration' );
+                        $body['trigger'] = array_values( array_intersect( $allowed, array_map( 'strval', $extras['trigger'] ) ) );
+                }
+                if ( ! $upsert && isset( $extras['lar_id'] ) && preg_match( '/^\d+$/', (string) $extras['lar_id'] ) ) {
+                        $body['lar_id'] = (string) $extras['lar_id'];
+                }
+                foreach ( array( 'apply_feature_execution', 'skip_feature_execution' ) as $key ) {
+                        if ( $upsert && 'skip_feature_execution' === $key ) {
+                                continue;
+                        }
+                        if ( isset( $extras[ $key ] ) && is_array( $extras[ $key ] ) && array() !== $extras[ $key ] ) {
+                                $body[ $key ] = array_values( $extras[ $key ] );
+                        }
+                }
+                return $body;
+        }
+}

techwave-form-sync-for-zoho/trunk/includes/Api/DeskClient.php

-              r3649280
+              r3748247
          * @return array<int,array>
          */
+        public function fields( $module ) {
+        public function fields( $module, $org_id = '' ) {
+                $curated = $this->curated_fields( $module );
+                if ( '' === (string) $org_id ) {
+                        return $curated;
+                }
+                return array_merge( $curated, $this->custom_fields( (string) $module, (string) $org_id ) );
+        }
+        /**
+         * The organisation's own fields for one Desk module.
+         *
+         * Desk lets a helpdesk add its own fields to a layout, and until this was
+         * asked for the mapping table offered only the curated list below — so a
+         * "Vehicle Id" somebody had added to their tickets was unmappable, with
+         * nothing on screen to say why.
+         *
+         * Failure is silent: this runs alongside a list that is already correct,
+         * and an organisation with no custom fields, or a grant that does not
+         * cover the settings read, should still get the curated ones rather than
+         * an error where the field list used to be.
+         *
+         * @param string $module Desk module api name.
+         * @param string $org_id Desk organization id.
+         * @return array<int,array{api_name:string,label:string,required:bool}>
+         */
+        private function custom_fields( $module, $org_id ) {
+                $res = $this->request(
+                        'GET',
+                        '/api/v1/organizationFields?module=' . rawurlencode( $module ),
+                        array( 'headers' => array( 'orgId' => $org_id ) )
+                );
+                if ( is_wp_error( $res ) ) {
+                        return array();
+                }
+                $out = array();
+                foreach ( (array) ( $res['data'] ?? array() ) as $field ) {
+                        if ( ! is_array( $field ) || empty( $field['isCustomField'] ) || ! empty( $field['isReadOnly'] ) ) {
+                                continue;
+                        }
+                        $name = isset( $field['apiName'] ) ? (string) $field['apiName'] : '';
+                        if ( '' === $name ) {
+                                continue;
+                        }
+                        $out[] = array(
+                                'api_name' => $name,
+                                'label'    => isset( $field['displayLabel'] ) && '' !== $field['displayLabel'] ? (string) $field['displayLabel'] : $name,
+                                'required' => ! empty( $field['isMandatory'] ),
+                        );
+                }
+                return $out;
+        }
+        /**
+         * Curated, create-ready fields for a Desk module.
+         *
+         * @param string $module Module api name.
+         * @return array<int,array>
+         */
+        private function curated_fields( $module ) {
                 switch ( $module ) {
                         case 'tickets':
 …
          * @return array|WP_Error
          */
         public function create_record( $org_id, $department_id, $module, array $record ) {
+        public function create_record( $org_id, $department_id, $module, array $record, array $extras = array() ) {
                 if ( '' === (string) $org_id ) {
                         return new WP_Error( 'form2zoho_desk_no_org', __( 'Select a Zoho Desk organization for this feed.', 'techwave-form-sync-for-zoho' ) );
 …
                                 return $record;
+                        }
+                }
+                        // Who owns the ticket and which product it is about. Both are
+                        // Desk record ids, so digits only — prepare_ticket() rebuilds the
+                        // ticket from an allowlist precisely so a stray value cannot reach
+                        // the API, and these arrive from outside the mapping.
+                        foreach ( array( 'assigneeId', 'productId' ) as $key ) {
+                                if ( isset( $extras[ $key ] ) && preg_match( '/^\d+$/', (string) $extras[ $key ] ) ) {
+                                        $record[ $key ] = (string) $extras[ $key ];
+                                }
+                        }
+                }
+                $record = self::pack_custom_fields( $record );
                 $result = $this->request(
 …
          * @return array|WP_Error
          */
+        /**
+         * Move an organisation's own fields into the object Desk reads them from.
+         *
+         * A mapped custom field arrives as a plain `cf_something` key, because
+         * that is its apiName and that is what the mapping table offers. Desk does
+         * not read it there: it wants them collected under `cf`, and a `cf_` key
+         * at the top level of the body is ignored rather than refused — the ticket
+         * is created, the log says success, and the field is quietly missing.
+         *
+         * No lookup is needed, unlike Books: Desk keys this object by the same
+         * apiName the field list already uses.
+         *
+         * @param array $record Mapped values, possibly containing cf_* keys.
+         * @return array
+         */
+        private static function pack_custom_fields( array $record ) {
+                $cf = isset( $record['cf'] ) && is_array( $record['cf'] ) ? $record['cf'] : array();
+                foreach ( $record as $key => $value ) {
+                        if ( 0 === strpos( (string) $key, 'cf_' ) ) {
+                                $cf[ (string) $key ] = $value;
+                                unset( $record[ $key ] );
+                        }
+                }
+                if ( array() !== $cf ) {
+                        $record['cf'] = $cf;
+                }
+                return $record;
+        }
         private function prepare_ticket( array $record, $department_id ) {
                 if ( '' === $department_id ) {

techwave-form-sync-for-zoho/trunk/includes/Api/MarketingAutomationClient.php

-              r3649280
+              r3748247
 final class MarketingAutomationClient extends AbstractClient {
+        /** Mailing lists asked for per page. */
+        private const LIST_PAGE = 200;
+        /** Topics asked for per page. */
+        private const TOPIC_PAGE = 100;
+        /** Pages read at most, for lists and for topics. */
+        private const MAX_PAGES = 25;
         /**
          * {@inheritDoc}
 …
          */
         public function lists() {
-                $res = $this->request(
-                        'GET',
-                        '/api/v1/getmailinglists',
-                        array(
-                                'query' => array(
-                                        'resfmt'    => 'JSON',
-                                        'sort'      => 'desc',
-                                        'fromindex' => 1,
-                                        'range'     => 200,
-                                ),
+                        )
-                );
-                if ( is_wp_error( $res ) ) {
-                        return $res;
+                }
                 $out = array();
+                foreach ( (array) ( $res['list_of_details'] ?? array() ) as $row ) {
+                        $key = isset( $row['listkey'] ) ? (string) $row['listkey'] : '';
+                        if ( '' === $key ) {
+                                continue;
+                        }
+                        $out[] = array(
+                                'api_name' => $key,
+                                'label'    => isset( $row['listname'] ) ? (string) $row['listname'] : $key,
+                // A page at a time: one call stopped at the first 200 lists, and an
+                // account with more could not pick the rest. Capped, and stopped as
+                // soon as a page brings nothing new, in case Zoho ever answers every
+                // page with the first one.
+                for ( $page = 0; $page < self::MAX_PAGES; $page++ ) {
+                        $res = $this->request(
+                                'GET',
+                                '/api/v1/getmailinglists',
+                                array(
+                                        'query' => array(
+                                                'resfmt'    => 'JSON',
+                                                'sort'      => 'desc',
+                                                'fromindex' => 1 + $page * self::LIST_PAGE,
+                                                'range'     => self::LIST_PAGE,
+                                        ),
+                                )
                         );
+                }
+                return $out;
+                        if ( is_wp_error( $res ) ) {
+                                // A later page failing still leaves the lists already read.
+                                return $page ? array_values( $out ) : $res;
+                        }
+                        $rows  = (array) ( $res['list_of_details'] ?? array() );
+                        $added = 0;
+                        foreach ( $rows as $row ) {
+                                $key = isset( $row['listkey'] ) ? (string) $row['listkey'] : '';
+                                if ( '' === $key || isset( $out[ $key ] ) ) {
+                                        continue;
+                                }
+                                $out[ $key ] = array(
+                                        'api_name' => $key,
+                                        'label'    => isset( $row['listname'] ) ? (string) $row['listname'] : $key,
+                                );
+                                ++$added;
+                        }
+                        if ( count( $rows ) < self::LIST_PAGE || ! $added ) {
+                                break;
+                        }
+                }
+                return array_values( $out );
+        }
 …
          */
         public function topics() {
+                $res = $this->request(
+                        'GET',
+                        '/api/v1/topics',
+                        array(
+                                'query' => array(
+                                        'details' => wp_json_encode(
+                                                array(
+                                                        'from_index' => 0,
+                                                        'range'      => 100,
+                                                )
+                $out  = array();
+                $seen = array();
+                // Paged the same way as lists(): one call stopped at 100 topics.
+                for ( $page = 0; $page < self::MAX_PAGES; $page++ ) {
+                        $res = $this->request(
+                                'GET',
+                                '/api/v1/topics',
+                                array(
+                                        'query' => array(
+                                                'details' => wp_json_encode(
+                                                        array(
+                                                                'from_index' => $page * self::TOPIC_PAGE,
+                                                                'range'      => self::TOPIC_PAGE,
+                                                        )
+                                                ),
                                         ),
+                                ),
+                        )
+                );
+                if ( is_wp_error( $res ) ) {
+                        return $res;
+                }
+                $out = array();
+                foreach ( (array) ( $res['topicDetails'] ?? array() ) as $row ) {
+                        $id   = isset( $row['topicId'] ) ? (string) $row['topicId'] : '';
+                        $name = isset( $row['topicName'] ) ? trim( (string) $row['topicName'] ) : '';
+                        if ( '' === $id || '' === $name ) {
+                                continue;
+                        }
+                        $out[] = array(
+                                'id'   => $id,
+                                'name' => $name,
+                                )
                         );
+                }
+                        if ( is_wp_error( $res ) ) {
+                                return $page ? $out : $res;
+                        }
+                        $rows  = (array) ( $res['topicDetails'] ?? array() );
+                        $added = 0;
+                        foreach ( $rows as $row ) {
+                                $id   = isset( $row['topicId'] ) ? (string) $row['topicId'] : '';
+                                $name = isset( $row['topicName'] ) ? trim( (string) $row['topicName'] ) : '';
+                                if ( '' === $id || isset( $seen[ $id ] ) ) {
+                                        continue;
+                                }
+                                $seen[ $id ] = true;
+                                ++$added;
+                                if ( '' === $name ) {
+                                        continue;
+                                }
+                                $out[] = array(
+                                        'id'   => $id,
+                                        'name' => $name,
+                                );
+                        }
+                        if ( count( $rows ) < self::TOPIC_PAGE || ! $added ) {
+                                break;
+                        }
+                }
                 return $out;
+        }
 …
                         'resfmt'   => 'JSON',
                         'listkey'  => $listkey,
                         'leadinfo' => $this->pseudo_json( $leadinfo ),
                         'sources'  => 'Techwave Form Sync for Zoho',
+                        'leadinfo' => '',
+                        'sources'  => 'FormBridge for Zoho',
                 );
                 if ( '' !== $topic_id ) {
                         $query['topic_id'] = $topic_id;
+                }
+                return $this->request( 'POST', '/api/v1/json/listsubscribe', array( 'query' => $query ) );
+                return $this->post_info( '/api/v1/json/listsubscribe', $query, 'leadinfo', $leadinfo );
+        }
+        /**
+         * Add a lead to a list directly, with no confirmation email.
+         *
+         * Zoho's addleadsinbulk takes email addresses (and topics) only, and adds
+         * them to the list straight away even when its sign-up form is on, where
+         * listsubscribe would only send a confirmation email. The lead's other
+         * fields still go through subscribe().
+         *
+         * @param string $listkey  Mailing list key.
+         * @param string $email    Lead email.
+         * @param string $topic_id Optional comma-separated topic ids.
+         * @return array|WP_Error
+         */
+        public function add_to_list( $listkey, $email, $topic_id = '' ) {
+                $query = array(
+                        'resfmt'   => 'JSON',
+                        'listkey'  => $listkey,
+                        'emailids' => $email,
+                );
+                if ( '' !== $topic_id ) {
+                        $query['topic_id'] = $topic_id;
+                }
+                return $this->request( 'POST', '/api/v1/addleadsinbulk', array( 'query' => $query ) );
+        }
 …
                         'resfmt'   => 'JSON',
                         'listkey'  => $listkey,
                         'leadinfo' => $this->pseudo_json( $leadinfo ),
+                        'leadinfo' => '',
                 );
                 if ( '' !== $topic_id ) {
                         $query['topic_id'] = $topic_id;
+                }
+                return $this->request( 'POST', '/api/v1/json/listunsubscribe', array( 'query' => $query ) );
+                return $this->post_info( '/api/v1/json/listunsubscribe', $query, 'leadinfo', $leadinfo );
+        }
+        /**
+         * Post one lead payload, as JSON Zoho's own parser will accept.
+         *
+         * Zoho documents this parameter unquoted — {First Name:mac,Contact
+         * Email:x@y.com} — a shape with no way to write a value containing the
+         * comma that separates the pairs or the colon that separates a pair.
+         * Building it meant replacing a comma in an address or a company name
+         * with a space, and a colon in a subject line could end the payload
+         * early. Real JSON quotes every key and value, so both survive.
+         *
+         * The documented shape is still tried when Zoho answers "please enter
+         * correct XML(or)JSON format" (code 2001), so an account whose parser
+         * only takes that shape keeps working exactly as before.
+         *
+         * @param string $path     API path.
+         * @param array  $query    Query parameters, with the info key empty.
+         * @param string $info_key 'leadinfo'.
+         * @param array  $fields   Human-labelled field => value pairs.
+         * @return array|WP_Error
+         */
+        private function post_info( $path, array $query, $info_key, array $fields ) {
+                // The documented shape first, because it is the one Zoho's own
+                // examples use and the one every account has always been sent.
+                if ( ! self::needs_quoting( $fields ) ) {
+                        $query[ $info_key ] = $this->pseudo_json( $fields );
+                        return $this->request( 'POST', $path, array( 'query' => $query ) );
+                }
+                $query[ $info_key ] = (string) wp_json_encode( $fields );
+                $res = $this->request( 'POST', $path, array( 'query' => $query ) );
+                if ( ! self::refused( $res ) ) {
+                        return $res;
+                }
+                // Zoho would not take it quoted, so it goes the documented way,
+                // which costs the comma or colon inside the value but sends the
+                // submission.
+                $query[ $info_key ] = $this->pseudo_json( $fields );
+                return $this->request( 'POST', $path, array( 'query' => $query ) );
+        }
+        /**
+         * Whether any value would lose something in the documented shape.
+         *
+         * @param array $fields Field => value pairs.
+         * @return bool
+         */
+        private static function needs_quoting( array $fields ) {
+                foreach ( $fields as $value ) {
+                        if ( is_array( $value ) ) {
+                                return true;
+                        }
+                        if ( preg_match( '/[,:{}]/', (string) $value ) ) {
+                                return true;
+                        }
+                }
+                return false;
+        }
+        /**
+         * Whether Zoho turned an attempt down, whatever reason it gave.
+         *
+         * Read widely on purpose: this decides only whether to try the same
+         * submission again in the documented shape, and Zoho answers a payload
+         * it could not read with more than one code ("please enter correct
+         * XML(or)JSON format", but also a complaint about the email it failed
+         * to find in it).
+         *
+         * @param array|WP_Error $res Zoho's answer.
+         * @return bool
+         */
+        private static function refused( $res ) {
+                if ( is_wp_error( $res ) ) {
+                        return true;
+                }
+                if ( ! is_array( $res ) ) {
+                        return false;
+                }
+                $body   = ( isset( $res['response'] ) && is_array( $res['response'] ) ) ? $res['response'] : $res;
+                $status = isset( $body['status'] ) ? strtolower( trim( (string) $body['status'] ) ) : '';
+                $code   = isset( $body['code'] ) ? trim( (string) $body['code'] ) : '';
+                return ! ( 'success' === $status || ( '' === $status && '0' === $code ) );
+        }
+}

techwave-form-sync-for-zoho/trunk/includes/Auth/ConnectionManager.php

-              r3649280
+              r3748247
 use Form2Zoho\Api\BiginClient;
 use Form2Zoho\Logging\Logger;
+use Form2Zoho\Admin\SettingsPage;
 use WP_Error;
 …
                 // fields. settings.ALL would also grant write access to the account's
                 // layouts and configuration, which this plugin never touches.
+                'crm'        => 'ZohoCRM.modules.ALL,ZohoCRM.settings.modules.READ,ZohoCRM.settings.fields.READ',
+                // ZohoCRM.Files.CREATE is what lets a submitted file reach a File
+                // Upload field: the file is posted to /crm/v6/files first and the id
+                // that comes back is what the record actually carries. Without it the
+                // upload is refused and the field is left empty.
+                //
+                // Adding it widened the grant, so a connection authorized before this
+                // still holds the old one — Zoho issues the scopes that were asked for
+                // at the time, not the ones the plugin asks for today. Those
+                // connections keep working for everything else and need "Edit access →
+                // Update & Reauthorize" once before a file will upload.
+                'crm'        => 'ZohoCRM.modules.ALL,ZohoCRM.settings.modules.READ,ZohoCRM.settings.fields.READ,ZohoCRM.Files.CREATE',
                 // One CREATE scope per resource BooksClient::modules() offers, plus
                 // settings for Items (a Books "settings" resource) and the
 …
         /**
+         * The scope map, after add-ons have had their say.
+         *
+         * A companion plugin that adds a Zoho app this plugin does not ship — an
+         * Inventory or a Projects integration registered through
+         * form2zoho_integrations — can register the integration object but could
+         * not, until this existed, get its OAuth scope requested. The connection
+         * would authorise without it and every call the new integration made would
+         * come back 401, with nothing on screen explaining why.
+         *
+         * Rows are validated rather than trusted. This string is pasted straight
+         * into an authorization URL, so a malformed value from someone else's
+         * plugin would break the OAuth round trip for every app at once, not just
+         * for theirs.
+         *
+         * @return array<string,string> App id => comma separated scopes.
+         */
+        private static function app_scopes() {
+                /**
+                 * Filter the OAuth scopes requested per Zoho app.
+                 *
+                 * Add a row keyed by the same app id the integration's id() returns.
+                 * Overwriting one of the built-in rows is allowed but rarely wise —
+                 * the shipped values are deliberately the narrowest that work.
+                 *
+                 * @param array<string,string> $scopes App id => comma separated scopes.
+                 */
+                $filtered = apply_filters( 'form2zoho_app_scopes', self::APP_SCOPES );
+                if ( ! is_array( $filtered ) ) {
+                        return self::APP_SCOPES;
+                }
+                $clean = array();
+                foreach ( $filtered as $app => $scope ) {
+                        $app = sanitize_key( (string) $app );
+                        if ( '' === $app || ! is_string( $scope ) || '' === trim( $scope ) ) {
+                                continue;
+                        }
+                        // Zoho scope names are word characters, dots and commas. Anything
+                        // else would have to be encoded into the URL, and a scope needing
+                        // encoding is a scope that is wrong.
+                        if ( ! preg_match( '/^[A-Za-z0-9_.,]+$/', $scope ) ) {
+                                continue;
+                        }
+                        $clean[ $app ] = $scope;
+                }
+                // The built-ins are put back if a callback dropped one: a connection
+                // silently losing its CRM scope because another plugin returned a
+                // partial array is not a failure anybody could diagnose.
+                return array_merge( self::APP_SCOPES, $clean );
+        }
+        /**
          * Encryption helper.
+         *
 …
         /**
+         * The action this plugin's OAuth callback lands on.
+         *
+         * Named for the plugin rather than for its internal prefix, because this
+         * one string is not internal: it is the whole visible half of the Redirect
+         * URI somebody pastes into Zoho's API console, sitting in their account
+         * next to every other app they have registered. "form2zoho" names nothing
+         * they installed.
+         *
+         * See Plugin::register() for the old action, still answered so an
+         * authorization begun before this rename can still land.
+         */
+        public const OAUTH_CALLBACK = 'formbridge_oauth_callback';
+        /**
+         * The action the callback used to land on, kept answerable.
+         */
+        public const OAUTH_CALLBACK_LEGACY = 'form2zoho_oauth_callback';
+        /**
          * The fixed redirect URI registered in the Zoho console.
+         *
 …
          */
         public function redirect_uri() {
                 return admin_url( 'admin-post.php?action=form2zoho_oauth_callback' );
+                return admin_url( 'admin-post.php?action=' . self::OAUTH_CALLBACK );
+        }
 …
          * a connection is expected to name the app(s) it will actually send to.
+         *
+         * An add-on app is listed only when it also registered its scope through
+         * form2zoho_app_scopes: a box that grants nothing would be worse than none.
+         *
          * @return array<string,string>
          */
         public function app_choices() {
                 return array(
+                $choices = array(
                         'all'        => __( 'All applications', 'techwave-form-sync-for-zoho' ),
                         'crm'        => __( 'Zoho CRM', 'techwave-form-sync-for-zoho' ),
 …
                         'automation' => __( 'Zoho Marketing Automation', 'techwave-form-sync-for-zoho' ),
                 );
+                /**
+                 * Filter the Zoho apps a connection can be authorized for.
+                 *
+                 * @param array<string,string> $extra App id => label to add. The
+                 *                                    built-in rows cannot be changed.
+                 */
+                $extra = apply_filters( 'form2zoho_connection_app_choices', array() );
+                if ( is_array( $extra ) ) {
+                        $scopes = self::app_scopes();
+                        foreach ( $extra as $app => $label ) {
+                                $app = sanitize_key( (string) $app );
+                                if ( '' !== $app && ! isset( $choices[ $app ] ) && isset( $scopes[ $app ] ) && is_string( $label ) && '' !== $label ) {
+                                        $choices[ $app ] = $label;
+                                }
+                        }
+                }
+                return $choices;
+        }
 …
         private function scopes_for( array $apps ) {
                 if ( empty( $apps ) || in_array( 'all', $apps, true ) ) {
+                        $apps = array_keys( self::APP_SCOPES );
+                }
+                        $apps = array_keys( self::app_scopes() );
+                }
+                $known  = self::app_scopes();
                 $scopes = array( self::BASE_SCOPE );
                 foreach ( $apps as $app ) {
                         if ( isset( self::APP_SCOPES[ $app ] ) ) {
                                 $scopes[] = self::APP_SCOPES[ $app ];
+                        if ( isset( $known[ $app ] ) ) {
+                                $scopes[] = $known[ $app ];
+                        }
+                }
 …
+                }
+                $clean = self::clean_apps( $apps );
+                if ( empty( $clean ) ) {
+                        return new WP_Error( 'form2zoho_no_apps', __( 'Choose at least one Zoho app.', 'techwave-form-sync-for-zoho' ) );
+                }
+                $all[ $id ]['apps'] = $clean;
+                // A connection that no longer reaches Bigin has nothing to say about
+                // Bigin. Without this, unticking Bigin left the "Bigin org lookup
+                // failed" warning on the Connections page for good: the lookup only
+                // runs for a connection that covers Bigin, so nothing ever cleared it.
+                if ( ! in_array( 'bigin', $clean, true ) && ! in_array( 'all', $clean, true ) ) {
+                        unset( $all[ $id ]['bigin_org_error'], $all[ $id ]['bigin_org_domain'] );
+                }
+                update_option( self::OPTION, $all, false );
+                return true;
+        }
+        /**
+         * Allowlist a submitted app list, and let "all" stand on its own.
+         *
+         * The picker is a select-all, so ticking every app posts "all" *and* each
+         * of the six. Keeping both would store a contradiction in waiting: "all"
+         * already means every scope this plugin supports, including apps it has
+         * not shipped yet, which is the entire reason it is a value rather than a
+         * shorthand. A list that says "all, crm, books" stops meaning that the
+         * day a seventh app is added.
+         *
+         * @param array<int,mixed> $apps Raw app ids from the request.
+         * @return array<int,string> Allowlisted ids, or array( 'all' ).
+         */
+        private static function clean_apps( array $apps ) {
+                $known = self::app_scopes();
                 $clean = array();
                 foreach ( $apps as $app ) {
                         $app = sanitize_key( $app );
+                        if ( 'all' === $app || isset( self::APP_SCOPES[ $app ] ) ) {
+                        if ( 'all' === $app ) {
+                                return array( 'all' );
+                        }
+                        if ( isset( $known[ $app ] ) ) {
                                 $clean[] = $app;
+                        }
+                }
+                if ( empty( $clean ) ) {
+                        return new WP_Error( 'form2zoho_no_apps', __( 'Choose at least one Zoho app.', 'techwave-form-sync-for-zoho' ) );
+                }
+                $all[ $id ]['apps'] = array_values( array_unique( $clean ) );
+                update_option( self::OPTION, $all, false );
+                return true;
+                return array_values( array_unique( $clean ) );
+        }
 …
         /**
+         * Whether a stored connection has finished authorising.
+         *
+         * A connection is saved as a draft as soon as its details are entered, and
+         * only becomes usable when Zoho's consent screen comes back with a refresh
+         * token. A feed pointed at a draft cannot deliver anything.
+         *
+         * @param mixed $conn A stored connection row.
+         * @return bool
+         */
+        public static function is_authorised( $conn ) {
+                return is_array( $conn ) && ! empty( $conn['connected'] ) && ! empty( $conn['refresh_token'] );
+        }
+        /**
+         * Authorised connections only, formatted for a <select> (id => label).
+         *
+         * @return array<string,string>
+         */
+        public function authorised_choices() {
+                $out = array();
+                foreach ( $this->all() as $id => $conn ) {
+                        if ( self::is_authorised( $conn ) ) {
+                                $out[ $id ] = isset( $conn['label'] ) ? $conn['label'] : $id;
+                        }
+                }
+                return $out;
+        }
+        /**
          * Persist a new draft connection before the OAuth dance starts.
+         *
 …
                         return new WP_Error(
                                 'form2zoho_no_openssl',
                                 __( 'This server cannot encrypt credentials: PHP\'s OpenSSL extension with AES-256-GCM support is unavailable. Ask your host to enable it — the plugin will not store a Zoho client secret unencrypted.', 'techwave-form-sync-for-zoho' )
+                                __( 'This server cannot encrypt credentials: PHP\'s OpenSSL extension with AES-256-GCM support is unavailable. Ask your host to enable it. The plugin will not store a Zoho client secret unencrypted.', 'techwave-form-sync-for-zoho' )
                         );
+                }
 …
+                }
+                $apps = array();
+                if ( isset( $args['apps'] ) && is_array( $args['apps'] ) ) {
+                        foreach ( $args['apps'] as $app ) {
+                                $app = sanitize_key( $app );
+                                if ( 'all' === $app || isset( self::APP_SCOPES[ $app ] ) ) {
+                                        $apps[] = $app;
+                                }
+                        }
+                }
+                $apps = self::clean_apps(
+                        isset( $args['apps'] ) && is_array( $args['apps'] ) ? $args['apps'] : array()
+                );
                 // Nothing picked is an error, not a licence to request everything.
                 // This used to fall back to "all", which meant an untouched picker
 …
                         return new WP_Error( 'form2zoho_no_apps', __( 'Choose at least one Zoho app for this connection.', 'techwave-form-sync-for-zoho' ) );
+                }
-                $apps = array_values( array_unique( $apps ) );
                 $id  = 'conn_' . wp_generate_password( 12, false, false );
                 $all = $this->all();
 …
+                }
+                $state = wp_generate_password( 24, false, false );
+                set_transient( 'form2zoho_state_' . $state, $id, self::STATE_TTL );
+                // random_bytes() rather than wp_generate_password(), which passes its
+                // result through the `random_password` filter — a CSRF token should
+                // not be reachable by another plugin's callback.
+                $state = bin2hex( random_bytes( 16 ) );
+                // The user who started this authorization, so the callback can refuse
+                // to finish it as somebody else on a site with several administrators.
+                set_transient(
+                        'form2zoho_state_' . $state,
+                        array(
+                                'connection_id' => $id,
+                                'user_id'       => get_current_user_id(),
+                        ),
+                        self::STATE_TTL
+                );
                 // Older connections saved before the app picker existed have no
 …
                 $code = isset( $_GET['code'] ) ? sanitize_text_field( wp_unslash( $_GET['code'] ) ) : '';
                 $conn_id = $state ? get_transient( 'form2zoho_state_' . $state ) : false;
                 if ( ! $conn_id ) {
+                $stored = $state ? get_transient( 'form2zoho_state_' . $state ) : false;
+                if ( ! $stored ) {
                         $this->redirect_back( 'state' );
+                }
                 delete_transient( 'form2zoho_state_' . $state );
+                // A state saved before this carried the user id is a plain id string.
+                if ( is_array( $stored ) ) {
+                        $conn_id = isset( $stored['connection_id'] ) ? (string) $stored['connection_id'] : '';
+                        $started_by = isset( $stored['user_id'] ) ? (int) $stored['user_id'] : 0;
+                        if ( $started_by && get_current_user_id() !== $started_by ) {
+                                $this->redirect_back( 'state' );
+                        }
+                } else {
+                        $conn_id = (string) $stored;
+                }
+                if ( '' === $conn_id ) {
+                        $this->redirect_back( 'state' );
+                }
                 $conn = $this->get( $conn_id );
 …
                 $apps = isset( $conn['apps'] ) && is_array( $conn['apps'] ) ? $conn['apps'] : array();
                 if ( ! in_array( 'bigin', $apps, true ) && ! in_array( 'all', $apps, true ) ) {
+                        $this->forget_bigin_org( $id );
                         return;
+                }
+                // Whatever went wrong last time was about the grant that has just
+                // been replaced, so it is dropped before this one is asked.
+                $this->forget_bigin_org( $id );
                 $client = new BiginClient( $this, new Logger(), $id );
 …
         /**
+         * Drop what was learned about a connection's Bigin organization.
+         *
+         * @param string $id Connection id.
+         * @return void
+         */
+        private function forget_bigin_org( $id ) {
+                $all = $this->all();
+                if ( ! isset( $all[ $id ] ) || ( ! isset( $all[ $id ]['bigin_org_error'] ) && ! isset( $all[ $id ]['bigin_org_domain'] ) ) ) {
+                        return;
+                }
+                unset( $all[ $id ]['bigin_org_error'], $all[ $id ]['bigin_org_domain'] );
+                update_option( self::OPTION, $all, false );
+        }
+        /**
          * Store the resolved Bigin org domain segment on a connection.
+         *
 …
+                }
+                // The editor loads several lists at once, and a busy form gets
+                // submissions at once, so an expired token used to be refreshed by
+                // every one of those requests together. Zoho allows only a few new
+                // access tokens per refresh token in ten minutes, and a refresh it
+                // turns away reads as a broken connection. One request refreshes
+                // while the rest wait for its token.
+                $deadline = microtime( true ) + (int) apply_filters( 'form2zoho_oauth_timeout', is_admin() ? 20 : 10 ) + 5;
+                // Whether this request is the one holding the lock. Only it may
+                // release it at the end: a request that gave up waiting and refreshed
+                // anyway would otherwise delete the row belonging to whoever is still
+                // refreshing, and the stampede the lock prevents would start again.
+                $holding = $this->lock_refresh( $id );
+                while ( ! $holding ) {
+                        if ( microtime( true ) > $deadline ) {
+                                // Waited long enough. Refresh without the lock rather than
+                                // failing the submission.
+                                break;
+                        }
+                        usleep( 250000 );
+                        $token = $this->fresh_access_token( $id );
+                        if ( '' !== $token ) {
+                                return $token;
+                        }
+                        $holding = $this->lock_refresh( $id );
+                }
+                try {
+                        // Another request may have finished refreshing between this one
+                        // finding no token and taking the lock.
+                        $token = $this->fresh_access_token( $id );
+                        if ( '' !== $token ) {
+                                return $token;
+                        }
+                        return $this->refresh_access_token( $id );
+                } finally {
+                        if ( $holding ) {
+                                $this->unlock_refresh( $id );
+                        }
+                }
+        }
+        /**
+         * Forget a cached access token Zoho has rejected.
+         *
+         * Only when it is still the cached one: a request answered 401 with an
+         * old token must not throw away the new one another request just got.
+         *
+         * @param string $id    Connection id.
+         * @param string $token The token that was rejected.
+         * @return void
+         */
+        public function forget_access_token( $id, $token ) {
+                if ( (string) $token === (string) $this->fresh_access_token( $id ) ) {
+                        delete_transient( 'form2zoho_at_' . $id );
+                }
+        }
+        /**
+         * The cached access token as stored now, not as this request first read it.
+         *
+         * Without a persistent object cache WordPress keeps each option it has
+         * read (and each it found missing) in memory for the rest of the request,
+         * so a token another request has just saved would never be seen here.
+         *
+         * @param string $id Connection id.
+         * @return string Empty when there is none.
+         */
+        private function fresh_access_token( $id ) {
+                if ( ! wp_using_ext_object_cache() ) {
+                        wp_cache_delete( '_transient_form2zoho_at_' . $id, 'options' );
+                        wp_cache_delete( '_transient_timeout_form2zoho_at_' . $id, 'options' );
+                        wp_cache_delete( 'notoptions', 'options' );
+                        wp_cache_delete( 'alloptions', 'options' );
+                }
+                $token = get_transient( 'form2zoho_at_' . $id );
+                return is_string( $token ) ? $token : '';
+        }
+        /**
+         * Take the right to refresh a connection's token.
+         *
+         * A row inserted with INSERT IGNORE, because the options table's unique
+         * name makes that atomic across requests, which add_option() and
+         * transients are not. A lock left behind by a request that died is
+         * taken over once it is older than any refresh could take.
+         *
+         * @param string $id Connection id.
+         * @return bool Whether this request holds the lock.
+         */
+        private function lock_refresh( $id ) {
+                global $wpdb;
+                $name = 'form2zoho_token_lock_' . $id;
+                // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching -- an atomic lock cannot go through the options cache.
+                $taken = $wpdb->query( $wpdb->prepare( "INSERT IGNORE INTO {$wpdb->options} (option_name, option_value, autoload) VALUES (%s, %s, 'no')", $name, (string) time() ) );
+                if ( 1 === (int) $taken ) {
+                        return true;
+                }
+                // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching -- see above.
+                $since = (int) $wpdb->get_var( $wpdb->prepare( "SELECT option_value FROM {$wpdb->options} WHERE option_name = %s", $name ) );
+                if ( $since && time() - $since > 60 ) {
+                        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching -- see above.
+                        $wpdb->query( $wpdb->prepare( "DELETE FROM {$wpdb->options} WHERE option_name = %s AND option_value = %s", $name, (string) $since ) );
+                }
+                return false;
+        }
+        /**
+         * Give up the right to refresh a connection's token.
+         *
+         * @param string $id Connection id.
+         * @return void
+         */
+        private function unlock_refresh( $id ) {
+                global $wpdb;
+                // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching -- see lock_refresh().
+                $wpdb->query( $wpdb->prepare( "DELETE FROM {$wpdb->options} WHERE option_name = %s", 'form2zoho_token_lock_' . $id ) );
+        }
+        /**
+         * Ask Zoho for a new access token and cache it.
+         *
+         * @param string $id Connection id.
+         * @return string|WP_Error
+         */
+        private function refresh_access_token( $id ) {
                 $conn = $this->get( $id );
                 if ( null === $conn || empty( $conn['refresh_token'] ) ) {
 …
                 update_option( self::OPTION, $all, false );
                 delete_transient( 'form2zoho_at_' . $id );
+                $this->unlock_refresh( $id );
                 if ( null !== $conn ) {
 …
                         add_query_arg(
                                 array(
                                         'page'      => 'form2zoho',
+                                        'page'      => SettingsPage::SLUG,
                                         'f2z_oauth' => rawurlencode( $status ),
                                 ),

techwave-form-sync-for-zoho/trunk/includes/Auth/OAuthClient.php

r3649280	r3748247
126	126
127	127	if ( is_wp_error( $response ) ) {
	128	// Which host could not be reached; see ErrorTranslator::transport().
	129	$response->add_data( array( 'host' => (string) wp_parse_url( $this->dc['accounts'], PHP_URL_HOST ) ) );
128	130	return $response;
129	131	}

techwave-form-sync-for-zoho/trunk/includes/ContactForm7/SubmissionHandler.php

-              r3649280
+              r3748247
                 $values    = $this->collect_values();
                 $this->deliver_to_feeds( $form_name, $values );
+                $this->deliver_to_feeds( $form_name, $values, $this->collect_files() );
+        }
 …
                 return is_array( $data ) ? $data : array();
+        }
+        /**
+         * Absolute paths to whatever this submission uploaded.
+         *
+         * get_posted_data() carries a file field's *name* — useful as text, and
+         * useless for sending the file anywhere. The paths live here instead, and
+         * only for the length of the request: Contact Form 7 deletes these when it
+         * has finished with the submission, which is why delivery is attempted
+         * during the submission rather than queued.
+         *
+         * @return array<string,array<int,string>> Field id => absolute paths.
+         */
+        private function collect_files() {
+                if ( ! class_exists( '\WPCF7_Submission' ) ) {
+                        return array();
+                }
+                $submission = \WPCF7_Submission::get_instance();
+                if ( ! $submission || ! method_exists( $submission, 'uploaded_files' ) ) {
+                        return array();
+                }
+                $out = array();
+                foreach ( (array) $submission->uploaded_files() as $field => $paths ) {
+                        $real = array();
+                        // Newer Contact Form 7 hands back an array per field; older
+                        // versions a single path.
+                        foreach ( (array) $paths as $path ) {
+                                $path = (string) $path;
+                                if ( '' !== $path && is_readable( $path ) ) {
+                                        $real[] = $path;
+                                }
+                        }
+                        if ( array() !== $real ) {
+                                $out[ (string) $field ] = $real;
+                        }
+                }
+                return $out;
+        }
+}

techwave-form-sync-for-zoho/trunk/includes/Core/Activator.php

-              r3649280
+              r3748247
          */
         const SCHEMA_VERSION = 2;
+        /**
+         * Transient that keeps the schema check from repeating on every request
+         * when its option cannot be stored.
+         */
+        private const UPGRADE_MARKER = 'form2zoho_schema_checked';
         /**
 …
          */
         public static function activate_single_site() {
+                // Activating is an explicit "check now", so the marker maybe_upgrade()
+                // sets must not hold the check back.
+                delete_transient( self::UPGRADE_MARKER );
                 self::create_log_table();
 …
+                }
+                // This runs from the logger, which a visitor's form submission
+                // reaches. If the option below cannot be written — a read-only
+                // replica, a full disk, a filter holding the value — every later
+                // submission would run dbDelta() again. The marker keeps that to
+                // once per interval whatever happens to the option.
+                if ( get_transient( self::UPGRADE_MARKER ) ) {
+                        return;
+                }
+                set_transient( self::UPGRADE_MARKER, 1, 5 * MINUTE_IN_SECONDS );
                 self::create_log_table();
                 self::ensure_secret();

techwave-form-sync-for-zoho/trunk/includes/Core/Deactivator.php

-              r3649280
+              r3748247
          */
         public static function deactivate() {
+                // Remove any pending WP-Cron events for our worker.
+                $timestamp = wp_next_scheduled( Dispatcher::HOOK_PROCESS );
+                while ( false !== $timestamp ) {
+                        wp_unschedule_event( $timestamp, Dispatcher::HOOK_PROCESS );
+                        $timestamp = wp_next_scheduled( Dispatcher::HOOK_PROCESS );
+                }
+                // Every pending WP-Cron event for our worker and the daily log prune.
+                // wp_unschedule_hook(), not wp_next_scheduled() in a loop: that only
+                // finds events scheduled with no arguments, and each retry carries its
+                // payload handle as one, so retries were left behind. Deactivation is
+                // also the only place these are cleared: WordPress deactivates a
+                // plugin before it can be deleted, so uninstall.php need not.
+                wp_unschedule_hook( Dispatcher::HOOK_PROCESS );
+                wp_unschedule_hook( Activator::PRUNE_HOOK );
                 // Cancel Action Scheduler jobs if that library is active.
 …
                         as_unschedule_all_actions( Dispatcher::HOOK_PROCESS, array(), 'form2zoho' );
+                }
-                // Clear the daily log-prune event.
-                $prune = wp_next_scheduled( Activator::PRUNE_HOOK );
-                while ( false !== $prune ) {
-                        wp_unschedule_event( $prune, Activator::PRUNE_HOOK );
-                        $prune = wp_next_scheduled( Activator::PRUNE_HOOK );
+                }
+        }
+}

techwave-form-sync-for-zoho/trunk/includes/Core/Plugin.php

-              r3649280
+              r3748247
 use Form2Zoho\Admin\Ajax;
+use Form2Zoho\Admin\DashboardPage;
 use Form2Zoho\Admin\FeedsPage;
+use Form2Zoho\Admin\NoticeGuard;
+use Form2Zoho\Admin\LegacyPageSlugs;
 use Form2Zoho\Admin\FeedsRepository;
+use Form2Zoho\Admin\ProUpsell;
 use Form2Zoho\Admin\SettingsPage;
 use Form2Zoho\Admin\DeactivationFeedback;
 …
                         $ajax->register();
                         $feeds->register();
+                        // Overview screen, the first entry under the menu.
+                        ( new DashboardPage( $this->services['feeds'], $this->services['connections'], $this->services['registry'], $this->services['logger'] ) )->register();
                         // Optional "why are you deactivating?" prompt on the Plugins
                         // screen. Hooks nothing outside plugins.php and its own endpoint,
                         // and sends nothing unless the person presses the send button.
                         ( new DeactivationFeedback() )->register();
+                        // Other plugins' notices do not appear on this plugin's screens.
+                        // See the class for what that costs, and why nothing of this
+                        // plugin's own goes with them.
+                        ( new NoticeGuard() )->register();
+                        // The screens' old form2zoho addresses, from bookmarks and emails
+                        // sent before the rename, land on the renamed screens.
+                        ( new LegacyPageSlugs() )->register();
+                        // One "Upgrade to Pro" link at the foot of the plugin's own
+                        // submenu. It removes itself once the add-on is installed.
+                        ( new ProUpsell() )->register();
                         $this->services['settings']  = $settings;
                         $this->services['ajax']      = $ajax;
 …
                 // OAuth redirect handler runs on the public side too (callback lands on admin-post).
+                add_action( 'admin_post_form2zoho_oauth_callback', array( $this->services['connections'], 'handle_oauth_callback' ) );
+                add_action( 'admin_post_' . ConnectionManager::OAUTH_CALLBACK, array( $this->services['connections'], 'handle_oauth_callback' ) );
+                // The action the callback used to use, before it was renamed to say
+                // which plugin it belongs to. Answered as well, not instead: someone
+                // who pressed Connect just before updating is at Zoho's consent screen
+                // right now holding the old URI, and the alternative to these two
+                // lines is that their approval lands on a 400 and the connection they
+                // were halfway through has to be started again.
+                //
+                // It does NOT save anyone from having to update the Authorized
+                // Redirect URI in their Zoho console — authorization requests carry
+                // the new URI from now on, and Zoho matches it against the registered
+                // list. This only catches what was already in flight.
+                add_action( 'admin_post_' . ConnectionManager::OAUTH_CALLBACK_LEGACY, array( $this->services['connections'], 'handle_oauth_callback' ) );
                 // Privacy exporter / eraser registration.
 …
                 $this->services['sureforms_submissions'] = new SureFormsSubmissionHandler( $this->services['feeds'], $this->services['dispatcher'], $this->services['logger'] );
                 $this->services['sureforms_submissions']->register();
+                /**
+                 * Fires once every service exists and every hook above is registered.
+                 *
+                 * The moment an add-on should do its own wiring. Reach the shared
+                 * collaborators through the container rather than building new ones,
+                 * so a submission an add-on queues goes through the same dispatcher,
+                 * logger and feed store as everything else:
+                 *
+                 *     add_action( 'form2zoho_loaded', function ( $plugin ) {
+                 *         $dispatcher = $plugin->get( 'dispatcher' );
+                 *     } );
+                 *
+                 * Service ids: logger, connections, registry, dispatcher, feeds, and
+                 * in wp-admin also settings, ajax, feedspage. Anything else returns
+                 * null.
+                 *
+                 * Runs on plugins_loaded, so it is early enough to add filters and
+                 * late enough that get() never returns null for a service that
+                 * exists on this request.
+                 *
+                 * @param Plugin $plugin The container.
+                 */
+                do_action( 'form2zoho_loaded', $this );
+        }
 …
          */
         public function prune_logs() {
                 // Gated by the "Delete log entries automatically" toggle, which is on
                 // by default: log rows can carry submitted field values, so keeping
                 // them forever unless someone opts out is the wrong default.
+                // Gated by the "Delete log entries automatically" toggle, which is off
+                // by default (see Settings::BOOLEANS): nothing is deleted until a site
+                // chooses how long to keep its log.
                 if ( ! Settings::is_on( 'form2zoho_log_retention_enabled' ) ) {
                         return;
 …
                 $lines[] = '';
                 /* translators: %s: URL to the plugin's Logs screen. */
                 $lines[] = sprintf( __( 'View the full log entry: %s', 'techwave-form-sync-for-zoho' ), admin_url( 'admin.php?page=form2zoho&tab=logs' ) );
+                $lines[] = sprintf( __( 'View the full log entry: %s', 'techwave-form-sync-for-zoho' ), admin_url( 'admin.php?page=' . SettingsPage::SLUG . '&tab=logs' ) );
                 // Drop the lines that were conditionally left empty above. 'strlen'
 …
                 $lines[] = '';
                 /* translators: %s: URL to the plugin's Connections screen. */
                 $lines[] = sprintf( __( 'Check the connection here: %s', 'techwave-form-sync-for-zoho' ), admin_url( 'admin.php?page=form2zoho&tab=connections' ) );
+                $lines[] = sprintf( __( 'Check the connection here: %s', 'techwave-form-sync-for-zoho' ), admin_url( 'admin.php?page=' . SettingsPage::SLUG . '&tab=connections' ) );
                 // Drop the lines that were conditionally left empty above. 'strlen'
 …
                 $lines[] = '';
                 /* translators: %s: URL to the plugin's Connections screen. */
                 $lines[] = sprintf( __( 'Manage connections here: %s', 'techwave-form-sync-for-zoho' ), admin_url( 'admin.php?page=form2zoho&tab=connections' ) );
+                $lines[] = sprintf( __( 'Manage connections here: %s', 'techwave-form-sync-for-zoho' ), admin_url( 'admin.php?page=' . SettingsPage::SLUG . '&tab=connections' ) );
                 // Drop the lines that were conditionally left empty above. 'strlen'
 …
          * @param string $subject Subject line.
          * @param string $body    Plain-text body.
          * @return bool Whether wp_mail() accepted the message.
+         * @return bool Whether the mailer accepted the message.
          */
         private function send_now( $to, $subject, $body ) {
+                $sent = wp_mail( $to, $subject, $body );
+                if ( ! $sent ) {
+                // Through wp_mail(), so an SMTP plugin sends it. See Support\PhpMail.
+                $sent = \Form2Zoho\Support\PhpMail::send( $to, $subject, $body );
+                if ( is_wp_error( $sent ) ) {
                         $this->services['logger']->warning(
                                 sprintf(
+                                        /* translators: %s: recipient email address. */
+                                        __( 'A notification email to %s could not be sent. WordPress refused to hand it to a mailer — this site most likely has no working mail transport (many managed hosts need an SMTP plugin). The event itself was still recorded above.', 'techwave-form-sync-for-zoho' ),
+                                        $to
+                                        /* translators: 1: recipient email address. 2: the mailer's own reason, e.g. "Could not instantiate mail function." */
+                                        __( 'A notification email to %1$s could not be sent. Reason: %2$s The event itself was still recorded above.', 'techwave-form-sync-for-zoho' ),
+                                        $to,
+                                        $sent->get_error_message()
                                 ),
                                 array( 'status' => 'suppressed' )
                         );
+                }
+                return (bool) $sent;
+                        return false;
+                }
+                return true;
+        }
+}

techwave-form-sync-for-zoho/trunk/includes/Elementor/SubmissionHandler.php

-              r3649280
+              r3748247
                 $values    = $this->collect_values( $record );
                 $this->deliver_to_feeds( $form_name, $values );
+                $this->deliver_to_feeds( $form_name, $values, $this->collect_files( $record ) );
+        }
 …
                 return $out;
+        }
+        /**
+         * Absolute paths to this submission's uploads, keyed by field id.
+         *
+         * Elementor keeps them on the record beside the values. An upload set to
+         * "attach to email" is deleted once the form's actions have run, so its
+         * file can only be read now, while the submission is being handled.
+         *
+         * @param object $record Elementor form record.
+         * @return array<string,array<int,string>>
+         */
+        private function collect_files( $record ) {
+                $out = array();
+                foreach ( (array) $record->get( 'files' ) as $id => $file ) {
+                        $paths = \Form2Zoho\Support\UploadedFiles::paths( is_array( $file ) && isset( $file['path'] ) ? $file['path'] : array() );
+                        if ( array() !== $paths ) {
+                                $out[ (string) $id ] = $paths;
+                        }
+                }
+                return $out;
+        }
+}

techwave-form-sync-for-zoho/trunk/includes/Forminator/SubmissionHandler.php

-              r3649280
+              r3748247
 use Form2Zoho\Support\BaseSubmissionHandler;
+use Form2Zoho\Support\UploadedFiles;
 defined( 'ABSPATH' ) || exit;
 …
          */
         private $processed = array();
+        /**
+         * This request's submission, as Forminator itself saved it, by form id:
+         * array( 'entry_id' => int, 'values' => array, 'files' => array ).
+         *
+         * @var array<string,array>
+         */
+        private $submitted = array();
         /**
 …
          */
         public function register() {
+                // Heard first, while the submission is being saved: its own field
+                // data, with every upload already moved into the uploads folder.
+                // Fires whether or not the site stores submissions, which is what
+                // the entry read-back below cannot promise.
+                add_action( 'forminator_custom_form_submit_before_set_fields', array( $this, 'remember' ), 10, 3 );
                 add_action( 'forminator_form_after_save_entry', array( $this, 'handle' ), 20, 2 );
-                add_action( 'forminator_custom_form_submit_response', array( $this, 'handle' ), 20, 2 );
                 add_action( 'forminator_form_after_handle_submit', array( $this, 'handle' ), 20, 2 );
+        }
+        /**
+         * Keep this submission's values and uploaded files for handle().
+         *
+         * Forminator passes no entry id to the hooks handle() listens on, so
+         * without this the values were read back from "the newest entry of this
+         * form" — which is no entry at all when submissions are not stored or
+         * the submission was marked as spam, and possibly someone else's when two
+         * arrive in the same second. Either way the upload was lost and a mapped
+         * Zoho file field was sent without its file.
+         *
+         * @param object $entry      Forminator_Form_Entry_Model being saved.
+         * @param int    $form_id    Form id.
+         * @param array  $field_data Items of array( 'name' => ..., 'value' => ... ).
+         * @return void
+         */
+        public function remember( $entry, $form_id, $field_data ) {
+                try {
+                        $status = is_object( $entry ) && isset( $entry->status ) ? (string) $entry->status : '';
+                        // A saved draft or an abandoned form is not a submission.
+                        if ( in_array( $status, array( 'draft', 'abandoned' ), true ) ) {
+                                return;
+                        }
+                        $values = array();
+                        $files  = array();
+                        foreach ( is_array( $field_data ) ? $field_data : array() as $item ) {
+                                $name = is_array( $item ) && isset( $item['name'] ) ? (string) $item['name'] : '';
+                                if ( '' === $name || '_' === $name[0] || 0 === stripos( $name, 'password-' ) ) {
+                                        continue;
+                                }
+                                $value = $item['value'] ?? '';
+                                if ( is_array( $value ) && isset( $value['file'] ) && is_array( $value['file'] ) ) {
+                                        $url  = $value['file']['file_url'] ?? '';
+                                        $path = $value['file']['file_path'] ?? '';
+                                        $values[ $name ] = is_array( $url ) ? implode( ', ', array_map( 'strval', array_filter( $url, 'is_scalar' ) ) ) : (string) $url;
+                                        $found = UploadedFiles::paths( $path );
+                                        if ( array() !== $found ) {
+                                                $files[ $name ] = $found;
+                                        }
+                                        continue;
+                                }
+                                self::put( $values, $name, $value );
+                        }
+                        $this->submitted[ (string) $form_id ] = array(
+                                'entry_id' => is_object( $entry ) && isset( $entry->entry_id ) ? (int) $entry->entry_id : 0,
+                                'values'   => $values,
+                                'files'    => $files,
+                        );
+                } catch ( \Throwable $e ) {
+                        // handle() still has the entry read-back to fall back on.
+                        unset( $e );
+                }
+        }
 …
                 $form_name = $this->form_title( $form_id );
+                $values    = $this->collect_values( $form_id, $entry_id );
+                $submitted = $this->submitted[ (string) $form_id ] ?? null;
+                if ( null !== $submitted && array() !== $submitted['values'] ) {
+                        $this->deliver_to_feeds( $form_name, $submitted['values'], $submitted['files'] );
+                        return;
+                }
+                $entry_id = $entry_id ? $entry_id : (int) ( $submitted['entry_id'] ?? 0 );
+                $values   = $this->collect_values( $form_id, $entry_id );
                 $this->deliver_to_feeds( $form_name, $values );
 …
         /**
+         * Whether a posted key is shaped like one of Forminator's own field ids.
+         *
+         * Forminator names every field "&lt;type&gt;-&lt;n&gt;" — name-1, email-1,
+         * upload-1 — so anything else in the request is not a field of the form
+         * that was submitted. Taking every posted key let a request carry values
+         * for names the form never had, which the mapping would then send to Zoho
+         * as if the visitor had typed them.
+         *
+         * @param string $key Posted key.
+         * @return bool
+         */
+        private static function is_field_key( $key ) {
+                // An upload's value is Forminator's own record of the file it saved,
+                // never something the request carries, so a posted "upload-1" can
+                // only be an attempt to name a file this submission did not send.
+                if ( 0 === stripos( $key, 'upload-' ) ) {
+                        return false;
+                }
+                // Forminator deliberately keeps passwords out of the entry; the POST
+                // fallback must not put them back.
+                if ( 0 === stripos( $key, 'password-' ) ) {
+                        return false;
+                }
+                return 1 === preg_match( '/^[a-z]+(?:-[a-z]+)*-\d+(?:-[a-z0-9_-]+)?$/i', $key );
+        }
+        /**
          * Read back the field values for the entry that was just saved, straight
          * from Forminator's own entry meta.
 …
                                 } else {
                                         // No usable entry id was passed — fall back to the most
+                                        // recent entry for this form.
+                                        $model   = new \Forminator_Form_Entry_Model();
+                                        $entries = $model->get_entries(
+                                                $form_id,
+                                                array(
+                                                        'order' => 'DESC',
+                                                        'limit' => 1,
+                                                )
+                                        );
+                                        if ( ! empty( $entries ) ) {
+                                                $entry = new \Forminator_Form_Entry_Model( $entries[0]->entry_id );
+                                        }
+                                        // recent entry for this form. The model has no
+                                        // get_entries(); calling it threw, so every submission
+                                        // fell through to the POST data below, which has no
+                                        // uploads in it.
+                                        $entry = \Forminator_Form_Entry_Model::get_latest_entry_by_form_id( (int) $form_id );
+                                }
                                 if ( $entry ) {
+                                        foreach ( (array) ( $entry->meta_data ?? array() ) as $meta ) {
+                                                $name  = is_object( $meta ) ? ( $meta->name ?? '' ) : ( $meta['name'] ?? '' );
+                                                $value = is_object( $meta ) ? ( $meta->value ?? '' ) : ( $meta['value'] ?? '' );
+                                                if ( '' !== (string) $name ) {
+                                                        $out[ (string) $name ] = $value;
+                                        // Keyed by field name: meta_data[ 'upload-1' ] =
+                                        // array( 'id' => ..., 'value' => ... ). There is no 'name'
+                                        // inside each item, so reading one skipped every field.
+                                        foreach ( (array) ( $entry->meta_data ?? array() ) as $name => $meta ) {
+                                                $name = (string) $name;
+                                                // Forminator's own bookkeeping (_forminator_user_ip and
+                                                // the like), not something the visitor filled in.
+                                                if ( '' === $name || '_' === $name[0] ) {
+                                                        continue;
+                                                }
+                                                $value = is_object( $meta ) ? ( $meta->value ?? '' ) : ( is_array( $meta ) ? ( $meta['value'] ?? '' ) : '' );
+                                                // An upload is stored as Forminator's record of it,
+                                                // array( 'file' => array( 'file_url' => ..., 'file_path' => ... ) ).
+                                                // Its URL is the value, as it is for other form
+                                                // plugins, and UploadedFiles finds the file from it.
+                                                if ( is_array( $value ) && isset( $value['file']['file_url'] ) ) {
+                                                        $value = $value['file']['file_url'];
+                                                        $out[ $name ] = $value;
+                                                        continue;
+                                                }
+                                                self::put( $out, $name, $value );
+                                        }
+                                }
 …
                         foreach ( $post as $key => $value ) {
                                 if ( is_string( $key ) && ! is_array( $value ) && ! isset( $out[ $key ] ) && preg_match( '/^[a-z0-9_-]+$/i', $key ) ) {
+                                if ( is_string( $key ) && ! is_array( $value ) && ! isset( $out[ $key ] ) && self::is_field_key( $key ) ) {
                                         $out[ $key ] = sanitize_text_field( $value );
+                                }
 …
                 return $out;
+        }
+        /**
+         * Add one field's value to the values handed to the feeds.
+         *
+         * A multi-part field (name, address) or a list of choices also offers
+         * its parts under the flat keys the POST data used ("name-1-first-name"),
+         * and the field itself becomes their text.
+         *
+         * @param array<string,mixed> $out   Values so far (by reference).
+         * @param string              $name  Field name.
+         * @param mixed               $value Its value.
+         * @return void
+         */
+        private static function put( array &$out, $name, $value ) {
+                if ( is_array( $value ) ) {
+                        $parts = array();
+                        foreach ( $value as $part_key => $part ) {
+                                if ( is_scalar( $part ) && '' !== trim( (string) $part ) ) {
+                                        $parts[] = (string) $part;
+                                        if ( is_string( $part_key ) ) {
+                                                $out[ $name . '-' . $part_key ] = (string) $part;
+                                        }
+                                }
+                        }
+                        $value = implode( array_values( $value ) === $value ? ', ' : ' ', $parts );
+                }
+                $out[ (string) $name ] = $value;
+        }

techwave-form-sync-for-zoho/trunk/includes/Integrations/AbstractIntegration.php

-              r3649280
+              r3748247
 use Form2Zoho\Logging\Logger;
 use Form2Zoho\Support\FieldMapper;
+use Form2Zoho\Support\Settings;
 defined( 'ABSPATH' ) || exit;
 …
         /**
          * Most integrations are not org-scoped.
+         *
+         * @return bool
+         */
+        /**
+         * Whether this destination is reached through a saved Zoho connection.
+         *
+         * True for everything Zoho, which is everything the free plugin ships. An
+         * add-on may offer a destination that is simply a URL — nothing to
+         * authorise, no account to pick — and the editor would otherwise insist on
+         * a Zoho account it will never use, and refuse to load the rest of the
+         * step until one was chosen.
+         *
+         * Not on IntegrationInterface on purpose. Adding a method there would
+         * break any integration implementing the interface directly rather than
+         * extending this class, for a question almost nothing needs to answer
+         * differently. Callers ask with method_exists(), the same way they already
+         * ask about get_departments().
+         *
+         * @return bool
+         */
+        public function needs_connection() {
+                return true;
+        }
+        /**
+         * Whether this destination needs an organisation chosen (Books, Desk).
+         *
          * @return bool
 …
+                }
                 return $new;
+        }
+        /**
+         * Request-level options an add-on asked for, for this one delivery.
+         *
+         * Some of what Zoho accepts is not a field of the record but a key beside
+         * it in the request — which automations to run, which assignment rule to
+         * apply — and a field mapping has no way to say those. An add-on copies
+         * them into the job as settings['request_extras'] through
+         * form2zoho_build_job, and each client passes on only the keys its own
+         * endpoint documents, so nothing an add-on writes here can reach Zoho
+         * unchecked.
+         *
+         * @param array $settings Job settings.
+         * @return array
+         */
+        protected static function request_extras( array $settings ) {
+                return isset( $settings['request_extras'] ) && is_array( $settings['request_extras'] )
+                        ? $settings['request_extras']
+                        : array();
+        }
+        /**
+         * An email address as the log may keep it.
+         *
+         * Campaigns and Marketing Automation have no record id — a contact is
+         * keyed by its address — so the address is what the timeline shows. That
+         * made it the one submitted value stored whatever "Store submitted
+         * values" said, while the setting promises the opposite. With the setting
+         * off the address is masked: enough to recognise a row, not a copy of
+         * somebody's address in a table the admin asked to keep clean.
+         *
+         * @param string $email The address.
+         * @return string
+         */
+        protected static function loggable_email( $email ) {
+                $email = trim( (string) $email );
+                if ( '' === $email || Settings::is_on( 'form2zoho_store_form_values' ) ) {
+                        return $email;
+                }
+                $at = strrpos( $email, '@' );
+                if ( false === $at || 0 === $at ) {
+                        return '***';
+                }
+                return substr( $email, 0, 1 ) . '***' . substr( $email, $at );
+        }
+        /**
+         * Where a Zoho field's value came from, named as the editor names it.
+         *
+         * For an error message about one field: knowing a value is wrong helps
+         * nobody who then has to guess which of a dozen mapping rows produced it.
+         *
+         * @param array  $settings   Feed settings, with the mapping.
+         * @param string $zoho_field The Zoho field name the value was sent under.
+         * @return string The form field id, or '' when it was not a form field.
+         */
+        protected static function mapped_source( array $settings, $zoho_field ) {
+                $mapping = isset( $settings['mapping'] ) && is_array( $settings['mapping'] ) ? $settings['mapping'] : array();
+                $row     = isset( $mapping[ $zoho_field ] ) && is_array( $mapping[ $zoho_field ] ) ? $mapping[ $zoho_field ] : array();
+                $type    = isset( $row['type'] ) ? (string) $row['type'] : 'field';
+                if ( 'field' !== $type || empty( $row['value'] ) || is_array( $row['value'] ) ) {
+                        return '';
+                }
+                return (string) $row['value'];
+        }

techwave-form-sync-for-zoho/trunk/includes/Integrations/BiginIntegration.php

-              r3649280
+              r3748247
+                }
+                $dupes = array();
+                if ( ! empty( $settings['dedupe_enabled'] ) && ! empty( $settings['dedupe_fields'] ) ) {
+                        $dupes = array_filter( array_map( 'trim', explode( ',', (string) $settings['dedupe_fields'] ) ) );
+                // Duplicate handling on means an upsert whether or not any unique
+                // fields were ticked. With none, Bigin applies its own duplicate check.
+                $upsert = ! empty( $settings['dedupe_enabled'] );
+                $dupes  = array();
+                if ( $upsert && ! empty( $settings['dedupe_fields'] ) ) {
+                        $dupes = array_values( array_filter( array_map( 'trim', explode( ',', (string) $settings['dedupe_fields'] ) ) ) );
+                }
                 $client = $this->client( $settings );
                 $result = $client->create_record( $module, $record, $dupes );
+                $result = $client->create_record( $module, $record, $dupes, $upsert, self::request_extras( $settings ) );
                 $outcome = $this->interpret( $result );

techwave-form-sync-for-zoho/trunk/includes/Integrations/BooksIntegration.php

-              r3649280
+              r3748247
          * fetched, so it cannot fail — hence no WP_Error in the return type.
+         *
+         * @param array $context connection_id and optional org_id.
+         * @param array $context connection_id, optional org_id, and fresh to
+         *                       skip the cached custom modules.
          * @return array<int,array>
          */
         public function get_modules( array $context ) {
+                return $this->client( $context )->modules();
+                // The organisation is what makes the custom modules reachable — they
+                // belong to it, not to the account — so it is passed on rather than
+                // used only to build the client.
+                $org_id = isset( $context['org_id'] ) ? (string) $context['org_id'] : '';
+                return $this->client( $context )->modules( $org_id, ! empty( $context['fresh'] ) );
+        }
 …
                         return new WP_Error( 'form2zoho_no_module', __( 'Choose a Books resource first.', 'techwave-form-sync-for-zoho' ) );
+                }
+                return $this->client( $context )->fields( $module );
+                $org_id = isset( $context['org_id'] ) ? (string) $context['org_id'] : '';
+                return $this->client( $context )->fields( $module, $org_id, ! empty( $context['fresh'] ) );
+        }

techwave-form-sync-for-zoho/trunk/includes/Integrations/CampaignsIntegration.php

-              r3649280
+              r3748247
                 $subscription = isset( $settings['campaigns_subscription_type'] ) ? strtolower( trim( (string) $settings['campaigns_subscription_type'] ) ) : '';
+                // Zoho keys a contact by its email address and refuses every call
+                // without a real one — "Invalid Contact Email address", or "Pattern
+                // doesn't Match" from the list add. Both name the format, neither
+                // names the mapping row that produced it, so the row is named here
+                // before anything is sent.
+                $email_row = $this->email_row( $record );
+                if ( '' !== $email_row['value'] && ! is_email( $email_row['value'] ) ) {
+                        $source = self::mapped_source( $settings, $email_row['key'] );
+                        return self::with_sent_fields(
+                                new WP_Error(
+                                        'form2zoho_bad_email',
+                                        '' !== $source
+                                                ? sprintf(
+                                                        /* translators: 1: Zoho field name, 2: the form field it is mapped to. */
+                                                        __( 'The value mapped to "%1$s" is not an email address, so Zoho refused it. It comes from the form field "%2$s". Map the form\'s email field there instead.', 'techwave-form-sync-for-zoho' ),
+                                                        $email_row['key'],
+                                                        $source
+                                                )
+                                                : sprintf(
+                                                        /* translators: %s: Zoho field name. */
+                                                        __( 'The value mapped to "%s" is not an email address, so Zoho refused it.', 'techwave-form-sync-for-zoho' ),
+                                                        $email_row['key']
+                                                ),
+                                        array( 'email_field' => $email_row['key'] )
+                                ),
+                                $record
+                        );
+                }
                 $client = $this->client( $settings );
 …
                         $result = $client->unsubscribe( $listkey, $record, $topic_id );
                 } else {
+                        // "Right away", the default: the contact is put in the list first,
+                        // directly, so a list with its sign-up form on does not hold it
+                        // back until a confirmation email is clicked. listsubscribe then
+                        // writes the other fields and the topics for a contact already
+                        // in the list. "After they confirm" leaves that to Zoho.
+                        if ( ! isset( $settings['campaigns_list_add'] ) || 'confirm' !== $settings['campaigns_list_add'] ) {
+                                $email = $this->find_email( $record );
+                                if ( '' === $email ) {
+                                        return self::with_sent_fields(
+                                                new WP_Error( 'form2zoho_no_email', __( 'Map a form field to the contact email. Zoho needs it to add the contact to the list.', 'techwave-form-sync-for-zoho' ) ),
+                                                $record
+                                        );
+                                }
+                                // Best effort. Zoho refuses this call for reasons that say
+                                // nothing about the contact's own details — the contact is in the
+                                // list already, the account's bulk-add limit is reached — and
+                                // aborting here threw away a submission listsubscribe would
+                                // have taken. The reason is logged, then the fields are sent.
+                                $added = $this->interpret( $client->add_to_list( $listkey, $email ) );
+                                if ( is_wp_error( $added ) ) {
+                                        $this->logger->warning(
+                                                sprintf(
+                                                        /* translators: %s: reason Zoho gave. */
+                                                        __( 'The submitted fields were sent, but the contact could not be added to the mailing list directly: %s', 'techwave-form-sync-for-zoho' ),
+                                                        $added->get_error_message()
+                                                ),
+                                                array( 'status' => 'suppressed' ),
+                                                'campaigns',
+                                                isset( $settings['form_id'] ) ? (string) $settings['form_id'] : '',
+                                                isset( $settings['feed_id'] ) ? (string) $settings['feed_id'] : ''
+                                        );
+                                }
+                        }
                         $result = $client->subscribe( $listkey, $record, $topic_id );
+                }
 …
                 $email = $this->find_email( $record );
                 if ( '' !== $email ) {
+                        $outcome['id'] = $email;
+                        $outcome['id'] = self::loggable_email( $email );
+                }
+                // On "Right away" this plugin puts the contact in the list itself, a
+                // moment earlier, so Zoho then answers the fields call with "this
+                // email address already exists in the list" — its normal wording for
+                // an update, and alarming under a green Success row that also says
+                // the record was created. Said plainly instead, and counted as the
+                // update it is.
+                if ( 'unsubscribed' !== $subscription
+                        && isset( $outcome['zoho_message'] )
+                        && preg_match( '/already exist/i', (string) $outcome['zoho_message'] ) ) {
+                        $outcome['action']       = 'updated';
+                        $outcome['zoho_message'] = '';
+                        $outcome['message']      = '' !== $email
+                                /* translators: %s: the contact's email address. */
+                                ? sprintf( __( 'This contact was already in the mailing list, so Zoho updated it with the submitted fields (%s).', 'techwave-form-sync-for-zoho' ), self::loggable_email( $email ) )
+                                : __( 'This contact was already in the mailing list, so Zoho updated it with the submitted fields.', 'techwave-form-sync-for-zoho' );
+                }
+                // Otherwise the log said "Record created in Zoho" for a feed whose
+                // whole job is to take the contact off the list.
+                if ( 'unsubscribed' === $subscription ) {
+                        $outcome['message'] = '' !== $email
+                                /* translators: %s: the contact's email address. */
+                                ? sprintf( __( 'Contact unsubscribed in Zoho (%s).', 'techwave-form-sync-for-zoho' ), self::loggable_email( $email ) )
+                                : __( 'Contact unsubscribed in Zoho.', 'techwave-form-sync-for-zoho' );
+                }
 …
                 // exists. Best-effort: a tag that fails to associate (e.g. it was
                 // deleted in Zoho after this feed was saved) doesn't fail the whole
+                // submission, since the contact itself was already saved.
+                // submission, since the contact itself was already saved. It is
+                // logged, though: the answer was thrown away, so a feed whose tags
+                // never arrived looked exactly like one whose tags did.
+                //
+                // Not for an unsubscribe, which takes the contact off the list. The
+                // tags were being applied there too, tagging somebody on their way
+                // out as if they had just signed up.
                 $tags = isset( $settings['campaigns_tag'] ) && is_array( $settings['campaigns_tag'] ) ? array_filter( array_map( 'trim', $settings['campaigns_tag'] ) ) : array();
                 if ( '' !== $email ) {
+                if ( '' !== $email && 'unsubscribed' !== $subscription ) {
                         foreach ( $tags as $tag_name ) {
+                                $client->associate_tag( $tag_name, $email );
+                                $tagged = $this->interpret( $client->associate_tag( $tag_name, $email ) );
+                                if ( is_wp_error( $tagged ) ) {
+                                        $this->logger->warning(
+                                                sprintf(
+                                                        /* translators: 1: tag name, 2: reason Zoho gave. */
+                                                        __( 'The tag "%1$s" was not attached to the contact: %2$s', 'techwave-form-sync-for-zoho' ),
+                                                        $tag_name,
+                                                        $tagged->get_error_message()
+                                                ),
+                                                array( 'status' => 'suppressed' ),
+                                                'campaigns',
+                                                isset( $settings['form_id'] ) ? (string) $settings['form_id'] : '',
+                                                isset( $settings['feed_id'] ) ? (string) $settings['feed_id'] : ''
+                                        );
+                                }
+                        }
+                }
 …
                         return $result;
+                }
+                $status = isset( $result['status'] ) ? (string) $result['status'] : '';
+                if ( 'success' === $status ) {
+                // Zoho answers some calls flat and others wrapped in "response",
+                // on the same endpoints — the field lists already read both shapes.
+                // Read flat only, and a wrapped success was reported as a failure:
+                // for the direct list-add that also stopped the fields being sent.
+                $body = ( isset( $result['response'] ) && is_array( $result['response'] ) ) ? $result['response'] : $result;
+                $status = isset( $body['status'] ) ? strtolower( trim( (string) $body['status'] ) ) : '';
+                $code   = isset( $body['code'] ) ? trim( (string) $body['code'] ) : '';
+                // Code 0 is Zoho's "this worked", and some answers carry only that.
+                if ( 'success' === $status || ( '' === $status && '0' === $code ) ) {
                         // No id here on purpose: the subscribe response has no record
                         // id, and the listkey it echoes back is the mailing list's
 …
                                 'id'           => '',
                                 'action'       => 'created',
                                 'zoho_message' => isset( $result['message'] ) ? (string) $result['message'] : '',
+                                'zoho_message' => isset( $body['message'] ) ? (string) $body['message'] : '',
                         );
+                }
+                $message = isset( $result['message'] ) ? (string) $result['message'] : __( 'Unexpected Campaigns response.', 'techwave-form-sync-for-zoho' );
+                $message = isset( $body['message'] ) && '' !== $body['message']
+                        ? (string) $body['message']
+                        : __( 'Unexpected Campaigns response.', 'techwave-form-sync-for-zoho' );
+                // Zoho's numbered reason, which its documentation lists and its
+                // support asks for.
+                if ( '' !== $code ) {
+                        $message = sprintf(
+                                /* translators: 1: Zoho's message, 2: Zoho's error code. */
+                                __( '%1$s (Zoho code %2$s)', 'techwave-form-sync-for-zoho' ),
+                                $message,
+                                $code
+                        );
+                }
                 return new WP_Error( 'form2zoho_campaigns_rejected', $message, $result );
+        }
 …
          */
         private function find_email( array $record ) {
+                $row = $this->email_row( $record );
+                return $row['value'];
+        }
+        /**
+         * The record entry holding the email address, and which key it is under.
+         *
+         * The first key containing "email" used to win outright, so a feed that
+         * also maps something like "Email Opt-in" could send that checkbox's
+         * value to Zoho as the address, depending only on the order the rows
+         * happened to be in. A key holding a real address is preferred now; the
+         * first non-empty candidate is still returned when none holds one, so a
+         * wrong value is reported rather than read as "nothing mapped".
+         *
+         * @param array $record Mapped display-name => value pairs.
+         * @return array{key:string,value:string}
+         */
+        private function email_row( array $record ) {
+                $candidates = array();
+                if ( isset( $record['Contact Email'] ) && ! is_array( $record['Contact Email'] ) ) {
+                        $candidates['Contact Email'] = trim( (string) $record['Contact Email'] );
+                }
                 foreach ( $record as $key => $value ) {
                         if ( false !== stripos( (string) $key, 'email' ) && '' !== trim( (string) $value ) ) {
                                 return trim( (string) $value );
+                        if ( is_string( $key ) && ! is_array( $value ) && false !== stripos( $key, 'email' ) ) {
+                                $candidates[ $key ] = trim( (string) $value );
+                        }
+                }
+                return '';
+                $candidates = array_filter(
+                        $candidates,
+                        static function ( $value ) {
+                                return '' !== $value;
+                        }
+                );
+                foreach ( $candidates as $key => $value ) {
+                        if ( is_email( $value ) ) {
+                                return array( 'key' => $key, 'value' => $value );
+                        }
+                }
+                foreach ( $candidates as $key => $value ) {
+                        return array( 'key' => $key, 'value' => $value );
+                }
+                return array( 'key' => '', 'value' => '' );
+        }
+}

techwave-form-sync-for-zoho/trunk/includes/Integrations/CrmIntegration.php

-              r3649280
+              r3748247
+                }
+                $dupes = array();
+                if ( ! empty( $settings['dedupe_enabled'] ) && ! empty( $settings['dedupe_fields'] ) ) {
+                        $dupes = array_filter( array_map( 'trim', explode( ',', (string) $settings['dedupe_fields'] ) ) );
+                // Duplicate handling on means an upsert whether or not any unique
+                // fields were ticked. With none, Zoho applies its own duplicate check.
+                $upsert = ! empty( $settings['dedupe_enabled'] );
+                $dupes  = array();
+                if ( $upsert && ! empty( $settings['dedupe_fields'] ) ) {
+                        $dupes = array_values( array_filter( array_map( 'trim', explode( ',', (string) $settings['dedupe_fields'] ) ) ) );
+                }
                 $client = $this->client( $settings );
+                $result = $client->create_record( $module, $record, $dupes );
+                $record = $this->attach_files( $record, $settings, $client );
+                $result = $client->create_record( $module, $record, $dupes, $upsert, self::request_extras( $settings ) );
                 return $this->interpret( $result );
+        }
+        /**
+         * Turn every mapped file field into the id Zoho wants there.
+         *
+         * A File Upload field cannot be written with a value. The file goes to
+         * Zoho's file store first and the record then carries the id it was given:
+         * [ { "File_Id__s": "<id>" } ]. Mapping one used to send the submitted
+         * filename as text, which Zoho refused — and it refuses the whole request,
+         * so a rejected attachment took the name, the email and the message with
+         * it.
+         *
+         * Which rows are file fields is known from the mapping, where the Zoho
+         * field's type was stored when the feed was saved. No metadata call is
+         * made here; a submission that maps no file field does no extra work at
+         * all.
+         *
+         * A file that cannot be sent is dropped from the record rather than
+         * failing it. The reasons are all outside the submitter's control — too
+         * large for Zoho, already cleaned up before a background retry ran, or a
+         * connection still holding a grant issued before this plugin asked for
+         * ZohoCRM.Files.CREATE — and none of them is a reason to throw away the
+         * enquiry. The log carries the upload's own error either way.
+         *
+         * @param array     $record   Record built from the mapping.
+         * @param array     $settings Feed settings, including any uploaded files.
+         * @param CrmClient $client   Client for this connection.
+         * @return array
+         */
+        private function attach_files( array $record, array $settings, CrmClient $client ) {
+                $mapping = isset( $settings['mapping'] ) && is_array( $settings['mapping'] ) ? $settings['mapping'] : array();
+                $files   = isset( $settings['files'] ) && is_array( $settings['files'] ) ? $settings['files'] : array();
+                foreach ( $mapping as $zoho_field => $row ) {
+                        $zoho_field = (string) $zoho_field;
+                        if ( ! is_array( $row ) || ! isset( $record[ $zoho_field ] ) ) {
+                                continue;
+                        }
+                        $source = isset( $row['value'] ) ? (string) $row['value'] : '';
+                        $paths  = isset( $files[ $source ] ) ? array_values( (array) $files[ $source ] ) : array();
+                        $ztype  = isset( $row['zoho_type'] ) ? (string) $row['zoho_type'] : '';
+                        $known_file = in_array( $ztype, array( 'fileupload', 'imageupload' ), true );
+                        // A row with no recorded type but a real file behind it is treated
+                        // as a file row too. Two things reach that state and both are
+                        // ordinary: a feed saved before the editor started recording the
+                        // Zoho field's type, and a field whose type Zoho reports under a
+                        // name this plugin does not recognise. Without it the text below
+                        // went to Zoho instead of the file, which is the whole of the
+                        // "invalid data (Attachment)" failure.
+                        $likely_file = '' === $ztype && array() !== $paths;
+                        if ( ! $known_file && ! $likely_file ) {
+                                // Not a file target. If a file was uploaded for it anyway,
+                                // send its name — Contact Form 7 puts the file's SHA-256 in
+                                // the submitted value, and nobody wants a hash in their CRM.
+                                // A URL, which is what most other form plugins submit, is more
+                                // use in a text field than the bare file name, so it stays.
+                                if ( array() !== $paths && ! ( is_string( $record[ $zoho_field ] ) && preg_match( '#^(?:https?:)?//#i', $record[ $zoho_field ] ) ) ) {
+                                        $record[ $zoho_field ] = implode( ', ', array_map( 'basename', $paths ) );
+                                }
+                                continue;
+                        }
+                        // Whatever text the mapping produced is not something Zoho can use
+                        // in a file field, so it goes whether or not a file replaces it.
+                        unset( $record[ $zoho_field ] );
+                        $ids = array();
+                        foreach ( $paths as $path ) {
+                                $id = $client->upload_file( (string) $path );
+                                if ( is_wp_error( $id ) ) {
+                                        $this->logger->error(
+                                                $id->get_error_message(),
+                                                array(
+                                                        'status' => 'error',
+                                                        'field'  => $zoho_field,
+                                                        'file'   => basename( (string) $path ),
+                                                ),
+                                                $this->id(),
+                                                ''
+                                        );
+                                        continue;
+                                }
+                                // File_Id__s, for a file field and an image field alike: the
+                                // v6 API refuses a record whose file row carries anything else
+                                // ("file_id", "Encrypted_Id") with MANDATORY_NOT_FOUND
+                                // (File_Id__s), which is how a mapped upload failed the whole
+                                // record. Checked against a live account, both field types.
+                                $ids[] = array( 'File_Id__s' => $id );
+                        }
+                        if ( array() !== $ids ) {
+                                $record[ $zoho_field ] = $ids;
+                        }
+                }
+                return $record;
+        }

techwave-form-sync-for-zoho/trunk/includes/Integrations/DeskIntegration.php

r3649280	r3748247
90	90	return new WP_Error( 'form2zoho_no_module', __( 'Choose a Desk module first.', 'techwave-form-sync-for-zoho' ) );
91	91	}
92		return $this->client( $context )->fields( $module );
	92
	93	// The organisation is what makes its own fields reachable — they belong
	94	// to it, not to the account — so it is passed on rather than used only
	95	// to build the client.
	96	$org_id = isset( $context['org_id'] ) ? (string) $context['org_id'] : '';
	97
	98	return $this->client( $context )->fields( $module, $org_id );
93	99	}
94	100
…	…
125	131	}
126	132
127		$result = $this->client( $settings )->create_record( $org_id, $dept_id, $module, $record );
	133	$result = $this->client( $settings )->create_record( $org_id, $dept_id, $module, $record, self::request_extras( $settings ) );
128	134	return $this->interpret( $result, $module );
129	135	}

techwave-form-sync-for-zoho/trunk/includes/Integrations/MarketingAutomationIntegration.php

-              r3649280
+              r3748247
                 $subscription = isset( $settings['campaigns_subscription_type'] ) ? strtolower( trim( (string) $settings['campaigns_subscription_type'] ) ) : '';
+                // Zoho keys a lead by its email address and refuses every call
+                // without a real one — "Invalid Lead Email address", or "Pattern
+                // doesn't Match" from the list add. Both name the format, neither
+                // names the mapping row that produced it, so the row is named here
+                // before anything is sent.
+                $email_row = $this->email_row( $record );
+                if ( '' !== $email_row['value'] && ! is_email( $email_row['value'] ) ) {
+                        $source = self::mapped_source( $settings, $email_row['key'] );
+                        return self::with_sent_fields(
+                                new WP_Error(
+                                        'form2zoho_bad_email',
+                                        '' !== $source
+                                                ? sprintf(
+                                                        /* translators: 1: Zoho field name, 2: the form field it is mapped to. */
+                                                        __( 'The value mapped to "%1$s" is not an email address, so Zoho refused it. It comes from the form field "%2$s". Map the form\'s email field there instead.', 'techwave-form-sync-for-zoho' ),
+                                                        $email_row['key'],
+                                                        $source
+                                                )
+                                                : sprintf(
+                                                        /* translators: %s: Zoho field name. */
+                                                        __( 'The value mapped to "%s" is not an email address, so Zoho refused it.', 'techwave-form-sync-for-zoho' ),
+                                                        $email_row['key']
+                                                ),
+                                        array( 'email_field' => $email_row['key'] )
+                                ),
+                                $record
+                        );
+                }
                 $client = $this->client( $settings );
 …
                         $result = $client->unsubscribe( $listkey, $record, $topic_id );
                 } else {
+                        // "Right away", the default: the lead is put in the list first,
+                        // directly, so a list with its sign-up form on does not hold it
+                        // back until a confirmation email is clicked. listsubscribe then
+                        // writes the other fields for a lead already in the list. "After
+                        // they confirm" leaves that to Zoho.
+                        if ( ! isset( $settings['campaigns_list_add'] ) || 'confirm' !== $settings['campaigns_list_add'] ) {
+                                $email = $this->find_email( $record );
+                                if ( '' === $email ) {
+                                        return self::with_sent_fields(
+                                                new WP_Error( 'form2zoho_no_email', __( 'Map a form field to the lead email. Zoho needs it to add the lead to the list.', 'techwave-form-sync-for-zoho' ) ),
+                                                $record
+                                        );
+                                }
+                                // Best effort. Zoho refuses this call for reasons that say
+                                // nothing about the lead's own details — the lead is in the
+                                // list already, the account's bulk-add limit is reached — and
+                                // aborting here threw away a submission listsubscribe would
+                                // have taken. The reason is logged, then the fields are sent.
+                                $added = $this->interpret( $client->add_to_list( $listkey, $email, $topic_id ) );
+                                if ( is_wp_error( $added ) ) {
+                                        $this->logger->warning(
+                                                sprintf(
+                                                        /* translators: %s: reason Zoho gave. */
+                                                        __( 'The submitted fields were sent, but the lead could not be added to the mailing list directly: %s', 'techwave-form-sync-for-zoho' ),
+                                                        $added->get_error_message()
+                                                ),
+                                                array( 'status' => 'suppressed' ),
+                                                'automation',
+                                                isset( $settings['form_id'] ) ? (string) $settings['form_id'] : '',
+                                                isset( $settings['feed_id'] ) ? (string) $settings['feed_id'] : ''
+                                        );
+                                }
+                        }
                         $result = $client->subscribe( $listkey, $record, $topic_id );
+                }
 …
                 $email = $this->find_email( $record );
                 if ( '' !== $email ) {
+                        $outcome['id'] = $email;
+                        $outcome['id'] = self::loggable_email( $email );
+                }
+                // On "Right away" this plugin puts the lead in the list itself, a
+                // moment earlier, so Zoho then answers the fields call with "this
+                // email address already exists in the list" — its normal wording for
+                // an update, and alarming under a green Success row that also says
+                // the record was created. Said plainly instead, and counted as the
+                // update it is.
+                if ( 'unsubscribed' !== $subscription
+                        && isset( $outcome['zoho_message'] )
+                        && preg_match( '/already exist/i', (string) $outcome['zoho_message'] ) ) {
+                        $outcome['action']       = 'updated';
+                        $outcome['zoho_message'] = '';
+                        $outcome['message']      = '' !== $email
+                                /* translators: %s: the lead's email address. */
+                                ? sprintf( __( 'This lead was already in the mailing list, so Zoho updated it with the submitted fields (%s).', 'techwave-form-sync-for-zoho' ), self::loggable_email( $email ) )
+                                : __( 'This lead was already in the mailing list, so Zoho updated it with the submitted fields.', 'techwave-form-sync-for-zoho' );
+                }
+                // Otherwise the log said "Record created in Zoho" for a feed whose
+                // whole job is to take the lead off the list.
+                if ( 'unsubscribed' === $subscription ) {
+                        $outcome['message'] = '' !== $email
+                                /* translators: %s: the lead's email address. */
+                                ? sprintf( __( 'Lead unsubscribed in Zoho (%s).', 'techwave-form-sync-for-zoho' ), self::loggable_email( $email ) )
+                                : __( 'Lead unsubscribed in Zoho.', 'techwave-form-sync-for-zoho' );
+                }
 …
                         return $result;
+                }
+                $status = isset( $result['status'] ) ? (string) $result['status'] : '';
+                if ( 'success' === $status ) {
+                // Zoho answers some calls flat and others wrapped in "response",
+                // on the same endpoints — the field lists already read both shapes.
+                // Read flat only, and a wrapped success was reported as a failure:
+                // for the direct list-add that also stopped the fields being sent.
+                $body = ( isset( $result['response'] ) && is_array( $result['response'] ) ) ? $result['response'] : $result;
+                $status = isset( $body['status'] ) ? strtolower( trim( (string) $body['status'] ) ) : '';
+                $code   = isset( $body['code'] ) ? trim( (string) $body['code'] ) : '';
+                // Code 0 is Zoho's "this worked", and some answers carry only that.
+                if ( 'success' === $status || ( '' === $status && '0' === $code ) ) {
                         // No id here on purpose — see CampaignsIntegration::interpret():
                         // send() fills in the lead's email as the record identity.
 …
                                 'id'           => '',
                                 'action'       => 'created',
                                 'zoho_message' => isset( $result['message'] ) ? (string) $result['message'] : '',
+                                'zoho_message' => isset( $body['message'] ) ? (string) $body['message'] : '',
                         );
+                }
+                $message = isset( $result['message'] ) ? (string) $result['message'] : __( 'Unexpected Marketing Automation response.', 'techwave-form-sync-for-zoho' );
+                $message = isset( $body['message'] ) && '' !== $body['message']
+                        ? (string) $body['message']
+                        : __( 'Unexpected Marketing Automation response.', 'techwave-form-sync-for-zoho' );
+                // Zoho's numbered reason, which its documentation lists and its
+                // support asks for.
+                if ( '' !== $code ) {
+                        $message = sprintf(
+                                /* translators: 1: Zoho's message, 2: Zoho's error code. */
+                                __( '%1$s (Zoho code %2$s)', 'techwave-form-sync-for-zoho' ),
+                                $message,
+                                $code
+                        );
+                }
                 return new WP_Error( 'form2zoho_automation_rejected', $message, $result );
+        }
 …
          */
         private function find_email( array $record ) {
+                $row = $this->email_row( $record );
+                return $row['value'];
+        }
+        /**
+         * The record entry holding the email address, and which key it is under.
+         *
+         * The first key containing "email" used to win outright, so a feed that
+         * also maps something like "Email Opt-in" could send that checkbox's
+         * value to Zoho as the address, depending only on the order the rows
+         * happened to be in. A key holding a real address is preferred now; the
+         * first non-empty candidate is still returned when none holds one, so a
+         * wrong value is reported rather than read as "nothing mapped".
+         *
+         * @param array $record Mapped display-name => value pairs.
+         * @return array{key:string,value:string}
+         */
+        private function email_row( array $record ) {
+                $candidates = array();
+                if ( isset( $record['Lead Email'] ) && ! is_array( $record['Lead Email'] ) ) {
+                        $candidates['Lead Email'] = trim( (string) $record['Lead Email'] );
+                }
                 foreach ( $record as $key => $value ) {
                         if ( false !== stripos( (string) $key, 'email' ) && '' !== trim( (string) $value ) ) {
                                 return trim( (string) $value );
+                        if ( is_string( $key ) && ! is_array( $value ) && false !== stripos( $key, 'email' ) ) {
+                                $candidates[ $key ] = trim( (string) $value );
+                        }
+                }
+                return '';
+                $candidates = array_filter(
+                        $candidates,
+                        static function ( $value ) {
+                                return '' !== $value;
+                        }
+                );
+                foreach ( $candidates as $key => $value ) {
+                        if ( is_email( $value ) ) {
+                                return array( 'key' => $key, 'value' => $value );
+                        }
+                }
+                foreach ( $candidates as $key => $value ) {
+                        return array( 'key' => $key, 'value' => $value );
+                }
+                return array( 'key' => '', 'value' => '' );
+        }
+}

techwave-form-sync-for-zoho/trunk/includes/Logging/Logger.php

-              r3649280
+              r3748247
          * list, because redact() walks the whole context — including form_values.
          */
+        /**
+         * Longest message stored, in bytes. The column is TEXT (64 KB); this
+         * leaves room for a multi-byte character to be cut whole.
+         */
+        private const MAX_MESSAGE_BYTES = 8192;
+        /**
+         * Longest encoded context stored, in bytes. Enough for a submission's
+         * field list and Zoho's answer, far short of what LONGTEXT would take.
+         */
+        private const MAX_CONTEXT_BYTES = 65536;
         private const REDACT_KEYS = array(
                 'access_token',
 …
+                }
+                // Both are capped. A message is built from Zoho's own wording, and a
+                // context from what a visitor submitted, so neither has a length this
+                // plugin controls — and an uncapped row is a public form away from
+                // filling the table. MySQL's TEXT column would also refuse an
+                // over-long message outright in strict mode, losing the row.
+                $json = wp_json_encode( $this->strip_empty( self::redact( $context ) ) );
                 $row = array(
                         'created_at'  => current_time( 'mysql', true ),
 …
                         'form_id'     => substr( (string) $form_id, 0, 64 ),
                         'feed_id'     => substr( (string) $feed_id, 0, 64 ),
                         'message'     => (string) $message,
                         'context'     => wp_json_encode( $this->strip_empty( self::redact( $context ) ) ),
+                        'message'     => self::clip( (string) $message, self::MAX_MESSAGE_BYTES ),
+                        'context'     => self::clip( (string) $json, self::MAX_CONTEXT_BYTES ),
                 );
                 // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching -- custom log table.
                 $wpdb->insert( $wpdb->prefix . self::TABLE, $row );
+        }
+        /**
+         * Cut a string to a byte budget, on a character boundary, marking the cut.
+         *
+         * @param string $value Text to store.
+         * @param int    $max   Maximum bytes.
+         * @return string
+         */
+        private static function clip( $value, $max ) {
+                if ( strlen( $value ) <= $max ) {
+                        return $value;
+                }
+                /* translators: marks a log entry that was too long to store in full. */
+                $suffix = ' ' . __( '[cut: entry too long]', 'techwave-form-sync-for-zoho' );
+                return mb_strcut( $value, 0, max( 0, $max - strlen( $suffix ) ) ) . $suffix;
+        }
 …
          */
         public static function redact( $data ) {
+                if ( is_string( $data ) ) {
+                        return self::scrub( $data );
+                }
                 if ( ! is_array( $data ) ) {
                         return $data;
 …
                                 continue;
+                        }
+                        $out[ $key ] = is_array( $value ) ? self::redact( $value ) : $value;
+                        if ( is_array( $value ) ) {
+                                $out[ $key ] = self::redact( $value );
+                                continue;
+                        }
+                        $out[ $key ] = is_string( $value ) ? self::scrub( $value ) : $value;
+                }
                 return $out;
+        }
+        /**
+         * Blank a credential written inside a string rather than under a key.
+         *
+         * The list above matches key names, which covers everything this plugin
+         * puts in a context itself. What it cannot see is a credential quoted
+         * back inside somebody else's text — an upstream error body flattened to
+         * a string, a header echoed into a message — and that text is stored and
+         * shown like any other. The shapes below are the ones a Zoho answer can
+         * carry; anything else is left exactly as it was.
+         *
+         * @param string $text Text about to be stored.
+         * @return string
+         */
+        private static function scrub( $text ) {
+                if ( '' === $text || strlen( $text ) > self::MAX_CONTEXT_BYTES ) {
+                        return $text;
+                }
+                $patterns = array(
+                        // "Zoho-oauthtoken 1000.abc…" / "Bearer abc…"
+                        '/\b(Zoho-oauthtoken|Bearer)\s+[A-Za-z0-9._-]{8,}/i',
+                        // "access_token":"…" and its refresh/secret siblings, JSON or query.
+                        '/\b((?:access|refresh)_token|client_secret|zapikey)\b\s*["\']?\s*[:=]\s*["\']?[A-Za-z0-9._-]{8,}/i',
+                );
+                return (string) preg_replace( $patterns, '***redacted***', $text );
+        }
 …
         /**
+         * How many rows the log holds.
+         *
+         * The Logs screen reads one page at a time, so it has to be told how many
+         * pages there are — a page of rows cannot answer that about itself.
+         *
+         * @param string $level Optional level filter.
+         * @return int
+         */
+        public function count( $level = '' ) {
+                global $wpdb;
+                $table = $wpdb->prefix . self::TABLE;
+                if ( '' !== $level ) {
+                        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
+                        return (int) $wpdb->get_var(
+                                $wpdb->prepare( "SELECT COUNT(*) FROM {$table} WHERE level = %s", $level ) // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- table name is an internal constant, not user input.
+                        );
+                }
+                // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- custom log table; name is an internal constant.
+                return (int) $wpdb->get_var( "SELECT COUNT(*) FROM {$table}" );
+        }
+        /**
+         * The highest id in the log, or 0 when it is empty.
+         *
+         * This is the cursor the Logs screen's live poll counts from. It is not
+         * the same as "the newest row on screen": on page two of the list, the
+         * newest row shown is an old one, and starting the poll from its id would
+         * fetch every row above it — the whole of page one — and prepend it.
+         *
+         * @return int
+         */
+        public function newest_id() {
+                global $wpdb;
+                $table = $wpdb->prefix . self::TABLE;
+                // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- custom log table; name is an internal constant.
+                return (int) $wpdb->get_var( "SELECT MAX(id) FROM {$table}" );
+        }
+        /**
+         * One page of log rows, newest first.
+         *
+         * The Logs screen used to ask for the newest 200 rows and render all of
+         * them. On a busy site that is 200 rows of markup — each one carrying a
+         * hidden <pre> of the full JSON payload — built, sent and parsed to show
+         * twenty. This asks the database for the page being looked at and nothing
+         * else.
+         *
+         * LIMIT/OFFSET on an id-ordered index, not a filter over everything: the
+         * id is the primary key and the sort is the insertion order, so MySQL
+         * walks straight to the offset.
+         *
+         * @param int    $offset Rows to skip.
+         * @param int    $limit  Rows to return.
+         * @param string $level  Optional level filter.
+         * @return array<int,object>
+         */
+        public function page( $offset, $limit, $level = '' ) {
+                global $wpdb;
+                $table  = $wpdb->prefix . self::TABLE;
+                $limit  = max( 1, min( 200, (int) $limit ) );
+                $offset = max( 0, (int) $offset );
+                if ( '' !== $level ) {
+                        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
+                        return (array) $wpdb->get_results(
+                                $wpdb->prepare( "SELECT * FROM {$table} WHERE level = %s ORDER BY id DESC LIMIT %d OFFSET %d", $level, $limit, $offset ) // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- table name is an internal constant, not user input.
+                        );
+                }
+                // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
+                return (array) $wpdb->get_results(
+                        $wpdb->prepare( "SELECT * FROM {$table} ORDER BY id DESC LIMIT %d OFFSET %d", $limit, $offset ) // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- table name is an internal constant, not user input.
+                );
+        }
+        /**
          * Fetch log rows newer than a given id, oldest first — used to poll for
          * "live" updates on the admin Logs screen without a full page reload.
 …
                         $wpdb->prepare( "SELECT * FROM {$table} WHERE feed_id = %s ORDER BY id DESC LIMIT %d", (string) $feed_id, $limit ) // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- table name is an internal constant, not user input.
                 );
+        }
+        /**
+         * A stored log message as it should be shown.
+         *
+         * Rows written by older versions used an em dash ("Success — record
+         * created ..."). Messages written now use a colon; this brings the old
+         * rows into line on the Logs screen and the feed timeline without
+         * rewriting anything stored.
+         *
+         * @param string $message Stored message.
+         * @return string
+         */
+        public static function display_message( $message ) {
+                return str_replace( array( ' — ', '—' ), array( ': ', '-' ), (string) $message );
+        }
+        /**
+         * Sent and failed deliveries since a point in time, counted per site day
+         * and per feed, for the Dashboard.
+         *
+         * A delivery is a success row (level info, status success) or an error
+         * row. "Send test record" rows are left out — they carry "test":true in
+         * their context — so trying a feed out does not inflate the numbers.
+         *
+         * @param string $from_gmt       Earliest created_at, 'Y-m-d H:i:s' UTC.
+         * @param int    $offset_seconds Site's UTC offset, so days are the site's days.
+         * @return array<int,object> Rows of day, feed_id, outcome ('sent'|'failed'), total, last_at.
+         */
+        public function outcomes_since( $from_gmt, $offset_seconds = 0 ) {
+                global $wpdb;
+                $table = $wpdb->prefix . self::TABLE;
+                // phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- custom log table; name is an internal constant, not user input.
+                return (array) $wpdb->get_results(
+                        $wpdb->prepare(
+                                "SELECT DATE(DATE_ADD(created_at, INTERVAL %d SECOND)) AS day, feed_id, IF(level = 'error', 'failed', 'sent') AS outcome, COUNT(*) AS total, MAX(created_at) AS last_at
+                                FROM {$table}
+                                WHERE created_at >= %s
+                                        AND ( level = 'error' OR ( level = 'info' AND context LIKE %s ) )
+                                        AND ( context IS NULL OR context NOT LIKE %s )
+                                GROUP BY day, feed_id, outcome",
+                                (int) $offset_seconds,
+                                (string) $from_gmt,
+                                '%' . $wpdb->esc_like( '"status":"success"' ) . '%',
+                                '%' . $wpdb->esc_like( '"test":true' ) . '%'
+                        )
+                );      // phpcs:enable
+        }
+        /**
+         * The newest sent and failed deliveries, test runs left out — the same
+         * rows outcomes_since() counts.
+         *
+         * @param int $limit Max rows.
+         * @return array<int,object>
+         */
+        public function recent_outcomes( $limit = 5 ) {
+                global $wpdb;
+                $table = $wpdb->prefix . self::TABLE;
+                $limit = max( 1, min( 50, (int) $limit ) );
+                // phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- custom log table; name is an internal constant, not user input.
+                return (array) $wpdb->get_results(
+                        $wpdb->prepare(
+                                "SELECT * FROM {$table}
+                                WHERE ( level = 'error' OR ( level = 'info' AND context LIKE %s ) )
+                                        AND ( context IS NULL OR context NOT LIKE %s )
+                                ORDER BY id DESC LIMIT %d",
+                                '%' . $wpdb->esc_like( '"status":"success"' ) . '%',
+                                '%' . $wpdb->esc_like( '"test":true' ) . '%',
+                                $limit
+                        )
+                );      // phpcs:enable
+        }

techwave-form-sync-for-zoho/trunk/includes/NinjaForms/SubmissionHandler.php

-              r3649280
+              r3748247
          */
         public function handle( $form_data ) {
+                // Wrapped like every other handler here: a listener that throws takes
+                // the visitor's submission down with it, and the form plugin's own
+                // success path never finishes. Failing to reach Zoho must never break
+                // the form.
+                try {
+                        $this->handle_inner( $form_data );
+                } catch ( \Throwable $e ) {
+                        $this->logger->error(
+                                'Ninja Forms submission handling failed unexpectedly: ' . $e->getMessage(),
+                                array( 'status' => 'error' ),
+                                self::SOURCE
+                        );
+                }
+        }
+        /**
+         * The work itself, wrapped by handle().
+         *
+         * @param array $form_data Ninja Forms' submitted form data.
+         * @return void
+         */
+        private function handle_inner( $form_data ) {
                 if ( ! is_array( $form_data ) ) {
                         return;

techwave-form-sync-for-zoho/trunk/includes/Privacy/PrivacyProvider.php

-              r3649280
+              r3748247
                 $content  = '<p>' . esc_html__( 'When a visitor submits a form that has a Zoho integration enabled, the values you mapped are sent to the Zoho service and data center configured for that form. Depending on the feed, that service may be Zoho CRM, Zoho Bigin, Zoho Books, Zoho Desk, Zoho Campaigns or Zoho Marketing Automation. This transfer happens so the record can be created in your Zoho account. Please review Zoho\'s own privacy policy for how they handle that data.', 'techwave-form-sync-for-zoho' ) . '</p>';
                 $content .= '<p>' . esc_html__( 'This plugin also stores a delivery log entry for each submission (timestamp, status and a redacted API response). When the "Store submitted values" option is enabled — it is off by default — that entry additionally contains the submitted field values so a failed delivery can be resubmitted; with the option off, only the field names are recorded. Access tokens, refresh tokens and client secrets are never written to these logs in readable form. Log entries are deleted automatically after the retention period set on the plugin\'s Settings tab.', 'techwave-form-sync-for-zoho' ) . '</p>';
+                $content .= '<p>' . esc_html__( 'This plugin also stores a delivery log entry for each submission (timestamp, status and a redacted API response). When the "Store submitted values" option is enabled (it is off by default), that entry additionally contains the submitted field values so a failed delivery can be resubmitted; with the option off, only the field names are recorded. Access tokens, refresh tokens and client secrets are never written to these logs in readable form. Log entries are kept until they are deleted, either by hand or automatically after a set number of days if that option is turned on in the plugin\'s Settings tab.', 'techwave-form-sync-for-zoho' ) . '</p>';
                 $content .= '<p>' . esc_html__( 'If a delivery to Zoho fails for a temporary reason, the submission is retried in the background. The values needed for that retry are stored on this site, in a WordPress transient, until the retry has run or the stored copy expires (at most two hours). Nothing is sent anywhere else while it waits.', 'techwave-form-sync-for-zoho' ) . '</p>';
                 wp_add_privacy_policy_content(
                         __( 'Techwave Form Sync for Zoho', 'techwave-form-sync-for-zoho' ),
+                        __( 'FormBridge for Zoho', 'techwave-form-sync-for-zoho' ),
                         wp_kses_post( $content )
                 );
 …
         public function register_exporter( $exporters ) {
                 $exporters[ self::SLUG ] = array(
                         'exporter_friendly_name' => __( 'Techwave Form Sync for Zoho delivery logs', 'techwave-form-sync-for-zoho' ),
+                        'exporter_friendly_name' => __( 'FormBridge for Zoho delivery logs', 'techwave-form-sync-for-zoho' ),
                         'callback'               => array( $this, 'export' ),
                 );
 …
         public function register_eraser( $erasers ) {
                 $erasers[ self::SLUG ] = array(
                         'eraser_friendly_name' => __( 'Techwave Form Sync for Zoho delivery logs', 'techwave-form-sync-for-zoho' ),
+                        'eraser_friendly_name' => __( 'FormBridge for Zoho delivery logs', 'techwave-form-sync-for-zoho' ),
                         'callback'             => array( $this, 'erase' ),
                 );
 …
                         $items[] = array(
                                 'group_id'    => 'form2zoho-logs',
                                 'group_label' => __( 'Techwave Form Sync for Zoho delivery logs', 'techwave-form-sync-for-zoho' ),
+                                'group_label' => __( 'FormBridge for Zoho delivery logs', 'techwave-form-sync-for-zoho' ),
                                 'item_id'     => 'log-' . (int) $row['id'],
                                 'data'        => $data,

techwave-form-sync-for-zoho/trunk/includes/Queue/Dispatcher.php

-              r3649280
+              r3748247
         /**
+         * Whether a destination needs a connected Zoho account to deliver.
+         *
+         * Asked by the submission handlers, which have no registry of their own.
+         * An unknown id, or one registered without the method, is treated as
+         * needing an account — the answer every Zoho app gives.
+         *
+         * @param string $integration_id Integration id, e.g. "crm" or "webhook".
+         * @return bool
+         */
+        public function needs_connection( $integration_id ) {
+                $integration = $this->registry->get( (string) $integration_id );
+                if ( null === $integration || ! method_exists( $integration, 'needs_connection' ) ) {
+                        return true;
+                }
+                return (bool) $integration->needs_connection();
+        }
+        /**
          * Deliver a job to Zoho now.
+         *
 …
                                 'Unknown integration in queue.',
                                 array(
+                                        'status' => 'error',
+                                        'job'    => $job,
+                                        'status'      => 'error',
+                                        // Not $job itself: it carries the submitted values and the
+                                        // absolute path of every uploaded file, which every other
+                                        // log row here puts through loggable_values() first.
+                                        'feed_id'     => (string) ( $job['feed_id'] ?? '' ),
+                                        'form_values' => self::loggable_values( isset( $job['form_values'] ) && is_array( $job['form_values'] ) ? $job['form_values'] : array() ),
                                 ),
                                 (string) $job['integration'],
 …
                 $attempt     = isset( $job['attempt'] ) ? (int) $job['attempt'] : 1;
                 $feed_id     = (string) ( $job['feed_id'] ?? '' );
+                // The last point at which what leaves for Zoho can still be changed.
+                // Both filters run on a retry too — $job['attempt'] tells the calls
+                // apart — so a callback that has side effects should check it.
+                /**
+                 * Filter the submitted values a job is about to be sent with.
+                 *
+                 * Where a field transformation belongs (reformatting a date,
+                 * splitting a full name, looking a value up elsewhere): the mapping
+                 * resolves Zoho fields against these keys, so changing a value here
+                 * changes what lands on the record without touching the feed.
+                 *
+                 * @param array  $form_values Field id => submitted value.
+                 * @param array  $settings    Feed settings for this send.
+                 * @param string $integration Integration id (crm|books|desk|...).
+                 * @param array  $job         The whole job payload.
+                 */
+                $form_values = (array) apply_filters( 'form2zoho_job_form_values', $form_values, $settings, $integration->id(), $job );
+                /**
+                 * Filter a job's feed settings immediately before it is sent.
+                 *
+                 * Covers the target rather than the data: 'mapping', 'module',
+                 * 'connection_id', and any key an add-on put on the job through
+                 * form2zoho_build_job.
+                 *
+                 * @param array  $settings    Feed settings for this send.
+                 * @param array  $form_values Field id => submitted value.
+                 * @param string $integration Integration id (crm|books|desk|...).
+                 * @param array  $job         The whole job payload.
+                 */
+                $settings = (array) apply_filters( 'form2zoho_job_settings', $settings, $form_values, $integration->id(), $job );
+                // The uploaded files travel on the job, not in the values, so they are
+                // handed to the integration here rather than pretending to be a
+                // submitted field. Only an integration that knows about them looks.
+                if ( ! empty( $job['files'] ) && is_array( $job['files'] ) ) {
+                        $settings['files'] = $job['files'];
+                }
+                // Which feed and form this send belongs to. An integration that
+                // writes a log line of its own (Bigin's missing org lookup, a
+                // Campaigns list-add Zoho refused) needs them, or its row lands in
+                // the log belonging to no feed and no form.
+                $settings['feed_id'] = $feed_id;
+                $settings['form_id'] = (string) ( $job['form_id'] ?? '' );
                 $result = $integration->send( $settings, $form_values );
 …
+                        }
+                        if ( 'updated' === $action ) {
+                        // An integration may say what happened in its own words. Only a
+                        // destination that is not Zoho needs to: "Record created in Zoho"
+                        // is true of everything this plugin ships and of nothing an add-on
+                        // might reach over plain HTTP, and a log that says it anyway is a
+                        // log that cannot be trusted on the rows that matter.
+                        $own_message = isset( $result['message'] ) && is_string( $result['message'] )
+                                ? trim( $result['message'] )
+                                : '';
+                        if ( '' !== $own_message ) {
+                                $message = $own_message;
+                        } elseif ( 'updated' === $action ) {
                                 $message = '' !== $record_id
                                         /* translators: %s: Zoho record id. */
 …
                         // Marketing Automation pending-confirmation subscribe visible in
                         // the timeline instead of looking like an unexplained no-op.
+                        if ( '' !== $zoho_message && false === stripos( $zoho_message, 'success' ) ) {
+                        // Dropped only when Zoho says nothing beyond "it worked". Any
+                        // message holding the word was dropped before, which hid the one
+                        // that matters most: "A confirmation email is sent to the user.
+                        // User needs to confirm to successfully subscribe."
+                        if ( '' !== $zoho_message && ! preg_match( '/^(success|successful|successfully|ok|done)[.!]?$/i', trim( $zoho_message ) ) ) {
                                 $message .= ' ' . $zoho_message;
+                        }
 …
                                 $feed_id
                         );
+                        /**
+                         * Fires after Zoho accepted a submission.
+                         *
+                         * The counterpart to form2zoho_submission_failed. Note that a
+                         * 'suppressed' status is still a success as far as HTTP went —
+                         * Zoho took the request but did not add the contact, because
+                         * its own suppression list said not to — so a callback that
+                         * only cares about records that really exist should check
+                         * $status rather than assume one was created.
+                         *
+                         * @param array  $job       The job payload.
+                         * @param string $record_id Zoho record id, empty when none came back.
+                         * @param string $status    'success' or 'suppressed'.
+                         * @param mixed  $result    Raw integration result.
+                         */
+                        do_action( 'form2zoho_submission_succeeded', $job, $record_id, $log_status, $result );
+                        self::drop_kept_files( $job );
                         return;
+                }
 …
                          */
                         do_action( 'form2zoho_submission_failed', $job, $raw_message );
+                        self::drop_kept_files( $job );
                         return;
+                }
 …
                 // still shows the attempt count it took.
                 $this->schedule( $job, $delay );
+        }
+        /**
+         * Copy a job's uploaded files somewhere they will still be at retry time.
+         *
+         * The first attempt runs inside the submission, while the form plugin's
+         * own copy exists. A retry runs later, and by then Contact Form 7 has
+         * deleted its temporary copy (it does so as the submission ends), so the
+         * retried record went out without its files. The copies live in a folder
+         * of their own under uploads, closed to the web, and are deleted by
+         * drop_kept_files() once the job is finished either way.
+         *
+         * @param array $job Job about to be scheduled for a retry.
+         * @return array The job, pointing at the copies.
+         */
+        private static function keep_files( array $job ) {
+                if ( ! empty( $job['kept_files_dir'] ) || empty( $job['files'] ) || ! is_array( $job['files'] ) ) {
+                        return $job;
+                }
+                $uploads = wp_get_upload_dir();
+                if ( ! empty( $uploads['error'] ) ) {
+                        return $job;
+                }
+                $root = trailingslashit( $uploads['basedir'] ) . 'form2zoho-retry';
+                $dir  = $root . '/' . wp_generate_password( 20, false );
+                if ( ! wp_mkdir_p( $dir ) ) {
+                        return $job;
+                }
+                // Nothing in here is meant to be fetched over the web.
+                if ( ! file_exists( $root . '/index.php' ) ) {
+                        file_put_contents( $root . '/index.php', "<?php\n// Silence is golden.\n" ); // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_file_put_contents
+                        file_put_contents( $root . '/.htaccess', "Deny from all\n" ); // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_file_put_contents
+                }
+                foreach ( $job['files'] as $field => $paths ) {
+                        $kept = array();
+                        foreach ( (array) $paths as $i => $path ) {
+                                $path   = (string) $path;
+                                $copy   = $dir . '/' . $i . '-' . sanitize_file_name( basename( $path ) );
+                                $kept[] = ( is_readable( $path ) && copy( $path, $copy ) ) ? $copy : $path;
+                        }
+                        $job['files'][ $field ] = $kept;
+                }
+                $job['kept_files_dir'] = $dir;
+                return $job;
+        }
+        /**
+         * Delete the copies keep_files() made, once the job is done.
+         *
+         * @param array $job The finished job.
+         * @return void
+         */
+        private static function drop_kept_files( array $job ) {
+                $dir = isset( $job['kept_files_dir'] ) ? (string) $job['kept_files_dir'] : '';
+                // Only ever a folder keep_files() made, never a path from elsewhere.
+                $uploads = wp_get_upload_dir();
+                $root    = trailingslashit( (string) $uploads['basedir'] ) . 'form2zoho-retry/';
+                if ( '' === $dir || 0 !== strpos( $dir, $root ) || ! is_dir( $dir ) ) {
+                        return;
+                }
+                foreach ( (array) glob( $dir . '/*' ) as $file ) {
+                        if ( is_file( $file ) ) {
+                                wp_delete_file( $file );
+                        }
+                }
+                rmdir( $dir ); // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_rmdir
+        }
 …
         private function schedule( array $job, $delay ) {
                 $when   = time() + max( 0, (int) $delay );
+                $job    = self::keep_files( $job );
                 $handle = $this->stash( $job );

techwave-form-sync-for-zoho/trunk/includes/Support/BaseSubmissionHandler.php

-              r3649280
+              r3748247
          * @return int Number of feeds delivered to.
          */
         protected function deliver_to_feeds( $form_name, array $values ) {
+        protected function deliver_to_feeds( $form_name, array $values, array $files = array() ) {
                 $form_name = (string) $form_name;
                 $queued    = 0;
 …
                         $connection_id  = isset( $feed['connection_id'] ) ? (string) $feed['connection_id'] : '';
+                        if ( '' === $integration_id || '' === $connection_id ) {
+                        // A destination that is only a URL has no account to select — the
+                        // editor hides the picker for it — so an empty connection is only
+                        // a mistake for a destination that needs one. Checking it for every
+                        // feed skipped each webhook feed with this error on every submission.
+                        if ( '' === $integration_id
+                                || ( '' === $connection_id && $this->dispatcher->needs_connection( $integration_id ) ) ) {
                                 $this->logger->error(
                                         __( 'Feed is enabled but has no Zoho app or connected account selected.', 'techwave-form-sync-for-zoho' ),
 …
                                         isset( $feed['id'] ) ? (string) $feed['id'] : ''
                                 );
+                                // A submission that reaches no destination has failed, so the
+                                // "email me when an integration fails" notice goes out for it
+                                // as it does for a delivery Zoho refused. Documented in
+                                // Queue\Dispatcher.
+                                do_action(
+                                        'form2zoho_submission_failed',
+                                        array(
+                                                'integration' => $integration_id,
+                                                'form_id'     => $form_name,
+                                                'feed_id'     => isset( $feed['id'] ) ? (string) $feed['id'] : '',
+                                        ),
+                                        __( 'Feed is enabled but has no Zoho app or connected account selected.', 'techwave-form-sync-for-zoho' )
+                                );
                                 continue;
+                        }
+                        $this->dispatcher->enqueue( FeedsRepository::build_job( $feed, $form_name, $values ) );
+                        /**
+                         * Filter whether one feed runs for this submission.
+                         *
+                         * The seam conditional logic hangs off. Returning false skips
+                         * the feed silently and writes no log row — the same outcome as
+                         * the feed never having matched the form, rather than a delivery
+                         * that failed. By this point the feed is already known to be
+                         * enabled and to name both an app and a connected account, so a
+                         * callback only has to decide on the submitted values.
+                         *
+                         * @param bool   $deliver   Whether to deliver. Default true.
+                         * @param array  $feed      The feed row.
+                         * @param array  $values    Field id => submitted value.
+                         * @param string $form_name Submitted form's name/title.
+                         */
+                        if ( ! apply_filters( 'form2zoho_should_deliver_feed', true, $feed, $values, $form_name ) ) {
+                                continue;
+                        }
+                        $this->dispatcher->enqueue( FeedsRepository::build_job( $feed, $form_name, $values, $files ) );
                         ++$queued;
+                }

techwave-form-sync-for-zoho/trunk/includes/Support/ContactForm7Forms.php

-              r3649280
+              r3748247
                                         'label' => self::humanize( $field_name ),
                                 );
+                                // An upload field, so the editor can offer it Zoho's file
+                                // fields rather than every text box in the module.
+                                if ( 'file' === $basetype ) {
+                                        $fields[ $field_name ]['file'] = true;
+                                }
+                        }

techwave-form-sync-for-zoho/trunk/includes/Support/DataCenters.php

-              r3649280
+              r3748247
                                 'label'      => 'United States (.com)',
                                 'accounts'   => 'https://accounts.zoho.com',
+                                'console'    => 'https://api-console.zoho.com',
                                 'crm'        => 'https://www.zohoapis.com',
                                 'books'      => 'https://www.zohoapis.com',
 …
                                 'label'      => 'Europe (.eu)',
                                 'accounts'   => 'https://accounts.zoho.eu',
+                                'console'    => 'https://api-console.zoho.eu',
                                 'crm'        => 'https://www.zohoapis.eu',
                                 'books'      => 'https://www.zohoapis.eu',
 …
                                 'label'      => 'India (.in)',
                                 'accounts'   => 'https://accounts.zoho.in',
+                                'console'    => 'https://api-console.zoho.in',
                                 'crm'        => 'https://www.zohoapis.in',
                                 'books'      => 'https://www.zohoapis.in',
 …
                                 'label'      => 'Australia (.com.au)',
                                 'accounts'   => 'https://accounts.zoho.com.au',
+                                'console'    => 'https://api-console.zoho.com.au',
                                 'crm'        => 'https://www.zohoapis.com.au',
                                 'books'      => 'https://www.zohoapis.com.au',
 …
                                 'label'      => 'Japan (.jp)',
                                 'accounts'   => 'https://accounts.zoho.jp',
+                                'console'    => 'https://api-console.zoho.jp',
                                 'crm'        => 'https://www.zohoapis.jp',
                                 'books'      => 'https://www.zohoapis.jp',
 …
                                 'label'      => 'Canada (.ca)',
                                 'accounts'   => 'https://accounts.zohocloud.ca',
+                                'console'    => 'https://api-console.zohocloud.ca',
                                 'crm'        => 'https://www.zohoapis.ca',
                                 'books'      => 'https://www.zohoapis.ca',
 …
                                 'label'      => 'Saudi Arabia (.sa)',
                                 'accounts'   => 'https://accounts.zoho.sa',
+                                'console'    => 'https://api-console.zoho.sa',
                                 'crm'        => 'https://www.zohoapis.sa',
                                 'books'      => 'https://www.zohoapis.sa',
 …
                                 'label'      => 'China (.com.cn)',
                                 'accounts'   => 'https://accounts.zoho.com.cn',
+                                'console'    => 'https://api-console.zoho.com.cn',
                                 'crm'        => 'https://www.zohoapis.com.cn',
                                 'books'      => 'https://www.zohoapis.com.cn',
 …
                 $key = is_string( $key ) ? strtolower( $key ) : '';
                 return isset( $all[ $key ] ) ? $all[ $key ] : $all['us'];
+        }
+        /**
+         * Where this region's Zoho API console lives.
+         *
+         * Written out per region rather than derived from the accounts host by
+         * swapping the subdomain. It happens to be that today, including Canada's
+         * odd zohocloud.ca, but a data centre that broke the pattern would break
+         * silently — and this URL is the one a person follows *before* they have
+         * a working connection, so a wrong one leaves them with nothing to try.
+         *
+         * @param string $key Region key (us, eu, in, ...).
+         * @return string
+         */
+        public static function console_url( $key ) {
+                $dc = self::get( $key );
+                return isset( $dc['console'] ) ? $dc['console'] : 'https://api-console.zoho.com';
+        }
+        /**
+         * Every region's console URL, keyed by region.
+         *
+         * For handing to the browser: the connection dialog's link has to follow
+         * the data centre picker without a round trip.
+         *
+         * @return array<string,string>
+         */
+        public static function console_urls() {
+                $out = array();
+                foreach ( self::all() as $key => $dc ) {
+                        $out[ $key ] = isset( $dc['console'] ) ? $dc['console'] : '';
+                }
+                return $out;
+        }
 …
                         case 'books':
+                                if ( '' === (string) $org_id ) {
+                                        return $host_set['books'] . '/app#/';
+                                }
+                                // No organisation in the path. This used to build
+                                // /app/{org}#/{module}/{id}, which loaded Zoho Books and then
+                                // sat on the dashboard instead of opening the record: the
+                                // server only routes /app, everything after the "#" is the web
+                                // app's own business, and an organisation segment in between
+                                // is not a route it knows.
+                                //
+                                // /app#/{module}/{id} is the shape Zoho's own documentation
+                                // builds for a Books contact link. The organisation comes from
+                                // the session rather than the URL, which is the one weakness of
+                                // it: somebody signed in to a different organisation lands on
+                                // that organisation's copy of the module. There is no
+                                // documented way to name the organisation in a web link, and a
+                                // guessed parameter that silently does nothing would be worse
+                                // than the limitation.
                                 $module = '' !== (string) $module ? strtolower( $module ) : 'contacts';
                                 return $host_set['books'] . '/app/' . rawurlencode( $org_id ) . '#/' . rawurlencode( $module ) . '/' . rawurlencode( $record_id );
+                                return $host_set['books'] . '/app#/' . rawurlencode( $module ) . '/' . rawurlencode( $record_id );
                         case 'desk':

techwave-form-sync-for-zoho/trunk/includes/Support/ElementorForms.php

-              r3649280
+              r3748247
                                                 'label' => $label,
                                         );
+                                        // An upload field, so the editor can offer it Zoho's file
+                                        // fields rather than every text box in the module.
+                                        if ( isset( $field['field_type'] ) && 'upload' === $field['field_type'] ) {
+                                                $forms[ $name ][ $id ]['file'] = true;
+                                        }
+                                }
+                        }

techwave-form-sync-for-zoho/trunk/includes/Support/Encryption.php

-              r3649280
+              r3748247
                         return new WP_Error(
                                 'form2zoho_no_openssl',
                                 __( 'This server cannot encrypt credentials: PHP\'s OpenSSL extension with AES-256-GCM support is unavailable. Ask your host to enable it — the plugin will not store a Zoho client secret or refresh token unencrypted.', 'techwave-form-sync-for-zoho' )
+                                __( 'This server cannot encrypt credentials: PHP\'s OpenSSL extension with AES-256-GCM support is unavailable. Ask your host to enable it. The plugin will not store a Zoho client secret or refresh token unencrypted.', 'techwave-form-sync-for-zoho' )
                         );
+                }
 …
                         return new WP_Error(
                                 'form2zoho_no_salt',
                                 __( 'This site has no AUTH_KEY defined in wp-config.php, so Zoho credentials cannot be encrypted safely. Add the WordPress security keys to wp-config.php and try again — the plugin will not store a client secret or refresh token that a copy of the database alone could decrypt.', 'techwave-form-sync-for-zoho' )
+                                __( 'This site has no AUTH_KEY defined in wp-config.php, so Zoho credentials cannot be encrypted safely. Add the WordPress security keys to wp-config.php and try again. The plugin will not store a client secret or refresh token that a copy of the database alone could decrypt.', 'techwave-form-sync-for-zoho' )
                         );
+                }

techwave-form-sync-for-zoho/trunk/includes/Support/ErrorTranslator.php

-              r3649280
+              r3748247
                 if ( '' === $raw ) {
                         return __( 'Record creation failed.', 'techwave-form-sync-for-zoho' );
+                }
+                // The request never reached Zoho at all.
+                $network = self::transport( $raw );
+                if ( '' !== $network ) {
+                        return $network;
+                }
 …
         /**
+         * Say what a request that never reached Zoho means, in words.
+         *
+         * WordPress hands back cURL's own text for these ("cURL error 28:
+         * Connection timed out after 10002 milliseconds"), which names neither
+         * Zoho nor what to do. None of them is about the feed: the request did not
+         * get as far as Zoho, so the fix is on this server's network, or simply
+         * trying again.
+         *
+         * The 10 seconds in that example is not the plugin's timeout. WordPress's
+         * HTTP library allows 10 seconds to open a connection whatever the overall
+         * timeout, so a server that cannot reach Zoho at all fails there.
+         *
+         * @param string $raw  Error text from wp_remote_request().
+         * @param string $host The host that could not be reached, when known.
+         * @param bool   $full Add what to do about it, for a screen with room.
+         * @return string Empty when this is not a connection failure.
+         */
+        public static function transport( $raw, $host = '', $full = false ) {
+                $raw  = (string) $raw;
+                $code = preg_match( '/cURL error (\d+)/i', $raw, $m ) ? (int) $m[1] : 0;
+                if ( 28 === $code || ( 0 === $code && false !== stripos( $raw, 'timed out' ) ) ) {
+                        $why = __( 'the connection timed out', 'techwave-form-sync-for-zoho' );
+                } elseif ( 6 === $code || ( 0 === $code && false !== stripos( $raw, 'getaddrinfo' ) ) ) {
+                        $why = __( 'this server could not look up its address', 'techwave-form-sync-for-zoho' );
+                } elseif ( 7 === $code || ( 0 === $code && false !== stripos( $raw, 'failed to connect' ) ) ) {
+                        $why = __( 'the connection was refused or blocked', 'techwave-form-sync-for-zoho' );
+                } elseif ( in_array( $code, array( 35, 51, 58, 60, 77 ), true ) ) {
+                        $why = __( 'the secure connection could not be set up', 'techwave-form-sync-for-zoho' );
+                } elseif ( $code > 0 ) {
+                        $why = __( 'the connection failed', 'techwave-form-sync-for-zoho' );
+                } else {
+                        return '';
+                }
+                $message = '' !== $host
+                        /* translators: 1: host name, e.g. www.zohoapis.com. 2: what went wrong, e.g. "the connection timed out". */
+                        ? sprintf( __( 'Could not reach Zoho (%1$s): %2$s.', 'techwave-form-sync-for-zoho' ), $host, $why )
+                        /* translators: %s: what went wrong, e.g. "the connection timed out". */
+                        : sprintf( __( 'Could not reach Zoho: %s.', 'techwave-form-sync-for-zoho' ), $why );
+                if ( ! $full ) {
+                        return $message;
+                }
+                $message .= ' ' . __( 'This is a network problem between this website and Zoho, not a problem with the feed. Try again in a moment. If it keeps happening, ask your hosting provider to allow outgoing HTTPS connections to Zoho.', 'techwave-form-sync-for-zoho' );
+                if ( $code > 0 ) {
+                        /* translators: %d: cURL error number, to pass on to the hosting provider. */
+                        $message .= ' ' . sprintf( __( '(cURL error %d)', 'techwave-form-sync-for-zoho' ), $code );
+                }
+                return $message;
+        }
+        /**
          * Pull a Zoho field's API name out of the parenthesised part of an error
          * string (e.g. "...(/lastName missing)" or "(Last_Name)") and turn it

techwave-form-sync-for-zoho/trunk/includes/Support/FieldMapper.php

-              r3649280
+              r3748247
                         $type  = isset( $row['type'] ) ? $row['type'] : 'field';
                         $value = isset( $row['value'] ) ? $row['value'] : '';
+                        if ( 'static' === $type ) {
+                        $ztype = isset( $row['zoho_type'] ) ? (string) $row['zoho_type'] : '';
+                        if ( self::TYPE_TEMPLATE === $type ) {
+                                $resolved = self::render( (string) $value, $form_values );
+                        } elseif ( 'static' === $type ) {
                                 $resolved = (string) $value;
                         } else {
 …
+                        }
+                        // Multi-select first, because it is the one target that wants the
+                        // list kept as a list. Everything below flattens to a string.
+                        if ( self::TYPE_MULTISELECT === $ztype ) {
+                                $list = self::to_list( $resolved );
+                                if ( array() === $list ) {
+                                        continue;
+                                }
+                                self::assign( $record, $zoho_field, $list );
+                                continue;
+                        }
                         if ( is_array( $resolved ) ) {
                                 $resolved = implode( ', ', array_map( 'strval', $resolved ) );
 …
+                        }
+                        // Support nested targets written with dot notation, e.g.
+                        // "contact.lastName" => array( 'contact' => array( 'lastName' => ... ) ).
+                        if ( false !== strpos( $zoho_field, '.' ) ) {
+                                self::set_nested( $record, explode( '.', $zoho_field ), $resolved );
+                        } else {
+                                $record[ $zoho_field ] = $resolved;
+                        }
+                        // A checkbox reaches here as whatever its form plugin calls "on",
+                        // which is not the same word twice: "1", "yes", "on", "selected",
+                        // "true", or the checkbox's own label. Zoho wants a JSON boolean
+                        // and rejects the record outright for anything else, so the answer
+                        // is decided here rather than hoped for.
+                        if ( self::TYPE_BOOLEAN === $ztype ) {
+                                self::assign( $record, $zoho_field, self::to_bool( $resolved ) );
+                                continue;
+                        }
+                        self::assign( $record, $zoho_field, $resolved );
+                }
                 return $record;
+        }
+        /**
+         * Zoho field types this class treats as something other than text.
+         *
+         * Kept as constants and behind handles_type() so the editor stores a type
+         * on a mapping row only when storing it changes what gets sent. Every
+         * other type is text as far as delivery is concerned, and recording it
+         * would be noise in the saved feed.
+         */
+        private const TYPE_BOOLEAN     = 'boolean';
+        private const TYPE_MULTISELECT = 'multiselectpicklist';
+        /**
+         * The row kind that builds its value out of several form fields.
+         *
+         * Stored in the same slot as 'field' and 'static', because it is the third
+         * answer to the same question: where does this Zoho field's value come
+         * from.
+         */
+        public const TYPE_TEMPLATE = 'template';
+        /**
+         * Fill {field_id} placeholders from a submission.
+         *
+         * One Zoho field often wants several answers at once — a full name out of
+         * two boxes, an address out of five, a description that quotes the
+         * enquiry. A row could previously send one field or one fixed string, so
+         * the only way to do that was to give up and send the fields separately.
+         *
+         * Braces rather than a "join these fields with a separator" control,
+         * because the separator is rarely the whole of it: "{first} {last}" and
+         * "Ref {order} for {email}" are the same feature, and only one of them is
+         * expressible as a join.
+         *
+         * A placeholder naming a field the submission did not include becomes
+         * empty rather than being left on screen as a literal "{whatever}" — an
+         * unanswered optional question should leave a gap, not put braces in
+         * somebody's CRM.
+         *
+         * @param string              $template    Text with {field_id} placeholders.
+         * @param array<string,mixed> $form_values Submitted values.
+         * @return string
+         */
+        private static function render( $template, array $form_values ) {
+                return (string) preg_replace_callback(
+                        // Doubled braces first, so a template that genuinely needs one can
+                        // say so: "{{" is a literal "{". Without it there is no way to put
+                        // a brace in a Zoho field through this box at all.
+                        '/\{\{|\}\}|\{([^{}]+)\}/',
+                        static function ( $m ) use ( $form_values ) {
+                                if ( '{{' === $m[0] ) {
+                                        return '{';
+                                }
+                                if ( '}}' === $m[0] ) {
+                                        return '}';
+                                }
+                                $key = trim( $m[1] );
+                                if ( ! isset( $form_values[ $key ] ) ) {
+                                        return '';
+                                }
+                                $value = $form_values[ $key ];
+                                if ( is_array( $value ) ) {
+                                        return implode( ', ', array_map( 'strval', $value ) );
+                                }
+                                return is_scalar( $value ) ? (string) $value : '';
+                        },
+                        $template
+                );
+        }
+        /**
+         * Whether a Zoho field type changes how a value is sent.
+         *
+         * @param string $ztype Zoho data_type, lower-cased.
+         * @return bool
+         */
+        public static function handles_type( $ztype ) {
+                return in_array( (string) $ztype, array( self::TYPE_BOOLEAN, self::TYPE_MULTISELECT ), true );
+        }
+        /**
+         * Put one value in the record, honouring dot-notation targets.
+         *
+         * Support nested targets written with dot notation, e.g.
+         * "contact.lastName" => array( 'contact' => array( 'lastName' => ... ) ).
+         *
+         * @param array  $record     Record being built (by reference).
+         * @param string $zoho_field Target field, possibly dotted.
+         * @param mixed  $value      Value to set.
+         * @return void
+         */
+        private static function assign( array &$record, $zoho_field, $value ) {
+                if ( false !== strpos( $zoho_field, '.' ) ) {
+                        self::set_nested( $record, explode( '.', $zoho_field ), $value );
+                        return;
+                }
+                $record[ $zoho_field ] = $value;
+        }
+        /**
+         * Read a submitted value as a yes/no.
+         *
+         * Only the negatives are listed. A checkbox that was not ticked usually
+         * submits nothing at all and never reaches here, so the values that do
+         * arrive are overwhelmingly some spelling of "on" — including the
+         * checkbox's own label, which no list could ever anticipate. Naming the
+         * false side and treating the rest as true is therefore the rule that
+         * needs no maintenance, and it fails safe: an unrecognised value becomes
+         * a ticked box rather than a rejected record.
+         *
+         * @param string $value Trimmed, non-empty submitted value.
+         * @return bool
+         */
+        private static function to_bool( $value ) {
+                $no = array( '0', 'false', 'no', 'n', 'off', 'unchecked', 'unselected', 'none', 'null' );
+                return ! in_array( strtolower( trim( (string) $value ) ), $no, true );
+        }
+        /**
+         * Read a submitted value as a list of choices.
+         *
+         * Form plugins disagree about multi-value fields: some hand over a real
+         * array, some a comma-separated string, some a single string. Zoho wants
+         * a JSON array either way, so all three are normalised to one here rather
+         * than each form adapter being trusted to have done it.
+         *
+         * Splitting a string on commas is the one lossy step — a choice whose own
+         * label contains a comma comes apart. That is accepted knowingly: an array
+         * from the form plugin is never split, so this only ever applies to
+         * plugins that already flattened the list and lost the boundary
+         * themselves.
+         *
+         * @param mixed $value Raw submitted value.
+         * @return array<int,string> Trimmed, non-empty choices.
+         */
+        private static function to_list( $value ) {
+                $parts = is_array( $value ) ? $value : explode( ',', (string) $value );
+                $out = array();
+                foreach ( $parts as $part ) {
+                        if ( is_array( $part ) || is_object( $part ) ) {
+                                continue;
+                        }
+                        $part = trim( (string) $part );
+                        if ( '' !== $part ) {
+                                $out[] = $part;
+                        }
+                }
+                return array_values( array_unique( $out ) );
+        }

techwave-form-sync-for-zoho/trunk/includes/Support/FluentFormsForms.php

-              r3649280
+              r3748247
                                         'label' => $label,
                                 );
+                                // An upload field, so the editor can offer it Zoho's file
+                                // fields rather than every text box in the module.
+                                if ( in_array( $element, array( 'input_file', 'input_image' ), true ) ) {
+                                        $fields[ $name ]['file'] = true;
+                                }
+                        }

techwave-form-sync-for-zoho/trunk/includes/Support/FormSources.php

-              r3649280
+              r3748247
          * Source key => [label, discovery class, tile initials, tile colour].
+         *
+         * @return array<string,array{label:string,class:class-string,initials:string,color:string}>
+         * A row carries `class` unless it is `locked`, in which case there is no
+         * discovery class to name — the add-on that would supply one is not
+         * installed, which is the whole reason the row is locked.
+         *
+         * @return array<string,array{label:string,class?:class-string,initials:string,color:string,locked?:bool}>
          */
         private static function map() {
                 return array(
                         'elementor'  => array(
+                $map = array(
+                        'elementor'        => array(
                                 'label'    => __( 'Elementor Pro Forms', 'techwave-form-sync-for-zoho' ),
                                 'class'    => ElementorForms::class,
 …
                                 'color'    => '#92003b',
                         ),
                         'cf7'        => array(
+                        'cf7'              => array(
                                 'label'    => __( 'Contact Form 7', 'techwave-form-sync-for-zoho' ),
                                 'class'    => ContactForm7Forms::class,
 …
                                 'color'    => '#1e3a5f',
                         ),
                         'wpforms'    => array(
+                        'wpforms'          => array(
                                 'label'    => __( 'WPForms', 'techwave-form-sync-for-zoho' ),
                                 'class'    => WPFormsForms::class,
 …
                                 'color'    => '#e27730',
                         ),
                         'fluent'     => array(
+                        'fluent'           => array(
                                 'label'    => __( 'Fluent Forms', 'techwave-form-sync-for-zoho' ),
                                 'class'    => FluentFormsForms::class,
 …
                                 'color'    => '#0967d2',
                         ),
                         'forminator' => array(
+                        'forminator'       => array(
                                 'label'    => __( 'Forminator', 'techwave-form-sync-for-zoho' ),
                                 'class'    => ForminatorForms::class,
 …
                                 'color'    => '#0f2540',
                         ),
                         'ninja'      => array(
+                        'ninja'            => array(
                                 'label'    => __( 'Ninja Forms', 'techwave-form-sync-for-zoho' ),
                                 'class'    => NinjaFormsForms::class,
 …
                                 'color'    => '#e0332f',
                         ),
                         'gravity'    => array(
+                        'gravity'          => array(
                                 'label'    => __( 'Gravity Forms', 'techwave-form-sync-for-zoho' ),
                                 'class'    => GravityFormsForms::class,
 …
                                 'color'    => '#f15a29',
                         ),
                         'formidable' => array(
+                        'formidable'       => array(
                                 'label'    => __( 'Formidable Forms', 'techwave-form-sync-for-zoho' ),
                                 'class'    => FormidableFormsForms::class,
 …
                                 'color'    => '#4a4a4a',
                         ),
                         'happyforms' => array(
+                        'happyforms'       => array(
                                 'label'    => __( 'Happy Forms', 'techwave-form-sync-for-zoho' ),
                                 'class'    => HappyFormsForms::class,
 …
                                 'color'    => '#222222',
                         ),
                         'sureforms'  => array(
+                        'sureforms'        => array(
                                 'label'    => __( 'SureForms', 'techwave-form-sync-for-zoho' ),
                                 'class'    => SureFormsForms::class,
 …
                                 'color'    => '#0a4dd6',
                         ),
+                        /*
+                         * Sources this plugin advertises but does not provide.
+                         *
+                         * None of these carry a `class`, because there is nothing to read a
+                         * WooCommerce customer or a LearnDash learner with until the Pro
+                         * add-on is installed; `locked` is what tells the picker to draw the
+                         * tile disabled with a Pro badge instead of hiding it. Showing them
+                         * greyed out is the honest answer to "does this work with
+                         * WooCommerce?" — leaving them out entirely answers "no" to a
+                         * question whose answer is "yes, with the add-on".
+                         *
+                         * The Pro plugin replaces each of these rows through
+                         * form2zoho_form_sources with one that carries a real class and no
+                         * lock, so a tile becomes ordinary the moment it is installed. The
+                         * key, label, initials and colour here are copied from the Pro
+                         * source's registry_row() so that swap is invisible: the tile keeps
+                         * its place in this list and its appearance, and only stops being
+                         * disabled.
+                         */
+                        // Divi's forms come first, beside the form plugins above, because
+                        // that is what they are: a form somebody fills in. They are listed
+                        // in FORM_KEYS for the same reason.
+                        'divi'             => array(
+                                'label'    => __( 'Divi Contact Form', 'techwave-form-sync-for-zoho' ),
+                                'initials' => 'DV',
+                                'color'    => '#8f42ec',
+                                'locked'   => true,
+                        ),
+                        'divi_fb'          => array(
+                                'label'    => __( 'Divi Form Builder', 'techwave-form-sync-for-zoho' ),
+                                'initials' => 'DF',
+                                'color'    => '#6c2eb9',
+                                'locked'   => true,
+                        ),
+                        'woocommerce'      => array(
+                                'label'    => __( 'WooCommerce Customer', 'techwave-form-sync-for-zoho' ),
+                                'initials' => 'WC',
+                                'color'    => '#7f54b3',
+                                'locked'   => true,
+                        ),
+                        'memberpress'      => array(
+                                'label'    => __( 'MemberPress Member', 'techwave-form-sync-for-zoho' ),
+                                'initials' => 'MP',
+                                'color'    => '#0073aa',
+                                'locked'   => true,
+                        ),
+                        'learndash'        => array(
+                                'label'    => __( 'LearnDash Learner', 'techwave-form-sync-for-zoho' ),
+                                'initials' => 'LD',
+                                'color'    => '#0b5e8a',
+                                'locked'   => true,
+                        ),
+                        'tutorlms'         => array(
+                                'label'    => __( 'Tutor LMS Student', 'techwave-form-sync-for-zoho' ),
+                                'initials' => 'TL',
+                                'color'    => '#1f5eff',
+                                'locked'   => true,
+                        ),
+                        'givewp'           => array(
+                                'label'    => __( 'GiveWP Donor', 'techwave-form-sync-for-zoho' ),
+                                'initials' => 'GW',
+                                'color'    => '#69b868',
+                                'locked'   => true,
+                        ),
+                        'edd'              => array(
+                                'label'    => __( 'EDD Customer', 'techwave-form-sync-for-zoho' ),
+                                'initials' => 'ED',
+                                'color'    => '#35495c',
+                                'locked'   => true,
+                        ),
+                        'amelia'           => array(
+                                'label'    => __( 'Amelia Customer', 'techwave-form-sync-for-zoho' ),
+                                'initials' => 'AM',
+                                'color'    => '#1a84ee',
+                                'locked'   => true,
+                        ),
+                        'dokan'            => array(
+                                'label'    => __( 'Dokan Vendor', 'techwave-form-sync-for-zoho' ),
+                                'initials' => 'DK',
+                                'color'    => '#f05025',
+                                'locked'   => true,
+                        ),
+                        'wpjm'             => array(
+                                'label'    => __( 'WP Job Manager', 'techwave-form-sync-for-zoho' ),
+                                'initials' => 'JM',
+                                'color'    => '#2d4b6e',
+                                'locked'   => true,
+                        ),
+                        'eventtickets'     => array(
+                                'label'    => __( 'The Events Calendar', 'techwave-form-sync-for-zoho' ),
+                                'initials' => 'EV',
+                                'color'    => '#334aff',
+                                'locked'   => true,
+                        ),
+                        'latepoint'        => array(
+                                'label'    => __( 'LatePoint Customer', 'techwave-form-sync-for-zoho' ),
+                                'initials' => 'LP',
+                                'color'    => '#4a5cf5',
+                                'locked'   => true,
+                        ),
+                        'bookly'           => array(
+                                'label'    => __( 'Bookly Customer', 'techwave-form-sync-for-zoho' ),
+                                'initials' => 'BK',
+                                'color'    => '#2a7de1',
+                                'locked'   => true,
+                        ),
+                        'ssa'              => array(
+                                'label'    => __( 'Simply Schedule Appointment', 'techwave-form-sync-for-zoho' ),
+                                'initials' => 'SS',
+                                'color'    => '#3f6ad8',
+                                'locked'   => true,
+                        ),
+                        'fluentbooking'    => array(
+                                'label'    => __( 'FluentBooking', 'techwave-form-sync-for-zoho' ),
+                                'initials' => 'FB',
+                                'color'    => '#2c5cff',
+                                'locked'   => true,
+                        ),
+                        'wpbc'             => array(
+                                'label'    => __( 'Booking Calendar', 'techwave-form-sync-for-zoho' ),
+                                'initials' => 'BC',
+                                'color'    => '#4c9a2a',
+                                'locked'   => true,
+                        ),
+                        'easyappointments' => array(
+                                'label'    => __( 'Easy Appointments Booking', 'techwave-form-sync-for-zoho' ),
+                                'initials' => 'EA',
+                                'color'    => '#2b7cb8',
+                                'locked'   => true,
+                        ),
+                        'wcbookings'       => array(
+                                'label'    => __( 'WooCommerce Booking', 'techwave-form-sync-for-zoho' ),
+                                'initials' => 'WB',
+                                'color'    => '#5c3d8f',
+                                'locked'   => true,
+                        ),
+                        // The one locked row that is not another plugin. An action hook
+                        // needs nothing installed — it is a line of code on this site — so
+                        // unlike the rows above, this tile is never unavailable for want
+                        // of some other product. It is here for the same reason they are:
+                        // leaving it out answers "no" to "can this take records from
+                        // something that is not a form on this site?", and the answer is
+                        // "yes, with the add-on".
+                        'action_hook'      => array(
+                                'label'    => __( 'Action Hook', 'techwave-form-sync-for-zoho' ),
+                                'initials' => 'fn',
+                                'color'    => '#334155',
+                                'locked'   => true,
+                        ),
                 );
+                /**
+                 * Filter the registry of supported form plugins.
+                 *
+                 * How an add-on teaches this plugin to read a form plugin it does
+                 * not ship support for. Rows are keyed by the short source key that
+                 * every feed stores, and each one needs:
+                 *
+                 *   label    Translated name of the form plugin.
+                 *   class    Discovery class carrying two public static methods —
+                 *            is_available() : bool, and all( $fresh ) : array of
+                 *            array{name:string,fields:array<array{id,label}>}.
+                 *            See HappyFormsForms for the smallest example.
+                 *   initials Two or three characters for the picker tile.
+                 *   color    Hex background for that tile.
+                 *
+                 * A row missing any of those, or naming a class that cannot answer
+                 * is_available()/all(), is dropped instead of being allowed to fatal
+                 * partway through a visitor's form submission.
+                 *
+                 * @param array $map Source key => row.
+                 */
+                $filtered = apply_filters( 'form2zoho_form_sources', $map );
+                if ( ! is_array( $filtered ) ) {
+                        return $map;
+                }
+                $out = array();
+                foreach ( $filtered as $key => $row ) {
+                        $key = sanitize_key( $key );
+                        if ( '' === $key || ! is_array( $row ) ) {
+                                continue;
+                        }
+                        // A row that came back exactly as this class declared it is not
+                        // re-checked. The check below asks class_exists(), which
+                        // autoloads the class it names, and running that over all ten
+                        // built-ins would load every discovery class on every call to
+                        // keys()/labels()/label() — including during a visitor's form
+                        // submission — to re-confirm what this file already states. With
+                        // no filter registered $filtered is $map, so every row takes
+                        // this path and nothing is loaded.
+                        if ( isset( $map[ $key ] ) && $row === $map[ $key ] ) {
+                                $out[ $key ] = $row;
+                                continue;
+                        }
+                        if ( ! isset( $row['label'], $row['initials'], $row['color'] ) ) {
+                                continue;
+                        }
+                        // A locked row is an advertisement, not a source: it names no
+                        // class because the code that would read it is not installed. It
+                        // is never asked to discover anything (see is_available() and
+                        // discover()), so it is the one row allowed to arrive without one.
+                        $locked = ! empty( $row['locked'] );
+                        if ( ! $locked ) {
+                                if ( ! isset( $row['class'] ) || ! is_string( $row['class'] ) || ! class_exists( $row['class'] )
+                                        || ! method_exists( $row['class'], 'is_available' )
+                                        || ! method_exists( $row['class'], 'all' ) ) {
+                                        continue;
+                                }
+                        }
+                        $out[ $key ] = array(
+                                'label'    => (string) $row['label'],
+                                'initials' => (string) $row['initials'],
+                                'color'    => (string) $row['color'],
+                        );
+                        if ( $locked ) {
+                                $out[ $key ]['locked'] = true;
+                        } else {
+                                $out[ $key ]['class'] = $row['class'];
+                        }
+                }
+                // tile_for() and label() fall back to the 'elementor' row whenever a
+                // feed names a source key that no longer exists, so that one row has
+                // to survive whatever a filter did — including dropping it.
+                if ( ! isset( $out['elementor'] ) ) {
+                        $out = array( 'elementor' => $map['elementor'] ) + $out;
+                }
+                return $out;
+        }
+        /**
+         * The sources that are form plugins: what a feed listens to there is a
+         * form somebody fills in. Every other source, this plugin's or an
+         * add-on's, is something that happens on the site — an order, a booking,
+         * a sign-up — and the editor words its picker as an event.
+         */
+        private const FORM_KEYS = array( 'elementor', 'cf7', 'wpforms', 'fluent', 'forminator', 'ninja', 'gravity', 'formidable', 'happyforms', 'sureforms', 'divi', 'divi_fb' );
+        /**
+         * The keys of the sources that are form plugins.
+         *
+         * @return array<int,string>
+         */
+        public static function form_keys() {
+                return self::FORM_KEYS;
+        }
+        /**
+         * Whether a source is a form plugin rather than an event on the site.
+         *
+         * @param string $key Source key.
+         * @return bool
+         */
+        public static function is_form( $key ) {
+                return in_array( (string) $key, self::FORM_KEYS, true );
+        }
 …
                         'initials' => $row['initials'],
                         'color'    => $row['color'],
                         'icon'     => self::icon_url( $row ),
+                        'icon'     => self::icon_url( isset( $map[ $key ] ) ? $key : 'elementor', $row ),
                 );
+        }
 …
          * Everything the icon-tile picker UI needs, in display order.
+         *
+         * @return array<int,array{key:string,label:string,initials:string,color:string,icon:string}>
+         * `locked` marks a source the picker should draw disabled with a Pro
+         * badge: it is advertised, but nothing installed can read it.
+         *
+         * @return array<int,array{key:string,label:string,initials:string,color:string,icon:string,locked:bool}>
          */
         public static function tiles() {
 …
                                 'initials' => $row['initials'],
                                 'color'    => $row['color'],
+                                'icon'     => self::icon_url( $row ),
+                                'icon'     => self::icon_url( $key, $row ),
+                                'locked'   => ! empty( $row['locked'] ),
                         );
+                }
 …
+        }
+        /**
+         * URL for a tile's logo image.
+         *
+         * Always empty: the plugin deliberately ships no third-party product
+         * logos, since those are trademarks rather than GPL-compatible assets.
+         * Every tile therefore renders as its coloured initials square. Kept as
+         * a seam so a site can supply its own artwork through the filter below
+         * without the tile markup having to change.
+         *
+         * @param array $row One map() row.
+        /** Where a source's logo lives, relative to the plugin root. */
+        private const ICON_DIR = 'assets/images/triggers/';
+        /**
+         * URL for a tile's logo image, or '' to fall back to coloured initials.
+         *
+         * A logo is used when `assets/images/triggers/<key>.webp` is present, so a
+         * source without artwork keeps rendering as its initials square rather than
+         * as a broken image — which is what the WooCommerce tile does today, and
+         * what any source added by an add-on will do.
+         *
+         * NOTE ON TRADEMARKS: most of these are other companies' logos. They are
+         * their marks, not GPL assets, and shipping them is a decision about
+         * permission rather than about code — nominative use to identify which
+         * product a tile selects is the usual basis for it. The exception is
+         * action_hook.webp, which names no product and belongs to this plugin.
+         * Anything added to that directory should be checked against the same
+         * question first.
+         *
+         * @param string $key Source key. Already through sanitize_key() in map(),
+         *                    so it cannot walk out of the directory.
+         * @param array  $row One map() row.
          * @return string
          */
+        private static function icon_url( array $row ) {
+        private static function icon_url( $key, array $row ) {
+                $url = self::has_icon( $key ) ? FORM2ZOHO_URL . self::ICON_DIR . $key . '.webp' : '';
                 /**
                  * Filter the logo URL used for one form-source tile.
+                 *
+                 * @param string $url URL to the tile image. Empty renders initials.
+                 * Returning '' renders the coloured initials instead.
+                 *
+                 * @param string $url URL to the tile image.
                  * @param array  $row The source's map() row.
                  */
+                return (string) apply_filters( 'form2zoho_form_source_icon', '', $row );
+                return (string) apply_filters( 'form2zoho_form_source_icon', $url, $row );
+        }
+        /**
+         * Whether a logo file is shipped for this source.
+         *
+         * Memoised per key: tile_for() is called once per row on the feeds list, so
+         * a site with twenty feeds would otherwise stat the same handful of files
+         * twenty times over to answer a question whose answer cannot change within
+         * one request.
+         *
+         * @param string $key Source key.
+         * @return bool
+         */
+        private static function has_icon( $key ) {
+                static $cache = array();
+                if ( ! isset( $cache[ $key ] ) ) {
+                        $cache[ $key ] = is_readable( FORM2ZOHO_PATH . self::ICON_DIR . $key . '.webp' );
+                }
+                return $cache[ $key ];
+        }
 …
         /**
+         * Whether this source needs an add-on that is not installed.
+         *
+         * The picker draws these disabled, and a feed may not be saved against
+         * one — nothing on the site can read the submissions it would describe.
+         *
+         * @param string $key Source key.
+         * @return bool
+         */
+        public static function is_locked( $key ) {
+                $map = self::map();
+                return ! empty( $map[ $key ]['locked'] );
+        }
+        /**
          * Whether the form plugin behind a source key is actually active.
+         *
 …
                         return false;
+                }
+                if ( empty( $map[ $key ]['class'] ) ) {
+                        return false;
+                }
                 $class = $map[ $key ]['class'];
                 return $class::is_available();
 …
                         return array();
+                }
+                if ( empty( $map[ $key ]['class'] ) ) {
+                        return array();
+                }
                 $class = $map[ $key ]['class'];
                 return $class::all( $fresh );

techwave-form-sync-for-zoho/trunk/includes/Support/FormidableFormsForms.php

-              r3649280
+              r3748247
                                 );
                                 $prev_field_id       = $field_id;
+                                // An upload field, so the editor can offer it Zoho's file
+                                // fields rather than every text box in the module.
+                                if ( 'file' === $type ) {
+                                        $fields[ $field_id ]['file'] = true;
+                                }
+                        }

techwave-form-sync-for-zoho/trunk/includes/Support/ForminatorForms.php

-              r3649280
+              r3748247
                 try {
+                        $forms = \Forminator_API::get_forms();
+                        // Every form: without a page size Forminator returns ten, and a
+                        // form past the tenth was missing from the feed editor's list.
+                        $forms = \Forminator_API::get_forms( null, 1, -1 );
                         foreach ( (array) $forms as $form ) {
 …
                                                 'label' => '' !== $label ? $label : $slug,
                                         );
+                                        // An upload field, so the editor can offer it Zoho's file
+                                        // fields rather than every text box in the module.
+                                        // Forminator names every upload field "upload-N".
+                                        if ( 0 === strpos( $slug, 'upload-' ) ) {
+                                                $fields[ $slug ]['file'] = true;
+                                        }
+                                }

techwave-form-sync-for-zoho/trunk/includes/Support/GravityFormsForms.php

-              r3649280
+              r3748247
                                                 $fields[ $input_id ] = array(
                                                         'id'    => $input_id,
                                                         'label' => ( isset( $field['label'] ) ? $field['label'] . ' — ' : '' ) . $sub_label,
+                                                        'label' => isset( $field['label'] ) ? $field['label'] . ' (' . $sub_label . ')' : $sub_label,
                                                 );
+                                        }
 …
                                         'label' => $label,
                                 );
+                                // An upload field, so the editor can offer it Zoho's file
+                                // fields rather than every text box in the module.
+                                if ( in_array( $type, array( 'fileupload', 'post_image' ), true ) ) {
+                                        $fields[ $id ]['file'] = true;
+                                }
+                        }

techwave-form-sync-for-zoho/trunk/includes/Support/HappyFormsForms.php

-              r3649280
+              r3748247
                                 'label' => $label,
                         );
+                        // An upload field, so the editor can offer it Zoho's file fields
+                        // rather than every text box in the module.
+                        if ( 'attachment' === $type ) {
+                                $fields[ $field_id ]['file'] = true;
+                        }
+                }

techwave-form-sync-for-zoho/trunk/includes/Support/Markup.php

-              r3649280
+              r3748247
         /**
+         * The masthead bar Branding::hero() builds: the lockup, plus the wrapper
+         * and the version beside it.
+         *
+         * @return array<string,array<string,bool>>
+         */
+        public static function hero() {
+                return array( 'div' => array( 'class' => true ) ) + self::hero_logo();
+        }
+        /**
+         * The masthead lockup Branding::hero_logo() builds: nested <span>s, the
+         * bolder half of the name, and the mark itself.
+         *
+         * Still narrower than svg() — <rect> and <path> are the only two shapes
+         * the mark is made of. What is new is that the shapes carry paint of
+         * their own: the mark used to be one colour handed down from the <svg>,
+         * and is now a full-colour logo, so `fill`, `stroke` and the stroke
+         * settings have to survive the filter. Without them wp_kses() strips
+         * every colour and the lockup renders as eight black boxes.
+         *
+         * @return array<string,array<string,bool>>
+         */
+        public static function hero_logo() {
+                $paint = array(
+                        'fill'            => true,
+                        'stroke'          => true,
+                        'stroke-width'    => true,
+                        'stroke-linecap'  => true,
+                        'stroke-linejoin' => true,
+                );
+                return array(
+                        'span'   => array( 'class' => true ),
+                        'strong' => array(),
+                        'img'    => array(
+                                'class'  => true,
+                                'src'    => true,
+                                'width'  => true,
+                                'height' => true,
+                                'alt'    => true,
+                        ),
+                        'svg'    => array(
+                                'class'       => true,
+                                'width'       => true,
+                                'height'      => true,
+                                'viewbox'     => true,
+                                'fill'        => true,
+                                'aria-hidden' => true,
+                                'focusable'   => true,
+                        ),
+                        'path'   => array( 'd' => true ) + $paint,
+                        'rect'   => array(
+                                'x'      => true,
+                                'y'      => true,
+                                'width'  => true,
+                                'height' => true,
+                                'rx'     => true,
+                        ) + $paint,
+                );
+        }
+        /**
          * A status pill: one <span> carrying its colour class.
+         *
 …
          * saved value once the dropdown has been filled from Zoho.
+         *
+         * The <div> is the empty box admin.js fills with a "Combine fields" row's
+         * field chips. Left off this list, kses removed it from every row and the
+         * chips had nowhere to go.
+         *
          * @return array<string,array<string,bool>>
          */
 …
                         'tr'     => array( 'class' => true ),
                         'td'     => array( 'class' => true ),
+                        'div'    => array(
+                                'class'  => true,
+                                'hidden' => true,
+                        ),
                         'select' => array(
                                 'name'          => true,
                                 'class'         => true,
                                 'data-selected' => true,
+                                // A mapping row disables whichever of Form field / Static
+                                // value does not apply to it; without this kses would strip
+                                // the attribute and both would arrive editable.
+                                'disabled'      => true,
                         ),
                         'option' => array(
 …
                                 'value'       => true,
                                 'placeholder' => true,
+                                'disabled'    => true,
                         ),
                         'button' => array(

techwave-form-sync-for-zoho/trunk/includes/Support/NinjaFormsForms.php

-              r3649280
+              r3748247
                                                 'label' => $label,
                                         );
+                                        // An upload field (the File Uploads add-on), so the editor
+                                        // can offer it Zoho's file fields.
+                                        if ( 'file_upload' === $type ) {
+                                                $fields[ $id ]['file'] = true;
+                                        }
+                                }

techwave-form-sync-for-zoho/trunk/includes/Support/Settings.php

-              r3649280
+              r3748247
                 // Logs screen's one-click Resubmit, and the Settings screen says so.
                 'form2zoho_store_form_values'        => '0',
+                'form2zoho_log_retention_enabled'    => '1',
+                // OFF by default: log entries stay until someone deletes them, by hand
+                // on the Logs tab or by turning this on. A site that has saved its
+                // settings keeps whatever it saved.
+                'form2zoho_log_retention_enabled'    => '0',
                 'form2zoho_email_notify_failures'    => '0',
                 'form2zoho_email_notify_connections' => '0',

techwave-form-sync-for-zoho/trunk/includes/Support/SureFormsForms.php

-              r3649280
+              r3748247
                                                 'label' => '' !== $label ? $label : ( 'Field ' . $field_id ),
                                         );
+                                        // An upload field, so the editor can offer it Zoho's file
+                                        // fields rather than every text box in the module.
+                                        if ( 'srfm/upload' === $name ) {
+                                                $fields[ $field_id ]['file'] = true;
+                                        }
+                                }
+                        }

techwave-form-sync-for-zoho/trunk/includes/Support/WPFormsForms.php

-              r3649280
+              r3748247
                                                 $fields[ $sub_id ] = array(
                                                         'id'    => $sub_id,
                                                         'label' => $label . ' — ' . ucfirst( $part ),
+                                                        'label' => $label . ' (' . ucfirst( $part ) . ')',
                                                 );
+                                        }
 …
                                         'label' => $label,
                                 );
+                                // An upload field, so the editor can offer it Zoho's file
+                                // fields rather than every text box in the module.
+                                if ( in_array( $type, array( 'file-upload', 'camera' ), true ) ) {
+                                        $fields[ $id ]['file'] = true;
+                                }
+                        }

techwave-form-sync-for-zoho/trunk/languages/techwave-form-sync-for-zoho.pot

-              r3649280
+              r3748247
 msgid ""
 msgstr ""
 "Project-Id-Version: Techwave Form Sync for Zoho 1.0.0\n"
+"Project-Id-Version: FormBridge for Zoho 1.1.0\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/techwave-form-sync-for-zoho\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 …
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "POT-Creation-Date: 2026-08-15T04:32:15+00:00\n"
+"POT-Creation-Date: 2026-09-22T06:33:18+00:00\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "X-Generator: WP-CLI 2.12.0\n"
 …
 #. Plugin Name of the plugin
 #: techwave-form-sync-for-zoho.php
+#: includes/Admin/FeedsPage.php:122
+#: includes/Admin/FeedsPage.php:384
+#: includes/Admin/FeedsPage.php:394
+#: includes/Admin/SettingsPage.php:178
+#: includes/Admin/FeedsPage.php:195
 #: includes/Privacy/PrivacyProvider.php:65
 msgid "Techwave Form Sync for Zoho"
+msgid "FormBridge for Zoho"
 msgstr ""
 #. Plugin URI of the plugin
+#: techwave-form-sync-for-zoho.php
+msgid "https://techwavesolutions.net/techwave-form-sync-for-zoho"
+msgstr ""
+#. Description of the plugin
+#: techwave-form-sync-for-zoho.php
+msgid "Send WordPress form submissions to Zoho CRM, Bigin, Books, Desk, Campaigns and Marketing Automation."
+msgstr ""
+#. Author of the plugin
+#: techwave-form-sync-for-zoho.php
+msgid "Techwave Solutions"
+msgstr ""
 #. Author URI of the plugin
 #: techwave-form-sync-for-zoho.php
 …
 msgstr ""
+#. Description of the plugin
+#: techwave-form-sync-for-zoho.php
+msgid "Send WordPress form submissions to Zoho CRM, Bigin, Books, Desk, Campaigns and Marketing Automation."
+msgstr ""
+#. Author of the plugin
+#: techwave-form-sync-for-zoho.php
+msgid "Techwave Solutions"
+msgstr ""
+#: includes/Admin/Ajax.php:138
+#: includes/Admin/Ajax.php:193
+#: includes/Admin/Ajax.php:210
+#: includes/Admin/Ajax.php:230
+#: includes/Admin/Ajax.php:254
+#: includes/Admin/Ajax.php:348
+#: includes/Admin/Ajax.php:378
+#: includes/Admin/Ajax.php:405
+#: includes/Admin/Ajax.php:488
+#: includes/Admin/Ajax.php:698
+#: includes/Admin/Ajax.php:820
+#: includes/Admin/Ajax.php:147
+#: includes/Admin/Ajax.php:206
+#: includes/Admin/Ajax.php:223
+#: includes/Admin/Ajax.php:258
+#: includes/Admin/Ajax.php:290
+#: includes/Admin/Ajax.php:314
+#: includes/Admin/Ajax.php:412
+#: includes/Admin/Ajax.php:442
+#: includes/Admin/Ajax.php:469
+#: includes/Admin/Ajax.php:552
+#: includes/Admin/Ajax.php:801
+#: includes/Admin/Ajax.php:835
+#: includes/Admin/Ajax.php:1041
 #: includes/Admin/DeactivationFeedback.php:226
+#: includes/Admin/FeedsPage.php:1196
+#: includes/Admin/FeedsPage.php:1433
+#: includes/Admin/FeedsPage.php:1507
+#: includes/Admin/SettingsPage.php:231
+#: includes/Admin/SettingsPage.php:1353
+#: includes/Admin/FeedsPage.php:2328
+#: includes/Admin/FeedsPage.php:2596
+#: includes/Admin/FeedsPage.php:2729
+#: includes/Admin/SettingsPage.php:261
+#: includes/Admin/SettingsPage.php:1279
+#: includes/Admin/SettingsPage.php:1699
 msgid "Permission denied."
 msgstr ""
 #: includes/Admin/Ajax.php:145
+#: includes/Admin/Ajax.php:154
 msgid "This site has no valid administration email address set, so there is nowhere to send notifications. Set one under Settings → General."
 msgstr ""
 #: includes/Admin/Ajax.php:154
 msgid "This is a test message from Techwave Form Sync for Zoho."
 msgstr ""
 #: includes/Admin/Ajax.php:156
+#: includes/Admin/Ajax.php:163
+msgid "This is a test message from FormBridge for Zoho."
+msgstr ""
+#: includes/Admin/Ajax.php:165
 msgid "If you are reading it, this site can send the notification emails the plugin offers under Settings → Notifications."
 msgstr ""
 #. translators: %s: site name.
+#: includes/Admin/Ajax.php:163
+#, php-format
+msgid "[%s] Techwave Form Sync test email"
+msgstr ""
+#: includes/Admin/Ajax.php:170
+msgid "This site could not send the email. WordPress refused to hand it to a mailer, which usually means no mail transport is configured — many hosts need an SMTP plugin such as WP Mail SMTP. Notification emails will not arrive until that is fixed."
+#: includes/Admin/Ajax.php:172
+#, php-format
+msgid "[%s] FormBridge test email"
+msgstr ""
+#. translators: %s: the mailer's own reason, e.g. "Could not instantiate mail function."
+#: includes/Admin/Ajax.php:181
+#, php-format
+msgid "This site could not send the email with the PHP mail function. Reason: %s Ask your hosting provider to enable PHP mail (sendmail) for this site. Notification emails will not arrive until that is fixed."
 msgstr ""
 #. translators: %s: administration email address.
 #: includes/Admin/Ajax.php:179
 #, php-format
 msgid "Test email sent to %s. Check that inbox — if it never arrives, the message left WordPress but was rejected or filtered further down the line."
 msgstr ""
 #: includes/Admin/Ajax.php:216
+#: includes/Admin/Ajax.php:192
+#, php-format
+msgid "Test email sent to %s with the PHP mail function. Check that inbox. If it never arrives, the message left this server but was rejected or filtered further down the line."
+msgstr ""
+#: includes/Admin/Ajax.php:229
 msgid "Missing feed id."
 msgstr ""
 #: includes/Admin/Ajax.php:237
 #: includes/Admin/Ajax.php:261
 #: includes/Admin/Ajax.php:495
+#: includes/Admin/Ajax.php:297
+#: includes/Admin/Ajax.php:321
+#: includes/Admin/Ajax.php:559
 msgid "Feed not found."
 msgstr ""
 #: includes/Admin/Ajax.php:265
+#: includes/Admin/Ajax.php:325
 msgid "(copy)"
 msgstr ""
 #: includes/Admin/Ajax.php:301
+#: includes/Admin/Ajax.php:365
 msgid "Not available for this Zoho app."
 msgstr ""
 #: includes/Admin/Ajax.php:387
 #: includes/Admin/Ajax.php:414
+#: includes/Admin/Ajax.php:451
+#: includes/Admin/Ajax.php:478
 msgid "No rows selected."
 msgstr ""
 #. translators: %d: log row id.
 #: includes/Admin/Ajax.php:441
+#: includes/Admin/Ajax.php:505
 #, php-format
 msgid "Row #%d: no submitted values were stored for this entry, so it cannot be resubmitted. Turn on \"Store submitted values in the log\" under Settings to make future entries resubmittable."
 …
 #. translators: %d: log row id.
 #: includes/Admin/Ajax.php:453
+#: includes/Admin/Ajax.php:517
 #, php-format
 msgid "Row #%d: its feed no longer exists, so it cannot be resubmitted."
 …
 #. translators: %d: log row id.
 #: includes/Admin/Ajax.php:462
+#: includes/Admin/Ajax.php:526
 #, php-format
 msgid "Row #%d: its feed is currently disabled."
 msgstr ""
+#: includes/Admin/Ajax.php:597
+#: includes/Admin/SettingsPage.php:129
+#: includes/Admin/SettingsPage.php:880
+#: includes/Auth/ConnectionManager.php:117
+#: includes/Admin/Ajax.php:570
+msgid "Zoho's own duplicate check"
+msgstr ""
+#: includes/Admin/Ajax.php:665
+#: includes/Admin/SettingsPage.php:142
+#: includes/Admin/SettingsPage.php:1054
+#: includes/Auth/ConnectionManager.php:201
 #: includes/Integrations/CrmIntegration.php:35
 msgid "Zoho CRM"
 msgstr ""
 #: includes/Admin/Ajax.php:598
 #: includes/Admin/SettingsPage.php:130
 #: includes/Admin/SettingsPage.php:881
 #: includes/Auth/ConnectionManager.php:118
+#: includes/Admin/Ajax.php:666
+#: includes/Admin/SettingsPage.php:143
+#: includes/Admin/SettingsPage.php:1055
+#: includes/Auth/ConnectionManager.php:202
 #: includes/Integrations/BooksIntegration.php:35
 msgid "Zoho Books"
 msgstr ""
 #: includes/Admin/Ajax.php:599
 #: includes/Admin/SettingsPage.php:131
 #: includes/Admin/SettingsPage.php:882
 #: includes/Auth/ConnectionManager.php:119
+#: includes/Admin/Ajax.php:667
+#: includes/Admin/SettingsPage.php:144
+#: includes/Admin/SettingsPage.php:1056
+#: includes/Auth/ConnectionManager.php:203
 #: includes/Integrations/DeskIntegration.php:35
 msgid "Zoho Desk"
 msgstr ""
 #: includes/Admin/Ajax.php:600
 #: includes/Admin/SettingsPage.php:132
 #: includes/Admin/SettingsPage.php:883
 #: includes/Auth/ConnectionManager.php:120
+#: includes/Admin/Ajax.php:668
+#: includes/Admin/SettingsPage.php:145
+#: includes/Admin/SettingsPage.php:1057
+#: includes/Auth/ConnectionManager.php:204
 #: includes/Integrations/BiginIntegration.php:35
 msgid "Zoho Bigin"
 msgstr ""
 #: includes/Admin/Ajax.php:601
 #: includes/Admin/SettingsPage.php:133
 #: includes/Admin/SettingsPage.php:884
 #: includes/Auth/ConnectionManager.php:121
+#: includes/Admin/Ajax.php:669
+#: includes/Admin/SettingsPage.php:146
+#: includes/Admin/SettingsPage.php:1058
+#: includes/Auth/ConnectionManager.php:205
 #: includes/Integrations/CampaignsIntegration.php:53
 msgid "Zoho Campaigns"
 msgstr ""
 #: includes/Admin/Ajax.php:602
 #: includes/Admin/SettingsPage.php:134
 #: includes/Admin/SettingsPage.php:885
 #: includes/Auth/ConnectionManager.php:122
+#: includes/Admin/Ajax.php:670
+#: includes/Admin/SettingsPage.php:147
+#: includes/Admin/SettingsPage.php:1059
+#: includes/Auth/ConnectionManager.php:206
 #: includes/Integrations/MarketingAutomationIntegration.php:41
 msgid "Zoho Marketing Automation"
 …
 #. translators: %s: form plugin name, e.g. "Contact Form 7".
+#: includes/Admin/Ajax.php:711
+#, php-format
+msgid "%s is not active on this site."
+msgstr ""
+#: includes/Admin/Ajax.php:737
+#: includes/Admin/Ajax.php:796
+#: includes/Admin/FeedsPage.php:1208
+#: includes/Admin/Ajax.php:848
+#: includes/Admin/FeedsPage.php:402
+#, php-format
+msgid "%s is not installed or activated."
+msgstr ""
+#: includes/Admin/Ajax.php:874
+#: includes/Admin/Ajax.php:948
+#: includes/Admin/FeedsPage.php:2340
 msgid "Unknown integration."
 msgstr ""
 #: includes/Admin/Ajax.php:791
+#: includes/Admin/Ajax.php:943
 #: includes/Integrations/BiginIntegration.php:66
 #: includes/Integrations/CrmIntegration.php:57
 …
 msgstr ""
+#: includes/Admin/Ajax.php:830
+#: includes/Admin/Ajax.php:1051
+msgid "No integration selected."
+msgstr ""
+#: includes/Admin/Ajax.php:1060
 msgid "Unknown or disconnected account."
 msgstr ""
+#: includes/Admin/Ajax.php:834
+msgid "No integration selected."
+#. translators: 1: Zoho app name, e.g. "Zoho Books". 2: the same app name.
+#: includes/Admin/Ajax.php:1114
+#, php-format
+msgid "This connection is not authorized for %1$s. Use \"Edit access\" on the connection, tick %2$s, then press Update & Reauthorize."
 msgstr ""
 …
 #: includes/Admin/DeactivationFeedback.php:175
+#: includes/Admin/FeedsPage.php:295
+#: includes/Admin/FeedsPage.php:744
+#: includes/Admin/FeedsPage.php:752
+#: includes/Admin/SettingsPage.php:492
+#: includes/Admin/SettingsPage.php:794
+#: includes/Admin/FeedsPage.php:459
+#: includes/Admin/FeedsPage.php:909
+#: includes/Admin/FeedsPage.php:917
+#: includes/Admin/ProUpsell.php:394
+#: includes/Admin/SettingsPage.php:563
+#: includes/Admin/SettingsPage.php:944
 msgid "Close"
 msgstr ""
 …
 #: includes/Admin/DeactivationFeedback.php:182
 msgid "If you have a moment, what made you deactivate Techwave Form Sync for Zoho? Answering is entirely optional — nothing is sent unless you choose to send it."
+msgid "If you have a moment, what made you deactivate FormBridge for Zoho? Answering is entirely optional, and nothing is sent unless you choose to send it."
 msgstr ""
 …
 msgstr ""
+#: includes/Admin/FeedsPage.php:131
+msgid "Techwave Sync"
+msgstr ""
+#: includes/Admin/FeedsPage.php:150
+#: includes/Admin/FeedsPage.php:151
+msgid "Forms"
+msgstr ""
+#: includes/Admin/FeedsPage.php:237
+#: includes/Admin/FeedsPage.php:293
+#: includes/Admin/FeedsPage.php:69
+#: includes/Admin/FeedsPage.php:735
+msgid "Feed Name"
+msgstr ""
+#: includes/Admin/FeedsPage.php:70
+#: includes/Admin/FeedsPage.php:736
+#: includes/Admin/FeedsPage.php:1073
+#: includes/Admin/FeedsPage.php:1220
+#: includes/Admin/FeedsPage.php:2142
+msgid "Trigger"
+msgstr ""
+#: includes/Admin/FeedsPage.php:71
+#: includes/Admin/FeedsPage.php:737
+msgid "Action Name"
+msgstr ""
+#: includes/Admin/FeedsPage.php:72
+#: includes/Admin/FeedsPage.php:738
+msgid "Created At"
+msgstr ""
+#. translators: %s: the site's timezone, e.g. Asia/Dhaka or UTC+06:00.
+#: includes/Admin/FeedsPage.php:73
+#: includes/Admin/FeedsPage.php:481
+#: includes/Admin/FeedsPage.php:739
+#: includes/Admin/SettingsPage.php:778
+#: includes/Admin/SettingsPage.php:1023
+#: includes/Api/DeskClient.php:232
+msgid "Status"
+msgstr ""
+#: includes/Admin/FeedsPage.php:223
+#: includes/Admin/FeedsPage.php:224
+msgid "All Feeds"
+msgstr ""
+#. translators: the product's name. First half of "FormBridge for Zoho", set in bold; a brand name, so normally left as-is.
+#: includes/Admin/FeedsPage.php:248
+#: includes/Support/Branding.php:162
+msgid "FormBridge"
+msgstr ""
+#: includes/Admin/FeedsPage.php:362
+#: includes/Admin/FeedsPage.php:457
 msgid "Loading…"
 msgstr ""
+#: includes/Admin/FeedsPage.php:238
+#: includes/Admin/FeedsPage.php:313
+#. translators: %s: link text, e.g. "Contact Form 7 guide".
+#. translators: %s: link text, e.g. "Trigger guide".
+#. translators: %s: link text, e.g. "Watch the setup video".
+#: includes/Admin/FeedsPage.php:364
+#: includes/Admin/FeedsPage.php:2015
+#: includes/Support/VideoGuide.php:97
+#, php-format
+msgid "%s (opens in a new tab)"
+msgstr ""
+#: includes/Admin/FeedsPage.php:365
+#: includes/Admin/FeedsPage.php:477
 msgid "View Record in Zoho"
 msgstr ""
 #: includes/Admin/FeedsPage.php:239
 #: includes/Admin/FeedsPage.php:311
 #: includes/Admin/SettingsPage.php:871
+#: includes/Admin/FeedsPage.php:366
+#: includes/Admin/FeedsPage.php:475
+#: includes/Admin/SettingsPage.php:1027
 msgid "Record ID"
 msgstr ""
 #: includes/Admin/FeedsPage.php:240
 #: includes/Admin/FeedsPage.php:294
+#: includes/Admin/FeedsPage.php:367
+#: includes/Admin/FeedsPage.php:458
 msgid "Request failed."
 msgstr ""
 #: includes/Admin/FeedsPage.php:241
+#: includes/Admin/FeedsPage.php:368
 msgid "Status changed successfully"
 msgstr ""
+#: includes/Admin/FeedsPage.php:242
+msgid "— Select a form —"
+msgstr ""
+#: includes/Admin/FeedsPage.php:243
+msgid "— Select organization —"
+msgstr ""
+#: includes/Admin/FeedsPage.php:244
+msgid "— Select module —"
+msgstr ""
+#: includes/Admin/FeedsPage.php:245
+msgid "— Select department —"
+msgstr ""
+#: includes/Admin/FeedsPage.php:246
+#: includes/Admin/FeedsPage.php:1157
+msgid "— Select Zoho field —"
+msgstr ""
+#: includes/Admin/FeedsPage.php:247
+#: includes/Admin/FeedsPage.php:1171
+msgid "— Select form field —"
+msgstr ""
+#: includes/Admin/FeedsPage.php:248
+#: includes/Admin/FeedsPage.php:369
+msgid "Select a form"
+msgstr ""
+#: includes/Admin/FeedsPage.php:370
+msgid "Select organization"
+msgstr ""
+#: includes/Admin/FeedsPage.php:371
+msgid "Select module"
+msgstr ""
+#: includes/Admin/FeedsPage.php:372
+msgid "Select department"
+msgstr ""
+#: includes/Admin/FeedsPage.php:373
+#: includes/Admin/FeedsPage.php:2289
+msgid "Select Zoho field"
+msgstr ""
+#: includes/Admin/FeedsPage.php:374
+#: includes/Admin/FeedsPage.php:2279
+msgid "Select form field"
+msgstr ""
+#: includes/Admin/FeedsPage.php:376
+msgid "Type to search"
+msgstr ""
+#: includes/Admin/FeedsPage.php:377
+msgid "No field matches"
+msgstr ""
+#. translators: shown in the mapping row's text box when the row combines several form fields.
+#: includes/Admin/FeedsPage.php:379
+msgid "e.g. {first-name} {last-name}. Pick a form field to insert one"
+msgstr ""
+#. translators: %d: number of matching fields.
+#: includes/Admin/FeedsPage.php:381
+#, php-format
+msgid "%d fields match"
+msgstr ""
+#: includes/Admin/FeedsPage.php:382
 msgid "Mailing List"
 msgstr ""
 #: includes/Admin/FeedsPage.php:249
+#: includes/Admin/FeedsPage.php:383
 msgid "Loaded from Zoho once the account is chosen."
 msgstr ""
 #: includes/Admin/FeedsPage.php:250
 #: includes/Admin/FeedsPage.php:964
+#: includes/Admin/FeedsPage.php:384
+#: includes/Admin/FeedsPage.php:1468
 msgid "Module / resource"
 msgstr ""
 #: includes/Admin/FeedsPage.php:251
 #: includes/Admin/FeedsPage.php:976
+#: includes/Admin/FeedsPage.php:385
+#: includes/Admin/FeedsPage.php:1480
 msgid "Loaded from Zoho once the app and account are chosen."
 msgstr ""
 #: includes/Admin/FeedsPage.php:252
 #: includes/Admin/FeedsPage.php:977
+#: includes/Admin/FeedsPage.php:386
+#: includes/Admin/FeedsPage.php:1481
 msgid "No Mailing Lists found in Zoho Campaigns."
 msgstr ""
 #: includes/Admin/FeedsPage.php:253
+#: includes/Admin/FeedsPage.php:387
 msgid "No Mailing Lists found in Zoho Marketing Automation."
 msgstr ""
 #: includes/Admin/FeedsPage.php:254
+#: includes/Admin/FeedsPage.php:388
 msgid "Search for topic"
 msgstr ""
 #: includes/Admin/FeedsPage.php:255
+#: includes/Admin/FeedsPage.php:389
 msgid "Search for tag"
 msgstr ""
 #: includes/Admin/FeedsPage.php:256
 #: includes/Admin/FeedsPage.php:310
+#: includes/Admin/FeedsPage.php:390
+#: includes/Admin/FeedsPage.php:474
 msgid "No matches"
 msgstr ""
 #. translators: %s: the stale saved value that no longer matches anything Zoho returned.
+#: includes/Admin/FeedsPage.php:258
+#, php-format
+msgid "%s (not found — please reselect)"
+msgstr ""
+#: includes/Admin/FeedsPage.php:259
+#: includes/Admin/FeedsPage.php:392
+#, php-format
+msgid "%s (not found, please reselect)"
+msgstr ""
+#. translators: %s: Zoho app name.
+#: includes/Admin/FeedsPage.php:394
+#, php-format
+msgid "%s (not authorised for this account)"
+msgstr ""
+#: includes/Admin/FeedsPage.php:395
 msgid "Send one real test record to Zoho now?"
 msgstr ""
 #: includes/Admin/FeedsPage.php:260
+#: includes/Admin/FeedsPage.php:396
 msgid "Test successful"
 msgstr ""
 #: includes/Admin/FeedsPage.php:261
+#: includes/Admin/FeedsPage.php:397
 msgid "Test failed"
 msgstr ""
 #: includes/Admin/FeedsPage.php:262
 #: includes/Admin/FeedsPage.php:894
+#: includes/Admin/FeedsPage.php:398
+#: includes/Admin/FeedsPage.php:1286
 msgid "Pick the form to connect. The list is read from your saved forms."
 msgstr ""
 #: includes/Admin/FeedsPage.php:263
+#: includes/Admin/FeedsPage.php:399
 msgid "This form could not be found in the current list. Please pick the form again and save, or submissions will never match."
 msgstr ""
 #: includes/Admin/FeedsPage.php:264
+#: includes/Admin/FeedsPage.php:400
 msgid "Contact Form 7 is not active on this site."
 msgstr ""
 #. translators: %s: comma-separated list of required Zoho field names that are still unmapped.
 #: includes/Admin/FeedsPage.php:266
+#: includes/Admin/FeedsPage.php:404
 #, php-format
 msgid "These required Zoho fields are not mapped yet: %s. Map them (or set a static value) before saving."
 msgstr ""
 #: includes/Admin/FeedsPage.php:267
 #: includes/Admin/FeedsPage.php:1069
+#: includes/Admin/FeedsPage.php:405
+#: includes/Admin/FeedsPage.php:1709
 msgid "Missing required fields"
 msgstr ""
 #. translators: %s: comma-separated list of Zoho field names whose mapping row is unfinished.
 #: includes/Admin/FeedsPage.php:269
 #, php-format
 msgid "These rows name a Zoho field but have nothing to send: %s. Pick a form field or type a static value, or remove the row — otherwise it will not be saved."
 msgstr ""
 #: includes/Admin/FeedsPage.php:270
+#: includes/Admin/FeedsPage.php:407
+#, php-format
+msgid "These rows name a Zoho field but have nothing to send: %s. Pick a form field or type a static value, or remove the row. Otherwise it will not be saved."
+msgstr ""
+#: includes/Admin/FeedsPage.php:408
 msgid "Unfinished mapping rows"
 msgstr ""
+#: includes/Admin/FeedsPage.php:271
+msgid "Every mapping row needs a Zoho field. The highlighted rows have none — pick a Zoho field for each, or remove the row."
+msgstr ""
+#: includes/Admin/FeedsPage.php:272
+msgid "The field mapping was cleared because the Zoho app, account or module changed — the previous fields belong to the target you just switched away from. Please map the fields again."
+#: includes/Admin/FeedsPage.php:409
+msgid "Every mapping row needs a Zoho field. The highlighted rows have none. Pick a Zoho field for each, or remove the row."
+msgstr ""
+#: includes/Admin/FeedsPage.php:410
+msgid "Creating feed…"
+msgstr ""
+#: includes/Admin/FeedsPage.php:411
+msgid "Saving feed…"
+msgstr ""
+#. translators: %s: a form field's label.
+#: includes/Admin/FeedsPage.php:413
+#, php-format
+msgid "Remove %s"
+msgstr ""
+#: includes/Admin/FeedsPage.php:414
+msgid "Try again"
+msgstr ""
+#. translators: 1: Zoho module name, e.g. "Leads". 2: Zoho app name, e.g. "Zoho CRM".
+#: includes/Admin/FeedsPage.php:416
+#, php-format
+msgid "Fetching %1$s fields from %2$s…"
+msgstr ""
+#. translators: %s: Zoho app name, e.g. "Zoho Campaigns".
+#: includes/Admin/FeedsPage.php:418
+#, php-format
+msgid "Fetching fields from %s…"
+msgstr ""
+#: includes/Admin/FeedsPage.php:419
+msgid "Static values Zoho will not accept"
+msgstr ""
+#: includes/Admin/FeedsPage.php:420
+#: includes/Admin/SettingsPage.php:167
+msgid "Required"
+msgstr ""
+#: includes/Admin/FeedsPage.php:421
+msgid "Zoho needs this field on every record, so this row cannot be removed or pointed at another field."
+msgstr ""
+#. translators: %s: Zoho field name, e.g. "Phone".
+#: includes/Admin/FeedsPage.php:423
+#, php-format
+msgid "%s needs a phone number: digits, spaces and + - ( ) only."
+msgstr ""
+#. translators: %s: Zoho field name, e.g. "Email".
+#: includes/Admin/FeedsPage.php:425
+#, php-format
+msgid "%s needs an email address, such as name@example.com."
+msgstr ""
+#. translators: %s: Zoho field name, e.g. "No. of Employees".
+#: includes/Admin/FeedsPage.php:427
+#, php-format
+msgid "%s needs a whole number."
+msgstr ""
+#. translators: %s: Zoho field name, e.g. "Annual Revenue".
+#: includes/Admin/FeedsPage.php:429
+#, php-format
+msgid "%s needs a number, such as 12.50."
+msgstr ""
+#. translators: %s: Zoho field name, e.g. "Date of Birth".
+#: includes/Admin/FeedsPage.php:431
+#, php-format
+msgid "%s needs a date written as YYYY-MM-DD."
+msgstr ""
+#. translators: %s: Zoho field name, e.g. "Follow-up Time".
+#: includes/Admin/FeedsPage.php:433
+#, php-format
+msgid "%s needs a date and time written as YYYY-MM-DDTHH:MM:SS."
+msgstr ""
+#. translators: %s: Zoho field name, e.g. "Website".
+#: includes/Admin/FeedsPage.php:435
+#, php-format
+msgid "%s needs a web address, such as https://example.com."
+msgstr ""
+#: includes/Admin/FeedsPage.php:436
+msgid "The field mapping was cleared because the Zoho app, account or module changed. The previous fields belong to the target you just switched away from. Please map the fields again."
 msgstr ""
 #. translators: 1: currently authorized app(s), 2: app the person just picked.
 #: includes/Admin/FeedsPage.php:274
+#: includes/Admin/FeedsPage.php:438
 #, php-format
 msgid "This account is only authorized for %1$s. You need to re-authorize it for %2$s before you can fetch this data."
 msgstr ""
 #: includes/Admin/FeedsPage.php:275
+#: includes/Admin/FeedsPage.php:439
 msgid "Fix this under Connections → Edit access."
 msgstr ""
 #: includes/Admin/FeedsPage.php:296
+#: includes/Admin/FeedsPage.php:460
 msgid "Please confirm"
 msgstr ""
 #: includes/Admin/FeedsPage.php:297
 #: includes/Admin/SettingsPage.php:555
+#: includes/Admin/FeedsPage.php:461
+#: includes/Admin/SettingsPage.php:646
 msgid "Cancel"
 msgstr ""
 #: includes/Admin/FeedsPage.php:301
 #: includes/Admin/FeedsPage.php:671
 #: includes/Admin/SettingsPage.php:740
+#: includes/Admin/FeedsPage.php:465
+#: includes/Admin/FeedsPage.php:836
+#: includes/Admin/SettingsPage.php:886
 msgid "Delete"
 msgstr ""
 #: includes/Admin/FeedsPage.php:302
+#: includes/Admin/FeedsPage.php:466
 msgid "Send"
 msgstr ""
 #: includes/Admin/FeedsPage.php:303
+#: includes/Admin/FeedsPage.php:467
 msgid "Resubmit"
 msgstr ""
 #: includes/Admin/FeedsPage.php:304
+#: includes/Admin/FeedsPage.php:468
 msgid "Copied"
 msgstr ""
 #: includes/Admin/FeedsPage.php:305
+#: includes/Admin/FeedsPage.php:469
 msgid "Feed"
 msgstr ""
 #: includes/Admin/FeedsPage.php:306
 #: includes/Admin/FeedsPage.php:659
+#: includes/Admin/FeedsPage.php:470
+#: includes/Admin/FeedsPage.php:824
 msgid "Timeline"
 msgstr ""
+#: includes/Admin/FeedsPage.php:307
+#: includes/Admin/FeedsPage.php:838
+#: includes/Admin/FeedsPage.php:471
 msgid "Enabled"
 msgstr ""
 #: includes/Admin/FeedsPage.php:308
+#: includes/Admin/FeedsPage.php:472
 msgid "Disabled"
 msgstr ""
 #: includes/Admin/FeedsPage.php:309
+#: includes/Admin/FeedsPage.php:473
 msgid "No activity logged for this feed yet."
 msgstr ""
 #: includes/Admin/FeedsPage.php:312
 #: includes/Admin/SettingsPage.php:869
+#: includes/Admin/FeedsPage.php:476
+#: includes/Admin/SettingsPage.php:1025
 msgid "Module"
 msgstr ""
 #: includes/Admin/FeedsPage.php:314
 #: includes/Admin/FeedsPage.php:881
 #: includes/Admin/SettingsPage.php:870
+#: includes/Admin/FeedsPage.php:478
+#: includes/Admin/FeedsPage.php:1272
+#: includes/Admin/SettingsPage.php:1026
 #: includes/Privacy/PrivacyProvider.php:164
 msgid "Form"
 msgstr ""
+#: includes/Admin/FeedsPage.php:315
+#: includes/Admin/FeedsPage.php:858
+#: includes/Admin/FeedsPage.php:859
+#: includes/Admin/FeedsPage.php:479
 msgid "Form plugin"
 msgstr ""
+#: includes/Admin/FeedsPage.php:316
+#: includes/Admin/FeedsPage.php:480
+#: includes/Admin/FeedsPage.php:2150
 msgid "Destination"
 msgstr ""
+#: includes/Admin/FeedsPage.php:317
+#: includes/Admin/FeedsPage.php:529
+#: includes/Admin/FeedsPage.php:576
+#: includes/Admin/SettingsPage.php:636
+#: includes/Admin/SettingsPage.php:867
+#: includes/Api/DeskClient.php:165
+msgid "Status"
+msgstr ""
+#: includes/Admin/FeedsPage.php:318
+#: includes/Admin/FeedsPage.php:482
 msgid "Mapped fields"
 msgstr ""
+#: includes/Admin/FeedsPage.php:319
+#: includes/Admin/FeedsPage.php:1040
+#: includes/Admin/FeedsPage.php:483
 msgid "Duplicate check"
 msgstr ""
 #. translators: %d: number of selected rows. Always 1 here.
 #: includes/Admin/FeedsPage.php:321
+#: includes/Admin/FeedsPage.php:485
 #, php-format
 msgid "%d row selected"
 …
 #. translators: %d: number of selected rows.
 #: includes/Admin/FeedsPage.php:323
+#: includes/Admin/FeedsPage.php:487
 #, php-format
 msgid "%d rows selected"
 msgstr ""
 #: includes/Admin/FeedsPage.php:324
+#: includes/Admin/FeedsPage.php:488
 msgid "Delete this feed?"
 msgstr ""
 #. translators: %d: number of feeds.
 #: includes/Admin/FeedsPage.php:326
+#: includes/Admin/FeedsPage.php:490
 #, php-format
 msgid "Delete %d feeds?"
 msgstr ""
 #: includes/Admin/FeedsPage.php:327
 #: includes/Admin/FeedsPage.php:507
+#: includes/Admin/FeedsPage.php:491
+#: includes/Admin/FeedsPage.php:677
 msgid "Select all"
 msgstr ""
 #: includes/Admin/FeedsPage.php:333
 #: includes/Admin/SettingsPage.php:921
+#: includes/Admin/FeedsPage.php:497
+#: includes/Admin/SettingsPage.php:1115
 msgid "Success"
 msgstr ""
 #: includes/Admin/FeedsPage.php:334
+#: includes/Admin/FeedsPage.php:498
 msgid "Failed"
 msgstr ""
 #: includes/Admin/FeedsPage.php:335
 #: includes/Admin/SettingsPage.php:925
+#: includes/Admin/FeedsPage.php:499
+#: includes/Admin/SettingsPage.php:1119
 msgid "Error"
 msgstr ""
 #: includes/Admin/FeedsPage.php:336
+#: includes/Admin/FeedsPage.php:500
 msgid "Retry"
 msgstr ""
 #: includes/Admin/FeedsPage.php:337
 #: includes/Admin/FeedsPage.php:655
+#: includes/Admin/FeedsPage.php:501
+#: includes/Admin/FeedsPage.php:820
 msgid "Info"
 msgstr ""
 #: includes/Admin/FeedsPage.php:338
 #: includes/Admin/SettingsPage.php:923
+#: includes/Admin/FeedsPage.php:502
+#: includes/Admin/SettingsPage.php:1117
 msgid "Suppressed"
 msgstr ""
+#: includes/Admin/FeedsPage.php:339
+#: includes/Admin/SettingsPage.php:873
+#: includes/Admin/SettingsPage.php:946
+#: includes/Admin/FeedsPage.php:503
+#: includes/Admin/FeedsPage.php:2146
+#: includes/Admin/SettingsPage.php:1029
+#: includes/Admin/SettingsPage.php:1141
 msgid "Details"
 msgstr ""
 #: includes/Admin/FeedsPage.php:340
 #: includes/Admin/SettingsPage.php:953
+#: includes/Admin/FeedsPage.php:504
+#: includes/Admin/SettingsPage.php:1148
 msgid "Copy"
 msgstr ""
 #: includes/Admin/FeedsPage.php:341
 #: includes/Admin/SettingsPage.php:514
 #: includes/Admin/SettingsPage.php:951
+#: includes/Admin/FeedsPage.php:505
+#: includes/Admin/SettingsPage.php:601
+#: includes/Admin/SettingsPage.php:1146
 msgid "Copy to clipboard"
 msgstr ""
 #: includes/Admin/FeedsPage.php:344
 #: includes/Admin/SettingsPage.php:826
+#: includes/Admin/FeedsPage.php:508
+#: includes/Admin/SettingsPage.php:982
 msgid "Select failed"
 msgstr ""
 #: includes/Admin/FeedsPage.php:345
+#: includes/Admin/FeedsPage.php:509
 msgid "Unselect failed"
 msgstr ""
 #: includes/Admin/FeedsPage.php:346
+#: includes/Admin/FeedsPage.php:510
 msgid "This log entry will be permanently deleted. Continue?"
 msgstr ""
 #. translators: %d: number of log entries.
 #: includes/Admin/FeedsPage.php:348
+#: includes/Admin/FeedsPage.php:512
 #, php-format
 msgid "%d log entries will be permanently deleted. Continue?"
 …
 #. translators: %d: number of log entries.
 #: includes/Admin/FeedsPage.php:350
+#: includes/Admin/FeedsPage.php:514
 #, php-format
 msgid "%d log entries deleted."
 msgstr ""
 #: includes/Admin/FeedsPage.php:351
+#: includes/Admin/FeedsPage.php:515
 msgid "Could not delete the selected entries."
 msgstr ""
 #: includes/Admin/FeedsPage.php:352
+#: includes/Admin/FeedsPage.php:516
 msgid "Resend the selected entry to Zoho now?"
 msgstr ""
 #. translators: %d: number of log entries.
 #: includes/Admin/FeedsPage.php:354
+#: includes/Admin/FeedsPage.php:518
 #, php-format
 msgid "Resend %d selected entries to Zoho now?"
 msgstr ""
 #: includes/Admin/FeedsPage.php:355
 msgid "Entry resubmitted — check the log for the result."
+#: includes/Admin/FeedsPage.php:519
+msgid "Entry resubmitted. Check the log for the result."
 msgstr ""
 #. translators: %d: number of log entries.
 #: includes/Admin/FeedsPage.php:357
 #, php-format
 msgid "%d entries resubmitted — check the log for the result."
 msgstr ""
 #: includes/Admin/FeedsPage.php:358
+#: includes/Admin/FeedsPage.php:521
+#, php-format
+msgid "%d entries resubmitted. Check the log for the result."
+msgstr ""
+#: includes/Admin/FeedsPage.php:522
 msgid "Nothing to resubmit."
 msgstr ""
 #: includes/Admin/FeedsPage.php:359
+#: includes/Admin/FeedsPage.php:523
 msgid "Could not resubmit the selected entries."
 msgstr ""
+#: includes/Admin/FeedsPage.php:370
+#: includes/Admin/SettingsPage.php:171
+#. translators: 1: current page number, 2: total pages, 3: total number of log entries. Kept in step with SettingsPage::logs_page_info(), which renders the same line on page load; this copy is only redrawn when live polling grows the count, so it never has to say "1 entry".
+#: includes/Admin/FeedsPage.php:525
+#, php-format
+msgid "Page %1$s of %2$s · %3$s entries"
+msgstr ""
+#: includes/Admin/FeedsPage.php:536
+#: includes/Admin/SettingsPage.php:185
 msgid "You do not have permission to view this page."
 msgstr ""
+#: includes/Admin/FeedsPage.php:384
+#: includes/Admin/FeedsPage.php:394
+#: includes/Admin/SettingsPage.php:178
+msgid "TFS"
+msgstr ""
+#: includes/Admin/FeedsPage.php:421
+#: includes/Admin/FeedsPage.php:585
 msgid "Feeds"
 msgstr ""
 #: includes/Admin/FeedsPage.php:422
+#: includes/Admin/FeedsPage.php:586
 msgid "Each feed sends a matching Elementor or Contact Form 7 form to one Zoho destination. A form can have more than one feed."
 msgstr ""
 #: includes/Admin/FeedsPage.php:426
 #: includes/Admin/FeedsPage.php:458
+#: includes/Admin/FeedsPage.php:590
+#: includes/Admin/FeedsPage.php:622
 msgid "Add New Feed"
 msgstr ""
 #: includes/Admin/FeedsPage.php:454
+#: includes/Admin/FeedsPage.php:618
 msgid "No feeds yet"
 msgstr ""
 #: includes/Admin/FeedsPage.php:455
+#: includes/Admin/FeedsPage.php:619
 msgid "A feed connects one of your forms to one Zoho destination. Create your first one to start sending submissions."
 msgstr ""
+#: includes/Admin/FeedsPage.php:513
+msgid "All apps"
+msgstr ""
+#: includes/Admin/FeedsPage.php:520
+#: includes/Admin/FeedsPage.php:629
+#: includes/Admin/SettingsPage.php:769
+msgid "Watch the full setup"
+msgstr ""
+#: includes/Admin/FeedsPage.php:683
+msgid "All Apps"
+msgstr ""
+#: includes/Admin/FeedsPage.php:690
 msgid "Show/hide columns"
 msgstr ""
+#: includes/Admin/FeedsPage.php:525
+#: includes/Admin/FeedsPage.php:572
+msgid "Feed Name"
+msgstr ""
+#: includes/Admin/FeedsPage.php:526
+#: includes/Admin/FeedsPage.php:573
+msgid "Trigger"
+msgstr ""
+#: includes/Admin/FeedsPage.php:527
+#: includes/Admin/FeedsPage.php:574
+msgid "Action Name"
+msgstr ""
+#: includes/Admin/FeedsPage.php:528
+#: includes/Admin/FeedsPage.php:575
+msgid "Created At"
+msgstr ""
+#: includes/Admin/FeedsPage.php:537
+#: includes/Admin/SettingsPage.php:828
+#: includes/Admin/FeedsPage.php:700
+#: includes/Admin/SettingsPage.php:984
 msgid "Delete selected"
 msgstr ""
 #: includes/Admin/FeedsPage.php:550
+#: includes/Admin/FeedsPage.php:713
 msgid "Search feeds by name"
 msgstr ""
 #: includes/Admin/FeedsPage.php:551
+#: includes/Admin/FeedsPage.php:714
 msgid "Search feed name…"
 msgstr ""
 #. translators: %d: number of feeds.
 #: includes/Admin/FeedsPage.php:557
+#: includes/Admin/FeedsPage.php:720
 #, php-format
 msgid "%d feed"
 …
 msgstr[1] ""
 #: includes/Admin/FeedsPage.php:571
+#: includes/Admin/FeedsPage.php:734
 msgid "Select all feeds"
 msgstr ""
+#: includes/Admin/FeedsPage.php:577
+#: includes/Admin/SettingsPage.php:637
+#: includes/Admin/FeedsPage.php:740
+#: includes/Admin/FeedsPage.php:1722
+#: includes/Admin/SettingsPage.php:779
 msgid "Actions"
 msgstr ""
 #: includes/Admin/FeedsPage.php:581
+#: includes/Admin/FeedsPage.php:744
 msgid "No feeds match your search/filter."
 msgstr ""
 #: includes/Admin/FeedsPage.php:626
 #: includes/Admin/FeedsPage.php:1367
+#: includes/Admin/FeedsPage.php:791
+#: includes/Admin/FeedsPage.php:2505
 msgid "Untitled feed"
 msgstr ""
 #. translators: %s: feed title.
 #: includes/Admin/FeedsPage.php:639
+#: includes/Admin/FeedsPage.php:804
 #, php-format
 msgid "Enable the feed \"%s\""
 msgstr ""
 #: includes/Admin/FeedsPage.php:663
+#: includes/Admin/FeedsPage.php:828
 msgid "Edit"
 msgstr ""
 #: includes/Admin/FeedsPage.php:667
+#: includes/Admin/FeedsPage.php:832
 msgid "Clone"
 msgstr ""
 #: includes/Admin/FeedsPage.php:669
+#: includes/Admin/FeedsPage.php:834
 msgid "Delete this feed? Submissions for this form will stop being sent to Zoho."
 msgstr ""
+#: includes/Admin/FeedsPage.php:696
+#: includes/Admin/FeedsPage.php:861
+#: includes/Admin/SettingsPage.php:1221
 msgid "Show"
 msgstr ""
+#: includes/Admin/FeedsPage.php:701
+#: includes/Admin/FeedsPage.php:866
+#: includes/Admin/SettingsPage.php:1229
 msgid "per page"
 msgstr ""
+#: includes/Admin/FeedsPage.php:720
+#: includes/Admin/FeedsPage.php:722
+#: includes/Admin/FeedsPage.php:885
+#: includes/Admin/FeedsPage.php:887
+#: includes/Admin/SettingsPage.php:1235
 msgid "Prev"
 msgstr ""
 #. translators: 1: current page, 2: total pages.
 #: includes/Admin/FeedsPage.php:728
+#: includes/Admin/FeedsPage.php:893
 #, php-format
 msgid "Page %1$d of %2$d"
 msgstr ""
-#: includes/Admin/FeedsPage.php:735
-#: includes/Admin/FeedsPage.php:737
 #: includes/Admin/FeedsPage.php:900
+#: includes/Admin/FeedsPage.php:1054
+#: includes/Admin/FeedsPage.php:902
+#: includes/Admin/SettingsPage.php:1241
 msgid "Next"
 msgstr ""
 #: includes/Admin/FeedsPage.php:744
+#: includes/Admin/FeedsPage.php:909
 msgid "Feed details"
 msgstr ""
 #: includes/Admin/FeedsPage.php:789
+#: includes/Admin/FeedsPage.php:965
 msgid "Back to all feeds"
 msgstr ""
-#: includes/Admin/FeedsPage.php:792
-msgid "Edit feed"
-msgstr ""
-#: includes/Admin/FeedsPage.php:792
-msgid "Add feed"
-msgstr ""
 #. translators: %s: link to the Connections tab.
 #: includes/Admin/FeedsPage.php:800
+#: includes/Admin/FeedsPage.php:978
 #, php-format
 msgid "No Zoho accounts connected yet. Connect one under %s first."
 msgstr ""
+#: includes/Admin/FeedsPage.php:801
+msgid "Techwave Sync → Connections"
+msgstr ""
+#: includes/Admin/FeedsPage.php:824
+msgid "General"
+msgstr ""
+#: includes/Admin/FeedsPage.php:825
+msgid "Zoho Connection"
+msgstr ""
+#: includes/Admin/FeedsPage.php:826
+msgid "Field Mapping"
+msgstr ""
+#: includes/Admin/FeedsPage.php:833
+#: includes/Admin/FeedsPage.php:979
+msgid "FormBridge → Connections"
+msgstr ""
+#. translators: %s: connected account name.
+#: includes/Admin/FeedsPage.php:991
+#, php-format
+msgid "%s (not authorised)"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1043
+msgid "Choose a trigger"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1044
+msgid "Which form or event should send records to Zoho? Picking one moves you straight on."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1049
+msgid "Trigger guide"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1053
+msgid "Watch: every trigger"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1066
+msgid "Search triggers"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1068
+msgid "Search triggers…"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1132
+#: includes/Admin/ProUpsell.php:402
+msgid "Pro"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1137
+msgid "Available in FormBridge Pro. Opens a dialog."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1163
+msgid "No trigger matches that search."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1203
+msgid "Name this feed"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1204
+msgid "Give the feed a name you will recognise later, and pick the form it listens to."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1228
+msgid "Locked"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1236
+msgid "Change trigger"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1239
+msgid "Change"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1265
 msgid "Feed title"
 msgstr ""
 #: includes/Admin/FeedsPage.php:853
 msgid "Send submissions for this feed."
 msgstr ""
 #: includes/Admin/FeedsPage.php:877
 msgid "Choose which form plugin this feed listens to."
 msgstr ""
 #: includes/Admin/FeedsPage.php:889
+#: includes/Admin/FeedsPage.php:1266
+msgid "Contact form → Zoho CRM leads"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1267
+msgid "Only used inside WordPress. It is how this feed is listed here and named in the delivery log."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1281
 msgid "Loading forms…"
 msgstr ""
 #: includes/Admin/FeedsPage.php:892
+#: includes/Admin/FeedsPage.php:1284
 msgid "Reload forms"
 msgstr ""
+#: includes/Admin/FeedsPage.php:908
+#: includes/Admin/FeedsPage.php:1320
+#: includes/Admin/FeedsPage.php:1664
+#: includes/Admin/FeedsPage.php:1809
+msgid "Back"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1325
+#: includes/Admin/FeedsPage.php:1665
+msgid "Continue"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1339
+msgid "Where should records go?"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1340
+msgid "Pick the account, then the Zoho app it is authorised for, and the kind of record to create."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1349
+msgid "Zoho destination"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1363
+msgid "Connect a new account (opens in a new tab)"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1364
+msgid "Connect a new account"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1380
+msgid "Connected account"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1383
+msgid "Select"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1390
+msgid "Reload connected accounts"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1398
 #: includes/Privacy/PrivacyProvider.php:160
 msgid "Zoho app"
 msgstr ""
+#: includes/Admin/FeedsPage.php:918
+msgid "Connected account"
+msgstr ""
+#: includes/Admin/FeedsPage.php:920
+msgid "— Select —"
+msgstr ""
+#: includes/Admin/FeedsPage.php:938
+#: includes/Admin/FeedsPage.php:1412
+msgid "Watch: every Zoho app"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1430
 msgid "Organization"
 msgstr ""
 #: includes/Admin/FeedsPage.php:940
 #: includes/Admin/FeedsPage.php:951
 msgid "— None —"
 msgstr ""
 #: includes/Admin/FeedsPage.php:945
 msgid "Required for Zoho Books and Zoho Desk. (Bigin does not use this field — its organization is captured automatically when the connection is authorized.)"
 msgstr ""
 #: includes/Admin/FeedsPage.php:949
+#: includes/Admin/FeedsPage.php:1433
+#: includes/Admin/FeedsPage.php:1452
+msgid "None"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1444
+msgid "Required for Zoho Books and Zoho Desk. Bigin captures its own organization when the connection is authorized."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1449
 msgid "Department"
 msgstr ""
 #: includes/Admin/FeedsPage.php:956
+#: includes/Admin/FeedsPage.php:1459
 msgid "Required for Zoho Desk tickets. Loads after you pick the organization."
 msgstr ""
 #: includes/Admin/FeedsPage.php:970
 msgid "— Select an account first —"
 msgstr ""
 #: includes/Admin/FeedsPage.php:974
+#: includes/Admin/FeedsPage.php:1474
+msgid "Select an account first"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1478
 msgid "Reload mailing lists"
 msgstr ""
+#: includes/Admin/FeedsPage.php:989
+msgid "Subscription Type"
+msgstr ""
+#: includes/Admin/FeedsPage.php:992
+#: includes/Admin/FeedsPage.php:1535
+msgid "Contact options"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1536
+msgid "How the contact is subscribed, and what it is filed under."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1542
+msgid "Subscription type"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1545
 msgid "Marketing"
 msgstr ""
 #: includes/Admin/FeedsPage.php:993
+#: includes/Admin/FeedsPage.php:1546
 msgid "Non-marketing"
 msgstr ""
 #: includes/Admin/FeedsPage.php:994
+#: includes/Admin/FeedsPage.php:1547
 msgid "Unsubscribed"
 msgstr ""
+#: includes/Admin/FeedsPage.php:1001
+msgid "Associate contacts with the following Topics"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1008
+#: includes/Admin/FeedsPage.php:1560
+msgid "Add to list"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1563
+msgid "Right away"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1564
+msgid "After they confirm by email"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1569
+msgid "Right away puts the contact in the selected list immediately. After they confirm sends the confirmation email Zoho uses for a list with its sign-up form on, and adds the contact once it is clicked."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1573
+msgid "Contact tags"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1580
+msgid "Reload tags"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1582
+msgid "Optional. Pick one or more existing tags. Loads after you pick an account. Hold Ctrl/Cmd to pick more than one."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1587
+msgid "Associate contacts with these topics"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1594
 msgid "Reload topics"
 msgstr ""
+#: includes/Admin/FeedsPage.php:1010
+msgid "Optional — leave empty to skip topic association entirely. Loads after you pick an account. Hold Ctrl/Cmd to pick more than one."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1014
+msgid "Contact Tags"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1021
+msgid "Reload tags"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1023
+msgid "Optional. Pick one or more existing tags. Loads after you pick an account. Hold Ctrl/Cmd to pick more than one."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1041
+#: includes/Admin/FeedsPage.php:1596
+msgid "Optional. Leave empty to skip topic association entirely. Loads after you pick an account. Hold Ctrl/Cmd to pick more than one."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1618
+msgid "Duplicate handling"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1619
+msgid "What to do when Zoho already holds a record for the same person."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1629
 msgid "Update the matching Zoho record instead of creating a duplicate."
 msgstr ""
+#: includes/Admin/FeedsPage.php:1042
+msgid "Each box below is checked independently — a record counts as a match if it shares the same email OR the same phone, not only when both match."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1044
+msgid "Match by Email"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1045
+msgid "Match by Phone"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1047
+msgid "Other Zoho field API names, comma-separated"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1048
+msgid "Optional: any other Zoho field API names to also check, comma-separated."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1053
+#: includes/Admin/FeedsPage.php:1121
+msgid "Back"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1061
+#: includes/Admin/FeedsPage.php:1648
+msgid "Fields Zoho marks unique"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1649
+msgid "A record counts as a match if it shares any one of the ticked values. Leave them all unticked to use Zoho's own duplicate check."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1655
+msgid "This module has no fields that Zoho marks as unique, so Zoho's own duplicate check is used instead (Email on Leads and Contacts, for example). If the module has no duplicate check of its own, each submission creates a new record. To match on a field of your choice, set that field to not allow duplicate values in Zoho, then reload the module."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1672
+#: includes/Admin/FeedsPage.php:2155
+msgid "Match the fields"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1673
+msgid "Send each Zoho field a form field or a fixed value. Both lists load on their own: Zoho fields from the chosen module, form fields from the chosen form."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1680
 msgid "Field mapping"
 msgstr ""
+#: includes/Admin/FeedsPage.php:1062
+msgid "Map each Zoho field to a form field or a fixed value. Both lists load automatically: Zoho fields from the chosen module, form fields from the chosen form."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1074
+#: includes/Admin/FeedsPage.php:1699
+msgid "Loading Zoho fields"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1700
+msgid "Fetching the field list from Zoho…"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1701
+msgid "This is taking longer than usual. Zoho can be slow to answer, and the editor will carry on as soon as it does."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1718
+msgid "Source"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1719
+#: includes/Admin/FeedsPage.php:2265
+msgid "Form field"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1720
 msgid "Zoho field"
 msgstr ""
+#: includes/Admin/FeedsPage.php:1075
+msgid "Source"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1076
+#: includes/Admin/FeedsPage.php:1165
+msgid "Form field"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1077
+#: includes/Admin/FeedsPage.php:1166
+#: includes/Admin/FeedsPage.php:1721
+#: includes/Admin/FeedsPage.php:2266
 msgid "Static value"
 msgstr ""
 #: includes/Admin/FeedsPage.php:1105
+#: includes/Admin/FeedsPage.php:1750
 msgid "+ Add mapping row"
 msgstr ""
+#: includes/Admin/FeedsPage.php:1122
+#: includes/Admin/FeedsPage.php:1795
+msgid "Test this feed"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1796
+msgid "Sends one real test record to Zoho using the feed as last saved. Static values are sent as-is; mapped form fields get realistic sample data (a valid email, phone, and so on)."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1800
+msgid "Send test record"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1810
 msgid "Save feed"
 msgstr ""
 #: includes/Admin/FeedsPage.php:1122
+#: includes/Admin/FeedsPage.php:1810
 msgid "Create feed"
 msgstr ""
+#: includes/Admin/FeedsPage.php:1131
+msgid "Test"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1132
+msgid "Sends one real test record to Zoho using this saved feed. Static values are sent as-is; mapped form fields get realistic sample data (a valid email, phone, etc.)."
+msgstr ""
+#: includes/Admin/FeedsPage.php:1133
+msgid "Send test record"
+msgstr ""
+#: includes/Admin/FeedsPage.php:1180
+#. translators: %s: a Zoho app's name, e.g. "Zoho CRM".
+#. translators: %s: a form plugin's name, e.g. "Contact Form 7".
+#: includes/Admin/FeedsPage.php:1926
+#: includes/Admin/FeedsPage.php:2004
+#, php-format
+msgid "%s guide"
+msgstr ""
+#: includes/Admin/FeedsPage.php:2143
+msgid "Where records come from"
+msgstr ""
+#: includes/Admin/FeedsPage.php:2147
+msgid "Name and form"
+msgstr ""
+#: includes/Admin/FeedsPage.php:2151
+msgid "Zoho app and account"
+msgstr ""
+#: includes/Admin/FeedsPage.php:2154
+msgid "Mapping"
+msgstr ""
+#: includes/Admin/FeedsPage.php:2162
+msgid "Feed setup"
+msgstr ""
+#. translators: 1: step number, 2: total number of steps.
+#: includes/Admin/FeedsPage.php:2194
+#, php-format
+msgid "Step %1$s of %2$s:"
+msgstr ""
+#: includes/Admin/FeedsPage.php:2200
+msgid "(locked)"
+msgstr ""
+#: includes/Admin/FeedsPage.php:2222
+msgid "A saved feed keeps its trigger. To send a different form or event to Zoho, create a new feed."
+msgstr ""
+#: includes/Admin/FeedsPage.php:2271
+msgid "Combine fields"
+msgstr ""
+#: includes/Admin/FeedsPage.php:2312
 msgid "Remove"
 msgstr ""
 #: includes/Admin/FeedsPage.php:1203
+#: includes/Admin/FeedsPage.php:2335
 msgid "Save the feed first, then test it."
 msgstr ""
 #. translators: %s: Zoho record id.
 #: includes/Admin/FeedsPage.php:1286
 #, php-format
 msgid "Success — record updated in Zoho (id %s)."
 msgstr ""
 #: includes/Admin/FeedsPage.php:1287
 msgid "Success — a record was updated in Zoho."
+#: includes/Admin/FeedsPage.php:2424
+#, php-format
+msgid "Success: record updated in Zoho (id %s)."
+msgstr ""
+#: includes/Admin/FeedsPage.php:2425
+msgid "Success: a record was updated in Zoho."
 msgstr ""
 #. translators: %s: Zoho record id.
 #: includes/Admin/FeedsPage.php:1291
 #, php-format
 msgid "Success — record created in Zoho (id %s)."
 msgstr ""
 #: includes/Admin/FeedsPage.php:1292
 msgid "Success — a test record was created in Zoho."
 msgstr ""
 #: includes/Admin/FeedsPage.php:1611
 #: includes/Admin/SettingsPage.php:393
+#: includes/Admin/FeedsPage.php:2429
+#, php-format
+msgid "Success: record created in Zoho (id %s)."
+msgstr ""
+#: includes/Admin/FeedsPage.php:2430
+msgid "Success: a test record was created in Zoho."
+msgstr ""
+#: includes/Admin/FeedsPage.php:2878
+#: includes/Admin/SettingsPage.php:464
 msgid "Dismiss"
 msgstr ""
 #: includes/Admin/FeedsPage.php:1624
+#: includes/Admin/FeedsPage.php:2891
 msgid "Feed saved."
 msgstr ""
 #: includes/Admin/FeedsPage.php:1628
 msgid "Feed saved, but the Zoho account it referred to no longer exists. The feed has been switched off — pick a connected account and enable it again."
 msgstr ""
 #: includes/Admin/FeedsPage.php:1631
+#: includes/Admin/FeedsPage.php:2895
+msgid "Feed saved, but the Zoho account it referred to no longer exists. The feed has been switched off. Pick a connected account and enable it again."
+msgstr ""
+#: includes/Admin/FeedsPage.php:2898
 msgid "Feed deleted."
 msgstr ""
+#. translators: %d: number of mapping rows that aimed at a Zoho field another row had already taken.
+#: includes/Admin/FeedsPage.php:2910
+#, php-format
+msgid "%d mapping row was left out because another row already sends to that Zoho field. A field can only hold one value. Use the \"Combine fields\" source if you need several answers in one."
+msgid_plural "%d mapping rows were left out because other rows already send to those Zoho fields. A field can only hold one value. Use the \"Combine fields\" source if you need several answers in one."
+msgstr[0] ""
+msgstr[1] ""
 #. translators: %d: number of mapping rows that were left out.
 #: includes/Admin/FeedsPage.php:1643
+#: includes/Admin/FeedsPage.php:2928
 #, php-format
 msgid "%d mapping row was left out because it had no form field chosen and no static value typed. Finish the row and save again."
 …
 msgstr[1] ""
+#: includes/Admin/SettingsPage.php:91
+#: includes/Admin/SettingsPage.php:92
+#: includes/Admin/SettingsPage.php:270
+#. translators: %d: number of mapping rows whose static value their Zoho field would not accept.
+#: includes/Admin/FeedsPage.php:2946
+#, php-format
+msgid "%d mapping row was left out because its static value is not the kind of value its Zoho field accepts, such as letters in a phone number. Correct it and save again."
+msgid_plural "%d mapping rows were left out because their static values are not the kind of value their Zoho fields accept, such as letters in a phone number. Correct them and save again."
+msgstr[0] ""
+msgstr[1] ""
+#: includes/Admin/ProUpsell.php:92
+msgid "Every new customer reaches Zoho about a minute after they register or check out, with name, email, phone and both addresses mapped to whichever fields you choose."
+msgstr ""
+#: includes/Admin/ProUpsell.php:93
+msgid "Members reach Zoho when a membership starts, renews, lapses or is cancelled, carrying the plan name and the expiry date with them."
+msgstr ""
+#: includes/Admin/ProUpsell.php:94
+msgid "Learners reach Zoho when they are given access to a course, and again when they finish it, with the course name and their progress."
+msgstr ""
+#: includes/Admin/ProUpsell.php:95
+msgid "Students reach Zoho when they enrol, when they complete a course, and when an enrolment is cancelled."
+msgstr ""
+#: includes/Admin/ProUpsell.php:96
+msgid "Donors reach Zoho the moment a donation completes, with the amount, the currency and the campaign they gave to."
+msgstr ""
+#: includes/Admin/ProUpsell.php:97
+msgid "Buyers reach Zoho when a purchase completes, with what they bought and what they have spent with you in total."
+msgstr ""
+#: includes/Admin/ProUpsell.php:98
+msgid "Customers reach Zoho when an appointment is booked, rescheduled or cancelled, with the service and the appointment time."
+msgstr ""
+#: includes/Admin/ProUpsell.php:99
+msgid "Vendors reach Zoho when a store is created, and again whenever the store profile changes, with shop name, address and payment contact included."
+msgstr ""
+#: includes/Admin/ProUpsell.php:100
+msgid "Employers reach Zoho when they submit a job listing, with the company name, the listing title and where the role is based."
+msgstr ""
+#: includes/Admin/ProUpsell.php:101
+msgid "Attendees reach Zoho as tickets are bought and RSVPs come in, with the event they are coming to and the ticket they hold."
+msgstr ""
+#: includes/Admin/ProUpsell.php:102
+msgid "Name any action your code fires (your own, your theme's, another plugin's) and a feed runs when it does. Its arguments become fields you can map, so anything on your site that already announces itself can reach Zoho through the same feeds, mapping and delivery log as your forms."
+msgstr ""
+#. translators: %s: source name, e.g. "WooCommerce Customer".
+#: includes/Admin/ProUpsell.php:119
+#, php-format
+msgid "%s is part of FormBridge Pro"
+msgstr ""
+#: includes/Admin/ProUpsell.php:130
+msgid "Ten triggers that are people, not forms"
+msgstr ""
+#: includes/Admin/ProUpsell.php:131
+msgid "Customers, members, learners, students, donors, vendors, employers and attendees, each one syncing on its own events with no form involved."
+msgstr ""
+#: includes/Admin/ProUpsell.php:134
+msgid "Zoho Inventory as a destination"
+msgstr ""
+#: includes/Admin/ProUpsell.php:135
+msgid "A seventh Zoho app alongside CRM, Bigin, Books, Desk, Campaigns and Marketing Automation."
+msgstr ""
+#: includes/Admin/ProUpsell.php:138
+msgid "Nothing new to learn"
+msgstr ""
+#: includes/Admin/ProUpsell.php:139
+msgid "A Pro trigger is an ordinary feed: the same field mapping, the same duplicate handling, the same delivery log and retries."
+msgstr ""
+#: includes/Admin/ProUpsell.php:142
+msgid "Updates in your dashboard"
+msgstr ""
+#: includes/Admin/ProUpsell.php:143
+msgid "Activate your licence once and Pro updates from the Plugins screen like anything else."
+msgstr ""
+#: includes/Admin/ProUpsell.php:257
+#: includes/Admin/ProUpsell.php:294
+#: includes/Admin/ProUpsell.php:300
+msgid "Upgrade to Pro"
+msgstr ""
+#: includes/Admin/ProUpsell.php:258
+#: includes/Admin/ProUpsell.php:449
+msgid "(opens in a new tab)"
+msgstr ""
+#: includes/Admin/ProUpsell.php:359
+msgid "Upgrade to Pro (opens in a new tab)"
+msgstr ""
+#: includes/Admin/ProUpsell.php:423
+msgid "Included with Pro"
+msgstr ""
+#: includes/Admin/ProUpsell.php:448
+msgid "Get FormBridge Pro"
+msgstr ""
+#: includes/Admin/ProUpsell.php:457
+msgid "Maybe later"
+msgstr ""
+#: includes/Admin/SettingsPage.php:104
+#: includes/Admin/SettingsPage.php:105
+#: includes/Admin/SettingsPage.php:305
 msgid "Connections"
 msgstr ""
 #: includes/Admin/SettingsPage.php:146
+#: includes/Admin/SettingsPage.php:160
 msgid "Select a Zoho service"
 msgstr ""
 #: includes/Admin/SettingsPage.php:147
+#: includes/Admin/SettingsPage.php:161
 msgid "Select an organization"
 msgstr ""
 #: includes/Admin/SettingsPage.php:148
+#: includes/Admin/SettingsPage.php:162
 msgid "Load modules"
 msgstr ""
 #: includes/Admin/SettingsPage.php:149
+#: includes/Admin/SettingsPage.php:163
 msgid "Modules"
 msgstr ""
 #: includes/Admin/SettingsPage.php:150
+#: includes/Admin/SettingsPage.php:164
 msgid "Fields"
 msgstr ""
 #: includes/Admin/SettingsPage.php:151
+#: includes/Admin/SettingsPage.php:165
 msgid "API name"
 msgstr ""
 #: includes/Admin/SettingsPage.php:152
 #: includes/Admin/SettingsPage.php:520
+#: includes/Admin/SettingsPage.php:166
+#: includes/Admin/SettingsPage.php:611
 msgid "Label"
 msgstr ""
+#: includes/Admin/SettingsPage.php:153
+msgid "Required"
+msgstr ""
+#: includes/Admin/SettingsPage.php:154
+msgid "Copy these API names into a feed under Techwave Sync → Forms."
+msgstr ""
+#: includes/Admin/SettingsPage.php:155
+#: includes/Admin/SettingsPage.php:168
+msgid "Copy these API names into a feed under FormBridge → All Feeds."
+msgstr ""
+#: includes/Admin/SettingsPage.php:169
 msgid "Nothing returned."
 msgstr ""
 #: includes/Admin/SettingsPage.php:156
+#: includes/Admin/SettingsPage.php:170
 msgid "Sending…"
 msgstr ""
 #: includes/Admin/SettingsPage.php:157
 #: includes/Admin/SettingsPage.php:1036
+#: includes/Admin/SettingsPage.php:171
+#: includes/Admin/SettingsPage.php:1377
 msgid "Send test email"
 msgstr ""
 #: includes/Admin/SettingsPage.php:158
 #: includes/Auth/ConnectionManager.php:268
+#: includes/Admin/SettingsPage.php:172
+#: includes/Auth/ConnectionManager.php:411
 msgid "Choose at least one Zoho app for this connection."
 msgstr ""
 #: includes/Admin/SettingsPage.php:271
+#: includes/Admin/SettingsPage.php:306
 msgid "Logs"
 msgstr ""
 #: includes/Admin/SettingsPage.php:272
+#: includes/Admin/SettingsPage.php:307
 msgid "Settings"
 msgstr ""
+#: includes/Admin/SettingsPage.php:305
+#: includes/Admin/SettingsPage.php:358
+msgid "Back to feeds"
+msgstr ""
+#: includes/Admin/SettingsPage.php:376
 msgid "Zoho account connected."
 msgstr ""
 #: includes/Admin/SettingsPage.php:306
+#: includes/Admin/SettingsPage.php:377
 msgid "Security check failed. Please try connecting again."
 msgstr ""
 #: includes/Admin/SettingsPage.php:307
+#: includes/Admin/SettingsPage.php:378
 msgid "Authorisation was cancelled or denied."
 msgstr ""
 #: includes/Admin/SettingsPage.php:308
+#: includes/Admin/SettingsPage.php:379
 msgid "Could not exchange the code for tokens. Check the client credentials and data centre."
 msgstr ""
 #: includes/Admin/SettingsPage.php:309
+#: includes/Admin/SettingsPage.php:380
 msgid "Zoho authorised the connection, but the refresh token could not be encrypted, so nothing was saved. Enable PHP's OpenSSL extension and try again."
 msgstr ""
 #: includes/Admin/SettingsPage.php:328
+#: includes/Admin/SettingsPage.php:399
 msgid "Settings saved."
 msgstr ""
 #: includes/Admin/SettingsPage.php:329
+#: includes/Admin/SettingsPage.php:400
 msgid "All log entries were deleted."
 msgstr ""
 #: includes/Admin/SettingsPage.php:330
+#: includes/Admin/SettingsPage.php:401
 msgid "Connection deleted."
 msgstr ""
 #: includes/Admin/SettingsPage.php:419
 msgid "This server is missing PHP's OpenSSL extension (with AES-256-GCM), so Zoho credentials cannot be encrypted. Adding a connection is disabled until your host enables it — the plugin will not store a client secret or refresh token unencrypted."
 msgstr ""
 #: includes/Admin/SettingsPage.php:420
+#: includes/Admin/SettingsPage.php:490
+msgid "This server is missing PHP's OpenSSL extension (with AES-256-GCM), so Zoho credentials cannot be encrypted. Adding a connection is disabled until your host enables it. The plugin will not store a client secret or refresh token unencrypted."
+msgstr ""
+#: includes/Admin/SettingsPage.php:491
 msgid "Cannot store credentials securely"
 msgstr ""
 #: includes/Admin/SettingsPage.php:434
+#: includes/Admin/SettingsPage.php:505
 msgid "This site has no AUTH_KEY in wp-config.php, so the Zoho credentials saved here were encrypted with a key derived only from your database. A copy of the database alone could read them. Add the WordPress security keys to wp-config.php, then use \"Reauthorize\" on each connection below to re-encrypt them properly."
 msgstr ""
 #: includes/Admin/SettingsPage.php:435
+#: includes/Admin/SettingsPage.php:506
 msgid "Stored credentials are weakly protected"
 msgstr ""
 #: includes/Admin/SettingsPage.php:454
 #: includes/Admin/SettingsPage.php:619
+#: includes/Admin/SettingsPage.php:525
+#: includes/Admin/SettingsPage.php:759
 msgid "Connect one or more Zoho accounts. Each feed can then pick which account, app and module to use."
 msgstr ""
 #: includes/Admin/SettingsPage.php:458
+#: includes/Admin/SettingsPage.php:529
 msgid "Connected accounts"
 msgstr ""
 #: includes/Admin/SettingsPage.php:469
 #: includes/Admin/SettingsPage.php:625
+#: includes/Admin/SettingsPage.php:540
+#: includes/Admin/SettingsPage.php:765
 msgid "Create Connection"
 msgstr ""
 #: includes/Admin/SettingsPage.php:495
+#: includes/Admin/SettingsPage.php:566
 msgid "Create a connection"
 msgstr ""
+#: includes/Admin/SettingsPage.php:496
+msgid "Register this site as a Server-based Applications in the Zoho API console, then paste the credentials below."
+msgstr ""
+#: includes/Admin/SettingsPage.php:509
+#. translators: %s: link to the Zoho API console, reading "Zoho API console".
+#: includes/Admin/SettingsPage.php:576
+#, php-format
+msgid "Register this site as a Server-based Application in the %s, then paste the credentials below."
+msgstr ""
+#: includes/Admin/SettingsPage.php:580
+msgid "Zoho API console"
+msgstr ""
+#: includes/Admin/SettingsPage.php:596
 msgid "Redirect URI for the Zoho console"
 msgstr ""
 #: includes/Admin/SettingsPage.php:520
+#: includes/Admin/SettingsPage.php:611
 msgid "A name to recognise this account."
 msgstr ""
 #: includes/Admin/SettingsPage.php:521
+#: includes/Admin/SettingsPage.php:612
 msgid "Data centre"
 msgstr ""
 #: includes/Admin/SettingsPage.php:524
+#: includes/Admin/SettingsPage.php:615
 msgid "Authorize for"
 msgstr ""
 #: includes/Admin/SettingsPage.php:543
 msgid "Check only the Zoho apps this account will actually send to — Zoho asks permission for exactly what you pick here, and nothing else. You can add more later with \"Edit access\" on the connection, without deleting it. \"All applications\" requests every permission the plugin supports at once and is rarely what you want."
 msgstr ""
 #: includes/Admin/SettingsPage.php:546
+#: includes/Admin/SettingsPage.php:634
+msgid "Check only the Zoho apps this account will actually send to. Zoho asks permission for exactly what you pick here, and nothing else. You can add more later with \"Edit access\" on the connection, without deleting it. \"All applications\" requests every permission the plugin supports at once and is rarely what you want."
+msgstr ""
+#: includes/Admin/SettingsPage.php:637
 msgid "Client ID"
 msgstr ""
 #: includes/Admin/SettingsPage.php:547
+#: includes/Admin/SettingsPage.php:638
 msgid "Client Secret"
 msgstr ""
 #: includes/Admin/SettingsPage.php:554
+#: includes/Admin/SettingsPage.php:645
 msgid "Connect with Zoho"
 msgstr ""
+#: includes/Admin/SettingsPage.php:618
+#: includes/Admin/SettingsPage.php:662
+msgid "Setup guide"
+msgstr ""
+#: includes/Admin/SettingsPage.php:669
+msgid "Watch: connect an account"
+msgstr ""
+#: includes/Admin/SettingsPage.php:758
 msgid "Connect your first Zoho account"
 msgstr ""
 #: includes/Admin/SettingsPage.php:634
+#: includes/Admin/SettingsPage.php:776
 msgid "Account"
 msgstr ""
 #: includes/Admin/SettingsPage.php:635
+#: includes/Admin/SettingsPage.php:777
 msgid "Authorized for"
 msgstr ""
 #: includes/Admin/SettingsPage.php:700
 #: includes/Admin/SettingsPage.php:761
 #: includes/Auth/ConnectionManager.php:116
+#: includes/Admin/SettingsPage.php:842
+#: includes/Admin/SettingsPage.php:906
+#: includes/Auth/ConnectionManager.php:200
 msgid "All applications"
 msgstr ""
 #: includes/Admin/SettingsPage.php:709
+#: includes/Admin/SettingsPage.php:851
 msgid "Edit access"
 msgstr ""
 #: includes/Admin/SettingsPage.php:715
+#: includes/Admin/SettingsPage.php:857
 msgid "Connected"
 msgstr ""
 #: includes/Admin/SettingsPage.php:717
+#: includes/Admin/SettingsPage.php:859
 msgid "Not authorised"
 msgstr ""
 #: includes/Admin/SettingsPage.php:722
+#: includes/Admin/SettingsPage.php:864
 msgid "Re-authorize"
 msgstr ""
 #: includes/Admin/SettingsPage.php:722
+#: includes/Admin/SettingsPage.php:864
 msgid "Re-authorize with the same access"
 msgstr ""
 #: includes/Admin/SettingsPage.php:728
+#: includes/Admin/SettingsPage.php:874
 msgid "Bigin org lookup failed"
 msgstr ""
 #: includes/Admin/SettingsPage.php:729
+#: includes/Admin/SettingsPage.php:875
 msgid "Reconnect to fix"
 msgstr ""
 #: includes/Admin/SettingsPage.php:739
+#: includes/Admin/SettingsPage.php:885
 msgid "Modules & fields"
 msgstr ""
 #: includes/Admin/SettingsPage.php:740
+#: includes/Admin/SettingsPage.php:886
 msgid "Delete this connection? Any feed using it will stop sending until a new connection is picked."
 msgstr ""
 #: includes/Admin/SettingsPage.php:756
+#: includes/Admin/SettingsPage.php:902
 msgid "Check every Zoho app this connection should have access to, then reauthorize. Zoho will ask you to approve the updated list."
 msgstr ""
 #: includes/Admin/SettingsPage.php:766
+#: includes/Admin/SettingsPage.php:916
 msgid "Update & Reauthorize"
 msgstr ""
 #: includes/Admin/SettingsPage.php:797
 msgid "Copy an API name into a feed under Techwave Sync → Forms."
 msgstr ""
 #: includes/Admin/SettingsPage.php:827
+#: includes/Admin/SettingsPage.php:947
+msgid "Copy an API name into a feed under FormBridge → All Feeds."
+msgstr ""
+#: includes/Admin/SettingsPage.php:983
 msgid "Resubmit selected"
 msgstr ""
 #: includes/Admin/SettingsPage.php:838
+#: includes/Admin/SettingsPage.php:994
 msgid "Live"
 msgstr ""
 #: includes/Admin/SettingsPage.php:843
+#: includes/Admin/SettingsPage.php:999
 msgid "Clear logs"
 msgstr ""
 #: includes/Admin/SettingsPage.php:856
+#: includes/Admin/SettingsPage.php:1012
 msgid "No log entries yet"
 msgstr ""
 #: includes/Admin/SettingsPage.php:857
 msgid "Every delivery to Zoho is recorded here — successes, failures and the exact data sent. New submissions appear instantly while Live is on."
 msgstr ""
 #: includes/Admin/SettingsPage.php:865
+#: includes/Admin/SettingsPage.php:1013
+msgid "Every delivery to Zoho is recorded here: successes, failures and the exact data sent. New submissions appear instantly while Live is on."
+msgstr ""
+#: includes/Admin/SettingsPage.php:1021
 msgid "Select all log entries"
 msgstr ""
+#: includes/Admin/SettingsPage.php:866
+msgid "Time (UTC)"
+msgstr ""
+#: includes/Admin/SettingsPage.php:868
+#. translators: %s: the site's timezone, e.g. Asia/Dhaka or UTC+06:00.
+#: includes/Admin/SettingsPage.php:1022
+#, php-format
+msgid "Time (%s)"
+msgstr ""
+#: includes/Admin/SettingsPage.php:1024
 msgid "App"
 msgstr ""
 #: includes/Admin/SettingsPage.php:872
+#: includes/Admin/SettingsPage.php:1028
 #: includes/Privacy/PrivacyProvider.php:168
 msgid "Message"
 msgstr ""
+#: includes/Admin/SettingsPage.php:979
+#: includes/Admin/SettingsPage.php:985
+#. translators: 1: current page number, 2: total pages, 3: total number of log entries.
+#: includes/Admin/SettingsPage.php:1261
+#, php-format
+msgid "Page %1$s of %2$s · %3$s entry"
+msgid_plural "Page %1$s of %2$s · %3$s entries"
+msgstr[0] ""
+msgstr[1] ""
+#: includes/Admin/SettingsPage.php:1320
+#: includes/Admin/SettingsPage.php:1326
 msgid "Logging"
 msgstr ""
 #: includes/Admin/SettingsPage.php:980
+#: includes/Admin/SettingsPage.php:1321
 msgid "What the Logs tab records, and how long it keeps it."
 msgstr ""
 #: includes/Admin/SettingsPage.php:986
+#: includes/Admin/SettingsPage.php:1327
 msgid "Record the outcome of every delivery on the Logs tab."
 msgstr ""
 #: includes/Admin/SettingsPage.php:992
+#: includes/Admin/SettingsPage.php:1333
 msgid "Store submitted values in the log"
 msgstr ""
 #: includes/Admin/SettingsPage.php:993
 msgid "Off by default. When off, only the field names are recorded, never what a visitor typed. Turn it on only if you need the Logs screen's one-click Resubmit, which replays the stored values — anything your forms collect, including personal data, is then kept in the log table for the retention period below."
 msgstr ""
 #: includes/Admin/SettingsPage.php:999
+#: includes/Admin/SettingsPage.php:1334
+msgid "Off by default. When off, only the field names are recorded, never what a visitor typed. Turn it on only if you need the Logs screen's one-click Resubmit, which replays the stored values. Anything your forms collect, including personal data, is then kept in the log table until the entry is deleted."
+msgstr ""
+#: includes/Admin/SettingsPage.php:1340
 msgid "Delete log entries automatically"
 msgstr ""
 #: includes/Admin/SettingsPage.php:1000
 msgid "Deletes log entries older than this many days, once a day."
 msgstr ""
 #: includes/Admin/SettingsPage.php:1001
+#: includes/Admin/SettingsPage.php:1341
+msgid "Off by default, so log entries stay until you delete them. When on, entries older than this many days are deleted once a day."
+msgstr ""
+#: includes/Admin/SettingsPage.php:1342
 msgid "Days to keep log entries"
 msgstr ""
 #: includes/Admin/SettingsPage.php:1003
+#: includes/Admin/SettingsPage.php:1344
 msgid "Days"
 msgstr ""
 #: includes/Admin/SettingsPage.php:1007
+#: includes/Admin/SettingsPage.php:1348
 msgid "days"
 msgstr ""
 #: includes/Admin/SettingsPage.php:1013
+#: includes/Admin/SettingsPage.php:1354
 msgid "Notifications"
 msgstr ""
 #: includes/Admin/SettingsPage.php:1014
+#: includes/Admin/SettingsPage.php:1355
 msgid "Emails sent to the site admin address when something needs attention."
 msgstr ""
 #: includes/Admin/SettingsPage.php:1019
+#: includes/Admin/SettingsPage.php:1360
 msgid "Email me when an integration fails"
 msgstr ""
 #: includes/Admin/SettingsPage.php:1020
+#: includes/Admin/SettingsPage.php:1361
 msgid "Sends a notification to the site admin email whenever a submission permanently fails to reach Zoho."
 msgstr ""
 #: includes/Admin/SettingsPage.php:1026
+#: includes/Admin/SettingsPage.php:1367
 msgid "Email me when a connection fails or is deleted"
 msgstr ""
 #: includes/Admin/SettingsPage.php:1027
+#: includes/Admin/SettingsPage.php:1368
 msgid "Sends a notification to the site admin email whenever a Zoho connection stops working or is removed from the Connections tab."
 msgstr ""
 #. translators: %s: administration email address.
 #: includes/Admin/SettingsPage.php:1040
 #, php-format
 msgid "Sends one message to %s to check this site can send mail at all."
 msgstr ""
 #: includes/Admin/SettingsPage.php:1054
+#: includes/Admin/SettingsPage.php:1381
+#, php-format
+msgid "Sends one message to %s with the PHP mail function, the same way the notifications are sent."
+msgstr ""
+#: includes/Admin/SettingsPage.php:1395
 msgid "Data & privacy"
 msgstr ""
 #: includes/Admin/SettingsPage.php:1055
+#: includes/Admin/SettingsPage.php:1396
 msgid "What happens to everything this plugin stored, if you ever delete it."
 msgstr ""
 #: includes/Admin/SettingsPage.php:1061
+#: includes/Admin/SettingsPage.php:1402
 msgid "Erase all plugin data when the plugin is deleted"
 msgstr ""
 #: includes/Admin/SettingsPage.php:1062
 msgid "Drops the log table and removes every connection, feed, stored token and scheduled event. Off by default so deactivating and reinstalling does not destroy your setup. This cannot be undone."
+#: includes/Admin/SettingsPage.php:1403
+msgid "Drops the log table and removes every connection, feed and stored token. Off by default so deactivating and reinstalling does not destroy your setup. This cannot be undone."
 msgstr ""
 #. translators: %s: version number, e.g. 1.0.0.
+#: includes/Admin/SettingsPage.php:1079
+#, php-format
+msgid "Techwave Form Sync for Zoho version %s"
+msgstr ""
+#: includes/Api/AbstractClient.php:190
+msgid "Zoho rejected the access token."
+#: includes/Admin/SettingsPage.php:1420
+#, php-format
+msgid "FormBridge for Zoho version %s"
+msgstr ""
+#. translators: %s: file path.
+#: includes/Api/AbstractClient.php:188
+#, php-format
+msgid "The uploaded file could not be read from %s."
+msgstr ""
+#. translators: %d: the limit in megabytes.
+#: includes/Api/AbstractClient.php:203
+#, php-format
+msgid "This submission has already sent %dMB of files, which is all this request will carry."
+msgstr ""
+#. translators: 1: file name, 2: Zoho's limit in megabytes.
+#: includes/Api/AbstractClient.php:214
+#, php-format
+msgid "%1$s is larger than the %2$dMB Zoho accepts for a file field."
+msgstr ""
+#: includes/Api/AbstractClient.php:235
+msgid "The uploaded file could not be read."
+msgstr ""
+#: includes/Api/AbstractClient.php:290
+msgid "This connection was authorised before the plugin could upload files, so Zoho refused it. Open Connections, use \"Edit access\" on the account, and press Update & Reauthorize, then submit the form again."
 msgstr ""
 #. translators: 1: HTTP status code, 2: detail from Zoho.
+#: includes/Api/AbstractClient.php:198
+#: includes/Api/AbstractClient.php:299
+#, php-format
+msgid "Zoho refused the file upload. HTTP %1$d. %2$s"
+msgstr ""
+#: includes/Api/AbstractClient.php:570
+msgid "Zoho rejected the access token. The connection may need reauthorizing: open Connections, use \"Edit access\", and press Update & Reauthorize."
+msgstr ""
+#. translators: 1: HTTP status code, 2: detail from Zoho.
+#: includes/Api/AbstractClient.php:580
 #, php-format
 msgid "Zoho API returned HTTP %1$d. %2$s"
 msgstr ""
 #: includes/Api/AbstractClient.php:291
+#: includes/Api/AbstractClient.php:673
 msgid "No detail provided."
 msgstr ""
 #: includes/Api/BiginClient.php:108
+#: includes/Api/BiginClient.php:120
 msgid "Zoho responded, but the organization info did not include a domain_name."
 msgstr ""
 #: includes/Api/BooksClient.php:80
+#: includes/Api/BooksClient.php:281
 msgid "Customers / Contacts"
 msgstr ""
 #: includes/Api/BooksClient.php:84
+#: includes/Api/BooksClient.php:285
 msgid "Items"
 msgstr ""
 #: includes/Api/BooksClient.php:88
+#: includes/Api/BooksClient.php:289
 msgid "Invoices"
 msgstr ""
 #: includes/Api/BooksClient.php:92
+#: includes/Api/BooksClient.php:293
 msgid "Estimates"
 msgstr ""
 #: includes/Api/BooksClient.php:96
+#: includes/Api/BooksClient.php:297
 msgid "Sales Orders"
 msgstr ""
 #: includes/Api/BooksClient.php:100
+#: includes/Api/BooksClient.php:301
 msgid "Purchase Orders"
 msgstr ""
 #: includes/Api/BooksClient.php:104
+#: includes/Api/BooksClient.php:305
 msgid "Bills"
 msgstr ""
 #: includes/Api/BooksClient.php:108
+#: includes/Api/BooksClient.php:309
 msgid "Expenses"
 msgstr ""
 #: includes/Api/BooksClient.php:198
+#: includes/Api/BooksClient.php:567
 msgid "Select a Zoho Books organisation for this form."
 msgstr ""
 #: includes/Api/BooksClient.php:226
 #: includes/Api/DeskClient.php:314
+#: includes/Api/BooksClient.php:696
+#: includes/Api/DeskClient.php:425
 msgid "Web Lead"
 msgstr ""
 #: includes/Api/CampaignsClient.php:158
+#: includes/Api/CampaignsClient.php:200
 msgid "Zoho did not return any contact fields for this account."
 msgstr ""
 #. translators: %s: comma-separated list of keys Zoho actually sent for one field row.
 #: includes/Api/CampaignsClient.php:188
+#: includes/Api/CampaignsClient.php:230
 #, php-format
 msgid "Zoho returned %1$d contact field row(s), but none matched the expected format. Keys seen: %2$s"
 msgstr ""
 #: includes/Api/CampaignsClient.php:190
 #: includes/Api/CampaignsClient.php:358
 #: includes/Api/MarketingAutomationClient.php:169
+#: includes/Api/CampaignsClient.php:232
+#: includes/Api/CampaignsClient.php:400
+#: includes/Api/MarketingAutomationClient.php:211
 msgid "(row was not an object)"
 msgstr ""
 #: includes/Api/CampaignsClient.php:302
+#: includes/Api/CampaignsClient.php:344
 msgid "Zoho returned an empty or non-JSON response for the tags request. Re-authorize the connection (the token may be missing the ZohoCampaigns.contact scope) and try again."
 msgstr ""
 #: includes/Api/CampaignsClient.php:311
+#: includes/Api/CampaignsClient.php:353
 msgid "Zoho rejected the tags request."
 msgstr ""
 #. translators: %s: comma-separated list of keys Zoho actually sent for one tag row.
 #: includes/Api/CampaignsClient.php:356
+#: includes/Api/CampaignsClient.php:398
 #, php-format
 msgid "Zoho returned %1$d tag row(s), but none matched the expected format. Keys seen: %2$s"
+msgstr ""
+#: includes/Api/CrmClient.php:74
+msgid "Zoho accepted the file but returned no id for it."
 msgstr ""
 …
 msgstr ""
 #: includes/Api/DeskClient.php:130
+#: includes/Api/DeskClient.php:197
 msgid "Subject"
 msgstr ""
 #: includes/Api/DeskClient.php:135
+#: includes/Api/DeskClient.php:202
 msgid "Contact last name"
 msgstr ""
 #: includes/Api/DeskClient.php:140
+#: includes/Api/DeskClient.php:207
 msgid "Contact first name"
 msgstr ""
 #: includes/Api/DeskClient.php:145
+#: includes/Api/DeskClient.php:212
 msgid "Contact email"
 msgstr ""
 #: includes/Api/DeskClient.php:150
+#: includes/Api/DeskClient.php:217
 msgid "Contact phone"
 msgstr ""
 #: includes/Api/DeskClient.php:155
 #: includes/Api/DeskClient.php:199
+#: includes/Api/DeskClient.php:222
+#: includes/Api/DeskClient.php:266
 msgid "Description"
 msgstr ""
 #: includes/Api/DeskClient.php:160
+#: includes/Api/DeskClient.php:227
 msgid "Priority"
 msgstr ""
 #: includes/Api/DeskClient.php:174
+#: includes/Api/DeskClient.php:241
 msgid "Last name"
 msgstr ""
 #: includes/Api/DeskClient.php:179
+#: includes/Api/DeskClient.php:246
 msgid "First name"
 msgstr ""
 #: includes/Api/DeskClient.php:184
+#: includes/Api/DeskClient.php:251
 msgid "Email"
 msgstr ""
 #: includes/Api/DeskClient.php:189
 #: includes/Api/DeskClient.php:218
+#: includes/Api/DeskClient.php:256
+#: includes/Api/DeskClient.php:285
 msgid "Phone"
 msgstr ""
 #: includes/Api/DeskClient.php:194
+#: includes/Api/DeskClient.php:261
 msgid "Mobile"
 msgstr ""
 #: includes/Api/DeskClient.php:208
+#: includes/Api/DeskClient.php:275
 msgid "Account name"
 msgstr ""
 #: includes/Api/DeskClient.php:213
+#: includes/Api/DeskClient.php:280
 msgid "Website"
 msgstr ""
 #: includes/Api/DeskClient.php:223
+#: includes/Api/DeskClient.php:290
 msgid "City"
 msgstr ""
 #: includes/Api/DeskClient.php:228
+#: includes/Api/DeskClient.php:295
 msgid "Country"
 msgstr ""
 #: includes/Api/DeskClient.php:248
+#: includes/Api/DeskClient.php:315
 msgid "Select a Zoho Desk organization for this feed."
 msgstr ""
 #: includes/Api/DeskClient.php:289
+#: includes/Api/DeskClient.php:400
 msgid "Choose a Department for this Zoho Desk feed."
 msgstr ""
 #: includes/Api/DeskClient.php:342
+#: includes/Api/DeskClient.php:453
 msgid "New web form submission"
 msgstr ""
 #: includes/Api/MarketingAutomationClient.php:141
+#: includes/Api/MarketingAutomationClient.php:183
 msgid "Zoho did not return any lead fields for this account."
 msgstr ""
 #. translators: %s: comma-separated list of keys Zoho actually sent for one field row.
 #: includes/Api/MarketingAutomationClient.php:167
+#: includes/Api/MarketingAutomationClient.php:209
 #, php-format
 msgid "Zoho returned %1$d lead field row(s), but none matched the expected format. Keys seen: %2$s"
 msgstr ""
 #: includes/Api/MarketingAutomationClient.php:251
+#: includes/Api/MarketingAutomationClient.php:293
 msgid "Zoho Marketing Automation does not have a tags feature."
 msgstr ""
 #: includes/Auth/ConnectionManager.php:164
 #: includes/Auth/ConnectionManager.php:300
+#: includes/Auth/ConnectionManager.php:249
+#: includes/Auth/ConnectionManager.php:441
 msgid "Connection not found."
 msgstr ""
 #: includes/Auth/ConnectionManager.php:175
+#: includes/Auth/ConnectionManager.php:254
 msgid "Choose at least one Zoho app."
 msgstr ""
 #: includes/Auth/ConnectionManager.php:227
 msgid "This server cannot encrypt credentials: PHP's OpenSSL extension with AES-256-GCM support is unavailable. Ask your host to enable it — the plugin will not store a Zoho client secret unencrypted."
 msgstr ""
 #: includes/Auth/ConnectionManager.php:233
+#: includes/Auth/ConnectionManager.php:376
+msgid "This server cannot encrypt credentials: PHP's OpenSSL extension with AES-256-GCM support is unavailable. Ask your host to enable it. The plugin will not store a Zoho client secret unencrypted."
+msgstr ""
+#: includes/Auth/ConnectionManager.php:382
 msgid "Please choose a valid Zoho data center."
 msgstr ""
 #: includes/Auth/ConnectionManager.php:244
+#: includes/Auth/ConnectionManager.php:393
 msgid "Client ID and Client Secret are required."
 msgstr ""
 #: includes/Auth/ConnectionManager.php:247
+#: includes/Auth/ConnectionManager.php:396
 msgid "That does not look like a Zoho Client ID / Client Secret. Copy both values exactly as shown in the Zoho API console."
 msgstr ""
 #: includes/Auth/ConnectionManager.php:277
+#: includes/Auth/ConnectionManager.php:418
 msgid "Zoho account"
 msgstr ""
 #: includes/Auth/ConnectionManager.php:321
+#: includes/Auth/ConnectionManager.php:475
 msgid "You are not allowed to do this."
 msgstr ""
 #: includes/Auth/ConnectionManager.php:491
+#: includes/Auth/ConnectionManager.php:823
 msgid "This Zoho connection is not authorised."
 msgstr ""
 #: includes/Auth/ConnectionManager.php:502
+#: includes/Auth/ConnectionManager.php:834
 msgid "Could not refresh the Zoho access token."
 msgstr ""
 #: includes/Auth/OAuthClient.php:135
+#: includes/Auth/OAuthClient.php:137
 msgid "Unreadable response from Zoho accounts server."
 msgstr ""
 #. translators: %d: HTTP status code.
 #: includes/Auth/OAuthClient.php:143
+#: includes/Auth/OAuthClient.php:145
 #, php-format
 msgid "Zoho returned HTTP %d during token request."
 …
 #. translators: %s: site name.
 #: includes/Core/Plugin.php:284
+#: includes/Core/Plugin.php:334
 #, php-format
 msgid "[%s] A form submission failed to reach Zoho"
 msgstr ""
 #: includes/Core/Plugin.php:287
+#: includes/Core/Plugin.php:337
 msgid "A form submission could not be sent to Zoho and will not be retried again automatically."
 msgstr ""
 #. translators: %s: integration/app id, e.g. "crm".
 #: includes/Core/Plugin.php:290
+#: includes/Core/Plugin.php:340
 #, php-format
 msgid "App: %s"
 …
 #. translators: %s: form name.
 #: includes/Core/Plugin.php:292
+#: includes/Core/Plugin.php:342
 #, php-format
 msgid "Form: %s"
 …
 #. translators: %s: error message.
 #: includes/Core/Plugin.php:294
 #: includes/Core/Plugin.php:357
+#: includes/Core/Plugin.php:344
+#: includes/Core/Plugin.php:407
 #, php-format
 msgid "Reason: %s"
 …
 #. translators: %s: URL to the plugin's Logs screen.
 #: includes/Core/Plugin.php:297
+#: includes/Core/Plugin.php:347
 #, php-format
 msgid "View the full log entry: %s"
 …
 #. translators: %s: site name.
 #: includes/Core/Plugin.php:350
+#: includes/Core/Plugin.php:400
 #, php-format
 msgid "[%s] A Zoho connection has failed"
 …
 #. translators: %s: connection label.
 #: includes/Core/Plugin.php:354
+#: includes/Core/Plugin.php:404
 #, php-format
 msgid "The Zoho connection \"%s\" could not be authorised anymore. Form submissions using this connection will fail until it is re-authorized."
 …
 #. translators: %s: URL to the plugin's Connections screen.
 #: includes/Core/Plugin.php:360
+#: includes/Core/Plugin.php:410
 #, php-format
 msgid "Check the connection here: %s"
 …
 #. translators: %s: site name.
 #: includes/Core/Plugin.php:399
+#: includes/Core/Plugin.php:449
 #, php-format
 msgid "[%s] A Zoho connection was deleted"
 …
 #. translators: %s: connection label.
 #: includes/Core/Plugin.php:403
+#: includes/Core/Plugin.php:453
 #, php-format
 msgid "The Zoho connection \"%s\" was deleted from the Connections tab. Any feed that used this connection will stop sending until a new connection is picked."
 …
 #. translators: %s: URL to the plugin's Connections screen.
 #: includes/Core/Plugin.php:406
+#: includes/Core/Plugin.php:456
 #, php-format
 msgid "Manage connections here: %s"
 msgstr ""
 #. translators: %s: recipient email address.
 #: includes/Core/Plugin.php:467
 #, php-format
 msgid "A notification email to %s could not be sent. WordPress refused to hand it to a mailer — this site most likely has no working mail transport (many managed hosts need an SMTP plugin). The event itself was still recorded above."
+#. translators: 1: recipient email address. 2: the mailer's own reason, e.g. "Could not instantiate mail function."
+#: includes/Core/Plugin.php:520
+#, php-format
+msgid "A notification email to %1$s could not be sent with the PHP mail function. Reason: %2$s The event itself was still recorded above."
 msgstr ""
 …
 #: includes/Integrations/BiginIntegration.php:95
 #: includes/Integrations/BooksIntegration.php:110
+#: includes/Integrations/BooksIntegration.php:119
 #: includes/Integrations/CampaignsIntegration.php:149
 #: includes/Integrations/CrmIntegration.php:86
 #: includes/Integrations/DeskIntegration.php:122
+#: includes/Integrations/DeskIntegration.php:128
 #: includes/Integrations/MarketingAutomationIntegration.php:125
 msgid "Mapping produced no data to send."
 …
 #. translators: %s: reason the organization lookup failed.
 #: includes/Integrations/BiginIntegration.php:153
 #: includes/Integrations/BiginIntegration.php:174
+#: includes/Integrations/BiginIntegration.php:156
+#: includes/Integrations/BiginIntegration.php:177
 #, php-format
 msgid "\"View Record in Zoho\" link will open the Bigin homepage instead of the exact record: %s Reconnect this Bigin connection to fix it."
 msgstr ""
 #: includes/Integrations/BiginIntegration.php:219
+#: includes/Integrations/BiginIntegration.php:222
 msgid "Unexpected Bigin response."
 msgstr ""
 #: includes/Integrations/BooksIntegration.php:79
+#: includes/Integrations/BooksIntegration.php:85
 msgid "Choose a Books resource first."
 msgstr ""
 #: includes/Integrations/BooksIntegration.php:98
+#: includes/Integrations/BooksIntegration.php:107
 msgid "No Books resource configured."
 msgstr ""
 #: includes/Integrations/BooksIntegration.php:143
+#: includes/Integrations/BooksIntegration.php:152
 msgid "Unexpected Books response."
 msgstr ""
 …
 msgstr ""
+#: includes/Integrations/CampaignsIntegration.php:242
+#. translators: 1: Zoho field name, 2: the form field it is mapped to.
+#: includes/Integrations/CampaignsIntegration.php:180
+#: includes/Integrations/MarketingAutomationIntegration.php:156
+#, php-format
+msgid "The value mapped to \"%1$s\" is not an email address, so Zoho refused it. It comes from the form field \"%2$s\" — map the form's email field there instead."
+msgstr ""
+#. translators: %s: Zoho field name.
+#: includes/Integrations/CampaignsIntegration.php:186
+#: includes/Integrations/MarketingAutomationIntegration.php:162
+#, php-format
+msgid "The value mapped to \"%s\" is not an email address, so Zoho refused it."
+msgstr ""
+#: includes/Integrations/CampaignsIntegration.php:211
+msgid "Map a form field to the contact email. Zoho needs it to add the contact to the list."
+msgstr ""
+#. translators: %s: reason Zoho gave.
+#: includes/Integrations/CampaignsIntegration.php:226
+#, php-format
+msgid "The submitted fields were sent, but the contact could not be added to the mailing list directly: %s"
+msgstr ""
+#. translators: %s: the contact's email address.
+#: includes/Integrations/CampaignsIntegration.php:267
+#, php-format
+msgid "This contact was already in the mailing list, so Zoho updated it with the submitted fields (%s)."
+msgstr ""
+#: includes/Integrations/CampaignsIntegration.php:268
+msgid "This contact was already in the mailing list, so Zoho updated it with the submitted fields."
+msgstr ""
+#. translators: %s: the contact's email address.
+#: includes/Integrations/CampaignsIntegration.php:276
+#, php-format
+msgid "Contact unsubscribed in Zoho (%s)."
+msgstr ""
+#: includes/Integrations/CampaignsIntegration.php:277
+msgid "Contact unsubscribed in Zoho."
+msgstr ""
+#. translators: 1: tag name, 2: reason Zoho gave.
+#: includes/Integrations/CampaignsIntegration.php:300
+#, php-format
+msgid "The tag \"%1$s\" was not attached to the contact: %2$s"
+msgstr ""
+#: includes/Integrations/CampaignsIntegration.php:366
 msgid "Unexpected Campaigns response."
+msgstr ""
+#. translators: 1: Zoho's message, 2: Zoho's error code.
+#: includes/Integrations/CampaignsIntegration.php:373
+#: includes/Integrations/MarketingAutomationIntegration.php:321
+#, php-format
+msgid "%1$s (Zoho code %2$s)"
 msgstr ""
 …
 msgstr ""
 #: includes/Integrations/CrmIntegration.php:134
+#: includes/Integrations/CrmIntegration.php:240
 msgid "Unexpected CRM response."
 msgstr ""
 …
 msgstr ""
 #: includes/Integrations/DeskIntegration.php:110
+#: includes/Integrations/DeskIntegration.php:116
 msgid "No Desk module configured."
 msgstr ""
 #: includes/Integrations/DeskIntegration.php:163
+#: includes/Integrations/DeskIntegration.php:169
 msgid "Unexpected Desk response."
 msgstr ""
+#: includes/Integrations/MarketingAutomationIntegration.php:211
+#: includes/Integrations/MarketingAutomationIntegration.php:185
+msgid "Map a form field to the lead email. Zoho needs it to add the lead to the list."
+msgstr ""
+#. translators: %s: reason Zoho gave.
+#: includes/Integrations/MarketingAutomationIntegration.php:200
+#, php-format
+msgid "The submitted fields were sent, but the lead could not be added to the mailing list directly: %s"
+msgstr ""
+#. translators: %s: the lead's email address.
+#: includes/Integrations/MarketingAutomationIntegration.php:240
+#, php-format
+msgid "This lead was already in the mailing list, so Zoho updated it with the submitted fields (%s)."
+msgstr ""
+#: includes/Integrations/MarketingAutomationIntegration.php:241
+msgid "This lead was already in the mailing list, so Zoho updated it with the submitted fields."
+msgstr ""
+#. translators: %s: the lead's email address.
+#: includes/Integrations/MarketingAutomationIntegration.php:249
+#, php-format
+msgid "Lead unsubscribed in Zoho (%s)."
+msgstr ""
+#: includes/Integrations/MarketingAutomationIntegration.php:250
+msgid "Lead unsubscribed in Zoho."
+msgstr ""
+#: includes/Integrations/MarketingAutomationIntegration.php:314
 msgid "Unexpected Marketing Automation response."
+msgstr ""
+#. translators: marks a log entry that was too long to store in full.
+#: includes/Logging/Logger.php:191
+msgid "[cut: entry too long]"
 msgstr ""
 …
 #: includes/Privacy/PrivacyProvider.php:61
 msgid "This plugin also stores a delivery log entry for each submission (timestamp, status and a redacted API response). When the \"Store submitted values\" option is enabled — it is off by default — that entry additionally contains the submitted field values so a failed delivery can be resubmitted; with the option off, only the field names are recorded. Access tokens, refresh tokens and client secrets are never written to these logs in readable form. Log entries are deleted automatically after the retention period set on the plugin's Settings tab."
+msgid "This plugin also stores a delivery log entry for each submission (timestamp, status and a redacted API response). When the \"Store submitted values\" option is enabled (it is off by default), that entry additionally contains the submitted field values so a failed delivery can be resubmitted; with the option off, only the field names are recorded. Access tokens, refresh tokens and client secrets are never written to these logs in readable form. Log entries are kept until they are deleted, either by hand or automatically after a set number of days if that option is turned on in the plugin's Settings tab."
 msgstr ""
 …
 #: includes/Privacy/PrivacyProvider.php:92
 #: includes/Privacy/PrivacyProvider.php:183
 msgid "Techwave Form Sync for Zoho delivery logs"
+msgid "FormBridge for Zoho delivery logs"
 msgstr ""
 …
 #. translators: %s: Zoho record id.
 #: includes/Queue/Dispatcher.php:161
+#: includes/Queue/Dispatcher.php:243
 #, php-format
 msgid "Record updated in Zoho (id %s)."
 msgstr ""
 #: includes/Queue/Dispatcher.php:162
+#: includes/Queue/Dispatcher.php:244
 msgid "Record updated in Zoho."
 msgstr ""
 #. translators: %s: Zoho record id.
 #: includes/Queue/Dispatcher.php:166
+#: includes/Queue/Dispatcher.php:248
 #, php-format
 msgid "Record created in Zoho (id %s)."
 msgstr ""
 #: includes/Queue/Dispatcher.php:167
+#: includes/Queue/Dispatcher.php:249
 msgid "Record created in Zoho."
 msgstr ""
 #: includes/Support/BaseSubmissionHandler.php:101
+#: includes/Support/BaseSubmissionHandler.php:106
 msgid "Feed is enabled but has no Zoho app or connected account selected."
 msgstr ""
+#. translators: %s: the plugin's version number, e.g. 1.1.0.
+#: includes/Support/Branding.php:133
+#, php-format
+msgid "Version %s"
+msgstr ""
+#. translators: second half of the product name "FormBridge for Zoho", set lighter beside it. "Zoho" is a trademark and stays as-is.
+#: includes/Support/Branding.php:164
+msgid "for Zoho"
+msgstr ""
 #: includes/Support/Encryption.php:55
 msgid "This server cannot encrypt credentials: PHP's OpenSSL extension with AES-256-GCM support is unavailable. Ask your host to enable it — the plugin will not store a Zoho client secret or refresh token unencrypted."
+msgid "This server cannot encrypt credentials: PHP's OpenSSL extension with AES-256-GCM support is unavailable. Ask your host to enable it. The plugin will not store a Zoho client secret or refresh token unencrypted."
 msgstr ""
 #: includes/Support/Encryption.php:69
 msgid "This site has no AUTH_KEY defined in wp-config.php, so Zoho credentials cannot be encrypted safely. Add the WordPress security keys to wp-config.php and try again — the plugin will not store a client secret or refresh token that a copy of the database alone could decrypt."
+msgid "This site has no AUTH_KEY defined in wp-config.php, so Zoho credentials cannot be encrypted safely. Add the WordPress security keys to wp-config.php and try again. The plugin will not store a client secret or refresh token that a copy of the database alone could decrypt."
 msgstr ""
 …
 #. translators: %s: Zoho field name.
 #: includes/Support/ErrorTranslator.php:45
+#: includes/Support/ErrorTranslator.php:51
 #, php-format
 msgid "Zoho validation failed: %s is required."
 msgstr ""
 #: includes/Support/ErrorTranslator.php:46
+#: includes/Support/ErrorTranslator.php:52
 msgid "Record creation failed. A required field is missing."
 msgstr ""
 #. translators: %s: Zoho field name.
 #: includes/Support/ErrorTranslator.php:58
+#: includes/Support/ErrorTranslator.php:64
 #, php-format
 msgid "Zoho validation failed: %s is invalid."
 msgstr ""
 #: includes/Support/ErrorTranslator.php:62
+#: includes/Support/ErrorTranslator.php:68
 msgid "This record already exists in Zoho (duplicate)."
 msgstr ""
 #: includes/Support/ErrorTranslator.php:66
+#: includes/Support/ErrorTranslator.php:72
 msgid "Zoho rejected the connection. Reconnect the account under Connections."
 msgstr ""
 #: includes/Support/ErrorTranslator.php:70
+#: includes/Support/ErrorTranslator.php:76
 msgid "Record creation failed. Required fields are missing."
 msgstr ""
+#: includes/Support/FormSources.php:31
+#: includes/Support/ErrorTranslator.php:107
+msgid "the connection timed out"
+msgstr ""
+#: includes/Support/ErrorTranslator.php:109
+msgid "this server could not look up its address"
+msgstr ""
+#: includes/Support/ErrorTranslator.php:111
+msgid "the connection was refused or blocked"
+msgstr ""
+#: includes/Support/ErrorTranslator.php:113
+msgid "the secure connection could not be set up"
+msgstr ""
+#: includes/Support/ErrorTranslator.php:115
+msgid "the connection failed"
+msgstr ""
+#. translators: 1: host name, e.g. www.zohoapis.com. 2: what went wrong, e.g. "the connection timed out".
+#: includes/Support/ErrorTranslator.php:122
+#, php-format
+msgid "Could not reach Zoho (%1$s): %2$s."
+msgstr ""
+#. translators: %s: what went wrong, e.g. "the connection timed out".
+#: includes/Support/ErrorTranslator.php:124
+#, php-format
+msgid "Could not reach Zoho: %s."
+msgstr ""
+#: includes/Support/ErrorTranslator.php:130
+msgid "This is a network problem between this website and Zoho, not a problem with the feed. Try again in a moment. If it keeps happening, ask your hosting provider to allow outgoing HTTPS connections to Zoho."
+msgstr ""
+#. translators: %d: cURL error number, to pass on to the hosting provider.
+#: includes/Support/ErrorTranslator.php:134
+#, php-format
+msgid "(cURL error %d)"
+msgstr ""
+#: includes/Support/FormSources.php:35
 msgid "Elementor Pro Forms"
 msgstr ""
 #: includes/Support/FormSources.php:37
+#: includes/Support/FormSources.php:41
 msgid "Contact Form 7"
 msgstr ""
 #: includes/Support/FormSources.php:43
+#: includes/Support/FormSources.php:47
 msgid "WPForms"
 msgstr ""
 #: includes/Support/FormSources.php:49
+#: includes/Support/FormSources.php:53
 msgid "Fluent Forms"
 msgstr ""
 #: includes/Support/FormSources.php:55
+#: includes/Support/FormSources.php:59
 msgid "Forminator"
 msgstr ""
 #: includes/Support/FormSources.php:61
+#: includes/Support/FormSources.php:65
 msgid "Ninja Forms"
 msgstr ""
 #: includes/Support/FormSources.php:67
+#: includes/Support/FormSources.php:71
 msgid "Gravity Forms"
 msgstr ""
 #: includes/Support/FormSources.php:73
+#: includes/Support/FormSources.php:77
 msgid "Formidable Forms"
 msgstr ""
 #: includes/Support/FormSources.php:79
+#: includes/Support/FormSources.php:83
 msgid "Happy Forms"
 msgstr ""
 #: includes/Support/FormSources.php:85
+#: includes/Support/FormSources.php:89
 msgid "SureForms"
 msgstr ""
+#: includes/Support/FormSources.php:115
+msgid "WooCommerce Customer"
+msgstr ""
+#: includes/Support/FormSources.php:121
+msgid "MemberPress Member"
+msgstr ""
+#: includes/Support/FormSources.php:127
+msgid "LearnDash Learner"
+msgstr ""
+#: includes/Support/FormSources.php:133
+msgid "Tutor LMS Student"
+msgstr ""
+#: includes/Support/FormSources.php:139
+msgid "GiveWP Donor"
+msgstr ""
+#: includes/Support/FormSources.php:145
+msgid "EDD Customer"
+msgstr ""
+#: includes/Support/FormSources.php:151
+msgid "Amelia Customer"
+msgstr ""
+#: includes/Support/FormSources.php:157
+msgid "Dokan Vendor"
+msgstr ""
+#: includes/Support/FormSources.php:163
+msgid "Job Manager Employer"
+msgstr ""
+#: includes/Support/FormSources.php:169
+msgid "Event Attendee"
+msgstr ""
+#: includes/Support/FormSources.php:175
+msgid "LatePoint Customer"
+msgstr ""
+#: includes/Support/FormSources.php:181
+msgid "Bookly Customer"
+msgstr ""
+#: includes/Support/FormSources.php:187
+msgid "Simply Schedule Appointment"
+msgstr ""
+#: includes/Support/FormSources.php:193
+msgid "FluentBooking Attendee"
+msgstr ""
+#: includes/Support/FormSources.php:199
+msgid "Booking Calendar"
+msgstr ""
+#: includes/Support/FormSources.php:205
+msgid "Easy Appointments Booking"
+msgstr ""
+#: includes/Support/FormSources.php:211
+msgid "WooCommerce Booking"
+msgstr ""
+#: includes/Support/FormSources.php:225
+msgid "Action Hook"
+msgstr ""

techwave-form-sync-for-zoho/trunk/readme.txt

-              r3649280
+              r3748247
 === Techwave Form Sync for Zoho ===
+=== FormBridge for Zoho ===
 Contributors: kaderoishi
 Tags: zoho, crm, forms, integration, leads
 Requires at least: 6.2
 Tested up to: 7.0
+Tested up to: 7.1
 Requires PHP: 7.4
 Stable tag: 1.0.0
+Stable tag: 1.1.0
 License: GPLv2 or later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
 …
 == Description ==
 Techwave Form Sync for Zoho links the forms you already have to the Zoho apps you already use. When a visitor submits a form, the values you mapped are sent to the Zoho service configured for that form and a record is created in your Zoho account.
+FormBridge for Zoho links the forms you already have to the Zoho apps you already use. When a visitor submits a form, the values you mapped are sent to the Zoho service configured for that form and a record is created in your Zoho account.
 Each form is configured on its own, in one place. One form can create a lead in Zoho CRM, another a contact in Bigin, another a customer in Zoho Books, another a ticket in Zoho Desk, and another can subscribe someone to a Zoho Campaigns or Marketing Automation mailing list — with different forms pointing at different Zoho accounts, organizations and data centers if that is what you need.
+Each form is configured on its own, in one place. One form can create a lead in Zoho CRM, another a contact in Bigin, another a customer in Zoho Books, another a ticket in Zoho Desk, and another can subscribe someone to a Zoho Campaigns or Marketing Automation mailing list, with different forms pointing at different Zoho accounts, organizations and data centers if that is what you need.
 **What it covers**
 * **Ten form plugins, one mapping screen.** Elementor Pro Forms, Contact Form 7, WPForms, Gravity Forms, Ninja Forms, Fluent Forms, Formidable Forms, Forminator, Happy Forms and SureForms — all configured in the WordPress admin, not inside each form plugin's own editor, so a site running two form plugins still has one place to look.
+* **Ten form plugins, one mapping screen.** Elementor Pro Forms, Contact Form 7, WPForms, Gravity Forms, Ninja Forms, Fluent Forms, Formidable Forms, Forminator, Happy Forms and SureForms, all configured in the WordPress admin, not inside each form plugin's own editor, so a site running two form plugins still has one place to look.
 * **Six Zoho apps, not just CRM.** Zoho CRM, Zoho Bigin, Zoho Books, Zoho Desk, Zoho Campaigns and Zoho Marketing Automation.
 * **Per-form feeds.** A "feed" is one form → one Zoho destination. A form can be pointed anywhere, cloned, disabled, or switched to another account without touching the form itself.
 …
 * **Every Zoho data center.** US (.com), EU (.eu), India (.in), Australia (.com.au), Japan (.jp), Canada (.ca), Saudi Arabia (.sa) and China (.com.cn). Endpoints switch automatically for the data center each account was created in.
 * **Field mapping with static values.** Map each Zoho field to a form field or to a fixed value, with a duplicate check (upsert) for Zoho CRM and Zoho Bigin so the same person does not become two records.
+* **File uploads go too.** A file attached to a submission is sent to Zoho and lands in the file field you mapped it to, from every supported form plugin.
 * **Retries that do not lose submissions.** Delivery happens during the submission itself. A first attempt that fails for a transient reason is retried in the background instead of being dropped.
 * **Delivery logs and one-click resubmit.** Every delivery is recorded with its outcome, the exact fields sent, and a link straight to the record in Zoho. Tokens and secrets are redacted.
 …
 **Disclaimer**
 Techwave Form Sync for Zoho is an independent third-party plugin developed by Techwave Solutions and is not affiliated with, endorsed by, or sponsored by Zoho Corporation Pvt. Ltd. "Zoho", "Zoho CRM", "Bigin", "Zoho Books", "Zoho Desk", "Zoho Campaigns" and "Zoho Marketing Automation" are trademarks of Zoho Corporation Pvt. Ltd. All other product names referenced here — including Elementor, Contact Form 7, WPForms, Gravity Forms, Ninja Forms, Fluent Forms, Formidable Forms, Forminator, Happy Forms and SureForms — are trademarks of their respective owners and are used only to describe which form plugins this plugin can read submissions from. Using Techwave Form Sync for Zoho requires your own Zoho account, which is subject to Zoho's terms and pricing.
+FormBridge for Zoho is an independent third-party plugin developed by Techwave Solutions and is not affiliated with, endorsed by, or sponsored by Zoho Corporation Pvt. Ltd. "Zoho", "Zoho CRM", "Bigin", "Zoho Books", "Zoho Desk", "Zoho Campaigns" and "Zoho Marketing Automation" are trademarks of Zoho Corporation Pvt. Ltd. All other product names referenced here (including Elementor, Contact Form 7, WPForms, Gravity Forms, Ninja Forms, Fluent Forms, Formidable Forms, Forminator, Happy Forms and SureForms) are trademarks of their respective owners and are used only to describe which form plugins this plugin can read submissions from. Using FormBridge for Zoho requires your own Zoho account, which is subject to Zoho's terms and pricing.
 **How mapping works**
 All mapping is done in the WordPress admin under **Techwave Sync → Forms**, not inside any form plugin's own editor. You create a feed: pick the form plugin, pick the form by name, then choose the Zoho app, account, organization (where the app needs one) and module, and map each Zoho field to a form field or a static value. To find the exact Zoho API names, open **Techwave Sync → Connections** and use the **Modules & fields** button for that account.
+All mapping is done in the WordPress admin under **FormBridge → All Feeds**, not inside any form plugin's own editor. You create a feed: pick the form plugin, pick the form by name, then choose the Zoho app, account, organization (where the app needs one) and module, and map each Zoho field to a form field or a static value. To find the exact Zoho API names, open **FormBridge → Connections** and use the **Modules & fields** button for that account.
 == External services ==
 …
 * **What is sent:** the Client ID and Client Secret you entered from your own Zoho API console, the redirect URI of your site, and the permission scopes for the Zoho apps you ticked when creating the connection. Afterwards, the refresh token belonging to your connection is sent to obtain a short-lived access token.
 * **When:** when you create or re-authorize a connection, and whenever a cached access token has expired and needs refreshing.
 * **Why:** to obtain and renew authorization to write records into your own Zoho account. No password is ever sent or stored — the plugin never sees your Zoho login.
+* **Why:** to obtain and renew authorization to write records into your own Zoho account. No password is ever sent or stored, and the plugin never sees your Zoho login.
 * **Where:** the accounts host for that connection's data center, e.g. `accounts.zoho.com`, or the matching `.eu`, `.in`, `.com.au`, `.jp`, `.ca`, `.sa`, `.com.cn` host.
 **2. Zoho application APIs**
 * **What is sent:** the form field values you mapped for that feed (and only those — unmapped fields are not sent), plus the module or resource name, the selected account, and the organization/department where the Zoho app requires one. This can include personal data, because form submissions usually do: names, email addresses, phone numbers and message text.
+* **What is sent:** the form field values you mapped for that feed (and only those; unmapped fields are not sent), plus the module or resource name, the selected account, and the organization/department where the Zoho app requires one. This can include personal data, because form submissions usually do: names, email addresses, phone numbers and message text.
 * **When:** each time a visitor submits a form that has an enabled feed pointing at Zoho, and again on an automatic background retry if the first attempt failed for a temporary reason. Also when you press **Resubmit** on the Logs screen. Metadata reads (listing modules, fields, mailing lists, tags, departments) happen only while you are configuring a feed in wp-admin.
 * **Why:** to create the record — lead, contact, customer, ticket or list subscription — that the feed is configured to create.
 * **Where:** the API host for the connection's data center: `www.zohoapis.com` for CRM, Bigin and Books; `desk.zoho.com` for Desk; `campaigns.zoho.com` for Campaigns; `marketingautomation.zoho.com` for Marketing Automation — each with the regional variant matching the chosen data center.
+* **Why:** to create the record (lead, contact, customer, ticket or list subscription) that the feed is configured to create.
+* **Where:** the API host for the connection's data center: `www.zohoapis.com` for CRM, Bigin and Books; `desk.zoho.com` for Desk; `campaigns.zoho.com` for Campaigns; `marketingautomation.zoho.com` for Marketing Automation, each with the regional variant matching the chosen data center.
 Zoho's own terms govern what happens to the data once it arrives:
 …
 **3. Deactivation feedback (optional, opt-in)**
 When you deactivate Techwave Form Sync for Zoho from the Plugins screen, the plugin asks why. Answering is entirely optional and can be skipped, and the plugin deactivates either way.
+When you deactivate FormBridge for Zoho from the Plugins screen, the plugin asks why. Answering is entirely optional and can be skipped, and the plugin deactivates either way.
 * **What is sent:** the reason you pick from the list, the note you type if you type one, and the plugin's version number. Nothing else — no site address, no account or email address, no user details, no WordPress/PHP/server information, and no identifier of any kind. There is nothing in the request that says which site it came from.
+* **What is sent:** the reason you pick from the list, the note you type if you type one, and the plugin's version number. Nothing else: no site address, no account or email address, no user details, no WordPress/PHP/server information, and no identifier of any kind. There is nothing in the request that says which site it came from.
 * **When:** only when you press **Send Feedback & Deactivate**. Pressing **Skip & Deactivate**, closing the dialog, or deactivating with JavaScript disabled sends no request at all. Nothing is sent at any other time.
 * **Why:** so the developer knows which problems make people stop using the plugin. It has no effect on how the plugin works.
 …
 **Data stored on your own site**
 * **Delivery logs** are written to a table in your own database (timestamp, outcome, Zoho app, module, record id, and the error text when something failed). Submitted values are included only if you switch **Store submitted values in the log** on; it is off by default. Log entries are deleted automatically after the retention period on the Settings tab (30 days by default).
 * **Retry data.** If a delivery temporarily fails and a retry is scheduled, the submitted values required for the retry may be temporarily stored by WordPress — in a transient on your own site — until the retry is completed or the retry data expires (at most two hours). It is deleted as soon as the retry runs, whether that attempt succeeds or fails for good, and it is never sent anywhere other than Zoho.
+* **Delivery logs** are written to a table in your own database (timestamp, outcome, Zoho app, module, record id, and the error text when something failed). Submitted values are included only if you switch **Store submitted values in the log** on; it is off by default. Log entries are kept until you delete them, unless you turn on **Delete log entries automatically** on the Settings tab (off by default), which removes entries older than the number of days you choose.
+* **Retry data.** If a delivery temporarily fails and a retry is scheduled, the submitted values required for the retry may be temporarily stored by WordPress (in a transient on your own site) until the retry is completed or the retry data expires (at most two hours). It is deleted as soon as the retry runs, whether that attempt succeeds or fails for good, and it is never sent anywhere other than Zoho.
 * **Credentials.** Client secrets and refresh tokens are encrypted (AES-256-GCM) before being saved; access tokens are short-lived and cached in transients.
 …
 . In your Zoho API console (https://api-console.zoho.com), create a **Server-based Application**. Set the **Authorized Redirect URI** to the value shown on the plugin's **Connections** tab.
 . Copy the Client ID and Client Secret.
 . In wp-admin go to **Techwave Sync → Connections → Create Connection**: pick your data center, paste the Client ID and Secret, and tick the Zoho app(s) this account will actually send to. Then connect and approve access on Zoho's own consent screen.
 . For Elementor: edit your form and, under **Form settings → Additional Options**, set a unique **Form Name**, then save the page. For every other supported plugin the form's own title is used, so no extra setup is needed. Either way, no submit action needs to be added — the plugin listens for submissions itself.
 . Go to **Techwave Sync → Forms → Add New**. Choose the form plugin, pick the form, choose the Zoho app, account, organization and module, map your fields, and save the feed. New submissions are sent from then on.
+. In wp-admin go to **FormBridge → Connections → Create Connection**: pick your data center, paste the Client ID and Secret, and tick the Zoho app(s) this account will actually send to. Then connect and approve access on Zoho's own consent screen.
+. For Elementor: edit your form and, under **Form settings → Additional Options**, set a unique **Form Name**, then save the page. For every other supported plugin the form's own title is used, so no extra setup is needed. Either way, no submit action needs to be added, because the plugin listens for submissions itself.
+. Go to **FormBridge → All Feeds → Add New Feed**. Choose the form plugin, pick the form, choose the Zoho app, account, organization and module, map your fields, and save the feed. New submissions are sent from then on.
 == Frequently Asked Questions ==
 …
 = Which permissions does the plugin ask Zoho for? =
 Only the ones needed by the app(s) you tick when creating the connection — CRM permissions if you picked CRM, Desk permissions if you picked Desk, and so on. Nothing is pre-selected, and no app you did not pick is requested. You can widen a connection's access later with **Edit access** on the Connections tab, which re-runs Zoho's consent screen for the updated list.
+Only the ones needed by the app(s) you tick when creating the connection: CRM permissions if you picked CRM, Desk permissions if you picked Desk, and so on. Nothing is pre-selected, and no app you did not pick is requested. You can widen a connection's access later with **Edit access** on the Connections tab, which re-runs Zoho's consent screen for the updated list.
 = Which data centers are supported? =
 …
 = What happens if a request to Zoho fails? =
 A failure that looks temporary (a network problem, a rate limit, Zoho briefly unavailable) is retried in the background a few times with an increasing delay. A failure that will never succeed on a retry — a rejected value, a bad mapping, a missing required field — is recorded immediately instead. Either way the outcome ends up on the Logs screen, and a `form2zoho_submission_failed` action fires when a submission is given up on.
+A failure that looks temporary (a network problem, a rate limit, Zoho briefly unavailable) is retried in the background a few times with an increasing delay. A failure that will never succeed on a retry (a rejected value, a bad mapping, a missing required field) is recorded immediately instead. Either way the outcome ends up on the Logs screen, and a `form2zoho_submission_failed` action fires when a submission is given up on.
 = Is form data stored on my site? =
 Only if you ask for it. **Store submitted values in the log** is off by default: log entries then record the submitted field *names* but never their contents. Turning it on stores the values too, which is what makes the Logs screen's one-click **Resubmit** possible — and means whatever your forms collect, including personal data, is kept in the log table for the retention period. Separately, a submission awaiting an automatic retry is held briefly in a transient (see **External services** above). Access tokens, refresh tokens and client secrets are always redacted from logs.
+Only if you ask for it. **Store submitted values in the log** is off by default: log entries then record the submitted field *names* but never their contents. Turning it on stores the values too, which is what makes the Logs screen's one-click **Resubmit** possible, and means whatever your forms collect, including personal data, is kept in the log table until those entries are deleted, by hand or by **Delete log entries automatically** (off by default). Separately, a submission awaiting an automatic retry is held briefly in a transient (see **External services** above). Access tokens, refresh tokens and client secrets are always redacted from logs.
 = My submission did not reach Zoho. What do I check? =
 Make sure the form has a name and that a feed points at that exact form (pick it from the dropdown). Then open **Techwave Sync → Logs** and look for the entry — the error text there is the reason Zoho gave.
+Make sure the form has a name and that a feed points at that exact form (pick it from the dropdown). Then open **FormBridge → Logs** and look for the entry. The error text there is the reason Zoho gave.
 = How do I remove everything the plugin created? =
 Turn on **Erase all plugin data when the plugin is deleted** under **Techwave Sync → Settings**, then delete the plugin from the Plugins screen. That drops the log table and removes every option, connection, feed, cached token and scheduled event belonging to this plugin — and nothing else. The setting is off by default so an accidental deactivate-and-reinstall does not destroy your setup. Deactivating alone never deletes anything; it only stops scheduled work.
+Turn on **Erase all plugin data when the plugin is deleted** under **FormBridge → Settings**, then delete the plugin from the Plugins screen. That drops the log table and removes every option, connection, feed and cached token belonging to this plugin, and nothing else. The setting is off by default so an accidental deactivate-and-reinstall does not destroy your setup. Deactivating alone never deletes anything; it only stops scheduled work.
 == Privacy ==
 …
 Form submissions usually contain personal data, and this plugin's whole purpose is to transmit the mapped fields of a submission to Zoho, a third-party service, as described under **External services** above. Review Zoho's privacy policy and make sure your own privacy notice covers this transfer.
 On your own site, the plugin stores delivery log entries in a custom database table — including the submitted field values when **Store submitted values in the log** is enabled, which it is not by default — for the configured retention period (30 days by default). A submission waiting on an automatic retry is held in a WordPress transient until the retry runs or that copy expires, at most two hours.
+On your own site, the plugin stores delivery log entries in a custom database table (including the submitted field values when **Store submitted values in the log** is enabled, which it is not by default) until they are deleted, by hand on the Logs screen or automatically after a set number of days when **Delete log entries automatically** is turned on (it is off by default). A submission waiting on an automatic retry is held in a WordPress transient until the retry runs or that copy expires, at most two hours.
 The plugin registers a personal-data exporter and eraser, so log entries mentioning a given email address are included in, and removed by, WordPress's own **Tools → Export/Erase Personal Data** flows. Suggested privacy-policy text is added to **Settings → Privacy**.
 …
 Access tokens, refresh tokens, client secrets and authorization headers are never written to the logs in readable form.
 The optional deactivation feedback described under **External services** carries no personal data and nothing that identifies your site — only the reason you pick, the note you choose to type, and the plugin version — and it is sent only if you press the send button.
+The optional deactivation feedback described under **External services** carries no personal data and nothing that identifies your site (only the reason you pick, the note you choose to type, and the plugin version), and it is sent only if you press the send button.
 == Screenshots ==
 . The Feeds list under Techwave Sync → Forms. Every feed shows which form it listens to, where it sends, and an on/off switch — with search, filtering by Zoho app, and per-row Info, Timeline, Clone and Delete actions.
 . Choosing the form. Pick the form plugin from the tiles, then pick the form itself from a dropdown read out of your saved forms — no form ID to look up, and no editing inside the form plugin.
+. The feeds list under FormBridge → All Feeds. Every feed shows which form it listens to, where it sends, and an on/off switch, with search, filtering by Zoho app, and per-row Info, Timeline, Clone and Delete actions.
+. Choosing the trigger. Pick the form plugin from the tiles, then pick the form itself on the next step from a dropdown read out of your saved forms, with no form ID to look up, and no editing inside the form plugin.
 . Field mapping. Each Zoho field is matched to a form field or a fixed static value. Both lists load automatically: the Zoho fields from the module you chose, the form fields from the form you chose.
 . The Connections tab. Connect more than one Zoho account, each with its own data centre, and see at a glance which Zoho apps each one is authorized for.
 . Creating a connection. Paste the Client ID and Secret from your Zoho API console, tick only the apps you need, and approve on Zoho's own consent screen. Secrets are encrypted before they are stored.
 . The Logs tab. Every delivery is recorded — success, failure, or suppressed — with the exact data sent, a link straight to the record in Zoho, and one-click resubmit. New entries appear live.
+. The Logs tab. Every delivery is recorded (success, failure, or suppressed) with the exact data sent, a link straight to the record in Zoho, and one-click resubmit. New entries appear live.
 . The Settings tab. Logging, submitted-value storage, automatic log cleanup, failure email alerts, and full data erasure on uninstall, grouped by what they affect.
 == Changelog ==
+= 1.1.0 - 15 October 2026 =
+The plugin is now called FormBridge for Zoho, and the admin screens have been rebuilt around it. Your feeds, connections, logs and settings are untouched and no reconnection is needed; the menu is now **FormBridge**, so anywhere older documentation says Techwave Sync, look for FormBridge instead.
+* Renamed throughout the interface, including the deactivation prompt, the personal-data exporter and eraser, and the test email. Zoho Campaigns and Marketing Automation now record "FormBridge for Zoho" as the source on new subscribers; subscribers added before this update keep the source they were recorded with.
+* **Feeds are now created in a four-step editor** — Trigger, Details, Destination, Mapping — instead of one long form. The trigger step shows each supported form plugin as a tile with its logo and says so when the plugin behind a tile is not running.
+* **New Dashboard screen**, and the plugin's navigation has moved into a header bar above every screen.
+* **Uploaded files are sent to Zoho** from every supported form plugin, into the file field you map them to.
+* Field mapping reworked: the row for a required Zoho field is locked so it cannot be removed, a static value is checked against the kind of Zoho field it fills, "Combine fields" lists the fields it uses, duplicate matching only offers fields Zoho marks unique, and the field list loads once with a visible wait instead of being refetched.
+* Logs: entries are now kept until you delete them, with **Delete log entries automatically** as an opt-in setting (it replaces the old fixed 30-day retention, so logs no longer disappear on their own). The screen reads a page at a time, shows times in the WordPress timezone, and reports plainly when Zoho cannot be reached.
+* Zoho Campaigns and Marketing Automation: every mailing list and topic is read, not just the first page; a contact is added to the chosen list straight away; and commas and colons in submitted values are preserved.
+* Connections: pick the account first and only the apps it is authorised for are offered, a Zoho Books organisation's custom modules and fields are listed, the redirect URI confirms when it is copied, and "Zoho API console" links to the right region's console.
+* The plugin's notification emails now go through `wp_mail()`.
+* Sources that need the Pro add-on appear as locked tiles on the trigger step, so you can see what it covers. Nothing is shown as locked on a site that already has it.
+* Added hooks so a companion plugin can extend this one without patching it: `form2zoho_loaded` for wiring, `form2zoho_form_sources` to teach it another form plugin, `form2zoho_feed_editor_fields`, `form2zoho_save_feed` and `form2zoho_build_job` for per-feed settings, `form2zoho_should_deliver_feed`, `form2zoho_job_form_values` and `form2zoho_job_settings` on the delivery path, `form2zoho_submission_succeeded` alongside the existing failure action, and `form2zoho_settings_tabs` with `form2zoho_render_settings_tab` for the settings screen.
+* Tested against WordPress 7.1.
 = 1.0.0 - 3 August 2026 =
 …
 * Personal-data exporter and eraser, suggested privacy-policy text, and opt-in full data erasure on uninstall.
 * Fully translatable, keyboard accessible, and usable from 320px up.
+== Upgrade Notice ==
+= 1.1.0 =
+Renamed to FormBridge for Zoho, with rebuilt admin screens, a four-step feed editor, a Dashboard, and file uploads sent to Zoho. Feeds, connections and settings carry over; no reconnection needed. Note: log entries are now kept until you delete them, with automatic deletion opt-in.

techwave-form-sync-for-zoho/trunk/techwave-form-sync-for-zoho.php

-              r3649280
+              r3748247
 <?php
 /**
  * Plugin Name:       Techwave Form Sync for Zoho
  * Plugin URI:        https://techwavesolutions.net/techwave-form-sync-for-zoho
+ * Plugin Name:       FormBridge for Zoho
+ * Plugin URI:        https://techwavesolutions.net/formbridge-for-zoho/
  * Description:       Send WordPress form submissions to Zoho CRM, Bigin, Books, Desk, Campaigns and Marketing Automation.
  * Version:           1.0.0
+ * Version:           1.1.0
  * Requires at least: 6.2
  * Requires PHP:      7.4
 …
 defined( 'ABSPATH' ) || exit;
 define( 'FORM2ZOHO_VERSION', '1.0.0' );
+define( 'FORM2ZOHO_VERSION', '1.1.0' );
 // Human-readable date this version was published — shown on the Version
 // tab. Keep in sync with the readme.txt changelog entry for the same
 // version.
 define( 'FORM2ZOHO_VERSION_DATE', '3 August 2026' );
+define( 'FORM2ZOHO_VERSION_DATE', '15 October 2026' );
 define( 'FORM2ZOHO_FILE', __FILE__ );
 define( 'FORM2ZOHO_PATH', plugin_dir_path( __FILE__ ) );

techwave-form-sync-for-zoho/trunk/uninstall.php

-              r3649280
+              r3748247
  * when they have turned on "Erase all plugin data when the plugin is deleted"
  * on the Settings screen. When they have, it removes every database artefact
+ * the plugin created: the log table, options, cached tokens, OAuth state and
+ * any scheduled events.
+ * the plugin created: the log table, options, cached tokens and OAuth state.
+ *
  * Off by default on purpose: simply deleting the plugin should not destroy
 …
+                }
+                // 3. Sweep the options table for any remaining transient of ours: the
+                // 3. Delete the per-user column preference. Stored in user meta rather
+                // than in an option, so the loop above cannot reach it — and left
+                // behind it would quietly hide columns for anyone who reinstalled.
+                // One meta key across all users on uninstall; there is no core helper
+                // for that. All three sniffs go in one annotation: a trailing
+                // phpcs:ignore replaces the one on the line above rather than adding
+                // to it, so splitting them would leave two of them reported.
+                // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.SlowDBQuery.slow_db_query_meta_key
+                $wpdb->delete( $wpdb->usermeta, array( 'meta_key' => 'form2zoho_hidden_columns' ) );
+                // 4. Sweep the options table for any remaining transient of ours: the
                 // access-token cache, OAuth state, parked retry payloads, the
                 // connection-failure mail throttle, the admin error notice, and the
 …
                 $like    = $wpdb->esc_like( '_transient_form2zoho_' ) . '%';
                 $timeout = $wpdb->esc_like( '_transient_timeout_form2zoho_' ) . '%';
+                // Not a transient: the short-lived row that keeps two requests from
+                // refreshing one connection's token at the same time. It is deleted
+                // as soon as the refresh ends, but a request that died mid-refresh
+                // leaves one behind, and the two patterns above would not match it.
+                $locks = $wpdb->esc_like( 'form2zoho_token_lock_' ) . '%';
                 // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching -- one-off cleanup on uninstall.
                 $wpdb->query(
                         $wpdb->prepare(
                                 "DELETE FROM {$wpdb->options} WHERE option_name LIKE %s OR option_name LIKE %s",
+                                "DELETE FROM {$wpdb->options} WHERE option_name LIKE %s OR option_name LIKE %s OR option_name LIKE %s",
                                 $like,
+                                $timeout
+                                $timeout,
+                                $locks
+                        )
                 );
 …
                 // away the whole site's cache — WordPress core, the theme and every
                 // other plugin included — to clean up a handful of keys of its own.
+                // 4. Clear scheduled events.
+                wp_clear_scheduled_hook( 'form2zoho_process_submission' );
+                wp_clear_scheduled_hook( 'form2zoho_prune_logs' );
+                if ( function_exists( 'as_unschedule_all_actions' ) ) {
+                        as_unschedule_all_actions( 'form2zoho_process_submission', array(), 'form2zoho' );
+                }
+                //
+                // Scheduled work is not handled here: WordPress deactivates a plugin
+                // before it can be deleted, and Form2Zoho\Core\Deactivator clears it
+                // then, whether or not this erase was opted in to.
+        }
+}

Context Navigation

Legend:

Download in other formats: