From 5a556b3186b45190ba0378b4508231066c7d99e3 Mon Sep 17 00:00:00 2001
From: Matt Gros <3311227+mpge@users.noreply.github.com>
Date: Fri, 24 Apr 2026 06:56:54 -0400
Subject: [PATCH] feat(admin): public-ticket guest policy fields in settings
 page
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Adds guest_policy_mode / guest_policy_user_id /
guest_policy_signup_url_template to the existing Escalated settings
admin page. WordPress doesn't use Inertia/Vue like the other host
adapters — this ports the same capability using the plugin's native
templates/admin/settings.php pattern.

The sanitization pass rejects unknown mode values and clears stale
fields when switching modes so the widget controller only sees
settings that actually apply to the currently-selected mode.
---
 includes/Admin/class-admin-settings.php | 18 ++++++++++
 templates/admin/settings.php            | 47 +++++++++++++++++++++++++
 2 files changed, 65 insertions(+)

diff --git a/includes/Admin/class-admin-settings.php b/includes/Admin/class-admin-settings.php
index 60c069b..d39cfa5 100644
--- a/includes/Admin/class-admin-settings.php
+++ b/includes/Admin/class-admin-settings.php
@@ -78,6 +78,11 @@ public function handle_save(): void
             'max_attachment_size_kb' => 'absint',
             'max_attachments_per_reply' => 'absint',
 
+            // Public-ticket guest policy
+            'guest_policy_mode' => 'sanitize_text_field',
+            'guest_policy_user_id' => 'absint',
+            'guest_policy_signup_url_template' => 'esc_url_raw',
+
             // Maintenance
             'activity_purge_days' => 'absint',
         ];
@@ -105,6 +110,19 @@ public function handle_save(): void
             }
         }
 
+        // Guest policy mode: reject unknown values, clear fields that don't apply.
+        $mode = Setting::get('guest_policy_mode', 'unassigned');
+        if (! in_array($mode, ['unassigned', 'guest_user', 'prompt_signup'], true)) {
+            Setting::set('guest_policy_mode', 'unassigned');
+            $mode = 'unassigned';
+        }
+        if ($mode !== 'guest_user') {
+            Setting::set('guest_policy_user_id', '');
+        }
+        if ($mode !== 'prompt_signup') {
+            Setting::set('guest_policy_signup_url_template', '');
+        }
+
         $redirect = admin_url('admin.php?page=escalated-settings&message=saved');
         wp_safe_redirect($redirect);
         exit;
diff --git a/templates/admin/settings.php b/templates/admin/settings.php
index fd3fe8d..eb05fc0 100644
--- a/templates/admin/settings.php
+++ b/templates/admin/settings.php
@@ -67,6 +67,53 @@
                     </label>
                 </td>
             </tr>
+            <tr>
+                <th scope="row">
+                    <label for="guest_policy_mode"><?php esc_html_e('Guest policy', 'escalated'); ?></label>
+                </th>
+                <td>
+                    <?php $guestPolicyMode = $s('guest_policy_mode', 'unassigned'); ?>
+                    <select id="guest_policy_mode" name="guest_policy_mode">
+                        <option value="unassigned" <?php selected($guestPolicyMode, 'unassigned'); ?>>
+                            <?php esc_html_e('Unassigned (Contact carries the email; ticket has no owner)', 'escalated'); ?>
+                        </option>
+                        <option value="guest_user" <?php selected($guestPolicyMode, 'guest_user'); ?>>
+                            <?php esc_html_e('Single shared guest user', 'escalated'); ?>
+                        </option>
+                        <option value="prompt_signup" <?php selected($guestPolicyMode, 'prompt_signup'); ?>>
+                            <?php esc_html_e('Prompt signup (confirmation email embeds invite link)', 'escalated'); ?>
+                        </option>
+                    </select>
+                    <p class="description">
+                        <?php esc_html_e('Who owns a ticket submitted via the public widget or inbound email. Applies at request time, so changes take effect on the next submission.', 'escalated'); ?>
+                    </p>
+
+                    <p style="margin-top: 12px;">
+                        <label>
+                            <?php esc_html_e('Shared guest user ID:', 'escalated'); ?>
+                            <input type="number" min="1" name="guest_policy_user_id"
+                                value="<?php echo esc_attr($s('guest_policy_user_id', '')); ?>"
+                                class="small-text">
+                        </label>
+                        <span class="description">
+                            <?php esc_html_e('Required when mode is "Single shared guest user".', 'escalated'); ?>
+                        </span>
+                    </p>
+
+                    <p style="margin-top: 12px;">
+                        <label style="display: block;">
+                            <?php esc_html_e('Signup URL template (prompt_signup mode only):', 'escalated'); ?>
+                            <input type="url" name="guest_policy_signup_url_template"
+                                value="<?php echo esc_attr($s('guest_policy_signup_url_template', '')); ?>"
+                                class="regular-text"
+                                placeholder="https://app.example.com/register?email={{email}}">
+                        </label>
+                        <span class="description">
+                            <?php esc_html_e('Optional. Use {{email}} as a placeholder for the guest email.', 'escalated'); ?>
+                        </span>
+                    </p>
+                </td>
+            </tr>
             <tr>
                 <th scope="row"><?php esc_html_e('Powered by Escalated', 'escalated'); ?></th>
                 <td>