<?php
/**
 * =====================================================================
 *  LEAPFROG CONNECT — Booking Management System (index.php)
 * ---------------------------------------------------------------------
 *  Single-file PHP + MySQL/MariaDB app. Every new table and column is
 *  created automatically on first load — no manual SQL needed.
 *
 *  Two kinds of sign-in:
 *    • Clients  — name + email, then request spaces (status: Pending)
 *    • Staff    — email + password; review requests, book directly,
 *                 schedules, reports, invoices, rooms and users.
 *  The legacy session keys ($_SESSION['logged_user'], $_SESSION['role'])
 *  are still set, so multiple_booking.php, manage_properties.php and
 *  revanalysis.php keep working.
 *
 *  Brand: Leapfrog Connect guideline (Evergreen / Forest / Lime Glow /
 *  Solar Yellow / Cloud Gray · Instrument Serif + Instrument Sans ·
 *  Material Symbols icons). Works on PHP 7.4+ with mysqlnd.
 * =====================================================================
 */

date_default_timezone_set('Asia/Kathmandu');
session_start(['cookie_httponly' => true, 'cookie_samesite' => 'Lax']);

// =====================================================================
// 1. CONFIGURATION — edit these values for your server / company
// =====================================================================
define('DB_HOST', getenv('LFC_DB_HOST') ?: 'localhost');
define('DB_USER', getenv('LFC_DB_USER') ?: 'ashokbhu_training');
define('DB_PASS', getenv('LFC_DB_PASS') ?: 'Hello@312345');
define('DB_NAME', getenv('LFC_DB_NAME') ?: 'ashokbhu_training');

const COMPANY_NAME    = 'Leapfrog Connect Pvt. Ltd.';
const COMPANY_SHORT   = 'Leapfrog Connect';
const COMPANY_ADDRESS = 'Dillibazar-30, Kathmandu, Nepal';
const COMPANY_PHONE   = '9818981587';
const COMPANY_EMAIL   = 'booking@leapfrogconnect.co';
const COMPANY_PAN     = '';                                   // company PAN / VAT no. for invoices (shown when filled)
const PORTAL_URL      = 'https://leapfrogconnect.edu.np/booking/';
const LOGO_FULL       = 'https://leapfrogconnect.edu.np/booking/connectlogo.png';
const LOGO_ROUND      = 'https://leapfrogconnect.edu.np/booking/connectlogo1.png';
const MAIL_FROM       = 'no-reply@leapfrogconnect.co';
const ADMIN_NOTIFY_TO = 'booking@leapfrogconnect.co';         // new booking requests are emailed here…
const ADMIN_NOTIFY_CC = 'ashok@leapfrogconnect.co';           // …with a copy here
const OWNER_EMAILS    = ['ashok@leapfrogconnect.co', 'booking@leapfrogconnect.co']; // only these may create the FIRST admin account
const LINK_BULK       = 'multiple_booking.php';
const LINK_PROPERTIES = 'manage_properties.php';
const LINK_REVENUE    = 'revanalysis.php';
const VAT_RATE        = 13;
const INVOICE_PREFIX  = 'LFH/CW/';
const BOOKING_PREFIX  = '#LF-';
const DAY_START_HOUR  = 7;                                    // daily schedule 7 AM …
const DAY_END_HOUR    = 22;                                   // … to 10 PM
const PER_PAGE        = 25;
const DEFAULT_AMENITIES = 'High-Speed Wi-Fi, Air Conditioning, Ergonomic Chairs, Whiteboard, Power Backup';
const INVOICE_NOTE    = 'Please settle the invoice within 7 business days. Thank you for your business.';
const FACILITY_NOTE   = 'We strictly provide workspace facilities. Additional services, such as catering or food, are not provided unless explicitly pre-agreed.';

const BANK_DETAILS = [
    'Bank Name'      => 'Nabil Bank Ltd.',
    'Branch'         => 'Putalisadak Branch, Kathmandu',
    'SWIFT Code'     => 'NARBNPKA',
    'Account Number' => '27201017500451',
    'Account Name'   => 'Leapfrog Connect Pvt. Ltd.',
];
const TERMS = [
    'The client agrees to use only the assigned hall and rooms. Access to unauthorized or restricted areas is not permitted without prior approval from management.',
    'Any damage, loss, misuse, or theft of venue property, equipment, or facilities caused during the event shall be charged to the client.',
    'The client is responsible for maintaining proper discipline and conduct of all guests, visitors, and vendors during the event period.',
    'Overtime use beyond the confirmed booking schedule may be subject to additional charges, and all venue rules and safety guidelines must be followed.',
];
const NOTES = [
    'Please note that we operate exclusively as a venue space rather than a hotel. As such, we do not provide catering, food, accommodation, or other hotel amenities.',
];
const ETIQUETTE_DO = [
    'Respect others and keep noise levels low.',
    'Use headphones during calls or meetings.',
    'Keep shared spaces and common areas clean.',
    'Book meeting rooms in advance.',
    'Tag your food packages when storing them in the kitchen.',
];
const ETIQUETTE_DONT = [
    'Don’t overcrowd the workspace assigned to you.',
    'Don’t tamper with AC, Wi-Fi, or electricals.',
    'Don’t leave food or mess behind in the kitchen.',
    'Don’t smoke or bring hazardous items.',
    'Don’t misuse CCTV or safety equipment.',
];

// Fixed-order room colours (validated for colour-blind separation); each room keeps its own colour.
const ROOM_COLORS  = ['#2a78d6', '#eb6834', '#1baf7a', '#eda100', '#e87ba4', '#008300', '#4a3aa7'];
const STATUSES     = ['Pending', 'Approved', 'Tentative', 'Rejected', 'Cancelled'];
const RATE_TYPES   = ['day' => 'Per day', 'hour' => 'Per hour', 'flat' => 'Flat / package'];
const PAY_METHODS  = ['Cash', 'Bank transfer', 'Cheque', 'Fonepay / QR', 'eSewa', 'Khalti', 'Card'];
const PURPOSES     = ['Meeting', 'Training / Workshop', 'Co-working', 'Conference', 'Seminar', 'Interview', 'Exam / Assessment', 'Event / Celebration', 'Photo / Video shoot'];
const SCHEMA_VERSION = 1;
// Approved and Tentative bookings hold the space; Pending requests do not (staff decide between them).
const SQL_BLOCKING = "b.status IN ('Approved','Tentative')";

// =====================================================================
// 2. ERROR HANDLING + DATABASE
// =====================================================================
function fatal_page(string $title, string $detail): void
{
    http_response_code(500);
    echo '<!DOCTYPE html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>' . htmlspecialchars($title) . '</title>'
       . '<style>body{font-family:system-ui,sans-serif;background:#EFEFEF;color:#0E2211;display:grid;place-items:center;min-height:100vh;margin:0;padding:16px}'
       . '.b{background:#fff;border:1px solid #DCE3D6;border-top:4px solid #9BEF6B;border-radius:16px;padding:28px;max-width:520px}h1{font-size:20px;margin:0 0 8px}p{color:#5B6A5D;margin:0}a{color:#1C3A13}</style></head>'
       . '<body><div class="b"><h1>' . htmlspecialchars($title) . '</h1><p>' . htmlspecialchars($detail) . '</p><p style="margin-top:14px"><a href="?">&larr; Back to dashboard</a></p></div></body></html>';
    exit;
}

set_exception_handler(function ($e) {
    error_log('[LFC booking] ' . $e->getMessage() . ' @ ' . $e->getFile() . ':' . $e->getLine());
    if (isset($_GET['api'])) {
        http_response_code(500);
        header('Content-Type: application/json');
        echo json_encode(['ok' => false, 'error' => 'Server error. Please try again.']);
        exit;
    }
    fatal_page('Something went wrong', 'The action could not be completed. Please go back and try again. (Details were written to the server error log.)');
});

mysqli_report(MYSQLI_REPORT_ERROR | MYSQLI_REPORT_STRICT);
try {
    $conn = new mysqli(DB_HOST, DB_USER, DB_PASS, DB_NAME);
    $conn->set_charset('utf8mb4');
} catch (mysqli_sql_exception $e) {
    error_log('[LFC booking] DB connect failed: ' . $e->getMessage());
    fatal_page('Database connection failed', 'Please check the database settings (DB_HOST, DB_USER, DB_PASS, DB_NAME) at the top of this file.');
}
try { $conn->query("SET time_zone = '+05:45'"); } catch (Throwable $e) { /* not critical */ }

/** Run a query; with $params it is a prepared statement (safe against SQL injection). */
function db_query(string $sql, array $params = [])
{
    global $conn;
    if (!$params) {
        return $conn->query($sql);
    }
    $stmt  = $conn->prepare($sql);
    $types = '';
    foreach ($params as $p) {
        $types .= is_int($p) ? 'i' : (is_float($p) ? 'd' : 's');
    }
    $stmt->bind_param($types, ...$params);
    $stmt->execute();
    $res = $stmt->get_result();
    return $res === false ? $stmt : $res;
}
function db_all(string $sql, array $params = []): array
{
    $r = db_query($sql, $params);
    return ($r instanceof mysqli_result) ? $r->fetch_all(MYSQLI_ASSOC) : [];
}
function db_one(string $sql, array $params = []): ?array
{
    $rows = db_all($sql, $params);
    return $rows[0] ?? null;
}
function db_val(string $sql, array $params = [])
{
    $row = db_one($sql, $params);
    return $row ? reset($row) : null;
}
function db_exec(string $sql, array $params = []): int
{
    global $conn;
    $r = db_query($sql, $params);
    if ($r instanceof mysqli_stmt) {
        return $r->insert_id ?: $r->affected_rows;
    }
    return $conn->insert_id ?: $conn->affected_rows;
}

// =====================================================================
// 3. AUTOMATIC SCHEMA (creates tables + adds any missing columns)
// =====================================================================
function ensure_column(string $table, string $col, string $definition): void
{
    global $conn;
    $r = $conn->query("SHOW COLUMNS FROM `$table` LIKE '" . $conn->real_escape_string($col) . "'");
    if ($r && $r->num_rows === 0) {
        $conn->query("ALTER TABLE `$table` ADD COLUMN `$col` $definition");
    }
}
function ensure_index(string $table, string $name, string $cols): void
{
    global $conn;
    $r = $conn->query("SHOW INDEX FROM `$table` WHERE Key_name = '" . $conn->real_escape_string($name) . "'");
    if ($r && $r->num_rows === 0) {
        try { $conn->query("CREATE INDEX `$name` ON `$table` ($cols)"); } catch (Throwable $e) { /* optional */ }
    }
}
function ensure_schema(): void
{
    global $conn;
    $conn->query("CREATE TABLE IF NOT EXISTS app_meta (meta_key VARCHAR(64) PRIMARY KEY, meta_value TEXT)");
    $ver = (int) db_val("SELECT meta_value FROM app_meta WHERE meta_key = 'lfc_schema_version'");
    if ($ver >= SCHEMA_VERSION) {
        return;
    }
    $conn->query("CREATE TABLE IF NOT EXISTS rooms (
        id INT AUTO_INCREMENT PRIMARY KEY,
        name VARCHAR(150) NOT NULL,
        base_rate DECIMAL(10,2) NOT NULL DEFAULT 0
    )");
    $conn->query("CREATE TABLE IF NOT EXISTS bookings (
        id INT AUTO_INCREMENT PRIMARY KEY,
        room_id INT NOT NULL,
        guest_name VARCHAR(255) NOT NULL,
        guest_email VARCHAR(255),
        guest_pan VARCHAR(50),
        guest_address TEXT,
        guest_phone VARCHAR(50),
        booking_date DATE NOT NULL,
        end_date DATE NOT NULL,
        start_time TIME NOT NULL,
        end_time TIME NOT NULL,
        custom_rate DECIMAL(10,2) NOT NULL DEFAULT 0,
        total_amount DECIMAL(10,2) NOT NULL DEFAULT 0
    )");
    $conn->query("CREATE TABLE IF NOT EXISTS generated_invoices (
        id INT AUTO_INCREMENT PRIMARY KEY,
        invoice_number VARCHAR(50) NOT NULL,
        invoice_date DATE NOT NULL,
        guest_name VARCHAR(255) NOT NULL,
        guest_email VARCHAR(255),
        guest_address TEXT,
        start_date DATE,
        end_date DATE,
        sub_total DECIMAL(10,2),
        vat_amount DECIMAL(10,2),
        total_amount DECIMAL(10,2),
        items_json TEXT,
        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
    )");
    $conn->query("CREATE TABLE IF NOT EXISTS booking_payments (
        id INT AUTO_INCREMENT PRIMARY KEY,
        booking_id INT NOT NULL,
        amount DECIMAL(10,2) NOT NULL,
        method VARCHAR(40),
        reference VARCHAR(120),
        paid_on DATE,
        created_by VARCHAR(100),
        created_at DATETIME
    )");
    $conn->query("CREATE TABLE IF NOT EXISTS app_users (
        id INT AUTO_INCREMENT PRIMARY KEY,
        name VARCHAR(100) NOT NULL,
        email VARCHAR(191) NOT NULL UNIQUE,
        password_hash VARCHAR(255) NOT NULL,
        role VARCHAR(20) NOT NULL DEFAULT 'staff',
        last_login DATETIME NULL,
        created_at DATETIME NULL
    )");

    // Room details (amenities / images / description are shared with manage_properties.php)
    ensure_column('rooms', 'amenities', 'TEXT NULL');
    ensure_column('rooms', 'images', 'TEXT NULL');
    ensure_column('rooms', 'description', 'TEXT NULL');
    ensure_column('rooms', 'hourly_rate', 'DECIMAL(10,2) NULL');
    ensure_column('rooms', 'capacity', 'INT NULL');
    ensure_column('rooms', 'color', 'VARCHAR(7) NULL');
    ensure_column('rooms', 'is_active', 'TINYINT(1) NOT NULL DEFAULT 1');
    // Booking workflow + details (existing rows keep working)
    ensure_column('bookings', 'status', "VARCHAR(20) DEFAULT 'Pending'");
    ensure_column('bookings', 'admin_remarks', 'TEXT NULL');
    ensure_column('bookings', 'rate_type', "VARCHAR(10) NOT NULL DEFAULT 'day'");
    ensure_column('bookings', 'discount', 'DECIMAL(10,2) NOT NULL DEFAULT 0');
    ensure_column('bookings', 'amount_paid', 'DECIMAL(10,2) NOT NULL DEFAULT 0');
    ensure_column('bookings', 'purpose', 'VARCHAR(255) NULL');
    ensure_column('bookings', 'attendees', 'INT NULL');
    ensure_column('bookings', 'notes', 'TEXT NULL');
    ensure_column('bookings', 'created_by', 'VARCHAR(100) NULL');
    ensure_column('bookings', 'created_at', 'DATETIME NULL');
    ensure_column('bookings', 'updated_at', 'DATETIME NULL');
    // Invoice details
    ensure_column('generated_invoices', 'guest_pan', 'VARCHAR(50) NULL');
    ensure_column('generated_invoices', 'discount', 'DECIMAL(10,2) NOT NULL DEFAULT 0');
    ensure_column('generated_invoices', 'vat_rate', 'DECIMAL(5,2) NOT NULL DEFAULT 13');
    ensure_column('generated_invoices', 'status', "VARCHAR(20) NOT NULL DEFAULT 'Unpaid'");
    ensure_column('generated_invoices', 'notes', 'TEXT NULL');
    ensure_column('generated_invoices', 'created_by', 'VARCHAR(100) NULL');

    ensure_index('bookings', 'idx_lfc_dates', 'booking_date, end_date');
    ensure_index('bookings', 'idx_lfc_room', 'room_id');
    ensure_index('bookings', 'idx_lfc_status', 'status');
    ensure_index('booking_payments', 'idx_lfc_booking', 'booking_id');

    // One-time defaults (the old code overwrote empty amenities on every page load)
    $conn->query("UPDATE rooms SET amenities = '" . $conn->real_escape_string(DEFAULT_AMENITIES) . "' WHERE amenities IS NULL OR amenities = ''");
    $conn->query("UPDATE bookings SET status = 'Pending' WHERE status IS NULL OR status = ''");
    $i = 0;
    foreach (db_all("SELECT id, color FROM rooms ORDER BY id") as $rm) {
        if (empty($rm['color'])) {
            db_exec("UPDATE rooms SET color = ? WHERE id = ?", [ROOM_COLORS[$i % count(ROOM_COLORS)], (int) $rm['id']]);
        }
        $i++;
    }
    db_exec("INSERT INTO app_meta (meta_key, meta_value) VALUES ('lfc_schema_version', ?) ON DUPLICATE KEY UPDATE meta_value = VALUES(meta_value)", [(string) SCHEMA_VERSION]);
}
ensure_schema();

// =====================================================================
// 4. HELPERS
// =====================================================================
function h($v): string { return htmlspecialchars((string) ($v ?? ''), ENT_QUOTES, 'UTF-8'); }

/** Nepali / South-Asian digit grouping: 1,50,000.00 */
function nformat($n, int $dec = 0): string
{
    $n    = (float) $n;
    $neg  = $n < 0;
    $s    = number_format(abs($n), $dec, '.', '');
    $parts = explode('.', $s);
    $int  = $parts[0];
    if (strlen($int) > 3) {
        $last = substr($int, -3);
        $rest = substr($int, 0, -3);
        $rest = preg_replace('/\B(?=(\d{2})+(?!\d))/', ',', $rest);
        $int  = $rest . ',' . $last;
    }
    return ($neg ? '-' : '') . $int . (isset($parts[1]) ? '.' . $parts[1] : '');
}
function money($n, ?int $dec = null): string
{
    $n = (float) $n;
    if ($dec === null) {
        $dec = abs($n - round($n)) > 0.004 ? 2 : 0;
    }
    return 'Rs. ' . nformat($n, $dec);
}
function valid_date($v, $default = null)
{
    if (is_string($v) && preg_match('/^(\d{4})-(\d{2})-(\d{2})$/', $v, $m) && checkdate((int) $m[2], (int) $m[3], (int) $m[1])) {
        return $v;
    }
    return $default;
}
function valid_time($v, $default = null)
{
    if (is_string($v) && preg_match('/^([01]\d|2[0-3]):([0-5]\d)(:[0-5]\d)?$/', $v)) {
        return substr($v, 0, 5);
    }
    return $default;
}
function fmt_date($d, string $f = 'd M Y'): string { return $d ? date($f, strtotime((string) $d)) : '—'; }
function fmt_time($t): string { return $t ? date('g:i A', strtotime((string) $t)) : '—'; }
function fmt_range($sd, $ed): string
{
    if ($sd === $ed) {
        return fmt_date($sd, 'D, d M Y');
    }
    $a = strtotime((string) $sd);
    $b = strtotime((string) $ed);
    if (date('Y-m', $a) === date('Y-m', $b)) {
        return date('d', $a) . '–' . date('d M Y', $b);
    }
    if (date('Y', $a) === date('Y', $b)) {
        return date('d M', $a) . ' – ' . date('d M Y', $b);
    }
    return date('d M Y', $a) . ' – ' . date('d M Y', $b);
}
function booking_ref($id): string { return BOOKING_PREFIX . str_pad((string) (int) $id, 4, '0', STR_PAD_LEFT); }
function days_between($sd, $ed): int
{
    $d = (new DateTime((string) $sd))->diff(new DateTime((string) $ed));
    return $d->invert ? 0 : $d->days + 1;
}
function hours_between($st, $et): float
{
    $h = (strtotime('2000-01-01 ' . $et) - strtotime('2000-01-01 ' . $st)) / 3600;
    return max(0, round($h, 2));
}
function short_text($s, int $n): string
{
    $s = trim((string) $s);
    if (function_exists('mb_strimwidth')) return mb_strimwidth($s, 0, $n, '…', 'UTF-8');
    return strlen($s) > $n ? substr($s, 0, $n - 1) . '…' : $s;
}
function num_clean($n): string { return rtrim(rtrim(number_format((float) $n, 2), '0'), '.'); }
/** All charge figures for a booking. total = pre-VAT amount stored in bookings.total_amount (same as before). */
function compute_totals(float $rate, string $type, $sd, $ed, $st, $et, float $discount = 0, float $paid = 0): array
{
    $days  = days_between($sd, $ed);
    $hours = hours_between($st, $et);
    $qty   = $type === 'hour' ? round($days * $hours, 2) : ($type === 'flat' ? 1 : $days);
    $gross = round($rate * $qty, 2);
    $discount = min(max(0, $discount), $gross);
    $total = round($gross - $discount, 2);
    $vat   = round($total * VAT_RATE / 100, 2);
    $grand = round($total + $vat, 2);
    return compact('days', 'hours', 'qty', 'gross', 'discount', 'total', 'vat', 'grand') + ['paid' => $paid, 'balance' => round($grand - $paid, 2)];
}
function booking_totals(array $b): array
{
    return compute_totals((float) $b['custom_rate'], $b['rate_type'] ?: 'day', $b['booking_date'], $b['end_date'], $b['start_time'], $b['end_time'], (float) $b['discount'], (float) $b['amount_paid']);
}
function is_blocking($status): bool { return in_array($status, ['Approved', 'Tentative'], true); }
function pay_status(array $t): string
{
    if ($t['grand'] <= 0) return 'No charge';
    if ($t['paid'] >= $t['grand'] - 0.5) return 'Paid';
    return $t['paid'] > 0 ? 'Partial' : 'Unpaid';
}
function time_status(array $b): string
{
    $now = date('Y-m-d H:i:s');
    if ($now < $b['booking_date'] . ' ' . $b['start_time']) return 'Upcoming';
    if ($now > $b['end_date'] . ' ' . $b['end_time']) return 'Completed';
    return 'In progress';
}
function badge(string $label, string $kind = '', string $text = ''): string
{
    $map = [
        'Approved' => 'b-ok', 'Tentative' => 'b-warn', 'Pending' => 'b-pend', 'Rejected' => 'b-bad', 'Cancelled' => 'b-muted',
        'Paid' => 'b-ok', 'Partial' => 'b-warn', 'Unpaid' => 'b-bad', 'No charge' => 'b-muted',
        'Upcoming' => 'b-info', 'In progress' => 'b-live', 'Completed' => 'b-muted',
    ];
    $icons = [
        'Approved' => 'check_circle', 'Tentative' => 'schedule', 'Pending' => 'hourglass_top', 'Rejected' => 'block', 'Cancelled' => 'cancel',
        'Paid' => 'paid', 'Partial' => 'hourglass_top', 'Unpaid' => 'error', 'No charge' => 'money_off',
        'Upcoming' => 'event_upcoming', 'In progress' => 'radio_button_checked', 'Completed' => 'task_alt',
    ];
    $cls  = $kind ?: ($map[$label] ?? 'b-muted');
    $icon = isset($icons[$label]) ? '<span class="msi">' . $icons[$label] . '</span>' : '';
    return '<span class="lf-badge ' . $cls . '">' . $icon . h($text !== '' ? $text : $label) . '</span>';
}
function status_label(string $s): string { return $s === 'Pending' ? 'Awaiting review' : ($s === 'Rejected' ? 'Declined' : $s); }
function status_badge(string $s): string { return badge($s, '', status_label($s)); }
function room_dot($color): string { return '<span class="room-dot" style="--c:' . h($color ?: '#9BEF6B') . '"></span>'; }
function initials(string $name): string
{
    $p = preg_split('/\s+/', trim($name));
    $s = strtoupper(substr($p[0] ?? '', 0, 1) . substr($p[1] ?? '', 0, 1));
    return $s ?: 'U';
}
function wa_link(string $phone, string $text): string
{
    $d = preg_replace('/\D+/', '', $phone);
    if (strlen($d) === 10 && $d[0] === '9') $d = '977' . $d;
    return 'https://wa.me/' . $d . '?text=' . rawurlencode($text);
}
function amenity_list($csv): array
{
    return array_values(array_filter(array_map('trim', explode(',', (string) $csv)), 'strlen'));
}
function room_images($json): array
{
    $a = json_decode((string) $json, true);
    return is_array($a) ? array_values(array_filter($a, function ($x) { return is_string($x) && $x !== '' && stripos($x, 'javascript:') !== 0; })) : [];
}
/** Material Symbols icon for a facility name. */
function amenity_icon(string $name): string
{
    $f = strtolower($name);
    $map = [['wi-fi', 'wifi'], ['wifi', 'wifi'], ['internet', 'wifi'], ['air condition', 'ac_unit'], ['ac', 'ac_unit'], ['chair', 'chair'], ['seating', 'chair'],
            ['whiteboard', 'draw'], ['board', 'draw'], ['power', 'power'], ['backup', 'power'], ['electric', 'power'], ['projector', 'videocam'], ['screen', 'tv'], ['tv', 'tv'],
            ['coffee', 'coffee'], ['tea', 'emoji_food_beverage'], ['water', 'water_drop'], ['sound', 'speaker'], ['mic', 'mic'], ['parking', 'local_parking'], ['print', 'print'], ['locker', 'lock']];
    foreach ($map as [$k, $icon]) {
        if ($k === 'ac' ? preg_match('/\bac\b/', $f) : strpos($f, $k) !== false) return $icon;
    }
    return 'check_circle';
}

/** Amount in words — Nepali numbering (lakh / crore). */
function amount_in_words(float $amount): string
{
    $amount = round($amount, 2);
    $rupees = (int) floor($amount);
    $paisa  = (int) round(($amount - $rupees) * 100);
    $w = 'Rupees ' . ($rupees ? num_words($rupees) : 'Zero');
    if ($paisa) $w .= ' and ' . num_words($paisa) . ' Paisa';
    return $w . ' Only';
}
function num_words(int $n): string
{
    $ones = ['', 'One', 'Two', 'Three', 'Four', 'Five', 'Six', 'Seven', 'Eight', 'Nine', 'Ten', 'Eleven', 'Twelve', 'Thirteen', 'Fourteen', 'Fifteen', 'Sixteen', 'Seventeen', 'Eighteen', 'Nineteen'];
    $tens = ['', '', 'Twenty', 'Thirty', 'Forty', 'Fifty', 'Sixty', 'Seventy', 'Eighty', 'Ninety'];
    $two = function ($x) use ($ones, $tens) { return $x < 20 ? $ones[$x] : trim($tens[intdiv($x, 10)] . ' ' . $ones[$x % 10]); };
    $out = [];
    foreach ([[10000000, 'Crore'], [100000, 'Lakh'], [1000, 'Thousand'], [100, 'Hundred']] as $u) {
        if ($n >= $u[0]) {
            $q = intdiv($n, $u[0]);
            $out[] = ($u[0] === 10000000 && $q >= 100 ? num_words($q) : $two($q)) . ' ' . $u[1];
            $n %= $u[0];
        }
    }
    if ($n) $out[] = $two($n);
    return trim(implode(' ', $out));
}

// ---------- CSRF, flash, redirect ----------
if (empty($_SESSION['csrf'])) $_SESSION['csrf'] = bin2hex(random_bytes(16));
function csrf_field(): string { return '<input type="hidden" name="csrf" value="' . h($_SESSION['csrf']) . '">'; }
function csrf_ok(): bool { return isset($_POST['csrf']) && hash_equals($_SESSION['csrf'], (string) $_POST['csrf']); }
function flash(string $type, string $msg): void { $_SESSION['flash'][] = ['type' => $type, 'msg' => $msg]; }
function redirect(string $url): void { header('Location: ' . $url); exit; }
function back_to(string $fallback): string
{
    $r = $_POST['return_to'] ?? '';
    return (is_string($r) && $r !== '' && $r[0] === '?' && strpbrk($r, "\r\n") === false) ? $r : $fallback;
}
function json_out(array $data, int $code = 200): void
{
    http_response_code($code);
    header('Content-Type: application/json; charset=utf-8');
    echo json_encode($data);
    exit;
}

// =====================================================================
// 5. SIGN-IN — clients (name + email) and staff (email + password)
// =====================================================================
$auth_error = '';
$auth_tab   = 'client';
$staff_count = (int) db_val("SELECT COUNT(*) FROM app_users");

if (isset($_GET['logout'])) {
    $_SESSION = [];
    session_regenerate_id(true);
    redirect('?');
}
function start_session_as(string $kind, array $data): void
{
    session_regenerate_id(true);
    unset($_SESSION['lfc_uid'], $_SESSION['lfc_client']);
    if ($kind === 'staff') {
        $_SESSION['lfc_uid'] = (int) $data['id'];
        $_SESSION['logged_user'] = $data['name'];     // legacy keys used by the sibling pages
        $_SESSION['role'] = 'admin';
    } else {
        $_SESSION['lfc_client'] = $data;
        $_SESSION['logged_user'] = $data['name'];
        $_SESSION['role'] = 'user';
    }
}
if ($_SERVER['REQUEST_METHOD'] === 'POST' && in_array($_POST['action'] ?? '', ['client_login', 'staff_login', 'setup'], true)) {
    $act = $_POST['action'];
    $auth_tab = $act === 'client_login' ? 'client' : 'staff';
    if (!csrf_ok()) {
        $auth_error = 'Your session expired. Please try again.';
    } elseif ($act === 'client_login') {
        $n = trim((string) ($_POST['name'] ?? ''));
        $e = strtolower(trim((string) ($_POST['email'] ?? '')));
        $p = trim((string) ($_POST['phone'] ?? ''));
        if ($n === '' || !filter_var($e, FILTER_VALIDATE_EMAIL)) {
            $auth_error = 'Please enter your full name and a valid email address.';
        } else {
            start_session_as('client', ['name' => $n, 'email' => $e, 'phone' => $p]);
            redirect($_SESSION['after_login'] ?? '?view=dashboard');
        }
    } elseif ($act === 'setup' && $staff_count === 0) {
        $n = trim((string) ($_POST['name'] ?? ''));
        $e = strtolower(trim((string) ($_POST['email'] ?? '')));
        $p = (string) ($_POST['password'] ?? '');
        if ($n === '' || !filter_var($e, FILTER_VALIDATE_EMAIL)) {
            $auth_error = 'Please enter your name and a valid email.';
        } elseif (!in_array($e, array_map('strtolower', OWNER_EMAILS), true)) {
            $auth_error = 'The first admin account must use one of the owner emails set in OWNER_EMAILS at the top of the file.';
        } elseif (strlen($p) < 8) {
            $auth_error = 'Password must be at least 8 characters.';
        } elseif ($p !== ($_POST['password2'] ?? '')) {
            $auth_error = 'Passwords do not match.';
        } else {
            $uid = db_exec("INSERT INTO app_users (name, email, password_hash, role, created_at) VALUES (?, ?, ?, 'admin', ?)", [$n, $e, password_hash($p, PASSWORD_DEFAULT), date('Y-m-d H:i:s')]);
            start_session_as('staff', ['id' => $uid, 'name' => $n]);
            flash('success', 'Welcome, ' . $n . '! Your admin account is ready. Add staff under Rooms & settings → Users.');
            redirect('?view=dashboard');
        }
    } elseif ($act === 'staff_login') {
        $e = strtolower(trim((string) ($_POST['email'] ?? '')));
        $u = db_one("SELECT * FROM app_users WHERE email = ?", [$e]);
        if ($u && password_verify((string) ($_POST['password'] ?? ''), $u['password_hash'])) {
            start_session_as('staff', $u);
            db_exec("UPDATE app_users SET last_login = ? WHERE id = ?", [date('Y-m-d H:i:s'), (int) $u['id']]);
            $to = $_SESSION['after_login'] ?? '?view=dashboard';
            unset($_SESSION['after_login']);
            redirect($to);
        }
        usleep(400000);
        $auth_error = 'Incorrect email or password.';
    }
}

$current_user = null;
$client = null;
if (!empty($_SESSION['lfc_uid'])) {
    $current_user = db_one("SELECT id, name, email, role FROM app_users WHERE id = ?", [(int) $_SESSION['lfc_uid']]);
} elseif (!empty($_SESSION['lfc_client']['email'])) {
    $client = $_SESSION['lfc_client'];
}
if (!$current_user && !$client) {
    if (isset($_GET['api']) || isset($_GET['export']) || isset($_GET['export_csv']) || isset($_GET['download_ics'])) json_out(['ok' => false, 'error' => 'Please sign in again.'], 401);
    if ($_SERVER['REQUEST_METHOD'] === 'GET' && !empty($_SERVER['QUERY_STRING'])) $_SESSION['after_login'] = '?' . $_SERVER['QUERY_STRING'];
    render_auth_page($auth_tab, $auth_error, $staff_count === 0);
    exit;
}
$is_staff = (bool) $current_user;                       // booking team (any staff account)
$is_admin = $is_staff && $current_user['role'] === 'admin'; // can delete, manage rooms and users
$me       = $is_staff ? $current_user['name'] : $client['name'];

// =====================================================================
// 6. DOMAIN LOGIC
// =====================================================================
function get_rooms(bool $active_only = true): array
{
    return db_all("SELECT * FROM rooms" . ($active_only ? " WHERE COALESCE(is_active,1) = 1" : "") . " ORDER BY id");
}
function get_booking(int $id): ?array
{
    return db_one("SELECT b.*, r.name AS rname, r.color AS rcolor, r.capacity AS rcapacity, r.amenities AS ramenities, r.base_rate AS rbase, r.hourly_rate AS rhourly
                   FROM bookings b LEFT JOIN rooms r ON r.id = b.room_id WHERE b.id = ?", [$id]);
}
/** Approved / tentative bookings that overlap a room, date range and daily time window. */
function find_conflicts(int $room_id, string $sd, string $ed, string $st, string $et, int $exclude = 0): array
{
    return db_all(
        "SELECT b.id, b.guest_name, b.booking_date, b.end_date, b.start_time, b.end_time, b.status FROM bookings b
         WHERE b.room_id = ? AND " . SQL_BLOCKING . " AND b.booking_date <= ? AND b.end_date >= ? AND b.start_time < ? AND b.end_time > ? AND b.id <> ?
         ORDER BY b.booking_date, b.start_time",
        [$room_id, $ed, $sd, substr($et, 0, 5) . ':00', substr($st, 0, 5) . ':00', $exclude]
    );
}
/** Other pending requests for the same room and time (staff choose between them). */
function find_pending_overlaps(int $room_id, string $sd, string $ed, string $st, string $et, int $exclude = 0): array
{
    return db_all(
        "SELECT b.id, b.guest_name FROM bookings b WHERE b.room_id = ? AND b.status = 'Pending' AND b.booking_date <= ? AND b.end_date >= ?
         AND b.start_time < ? AND b.end_time > ? AND b.id <> ? ORDER BY b.id",
        [$room_id, $ed, $sd, substr($et, 0, 5) . ':00', substr($st, 0, 5) . ':00', $exclude]
    );
}
/** Live "right now" status for every room (one query). */
function live_room_status(): array
{
    $today = date('Y-m-d');
    $now = date('H:i:s');
    $out = [];
    foreach (db_all("SELECT b.room_id, b.start_time, b.end_time FROM bookings b WHERE ? BETWEEN b.booking_date AND b.end_date AND " . SQL_BLOCKING . " ORDER BY b.start_time", [$today]) as $b) {
        $rid = (int) $b['room_id'];
        if (isset($out[$rid]) && $out[$rid]['state'] === 'busy') continue;
        if ($b['start_time'] <= $now && $b['end_time'] > $now) {
            $out[$rid] = ['state' => 'busy', 'text' => 'In use until ' . fmt_time($b['end_time'])];
        } elseif ($b['start_time'] > $now && !isset($out[$rid])) {
            $mins = (int) floor((strtotime($b['start_time']) - strtotime($now)) / 60);
            $dur = $mins >= 60 ? floor($mins / 60) . ' hr' . (floor($mins / 60) > 1 ? 's' : '') . ($mins % 60 ? ' ' . ($mins % 60) . ' min' : '') : $mins . ' min';
            $out[$rid] = ['state' => 'soon', 'text' => 'Free for the next ' . $dur . ' (booked at ' . fmt_time($b['start_time']) . ')'];
        }
    }
    return $out;
}
function availability(string $sd, string $ed, string $st, string $et, int $exclude, bool $staff): array
{
    $live = live_room_status();
    $out = [];
    foreach (get_rooms() as $r) {
        $c = find_conflicts((int) $r['id'], $sd, $ed, $st, $et, $exclude);
        $row = [
            'id' => (int) $r['id'], 'name' => $r['name'], 'color' => $r['color'] ?: '#9BEF6B',
            'capacity' => $r['capacity'] !== null ? (int) $r['capacity'] : null,
            'description' => (string) ($r['description'] ?? ''),
            'amenities' => array_map(function ($a) { return ['name' => $a, 'icon' => amenity_icon($a)]; }, amenity_list($r['amenities'])),
            'images' => room_images($r['images']),
            'live' => $live[(int) $r['id']] ?? ['state' => 'free', 'text' => 'Free for the rest of today'],
            'available' => !$c,
            'conflicts' => array_map(function ($x) use ($staff) {
                $row = ['dates' => fmt_range($x['booking_date'], $x['end_date']), 'time' => fmt_time($x['start_time']) . ' – ' . fmt_time($x['end_time'])];
                if ($staff) $row += ['id' => (int) $x['id'], 'ref' => booking_ref($x['id']), 'guest' => $x['guest_name'], 'status' => $x['status']];
                return $row;
            }, $c),
        ];
        if ($staff) {
            $row['base_rate'] = (float) $r['base_rate'];
            $row['hourly_rate'] = $r['hourly_rate'] !== null ? (float) $r['hourly_rate'] : round((float) $r['base_rate'] / 8);
            $row['pending'] = count(find_pending_overlaps((int) $r['id'], $sd, $ed, $st, $et, $exclude));
        }
        $out[] = $row;
    }
    return $out;
}
/** Validate booking form input. Returns [data, errors]. Clients always create Pending requests without prices. */
function read_booking_input(array $in, int $exclude, bool $staff): array
{
    $e = [];
    $d = [
        'room_id'       => (int) ($in['room_id'] ?? 0),
        'guest_name'    => trim((string) ($in['g_name'] ?? '')),
        'guest_email'   => strtolower(trim((string) ($in['g_email'] ?? ''))),
        'guest_phone'   => trim((string) ($in['g_phone'] ?? '')),
        'guest_pan'     => trim((string) ($in['g_pan'] ?? '')),
        'guest_address' => trim((string) ($in['g_address'] ?? '')),
        'booking_date'  => valid_date($in['start_date'] ?? ''),
        'end_date'      => valid_date($in['end_date'] ?? ''),
        'start_time'    => valid_time($in['s_time'] ?? ''),
        'end_time'      => valid_time($in['e_time'] ?? ''),
        'rate_type'     => $staff && array_key_exists($in['rate_type'] ?? '', RATE_TYPES) ? $in['rate_type'] : 'day',
        'custom_rate'   => $staff ? round((float) ($in['custom_rate'] ?? 0), 2) : 0.0,
        'discount'      => $staff ? round((float) ($in['discount'] ?? 0), 2) : 0.0,
        'status'        => $staff ? (in_array($in['status'] ?? '', STATUSES, true) ? $in['status'] : 'Approved') : 'Pending',
        'purpose'       => trim((string) ($in['purpose'] ?? '')),
        'attendees'     => ($in['attendees'] ?? '') === '' ? null : max(0, (int) $in['attendees']),
        'notes'         => trim((string) ($in['notes'] ?? '')),
        'admin_remarks' => $staff ? trim((string) ($in['admin_remarks'] ?? '')) : null,
    ];
    $room = $d['room_id'] ? db_one("SELECT * FROM rooms WHERE id = ?", [$d['room_id']]) : null;
    if (!$room) $e[] = 'Please choose a valid space.';
    if ($d['guest_name'] === '') $e[] = 'Guest / organisation name is required.';
    if ($d['guest_phone'] === '') $e[] = 'Phone number is required.';
    if (!$staff && $d['guest_email'] === '') $e[] = 'Email address is required.';
    if ($d['guest_email'] !== '' && !filter_var($d['guest_email'], FILTER_VALIDATE_EMAIL)) $e[] = 'The email address is not valid.';
    if (!$d['booking_date'] || !$d['end_date']) $e[] = 'Please choose valid dates.';
    elseif ($d['end_date'] < $d['booking_date']) $e[] = 'The end date cannot be before the start date.';
    elseif (!$staff && $d['end_date'] < date('Y-m-d')) $e[] = 'Please choose dates from today onwards.';
    if (!$d['start_time'] || !$d['end_time']) $e[] = 'Please choose valid start and end times.';
    elseif ($d['end_time'] <= $d['start_time']) $e[] = 'The end time must be after the start time.';
    if ($d['custom_rate'] < 0 || $d['discount'] < 0) $e[] = 'Rate and discount cannot be negative.';
    // Over-capacity is allowed on purpose (shown as a warning in the form and on the booking).
    if (!$e && ($d['status'] === 'Pending' || is_blocking($d['status']))) {
        $c = find_conflicts($d['room_id'], $d['booking_date'], $d['end_date'], $d['start_time'], $d['end_time'], $exclude);
        if ($c) {
            if ($staff) {
                $list = array_map(function ($x) { return booking_ref($x['id']) . ' ' . $x['guest_name'] . ' (' . fmt_range($x['booking_date'], $x['end_date']) . ', ' . fmt_time($x['start_time']) . '–' . fmt_time($x['end_time']) . ')'; }, $c);
                $e[] = ($room['name'] ?? 'This space') . ' is already booked at that time: ' . implode('; ', $list) . '.';
            } else {
                $e[] = ($room['name'] ?? 'This space') . ' is already booked for part of that time. Please pick another time or space.';
            }
        }
    }
    if (!$e) {
        $t = compute_totals($d['custom_rate'], $d['rate_type'], $d['booking_date'], $d['end_date'], $d['start_time'], $d['end_time'], $d['discount']);
        $d['discount'] = $t['discount'];
        $d['total_amount'] = $t['total'];
        $d['start_time'] .= ':00';
        $d['end_time']   .= ':00';
    }
    return [$d, $e];
}

// ---------- Branded emails ----------
function mail_html(string $to, string $subject, string $html, string $cc = ''): bool
{
    if (!filter_var($to, FILTER_VALIDATE_EMAIL)) return false;
    $headers  = "MIME-Version: 1.0\r\n";
    $headers .= "Content-Type: text/html; charset=UTF-8\r\n";
    $headers .= 'From: ' . COMPANY_SHORT . ' <' . MAIL_FROM . ">\r\n";
    if (COMPANY_EMAIL && $to !== COMPANY_EMAIL) $headers .= 'Reply-To: ' . COMPANY_EMAIL . "\r\n";
    if ($cc && filter_var($cc, FILTER_VALIDATE_EMAIL)) $headers .= 'Cc: ' . $cc . "\r\n";
    try {
        return (bool) @mail($to, $subject, $html, $headers);
    } catch (Throwable $e) {
        return false;
    }
}
function email_layout(string $eyebrow, string $headline, string $body): string
{
    $contact = trim(implode(' · ', array_filter([COMPANY_ADDRESS, COMPANY_PHONE, COMPANY_EMAIL])));
    return "<!DOCTYPE html><html><body style='margin:0;background:#EFEFEF;font-family:Arial,Helvetica,sans-serif;color:#0E2211'>
<table role='presentation' width='100%' cellpadding='0' cellspacing='0' style='background:#EFEFEF;padding:24px 12px'><tr><td align='center'>
<table role='presentation' width='600' cellpadding='0' cellspacing='0' style='max-width:600px;width:100%;background:#ffffff;border-radius:16px;overflow:hidden'>
<tr><td style='background:#041E0A;padding:26px 30px'>
  <div style='color:#9BEF6B;font-size:11px;letter-spacing:2px;text-transform:uppercase;font-weight:bold'>" . h($eyebrow) . "</div>
  <div style='color:#ffffff;font-family:Georgia,serif;font-size:28px;line-height:1.2;margin-top:6px'>" . h($headline) . "</div>
</td></tr>
<tr><td style='height:5px;background:linear-gradient(90deg,#F2E221,#9BEF6B);background-color:#9BEF6B;font-size:0;line-height:0'>&nbsp;</td></tr>
<tr><td style='padding:26px 30px 24px'>$body</td></tr>
<tr><td style='background:#F6F8F3;padding:14px 30px;font-size:11.5px;color:#7A877C;border-top:1px solid #E4EAE0'>" . h(COMPANY_NAME) . ($contact ? ' · ' . h($contact) : '') . "</td></tr>
</table></td></tr></table></body></html>";
}
function email_rows(array $pairs): string
{
    $html = '';
    foreach ($pairs as $k => $v) {
        if ($v === null || $v === '') continue;
        $html .= "<tr><td style='padding:9px 14px;color:#5B6A5D;font-size:13px;border-bottom:1px solid #E4EAE0;width:38%'>" . h($k) . "</td><td style='padding:9px 14px;font-weight:600;font-size:14px;border-bottom:1px solid #E4EAE0;color:#0E2211'>$v</td></tr>";
    }
    return "<table role='presentation' width='100%' cellpadding='0' cellspacing='0' style='border:1px solid #E4EAE0;border-radius:12px;border-collapse:separate;overflow:hidden;margin:6px 0 18px'>$html</table>";
}
function email_note(string $title, string $text, string $tone = 'solar'): string
{
    $c = ['solar' => ['#FCF9D2', '#D4B800', '#4a4300'], 'red' => ['#FBE7E7', '#C23434', '#8A2525'], 'lime' => ['#E6F6DB', '#5DAE3A', '#1F5A17']][$tone];
    return "<div style='font-weight:bold;font-size:12px;letter-spacing:1px;text-transform:uppercase;color:#1C3A13;margin:4px 0 8px'>" . h($title) . "</div>
            <div style='background:{$c[0]};border-left:4px solid {$c[1]};padding:12px 15px;border-radius:6px;color:{$c[2]};font-size:14px;margin-bottom:18px;white-space:pre-line'>" . h($text) . "</div>";
}
function email_button(string $label, string $url): string
{
    return "<div style='text-align:center;margin:22px 0 6px'><a href='" . h($url) . "' style='background:#1C3A13;color:#ffffff;padding:12px 26px;text-decoration:none;border-radius:30px;font-weight:bold;font-size:14px;display:inline-block'>" . h($label) . "</a></div>";
}
function email_terms(bool $with_amenities, array $b): string
{
    $html = '';
    if ($with_amenities) {
        $list = '';
        foreach (amenity_list($b['ramenities'] ?? '') ?: ['Standard facilities'] as $a) $list .= "<li style='padding:4px 0;color:#3D4B3F'>" . h($a) . "</li>";
        $html .= "<div style='font-weight:bold;font-size:12px;letter-spacing:1px;text-transform:uppercase;color:#1C3A13;margin:4px 0 6px'>Included room facilities</div><ul style='margin:0 0 16px;padding-left:18px;font-size:13.5px'>$list</ul>";
    }
    $terms = '';
    foreach (TERMS as $x) $terms .= "<li style='margin-bottom:5px'>" . h($x) . "</li>";
    $html .= "<div style='font-weight:bold;font-size:12px;letter-spacing:1px;text-transform:uppercase;color:#1C3A13;margin:4px 0 6px'>Terms &amp; conditions</div>
              <ol style='margin:0 0 14px;padding-left:18px;font-size:12.5px;color:#5B6A5D;line-height:1.6'>$terms</ol>
              <p style='font-size:12px;color:#7A877C;line-height:1.5;margin:0'><b>Important facility note:</b> " . h(FACILITY_NOTE) . "</p>";
    return $html;
}
function booking_email_rows(array $b, bool $with_money): string
{
    $t = booking_totals($b);
    $rows = [
        'Booking ID' => h(booking_ref($b['id'])),
        'Space'      => h($b['rname']),
        'Check-in'   => h(fmt_date($b['booking_date'], 'D, d M Y')) . ' at ' . h(fmt_time($b['start_time'])),
        'Check-out'  => h(fmt_date($b['end_date'], 'D, d M Y')) . ' at ' . h(fmt_time($b['end_time'])),
        'Duration'   => $t['days'] . ' day(s) · ' . num_clean($t['hours']) . ' hrs/day',
        'Purpose'    => $b['purpose'] ? h($b['purpose']) : null,
        'Expected guests' => $b['attendees'] ? (int) $b['attendees'] : null,
    ];
    if ($with_money && $t['grand'] > 0) {
        $rows['Amount (excl. VAT)'] = h(money($t['total'], 2));
        $rows['VAT (' . VAT_RATE . '%)'] = h(money($t['vat'], 2));
        $rows['Total payable'] = '<span style="color:#1C3A13">' . h(money($t['grand'], 2)) . '</span>';
        if ($t['paid'] > 0) {
            $rows['Received'] = h(money($t['paid'], 2));
            $rows['Balance due'] = h(money(max(0, $t['balance']), 2));
        }
    }
    return email_rows($rows);
}
/** $kind: approved | confirmed | tentative | modified | declined | received */
function email_guest(array $b, string $kind): bool
{
    $name = h(trim($b['guest_name']));
    $remarks = trim((string) ($b['admin_remarks'] ?? ''));
    switch ($kind) {
        case 'received':
            $subject = 'We received your booking request ' . booking_ref($b['id']);
            $body = "<p style='margin:0 0 12px;font-size:15px'>Namaste <b>$name</b>,</p><p style='margin:0 0 16px;font-size:14px;color:#3D4B3F;line-height:1.6'>Thank you! Your request is <b>awaiting review</b>. Our team will confirm the space and pricing and email you shortly.</p>"
                  . booking_email_rows($b, false) . email_terms(false, $b);
            $html = email_layout(COMPANY_SHORT, 'Request received', $body);
            break;
        case 'declined':
            $subject = 'Booking request declined ' . booking_ref($b['id']) . ' - ' . COMPANY_SHORT;
            $body = "<p style='margin:0 0 12px;font-size:15px'>Namaste <b>$name</b>,</p><p style='margin:0 0 16px;font-size:14px;color:#3D4B3F;line-height:1.6'>Thank you for your interest in " . h(COMPANY_SHORT) . ". Unfortunately we are unable to accept this request.</p>"
                  . booking_email_rows($b, false)
                  . email_note('Reason', $remarks ?: 'No specific reason was provided. Please contact us for details.', 'red')
                  . "<p style='font-size:14px;color:#3D4B3F;margin:0'>If you would like to try other dates or another space, please reply to this email or call " . h(COMPANY_PHONE) . ".</p>";
            $html = email_layout(COMPANY_SHORT, 'Booking request declined', $body);
            break;
        default:
            $heads = ['approved' => 'Your booking is approved', 'confirmed' => 'Your booking is confirmed', 'tentative' => 'Your booking is on hold', 'modified' => 'Your booking was updated'];
            $intro = [
                'approved'  => 'Good news — your booking request has been reviewed and <b style="color:#1F5A17">approved</b>. Here are your reservation details:',
                'confirmed' => 'Your booking has been created and <b style="color:#1F5A17">confirmed</b> by our team. Here are your reservation details:',
                'tentative' => 'We have <b>provisionally reserved</b> the space for you. It will be confirmed once finalised with our team.',
                'modified'  => 'Your booking details have been <b>updated</b> by our team. Here are the latest details:',
            ];
            $kind = isset($heads[$kind]) ? $kind : 'confirmed';
            $subject = ['approved' => 'Booking Approved', 'confirmed' => 'Booking Confirmed', 'tentative' => 'Booking on hold', 'modified' => 'Booking Modified'][$kind] . ' ' . booking_ref($b['id']) . ' - ' . COMPANY_SHORT;
            $body = "<p style='margin:0 0 12px;font-size:15px'>Namaste <b>$name</b>,</p><p style='margin:0 0 16px;font-size:14px;color:#3D4B3F;line-height:1.6'>{$intro[$kind]}</p>"
                  . booking_email_rows($b, true)
                  . email_note('Remarks from our team', $remarks ?: 'Your booking is confirmed. We look forward to hosting you!', 'solar')
                  . email_terms(true, $b)
                  . "<p style='margin:18px 0 0;font-size:14px;color:#3D4B3F'>Thank you for choosing " . h(COMPANY_SHORT) . ".</p>";
            $html = email_layout(COMPANY_SHORT, $heads[$kind], $body);
    }
    return mail_html((string) $b['guest_email'], $subject, $html);
}
function email_admin_request(array $b): bool
{
    $rows = email_rows([
        'Request'   => h(booking_ref($b['id'])),
        'Guest'     => h($b['guest_name']),
        'Email'     => h($b['guest_email']),
        'Phone'     => h($b['guest_phone']),
        'Space'     => h($b['rname']),
        'Dates'     => h(fmt_range($b['booking_date'], $b['end_date'])),
        'Timings'   => h(fmt_time($b['start_time']) . ' – ' . fmt_time($b['end_time'])),
        'Purpose'   => $b['purpose'] ? h($b['purpose']) : null,
        'Guests'    => $b['attendees'] ? (int) $b['attendees'] : null,
        'Notes'     => $b['notes'] ? nl2br(h($b['notes'])) : null,
    ]);
    $body = "<p style='margin:0 0 12px;font-size:15px'>Hello team,</p><p style='margin:0 0 14px;font-size:14px;color:#3D4B3F;line-height:1.6'>A new workspace booking request needs your review and pricing. Status: <b style='color:#6E6100'>Pending approval</b>.</p>"
          . $rows . email_button('Review in the booking portal', PORTAL_URL . '?view=booking&id=' . (int) $b['id']);
    return mail_html(ADMIN_NOTIFY_TO, 'New Booking Request (' . booking_ref($b['id']) . ') - Pending Approval', email_layout('Action required', 'New booking request', $body), ADMIN_NOTIFY_CC);
}
function email_admin_client_cancel(array $b): bool
{
    $body = "<p style='font-size:14px;color:#3D4B3F'>The client withdrew this request:</p>" . email_rows(['Request' => h(booking_ref($b['id'])), 'Guest' => h($b['guest_name']), 'Space' => h($b['rname']), 'Dates' => h(fmt_range($b['booking_date'], $b['end_date']))]);
    return mail_html(ADMIN_NOTIFY_TO, 'Request withdrawn (' . booking_ref($b['id']) . ')', email_layout('For your information', 'Request withdrawn', $body));
}
function record_payment(int $booking_id, float $amount, string $method, string $ref, string $paid_on, string $by): void
{
    db_exec("INSERT INTO booking_payments (booking_id, amount, method, reference, paid_on, created_by, created_at) VALUES (?, ?, ?, ?, ?, ?, ?)",
        [$booking_id, $amount, $method, $ref, $paid_on, $by, date('Y-m-d H:i:s')]);
    db_exec("UPDATE bookings SET amount_paid = amount_paid + ?, updated_at = ? WHERE id = ?", [$amount, date('Y-m-d H:i:s'), $booking_id]);
}
/** Calendar file (.ics); multi-day bookings repeat daily in the booked time window. */
function ics_for_booking(array $b): string
{
    $esc = function ($s) { return str_replace(["\r\n", "\n"], '\\n', preg_replace('/([,;\\\\])/', '\\\\$1', (string) $s)); };
    $days = days_between($b['booking_date'], $b['end_date']);
    $lines = [
        'BEGIN:VCALENDAR', 'VERSION:2.0', 'PRODID:-//Leapfrog Connect//Booking//EN', 'CALSCALE:GREGORIAN', 'METHOD:PUBLISH',
        'BEGIN:VTIMEZONE', 'TZID:Asia/Kathmandu', 'BEGIN:STANDARD', 'DTSTART:19860101T000000', 'TZOFFSETFROM:+0530', 'TZOFFSETTO:+0545', 'TZNAME:NPT', 'END:STANDARD', 'END:VTIMEZONE',
        'BEGIN:VEVENT',
        'UID:lfc-booking-' . (int) $b['id'] . '@leapfrogconnect',
        'DTSTAMP:' . gmdate('Ymd\THis\Z'),
        'DTSTART;TZID=Asia/Kathmandu:' . date('Ymd\THis', strtotime($b['booking_date'] . ' ' . $b['start_time'])),
        'DTEND;TZID=Asia/Kathmandu:' . date('Ymd\THis', strtotime($b['booking_date'] . ' ' . $b['end_time'])),
    ];
    if ($days > 1) $lines[] = 'RRULE:FREQ=DAILY;COUNT=' . $days;
    $lines[] = 'SUMMARY:' . $esc('Workspace booking - ' . $b['rname']);
    $lines[] = 'DESCRIPTION:' . $esc('Booking ' . booking_ref($b['id']) . ' at ' . COMPANY_NAME . ($b['purpose'] ? "\n" . $b['purpose'] : ''));
    $lines[] = 'LOCATION:' . $esc(COMPANY_ADDRESS);
    $lines[] = 'END:VEVENT';
    $lines[] = 'END:VCALENDAR';
    return implode("\r\n", $lines) . "\r\n";
}

/** Filters shared by the bookings list and CSV export. */
function booking_filters(array $src): array
{
    $f = [
        'search' => trim((string) ($src['search'] ?? '')),
        'filter' => (string) ($src['filter'] ?? ''),
        'from'   => valid_date($src['from'] ?? '', ''),
        'to'     => valid_date($src['to'] ?? '', ''),
        'room'   => (int) ($src['room'] ?? 0),
        'status' => in_array($src['status'] ?? '', STATUSES, true) ? $src['status'] : '',
        'pay'    => in_array($src['pay'] ?? '', ['unpaid', 'partial', 'paid', 'due'], true) ? $src['pay'] : '',
    ];
    $today = date('Y-m-d');
    $w = ['1=1'];
    $p = [];
    if ($f['search'] !== '') {
        $like = '%' . $f['search'] . '%';
        $idq  = (int) preg_replace('/\D/', '', $f['search']);
        $w[] = "(b.guest_name LIKE ? OR b.guest_email LIKE ? OR b.guest_pan LIKE ? OR b.guest_phone LIKE ? OR b.purpose LIKE ? OR b.id = ?)";
        array_push($p, $like, $like, $like, $like, $like, $idq);
    }
    if ($f['filter'] === 'today') { $w[] = "? BETWEEN b.booking_date AND b.end_date"; $p[] = $today; }
    elseif ($f['filter'] === 'month') { $w[] = "b.booking_date <= ? AND b.end_date >= ?"; array_push($p, date('Y-m-t'), date('Y-m-01')); }
    elseif ($f['filter'] === 'upcoming') { $w[] = "b.booking_date > ? AND " . SQL_BLOCKING; $p[] = $today; }
    elseif ($f['filter'] === 'pending') { $w[] = "b.status = 'Pending'"; }
    if ($f['from']) { $w[] = "b.end_date >= ?"; $p[] = $f['from']; }
    if ($f['to'])   { $w[] = "b.booking_date <= ?"; $p[] = $f['to']; }
    if ($f['room']) { $w[] = "b.room_id = ?"; $p[] = $f['room']; }
    if ($f['status']) { $w[] = "b.status = ?"; $p[] = $f['status']; }
    $grand = "(b.total_amount * " . (1 + VAT_RATE / 100) . ")";
    if ($f['pay'] === 'unpaid')  $w[] = "b.amount_paid <= 0 AND $grand > 0 AND " . SQL_BLOCKING;
    if ($f['pay'] === 'partial') $w[] = "b.amount_paid > 0 AND b.amount_paid < $grand - 0.5 AND " . SQL_BLOCKING;
    if ($f['pay'] === 'paid')    $w[] = "b.amount_paid >= $grand - 0.5 AND $grand > 0";
    if ($f['pay'] === 'due')     $w[] = "b.amount_paid < $grand - 0.5 AND " . SQL_BLOCKING;
    return [$f, implode(' AND ', $w), $p];
}

// =====================================================================
// 7. JSON API · CALENDAR FILE · CSV EXPORT
// =====================================================================
if (isset($_GET['api'])) {
    if ($_GET['api'] === 'availability') {
        $sd = valid_date($_GET['sd'] ?? '');
        $ed = valid_date($_GET['ed'] ?? '');
        $st = valid_time($_GET['st'] ?? '');
        $et = valid_time($_GET['et'] ?? '');
        if (!$sd || !$ed || !$st || !$et) json_out(['ok' => false, 'error' => 'Choose valid dates and times.']);
        if ($ed < $sd) json_out(['ok' => false, 'error' => 'The end date is before the start date.']);
        if ($et <= $st) json_out(['ok' => false, 'error' => 'The end time must be after the start time.']);
        json_out(['ok' => true, 'days' => days_between($sd, $ed), 'hours' => hours_between($st, $et),
                  'rooms' => availability($sd, $ed, $st, $et, $is_staff ? (int) ($_GET['exclude'] ?? 0) : 0, $is_staff)]);
    }
    json_out(['ok' => false, 'error' => 'Unknown request'], 404);
}
if (isset($_GET['download_ics'])) {
    $b = get_booking((int) $_GET['download_ics']);
    $mine = $b && $client && strcasecmp((string) $b['guest_email'], $client['email']) === 0;
    if (!$b || !($is_staff || $mine) || !is_blocking($b['status'])) {
        flash('danger', 'Calendar files are available for approved bookings only.');
        redirect('?view=dashboard');
    }
    header('Content-Type: text/calendar; charset=utf-8');
    header('Content-Disposition: attachment; filename="Booking_LF_' . str_pad((string) $b['id'], 4, '0', STR_PAD_LEFT) . '.ics"');
    echo ics_for_booking($b);
    exit;
}
if ($is_staff && (($_GET['export'] ?? '') === 'bookings' || isset($_GET['export_csv']))) {
    [$f, $where, $params] = booking_filters($_GET);
    $rows = db_all("SELECT b.*, r.name AS rname FROM bookings b LEFT JOIN rooms r ON r.id = b.room_id WHERE $where ORDER BY b.booking_date DESC, b.start_time", $params);
    header('Content-Type: text/csv; charset=utf-8');
    header('Content-Disposition: attachment; filename="Leapfrog_Connect_Bookings_' . date('Y-m-d') . '.csv"');
    $out = fopen('php://output', 'w');
    fwrite($out, "\xEF\xBB\xBF");
    fputcsv($out, ['Booking ID', 'Status', 'Guest', 'Email', 'Phone', 'PAN', 'Address', 'Space', 'From', 'To', 'Start', 'End', 'Days', 'Purpose', 'Attendees', 'Rate basis', 'Rate', 'Discount', 'Amount (excl. VAT)', 'VAT', 'Total incl. VAT', 'Received', 'Balance', 'Payment', 'Remarks', 'Created by', 'Created at']);
    foreach ($rows as $b) {
        $t = booking_totals($b);
        fputcsv($out, [booking_ref($b['id']), $b['status'], $b['guest_name'], $b['guest_email'], $b['guest_phone'], $b['guest_pan'], $b['guest_address'], $b['rname'],
            $b['booking_date'], $b['end_date'], substr($b['start_time'], 0, 5), substr($b['end_time'], 0, 5), $t['days'], $b['purpose'], $b['attendees'],
            RATE_TYPES[$b['rate_type']] ?? $b['rate_type'], $b['custom_rate'], $b['discount'], $t['total'], $t['vat'], $t['grand'], $t['paid'], $t['balance'],
            is_blocking($b['status']) ? pay_status($t) : '—', $b['admin_remarks'], $b['created_by'], $b['created_at']]);
    }
    fclose($out);
    exit;
}

// =====================================================================
// 8. FORM ACTIONS (Post → Redirect → Get, so refresh never double-books)
// =====================================================================
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $action = (string) ($_POST['action'] ?? '');
    if (!csrf_ok()) {
        flash('danger', 'Your session expired — please try that again.');
        redirect(back_to('?'));
    }
    $now = date('Y-m-d H:i:s');
    $staff_only = ['review_booking', 'update_booking', 'set_status', 'add_payment', 'resend_email', 'save_invoice', 'invoice_status', 'change_password'];
    $admin_only = ['delete_booking', 'delete_payment', 'delete_invoice', 'save_room', 'delete_room', 'add_user', 'delete_user', 'reset_user_password'];
    if ((in_array($action, $staff_only, true) && !$is_staff) || (in_array($action, $admin_only, true) && !$is_admin)) {
        flash('danger', 'You do not have permission for that action.');
        redirect('?');
    }

    // ---------- Create booking (staff: direct booking · client: request) ----------
    if ($action === 'create_booking') {
        $in = $_POST;
        if (!$is_staff) $in['g_email'] = $client['email'];   // a client's requests always use their sign-in email
        [$d, $errors] = read_booking_input($in, 0, $is_staff);
        if ($is_staff && !in_array($d['status'], ['Approved', 'Tentative'], true)) $d['status'] = 'Approved';
        $advance = $is_staff ? max(0, round((float) ($_POST['advance'] ?? 0), 2)) : 0;
        if ($errors) {
            $_SESSION['old_booking'] = array_diff_key($_POST, ['csrf' => 1]);
            foreach ($errors as $er) flash('danger', $er);
            redirect('?view=new&' . http_build_query(['sd' => $_POST['start_date'] ?? '', 'ed' => $_POST['end_date'] ?? '', 'st' => $_POST['s_time'] ?? '', 'et' => $_POST['e_time'] ?? '']));
        }
        $id = db_exec(
            "INSERT INTO bookings (room_id, guest_name, guest_email, guest_pan, guest_address, guest_phone, booking_date, end_date, start_time, end_time, custom_rate, total_amount, rate_type, discount, amount_paid, status, purpose, attendees, notes, admin_remarks, created_by, created_at, updated_at)
             VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 0, ?, ?, ?, ?, ?, ?, ?, ?)",
            [$d['room_id'], $d['guest_name'], $d['guest_email'], $d['guest_pan'], $d['guest_address'], $d['guest_phone'], $d['booking_date'], $d['end_date'], $d['start_time'], $d['end_time'],
             $d['custom_rate'], $d['total_amount'], $d['rate_type'], $d['discount'], $d['status'], $d['purpose'], $d['attendees'], $d['notes'], $d['admin_remarks'],
             $is_staff ? $me : $me . ' (client)', $now, $now]
        );
        if ($advance > 0) {
            $method = in_array($_POST['advance_method'] ?? '', PAY_METHODS, true) ? $_POST['advance_method'] : 'Cash';
            record_payment($id, $advance, $method, 'Advance', date('Y-m-d'), $me);
        }
        $b = get_booking($id);
        if (!$is_staff) {
            email_admin_request($b);
            email_guest($b, 'received');
            $_SESSION['lfc_client']['phone'] = $d['guest_phone'];
            flash('success', 'Request ' . booking_ref($id) . ' sent for ' . $b['rname'] . '. We will email you at ' . $client['email'] . ' once it is reviewed.');
            redirect('?view=dashboard#my-requests');
        }
        $msg = 'Booking ' . booking_ref($id) . ' saved — ' . $b['rname'] . ', ' . fmt_range($b['booking_date'], $b['end_date']) . '.';
        if (!empty($_POST['send_email'])) {
            if (!$b['guest_email']) $msg .= ' No email sent (no guest email).';
            elseif (email_guest($b, $d['status'] === 'Tentative' ? 'tentative' : 'confirmed')) $msg .= ' Confirmation email sent.';
            else flash('warning', 'The booking is saved, but the confirmation email could not be sent. Check the server mail settings.');
        }
        flash('success', $msg);
        redirect('?view=booking&id=' . $id);
    }

    // ---------- Client withdraws their own pending request ----------
    if ($action === 'client_cancel' && !$is_staff) {
        $b = get_booking((int) ($_POST['booking_id'] ?? 0));
        if ($b && strcasecmp((string) $b['guest_email'], $client['email']) === 0 && $b['status'] === 'Pending') {
            db_exec("UPDATE bookings SET status = 'Cancelled', updated_at = ? WHERE id = ?", [$now, (int) $b['id']]);
            email_admin_client_cancel($b);
            flash('success', 'Request ' . booking_ref($b['id']) . ' withdrawn.');
        } else {
            flash('danger', 'Only requests that are still awaiting review can be withdrawn. Please call ' . COMPANY_PHONE . ' for help.');
        }
        redirect('?view=dashboard#my-requests');
    }

    // ---------- Review a request: approve (with price) or decline ----------
    if ($action === 'review_booking') {
        $id = (int) ($_POST['booking_id'] ?? 0);
        $b = get_booking($id);
        $decision = ($_POST['decision'] ?? '') === 'Rejected' ? 'Rejected' : 'Approved';
        $remarks = trim((string) ($_POST['admin_remarks'] ?? ''));
        if (!$b) { flash('danger', 'Booking not found.'); redirect('?view=dashboard'); }
        if ($decision === 'Approved') {
            $c = find_conflicts((int) $b['room_id'], $b['booking_date'], $b['end_date'], $b['start_time'], $b['end_time'], $id);
            if ($c) {
                flash('danger', 'Cannot approve — ' . $b['rname'] . ' is already booked by ' . $c[0]['guest_name'] . ' (' . booking_ref($c[0]['id']) . ', ' . fmt_time($c[0]['start_time']) . '–' . fmt_time($c[0]['end_time']) . '). Edit the request to move it, or decline it.');
                redirect(back_to('?view=booking&id=' . $id));
            }
            $type = array_key_exists($_POST['rate_type'] ?? '', RATE_TYPES) ? $_POST['rate_type'] : 'day';
            $rate = max(0, round((float) ($_POST['allocated_rate'] ?? 0), 2));
            $t = compute_totals($rate, $type, $b['booking_date'], $b['end_date'], $b['start_time'], $b['end_time'], round((float) ($_POST['discount'] ?? 0), 2));
            db_exec("UPDATE bookings SET status = 'Approved', admin_remarks = ?, rate_type = ?, custom_rate = ?, discount = ?, total_amount = ?, updated_at = ? WHERE id = ?",
                [$remarks, $type, $rate, $t['discount'], $t['total'], $now, $id]);
        } else {
            db_exec("UPDATE bookings SET status = 'Rejected', admin_remarks = ?, updated_at = ? WHERE id = ?", [$remarks, $now, $id]);
        }
        $b = get_booking($id);
        $msg = booking_ref($id) . ' ' . ($decision === 'Approved' ? 'approved' : 'declined') . '.';
        if (!empty($_POST['notify'])) {
            $msg .= email_guest($b, $decision === 'Approved' ? 'approved' : 'declined') ? ' The guest has been emailed.' : ' (The email could not be sent.)';
        }
        flash('success', $msg);
        redirect(back_to('?view=booking&id=' . $id));
    }

    // ---------- Update booking ----------
    if ($action === 'update_booking') {
        $id = (int) ($_POST['booking_id'] ?? 0);
        if (!get_booking($id)) { flash('danger', 'Booking not found.'); redirect('?view=reports'); }
        [$d, $errors] = read_booking_input($_POST, $id, true);
        if ($errors) {
            $_SESSION['old_edit'] = array_diff_key($_POST, ['csrf' => 1]);
            foreach ($errors as $er) flash('danger', $er);
            redirect('?view=edit&id=' . $id);
        }
        db_exec(
            "UPDATE bookings SET room_id=?, guest_name=?, guest_email=?, guest_pan=?, guest_address=?, guest_phone=?, booking_date=?, end_date=?, start_time=?, end_time=?,
             custom_rate=?, total_amount=?, rate_type=?, discount=?, status=?, purpose=?, attendees=?, notes=?, admin_remarks=?, updated_at=? WHERE id=?",
            [$d['room_id'], $d['guest_name'], $d['guest_email'], $d['guest_pan'], $d['guest_address'], $d['guest_phone'], $d['booking_date'], $d['end_date'], $d['start_time'], $d['end_time'],
             $d['custom_rate'], $d['total_amount'], $d['rate_type'], $d['discount'], $d['status'], $d['purpose'], $d['attendees'], $d['notes'], $d['admin_remarks'], $now, $id]
        );
        $msg = 'Changes to ' . booking_ref($id) . ' saved.';
        if (!empty($_POST['send_email']) && $d['guest_email']) {
            $msg .= email_guest(get_booking($id), 'modified') ? ' Update emailed to the guest.' : ' (Email could not be sent.)';
        }
        flash('success', $msg);
        redirect('?view=booking&id=' . $id);
    }

    // ---------- Status change ----------
    if ($action === 'set_status') {
        $id = (int) ($_POST['booking_id'] ?? 0);
        $status = in_array($_POST['status'] ?? '', STATUSES, true) ? $_POST['status'] : '';
        $b = get_booking($id);
        if ($b && $status) {
            if (is_blocking($status) && !is_blocking($b['status'])) {
                $c = find_conflicts((int) $b['room_id'], $b['booking_date'], $b['end_date'], $b['start_time'], $b['end_time'], $id);
                if ($c) {
                    flash('danger', 'Cannot mark as ' . strtolower($status) . ' — the space is booked by ' . $c[0]['guest_name'] . ' (' . booking_ref($c[0]['id']) . '). Edit the booking to pick another time or space.');
                    redirect('?view=booking&id=' . $id);
                }
            }
            db_exec("UPDATE bookings SET status = ?, updated_at = ? WHERE id = ?", [$status, $now, $id]);
            flash('success', booking_ref($id) . ' is now ' . strtolower(status_label($status)) . '.' . (in_array($status, ['Cancelled', 'Rejected'], true) ? ' The time slot is free again.' : ''));
        }
        redirect(back_to('?view=booking&id=' . $id));
    }

    if ($action === 'delete_booking') {
        $id = (int) ($_POST['booking_id'] ?? 0);
        db_exec("DELETE FROM booking_payments WHERE booking_id = ?", [$id]);
        db_exec("DELETE FROM bookings WHERE id = ?", [$id]);
        flash('success', 'Booking ' . booking_ref($id) . ' deleted permanently.');
        redirect('?view=reports');
    }

    // ---------- Payments ----------
    if ($action === 'add_payment') {
        $id = (int) ($_POST['booking_id'] ?? 0);
        $amount = round((float) ($_POST['amount'] ?? 0), 2);
        $method = in_array($_POST['method'] ?? '', PAY_METHODS, true) ? $_POST['method'] : 'Cash';
        $paid_on = valid_date($_POST['paid_on'] ?? '', date('Y-m-d'));
        if ($amount <= 0 || !get_booking($id)) {
            flash('danger', 'Enter a payment amount greater than zero.');
        } else {
            record_payment($id, $amount, $method, trim((string) ($_POST['reference'] ?? '')), $paid_on, $me);
            flash('success', money($amount, 2) . ' recorded (' . $method . ').');
        }
        redirect('?view=booking&id=' . $id . '#payments');
    }
    if ($action === 'delete_payment') {
        $p = db_one("SELECT * FROM booking_payments WHERE id = ?", [(int) ($_POST['payment_id'] ?? 0)]);
        if ($p) {
            db_exec("DELETE FROM booking_payments WHERE id = ?", [(int) $p['id']]);
            db_exec("UPDATE bookings SET amount_paid = GREATEST(0, amount_paid - ?), updated_at = ? WHERE id = ?", [(float) $p['amount'], $now, (int) $p['booking_id']]);
            flash('success', 'Payment entry removed.');
            redirect('?view=booking&id=' . (int) $p['booking_id'] . '#payments');
        }
        redirect('?view=reports');
    }

    if ($action === 'resend_email') {
        $id = (int) ($_POST['booking_id'] ?? 0);
        $b = get_booking($id);
        $kind = $b ? ['Approved' => 'approved', 'Tentative' => 'tentative', 'Rejected' => 'declined', 'Pending' => 'received'][$b['status']] ?? '' : '';
        if ($b && !$b['guest_email']) flash('warning', 'This booking has no guest email. Add one via Edit first.');
        elseif ($b && $kind && email_guest($b, $kind)) flash('success', 'Email sent to ' . $b['guest_email'] . '.');
        else flash('danger', 'The email could not be sent (or there is nothing to send for this status).');
        redirect('?view=booking&id=' . $id);
    }

    // ---------- Invoices (totals recalculated on the server) ----------
    if ($action === 'save_invoice') {
        $descs = (array) ($_POST['item_desc'] ?? []);
        $items = [];
        $sub = 0.0;
        foreach ($descs as $i => $desc) {
            $desc = trim((string) $desc);
            $qty  = round((float) ($_POST['item_qty'][$i] ?? 0), 2);
            $rate = round((float) ($_POST['item_rate'][$i] ?? 0), 2);
            if ($desc === '' && $rate == 0) continue;
            $line = round($qty * $rate, 2);
            $sub += $line;
            $items[] = ['desc' => $desc, 'date' => trim((string) ($_POST['item_date'][$i] ?? '')), 'qty' => $qty, 'rate' => $rate, 'total' => $line];
        }
        $guest = trim((string) ($_POST['inv_guest_name'] ?? ''));
        if (!$items || $guest === '') {
            flash('danger', 'An invoice needs a customer and at least one line item.');
            redirect(back_to('?view=invoices'));
        }
        $discount = min(max(0, round((float) ($_POST['inv_discount'] ?? 0), 2)), $sub);
        $vat_rate = !empty($_POST['inv_vat_on']) ? (float) VAT_RATE : 0.0;
        $taxable  = round($sub - $discount, 2);
        $vat      = round($taxable * $vat_rate / 100, 2);
        $total    = round($taxable + $vat, 2);
        $iid = db_exec(
            "INSERT INTO generated_invoices (invoice_number, invoice_date, guest_name, guest_email, guest_address, guest_pan, start_date, end_date, sub_total, discount, vat_rate, vat_amount, total_amount, items_json, status, notes, created_by, created_at)
             VALUES ('', ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'Unpaid', ?, ?, ?)",
            [valid_date($_POST['inv_date'] ?? '', date('Y-m-d')), $guest, trim((string) ($_POST['inv_guest_email'] ?? '')), trim((string) ($_POST['inv_guest_address'] ?? '')), trim((string) ($_POST['inv_guest_pan'] ?? '')),
             valid_date($_POST['inv_start_date'] ?? ''), valid_date($_POST['inv_end_date'] ?? ''), round($sub, 2), $discount, $vat_rate, $vat, $total,
             json_encode($items, JSON_UNESCAPED_UNICODE), trim((string) ($_POST['inv_notes'] ?? '')), $me, $now]
        );
        $num = INVOICE_PREFIX . str_pad((string) $iid, 4, '0', STR_PAD_LEFT);
        db_exec("UPDATE generated_invoices SET invoice_number = ? WHERE id = ?", [$num, $iid]);
        flash('success', 'Invoice ' . $num . ' saved — ' . money($total, 2) . '.');
        redirect('?view=invoice_view&id=' . $iid);
    }
    if ($action === 'invoice_status') {
        $iid = (int) ($_POST['invoice_id'] ?? 0);
        $st = ($_POST['status'] ?? '') === 'Paid' ? 'Paid' : 'Unpaid';
        db_exec("UPDATE generated_invoices SET status = ? WHERE id = ?", [$st, $iid]);
        flash('success', 'Invoice marked as ' . strtolower($st) . '.');
        redirect('?view=invoice_view&id=' . $iid);
    }
    if ($action === 'delete_invoice') {
        db_exec("DELETE FROM generated_invoices WHERE id = ?", [(int) ($_POST['invoice_id'] ?? 0)]);
        flash('success', 'Invoice deleted.');
        redirect('?view=invoices');
    }

    // ---------- Rooms ----------
    if ($action === 'save_room') {
        $rid  = (int) ($_POST['room_id'] ?? 0);
        $name = trim((string) ($_POST['name'] ?? ''));
        $color = preg_match('/^#[0-9a-fA-F]{6}$/', (string) ($_POST['color'] ?? '')) ? $_POST['color'] : ROOM_COLORS[0];
        $amen = implode(', ', amenity_list($_POST['amenities'] ?? ''));
        $vals = [$name, round((float) ($_POST['base_rate'] ?? 0), 2),
                 ($_POST['hourly_rate'] ?? '') === '' ? null : round((float) $_POST['hourly_rate'], 2),
                 ($_POST['capacity'] ?? '') === '' ? null : max(0, (int) $_POST['capacity']),
                 $color, trim((string) ($_POST['description'] ?? '')), $amen, !empty($_POST['is_active']) ? 1 : 0];
        if ($name === '') {
            flash('danger', 'Room name is required.');
        } elseif ($rid) {
            db_exec("UPDATE rooms SET name=?, base_rate=?, hourly_rate=?, capacity=?, color=?, description=?, amenities=?, is_active=? WHERE id=?", array_merge($vals, [$rid]));
            flash('success', $name . ' updated.');
        } else {
            db_exec("INSERT INTO rooms (name, base_rate, hourly_rate, capacity, color, description, amenities, is_active) VALUES (?, ?, ?, ?, ?, ?, ?, ?)", $vals);
            flash('success', $name . ' added. Add photos from Manage Properties.');
        }
        redirect('?view=settings&tab=rooms');
    }
    if ($action === 'delete_room') {
        $rid = (int) ($_POST['room_id'] ?? 0);
        if ((int) db_val("SELECT COUNT(*) FROM bookings WHERE room_id = ?", [$rid]) > 0) {
            db_exec("UPDATE rooms SET is_active = 0 WHERE id = ?", [$rid]);
            flash('warning', 'This room has booking history, so it was hidden (inactive) instead of deleted.');
        } else {
            db_exec("DELETE FROM rooms WHERE id = ?", [$rid]);
            flash('success', 'Room deleted.');
        }
        redirect('?view=settings&tab=rooms');
    }

    // ---------- Users ----------
    if ($action === 'add_user') {
        $n = trim((string) ($_POST['name'] ?? ''));
        $e = strtolower(trim((string) ($_POST['email'] ?? '')));
        $p = (string) ($_POST['password'] ?? '');
        $role = ($_POST['role'] ?? '') === 'admin' ? 'admin' : 'staff';
        if ($n === '' || !filter_var($e, FILTER_VALIDATE_EMAIL) || strlen($p) < 8) {
            flash('danger', 'Enter a name, a valid email and a password of at least 8 characters.');
        } elseif (db_val("SELECT COUNT(*) FROM app_users WHERE email = ?", [$e])) {
            flash('danger', 'A user with that email already exists.');
        } else {
            db_exec("INSERT INTO app_users (name, email, password_hash, role, created_at) VALUES (?, ?, ?, ?, ?)", [$n, $e, password_hash($p, PASSWORD_DEFAULT), $role, $now]);
            flash('success', $n . ' can now sign in (Staff tab) with ' . $e . '.');
        }
        redirect('?view=settings&tab=users');
    }
    if ($action === 'delete_user') {
        $uid = (int) ($_POST['user_id'] ?? 0);
        if ($uid === (int) $current_user['id']) flash('danger', 'You cannot remove your own account.');
        else { db_exec("DELETE FROM app_users WHERE id = ?", [$uid]); flash('success', 'User removed.'); }
        redirect('?view=settings&tab=users');
    }
    if ($action === 'reset_user_password') {
        $p = (string) ($_POST['password'] ?? '');
        if (strlen($p) < 8) flash('danger', 'New password must be at least 8 characters.');
        else { db_exec("UPDATE app_users SET password_hash = ? WHERE id = ?", [password_hash($p, PASSWORD_DEFAULT), (int) ($_POST['user_id'] ?? 0)]); flash('success', 'Password updated.'); }
        redirect('?view=settings&tab=users');
    }
    if ($action === 'change_password') {
        $u = db_one("SELECT * FROM app_users WHERE id = ?", [(int) $current_user['id']]);
        $p = (string) ($_POST['new_password'] ?? '');
        if (!$u || !password_verify((string) ($_POST['current_password'] ?? ''), $u['password_hash'])) flash('danger', 'Your current password is incorrect.');
        elseif (strlen($p) < 8) flash('danger', 'New password must be at least 8 characters.');
        elseif ($p !== ($_POST['new_password2'] ?? '')) flash('danger', 'New passwords do not match.');
        else { db_exec("UPDATE app_users SET password_hash = ? WHERE id = ?", [password_hash($p, PASSWORD_DEFAULT), (int) $u['id']]); flash('success', 'Password changed.'); }
        redirect('?view=settings&tab=account');
    }

    flash('danger', 'That action is not allowed.');
    redirect('?');
}

// =====================================================================
// 9. PAGE STATE
// =====================================================================
$view = (string) ($_GET['view'] ?? 'dashboard');
$aliases = ['check' => 'new', 'view_invoice' => 'invoice_view'];   // old links keep working
$view = $aliases[$view] ?? $view;
$staff_views  = ['dashboard', 'new', 'daily_view', 'monthly_planner', 'reports', 'booking', 'edit', 'conf_slip', 'invoices', 'invoice_view', 'settings'];
$client_views = ['dashboard', 'new'];
if (!in_array($view, $is_staff ? $staff_views : $client_views, true)) $view = 'dashboard';

$today_date = date('Y-m-d');
$now_time   = date('H:i:s');
$flashes    = $_SESSION['flash'] ?? [];
unset($_SESSION['flash']);
$pending_count = $is_staff ? (int) db_val("SELECT COUNT(*) FROM bookings WHERE status = 'Pending'") : 0;

$page_titles = [
    'dashboard'       => $is_staff ? ['Front desk', 'overview', 'Requests to review, today\'s schedule and live space status.'] : ['Welcome to', 'Connect', 'Book a workspace and follow your requests.'],
    'new'             => $is_staff ? ['New', 'booking', 'Pick a date and time — available spaces update instantly.'] : ['Book a', 'space', 'Pick a date and time — available spaces update instantly.'],
    'daily_view'      => ['Daily', 'schedule', 'Hour-by-hour view of every space. Click an empty slot to book it.'],
    'monthly_planner' => ['Monthly', 'planner', 'See the whole month at a glance, per space or all together.'],
    'reports'         => ['Bookings', '& reports', 'Search, filter, export and follow up on payments.'],
    'booking'         => ['Booking', 'details', 'Everything about this reservation in one place.'],
    'edit'            => ['Edit', 'booking', 'Changes are checked against other bookings before saving.'],
    'conf_slip'       => ['Confirmation', 'slip', 'Print or save as PDF for the client.'],
    'invoices'        => ['Bill', 'generator', 'Build a proforma invoice from a client\'s approved bookings.'],
    'invoice_view'    => ['Invoice', 'record', 'Saved invoice — print, share or mark as paid.'],
    'settings'        => ['Rooms', '& settings', 'Manage spaces, rates, users and your account.'],
];
[$pt_plain, $pt_em, $pt_sub] = $page_titles[$view];
$hour_now = (int) date('G');
$greeting = $hour_now < 12 ? 'Good morning' : ($hour_now < 17 ? 'Good afternoon' : 'Good evening');
?>
<?php
// =====================================================================
// 11. BRAND STYLES (shared by the app and the sign-in page)
// =====================================================================
function brand_head(string $title): void
{ ?>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <meta name="theme-color" content="#041E0A">
    <title><?= h($title) ?> · <?= h(COMPANY_SHORT) ?></title>
    <link rel="icon" href="<?= h(LOGO_ROUND) ?>">
    <link rel="preconnect" href="https://fonts.googleapis.com"><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
    <link href="https://fonts.googleapis.com/css2?family=Instrument+Sans:wght@400;500;600;700&family=Instrument+Serif:ital@0;1&display=swap" rel="stylesheet">
    <link href="https://fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,300..600,0..1,0&display=block" rel="stylesheet">
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css" rel="stylesheet">
    <style>
    /* =========================================================
       LEAPFROG — BRAND TOKENS (per Brand Guideline)
       Evergreen #041E0A · Forest #1C3A13 · Lime Glow #9BEF6B
       Solar Yellow #F2E221 · Cloud Gray #EFEFEF
       Titles: Instrument Serif · Body: Instrument Sans · Icons: Material Symbols
       ========================================================= */
    :root {
        --lf-evergreen: #041E0A; --lf-forest: #1C3A13; --lf-lime: #9BEF6B; --lf-solar: #F2E221; --lf-cloud: #EFEFEF;
        --lf-gradient: linear-gradient(90deg, #F2E221 0%, #9BEF6B 100%);
        --lf-gradient-diag: linear-gradient(135deg, #F2E221 0%, #9BEF6B 100%);
        --lf-lime-tint: #E6F6DB; --lf-solar-tint: #FCF9D2; --lf-red-tint: #FBE7E7; --lf-blue-tint: #E4EEFB;
        --surface: #FFFFFF; --surface-2: #F6F8F3; --text: #0E2211; --muted: #5B6A5D; --faint: #8A968C;
        --line: #DCE3D6; --line-soft: #E8EDE4;
        --ok: #2E8540; --warn: #7A6C00; --bad: #C23434; --info: #2459A8;
        --r-sm: 8px; --r-md: 12px; --r-lg: 16px; --r-xl: 22px;
        --sh-sm: 0 1px 2px rgba(4, 30, 10, .05);
        --sh-md: 0 8px 20px -10px rgba(4, 30, 10, .18);
        --sh-lg: 0 24px 48px -18px rgba(4, 30, 10, .30);
        --font-title: 'Instrument Serif', Georgia, 'Times New Roman', serif;
        --font-body: 'Instrument Sans', system-ui, -apple-system, 'Segoe UI', Roboto, sans-serif;
        --sidebar-w: 264px;
        --bs-body-font-family: var(--font-body); --bs-body-color: #0E2211; --bs-body-bg: #EFEFEF;
        --bs-border-color: #DCE3D6; --bs-link-color: #1C3A13; --bs-link-color-rgb: 28, 58, 19; --bs-link-hover-color: #041E0A;
        --bs-primary: #1C3A13; --bs-primary-rgb: 28, 58, 19; --bs-success: #2E8540; --bs-success-rgb: 46, 133, 64;
        --bs-danger: #C23434; --bs-danger-rgb: 194, 52, 52;
    }
    * { -webkit-tap-highlight-color: transparent; }
    html { scroll-behavior: smooth; }
    body { background: var(--lf-cloud); font-family: var(--font-body); font-size: 14px; color: var(--text); line-height: 1.5; -webkit-font-smoothing: antialiased; margin: 0; }
    h1, h2, h3, h4, h5, h6 { font-weight: 600; color: var(--text); letter-spacing: -0.01em; }
    a { color: var(--lf-forest); text-decoration: none; }
    a:hover { color: var(--lf-evergreen); }
    ::selection { background: var(--lf-lime); color: var(--lf-evergreen); }
    .font-title { font-family: var(--font-title) !important; font-weight: 400 !important; letter-spacing: 0 !important; }
    .text-muted { color: var(--muted) !important; }
    .text-faint { color: var(--faint) !important; }
    .fw-600 { font-weight: 600; }
    .tabular { font-variant-numeric: tabular-nums; }
    .eyebrow { font-size: 11px; font-weight: 600; letter-spacing: .12em; text-transform: uppercase; color: var(--muted); }

    /* Material Symbols */
    .msi { font-family: 'Material Symbols Outlined'; font-weight: normal; font-style: normal; font-size: 20px; line-height: 1; letter-spacing: normal; text-transform: none; display: inline-flex; align-items: center; justify-content: center; white-space: nowrap; direction: ltr; vertical-align: middle; font-feature-settings: 'liga'; -webkit-font-smoothing: antialiased; font-variation-settings: 'FILL' 0, 'wght' 400, 'GRAD' 0, 'opsz' 24; user-select: none; flex-shrink: 0; }
    .msi.fill { font-variation-settings: 'FILL' 1, 'wght' 400, 'GRAD' 0, 'opsz' 24; }
    .msi.sm { font-size: 16px; } .msi.lg { font-size: 26px; } .msi.xl { font-size: 40px; }

    /* ---------- Buttons ---------- */
    .btn { font-weight: 600; border-radius: var(--r-md); display: inline-flex; align-items: center; justify-content: center; gap: 6px; padding: 9px 16px; font-size: 14px; transition: transform .15s, box-shadow .15s, background .15s, color .15s, border-color .15s; }
    .btn .msi { font-size: 18px; }
    .btn-sm { padding: 6px 12px; font-size: 13px; border-radius: 10px; }
    .btn-sm .msi { font-size: 16px; }
    .btn-lg { padding: 12px 22px; font-size: 15px; }
    .btn-brand { background: var(--lf-gradient); color: var(--lf-evergreen); border: 0; }
    .btn-brand:hover, .btn-brand:focus-visible { color: var(--lf-evergreen); filter: saturate(1.15) brightness(.98); transform: translateY(-1px); box-shadow: 0 10px 22px -10px rgba(120, 200, 70, .9); }
    .btn-forest { background: var(--lf-forest); color: #fff; border: 1px solid var(--lf-forest); }
    .btn-forest:hover, .btn-forest:focus-visible { background: var(--lf-evergreen); color: #fff; border-color: var(--lf-evergreen); transform: translateY(-1px); box-shadow: var(--sh-md); }
    .btn-ghost { background: var(--surface); color: var(--text); border: 1px solid var(--line); }
    .btn-ghost:hover, .btn-ghost:focus-visible { background: var(--lf-lime-tint); border-color: #BFDDAA; color: var(--lf-forest); }
    .btn-soft { background: var(--lf-lime-tint); color: var(--lf-forest); border: 1px solid #CFEABB; }
    .btn-soft:hover { background: #d8f0c6; color: var(--lf-evergreen); }
    .btn-danger-soft { background: var(--lf-red-tint); color: var(--bad); border: 1px solid #F1C9C9; }
    .btn-danger-soft:hover { background: #f7d6d6; color: #9b2222; }
    .btn-icon { width: 36px; height: 36px; padding: 0; border-radius: 10px; }
    .btn-icon.btn-sm { width: 32px; height: 32px; }
    .btn:disabled, .btn.disabled { opacity: .5; transform: none !important; box-shadow: none !important; }
    .btn:focus-visible, .form-control:focus-visible, a:focus-visible { outline: 2px solid var(--lf-forest); outline-offset: 2px; }

    /* ---------- Forms ---------- */
    .form-label { font-size: 12px; font-weight: 600; color: var(--muted); margin-bottom: 6px; letter-spacing: .02em; }
    .form-label .req { color: var(--bad); }
    .form-control, .form-select { border-radius: var(--r-md); padding: 9px 12px; font-size: 14px; border: 1px solid var(--line); background-color: #FBFCFA; color: var(--text); box-shadow: none !important; transition: border-color .15s, background .15s, box-shadow .15s; }
    .form-control:focus, .form-select:focus { border-color: #6DBA45; background-color: #fff; box-shadow: 0 0 0 3px rgba(155, 239, 107, .35) !important; }
    .form-control-sm, .form-select-sm { padding: 6px 10px; font-size: 13px; border-radius: 10px; }
    .form-control.is-invalid { border-color: var(--bad); }
    .input-group-text { border-color: var(--line); background: var(--surface-2); color: var(--muted); border-radius: var(--r-md); font-size: 13px; }
    .form-check-input { border-color: #B9C6B2; }
    .form-check-input:checked { background-color: var(--lf-forest); border-color: var(--lf-forest); }
    .form-check-input:focus { box-shadow: 0 0 0 3px rgba(155, 239, 107, .35); border-color: #6DBA45; }
    .form-switch .form-check-input:focus { --bs-form-switch-bg: url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' viewBox='-4 -4 8 8'%3e%3ccircle r='3' fill='%236DBA45'/%3e%3c/svg%3e"); }
    .form-text { color: var(--faint); font-size: 12px; }
    .input-icon { position: relative; }
    .input-icon .msi { position: absolute; left: 11px; top: 50%; transform: translateY(-50%); color: var(--faint); font-size: 18px; pointer-events: none; }
    .input-icon .form-control { padding-left: 38px; }

    /* ---------- App shell ---------- */
    .app-sidebar { position: fixed; inset: 0 auto 0 0; width: var(--sidebar-w); background: var(--lf-evergreen); color: #fff; display: flex; flex-direction: column; z-index: 1045; overflow: hidden; transition: transform .3s cubic-bezier(.4, 0, .2, 1); }
    .app-sidebar::before { content: ""; position: absolute; top: -120px; right: -160px; width: 360px; height: 360px; background: radial-gradient(circle, rgba(155, 239, 107, .16) 0%, rgba(155, 239, 107, 0) 65%); pointer-events: none; }
    .app-sidebar::after { content: ""; position: absolute; bottom: -80px; left: -120px; width: 300px; height: 300px; border-radius: 50%; border: 1px solid rgba(155, 239, 107, .12); box-shadow: 0 0 0 40px rgba(155, 239, 107, .03), 0 0 0 80px rgba(155, 239, 107, .02); pointer-events: none; }
    .brand-block { padding: 22px 20px 18px; display: flex; align-items: center; gap: 12px; position: relative; z-index: 1; }
    .brand-logo { width: 44px; height: 44px; border-radius: 12px; background: #fff; display: grid; place-items: center; overflow: hidden; flex-shrink: 0; box-shadow: 0 0 0 3px rgba(155, 239, 107, .18); }
    .brand-logo img { width: 100%; height: 100%; object-fit: contain; padding: 4px; }
    .brand-logo .fallback { font-family: var(--font-title); font-size: 22px; color: var(--lf-evergreen); }
    .brand-name { font-family: var(--font-title); font-size: 22px; line-height: 1; color: #fff; }
    .brand-name em { color: var(--lf-lime); }
    .brand-sub { font-size: 10.5px; letter-spacing: .14em; text-transform: uppercase; color: rgba(255, 255, 255, .55); margin-top: 4px; }
    .side-nav { flex: 1; overflow-y: auto; padding: 6px 12px 12px; position: relative; z-index: 1; scrollbar-width: thin; scrollbar-color: rgba(255,255,255,.15) transparent; }
    .nav-group { font-size: 10.5px; letter-spacing: .14em; text-transform: uppercase; color: rgba(255, 255, 255, .4); padding: 16px 12px 6px; font-weight: 600; }
    .side-link { display: flex; align-items: center; gap: 12px; padding: 10px 12px; border-radius: 12px; color: rgba(255, 255, 255, .74); font-weight: 500; position: relative; transition: background .15s, color .15s; margin-bottom: 2px; }
    .side-link .msi { font-size: 21px; color: rgba(255, 255, 255, .55); transition: color .15s; }
    .side-link:hover { background: rgba(255, 255, 255, .06); color: #fff; }
    .side-link:hover .msi { color: #fff; }
    .side-link.active { background: rgba(155, 239, 107, .13); color: var(--lf-lime); font-weight: 600; }
    .side-link.active .msi { color: var(--lf-lime); font-variation-settings: 'FILL' 1, 'wght' 400, 'GRAD' 0, 'opsz' 24; }
    .side-link.active::before { content: ""; position: absolute; left: -12px; top: 9px; bottom: 9px; width: 3px; border-radius: 0 3px 3px 0; background: var(--lf-gradient); }
    .side-link .kbd { margin-left: auto; font-size: 10.5px; border: 1px solid rgba(255, 255, 255, .18); border-radius: 5px; padding: 0 5px; color: rgba(255, 255, 255, .45); }
    .side-cta { margin: 6px 12px 4px; }
    .side-foot { padding: 14px 16px; border-top: 1px solid rgba(255, 255, 255, .08); display: flex; align-items: center; gap: 10px; position: relative; z-index: 1; }
    .avatar { width: 36px; height: 36px; border-radius: 50%; background: var(--lf-gradient-diag); color: var(--lf-evergreen); display: inline-flex; align-items: center; justify-content: center; font-weight: 700; font-size: 13px; flex-shrink: 0; }
    .side-foot .who { min-width: 0; line-height: 1.25; }
    .side-foot .who b { display: block; color: #fff; font-size: 13px; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
    .side-foot .who small { color: rgba(255, 255, 255, .5); font-size: 11.5px; text-transform: capitalize; }
    .side-foot a.logout { margin-left: auto; color: rgba(255, 255, 255, .55); width: 34px; height: 34px; border-radius: 10px; display: grid; place-items: center; }
    .side-foot a.logout:hover { background: rgba(255, 255, 255, .08); color: var(--lf-lime); }
    .sidebar-backdrop { position: fixed; inset: 0; background: rgba(4, 30, 10, .45); backdrop-filter: blur(2px); z-index: 1040; opacity: 0; pointer-events: none; transition: opacity .25s; }

    .app-main { margin-left: var(--sidebar-w); min-height: 100vh; display: flex; flex-direction: column; }
    .app-header { position: sticky; top: 0; z-index: 1030; background: rgba(239, 239, 239, .86); backdrop-filter: saturate(1.4) blur(10px); -webkit-backdrop-filter: saturate(1.4) blur(10px); border-bottom: 1px solid rgba(220, 227, 214, .7); padding: 14px 28px; display: flex; align-items: center; gap: 16px; }
    .menu-btn { display: none; }
    .page-title { font-family: var(--font-title); font-weight: 400; font-size: 30px; line-height: 1; margin: 0; color: var(--lf-evergreen); letter-spacing: 0; }
    .page-title em { color: var(--lf-forest); }
    .page-sub { color: var(--muted); font-size: 13px; margin-top: 4px; }
    .header-tools { margin-left: auto; display: flex; align-items: center; gap: 10px; }
    .header-search { width: 260px; }
    .header-search .form-control { background: #fff; padding-top: 8px; padding-bottom: 8px; }
    .header-search .kbd-hint { position: absolute; right: 10px; top: 50%; transform: translateY(-50%); font-size: 11px; color: var(--faint); border: 1px solid var(--line); border-radius: 5px; padding: 0 6px; background: var(--surface-2); pointer-events: none; }
    .clock-chip { display: inline-flex; align-items: center; gap: 8px; background: var(--lf-evergreen); color: #fff; border-radius: 999px; padding: 7px 14px 7px 10px; font-size: 13px; font-weight: 600; white-space: nowrap; }
    .clock-chip .msi { color: var(--lf-lime); font-size: 18px; }
    .clock-chip .date { color: rgba(255, 255, 255, .6); font-weight: 500; }
    .app-content { padding: 26px 28px 40px; flex: 1; }
    .fab { display: none; }

    /* ---------- Cards ---------- */
    .lf-card { background: var(--surface); border: 1px solid var(--line); border-radius: var(--r-lg); box-shadow: var(--sh-sm); }
    .lf-card.pad { padding: 20px; }
    .card-head { display: flex; align-items: center; gap: 12px; padding: 16px 20px; border-bottom: 1px solid var(--line-soft); }
    .card-head .icon-tile { width: 38px; height: 38px; border-radius: 11px; background: var(--lf-lime-tint); color: var(--lf-forest); display: grid; place-items: center; flex-shrink: 0; }
    .card-head .icon-tile.solar { background: var(--lf-solar-tint); color: #6E6100; }
    .card-head .icon-tile.dark { background: var(--lf-evergreen); color: var(--lf-lime); }
    .card-title { font-family: var(--font-title); font-size: 22px; line-height: 1.1; margin: 0; color: var(--lf-evergreen); font-weight: 400; }
    .card-title em { color: var(--lf-forest); }
    .card-sub { font-size: 12.5px; color: var(--muted); margin: 2px 0 0; }
    .card-head .actions { margin-left: auto; display: flex; gap: 8px; align-items: center; flex-wrap: wrap; }
    .card-body-pad { padding: 18px 20px; }
    .divider { border-top: 1px dashed var(--line); margin: 14px 0; }

    /* ---------- Hero ---------- */
    .hero { position: relative; overflow: hidden; border-radius: var(--r-xl); padding: 28px 30px; color: #fff; background: radial-gradient(120% 140% at 8% 0%, #3C7A2A 0%, rgba(60, 122, 42, 0) 55%), radial-gradient(90% 120% at 85% 115%, #1F6B3A 0%, rgba(31, 107, 58, 0) 60%), var(--lf-evergreen); box-shadow: var(--sh-md); }
    .hero::after { content: ""; position: absolute; right: -90px; top: -90px; width: 340px; height: 340px; border-radius: 50%; border: 1px solid rgba(155, 239, 107, .22); box-shadow: 0 0 0 36px rgba(155, 239, 107, .05), 0 0 0 72px rgba(155, 239, 107, .03); pointer-events: none; }
    .hero .eyebrow { color: rgba(255, 255, 255, .6); display: flex; align-items: center; gap: 6px; }
    .hero .eyebrow .msi { color: var(--lf-solar); font-size: 16px; }
    .hero h2 { font-family: var(--font-title); font-weight: 400; font-size: 40px; line-height: 1.05; margin: 10px 0 8px; color: #fff; letter-spacing: 0; }
    .grad-text { background: var(--lf-gradient); -webkit-background-clip: text; background-clip: text; color: transparent; font-style: italic; padding-right: 4px; }
    .hero p { color: rgba(255, 255, 255, .72); max-width: 560px; margin: 0; }
    .hero-chips { display: flex; flex-wrap: wrap; gap: 8px; margin-top: 18px; position: relative; z-index: 1; }
    .hero-chip { display: inline-flex; align-items: center; gap: 8px; background: rgba(255, 255, 255, .08); border: 1px solid rgba(255, 255, 255, .14); border-radius: 999px; padding: 7px 14px; font-size: 13px; color: #fff; }
    .hero-chip .msi { color: var(--lf-lime); font-size: 18px; }
    .hero-actions { display: flex; gap: 10px; flex-wrap: wrap; margin-top: 22px; position: relative; z-index: 1; }
    .btn-glass { background: rgba(255, 255, 255, .1); color: #fff; border: 1px solid rgba(255, 255, 255, .2); }
    .btn-glass:hover { background: rgba(255, 255, 255, .18); color: #fff; }

    /* ---------- KPI tiles ---------- */
    .kpi { display: block; background: var(--surface); border: 1px solid var(--line); border-radius: var(--r-lg); padding: 18px 18px 16px; box-shadow: var(--sh-sm); color: var(--text); transition: transform .18s, box-shadow .18s, border-color .18s; height: 100%; position: relative; overflow: hidden; }
    a.kpi:hover { transform: translateY(-3px); box-shadow: var(--sh-md); border-color: #BFDDAA; color: var(--text); }
    .kpi-top { display: flex; align-items: center; justify-content: space-between; gap: 8px; }
    .kpi-label { font-size: 12px; font-weight: 600; color: var(--muted); letter-spacing: .02em; }
    .kpi-icon { width: 34px; height: 34px; border-radius: 10px; display: grid; place-items: center; background: var(--lf-lime-tint); color: var(--lf-forest); }
    .kpi-icon.solar { background: var(--lf-solar-tint); color: #6E6100; }
    .kpi-icon.dark { background: var(--lf-evergreen); color: var(--lf-lime); }
    .kpi-icon.red { background: var(--lf-red-tint); color: var(--bad); }
    .kpi-value { font-family: var(--font-title); font-size: 40px; line-height: 1; margin-top: 12px; color: var(--lf-evergreen); font-variant-numeric: tabular-nums; }
    .kpi-value small { font-family: var(--font-body); font-size: 14px; color: var(--muted); margin-right: 2px; }
    .kpi-foot { font-size: 12px; color: var(--muted); margin-top: 8px; display: flex; align-items: center; gap: 4px; }
    a.kpi:hover .kpi-foot { color: var(--lf-forest); }

    /* ---------- Badges & dots ---------- */
    .lf-badge { display: inline-flex; align-items: center; gap: 4px; font-size: 11.5px; font-weight: 600; padding: 3px 9px 3px 7px; border-radius: 999px; border: 1px solid transparent; line-height: 1.4; white-space: nowrap; }
    .lf-badge .msi { font-size: 14px; }
    .b-ok { background: var(--lf-lime-tint); color: #1F5A17; border-color: #C5E8AE; }
    .b-warn { background: var(--lf-solar-tint); color: #6E6100; border-color: #EEE59A; }
    .b-bad { background: var(--lf-red-tint); color: #A12B2B; border-color: #F1C9C9; }
    .b-info { background: var(--lf-blue-tint); color: #24518F; border-color: #C9DAF3; }
    .b-live { background: var(--lf-evergreen); color: var(--lf-lime); border-color: var(--lf-evergreen); }
    .b-muted { background: #EEF1EC; color: #5B6A5D; border-color: #DDE3D9; }
    .room-dot { width: 10px; height: 10px; border-radius: 50%; background: var(--c); display: inline-block; flex-shrink: 0; box-shadow: 0 0 0 2px #fff, 0 0 0 3px color-mix(in srgb, var(--c) 35%, transparent); }
    .room-pill { display: inline-flex; align-items: center; gap: 7px; background: var(--surface-2); border: 1px solid var(--line); border-radius: 999px; padding: 3px 10px 3px 8px; font-size: 12.5px; font-weight: 600; color: var(--text); white-space: nowrap; }

    /* ---------- Lists ---------- */
    .list-row { display: flex; align-items: center; gap: 14px; padding: 13px 20px; border-bottom: 1px solid var(--line-soft); color: var(--text); transition: background .15s; }
    .list-row:last-child { border-bottom: 0; }
    a.list-row:hover { background: var(--surface-2); color: var(--text); }
    .time-box { width: 92px; flex-shrink: 0; text-align: center; border-right: 1px solid var(--line-soft); padding-right: 12px; }
    .time-box b { display: block; font-size: 14px; }
    .time-box small { color: var(--muted); font-size: 11.5px; }
    .date-box { width: 52px; height: 54px; border-radius: 12px; background: var(--surface-2); border: 1px solid var(--line); flex-shrink: 0; display: flex; flex-direction: column; align-items: center; justify-content: center; line-height: 1; }
    .date-box b { font-family: var(--font-title); font-size: 24px; font-weight: 400; color: var(--lf-evergreen); }
    .date-box small { font-size: 10.5px; text-transform: uppercase; letter-spacing: .08em; color: var(--muted); margin-top: 2px; }
    .row-main { min-width: 0; flex: 1; }
    .row-main .t { font-weight: 600; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
    .row-main .s { font-size: 12.5px; color: var(--muted); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
    .empty { text-align: center; padding: 36px 20px; color: var(--muted); }
    .empty .msi { font-size: 42px; color: #B8C7B0; display: block; margin: 0 auto 8px; }
    .empty b { display: block; color: var(--text); font-size: 15px; margin-bottom: 4px; }

    /* Room live status */
    .room-status { display: flex; align-items: center; gap: 12px; padding: 12px 20px; border-bottom: 1px solid var(--line-soft); }
    .room-status:last-child { border-bottom: 0; }
    .pulse { width: 10px; height: 10px; border-radius: 50%; background: var(--ok); position: relative; flex-shrink: 0; }
    .pulse.busy { background: var(--bad); }
    .pulse.busy::after { content: ""; position: absolute; inset: -4px; border-radius: 50%; border: 2px solid var(--bad); opacity: .5; animation: ping 1.8s infinite; }
    @keyframes ping { 0% { transform: scale(.6); opacity: .6; } 100% { transform: scale(1.6); opacity: 0; } }

    /* Meter */
    .meter-row { padding: 10px 20px; }
    .meter-top { display: flex; justify-content: space-between; align-items: center; gap: 8px; font-size: 13px; margin-bottom: 6px; }
    .meter { height: 8px; background: #EEF1EC; border-radius: 999px; overflow: hidden; }
    .meter > span { display: block; height: 100%; border-radius: 999px; background: linear-gradient(90deg, #1C3A13, #5DAE3A); min-width: 4px; }

    /* ---------- New booking ---------- */
    .when-card { position: sticky; top: 84px; }
    .when-card .form-control { padding: 8px 10px; }
    @media (min-width: 1680px) { .room-col { flex: 0 0 auto; width: 33.3333%; } }
    .chip-row { display: flex; flex-wrap: wrap; gap: 6px; }
    .chip { border: 1px solid var(--line); background: var(--surface); color: var(--text); border-radius: 999px; padding: 5px 12px; font-size: 12.5px; font-weight: 600; cursor: pointer; transition: all .15s; display: inline-flex; align-items: center; gap: 5px; }
    .chip:hover { border-color: #BFDDAA; background: var(--lf-lime-tint); color: var(--lf-forest); }
    .chip.on { background: var(--lf-forest); color: #fff; border-color: var(--lf-forest); }
    .chip .msi { font-size: 16px; }
    .sel-summary { display: flex; flex-wrap: wrap; gap: 8px; }
    .sel-summary span { background: var(--surface-2); border: 1px solid var(--line); border-radius: 10px; padding: 6px 10px; font-size: 12.5px; display: inline-flex; align-items: center; gap: 6px; }
    .sel-summary .msi { font-size: 16px; color: var(--lf-forest); }
    .room-card { background: var(--surface); border: 1px solid var(--line); border-radius: var(--r-lg); overflow: hidden; display: flex; flex-direction: column; height: 100%; transition: transform .18s, box-shadow .18s, border-color .18s; position: relative; }
    .room-card::before { content: ""; height: 4px; background: var(--c); display: block; }
    .room-card.ok:hover { transform: translateY(-3px); box-shadow: var(--sh-md); border-color: #BFDDAA; }
    .room-card.busy { background: linear-gradient(0deg, #FDF7F7, #fff 60%); }
    .room-card.focus { box-shadow: 0 0 0 3px rgba(155, 239, 107, .8), var(--sh-md); }
    .room-card .rc-body { padding: 16px 18px; flex: 1; }
    .room-card h3 { font-family: var(--font-title); font-weight: 400; font-size: 24px; margin: 0; line-height: 1.1; color: var(--lf-evergreen); }
    .rc-meta { display: flex; flex-wrap: wrap; gap: 10px; font-size: 12.5px; color: var(--muted); margin-top: 6px; }
    .rc-meta span { display: inline-flex; align-items: center; gap: 4px; }
    .rc-meta .msi { font-size: 16px; }
    .rc-price { margin-top: 14px; padding: 12px 14px; border-radius: 12px; background: var(--surface-2); border: 1px solid var(--line-soft); display: flex; justify-content: space-between; align-items: flex-end; gap: 10px; }
    .rc-price b { font-size: 18px; color: var(--lf-forest); }
    .rc-price small { color: var(--muted); font-size: 12px; }
    .rc-conflict { margin-top: 10px; font-size: 12.5px; background: var(--lf-red-tint); border: 1px solid #F1C9C9; color: #8A2525; border-radius: 10px; padding: 8px 10px; display: flex; gap: 8px; }
    .rc-conflict .msi { font-size: 16px; margin-top: 1px; }
    .rc-foot { padding: 0 18px 16px; }
    .skeleton { background: linear-gradient(90deg, #EEF1EC 25%, #F6F8F3 50%, #EEF1EC 75%); background-size: 200% 100%; animation: sk 1.2s infinite; border-radius: var(--r-lg); height: 220px; }
    @keyframes sk { 0% { background-position: 200% 0; } 100% { background-position: -200% 0; } }

    .price-box { background: var(--lf-evergreen); color: #fff; border-radius: var(--r-lg); padding: 18px; position: relative; overflow: hidden; }
    .price-box::after { content: ""; position: absolute; right: -60px; bottom: -60px; width: 180px; height: 180px; border-radius: 50%; border: 1px solid rgba(155, 239, 107, .2); box-shadow: 0 0 0 26px rgba(155, 239, 107, .04); }
    .price-line { display: flex; justify-content: space-between; gap: 10px; font-size: 13px; padding: 5px 0; color: rgba(255, 255, 255, .75); position: relative; z-index: 1; }
    .price-line b { color: #fff; font-weight: 600; font-variant-numeric: tabular-nums; }
    .price-total { border-top: 1px solid rgba(255, 255, 255, .15); margin-top: 8px; padding-top: 10px; font-size: 14px; color: #fff; }
    .price-total b { font-family: var(--font-title); font-size: 30px; font-weight: 400; color: var(--lf-lime); }
    .price-note { font-size: 11.5px; color: rgba(255, 255, 255, .5); margin-top: 6px; position: relative; z-index: 1; }
    .guest-hint { font-size: 12px; background: var(--lf-lime-tint); color: var(--lf-forest); border-radius: 8px; padding: 6px 10px; display: none; align-items: center; gap: 6px; margin-top: 6px; }
    .guest-hint.show { display: inline-flex; }
    .cap-warn { color: #8A6D00; font-size: 12px; display: none; margin-top: 4px; }
    .cap-warn.show { display: block; }

    /* ---------- Modals ---------- */
    .modal-content { border: 0; border-radius: var(--r-xl); box-shadow: var(--sh-lg); overflow: hidden; }
    .modal-header { border-bottom: 1px solid var(--line-soft); padding: 18px 22px; align-items: center; }
    .modal-header::before { content: ""; position: absolute; left: 0; right: 0; top: 0; height: 4px; background: var(--lf-gradient); }
    .modal-title { font-family: var(--font-title); font-weight: 400; font-size: 26px; line-height: 1.1; color: var(--lf-evergreen); }
    .modal-title em { color: var(--lf-forest); }
    .modal-body { padding: 20px 22px; }
    .modal-footer { border-top: 1px solid var(--line-soft); padding: 14px 22px; background: var(--surface-2); }
    .modal-backdrop.show { opacity: .55; }
    .modal-backdrop { background: var(--lf-evergreen); }
    .form-section { font-size: 11px; font-weight: 700; letter-spacing: .12em; text-transform: uppercase; color: var(--lf-forest); display: flex; align-items: center; gap: 8px; margin: 4px 0 10px; }
    .form-section::after { content: ""; flex: 1; height: 1px; background: var(--line-soft); }

    /* ---------- Daily schedule ---------- */
    .sched-wrap { overflow: auto; max-height: calc(100vh - 250px); min-height: 420px; border-radius: 0 0 var(--r-lg) var(--r-lg); }
    .sched { --hour: 64px; --timecol: 78px; min-width: calc(var(--timecol) + var(--rooms) * 190px); position: relative; }
    .sched-head, .sched-body { display: grid; grid-template-columns: var(--timecol) repeat(var(--rooms), minmax(190px, 1fr)); }
    .sched-head { position: sticky; top: 0; z-index: 5; background: var(--surface); border-bottom: 1px solid var(--line); }
    .sched-corner { position: sticky; left: 0; background: var(--surface); z-index: 2; border-right: 1px solid var(--line); display: grid; place-items: center; font-size: 11px; color: var(--faint); text-transform: uppercase; letter-spacing: .1em; }
    .sched-room { padding: 12px 14px; border-right: 1px solid var(--line-soft); display: flex; gap: 10px; align-items: flex-start; }
    .sched-room b { display: block; font-size: 14px; line-height: 1.2; }
    .sched-room small { color: var(--muted); font-size: 11.5px; }
    .sched-room .room-dot { margin-top: 4px; }
    .sched-times { position: sticky; left: 0; z-index: 3; background: var(--surface); border-right: 1px solid var(--line); }
    .sched-time { height: var(--hour); font-size: 11.5px; color: var(--muted); text-align: right; padding: 4px 10px 0 0; border-bottom: 1px solid var(--line-soft); font-weight: 600; font-variant-numeric: tabular-nums; }
    .sched-col { position: relative; border-right: 1px solid var(--line-soft); }
    .sched-slot { display: flex; align-items: center; justify-content: center; height: var(--hour); border-bottom: 1px solid var(--line-soft); color: transparent; font-size: 12px; font-weight: 600; transition: background .12s, color .12s; background-image: linear-gradient(to bottom, transparent calc(50% - .5px), #F1F4EF calc(50% - .5px), #F1F4EF calc(50% + .5px), transparent calc(50% + .5px)); }
    .sched-slot:hover { background-color: var(--lf-lime-tint); color: var(--lf-forest); }
    .sched-slot.past { background-color: #FAFBF9; }
    .sched-slot.past:hover { background-color: #F1F4EF; color: var(--muted); }
    .sched-event { position: absolute; left: 6px; right: 6px; border-radius: 10px; padding: 6px 9px; font-size: 12px; line-height: 1.3; overflow: hidden; color: var(--text); background: color-mix(in srgb, var(--c) 14%, #fff); border: 1px solid color-mix(in srgb, var(--c) 40%, #fff); border-left: 4px solid var(--c); box-shadow: var(--sh-sm); z-index: 2; transition: transform .12s, box-shadow .12s; }
    .sched-event:hover { transform: translateY(-1px); box-shadow: var(--sh-md); color: var(--text); z-index: 3; }
    .sched-event b { display: block; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; font-size: 12.5px; }
    .sched-event small { color: var(--muted); display: block; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
    .sched-event.tentative { background-image: repeating-linear-gradient(135deg, transparent 0 6px, rgba(242, 226, 33, .22) 6px 12px); }
    .sched-now { position: absolute; left: var(--timecol); right: 0; height: 2px; background: var(--bad); z-index: 4; pointer-events: none; }
    .sched-now::before { content: attr(data-label); position: absolute; left: -74px; top: -9px; background: var(--bad); color: #fff; font-size: 10.5px; font-weight: 700; border-radius: 6px; padding: 1px 6px; }

    /* ---------- Monthly calendar ---------- */
    .cal { display: grid; grid-template-columns: repeat(7, minmax(0, 1fr)); }
    .cal-h { background: var(--lf-evergreen); color: rgba(255, 255, 255, .85); font-size: 11px; text-transform: uppercase; letter-spacing: .1em; font-weight: 600; text-align: center; padding: 11px 4px; }
    .cal-h.sat { color: var(--lf-solar); }
    .cal-d { min-height: 128px; border-right: 1px solid var(--line-soft); border-bottom: 1px solid var(--line-soft); padding: 8px; background: var(--surface); display: flex; flex-direction: column; gap: 4px; position: relative; }
    .cal-d:nth-child(7n) { border-right: 0; }
    .cal-d.blank { background: repeating-linear-gradient(135deg, #F7F8F6 0 8px, #F2F4F0 8px 16px); }
    .cal-d.sat { background: #FDFDF6; }
    .cal-d.past .cal-num { color: var(--faint); }
    .cal-d.today { background: #F6FCF1; box-shadow: inset 0 0 0 2px #9BEF6B; }
    .cal-top { display: flex; align-items: center; justify-content: space-between; }
    .cal-num { width: 28px; height: 28px; border-radius: 50%; display: grid; place-items: center; font-weight: 600; font-size: 13px; color: var(--text); }
    a.cal-num:hover { background: var(--lf-lime-tint); }
    .cal-d.today .cal-num { background: var(--lf-gradient); color: var(--lf-evergreen); }
    .cal-add { width: 26px; height: 26px; border-radius: 8px; display: grid; place-items: center; color: var(--muted); opacity: 0; transition: opacity .15s, background .15s; }
    .cal-d:hover .cal-add { opacity: 1; }
    .cal-add:hover { background: var(--lf-lime-tint); color: var(--lf-forest); }
    .cal-ev { display: flex; align-items: center; gap: 6px; font-size: 11.5px; padding: 3px 6px; border-radius: 7px; background: color-mix(in srgb, var(--c) 12%, #fff); border: 1px solid color-mix(in srgb, var(--c) 30%, #fff); color: var(--text); min-width: 0; }
    .cal-ev:hover { border-color: var(--c); color: var(--text); }
    .cal-ev span.t { white-space: nowrap; overflow: hidden; text-overflow: ellipsis; min-width: 0; }
    .cal-ev .room-dot { width: 7px; height: 7px; box-shadow: none; }
    .cal-ev.tentative { background-image: repeating-linear-gradient(135deg, transparent 0 5px, rgba(242, 226, 33, .25) 5px 10px); }
    .cal-more { font-size: 11.5px; font-weight: 600; color: var(--lf-forest); padding-left: 4px; }
    .cal-free { margin-top: auto; font-size: 11px; font-weight: 600; color: #1F5A17; background: var(--lf-lime-tint); border-radius: 7px; padding: 3px 6px; text-align: center; }
    .agenda-day { display: flex; gap: 12px; padding: 12px 16px; border-bottom: 1px solid var(--line-soft); }
    .agenda-day:last-child { border-bottom: 0; }

    /* ---------- Tables ---------- */
    .lf-table { width: 100%; margin: 0; border-collapse: separate; border-spacing: 0; }
    .lf-table thead th { background: var(--surface-2); font-size: 11px; text-transform: uppercase; letter-spacing: .08em; color: var(--muted); font-weight: 700; padding: 11px 16px; border-bottom: 1px solid var(--line); white-space: nowrap; }
    .lf-table tbody td { padding: 13px 16px; border-bottom: 1px solid var(--line-soft); vertical-align: middle; }
    .lf-table tbody tr:last-child td { border-bottom: 0; }
    .lf-table tbody tr[data-href] { cursor: pointer; transition: background .12s; }
    .lf-table tbody tr[data-href]:hover { background: #F8FAF6; }
    .lf-table tbody tr.cancelled td { opacity: .6; }
    .lf-table tbody tr.cancelled .gname { text-decoration: line-through; }
    .lf-table tfoot td { padding: 12px 16px; background: var(--surface-2); font-weight: 600; border-top: 1px solid var(--line); }
    .ref { font-family: ui-monospace, SFMono-Regular, Menlo, monospace; font-size: 12px; background: var(--surface-2); border: 1px solid var(--line); border-radius: 6px; padding: 1px 6px; color: var(--lf-forest); white-space: nowrap; }
    .pill-tabs { display: flex; flex-wrap: wrap; gap: 6px; }
    .pill-tabs a { padding: 6px 13px; border-radius: 999px; font-size: 13px; font-weight: 600; color: var(--muted); border: 1px solid var(--line); background: var(--surface); display: inline-flex; align-items: center; gap: 6px; }
    .pill-tabs a:hover { color: var(--lf-forest); border-color: #BFDDAA; background: var(--lf-lime-tint); }
    .pill-tabs a.on { background: var(--lf-forest); color: #fff; border-color: var(--lf-forest); }
    .pill-tabs a .msi { font-size: 17px; }
    .stat-strip { display: flex; flex-wrap: wrap; gap: 10px; }
    .stat-strip > div { background: var(--surface); border: 1px solid var(--line); border-radius: 12px; padding: 10px 14px; min-width: 150px; flex: 1; }
    .stat-strip small { display: block; color: var(--muted); font-size: 11.5px; font-weight: 600; }
    .stat-strip b { font-size: 17px; font-variant-numeric: tabular-nums; }
    .pagination .page-link { border-radius: 10px !important; margin: 0 2px; border-color: var(--line); color: var(--lf-forest); font-weight: 600; font-size: 13px; }
    .pagination .active .page-link { background: var(--lf-forest); border-color: var(--lf-forest); color: #fff; }

    /* ---------- Detail ---------- */
    .detail-head { display: flex; flex-wrap: wrap; gap: 16px; align-items: flex-start; justify-content: space-between; padding: 22px; }
    .detail-head h2 { font-family: var(--font-title); font-weight: 400; font-size: 36px; line-height: 1.05; margin: 6px 0 8px; color: var(--lf-evergreen); }
    .kv { display: grid; grid-template-columns: 150px 1fr; gap: 10px 16px; font-size: 14px; }
    .kv dt { color: var(--muted); font-weight: 500; font-size: 13px; }
    .kv dd { margin: 0; font-weight: 600; word-break: break-word; }
    .big-when { display: grid; grid-template-columns: 1fr auto 1fr; gap: 12px; align-items: center; background: var(--surface-2); border: 1px solid var(--line-soft); border-radius: 14px; padding: 16px; }
    .big-when .arrow { color: var(--faint); }
    .big-when small { display: block; color: var(--muted); font-size: 11.5px; font-weight: 600; text-transform: uppercase; letter-spacing: .08em; }
    .big-when b { font-size: 16px; display: block; }
    .big-when span { color: var(--lf-forest); font-weight: 600; font-size: 13px; }
    .money-line { display: flex; justify-content: space-between; padding: 7px 0; font-size: 13.5px; }
    .money-line span { color: var(--muted); }
    .money-line b { font-variant-numeric: tabular-nums; }
    .money-line.total { border-top: 1px solid var(--line); margin-top: 6px; padding-top: 12px; font-size: 15px; }
    .money-line.total b { font-family: var(--font-title); font-size: 26px; font-weight: 400; color: var(--lf-evergreen); }
    .pay-bar { height: 10px; border-radius: 999px; background: #EEF1EC; overflow: hidden; margin: 12px 0 6px; }
    .pay-bar span { display: block; height: 100%; background: var(--lf-gradient); border-radius: 999px; }
    .timeline-item { display: flex; gap: 12px; padding: 10px 0; border-bottom: 1px dashed var(--line); font-size: 13px; }
    .timeline-item:last-child { border-bottom: 0; }
    .t-dot { width: 30px; height: 30px; border-radius: 9px; background: var(--lf-lime-tint); color: var(--lf-forest); display: grid; place-items: center; flex-shrink: 0; }
    .t-dot .msi { font-size: 17px; }

    /* ---------- Printable documents (slip + invoice) ---------- */
    .doc { background: #fff; max-width: 820px; margin: 0 auto; border-radius: 18px; box-shadow: var(--sh-lg); overflow: hidden; color: #111; border: 1px solid var(--line); }
    .doc-bar { height: 6px; background: var(--lf-gradient); }
    .doc-in { padding: 38px 42px; }
    .doc-head { display: flex; justify-content: space-between; gap: 20px; align-items: flex-start; padding-bottom: 20px; border-bottom: 2px solid var(--lf-evergreen); }
    .doc-brand { display: flex; gap: 14px; align-items: center; }
    .doc-brand img { max-height: 56px; max-width: 150px; object-fit: contain; }
    .doc-brand h3 { font-family: var(--font-title); font-weight: 400; font-size: 26px; margin: 0; color: var(--lf-evergreen); line-height: 1.1; }
    .doc-brand p { margin: 2px 0 0; font-size: 12px; color: #4b5a4d; }
    .doc-kind { text-align: right; }
    .doc-kind h2 { font-family: var(--font-title); font-weight: 400; font-size: 32px; margin: 0; color: var(--lf-evergreen); line-height: 1; }
    .doc-kind h2 em { color: var(--lf-forest); }
    .doc-kind .meta { font-size: 12.5px; color: #4b5a4d; margin-top: 8px; }
    .doc-kind .meta b { color: #111; }
    .doc-band { background: var(--lf-evergreen); color: #fff; border-radius: 12px; padding: 12px 18px; display: flex; justify-content: space-between; align-items: center; margin: 22px 0; }
    .doc-band h4 { font-family: var(--font-title); font-weight: 400; font-size: 24px; margin: 0; color: #fff; }
    .doc-band h4 em { color: var(--lf-lime); }
    .doc-sec { font-size: 11px; font-weight: 700; letter-spacing: .12em; text-transform: uppercase; color: var(--lf-forest); margin: 22px 0 10px; display: flex; align-items: center; gap: 6px; }
    .doc-sec .msi { font-size: 16px; }
    .doc-box { border: 1px solid #E1E7DC; background: #FAFBF8; border-radius: 12px; padding: 14px 16px; }
    .doc-table { width: 100%; font-size: 13px; border-collapse: collapse; }
    .doc-table td { padding: 6px 0; vertical-align: top; }
    .doc-table td:first-child { color: #5B6A5D; width: 150px; }
    .doc-table td:last-child { font-weight: 600; }
    .doc-grid { display: grid; grid-template-columns: repeat(4, 1fr); gap: 12px; }
    .doc-grid > div { border: 1px solid #E1E7DC; border-radius: 12px; padding: 12px 14px; background: #FAFBF8; }
    .doc-grid small { display: block; font-size: 10.5px; color: #5B6A5D; text-transform: uppercase; letter-spacing: .08em; font-weight: 700; }
    .doc-grid b { display: block; font-size: 14.5px; margin-top: 3px; color: #111; }
    .doc-grid span { font-size: 12px; color: var(--lf-forest); font-weight: 600; }
    .doc-kv { display: grid; grid-template-columns: 1fr 1fr; gap: 10px 24px; }
    .doc-kv small { display: block; font-size: 10.5px; color: #5B6A5D; text-transform: uppercase; letter-spacing: .08em; font-weight: 700; }
    .doc-kv b { font-size: 13.5px; color: #111; word-break: break-word; }
    .doc-kv .wide { grid-column: 1 / -1; }
    .doc-sec { break-after: avoid; page-break-after: avoid; }
    .doc ol, .doc ul { font-size: 12.5px; color: #3d4b3f; line-height: 1.65; padding-left: 18px; margin: 0; }
    .doc-sign { display: grid; grid-template-columns: 1fr 1fr; gap: 60px; margin-top: 56px; }
    .doc-sign div { border-top: 1.5px solid #111; padding-top: 8px; text-align: center; font-size: 11.5px; font-weight: 700; letter-spacing: .08em; text-transform: uppercase; color: #4b5a4d; }
    .doc-foot { margin-top: 26px; padding-top: 12px; border-top: 1px solid #E1E7DC; font-size: 11px; color: #7A877C; display: flex; justify-content: space-between; gap: 10px; flex-wrap: wrap; }
    .inv-parties { display: grid; grid-template-columns: 1.3fr 1fr; gap: 16px; margin: 22px 0; }
    .inv-items { width: 100%; border-collapse: collapse; font-size: 13px; table-layout: fixed; min-width: 600px; }
    .inv-items thead th { background: var(--lf-evergreen); color: #fff; font-size: 11px; text-transform: uppercase; letter-spacing: .08em; padding: 10px 10px; font-weight: 600; }
    .inv-items thead th:first-child { border-radius: 10px 0 0 10px; }
    .inv-items thead th:last-child { border-radius: 0 10px 10px 0; }
    .inv-items tbody td { padding: 9px 10px; border-bottom: 1px solid #E6EBE2; vertical-align: middle; }
    .inv-items.editing tbody td { padding: 7px 5px; }
    .inv-items .num { text-align: right; font-variant-numeric: tabular-nums; white-space: nowrap; }
    .inv-items input { border: 1px solid var(--line); border-radius: 8px; padding: 5px 8px; font-size: 13px; width: 100%; background: #FBFCFA; font-family: inherit; }
    .inv-items input:focus { outline: none; border-color: #6DBA45; box-shadow: 0 0 0 3px rgba(155, 239, 107, .35); background: #fff; }
    .inv-items input.num-in { text-align: right; max-width: 120px; margin-left: auto; display: block; }
    .inv-items input.qty-in { text-align: center; max-width: 72px; margin: 0 auto; display: block; }
    .inv-totals { margin-left: auto; width: min(360px, 100%); margin-top: 14px; }
    .inv-totals .row-t { display: flex; justify-content: space-between; align-items: center; padding: 6px 0; font-size: 13.5px; gap: 12px; }
    .inv-totals .row-t span { color: #4b5a4d; }
    .inv-totals .row-t b { font-variant-numeric: tabular-nums; }
    .inv-totals .grand { background: var(--lf-evergreen); color: #fff; border-radius: 12px; padding: 12px 14px; margin-top: 8px; }
    .inv-totals .grand span { color: rgba(255, 255, 255, .75); }
    .inv-totals .grand b { font-family: var(--font-title); font-weight: 400; font-size: 26px; color: var(--lf-lime); }
    .inv-words { font-size: 12.5px; background: var(--lf-solar-tint); border: 1px solid #EEE59A; border-radius: 10px; padding: 9px 12px; margin-top: 14px; color: #4a4300; }
    .inv-words b { color: #111; }
    .row-del { border: 0; background: transparent; color: var(--faint); border-radius: 8px; width: 28px; height: 28px; display: grid; place-items: center; }
    .row-del:hover { background: var(--lf-red-tint); color: var(--bad); }
    .no-screen { display: none; }

    /* ---------- Settings ---------- */
    .color-swatch { width: 30px; height: 30px; border-radius: 9px; border: 2px solid #fff; box-shadow: 0 0 0 1px var(--line); cursor: pointer; padding: 0; }
    .color-swatch.on { box-shadow: 0 0 0 2px var(--lf-forest); }
    .nav-tabs-lf { display: flex; gap: 4px; border-bottom: 1px solid var(--line); margin-bottom: 18px; flex-wrap: wrap; }
    .nav-tabs-lf a { padding: 10px 14px; font-weight: 600; color: var(--muted); border-bottom: 2px solid transparent; margin-bottom: -1px; display: inline-flex; gap: 6px; align-items: center; }
    .nav-tabs-lf a.on { color: var(--lf-evergreen); border-bottom-color: var(--lf-forest); }
    .nav-tabs-lf a .msi { font-size: 18px; }

    /* ---------- Toasts ---------- */
    .toast-stack { position: fixed; right: 20px; bottom: 20px; z-index: 2000; display: flex; flex-direction: column; gap: 10px; width: min(420px, calc(100vw - 32px)); }
    .lf-toast { background: #fff; border: 1px solid var(--line); border-left: 4px solid var(--ok); border-radius: 14px; box-shadow: var(--sh-lg); padding: 12px 14px; display: flex; gap: 10px; align-items: flex-start; animation: toastIn .35s cubic-bezier(.16, 1, .3, 1); font-size: 13.5px; }
    .lf-toast.danger { border-left-color: var(--bad); }
    .lf-toast.warning { border-left-color: #D4B800; }
    .lf-toast .msi { color: var(--ok); }
    .lf-toast.danger .msi { color: var(--bad); }
    .lf-toast.warning .msi { color: #9C8A00; }
    .lf-toast .x { margin-left: auto; border: 0; background: none; color: var(--faint); padding: 0 2px; }
    .lf-toast.hide { opacity: 0; transform: translateY(8px); transition: all .3s; }
    @keyframes toastIn { from { transform: translateY(14px); opacity: 0; } to { transform: none; opacity: 1; } }
    .fade-up { animation: fadeUp .4s cubic-bezier(.16, 1, .3, 1) backwards; }
    .lift { position: relative; z-index: 6; }
    @keyframes fadeUp { from { transform: translateY(10px); opacity: 0; } to { transform: none; opacity: 1; } }

    /* ---------- Auth page ---------- */
    .auth { min-height: 100vh; display: grid; grid-template-columns: 1.1fr 1fr; }
    .auth-art { background: radial-gradient(110% 120% at 10% 0%, #3C7A2A 0%, rgba(60, 122, 42, 0) 55%), radial-gradient(90% 110% at 90% 110%, #1F6B3A 0%, rgba(31, 107, 58, 0) 60%), var(--lf-evergreen); color: #fff; padding: 48px; display: flex; flex-direction: column; justify-content: space-between; position: relative; overflow: hidden; }
    .auth-art::after { content: ""; position: absolute; right: -140px; bottom: -140px; width: 520px; height: 520px; border-radius: 50%; border: 1px solid rgba(155, 239, 107, .2); box-shadow: 0 0 0 60px rgba(155, 239, 107, .05), 0 0 0 120px rgba(155, 239, 107, .03); }
    .auth-art h1 { font-family: var(--font-title); font-weight: 400; font-size: 56px; line-height: 1.02; color: #fff; margin: 0 0 14px; letter-spacing: 0; }
    .auth-art p { color: rgba(255, 255, 255, .7); max-width: 440px; font-size: 15px; }
    .auth-feats { display: grid; gap: 12px; margin-top: 28px; position: relative; z-index: 1; }
    .auth-feats div { display: flex; gap: 10px; align-items: center; color: rgba(255, 255, 255, .85); }
    .auth-feats .msi { color: var(--lf-lime); }
    .auth-form { display: grid; place-items: center; padding: 32px 20px; background: var(--lf-cloud); }
    .auth-card { width: min(420px, 100%); background: #fff; border: 1px solid var(--line); border-radius: var(--r-xl); padding: 32px; box-shadow: var(--sh-md); position: relative; overflow: hidden; }
    .auth-card::before { content: ""; position: absolute; left: 0; right: 0; top: 0; height: 5px; background: var(--lf-gradient); }
    .auth-card h2 { font-family: var(--font-title); font-weight: 400; font-size: 34px; margin: 0 0 4px; color: var(--lf-evergreen); }
    .auth-card h2 em { color: var(--lf-forest); }

    .min-w-0 { min-width: 0; }
    .doc .inv-edit { border: 1px solid var(--line); border-radius: 8px; padding: 4px 8px; width: 100%; font: inherit; color: inherit; background: #FBFCFA; }
    .doc .inv-edit:focus { outline: none; border-color: #6DBA45; box-shadow: 0 0 0 3px rgba(155, 239, 107, .35); background: #fff; }
    .doc textarea.inv-edit { resize: vertical; min-height: 64px; font-size: 12.5px; }
    .doc .inv-edit.lg { font-weight: 700; font-size: 16px; }

    /* ---------- Connect additions: workflow, photos, amenities, client area ---------- */
    .b-pend { background: #FFF3DC; color: #7A4F00; border-color: #F2D49B; border-style: dashed; }
    .auth-tabs { display: grid; grid-template-columns: 1fr 1fr; background: var(--lf-cloud); border-radius: 14px; padding: 4px; gap: 4px; margin-bottom: 22px; }
    .auth-tabs button { border: 0; background: transparent; border-radius: 10px; padding: 9px 10px; font-weight: 600; color: var(--muted); display: inline-flex; align-items: center; justify-content: center; gap: 6px; font-size: 13.5px; }
    .auth-tabs button.on { background: #fff; color: var(--lf-evergreen); box-shadow: var(--sh-sm); }
    .auth-pane { display: none; } .auth-pane.on { display: block; }
    .rc-media { position: relative; height: 176px; background: linear-gradient(135deg, #F6F8F3, #E6F6DB); overflow: hidden; }
    .rc-media img { width: 100%; height: 100%; object-fit: cover; display: block; }
    .rc-media .ph { position: absolute; inset: 0; display: grid; place-items: center; color: #9DB694; }
    .rc-media .ph .msi { font-size: 44px; }
    .rc-media .nav-btn { position: absolute; top: 50%; transform: translateY(-50%); width: 30px; height: 30px; border-radius: 50%; border: 0; background: rgba(4, 30, 10, .55); color: #fff; display: grid; place-items: center; }
    .rc-media .nav-btn.prev { left: 8px; } .rc-media .nav-btn.next { right: 8px; }
    .rc-media .count { position: absolute; right: 10px; bottom: 10px; background: rgba(4, 30, 10, .6); color: #fff; font-size: 11px; font-weight: 600; border-radius: 999px; padding: 2px 8px; }
    .rc-media .status-flag { position: absolute; left: 10px; top: 10px; }
    .amen-row { display: flex; flex-wrap: wrap; gap: 5px; margin-top: 10px; }
    .amen { display: inline-flex; align-items: center; gap: 4px; font-size: 11.5px; font-weight: 600; color: #34463A; background: var(--surface-2); border: 1px solid var(--line-soft); border-radius: 999px; padding: 2px 9px 2px 6px; }
    .amen .msi { font-size: 14px; color: var(--lf-forest); }
    .live-pill { display: flex; align-items: center; gap: 7px; font-size: 12px; font-weight: 600; border-radius: 10px; padding: 6px 10px; margin-top: 10px; }
    .live-pill .dot { width: 8px; height: 8px; border-radius: 50%; flex-shrink: 0; }
    .live-pill.free { background: var(--lf-lime-tint); color: #1F5A17; } .live-pill.free .dot { background: var(--ok); }
    .live-pill.soon { background: var(--lf-solar-tint); color: #6E6100; } .live-pill.soon .dot { background: #C9B400; }
    .live-pill.busy { background: var(--lf-red-tint); color: #8A2525; } .live-pill.busy .dot { background: var(--bad); animation: blink 1.4s infinite; }
    @keyframes blink { 50% { opacity: .25; } }
    .sched-event.pending { background: #fff; border-style: dashed; border-left-style: solid; left: 52%; z-index: 3; opacity: .95; }
    .sched-event.pending b .msi { font-size: 13px; vertical-align: -2px; }
    .cal-ev.pending { background: #fff; border-style: dashed; }
    .queue-row { display: grid; grid-template-columns: minmax(0, 1.2fr) minmax(0, 1fr) auto; gap: 16px; align-items: center; padding: 14px 20px; border-bottom: 1px solid var(--line-soft); }
    .queue-row:last-child { border-bottom: 0; }
    .queue-who { display: flex; gap: 12px; align-items: center; min-width: 0; }
    .queue-who .avatar { width: 42px; height: 42px; font-size: 14px; }
    .clash { display: inline-flex; align-items: center; gap: 4px; font-size: 11.5px; font-weight: 600; color: #8A2525; background: var(--lf-red-tint); border: 1px solid #F1C9C9; border-radius: 8px; padding: 2px 8px; margin-top: 4px; }
    .clash.soft { color: #7A4F00; background: #FFF3DC; border-color: #F2D49B; }
    .review-side { background: var(--surface-2); border-right: 1px solid var(--line-soft); }
    .rule-list { list-style: none; padding: 0; margin: 0; display: grid; gap: 8px; }
    .rule-list li { display: flex; gap: 10px; align-items: flex-start; font-size: 13.5px; background: var(--surface-2); border: 1px solid var(--line-soft); border-radius: 12px; padding: 9px 12px; }
    .rule-list li .msi { font-size: 18px; margin-top: 1px; }
    .rule-list.do .msi { color: var(--ok); } .rule-list.dont .msi { color: var(--bad); }
    .remark-box { background: var(--lf-solar-tint); border: 1px solid #EEE59A; border-radius: 12px; padding: 10px 12px; font-size: 13px; color: #4a4300; white-space: pre-line; }
    .remark-box.red { background: var(--lf-red-tint); border-color: #F1C9C9; color: #8A2525; }
    .verify-line { display: flex; gap: 12px; align-items: center; background: var(--surface-2); border: 1px solid var(--line-soft); border-radius: 12px; padding: 12px 14px; text-align: left; }
    .verify-line .msi { color: var(--lf-forest); }
    .ext-link .msi.trail { margin-left: auto; font-size: 16px; opacity: .5; }
    .side-link .count { margin-left: auto; background: var(--lf-solar); color: var(--lf-evergreen); font-size: 11px; font-weight: 700; border-radius: 999px; padding: 1px 8px; }

    /* ---------- Responsive ---------- */
    @media (max-width: 1199.98px) { .header-search { width: 200px; } }
    @media (max-width: 991.98px) {
        .app-sidebar { transform: translateX(-100%); box-shadow: var(--sh-lg); }
        body.nav-open .app-sidebar { transform: none; }
        body.nav-open .sidebar-backdrop { opacity: 1; pointer-events: auto; }
        .app-main { margin-left: 0; }
        .menu-btn { display: inline-flex; }
        .app-header { padding: 12px 16px; gap: 10px; }
        .page-title { font-size: 25px; }
        .page-sub { display: none; }
        .header-search, .clock-chip .date, .header-new { display: none !important; }
        .app-content { padding: 18px 16px 90px; }
        .fab { display: inline-flex; position: fixed; right: 18px; bottom: 18px; z-index: 1035; width: 56px; height: 56px; border-radius: 18px; box-shadow: 0 14px 28px -10px rgba(4, 30, 10, .55); }
        .fab .msi { font-size: 28px; }
        .when-card { position: static; }
        .auth { grid-template-columns: 1fr; }
        .auth-art { padding: 32px 24px; }
        .auth-art h1 { font-size: 40px; }
        .auth-feats { display: none; }
        .toast-stack { bottom: 86px; right: 16px; }
    }
    @media (max-width: 767.98px) {
        .hero { padding: 22px 20px; }
        .hero h2 { font-size: 32px; }
        .kpi-value { font-size: 32px; }
        .doc-in { padding: 22px 18px; }
        .doc-head { flex-direction: column; }
        .doc-kind { text-align: left; }
        .doc-grid { grid-template-columns: 1fr 1fr; }
        .inv-parties { grid-template-columns: 1fr; }
        .kv { grid-template-columns: 1fr; gap: 2px 0; }
        .kv dd { margin-bottom: 8px; }
        .big-when { grid-template-columns: 1fr; }
        .big-when .arrow { display: none; }
        .detail-head h2 { font-size: 30px; }
        .clock-chip { padding: 7px 10px; }
        .clock-chip .msi { display: none; }
        .card-head { flex-wrap: wrap; }
        .card-head .actions { margin-left: 0; width: 100%; }
        .inv-items { font-size: 12px; }
        .inv-items thead th, .inv-items tbody td { padding: 7px 5px; }
        .queue-row { grid-template-columns: 1fr; gap: 10px; }
        .req-row { flex-wrap: wrap; }
        .req-row .req-actions { width: 100%; flex-direction: row !important; align-items: center !important; justify-content: flex-start; flex-wrap: wrap; padding-left: 66px; }
        .review-side { border-right: 0; border-bottom: 1px solid var(--line-soft); }
    }

    /* ---------- Print (A4) ---------- */
    @page { size: A4 portrait; margin: 10mm; }
    @media print {
        html, body { background: #fff !important; -webkit-print-color-adjust: exact !important; print-color-adjust: exact !important; }
        *, *::before, *::after { animation: none !important; transition: none !important; }
        .app-sidebar, .app-header, .no-print, .toast-stack, .fab, .sidebar-backdrop { display: none !important; }
        .no-screen { display: block !important; }
        .app-main { margin: 0 !important; }
        .app-content { padding: 0 !important; }
        .doc { box-shadow: none !important; border: 0 !important; border-radius: 0 !important; max-width: 100% !important; }
        .doc-in { padding: 4px 2px !important; }
        .doc-bar { height: 4px; }
        .doc-head { padding-bottom: 10px; }
        .doc-brand img { max-height: 46px; }
        .doc-brand h3 { font-size: 22px; }
        .doc-kind h2 { font-size: 26px; }
        .doc-kind .meta { margin-top: 4px; font-size: 11.5px; }
        .doc-band { margin: 10px 0; padding: 7px 14px; }
        .doc-band h4 { font-size: 18px; }
        .doc-sec { margin: 12px 0 6px; }
        .doc-box { padding: 8px 12px; }
        .doc-kv { gap: 6px 20px; }
        .doc-kv b { font-size: 12.5px; }
        .doc-grid { gap: 8px; }
        .doc-grid > div { padding: 8px 10px; }
        .doc-grid b { font-size: 13px; }
        .doc-table td { padding: 2px 0; font-size: 12px; }
        .doc ol, .doc ul { font-size: 11px; line-height: 1.45; }
        .doc-sign { margin-top: 34px; }
        .doc-foot { margin-top: 12px; padding-top: 8px; }
        .inv-parties { margin: 12px 0; }
        .inv-items tbody td { padding: 5px 8px; }
        .inv-items thead th { padding: 7px 8px; }
        .inv-totals { margin-top: 8px; }
        .inv-totals .row-t { padding: 2px 0; font-size: 12.5px; }
        .inv-totals .grand { padding: 8px 12px; margin-top: 4px; }
        .inv-totals .grand b { font-size: 21px; }
        .inv-words { margin-top: 8px; padding: 6px 10px; }
        .inv-items { min-width: 0 !important; }
        .inv-items input, .doc .inv-edit { border: 0 !important; background: transparent !important; padding: 0 !important; box-shadow: none !important; resize: none; }
        .print-hide { display: none !important; }
        .lf-card { box-shadow: none !important; }
        .sched-wrap { max-height: none !important; overflow: visible !important; }
        tr, li, .doc-box { page-break-inside: avoid; }
        a { color: inherit !important; }
    }
    </style>
<?php }
/** Proforma invoice document. $edit = true renders the editable builder (inputs), false renders a saved invoice. */
function render_invoice_doc(array $inv, array $items, bool $edit): void
{
    $vat_rate = (float) ($inv['vat_rate'] ?? VAT_RATE);
    $sub = 0.0;
    foreach ($items as $it) $sub += round((float) $it['qty'] * (float) $it['rate'], 2);
    $discount = min((float) ($inv['discount'] ?? 0), $sub);
    $taxable  = $sub - $discount;
    $vat      = $edit ? round($taxable * $vat_rate / 100, 2) : (float) $inv['vat_amount'];
    $grand    = $edit ? $taxable + $vat : (float) $inv['total_amount'];
    $field = function ($name, $val, $ph = '', $cls = '') use ($edit) {
        return $edit ? '<input class="inv-edit ' . $cls . '" name="' . $name . '" value="' . h($val) . '" placeholder="' . h($ph) . '">' : h($val ?: '—');
    };
    ?>
    <article class="doc">
        <div class="doc-bar"></div>
        <div class="doc-in">
            <div class="doc-head">
                <div class="doc-brand">
                    <img src="<?= h(LOGO_FULL) ?>" alt="" onerror="this.style.display='none'">
                    <div><h3><?= h(COMPANY_NAME) ?></h3>
                        <p><?= h(COMPANY_ADDRESS) ?></p>
                        <?php if (COMPANY_PHONE || COMPANY_EMAIL): ?><p><?= h(implode(' · ', array_filter([COMPANY_PHONE, COMPANY_EMAIL]))) ?></p><?php endif; ?>
                        <?php if (COMPANY_PAN): ?><p>PAN/VAT: <b><?= h(COMPANY_PAN) ?></b></p><?php endif; ?></div>
                </div>
                <div class="doc-kind">
                    <h2>Proforma <em>Invoice</em></h2>
                    <div class="meta">
                        No. <b><?= $edit ? 'Draft' : h($inv['invoice_number']) ?></b><?= $edit ? '<span class="no-print text-muted"> · number given on save</span>' : '' ?><br>
                        Date <?php if ($edit): ?><input type="date" class="inv-edit d-inline-block" style="width:auto" name="inv_date" value="<?= h($inv['invoice_date']) ?>"><?php else: ?><b><?= h(fmt_date($inv['invoice_date'])) ?></b><?php endif; ?>
                        <?php if (!$edit && !empty($inv['status'])): ?><br>Status <b style="color:<?= $inv['status'] === 'Paid' ? 'var(--ok)' : 'var(--bad)' ?>"><?= h($inv['status']) ?></b><?php endif; ?>
                    </div>
                </div>
            </div>

            <div class="inv-parties">
                <div class="doc-box">
                    <div class="eyebrow mb-1">Bill to</div>
                    <?php if ($edit): ?>
                        <input class="inv-edit lg mb-1" name="inv_guest_name" value="<?= h($inv['guest_name']) ?>" required>
                    <?php else: ?><div class="fw-bold" style="font-size:16px"><?= h($inv['guest_name']) ?></div><?php endif; ?>
                    <table class="doc-table">
                        <tr><td style="width:80px">Address</td><td><?= $field('inv_guest_address', $inv['guest_address'] ?? '', 'Address') ?></td></tr>
                        <tr><td>Email</td><td><?= $field('inv_guest_email', $inv['guest_email'] ?? '', 'Email') ?></td></tr>
                        <tr><td>PAN</td><td><?= $field('inv_guest_pan', $inv['guest_pan'] ?? '', 'PAN / VAT no.') ?></td></tr>
                    </table>
                </div>
                <div class="doc-box">
                    <div class="eyebrow mb-1">Billing period</div>
                    <div class="fw-bold" style="font-size:15px"><?= h(fmt_range($inv['start_date'], $inv['end_date'])) ?></div>
                    <div class="small text-muted mt-2">Venue &amp; workspace usage as per confirmed bookings.</div>
                    <?php if ($edit): ?><input type="hidden" name="inv_start_date" value="<?= h($inv['start_date']) ?>"><input type="hidden" name="inv_end_date" value="<?= h($inv['end_date']) ?>"><?php endif; ?>
                </div>
            </div>

            <div class="table-responsive">
            <table class="inv-items <?= $edit ? 'editing' : '' ?>">
                <thead><tr><th style="width:44px">S.N.</th><th>Description</th><th style="width:112px">Date</th><th style="width:70px" class="text-center">Qty</th><th style="width:118px" class="num">Rate</th><th style="width:126px" class="num">Amount</th><?php if ($edit): ?><th class="no-print" style="width:36px"></th><?php endif; ?></tr></thead>
                <tbody id="invBody">
                <?php foreach ($items as $i => $it): $amt = round((float) $it['qty'] * (float) $it['rate'], 2); ?>
                    <tr>
                        <td class="sn"><?= $i + 1 ?></td>
                        <?php if ($edit): ?>
                            <td><input name="item_desc[]" value="<?= h($it['desc']) ?>"></td>
                            <td><input name="item_date[]" value="<?= h($it['date']) ?>"></td>
                            <td><input name="item_qty[]" class="qty-in" type="number" step="0.25" min="0" value="<?= h($it['qty'] + 0) ?>"></td>
                            <td><input name="item_rate[]" class="num-in" type="number" step="0.01" min="0" value="<?= h(number_format((float) $it['rate'], 2, '.', '')) ?>"></td>
                            <td class="num fw-600 amt"><?= money($amt, 2) ?></td>
                            <td class="no-print"><button type="button" class="row-del" title="Remove line" aria-label="Remove line"><span class="msi sm">close</span></button></td>
                        <?php else: ?>
                            <td class="fw-600"><?= h($it['desc']) ?></td>
                            <td><?= h($it['date'] ?? '') ?></td>
                            <td class="text-center"><?= h(rtrim(rtrim(number_format((float) $it['qty'], 2), '0'), '.')) ?></td>
                            <td class="num"><?= money($it['rate'], 2) ?></td>
                            <td class="num fw-600"><?= money($amt, 2) ?></td>
                        <?php endif; ?>
                    </tr>
                <?php endforeach; ?>
                </tbody>
            </table>
            </div>
            <?php if ($edit): ?><button type="button" class="btn btn-ghost btn-sm mt-2 no-print" id="invAddRow"><span class="msi">add</span> Add line (equipment, extra hours…)</button><?php endif; ?>

            <div class="inv-totals">
                <div class="row-t"><span>Sub total</span><b id="invSub"><?= money($sub, 2) ?></b></div>
                <div class="row-t <?= $discount <= 0 ? 'print-hide' : '' ?>" id="invDiscRow"><span>Discount</span>
                    <?php if ($edit): ?><input type="number" step="0.01" min="0" name="inv_discount" id="invDiscount" class="inv-edit text-end" style="max-width:140px" value="<?= h(number_format($discount, 2, '.', '')) ?>">
                    <?php else: ?><b>− <?= money($discount, 2) ?></b><?php endif; ?></div>
                <div class="row-t"><span>Taxable amount</span><b id="invTaxable"><?= money($taxable, 2) ?></b></div>
                <div class="row-t <?= ($vat_rate <= 0) ? 'd-none' : '' ?>" id="invVatRow"><span>VAT <?= $edit ? VAT_RATE : rtrim(rtrim(number_format($vat_rate, 2), '0'), '.') ?>%</span><b id="invVat"><?= money($vat, 2) ?></b></div>
                <div class="row-t grand"><span>Grand total</span><b id="invGrand"><?= money($grand, 2) ?></b></div>
            </div>
            <div class="inv-words">In words: <b id="invWords"><?= h(amount_in_words($grand)) ?></b></div>

            <div class="row g-3 mt-2">
                <div class="col-md-7">
                    <div class="doc-sec mt-2"><span class="msi">account_balance</span>Bank details for payment</div>
                    <div class="doc-box"><table class="doc-table"><?php foreach (BANK_DETAILS as $k => $val): ?><tr><td style="width:130px"><?= h($k) ?></td><td><?= h($val) ?></td></tr><?php endforeach; ?></table></div>
                </div>
                <div class="col-md-5">
                    <div class="doc-sec mt-2"><span class="msi">sticky_note_2</span>Notes</div>
                    <?php if ($edit): ?><textarea class="inv-edit" name="inv_notes" rows="4" placeholder="e.g. Payment due within 7 days. Please mention the invoice number when paying."><?= h($inv['notes'] ?? '') ?></textarea>
                    <?php else: ?><div class="doc-box small" style="white-space:pre-line;min-height:64px"><?= h(($inv['notes'] ?? '') ?: INVOICE_NOTE) ?></div><?php endif; ?>
                </div>
            </div>
            <div class="doc-sign"><div>Received by</div><div>For <?= h(COMPANY_SHORT) ?></div></div>
            <div class="doc-foot"><span>This is a proforma invoice and not a tax invoice.</span><span><?= h(COMPANY_NAME) ?></span></div>
        </div>
    </article>
<?php }
// =====================================================================
// 12. SHARED RENDER HELPERS
// =====================================================================
function logo_img(string $src, string $fallback = 'L'): string
{
    return '<img src="' . h($src) . '" alt="' . h(COMPANY_SHORT) . '" onerror="this.style.display=\'none\';this.nextElementSibling.style.display=\'grid\'">'
         . '<span class="fallback" style="display:none;place-items:center;width:100%;height:100%">' . h($fallback) . '</span>';
}
function guest_directory(): array
{
    return db_all("SELECT b.guest_name AS n, b.guest_email AS e, b.guest_phone AS p, b.guest_pan AS pan, b.guest_address AS a
                   FROM bookings b INNER JOIN (SELECT MAX(id) AS mid FROM bookings GROUP BY guest_name) x ON x.mid = b.id
                   ORDER BY b.guest_name LIMIT 2000");
}
function js_data($v): string { return json_encode($v, JSON_HEX_TAG | JSON_HEX_AMP | JSON_HEX_APOS | JSON_HEX_QUOT | JSON_UNESCAPED_UNICODE); }

/** Data for the review modal (price defaults + clash warnings). */
function review_payload(array $p): array
{
    $clash  = find_conflicts((int) $p['room_id'], $p['booking_date'], $p['end_date'], $p['start_time'], $p['end_time'], (int) $p['id']);
    $rivals = find_pending_overlaps((int) $p['room_id'], $p['booking_date'], $p['end_date'], $p['start_time'], $p['end_time'], (int) $p['id']);
    $base = (float) ($p['rbase'] ?? 0);
    return ['id' => (int) $p['id'], 'ref' => booking_ref($p['id']), 'name' => $p['guest_name'], 'email' => $p['guest_email'], 'phone' => $p['guest_phone'],
            'room' => $p['rname'], 'color' => $p['rcolor'] ?: '#9BEF6B', 'dates' => fmt_range($p['booking_date'], $p['end_date']), 'time' => fmt_time($p['start_time']) . ' – ' . fmt_time($p['end_time']),
            'sd' => $p['booking_date'], 'ed' => $p['end_date'], 'st' => substr($p['start_time'], 0, 5), 'et' => substr($p['end_time'], 0, 5),
            'purpose' => $p['purpose'], 'attendees' => $p['attendees'], 'capacity' => $p['rcapacity'] ?? null, 'notes' => $p['notes'], 'remarks' => $p['admin_remarks'] ?? '',
            'rate' => (float) $p['custom_rate'] > 0 ? (float) $p['custom_rate'] : $base, 'base' => $base,
            'hourly' => ($p['rhourly'] ?? null) !== null ? (float) $p['rhourly'] : round($base / 8), 'rate_type' => $p['rate_type'] ?: 'day', 'discount' => (float) $p['discount'],
            'clash' => $clash ? $clash[0]['guest_name'] . ' (' . booking_ref($clash[0]['id']) . ', ' . fmt_time($clash[0]['start_time']) . '–' . fmt_time($clash[0]['end_time']) . ')' : '',
            'clash_name' => $clash ? $clash[0]['guest_name'] : '', 'rivals' => count($rivals)];
}

function render_review_modal(string $return_to): void
{ ?>
    <!-- Review modal (filled by JS from the queue) -->
    <div class="modal fade" id="reviewModal" tabindex="-1" aria-labelledby="reviewTitle" aria-hidden="true">
        <div class="modal-dialog modal-lg modal-dialog-centered modal-dialog-scrollable modal-fullscreen-md-down">
            <form method="POST" class="modal-content" id="reviewForm">
                <?= csrf_field() ?>
                <input type="hidden" name="action" value="review_booking">
                <input type="hidden" name="booking_id" id="rv_id">
                <input type="hidden" name="return_to" value="<?= h($return_to) ?>">
                <div class="modal-header">
                    <div><div class="eyebrow mb-1" id="rv_ref">Request</div><h5 class="modal-title" id="reviewTitle">Review <em>request</em></h5></div>
                    <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
                </div>
                <div class="modal-body p-0">
                    <div class="row g-0">
                        <div class="col-md-5 review-side p-4" id="rv_summary"></div>
                        <div class="col-md-7 p-4">
                            <div class="alert alert-danger d-none align-items-start gap-2 small" id="rv_clash"><span class="msi sm">event_busy</span><span></span></div>
                            <div class="form-section"><span class="msi sm">sell</span>Price</div>
                            <div class="row g-3">
                                <div class="col-5"><label class="form-label" for="rv_type">Rate basis</label>
                                    <select name="rate_type" id="rv_type" class="form-select"><?php foreach (RATE_TYPES as $k => $v): ?><option value="<?= $k ?>"><?= h($v) ?></option><?php endforeach; ?></select></div>
                                <div class="col-7"><label class="form-label" for="rv_rate">Rate (Rs.)</label>
                                    <div class="input-group"><span class="input-group-text">Rs.</span><input type="number" step="0.01" min="0" name="allocated_rate" id="rv_rate" class="form-control fw-600" required></div></div>
                                <div class="col-5"><label class="form-label" for="rv_disc">Discount (Rs.)</label><input type="number" step="0.01" min="0" name="discount" id="rv_disc" class="form-control" value="0"></div>
                                <div class="col-7"><label class="form-label">Total payable</label><div class="form-control fw-600" style="background:var(--lf-lime-tint)" id="rv_total">Rs. 0</div></div>
                            </div>
                            <div class="form-section mt-4"><span class="msi sm">chat</span>Remarks to the client</div>
                            <textarea name="admin_remarks" id="rv_remarks" rows="3" class="form-control" placeholder="Welcome note, instructions — or the reason for declining"></textarea>
                            <div class="form-check mt-3"><input class="form-check-input" type="checkbox" name="notify" id="rv_notify" value="1" checked><label class="form-check-label fw-600" for="rv_notify">Email the decision to the client</label></div>
                        </div>
                    </div>
                </div>
                <div class="modal-footer justify-content-between">
                    <a class="btn btn-ghost" id="rv_edit" href="#"><span class="msi">edit</span> Edit request</a>
                    <div class="d-flex gap-2">
                        <button type="submit" name="decision" value="Rejected" class="btn btn-danger-soft" id="rv_decline"><span class="msi">block</span> Decline</button>
                        <button type="submit" name="decision" value="Approved" class="btn btn-brand" id="rv_approve"><span class="msi">check_circle</span> Approve</button>
                    </div>
                </div>
            </form>
        </div>
    </div>
<?php }

function render_auth_page(string $tab, string $error, bool $setup): void
{ ?>
<!DOCTYPE html>
<html lang="en">
<head><?php brand_head('Sign in'); ?></head>
<body>
<div class="auth">
    <div class="auth-art">
        <div class="d-flex align-items-center gap-3" style="position:relative;z-index:1">
            <div class="brand-logo"><?= logo_img(LOGO_ROUND) ?></div>
            <div><div class="brand-name">Leapfrog <em>Connect</em></div><div class="brand-sub">Booking management</div></div>
        </div>
        <div style="position:relative;z-index:1">
            <h1>Your workspace,<br><span class="grad-text">ready when you are.</span></h1>
            <p>Halls, training rooms and co-working desks in Dillibazar — check live availability, request a space and follow your booking in one place.</p>
            <div class="auth-feats">
                <div><span class="msi">event_available</span> Live availability for every space</div>
                <div><span class="msi">mark_email_read</span> Email updates when your request is reviewed</div>
                <div><span class="msi">calendar_add_on</span> Add approved bookings to your calendar</div>
            </div>
        </div>
        <div style="position:relative;z-index:1;font-size:12px;color:rgba(255,255,255,.55)">Need help? Call <a href="tel:<?= h(COMPANY_PHONE) ?>" style="color:var(--lf-lime)"><?= h(COMPANY_PHONE) ?></a> · &copy; <?= date('Y') ?> <?= h(COMPANY_NAME) ?></div>
    </div>
    <div class="auth-form">
        <div class="auth-card">
            <div class="auth-tabs" role="tablist">
                <button type="button" class="<?= $tab === 'client' ? 'on' : '' ?>" data-pane="paneClient" role="tab"><span class="msi">person</span> Book a space</button>
                <button type="button" class="<?= $tab === 'staff' ? 'on' : '' ?>" data-pane="paneStaff" role="tab"><span class="msi">badge</span> Staff sign in</button>
            </div>

            <div class="auth-pane <?= $tab === 'client' ? 'on' : '' ?>" id="paneClient">
                <h2>Welcome <em>in</em></h2>
                <p class="text-muted mb-4">Tell us who you are — we use your email to send confirmations and show your requests.</p>
                <?php if ($error && $tab === 'client'): ?><div class="alert alert-danger py-2 small d-flex gap-2 align-items-center"><span class="msi sm">error</span><?= h($error) ?></div><?php endif; ?>
                <form method="POST" autocomplete="on">
                    <?= csrf_field() ?><input type="hidden" name="action" value="client_login">
                    <div class="mb-3"><label class="form-label" for="cl-name">Full name or organisation</label>
                        <div class="input-icon"><span class="msi">person</span><input class="form-control" id="cl-name" name="name" required placeholder="e.g. Leapfrog Connect Pvt. Ltd." value="<?= h($tab === 'client' ? ($_POST['name'] ?? '') : '') ?>" autocomplete="organization"></div></div>
                    <div class="mb-3"><label class="form-label" for="cl-email">Email</label>
                        <div class="input-icon"><span class="msi">mail</span><input class="form-control" id="cl-email" type="email" name="email" required value="<?= h($tab === 'client' ? ($_POST['email'] ?? '') : '') ?>" autocomplete="email"></div></div>
                    <div class="mb-4"><label class="form-label" for="cl-phone">Phone <span class="text-faint fw-normal">(optional)</span></label>
                        <div class="input-icon"><span class="msi">call</span><input class="form-control" id="cl-phone" type="tel" name="phone" placeholder="98XXXXXXXX" value="<?= h($tab === 'client' ? ($_POST['phone'] ?? '') : '') ?>" autocomplete="tel"></div></div>
                    <button class="btn btn-brand btn-lg w-100"><span class="msi">arrow_forward</span> Continue</button>
                </form>
            </div>

            <div class="auth-pane <?= $tab === 'staff' ? 'on' : '' ?>" id="paneStaff">
                <?php if ($setup): ?>
                    <h2>Create the <em>admin</em> account</h2>
                    <p class="text-muted mb-3">First-time setup. Use one of the owner emails (<?= h(implode(', ', OWNER_EMAILS)) ?>). You can add other staff afterwards.</p>
                    <?php if ($error && $tab === 'staff'): ?><div class="alert alert-danger py-2 small d-flex gap-2 align-items-center"><span class="msi sm">error</span><?= h($error) ?></div><?php endif; ?>
                    <form method="POST">
                        <?= csrf_field() ?><input type="hidden" name="action" value="setup">
                        <div class="mb-3"><label class="form-label" for="su-name">Your name</label><input class="form-control" id="su-name" name="name" required value="<?= h($tab === 'staff' ? ($_POST['name'] ?? '') : '') ?>"></div>
                        <div class="mb-3"><label class="form-label" for="su-email">Owner email</label><input class="form-control" id="su-email" type="email" name="email" required value="<?= h($tab === 'staff' ? ($_POST['email'] ?? '') : '') ?>"></div>
                        <div class="row g-3 mb-4">
                            <div class="col-6"><label class="form-label" for="su-p1">Password</label><input class="form-control" id="su-p1" type="password" name="password" minlength="8" required></div>
                            <div class="col-6"><label class="form-label" for="su-p2">Confirm</label><input class="form-control" id="su-p2" type="password" name="password2" minlength="8" required></div>
                        </div>
                        <button class="btn btn-forest btn-lg w-100"><span class="msi">rocket_launch</span> Create account &amp; start</button>
                    </form>
                <?php else: ?>
                    <h2>Staff <em>sign in</em></h2>
                    <p class="text-muted mb-4">For the Leapfrog Connect booking team.</p>
                    <?php if ($error && $tab === 'staff'): ?><div class="alert alert-danger py-2 small d-flex gap-2 align-items-center"><span class="msi sm">error</span><?= h($error) ?></div><?php endif; ?>
                    <form method="POST">
                        <?= csrf_field() ?><input type="hidden" name="action" value="staff_login">
                        <div class="mb-3"><label class="form-label" for="li-email">Email</label>
                            <div class="input-icon"><span class="msi">mail</span><input class="form-control" id="li-email" type="email" name="email" required value="<?= h($tab === 'staff' ? ($_POST['email'] ?? '') : '') ?>" autocomplete="username"></div></div>
                        <div class="mb-4"><label class="form-label" for="li-pass">Password</label>
                            <div class="input-icon"><span class="msi">lock</span><input class="form-control" id="li-pass" type="password" name="password" required autocomplete="current-password"></div></div>
                        <button class="btn btn-forest btn-lg w-100"><span class="msi">login</span> Sign in</button>
                        <p class="form-text text-center mt-3 mb-0">Forgot your password? An admin can reset it from <b>Rooms &amp; settings → Users</b>.</p>
                    </form>
                <?php endif; ?>
            </div>
        </div>
    </div>
</div>
<script>
document.querySelectorAll('.auth-tabs button').forEach(function (b) {
    b.addEventListener('click', function () {
        document.querySelectorAll('.auth-tabs button').forEach(function (x) { x.classList.toggle('on', x === b); });
        document.querySelectorAll('.auth-pane').forEach(function (p) { p.classList.toggle('on', p.id === b.dataset.pane); });
        var f = document.querySelector('#' + b.dataset.pane + ' input:not([type=hidden])'); if (f) f.focus();
    });
});
</script>
</body>
</html>
<?php }

// Which sidebar item is highlighted
$nav_active = ['booking' => 'reports', 'edit' => 'reports', 'conf_slip' => 'reports', 'invoice_view' => 'invoices'][$view] ?? $view;
if ($is_staff) {
    $nav = [
        'Overview' => [['dashboard', 'space_dashboard', 'Dashboard', '']],
        'Bookings' => [['new', 'add_circle', 'New booking', 'N'], ['daily_view', 'view_day', 'Daily schedule', ''], ['monthly_planner', 'calendar_month', 'Monthly planner', ''], ['reports', 'list_alt', 'All bookings', '']],
        'Billing'  => [['invoices', 'receipt_long', 'Bills & invoices', '']],
        'Tools'    => [[LINK_BULK, 'library_add', 'Bulk booking', 'ext'], [LINK_PROPERTIES, 'apartment', 'Manage properties', 'ext'], [LINK_REVENUE, 'monitoring', 'Revenue analytics', 'ext']],
        'Manage'   => [['settings', 'tune', 'Rooms & settings', '']],
    ];
} else {
    $nav = [
        'My space' => [['dashboard', 'space_dashboard', 'My requests', ''], ['new', 'add_circle', 'Book a space', 'N'], [LINK_BULK, 'library_add', 'Bulk booking', 'ext']],
    ];
}
$role_label = $is_staff ? ($is_admin ? 'Admin' : 'Staff') : 'Client';
?>
<!DOCTYPE html>
<html lang="en">
<head><?php brand_head($pt_plain . ' ' . $pt_em); ?></head>
<body data-view="<?= h($view) ?>" data-role="<?= $is_staff ? 'staff' : 'client' ?>">

<!-- ================= SIDEBAR ================= -->
<aside class="app-sidebar no-print" id="sidebar" aria-label="Main navigation">
    <a href="?" class="brand-block">
        <div class="brand-logo"><?= logo_img(LOGO_FULL) ?></div>
        <div><div class="brand-name">Leapfrog <em>Connect</em></div><div class="brand-sub">Booking management</div></div>
    </a>
    <div class="side-cta"><a href="?view=new" class="btn btn-brand w-100"><span class="msi">add</span> <?= $is_staff ? 'New booking' : 'Book a space' ?></a></div>
    <nav class="side-nav">
        <?php foreach ($nav as $group => $items): ?>
            <div class="nav-group"><?= h($group) ?></div>
            <?php foreach ($items as [$key, $icon, $label, $kbd]): $ext = $kbd === 'ext'; $on = !$ext && $nav_active === $key; ?>
                <a href="<?= $ext ? h($key) : '?view=' . $key ?>" class="side-link <?= $ext ? 'ext-link' : '' ?> <?= $on ? 'active' : '' ?>" <?= $on ? 'aria-current="page"' : '' ?>>
                    <span class="msi"><?= $icon ?></span> <?= h($label) ?>
                    <?php if ($key === 'dashboard' && $pending_count > 0): ?><span class="count" title="Requests awaiting review"><?= $pending_count ?></span>
                    <?php elseif ($ext): ?><span class="msi trail">open_in_new</span>
                    <?php elseif ($kbd): ?><span class="kbd"><?= $kbd ?></span><?php endif; ?>
                </a>
            <?php endforeach; ?>
        <?php endforeach; ?>
    </nav>
    <div class="side-foot">
        <span class="avatar"><?= h(initials($me)) ?></span>
        <div class="who"><b><?= h($me) ?></b><small><?= $role_label ?></small></div>
        <a href="?logout=1" class="logout" title="Sign out" aria-label="Sign out"><span class="msi">logout</span></a>
    </div>
</aside>
<div class="sidebar-backdrop" id="sidebarBackdrop"></div>

<div class="app-main">
    <!-- ================= HEADER ================= -->
    <header class="app-header no-print">
        <button class="btn btn-ghost btn-icon menu-btn" id="menuBtn" aria-label="Open menu"><span class="msi">menu</span></button>
        <div class="min-w-0">
            <h1 class="page-title"><?= h($pt_plain) ?> <em><?= h($pt_em) ?></em></h1>
            <div class="page-sub"><?= h($pt_sub) ?></div>
        </div>
        <div class="header-tools">
            <?php if ($is_staff): ?>
            <form method="GET" class="header-search input-icon" role="search">
                <input type="hidden" name="view" value="reports">
                <span class="msi">search</span>
                <input type="search" name="search" id="globalSearch" class="form-control" placeholder="Find guest, phone, PAN, ID…" value="<?= $view === 'reports' ? h($_GET['search'] ?? '') : '' ?>" aria-label="Search bookings">
                <span class="kbd-hint">/</span>
            </form>
            <?php endif; ?>
            <div class="clock-chip" title="Nepal time"><span class="msi">schedule</span><span id="liveClock"><?= date('g:i:s A') ?></span><span class="date d-none d-xl-inline">· <?= date('D, d M') ?></span></div>
            <a href="?view=new" class="btn btn-brand header-new d-none d-lg-inline-flex"><span class="msi">add</span> <?= $is_staff ? 'New booking' : 'Book a space' ?></a>
        </div>
    </header>

    <!-- ================= CONTENT ================= -->
    <main class="app-content">

<?php
// =====================================================================
// VIEW: STAFF DASHBOARD
// =====================================================================
if ($view === 'dashboard' && $is_staff):
    $rooms       = get_rooms();
    $today_list  = db_all("SELECT b.*, r.name AS rname, r.color AS rcolor FROM bookings b LEFT JOIN rooms r ON r.id = b.room_id
                           WHERE ? BETWEEN b.booking_date AND b.end_date AND " . SQL_BLOCKING . " ORDER BY b.start_time", [$today_date]);
    $month_start = date('Y-m-01');
    $month_end   = date('Y-m-t');
    $stats_month = (int) db_val("SELECT COUNT(*) FROM bookings b WHERE b.booking_date <= ? AND b.end_date >= ? AND b.status = 'Approved'", [$month_end, $month_start]);
    $vatf        = 1 + VAT_RATE / 100;
    $due         = db_one("SELECT COUNT(*) AS c, COALESCE(SUM(b.total_amount * $vatf - b.amount_paid),0) AS amt FROM bookings b WHERE " . SQL_BLOCKING . " AND b.amount_paid < b.total_amount * $vatf - 0.5") ?: ['c' => 0, 'amt' => 0];
    $upcoming    = db_all("SELECT b.*, r.name AS rname, r.color AS rcolor FROM bookings b LEFT JOIN rooms r ON r.id = b.room_id
                           WHERE b.booking_date > ? AND b.booking_date <= ? AND " . SQL_BLOCKING . " ORDER BY b.booking_date, b.start_time LIMIT 8", [$today_date, date('Y-m-d', strtotime('+7 days'))]);
    $pending     = db_all("SELECT b.*, r.name AS rname, r.color AS rcolor, r.base_rate AS rbase, r.hourly_rate AS rhourly, r.capacity AS rcapacity
                           FROM bookings b LEFT JOIN rooms r ON r.id = b.room_id WHERE b.status = 'Pending' ORDER BY b.booking_date, b.id LIMIT 50");
    $live = [];
    $free_now = 0;
    $next_up = null;
    foreach ($rooms as $r) {
        $cur = null; $nxt = null;
        foreach ($today_list as $b) {
            if ((int) $b['room_id'] !== (int) $r['id']) continue;
            if ($b['start_time'] <= $now_time && $b['end_time'] > $now_time) $cur = $b;
            elseif ($b['start_time'] > $now_time && !$nxt) $nxt = $b;
        }
        if (!$cur) $free_now++;
        if ($nxt && (!$next_up || $nxt['start_time'] < $next_up['start_time'])) $next_up = $nxt;
        $live[] = ['room' => $r, 'cur' => $cur, 'next' => $nxt];
    }
    $booked_days = [];
    foreach (db_all("SELECT b.room_id, b.booking_date, b.end_date FROM bookings b WHERE b.booking_date <= ? AND b.end_date >= ? AND " . SQL_BLOCKING, [$month_end, $month_start]) as $x) {
        $d = new DateTime(max($x['booking_date'], $month_start));
        $e = new DateTime(min($x['end_date'], $month_end));
        for (; $d <= $e; $d->modify('+1 day')) $booked_days[(int) $x['room_id']][$d->format('Y-m-d')] = 1;
    }
    $dim = (int) date('t');
    $first = explode(' ', trim($me))[0];
?>
    <div class="row g-4">
        <div class="col-12 fade-up">
            <section class="hero">
                <div class="eyebrow"><span class="msi">wb_sunny</span><?= date('l, d F Y') ?></div>
                <h2><?= h($greeting) ?>, <span class="grad-text"><?= h($first) ?></span></h2>
                <p>
                    <?php if ($rooms): ?>
                        <?= count($today_list) ?> booking<?= count($today_list) === 1 ? '' : 's' ?> today · <?= $free_now ?> of <?= count($rooms) ?> spaces free right now<?= $next_up ? ' · next up ' . h(fmt_time($next_up['start_time'])) . ' in ' . h($next_up['rname']) : '' ?>.
                    <?php else: ?>
                        Add your first room or hall to start taking bookings.
                    <?php endif; ?>
                </p>
                <div class="hero-actions">
                    <?php if ($pending_count): ?><a href="#queue" class="btn btn-brand"><span class="msi">inbox</span> Review <?= $pending_count ?> request<?= $pending_count > 1 ? 's' : '' ?></a><?php endif; ?>
                    <?php if ($rooms): ?>
                        <a href="?view=new" class="btn <?= $pending_count ? 'btn-glass' : 'btn-brand' ?>"><span class="msi">add</span> New booking</a>
                        <a href="?view=daily_view" class="btn btn-glass"><span class="msi">view_day</span> Today's schedule</a>
                        <a href="?view=monthly_planner" class="btn btn-glass d-none d-md-inline-flex"><span class="msi">calendar_month</span> Monthly planner</a>
                    <?php else: ?>
                        <a href="?view=settings&tab=rooms" class="btn btn-brand"><span class="msi">meeting_room</span> Add a room</a>
                    <?php endif; ?>
                </div>
            </section>
        </div>

        <div class="col-6 col-xl-3 fade-up"><a href="#queue" class="kpi">
            <div class="kpi-top"><span class="kpi-label">Requests to review</span><span class="kpi-icon solar"><span class="msi">inbox</span></span></div>
            <div class="kpi-value"><?= $pending_count ?></div>
            <div class="kpi-foot"><?= $pending_count ? 'Waiting for approval' : 'Inbox zero' ?> <span class="msi sm">arrow_downward</span></div></a></div>
        <div class="col-6 col-xl-3 fade-up"><a href="?view=reports&filter=today" class="kpi">
            <div class="kpi-top"><span class="kpi-label">Approved today</span><span class="kpi-icon"><span class="msi">today</span></span></div>
            <div class="kpi-value"><?= count($today_list) ?></div>
            <div class="kpi-foot">View today's log <span class="msi sm">arrow_forward</span></div></a></div>
        <div class="col-6 col-xl-3 fade-up"><a href="?view=reports&filter=month&status=Approved" class="kpi">
            <div class="kpi-top"><span class="kpi-label">Approved this month</span><span class="kpi-icon dark"><span class="msi">calendar_month</span></span></div>
            <div class="kpi-value"><?= $stats_month ?></div>
            <div class="kpi-foot"><?= date('F') ?> log <span class="msi sm">arrow_forward</span></div></a></div>
        <div class="col-6 col-xl-3 fade-up"><a href="?view=reports&pay=due" class="kpi">
            <div class="kpi-top"><span class="kpi-label">Outstanding</span><span class="kpi-icon red"><span class="msi">account_balance_wallet</span></span></div>
            <div class="kpi-value"><small>Rs.</small><?= nformat(max(0, (float) $due['amt'])) ?></div>
            <div class="kpi-foot"><?= (int) $due['c'] ?> booking<?= (int) $due['c'] === 1 ? '' : 's' ?> to follow up <span class="msi sm">arrow_forward</span></div></a></div>

        <!-- Pending approval queue -->
        <div class="col-12 fade-up" id="queue">
            <div class="lf-card">
                <div class="card-head">
                    <span class="icon-tile solar"><span class="msi">inbox</span></span>
                    <div><h3 class="card-title">Pending <em>approval</em></h3><p class="card-sub">Set the price, add remarks, then approve or decline — the client is emailed automatically.</p></div>
                    <?php if ($pending_count): ?><div class="actions"><span class="lf-badge b-pend"><span class="msi">hourglass_top</span><?= $pending_count ?> waiting</span></div><?php endif; ?>
                </div>
                <?php foreach ($pending as $p):
                    $pj = review_payload($p); ?>
                    <div class="queue-row">
                        <div class="queue-who">
                            <span class="avatar"><?= h(initials($p['guest_name'])) ?></span>
                            <div class="min-w-0">
                                <div class="fw-600 text-truncate"><?= h($p['guest_name']) ?> <span class="ref ms-1"><?= h(booking_ref($p['id'])) ?></span></div>
                                <div class="small text-muted text-truncate"><?= h($p['guest_email']) ?> · <?= h($p['guest_phone']) ?></div>
                                <?php if ($p['created_at']): ?><div class="small text-faint">Requested <?= h(fmt_date($p['created_at'], 'd M, g:i A')) ?></div><?php endif; ?>
                            </div>
                        </div>
                        <div class="min-w-0">
                            <span class="room-pill"><?= room_dot($p['rcolor']) ?><?= h($p['rname']) ?></span>
                            <div class="small fw-600 mt-1"><?= h(fmt_range($p['booking_date'], $p['end_date'])) ?> · <?= h(fmt_time($p['start_time'])) ?> – <?= h(fmt_time($p['end_time'])) ?></div>
                            <?php if ($p['purpose'] || $p['attendees']): ?><div class="small text-muted"><?= h($p['purpose'] ?: '') ?><?= $p['attendees'] ? ($p['purpose'] ? ' · ' : '') . (int) $p['attendees'] . ' guests' : '' ?></div><?php endif; ?>
                            <?php if ($pj['clash']): ?><span class="clash"><span class="msi sm">event_busy</span>Clashes with <?= h($pj['clash_name']) ?></span>
                            <?php elseif ($pj['rivals']): ?><span class="clash soft"><span class="msi sm">group</span>Also requested by <?= $pj['rivals'] ?> other<?= $pj['rivals'] > 1 ? 's' : '' ?></span><?php endif; ?>
                        </div>
                        <div class="d-flex gap-2 justify-content-md-end">
                            <button class="btn btn-forest" data-review='<?= h(json_encode($pj)) ?>'><span class="msi">fact_check</span> Review</button>
                            <?php if ($p['guest_phone']): ?><a class="btn btn-soft btn-icon" target="_blank" rel="noopener" title="Message on WhatsApp" aria-label="Message on WhatsApp"
                               href="<?= h(wa_link($p['guest_phone'], 'Hello ' . $p['guest_name'] . ', we received your ' . COMPANY_SHORT . ' booking request for ' . $p['rname'] . '. Our team is reviewing it and will confirm shortly.')) ?>"><span class="msi">chat</span></a><?php endif; ?>
                            <a class="btn btn-ghost btn-icon" href="?view=booking&id=<?= (int) $p['id'] ?>" title="Open" aria-label="Open request"><span class="msi">arrow_forward</span></a>
                        </div>
                    </div>
                <?php endforeach; ?>
                <?php if (!$pending): ?><div class="empty"><span class="msi">done_all</span><b>Inbox zero!</b>All caught up — no requests waiting for approval.</div><?php endif; ?>
            </div>
        </div>

        <div class="col-xl-7 fade-up">
            <div class="lf-card h-100">
                <div class="card-head">
                    <span class="icon-tile"><span class="msi">event_note</span></span>
                    <div><h3 class="card-title">Today's <em>schedule</em></h3><p class="card-sub"><?= date('l, d M') ?> · <?= count($today_list) ?> booking<?= count($today_list) === 1 ? '' : 's' ?></p></div>
                    <div class="actions"><a href="?view=daily_view" class="btn btn-ghost btn-sm"><span class="msi">view_day</span> Timeline</a></div>
                </div>
                <?php if ($today_list): foreach ($today_list as $b):
                    $ts = time_status(['booking_date' => $today_date, 'end_date' => $today_date, 'start_time' => $b['start_time'], 'end_time' => $b['end_time']]); ?>
                    <a class="list-row" href="?view=booking&id=<?= (int) $b['id'] ?>">
                        <div class="time-box"><b><?= h(fmt_time($b['start_time'])) ?></b><small>to <?= h(fmt_time($b['end_time'])) ?></small></div>
                        <div class="row-main">
                            <div class="t"><?= h($b['guest_name']) ?></div>
                            <div class="s d-flex align-items-center gap-2"><?= room_dot($b['rcolor']) ?><?= h($b['rname']) ?><?= $b['purpose'] ? ' · ' . h($b['purpose']) : '' ?><?= $b['attendees'] ? ' · ' . (int) $b['attendees'] . ' guests' : '' ?></div>
                        </div>
                        <div class="d-flex flex-column align-items-end gap-1"><?= badge($ts) ?><?= $b['status'] === 'Tentative' ? badge('Tentative') : '' ?></div>
                    </a>
                <?php endforeach; else: ?>
                    <div class="empty"><span class="msi">event_available</span><b>No bookings today</b>All spaces are free. <a href="?view=new">Create a booking</a>.</div>
                <?php endif; ?>
            </div>
        </div>

        <div class="col-xl-5 d-flex flex-column gap-4 fade-up">
            <div class="lf-card">
                <div class="card-head">
                    <span class="icon-tile dark"><span class="msi">sensors</span></span>
                    <div><h3 class="card-title">Spaces <em>right now</em></h3><p class="card-sub">As of <?= date('g:i A') ?></p></div>
                    <div class="actions"><a href="?view=new" class="btn btn-soft btn-sm"><span class="msi">bolt</span> Book now</a></div>
                </div>
                <?php if (!$live): ?><div class="empty"><span class="msi">meeting_room</span><b>No rooms yet</b><a href="?view=settings&tab=rooms">Add rooms</a> to start.</div><?php endif; ?>
                <?php foreach ($live as $L): $r = $L['room']; ?>
                    <div class="room-status">
                        <span class="pulse <?= $L['cur'] ? 'busy' : '' ?>"></span>
                        <div class="row-main">
                            <div class="t"><?= h($r['name']) ?></div>
                            <div class="s">
                                <?php if ($L['cur']): ?>In use by <b><?= h($L['cur']['guest_name']) ?></b> until <?= h(fmt_time($L['cur']['end_time'])) ?>
                                <?php elseif ($L['next']): ?>Free · next booking at <?= h(fmt_time($L['next']['start_time'])) ?>
                                <?php else: ?>Free for the rest of today<?php endif; ?>
                            </div>
                        </div>
                        <?php if ($L['cur']): ?>
                            <a href="?view=booking&id=<?= (int) $L['cur']['id'] ?>" class="btn btn-ghost btn-sm">View</a>
                        <?php else: ?>
                            <a href="?view=new&room_id=<?= (int) $r['id'] ?>&sd=<?= $today_date ?>&ed=<?= $today_date ?>&st=<?= date('H:00', strtotime('+1 hour')) ?>&et=<?= date('H:00', strtotime('+2 hours')) ?>" class="btn btn-soft btn-sm">Book</a>
                        <?php endif; ?>
                    </div>
                <?php endforeach; ?>
            </div>

            <div class="lf-card">
                <div class="card-head">
                    <span class="icon-tile solar"><span class="msi">insights</span></span>
                    <div><h3 class="card-title">Utilisation · <em><?= date('F') ?></em></h3><p class="card-sub">Days with at least one approved booking</p></div>
                    <div class="actions"><a href="<?= h(LINK_REVENUE) ?>" class="btn btn-ghost btn-sm"><span class="msi">monitoring</span> Revenue</a></div>
                </div>
                <div class="py-2">
                    <?php foreach ($rooms as $r): $n = count($booked_days[(int) $r['id']] ?? []); $pct = $dim ? round($n / $dim * 100) : 0; ?>
                        <div class="meter-row">
                            <div class="meter-top"><span class="d-flex align-items-center gap-2 fw-600"><?= room_dot($r['color']) ?><?= h($r['name']) ?></span><span class="text-muted tabular"><?= $n ?> / <?= $dim ?> days · <b class="text-dark"><?= $pct ?>%</b></span></div>
                            <div class="meter" role="img" aria-label="<?= h($r['name']) ?> booked <?= $pct ?> percent of days"><span style="width:<?= $pct ?>%"></span></div>
                        </div>
                    <?php endforeach; ?>
                    <?php if (!$rooms): ?><div class="empty py-3">No rooms yet.</div><?php endif; ?>
                </div>
            </div>
        </div>

        <div class="col-12 fade-up">
            <div class="lf-card">
                <div class="card-head">
                    <span class="icon-tile"><span class="msi">upcoming</span></span>
                    <div><h3 class="card-title">Coming <em>up</em></h3><p class="card-sub">Next 7 days</p></div>
                    <div class="actions"><a href="?view=reports&filter=upcoming" class="btn btn-ghost btn-sm">All upcoming <span class="msi">arrow_forward</span></a></div>
                </div>
                <?php if ($upcoming): ?>
                    <div class="row g-0">
                    <?php foreach ($upcoming as $b): $t = booking_totals($b); ?>
                        <div class="col-md-6"><a class="list-row" href="?view=booking&id=<?= (int) $b['id'] ?>">
                            <div class="date-box"><b><?= date('d', strtotime($b['booking_date'])) ?></b><small><?= date('M', strtotime($b['booking_date'])) ?></small></div>
                            <div class="row-main">
                                <div class="t"><?= h($b['guest_name']) ?></div>
                                <div class="s d-flex align-items-center gap-2"><?= room_dot($b['rcolor']) ?><?= h($b['rname']) ?> · <?= h(date('D', strtotime($b['booking_date']))) ?> <?= h(fmt_time($b['start_time'])) ?><?= $t['days'] > 1 ? ' · ' . $t['days'] . ' days' : '' ?></div>
                            </div>
                            <?= $b['status'] === 'Tentative' ? badge('Tentative') : badge(pay_status($t)) ?>
                        </a></div>
                    <?php endforeach; ?>
                    </div>
                <?php else: ?>
                    <div class="empty"><span class="msi">event_upcoming</span><b>Nothing booked for the next 7 days</b>A good time to follow up with regular clients.</div>
                <?php endif; ?>
            </div>
        </div>
    </div>

    <?php render_review_modal('?view=dashboard#queue'); ?>

<?php
// =====================================================================
// VIEW: CLIENT DASHBOARD (my requests, etiquette, policies)
// =====================================================================
elseif ($view === 'dashboard'):
    $mine = db_all("SELECT b.*, r.name AS rname, r.color AS rcolor FROM bookings b LEFT JOIN rooms r ON r.id = b.room_id
                    WHERE LOWER(b.guest_email) = ? ORDER BY b.booking_date DESC, b.id DESC LIMIT 30", [strtolower($client['email'])]);
    $n_pending = 0; $n_upcoming = 0;
    foreach ($mine as $m) {
        if ($m['status'] === 'Pending') $n_pending++;
        if (is_blocking($m['status']) && $m['end_date'] >= $today_date) $n_upcoming++;
    }
    $first = explode(' ', trim($me))[0];
    $policy_icons = ['door_open', 'warning', 'groups', 'schedule'];
?>
    <div class="row g-4">
        <div class="col-12 fade-up">
            <section class="hero">
                <div class="eyebrow"><span class="msi">wb_sunny</span><?= date('l, d F Y') ?></div>
                <h2><?= h($greeting) ?>, <span class="grad-text"><?= h($first) ?></span></h2>
                <p>Experience the productivity hub in Dillibazar — high-speed internet, ergonomic setups, networking opportunities and great coffee, waiting for you.</p>
                <div class="hero-chips">
                    <span class="hero-chip"><span class="msi">hourglass_top</span><?= $n_pending ?> awaiting review</span>
                    <span class="hero-chip"><span class="msi">event_available</span><?= $n_upcoming ?> upcoming</span>
                </div>
                <div class="hero-actions">
                    <a href="?view=new" class="btn btn-brand"><span class="msi">add</span> Reserve your spot</a>
                    <a href="<?= h(LINK_BULK) ?>" class="btn btn-glass"><span class="msi">library_add</span> Bulk booking</a>
                </div>
            </section>
        </div>

        <div class="col-12 fade-up" id="my-requests">
            <div class="lf-card">
                <div class="card-head">
                    <span class="icon-tile"><span class="msi">history</span></span>
                    <div><h3 class="card-title">My <em>requests</em></h3><p class="card-sub">Requests and bookings made with <?= h($client['email']) ?></p></div>
                    <div class="actions"><a href="?view=new" class="btn btn-soft btn-sm"><span class="msi">add</span> New request</a></div>
                </div>
                <?php foreach ($mine as $m): $up = $m['end_date'] >= $today_date; ?>
                    <div class="list-row align-items-start req-row">
                        <div class="date-box"><b><?= date('d', strtotime($m['booking_date'])) ?></b><small><?= date('M', strtotime($m['booking_date'])) ?></small></div>
                        <div class="row-main">
                            <div class="t d-flex flex-wrap align-items-center gap-2"><?= h($m['rname']) ?> <span class="ref"><?= h(booking_ref($m['id'])) ?></span></div>
                            <div class="s"><?= h(fmt_range($m['booking_date'], $m['end_date'])) ?> · <?= h(fmt_time($m['start_time'])) ?> – <?= h(fmt_time($m['end_time'])) ?><?= $m['purpose'] ? ' · ' . h($m['purpose']) : '' ?></div>
                            <?php if ($m['admin_remarks'] && in_array($m['status'], ['Approved', 'Tentative', 'Rejected'], true)): ?>
                                <div class="remark-box mt-2 <?= $m['status'] === 'Rejected' ? 'red' : '' ?>"><b><?= $m['status'] === 'Rejected' ? 'Reason' : 'Note from our team' ?>:</b> <?= h($m['admin_remarks']) ?></div>
                            <?php endif; ?>
                        </div>
                        <div class="d-flex flex-column align-items-end gap-2 req-actions">
                            <?= status_badge((string) $m['status']) ?>
                            <?php if (is_blocking($m['status']) && $up): ?>
                                <a href="?download_ics=<?= (int) $m['id'] ?>" class="btn btn-ghost btn-sm"><span class="msi">calendar_add_on</span> Add to calendar</a>
                            <?php elseif ($m['status'] === 'Pending'): ?>
                                <form method="POST" data-confirm="Withdraw this request? You can always send a new one."><?= csrf_field() ?><input type="hidden" name="action" value="client_cancel"><input type="hidden" name="booking_id" value="<?= (int) $m['id'] ?>">
                                    <button class="btn btn-ghost btn-sm"><span class="msi">undo</span> Withdraw</button></form>
                            <?php endif; ?>
                        </div>
                    </div>
                <?php endforeach; ?>
                <?php if (!$mine): ?><div class="empty"><span class="msi">folder_open</span><b>No requests yet</b><a href="?view=new">Book your first space</a> — it only takes a minute.</div><?php endif; ?>
            </div>
        </div>

        <div class="col-lg-6 fade-up">
            <div class="lf-card h-100">
                <div class="card-head"><span class="icon-tile"><span class="msi">handshake</span></span><div><h3 class="card-title">Workspace <em>etiquette</em></h3><p class="card-sub">Help us keep Connect a great place to work</p></div></div>
                <div class="card-body-pad">
                    <div class="eyebrow mb-2" style="color:var(--ok)">Do's</div>
                    <ul class="rule-list do mb-4"><?php foreach (ETIQUETTE_DO as $x): ?><li><span class="msi">check_circle</span><?= h($x) ?></li><?php endforeach; ?></ul>
                    <div class="eyebrow mb-2" style="color:var(--bad)">Don'ts</div>
                    <ul class="rule-list dont"><?php foreach (ETIQUETTE_DONT as $x): ?><li><span class="msi">cancel</span><?= h($x) ?></li><?php endforeach; ?></ul>
                </div>
            </div>
        </div>
        <div class="col-lg-6 fade-up">
            <div class="lf-card h-100">
                <div class="card-head"><span class="icon-tile dark"><span class="msi">verified_user</span></span><div><h3 class="card-title">General <em>policies</em></h3><p class="card-sub">Applies to every booking</p></div></div>
                <div class="card-body-pad">
                    <ul class="rule-list"><?php foreach (TERMS as $i => $x): ?><li><span class="msi" style="color:var(--lf-forest)"><?= $policy_icons[$i] ?? 'info' ?></span><?= h($x) ?></li><?php endforeach; ?></ul>
                    <div class="remark-box mt-3"><b>Please note:</b> <?= h(FACILITY_NOTE) ?></div>
                    <div class="d-flex flex-wrap gap-2 mt-3">
                        <a class="btn btn-ghost btn-sm" href="tel:<?= h(COMPANY_PHONE) ?>"><span class="msi">call</span> <?= h(COMPANY_PHONE) ?></a>
                        <a class="btn btn-ghost btn-sm" href="mailto:<?= h(COMPANY_EMAIL) ?>"><span class="msi">mail</span> <?= h(COMPANY_EMAIL) ?></a>
                    </div>
                </div>
            </div>
        </div>
    </div>

<?php
// =====================================================================
// VIEW: NEW BOOKING / BOOK A SPACE (live availability)
// =====================================================================
elseif ($view === 'new'):
    $sd = valid_date($_GET['sd'] ?? '', $today_date);
    if (!$is_staff && $sd < $today_date) $sd = $today_date;
    $ed = valid_date($_GET['ed'] ?? '', $sd);
    if ($ed < $sd) $ed = $sd;
    $st = valid_time($_GET['st'] ?? '', '09:00');
    $et = valid_time($_GET['et'] ?? '', '18:00');
    if ($et <= $st) $et = date('H:i', strtotime($st) + 3600);
    $old = $_SESSION['old_booking'] ?? null;
    unset($_SESSION['old_booking']);
    $new_cfg = ['sd' => $sd, 'ed' => $ed, 'st' => $st, 'et' => $et, 'room' => (int) ($old['room_id'] ?? ($_GET['room_id'] ?? 0)), 'old' => $old,
                'staff' => $is_staff, 'today' => $today_date, 'guests' => $is_staff ? guest_directory() : [],
                'initial' => availability($sd, $ed, $st, $et, 0, $is_staff)];
?>
    <div class="row g-4">
        <div class="col-lg-5 col-xl-4">
            <div class="lf-card when-card fade-up">
                <div class="card-head">
                    <span class="icon-tile dark"><span class="msi">event</span></span>
                    <div><h3 class="card-title">When<em>?</em></h3><p class="card-sub">Dates &amp; time window</p></div>
                </div>
                <form id="whenForm" class="card-body-pad" onsubmit="return false">
                    <div class="row g-2">
                        <div class="col-6 col-lg-12 col-xxl-6"><label class="form-label" for="w_sd">Check-in date</label><input type="date" class="form-control" id="w_sd" value="<?= h($sd) ?>" <?= $is_staff ? '' : 'min="' . $today_date . '"' ?>></div>
                        <div class="col-6 col-lg-12 col-xxl-6"><label class="form-label" for="w_ed">Check-out date</label><input type="date" class="form-control" id="w_ed" value="<?= h($ed) ?>" <?= $is_staff ? '' : 'min="' . $today_date . '"' ?>></div>
                    </div>
                    <div class="chip-row mt-2">
                        <button type="button" class="chip" data-day="0">Today</button>
                        <button type="button" class="chip" data-day="1">Tomorrow</button>
                        <button type="button" class="chip" data-span="2">2 days</button>
                        <button type="button" class="chip" data-span="5">5 days</button>
                    </div>
                    <div class="row g-2 mt-2">
                        <div class="col-6"><label class="form-label" for="w_st">Time in</label><input type="time" class="form-control" id="w_st" value="<?= h($st) ?>" step="900"></div>
                        <div class="col-6"><label class="form-label" for="w_et">Time out</label><input type="time" class="form-control" id="w_et" value="<?= h($et) ?>" step="900"></div>
                    </div>
                    <div class="chip-row mt-2">
                        <button type="button" class="chip" data-st="09:00" data-et="18:00"><span class="msi">wb_sunny</span>Full day</button>
                        <button type="button" class="chip" data-st="09:00" data-et="13:00">Morning</button>
                        <button type="button" class="chip" data-st="13:00" data-et="17:00">Afternoon</button>
                        <button type="button" class="chip" data-st="17:00" data-et="21:00"><span class="msi">nights_stay</span>Evening</button>
                    </div>
                    <div class="divider"></div>
                    <div class="sel-summary" id="whenSummary"></div>
                    <p class="form-text mt-3 mb-0 d-flex gap-1"><span class="msi sm">info</span><?= $is_staff ? 'Spaces refresh as you change the dates or times. Pending requests never block a slot.' : 'Spaces refresh as you change the dates or times. Our team confirms every request.' ?></p>
                </form>
            </div>
        </div>
        <div class="col-lg-7 col-xl-8">
            <div class="d-flex flex-wrap align-items-center justify-content-between gap-2 mb-3">
                <div>
                    <h2 class="font-title m-0" style="font-size:26px;color:var(--lf-evergreen)">Choose a <em>space</em></h2>
                    <div class="text-muted small" id="availCount">Checking availability…</div>
                </div>
                <div class="form-check form-switch m-0">
                    <input class="form-check-input" type="checkbox" id="showBooked" checked>
                    <label class="form-check-label small fw-600" for="showBooked">Show booked spaces</label>
                </div>
            </div>
            <div class="alert alert-warning d-none align-items-center gap-2" id="availError"><span class="msi">warning</span><span></span></div>
            <div class="row g-3" id="roomGrid">
                <div class="col-md-6 room-col"><div class="skeleton"></div></div>
                <div class="col-md-6 room-col"><div class="skeleton"></div></div>
            </div>
        </div>
    </div>

    <!-- Booking / request form (filled by JS for the selected space) -->
    <div class="modal fade" id="bookModal" tabindex="-1" aria-labelledby="bookModalTitle" aria-hidden="true">
        <div class="modal-dialog modal-xl modal-dialog-centered modal-dialog-scrollable modal-fullscreen-lg-down">
            <form method="POST" class="modal-content" id="bookForm" autocomplete="off" data-verify="1">
                <?= csrf_field() ?>
                <input type="hidden" name="action" value="create_booking">
                <input type="hidden" name="room_id" id="f_room">
                <input type="hidden" name="start_date" id="f_sd">
                <input type="hidden" name="end_date" id="f_ed">
                <input type="hidden" name="s_time" id="f_st">
                <input type="hidden" name="e_time" id="f_et">
                <div class="modal-header">
                    <div>
                        <h5 class="modal-title" id="bookModalTitle"><?= $is_staff ? 'Book' : 'Request' ?> <em>space</em></h5>
                        <div class="sel-summary mt-2" id="modalSummary"></div>
                    </div>
                    <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
                </div>
                <div class="modal-body">
                    <div class="row g-4">
                        <div class="col-lg-8">
                            <?php if (!$is_staff): ?>
                                <div class="remark-box mb-3 d-flex gap-2"><span class="msi sm">info</span><span>Your request goes to the <?= h(COMPANY_SHORT) ?> team for review and pricing. We will email you at <b><?= h($client['email']) ?></b> as soon as it is approved.</span></div>
                            <?php endif; ?>
                            <div class="form-section"><span class="msi sm">person</span><?= $is_staff ? 'Guest' : 'Your details' ?></div>
                            <div class="row g-3">
                                <div class="col-md-6">
                                    <label class="form-label" for="g_name"><?= $is_staff ? 'Guest / organisation name' : 'Name or organisation' ?> <span class="req">*</span></label>
                                    <input type="text" name="g_name" id="g_name" class="form-control" <?= $is_staff ? 'list="guestList" placeholder="Start typing — past guests auto-fill"' : 'value="' . h($client['name']) . '"' ?> required>
                                    <?php if ($is_staff): ?><span class="guest-hint" id="guestHint"><span class="msi sm">history</span>Returning guest — details filled in</span><?php endif; ?>
                                </div>
                                <div class="col-md-6"><label class="form-label" for="g_phone">Phone <span class="req">*</span></label><input type="tel" name="g_phone" id="g_phone" class="form-control" required placeholder="98XXXXXXXX" value="<?= $is_staff ? '' : h($client['phone'] ?? '') ?>"></div>
                                <div class="col-md-6"><label class="form-label" for="g_email">Email<?= $is_staff ? '' : ' <span class="req">*</span>' ?></label>
                                    <input type="email" name="g_email" id="g_email" class="form-control" <?= $is_staff ? 'placeholder="for the confirmation email"' : 'value="' . h($client['email']) . '" readonly' ?>></div>
                                <div class="col-md-6"><label class="form-label" for="g_pan">PAN / VAT no.</label><input type="text" name="g_pan" id="g_pan" class="form-control" placeholder="for invoices"></div>
                                <div class="col-12"><label class="form-label" for="g_address">Address</label><input type="text" name="g_address" id="g_address" class="form-control" placeholder="Street, city"></div>
                            </div>
                            <div class="form-section mt-4"><span class="msi sm">celebration</span>Event</div>
                            <div class="row g-3">
                                <div class="col-md-<?= $is_staff ? 5 : 8 ?>"><label class="form-label" for="purpose">Purpose</label><input type="text" name="purpose" id="purpose" class="form-control" list="purposeList" placeholder="e.g. Training / Workshop"></div>
                                <div class="col-md-<?= $is_staff ? 3 : 4 ?>"><label class="form-label" for="attendees">Guests</label><input type="number" min="0" name="attendees" id="attendees" class="form-control" placeholder="0"><div class="cap-warn" id="capWarn"></div></div>
                                <?php if ($is_staff): ?>
                                <div class="col-md-4"><label class="form-label" for="status">Status</label>
                                    <select name="status" id="status" class="form-select"><option value="Approved">Approved (confirmed)</option><option value="Tentative">Tentative (on hold)</option></select></div>
                                <?php endif; ?>
                            </div>
                            <?php if ($is_staff): ?>
                            <div class="form-section mt-4"><span class="msi sm">sell</span>Pricing &amp; payment</div>
                            <div class="row g-3">
                                <div class="col-md-4"><label class="form-label" for="rate_type">Rate basis</label>
                                    <select name="rate_type" id="rate_type" class="form-select"><?php foreach (RATE_TYPES as $k => $v): ?><option value="<?= $k ?>"><?= h($v) ?></option><?php endforeach; ?></select></div>
                                <div class="col-md-4"><label class="form-label" for="custom_rate">Rate (Rs.)</label><input type="number" step="0.01" min="0" name="custom_rate" id="custom_rate" class="form-control fw-600"></div>
                                <div class="col-md-4"><label class="form-label" for="discount">Discount (Rs.)</label><input type="number" step="0.01" min="0" name="discount" id="discount" class="form-control" value="0"></div>
                                <div class="col-md-4"><label class="form-label" for="advance">Advance received (Rs.)</label><input type="number" step="0.01" min="0" name="advance" id="advance" class="form-control" value="0"></div>
                                <div class="col-md-4"><label class="form-label" for="advance_method">Paid via</label>
                                    <select name="advance_method" id="advance_method" class="form-select"><?php foreach (PAY_METHODS as $m): ?><option><?= h($m) ?></option><?php endforeach; ?></select></div>
                            </div>
                            <?php endif; ?>
                            <div class="form-section mt-4"><span class="msi sm">sticky_note_2</span>Notes</div>
                            <textarea name="notes" id="notes" rows="2" class="form-control" placeholder="Setup needs, equipment (projector, sound), contact person…"></textarea>
                            <?php if ($is_staff): ?>
                                <label class="form-label mt-3" for="admin_remarks">Remarks to the guest <span class="text-faint fw-normal">(shown in the email)</span></label>
                                <input type="text" name="admin_remarks" id="admin_remarks" class="form-control" placeholder="e.g. Please arrive 15 minutes early for setup">
                                <div class="form-check mt-3 p-3 ps-5 rounded-3" style="background:var(--lf-lime-tint);border:1px solid #CFEABB">
                                    <input class="form-check-input" type="checkbox" name="send_email" id="send_email" value="1" checked>
                                    <label class="form-check-label fw-600" for="send_email">Email the branded confirmation to the guest</label>
                                    <div class="form-text" id="emailHint">Needs a guest email address.</div>
                                </div>
                            <?php endif; ?>
                        </div>
                        <div class="col-lg-4">
                            <div class="price-box" style="position:sticky;top:0">
                                <?php if ($is_staff): ?>
                                    <div class="eyebrow" style="color:rgba(255,255,255,.55)">Price summary</div>
                                    <div class="mt-2" id="priceLines"></div>
                                    <div class="price-line price-total"><span>Total payable</span><b id="priceGrand">Rs. 0</b></div>
                                    <div class="price-line"><span>Advance</span><b id="priceAdv">Rs. 0</b></div>
                                    <div class="price-line"><span>Balance due</span><b id="priceBal">Rs. 0</b></div>
                                    <div class="price-note">VAT <?= VAT_RATE ?>% shown for reference; the booking stores the amount before VAT, as before.</div>
                                <?php else: ?>
                                    <div class="eyebrow" style="color:rgba(255,255,255,.55)">Your request</div>
                                    <div class="mt-2" id="requestLines"></div>
                                    <div class="price-note">Pricing is confirmed by our team when your request is approved.</div>
                                <?php endif; ?>
                            </div>
                        </div>
                    </div>
                </div>
                <div class="modal-footer">
                    <button type="button" class="btn btn-ghost" data-bs-dismiss="modal">Cancel</button>
                    <button type="submit" class="btn btn-brand btn-lg" id="bookSubmit"><span class="msi"><?= $is_staff ? 'check_circle' : 'send' ?></span> <?= $is_staff ? 'Confirm booking' : 'Send request' ?></button>
                </div>
            </form>
        </div>
    </div>
    <?php if ($is_staff): ?><datalist id="guestList"><?php foreach ($new_cfg['guests'] as $g): ?><option value="<?= h($g['n']) ?>"><?php endforeach; ?></datalist><?php endif; ?>
    <datalist id="purposeList"><?php foreach (PURPOSES as $p): ?><option value="<?= h($p) ?>"><?php endforeach; ?></datalist>
    <script>window.LFH_NEW = <?= js_data($new_cfg) ?>;</script>
<?php
// =====================================================================
// VIEW: DAILY SCHEDULE (timeline)
// =====================================================================
elseif ($view === 'daily_view'):
    $sel      = valid_date($_GET['d_date'] ?? '', $today_date);
    $rooms    = get_rooms();
    $day_b    = db_all("SELECT b.*, r.name AS rname, r.color AS rcolor FROM bookings b LEFT JOIN rooms r ON r.id = b.room_id
                        WHERE ? BETWEEN b.booking_date AND b.end_date AND b.status IN ('Approved','Tentative','Pending') ORDER BY b.start_time, b.room_id", [$sel]);
    $by_room  = [];
    foreach ($day_b as $b) $by_room[(int) $b['room_id']][] = $b;
    $H0 = DAY_START_HOUR; $H1 = DAY_END_HOUR; $HP = 64;
    $prev     = date('Y-m-d', strtotime($sel . ' -1 day'));
    $next     = date('Y-m-d', strtotime($sel . ' +1 day'));
    $is_today = $sel === $today_date;
    $now_min  = (int) date('G') * 60 + (int) date('i');
    $free_rooms = 0;
    $n_blocking = 0;
    foreach ($day_b as $b) if (is_blocking($b['status'])) $n_blocking++;
    foreach ($rooms as $r) {
        $busy = false;
        foreach ($by_room[(int) $r['id']] ?? [] as $b) if (is_blocking($b['status'])) $busy = true;
        if (!$busy) $free_rooms++;
    }
    $n_pending_day = count($day_b) - $n_blocking;
    $mins = function ($t) { $p = explode(':', (string) $t); return (int) $p[0] * 60 + (int) ($p[1] ?? 0); };
?>
    <div class="lf-card pad mb-4 no-print fade-up">
        <div class="d-flex flex-wrap align-items-center gap-2">
            <a class="btn btn-ghost btn-icon" href="?view=daily_view&d_date=<?= $prev ?>" title="Previous day" aria-label="Previous day"><span class="msi">chevron_left</span></a>
            <form method="GET" class="m-0"><input type="hidden" name="view" value="daily_view">
                <input type="date" name="d_date" class="form-control fw-600" value="<?= h($sel) ?>" onchange="this.form.submit()" aria-label="Choose date" style="width:170px"></form>
            <a class="btn btn-ghost btn-icon" href="?view=daily_view&d_date=<?= $next ?>" title="Next day" aria-label="Next day"><span class="msi">chevron_right</span></a>
            <?php if (!$is_today): ?><a class="btn btn-soft btn-sm" href="?view=daily_view"><span class="msi">today</span> Today</a><?php endif; ?>
            <div class="ms-lg-3">
                <div class="font-title" style="font-size:24px;line-height:1;color:var(--lf-evergreen)"><?= h(date('l', strtotime($sel))) ?>, <em><?= h(date('d F Y', strtotime($sel))) ?></em></div>
                <div class="small text-muted mt-1"><?= $n_blocking ?> booking<?= $n_blocking === 1 ? '' : 's' ?> · <?= $free_rooms ?> of <?= count($rooms) ?> spaces free all day<?= $n_pending_day ? ' · <b class="text-dark">' . $n_pending_day . ' request' . ($n_pending_day > 1 ? 's' : '') . ' to review</b> (dashed)' : '' ?></div>
            </div>
            <div class="ms-auto d-flex gap-2">
                <button class="btn btn-ghost btn-sm" onclick="window.print()"><span class="msi">print</span> Print</button>
                <a class="btn btn-forest btn-sm" href="?view=new&sd=<?= $sel ?>&ed=<?= $sel ?>"><span class="msi">add</span> Book this day</a>
            </div>
        </div>
    </div>
    <div class="no-screen mb-3"><h3 class="font-title"><?= h(COMPANY_SHORT) ?> — schedule for <?= h(fmt_date($sel, 'l, d F Y')) ?></h3></div>

    <?php if (!$rooms): ?>
        <div class="lf-card"><div class="empty"><span class="msi">meeting_room</span><b>No rooms yet</b><a href="?view=settings&tab=rooms">Add your first room</a> to see the schedule.</div></div>
    <?php else: ?>
    <div class="lf-card mb-4 fade-up">
        <div class="sched-wrap" id="schedWrap">
            <div class="sched" style="--rooms:<?= count($rooms) ?>">
                <div class="sched-head">
                    <div class="sched-corner">Time</div>
                    <?php foreach ($rooms as $r): ?>
                        <div class="sched-room"><?= room_dot($r['color']) ?><div><b><?= h($r['name']) ?></b>
                            <small><?= $r['capacity'] ? (int) $r['capacity'] . ' seats · ' : '' ?><?= h(money($r['base_rate'])) ?>/day</small></div></div>
                    <?php endforeach; ?>
                </div>
                <div class="sched-body" style="position:relative">
                    <div class="sched-times">
                        <?php for ($hh = $H0; $hh < $H1; $hh++): ?><div class="sched-time"><?= date('g A', mktime($hh, 0)) ?></div><?php endfor; ?>
                    </div>
                    <?php foreach ($rooms as $r): $rid = (int) $r['id']; ?>
                        <div class="sched-col">
                            <?php for ($hh = $H0; $hh < $H1; $hh++):
                                $past = $sel < $today_date || ($is_today && ($hh + 1) * 60 <= $now_min); ?>
                                <a class="sched-slot <?= $past ? 'past' : '' ?>" href="?view=new&room_id=<?= $rid ?>&sd=<?= $sel ?>&ed=<?= $sel ?>&st=<?= sprintf('%02d:00', $hh) ?>&et=<?= sprintf('%02d:00', min(23, $hh + 1)) ?>"
                                   title="Book <?= h($r['name']) ?> at <?= date('g A', mktime($hh, 0)) ?>"><span class="msi sm">add</span> Book</a>
                            <?php endfor; ?>
                            <?php foreach ($by_room[$rid] ?? [] as $b):
                                $s = max($H0 * 60, $mins($b['start_time']));
                                $e = min($H1 * 60, $mins($b['end_time']));
                                if ($e <= $s) continue;
                                $top = ($s - $H0 * 60) / 60 * $HP + 2;
                                $hgt = max(30, ($e - $s) / 60 * $HP - 4); ?>
                                <a class="sched-event <?= strtolower($b['status']) ?>" href="?view=booking&id=<?= (int) $b['id'] ?>"
                                   style="top:<?= round($top) ?>px;height:<?= round($hgt) ?>px;--c:<?= h($b['rcolor'] ?: '#9BEF6B') ?>"
                                   title="<?= h(($b['status'] === 'Pending' ? 'Request · ' : '') . $b['guest_name'] . ' · ' . fmt_time($b['start_time']) . '–' . fmt_time($b['end_time'])) ?>">
                                    <b><?= $b['status'] === 'Pending' ? '<span class="msi sm">hourglass_top</span> ' : '' ?><?= h($b['guest_name']) ?></b>
                                    <small><?= h(fmt_time($b['start_time'])) ?> – <?= h(fmt_time($b['end_time'])) ?><?= $b['status'] === 'Tentative' ? ' · on hold' : ($b['status'] === 'Pending' ? ' · request' : '') ?></small>
                                    <?php if ($hgt > 70 && $b['purpose']): ?><small><?= h($b['purpose']) ?><?= $b['attendees'] ? ' · ' . (int) $b['attendees'] . ' guests' : '' ?></small><?php endif; ?>
                                </a>
                            <?php endforeach; ?>
                        </div>
                    <?php endforeach; ?>
                    <?php if ($is_today && $now_min >= $H0 * 60 && $now_min < $H1 * 60): ?>
                        <div class="sched-now" id="nowLine" data-label="<?= date('g:i') ?>" style="top:<?= round(($now_min - $H0 * 60) / 60 * $HP) ?>px"></div>
                    <?php endif; ?>
                </div>
            </div>
        </div>
    </div>
    <?php endif; ?>

    <div class="lf-card fade-up">
        <div class="card-head">
            <span class="icon-tile"><span class="msi">format_list_bulleted</span></span>
            <div><h3 class="card-title">Bookings on <em><?= h(date('d M', strtotime($sel))) ?></em></h3><p class="card-sub">Quick list for the front desk</p></div>
        </div>
        <?php if ($day_b): ?>
            <div class="table-responsive">
                <table class="lf-table">
                    <thead><tr><th>Time</th><th>Guest</th><th>Space</th><th>Purpose</th><th>Contact</th><th>Status</th></tr></thead>
                    <tbody>
                    <?php foreach ($day_b as $b): ?>
                        <tr data-href="?view=booking&id=<?= (int) $b['id'] ?>">
                            <td class="fw-600 text-nowrap"><?= h(fmt_time($b['start_time'])) ?> – <?= h(fmt_time($b['end_time'])) ?></td>
                            <td><div class="fw-600"><?= h($b['guest_name']) ?></div><span class="ref"><?= h(booking_ref($b['id'])) ?></span></td>
                            <td><span class="room-pill"><?= room_dot($b['rcolor']) ?><?= h($b['rname']) ?></span></td>
                            <td><?= h($b['purpose'] ?: '—') ?><?= $b['attendees'] ? '<div class="small text-muted">' . (int) $b['attendees'] . ' guests</div>' : '' ?></td>
                            <td class="small"><?= h($b['guest_phone']) ?><div class="text-muted"><?= h($b['guest_email']) ?></div></td>
                            <td><?= badge($b['status'] ?: 'Pending') ?></td>
                        </tr>
                    <?php endforeach; ?>
                    </tbody>
                </table>
            </div>
        <?php else: ?>
            <div class="empty"><span class="msi">event_available</span><b>Nothing booked</b>Every space is free on this day.</div>
        <?php endif; ?>
    </div>

<?php
// =====================================================================
// VIEW: MONTHLY PLANNER
// =====================================================================
elseif ($view === 'monthly_planner'):
    $month = (int) ($_GET['m'] ?? date('n'));
    $year  = (int) ($_GET['y'] ?? date('Y'));
    if (!empty($_GET['ym']) && preg_match('/^(\d{4})-(\d{2})$/', (string) $_GET['ym'], $mm)) { $year = (int) $mm[1]; $month = (int) $mm[2]; }
    if ($month < 1 || $month > 12) $month = (int) date('n');
    if ($year < 2000 || $year > 2100) $year = (int) date('Y');
    $room_filter = (int) ($_GET['room_id'] ?? 0);
    $rooms  = get_rooms();
    $first  = mktime(0, 0, 0, $month, 1, $year);
    $dim    = (int) date('t', $first);
    $lead   = (int) date('w', $first);
    $ms     = date('Y-m-01', $first);
    $me_    = date('Y-m-t', $first);
    $params = [$me_, $ms];
    $sqlr   = '';
    if ($room_filter) { $sqlr = ' AND b.room_id = ?'; $params[] = $room_filter; }
    $mrows  = db_all("SELECT b.id, b.room_id, b.guest_name, b.booking_date, b.end_date, b.start_time, b.end_time, b.status, r.name AS rname, r.color AS rcolor
                      FROM bookings b LEFT JOIN rooms r ON r.id = b.room_id
                      WHERE b.booking_date <= ? AND b.end_date >= ? AND b.status IN ('Approved','Tentative','Pending')" . $sqlr . " ORDER BY b.start_time, b.room_id", $params);
    $by_day = [];
    foreach ($mrows as $b) {
        $d = new DateTime(max($b['booking_date'], $ms));
        $e = new DateTime(min($b['end_date'], $me_));
        for (; $d <= $e; $d->modify('+1 day')) $by_day[$d->format('Y-m-d')][] = $b;
    }
    $pm = $month === 1 ? 12 : $month - 1; $py = $month === 1 ? $year - 1 : $year;
    $nm = $month === 12 ? 1 : $month + 1; $ny = $month === 12 ? $year + 1 : $year;
    $base = '?view=monthly_planner' . ($room_filter ? '&room_id=' . $room_filter : '');
    $busy_days = 0;
    foreach ($by_day as $lst) { foreach ($lst as $x) { if (is_blocking($x['status'])) { $busy_days++; break; } } }
?>
    <div class="lf-card pad mb-4 no-print fade-up">
        <div class="d-flex flex-wrap align-items-center gap-2">
            <a class="btn btn-ghost btn-icon" href="<?= $base ?>&m=<?= $pm ?>&y=<?= $py ?>" aria-label="Previous month"><span class="msi">chevron_left</span></a>
            <div class="font-title px-1" style="font-size:28px;line-height:1;color:var(--lf-evergreen);min-width:190px;text-align:center"><?= date('F', $first) ?> <em><?= $year ?></em></div>
            <a class="btn btn-ghost btn-icon" href="<?= $base ?>&m=<?= $nm ?>&y=<?= $ny ?>" aria-label="Next month"><span class="msi">chevron_right</span></a>
            <?php if ($month !== (int) date('n') || $year !== (int) date('Y')): ?><a class="btn btn-soft btn-sm" href="<?= $base ?>"><span class="msi">today</span> This month</a><?php endif; ?>
            <form method="GET" class="m-0 ms-1"><input type="hidden" name="view" value="monthly_planner"><?php if ($room_filter): ?><input type="hidden" name="room_id" value="<?= $room_filter ?>"><?php endif; ?>
                <input type="month" name="ym" class="form-control form-control-sm" value="<?= sprintf('%04d-%02d', $year, $month) ?>" onchange="this.form.submit()" aria-label="Jump to month"></form>
            <div class="ms-auto small text-muted"><b class="text-dark"><?= count($mrows) ?></b> bookings · <b class="text-dark"><?= $busy_days ?></b> of <?= $dim ?> days in use</div>
        </div>
        <div class="pill-tabs mt-3">
            <a href="?view=monthly_planner&m=<?= $month ?>&y=<?= $year ?>" class="<?= !$room_filter ? 'on' : '' ?>"><span class="msi">apps</span>All spaces</a>
            <?php foreach ($rooms as $r): ?>
                <a href="?view=monthly_planner&room_id=<?= (int) $r['id'] ?>&m=<?= $month ?>&y=<?= $year ?>" class="<?= $room_filter === (int) $r['id'] ? 'on' : '' ?>"><?= room_dot($r['color']) ?><?= h($r['name']) ?></a>
            <?php endforeach; ?>
        </div>
    </div>

    <div class="lf-card overflow-hidden d-none d-md-block fade-up">
        <div class="cal">
            <?php foreach (['Sun', 'Mon', 'Tue', 'Wed', 'Thu', 'Fri', 'Sat'] as $i => $dn): ?><div class="cal-h <?= $i === 6 ? 'sat' : '' ?>"><?= $dn ?></div><?php endforeach; ?>
            <?php for ($i = 0; $i < $lead; $i++): ?><div class="cal-d blank"></div><?php endfor; ?>
            <?php for ($day = 1; $day <= $dim; $day++):
                $cur = sprintf('%04d-%02d-%02d', $year, $month, $day);
                $list = $by_day[$cur] ?? [];
                $dow = ($lead + $day - 1) % 7;
                $cls = ($cur === $today_date ? ' today' : '') . ($cur < $today_date ? ' past' : '') . ($dow === 6 ? ' sat' : ''); ?>
                <div class="cal-d<?= $cls ?>">
                    <div class="cal-top">
                        <a class="cal-num" href="?view=daily_view&d_date=<?= $cur ?>" title="Open daily schedule"><?= $day ?></a>
                        <a class="cal-add" href="?view=new&sd=<?= $cur ?>&ed=<?= $cur ?><?= $room_filter ? '&room_id=' . $room_filter : '' ?>" title="New booking on <?= h(fmt_date($cur)) ?>" aria-label="New booking on <?= h(fmt_date($cur)) ?>"><span class="msi sm">add</span></a>
                    </div>
                    <?php foreach (array_slice($list, 0, 3) as $b): ?>
                        <a class="cal-ev <?= strtolower($b['status']) ?>" style="--c:<?= h($b['rcolor'] ?: '#9BEF6B') ?>" href="?view=booking&id=<?= (int) $b['id'] ?>"
                           title="<?= h(($b['status'] === 'Pending' ? 'Request · ' : '') . $b['guest_name'] . ' · ' . $b['rname'] . ' · ' . fmt_time($b['start_time']) . '–' . fmt_time($b['end_time'])) ?>">
                            <?= room_dot($b['rcolor']) ?><span class="t"><b><?= h(date('g:i', strtotime($b['start_time']))) ?></b> <?= h($b['guest_name']) ?></span>
                        </a>
                    <?php endforeach; ?>
                    <?php if (count($list) > 3): ?><a class="cal-more" href="?view=daily_view&d_date=<?= $cur ?>">+<?= count($list) - 3 ?> more</a><?php endif; ?>
                    <?php $blk = false; foreach ($list as $x) if (is_blocking($x['status'])) $blk = true; ?>
                    <?php if (!$blk && $room_filter && $cur >= $today_date): ?><div class="cal-free">Available</div><?php endif; ?>
                </div>
            <?php endfor; ?>
            <?php $trail = (7 - (($lead + $dim) % 7)) % 7; for ($i = 0; $i < $trail; $i++): ?><div class="cal-d blank"></div><?php endfor; ?>
        </div>
        <?php if (!$room_filter && $rooms): ?>
            <div class="d-flex flex-wrap gap-3 px-3 py-2 border-top small text-muted align-items-center">
                <span class="fw-600">Legend:</span>
                <?php foreach ($rooms as $r): ?><span class="d-inline-flex align-items-center gap-2"><?= room_dot($r['color']) ?><?= h($r['name']) ?></span><?php endforeach; ?>
                <span class="d-inline-flex align-items-center gap-2 ms-auto"><span class="cal-ev tentative py-0" style="--c:#9BEF6B">striped</span> on hold <span class="cal-ev pending py-0" style="--c:#9BEF6B">dashed</span> request</span>
            </div>
        <?php endif; ?>
    </div>

    <!-- Phone: agenda list -->
    <div class="lf-card d-md-none">
        <?php $any = false; for ($day = 1; $day <= $dim; $day++): $cur = sprintf('%04d-%02d-%02d', $year, $month, $day); $list = $by_day[$cur] ?? []; if (!$list) continue; $any = true; ?>
            <div class="agenda-day">
                <a class="date-box" href="?view=daily_view&d_date=<?= $cur ?>" style="<?= $cur === $today_date ? 'background:var(--lf-gradient);border:0' : '' ?>"><b><?= $day ?></b><small><?= date('D', strtotime($cur)) ?></small></a>
                <div class="row-main d-flex flex-column gap-1">
                    <?php foreach ($list as $b): ?>
                        <a class="cal-ev" style="--c:<?= h($b['rcolor'] ?: '#9BEF6B') ?>" href="?view=booking&id=<?= (int) $b['id'] ?>"><?= room_dot($b['rcolor']) ?><span class="t"><b><?= h(fmt_time($b['start_time'])) ?></b> <?= h($b['guest_name']) ?> · <?= h($b['rname']) ?></span></a>
                    <?php endforeach; ?>
                </div>
            </div>
        <?php endfor; ?>
        <?php if (!$any): ?><div class="empty"><span class="msi">event_available</span><b>No bookings this month</b><a href="?view=new">Create one</a></div><?php endif; ?>
    </div>

<?php
// =====================================================================
// VIEW: BOOKINGS & REPORTS
// =====================================================================
elseif ($view === 'reports'):
    [$f, $where, $params] = booking_filters($_GET);
    $vatf  = 1 + VAT_RATE / 100;
    $agg   = db_one("SELECT COUNT(*) AS n,
                        COALESCE(SUM(CASE WHEN " . SQL_BLOCKING . " THEN b.total_amount ELSE 0 END),0) AS val,
                        COALESCE(SUM(b.amount_paid),0) AS paid,
                        COALESCE(SUM(CASE WHEN " . SQL_BLOCKING . " AND b.amount_paid < b.total_amount * $vatf - 0.5 THEN b.total_amount * $vatf - b.amount_paid ELSE 0 END),0) AS due
                      FROM bookings b WHERE $where", $params) ?: ['n' => 0, 'val' => 0, 'paid' => 0, 'due' => 0];
    $total_rows = (int) $agg['n'];
    $pages = max(1, (int) ceil($total_rows / PER_PAGE));
    $page  = min($pages, max(1, (int) ($_GET['page'] ?? 1)));
    $sort  = in_array($_GET['sort'] ?? '', ['newest', 'date_asc', 'date_desc'], true) ? $_GET['sort'] : (in_array($f['filter'], ['today', 'upcoming'], true) ? 'date_asc' : 'newest');
    $order = ['newest' => 'b.id DESC', 'date_asc' => 'b.booking_date ASC, b.start_time ASC', 'date_desc' => 'b.booking_date DESC, b.start_time DESC'][$sort];
    $rows  = db_all("SELECT b.*, r.name AS rname, r.color AS rcolor FROM bookings b LEFT JOIN rooms r ON r.id = b.room_id WHERE $where ORDER BY $order LIMIT " . PER_PAGE . " OFFSET " . (($page - 1) * PER_PAGE), $params);
    $all_rooms = get_rooms(false);
    $qs = function (array $o = []) use ($f, $sort) {
        $q = array_filter(array_merge(['view' => 'reports', 'search' => $f['search'], 'filter' => $f['filter'], 'from' => $f['from'], 'to' => $f['to'],
                                       'room' => $f['room'] ?: '', 'status' => $f['status'], 'pay' => $f['pay'], 'sort' => $sort], $o), function ($v) { return $v !== '' && $v !== null && $v !== 0; });
        return '?' . http_build_query($q);
    };
    $quick = ['' => ['All', 'list'], 'pending' => ['Awaiting review', 'hourglass_top'], 'today' => ['Today', 'today'], 'month' => ['This month', 'calendar_month'], 'upcoming' => ['Upcoming', 'event_upcoming']];
    $has_filters = $f['search'] !== '' || $f['from'] || $f['to'] || $f['room'] || $f['status'] || $f['pay'] || $f['filter'];
?>
    <div class="lf-card mb-4 no-print fade-up">
        <div class="card-body-pad">
            <div class="d-flex flex-wrap gap-2 align-items-center justify-content-between mb-3">
                <div class="pill-tabs">
                    <?php foreach ($quick as $k => [$lbl, $ic]): ?>
                        <a href="<?= $qs(['filter' => $k, 'pay' => '', 'page' => '']) ?>" class="<?= $f['filter'] === $k && !$f['pay'] ? 'on' : '' ?>"><span class="msi"><?= $ic ?></span><?= $lbl ?></a>
                    <?php endforeach; ?>
                    <a href="<?= $qs(['pay' => 'due', 'filter' => '', 'page' => '']) ?>" class="<?= $f['pay'] === 'due' ? 'on' : '' ?>"><span class="msi">account_balance_wallet</span>Payment due</a>
                </div>
                <div class="d-flex gap-2">
                    <a href="<?= h($qs(['view' => null, 'export' => 'bookings', 'page' => ''])) ?>" class="btn btn-ghost btn-sm"><span class="msi">download</span> Export CSV</a>
                    <button class="btn btn-ghost btn-sm" onclick="window.print()"><span class="msi">print</span> Print</button>
                </div>
            </div>
            <form method="GET" class="row g-2 align-items-end">
                <input type="hidden" name="view" value="reports">
                <?php if ($f['filter']): ?><input type="hidden" name="filter" value="<?= h($f['filter']) ?>"><?php endif; ?>
                <div class="col-lg-3 col-md-6"><label class="form-label">Search</label>
                    <div class="input-icon"><span class="msi">search</span><input type="search" name="search" class="form-control" placeholder="Name, phone, email, PAN, ID…" value="<?= h($f['search']) ?>"></div></div>
                <div class="col-lg-2 col-6"><label class="form-label">From</label><input type="date" name="from" class="form-control" value="<?= h($f['from']) ?>"></div>
                <div class="col-lg-2 col-6"><label class="form-label">To</label><input type="date" name="to" class="form-control" value="<?= h($f['to']) ?>"></div>
                <div class="col-lg-2 col-6"><label class="form-label">Space</label>
                    <select name="room" class="form-select"><option value="">All spaces</option><?php foreach ($all_rooms as $r): ?><option value="<?= (int) $r['id'] ?>" <?= $f['room'] === (int) $r['id'] ? 'selected' : '' ?>><?= h($r['name']) ?></option><?php endforeach; ?></select></div>
                <div class="col-lg-1 col-6"><label class="form-label">Status</label>
                    <select name="status" class="form-select"><option value="">Any</option><?php foreach (STATUSES as $s): ?><option <?= $f['status'] === $s ? 'selected' : '' ?>><?= $s ?></option><?php endforeach; ?></select></div>
                <div class="col-lg-2 col-12 d-flex gap-2">
                    <button class="btn btn-forest flex-grow-1"><span class="msi">filter_alt</span> Apply</button>
                    <?php if ($has_filters): ?><a href="?view=reports" class="btn btn-ghost btn-icon" title="Clear filters" aria-label="Clear filters"><span class="msi">filter_alt_off</span></a><?php endif; ?>
                </div>
                <input type="hidden" name="pay" value="<?= h($f['pay']) ?>">
            </form>
        </div>
    </div>

    <div class="stat-strip mb-4 fade-up">
        <div><small>Bookings found</small><b><?= nformat($total_rows) ?></b></div>
        <div><small>Booked value (excl. VAT)</small><b><?= money($agg['val']) ?></b></div>
        <div><small>Received</small><b><?= money($agg['paid']) ?></b></div>
        <div><small>Outstanding (incl. VAT)</small><b style="color:<?= $agg['due'] > 0 ? 'var(--bad)' : 'inherit' ?>"><?= money($agg['due']) ?></b></div>
    </div>

    <div class="lf-card fade-up">
        <div class="card-head no-print">
            <span class="icon-tile"><span class="msi">list_alt</span></span>
            <div><h3 class="card-title">Booking <em>log</em></h3><p class="card-sub">Click any row to open it<?= $pages > 1 ? ' · page ' . $page . ' of ' . $pages : '' ?></p></div>
            <div class="actions">
                <select class="form-select form-select-sm" style="width:auto" onchange="location.href=this.value" aria-label="Sort">
                    <option value="<?= h($qs(['sort' => 'newest', 'page' => ''])) ?>" <?= $sort === 'newest' ? 'selected' : '' ?>>Newest first</option>
                    <option value="<?= h($qs(['sort' => 'date_asc', 'page' => ''])) ?>" <?= $sort === 'date_asc' ? 'selected' : '' ?>>Event date ↑</option>
                    <option value="<?= h($qs(['sort' => 'date_desc', 'page' => ''])) ?>" <?= $sort === 'date_desc' ? 'selected' : '' ?>>Event date ↓</option>
                </select>
            </div>
        </div>
        <div class="table-responsive">
            <table class="lf-table">
                <thead><tr><th>Booking</th><th>Guest</th><th>Space</th><th>Schedule</th><th class="text-end">Amount</th><th>Status</th><th class="text-end no-print">Actions</th></tr></thead>
                <tbody>
                <?php if ($rows): foreach ($rows as $b): $t = booking_totals($b); $cancel = in_array($b['status'], ['Cancelled', 'Rejected'], true); $blk = is_blocking($b['status']); ?>
                    <tr data-href="?view=booking&id=<?= (int) $b['id'] ?>" class="<?= $cancel ? 'cancelled' : '' ?>">
                        <td><span class="ref"><?= h(booking_ref($b['id'])) ?></span><?php if ($b['created_at']): ?><div class="small text-faint mt-1"><?= h(fmt_date($b['created_at'], 'd M')) ?></div><?php endif; ?></td>
                        <td style="min-width:200px"><div class="fw-600 gname d-flex align-items-center gap-2"><?= h($b['guest_name']) ?>
                            <?php if ($b['guest_phone']): ?><a class="text-success" target="_blank" rel="noopener" title="WhatsApp" aria-label="WhatsApp <?= h($b['guest_name']) ?>" href="<?= h(wa_link($b['guest_phone'], 'Hello ' . $b['guest_name'] . ', contacting you regarding your booking ' . booking_ref($b['id']) . ' at ' . COMPANY_SHORT . '.')) ?>"><span class="msi sm">chat</span></a><?php endif; ?></div>
                            <div class="small text-muted"><?= h($b['guest_phone']) ?><?= $b['guest_email'] ? ' · ' . h($b['guest_email']) : '' ?></div></td>
                        <td><span class="room-pill"><?= room_dot($b['rcolor']) ?><?= h($b['rname'] ?? '—') ?></span></td>
                        <td class="text-nowrap"><div class="fw-600"><?= h(fmt_range($b['booking_date'], $b['end_date'])) ?></div>
                            <div class="small text-muted"><?= h(fmt_time($b['start_time'])) ?> – <?= h(fmt_time($b['end_time'])) ?> · <?= $t['days'] ?> day<?= $t['days'] > 1 ? 's' : '' ?></div></td>
                        <td class="text-end text-nowrap"><div class="fw-600 tabular"><?= $b['status'] === 'Pending' && (float) $b['total_amount'] <= 0 ? '<span class="text-muted fw-normal">to be priced</span>' : money($b['total_amount']) ?></div>
                            <?php if ($blk && $t['grand'] > 0): $ps = pay_status($t); ?><div class="small <?= $ps === 'Paid' ? 'text-success' : 'text-muted' ?>"><?= $ps === 'Paid' ? 'Paid in full' : 'Due ' . money(max(0, $t['balance'])) ?></div><?php endif; ?></td>
                        <td><div class="d-flex flex-column gap-1 align-items-start"><?= badge($b['status'] ?: 'Pending') ?><?= $blk ? badge(time_status($b)) : '' ?></div></td>
                        <td class="text-end no-print text-nowrap">
                            <?php if ($blk): ?><a href="?view=conf_slip&id=<?= (int) $b['id'] ?>" class="btn btn-ghost btn-icon btn-sm" title="Confirmation slip" aria-label="Confirmation slip"><span class="msi">receipt</span></a><?php endif; ?>
                            <a href="?view=edit&id=<?= (int) $b['id'] ?>" class="btn btn-ghost btn-icon btn-sm" title="Edit" aria-label="Edit"><span class="msi">edit</span></a>
                            <a href="?view=booking&id=<?= (int) $b['id'] ?>" class="btn btn-soft btn-icon btn-sm" title="Open" aria-label="Open"><span class="msi">arrow_forward</span></a>
                        </td>
                    </tr>
                <?php endforeach; else: ?>
                    <tr><td colspan="7"><div class="empty"><span class="msi">search_off</span><b>No bookings match</b>Try clearing some filters<?= $has_filters ? ' — <a href="?view=reports">show all bookings</a>' : '' ?>.</div></td></tr>
                <?php endif; ?>
                </tbody>
            </table>
        </div>
        <?php if ($pages > 1): ?>
            <nav class="d-flex justify-content-between align-items-center p-3 border-top no-print" aria-label="Pages">
                <span class="small text-muted">Showing <?= ($page - 1) * PER_PAGE + 1 ?>–<?= min($total_rows, $page * PER_PAGE) ?> of <?= $total_rows ?></span>
                <ul class="pagination pagination-sm m-0">
                    <li class="page-item <?= $page <= 1 ? 'disabled' : '' ?>"><a class="page-link" href="<?= h($qs(['page' => $page - 1])) ?>">‹</a></li>
                    <?php for ($p = max(1, $page - 2); $p <= min($pages, $page + 2); $p++): ?>
                        <li class="page-item <?= $p === $page ? 'active' : '' ?>"><a class="page-link" href="<?= h($qs(['page' => $p])) ?>"><?= $p ?></a></li>
                    <?php endfor; ?>
                    <li class="page-item <?= $page >= $pages ? 'disabled' : '' ?>"><a class="page-link" href="<?= h($qs(['page' => $page + 1])) ?>">›</a></li>
                </ul>
            </nav>
        <?php endif; ?>
    </div>
<?php
// =====================================================================
// VIEW: BOOKING DETAILS
// =====================================================================
elseif ($view === 'booking'):
    $id = (int) ($_GET['id'] ?? 0);
    $b  = get_booking($id);
    if (!$b): ?>
        <div class="lf-card"><div class="empty"><span class="msi">search_off</span><b>Booking not found</b>It may have been deleted. <a href="?view=reports">Back to all bookings</a></div></div>
    <?php else:
        $t  = booking_totals($b);
        $ps = pay_status($t);
        $ts = time_status($b);
        $blk  = is_blocking($b['status']);
        $pend = $b['status'] === 'Pending';
        $cancel = in_array($b['status'], ['Cancelled', 'Rejected'], true);
        $payments = db_all("SELECT * FROM booking_payments WHERE booking_id = ? ORDER BY paid_on, id", [$id]);
        $state_word = ['Approved' => 'approved', 'Tentative' => 'on hold', 'Pending' => 'awaiting review', 'Rejected' => 'declined', 'Cancelled' => 'cancelled'][$b['status']] ?? strtolower((string) $b['status']);
        $wa_text = "Namaste " . $b['guest_name'] . ",\nYour booking " . booking_ref($id) . " at " . COMPANY_SHORT . " is " . $state_word . ":\n"
                 . $b['rname'] . "\n" . fmt_range($b['booking_date'], $b['end_date']) . ", " . fmt_time($b['start_time']) . " – " . fmt_time($b['end_time'])
                 . ($blk && $t['grand'] > 0 ? "\nTotal: " . money($t['grand'], 2) . " (incl. VAT)" . ($t['paid'] > 0 ? "\nReceived: " . money($t['paid'], 2) . "\nBalance: " . money(max(0, $t['balance']), 2) : '') : '') . "\nThank you!";
        $pct = $t['grand'] > 0 ? min(100, round($t['paid'] / $t['grand'] * 100)) : 100;
        $email_label = ['Approved' => 'Resend approval email', 'Tentative' => 'Resend on-hold email', 'Rejected' => 'Resend decline email', 'Pending' => 'Resend “request received”'][$b['status']] ?? '';
        $amen = amenity_list($b['ramenities']);
    ?>
    <div class="lf-card mb-4 lift">
        <div class="detail-head">
            <div class="min-w-0">
                <div class="d-flex flex-wrap align-items-center gap-2"><span class="ref"><?= h(booking_ref($id)) ?></span><span class="small text-muted">
                    <?= $b['created_at'] ? 'Created ' . h(fmt_date($b['created_at'], 'd M Y, g:i A')) . ($b['created_by'] ? ' by ' . h($b['created_by']) : '') : 'Created before tracking was added' ?></span></div>
                <h2><?= h($b['guest_name']) ?></h2>
                <div class="d-flex flex-wrap gap-2">
                    <?= badge($b['status'] ?: 'Pending') ?>
                    <?php if ($blk): ?><?= badge($ts) ?><?= badge($ps) ?><?php endif; ?>
                    <span class="room-pill"><?= room_dot($b['rcolor']) ?><?= h($b['rname'] ?? 'Room removed') ?></span>
                </div>
            </div>
            <div class="d-flex flex-wrap gap-2 no-print">
                <?php if ($pend): ?><button class="btn btn-brand" data-review='<?= h(json_encode(review_payload($b))) ?>'><span class="msi">fact_check</span> Review request</button><?php endif; ?>
                <a href="?view=edit&id=<?= $id ?>" class="btn <?= $pend ? 'btn-ghost' : 'btn-forest' ?>"><span class="msi">edit</span> Edit</a>
                <?php if ($blk): ?><a href="?view=conf_slip&id=<?= $id ?>" class="btn btn-ghost"><span class="msi">receipt</span> Slip</a><?php endif; ?>
                <?php if ($b['status'] === 'Approved'): ?><a href="?view=invoices&inv_gname=<?= urlencode($b['guest_name']) ?>&inv_sd=<?= h($b['booking_date']) ?>&inv_ed=<?= h($b['end_date']) ?>" class="btn btn-ghost"><span class="msi">request_quote</span> Invoice</a><?php endif; ?>
                <div class="dropdown">
                    <button class="btn btn-ghost btn-icon" data-bs-toggle="dropdown" aria-label="More actions"><span class="msi">more_vert</span></button>
                    <ul class="dropdown-menu dropdown-menu-end shadow border-0 rounded-4 p-2">
                        <?php if ($email_label): ?><li><form method="POST"><?= csrf_field() ?><input type="hidden" name="action" value="resend_email"><input type="hidden" name="booking_id" value="<?= $id ?>">
                            <button class="dropdown-item rounded-3 d-flex gap-2 align-items-center" <?= $b['guest_email'] ? '' : 'disabled' ?>><span class="msi sm">forward_to_inbox</span><?= h($email_label) ?></button></form></li><?php endif; ?>
                        <?php if ($blk): ?><li><a class="dropdown-item rounded-3 d-flex gap-2 align-items-center" href="?download_ics=<?= $id ?>"><span class="msi sm">calendar_add_on</span>Calendar file (.ics)</a></li><?php endif; ?>
                        <?php if ($b['guest_phone']): ?><li><a class="dropdown-item rounded-3 d-flex gap-2 align-items-center" target="_blank" rel="noopener" href="<?= h(wa_link($b['guest_phone'], $wa_text)) ?>"><span class="msi sm">chat</span>Send on WhatsApp</a></li>
                        <li><a class="dropdown-item rounded-3 d-flex gap-2 align-items-center" href="tel:<?= h($b['guest_phone']) ?>"><span class="msi sm">call</span>Call guest</a></li><?php endif; ?>
                        <li><a class="dropdown-item rounded-3 d-flex gap-2 align-items-center" href="?view=new&sd=<?= h($b['booking_date']) ?>&ed=<?= h($b['end_date']) ?>&st=<?= h(substr($b['start_time'], 0, 5)) ?>&et=<?= h(substr($b['end_time'], 0, 5)) ?>&room_id=<?= (int) $b['room_id'] ?>"><span class="msi sm">content_copy</span>Book again (same time)</a></li>
                        <li><hr class="dropdown-divider"></li>
                        <?php foreach (['Approved', 'Tentative', 'Cancelled'] as $s): if ($s === $b['status'] || ($pend && $s === 'Approved')) continue; ?>
                            <li><form method="POST" <?= $s === 'Cancelled' ? 'data-confirm="Cancel this booking? The time slot will be released for others."' : '' ?>><?= csrf_field() ?>
                                <input type="hidden" name="action" value="set_status"><input type="hidden" name="booking_id" value="<?= $id ?>"><input type="hidden" name="status" value="<?= $s ?>">
                                <button class="dropdown-item rounded-3 d-flex gap-2 align-items-center <?= $s === 'Cancelled' ? 'text-danger' : '' ?>"><span class="msi sm"><?= ['Approved' => 'check_circle', 'Tentative' => 'schedule', 'Cancelled' => 'cancel'][$s] ?></span>
                                <?= $s === 'Cancelled' ? ($pend ? 'Cancel request' : 'Cancel booking') : ($cancel ? 'Restore as ' . strtolower($s) : 'Mark as ' . strtolower($s)) ?></button></form></li>
                        <?php endforeach; ?>
                        <?php if ($is_admin): ?>
                            <li><form method="POST" data-confirm="Delete this booking and its payment records permanently? This cannot be undone."><?= csrf_field() ?><input type="hidden" name="action" value="delete_booking"><input type="hidden" name="booking_id" value="<?= $id ?>">
                                <button class="dropdown-item rounded-3 d-flex gap-2 align-items-center text-danger"><span class="msi sm">delete</span>Delete permanently</button></form></li>
                        <?php endif; ?>
                    </ul>
                </div>
            </div>
        </div>
        <?php if ($pend): ?><div class="px-4 pb-3"><div class="remark-box d-flex gap-2 align-items-start"><span class="msi sm">hourglass_top</span><span>This is a client request awaiting review. Press <b>Review request</b> to set the price and approve or decline it — the client is emailed either way.</span></div></div><?php endif; ?>
        <?php if ($cancel): ?><div class="px-4 pb-3"><div class="alert alert-danger m-0 d-flex gap-2 align-items-center py-2"><span class="msi">cancel</span>This booking is <?= strtolower(status_label($b['status'])) ?> and no longer blocks the space. Use ⋮ → Restore to bring it back.</div></div><?php endif; ?>
    </div>

    <div class="row g-4">
        <div class="col-lg-7 col-xl-8 d-flex flex-column gap-4">
            <div class="lf-card fade-up">
                <div class="card-head"><span class="icon-tile dark"><span class="msi">event</span></span><div><h3 class="card-title">Schedule</h3><p class="card-sub"><?= $t['days'] ?> day<?= $t['days'] > 1 ? 's' : '' ?> · <?= num_clean($t['hours']) ?> hrs per day</p></div>
                    <div class="actions"><a href="?view=daily_view&d_date=<?= h($b['booking_date']) ?>" class="btn btn-ghost btn-sm"><span class="msi">view_day</span> See day</a></div></div>
                <div class="card-body-pad">
                    <div class="big-when mb-3">
                        <div><small>Check-in</small><b><?= h(fmt_date($b['booking_date'], 'D, d M Y')) ?></b><span><?= h(fmt_time($b['start_time'])) ?></span></div>
                        <span class="msi arrow">arrow_forward</span>
                        <div><small>Check-out</small><b><?= h(fmt_date($b['end_date'], 'D, d M Y')) ?></b><span><?= h(fmt_time($b['end_time'])) ?></span></div>
                    </div>
                    <dl class="kv">
                        <dt>Space</dt><dd><?= h($b['rname'] ?? '—') ?><?= $b['rcapacity'] ? ' <span class="text-muted fw-normal">· seats ' . (int) $b['rcapacity'] . '</span>' : '' ?>
                            <?php if ($amen): ?><div class="amen-row mt-1"><?php foreach ($amen as $a): ?><span class="amen"><span class="msi"><?= amenity_icon($a) ?></span><?= h($a) ?></span><?php endforeach; ?></div><?php endif; ?></dd>
                        <dt>Purpose</dt><dd><?= h($b['purpose'] ?: '—') ?></dd>
                        <dt>Expected guests</dt><dd><?= $b['attendees'] ? (int) $b['attendees'] : '—' ?><?php if ($b['attendees'] && $b['rcapacity'] && $b['attendees'] > $b['rcapacity']): ?> <span class="lf-badge b-warn"><span class="msi">warning</span>Over capacity</span><?php endif; ?></dd>
                        <dt>Client notes</dt><dd class="fw-normal" style="white-space:pre-line"><?= h($b['notes'] ?: '—') ?></dd>
                        <dt>Remarks to client</dt><dd class="fw-normal"><?= $b['admin_remarks'] ? '<div class="remark-box ' . ($b['status'] === 'Rejected' ? 'red' : '') . '">' . h($b['admin_remarks']) . '</div>' : '—' ?></dd>
                    </dl>
                </div>
            </div>
            <div class="lf-card fade-up">
                <div class="card-head"><span class="icon-tile"><span class="msi">person</span></span><div><h3 class="card-title">Guest</h3><p class="card-sub">Contact &amp; billing details</p></div>
                    <div class="actions"><a href="?view=reports&search=<?= urlencode($b['guest_name']) ?>" class="btn btn-ghost btn-sm"><span class="msi">history</span> All their bookings</a></div></div>
                <div class="card-body-pad">
                    <dl class="kv">
                        <dt>Name</dt><dd><?= h($b['guest_name']) ?></dd>
                        <dt>Phone</dt><dd><?= $b['guest_phone'] ? '<a href="tel:' . h($b['guest_phone']) . '">' . h($b['guest_phone']) . '</a>' : '—' ?></dd>
                        <dt>Email</dt><dd><?= $b['guest_email'] ? '<a href="mailto:' . h($b['guest_email']) . '">' . h($b['guest_email']) . '</a>' : '<span class="text-muted fw-normal">Not provided</span>' ?></dd>
                        <dt>PAN / VAT no.</dt><dd><?= h($b['guest_pan'] ?: '—') ?></dd>
                        <dt>Address</dt><dd><?= h($b['guest_address'] ?: '—') ?></dd>
                    </dl>
                </div>
            </div>
        </div>

        <div class="col-lg-5 col-xl-4 d-flex flex-column gap-4">
            <div class="lf-card fade-up">
                <div class="card-head"><span class="icon-tile solar"><span class="msi">payments</span></span><div><h3 class="card-title">Charges</h3><p class="card-sub"><?= h(RATE_TYPES[$b['rate_type']] ?? 'Per day') ?> rate</p></div><div class="actions"><?= $blk ? badge($ps) : '' ?></div></div>
                <div class="card-body-pad">
                    <?php if ($pend && (float) $b['custom_rate'] <= 0): ?>
                        <div class="empty py-3"><span class="msi">sell</span><b>Not priced yet</b>The price is set when you review and approve this request<?= $b['rbase'] ? ' (standard rate ' . h(money($b['rbase'])) . '/day)' : '' ?>.</div>
                    <?php else: ?>
                    <div class="money-line"><span><?= h(money($b['custom_rate'], 2)) ?> × <?= num_clean($t['qty']) ?> <?= ['day' => 'day(s)', 'hour' => 'hour(s)', 'flat' => 'package'][$b['rate_type']] ?? 'day(s)' ?></span><b><?= money($t['gross'], 2) ?></b></div>
                    <?php if ($t['discount'] > 0): ?><div class="money-line"><span>Discount</span><b>− <?= money($t['discount'], 2) ?></b></div><?php endif; ?>
                    <div class="money-line"><span>Amount (excl. VAT)</span><b><?= money($t['total'], 2) ?></b></div>
                    <div class="money-line"><span>VAT <?= VAT_RATE ?>%</span><b><?= money($t['vat'], 2) ?></b></div>
                    <div class="money-line total"><span>Total</span><b><?= money($t['grand'], 2) ?></b></div>
                    <?php if ($blk && $t['grand'] > 0): ?>
                        <div class="pay-bar" role="img" aria-label="<?= $pct ?> percent paid"><span style="width:<?= $pct ?>%"></span></div>
                        <div class="d-flex justify-content-between small"><span class="text-muted">Received <b class="text-dark"><?= money($t['paid'], 2) ?></b></span><span class="text-muted">Balance <b style="color:<?= $t['balance'] > 0.5 ? 'var(--bad)' : 'var(--ok)' ?>"><?= money(max(0, $t['balance']), 2) ?></b></span></div>
                    <?php endif; ?>
                    <?php endif; ?>
                </div>
            </div>

            <?php if ($blk || $payments): ?>
            <div class="lf-card fade-up" id="payments">
                <div class="card-head"><span class="icon-tile"><span class="msi">account_balance_wallet</span></span><div><h3 class="card-title">Payments</h3><p class="card-sub"><?= count($payments) ?> entr<?= count($payments) === 1 ? 'y' : 'ies' ?></p></div></div>
                <div class="card-body-pad">
                    <?php foreach ($payments as $p): ?>
                        <div class="timeline-item">
                            <span class="t-dot"><span class="msi">done</span></span>
                            <div class="flex-grow-1"><b><?= money($p['amount'], 2) ?></b> · <?= h($p['method']) ?><?= $p['reference'] ? ' · ' . h($p['reference']) : '' ?>
                                <div class="small text-muted"><?= h(fmt_date($p['paid_on'])) ?><?= $p['created_by'] ? ' · by ' . h($p['created_by']) : '' ?></div></div>
                            <?php if ($is_admin): ?><form method="POST" data-confirm="Remove this payment entry?"><?= csrf_field() ?><input type="hidden" name="action" value="delete_payment"><input type="hidden" name="payment_id" value="<?= (int) $p['id'] ?>">
                                <button class="row-del" title="Remove" aria-label="Remove payment"><span class="msi sm">close</span></button></form><?php endif; ?>
                        </div>
                    <?php endforeach; ?>
                    <?php if (!$payments && (float) $b['amount_paid'] > 0): ?><div class="small text-muted mb-2">Received earlier: <?= money($b['amount_paid'], 2) ?></div><?php endif; ?>
                    <?php if (!$payments && (float) $b['amount_paid'] <= 0): ?><div class="small text-muted mb-2">No payments recorded yet.</div><?php endif; ?>
                    <?php if ($blk && $t['balance'] > 0.5): ?>
                        <form method="POST" class="row g-2 mt-2 pt-2 border-top">
                            <?= csrf_field() ?><input type="hidden" name="action" value="add_payment"><input type="hidden" name="booking_id" value="<?= $id ?>">
                            <div class="col-6"><label class="form-label">Amount (Rs.)</label><input type="number" step="0.01" min="0.01" name="amount" class="form-control" value="<?= h(number_format(max(0, $t['balance']), 2, '.', '')) ?>" required></div>
                            <div class="col-6"><label class="form-label">Method</label><select name="method" class="form-select"><?php foreach (PAY_METHODS as $m): ?><option><?= h($m) ?></option><?php endforeach; ?></select></div>
                            <div class="col-6"><label class="form-label">Date</label><input type="date" name="paid_on" class="form-control" value="<?= $today_date ?>"></div>
                            <div class="col-6"><label class="form-label">Reference</label><input type="text" name="reference" class="form-control" placeholder="Receipt / txn no."></div>
                            <div class="col-12"><button class="btn btn-soft w-100"><span class="msi">add_card</span> Record payment</button></div>
                        </form>
                    <?php elseif ($blk && $t['grand'] > 0): ?>
                        <div class="lf-badge b-ok mt-1"><span class="msi">verified</span>Fully paid</div>
                    <?php endif; ?>
                </div>
            </div>
            <?php endif; ?>
            <?php if ($b['updated_at']): ?><div class="small text-muted px-1">Last updated <?= h(fmt_date($b['updated_at'], 'd M Y, g:i A')) ?></div><?php endif; ?>
        </div>
    </div>
    <?php if ($pend) render_review_modal('?view=booking&id=' . $id); ?>
    <?php endif; ?>

<?php
// =====================================================================
// VIEW: EDIT BOOKING
// =====================================================================
elseif ($view === 'edit'):
    $id = (int) ($_GET['id'] ?? 0);
    $b  = get_booking($id);
    if (!$b): ?>
        <div class="lf-card"><div class="empty"><span class="msi">search_off</span><b>Booking not found</b><a href="?view=reports">Back to all bookings</a></div></div>
    <?php else:
        $old = $_SESSION['old_edit'] ?? null;
        unset($_SESSION['old_edit']);
        $v = function ($k, $bk) use ($old, $b) { return $old[$k] ?? $b[$bk]; };
        $rooms = get_rooms(false);
        $room_map = [];
        foreach ($rooms as $r) $room_map[(int) $r['id']] = ['name' => $r['name'], 'base' => (float) $r['base_rate'], 'hourly' => $r['hourly_rate'] !== null ? (float) $r['hourly_rate'] : round((float) $r['base_rate'] / 8), 'cap' => $r['capacity'] !== null ? (int) $r['capacity'] : null];
        $edit_cfg = ['id' => $id, 'rooms' => $room_map, 'paid' => (float) $b['amount_paid']];
    ?>
    <form method="POST" id="editForm" class="row g-4" autocomplete="off">
        <?= csrf_field() ?>
        <input type="hidden" name="action" value="update_booking">
        <input type="hidden" name="booking_id" value="<?= $id ?>">
        <div class="col-lg-8 d-flex flex-column gap-4">
            <div class="lf-card fade-up">
                <div class="card-head"><span class="icon-tile dark"><span class="msi">event</span></span><div><h3 class="card-title">Space &amp; <em>time</em></h3><p class="card-sub">Editing <span class="ref"><?= h(booking_ref($id)) ?></span></p></div></div>
                <div class="card-body-pad row g-3">
                    <div class="col-md-12"><label class="form-label" for="room_id">Space <span class="req">*</span></label>
                        <select name="room_id" id="room_id" class="form-select fw-600" required>
                            <?php foreach ($rooms as $r): ?><option value="<?= (int) $r['id'] ?>" <?= (int) $v('room_id', 'room_id') === (int) $r['id'] ? 'selected' : '' ?>><?= h($r['name']) ?><?= $r['is_active'] ? '' : ' (inactive)' ?></option><?php endforeach; ?>
                        </select></div>
                    <div class="col-6 col-md-3"><label class="form-label" for="start_date">From</label><input type="date" name="start_date" id="start_date" class="form-control" value="<?= h($v('start_date', 'booking_date')) ?>" required></div>
                    <div class="col-6 col-md-3"><label class="form-label" for="end_date">To</label><input type="date" name="end_date" id="end_date" class="form-control" value="<?= h($v('end_date', 'end_date')) ?>" required></div>
                    <div class="col-6 col-md-3"><label class="form-label" for="s_time">Start</label><input type="time" name="s_time" id="s_time" class="form-control" value="<?= h(substr((string) $v('s_time', 'start_time'), 0, 5)) ?>" step="900" required></div>
                    <div class="col-6 col-md-3"><label class="form-label" for="e_time">End</label><input type="time" name="e_time" id="e_time" class="form-control" value="<?= h(substr((string) $v('e_time', 'end_time'), 0, 5)) ?>" step="900" required></div>
                    <div class="col-12"><div class="small d-flex align-items-center gap-2 p-2 px-3 rounded-3" id="availNote" style="background:var(--surface-2)"><span class="msi sm">hourglass_top</span>Checking availability…</div></div>
                </div>
            </div>
            <div class="lf-card fade-up">
                <div class="card-head"><span class="icon-tile"><span class="msi">person</span></span><div><h3 class="card-title">Guest</h3></div></div>
                <div class="card-body-pad row g-3">
                    <div class="col-md-6"><label class="form-label">Guest / organisation name <span class="req">*</span></label><input type="text" name="g_name" class="form-control" value="<?= h($v('g_name', 'guest_name')) ?>" required></div>
                    <div class="col-md-6"><label class="form-label">Phone <span class="req">*</span></label><input type="tel" name="g_phone" class="form-control" value="<?= h($v('g_phone', 'guest_phone')) ?>" required></div>
                    <div class="col-md-6"><label class="form-label">Email</label><input type="email" name="g_email" class="form-control" value="<?= h($v('g_email', 'guest_email')) ?>"></div>
                    <div class="col-md-6"><label class="form-label">PAN / VAT no.</label><input type="text" name="g_pan" class="form-control" value="<?= h($v('g_pan', 'guest_pan')) ?>"></div>
                    <div class="col-12"><label class="form-label">Address</label><input type="text" name="g_address" class="form-control" value="<?= h($v('g_address', 'guest_address')) ?>"></div>
                </div>
            </div>
            <div class="lf-card fade-up">
                <div class="card-head"><span class="icon-tile solar"><span class="msi">sell</span></span><div><h3 class="card-title">Event &amp; <em>pricing</em></h3></div></div>
                <div class="card-body-pad row g-3">
                    <div class="col-md-5"><label class="form-label">Purpose</label><input type="text" name="purpose" class="form-control" list="purposeList" value="<?= h($v('purpose', 'purpose')) ?>"></div>
                    <div class="col-md-3"><label class="form-label" for="attendees">Guests</label><input type="number" min="0" name="attendees" id="attendees" class="form-control" value="<?= h($v('attendees', 'attendees')) ?>"><div class="cap-warn" id="capWarn"></div></div>
                    <div class="col-md-4"><label class="form-label">Status</label><select name="status" class="form-select"><?php foreach (STATUSES as $s): ?><option value="<?= $s ?>" <?= $v('status', 'status') === $s ? 'selected' : '' ?>><?= h(status_label($s)) ?></option><?php endforeach; ?></select></div>
                    <div class="col-md-4"><label class="form-label" for="rate_type">Rate basis</label><select name="rate_type" id="rate_type" class="form-select"><?php foreach (RATE_TYPES as $k => $lbl): ?><option value="<?= $k ?>" <?= $v('rate_type', 'rate_type') === $k ? 'selected' : '' ?>><?= h($lbl) ?></option><?php endforeach; ?></select></div>
                    <div class="col-md-4"><label class="form-label" for="custom_rate">Rate (Rs.)</label><input type="number" step="0.01" min="0" name="custom_rate" id="custom_rate" class="form-control fw-600" value="<?= h($v('custom_rate', 'custom_rate')) ?>">
                        <button type="button" class="btn btn-link btn-sm p-0 mt-1 small" id="useStdRate"></button></div>
                    <div class="col-md-4"><label class="form-label" for="discount">Discount (Rs.)</label><input type="number" step="0.01" min="0" name="discount" id="discount" class="form-control" value="<?= h($v('discount', 'discount')) ?>"></div>
                    <div class="col-md-6"><label class="form-label">Client notes</label><textarea name="notes" rows="3" class="form-control"><?= h($v('notes', 'notes')) ?></textarea></div>
                    <div class="col-md-6"><label class="form-label">Remarks to client <span class="text-faint fw-normal">(shown in emails)</span></label><textarea name="admin_remarks" rows="3" class="form-control"><?= h($v('admin_remarks', 'admin_remarks')) ?></textarea></div>
                </div>
            </div>
        </div>
        <div class="col-lg-4">
            <div style="position:sticky;top:96px" class="d-flex flex-column gap-3">
                <div class="price-box">
                    <div class="eyebrow" style="color:rgba(255,255,255,.55)">Updated price</div>
                    <div class="mt-2" id="priceLines"></div>
                    <div class="price-line price-total"><span>Total payable</span><b id="priceGrand">Rs. 0</b></div>
                    <div class="price-line"><span>Already received</span><b id="priceAdv">Rs. 0</b></div>
                    <div class="price-line"><span>Balance due</span><b id="priceBal">Rs. 0</b></div>
                </div>
                <div class="lf-card pad">
                    <div class="form-check mb-3"><input class="form-check-input" type="checkbox" name="send_email" id="send_email" value="1" checked><label class="form-check-label fw-600" for="send_email">Email the changes to the client</label></div>
                    <button class="btn btn-brand btn-lg w-100 mb-2"><span class="msi">save</span> Save changes</button>
                    <a href="?view=booking&id=<?= $id ?>" class="btn btn-ghost w-100">Discard</a>
                </div>
            </div>
        </div>
    </form>
    <datalist id="purposeList"><?php foreach (PURPOSES as $p): ?><option value="<?= h($p) ?>"><?php endforeach; ?></datalist>
    <script>window.LFH_EDIT = <?= js_data($edit_cfg) ?>;</script>
    <?php endif; ?>

<?php
// =====================================================================
// VIEW: CONFIRMATION SLIP (print / PDF)
// =====================================================================
elseif ($view === 'conf_slip'):
    $id = (int) ($_GET['id'] ?? 0);
    $b  = get_booking($id);
    if (!$b): ?>
        <div class="lf-card"><div class="empty"><span class="msi">search_off</span><b>Booking not found</b><a href="?view=reports">Back to all bookings</a></div></div>
    <?php else: $t = booking_totals($b); ?>
    <div class="d-flex flex-wrap gap-2 align-items-center justify-content-between mb-4 no-print" style="max-width:820px;margin:0 auto">
        <a href="?view=booking&id=<?= $id ?>" class="btn btn-ghost"><span class="msi">arrow_back</span> Back to booking</a>
        <div class="d-flex flex-wrap gap-2 align-items-center">
            <div class="form-check form-switch m-0 me-2"><input class="form-check-input" type="checkbox" id="toggleCharges" checked><label class="form-check-label small fw-600" for="toggleCharges">Show charges</label></div>
            <?php if ($b['guest_email']): ?><form method="POST" class="m-0"><?= csrf_field() ?><input type="hidden" name="action" value="resend_email"><input type="hidden" name="booking_id" value="<?= $id ?>"><button class="btn btn-ghost"><span class="msi">forward_to_inbox</span> Email guest</button></form><?php endif; ?>
            <button onclick="window.print()" class="btn btn-brand"><span class="msi">print</span> Print / Save PDF</button>
        </div>
    </div>
    <article class="doc fade-up">
        <div class="doc-bar"></div>
        <div class="doc-in">
            <div class="doc-head">
                <div class="doc-brand">
                    <img src="<?= h(LOGO_FULL) ?>" alt="" onerror="this.style.display='none'">
                    <div><h3><?= h(COMPANY_NAME) ?></h3>
                        <p><?= h(COMPANY_ADDRESS) ?></p>
                        <?php if (COMPANY_PHONE || COMPANY_EMAIL): ?><p><?= h(implode(' · ', array_filter([COMPANY_PHONE, COMPANY_EMAIL]))) ?></p><?php endif; ?>
                        <?php if (COMPANY_PAN): ?><p>PAN/VAT: <?= h(COMPANY_PAN) ?></p><?php endif; ?></div>
                </div>
                <div class="doc-kind">
                    <h2>Booking <em>Confirmation</em></h2>
                    <div class="meta">Booking ID <b><?= h(booking_ref($id)) ?></b><br>Issued <b><?= date('d M Y') ?></b><br>Status <b><?= h(status_label($b['status'])) ?></b></div>
                </div>
            </div>
            <?php if ($b['status'] !== 'Approved'): $bad = in_array($b['status'], ['Cancelled', 'Rejected'], true); ?><div class="doc-band" style="background:<?= $bad ? '#A12B2B' : '#6E6100' ?>"><h4><?= $bad ? 'This booking has been <em style="color:#fff">' . h(strtolower(status_label($b['status']))) . '</em>' : ($b['status'] === 'Pending' ? 'Request <em style="color:#fff">awaiting review</em> — not yet confirmed' : 'Provisional — <em style="color:#fff">on hold</em> until confirmed') ?></h4></div><?php endif; ?>

            <div class="doc-sec"><span class="msi">person</span>Client details</div>
            <div class="doc-box doc-kv">
                <div><small>Name</small><b><?= h($b['guest_name']) ?></b></div>
                <div><small>Phone</small><b><?= h($b['guest_phone'] ?: '—') ?></b></div>
                <div><small>Email</small><b><?= h($b['guest_email'] ?: '—') ?></b></div>
                <div><small>PAN / VAT no.</small><b><?= h($b['guest_pan'] ?: '—') ?></b></div>
                <?php if ($b['guest_address']): ?><div class="wide"><small>Address</small><b><?= h($b['guest_address']) ?></b></div><?php endif; ?>
            </div>

            <div class="doc-sec"><span class="msi">event</span>Reservation details</div>
            <div class="doc-grid">
                <div><small>Space</small><b><?= h($b['rname']) ?></b><?php if ($b['rcapacity']): ?><span>Up to <?= (int) $b['rcapacity'] ?> seats</span><?php endif; ?></div>
                <div><small>Duration</small><b><?= $t['days'] ?> day<?= $t['days'] > 1 ? 's' : '' ?></b><span><?= rtrim(rtrim(number_format($t['hours'], 2), '0'), '.') ?> hrs / day</span></div>
                <div><small>From</small><b><?= h(fmt_date($b['booking_date'], 'D, d M Y')) ?></b><span><?= h(fmt_time($b['start_time'])) ?></span></div>
                <div><small>To</small><b><?= h(fmt_date($b['end_date'], 'D, d M Y')) ?></b><span><?= h(fmt_time($b['end_time'])) ?></span></div>
            </div>
            <?php $slip_amen = amenity_list($b['ramenities']); if ($b['purpose'] || $b['attendees'] || $b['admin_remarks'] || $slip_amen): ?>
                <div class="doc-box doc-kv mt-2">
                    <div><small>Purpose</small><b><?= h($b['purpose'] ?: '—') ?></b></div>
                    <div><small>Expected guests</small><b><?= $b['attendees'] ? (int) $b['attendees'] : '—' ?></b></div>
                    <?php if ($slip_amen): ?><div class="wide"><small>Included facilities</small><b style="font-weight:600"><?= h(implode(' · ', $slip_amen)) ?></b></div><?php endif; ?>
                    <?php if ($b['admin_remarks']): ?><div class="wide"><small>Remarks</small><b style="font-weight:600"><?= h($b['admin_remarks']) ?></b></div><?php endif; ?>
                </div>
            <?php endif; ?>

            <div id="slipCharges">
                <div class="doc-sec"><span class="msi">payments</span>Charges</div>
                <div class="doc-grid">
                    <div><small>Rate</small><b><?= h(money($b['custom_rate'], 2)) ?></b><span><?= h(strtolower(RATE_TYPES[$b['rate_type']] ?? 'per day')) ?> × <?= rtrim(rtrim(number_format($t['qty'], 2), '0'), '.') ?></span></div>
                    <div><small>Amount (excl. VAT)</small><b><?= h(money($t['total'], 2)) ?></b><span><?= $t['discount'] > 0 ? 'after ' . h(money($t['discount'])) . ' discount' : 'no discount' ?></span></div>
                    <div><small>VAT <?= VAT_RATE ?>%</small><b><?= h(money($t['vat'], 2)) ?></b></div>
                    <div style="background:var(--lf-lime-tint);border-color:#C5E8AE"><small>Total payable</small><b style="color:var(--lf-forest)"><?= h(money($t['grand'], 2)) ?></b>
                        <span><?= $t['paid'] > 0 ? 'Received ' . h(money($t['paid'])) . ' · Balance ' . h(money(max(0, $t['balance']))) : 'Nothing received yet' ?></span></div>
                </div>
            </div>

            <div class="doc-sec"><span class="msi">gavel</span>Terms &amp; conditions</div>
            <ol><?php foreach (TERMS as $x): ?><li><?= h($x) ?></li><?php endforeach; ?></ol>
            <div class="doc-sec"><span class="msi">info</span>Notes</div>
            <ul><?php foreach (NOTES as $x): ?><li><?= h($x) ?></li><?php endforeach; ?></ul>

            <div class="doc-sign"><div>Client signature</div><div>Authorised signatory</div></div>
            <div class="doc-foot"><span><?= h(COMPANY_NAME) ?> · Thank you for choosing us!</span><span>Generated <?= date('d M Y, g:i A') ?> by <?= h($me) ?></span></div>
        </div>
    </article>
    <?php endif; ?>
<?php
// =====================================================================
// VIEW: BILL GENERATOR
// =====================================================================
elseif ($view === 'invoices'):
    $inv_sd = valid_date($_GET['inv_sd'] ?? '', date('Y-m-01'));
    $inv_ed = valid_date($_GET['inv_ed'] ?? '', date('Y-m-t'));
    if ($inv_ed < $inv_sd) { $tmp = $inv_sd; $inv_sd = $inv_ed; $inv_ed = $tmp; }
    $inv_gname = trim((string) ($_GET['inv_gname'] ?? ''));
    $guest_names = db_all("SELECT DISTINCT guest_name FROM bookings WHERE status = 'Approved' ORDER BY guest_name");
    $items = [];
    $profile = null;
    $disc_default = 0.0;
    $bk_count = 0;
    if ($inv_gname !== '') {
        $bks = db_all("SELECT b.*, r.name AS rname FROM bookings b LEFT JOIN rooms r ON r.id = b.room_id
                       WHERE b.guest_name = ? AND b.booking_date <= ? AND b.end_date >= ? AND b.status = 'Approved' ORDER BY b.booking_date, b.start_time", [$inv_gname, $inv_ed, $inv_sd]);
        $profile = db_one("SELECT guest_email, guest_address, guest_pan FROM bookings WHERE guest_name = ? ORDER BY id DESC LIMIT 1", [$inv_gname]);
        $bk_count = count($bks);
        foreach ($bks as $bk) {
            $label = ($bk['rname'] ?: 'Venue') . ' — ' . ($bk['purpose'] ?: 'Venue booking') . ' (' . fmt_time($bk['start_time']) . '–' . fmt_time($bk['end_time']) . ')';
            if ($bk['rate_type'] === 'flat') {
                $items[] = ['desc' => $label . ' · package', 'date' => fmt_range($bk['booking_date'], $bk['end_date']), 'qty' => 1, 'rate' => (float) $bk['custom_rate']];
            } else {
                $d = new DateTime(max($bk['booking_date'], $inv_sd));
                $e = new DateTime(min($bk['end_date'], $inv_ed));
                $q = $bk['rate_type'] === 'hour' ? hours_between($bk['start_time'], $bk['end_time']) : 1;
                for (; $d <= $e; $d->modify('+1 day')) {
                    $items[] = ['desc' => $label, 'date' => $d->format('d M Y'), 'qty' => $q, 'rate' => (float) $bk['custom_rate']];
                }
            }
            if ($bk['booking_date'] >= $inv_sd && $bk['end_date'] <= $inv_ed) $disc_default += (float) $bk['discount'];
        }
    }
    $history = db_all("SELECT id, invoice_number, invoice_date, guest_name, total_amount, status FROM generated_invoices ORDER BY id DESC LIMIT 200");
?>
    <div class="row g-4">
        <div class="col-xxl-3 no-print"><div class="row g-4">
            <div class="col-md-6 col-xxl-12"><div class="lf-card fade-up">
                <div class="card-head"><span class="icon-tile dark"><span class="msi">tune</span></span><div><h3 class="card-title">Build an <em>invoice</em></h3><p class="card-sub">Pick the client and billing period</p></div></div>
                <form method="GET" class="card-body-pad row g-3">
                    <input type="hidden" name="view" value="invoices">
                    <div class="col-12"><label class="form-label" for="inv_gname">Client <span class="req">*</span></label>
                        <div class="input-icon"><span class="msi">person_search</span><input type="text" name="inv_gname" id="inv_gname" list="invGuests" class="form-control" value="<?= h($inv_gname) ?>" placeholder="Type to search clients" required></div>
                        <datalist id="invGuests"><?php foreach ($guest_names as $g): ?><option value="<?= h($g['guest_name']) ?>"><?php endforeach; ?></datalist></div>
                    <div class="col-6 col-xxl-12"><label class="form-label">From</label><input type="date" name="inv_sd" class="form-control" value="<?= h($inv_sd) ?>" required></div>
                    <div class="col-6 col-xxl-12"><label class="form-label">To</label><input type="date" name="inv_ed" class="form-control" value="<?= h($inv_ed) ?>" required></div>
                    <div class="col-12 chip-row">
                        <a class="chip" href="?view=invoices&inv_gname=<?= urlencode($inv_gname) ?>&inv_sd=<?= date('Y-m-01') ?>&inv_ed=<?= date('Y-m-t') ?>">This month</a>
                        <a class="chip" href="?view=invoices&inv_gname=<?= urlencode($inv_gname) ?>&inv_sd=<?= date('Y-m-01', strtotime('first day of last month')) ?>&inv_ed=<?= date('Y-m-t', strtotime('last day of last month')) ?>">Last month</a>
                    </div>
                    <div class="col-12"><button class="btn btn-forest w-100"><span class="msi">auto_awesome</span> Build invoice</button></div>
                </form>
            </div></div>
            <div class="col-md-6 col-xxl-12"><div class="lf-card fade-up">
                <div class="card-head"><span class="icon-tile"><span class="msi">history</span></span><div><h3 class="card-title">Saved <em>invoices</em></h3><p class="card-sub"><?= count($history) ?> most recent</p></div></div>
                <div class="px-3 pt-3"><div class="input-icon"><span class="msi">filter_list</span><input type="search" class="form-control form-control-sm" id="invFilter" placeholder="Filter by client or number"></div></div>
                <div style="max-height:420px;overflow:auto" id="invHistory" class="py-2">
                    <?php foreach ($history as $hb): ?>
                        <a class="list-row py-2" href="?view=invoice_view&id=<?= (int) $hb['id'] ?>" data-text="<?= h(strtolower($hb['invoice_number'] . ' ' . $hb['guest_name'])) ?>">
                            <div class="row-main"><div class="t"><?= h($hb['invoice_number']) ?></div><div class="s"><?= h($hb['guest_name']) ?> · <?= h(fmt_date($hb['invoice_date'], 'd M Y')) ?></div></div>
                            <div class="text-end"><div class="fw-600 tabular small"><?= money($hb['total_amount']) ?></div><?= badge($hb['status'] ?: 'Unpaid') ?></div>
                        </a>
                    <?php endforeach; ?>
                    <?php if (!$history): ?><div class="empty py-4"><span class="msi">receipt_long</span>No invoices saved yet.</div><?php endif; ?>
                </div>
            </div></div>
        </div></div>
        <div class="col-xxl-9">
            <?php if ($inv_gname !== '' && $items): ?>
                <form method="POST" id="invForm">
                    <?= csrf_field() ?>
                    <input type="hidden" name="action" value="save_invoice">
                    <input type="hidden" name="return_to" value="?<?= h(http_build_query(['view' => 'invoices', 'inv_gname' => $inv_gname, 'inv_sd' => $inv_sd, 'inv_ed' => $inv_ed])) ?>">
                    <div class="d-flex flex-wrap gap-2 align-items-center justify-content-between mb-3 no-print">
                        <div class="small text-muted"><b class="text-dark"><?= $bk_count ?></b> booking<?= $bk_count > 1 ? 's' : '' ?> · <?= count($items) ?> line<?= count($items) > 1 ? 's' : '' ?>. Edit anything below before saving.</div>
                        <div class="d-flex gap-2 align-items-center flex-wrap">
                            <div class="form-check form-switch m-0 me-1"><input class="form-check-input" type="checkbox" name="inv_vat_on" id="invVatOn" value="1" checked><label class="form-check-label small fw-600" for="invVatOn">VAT <?= VAT_RATE ?>%</label></div>
                            <button type="button" class="btn btn-ghost" onclick="window.print()"><span class="msi">print</span> Print draft</button>
                            <button class="btn btn-brand"><span class="msi">save</span> Save invoice</button>
                        </div>
                    </div>
                    <?php render_invoice_doc([
                        'invoice_number' => '', 'invoice_date' => $today_date, 'guest_name' => $inv_gname,
                        'guest_email' => $profile['guest_email'] ?? '', 'guest_address' => $profile['guest_address'] ?? '', 'guest_pan' => $profile['guest_pan'] ?? '',
                        'start_date' => $inv_sd, 'end_date' => $inv_ed, 'discount' => $disc_default, 'vat_rate' => VAT_RATE, 'notes' => INVOICE_NOTE,
                    ], $items, true); ?>
                </form>
            <?php elseif ($inv_gname !== ''): ?>
                <div class="lf-card"><div class="empty"><span class="msi">event_busy</span><b>No bookings for “<?= h($inv_gname) ?>” in this period</b>Check the spelling or widen the dates (<?= h(fmt_range($inv_sd, $inv_ed)) ?>). Only approved bookings are billed.</div></div>
            <?php else: ?>
                <div class="lf-card"><div class="empty py-5"><span class="msi">receipt_long</span><b>Choose a client to start</b>Their bookings in the selected period become invoice lines automatically — one line per day, with rates you can adjust.<br>Tip: open any booking and press <b>Invoice</b> to jump straight here.</div></div>
            <?php endif; ?>
        </div>
    </div>

<?php
// =====================================================================
// VIEW: SAVED INVOICE
// =====================================================================
elseif ($view === 'invoice_view'):
    $iid = (int) ($_GET['id'] ?? 0);
    $inv = db_one("SELECT * FROM generated_invoices WHERE id = ?", [$iid]);
    if (!$inv): ?>
        <div class="lf-card"><div class="empty"><span class="msi">search_off</span><b>Invoice not found</b><a href="?view=invoices">Back to bills</a></div></div>
    <?php else:
        $items = json_decode((string) $inv['items_json'], true) ?: [];
        $paid = ($inv['status'] ?? '') === 'Paid'; ?>
        <div class="d-flex flex-wrap gap-2 align-items-center justify-content-between mb-4 no-print" style="max-width:820px;margin:0 auto">
            <a href="?view=invoices" class="btn btn-ghost"><span class="msi">arrow_back</span> All invoices</a>
            <div class="d-flex flex-wrap gap-2 align-items-center">
                <?= badge($inv['status'] ?: 'Unpaid') ?>
                <form method="POST" class="m-0"><?= csrf_field() ?><input type="hidden" name="action" value="invoice_status"><input type="hidden" name="invoice_id" value="<?= $iid ?>"><input type="hidden" name="status" value="<?= $paid ? 'Unpaid' : 'Paid' ?>">
                    <button class="btn <?= $paid ? 'btn-ghost' : 'btn-soft' ?>"><span class="msi"><?= $paid ? 'undo' : 'paid' ?></span> Mark as <?= $paid ? 'unpaid' : 'paid' ?></button></form>
                <?php if ($is_admin): ?><form method="POST" class="m-0" data-confirm="Delete invoice <?= h($inv['invoice_number']) ?>? This cannot be undone."><?= csrf_field() ?><input type="hidden" name="action" value="delete_invoice"><input type="hidden" name="invoice_id" value="<?= $iid ?>">
                    <button class="btn btn-danger-soft btn-icon" title="Delete" aria-label="Delete invoice"><span class="msi">delete</span></button></form><?php endif; ?>
                <button onclick="window.print()" class="btn btn-brand"><span class="msi">print</span> Print / Save PDF</button>
            </div>
        </div>
        <div class="fade-up"><?php render_invoice_doc($inv, $items, false); ?></div>
    <?php endif; ?>

<?php
// =====================================================================
// VIEW: ROOMS & SETTINGS
// =====================================================================
elseif ($view === 'settings'):
    $tab = in_array($_GET['tab'] ?? '', ['rooms', 'users', 'account'], true) ? $_GET['tab'] : 'rooms';
    if ($tab === 'users' && !$is_admin) $tab = 'rooms';
?>
    <div class="nav-tabs-lf">
        <a href="?view=settings&tab=rooms" class="<?= $tab === 'rooms' ? 'on' : '' ?>"><span class="msi">meeting_room</span>Rooms &amp; rates</a>
        <?php if ($is_admin): ?><a href="?view=settings&tab=users" class="<?= $tab === 'users' ? 'on' : '' ?>"><span class="msi">group</span>Users</a><?php endif; ?>
        <a href="?view=settings&tab=account" class="<?= $tab === 'account' ? 'on' : '' ?>"><span class="msi">manage_accounts</span>My account &amp; system</a>
    </div>

    <?php if ($tab === 'rooms'):
        $rooms = db_all("SELECT r.*, (SELECT COUNT(*) FROM bookings b WHERE b.room_id = r.id) AS bcount,
                                (SELECT COUNT(*) FROM bookings b WHERE b.room_id = r.id AND b.end_date >= ? AND " . SQL_BLOCKING . ") AS upcoming
                         FROM rooms r ORDER BY r.id", [$today_date]); ?>
        <div class="lf-card fade-up">
            <div class="card-head"><span class="icon-tile dark"><span class="msi">meeting_room</span></span><div><h3 class="card-title">Spaces &amp; <em>rates</em></h3><p class="card-sub">Rates pre-fill new bookings; each booking can still use its own rate.</p></div>
                <?php if ($is_admin): ?><div class="actions"><button class="btn btn-brand" data-room-edit="new"><span class="msi">add</span> Add room</button></div><?php endif; ?></div>
            <div class="table-responsive">
                <table class="lf-table">
                    <thead><tr><th>Space</th><th>Seats</th><th class="text-end">Day rate</th><th class="text-end">Hourly rate</th><th>Bookings</th><th>Status</th><?php if ($is_admin): ?><th class="text-end">Actions</th><?php endif; ?></tr></thead>
                    <tbody>
                    <?php foreach ($rooms as $r): $rj = ['id' => (int) $r['id'], 'name' => $r['name'], 'base_rate' => (float) $r['base_rate'], 'hourly_rate' => $r['hourly_rate'], 'capacity' => $r['capacity'], 'color' => $r['color'] ?: ROOM_COLORS[0], 'description' => $r['description'], 'amenities' => implode(', ', amenity_list($r['amenities'])), 'is_active' => (int) $r['is_active']]; $imgs = room_images($r['images']); ?>
                        <tr>
                            <td><div class="d-flex align-items-center gap-2"><?= room_dot($r['color']) ?><div><div class="fw-600"><?= h($r['name']) ?></div><?php if ($r['description']): ?><div class="small text-muted" style="max-width:360px"><?= h(short_text($r['description'], 110)) ?></div><?php endif; ?>
                                <div class="amen-row mt-1"><?php foreach (array_slice(amenity_list($r['amenities']), 0, 5) as $a): ?><span class="amen"><span class="msi"><?= amenity_icon($a) ?></span><?= h($a) ?></span><?php endforeach; ?>
                                <a class="amen" href="<?= h(LINK_PROPERTIES) ?>" title="Photos are managed in Manage Properties"><span class="msi">photo_library</span><?= count($imgs) ?> photo<?= count($imgs) === 1 ? '' : 's' ?></a></div></div></div></td>
                            <td><?= $r['capacity'] ? (int) $r['capacity'] : '—' ?></td>
                            <td class="text-end tabular fw-600"><?= money($r['base_rate']) ?></td>
                            <td class="text-end tabular"><?= $r['hourly_rate'] !== null ? money($r['hourly_rate']) : '<span class="text-muted">auto · ' . money(round($r['base_rate'] / 8)) . '</span>' ?></td>
                            <td><?= (int) $r['bcount'] ?> total<div class="small text-muted"><?= (int) $r['upcoming'] ?> upcoming</div></td>
                            <td><?= $r['is_active'] ? badge('Active', 'b-ok') : badge('Hidden', 'b-muted') ?></td>
                            <?php if ($is_admin): ?><td class="text-end text-nowrap">
                                <button class="btn btn-ghost btn-sm" data-room-edit='<?= h(json_encode($rj)) ?>'><span class="msi">edit</span> Edit</button>
                                <form method="POST" class="d-inline" data-confirm="<?= (int) $r['bcount'] ? 'This room has bookings, so it will be hidden (not deleted). Continue?' : 'Delete ' . h($r['name']) . '?' ?>"><?= csrf_field() ?><input type="hidden" name="action" value="delete_room"><input type="hidden" name="room_id" value="<?= (int) $r['id'] ?>">
                                    <button class="btn btn-danger-soft btn-icon btn-sm" title="Delete / hide" aria-label="Delete room"><span class="msi">delete</span></button></form>
                            </td><?php endif; ?>
                        </tr>
                    <?php endforeach; ?>
                    <?php if (!$rooms): ?><tr><td colspan="7"><div class="empty"><span class="msi">meeting_room</span><b>No rooms yet</b>Add your halls, training rooms and desks to start booking.</div></td></tr><?php endif; ?>
                    </tbody>
                </table>
            </div>
        </div>

        <?php if ($is_admin): ?>
        <div class="modal fade" id="roomModal" tabindex="-1" aria-hidden="true">
            <div class="modal-dialog modal-dialog-centered">
                <form method="POST" class="modal-content">
                    <?= csrf_field() ?><input type="hidden" name="action" value="save_room"><input type="hidden" name="room_id" id="rm_id" value="0">
                    <div class="modal-header"><h5 class="modal-title" id="rm_title">Add <em>room</em></h5><button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button></div>
                    <div class="modal-body row g-3">
                        <div class="col-12"><label class="form-label">Name <span class="req">*</span></label><input name="name" id="rm_name" class="form-control" required placeholder="e.g. Main Hall"></div>
                        <div class="col-6"><label class="form-label">Day rate (Rs.)</label><input type="number" step="0.01" min="0" name="base_rate" id="rm_base" class="form-control" required></div>
                        <div class="col-6"><label class="form-label">Hourly rate (Rs.)</label><input type="number" step="0.01" min="0" name="hourly_rate" id="rm_hourly" class="form-control" placeholder="auto = day ÷ 8"></div>
                        <div class="col-6"><label class="form-label">Seats / capacity</label><input type="number" min="0" name="capacity" id="rm_cap" class="form-control"></div>
                        <div class="col-6"><label class="form-label">Colour</label>
                            <div class="d-flex gap-1 flex-wrap align-items-center"><?php foreach (ROOM_COLORS as $c): ?><button type="button" class="color-swatch" style="background:<?= $c ?>" data-color="<?= $c ?>" aria-label="Colour <?= $c ?>"></button><?php endforeach; ?>
                                <input type="color" name="color" id="rm_color" class="form-control form-control-color p-1" style="width:36px;height:30px" value="<?= ROOM_COLORS[0] ?>" aria-label="Custom colour"></div></div>
                        <div class="col-12"><label class="form-label">Description</label><textarea name="description" id="rm_desc" rows="2" class="form-control" placeholder="What makes this space great — size, light, setup options"></textarea></div>
                        <div class="col-12"><label class="form-label">Facilities <span class="text-faint fw-normal">(comma separated)</span></label><input name="amenities" id="rm_amen" class="form-control" placeholder="High-Speed Wi-Fi, Air Conditioning, Projector, Whiteboard">
                            <div class="form-text">Shown on the booking cards and in approval emails. Photos are added in <a href="<?= h(LINK_PROPERTIES) ?>">Manage Properties</a>.</div></div>
                        <div class="col-12"><div class="form-check form-switch"><input class="form-check-input" type="checkbox" name="is_active" id="rm_active" value="1" checked><label class="form-check-label fw-600" for="rm_active">Available for new bookings</label></div></div>
                    </div>
                    <div class="modal-footer"><button type="button" class="btn btn-ghost" data-bs-dismiss="modal">Cancel</button><button class="btn btn-brand"><span class="msi">save</span> Save room</button></div>
                </form>
            </div>
        </div>
        <?php endif; ?>

    <?php elseif ($tab === 'users'):
        $users = db_all("SELECT id, name, email, role, last_login, created_at FROM app_users ORDER BY name"); ?>
        <div class="row g-4">
            <div class="col-lg-8"><div class="lf-card fade-up">
                <div class="card-head"><span class="icon-tile"><span class="msi">group</span></span><div><h3 class="card-title">Staff <em>users</em></h3><p class="card-sub">Admins can manage rooms, users and delete records.</p></div></div>
                <div class="table-responsive"><table class="lf-table">
                    <thead><tr><th>User</th><th>Role</th><th>Last sign-in</th><th class="text-end">Actions</th></tr></thead>
                    <tbody>
                    <?php foreach ($users as $u): ?>
                        <tr>
                            <td><div class="d-flex gap-2 align-items-center"><span class="avatar" style="width:32px;height:32px;font-size:12px"><?= h(initials($u['name'])) ?></span><div><div class="fw-600"><?= h($u['name']) ?><?= (int) $u['id'] === (int) $current_user['id'] ? ' <span class="text-muted fw-normal">(you)</span>' : '' ?></div><div class="small text-muted"><?= h($u['email']) ?></div></div></div></td>
                            <td><?= badge(ucfirst($u['role']), $u['role'] === 'admin' ? 'b-live' : 'b-muted') ?></td>
                            <td class="small"><?= $u['last_login'] ? h(fmt_date($u['last_login'], 'd M Y, g:i A')) : '<span class="text-muted">Never</span>' ?></td>
                            <td class="text-end text-nowrap">
                                <button class="btn btn-ghost btn-sm" type="button" data-bs-toggle="collapse" data-bs-target="#pw<?= (int) $u['id'] ?>"><span class="msi">key</span> Reset password</button>
                                <?php if ((int) $u['id'] !== (int) $current_user['id']): ?><form method="POST" class="d-inline" data-confirm="Remove <?= h($u['name']) ?>? They will no longer be able to sign in."><?= csrf_field() ?><input type="hidden" name="action" value="delete_user"><input type="hidden" name="user_id" value="<?= (int) $u['id'] ?>"><button class="btn btn-danger-soft btn-icon btn-sm" aria-label="Remove user"><span class="msi">person_remove</span></button></form><?php endif; ?>
                            </td>
                        </tr>
                        <tr class="collapse" id="pw<?= (int) $u['id'] ?>"><td colspan="4" style="background:var(--surface-2)">
                            <form method="POST" class="d-flex gap-2 flex-wrap align-items-center"><?= csrf_field() ?><input type="hidden" name="action" value="reset_user_password"><input type="hidden" name="user_id" value="<?= (int) $u['id'] ?>">
                                <input type="text" name="password" minlength="8" class="form-control form-control-sm" style="max-width:260px" placeholder="New password (min 8 characters)" required>
                                <button class="btn btn-forest btn-sm">Set password</button><span class="small text-muted">Share it with <?= h($u['name']) ?> securely.</span></form></td></tr>
                    <?php endforeach; ?>
                    </tbody>
                </table></div>
            </div></div>
            <div class="col-lg-4"><div class="lf-card fade-up">
                <div class="card-head"><span class="icon-tile solar"><span class="msi">person_add</span></span><div><h3 class="card-title">Add <em>user</em></h3></div></div>
                <form method="POST" class="card-body-pad row g-3"><?= csrf_field() ?><input type="hidden" name="action" value="add_user">
                    <div class="col-12"><label class="form-label">Name</label><input name="name" class="form-control" required></div>
                    <div class="col-12"><label class="form-label">Email</label><input type="email" name="email" class="form-control" required></div>
                    <div class="col-12"><label class="form-label">Temporary password</label><input type="text" name="password" minlength="8" class="form-control" required></div>
                    <div class="col-12"><label class="form-label">Role</label><select name="role" class="form-select"><option value="staff">Staff — bookings, payments, invoices</option><option value="admin">Admin — everything, incl. deleting</option></select></div>
                    <div class="col-12"><button class="btn btn-forest w-100"><span class="msi">person_add</span> Add user</button></div>
                </form>
            </div></div>
        </div>

    <?php else: ?>
        <div class="row g-4">
            <div class="col-lg-6"><div class="lf-card fade-up">
                <div class="card-head"><span class="icon-tile"><span class="msi">lock</span></span><div><h3 class="card-title">Change <em>password</em></h3><p class="card-sub">Signed in as <?= h($current_user['email'] ?: $me) ?></p></div></div>
                <form method="POST" class="card-body-pad row g-3"><?= csrf_field() ?><input type="hidden" name="action" value="change_password">
                    <div class="col-12"><label class="form-label">Current password</label><input type="password" name="current_password" class="form-control" required></div>
                    <div class="col-6"><label class="form-label">New password</label><input type="password" name="new_password" minlength="8" class="form-control" required></div>
                    <div class="col-6"><label class="form-label">Repeat new password</label><input type="password" name="new_password2" minlength="8" class="form-control" required></div>
                    <div class="col-12"><button class="btn btn-forest"><span class="msi">key</span> Update password</button></div>
                </form>
            </div></div>
            <div class="col-lg-6"><div class="lf-card fade-up">
                <div class="card-head"><span class="icon-tile dark"><span class="msi">settings</span></span><div><h3 class="card-title">System <em>settings</em></h3><p class="card-sub">Edit these at the top of index.php</p></div></div>
                <div class="card-body-pad"><dl class="kv">
                    <dt>Company</dt><dd><?= h(COMPANY_NAME) ?></dd>
                    <dt>Address</dt><dd><?= h(COMPANY_ADDRESS) ?></dd>
                    <dt>Phone / email</dt><dd><?= h(implode(' · ', array_filter([COMPANY_PHONE, COMPANY_EMAIL])) ?: 'Not set') ?></dd>
                    <dt>Company PAN</dt><dd><?= h(COMPANY_PAN ?: 'Not set') ?></dd>
                    <dt>VAT rate</dt><dd><?= VAT_RATE ?>%</dd>
                    <dt>Invoice numbers</dt><dd><?= h(INVOICE_PREFIX) ?>0001, 0002…</dd>
                    <dt>Emails sent from</dt><dd><?= h(MAIL_FROM) ?></dd>
                    <dt>New requests go to</dt><dd><?= h(ADMIN_NOTIFY_TO) ?> <span class="text-muted fw-normal">(copy: <?= h(ADMIN_NOTIFY_CC) ?>)</span></dd>
                    <dt>Portal link in emails</dt><dd><?= h(PORTAL_URL) ?></dd>
                    <dt>Time zone</dt><dd>Asia/Kathmandu (<?= date('g:i A') ?>)</dd>
                    <dt>Schedule hours</dt><dd><?= date('g A', mktime(DAY_START_HOUR, 0)) ?> – <?= date('g A', mktime(DAY_END_HOUR, 0)) ?></dd>
                </dl></div>
            </div></div>
        </div>
    <?php endif; ?>

<?php endif; ?>
    </main>
</div>

<a href="?view=new" class="btn btn-brand fab no-print" aria-label="New booking"><span class="msi">add</span></a>

<!-- Toast notifications -->
<div class="toast-stack no-print" id="toastStack" aria-live="polite">
    <?php foreach ($flashes as $fl): $ic = ['success' => 'check_circle', 'danger' => 'error', 'warning' => 'warning'][$fl['type']] ?? 'info'; ?>
        <div class="lf-toast <?= h($fl['type']) ?>" role="<?= $fl['type'] === 'danger' ? 'alert' : 'status' ?>"><span class="msi fill"><?= $ic ?></span><div><?= h($fl['msg']) ?></div><button class="x" aria-label="Dismiss"><span class="msi sm">close</span></button></div>
    <?php endforeach; ?>
</div>

<!-- Confirm dialog -->
<div class="modal fade" id="confirmModal" tabindex="-1" aria-hidden="true">
    <div class="modal-dialog modal-dialog-centered" style="max-width:400px">
        <div class="modal-content"><div class="modal-body text-center p-4">
            <span class="msi xl" style="color:var(--bad)">help</span>
            <h5 class="font-title mt-2 mb-2" style="font-size:26px;color:var(--lf-evergreen)">Are you <em>sure</em>?</h5>
            <p class="text-muted mb-4" id="confirmText"></p>
            <div class="d-flex gap-2 justify-content-center"><button class="btn btn-ghost" data-bs-dismiss="modal">Go back</button><button class="btn btn-danger-soft" id="confirmGo">Yes, continue</button></div>
        </div></div>
    </div>
</div>

<!-- Final verification before sending a booking / request -->
<div class="modal fade" id="verifyModal" tabindex="-1" aria-hidden="true">
    <div class="modal-dialog modal-dialog-centered" style="max-width:460px">
        <div class="modal-content">
            <div class="modal-header"><div><div class="eyebrow mb-1">Final check</div><h5 class="modal-title">Is this <em>right</em>?</h5></div></div>
            <div class="modal-body">
                <div class="text-center mb-3"><div class="font-title" style="font-size:28px;color:var(--lf-evergreen)" id="vfRoom"></div><span class="lf-badge b-warn mt-1"><span class="msi">verified_user</span>Please verify your schedule</span></div>
                <div class="d-grid gap-2">
                    <div class="verify-line"><span class="msi">login</span><div><div class="eyebrow">Check-in</div><b id="vfIn"></b></div></div>
                    <div class="verify-line"><span class="msi">logout</span><div><div class="eyebrow">Check-out</div><b id="vfOut"></b></div></div>
                    <div class="verify-line" style="background:var(--lf-lime-tint)"><span class="msi">timelapse</span><div><div class="eyebrow">Total duration</div><b id="vfDur"></b></div></div>
                </div>
            </div>
            <div class="modal-footer"><button type="button" class="btn btn-ghost" id="vfBack">Go back</button><button type="button" class="btn btn-brand" id="vfGo"><span class="msi">check_circle</span> Confirm &amp; submit</button></div>
        </div>
    </div>
</div>

<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js"></script>
<script>
window.LFH_VAT = <?= (float) VAT_RATE ?>;
(function () {
    'use strict';
    const $ = (s, r = document) => r.querySelector(s);
    const $$ = (s, r = document) => Array.from(r.querySelectorAll(s));
    const VAT = window.LFH_VAT || 13;
    const r2 = n => Math.round((Number(n) || 0) * 100) / 100;
    const fmt = (n, dec) => {
        n = Number(n) || 0;
        if (dec === undefined) dec = Math.abs(n - Math.round(n)) > 0.004 ? 2 : 0;
        return 'Rs. ' + n.toLocaleString('en-IN', { minimumFractionDigits: dec, maximumFractionDigits: dec });
    };
    const esc = s => String(s == null ? '' : s).replace(/[&<>"']/g, c => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c]));
    const toUTC = d => { const p = String(d || '').split('-').map(Number); return p.length === 3 ? Date.UTC(p[0], p[1] - 1, p[2]) : NaN; };
    const daysBetween = (a, b) => { const x = toUTC(a), y = toUTC(b); return isNaN(x) || isNaN(y) || y < x ? 0 : Math.round((y - x) / 864e5) + 1; };
    const toMin = t => { const p = String(t || '').split(':').map(Number); return p.length >= 2 ? p[0] * 60 + p[1] : NaN; };
    const hoursBetween = (a, b) => { const d = toMin(b) - toMin(a); return isNaN(d) || d <= 0 ? 0 : r2(d / 60); };
    const ymd = d => d.getFullYear() + '-' + String(d.getMonth() + 1).padStart(2, '0') + '-' + String(d.getDate()).padStart(2, '0');
    const addDays = (s, n) => { const p = s.split('-').map(Number); const d = new Date(p[0], p[1] - 1, p[2] + n); return ymd(d); };
    const t12 = t => { const m = toMin(t); if (isNaN(m)) return ''; const h = Math.floor(m / 60), mm = m % 60; return ((h % 12) || 12) + ':' + String(mm).padStart(2, '0') + ' ' + (h < 12 ? 'AM' : 'PM'); };
    const dLabel = s => { const p = s.split('-').map(Number); return new Date(p[0], p[1] - 1, p[2]).toLocaleDateString('en-GB', { weekday: 'short', day: '2-digit', month: 'short', year: 'numeric' }); };
    const nepalToday = () => { const f = new Intl.DateTimeFormat('en-CA', { timeZone: 'Asia/Kathmandu', year: 'numeric', month: '2-digit', day: '2-digit' }); return f.format(new Date()); };

    // ---------- Amount in words (Nepali numbering) ----------
    const ONES = ['', 'One', 'Two', 'Three', 'Four', 'Five', 'Six', 'Seven', 'Eight', 'Nine', 'Ten', 'Eleven', 'Twelve', 'Thirteen', 'Fourteen', 'Fifteen', 'Sixteen', 'Seventeen', 'Eighteen', 'Nineteen'];
    const TENS = ['', '', 'Twenty', 'Thirty', 'Forty', 'Fifty', 'Sixty', 'Seventy', 'Eighty', 'Ninety'];
    const two = x => x < 20 ? ONES[x] : (TENS[Math.floor(x / 10)] + ' ' + ONES[x % 10]).trim();
    function numWords(n) {
        const out = [];
        [[1e7, 'Crore'], [1e5, 'Lakh'], [1e3, 'Thousand'], [100, 'Hundred']].forEach(([u, w]) => {
            if (n >= u) { const q = Math.floor(n / u); out.push((u === 1e7 && q >= 100 ? numWords(q) : two(q)) + ' ' + w); n %= u; }
        });
        if (n) out.push(two(n));
        return out.join(' ').trim();
    }
    function amountWords(a) {
        a = r2(a); const rs = Math.floor(a), ps = Math.round((a - rs) * 100);
        return 'Rupees ' + (rs ? numWords(rs) : 'Zero') + (ps ? ' and ' + numWords(ps) + ' Paisa' : '') + ' Only';
    }

    // ---------- Price calculation (mirrors the server) ----------
    function calc(o) {
        const days = daysBetween(o.sd, o.ed), hours = hoursBetween(o.st, o.et);
        const qty = o.type === 'hour' ? r2(days * hours) : (o.type === 'flat' ? 1 : days);
        const gross = r2((Number(o.rate) || 0) * qty);
        const discount = Math.min(Math.max(0, Number(o.discount) || 0), gross);
        const total = r2(gross - discount), vat = r2(total * VAT / 100), grand = r2(total + vat);
        const paid = Number(o.paid) || 0;
        return { days, hours, qty, gross, discount, total, vat, grand, paid, balance: r2(grand - paid) };
    }
    function paintPrice(t, type, rate) {
        const unit = type === 'hour' ? 'hr' : (type === 'flat' ? 'package' : (t.qty === 1 ? 'day' : 'days'));
        const lines = [
            [fmt(rate, 2) + ' × ' + t.qty + ' ' + unit, fmt(t.gross, 2)],
            t.discount > 0 ? ['Discount', '− ' + fmt(t.discount, 2)] : null,
            ['Amount (excl. VAT)', fmt(t.total, 2)],
            ['VAT ' + VAT + '%', fmt(t.vat, 2)],
        ].filter(Boolean);
        const pl = $('#priceLines');
        if (pl) pl.innerHTML = lines.map(l => '<div class="price-line"><span>' + esc(l[0]) + '</span><b>' + esc(l[1]) + '</b></div>').join('');
        if ($('#priceGrand')) $('#priceGrand').textContent = fmt(t.grand, 2);
        if ($('#priceAdv')) $('#priceAdv').textContent = fmt(t.paid, 2);
        if ($('#priceBal')) $('#priceBal').textContent = fmt(Math.max(0, t.balance), 2);
    }

    // ---------- Live clock (Nepal time) ----------
    const clock = $('#liveClock');
    if (clock) {
        const tick = () => { clock.textContent = new Date().toLocaleTimeString('en-US', { timeZone: 'Asia/Kathmandu', hour: 'numeric', minute: '2-digit', second: '2-digit' }); };
        tick(); setInterval(tick, 1000);
    }

    // ---------- Sidebar (mobile) ----------
    const menuBtn = $('#menuBtn');
    if (menuBtn) {
        menuBtn.addEventListener('click', () => document.body.classList.add('nav-open'));
        $('#sidebarBackdrop').addEventListener('click', () => document.body.classList.remove('nav-open'));
    }

    // ---------- Toasts ----------
    $$('.lf-toast').forEach((t, i) => {
        const close = () => { t.classList.add('hide'); setTimeout(() => t.remove(), 300); };
        t.querySelector('.x').addEventListener('click', close);
        setTimeout(close, (t.classList.contains('danger') ? 12000 : 6000) + i * 400);
    });
    window.lfToast = function (msg, type) {
        const t = document.createElement('div');
        t.className = 'lf-toast ' + (type || 'success');
        t.innerHTML = '<span class="msi fill">' + (type === 'danger' ? 'error' : 'check_circle') + '</span><div>' + esc(msg) + '</div>';
        $('#toastStack').appendChild(t);
        setTimeout(() => { t.classList.add('hide'); setTimeout(() => t.remove(), 300); }, 4000);
    };

    // ---------- Confirm dialog for risky forms ----------
    const cm = $('#confirmModal');
    let pendingForm = null;
    if (cm && window.bootstrap) {
        const modal = new bootstrap.Modal(cm);
        document.addEventListener('submit', e => {
            const f = e.target;
            if (f.dataset && f.dataset.confirm && !f.dataset.confirmed) {
                e.preventDefault();
                pendingForm = f;
                $('#confirmText').textContent = f.dataset.confirm;
                modal.show();
            }
        }, true);
        $('#confirmGo').addEventListener('click', () => {
            if (!pendingForm) return;
            pendingForm.dataset.confirmed = '1';
            modal.hide();
            pendingForm.submit();
        });
    }

    // ---------- Clickable table rows ----------
    document.addEventListener('click', e => {
        const tr = e.target.closest('tr[data-href]');
        if (!tr || e.target.closest('a, button, form, input, select, label')) return;
        location.href = tr.dataset.href;
    });

    // ---------- Keyboard shortcuts: "/" search, "n" new booking ----------
    document.addEventListener('keydown', e => {
        if (e.ctrlKey || e.metaKey || e.altKey) return;
        const tag = (e.target.tagName || '').toLowerCase();
        if (['input', 'textarea', 'select'].includes(tag) || e.target.isContentEditable || document.querySelector('.modal.show')) return;
        if (e.key === '/') { const s = $('#globalSearch'); if (s && s.offsetParent) { e.preventDefault(); s.focus(); } }
        if (e.key === 'n' || e.key === 'N') { location.href = '?view=new'; }
    });

    // ---------- Prevent double submits ----------
    document.addEventListener('submit', e => {
        const f = e.target;
        if (e.defaultPrevented || (f.getAttribute('method') || 'get').toLowerCase() !== 'post' || (f.dataset.confirm && !f.dataset.confirmed)) return;
        setTimeout(() => $$('button[type=submit], button:not([type])', f).forEach(b => { if (!b.closest('.dropdown-menu')) { b.disabled = true; } }), 0);
    });

    // ---------- Daily schedule: scroll to "now" or 8 AM ----------
    const wrap = $('#schedWrap');
    if (wrap) {
        const now = $('#nowLine');
        wrap.scrollTop = now ? Math.max(0, now.offsetTop - 140) : 64;
    }

    // ---------- Confirmation slip: show / hide charges ----------
    const tc = $('#toggleCharges');
    if (tc) tc.addEventListener('change', () => $('#slipCharges').classList.toggle('d-none', !tc.checked));

    // ---------- Capacity warning ----------
    function capCheck(cap) {
        const a = $('#attendees'), w = $('#capWarn');
        if (!a || !w) return;
        const n = Number(a.value) || 0;
        const over = cap && n > cap;
        w.textContent = over ? 'Over capacity (' + cap + ' seats)' : '';
        w.classList.toggle('show', !!over);
    }

    // =================================================================
    // NEW BOOKING / BOOK A SPACE — live availability + booking form
    // =================================================================
    if (window.LFH_NEW) {
        const cfg = window.LFH_NEW;
        const STAFF = !!cfg.staff;
        const el = { sd: $('#w_sd'), ed: $('#w_ed'), st: $('#w_st'), et: $('#w_et') };
        const grid = $('#roomGrid');
        let rooms = cfg.initial || [];
        let current = null, rateTouched = false, reqId = 0, timer = null;
        const guests = {};
        (cfg.guests || []).forEach(g => { guests[String(g.n).trim().toLowerCase()] = g; });
        const state = () => ({ sd: el.sd.value, ed: el.ed.value, st: el.st.value, et: el.et.value });
        const validate = s => {
            if (!s.sd || !s.ed || !s.st || !s.et) return 'Choose dates and times.';
            if (s.ed < s.sd) return 'The check-out date is before the check-in date.';
            if (!STAFF && s.ed < cfg.today) return 'Please choose dates from today onwards.';
            if (s.et <= s.st) return 'The time out must be after the time in.';
            return '';
        };
        const summaryHTML = s => {
            const d = daysBetween(s.sd, s.ed), h = hoursBetween(s.st, s.et);
            return '<span><span class="msi">date_range</span>' + esc(s.sd === s.ed ? dLabel(s.sd) : dLabel(s.sd) + ' → ' + dLabel(s.ed)) + '</span>' +
                   '<span><span class="msi">schedule</span>' + esc(t12(s.st) + ' – ' + t12(s.et)) + '</span>' +
                   '<span><span class="msi">timelapse</span>' + d + ' day' + (d === 1 ? '' : 's') + ' · ' + h + ' hrs/day</span>';
        };
        const paintChips = s => {
            $$('#whenForm .chip[data-st]').forEach(c => c.classList.toggle('on', c.dataset.st === s.st && c.dataset.et === s.et));
            const today = nepalToday();
            $$('#whenForm .chip[data-day]').forEach(c => c.classList.toggle('on', s.sd === addDays(today, +c.dataset.day) && s.ed === s.sd));
            $$('#whenForm .chip[data-span]').forEach(c => c.classList.toggle('on', daysBetween(s.sd, s.ed) === +c.dataset.span));
        };
        const showErr = m => { const b = $('#availError'); b.querySelector('span:last-child').textContent = m; b.classList.remove('d-none'); b.classList.add('d-flex'); };
        const hideErr = () => { const b = $('#availError'); b.classList.add('d-none'); b.classList.remove('d-flex'); };

        function media(r) {
            const imgs = r.images || [];
            const flag = r.available ? '<span class="lf-badge b-ok status-flag"><span class="msi">check_circle</span>Available</span>' : '<span class="lf-badge b-bad status-flag"><span class="msi">block</span>Booked</span>';
            if (!imgs.length) return '<div class="rc-media"><div class="ph"><span class="msi">image</span></div>' + flag + '</div>';
            return '<div class="rc-media" data-imgs="' + esc(JSON.stringify(imgs)) + '" data-i="0"><img src="' + esc(imgs[0]) + '" alt="' + esc(r.name) + '" loading="lazy" onerror="this.style.opacity=0">' + flag +
                (imgs.length > 1 ? '<button type="button" class="nav-btn prev" aria-label="Previous photo"><span class="msi sm">chevron_left</span></button><button type="button" class="nav-btn next" aria-label="Next photo"><span class="msi sm">chevron_right</span></button><span class="count">1 / ' + imgs.length + '</span>' : '') + '</div>';
        }
        function card(r, s) {
            const days = daysBetween(s.sd, s.ed);
            let meta = r.capacity ? '<span><span class="msi">groups</span>' + r.capacity + ' seats</span>' : '';
            if (STAFF) meta += '<span><span class="msi">sell</span>' + fmt(r.base_rate) + '/day</span><span><span class="msi">schedule</span>' + fmt(r.hourly_rate) + '/hr</span>';
            const amen = (r.amenities || []).length ? '<div class="amen-row">' + r.amenities.map(a => '<span class="amen"><span class="msi">' + esc(a.icon) + '</span>' + esc(a.name) + '</span>').join('') + '</div>' : '';
            const live = r.live ? '<div class="live-pill ' + esc(r.live.state) + '"><span class="dot"></span>Now: ' + esc(r.live.text) + '</div>' : '';
            let body = '';
            if (r.available) {
                if (STAFF) body = '<div class="rc-price"><div><small>Estimate · ' + days + ' day' + (days === 1 ? '' : 's') + '</small><br><b>' + fmt(r.base_rate * days) + '</b></div><small>+ VAT ' + VAT + '%</small></div>' +
                    (r.pending ? '<div class="clash soft mt-2"><span class="msi sm">hourglass_top</span>' + r.pending + ' pending request' + (r.pending > 1 ? 's' : '') + ' for this time</div>' : '');
            } else {
                body = STAFF
                    ? r.conflicts.map(c => '<div class="rc-conflict"><span class="msi">event_busy</span><div><b>' + esc(c.guest) + '</b> · <a href="?view=booking&id=' + c.id + '">' + esc(c.ref) + '</a><br>' + esc(c.dates) + ' · ' + esc(c.time) + (c.status === 'Tentative' ? ' · on hold' : '') + '</div></div>').join('')
                    : '<div class="rc-conflict"><span class="msi">event_busy</span><div><b>Booked for part of this time</b><br>' + r.conflicts.map(c => esc(c.dates) + ' · ' + esc(c.time)).join('<br>') + '</div></div>';
            }
            const foot = r.available
                ? '<button type="button" class="btn btn-forest w-100" data-book="' + r.id + '"><span class="msi">bookmark_add</span> ' + (STAFF ? 'Select &amp; book' : 'Request this space') + '</button>'
                : (STAFF ? '<a class="btn btn-ghost w-100" href="?view=daily_view&d_date=' + esc(s.sd) + '"><span class="msi">view_day</span> See schedule</a>'
                         : '<button type="button" class="btn btn-ghost w-100" disabled><span class="msi">block</span> Unavailable for this time</button>');
            return '<div class="col-md-6 room-col fade-up"><div class="room-card ' + (r.available ? 'ok' : 'busy') + '" style="--c:' + esc(r.color) + '" id="room-' + r.id + '">' + media(r) +
                '<div class="rc-body"><h3>' + esc(r.name) + '</h3>' +
                (meta ? '<div class="rc-meta">' + meta + '</div>' : '') + live +
                (r.description ? '<div class="small text-muted mt-2" style="display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical;overflow:hidden" title="' + esc(r.description) + '">' + esc(r.description) + '</div>' : '') +
                amen + body + '</div><div class="rc-foot">' + foot + '</div></div></div>';
        }
        function render() {
            const s = state();
            const show = $('#showBooked').checked;
            const avail = rooms.filter(r => r.available).length;
            $('#availCount').innerHTML = rooms.length ? '<b class="text-dark">' + avail + '</b> of ' + rooms.length + ' spaces available for this time' : '';
            if (!rooms.length) {
                grid.innerHTML = '<div class="col-12"><div class="lf-card"><div class="empty"><span class="msi">meeting_room</span><b>No spaces set up yet</b>' + (STAFF ? '<a href="?view=settings&tab=rooms">Add rooms &amp; rates</a> to start booking.' : 'Please check back soon.') + '</div></div></div>';
                return;
            }
            const list = rooms.filter(r => show || r.available);
            grid.innerHTML = list.length ? list.map(r => card(r, s)).join('')
                : '<div class="col-12"><div class="lf-card"><div class="empty"><span class="msi">event_busy</span><b>Everything is booked for this time</b>Try another time window' + (STAFF ? ', or turn on “Show booked spaces” to see who has them.' : '.') + '</div></div></div>';
            $$('[data-book]', grid).forEach(b => b.addEventListener('click', () => openBooking(+b.dataset.book)));
        }
        // Photo carousel on the cards
        grid.addEventListener('click', e => {
            const nb = e.target.closest('.nav-btn');
            if (!nb) return;
            const m = nb.closest('.rc-media'), imgs = JSON.parse(m.dataset.imgs || '[]');
            let i = (+m.dataset.i + (nb.classList.contains('next') ? 1 : -1) + imgs.length) % imgs.length;
            m.dataset.i = i; const img = m.querySelector('img'); img.style.opacity = 1; img.src = imgs[i];
            m.querySelector('.count').textContent = (i + 1) + ' / ' + imgs.length;
        });
        function refresh() {
            const s = state();
            $('#whenSummary').innerHTML = summaryHTML(s);
            paintChips(s);
            const err = validate(s);
            history.replaceState(null, '', '?view=new&sd=' + s.sd + '&ed=' + s.ed + '&st=' + s.st + '&et=' + s.et);
            if (err) { showErr(err); grid.innerHTML = ''; $('#availCount').textContent = ''; return; }
            hideErr();
            grid.style.opacity = '.45';
            const my = ++reqId;
            fetch('?api=availability&sd=' + s.sd + '&ed=' + s.ed + '&st=' + s.st + '&et=' + s.et, { headers: { 'Accept': 'application/json' } })
                .then(r => r.json()).then(d => {
                    if (my !== reqId) return;
                    grid.style.opacity = '1';
                    if (!d.ok) { showErr(d.error || 'Could not check availability.'); return; }
                    rooms = d.rooms; render();
                }).catch(() => { grid.style.opacity = '1'; showErr('Could not check availability — please check your connection.'); });
        }
        const soon = () => { clearTimeout(timer); timer = setTimeout(refresh, 250); };
        el.sd.addEventListener('change', () => { if (el.ed.value < el.sd.value) el.ed.value = el.sd.value; soon(); });
        [el.ed, el.st, el.et].forEach(i => i.addEventListener('change', soon));
        $$('#whenForm .chip[data-day]').forEach(c => c.addEventListener('click', () => { const d = addDays(nepalToday(), +c.dataset.day); el.sd.value = d; el.ed.value = d; soon(); }));
        $$('#whenForm .chip[data-span]').forEach(c => c.addEventListener('click', () => { el.ed.value = addDays(el.sd.value, +c.dataset.span - 1); soon(); }));
        $$('#whenForm .chip[data-st]').forEach(c => c.addEventListener('click', () => { el.st.value = c.dataset.st; el.et.value = c.dataset.et; soon(); }));
        $('#showBooked').addEventListener('change', render);

        // ---- Booking / request modal ----
        const modalEl = $('#bookModal');
        const modal = new bootstrap.Modal(modalEl);
        const f = { name: $('#g_name'), phone: $('#g_phone'), email: $('#g_email'), pan: $('#g_pan'), addr: $('#g_address'), type: $('#rate_type'), rate: $('#custom_rate'), disc: $('#discount'), adv: $('#advance'), att: $('#attendees'), send: $('#send_email') };
        const defaultRate = (r, type, s) => type === 'hour' ? r.hourly_rate : (type === 'flat' ? r2(r.base_rate * daysBetween(s.sd, s.ed)) : r.base_rate);
        function recalc() {
            if (!current) return;
            const s = state();
            capCheck(current.capacity);
            if (STAFF) {
                const t = calc({ sd: s.sd, ed: s.ed, st: s.st, et: s.et, type: f.type.value, rate: f.rate.value, discount: f.disc.value, paid: f.adv.value });
                paintPrice(t, f.type.value, f.rate.value);
                const noEmail = !f.email.value.trim();
                $('#emailHint').textContent = noEmail ? 'Add a guest email above to send the confirmation.' : 'Will be sent to ' + f.email.value.trim();
            } else {
                const d = daysBetween(s.sd, s.ed), h = hoursBetween(s.st, s.et);
                const lines = [['Space', current.name], ['Check-in', dLabel(s.sd) + ', ' + t12(s.st)], ['Check-out', dLabel(s.ed) + ', ' + t12(s.et)], ['Duration', d + ' day' + (d === 1 ? '' : 's') + ' · ' + h + ' hrs/day']];
                if (current.capacity) lines.push(['Seats', current.capacity]);
                $('#requestLines').innerHTML = lines.map(l => '<div class="price-line"><span>' + esc(l[0]) + '</span><b>' + esc(l[1]) + '</b></div>').join('') +
                    ((current.amenities || []).length ? '<div class="price-note mt-2" style="color:rgba(255,255,255,.7)">Includes ' + esc(current.amenities.map(a => a.name).join(', ')) + '</div>' : '');
            }
        }
        function openBooking(id, old) {
            const r = rooms.find(x => x.id === id);
            if (!r) return;
            current = r;
            const s = state();
            $('#f_room').value = r.id; $('#f_sd').value = s.sd; $('#f_ed').value = s.ed; $('#f_st').value = s.st; $('#f_et').value = s.et;
            $('#bookModalTitle').innerHTML = (STAFF ? 'Book' : 'Request') + ' <em>' + esc(r.name) + '</em>';
            $('#modalSummary').innerHTML = summaryHTML(s) + (r.capacity ? '<span><span class="msi">groups</span>' + r.capacity + ' seats</span>' : '');
            if (old) {
                ['g_name', 'g_phone', 'g_pan', 'g_address', 'purpose', 'attendees', 'status', 'rate_type', 'custom_rate', 'discount', 'advance', 'advance_method', 'notes', 'admin_remarks'].concat(STAFF ? ['g_email'] : [])
                    .forEach(k => { const i = document.getElementById(k); if (i && old[k] !== undefined) i.value = old[k]; });
                if (f.send) f.send.checked = !!old.send_email;
                rateTouched = true;
            } else if (STAFF && !rateTouched) {
                f.rate.value = defaultRate(r, f.type.value, s);
            }
            recalc();
            modal.show();
        }
        modalEl.addEventListener('shown.bs.modal', () => { const first = f.name.value ? f.phone : f.name; if (first && !first.value) first.focus(); });
        if (STAFF) {
            f.type.addEventListener('change', () => { if (current && !rateTouched) f.rate.value = defaultRate(current, f.type.value, state()); recalc(); });
            f.rate.addEventListener('input', () => { rateTouched = true; });
            const autofill = () => {
                const g = guests[f.name.value.trim().toLowerCase()];
                const hint = $('#guestHint');
                if (!g) { hint.classList.remove('show'); return; }
                [[f.phone, g.p], [f.email, g.e], [f.pan, g.pan], [f.addr, g.a]].forEach(([i, v]) => { if (v && (!i.value || i.dataset.auto)) { i.value = v; i.dataset.auto = '1'; } });
                hint.classList.add('show');
                recalc();
            };
            f.name.addEventListener('change', autofill);
            f.name.addEventListener('input', () => { if (guests[f.name.value.trim().toLowerCase()]) autofill(); else $('#guestHint').classList.remove('show'); });
            [f.phone, f.email, f.pan, f.addr].forEach(i => i.addEventListener('input', () => { delete i.dataset.auto; }));
        }
        $('#bookForm').addEventListener('input', recalc);

        // First paint (server already sent availability), then auto-open when arriving from a schedule click
        $('#whenSummary').innerHTML = summaryHTML(state());
        paintChips(state());
        render();
        if (cfg.room) {
            const r = rooms.find(x => x.id === cfg.room);
            if (r && (r.available || cfg.old)) openBooking(r.id, cfg.old);
            else if (r) { const c = document.getElementById('room-' + r.id); if (c) { c.classList.add('focus'); c.scrollIntoView({ behavior: 'smooth', block: 'center' }); } lfToast(r.name + ' is already booked for this time — pick another space or time.', 'danger'); }
        }
    }

    // ---------- Final verification before a booking / request is sent ----------
    const vm = $('#verifyModal');
    if (vm && window.bootstrap) {
        const vmodal = new bootstrap.Modal(vm);
        let vform = null;
        document.addEventListener('submit', e => {
            const f = e.target;
            if (!f.dataset || !f.dataset.verify || f.dataset.verified) return;
            e.preventDefault();
            vform = f;
            const g = n => (f.elements[n] ? f.elements[n].value : '');
            const hrs = hoursBetween(g('s_time'), g('e_time')), days = daysBetween(g('start_date'), g('end_date'));
            $('#vfRoom').textContent = ($('#bookModalTitle') ? $('#bookModalTitle').textContent.replace(/^(Book|Request)\s*/, '') : '');
            $('#vfIn').textContent = dLabel(g('start_date')) + ' at ' + t12(g('s_time'));
            $('#vfOut').textContent = dLabel(g('end_date')) + ' at ' + t12(g('e_time'));
            $('#vfDur').textContent = days + ' day' + (days === 1 ? '' : 's') + ' × ' + hrs + ' hrs = ' + r2(days * hrs) + ' hours';
            const bm = bootstrap.Modal.getInstance($('#bookModal'));
            if (bm) bm.hide();
            vmodal.show();
        }, true);
        $('#vfBack').addEventListener('click', () => { vmodal.hide(); const bm = bootstrap.Modal.getOrCreateInstance($('#bookModal')); bm.show(); });
        $('#vfGo').addEventListener('click', () => {
            if (!vform) return;
            vform.dataset.verified = '1';
            $('#vfGo').disabled = true;
            vform.submit();
        });
    }

    // =================================================================
    // REVIEW A REQUEST (approve with price / decline)
    // =================================================================
    const rvEl = $('#reviewModal');
    if (rvEl && window.bootstrap) {
        const rv = new bootstrap.Modal(rvEl);
        const q = id => document.getElementById(id);
        let cur = null;
        const rvRecalc = () => {
            if (!cur) return;
            const t = calc({ sd: cur.sd, ed: cur.ed, st: cur.st, et: cur.et, type: q('rv_type').value, rate: q('rv_rate').value, discount: q('rv_disc').value });
            q('rv_total').textContent = fmt(t.grand, 2) + ' incl. VAT';
        };
        const stdRate = () => q('rv_type').value === 'hour' ? cur.hourly : (q('rv_type').value === 'flat' ? r2(cur.base * daysBetween(cur.sd, cur.ed)) : cur.base);
        document.addEventListener('click', e => {
            const b = e.target.closest('[data-review]');
            if (!b) return;
            cur = JSON.parse(b.dataset.review);
            q('rv_id').value = cur.id;
            q('rv_ref').textContent = 'Request ' + cur.ref;
            q('reviewTitle').innerHTML = 'Review <em>' + esc(cur.name) + '</em>';
            q('rv_type').value = cur.rate_type || 'day';
            q('rv_rate').value = cur.rate;
            q('rv_disc').value = cur.discount || 0;
            q('rv_remarks').value = cur.remarks || '';
            q('rv_edit').href = '?view=edit&id=' + cur.id;
            const rows = [['person', cur.name], ['mail', cur.email], ['call', cur.phone], ['meeting_room', cur.room + (cur.capacity ? ' · ' + cur.capacity + ' seats' : '')],
                          ['date_range', cur.dates], ['schedule', cur.time], ['celebration', (cur.purpose || '') + (cur.attendees ? (cur.purpose ? ' · ' : '') + cur.attendees + ' guests' : '')], ['sticky_note_2', cur.notes || '']];
            q('rv_summary').innerHTML = '<div class="eyebrow mb-2">Request summary</div>' + rows.filter(r => r[1]).map(r => '<div class="d-flex gap-2 mb-2 small"><span class="msi sm" style="color:var(--lf-forest)">' + r[0] + '</span><span style="word-break:break-word">' + esc(r[1]) + '</span></div>').join('') +
                (cur.rivals ? '<div class="clash soft mt-2"><span class="msi sm">group</span>' + cur.rivals + ' other request' + (cur.rivals > 1 ? 's' : '') + ' for this slot</div>' : '');
            const clash = q('rv_clash');
            clash.classList.toggle('d-none', !cur.clash); clash.classList.toggle('d-flex', !!cur.clash);
            clash.querySelector('span:last-child').innerHTML = cur.clash ? 'Already booked by <b>' + esc(cur.clash) + '</b>. Edit the request to move it, or decline it.' : '';
            q('rv_approve').disabled = !!cur.clash;
            rvRecalc();
            rv.show();
        });
        q('rv_type').addEventListener('change', () => { if (cur) q('rv_rate').value = stdRate(); rvRecalc(); });
        ['rv_rate', 'rv_disc'].forEach(id => q(id).addEventListener('input', rvRecalc));
    }

    // =================================================================
    // EDIT BOOKING — live price + availability
    // =================================================================
    if (window.LFH_EDIT) {
        const cfg = window.LFH_EDIT;
        const q = id => document.getElementById(id);
        const F = { room: q('room_id'), sd: q('start_date'), ed: q('end_date'), st: q('s_time'), et: q('e_time'), type: q('rate_type'), rate: q('custom_rate'), disc: q('discount') };
        const note = q('availNote');
        let timer = null, reqId = 0;
        const room = () => cfg.rooms[F.room.value] || { base: 0, hourly: 0, cap: null, name: '' };
        function std() {
            const r = room(), t = F.type.value;
            return t === 'hour' ? r.hourly : (t === 'flat' ? r2(r.base * daysBetween(F.sd.value, F.ed.value)) : r.base);
        }
        function recalc() {
            const t = calc({ sd: F.sd.value, ed: F.ed.value, st: F.st.value, et: F.et.value, type: F.type.value, rate: F.rate.value, discount: F.disc.value, paid: cfg.paid });
            paintPrice(t, F.type.value, F.rate.value);
            capCheck(room().cap);
            const s = std(), b = q('useStdRate');
            b.textContent = Math.abs(s - Number(F.rate.value)) > 0.004 ? 'Use standard rate: ' + fmt(s) + (F.type.value === 'hour' ? '/hr' : F.type.value === 'flat' ? ' package' : '/day') : '';
        }
        q('useStdRate').addEventListener('click', () => { F.rate.value = std(); recalc(); });
        function setNote(kind, html) {
            const colors = { ok: ['var(--lf-lime-tint)', '#1F5A17'], bad: ['var(--lf-red-tint)', '#8A2525'], wait: ['var(--surface-2)', 'var(--muted)'] }[kind];
            note.style.background = colors[0]; note.style.color = colors[1];
            note.innerHTML = html;
        }
        function check() {
            const s = { sd: F.sd.value, ed: F.ed.value, st: F.st.value, et: F.et.value };
            if (!s.sd || !s.ed || !s.st || !s.et) return;
            if (s.ed < s.sd) return setNote('bad', '<span class="msi sm">error</span>The end date is before the start date.');
            if (s.et <= s.st) return setNote('bad', '<span class="msi sm">error</span>The end time must be after the start time.');
            setNote('wait', '<span class="msi sm">hourglass_top</span>Checking availability…');
            const my = ++reqId;
            fetch('?api=availability&sd=' + s.sd + '&ed=' + s.ed + '&st=' + s.st + '&et=' + s.et + '&exclude=' + cfg.id).then(r => r.json()).then(d => {
                if (my !== reqId) return;
                if (!d.ok) return setNote('bad', '<span class="msi sm">error</span>' + esc(d.error));
                const me = d.rooms.find(r => String(r.id) === String(F.room.value));
                const free = d.rooms.filter(r => r.available && String(r.id) !== String(F.room.value));
                if (!me) return setNote('wait', '<span class="msi sm">info</span>This space is inactive — it will not be checked against other bookings.');
                if (me.available) return setNote('ok', '<span class="msi sm">check_circle</span><span><b>' + esc(me.name) + '</b> is free for this time.</span>');
                const c = me.conflicts[0];
                setNote('bad', '<span class="msi sm">event_busy</span><span>Clashes with <b>' + esc(c.guest) + '</b> (' + esc(c.ref) + ', ' + esc(c.dates) + ' · ' + esc(c.time) + ').' +
                    (free.length ? ' Free instead: ' + free.map(r => '<a href="#" data-switch="' + r.id + '">' + esc(r.name) + '</a>').join(', ') + '.' : ' No other space is free at this time.') + '</span>');
                $$('[data-switch]', note).forEach(a => a.addEventListener('click', e => { e.preventDefault(); F.room.value = a.dataset.switch; recalc(); check(); }));
            }).catch(() => setNote('wait', '<span class="msi sm">wifi_off</span>Could not check availability.'));
        }
        const soon = () => { clearTimeout(timer); timer = setTimeout(check, 300); };
        q('editForm').addEventListener('input', recalc);
        [F.room, F.sd, F.ed, F.st, F.et].forEach(i => i.addEventListener('change', () => { recalc(); soon(); }));
        recalc(); check();
    }

    // =================================================================
    // INVOICE BUILDER
    // =================================================================
    const invForm = $('#invForm');
    if (invForm) {
        const body = $('#invBody');
        function recalcInv() {
            let sub = 0;
            $$('tr', body).forEach((tr, i) => {
                const qty = Number(tr.querySelector('[name="item_qty[]"]').value) || 0;
                const rate = Number(tr.querySelector('[name="item_rate[]"]').value) || 0;
                const amt = r2(qty * rate);
                sub += amt;
                tr.querySelector('.amt').textContent = fmt(amt, 2);
                tr.querySelector('.sn').textContent = i + 1;
            });
            sub = r2(sub);
            const discIn = $('#invDiscount');
            const disc = Math.min(Math.max(0, Number(discIn.value) || 0), sub);
            const taxable = r2(sub - disc);
            const vatOn = $('#invVatOn').checked;
            const vat = vatOn ? r2(taxable * VAT / 100) : 0;
            const grand = r2(taxable + vat);
            $('#invSub').textContent = fmt(sub, 2);
            $('#invTaxable').textContent = fmt(taxable, 2);
            $('#invVat').textContent = fmt(vat, 2);
            $('#invVatRow').classList.toggle('d-none', !vatOn);
            $('#invDiscRow').classList.toggle('print-hide', disc <= 0);
            $('#invGrand').textContent = fmt(grand, 2);
            $('#invWords').textContent = amountWords(grand);
        }
        body.addEventListener('click', e => {
            const del = e.target.closest('.row-del');
            if (!del) return;
            if ($$('tr', body).length <= 1) { lfToast('An invoice needs at least one line.', 'danger'); return; }
            del.closest('tr').remove(); recalcInv();
        });
        $('#invAddRow').addEventListener('click', () => {
            const tr = document.createElement('tr');
            tr.innerHTML = '<td class="sn"></td><td><input name="item_desc[]" placeholder="e.g. Projector & sound system"></td><td><input name="item_date[]" placeholder="Date"></td>' +
                '<td><input name="item_qty[]" class="qty-in" type="number" step="0.25" min="0" value="1"></td><td><input name="item_rate[]" class="num-in" type="number" step="0.01" min="0" value="0"></td>' +
                '<td class="num fw-600 amt"></td><td class="no-print"><button type="button" class="row-del" title="Remove line" aria-label="Remove line"><span class="msi sm">close</span></button></td>';
            body.appendChild(tr); recalcInv(); tr.querySelector('input').focus();
        });
        invForm.addEventListener('input', recalcInv);
        invForm.addEventListener('change', recalcInv);
        recalcInv();
    }
    const invFilter = $('#invFilter');
    if (invFilter) invFilter.addEventListener('input', () => {
        const v = invFilter.value.trim().toLowerCase();
        $$('#invHistory [data-text]').forEach(a => { a.style.display = !v || a.dataset.text.includes(v) ? '' : 'none'; });
    });

    // =================================================================
    // SETTINGS — room modal
    // =================================================================
    const roomModalEl = $('#roomModal');
    if (roomModalEl) {
        const rm = new bootstrap.Modal(roomModalEl);
        const q = id => document.getElementById(id);
        const paintSw = () => $$('.color-swatch', roomModalEl).forEach(s => s.classList.toggle('on', s.dataset.color.toLowerCase() === q('rm_color').value.toLowerCase()));
        $$('.color-swatch', roomModalEl).forEach(s => s.addEventListener('click', () => { q('rm_color').value = s.dataset.color; paintSw(); }));
        q('rm_color').addEventListener('input', paintSw);
        $$('[data-room-edit]').forEach(b => b.addEventListener('click', () => {
            const d = b.dataset.roomEdit === 'new' ? null : JSON.parse(b.dataset.roomEdit);
            q('rm_id').value = d ? d.id : 0;
            q('rm_title').innerHTML = d ? 'Edit <em>' + esc(d.name) + '</em>' : 'Add <em>room</em>';
            q('rm_name').value = d ? d.name : '';
            q('rm_base').value = d ? d.base_rate : '';
            q('rm_hourly').value = d && d.hourly_rate !== null ? d.hourly_rate : '';
            q('rm_cap').value = d && d.capacity !== null ? d.capacity : '';
            q('rm_desc').value = d ? (d.description || '') : '';
            q('rm_amen').value = d ? (d.amenities || '') : 'High-Speed Wi-Fi, Air Conditioning, Ergonomic Chairs, Whiteboard, Power Backup';
            q('rm_active').checked = d ? !!d.is_active : true;
            const used = $$('.room-dot').length;
            q('rm_color').value = d ? d.color : $$('.color-swatch', roomModalEl)[used % 7].dataset.color;
            paintSw();
            rm.show();
        }));
    }
})();
</script>
</body>
</html>