catalog.php
<?php
// /admin/website_catalog.php
ini_set('display_errors', 1);
ini_set('display_startup_errors', 1);
error_reporting(E_ALL);


include $_SERVER['DOCUMENT_ROOT'].'/admin/pdo.inc';
include $_SERVER['DOCUMENT_ROOT'].'/includes/functions.inc';


// Require login
if (!isset($_COOKIE['SIM_id']) || !($SIMinfo = get_user_code())) {
  //exit('You need to log in.');
  
  $currentUrl = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS']=='on' ? 'https' : 'http').'://'.$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI'];
  $loginUrl   = '/login-app/auth/auth-modal.php?mode=login&return_url='.urlencode($currentUrl);
  
  ?>
  <div class="container center-wrap">
      <div class="card shadow-sm p-4">
        <h3 class="mb-2">Please log in to continue</h3>
        <p class="muted mb-3">You need to be logged in to request a proposal. Once you’re in, you’ll be brought right back here.</p>
        
        <button class="btn btn-primary mt-5">
            <a href="<?=$loginUrl ?>" class="btn btn-sm btn-secondary rounded text-white" 
             style="padding: 4px 5px 10px; font-size: 0.85rem; margin-right: 10px; height: 35px;">Log In</a>
        </button>


        </div>
    </div>
    <?
    exit;
}
$current_user_code = $SIMinfo['user_code'] ?? '';


$stmt = $pdo->prepare("SELECT user_code, user_type, first_name, last_name, email_address, company_name, phone_number
                       FROM simeya_users WHERE user_code=? LIMIT 1");
$stmt->execute([$current_user_code]);
$me = $stmt->fetch(PDO::FETCH_ASSOC);
//if (!$me) exit('User not found.');


$isSuper = (strtoupper($me['user_type'] ?? 'S') === 'A');


// Default “target” user = self
$target = $me;


if (!isset($_COOKIE['SIM_id']) || !($SIMinfo = get_user_code())) {
  exit("You need to log in.");
}


$user_code = $SIMinfo['user_code'] ?? '';


/* ---------- helpers ---------- */
if (!function_exists('h')) {
  function h($s){ return htmlspecialchars((string)$s, ENT_QUOTES, 'UTF-8'); }
}
function redirect_entity($entity, $msg='Saved') {
  $qs = http_build_query(['entity'=>$entity,'msg'=>$msg]);
  header("Location: ?$qs"); exit;
}


/* ---------- inputs ---------- */
$entity = $_GET['entity'] ?? 'services';           // 'services'|'addons'
$action = $_POST['action'] ?? ($_GET['action'] ?? '');
$id     = (int)($_POST['id'] ?? ($_GET['id'] ?? 0));


/* ---------- constants ---------- */
$CURRENCIES = ['USD','INR','AUD','EUR','GBP','CAD','JPY'];


/* ---------- save handlers ---------- */
if ($entity === 'services' && $action === 'save') {
  $row = [
    'category_id'  => (int)($_POST['category_id'] ?? 0),
    'name'         => trim($_POST['name'] ?? ''),
    'short_desc'   => trim($_POST['short_desc'] ?? ''),
    'price_note'   => trim($_POST['price_note'] ?? ''),
    'is_active'    => isset($_POST['is_active']) ? 1 : 0,
    'sort_order'   => (int)($_POST['sort_order'] ?? 0),
    'price_type'   => (($_POST['price_type'] ?? 'fixed') === 'hourly') ? 'hourly' : 'fixed',
    'currency'     => strtoupper(trim($_POST['currency'] ?? 'USD')),
    'price_fixed'  => $_POST['price_fixed']  !== '' ? (float)$_POST['price_fixed']  : null,
    'hourly_rate'  => $_POST['hourly_rate']  !== '' ? (float)$_POST['hourly_rate']  : null,
    'hourly_hours' => $_POST['hourly_hours'] !== '' ? (float)$_POST['hourly_hours'] : null,
  ];
  // normalize + legacy mirror
  if ($row['price_type'] === 'fixed') {
    if ($row['price_fixed'] === null) $row['price_fixed'] = 0.00;
    $row['hourly_rate'] = $row['hourly_hours'] = null;
    $base_price = $row['price_fixed'];
  } else {
    if ($row['hourly_rate'] === null)  $row['hourly_rate'] = 0.00;
    if ($row['hourly_hours'] === null) $row['hourly_hours'] = 0.00;
    $base_price = null;
  }


  if ($id) {
    $st=$pdo->prepare("
      UPDATE website_services
         SET category_id=?, name=?, short_desc=?, base_price=?, price_note=?, is_active=?, sort_order=?,
             price_type=?, currency=?, price_fixed=?, hourly_rate=?, hourly_hours=?
       WHERE id=?
    ");
    $st->execute([
      $row['category_id'],$row['name'],$row['short_desc'],$base_price,$row['price_note'],$row['is_active'],$row['sort_order'],
      $row['price_type'],$row['currency'],$row['price_fixed'],$row['hourly_rate'],$row['hourly_hours'],$id
    ]);
    redirect_entity('services','Service updated');
  } else {
    $st=$pdo->prepare("
      INSERT INTO website_services
        (category_id,name,short_desc,base_price,price_note,is_active,sort_order,
         price_type,currency,price_fixed,hourly_rate,hourly_hours)
      VALUES (?,?,?,?,?,?,?,?,?,?,?,?)
    ");
    $st->execute([
      $row['category_id'],$row['name'],$row['short_desc'],$base_price,$row['price_note'],$row['is_active'],$row['sort_order'],
      $row['price_type'],$row['currency'],$row['price_fixed'],$row['hourly_rate'],$row['hourly_hours']
    ]);
    redirect_entity('services','Service added');
  }
}


if ($entity === 'addons' && $action === 'save') {
  $row = [
    'name'         => trim($_POST['name'] ?? ''),
    'short_desc'   => trim($_POST['short_desc'] ?? ''),
    'is_active'    => isset($_POST['is_active']) ? 1 : 0,
    'sort_order'   => (int)($_POST['sort_order'] ?? 0),
    'price_type'   => (($_POST['price_type'] ?? 'fixed') === 'hourly') ? 'hourly' : 'fixed',
    'currency'     => strtoupper(trim($_POST['currency'] ?? 'USD')),
    'price_fixed'  => $_POST['price_fixed']  !== '' ? (float)$_POST['price_fixed']  : null,
    'hourly_rate'  => $_POST['hourly_rate']  !== '' ? (float)$_POST['hourly_rate']  : null,
    'hourly_hours' => $_POST['hourly_hours'] !== '' ? (float)$_POST['hourly_hours'] : null,
  ];
  // normalize + legacy mirror
  if ($row['price_type'] === 'fixed') {
    if ($row['price_fixed'] === null) $row['price_fixed'] = 0.00;
    $row['hourly_rate'] = $row['hourly_hours'] = null;
    $price_legacy = $row['price_fixed'];
  } else {
    if ($row['hourly_rate'] === null)  $row['hourly_rate'] = 0.00;
    if ($row['hourly_hours'] === null) $row['hourly_hours'] = 0.00;
    $price_legacy = null;
  }


  if ($id) {
    $st=$pdo->prepare("
      UPDATE website_service_addons
         SET name=?, short_desc=?, price=?, is_active=?, sort_order=?,
             price_type=?, currency=?, price_fixed=?, hourly_rate=?, hourly_hours=?
       WHERE id=?
    ");
    $st->execute([
      $row['name'],$row['short_desc'],$price_legacy,$row['is_active'],$row['sort_order'],
      $row['price_type'],$row['currency'],$row['price_fixed'],$row['hourly_rate'],$row['hourly_hours'],$id
    ]);
    redirect_entity('addons','Add-on updated');
  } else {
    $st=$pdo->prepare("
      INSERT INTO website_service_addons
        (name,short_desc,price,is_active,sort_order,
         price_type,currency,price_fixed,hourly_rate,hourly_hours)
      VALUES (?,?,?,?,?,?,?,?,?,?)
    ");
    $st->execute([
      $row['name'],$row['short_desc'],$price_legacy,$row['is_active'],$row['sort_order'],
      $row['price_type'],$row['currency'],$row['price_fixed'],$row['hourly_rate'],$row['hourly_hours']
    ]);
    redirect_entity('addons','Add-on added');
  }
}


/* ---------- loads for UI ---------- */
$cats = $pdo->query("
  SELECT id, name
  FROM website_categories
  ORDER BY sort_order, name
")->fetchAll(PDO::FETCH_ASSOC);


$services = $pdo->query("
  SELECT s.*, c.name AS cat_name
  FROM website_services s
  LEFT JOIN website_categories c ON c.id=s.category_id
  ORDER BY c.sort_order, s.sort_order, s.name
")->fetchAll(PDO::FETCH_ASSOC);


$addons = $pdo->query("
  SELECT *
  FROM website_service_addons
  ORDER BY sort_order, name
")->fetchAll(PDO::FETCH_ASSOC);


/* edit row */
$editRow = null;
if ($action === 'edit' && $id) {
  if ($entity === 'services') {
    $st=$pdo->prepare("SELECT * FROM website_services WHERE id=?");
    $st->execute([$id]);
    $editRow = $st->fetch(PDO::FETCH_ASSOC);
  } else {
    $st=$pdo->prepare("SELECT * FROM website_service_addons WHERE id=?");
    $st->execute([$id]);
    $editRow = $st->fetch(PDO::FETCH_ASSOC);
  }
}
?>
<!doctype html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <title>Website Catalog</title>
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css" rel="stylesheet">
</head>
<body class="bg-light">
    <div class="container py-4">


          <div class="d-flex justify-content-between align-items-center mb-3">
            <h2 class="mb-0">Website Catalog</h2>
            <div class="btn-group">
                  <a class="btn btn-outline-primary <?= $entity==='services'?'active':'' ?>" href="?entity=services">Services</a>
                  <a class="btn btn-outline-primary <?= $entity==='addons'?'active':'' ?>" href="?entity=addons">Add-ons</a>
            </div>
          </div>
  
        <?php
        include($_SERVER['DOCUMENT_ROOT'].'/templates/website/header-app.php');
        $k = 1;
        ?>


          <?php if (!empty($_GET['msg'])): ?>
            <div class="alert alert-success py-2"><?= h($_GET['msg']) ?></div>
          <?php endif; ?>


          <?php if ($entity === 'services'): ?>
            <div class="card mb-4">
                  <div class="card-header"><?= $editRow ? 'Edit Service' : 'Add Service' ?></div>
                  <div class="card-body">
                    <form method="post" class="row g-2 align-items-end">
                          <input type="hidden" name="action" value="save">
                          <input type="hidden" name="id" value="<?= $editRow ? (int)$editRow['id'] : 0 ?>">
                          <div class="col-md-2">
                            <label class="form-label">Category</label>
                            <select class="form-select" name="category_id" required>
                                  <option value="">Select…</option>
                                  <?php foreach ($cats as $c): ?>
                                    <option value="<?= (int)$c['id'] ?>" <?= $editRow && $editRow['category_id']==$c['id']?'selected':''; ?>>
                                          <?= h($c['name']) ?>
                                    </option>
                                  <?php endforeach; ?>
                            </select>
                          </div>
                          <div class="col-md-3">
                            <label class="form-label">Name</label>
                            <input class="form-control" name="name" value="<?= h($editRow['name'] ?? '') ?>" required>
                          </div>
                          <div class="col-md-3">
                            <label class="form-label">Short Description</label>
                            <input class="form-control" name="short_desc" value="<?= h($editRow['short_desc'] ?? '') ?>">
                          </div>


                        <!-- Pricing -->
                          <div class="col-md-2">
                            <label class="form-label">Price Type</label>
                            <select class="form-select" name="price_type" id="srv_price_type">
                                  <option value="fixed"  <?= ($editRow['price_type'] ?? 'fixed')==='fixed'?'selected':''; ?>>Fixed</option>
                                  <option value="hourly" <?= ($editRow['price_type'] ?? '')==='hourly'?'selected':''; ?>>Hourly</option>
                            </select>
                          </div>
                          <div class="col-md-2">
                            <label class="form-label">Currency</label>
                            <select class="form-select" name="currency">
                                  <?php foreach ($CURRENCIES as $cc): ?>
                                    <option value="<?= $cc ?>" <?= ($editRow['currency'] ?? 'USD')===$cc?'selected':''; ?>><?= $cc ?></option>
                                  <?php endforeach; ?>
                            </select>
                          </div>


                          <div class="col-md-2 srv-fixed">
                            <label class="form-label">Fixed Price</label>
                            <input class="form-control" type="number" step="0.01" name="price_fixed"
                                   value="<?= h($editRow['price_fixed'] ?? $editRow['base_price'] ?? '') ?>">
                          </div>
                          <div class="col-md-2 srv-hourly d-none">
                            <label class="form-label">Hourly Rate</label>
                            <input class="form-control" type="number" step="0.01" name="hourly_rate"
                                   value="<?= h($editRow['hourly_rate'] ?? '') ?>">
                          </div>
                          <div class="col-md-2 srv-hourly d-none">
                            <label class="form-label">Default Hours</label>
                            <input class="form-control" type="number" step="0.25" name="hourly_hours"
                                   value="<?= h($editRow['hourly_hours'] ?? '') ?>">
                          </div>


                          <div class="col-md-1">
                            <label class="form-label">Sort</label>
                            <input class="form-control" type="number" name="sort_order" value="<?= h($editRow['sort_order'] ?? 0) ?>">
                          </div>
                          <div class="col-md-1">
                            <label class="form-label d-block">Active</label>
                            <div class="form-check form-switch">
                                  <input class="form-check-input" type="checkbox" name="is_active" <?= !$editRow || !empty($editRow['is_active'])?'checked':''; ?>>
                            </div>
                          </div>
                          <div class="col-md-6">
                            <label class="form-label">Price Note (optional)</label>
                            <input class="form-control" name="price_note" value="<?= h($editRow['price_note'] ?? '') ?>">
                          </div>
                          <div class="col-md-6 d-flex gap-2 justify-content-end">
                            <button class="btn btn-primary">Save</button>
                            <a class="btn btn-outline-secondary" href="?entity=services">Cancel</a>
                          </div>
                    </form>
                  </div>
            </div>


            <div class="card">
                  <div class="card-header">Services</div>
                      <div class="card-body p-0">
                        <div class="table-responsive">
                              <table class="table table-sm align-middle mb-0">
                                <thead class="table-light">
                                      <tr>
                                        <th>#</th>
                                        <th>Category</th>
                                        <th>Name</th>
                                        <th>Description</th>
                                        <th class="text-end">Rate</th>
                                        <th class="text-end">Hours</th>
                                        <th class="text-end">Price</th>
                                        <th>Active</th>
                                        <th>Sort</th>
                                        <th style="width:120px"></th>
                                      </tr>
                                </thead>
                                <tbody>
                                      <?php foreach ($services as $s): ?>
                                        <?php
                                        if($s['hourly_rate'] > 0 && $s['hourly_hours'] > 0)
                                            $total = $s['hourly_rate'] * $s['hourly_hours'];
                                        else
                                            $total    = $s['price_fixed'];
                                        ?>
                                        <tr>
                                              <td><?= $k ?></td>
                                              <td><?= h($s['cat_name'] ?? '') ?></td>
                                              <td><?= h($s['name']) ?></td>
                                              <td class="text-muted small"><?= h($s['short_desc']) ?></td>
                  
                                              <td class="text-end">
                                                  <?php 
                                                  if($s['hourly_rate'] > 0)
                                                      echo number_format((float)$s['hourly_rate'],2);
                                                  else
                                                      echo '&nbsp'; 
                                                  $k++;
                                                  ?>
                                              </td>
                  
                                              <td class="text-end">
                                                  <?php 
                                                  if($s['hourly_hours'] > 0)
                                                      echo number_format((float)$s['hourly_hours'],2);
                                                  else
                                                      echo '&nbsp'; 
                                                  ?>
                                              </td>
                 
                                             <td class="text-end"><?= number_format((float)$total,2) ?></td>
                 
                                             <!--
                                              <td>
                                                <?php if (($s['price_type'] ?? 'fixed') === 'hourly'): ?>
                                                  <?= h($s['currency'] ?? 'USD') ?> <?= number_format((float)$s['hourly_rate'],2) ?>
                                                  × <?= number_format((float)$s['hourly_hours'],2) ?> hrs
                                                  <?php if (!empty($s['price_note'])): ?>
                                                <small class="text-muted">(<?= h($s['price_note']) ?>)</small>
                                                  <?php endif; ?>
                                                <?php else: ?>
                                                  <?= h($s['currency'] ?? 'USD') ?> <?= number_format((float)($s['price_fixed'] ?? $s['base_price'] ?? 0),2) ?>
                                                  <?php if (!empty($s['price_note'])): ?>
                                                <small class="text-muted">(<?= h($s['price_note']) ?>)</small>
                                                  <?php endif; ?>
                                                <?php endif; ?>
                                              </td>
                                              -->
                  
                                              <td><?= !empty($s['is_active']) ? 'Yes' : 'No' ?></td>
                                              <td><?= (int)$s['sort_order'] ?></td>
                                              <td class="text-end">
                                                <a class="btn btn-sm btn-outline-primary" href="?entity=services&action=edit&id=<?= (int)$s['id'] ?>">Edit</a>
                                              </td>
                                        </tr>
                                      <?php endforeach; ?>
                                </tbody>
                              </table>
                        </div>
                      </div>
                </div>


              <?php else: /* ADD-ONS */ ?>
                <div class="card mb-4">
                      <div class="card-header"><?= $editRow ? 'Edit Add-on' : 'Add Add-on' ?></div>
                      <div class="card-body">
                    <form method="post" class="row g-2 align-items-end">
                          <input type="hidden" name="action" value="save">
                          <input type="hidden" name="id" value="<?= $editRow ? (int)$editRow['id'] : 0 ?>">
                          <div class="col-md-4">
                            <label class="form-label">Name</label>
                            <input class="form-control" name="name" value="<?= h($editRow['name'] ?? '') ?>" required>
                          </div>
                          <div class="col-md-4">
                            <label class="form-label">Short Description</label>
                            <input class="form-control" name="short_desc" value="<?= h($editRow['short_desc'] ?? '') ?>">
                          </div>


                          <!-- Pricing -->
                          <div class="col-md-2">
                            <label class="form-label">Price Type</label>
                            <select class="form-select" name="price_type" id="add_price_type">
                                  <option value="fixed"  <?= ($editRow['price_type'] ?? 'fixed')==='fixed'?'selected':''; ?>>Fixed</option>
                                  <option value="hourly" <?= ($editRow['price_type'] ?? '')==='hourly'?'selected':''; ?>>Hourly</option>
                            </select>
                          </div>
                          <div class="col-md-2">
                            <label class="form-label">Currency</label>
                            <select class="form-select" name="currency">
                                  <?php foreach ($CURRENCIES as $cc): ?>
                                    <option value="<?= $cc ?>" <?= ($editRow['currency'] ?? 'USD')===$cc?'selected':''; ?>><?= $cc ?></option>
                                  <?php endforeach; ?>
                            </select>
                          </div>


                          <div class="col-md-2 add-fixed">
                            <label class="form-label">Fixed Price</label>
                            <input class="form-control" type="number" step="0.01" name="price_fixed"
                                   value="<?= h($editRow['price_fixed'] ?? $editRow['price'] ?? '') ?>">
                          </div>
                          <div class="col-md-2 add-hourly d-none">
                            <label class="form-label">Hourly Rate</label>
                            <input class="form-control" type="number" step="0.01" name="hourly_rate"
                                   value="<?= h($editRow['hourly_rate'] ?? '') ?>">
                          </div>
                          <div class="col-md-2 add-hourly d-none">
                            <label class="form-label">Default Hours</label>
                            <input class="form-control" type="number" step="0.25" name="hourly_hours"
                                   value="<?= h($editRow['hourly_hours'] ?? '') ?>">
                          </div>


                          <div class="col-md-1">
                            <label class="form-label">Sort</label>
                            <input class="form-control" type="number" name="sort_order" value="<?= h($editRow['sort_order'] ?? 0) ?>">
                          </div>
                          <div class="col-md-1">
                            <label class="form-label d-block">Active</label>
                            <div class="form-check form-switch">
                                  <input class="form-check-input" type="checkbox" name="is_active" <?= !$editRow || !empty($editRow['is_active'])?'checked':''; ?>>
                            </div>
                          </div>


                          <div class="col-md-12 d-flex gap-2 justify-content-end">
                            <button class="btn btn-primary">Save</button>
                            <a class="btn btn-outline-secondary" href="?entity=addons">Cancel</a>
                          </div>
                    </form>
                  </div>
            </div>


            <div class="card">
                  <div class="card-header">Add-ons</div>
                      <div class="card-body p-0">
                        <div class="table-responsive">
                              <table class="table table-sm align-middle mb-0">
                                <thead class="table-light">
                                      <tr>
                                        <th>#</th>
                                        <th>Name</th>
                                        <th>Description</th>
                                        <th class="text-end">Rate</th>
                                        <th class="text-end">Hours</th>
                                        <th class="text-end">Price</th>
                                        <th>Active</th>
                                    <th>Sort</th>
                                    <th style="width:120px"></th>
                                  </tr>
                            </thead>
                            <tbody>
                                  <?php foreach ($addons as $a): ?>
                                    <?php
                                        if($a['hourly_rate'] > 0 && $a['hourly_hours'] > 0)
                                            $total = $a['hourly_rate'] * $a['hourly_hours'];
                                        else
                                            $total    = $a['price_fixed'];
                                        ?>
                                    <tr>
                                          <td><?= $k ?></td>
                                          <td><?= h($a['name']) ?></td>
                                          <td class="text-muted small"><?= h($a['short_desc']) ?></td>
                                          
                                          <td class="text-end">
                                                  <?php 
                                                  if($a['hourly_rate'] > 0)
                                                      echo number_format((float)$a['hourly_rate'],2);
                                                  else
                                                      echo '&nbsp'; 
                                                  $k++;
                                                  ?>
                                              </td>
                  
                                              <td class="text-end">
                                                  <?php 
                                                  if($a['hourly_hours'] > 0)
                                                      echo number_format((float)$a['hourly_hours'],2);
                                                  else
                                                      echo '&nbsp'; 
                                                  ?>
                                              </td>
                                          
                                              <td class="text-end"><?= number_format((float)$total,2) ?></td>
                 
                                          <!--
                                          <td>
                                            <?php if (($a['price_type'] ?? 'fixed') === 'hourly'): ?>
                                              <?= h($a['currency'] ?? 'USD') ?> <?= number_format((float)$a['hourly_rate'],2) ?>
                                              × <?= number_format((float)$a['hourly_hours'],2) ?> hrs
                                            <?php else: ?>
                                                  <?= h($a['currency'] ?? 'USD') ?> <?= number_format((float)($a['price_fixed'] ?? $a['price'] ?? 0),2) ?>
                                            <?php endif; ?>
                                          </td>
                                          -->
                                          
                                          <td><?= !empty($a['is_active']) ? 'Yes' : 'No' ?></td>
                                          <td><?= (int)$a['sort_order'] ?></td>
                                          <td class="text-end">
                                            <a class="btn btn-sm btn-outline-primary" href="?entity=addons&action=edit&id=<?= (int)$a['id'] ?>">Edit</a>
                                          </td>
                                    </tr>
                                  <?php endforeach; ?>
                            </tbody>
                          </table>
                    </div>
                  </div>
            </div>
          <?php endif; ?>


    </div>


    <script>
        (function(){
              // toggle Fixed/Hourly visibility in forms
              const srvType = document.getElementById('srv_price_type');
              if (srvType) {
                const f = document.querySelectorAll('.srv-fixed');
                const h = document.querySelectorAll('.srv-hourly');
                function sync(){ const hourly = srvType.value==='hourly'; f.forEach(x=>x.classList.toggle('d-none', hourly)); h.forEach(x=>x.classList.toggle('d-none', !hourly)); }
                srvType.addEventListener('change', sync); sync();
              }
              const addType = document.getElementById('add_price_type');
              if (addType) {
                const f = document.querySelectorAll('.add-fixed');
                const h = document.querySelectorAll('.add-hourly');
                function sync(){ const hourly = addType.value==='hourly'; f.forEach(x=>x.classList.toggle('d-none', hourly)); h.forEach(x=>x.classList.toggle('d-none', !hourly)); }
                addType.addEventListener('change', sync); sync();
              }
        })();
    </script>
</body>
</html>




proposal_manage.php
<?php
// /templates/website/proposals_manage.php
ini_set('display_errors', 1);
ini_set('display_startup_errors', 1);
error_reporting(E_ALL);


include $_SERVER['DOCUMENT_ROOT'].'/admin/pdo.inc';
include $_SERVER['DOCUMENT_ROOT'].'/includes/functions.inc';


if (!isset($_COOKIE['SIM_id']) || !($SIMinfo = get_user_code())) {
  $currentUrl = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS']==='on' ? 'https' : 'http').'://'.$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI'];
  $loginUrl   = '/login-app/auth/auth-modal.php?mode=login&return_url='.urlencode($currentUrl);
  ?>
  <!doctype html><html><head>
    <meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css" rel="stylesheet">
  </head><body class="bg-light">
  <div class="container py-5">
    <div class="card shadow-sm p-4">
      <h3 class="mb-2">Please log in to continue</h3>
      <p class="text-muted mb-3">You need to be logged in to manage proposals. You’ll be brought right back here.</p>
      <a href="<?= htmlspecialchars($loginUrl) ?>" class="btn btn-primary">Log In / Join</a>
    </div>
  </div>
  </body></html>
  <?php
  exit;
}


$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
$pdo->exec("SET NAMES utf8mb4 COLLATE utf8mb4_unicode_ci");


$current_user_code = $SIMinfo['user_code'] ?? '';
$stmt = $pdo->prepare("SELECT user_code, user_type, first_name, last_name FROM simeya_users WHERE user_code COLLATE utf8mb4_unicode_ci = ? LIMIT 1");
$stmt->execute([$current_user_code]);
$me      = $stmt->fetch(PDO::FETCH_ASSOC);
$isSuper = (strtoupper($me['user_type'] ?? 'S') === 'A');


function formatDateTime($datetime) {
    $dt = new DateTime($datetime);
    return $dt->format('M d, Y h:i A'); 
}


function h($s){ return htmlspecialchars($s ?? '', ENT_QUOTES, 'UTF-8'); }


try {
  $pdo->exec("ALTER TABLE website_proposals ADD COLUMN IF NOT EXISTS status ENUM('draft','submitted','proposed','approved','deleted') NOT NULL DEFAULT 'draft'");
} catch (Throwable $e) {}


try {
  $pdo->exec("
    CREATE TABLE IF NOT EXISTS website_proposal_category_notes (
      id INT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
      proposal_id INT NOT NULL,
      category_id INT NOT NULL,
      user_code VARCHAR(20) NOT NULL,
      role ENUM('client','simeya') NOT NULL DEFAULT 'client',
      note TEXT NOT NULL,
      created_at TIMESTAMP NULL DEFAULT CURRENT_TIMESTAMP,
      INDEX (proposal_id),
      INDEX (category_id)
    ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_0900_ai_ci
  ");
} catch (Throwable $e) {}


$where  = '';
$params = [];
if ($isSuper) {
  $where = "WHERE COALESCE(status,'draft') <> 'deleted'";
} else {
  $where  = "WHERE (user_code COLLATE utf8mb4_unicode_ci = ? OR submitted_by COLLATE utf8mb4_unicode_ci = ?) AND COALESCE(status,'draft') <> 'deleted'";
  $params = [$current_user_code, $current_user_code];
}


$search = trim($_GET['q'] ?? '');
if ($search !== '') {
  $where     .= ($where ? " AND " : "WHERE ") . "(client_name LIKE ? OR email LIKE ? OR company_name LIKE ?)";
  $params[]   = "%$search%"; $params[] = "%$search%"; $params[] = "%$search%";
}


$sql = "SELECT p.* FROM website_proposals p $where ORDER BY p.id DESC";
$st  = $pdo->prepare($sql);
$st->execute($params);
$rows = $st->fetchAll(PDO::FETCH_ASSOC);


// ---------- Unread helper ----------
function unread_count_for($pdo, $pid, $viewer_code, $viewer_is_super) {
  $otherRole = $viewer_is_super ? 'client' : 'simeya';
  $st = $pdo->prepare("SELECT last_seen_note_id FROM website_proposal_note_seen WHERE proposal_id=? AND user_code COLLATE utf8mb4_unicode_ci=? LIMIT 1");
  $st->execute([$pid, $viewer_code]);
  $last = (int)($st->fetchColumn() ?: 0);


  $q = $pdo->prepare("SELECT COUNT(*) FROM website_proposal_category_notes WHERE proposal_id=? AND id > ? AND role = ?");
  $q->execute([$pid, $last, $otherRole]);
  return (int)$q->fetchColumn();
}
?>
<!doctype html>
<html>
<head>
<meta charset="utf-8">
<title>Proposal Management – Simeya</title>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css" rel="stylesheet">
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css" rel="stylesheet">
<style>
  .badge-status { text-transform: capitalize; }
  .row-toggle { cursor:pointer }
  .category-card { border-left: 4px solid var(--bs-primary); }
  .note { border-bottom: 1px dashed #e5e5e5; padding:.35rem 0; }
  .note .when { color:#6c757d; font-size:.85rem }
  .accord .card-header { background:#f8f9fa }
</style>
</head>
<body class="bg-light">


<h1 class="text-center mb-3">Simeya Requests / Propposals Manager</h1>
  
<div class="container py-2 text-center">
      
      <?php
    include($_SERVER['DOCUMENT_ROOT'].'/templates/website/header-app.php');
    ?>
    <!--
      <ul class="nav nav-tabs">
        <li class="nav-item"><a class="nav-link" href="/">Simeya Home</a></li>
        <li class="nav-item"><a class="nav-link" href="/web/">My Home</a></li>
        
        <?php if($isSuper): ?>
              <li class="nav-item"><a class="nav-link" href="/templates/website/catalog.php">Catalog</a></li>
            <li class="nav-item"><a class="nav-link" href="/templates/website/proposals_manage.php">Manage Proposals</a></li>
        <?php endif; ?>
        <li class="nav-item"><a class="nav-link" href="/templates/assign-template-blocks.php">DIY Website</a></li>
        <li class="nav-item"><a class="nav-link" href="/templates/website/proposal.php">Custom Website</a></li>
      </ul>
      -->
      
</div>


<div class="container py-4 w100" style="width: 1300px">
      <div class="d-flex justify-content-between align-items-center mb-3">
        <h1 class="mb-0">Requests / Proposals</h1>
        <div class="d-flex gap-2">
              <form class="d-flex" method="get" action="">
                <input class="form-control form-control-sm" name="q" value="<?= h($search) ?>" placeholder="Search name/email/company">
                <button class="btn btn-sm btn-outline-secondary">Search</button>
              </form>
              <a class="btn btn-sm btn-primary" href="/templates/website/proposal.php"><i class="fa-solid fa-square-plus"></i>New Proposal</a>
        </div>
      </div>


    <div class="text-center py-4">
        <strong>Action Keys:</strong>
        <ul class="nav nav-tabs mb-3 w100">
                  <li class="nav-item m-1">
                      <span style="font-size: 1em; color: green;">
                          <i class="fa-solid fa-pen"></i> Edit
                      </span>
                  </li>
                <li class="nav-item m-1">
                    <span style="font-size: 1em; color: Tomato;">
                        <i class="fa-solid fa-trash"></i> Delete
                    </span>
                </li>
                <li class="nav-item m-1">
                    <span style="font-size: 1em; color: Mediumslateblue;"> 
                        <i class="fa-solid fa-keyboard"></i> Submitted
                      </span>
                  </li>
                  
                  <li class="nav-item m-1">
                      <span style="font-size: 1em; color: Dodgerblue;">
                          <i class="fa-solid fa-book"></i> Proposed
                      </span>
                  </li>
 
                <li class="nav-item m-1">
                    <span style="font-size: 1em; color: salmon;">
                        <i class="fa-solid fa-circle-check"></i> Proposal Approved
                    </SPAN>
                </li>
                
                <li class="nav-item m-1">
                    <span style="font-size: 1em; color: rgb(59, 91, 152);">
                        <i class="fa-solid fa-calendar-check"></i> Site Approved
                    </span>
                </li>
                <li class="nav-item m-1">
                    <span style="font-size: 1em; color: Tomato;">
                        <i class="fa-solid fa-file-pdf"></i>> PDF
                    </span>
                </li>
                
                <li class="nav-item m-1">
                    <span style="font-size: 1em; color: Tomato;">
                        <i class="fa-solid fa-book"></i> Notes
                    </span>
                </li>
                <li class="nav-item m-1">
                    <span style="font-size: 1em; color: Tomato;">
                        <i class="fa-solid fa-file-import"></i> Files
                    </span>
                </li>
        </ul>  
             
    </div>
    
      <div class="table-responsivew100">
        <table class="table table-lg table-bordered bg-white align-middle w100">
              <thead class="table-light">
                <tr>
                      <th style="width:35px">#</th>
                      <th>Client</th>
                      <th>Contact</th>
                      <th style="width:190px" class="text-end">Totals (USD)</th>
                      <th style="width:120px">Created</th>
                      <th style="width:90px" class="text-center">Status</th>
                      <th style="width:140px" class="text-center">Actions</th>
                </tr>
              </thead>
              <tbody>
          
                <?php if (!$rows): ?>
                      <tr><td colspan="7" class="text-center text-muted py-4">No proposals yet.</td></tr>
                <?php endif; ?>


                <?php foreach ($rows as $p): ?>
                      <?php
                    $pid    = (int)$p['id'];
                    $status = $p['status'] ?: 'draft';
                    $badgeClass = [
                      'draft'=>'secondary','submitted'=>'warning',
                      'proposed'=>'info','approved'=>'success','deleted'=>'dark'
                    ][$status] ?? 'secondary';
            
                    $unread = unread_count_for($pdo, $pid, $current_user_code, $isSuper);
                      ?>
                      <tr data-proposal-row="<?= $pid ?>">
                
                        <td>
                              <?= $pid ?>
                              <span class="row-toggle text-primary" data-proposal="<?= $pid ?>">
                                <i class="fa-solid fa-square-plus"></i>
                              </span> 
                        </td>
                
                        <td>
                              <strong><?= h($p['client_name']) ?></strong>
                              <?php if ($p['company_name']): ?>
                                <div class="text-muted small"><?= h($p['company_name']) ?></div>
                              <?php endif; ?>
                        </td>
                
                        <td>
                              <div><?= h($p['email']) ?></div>
                              <?php if ($p['phone']): ?><div class="text-muted small"><?= h($p['phone']) ?></div><?php endif; ?>
                        </td>
                
                        <td class="text-start">
                              <div class="row">
                                <div class="col-md-6">Services:</div>
                                <div class="col-md-6 text-end"><?= number_format((float)$p['subtotal'],2) ?></div>
                              </div>
                              <div class="row">
                                <div class="col-md-6 text-muted small">Add-ons:</div>
                                <div class="col-md-6 text-end text-muted small"><?= number_format((float)$p['addons_total'],2) ?></div>
                              </div>
                              <div class="row">
                                <div class="col-md-6 text-muted small"><strong>Total:</strong></div>
                                <div class="col-md-6 text-end text-muted small"><strong><?= number_format((float)$p['grand_total'],2) ?></strong></div>
                              </div>
                        </td>
            
                        <td><?= formatDateTime((string)$p['created_at']) ?></td>
          
                        <td class="text-center">
                              <span class="badge bg-<?= $badgeClass ?> badge-status"><?= h($status) ?></span>
                              <?php if ($unread > 0): ?>
                                <span class="badge bg-danger ms-1" title="New notes from the other party"><?= (int)$unread ?> new</span>
                              <?php endif; ?>
                        </td>
            
                        <td class="text-center">
                              <button
                                class="btn btn-sm btn-primary js-open-actions"
                                data-id="<?= $pid ?>"
                                data-status="<?= h($status) ?>"
                                data-is-super="<?= $isSuper?1:0 ?>">
                                <i class="fa-solid fa-bolt"></i> Actions
                              </button>
                        </td>


                      </tr>


                      <tr class="d-none" id="details-<?= $pid ?>">
                        <td colspan="7" class="bg-light">
                              <div class="p-3" data-details-body="<?= $pid ?>">
                                <div class="text-muted">Loading…</div>
                              </div>
                        </td>
                      </tr>
                <?php endforeach; ?>
            </tbody>
        </table>
    </div>
</div>


<div class="modal fade" id="actionsModal" tabindex="-1" aria-hidden="true">
      <div class="modal-dialog modal-dialog-centered">
        <div class="modal-content">
              <div class="modal-header">
                <h5 class="modal-title">
                      Proposal <span id="am-proposal-id" class="text-muted"></span> – Actions
                </h5>
                <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
              </div>


              <div class="modal-body">
                <div class="list-group" id="am-actions" style="font-size:20px">
                      <!-- Buttons are shown/hidden in JS based on role/status -->
                      <button type="button" class="list-group-item list-group-item-action d-flex justify-content-between align-items-center am-edit" data-action="edit">
                        <span><i class="fa fa-pen me-2"></i>Edit Proposal</span>
                      </button>


                      <button type="button" class="list-group-item list-group-item-action d-flex justify-content-between align-items-center am-delete text-danger" data-action="delete">
                        <span><i class="fa fa-trash me-2"></i>Delete Proposal</span>
                      </button>


                      <!-- Status (client side) -->
                      <button type="button" class="list-group-item list-group-item-action am-submit" data-action="status" data-status="submitted">
                        <i class="fa fa-paper-plane me-2"></i>Submit (Client)
                      </button>
                      <button type="button" class="list-group-item list-group-item-action am-approve-client" data-action="status" data-status="approved">
                        <i class="fa fa-check me-2"></i>Approve Proposal (Client)
                      </button>


                      <?php if ($isSuper) { ?>
                          <!-- Status (admin side) -->
                          <button type="button" class="list-group-item list-group-item-action am-proposed" data-action="status" data-status="proposed">
                            <i class="fa fa-clipboard-check me-2"></i>Mark as Proposed (Admin)
                          </button>
                          <button type="button" class="list-group-item list-group-item-action am-approve-admin" data-action="status" data-status="approved">
                            <i class="fa fa-check me-2"></i>Approve Proposal (Admin)
                          </button>


                          <!-- Compose / View -->
                          <button type="button" class="list-group-item list-group-item-action am-compose" data-action="compose">
                            <i class="fa-solid fa-file-pen me-2"></i>Compose Final (Admin)
                          </button>
                          <button type="button" class="list-group-item list-group-item-action am-preview" data-action="preview">
                            <i class="fa-solid fa-eye me-2"></i>Preview Final (Admin)
                          </button>
                          <?php
                      }
                      ?>
                      
                      <button type="button" class="list-group-item list-group-item-action am-view" data-action="view">
                        <i class="fa-solid fa-eye me-2"></i>View Final (Client)
                      </button>


                      <!-- Utilities -->
                      <button type="button" class="list-group-item list-group-item-action am-pdf" data-action="pdf">
                            <i class="fa fa-file-pdf me-2"></i>Export PDF
                      </button>
                      <button type="button" class="list-group-item list-group-item-action am-notes" data-action="notes">
                        <i class="fa-regular fa-note-sticky me-2"></i>Open Notes
                      </button>
                      <button type="button" class="list-group-item list-group-item-action am-images" data-action="images">
                        <i class="fa-regular fa-image me-2"></i>Open Images
                      </button>
                </div>
              </div>


              <div class="modal-footer">
                <button class="btn btn-secondary" data-bs-dismiss="modal">Close</button>
              </div>
        </div>
      </div>
</div>


<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js"></script>
<script>
// ---- CKEditor/Notes Initializer (runs on injected details) ----
window.SimeyaNotes = (function(){
  function loadCKE(url, cb){
    if (window.CKEDITOR) return cb && cb();
    var s=document.createElement('script');
    s.src=url; s.onload=function(){cb&&cb();};
    document.head.appendChild(s);
  }
  function ensureId(el){ if(!el.id) el.id='note_'+Math.random().toString(36).slice(2); return el.id; }
  function hasCke(el){ return window.CKEDITOR && el.id && CKEDITOR.instances[el.id]; }
  function getContent(el){ return hasCke(el)?CKEDITOR.instances[el.id].getData():el.value; }
  function setContent(el,html){ if(hasCke(el)) CKEDITOR.instances[el.id].setData(html||''); else el.value=html||''; }


  function wire(root){
    // Quick insert
    root.querySelectorAll('.js-quick').forEach(function(btn){
      btn.addEventListener('click',function(e){
        e.preventDefault();
        var form=btn.closest('form.js-note-form');
        var ta=form.querySelector('textarea[name="note"]');
        var prefix=btn.dataset.text||'';
        setContent(ta, prefix + (getContent(ta)||''));
        if(hasCke(ta)) CKEDITOR.instances[ta.id].focus(); else ta.focus();
      });
    });


    // Submit
    root.querySelectorAll('form.js-note-form').forEach(function(form){
      form.addEventListener('submit',function(e){
        e.preventDefault();
        var ta=form.querySelector('textarea[name="note"]');
        var msg=(getContent(ta)||'').trim();
        if(!msg) return;
        var pid=form.dataset.proposal,cid=form.dataset.category;
        var status=form.querySelector('.js-status');
        status.textContent='Saving…';
        fetch('/templates/website/ajax_proposal_note_add.php',{
          method:'POST',
          headers:{'Content-Type':'application/x-www-form-urlencoded'},
          body:'proposal_id='+encodeURIComponent(pid)+'&category_id='+encodeURIComponent(cid)+'&note='+encodeURIComponent(msg)
        }).then(r=>r.json()).then(js=>{
          if(!js.success) throw new Error(js.error||'Failed');
          var wrap=form.closest('.card-body').querySelector('.mb-2');
          var div=document.createElement('div');
          div.className='note';
          div.style.borderBottom='1px dashed #e5e5e5';
          div.style.padding='.35rem 0';
          div.innerHTML='<div>'+js.html.note+'</div><div class="when" style="color:#6c757d;font-size:.85rem)">'+js.html.meta+'</div>';
          wrap.appendChild(div);
          setContent(ta,'');
          status.textContent='Saved';
          setTimeout(()=>status.textContent='',1200);
        }).catch(err=>{
          status.textContent=err.message||'Error';
        });
      });
    });


    // Load CKEditor and apply to textareas
    loadCKE('/backend/assets/js/ckeditor/ckeditor.js', function(){
      root.querySelectorAll('form.js-note-form textarea[name="note"]').forEach(function(ta){
        ensureId(ta);
        if(CKEDITOR.instances[ta.id]) return;
        CKEDITOR.replace(ta.id, {
          height: 120,
          removePlugins: 'elementspath',
          resize_enabled: false,
          toolbar: [
            ['Bold','Italic','Underline','Link','Unlink'],
            ['BulletedList','NumberedList','Blockquote','RemoveFormat']
          ]
        });
      });
    });
  }


  return { init: wire };
})();
</script>


<script>
// Expand/collapse and lazy-load details (delegated) + solid toggle of the +/- icon
document.addEventListener('click', function(e){
  const t = e.target.closest('.row-toggle');
  if (!t) return;


  const id         = t.dataset.proposal;
  const detailsRow = document.getElementById('details-'+id);
  const icon       = t.querySelector('i');


  const opening = detailsRow.classList.contains('d-none');


  // Toggle row visibility
  detailsRow.classList.toggle('d-none', !opening);


  // Keep ARIA (if you later make it a <button>)
  t.setAttribute('aria-expanded', opening ? 'true' : 'false');


  // Normalize icon classes to avoid FA alias issues
  if (icon) {
    icon.classList.remove('fa-square-plus','fa-plus-square','fa-square-minus','fa-minus-square');
    icon.classList.add('fa-solid', opening ? 'fa-square-minus' : 'fa-square-plus');
  }


  // Lazy-load only when opening the row
  if (opening) {
    const body = detailsRow.querySelector('[data-details-body="'+id+'"]');
    if (!body.dataset.loaded) {
      fetch('/templates/website/ajax_proposal_details.php?id='+encodeURIComponent(id))
        .then(r=>r.text())
        .then(html=>{
          body.innerHTML = html;
          body.dataset.loaded = "1";
          window.SimeyaNotes && window.SimeyaNotes.init(body);
        })
        .catch(()=>{ body.innerHTML = '<div class="text-danger">Failed to load details.</div>'; });
    }
  }
});


// Status updates
document.querySelectorAll('.js-status').forEach(function(btn){
  btn.addEventListener('click', function(){
    const id = this.dataset.id, status = this.dataset.status;
    if (!confirm('Change proposal #'+id+' to "'+status+'"?')) return;
    fetch('/templates/website/ajax_proposal_status.php', {
      method:'POST',
      headers:{'Content-Type':'application/x-www-form-urlencoded'},
      body:'id='+encodeURIComponent(id)+'&status='+encodeURIComponent(status)
    }).then(r=>r.json()).then(js=>{
      if (!js.success) throw new Error(js.error||'Failed');
      location.reload();
    }).catch(e=>alert(e.message));
  });
});


// Delete (soft-delete)
document.querySelectorAll('.js-delete').forEach(function(btn){
  btn.addEventListener('click', function(){
    const id = this.dataset.id;
    if (!confirm('Delete proposal #'+id+'?')) return;
    fetch('/templates/website/ajax_proposal_status.php', {
      method:'POST',
      headers:{'Content-Type':'application/x-www-form-urlencoded'},
      body:'id='+encodeURIComponent(id)+'&status=deleted'
    }).then(r=>r.json()).then(js=>{
      if (!js.success) throw new Error(js.error||'Failed');
      location.reload();
    }).catch(e=>alert(e.message));
  });
});
</script>


<script>
function openRowAndFocus(pid, selectorWithinDetails){
  const toggle     = document.querySelector('.row-toggle[data-proposal="'+pid+'"]');
  if (!toggle) return;
  const detailsRow = document.getElementById('details-'+pid);
  const icon       = toggle.querySelector('i');


  // Ensure row is open and icon shows "minus"
  if (detailsRow.classList.contains('d-none')) {
    detailsRow.classList.remove('d-none');
    toggle.setAttribute('aria-expanded','true');
    if (icon) {
      icon.classList.remove('fa-square-plus','fa-plus-square');
      icon.classList.add('fa-solid','fa-square-minus');
    }
  }


  const ensureLoaded = () => {
    const body = detailsRow.querySelector('[data-details-body="'+pid+'"]');
    if (!body || !body.dataset.loaded) { setTimeout(ensureLoaded, 120); return; }
    const target = body.querySelector(selectorWithinDetails);
    if (target) {
      // open its collapse if needed
      if (target.hasAttribute('data-bs-target')) {
        target.click();
      } else {
        const nearestBtn = target.closest('.card')?.querySelector('[data-bs-toggle="collapse"]');
        nearestBtn && nearestBtn.click();
      }
      target.scrollIntoView({behavior:'smooth', block:'center'});
    }
  };


  const body = detailsRow.querySelector('[data-details-body="'+pid+'"]');
  if (!body.dataset.loaded) {
    fetch('/templates/website/ajax_proposal_details.php?id='+encodeURIComponent(pid))
      .then(r=>r.text())
      .then(html=>{
        body.innerHTML = html;
        body.dataset.loaded = "1";
        window.SimeyaNotes && window.SimeyaNotes.init(body);
        ensureLoaded();
      });
  } else {
    ensureLoaded();
  }
}


// Shortcuts that open the row and jump to sections
document.querySelectorAll('.js-open-notes').forEach(btn=>{
  btn.addEventListener('click', function(){
    openRowAndFocus(this.dataset.id, '.category-card:first-of-type [data-bs-toggle="collapse"]');
  });
});
document.querySelectorAll('.js-open-uploads').forEach(btn=>{
  btn.addEventListener('click', function(){
    openRowAndFocus(this.dataset.id, '.category-card:first-of-type .js-upload-form input[type="file"]');
  });
});
</script>




<script>
    (function(){
          const modalEl   = document.getElementById('actionsModal');
          const modal     = new bootstrap.Modal(modalEl);
          const listWrap  = document.getElementById('am-actions');
          const idSpan    = document.getElementById('am-proposal-id');


          let current = { id:null, status:'draft', isSuper:0 };


          // Helper: show/hide buttons based on state
          function configureButtons() {
            const s = current.status;      // 'draft' | 'submitted' | 'proposed' | 'approved'
            const A = !!(+current.isSuper); // admin?


            // hide all first
            listWrap.querySelectorAll('.list-group-item').forEach(b => b.classList.add('d-none'));


            // Always available
            show('.am-edit');
            show('.am-delete');
            show('.am-pdf');
            show('.am-notes');
            show('.am-images');


            if (A) {
                  // Admin side
                  if (s === 'draft' || s === 'submitted') show('.am-proposed'); // Mark as Proposed
                  if (s !== 'approved') show('.am-approve-admin');              // Approve
                  // Compose / Preview (admin)
                  show('.am-compose');
                  show('.am-preview');
            } else {
                  // Client side
                  if (s === 'draft')     show('.am-submit');          // Submit
                  if (s === 'proposed')  show('.am-approve-client');  // Approve
                  if (s === 'proposed' || s === 'approved') show('.am-view'); // View final
            }
          }
          function show(sel){ const el=listWrap.querySelector(sel); if(el) el.classList.remove('d-none'); }


          // Open modal from table button
          document.addEventListener('click', function(e){
            const btn = e.target.closest('.js-open-actions');
            if (!btn) return;
            current.id      = btn.dataset.id;
            current.status  = btn.dataset.status || 'draft';
            current.isSuper = btn.dataset.isSuper || '0';
            idSpan.textContent = '#'+current.id;
            configureButtons();
            modal.show();
          });


          // Click handlers inside modal
          listWrap.addEventListener('click', function(e){
            const item = e.target.closest('.list-group-item');
            if (!item) return;
            const action = item.dataset.action;


            // Close modal first for snappy UX
            modal.hide();


            switch (action) {
                  case 'edit':
                    location.href = '/templates/website/proposal_view.php?id='+encodeURIComponent(current.id);
                    break;


                  case 'delete':
                    if (!confirm('Delete proposal #'+current.id+'?')) return;
                    fetch('/templates/website/ajax_proposal_status.php', {
                          method:'POST',
                          headers:{'Content-Type':'application/x-www-form-urlencoded'},
                          body: 'id='+encodeURIComponent(current.id)+'&status=deleted'
                    }).then(r=>r.json()).then(js=>{
                          if (!js.success) throw new Error(js.error||'Failed');
                          location.reload();
                    }).catch(err=>alert(err.message||'Error'));
                    break;


                  case 'status': {
                    const newStatus = item.dataset.status;
                    if (!confirm('Change proposal #'+current.id+' to "'+newStatus+'"?')) return;
                    fetch('/templates/website/ajax_proposal_status.php', {
                          method:'POST',
                          headers:{'Content-Type':'application/x-www-form-urlencoded'},
                          body: 'id='+encodeURIComponent(current.id)+'&status='+encodeURIComponent(newStatus)
                    }).then(r=>r.json()).then(js=>{
                          if (!js.success) throw new Error(js.error||'Failed');
                          location.reload();
                    }).catch(err=>alert(err.message||'Error'));
                    break;
                  }


                  case 'compose':
                    location.href = '/templates/website/proposal_compose.php?id='+encodeURIComponent(current.id);
                    break;


                  case 'preview': // admin preview
                    window.open('/templates/website/proposal_final_view.php?id='+encodeURIComponent(current.id), '_blank');
                    break;


                  case 'view':    // client view (same URL)
                    location.href = '/templates/website/proposal_final_view.php?id='+encodeURIComponent(current.id);
                    break;


                  case 'pdf':
                    window.open('/services/proposal_export.php?id='+encodeURIComponent(current.id), '_blank');
                    break;


                  case 'notes':
                    // open row & focus notes like your existing shortcut
                    openRowAndFocus(current.id, '.category-card:first-of-type [data-bs-toggle=\"collapse\"]');
                    break;


                  case 'images':
                    openRowAndFocus(current.id, '.category-card:first-of-type .js-upload-form input[type=\"file\"]');
                    break;
            }
          });
    })();
</script>


</body>
</html>


proposal_submit.php
<?php
// /templates/website/proposal_submit.php
ini_set('display_errors', 1);
ini_set('display_startup_errors', 1);
error_reporting(E_ALL);


include($_SERVER['DOCUMENT_ROOT'].'/admin/pdo.inc');
include($_SERVER['DOCUMENT_ROOT'].'/includes/functions.inc');


$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);


/* ---------------- Helpers ---------------- */


function ints_from_post_array($key): array {
  $vals = $_POST[$key] ?? [];
  if (!is_array($vals)) $vals = [];
  return array_values(array_unique(array_map('intval', $vals)));
}
function h($s){ return htmlspecialchars((string)$s, ENT_QUOTES, 'UTF-8'); }
function fnum($v): float { return is_numeric($v) ? (float)$v : 0.0; }


/**
 * Try to load USD conversion rates from an optional table:
 *   CREATE TABLE currency_rates (code CHAR(3) PRIMARY KEY, rate_to_usd DECIMAL(18,8), updated_at TIMESTAMP NULL);
 * where rate_to_usd = USD per 1 unit of 'code'. (USD: 1.0)
 *
 * Returns ['USD'=>1.0, 'EUR'=>1.07, ...]. If table missing or empty, falls back to ['USD'=>1.0].
 */
function load_rates_to_usd(PDO $pdo): array {
  try {
    $rows = $pdo->query("SELECT code, rate_to_usd FROM currency_rates")->fetchAll(PDO::FETCH_KEY_PAIR);
    if (!$rows) return ['USD'=>1.0];
    // normalize codes + coerce numeric
    $out = [];
    foreach ($rows as $code => $rate) {
      $code = strtoupper(trim($code));
      $r = (float)$rate;
      if ($code && $r > 0) $out[$code] = $r;
    }
    if (!isset($out['USD'])) $out['USD'] = 1.0;
    return $out;
  } catch (Throwable $e) {
    // Table probably doesn't exist. Safe fallback:
    return ['USD'=>1.0];
  }
}


/**
 * Compute a line's ORIGINAL amount & currency from a service/add-on row.
 * Supports:
 *   - Fixed: uses price_fixed (fallback: legacy base_price/price)
 *   - Hourly: hourly_rate × hours (hours can be overridden via $hoursOverrideIfAny)
 */
function compute_original_amount(array $row, ?float $hoursOverrideIfAny = null): array {
  $ptype = strtolower($row['price_type'] ?? 'fixed');
  $ccy   = strtoupper($row['currency'] ?? 'USD');


  if ($ptype === 'hourly') {
    $rate  = fnum($row['hourly_rate'] ?? 0);
    $hoursDefault = fnum($row['hourly_hours'] ?? 0);
    $hours = is_null($hoursOverrideIfAny) ? $hoursDefault : max(0, $hoursOverrideIfAny);
    $amt   = $rate * $hours;
    return [$amt, $ccy, $rate, $hours, 'hourly'];
  } else {
    // fixed
    $fixed = $row['price_fixed'] ?? $row['base_price'] ?? $row['price'] ?? 0;
    $amt   = fnum($fixed);
    return [$amt, $ccy, $amt, null, 'fixed']; // (for fixed we carry amt as "rate" for display symmetry)
  }
}


/** Get rate to USD; default 1.0 if unknown. */
function rate_to_usd(string $ccy, array $rates): float {
  $ccy = strtoupper($ccy);
  return $rates[$ccy] ?? 1.0;
}


/* -------------- Collect header fields -------------- */
$user_code     = trim($_POST['user_code'] ?? '');
$client_name   = trim($_POST['client_name'] ?? '');
$email         = trim($_POST['email'] ?? '');


$for_user_code = trim($_POST['for_user_code'] ?? '');
$submitted_by  = trim($_POST['submitted_by'] ?? '');


if ($client_name === '' || $email === '') {
  http_response_code(400);
  echo 'Missing required fields. <a href="javascript:history.back()">Go back</a>';
  exit;
}
$company   = trim($_POST['company_name'] ?? '');
$phone     = trim($_POST['phone'] ?? '');
$website   = trim($_POST['website'] ?? '');
$desc      = trim($_POST['project_desc'] ?? '');
$budget    = trim($_POST['budget_range'] ?? '');
$timeline  = trim($_POST['timeline'] ?? '');


/* Selected IDs from the form */
$serviceIds = ints_from_post_array('services');
$addonIds   = ints_from_post_array('addons');


/* (Optional) Hours overrides posted from proposal.php if you add names there later.
   Accept any of these shapes if you decide to post them:
   - $_POST['hours_services'][<service_id>]
   - $_POST['hours_addons'][<addon_id>]
   - $_POST['hours']['svc'][<service_id>] / $_POST['hours']['add'][<addon_id>]
*/
$hours_services = isset($_POST['hours_services']) && is_array($_POST['hours_services']) ? $_POST['hours_services'] : [];
$hours_addons   = i_