modulos_internal/contracts/progress.php

<?php
error_reporting(E_ALL);
ini_set("display_errors", 1);

date_default_timezone_set("Australia/Hobart");

// Adjust path if your contracts live elsewhere.
if (!defined('CONTRACTS_DIR')) {
    define('CONTRACTS_DIR', realpath(__DIR__ . '/contracts'));
}

function contract_path_for_client(string $clientid): string {
    $id = preg_replace('/[^A-Za-z0-9_-]/', '', $clientid);
    return rtrim(CONTRACTS_DIR, '/\\') . DIRECTORY_SEPARATOR . $id . '.md';
}

/** Very small front-matter puller; same idea as contracts admin */
function extract_front_matter_fields_progress(string $file): array {
    $out = [];
    $txt = @file_get_contents($file);
    if (!$txt) return $out;
    if (!preg_match('/^---\s*\R(.*?)\R---/s', $txt, $m)) return $out;
    $fm = $m[1];
    // admin.secret or admin_secret
    if (preg_match('/^\s*admin\s*:\s*$(.*?)^(?=\S)/ms', $fm."\nX", $block)) {
        $adminBlock = $block[1];
        if (preg_match('/^\s*secret\s*:\s*["\']?([^"\']+)["\']?/mi', $adminBlock, $mm)) {
            $out['admin_secret'] = trim($mm[1]);
        }
    }
    if (empty($out['admin_secret']) && preg_match('/^\s*admin_secret\s*:\s*["\']?([^"\']+)["\']?/mi', $fm, $mm)) {
        $out['admin_secret'] = trim($mm[1]);
    }
    return $out;
}

/** Build the exact token we expect for the public progress page */
function progress_expected_token(string $clientid, $appId): ?string {
    $path = contract_path_for_client($clientid);
    $fm   = extract_front_matter_fields_progress($path);
    $secret = $fm['admin_secret'] ?? '';
    if ($secret === '') return null;
    return hash_hmac('sha256', 'progress|' . (string)$appId, $secret);
}


$cfg = require __DIR__ . '/config.php';

$dsn = 'mysql:host=' . $cfg['db_host'] . ';dbname=' . $cfg['db_name'] . ';charset=utf8mb4';
$options = [
    PDO::ATTR_ERRMODE            => PDO::ERRMODE_EXCEPTION,
    PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
];

try {
    $pdo = new PDO($dsn, $cfg['db_username'], $cfg['db_password'], $options);
} catch (PDOException $e) {
    exit('Database connection failed: ' . $e->getMessage());
}

$app_id_raw = $_GET['id'] ?? '';
$token      = $_GET['token'] ?? '';

$app_id = preg_match('/^\d+$/', $app_id_raw) ? $app_id_raw : '0';

// Verify token (optional: match your token logic)
$stmt = $pdo->prepare("SELECT client_email, reference, created_at, submission_date, required_by, clock_paused, clock_paused_at, clock_pause_reason FROM applications WHERE id = ?");
$stmt->execute([$app_id]);
$app = $stmt->fetch(PDO::FETCH_ASSOC);

if (!$app) {
    http_response_code(404);
    exit("Application not found.");
}

// Fetch stages
$stmt = $pdo->prepare("SELECT * FROM application_stages WHERE application_id = ? ORDER BY position ASC");
$stmt->execute([$app_id]);
$stages = $stmt->fetchAll(PDO::FETCH_ASSOC);

$totalStages = 7;
$currentStage = count(array_filter($stages, function ($s) {
    return strtolower(trim($s['status'] ?? '')) === 'complete';
}));
$progress = round(($currentStage / $totalStages) * 100);

$isPaused = (int)($app['clock_paused'] ?? 0) === 1;
$pauseReason = trim((string)($app['clock_pause_reason'] ?? ''));

$decisionDate = null;

// 1) Look for an explicit 'Council Decision Due' stage date
$decisionStage = null;
foreach ($stages as $s) {
    if (stripos($s['title'] ?? '', 'decision') !== false && !empty($s['stage_date'])) {
        $decisionStage = $s;
        break;
    }
}

if ($decisionStage) {
    $decisionDate = new DateTime($decisionStage['stage_date'], new DateTimeZone('Australia/Hobart'));
} elseif (!empty($app['required_by'])) {
    $decisionDate = new DateTime($app['required_by'], new DateTimeZone('Australia/Hobart'));
} elseif (!empty($app['submission_date'])) {
    $decisionDate = (new DateTime($app['submission_date'], new DateTimeZone('Australia/Hobart')))->modify('+42 days');
}

// set a friendly “end of business day” time so the countdown isn’t midnight-awkward
if ($decisionDate) { $decisionDate->setTime(17, 0, 0); }
$decisionIso = $decisionDate ? $decisionDate->format('c') : '';

// --- Create correspondence entry ---
if ($_SERVER['REQUEST_METHOD'] === 'POST' && ($_POST['action'] ?? '') === 'add_correspondence') {
    $tz = new DateTimeZone('Australia/Hobart');

    $typeAllow      = ['incoming','outgoing','note'];
    $channelAllow   = ['email','phone','portal','letter','meeting','other'];
    $visibilityAllow= ['client','internal'];

    $type       = in_array($_POST['type'] ?? 'note', $typeAllow, true) ? $_POST['type'] : 'note';
    $channel    = in_array($_POST['channel'] ?? 'other', $channelAllow, true) ? $_POST['channel'] : 'other';
    $visibility = in_array($_POST['visibility'] ?? 'client', $visibilityAllow, true) ? $_POST['visibility'] : 'client';
    $subject    = trim($_POST['subject'] ?? '') ?: null;
    $author     = trim($_POST['author'] ?? '') ?: null;
    $pin        = isset($_POST['pin']) ? 1 : 0;

    $bodyRaw    = trim($_POST['body'] ?? '');
    if ($bodyRaw === '') { $bodyRaw = '(no content)'; }

    // event_at: prefer user input, else "now"
    $eventAtRaw = trim($_POST['event_at'] ?? '');
    try {
        $eventAt = $eventAtRaw ? new DateTime($eventAtRaw, $tz) : new DateTime('now', $tz);
    } catch (Exception $e) {
        $eventAt = new DateTime('now', $tz);
    }

    $stmt = $pdo->prepare("
        INSERT INTO application_correspondence
        (application_id, event_at, type, channel, subject, body, author, visibility, pin)
        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
    ");
    $stmt->execute([
        $app_id,
        $eventAt->format('Y-m-d H:i:s'),
        $type,
        $channel,
        $subject,
        $bodyRaw,
        $author,
        $visibility,
        $pin
    ]);

    // Redirect to avoid resubmission and jump to the timeline section
    header("Location: ".$_SERVER['REQUEST_URI']."#correspondence");
    exit;
}

// Fetch timeline (newest first; pinned first)
$stmt = $pdo->prepare("
  SELECT id, event_at, type, channel, subject, body, author, visibility, pin, created_at
  FROM application_correspondence
  WHERE application_id = ?
  ORDER BY pin DESC, event_at DESC, id DESC
  LIMIT 200
");
$stmt->execute([$app_id]);
$correspondence = $stmt->fetchAll(PDO::FETCH_ASSOC);

/* NEW: attachment counts (and optional details) */
$fileCounts = [];
$filesByCorr = []; // if you also want to list the files

if (!empty($correspondence)) {
    $ids = array_column($correspondence, 'id');
    $ph  = implode(',', array_fill(0, count($ids), '?'));

    // Count files per correspondence
    $qc = $pdo->prepare("
        SELECT correspondence_id, COUNT(*) AS n
        FROM application_correspondence_files
        WHERE correspondence_id IN ($ph)
        GROUP BY correspondence_id
    ");
    $qc->execute($ids);
    foreach ($qc->fetchAll(PDO::FETCH_ASSOC) as $r) {
        $fileCounts[(int)$r['correspondence_id']] = (int)$r['n'];
    }

    // OPTIONAL: load file details if you want links
    $qd = $pdo->prepare("
        SELECT correspondence_id, original_name, file_url
        FROM application_correspondence_files
        WHERE correspondence_id IN ($ph)
        ORDER BY id ASC
    ");
    $qd->execute($ids);
    foreach ($qd->fetchAll(PDO::FETCH_ASSOC) as $f) {
        $cid = (int)$f['correspondence_id'];
        if (!isset($filesByCorr[$cid])) $filesByCorr[$cid] = [];
        $filesByCorr[$cid][] = $f;
    }
}


// ------------------ HELPERS ------------------
function render_body_html(string $text): string {
    // escape first
    $s = htmlspecialchars($text, ENT_QUOTES, 'UTF-8');
    // linkify http(s)
    $s = preg_replace('~(https?://[^\s<]+)~i', '<a href="$1" target="_blank" rel="noopener">$1</a>', $s);
    // newlines to <br>
    return nl2br($s);
}

function stage_icon_for(string $title): string {
    $t = strtolower($title);
    if (str_contains($t,'submit'))    return 'bi-upload';
    if (str_contains($t,'ack'))       return 'bi-inbox';
    if (str_contains($t,'fee') || str_contains($t,'paid')) return 'bi-cash-coin';
    if (str_contains($t,'valid') || str_contains($t,'confirm')) return 'bi-check2-circle';
    if (str_contains($t,'advert'))    return 'bi-megaphone';
    if (str_contains($t,'decision'))  return 'bi-check-circle-fill';
    return 'bi-flag';
}

// Admin bypass: valid HTTP Basic Auth skips the client token check
$_au = $cfg['admin_user'] ?? '';
$_ap = $cfg['admin_pass'] ?? '';
$isAdmin = $_au !== '' && $_ap !== ''
    && isset($_SERVER['PHP_AUTH_USER'])
    && $_SERVER['PHP_AUTH_USER'] === $_au
    && ($_SERVER['PHP_AUTH_PW'] ?? '') === $_ap;

if (!$isAdmin) {
    // --- Require signed token from Contracts Admin link ---
    $clientid = $_GET['clientid'] ?? '';
    $token    = $_GET['token']    ?? '';

    if (!preg_match('/^[A-Za-z0-9_-]+$/', $clientid)) {
        http_response_code(400);
        exit('Bad link (clientid).');
    }
    if ($token === '') {
        header('WWW-Authenticate: Basic realm="Modulos Contracts Admin"');
        http_response_code(403);
        exit('Missing token.');
    }

    // Build expected token from the .md front matter secret
    $expected = progress_expected_token($clientid, $app_id);
    if (!$expected || !hash_equals($expected, $token)) {
        http_response_code(403);
        exit('Invalid or expired link.');
    }
}
unset($_au, $_ap);

?>
<!doctype html>
<html lang="en">
	<head>
		<meta charset="utf-8">
		<meta name="viewport" content="width=device-width, initial-scale=1">
		<title> <?= htmlspecialchars($app['reference']) ?> – Application Progress</title>
		<link rel="shortcut icon" href="../../internal/images/blueprint.ico" type="image/x-icon">
		<meta name="robots" content="noindex">
		<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.7/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-LN+7fdVzj6u52u30Kp6M/trliBMCMKTyK833zpbD+pXdCLuTusPj697FH4R/5mcr" crossorigin="anonymous">
		<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.7/dist/js/bootstrap.bundle.min.js" integrity="sha384-ndDqU0Gzau9qJ1lfW4pNLlhNTkCfHzAVBReH9diLvGRem5+R9g2FzA8ZGN954O5Q" crossorigin="anonymous"></script>
		<link href="../../internal/css/blueprint.css" rel="stylesheet">
		<link href="../../internal/css/print.css" rel="stylesheet" media="print">
		<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.13.1/font/bootstrap-icons.min.css">
		<link href="progress.css" rel="stylesheet">
		<style>
			.popover-attachments {
				max-width: 360px;
			}

			.popover-attachments .popover-body {
				padding: .5rem .75rem;
			}

			/* wrapper so lots of steps can scroll horizontally on small screens */
			.timeline-wrap {
				overflow-x: auto;
				-webkit-overflow-scrolling: touch;
				padding-bottom: .25rem;
				/* keep scrollbar off arrows */
			}

			/* your snippet */
			#timeline {
				list-style: none;
				display: flex;
				width: 100%;
				margin: 0;
			}

			#timeline .icon {
				font-size: 14px;
			}

			#timeline li {
				flex: 1 1 0;
				min-width: 0;
			}

			#timeline li a {
				color: #FFF;
				display: block;
				background: #3498db;
				text-decoration: none;
				position: relative;
				height: 40px;
				line-height: 40px;
				padding: 0 12px 0 8px;
				text-align: center;
				margin-right: 23px;
				white-space: nowrap;
			}

			#timeline li:nth-child(even) a {
				background-color: #2980b9;
			}

			#timeline li:nth-child(even) a:before {
				border-color: #2980b9;
				border-left-color: transparent;
			}

			#timeline li:nth-child(even) a:after {
				border-left-color: #2980b9;
			}

			#timeline li:first-child a {
				padding-left: 15px;
				border-radius: 0;
			}

			#timeline li:first-child a:before {
				border: none;
			}

			#timeline li:last-child a {
				padding-right: 15px;
				border-radius: 0;
			}

			#timeline li:last-child a:after {
				border: none;
			}

			#timeline li a:before,
			#timeline li a:after {
				content: "";
				position: absolute;
				top: 0;
				border: 0 solid #3498db;
				border-width: 20px 10px;
				width: 0;
				height: 0;
			}

			#timeline li a:before {
				left: -20px;
				border-left-color: transparent;
			}

			#timeline li a:after {
				left: 100%;
				border-color: transparent;
				border-left-color: #3498db;
			}

			#timeline li a:hover {
				background-color: #1abc9c;
			}

			#timeline li a:hover:before {
				border-color: #1abc9c;
				border-left-color: transparent;
			}

			#timeline li a:hover:after {
				border-left-color: #1abc9c;
			}

			#timeline li a:active {
				background-color: #16a085;
			}

			#timeline li a:active:before {
				border-color: #16a085;
				border-left-color: transparent;
			}

			#timeline li a:active:after {
				border-left-color: #16a085;
			}

			/* Icon tweaks inside the pill */
			#timeline li a .bi {
				font-size: 1rem;
				vertical-align: -1px;
				margin-right: .35rem;
			}

			#timeline li a small {
				opacity: .9;
				margin-left: .35rem;
			}

			/* Stack on small screens (match original breakpoint) */
			@media (max-width: 1399px) {
				#timeline {
					display: block;
				}

				/* stop flex row */
				#timeline li {
					flex: 0 0 100%;
					max-width: 100%;
					margin: .5rem 0;
				}

				#timeline li a {
					height: auto;
					line-height: 1.3;
					padding: .65rem .9rem;
					/* comfy pill */
					border-radius: .25rem;
				}

				/* remove arrow heads when stacked */
				#timeline li a:before,
				#timeline li a:after {
					content: none !important;
					border: 0 !important;
				}
			}

			/* ---- STATE COLOURS (match original) ---- */
			#timeline li.is-current a {
				background: #97846E;
				/* brown */
				color: #EADFD7;
				/* cream text */
			}

			#timeline li.is-current a:before {
				border-color: #97846E;
				border-left-color: transparent;
			}

			#timeline li.is-current a:after {
				border-left-color: #97846E;
			}

			/* “Complete” = green pill + dark green text */
			#timeline li.is-complete a {
				background: #d1e7dd;
				color: #0f5132;
			}

			#timeline li.is-complete a:before {
				border-color: #d1e7dd;
				border-left-color: transparent;
			}

			#timeline li.is-complete a:after {
				border-left-color: #d1e7dd;
			}

			/* “Pending / Upcoming” greys */
			#timeline li.is-pending a {
				background: #e9ecef;
				color: #055160;
				/* same as original */
			}

			#timeline li.is-pending a:before {
				border-color: #e9ecef;
				border-left-color: transparent;
			}

			#timeline li.is-pending a:after {
				border-left-color: #e9ecef;
			}

			/* optional alias if you ever emit `is-upcoming` */
			#timeline li.is-upcoming a {
				background: #dee2e6;
				color: #495057;
			}

			#timeline li.is-upcoming a:before {
				border-color: #dee2e6;
				border-left-color: transparent;
			}

			#timeline li.is-upcoming a:after {
				border-left-color: #dee2e6;
			}

			/* Ensure state colours don’t change on hover */
			#timeline li.is-current a:hover,
			#timeline li.is-complete a:hover,
			#timeline li.is-pending a:hover,
			#timeline li.is-upcoming a:hover {
				background: inherit;
				color: inherit;
			}

			#timeline li.is-current a:hover:before,
			#timeline li.is-complete a:hover:before,
			#timeline li.is-pending a:hover:before,
			#timeline li.is-upcoming a:hover:before {
				border-color: inherit;
				border-left-color: transparent;
			}

			#timeline li.is-current a:hover:after,
			#timeline li.is-complete a:hover:after,
			#timeline li.is-pending a:hover:after,
			#timeline li.is-upcoming a:hover:after {
				border-left-color: currentColor;
				/* overridden below for exact bg match */
			}

			/* Keep triangle colour exactly the same as the pill bg */
			#timeline li.is-current a:hover:after {
				border-left-color: #97846E;
			}

			#timeline li.is-complete a:hover:after {
				border-left-color: #d1e7dd;
			}

			#timeline li.is-pending a:hover:after {
				border-left-color: #e9ecef;
			}

			#timeline li.is-upcoming a:hover:after {
				border-left-color: #dee2e6;
			}

			/* Dates row colours (xxl-only row in your markup) */
			.step-dates li.is-complete {
				color: #0f5132;
			}

			.step-dates li.is-current {
				color: #7c6a57;
				font-weight: 600;
			}

			.step-dates li.is-pending,
			.step-dates li.is-upcoming {
				color: #6c757d;
			}

			/* Stack rules you already added still apply */
			@media (max-width: 1399px) {
				#timeline {
					display: block;
				}

				#timeline li {
					flex: 0 0 100%;
					max-width: 100%;
					margin: .5rem 0;
				}

				#timeline li a {
					height: auto;
					line-height: 1.3;
					padding: .65rem .9rem;
					border-radius: .25rem;
				}

				#timeline li a:before,
				#timeline li a:after {
					content: none !important;
					border: 0 !important;
				}
			}
		</style>
	</head>
	<body>
		<!--
<nav class="navbar bg-dark border-bottom border-body d-print-none" data-bs-theme="dark"><div class="container"><a class="navbar-brand text-white" href="#"><img src="../internal/images/blueprint-logo-light.png" width="30" height="24" class="d-inline-block align-text-top" alt="Modulos">
Modulos Design
</a></div></nav>
-->
		<main class="container my-4">
			<div class="bg-white p-4 p-md-5 rounded-0 shadow-sm">
				<div class="row align-items-center page-header">
					<div class="col-12 col-md-6 text-start">
						<!-- CUSTOMER DETAILS HERE -->
					</div>
					<div class="col-12 col-md-6 text-end pt-2">
						<h3 class="fw-bold mb-1 text-dark">Development Application</h3>
						<h3 class="fw-bold mb-1 text-dark">Application No: <?= htmlspecialchars($app['reference']) ?> </h3>
						<h5 class="mb-0 text-muted">Started: <?= date("d M Y", strtotime($app['created_at'])) ?> </h5>
					</div>
				</div>
				<hr class="my-4">
				<div class="row my-4">
					<div class="col-12 align-self-center">
						<div class="steps"> <?php
// Build a flexible steps array straight from DB rows (ordered by position)
$steps = [];
foreach ($stages as $row) {
    $steps[] = [
        'title'  => trim($row['title'] ?? '') ?: ('Stage ' . (string)($row['position'] + 1)),
        'status' => in_array(strtolower($row['status'] ?? ''), ['complete','current','pending'], true)
                    ? strtolower($row['status'])
                    : 'pending',
        'date'   => $row['stage_date'] ?: ($row['updated_at'] ?: ($row['created_at'] ?? null)),
    ];
}

// Ensure we always have a “current”
$hasCurrent = false;
foreach ($steps as $s) { if (($s['status'] ?? '') === 'current') { $hasCurrent = true; break; } }
if (!$hasCurrent && !empty($steps)) {
    $lastComplete = -1;
    foreach ($steps as $i => $s) if (($s['status'] ?? '') === 'complete') $lastComplete = $i;
    if ($lastComplete >= 0) $steps[$lastComplete]['status'] = 'current';
    else $steps[0]['status'] = 'current';
}

// formatter
$fmtDate = function ($v) {
    $t = $v ? strtotime($v) : 0;
    return $t ? date('D d M y', $t) : '';
};
?> <div class="timeline-wrap text-center my-4">
								<ul id="timeline" class="mb-0 w-100 "> <?php foreach ($steps as $s): 
        $state = 'is-' . ($s['status'] ?? 'pending');
        $titleSafe = htmlspecialchars($s['title'], ENT_QUOTES, 'UTF-8');
        $dateText  = $fmtDate($s['date']);
        $iconClass = stage_icon_for($s['title']);
        $isComplete = ($s['status'] === 'complete');
        $isCurrent  = ($s['status'] === 'current');
        $prefix     = (!$isComplete && !$isCurrent && $dateText) ? 'Due ' : '';
        $tooltip    = $titleSafe . ($dateText ? ' — ' . $prefix . $dateText : '');
    ?>
    <li class="
										<?= $state ?>">
										<a href="#" title="
											<?= $tooltip ?>">
											<span class="bi 
												<?= $iconClass ?>">
											</span> <?= $titleSafe ?> <?php if ($dateText): ?> <small class="d-block d-xxl-none opacity-75 ms-4"> <?= htmlspecialchars($prefix . $dateText, ENT_QUOTES, 'UTF-8') ?> </small> <?php endif; ?> </a>
									</li> <?php endforeach; ?> </ul>
								<ul class="step-dates d-none d-xxl-flex"> <?php foreach ($steps as $s):
      						$state = 'is-' . ($s['status'] ?? 'pending');
      $dateText  = $fmtDate($s['date']);
      $isComplete = ($s['status'] === 'complete');
      $isCurrent  = ($s['status'] === 'current');
      $prefix     = (!$isComplete && !$isCurrent && $dateText) ? 'Due ' : '';
  ?>
  <li class="
										<?= htmlspecialchars($state, ENT_QUOTES, 'UTF-8') ?>"> <?= $dateText ? htmlspecialchars($prefix . $dateText, ENT_QUOTES, 'UTF-8') : '&nbsp;' ?> </li> <?php endforeach; ?> </ul>
							</div>
							<div class="row px-5">
								<div class="col-12"> <?php if (!empty($decisionIso)): ?> <?php if ($isPaused): ?> <div class="alert alert-warning d-flex align-items-center" role="alert">
										<i class="bi bi-pause-circle me-2"></i>
										<div> Statutory clock paused by council request. <?php if ($pauseReason !== ''): ?> <span class="text-muted">Reason: <?= htmlspecialchars($pauseReason) ?> </span> <?php endif; ?> </div>
									</div>
									<!-- No ticking countdown shown while paused --> <?php else: ?> <div class="countdown" data-target-date="
										<?= htmlspecialchars($decisionIso) ?>">
									</div> <?php endif; ?> <?php endif; ?> </div>
							</div>
							<div class="row"> <?php if (empty($stages)): ?> <div class="col-12">
									<div class="alert alert-warning">This application has not started yet.</div>
								</div> <?php endif; ?> </div>
							<hr class="my-4">
							<div class="row">
								<div class="col-12 text-center">
									<h4>Timeline of Correspondence</h4>
								</div>
							</div>
							<div class="row py-3">
								<div class="col">
									<div class="timeline"> <?php
                            $badgeMap = [
                                'email_incoming' => 'bi-envelope-arrow-up',
                                'email_outgoing' => 'bi-send-check',
                                'phone_incoming' => 'bi-telephone-inbound',
                                'phone_outgoing' => 'bi-telephone-outbound',
                                'note'           => 'bi-journal-text'
                            ];
                            $fallbackByChannel = [
                                'email'   => 'bi-envelope',
                                'phone'   => 'bi-telephone',
                                'meeting' => 'bi-people',
                                'other'   => 'bi-chat-dots'
                            ];

                            $typeLabel = ['incoming'=>'Incoming','outgoing'=>'Outgoing','note'=>'Note'];
                            $chLabel   = ['email'=>'Email','phone'=>'Phone','meeting'=>'Meeting','other'=>'Other'];

                            foreach ($correspondence as $row):
                            $id = (int)$row['id'];
                            $typeVal    = strtolower(trim($row['type'] ?? 'note'));
                            $channelVal = strtolower(trim($row['channel'] ?? 'other'));
                            $key        = ($typeVal === 'note') ? 'note' : "{$channelVal}_{$typeVal}";
                            $icon       = $badgeMap[$key] ?? ($fallbackByChannel[$channelVal] ?? 'bi-journal-text');

                            $when      = (new DateTime($row['event_at'], new DateTimeZone('Australia/Hobart')))->format('d M Y, h:ia');
                            $visBadge  = $row['visibility']==='internal' ? '
											<span class="badge rounded-pill text-bg-secondary ms-2">Internal</span>' : '';
                            $typeClass = 'type-'.preg_replace('/[^a-z]/','', $typeVal);

                            $numFiles = $fileCounts[$id] ?? 0;                    // <- NEW
                            $hasFiles = $numFiles > 0;                            // <- NEW
                            ?> <div class="timeline-item 
												<?= $row['pin'] ? 'pinned' : '' ?>">
											<div class="timeline-badge">
												<i class="bi 
														<?= $icon ?>">
												</i>
											</div>
											<div class="timeline-panel 
													<?= $typeClass ?>">
												<div class="timeline-heading d-flex justify-content-between align-items-start">
													<div>
														<h6 class="mb-1"> <?= $when ?> • <?= $typeLabel[$typeVal] ?? ucfirst($typeVal) ?> via <?= $chLabel[$channelVal] ?? ucfirst($channelVal) ?> <?= $visBadge ?> <?php if ($row['pin']): ?> <i class="bi bi-pin-angle-fill text-warning ms-1" title="Pinned"></i> <?php endif; ?> <?php if (!empty($filesByCorr[$id])): ?> <span class="ms-2 att-pop" role="button" tabindex="0" data-bs-toggle="popover" data-bs-trigger="hover focus" data-bs-placement="top" data-bs-custom-class="popover-attachments" data-content-id="att-popover-
																	<?= $id ?>" title="Attachments (
																	<?= (int)$numFiles ?>)">
																<i class="bi bi-paperclip"></i>
															</span> <?php endif; ?> </h6>
														<small class="text-muted"> <?= htmlspecialchars($row['subject'] ?: ucfirst($typeVal)) ?> <?= $row['author'] ? ' • by: '.htmlspecialchars($row['author']) : '' ?> </small>
													</div>
												</div>
												<div class="timeline-body mt-2 small"> <?= render_body_html($row['body']) ?> </div>
											</div>
										</div> <?php endforeach; ?> <?php if (empty($correspondence)): ?> <div class="text-muted">No correspondence recorded yet.</div> <?php endif; ?> </div>
								</div>
							</div>
						</div> <?php foreach ($filesByCorr as $cid => $files): ?> <div id="att-popover-
								<?= (int)$cid ?>" class="d-none"> <?php foreach ($files as $f): ?> <div class="py-1">
								<a href="
										<?= htmlspecialchars($f['file_url'], ENT_QUOTES) ?>" target="_blank" rel="noopener">
									<i class="bi bi-file-earmark-pdf"></i> <?= htmlspecialchars($f['original_name'], ENT_QUOTES) ?> </a>
							</div> <?php endforeach; ?> </div> <?php endforeach; ?>
		</main>
		<script>
			const countdownEls = document.querySelectorAll(".countdown")
			countdownEls.forEach(countdownEl => createCountdown(countdownEl))

			function createCountdown(countdownEl) {
				const target = new Date(countdownEl.dataset.targetDate);
				const parts = {
					days: {
						text: ["days", "day"],
						dots: 30
					},
					hours: {
						text: ["hours", "hour"],
						dots: 24
					},
					minutes: {
						text: ["minutes", "minute"],
						dots: 60
					},
					seconds: {
						text: ["seconds", "second"],
						dots: 60
					},
				}
				Object.entries(parts).forEach(([key, value]) => {
					const partEl = document.createElement("div");
					partEl.classList.add("part", key);
					partEl.style.setProperty("--dots", value.dots);
					value.element = partEl;
					const remainingEl = document.createElement("div");
					remainingEl.classList.add("remaining");
					remainingEl.innerHTML = `
							<span class="number"></span>
							<span class="text"></span>`
					partEl.append(remainingEl);
					for (let i = 0; i < value.dots; i++) {
						const dotContainerEl = document.createElement("div");
						dotContainerEl.style.setProperty("--dot-idx", i);
						dotContainerEl.classList.add("dot-container")
						const dotEl = document.createElement("div");
						dotEl.classList.add("dot")
						dotContainerEl.append(dotEl);
						partEl.append(dotContainerEl);
					}
					countdownEl.append(partEl);
				})
				getRemainingTime(target, parts)
			}

			function getRemainingTime(target, parts, first = true) {
				const now = new Date()
				if (first) console.log({
					target,
					now
				})
				const remaining = {}
				let seconds = Math.floor((target - (now)) / 1000);
				let minutes = Math.floor(seconds / 60);
				let hours = Math.floor(minutes / 60);
				let days = Math.floor(hours / 24);
				hours = hours - (days * 24);
				minutes = minutes - (days * 24 * 60) - (hours * 60);
				seconds = seconds - (days * 24 * 60 * 60) - (hours * 60 * 60) - (minutes * 60);
				Object.entries({
					days,
					hours,
					minutes,
					seconds
				}).forEach(([key, value]) => {
					const remaining = parts[key].element.querySelector(".number");
					const text = parts[key].element.querySelector(".text");
					remaining.innerText = value;
					text.innerText = parts[key].text[Number(value == 1)]
					const dots = parts[key].element.querySelectorAll(".dot")
					dots.forEach((dot, idx) => {
						dot.dataset.active = idx <= value;
						dot.dataset.lastactive = idx == value;
					})
				})
				if (now <= target) {
					window.requestAnimationFrame(() => {
						getRemainingTime(target, parts, false)
					});
				}
			}
			document.getElementById('tryParse')?.addEventListener('click', function(e) {
				e.preventDefault();
				const body = document.getElementById('corrBody').value || '';
				const subj = /(?:^|\n)Subject:\s*(.+)/i.exec(body);
				const from = /(?:^|\n)From:\s*(.+)/i.exec(body);
				const date = /(?:^|\n)Date:\s*(.+)/i.exec(body);
				if (subj) document.getElementById('corrSubject').value = subj[1].trim();
				if (from) document.getElementById('corrAuthor').value = from[1].trim();
				if (date) {
					const guess = new Date(date[1]);
					if (!isNaN(guess.getTime())) {
						// to local datetime-local string
						const pad = n => String(n).padStart(2, '0');
						const v = guess.getFullYear() + '-' + pad(guess.getMonth() + 1) + '-' + pad(guess.getDate()) + 'T' + pad(guess.getHours()) + ':' + pad(guess.getMinutes());
						const el = document.querySelector('input[name="event_at"]');
						if (el) el.value = v;
					}
				}
			});
			document.addEventListener('DOMContentLoaded', () => {
				document.querySelectorAll('[data-bs-toggle="popover"][data-content-id]').forEach(el => {
					const id = el.getAttribute('data-content-id');
					const tpl = document.getElementById(id);
					const content = tpl ? tpl.innerHTML : '';
					new bootstrap.Popover(el, {
						html: true,
						content,
						container: 'body',
						sanitize: true, // keep Bootstrap’s sanitizer on
						trigger: 'hover focus' // hover on desktop, tap/focus on mobile
					});
				});
			});
		</script>
	</body>
</html>