{"repo": "adakash26434/akashdigital-wp", "files": {"includes/helpers.php": {"b3b6e2caa71fb31b0e2341a0671bbd5a493bc97d": {"t": 1786068385.1102471, "n": 75733, "h": "221460a137201e2d", "c": "<?php\n// PHP 8 polyfills for compatibility with PHP 7.x\nif (!function_exists('str_starts_with')) {\n    function str_starts_with(string $haystack, string $needle): bool {\n        return strpos($haystack, $needle) === 0;\n    }\n}\nif (!function_exists('str_ends_with')) {\n    function str_ends_with(string $haystack, string $needle): bool {\n        return $needle === '' || substr($haystack, -strlen($needle)) === $needle;\n    }\n}\nif (!function_exists('str_contains')) {\n    function str_contains(string $haystack, string $needle): bool {\n        return strpos($haystack, $needle) !== false;\n    }\n}\n\nfunction post(string $key, mixed $default = ''): mixed {\n    return $_POST[$key] ?? $default;\n}\n\nfunction safeOne(string $sql, array $p = []): ?array {\n    try { $r = queryOne($sql, $p); return $r ?: null; } catch (\\Throwable $e) { return null; }\n}\n\nfunction safeInt(string $sql, array $params = []): int {\n    try {\n        $row = queryOne($sql, $params);\n        return (int)(is_array($row) ? (reset($row) ?? 0) : ($row ?? 0));\n    } catch (\\Throwable $e) {\n        error_log('[safeInt] ' . $e->getMessage());\n        return 0;\n    }\n}\n\nfunction redirectSelf(array $extra = []): void {\n    $url = strtok($_SERVER['REQUEST_URI'] ?? '/', '?');\n    $params = array_merge($_GET ?? [], $extra);\n    if ($params) $url .= '?' . http_build_query($params);\n    redirect($url);\n}\n\nfunction e($v): string {\n    return htmlspecialchars((string)($v ?? ''), ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');\n}\n\n// नेपालीमा: Asset (CSS/JS/image) ko full URL banaune\nfunction asset(string $path): string {\n    return rtrim(SITE_URL, '/') . '/assets/' . ltrim($path, '/');\n}\n\n// नेपालीमा: Site relative path lai full URL banaune\nfunction url(string $path): string {\n    return rtrim(SITE_URL, '/') . '/' . ltrim($path, '/');\n}\n\n// नेपालीमा: Browser lai arko URL ma pathaune\nfunction redirect(string $path): void {\n    header(\"Location: \" . url($path));\n    exit;\n}\n\n// नेपालीमा: Flash message session ma store garne\nfunction setFlash(string $key, string $msg): void {\n    if (session_status() === PHP_SESSION_NONE) session_start();\n    $_SESSION['flash'][$key] = $msg;\n}\n\n// Legacy alias\nfunction flash(string $key, string $msg): void { setFlash($key, $msg); }\n\n// नेपालीमा: Flash message read garera mitaune (one-shot)\nfunction getFlash(string $key): ?string {\n    if (session_status() === PHP_SESSION_NONE) session_start();\n    $msg = $_SESSION['flash'][$key] ?? null;\n    unset($_SESSION['flash'][$key]);\n    return $msg;\n}\n\n// ── Site settings from key-value table ─────────────────────────\nfunction siteSettings(bool $refresh = false): array {\n    static $cache = null;\n    if ($refresh) $cache = null;\n    if ($cache !== null) return $cache;\n    $defaults = [\n        'site_name'        => SITE_NAME,\n        'site_tagline'     => 'Cooperative Software for Nepal',\n        'logo_url'         => null,\n        'favicon_url'      => null,\n        'company_name'     => SITE_NAME,\n        'company_logo_url' => null,\n        'contact_email'    => '',\n        'contact_phone'    => '',\n        'address'          => '',\n        'social_links'     => [],\n        'whatsapp_number'  => null,\n        'whatsapp_enabled' => true,\n        'whatsapp_message' => \"Hello! I'm interested in your software.\",\n        'whatsapp_label'   => 'Support WhatsApp',\n        'maintenance_mode' => false,\n    ];\n    // Try to get site settings, but gracefully fall back to defaults if DB is unavailable\n    try {\n        $rows = @query(\"SELECT setting_key, setting_val FROM site_settings\");\n        if (!empty($rows)) {\n            $map = [];\n            foreach ($rows as $r) $map[$r['setting_key']] = $r['setting_val'];\n            if (isset($map['social_links'])) {\n                $map['social_links'] = json_decode($map['social_links'], true) ?? [];\n            }\n            $cache = array_merge($defaults, $map);\n            return $cache;\n        }\n    } catch (\\Throwable $e) { \n        error_log('[helpers.php] siteSettings query failed: ' . $e->getMessage()); \n    }\n    $cache = $defaults;\n    return $cache;\n} // यहाँ Bracket बन्द गरिएको छ\n\n/**\n * Homepage trust strip — cooperative clients / partners / provinces.\n * Single source for index.php, partners.php, and any other public surface.\n * Client count = unique(active CRM clients ∪ partners table) + admin offset.\n */\nfunction siteTrustStats(?array $settings = null): array {\n    $s = $settings ?? siteSettings();\n    $offsetRaw = $s['client_count_offset'] ?? '';\n    $offset = ($offsetRaw !== '' && $offsetRaw !== null) ? (int)$offsetRaw : 300;\n\n    $crm = [];\n    try {\n        $crm = query(\n            \"SELECT org_name, logo_url, district, province FROM clients\n             WHERE LOWER(TRIM(status)) = 'active'\n               AND TRIM(org_name) IS NOT NULL AND TRIM(org_name) != ''\n             ORDER BY org_name ASC\"\n        );\n    } catch (\\Throwable $e) {\n        error_log('[helpers] siteTrustStats clients: ' . $e->getMessage());\n    }\n\n    $partners = [];\n    try {\n        $partners = query(\n            \"SELECT name AS org_name, logo_url, district, '' AS province\n             FROM partners ORDER BY position ASC, id ASC\"\n        );\n    } catch (\\Throwable $e) {\n        error_log('[helpers] siteTrustStats partners: ' . $e->getMessage());\n    }\n\n    $seen = [];\n    $merged = [];\n    foreach (array_merge($crm, $partners) as $row) {\n        $key = strtolower(trim((string)($row['org_name'] ?? '')));\n        if ($key === '' || isset($seen[$key])) continue;\n        $seen[$key] = true;\n        $merged[] = $row;\n    }\n\n    $unique = count($merged);\n    $clientCount = $unique + $offset;\n\n    $marquee = $merged;\n    if (count($marquee) > 40) {\n        shuffle($marquee);\n        $marquee = array_slice($marquee, 0, 40);\n    }\n\n    $coopLabel = trim((string)($s['stat_coop_clients_label'] ?? ''));\n    $partnersLabel = trim((string)($s['stat_partners_label'] ?? ''));\n    $provincesLabel = trim((string)($s['stat_provinces_label'] ?? ''));\n    // Guard: admins sometimes put numbers in Label fields by mistake\n    if ($coopLabel === '' || preg_match('/^[\\d.,+\\s%]+$/u', $coopLabel)) {\n        $coopLabel = 'Cooperative Clients';\n    }\n    if ($partnersLabel === '' || preg_match('/^[\\d.,+\\s%]+$/u', $partnersLabel)) {\n        $partnersLabel = 'Technology Partners';\n    }\n    if ($provincesLabel === '' || preg_match('/^[\\d.,+\\s%]+$/u', $provincesLabel)) {\n        $provincesLabel = 'Provinces Covered';\n    }\n\n    return [\n        'client_count'    => $clientCount,\n        'client_display'  => $clientCount . '+',\n        'coop_label'      => $coopLabel,\n        'partners_value'  => trim((string)($s['stat_partners_value'] ?? '')) ?: '15+',\n        'partners_label'  => $partnersLabel,\n        'provinces_value' => trim((string)($s['stat_provinces_value'] ?? '')) ?: '7',\n        'provinces_label' => $provincesLabel,\n        'marquee_items'   => $marquee,\n        'unique_orgs'     => $unique,\n    ];\n}\n\n/** True when a public stat label means client HEADCOUNT (not retention / years / etc.). */\nfunction siteTrustLabelIsClientCount(string $label): bool {\n    $l = mb_strtolower(trim($label));\n    if ($l === '') return false;\n    // Never overwrite metrics that only mention \"client\" incidentally\n    if (preg_match('/retention|rate|satisfaction|uptime|response|year|experience|product|ticket|sla|nps|churn|revenue/', $l)) {\n        return false;\n    }\n    // Headcount-style labels only\n    return (bool)preg_match(\n        '/^(happy\\s+)?clients?(?:\\s+served)?$|^(cooperative\\s+)?clients?$|clients?\\s+served|cooperatives?\\s+(served|trust)|सहकारी|ग्राहक/',\n        $l\n    );\n}\n\n/**\n * CTA subtitle with the same client count as the homepage trust strip.\n */\nfunction siteTrustCtaSubtitle(?array $settings = null): string {\n    $t = siteTrustStats($settings);\n    if (function_exists('isNepali') && isNepali()) {\n        return $t['client_display'] . ' सहकारीहरू पहिले नै हाम्रो डिजिटल प्लेटफर्ममा चलिरहेका छन्। विशेषज्ञसँग कुरा गर्नुस।';\n    }\n    return 'Join ' . $t['client_display'] . ' happy clients already running on our digital platform. Talk to our experts about a solution tailored to your organisation.';\n}\n\n/**\n * Clean one impact-stat pair so messy admin values don't look broken publicly.\n * @return array{0:string,1:string,2:string,3:string} value, label, icon, hint\n */\nfunction siteStatNormalizeItem(array $row, int $index = 0): array {\n    $defaults = [\n        ['10+',   'Years of Experience',   'calendar',     'Years in the field'],\n        ['650+',  'Happy Clients',         'users',        'Organisations we support'],\n        ['7+',    'Major Products',        'layers',       'Core platforms live'],\n        ['99.9%', 'Client Retention Rate', 'shield-check', 'Long-term partnerships'],\n    ];\n    $def = $defaults[$index] ?? ['—', 'Stat', 'star', ''];\n\n    $val  = trim((string)($row[0] ?? ''));\n    $lab  = trim((string)($row[1] ?? ''));\n    $icon = trim((string)($row[2] ?? ''));\n    $hint = trim((string)($row[3] ?? ''));\n\n    if ($lab === '' || preg_match('/^[\\d.,+\\s%<]+$/u', $lab)) {\n        $lab = $def[1];\n    }\n    if ($val === '') $val = $def[0];\n\n    if (preg_match('/^([\\d,.]+)([A-Za-z].+)$/u', $val, $m)) {\n        $val = $m[1] . ' ' . $m[2];\n    }\n\n    $ll = mb_strtolower($lab);\n\n    if (preg_match('/year|experience|वर्ष/', $ll)) {\n        if (preg_match('/(\\d+)\\s*years?/i', $val, $m) || preg_match('/(\\d+)\\s*years?/i', $lab, $m)) {\n            $val = $m[1] . '+';\n        } elseif (!preg_match('/\\d/', $val)) {\n            $val = $def[0];\n        }\n        if ($icon === '') $icon = 'calendar';\n        if ($hint === '') $hint = 'Years in the field';\n    }\n\n    if (preg_match('/product|platform|solution/', $ll)) {\n        if ($val === '' || preg_match('/^<\\s*[\\d.]/u', $val) || preg_match('/\\bhr\\b|hour|min|ticket|response/i', $val)) {\n            $val = '7+';\n        }\n        if ($icon === '') $icon = 'layers';\n        if ($hint === '') $hint = 'Core platforms live';\n    }\n\n    if (preg_match('/retention|uptime|sla/', $ll)) {\n        if ($val === '' || !preg_match('/\\d/', $val)) $val = '99.9%';\n        if ($icon === '') $icon = 'shield-check';\n        if ($hint === '') $hint = 'Long-term partnerships';\n    }\n\n    if (siteTrustLabelIsClientCount($lab)) {\n        if ($icon === '') $icon = 'users';\n        if ($hint === '') $hint = 'Live client count';\n    }\n\n    if ($icon === '') $icon = $def[2];\n    if ($hint === '') $hint = $def[3];\n\n    return [$val, $lab, $icon, $hint];\n}\n\n// ── Form helper functions — always available (not DB-dependent) ──────────────\n\nfunction formInput(string $label, string $name, mixed $value = '', array $opts = []): string {\n    $type        = $opts['type']        ?? 'text';\n    $placeholder = $opts['placeholder'] ?? '';\n    $requiredFlag = !empty($opts['required']) || in_array('required', $opts, true);\n    $required    = $requiredFlag ? ' required' : '';\n    $attrs       = $opts['attrs']       ?? '';\n    $class       = $opts['class']       ?? 'form-input';\n    $id          = $opts['id']          ?? $name;\n    $html  = '<div class=\"form-group\">';\n    $html .= '<label class=\"form-label\" for=\"' . e($id) . '\">' . e($label);\n    if ($requiredFlag) $html .= ' <span class=\"text-danger-token\">*</span>';\n    $html .= '</label>';\n    $html .= '<input type=\"' . e($type) . '\" id=\"' . e($id) . '\" name=\"' . e($name) . '\"'\n           . ' class=\"' . e($class) . '\" value=\"' . e((string)($value ?? '')) . '\"'\n           . $required . ($placeholder ? ' placeholder=\"' . e($placeholder) . '\"' : '')\n           . ($attrs ? ' ' . $attrs : '') . '>';\n    if (!empty($opts['hint'])) $html .= '<span class=\"form-hint\">' . e($opts['hint']) . '</span>';\n    $html .= '</div>';\n    return $html;\n}\n\nfunction formTextarea(string $label, string $name, mixed $value = '', array $opts = []): string {\n    $rows        = (int)($opts['rows']        ?? 4);\n    $placeholder = $opts['placeholder'] ?? '';\n    $requiredFlag = !empty($opts['required']) || in_array('required', $opts, true);\n    $required    = $requiredFlag ? ' required' : '';\n    $class       = $opts['class']       ?? 'form-textarea';\n    $id          = $opts['id']          ?? $name;\n    $html  = '<div class=\"form-group\">';\n    $html .= '<label class=\"form-label\" for=\"' . e($id) . '\">' . e($label);\n    if ($requiredFlag) $html .= ' <span class=\"text-danger-token\">*</span>';\n    $html .= '</label>';\n    $html .= '<textarea id=\"' . e($id) . '\" name=\"' . e($name) . '\"'\n           . ' class=\"' . e($class) . '\" rows=\"' . $rows . '\"'\n           . $required . ($placeholder ? ' placeholder=\"' . e($placeholder) . '\"' : '') . '>'\n           . e((string)($value ?? '')) . '</textarea>';\n    if (!empty($opts['hint'])) $html .= '<span class=\"form-hint\">' . e($opts['hint']) . '</span>';\n    $html .= '</div>';\n    return $html;\n}\n\nfunction formSelect(string $label, string $name, mixed $value = '', array $options = [], array $opts = []): string {\n    $requiredFlag = !empty($opts['required']) || in_array('required', $opts, true);\n    $required = $requiredFlag ? ' required' : '';\n    $class    = $opts['class'] ?? 'form-select';\n    $id       = $opts['id']   ?? $name;\n    $html  = '<div class=\"form-group\">';\n    $html .= '<label class=\"form-label\" for=\"' . e($id) . '\">' . e($label);\n    if (in_array('required', $opts, true)) $html .= ' <span class=\"text-danger-token\">*</span>';\n    $html .= '</label>';\n    $html .= '<select id=\"' . e($id) . '\" name=\"' . e($name) . '\"'\n           . ' class=\"' . e($class) . '\"' . $required . '>';\n    if (empty($opts['no_blank'])) $html .= '<option value=\"\">— Select —</option>';\n    foreach ($options as $optVal => $optLbl) {\n        $sel   = ((string)$value === (string)$optVal) ? ' selected' : '';\n        $html .= '<option value=\"' . e((string)$optVal) . '\"' . $sel . '>' . e((string)$optLbl) . '</option>';\n    }\n    $html .= '</select>';\n    if (!empty($opts['hint'])) $html .= '<span class=\"form-hint\">' . e($opts['hint']) . '</span>';\n    $html .= '</div>';\n    return $html;\n}\n\nfunction formCheckbox(string $label, string $name, bool $checked = false, array $opts = []): string {\n    $val   = $opts['value'] ?? '1';\n    $id    = $opts['id']    ?? $name;\n    $html  = '<label class=\"form-check\">';\n    $html .= '<input type=\"checkbox\" id=\"' . e($id) . '\" name=\"' . e($name) . '\"'\n           . ' value=\"' . e($val) . '\"' . ($checked ? ' checked' : '') . '>';\n    $html .= '<span>' . e($label) . '</span></label>';\n    return $html;\n}\n\nfunction formRow(string ...$items): string {\n    $n     = count($items);\n    $class = $n === 3 ? 'form-grid-3' : 'form-grid-2';\n    return '<div class=\"' . $class . '\">' . implode('', $items) . '</div>';\n}\n\nfunction formSection(string $title = '', string $content = ''): string {\n    $html  = '<div class=\"form-section\">';\n    if ($title !== '') $html .= '<div class=\"form-section-title\">' . e($title) . '</div>';\n    $html .= $content . '</div>';\n    return $html;\n}\n\n// ── CMS bilingual helper ─────────────────────────────────────────\n// Returns Nepali site_settings value when user is browsing in Nepali,\n// falls back to English value, then to $default.\nfunction cms(array $s, string $key, string $default = ''): string {\n    if (isNepali()) {\n        $np = trim((string)($s[$key . '_np'] ?? ''));\n        if ($np !== '') return $np;\n    }\n    $en = trim((string)($s[$key] ?? ''));\n    return $en !== '' ? $en : $default;\n}\n\nfunction stSiteName(): string {\n    $s = siteSettings();\n    $n = trim((string)($s['site_name'] ?? ''));\n    if ($n !== '') return $n;\n    if (defined('SITE_NAME') && trim((string)SITE_NAME) !== '') return (string)SITE_NAME;\n    return 'Company';\n}\n\nfunction stCompanyName(): string {\n    $s = siteSettings();\n    $n = trim((string)($s['company_name'] ?? ''));\n    return $n !== '' ? $n : stSiteName();\n}\n\nfunction stContactEmail(): string {\n    $s = siteSettings();\n    return trim((string)($s['contact_email'] ?? ''));\n}\n\nfunction stContactPhone(): string {\n    $s = siteSettings();\n    return trim((string)($s['contact_phone'] ?? ''));\n}\n\nfunction stAddress(): string {\n    $s = siteSettings();\n    return trim((string)($s['address'] ?? ''));\n}\n\n/** Digits-only WhatsApp number (country code + number), or '' if disabled/empty. */\nfunction stWhatsAppNumber(): string {\n    $s = siteSettings();\n    $en = $s['whatsapp_enabled'] ?? '1';\n    if ($en === false || $en === 0 || $en === '0') return '';\n    return preg_replace('/\\D/', '', (string)($s['whatsapp_number'] ?? '')) ?: '';\n}\n\nfunction stWhatsAppLabel(): string {\n    $s = siteSettings();\n    $label = trim((string)($s['whatsapp_label'] ?? ''));\n    return $label !== '' ? $label : 'Support WhatsApp';\n}\n\n/**\n * Personalized click-to-chat message.\n * Placeholders in Settings message: {name} {org} {email} {phone} {company} {page}\n */\nfunction stWhatsAppMessage(?array $user = null, ?string $pageHint = null): string {\n    $s = siteSettings();\n    $company = stCompanyName();\n    $tpl = trim((string)($s['whatsapp_message'] ?? ''));\n    if ($tpl === '') {\n        $tpl = 'Hello {company} Support!';\n    }\n\n    $name = '';\n    $org  = '';\n    $email = '';\n    $phone = '';\n    if ($user) {\n        $name  = trim((string)($user['display_name'] ?? $user['name'] ?? ''));\n        $org   = trim((string)($user['org_name'] ?? ''));\n        $email = trim((string)($user['email'] ?? ''));\n        $phone = trim((string)($user['phone'] ?? ''));\n    } elseif (function_exists('currentUser')) {\n        $u = currentUser();\n        if ($u) {\n            $name  = trim((string)($u['display_name'] ?? $u['name'] ?? ''));\n            $org   = trim((string)($u['org_name'] ?? ''));\n            $email = trim((string)($u['email'] ?? ''));\n            $phone = trim((string)($u['phone'] ?? ''));\n        }\n    }\n\n    $page = trim((string)($pageHint ?? ''));\n    if ($page === '' && !empty($_SERVER['REQUEST_URI'])) {\n        $page = basename(parse_url((string)$_SERVER['REQUEST_URI'], PHP_URL_PATH) ?: '');\n    }\n\n    $msg = strtr($tpl, [\n        '{name}'    => $name !== '' ? $name : 'Guest',\n        '{org}'     => $org !== '' ? $org : '—',\n        '{email}'   => $email !== '' ? $email : '—',\n        '{phone}'   => $phone !== '' ? $phone : '—',\n        '{company}' => $company,\n        '{page}'    => $page !== '' ? $page : 'website',\n    ]);\n\n    // If template has no placeholders and user is logged in, append identity for support staff\n    $hasPlaceholder = (bool)preg_match('/\\{(name|org|email|phone|company|page)\\}/', $tpl);\n    if (!$hasPlaceholder && ($name !== '' || $org !== '' || $email !== '')) {\n        $bits = array_filter([\n            $name !== '' ? 'Name: ' . $name : '',\n            $org !== '' ? 'Org: ' . $org : '',\n            $email !== '' ? 'Email: ' . $email : '',\n            $phone !== '' ? 'Phone: ' . $phone : '',\n        ]);\n        if ($bits) {\n            $msg = rtrim($msg) . \"\\n\\n—\\n\" . implode(\"\\n\", $bits);\n        }\n    }\n\n    return $msg;\n}\n\n/** Full wa.me URL for support chat (empty string if WhatsApp disabled / no number). */\nfunction stWhatsAppUrl(?array $user = null, ?string $pageHint = null): string {\n    $num = stWhatsAppNumber();\n    if ($num === '') return '';\n    $text = stWhatsAppMessage($user, $pageHint);\n    return 'https://wa.me/' . $num . '?text=' . rawurlencode($text);\n}\n\n/**\n * Org-chart rank for a team member (1 = top row / apex).\n * Manual org_tier (1–5) wins; otherwise inferred from role title.\n */\nfunction teamOrgRank(array $member): int {\n    $manual = (int)($member['org_tier'] ?? 0);\n    if ($manual >= 1 && $manual <= 5) {\n        return $manual;\n    }\n\n    $role = function_exists('mb_strtolower')\n        ? mb_strtolower(trim((string)($member['role'] ?? '')))\n        : strtolower(trim((string)($member['role'] ?? '')));\n    if ($role === '') {\n        return 3;\n    }\n\n    // Apex — typically alone on the first row (Chairman before generic Director)\n    if (preg_match('/chair\\s*man|chair\\s*person|\\bchair\\b|अध्यक्ष|\\bpresident\\b/u', $role)) {\n        return 1;\n    }\n    if (preg_match('/\\bceo\\b|chief\\s+executive|managing\\s+director|\\bmd\\b|\\bfounder\\b|प्रमुख\\s*कार्यकारी/u', $role)) {\n        return 1;\n    }\n    // Second tier\n    if (preg_match('/deputy|vice[\\s-]?chair|co[\\s-]?ceo|\\bcfo\\b|\\bcto\\b|\\bcoo\\b|chief\\s+/u', $role)) {\n        return 2;\n    }\n    if (preg_match('/\\bdirector\\b|\\bmanager\\b|head\\s+of|\\blead\\b|निर्देशक|प्रबन्धक/u', $role)) {\n        return 2;\n    }\n    return 3;\n}\n\n/**\n * Group members into org-chart rows (tier => members), sorted by tier then position.\n *\n * @param list<array> $members\n * @return array<int, list<array>>\n */\nfunction teamOrgChartRows(array $members): array {\n    $members = array_values($members);\n    usort($members, static function ($a, $b) {\n        $ra = teamOrgRank($a);\n        $rb = teamOrgRank($b);\n        if ($ra !== $rb) return $ra <=> $rb;\n        $pa = (int)($a['position'] ?? 0);\n        $pb = (int)($b['position'] ?? 0);\n        if ($pa !== $pb) return $pa <=> $pb;\n        return strcasecmp((string)($a['name'] ?? ''), (string)($b['name'] ?? ''));\n    });\n\n    $rows = [];\n    foreach ($members as $m) {\n        $rows[teamOrgRank($m)][] = $m;\n    }\n    ksort($rows, SORT_NUMERIC);\n    return $rows;\n}\n\n/** Whether the public AI assistant float is enabled and has a usable key. */\nfunction stAiChatEnabled(): bool {\n    $s = siteSettings();\n    if (($s['ai_chat_enabled'] ?? '0') !== '1') return false;\n    $key = trim((string)($s['ai_chat_api_key'] ?? ''));\n    return $key !== '' && stAiChatProvider() !== '';\n}\n\nfunction stAiChatProvider(): string {\n    $s = siteSettings();\n    $p = strtolower(trim((string)($s['ai_chat_provider'] ?? 'openai')));\n    return in_array($p, ['openai', 'gemini', 'deepseek'], true) ? $p : 'openai';\n}\n\nfunction stAiChatLabel(): string {\n    $s = siteSettings();\n    $label = trim((string)($s['ai_chat_label'] ?? ''));\n    return $label !== '' ? $label : 'AI Assistant';\n}\n\nfunction stAiChatWelcome(): string {\n    $s = siteSettings();\n    $w = trim((string)($s['ai_chat_welcome'] ?? ''));\n    if ($w !== '') return $w;\n    return 'Hi! Ask me about our products, services, pricing, or how to contact us. I only know public website information.';\n}\n\n/** Strip HTML and truncate plain text for the public AI knowledge pack. */\nfunction stAiChatPlain(?string $text, int $max = 700): string {\n    $t = html_entity_decode(strip_tags((string)$text), ENT_QUOTES | ENT_HTML5, 'UTF-8');\n    $t = preg_replace('/\\s+/u', ' ', $t) ?? $t;\n    $t = trim($t);\n    if ($t === '') return '';\n    $len = function_exists('mb_strlen') ? mb_strlen($t) : strlen($t);\n    if ($len > $max) {\n        $t = (function_exists('mb_substr') ? mb_substr($t, 0, max(1, $max - 1)) : substr($t, 0, max(1, $max - 1))) . '…';\n    }\n    return $t;\n}\n\n/** Decode JSON list fields (features/highlights) into clean strings. */\nfunction stAiChatJsonList(?string $json, int $limit = 20): array {\n    $arr = json_decode((string)$json, true);\n    if (!is_array($arr)) {\n        $arr = array_filter(array_map('trim', explode(',', (string)$json)));\n    }\n    $out = [];\n    foreach ($arr as $item) {\n        if (is_array($item)) {\n            $item = $item['name'] ?? $item['title'] ?? $item['label'] ?? $item['text'] ?? '';\n            if (is_array($item)) $item = '';\n        }\n        $item = trim((string)$item);\n        if ($item === '') continue;\n        $out[] = $item;\n        if (count($out) >= $limit) break;\n    }\n    return $out;\n}\n\n/**\n * Public-only knowledge pack for the AI assistant.\n * Whitelist: public marketing pages only.\n * Never includes API keys, admin users, CRM, tickets, applications, invoices, or secrets.\n */\nfunction stAiChatPublicContext(): string {\n    $s = siteSettings();\n    $lines = [];\n\n    $lines[] = 'COMPANY (public):';\n    $lines[] = 'Name: ' . stCompanyName();\n    if (!empty($s['site_tagline'])) $lines[] = 'Tagline: ' . stAiChatPlain((string)$s['site_tagline'], 240);\n    $website = trim((string)($s['company_website'] ?? ''));\n    if ($website !== '') $lines[] = 'Website: ' . $website;\n    if (stAddress() !== '') $lines[] = 'Address: ' . stAddress();\n    if (stContactPhone() !== '') $lines[] = 'Phone: ' . stContactPhone();\n    if (stContactEmail() !== '') $lines[] = 'Email: ' . stContactEmail();\n    $support = trim((string)($s['support_email'] ?? ''));\n    if ($support !== '') $lines[] = 'Support email: ' . $support;\n    if (($s['whatsapp_enabled'] ?? '1') !== '0') {\n        $wa = preg_replace('/\\D+/', '', (string)($s['whatsapp_number'] ?? '')) ?: '';\n        if ($wa !== '') {\n            $lines[] = 'WhatsApp support: +' . $wa\n                . (!empty($s['whatsapp_label']) ? (' (' . stAiChatPlain((string)$s['whatsapp_label'], 60) . ')') : '');\n        }\n    }\n\n    // About / mission / values (public About page)\n    $aboutBits = [];\n    if (!empty($s['about_mission_h2'])) $aboutBits[] = 'Heading: ' . stAiChatPlain((string)$s['about_mission_h2'], 120);\n    if (!empty($s['about_mission_p1'])) $aboutBits[] = stAiChatPlain((string)$s['about_mission_p1'], 500);\n    if (!empty($s['about_mission_p2'])) $aboutBits[] = stAiChatPlain((string)$s['about_mission_p2'], 500);\n    if (!empty($s['about_vision_quote'])) $aboutBits[] = 'Vision: ' . stAiChatPlain((string)$s['about_vision_quote'], 300);\n    for ($i = 1; $i <= 4; $i++) {\n        $vt = trim((string)($s[\"about_val{$i}_title\"] ?? ''));\n        $vd = trim((string)($s[\"about_val{$i}_desc\"] ?? ''));\n        if ($vt === '' && $vd === '') continue;\n        $aboutBits[] = 'Value — ' . stAiChatPlain($vt, 80) . ': ' . stAiChatPlain($vd, 220);\n    }\n    if ($aboutBits) {\n        $lines[] = '';\n        $lines[] = 'ABOUT (public):';\n        foreach ($aboutBits as $b) $lines[] = $b;\n    }\n\n    // CEO message only when published on the public About page\n    if (($s['ceo_active'] ?? '') === '1' || ($s['ceo_active'] ?? '') === 'true') {\n        $ceoName = stAiChatPlain((string)($s['ceo_name'] ?? ''), 80);\n        if ($ceoName !== '') {\n            $lines[] = '';\n            $lines[] = 'LEADERSHIP (public About page):';\n            $lines[] = 'CEO / leader: ' . $ceoName\n                . (!empty($s['ceo_title']) ? (' — ' . stAiChatPlain((string)$s['ceo_title'], 80)) : '');\n            if (!empty($s['ceo_message'])) {\n                $lines[] = 'Public message: ' . stAiChatPlain((string)$s['ceo_message'], 600);\n            }\n        }\n    }\n\n    // Public trust / impact stats (counts only — no CRM org dump)\n    if (function_exists('siteTrustStats')) {\n        try {\n            $stats = siteTrustStats();\n            if (is_array($stats)) {\n                $lines[] = '';\n                $lines[] = 'PUBLIC IMPACT STATS:';\n                if (!empty($stats['client_display'])) {\n                    $lines[] = '- ' . $stats['client_display'] . ' ' . ($stats['coop_label'] ?? 'Clients');\n                }\n                if (!empty($stats['partners_value'])) {\n                    $lines[] = '- ' . $stats['partners_value'] . ' ' . ($stats['partners_label'] ?? 'Partners');\n                }\n                if (!empty($stats['provinces_value'])) {\n                    $lines[] = '- ' . $stats['provinces_value'] . ' ' . ($stats['provinces_label'] ?? 'Provinces');\n                }\n            }\n        } catch (\\Throwable $e) { /* optional */ }\n    }\n\n    try {\n        $products = query(\n            \"SELECT name, slug, tagline, summary, description, badge, category, price_from, features, highlights\n             FROM products WHERE active=1 ORDER BY position, id LIMIT 24\"\n        );\n        if ($products) {\n            $lines[] = '';\n            $lines[] = 'PRODUCTS (public catalog — detail pages exist for each slug):';\n            foreach ($products as $p) {\n                $price = (!empty($p['price_from']) && (float)$p['price_from'] > 0)\n                    ? ('NPR ' . number_format((float)$p['price_from'], 0) . '+')\n                    : 'Contact for price';\n                $feats = stAiChatJsonList($p['features'] ?? '', 16);\n                $highs = stAiChatJsonList($p['highlights'] ?? '', 12);\n                $bits = array_values(array_unique(array_merge($highs, $feats)));\n                $bits = array_slice($bits, 0, 16);\n                $lines[] = '- ' . ($p['name'] ?? '')\n                    . (!empty($p['badge']) ? ' [' . $p['badge'] . ']' : '')\n                    . (!empty($p['category']) ? ' | Category: ' . $p['category'] : '')\n                    . (!empty($p['slug']) ? ' | Page: product-detail.php?slug=' . $p['slug'] : '');\n                if (!empty($p['tagline'])) $lines[] = '  Tagline: ' . stAiChatPlain((string)$p['tagline'], 200);\n                $sum = stAiChatPlain((string)($p['summary'] ?? ''), 400);\n                if ($sum !== '') $lines[] = '  Summary: ' . $sum;\n                $desc = stAiChatPlain((string)($p['description'] ?? ''), 900);\n                if ($desc !== '' && $desc !== $sum) $lines[] = '  Details: ' . $desc;\n                $lines[] = '  Pricing from: ' . $price;\n                if ($bits) $lines[] = '  Features: ' . implode('; ', $bits);\n            }\n        }\n    } catch (\\Throwable $e) { /* optional */ }\n\n    // Public optional add-ons (Products page)\n    if (function_exists('resolveProductsAddons')) {\n        try {\n            $addons = resolveProductsAddons($s);\n            if (is_array($addons) && $addons) {\n                $lines[] = '';\n                $lines[] = 'OPTIONAL ADD-ONS (public Products page):';\n                foreach (array_slice($addons, 0, 20) as $ad) {\n                    if (!is_array($ad)) continue;\n                    $n = stAiChatPlain((string)($ad['title'] ?? $ad['name'] ?? ''), 100);\n                    if ($n === '') continue;\n                    $pr = stAiChatPlain((string)($ad['price'] ?? ''), 60);\n                    $ds = stAiChatPlain((string)($ad['desc'] ?? ''), 220);\n                    $lines[] = '- ' . $n . ($pr !== '' ? (' — ' . $pr) : '') . ($ds !== '' ? (': ' . $ds) : '');\n                }\n            }\n        } catch (\\Throwable $e) { /* optional */ }\n    }\n\n    try {\n        $services = query(\n            \"SELECT title AS name, slug, tagline, summary, description, badge, price_from, features, highlights\n             FROM services WHERE active=1 ORDER BY position, id LIMIT 24\"\n        );\n        if ($services) {\n            $lines[] = '';\n            $lines[] = 'SERVICES (public catalog):';\n            foreach ($services as $sv) {\n                $price = (!empty($sv['price_from']) && (float)$sv['price_from'] > 0)\n                    ? ('NPR ' . number_format((float)$sv['price_from'], 0) . '+')\n                    : 'Contact for quote';\n                $feats = stAiChatJsonList($sv['features'] ?? '', 16);\n                $highs = stAiChatJsonList($sv['highlights'] ?? '', 12);\n                $bits = array_slice(array_values(array_unique(array_merge($highs, $feats))), 0, 16);\n                $lines[] = '- ' . ($sv['name'] ?? '')\n                    . (!empty($sv['badge']) ? ' [' . $sv['badge'] . ']' : '')\n                    . (!empty($sv['slug']) ? ' | Page: service-detail.php?slug=' . $sv['slug'] : '');\n                if (!empty($sv['tagline'])) $lines[] = '  Tagline: ' . stAiChatPlain((string)$sv['tagline'], 200);\n                $sum = stAiChatPlain((string)($sv['summary'] ?? ''), 400);\n                if ($sum !== '') $lines[] = '  Summary: ' . $sum;\n                $desc = stAiChatPlain((string)($sv['description'] ?? ''), 900);\n                if ($desc !== '' && $desc !== $sum) $lines[] = '  Details: ' . $desc;\n                $lines[] = '  Pricing from: ' . $price;\n                if ($bits) $lines[] = '  Features: ' . implode('; ', $bits);\n            }\n        }\n    } catch (\\Throwable $e) { /* optional */ }\n\n    try {\n        $plans = query(\n            \"SELECT name, tag, price_label, period, features FROM pricing_plans WHERE active=1 ORDER BY position, id LIMIT 16\"\n        );\n        if ($plans) {\n            $lines[] = '';\n            $lines[] = 'PRICING PLANS (public):';\n            foreach ($plans as $pl) {\n                $feats = stAiChatJsonList($pl['features'] ?? '', 14);\n                $lines[] = '- ' . ($pl['name'] ?? '')\n                    . (!empty($pl['tag']) ? ' (' . $pl['tag'] . ')' : '')\n                    . ': ' . trim(($pl['price_label'] ?? '') . ' ' . ($pl['period'] ?? ''))\n                    . ($feats ? (' | Includes: ' . implode('; ', $feats)) : '');\n            }\n        }\n    } catch (\\Throwable $e) { /* optional */ }\n\n    try {\n        $partners = query(\n            \"SELECT name, type, district FROM partners WHERE active=1 ORDER BY position ASC, id ASC LIMIT 60\"\n        );\n        if ($partners) {\n            $lines[] = '';\n            $lines[] = 'PARTNERS / CLIENTS (public Partners page — names only):';\n            foreach ($partners as $pt) {\n                $lines[] = '- ' . ($pt['name'] ?? '')\n                    . (!empty($pt['type']) ? ' (' . $pt['type'] . ')' : '')\n                    . (!empty($pt['district']) ? ' — ' . $pt['district'] : '');\n            }\n        }\n    } catch (\\Throwable $e) { /* optional */ }\n\n    try {\n        $portfolio = query(\n            \"SELECT title, client_name, category, excerpt, description, result_metric\n             FROM portfolio WHERE active=1 ORDER BY position ASC, id DESC LIMIT 16\"\n        );\n        if ($portfolio) {\n            $lines[] = '';\n            $lines[] = 'PORTFOLIO / CASE STUDIES (public):';\n            foreach ($portfolio as $pf) {\n                $lines[] = '- ' . ($pf['title'] ?? '')\n                    . (!empty($pf['client_name']) ? ' | Client: ' . $pf['client_name'] : '')\n                    . (!empty($pf['category']) ? ' | ' . $pf['category'] : '');\n                $ex = stAiChatPlain((string)(($pf['excerpt'] ?? '') ?: ($pf['description'] ?? '')), 350);\n                if ($ex !== '') $lines[] = '  ' . $ex;\n                if (!empty($pf['result_metric'])) {\n                    $lines[] = '  Result: ' . stAiChatPlain((string)$pf['result_metric'], 120);\n                }\n            }\n        }\n    } catch (\\Throwable $e) { /* optional */ }\n\n    try {\n        $team = query(\n            \"SELECT name, role, bio, is_leadership FROM team_members WHERE active=1\n             ORDER BY is_leadership DESC, position LIMIT 20\"\n        );\n        if ($team) {\n            $lines[] = '';\n            $lines[] = 'TEAM (public About page — no private emails):';\n            foreach ($team as $tm) {\n                $lines[] = '- ' . ($tm['name'] ?? '')\n                    . (!empty($tm['role']) ? ' — ' . $tm['role'] : '')\n                    . (!empty($tm['is_leadership']) ? ' [leadership]' : '');\n                $bio = stAiChatPlain((string)($tm['bio'] ?? ''), 220);\n                if ($bio !== '') $lines[] = '  ' . $bio;\n            }\n        }\n    } catch (\\Throwable $e) { /* optional */ }\n\n    try {\n        $news = query(\n            \"SELECT title, slug, excerpt, category, published_at FROM news\n             WHERE published=1 AND active=1 ORDER BY published_at DESC LIMIT 10\"\n        );\n        if ($news) {\n            $lines[] = '';\n            $lines[] = 'NEWS / UPDATES (public):';\n            foreach ($news as $n) {\n                $lines[] = '- ' . ($n['title'] ?? '')\n                    . (!empty($n['category']) ? ' [' . $n['category'] . ']' : '')\n                    . (!empty($n['published_at']) ? ' (' . substr((string)$n['published_at'], 0, 10) . ')' : '');\n                $ex = stAiChatPlain((string)($n['excerpt'] ?? ''), 280);\n                if ($ex !== '') $lines[] = '  ' . $ex;\n            }\n        }\n    } catch (\\Throwable $e) { /* optional */ }\n\n    try {\n        $jobs = query(\n            \"SELECT title, department, location, type, experience, salary_range, short_desc, deadline\n             FROM job_listings WHERE active=1 ORDER BY position, id DESC LIMIT 12\"\n        );\n        if ($jobs) {\n            $open = [];\n            foreach ($jobs as $j) {\n                if (!empty($j['deadline']) && strtotime((string)$j['deadline']) < strtotime('today')) {\n                    continue; // expired — not shown publicly\n                }\n                $open[] = $j;\n            }\n            if ($open) {\n                $lines[] = '';\n                $lines[] = 'OPEN CAREERS (public Careers page — not applications):';\n                foreach ($open as $j) {\n                    $lines[] = '- ' . ($j['title'] ?? '')\n                        . (!empty($j['department']) ? ' | ' . $j['department'] : '')\n                        . (!empty($j['location']) ? ' | ' . $j['location'] : '')\n                        . (!empty($j['type']) ? ' | ' . $j['type'] : '');\n                    if (!empty($j['experience'])) $lines[] = '  Experience: ' . stAiChatPlain((string)$j['experience'], 120);\n                    if (!empty($j['salary_range'])) $lines[] = '  Salary: ' . stAiChatPlain((string)$j['salary_range'], 80);\n                    $sd = stAiChatPlain((string)($j['short_desc'] ?? ''), 280);\n                    if ($sd !== '') $lines[] = '  ' . $sd;\n                    if (!empty($j['deadline'])) $lines[] = '  Apply by: ' . $j['deadline'];\n                }\n            }\n        }\n    } catch (\\Throwable $e) { /* optional */ }\n\n    try {\n        $faqs = query(\n            \"SELECT category, question, answer FROM faqs WHERE active=1 ORDER BY position, id LIMIT 25\"\n        );\n        if ($faqs) {\n            $lines[] = '';\n            $lines[] = 'FAQs (public):';\n            foreach ($faqs as $f) {\n                $lines[] = 'Q' . (!empty($f['category']) ? ' [' . $f['category'] . ']' : '') . ': '\n                    . stAiChatPlain((string)$f['question'], 240);\n                $lines[] = 'A: ' . stAiChatPlain((string)($f['answer'] ?? ''), 700);\n            }\n        }\n    } catch (\\Throwable $e) { /* optional */ }\n\n    try {\n        $testimonials = query(\n            \"SELECT author_name, author_role, author_org, quote FROM testimonials\n             WHERE active=1 ORDER BY position, id DESC LIMIT 8\"\n        );\n        if ($testimonials) {\n            $lines[] = '';\n            $lines[] = 'TESTIMONIALS (public):';\n            foreach ($testimonials as $t) {\n                $who = trim(($t['author_name'] ?? '')\n                    . (!empty($t['author_role']) ? ', ' . $t['author_role'] : '')\n                    . (!empty($t['author_org']) ? ' @ ' . $t['author_org'] : ''));\n                $q = stAiChatPlain((string)($t['quote'] ?? ''), 280);\n                if ($q === '') continue;\n                $lines[] = '- \"' . $q . '\"' . ($who !== '' ? (' — ' . $who) : '');\n            }\n        }\n    } catch (\\Throwable $e) { /* optional */ }\n\n    $lines[] = '';\n    $lines[] = 'PUBLIC PAGES: Home, About, Products, Product details, Services, Service details, Pricing, Portfolio, Partners, News, Careers, FAQ, Contact, Tools.';\n    $lines[] = 'How to buy / demo: use Contact form, Request a demo on product pages, or WhatsApp if listed above.';\n    $lines[] = 'SECURITY BOUNDARY: You do NOT have admin panel, CRM, invoices, tickets, job applications, customer databases, API keys, or staff passwords. Never invent them.';\n\n    $pack = implode(\"\\n\", $lines);\n    // Soft cap so prompts stay within provider limits\n    $maxPack = 28000;\n    $plen = function_exists('mb_strlen') ? mb_strlen($pack) : strlen($pack);\n    if ($plen > $maxPack) {\n        $pack = (function_exists('mb_substr') ? mb_substr($pack, 0, $maxPack) : substr($pack, 0, $maxPack))\n            . \"\\n…[public context truncated]\";\n    }\n    return $pack;\n}\n\nfunction stAiChatSystemPrompt(): string {\n    $s = siteSettings();\n    $extra = trim((string)($s['ai_chat_system_extra'] ?? ''));\n    // Never allow owner notes to inject secrets or override security\n    $extra = stAiChatPlain($extra, 1200);\n    $company = stCompanyName();\n    $prompt = \"You are the public website assistant for {$company}.\\n\"\n        . \"Answer visitors using ONLY the PUBLIC WEBSITE INFORMATION below (public pages / published catalog).\\n\"\n        . \"Be helpful and informative: include relevant product/service details, pricing when listed, features, contact options, and next steps.\\n\"\n        . \"Match the visitor language (English or Nepali). Prefer clear structured answers (short paragraphs or bullets).\\n\"\n        . \"\\nHARD SECURITY RULES (never break):\\n\"\n        . \"1. NEVER reveal, invent, discuss, or hint at: admin panel/URLs, staff logins, passwords, API keys, database dumps, CRM leads, invoices, payments, job applications/CVs, internal tickets, private customer data, or anything behind /admin or portal login.\\n\"\n        . \"2. If asked for admin access, keys, internal systems, customer lists, or private data: refuse politely and suggest the public Contact page or WhatsApp.\\n\"\n        . \"3. If something is not in the public information pack, say you do not have that on the public site and offer Contact / Request a demo — do not guess private facts.\\n\"\n        . \"4. Do not claim you can open admin, change settings, or access private files.\\n\"\n        . \"5. Public leadership/CEO info may be shared ONLY if present in the public pack below.\\n\";\n    if ($extra !== '') {\n        $prompt .= \"\\nAdditional public guidance from the site owner (still subject to security rules):\\n\" . $extra . \"\\n\";\n    }\n    $prompt .= \"\\n--- PUBLIC WEBSITE INFORMATION ---\\n\" . stAiChatPublicContext();\n    return $prompt;\n}\n\n/**\n * Prefer the admin-selected provider, but correct obvious key mismatches\n * (Gemini keys are AIza…; OpenAI/DeepSeek keys are typically sk-…).\n */\nfunction stAiChatResolveProvider(string $apiKey): string {\n    $provider = stAiChatProvider();\n    $key = trim($apiKey);\n    if ($key !== '' && str_starts_with($key, 'AIza')) {\n        return 'gemini';\n    }\n    if ($provider === 'gemini' && $key !== '' && str_starts_with($key, 'sk-')) {\n        // Likely OpenAI/DeepSeek key saved while Gemini was selected\n        return 'openai';\n    }\n    return $provider;\n}\n\nfunction stAiChatComplete(array $history): string {\n    if (!stAiChatEnabled()) {\n        throw new \\RuntimeException('AI chat is not configured.');\n    }\n    $s = siteSettings();\n    $apiKey = trim((string)($s['ai_chat_api_key'] ?? ''));\n    $provider = stAiChatResolveProvider($apiKey);\n    $system = stAiChatSystemPrompt();\n\n    $clean = [];\n    foreach (array_slice($history, -10) as $m) {\n        if (!is_array($m)) continue;\n        $role = ($m['role'] ?? '') === 'assistant' ? 'assistant' : 'user';\n        $content = trim((string)($m['content'] ?? ''));\n        if ($content === '') continue;\n        $len = function_exists('mb_strlen') ? mb_strlen($content) : strlen($content);\n        if ($len > 1500) {\n            $content = function_exists('mb_substr') ? mb_substr($content, 0, 1500) : substr($content, 0, 1500);\n        }\n        $clean[] = ['role' => $role, 'content' => $content];\n    }\n    if (empty($clean)) {\n        throw new \\RuntimeException('Message required.');\n    }\n\n    if ($provider === 'gemini') {\n        return stAiChatCallGemini($apiKey, $system, $clean);\n    }\n    $base = $provider === 'deepseek'\n        ? 'https://api.deepseek.com/v1/chat/completions'\n        : 'https://api.openai.com/v1/chat/completions';\n    $model = $provider === 'deepseek' ? 'deepseek-chat' : 'gpt-4o-mini';\n    return stAiChatCallOpenAiCompat($base, $apiKey, $model, $system, $clean);\n}\n\nfunction stAiChatHttpJson(string $url, array $headers, array $body, int $timeout = 45): array {\n    if (!function_exists('curl_init')) {\n        throw new \\RuntimeException('cURL is required for AI chat.');\n    }\n    $ch = curl_init($url);\n    curl_setopt_array($ch, [\n        CURLOPT_POST           => true,\n        CURLOPT_RETURNTRANSFER => true,\n        CURLOPT_TIMEOUT        => $timeout,\n        CURLOPT_CONNECTTIMEOUT => 10,\n        CURLOPT_HTTPHEADER     => $headers,\n        CURLOPT_POSTFIELDS     => json_encode($body, JSON_UNESCAPED_UNICODE),\n    ]);\n    $raw = curl_exec($ch);\n    $err = curl_error($ch);\n    $code = (int)curl_getinfo($ch, CURLINFO_HTTP_CODE);\n    curl_close($ch);\n    if ($raw === false) {\n        throw new \\RuntimeException('AI request failed: ' . ($err ?: 'network error'));\n    }\n    $data = json_decode($raw, true);\n    if (!is_array($data)) {\n        throw new \\RuntimeException('Invalid AI response.');\n    }\n    if ($code >= 400) {\n        $msg = $data['error']['message'] ?? $data['error'] ?? ('HTTP ' . $code);\n        if (is_array($msg)) $msg = json_encode($msg);\n        $snip = function_exists('mb_substr') ? mb_substr((string)$msg, 0, 200) : substr((string)$msg, 0, 200);\n        throw new \\RuntimeException('AI provider error: ' . $snip);\n    }\n    return $data;\n}\n\nfunction stAiChatCallOpenAiCompat(string $url, string $apiKey, string $model, string $system, array $history): string {\n    $messages = array_merge(\n        [['role' => 'system', 'content' => $system]],\n        $history\n    );\n    $data = stAiChatHttpJson($url, [\n        'Content-Type: application/json',\n        'Authorization: Bearer ' . $apiKey,\n    ], [\n        'model'       => $model,\n        'messages'    => $messages,\n        'temperature' => 0.4,\n        'max_tokens'  => 1200,\n    ]);\n    $text = trim((string)($data['choices'][0]['message']['content'] ?? ''));\n    if ($text === '') throw new \\RuntimeException('Empty AI reply.');\n    return $text;\n}\n\n/**\n * Call Gemini with current Flash models. gemini-2.0-flash was shut down 2026-06-01.\n *\n * @param list<array{role:string,content:string}> $history\n */\nfunction stAiChatCallGemini(string $apiKey, string $system, array $history): string {\n    // Prefer stable Flash → cheaper Flash-Lite fallbacks if a model ID is unavailable\n    $models = ['gemini-3.5-flash', 'gemini-2.5-flash', 'gemini-2.5-flash-lite'];\n    $last = null;\n    foreach ($models as $model) {\n        try {\n            return stAiChatCallGeminiModel($apiKey, $system, $history, $model);\n        } catch (\\RuntimeException $e) {\n            $last = $e;\n            $msg = strtolower($e->getMessage());\n            // Retry next model only when this model is missing / unavailable\n            if (\n                !str_contains($msg, 'not found')\n                && !str_contains($msg, 'not supported')\n                && !str_contains($msg, 'is not found')\n                && !str_contains($msg, '404')\n            ) {\n                throw $e;\n            }\n        }\n    }\n    throw $last ?: new \\RuntimeException('Gemini request failed.');\n}\n\n/**\n * @param list<array{role:string,content:string}> $history\n */\nfunction stAiChatCallGeminiModel(string $apiKey, string $system, array $history, string $model): string {\n    $contents = [];\n    foreach ($history as $m) {\n        $contents[] = [\n            'role'  => $m['role'] === 'assistant' ? 'model' : 'user',\n            'parts' => [['text' => $m['content']]],\n        ];\n    }\n    $url = 'https://generativelanguage.googleapis.com/v1beta/models/'\n        . rawurlencode($model)\n        . ':generateContent?key=' . rawurlencode($apiKey);\n    $data = stAiChatHttpJson($url, [\n        'Content-Type: application/json',\n    ], [\n        'systemInstruction' => ['parts' => [['text' => $system]]],\n        'contents'          => $contents,\n        'generationConfig'  => [\n            'temperature'     => 0.4,\n            'maxOutputTokens' => 1200,\n        ],\n    ]);\n\n    if (!empty($data['promptFeedback']['blockReason'])) {\n        throw new \\RuntimeException('AI blocked the request (' . $data['promptFeedback']['blockReason'] . ').');\n    }\n\n    $parts = $data['candidates'][0]['content']['parts'] ?? [];\n    $chunks = [];\n    if (is_array($parts)) {\n        foreach ($parts as $part) {\n            if (!is_array($part)) continue;\n            // Skip internal \"thought\" parts from thinking models\n            if (!empty($part['thought'])) continue;\n            $t = trim((string)($part['text'] ?? ''));\n            if ($t !== '') $chunks[] = $t;\n        }\n    }\n    $text = trim(implode(\"\\n\", $chunks));\n    if ($text === '') {\n        $finish = (string)($data['candidates'][0]['finishReason'] ?? '');\n        throw new \\RuntimeException('Empty AI reply' . ($finish !== '' ? ' (' . $finish . ')' : '') . '.');\n    }\n    return $text;\n}\n\n// ── CSRF helpers ────────────────────────────────────────────────\nfunction generateCsrf(): string {\n    if (session_status() === PHP_SESSION_NONE) session_start();\n    if (empty($_SESSION['csrf_token'])) {\n        $_SESSION['csrf_token'] = bin2hex(random_bytes(32));\n    }\n    return $_SESSION['csrf_token'];\n}\n\n// नेपालीमा: POST ko CSRF token check garne\nfunction verifyCsrf(?string $token = null): bool {\n    if (session_status() === PHP_SESSION_NONE) session_start();\n    $token = $token ?? ($_POST['_csrf'] ?? $_POST['_token'] ?? $_POST['csrf_token'] ?? '');\n    $valid = !empty($_SESSION['csrf_token']) && hash_equals($_SESSION['csrf_token'], $token);\n    // Rotate instead of burn — avoids back-button CSRF errors\n    if ($valid) {\n        $_SESSION['csrf_token'] = bin2hex(random_bytes(32));\n    } else {\n        http_response_code(403);\n        echo '<div class=\"alert alert-error\">Security token mismatch. Please <a href=\"javascript:history.back()\" style=\"text-decoration:underline;\">go back</a> and try again.</div>';\n        exit;\n    }\n    return true;\n}\n\n// Legacy alias used in old pages\nfunction csrfToken(): string { return generateCsrf(); }\n\n// ── Badge helpers (uses theme.css badge classes) ─────────────────\nfunction statusBadge(string $status): string {\n    $cls = 'badge-' . ($status ?: 'closed');\n    return '<span class=\"badge ' . $cls . '\">' . e(ucwords(str_replace('_', ' ', $status))) . '</span>';\n}\n\n// नेपालीमा: Priority ko colored badge HTML banaune\nfunction priorityBadge(string $p): string {\n    $cls = 'badge-' . ($p ?: 'normal');\n    return '<span class=\"badge ' . $cls . '\">' . e(ucfirst($p)) . '</span>';\n}\n\n// ── Time ─────────────────────────────────────────────────────────\nfunction timeAgo(string $dt): string {\n    $diff = time() - strtotime($dt);\n    if ($diff < 60)     return 'just now';\n    if ($diff < 3600)   return floor($diff / 60) . 'm ago';\n    if ($diff < 86400)  return floor($diff / 3600) . 'h ago';\n    if ($diff < 604800) return floor($diff / 86400) . 'd ago';\n    return date('M j, Y', strtotime($dt));\n}\n\n// ── Pagination ───────────────────────────────────────────────────\nfunction paginate(int $total, int $perPage, int $current): array {\n    $pages = (int) ceil($total / $perPage);\n    return [\n        'total'   => $total,\n        'pages'   => $pages,\n        'current' => $current,\n        'offset'  => ($current - 1) * $perPage,\n        'perPage' => $perPage,\n    ];\n}\n\n// ── Job application helpers ───────────────────────────────────────\nfunction applicantName(array $row): string {\n    $name = trim($row['name'] ?? $row['full_name'] ?? '');\n    return $name !== '' ? $name : '—';\n}\n\nfunction parseJobRequirements(?string $raw): array {\n    if ($raw === null || trim($raw) === '') return [];\n    $decoded = json_decode($raw, true);\n    if (is_array($decoded) && !empty($decoded)) return $decoded;\n    $lines = preg_split('/\\r\\n|\\r|\\n/', $raw);\n    $reqs = [];\n    foreach ($lines as $line) {\n        $line = ltrim(trim($line), \"-•* \\t\");\n        if ($line !== '') $reqs[] = $line;\n    }\n    return $reqs;\n}\n\nfunction isJobListingExpired(array $job): bool {\n    if (empty($job['deadline'])) return false;\n    return strtotime($job['deadline'] . ' 23:59:59') < time();\n}\n\n/** Public URL for a job listing (shareable, with ?job=slug deep link). */\nfunction jobListingPublicUrl(array $job): string {\n    $slug = trim((string)($job['slug'] ?? ''));\n    if ($slug !== '') {\n        return url('careers.php?job=' . rawurlencode($slug));\n    }\n    return url('careers.php#job-' . (int)($job['id'] ?? 0));\n}\n\n/** Pre-formatted share text for WhatsApp / copy. */\nfunction jobListingShareMessage(array $job): string {\n    $company = function_exists('stSiteName') ? stSiteName() : (defined('SITE_NAME') ? SITE_NAME : 'Company');\n    $lines   = ['We\\'re hiring: ' . ($job['title'] ?? 'Open position') . ' at ' . $company];\n    if (!empty($job['location'])) $lines[] = '📍 ' . $job['location'];\n    if (!empty($job['department'])) $lines[] = $job['department'];\n    if (!empty($job['short_desc'])) $lines[] = $job['short_desc'];\n    $lines[] = 'Apply: ' . jobListingPublicUrl($job);\n    return implode(\"\\n\", $lines);\n}\n\n/** Social platform share URLs for a page or vacancy. */\nfunction socialShareLinks(string $url, string $title, ?string $message = null): array {\n    $text = $message ?? ($title . ' — ' . $url);\n    return [\n        'whatsapp' => 'https://wa.me/?text=' . rawurlencode($text),\n        'facebook' => 'https://www.facebook.com/sharer/sharer.php?u=' . rawurlencode($url),\n        'linkedin' => 'https://www.linkedin.com/sharing/share-offsite/?url=' . rawurlencode($url),\n        'twitter'  => 'https://twitter.com/intent/tweet?text=' . rawurlencode($title) . '&url=' . rawurlencode($url),\n        'telegram' => 'https://t.me/share/url?url=' . rawurlencode($url) . '&text=' . rawurlencode($title),\n    ];\n}\n\n/** Count currently open job listings (cached per request). */\nfunction navOpenJobCount(): int {\n    static $cached = null;\n    if ($cached !== null) return $cached;\n    $cached = 0;\n    $today = date('Y-m-d');\n    try {\n        $row = queryOne(\n            \"SELECT COUNT(*) AS c FROM job_listings\n             WHERE active=1\n               AND (deadline IS NULL OR deadline='' OR deadline >= ?)\n               AND (starts_at IS NULL OR starts_at='' OR starts_at <= ?)\",\n            [$today, $today]\n        );\n        $cached = (int)($row['c'] ?? 0);\n    } catch (\\Throwable $e) {\n        try {\n            $row = queryOne(\"SELECT COUNT(*) AS c FROM job_listings WHERE active=1\");\n            $cached = (int)($row['c'] ?? 0);\n        } catch (\\Throwable $e2) {\n            $cached = 0;\n        }\n    }\n    return $cached;\n}\n\n/** Count news posts published in the last N days (cached). */\nfunction navRecentNewsCount(int $days = 14): int {\n    static $cache = [];\n    $days = max(1, $days);\n    if (isset($cache[$days])) return $cache[$days];\n    $cache[$days] = 0;\n    $since = date('Y-m-d H:i:s', time() - ($days * 86400));\n    try {\n        $row = queryOne(\n            \"SELECT COUNT(*) AS c FROM news\n             WHERE active=1 AND published=1\n               AND COALESCE(published_at, created_at) >= ?\",\n            [$since]\n        );\n        $cache[$days] = (int)($row['c'] ?? 0);\n    } catch (\\Throwable $e) {\n        try {\n            $row = queryOne(\n                \"SELECT COUNT(*) AS c FROM news WHERE published=1 AND published_at >= ?\",\n                [$since]\n            );\n            $cache[$days] = (int)($row['c'] ?? 0);\n        } catch (\\Throwable $e2) {\n            $cache[$days] = 0;\n        }\n    }\n    return $cache[$days];\n}\n\n/**\n * Badge text for a nav link, or null if it should not show.\n *\n * Link keys:\n * - badge: static label (e.g. NEW)\n * - badge_until: YYYY-MM-DD — hide after this date\n * - badge_if: open_jobs | recent_news — require live content\n * - badge_mode: count | label — for open_jobs/recent_news, show number or static badge\n * - badge_days: for recent_news window (default 14)\n */\nfunction navBadgeText(array $link): ?string {\n    $until = $link['badge_until'] ?? null;\n    if (!empty($until)) {\n        $ts = strtotime((string)$until . ' 23:59:59');\n        if ($ts === false || $ts < time()) return null;\n    }\n\n    $cond = $link['badge_if'] ?? null;\n    $mode = $link['badge_mode'] ?? 'label';\n    $label = trim((string)($link['badge'] ?? 'NEW'));\n\n    if ($cond === 'open_jobs') {\n        $n = navOpenJobCount();\n        if ($n < 1) return null;\n        return $mode === 'count' ? (string)$n : ($label !== '' ? $label : 'NEW');\n    }\n\n    if ($cond === 'recent_news') {\n        $n = navRecentNewsCount((int)($link['badge_days'] ?? 14));\n        if ($n < 1) return null;\n        return $mode === 'count' ? (string)$n : ($label !== '' ? $label : 'NEW');\n    }\n\n    // Static badge (optional expiry already checked)\n    if ($label === '' || empty($link['badge'])) return null;\n    return $label;\n}\n\n/** Whether a nav link should show its badge. */\nfunction navShowBadge(array $link): bool {\n    return navBadgeText($link) !== null;\n}\n\n/** True if any link in a nav group has an active badge. */\nfunction navHasChildBadge(array $links): bool {\n    foreach ($links as $l) {\n        if (navShowBadge($l)) return true;\n    }\n    return false;\n}\n\n/** Human-readable employment type for job cards. */\nfunction jobListingTypeLabel(?string $type): string {\n    $map = [\n        'full-time'  => 'Full-time',\n        'part-time'  => 'Part-time',\n        'contract'   => 'Contract',\n        'internship' => 'Internship',\n    ];\n    $key = strtolower(trim((string)$type));\n    return $map[$key] ?? ucfirst(str_replace('_', ' ', $key ?: 'Role'));\n}\n\n/** Days remaining until job deadline (null if open-ended). */\nfunction jobListingDaysLeft(array $job): ?int {\n    if (empty($job['deadline'])) return null;\n    return (int)ceil((strtotime($job['deadline'] . ' 23:59:59') - time()) / 86400);\n}\n\n/**\n * Normalize YYYY-MM-DD from admin forms (BS picker hidden AD field).\n * Rejects empty/zero dates and mistaken BS-epoch AD values (1943-04-14).\n */\nfunction normalizeJobListingDate(?string $value): ?string {\n    $value = trim((string)$value);\n    if ($value === '' || $value === '0000-00-00' || str_starts_with($value, '0000-')) {\n        return null;\n    }\n    $date = substr($value, 0, 10);\n    if (!preg_match('/^\\d{4}-\\d{2}-\\d{2}$/', $date)) {\n        return null;\n    }\n    $ts = strtotime($date);\n    if ($ts === false || $ts < strtotime('1970-01-01')) {\n        return null;\n    }\n    return $date;\n}\n\n/** True if a job listing date is valid for public visibility checks. */\nfunction jobListingDateIsFutureOrToday(?string $date): bool {\n    if (!$date) return true;\n    $ts = strtotime($date);\n    return $ts !== false && $ts >= strtotime('today');\n}\n\n// ── Upload helper ─────────────────────────────────────────────────\nfunction handleUpload(string $field, string $dir = 'uploads'): ?string {\n    if (!isset($_FILES[$field]) || $_FILES[$field]['error'] !== UPLOAD_ERR_OK) return null;\n    $file     = $_FILES[$field];\n    $maxBytes = 5 * 1024 * 1024;\n    if ($file['size'] > $maxBytes) return null;\n    $finfo    = finfo_open(FILEINFO_MIME_TYPE);\n    $realMime = finfo_file($finfo, $file['tmp_name']);\n    finfo_close($finfo);\n    $allowed  = ['image/jpeg','image/png','image/webp','image/gif','application/pdf'];\n    if (!in_array($realMime, $allowed, true)) return null;\n    $mimeToExt = ['image/jpeg'=>'jpg','image/png'=>'png','image/webp'=>'webp','image/gif'=>'gif','application/pdf'=>'pdf'];\n    $ext  = $mimeToExt[$realMime] ?? strtolower(pathinfo($file['name'], PATHINFO_EXTENSION));\n    $name = bin2hex(random_bytes(12)) . '.' . $ext;\n    $dest = __DIR__ . '/../' . $dir . '/' . $name;\n    if (!is_dir(dirname($dest))) mkdir(dirname($dest), 0755, true);\n    if (!move_uploaded_file($file['tmp_name'], $dest)) return null;\n    return SITE_URL . '/' . $dir . '/' . $name;\n}\n\n// ── Text truncate ─────────────────────────────────────────────────\nfunction truncate(string $s, int $len = 100, string $suffix = '…'): string {\n    return mb_strlen($s) <= $len ? $s : mb_substr($s, 0, $len) . $suffix;\n}\n\n// ── Slug generator ────────────────────────────────────────────────\nfunction makeSlug(string $s): string {\n    $s = strtolower(trim(preg_replace('/[^A-Za-z0-9-]+/', '-', $s), '-'));\n    return preg_replace('/-+/', '-', $s);\n}\n\n// नेपालीमा: csrfField() — yo function le aafno kaam garchha\nfunction csrfField(): string {\n    return '<input type=\"hidden\" name=\"_csrf\" value=\"' . e(generateCsrf()) . '\">';\n}\n\n// नेपालीमा: Lucide SVG icon ko HTML banaune (size + inline style sahit)\nfunction icon(string $name, int $size = 16, string $style = ''): string {\n    $s = \"width:{$size}px;height:{$size}px;display:inline-block;vertical-align:middle;flex-shrink:0;\";\n    if ($style) $s .= $style;\n    return '<i data-lucide=\"' . e($name) . '\" style=\"' . $s . '\"></i>';\n}\n\n// Validate / normalize image URL for admin-saved fields.\n// Accepts absolute URLs, SITE_URL-relative paths (starting with '/'),\n// or empty string. Returns normalized absolute URL, empty string, or false on invalid.\n/**\n * @param string $url\n * @return string|false\n */\n/** Sanitize up to N admin-submitted gallery image URLs. */\nfunction stSanitizeDetailGalleryInput(array $urls, int $max = 2): array {\n    $clean = [];\n    foreach ($urls as $url) {\n        $url = trim((string)$url);\n        if ($url === '') {\n            continue;\n        }\n        $normalized = normalizeImageUrl($url);\n        if ($normalized === false || $normalized === '') {\n            continue;\n        }\n        $clean[] = $normalized;\n        if (count($clean) >= $max) {\n            break;\n        }\n    }\n    return array_values(array_unique($clean));\n}\n\n/** Build gallery URLs from JSON column with legacy primary-image fallback. */\nfunction stDetailGalleryImages(?string $screenshotsJson, ?string $primaryUrl = null, int $max = 2): array {\n    $urls = [];\n    if ($screenshotsJson !== null && trim($screenshotsJson) !== '') {\n        $decoded = json_decode($screenshotsJson, true);\n        if (is_array($decoded)) {\n            foreach ($decoded as $url) {\n                $url = trim((string)$url);\n                if ($url !== '') {\n                    $urls[] = $url;\n                }\n            }\n        }\n    }\n    if ($urls === [] && $primaryUrl !== null && trim($primaryUrl) !== '') {\n        $urls[] = trim($primaryUrl);\n    }\n    return stSanitizeDetailGalleryInput($urls, $max);\n}\n\nfunction normalizeImageUrl(string $url) {\n    $url = trim($url);\n    if ($url === '') return '';\n    // Allow relative site-root paths like /uploads/foo.jpg\n    if (str_starts_with($url, '/')) {\n        // If SITE_URL is not configured or empty, return the relative path as-is\n        if (!defined('SITE_URL') || SITE_URL === '') {\n            return $url; // Return relative path for development without SITE_URL\n        }\n        return rtrim(SITE_URL, '/') . $url;\n    }\n    // Ensure it's a valid absolute URL\n    if (!filter_var($url, FILTER_VALIDATE_URL)) return false;\n    // Basic extension check - skip slow network validation\n    $ext = strtolower(pathinfo(parse_url($url, PHP_URL_PATH) ?? '', PATHINFO_EXTENSION));\n    $allowedExts = ['jpg','jpeg','png','webp','gif','svg','ico'];\n    if ($ext !== '' && !in_array($ext, $allowedExts, true)) {\n        return false;\n    }\n    return $url;\n}\n\n/** Turn a relative /uploads/... path or absolute URL into a full https URL for OG/schema. */\nfunction absoluteMediaUrl(?string $url): string {\n    $url = trim((string)$url);\n    if ($url === '') return '';\n    if (preg_match('#^https?://#i', $url)) return $url;\n    if (str_starts_with($url, '//')) return 'https:' . $url;\n    $base = rtrim(defined('SITE_URL') ? (string)SITE_URL : '', '/');\n    if ($base === '') return $url;\n    if ($url[0] !== '/') $url = '/' . $url;\n    return $base . $url;\n}\n\n/**\n * Map a media URL to a local filesystem path when it belongs to this site.\n * Returns '' if the file cannot be resolved locally.\n */\nfunction localMediaPath(?string $url): string {\n    $url = trim((string)$url);\n    if ($url === '') return '';\n\n    $path = '';\n    if (preg_match('#^https?://#i', $url) || str_starts_with($url, '//')) {\n        $path = (string)(parse_url($url, PHP_URL_PATH) ?? '');\n        // Only treat same-site paths as local\n        $host = parse_url($url, PHP_URL_HOST);\n        $siteHost = defined('SITE_URL') ? parse_url((string)SITE_URL, PHP_URL_HOST) : null;\n        if ($host && $siteHost && strcasecmp((string)$host, (string)$siteHost) !== 0) {\n            return ''; // remote CDN — assume OK\n        }\n    } else {\n        $path = $url[0] === '/' ? $url : '/' . $url;\n    }\n    if ($path === '' || $path === '/') return '';\n\n    $root = dirname(__DIR__); // project root (includes/ → ../)\n    // Prefer includes/ parent (project root)\n    $candidates = [\n        $root . $path,\n        dirname($root) . $path, // safety\n    ];\n    // Also try from document-style public_html layout\n    if (defined('SITE_URL')) {\n        $candidates[] = $root . '/..' . $path;\n    }\n    foreach ($candidates as $fs) {\n        $real = realpath($fs);\n        if ($real && is_file($real)) return $real;\n        if (is_file($fs)) return $fs;\n    }\n    // Direct check without realpath (symlink issues)\n    $direct = $root . $path;\n    return is_file($direct) ? $direct : '';\n}\n\n/** True if URL is usable for OG (local file exists, or remote non-site URL). */\nfunction ogImageIsUsable(?string $url): bool {\n    $url = trim((string)$url);\n    if ($url === '') return false;\n\n    // Remote absolute URL on another host — keep (cannot verify cheaply)\n    if (preg_match('#^https?://#i', $url)) {\n        $host = parse_url($url, PHP_URL_HOST);\n        $siteHost = defined('SITE_URL') ? parse_url((string)SITE_URL, PHP_URL_HOST) : null;\n        if ($host && $siteHost && strcasecmp((string)$host, (string)$siteHost) !== 0) {\n            return true;\n        }\n    }\n\n    $local = localMediaPath($url);\n    if ($local !== '') return true;\n\n    // Same-site URL but file missing → unusable (would 404 → blank Facebook preview)\n    return false;\n}\n\n/**\n * Social preview image: page override → Settings OG image → site logo → legacy fallback.\n * Skips missing local files so Facebook never gets a 404 white preview.\n */\nfunction resolveOgImageUrl(?string $pageOverride = null, ?array $settings = null): string {\n    $settings = $settings ?? (function_exists('siteSettings') ? siteSettings() : []);\n    $candidates = [\n        trim((string)($pageOverride ?? '')),\n        trim((string)($settings['og_image'] ?? '')),\n        trim((string)($settings['logo_url'] ?? '')),\n        '/public/opengraph.jpg',\n    ];\n    foreach ($candidates as $c) {\n        if ($c === '') continue;\n        if (!ogImageIsUsable($c)) continue;\n        $abs = absoluteMediaUrl($c);\n        if ($abs !== '') return $abs;\n    }\n    // Last resort absolute fallback even if file check failed (dev)\n    return absoluteMediaUrl('/public/opengraph.jpg') ?: '/public/opengraph.jpg';\n}\n\n/** Prefer admin favicon, then logo (PNG/ICO), then bundled SVG. */\nfunction resolveFaviconUrl(?array $settings = null): string {\n    $settings = $settings ?? (function_exists('siteSettings') ? siteSettings() : []);\n    $candidates = [\n        trim((string)($settings['favicon_url'] ?? '')),\n        trim((string)($settings['logo_url'] ?? '')),\n        '/public/favicon.svg',\n    ];\n    foreach ($candidates as $c) {\n        if ($c === '') continue;\n        if (!ogImageIsUsable($c)) continue;\n        $abs = absoluteMediaUrl($c);\n        if ($abs !== '') return $abs;\n    }\n    return absoluteMediaUrl('/public/favicon.svg') ?: '/public/favicon.svg';\n}\n\n/**\n * Apple / Facebook chrome icons prefer PNG/JPG (SVG often shows as a broken/red tile).\n */\nfunction resolveAppleTouchIconUrl(?array $settings = null): string {\n    $settings = $settings ?? (function_exists('siteSettings') ? siteSettings() : []);\n    $candidates = [\n        trim((string)($settings['favicon_url'] ?? '')),\n        trim((string)($settings['logo_url'] ?? '')),\n        trim((string)($settings['og_image'] ?? '')),\n    ];\n    foreach ($candidates as $c) {\n        if ($c === '') continue;\n        if (!ogImageIsUsable($c)) continue;\n        $path = strtolower((string)(parse_url(absoluteMediaUrl($c), PHP_URL_PATH) ?? $c));\n        if (preg_match('/\\.(svg)(\\?|$)/', $path)) continue; // skip SVG for touch icon\n        $abs = absoluteMediaUrl($c);\n        if ($abs !== '') return $abs;\n    }\n    // Last raster fallback: site logo even if check failed, else SVG\n    $logo = trim((string)($settings['logo_url'] ?? ''));\n    if ($logo !== '') return absoluteMediaUrl($logo);\n    return resolveFaviconUrl($settings);\n}\n\nfunction faviconMimeFromUrl(string $url): string {\n    $path = strtolower((string)(parse_url($url, PHP_URL_PATH) ?? $url));\n    if (str_ends_with($path, '.svg')) return 'image/svg+xml';\n    if (str_ends_with($path, '.ico')) return 'image/x-icon';\n    if (str_ends_with($path, '.webp')) return 'image/webp';\n    if (str_ends_with($path, '.jpg') || str_ends_with($path, '.jpeg')) return 'image/jpeg';\n    return 'image/png';\n}\n\n/**\n * Default optional add-ons shown on products.php when products_addons is empty.\n * Keep in sync with the live hardcoded list so public stays unchanged until admin saves.\n */\nfunction productsAddonsDefaults(): array {\n    return [\n        ['active' => true, 'link_type' => 'custom', 'link_id' => 0, 'icon' => 'puzzle',         'title' => 'Custom Reports',         'desc' => 'Business / audit / management-specific reports', 'price' => 'from NPR 8,000',  'box' => 'icon-box-blue'],\n        ['active' => true, 'link_type' => 'custom', 'link_id' => 0, 'icon' => 'database',       'title' => 'Data Migration',         'desc' => 'From Excel, FoxPro or legacy systems',           'price' => 'from NPR 25,000', 'box' => 'icon-box-purple'],\n        ['active' => true, 'link_type' => 'custom', 'link_id' => 0, 'icon' => 'graduation-cap', 'title' => 'On-site Training',        'desc' => 'Full-day training for branch staff',             'price' => 'NPR 15,000/day',  'box' => 'icon-box-amber'],\n        ['active' => true, 'link_type' => 'custom', 'link_id' => 0, 'icon' => 'plug',           'title' => 'Third-party Integration', 'desc' => 'Payment gateways, APIs, third-party services',   'price' => 'from NPR 12,000', 'box' => 'icon-box-teal'],\n    ];\n}\n\n/**\n * Resolve products-page add-ons from site_settings (or defaults).\n * Linked product/service rows supply name/summary/price/icon when active.\n *\n * @return list<array{icon:string,title:string,desc:string,price:string,box:string,detail_url:?string}>\n */\nfunction resolveProductsAddons(?array $settings = null): array {\n    $settings = $settings ?? siteSettings();\n    $raw = $settings['products_addons'] ?? '';\n    $items = [];\n    if (is_string($raw) && $raw !== '') {\n        $decoded = json_decode($raw, true);\n        if (is_array($decoded)) $items = $decoded;\n    } elseif (is_array($raw)) {\n        $items = $raw;\n    }\n    if (empty($items)) {\n        $items = productsAddonsDefaults();\n    }\n\n    $colorMap = [\n        'blue' => 'icon-box-blue', 'teal' => 'icon-box-teal', 'purple' => 'icon-box-purple',\n        'amber' => 'icon-box-amber', 'green' => 'icon-box-green', 'rose' => 'icon-box-rose',\n        'orange' => 'icon-box-orange', 'indigo' => 'icon-box-indigo', 'gray' => 'icon-box-gray',\n    ];\n\n    $out = [];\n    foreach ($items as $item) {\n        if (!is_array($item)) continue;\n        if (isset($item['active']) && !$item['active']) continue;\n\n        $linkType = (string)($item['link_type'] ?? 'custom');\n        $linkId   = (int)($item['link_id'] ?? 0);\n        $icon     = trim((string)($item['icon'] ?? '')) ?: 'puzzle';\n        $title    = trim((string)($item['title'] ?? ''));\n        $desc     = trim((string)($item['desc'] ?? ''));\n        $price    = trim((string)($item['price'] ?? ''));\n        $box      = trim((string)($item['box'] ?? 'icon-box-blue')) ?: 'icon-box-blue';\n        $detailUrl = null;\n\n        if ($linkType === 'product' && $linkId > 0) {\n            try {\n                $row = queryOne(\n                    \"SELECT name, slug, summary, price_from, lucide_icon, icon_color FROM products WHERE id=? AND active=1\",\n                    [$linkId]\n                );\n                if ($row) {\n                    if ($title === '') $title = (string)$row['name'];\n                    if ($desc === '')  $desc  = (string)($row['summary'] ?? '');\n                    if ($icon === 'puzzle' || empty($item['icon'])) {\n                        $icon = trim((string)($row['lucide_icon'] ?? '')) ?: $icon;\n                    }\n                    if ($price === '' && !empty($row['price_from'])) {\n                        $price = 'from NPR ' . number_format((float)$row['price_from'], 0);\n                    }\n                    $color = strtolower((string)($row['icon_color'] ?? 'blue'));\n                    if (empty($item['box'])) $box = $colorMap[$color] ?? $box;\n                    $detailUrl = url('product-detail.php?slug=' . urlencode((string)$row['slug']));\n                }\n            } catch (\\Throwable $e) { /* keep overrides */ }\n        } elseif ($linkType === 'service' && $linkId > 0) {\n            try {\n                $row = queryOne(\n                    \"SELECT title AS name, slug, summary, price_from,\n                            COALESCE(lucide_icon, icon, 'layers') AS lucide_icon, icon_color\n                     FROM services WHERE id=? AND active=1\",\n                    [$linkId]\n                );\n                if ($row) {\n                    if ($title === '') $title = (string)$row['name'];\n                    if ($desc === '')  $desc  = (string)($row['summary'] ?? '');\n                    if ($icon === 'puzzle' || empty($item['icon'])) {\n                        $icon = trim((string)($row['lucide_icon'] ?? '')) ?: $icon;\n                    }\n                    if ($price === '' && !empty($row['price_from'])) {\n                        $price = 'from NPR ' . number_format((float)$row['price_from'], 0);\n                    }\n                    $color = strtolower((string)($row['icon_color'] ?? 'blue'));\n                    if (empty($item['box'])) $box = $colorMap[$color] ?? $box;\n                    $detailUrl = url('service-detail.php?slug=' . urlencode((string)$row['slug']));\n                }\n            } catch (\\Throwable $e) { /* keep overrides */ }\n        }\n\n        if ($title === '') continue;\n        $out[] = [\n            'icon'       => $icon,\n            'title'      => $title,\n            'desc'       => $desc,\n            'price'      => $price,\n            'box'        => $box,\n            'detail_url' => $detailUrl,\n        ];\n    }\n    return $out;\n}\n\n// ── Audit log helper ─────────────────────────────────────────────\n// नेपालीमा: Admin action haru lai audit_log table ma record garne\n// Usage: logAudit('user.delete', 'Deleted user id=42', ['target_type'=>'user','target_id'=>42])\nfunction logAudit(string $action, string $description = '', array $meta = []): void {\n    try {\n        if (session_status() === PHP_SESSION_NONE) session_start();\n        $userId   = $_SESSION['user_id'] ?? null;\n        $targetT  = $meta['target_type'] ?? null;\n        $targetId = isset($meta['target_id']) ? (int)$meta['target_id'] : null;\n        $oldVal   = isset($meta['old']) ? json_encode($meta['old']) : null;\n        $newVal   = isset($meta['new'])\n            ? json_encode($meta['new'])\n            : ($description !== '' ? json_encode(['note' => $description]) : null);\n        $ip       = $_SERVER['HTTP_X_FORWARDED_FOR'] ?? $_SERVER['REMOTE_ADDR'] ?? null;\n        if ($ip) $ip = trim(explode(',', $ip)[0]);\n        $ua       = substr($_SERVER['HTTP_USER_AGENT'] ?? '', 0, 300);\n\n        // Try full schema (with ip_address + user_agent); fall back to slim schema.\n        try {\n            execute(\n                \"INSERT INTO audit_log (user_id, action, target_type, target_id, old_value, new_value, ip_address, user_agent)\n                 VALUES (?,?,?,?,?,?,?,?)\",\n                [$userId, $action, $targetT, $targetId, $oldVal, $newVal, $ip, $ua]\n            );\n        } catch (\\Throwable $e) {\n            execute(\n                \"INSERT INTO audit_log (user_id, action, target_type, target_id, new_value)\n                 VALUES (?,?,?,?,?)\",\n                [$userId, $action, $targetT, $targetId, $newVal]\n            );\n        }\n    } catch (\\Throwable $e) {\n        // Audit failure le main flow lai block nagarcha\n        error_log(\"logAudit failed: \" . $e->getMessage());\n    }\n}\n"}}}}