Content Editor

Edit site content and page files · changes go live immediately on upload

Direct file editor. A backup is automatically saved to system/backups/ before every save. Only edit pages you understand — one syntax error can break the page for all visitors.

Homepage (index.html) Dashboard (dashboard.php) Share page (share.php) Thank you page (thankyou.php) Book viewer (viewer.php)

Dashboard (dashboard.php)

61,436 chars

<?php
/**
 * dashboard.php — El Método Reflexivo
 * Central hub: OTP login, library, challenge app, referral dashboard.
 */
session_start();

if (file_exists(__DIR__ . '/vendor/autoload.php')) {
    require_once __DIR__ . '/vendor/autoload.php';
}
if (file_exists(__DIR__ . '/system/stamp.php')) {
    require_once __DIR__ . '/system/stamp.php';
}

define('TOKENS_FILE',    __DIR__ . '/system/tokens.json');
define('REFERRALS_FILE', __DIR__ . '/system/referrals.json');
define('STAMPED_DIR',    __DIR__ . '/system/generated/');
define('PDF_ES',         __DIR__ . '/system/pdfs/Website ESP version.pdf');
define('PDF_EN',         __DIR__ . '/system/pdfs/Website eng version.pdf');
define('LOG_FILE',       __DIR__ . '/system/delivery.log');
define('SITE_URL',       'https://metodoreflexivo.com');
define('SUPPORT_EMAIL',  'yjcruz@leadersmakeleaders.org');
define('COOKIE_SECRET',  'mr_s3cr3t_k3y_2025_MR');
define('SMTP_HOST',      'smtp.hostinger.com');
define('SMTP_PORT',      465);
define('SMTP_USER',      'info@metodoreflexivo.com');
define('SMTP_PASS',      'Aurelio07$9986!');
define('FROM_EMAIL',     'info@metodoreflexivo.com');
define('FROM_NAME',      'Félix Hernández & Yamil Cruz');

// ─── Helpers ─────────────────────────────────────────────────────────────────

function logMsg($m) {
    file_put_contents(LOG_FILE, date('[Y-m-d H:i:s] ') . $m . "\n", FILE_APPEND);
}

function readTokens() {
    if (!file_exists(TOKENS_FILE)) return [];
    $raw = file_get_contents(TOKENS_FILE);
    $d   = json_decode($raw ?: '{}', true);
    return is_array($d) ? $d : [];
}

function writeTokens($data) {
    file_put_contents(TOKENS_FILE, json_encode($data, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES), LOCK_EX);
}

function readOTPs() {
    return $_SESSION['mr_otp'] ?? [];
}

function writeOTPs($data) {
    $_SESSION['mr_otp'] = $data;
}

function readReferrals() {
    if (!file_exists(REFERRALS_FILE)) return [];
    $raw = file_get_contents(REFERRALS_FILE);
    $d   = json_decode($raw ?: '{}', true);
    return is_array($d) ? $d : [];
}

function getRefCode($email) {
    return 'ref_' . substr(md5(strtolower(trim($email)) . 'mr2025'), 0, 8);
}

function getDashEmail() {
    $ck = $_COOKIE['mr_dash_auth'] ?? '';
    if (!$ck) return null;
    $parts = explode('|', $ck, 2);
    if (count($parts) !== 2) return null;
    [$email, $hmac] = $parts;
    $expected = hash_hmac('sha256', $email . '|mr_dash_2025', COOKIE_SECRET);
    if (!hash_equals($expected, $hmac)) return null;
    return strtolower(trim($email));
}

function setAuthCookies($email, $tokens) {
    $tier_map = ['basic' => 1, 'standard' => 2, 'premium' => 3];
    $best_tier_str = 'basic'; $best_tier_int = 0; $best_lang = 'es';

// Viewer cookies — one per owned token
    foreach ($tokens as $tok => $tdata) {
        if (strpos($tok, 'gv_') === 0) continue;
        if (strtolower(trim($tdata['email'] ?? '')) !== $email) continue;
        $ck_name = 'mr_auth_' . substr($tok, 0, 12);
        $ck_val  = hash_hmac('sha256', $tok . '|' . $email, COOKIE_SECRET);
        setcookie($ck_name, $ck_val, time() + (365 * 86400), '/');
        $t = $tier_map[$tdata['tier'] ?? 'basic'] ?? 1;
        if ($t > $best_tier_int) {
            $best_tier_int = $t;
            $best_tier_str = $tdata['tier'] ?? 'basic';
            $best_lang     = $tdata['lang'] ?? 'es';
        }
    }

// Challenge cookie
    $sk = 'mr_ch_' . substr(md5($email), 0, 20);
    $cn = 'mr_chal_' . substr(md5($email), 0, 12);
    $cv = hash_hmac('sha256', $sk, COOKIE_SECRET) . '|' . $sk . '|' . $best_lang . '|' . $best_tier_str;
    setcookie($cn, $cv, time() + (365 * 86400), '/');

// Dashboard cookie
    $dc = $email . '|' . hash_hmac('sha256', $email . '|mr_dash_2025', COOKIE_SECRET);
    setcookie('mr_dash_auth', $dc, time() + (5 * 365 * 86400), '/');
}

// ─── Action handling ─────────────────────────────────────────────────────────

$auth_email   = getDashEmail();
$step         = $auth_email ? 'dashboard' : 'login';
$error        = '';
$verify_email = '';

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $action = $_POST['action'] ?? '';

// ── Logout ──────────────────────────────────────────────────
    if ($action === 'logout') {
        setcookie('mr_dash_auth', '', time() - 3600, '/');
        header('Location: /dashboard.php');
        exit;
    }

// ── Claim missing language book (all tiers) ──────────────────
    if ($action === 'claim_language' && $auth_email) {
        $claim_lang = ($_POST['lang'] ?? '') === 'en' ? 'en' : 'es';
        $ud = getUserData($auth_email);
        if ($ud['max_tier'] >= 1 && !isset($ud['owned'][$claim_lang]) && function_exists('stampPdf')) {
            $tier_int  = $ud['max_tier'];
            $tier_str  = $tier_int >= 3 ? 'premium' : ($tier_int >= 2 ? 'standard' : 'basic');
            $source    = ($claim_lang === 'es') ? PDF_ES : PDF_EN;
            $safe      = preg_replace('/[^a-z0-9]/', '_', $auth_email);
            $filename  = "VE_{$claim_lang}_{$safe}_" . time() . ".pdf";
            $outpath   = STAMPED_DIR . $filename;
            if (file_exists($source) && stampPdf($source, $outpath, $auth_email, $claim_lang)) {
                $new_token = bin2hex(random_bytes(24));
                $all_tokens = readTokens();
                $all_tokens[$new_token] = [
                    'file'     => $filename,
                    'email'    => $auth_email,
                    'lang'     => $claim_lang,
                    'tier'     => $tier_str,
                    'uses'     => 0,
                    'max_uses' => 9999,
                    'created'  => time(),
                    'expires'  => time() + (365 * 86400),
                    'pdf_code' => function_exists('makePdfCode') ? makePdfCode($auth_email) : '',
                ];
                writeTokens($all_tokens);
                // Set viewer cookie for the new token
                $ck_name = 'mr_auth_' . substr($new_token, 0, 12);
                $ck_val  = hash_hmac('sha256', $new_token . '|' . $auth_email, COOKIE_SECRET);
                setcookie($ck_name, $ck_val, time() + (365 * 86400), '/');
                logMsg("📚 Claimed {$claim_lang} book for {$auth_email}");
            } else {
                logMsg("❌ Claim stamp failed ({$claim_lang}) for {$auth_email}");
            }
        }
        header('Location: /dashboard.php');
        exit;
    }

// ── Send OTP ─────────────────────────────────────────────────
    if ($action === 'send_otp') {
        $email = strtolower(trim($_POST['email'] ?? ''));
        if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
            $error = 'email_invalid';
        } else {
            $tokens = readTokens();
            $found  = false;
            foreach ($tokens as $tok => $tdata) {
                if (strpos($tok, 'gv_') === 0) continue;
                if (strtolower(trim($tdata['email'] ?? '')) === $email) { $found = true; break; }
            }
            if (!$found) {
                $error = 'not_found';
            } else {
                $code = str_pad((string)random_int(0, 999999), 6, '0', STR_PAD_LEFT);
                $otps = readOTPs();
                $otps[$email] = ['code' => $code, 'expires' => time() + 900, 'attempts' => 0, 'sent_at' => time()];
                writeOTPs($otps);
                if (sendOTPEmail($email, $code)) {
                    $_SESSION['mr_otp_email'] = $email;
                    $step = 'verify';
                    $verify_email = $email;
                    logMsg("OTP sent to $email");
                } else {
                    $error = 'send_failed';
                }
            }
        }
    }

// ── Verify OTP ───────────────────────────────────────────────
    if ($action === 'verify_otp') {
        $email        = strtolower(trim($_POST['email'] ?? ''));
        $code         = preg_replace('/\D/', '', trim($_POST['code'] ?? ''));
        $otps         = readOTPs();
        $verify_email = $email;
        $step         = 'verify';

if (!isset($otps[$email])) {
            $error = 'otp_not_found';
        } elseif ($otps[$email]['expires'] < time()) {
            unset($otps[$email]); writeOTPs($otps);
            $error = 'otp_expired'; $step = 'login';
        } elseif ($otps[$email]['attempts'] >= 3) {
            unset($otps[$email]); writeOTPs($otps);
            $error = 'otp_toomany'; $step = 'login';
        } elseif ($otps[$email]['code'] !== $code) {
            $otps[$email]['attempts']++;
            writeOTPs($otps);
            $error = 'otp_wrong';
        } else {
            unset($otps[$email]); writeOTPs($otps);
            $tokens = readTokens();
            setAuthCookies($email, $tokens);
            logMsg("Dashboard login: $email");
            header('Location: /dashboard.php');
            exit;
        }
    }

// ── Resend OTP ───────────────────────────────────────────────
    if ($action === 'resend_otp') {
        $email = strtolower(trim($_POST['email'] ?? $_SESSION['mr_otp_email'] ?? ''));
        $verify_email = $email;
        $step = 'verify';
        if ($email && filter_var($email, FILTER_VALIDATE_EMAIL)) {
            $otps = readOTPs();
            if (isset($otps[$email]) && (time() - ($otps[$email]['sent_at'] ?? 0)) < 60) {
                $error = 'resend_wait';
            } else {
                $code = str_pad((string)random_int(0, 999999), 6, '0', STR_PAD_LEFT);
                $otps[$email] = ['code' => $code, 'expires' => time() + 900, 'attempts' => 0, 'sent_at' => time()];
                writeOTPs($otps);
                sendOTPEmail($email, $code);
            }
        }
    }
}

if ($step === 'verify' && !$verify_email) {
    $verify_email = $_SESSION['mr_otp_email'] ?? '';
}

// ─── Load dashboard data ──────────────────────────────────────────────────────

$user_data    = null;
$ref_code     = '';
$ref_link     = '';
$referrals    = [];
$points       = 0;
$best_lang    = 'es';
$max_tier_str = 'basic';

$rewards_ladder = [
    ['pts' => 1,  'icon' => '🌟', 'es' => 'Mención en redes sociales',             'en' => 'Social media shoutout'],
    ['pts' => 3,  'icon' => '✍️',  'es' => 'Dedicatoria digital firmada',            'en' => 'Signed digital dedication'],
    ['pts' => 5,  'icon' => '📚', 'es' => 'Libro físico firmado (enviado a ti)',    'en' => 'Physical signed book (shipped to you)'],
    ['pts' => 10, 'icon' => '📧', 'es' => 'Acceso coaching privado por email (1 mes)', 'en' => 'Private coaching email access (1 month)'],
    ['pts' => 25, 'icon' => '🎥', 'es' => 'Zoom 30 min con Félix o Yamil',           'en' => '30-min Zoom with Félix or Yamil'],
];

if ($step === 'dashboard') {
    $user_data = getUserData($auth_email);
    $ref_code  = getRefCode($auth_email);
    $ref_link  = SITE_URL . '/share.php?ref=' . $ref_code;
    $all_refs  = readReferrals();
    if (isset($all_refs[$ref_code])) {
        $referrals = $all_refs[$ref_code]['referrals'] ?? [];
    }
    $points = count($referrals);

$tier_int_to_str = [1 => 'basic', 2 => 'standard', 3 => 'premium'];
    $max_tier_str    = $tier_int_to_str[$user_data['max_tier']] ?? 'basic';

// Preferred lang for challenge link
    if (isset($user_data['owned']['es'])) $best_lang = 'es';
    elseif (isset($user_data['owned']['en'])) $best_lang = 'en';

$tier_badge_colors = [
        'basic'    => '#555',
        'standard' => '#2a6a9a',
        'premium'  => '#8a6a1a',
    ];
    $tier_badge_labels = [
        'basic'    => 'Básico / Basic',
        'standard' => 'Estándar / Standard',
        'premium'  => 'Premium',
    ];
}

// Error messages (bilingual)
$error_msgs = [
    'email_invalid' => 'Por favor ingresa un email válido. / Please enter a valid email address.',
    'not_found'     => 'No encontramos una compra con ese email. Usa <a href="/recover.php" style="color:#C9A84C">recuperar acceso</a>. / No purchase found for that email. Use <a href="/recover.php" style="color:#C9A84C">recover access</a>.',
    'send_failed'   => 'No pudimos enviar el código. Intenta de nuevo. / Could not send the code. Please try again.',
    'otp_not_found' => 'Código no encontrado. Regresa e intenta de nuevo. / Code not found. Go back and try again.',
    'otp_expired'   => 'El código expiró. Solicita uno nuevo. / The code expired. Request a new one.',
    'otp_toomany'   => 'Demasiados intentos fallidos. Solicita un código nuevo. / Too many failed attempts. Request a new code.',
    'otp_wrong'     => 'Código incorrecto. / Incorrect code.',
    'resend_wait'   => 'Espera 60 segundos antes de reenviar. / Wait 60 seconds before resending.',
];

/* ── Nav ── */
    .nav { position: fixed; top: 0; left: 0; right: 0; z-index: 200; display: flex; justify-content: space-between; align-items: center; padding: 0 40px; height: 60px; background: rgba(255,255,255,.97); backdrop-filter: blur(12px); border-bottom: 1px solid var(--border); box-shadow: 0 1px 8px rgba(0,0,0,.06) }
    .nav-logo { font-family: var(--fi); font-size: 22px; letter-spacing: 6px; color: var(--gold) }
    .nav-right { display: flex; align-items: center; gap: 16px }
    .nav-back { font-size: 11px; font-weight: 600; letter-spacing: 2px; text-transform: uppercase; color: var(--subtle); transition: color .2s }
    .nav-back:hover { color: var(--text) }
    .nav-logout { font-size: 11px; font-weight: 600; letter-spacing: 1.5px; text-transform: uppercase; color: var(--muted); padding: 6px 14px; border: 1px solid var(--border2); border-radius: var(--radius); transition: all .2s }
    .nav-logout:hover { color: var(--text); border-color: var(--gold); background: var(--gold-dim) }

/* ── Auth forms ── */
    .auth-wrap { min-height: 100vh; display: flex; align-items: center; justify-content: center; padding: 80px 20px 40px; background: var(--bg) }
    .auth-card { width: 100%; max-width: 440px; background: var(--surface); border: 1px solid var(--border); padding: 48px 40px; border-radius: 12px; box-shadow: var(--shadow) }
    .auth-logo { font-family: var(--fi); font-size: 26px; letter-spacing: 8px; color: var(--gold); margin-bottom: 36px }
    .auth-title { font-family: var(--fd); font-size: 26px; font-weight: 700; line-height: 1.2; margin-bottom: 8px; color: var(--text) }
    .auth-sub { font-size: 13px; color: var(--muted); margin-bottom: 32px; line-height: 1.65 }
    .auth-label { display: block; font-size: 10px; font-weight: 700; letter-spacing: 2px; text-transform: uppercase; color: var(--subtle); margin-bottom: 8px }
    .auth-input { width: 100%; background: var(--bg); border: 1.5px solid var(--border2); padding: 13px 16px; color: var(--text); font-family: var(--fb); font-size: 15px; outline: none; border-radius: var(--radius); transition: border-color .2s, box-shadow .2s; margin-bottom: 16px }
    .auth-input:focus { border-color: var(--gold-light); box-shadow: 0 0 0 3px rgba(201,168,76,.12) }
    .auth-input.otp { font-size: 24px; letter-spacing: 8px; text-align: center; font-family: monospace; font-weight: 700 }
    .auth-btn { display: block; width: 100%; padding: 14px; background: var(--gold); color: #fff; font-family: var(--fb); font-size: 12px; font-weight: 700; letter-spacing: 2px; text-transform: uppercase; border-radius: var(--radius); transition: background .2s; margin-top: 4px; box-shadow: 0 2px 8px rgba(166,124,46,.3) }
    .auth-btn:hover { background: var(--gold-dark) }
    .auth-link-btn { background: none; border: none; color: var(--gold); font-size: 12px; font-weight: 600; padding: 0; cursor: pointer; text-decoration: underline }
    .auth-error { background: #FFF0F0; border: 1px solid #F5C6C6; padding: 12px 16px; font-size: 13px; color: #B03030; margin-bottom: 20px; border-radius: var(--radius); line-height: 1.5 }
    .auth-footer { margin-top: 28px; font-size: 12px; color: var(--subtle); text-align: center; line-height: 1.65 }
    .auth-footer a { color: var(--gold) }
    .otp-actions { display: flex; justify-content: space-between; align-items: center; margin-top: 12px }
    .otp-back { font-size: 12px; color: var(--subtle); cursor: pointer; text-decoration: none }
    .otp-back:hover { color: var(--muted) }

/* ── Dashboard layout ── */
    .dash-wrap { padding-top: 60px; max-width: 900px; margin: 0 auto; padding-left: 24px; padding-right: 24px; padding-bottom: 80px }

/* ── Install banner ── */
    .install-banner { background: #FFFBF0; border: 1px solid rgba(166,124,46,.3); border-left: 3px solid var(--gold); padding: 16px 20px; margin: 24px 0 0; display: flex; align-items: flex-start; gap: 16px; border-radius: var(--radius) }
    .install-banner-icon { font-size: 22px; flex-shrink: 0; margin-top: 2px }
    .install-banner-body { flex: 1 }
    .install-banner-title { font-size: 13px; font-weight: 700; color: var(--gold-dark); margin-bottom: 4px }
    .install-banner-sub { font-size: 12px; color: var(--muted); line-height: 1.55 }
    .install-banner-close { background: none; border: none; color: var(--subtle); font-size: 18px; cursor: pointer; flex-shrink: 0; padding: 0 4px; transition: color .2s }
    .install-banner-close:hover { color: var(--muted) }
    #btn-pwa-install { display: none; margin-top: 10px; padding: 8px 18px; background: var(--gold); color: #fff; font-size: 11px; font-weight: 700; letter-spacing: 1.5px; text-transform: uppercase; border: none; border-radius: var(--radius); cursor: pointer; transition: background .2s }
    #btn-pwa-install:hover { background: var(--gold-dark) }

/* ── Section ── */
    .section { margin-top: 36px }
    .section-header { display: flex; align-items: baseline; gap: 12px; padding-bottom: 10px; border-bottom: 2px solid var(--border); margin-bottom: 18px }
    .section-title { font-size: 10px; font-weight: 700; letter-spacing: 3px; text-transform: uppercase; color: var(--subtle) }
    .section-badge { font-size: 9px; font-weight: 700; letter-spacing: 2px; text-transform: uppercase; padding: 2px 8px; border-radius: 1px }

/* ── User header ── */
    .user-header { margin-top: 24px; padding: 20px 24px; background: var(--surface); border: 1px solid var(--border); border-radius: 10px; display: flex; align-items: center; gap: 16px; flex-wrap: wrap; box-shadow: var(--shadow) }
    .user-avatar { width: 44px; height: 44px; border-radius: 50%; background: var(--gold-dim); border: 2px solid var(--gold-light); display: flex; align-items: center; justify-content: center; font-family: var(--fi); font-size: 18px; color: var(--gold); flex-shrink: 0 }
    .user-info { flex: 1; min-width: 0 }
    .user-email { font-size: 14px; font-weight: 600; color: var(--text); white-space: nowrap; overflow: hidden; text-overflow: ellipsis }
    .user-tier { font-size: 10px; color: var(--muted); margin-top: 2px; letter-spacing: .5px }
    .tier-pill { display: inline-block; font-size: 9px; font-weight: 700; letter-spacing: 2px; text-transform: uppercase; padding: 3px 10px; border-radius: 20px; margin-left: 6px }

/* ── Book cards ── */
    .books-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(240px, 1fr)); gap: 14px }
    .book-card { background: var(--surface); border: 1px solid var(--border); padding: 20px 20px 18px; display: flex; flex-direction: column; gap: 14px; border-radius: 10px; box-shadow: var(--shadow); transition: box-shadow .2s, transform .15s }
    .book-card:hover { box-shadow: 0 4px 20px rgba(0,0,0,.1); transform: translateY(-2px) }
    .book-cover { height: 110px; background: linear-gradient(135deg, #2C1F08 0%, #1A1208 100%); border-radius: 6px; border-left: 3px solid var(--gold-light); display: flex; flex-direction: column; justify-content: flex-end; padding: 14px; margin-bottom: 2px }
    .book-cover-lang { font-size: 9px; font-weight: 700; letter-spacing: 3px; text-transform: uppercase; color: var(--gold-light); margin-bottom: 4px }
    .book-cover-title { font-family: var(--fd); font-size: 14px; font-weight: 700; color: #fff; line-height: 1.25 }
    .book-meta { font-size: 11px; color: var(--subtle) }
    .book-btn { display: flex; align-items: center; justify-content: center; gap: 8px; padding: 11px; background: var(--gold); color: #fff; font-size: 11px; font-weight: 700; letter-spacing: 1.5px; text-transform: uppercase; border-radius: var(--radius); transition: background .2s; text-decoration: none; box-shadow: 0 2px 6px rgba(166,124,46,.25) }
    .book-btn:hover { background: var(--gold-dark) }

/* ── Challenge card ── */
    .challenge-card { background: linear-gradient(135deg, #2C1F08, #1A1208); border: 1px solid rgba(201,168,76,.3); border-left: 3px solid var(--gold-light); padding: 28px; border-radius: 10px; display: flex; align-items: center; gap: 24px; flex-wrap: wrap; box-shadow: 0 4px 20px rgba(0,0,0,.08) }
    .challenge-info { flex: 1; min-width: 200px }
    .challenge-badge { display: inline-block; background: var(--gold-light); color: #1A1208; font-size: 9px; font-weight: 700; letter-spacing: 2px; text-transform: uppercase; padding: 3px 10px; margin-bottom: 10px; border-radius: 20px }
    .challenge-title { font-family: var(--fd); font-size: 18px; font-weight: 700; margin-bottom: 6px; color: #fff }
    .challenge-desc { font-size: 13px; color: rgba(255,255,255,.6); line-height: 1.65 }
    .challenge-btn { display: inline-flex; align-items: center; gap: 8px; padding: 13px 26px; background: var(--gold-light); color: #1A1208; font-size: 12px; font-weight: 700; letter-spacing: 1.5px; text-transform: uppercase; border-radius: var(--radius); transition: background .2s; white-space: nowrap; text-decoration: none; flex-shrink: 0; box-shadow: 0 2px 10px rgba(201,168,76,.4) }
    .challenge-btn:hover { background: var(--gold) }

/* ── Referral section ── */
    .ref-hero { background: var(--surface); border: 1px solid var(--border); padding: 24px 28px; margin-bottom: 14px; border-radius: 10px; box-shadow: var(--shadow) }
    .ref-link-row { display: flex; gap: 8px; align-items: stretch; flex-wrap: wrap; margin-top: 14px }
    .ref-link-input { flex: 1; min-width: 180px; background: var(--bg); border: 1.5px solid var(--border2); padding: 10px 14px; color: var(--muted); font-size: 12px; font-family: monospace; border-radius: var(--radius); outline: none; cursor: text; overflow: hidden; text-overflow: ellipsis; white-space: nowrap }
    .ref-copy-btn { padding: 10px 20px; background: var(--gold); color: #fff; font-size: 11px; font-weight: 700; letter-spacing: 1.5px; text-transform: uppercase; border-radius: var(--radius); transition: background .2s; white-space: nowrap; border: none; cursor: pointer }
    .ref-copy-btn:hover { background: var(--gold-dark) }
    .ref-stats-row { display: flex; gap: 12px; margin-top: 16px; flex-wrap: wrap }
    .ref-stat { flex: 1; min-width: 100px; background: var(--bg); border: 1px solid var(--border); padding: 16px; text-align: center; border-radius: var(--radius) }
    .ref-stat-num { font-family: var(--fd); font-size: 32px; font-weight: 700; color: var(--gold); line-height: 1 }
    .ref-stat-lbl { font-size: 10px; font-weight: 600; letter-spacing: 1.5px; text-transform: uppercase; color: var(--subtle); margin-top: 4px }

/* ── Rewards ladder ── */
    .rewards-ladder { display: flex; flex-direction: column; gap: 6px }
    .reward-row { display: flex; align-items: center; gap: 16px; padding: 14px 16px; border: 1px solid var(--border); border-radius: var(--radius); background: var(--surface); transition: border-color .2s }
    .reward-row.earned { background: #FFFBF0; border-color: rgba(166,124,46,.35) }
    .reward-row.next { border-color: rgba(166,124,46,.2); background: #FFFDFA }
    .reward-icon { font-size: 20px; width: 32px; text-align: center; flex-shrink: 0 }
    .reward-pts { font-size: 10px; font-weight: 700; letter-spacing: 1px; color: var(--subtle); width: 44px; flex-shrink: 0; text-align: right }
    .reward-text { flex: 1; font-size: 13px; color: var(--muted) }
    .reward-text.earned { color: var(--text); font-weight: 600 }
    .reward-check { font-size: 16px; color: var(--gold); flex-shrink: 0 }
    .reward-lock { font-size: 13px; color: var(--border2); flex-shrink: 0 }

/* ── Referral list ── */
    .ref-list { display: flex; flex-direction: column; gap: 6px }
    .ref-row { display: flex; align-items: center; gap: 14px; padding: 12px 16px; border: 1px solid var(--border); background: var(--surface); border-radius: var(--radius) }
    .ref-row-num { width: 22px; height: 22px; border-radius: 50%; background: var(--gold-dim); display: flex; align-items: center; justify-content: center; font-size: 9px; font-weight: 700; color: var(--gold); flex-shrink: 0 }
    .ref-row-email { flex: 1; font-size: 13px; color: var(--muted) }
    .ref-row-tier { font-size: 9px; font-weight: 700; letter-spacing: 1.5px; text-transform: uppercase; color: var(--subtle) }
    .ref-row-date { font-size: 11px; color: var(--border2) }
    .ref-empty { padding: 28px; text-align: center; color: var(--subtle); font-size: 13px; background: var(--surface); border: 1px solid var(--border); line-height: 1.65; border-radius: var(--radius) }

/* ── Footer ── */
    .dash-footer { padding: 36px; text-align: center; border-top: 1px solid var(--border); margin-top: 60px }
    .dash-footer-brand { font-family: var(--fi); font-size: 18px; letter-spacing: 5px; color: var(--gold); margin-bottom: 8px }
    .dash-footer-copy { font-size: 11px; color: var(--border2) }
    .dash-footer-support { font-size: 12px; color: var(--subtle); margin-top: 8px }
    .dash-footer-support a { color: var(--gold) }

/* ── Referral hero ── */
    .ref-hero-card { background: linear-gradient(135deg,#2C1F08 0%,#1A1208 100%); border-radius: 14px; padding: 28px 28px 24px; margin-bottom: 14px; position: relative; overflow: hidden }
    .ref-hero-card::before { content:''; position:absolute; top:-40px; right:-40px; width:200px; height:200px; background:radial-gradient(circle,rgba(201,168,76,.18) 0%,transparent 70%); pointer-events:none }
    .ref-hero-headline { font-family: var(--fd); font-size: 22px; font-weight: 700; color: #fff; margin-bottom: 6px; line-height: 1.25 }
    .ref-hero-sub { font-size: 13px; color: rgba(255,255,255,.55); margin-bottom: 22px; line-height: 1.55 }
    .ref-points-row { display: flex; align-items: center; gap: 20px; margin-bottom: 20px; flex-wrap: wrap }
    .ref-points-big { text-align: center }
    .ref-points-num { font-family: var(--fd); font-size: 52px; font-weight: 700; color: var(--gold-light); line-height: 1 }
    .ref-points-label { font-size: 10px; font-weight: 700; letter-spacing: 2px; text-transform: uppercase; color: rgba(255,255,255,.4); margin-top: 4px }
    .ref-progress-wrap { flex: 1; min-width: 160px }
    .ref-progress-label { display: flex; justify-content: space-between; font-size: 11px; color: rgba(255,255,255,.45); margin-bottom: 8px }
    .ref-progress-track { height: 8px; background: rgba(255,255,255,.1); border-radius: 4px; overflow: hidden }
    .ref-progress-fill { height: 100%; background: linear-gradient(90deg, var(--gold-light), #E8C870); border-radius: 4px; transition: width .6s ease }
    .ref-next-reward { font-size: 12px; color: rgba(255,255,255,.5); margin-top: 6px }
    .ref-next-reward strong { color: var(--gold-light) }
    .share-grid { display: grid; grid-template-columns: 1fr 1fr 1fr; gap: 10px; margin-bottom: 18px }
    .share-btn { display: flex; flex-direction: column; align-items: center; gap: 6px; padding: 13px 8px; border: none; border-radius: 10px; cursor: pointer; font-family: var(--fb); font-size: 11px; font-weight: 700; letter-spacing: .5px; transition: transform .15s, opacity .15s; text-decoration: none }
    .share-btn:hover { transform: translateY(-2px); opacity: .9 }
    .share-btn-icon { font-size: 22px; line-height: 1 }
    .share-btn.whatsapp { background: #25D366; color: #fff }
    .share-btn.copy { background: rgba(255,255,255,.12); color: rgba(255,255,255,.8); border: 1px solid rgba(255,255,255,.15) }
    .share-btn.sms { background: #3B82F6; color: #fff }
    .ref-link-mini { display: flex; align-items: center; gap: 8px; background: rgba(0,0,0,.3); border-radius: 8px; padding: 10px 14px }
    .ref-link-mini-text { flex: 1; font-size: 11px; font-family: monospace; color: rgba(255,255,255,.4); overflow: hidden; text-overflow: ellipsis; white-space: nowrap }
    .ref-link-mini-btn { font-size: 11px; font-weight: 700; color: var(--gold-light); background: none; border: none; cursor: pointer; white-space: nowrap; padding: 0 }

/* ── Referral person cards ── */
    .ref-people { display: flex; flex-direction: column; gap: 8px }
    .ref-person { display: flex; align-items: center; gap: 14px; background: var(--surface); border: 1px solid var(--border); border-radius: 8px; padding: 14px 16px; box-shadow: var(--shadow) }
    .ref-person-avatar { width: 36px; height: 36px; border-radius: 50%; background: var(--gold-dim); border: 1.5px solid var(--gold-light); display: flex; align-items: center; justify-content: center; font-size: 13px; font-weight: 700; color: var(--gold); flex-shrink: 0 }
    .ref-person-info { flex: 1; min-width: 0 }
    .ref-person-name { font-size: 14px; font-weight: 600; color: var(--text); white-space: nowrap; overflow: hidden; text-overflow: ellipsis }
    .ref-person-email { font-size: 11px; color: var(--subtle) }
    .ref-person-tier { font-size: 9px; font-weight: 700; letter-spacing: 1.5px; text-transform: uppercase; padding: 3px 8px; border-radius: 20px; background: var(--gold-dim); color: var(--gold) }
    .ref-empty-hero { text-align: center; padding: 32px 20px; background: rgba(255,255,255,.04); border-radius: 10px; border: 1px dashed rgba(255,255,255,.12) }
    .ref-empty-hero p { font-size: 13px; color: rgba(255,255,255,.4); line-height: 1.65 }

/* ── Mobile ── */
    @media (max-width: 600px) {
      .nav { padding: 0 16px }
      .auth-card { padding: 36px 24px }
      .dash-wrap { padding-left: 16px; padding-right: 16px }
      .user-header { padding: 18px 20px }
      .challenge-card { flex-direction: column; align-items: flex-start }
      .ref-hero-card { padding: 22px 18px 20px }
      .books-grid { grid-template-columns: 1fr }
      .share-grid { grid-template-columns: 1fr 1fr 1fr }
      .ref-points-num { font-size: 40px }
    }
  </style>
</head>
<body>

<?php if ($step === 'login'): ?>

<div class="auth-wrap">
  <div class="auth-card">
    <div class="auth-logo">MR</div>
    <h1 class="auth-title">Mi Biblioteca<br><span style="font-weight:400;font-style:italic;font-size:.85em">My Library</span></h1>
    <p class="auth-sub">Ingresa tu email de compra y te enviamos un código de acceso.<br>Enter your purchase email and we'll send you an access code.</p>

<?php if ($error): ?>
    <div class="auth-error"><?= $error_msgs[$error] ?? h($error) ?></div>
    <?php endif; ?>

<form method="post" action="/dashboard.php" autocomplete="on">
      <input type="hidden" name="action" value="send_otp">
      <label class="auth-label" for="email">Email</label>
      <input class="auth-input" type="email" id="email" name="email" placeholder="tu@email.com" required autocomplete="email">
      <button class="auth-btn" type="submit">Enviar código / Send code</button>
    </form>

<div class="auth-footer">
      ¿Email diferente o sin acceso? <a href="/recover.php">Recuperar acceso →</a><br>
      Different email or no access? <a href="/recover.php?l=en">Recover access →</a>
    </div>
  </div>
</div>

<?php elseif ($step === 'verify'): ?>

<div class="auth-wrap">
  <div class="auth-card">
    <div class="auth-logo">MR</div>
    <h1 class="auth-title">Revisa tu email<br><span style="font-weight:400;font-style:italic;font-size:.85em">Check your email</span></h1>
    <p class="auth-sub">Enviamos un código de 6 dígitos a <strong style="color:var(--gold)"><?= h($verify_email) ?></strong>. Puede tardar un minuto — revisa también tu carpeta de <strong style="color:rgba(255,255,255,.7)">spam / correo no deseado</strong>.<br><span style="color:rgba(255,255,255,.4)">We sent a 6-digit code. Check your <strong style="color:rgba(255,255,255,.55)">spam/junk</strong> folder if it doesn't arrive.</span></p>

<?php if ($error): ?>
    <div class="auth-error"><?= $error_msgs[$error] ?? h($error) ?></div>
    <?php endif; ?>

<form method="post" action="/dashboard.php" autocomplete="off">
      <input type="hidden" name="action" value="verify_otp">
      <input type="hidden" name="email" value="<?= h($verify_email) ?>">
      <label class="auth-label" for="code">Código / Code</label>
      <input class="auth-input otp" type="text" id="code" name="code" inputmode="numeric" pattern="[0-9]{6}" maxlength="6" placeholder="000000" required autofocus>
      <button class="auth-btn" type="submit">Acceder / Enter</button>
    </form>

<div class="otp-actions">
      <a class="otp-back" href="/dashboard.php">← Volver / Go back</a>
      <form method="post" action="/dashboard.php" style="display:inline">
        <input type="hidden" name="action" value="resend_otp">
        <input type="hidden" name="email" value="<?= h($verify_email) ?>">
        <button class="auth-link-btn" type="submit">Reenviar código / Resend code</button>
      </form>
    </div>

<div class="auth-footer">
      ¿Problemas? <a href="mailto:<?= SUPPORT_EMAIL ?>">Contáctanos / Contact us →</a>
    </div>
  </div>
</div>

<?php else: ?>

<nav class="nav">
  <div class="nav-logo">MR</div>
  <div class="nav-right">
    <a class="nav-back" href="/">← Inicio / Home</a>
    <form method="post" action="/dashboard.php" style="display:inline">
      <input type="hidden" name="action" value="logout">
      <button class="nav-logout" type="submit">Cerrar sesión</button>
    </form>
  </div>
</nav>

<div class="install-banner" id="install-banner" style="display:none">
    <div class="install-banner-icon">📱</div>
    <div class="install-banner-body">
      <div class="install-banner-title">Instala la app / Install the app</div>
      <div class="install-banner-sub" id="install-instructions">Agrega esta página a tu pantalla de inicio para acceso rápido. / Add this page to your home screen for quick access.</div>
      <button id="btn-pwa-install">⬇ Instalar / Install</button>
    </div>
    <button class="install-banner-close" id="btn-install-close" aria-label="Close">×</button>
  </div>

<div class="user-header">
    <div class="user-avatar">MR</div>
    <div class="user-info">
      <div class="user-email"><?= h($auth_email) ?></div>
      <div class="user-tier">
        <?php
        $tier_colors = ['basic' => '#555', 'standard' => '#2a6070', 'premium' => '#7a5a10'];
        $tier_labels = ['basic' => 'Básico / Basic', 'standard' => 'Estándar / Standard', 'premium' => 'Premium'];
        $tc = $tier_colors[$max_tier_str] ?? '#555';
        $tl = $tier_labels[$max_tier_str] ?? 'Básico';
        ?>
        Plan: <span class="tier-pill" style="background:<?= $tc ?>;color:rgba(255,255,255,.85)"><?= h($tl) ?></span>
      </div>
    </div>
  </div>

<div class="section">
    <div class="section-header">
      <span class="section-title">Mi Biblioteca / My Library</span>
    </div>

<?php if (empty($user_data['owned'])): ?>
    <div class="ref-empty">
      No encontramos libros vinculados a este email. / No books found for this email.<br>
      <a href="/recover.php" style="color:var(--gold)">Recuperar acceso →</a>
    </div>
    <?php else: ?>
    <div class="books-grid">
      <?php foreach ($user_data['owned'] as $lang => $bdata): ?>
      <?php
        $book_title = ($lang === 'es') ? 'Valentía Emocional' : 'Emotional Courage';
        $book_lang  = ($lang === 'es') ? 'Español' : 'English';
        $viewer_url = '/viewer.php?t=' . urlencode($bdata['token']);
      ?>
      <div class="book-card">
        <div class="book-cover">
          <div class="book-cover-lang"><?= h($book_lang) ?></div>
          <div class="book-cover-title"><?= h($book_title) ?></div>
        </div>
        <div class="book-meta">Lector seguro en línea / Secure online reader</div>
        <a class="book-btn" href="<?= h($viewer_url) ?>">
          📖 <?= ($lang === 'es') ? 'Leer libro' : 'Read book' ?> →
        </a>
      </div>
      <?php endforeach; ?>

<?php
      // Show claim buttons for missing language for all tiers
      if ($user_data['max_tier'] >= 1):
          $missing_langs = [];
          if (!isset($user_data['owned']['es'])) $missing_langs[] = 'es';
          if (!isset($user_data['owned']['en'])) $missing_langs[] = 'en';
          if ($missing_langs):
      ?>
      <?php foreach ($missing_langs as $ml): ?>
      <div class="book-card" style="border-color:rgba(201,168,76,.2);background:rgba(201,168,76,.03)">
        <div class="book-cover" style="opacity:.5">
          <div class="book-cover-lang"><?= $ml === 'es' ? 'Español' : 'English' ?></div>
          <div class="book-cover-title"><?= $ml === 'es' ? 'Valentía Emocional' : 'Emotional Courage' ?></div>
        </div>
        <div class="book-meta" style="color:var(--gold)">Incluido en tu plan / Included in your plan</div>
        <form method="post" action="/dashboard.php">
          <input type="hidden" name="action" value="claim_language">
          <input type="hidden" name="lang" value="<?= $ml ?>">
          <button type="submit" class="book-btn" style="border-color:var(--gold);color:var(--gold);width:100%;background:none;cursor:pointer">
            ⬇ <?= $ml === 'es' ? 'Obtener versión Español' : 'Get English version' ?>
          </button>
        </form>
      </div>
      <?php endforeach; ?>
      <?php endif; endif; ?>

</div>
    <?php endif; ?>
  </div>

<?php if ($user_data['max_tier'] >= 2): ?>
  <div class="section">
    <div class="section-header">
      <span class="section-title">App Interactiva / Interactive App</span>
    </div>
    <div class="challenge-card">
      <div class="challenge-info">
        <div class="challenge-badge">INCLUIDO / INCLUDED</div>
        <div class="challenge-title">Desafío 30 Días / 30-Day Challenge</div>
        <p class="challenge-desc">Lleva el desafío directamente en tu dispositivo. Registra tus misiones, reflexiones y progreso día a día. / Track the challenge right on your device. Log your missions, reflections, and daily progress.</p>
      </div>
      <a class="challenge-btn" href="/challenge.php?l=<?= h($best_lang) ?>">Abrir app →<br><span style="font-size:9px;opacity:.7;letter-spacing:0;font-weight:400;text-transform:none">Open app</span></a>
    </div>
  </div>
  <?php endif; ?>

<div id="push-optin-card" style="display:none;background:linear-gradient(135deg,#1A2744,#0F1A38);border:1px solid rgba(166,124,46,.3);border-left:3px solid var(--gold-light);border-radius:10px;padding:20px 24px;display:flex;align-items:center;gap:18px;flex-wrap:wrap;margin-bottom:0">
    <div style="font-size:28px">🔔</div>
    <div style="flex:1;min-width:200px">
      <div style="font-size:14px;font-weight:700;color:#fff;margin-bottom:3px">Activa notificaciones / Enable notifications</div>
      <div style="font-size:12px;color:rgba(255,255,255,.6)">Recibe avisos de tu desafío y recompensas · Get challenge & reward alerts</div>
    </div>
    <div style="display:flex;gap:8px">
      <button id="push-enable-btn" onclick="pushSubscribe()" style="background:var(--gold);color:#fff;border:none;padding:10px 20px;font-size:12px;font-weight:700;border-radius:6px;cursor:pointer;letter-spacing:1px;text-transform:uppercase">Activar</button>
      <button onclick="pushDismiss()" style="background:rgba(255,255,255,.1);color:rgba(255,255,255,.5);border:none;padding:10px 14px;font-size:11px;border-radius:6px;cursor:pointer">✕</button>
    </div>
  </div>

<div class="section">
    <div class="section-header">
      <span class="section-title">Invita y Gana / Refer &amp; Earn</span>
    </div>

<?php
    $next_reward = null; $prev_pts = 0;
    foreach ($rewards_ladder as $i => $r) {
        if ($r['pts'] > $points) { $next_reward = $r; $prev_pts = $i > 0 ? $rewards_ladder[$i-1]['pts'] : 0; break; }
    }
    $progress_pct = $next_reward
        ? round(($points - $prev_pts) / max(1, $next_reward['pts'] - $prev_pts) * 100)
        : 100;
    $wa_msg  = urlencode('¡Acabo de leer Valentía Emocional y está cambiando mi manera de pensar! Consíguelo aquí: ' . $ref_link);
    $sms_msg = urlencode('Mira este libro: ' . $ref_link);
    ?>

<div class="ref-hero-card">
      <div class="ref-hero-headline">Tu enlace. Tu impacto.</div>
      <div class="ref-hero-sub">Cada compra a través de tu enlace te da <strong style="color:var(--gold-light)">1 punto</strong> hacia recompensas exclusivas. / Every purchase earns you 1 point toward exclusive rewards.</div>

<div class="ref-points-row">
        <div class="ref-points-big">
          <div class="ref-points-num"><?= $points ?></div>
          <div class="ref-points-label">puntos</div>
        </div>
        <div class="ref-progress-wrap">
          <div class="ref-progress-label">
            <span><?= $points ?> pts</span>
            <span><?= $next_reward ? $next_reward['pts'] . ' pts' : '🏆 Max' ?></span>
          </div>
          <div class="ref-progress-track">
            <div class="ref-progress-fill" style="width:<?= $progress_pct ?>%"></div>
          </div>
          <div class="ref-next-reward">
            <?php if ($next_reward): ?>
              <?= $next_reward['pts'] - $points ?> más para: <strong><?= h($next_reward['icon'] . ' ' . $next_reward['es']) ?></strong>
            <?php else: ?>
              <strong>🏆 ¡Nivel máximo desbloqueado!</strong>
            <?php endif; ?>
          </div>
        </div>
      </div>

<div class="share-grid">
        <a class="share-btn whatsapp" href="https://wa.me/?text=<?= $wa_msg ?>" target="_blank" rel="noopener">
          <span class="share-btn-icon">💬</span>WhatsApp
        </a>
        <button class="share-btn copy" id="btn-copy-ref" onclick="copyRef()">
          <span class="share-btn-icon">🔗</span><span id="copy-label">Copiar link</span>
        </button>
        <a class="share-btn sms" href="sms:?body=<?= $sms_msg ?>">
          <span class="share-btn-icon">📱</span>SMS
        </a>
      </div>

<div class="ref-link-mini">
        <span class="ref-link-mini-text"><?= h($ref_link) ?></span>
        <button class="ref-link-mini-btn" onclick="copyRef()">Copiar</button>
      </div>
      <input type="hidden" id="ref-link-input" value="<?= h($ref_link) ?>">
    </div>

<div style="margin-bottom:16px">
      <div style="font-size:10px;font-weight:700;letter-spacing:2px;text-transform:uppercase;color:var(--subtle);margin-bottom:12px">Tus recompensas / Your Rewards</div>
      <div class="rewards-ladder">
        <?php foreach ($rewards_ladder as $i => $r): ?>
        <?php
          $earned  = $points >= $r['pts'];
          $is_next = !$earned && ($i === 0 || $points >= $rewards_ladder[$i-1]['pts']);
          $cls     = $earned ? 'earned' : ($is_next ? 'next' : '');
        ?>
        <div class="reward-row <?= $cls ?>">
          <div class="reward-icon"><?= $r['icon'] ?></div>
          <div class="reward-pts"><?= $r['pts'] ?>pts</div>
          <div class="reward-text <?= $earned ? 'earned' : '' ?>"><?= h($r['es']) ?><br><span style="font-size:11px;opacity:.7"><?= h($r['en']) ?></span></div>
          <?php if ($earned): ?>
          <div class="reward-check">✓</div>
          <?php else: ?>
          <div class="reward-lock">🔒</div>
          <?php endif; ?>
        </div>
        <?php endforeach; ?>
      </div>
    </div>

<?php if (!empty($referrals)): ?>
    <div style="font-size:10px;font-weight:700;letter-spacing:2px;text-transform:uppercase;color:var(--subtle);margin-bottom:12px">Personas que invitaste / People you brought in</div>
    <div class="ref-people">
      <?php foreach ($referrals as $i => $ref): ?>
      <?php
        $parts = explode('@', $ref['email'] ?? '');
        $masked = strlen($parts[0]) > 2 ? substr($parts[0], 0, 2) . str_repeat('•', max(2, strlen($parts[0]) - 2)) : $parts[0];
        $masked_email = $masked . '@' . ($parts[1] ?? '');
        $display_name = !empty($ref['name']) ? $ref['name'] : $masked_email;
        $initials = mb_strtoupper(mb_substr($display_name, 0, 1));
        $tier_map = ['basic' => 'Basic', 'standard' => 'Standard', 'premium' => 'Premium'];
      ?>
      <div class="ref-person">
        <div class="ref-person-avatar"><?= $initials ?></div>
        <div class="ref-person-info">
          <div class="ref-person-name"><?= !empty($ref['name']) ? h($ref['name']) : h($masked_email) ?></div>
          <?php if (!empty($ref['name'])): ?>
          <div class="ref-person-email"><?= h($masked_email) ?></div>
          <?php endif; ?>
        </div>
        <div class="ref-person-tier"><?= h($tier_map[$ref['tier'] ?? 'basic'] ?? ucfirst($ref['tier'] ?? '')) ?></div>
      </div>
      <?php endforeach; ?>
    </div>
    <?php else: ?>
    <div class="ref-empty">
      <div style="font-size:28px;margin-bottom:10px">👋</div>
      <strong style="font-size:14px;color:var(--text);display:block;margin-bottom:6px">Tus primeros referidos aparecerán aquí</strong>
      Comparte tu enlace con WhatsApp o SMS para empezar a ganar recompensas.<br>
      <span style="font-size:11px;opacity:.7">Share your link to start earning rewards.</span>
    </div>
    <?php endif; ?>
  </div>

</div>

<footer class="dash-footer">
  <div class="dash-footer-brand">MR</div>
  <p class="dash-footer-copy">© 2025 Félix Hernández & Yamil Cruz — metodoreflexivo.com</p>
  <p class="dash-footer-support">¿Necesitas ayuda? / Need help? <a href="mailto:<?= SUPPORT_EMAIL ?>"><?= SUPPORT_EMAIL ?></a></p>
  <button onclick="adminEntry()" style="margin-top:18px;background:none;border:none;font-size:13px;color:#555;cursor:pointer;padding:4px 8px" title="Admin">⚙</button>
</footer>
<script>
function adminEntry() {
  var p = prompt('Admin passcode:');
  if (p === 'Metodoadmin123') {
    window.location.href = '/admin-upgrade.php?bypass=mr_admin_2025_MR';
  }
}
</script>

<?php endif; ?>

<script>
// ── PWA install banner ──────────────────────────────────────────────
(function () {
  var banner = document.getElementById('install-banner');
  if (!banner) return;

// Don't show if already in standalone / PWA mode
  if (window.matchMedia('(display-mode: standalone)').matches || window.navigator.standalone) return;

var dismissed = localStorage.getItem('mr_install_dismissed');
  if (dismissed) return;

var deferredPrompt = null;

// iOS detection (no beforeinstallprompt)
  var isIOS = /iPad|iPhone|iPod/.test(navigator.userAgent);
  if (isIOS && !window.navigator.standalone) {
    banner.style.display = 'flex';
    document.getElementById('install-instructions').innerHTML =
      'En Safari: toca <strong>Compartir ⬆</strong> → <strong>Agregar a pantalla de inicio</strong>.<br>' +
      'In Safari: tap <strong>Share ⬆</strong> → <strong>Add to Home Screen</strong>.';
  }

document.getElementById('btn-install-close').addEventListener('click', function () {
    banner.style.display = 'none';
    localStorage.setItem('mr_install_dismissed', '1');
  });
})();

// ── Copy referral link ──────────────────────────────────────────────
function copyRef() {
  var input = document.getElementById('ref-link-input');
  if (!input) return;
  var url = input.value;

if (navigator.clipboard && navigator.clipboard.writeText) {
    navigator.clipboard.writeText(url).then(done).catch(function() { fallbackCopy(url, done); });
  } else {
    fallbackCopy(url, done);
  }
}

// ── Push notifications ─────────────────────────────────────────────
(function() {
  var VAPID_PUB = <?php
    $vf = __DIR__ . '/system/vapid.json';
    $vd = file_exists($vf) ? json_decode(file_get_contents($vf), true) : null;
    echo json_encode($vd['publicKey'] ?? '');
  ?>;
  var USER_EMAIL = <?= json_encode($auth_email ?? '') ?>;
  var OPTIN_KEY  = 'mr_push_dismissed';

function b64ToUint8(base64) {
    var raw = atob(base64.replace(/-/g,'+').replace(/_/g,'/'));
    var arr = new Uint8Array(raw.length);
    for (var i = 0; i < raw.length; i++) arr[i] = raw.charCodeAt(i);
    return arr;
  }

function pushDismiss() {
    var card = document.getElementById('push-optin-card');
    if (card) card.style.display = 'none';
    localStorage.setItem(OPTIN_KEY, '1');
  }
  window.pushDismiss = pushDismiss;

// Show opt-in card if not dismissed and not already subscribed
  function maybeShowOptin() {
    if (!('PushManager' in window)) return;
    if (!VAPID_PUB) return;
    if (localStorage.getItem(OPTIN_KEY)) return;
    navigator.serviceWorker.ready.then(function(sw) {
      return sw.pushManager.getSubscription();
    }).then(function(sub) {
      if (!sub) {
        var card = document.getElementById('push-optin-card');
        if (card) card.style.display = 'flex';
      } else {
        localStorage.setItem(OPTIN_KEY, 'subscribed');
      }
    }).catch(function() {});
  }

if ('serviceWorker' in navigator) {
    navigator.serviceWorker.ready.then(maybeShowOptin).catch(function(){});
  }
})();

// ── Auto-format OTP input ──────────────────────────────────────────
var otpInput = document.getElementById('code');
if (otpInput) {
  otpInput.addEventListener('input', function () {
    this.value = this.value.replace(/\D/g, '').slice(0, 6);
  });
  otpInput.addEventListener('paste', function (e) {
    var pasted = (e.clipboardData || window.clipboardData).getData('text');
    var digits = pasted.replace(/\D/g, '').slice(0, 6);
    e.preventDefault();
    this.value = digits;
  });
}
</script>

</body>
</html>