<?php
session_start();

require __DIR__ . '/config.php';
require __DIR__ . '/data/products.php';

// ---------- BUILD CART FROM SESSION ----------
$catalog    = $products ?? [];
$cart       = [];
$cartTotal  = 0;
$cartCount  = 0;

// if session cart not set, make empty
if (!isset($_SESSION['cart']) || !is_array($_SESSION['cart'])) {
    $_SESSION['cart'] = [];
}

foreach ($_SESSION['cart'] as $id => $qty) {
    if (!isset($catalog[$id])) {
        continue;
    }

    $p = $catalog[$id];

    $name  = $p['title'] ?? ($p['name'] ?? '');
    $image = $p['image'] ?? '';
    $price = isset($p['currentPrice'])
        ? (float)$p['currentPrice']
        : (float)($p['price'] ?? 0);

    $qty = max(1, (int)$qty);
    $subtotal = $price * $qty;

    $cart[] = [
        'id'       => (string)$id,
        'name'     => $name,
        'image'    => $image,
        'price'    => $price,
        'quantity' => $qty,
        'subtotal' => $subtotal,
    ];

    $cartTotal += $subtotal;
}

$cartCount = count($cart);

// ---------- DEFAULTS ----------
$shippingFlat   = 500;  // KSh 500 nationwide
$discountAmount = 0;
$total          = $cartTotal + $shippingFlat - $discountAmount;

$errors   = [];
$step     = 'form';
$orderId  = null;

// Preserve form values
$firstName     = '';
$lastName      = '';
$phone         = '';
$email         = '';
$county        = 'Nairobi';
$streetAddress = '';
$orderNotes    = '';
$paymentMethod = 'mpesa';
$mpesaPhone    = '';

// Kenya counties list
$KENYA_COUNTIES = [
    "Mombasa", "Kwale", "Kilifi", "Tana River", "Lamu", "Taita Taveta", "Garissa", "Wajir", "Mandera", "Marsabit",
    "Isiolo", "Meru", "Tharaka-Nithi", "Embu", "Kitui", "Machakos", "Makueni", "Nyandarua", "Nyeri", "Kirinyaga",
    "Murang'a", "Kiambu", "Turkana", "West Pokot", "Samburu", "Trans Nzoia", "Uasin Gishu", "Elgeyo-Marakwet", "Nandi", "Baringo",
    "Laikipia", "Nakuru", "Narok", "Kajiado", "Kericho", "Bomet", "Kakamega", "Vihiga", "Bungoma", "Busia",
    "Siaya", "Kisumu", "Homa Bay", "Migori", "Kisii", "Nyamira", "Nairobi"
];
sort($KENYA_COUNTIES);

// ---------- HANDLE POST (PLACE ORDER) ----------
if ($_SERVER['REQUEST_METHOD'] === 'POST' && $cartCount > 0) {
    $firstName     = trim($_POST['first_name'] ?? '');
    $lastName      = trim($_POST['last_name'] ?? '');
    $phone         = trim($_POST['phone'] ?? '');
    $email         = trim($_POST['email'] ?? '');
    $county        = trim($_POST['county'] ?? 'Nairobi');
    $streetAddress = trim($_POST['street_address'] ?? '');
    $orderNotes    = trim($_POST['order_notes'] ?? '');
    $paymentMethod = $_POST['payment_method'] ?? 'mpesa';
    $mpesaPhone    = trim($_POST['mpesa_phone'] ?? '');

    // Basic validation – honest, minimal but real
    if ($firstName === '') {
        $errors['first_name'] = 'First name is required.';
    }
    if ($lastName === '') {
        $errors['last_name'] = 'Last name is required.';
    }
    if ($phone === '') {
        $errors['phone'] = 'Phone number is required.';
    }
    if ($email === '') {
        $errors['email'] = 'Email address is required.';
    }
    if ($streetAddress === '') {
        $errors['street_address'] = 'Delivery address / landmark is required.';
    }
    if ($paymentMethod === 'mpesa' && $mpesaPhone === '') {
        $errors['mpesa_phone'] = 'M-PESA phone number is required.';
    }

    if (empty($errors)) {
        // Generate simple order ID
        $orderId = 'ORD-' . mt_rand(100000, 999999);
        $step    = 'success';

        // (Optional) Save a simple text log of the order – good for real operations, but not required
        // This is transparent: we are not claiming anything Google-hype, just a local log.
        $orderLogDir = __DIR__ . '/orders';
        if (!is_dir($orderLogDir)) {
            @mkdir($orderLogDir, 0755, true);
        }
        $orderData = [
            'order_id'       => $orderId,
            'created_at'     => date('Y-m-d H:i:s'),
            'first_name'     => $firstName,
            'last_name'      => $lastName,
            'phone'          => $phone,
            'email'          => $email,
            'county'         => $county,
            'street_address' => $streetAddress,
            'order_notes'    => $orderNotes,
            'payment_method' => $paymentMethod,
            'mpesa_phone'    => $mpesaPhone,
            'items'          => $cart,
            'subtotal'       => $cartTotal,
            'shipping'       => $shippingFlat,
            'discount'       => $discountAmount,
            'total'          => $total,
        ];
        @file_put_contents(
            $orderLogDir . '/' . $orderId . '.json',
            json_encode($orderData, JSON_PRETTY_PRINT)
        );

        // Clear cart so they don't re-submit the same items
        $_SESSION['cart'] = [];
        $cartCount        = 0;
    }
}

// ---------- META FOR THIS PAGE ----------
$pageTitle       = 'Checkout – Nofba';
$pageDescription = 'Secure checkout for your Nofba order. Enter your delivery details, select payment method and review your order summary.';
$pageCanonical   = $businessUrl . '/checkout.php';
$pageType        = 'checkout';
$noIndex         = false;
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <?php include __DIR__ . '/includes/head.php'; ?>
</head>
<body class="bg-slate-50 text-slate-900 antialiased">
<?php include __DIR__ . '/includes/header.php'; ?>

<?php if ($cartCount === 0 && $step !== 'success'): ?>
    <!-- EMPTY / DIRECT ACCESS TO CHECKOUT WITHOUT CART -->
    <div class="container mx-auto px-4 md:px-8 py-16">
        <div class="max-w-lg mx-auto bg-white border border-slate-200 rounded-2xl p-10 text-center shadow-sm">
            <div class="w-20 h-20 rounded-full bg-slate-50 border border-slate-200 flex items-center justify-center mx-auto mb-6">
                <svg class="w-10 h-10 text-slate-400" fill="none" stroke="currentColor" stroke-width="1.8" viewBox="0 0 24 24">
                    <path d="M3 3h2l.4 2M7 13h10l4-8H5.4" stroke-linecap="round" stroke-linejoin="round" />
                    <circle cx="9" cy="19" r="2" />
                    <circle cx="17" cy="19" r="2" />
                </svg>
            </div>
            <h1 class="text-2xl font-black text-slate-900 mb-2">Your cart is empty</h1>
            <p class="text-slate-600 text-sm mb-6">
                Add items to your cart before proceeding to checkout.
            </p>
            <a href="shop.php" class="inline-flex items-center justify-center px-6 py-3 rounded-lg bg-slate-900 text-white font-bold text-sm hover:bg-slate-800 shadow-lg shadow-slate-900/20">
                Back to Shop
            </a>
        </div>
    </div>

<?php elseif ($step === 'success' && $orderId): ?>
    <!-- SUCCESS STATE (like AI Studio success screen) -->
    <div class="min-h-[70vh] bg-slate-50 flex items-center justify-center p-4 md:p-8">
        <div class="bg-white max-w-lg w-full rounded-2xl shadow-xl p-8 md:p-12 text-center relative overflow-hidden">
            <div class="absolute -top-10 -right-10 w-32 h-32 bg-emerald-100 rounded-full blur-2xl opacity-60 pointer-events-none"></div>

            <div class="relative z-10">
                <div class="w-24 h-24 bg-emerald-50 rounded-full flex items-center justify-center mx-auto mb-6 border border-emerald-100">
                    <svg class="w-12 h-12 text-emerald-600" fill="none" stroke="currentColor" stroke-width="3" viewBox="0 0 24 24">
                        <path d="M5 13l4 4L19 7" stroke-linecap="round" stroke-linejoin="round" />
                    </svg>
                </div>
                <h2 class="text-3xl font-black text-slate-900 mb-2">Order Confirmed!</h2>
                <p class="text-slate-600 mb-8 text-sm md:text-base font-medium">
                    Thank you for your purchase. We’ll contact you shortly to confirm delivery and payment.
                </p>

                <div class="bg-slate-50 rounded-xl p-6 mb-8 text-left border border-slate-200">
                    <div class="flex justify-between items-center mb-4 pb-4 border-b border-slate-200">
                        <span class="text-xs font-medium text-slate-600 uppercase tracking-wide">Order Reference</span>
                        <span class="text-lg font-bold text-slate-900"><?= htmlspecialchars($orderId, ENT_QUOTES); ?></span>
                    </div>
                    <div class="space-y-3 text-sm">
                        <div class="flex justify-between">
                            <span class="text-slate-600">Amount (estimated)</span>
                            <span class="font-bold text-slate-900">KSh <?= number_format($total); ?></span>
                        </div>
                        <div class="flex justify-between">
                            <span class="text-slate-600">Payment Method</span>
                            <span class="font-bold text-slate-900">
                                <?= $paymentMethod === 'mpesa' ? 'M-PESA (pay via phone)' : 'Pay on Delivery'; ?>
                            </span>
                        </div>
                        <div class="flex justify-between">
                            <span class="text-slate-600">Shipping To</span>
                            <span class="font-bold text-slate-900 text-right max-w-[200px] truncate">
                                <?= htmlspecialchars($county, ENT_QUOTES); ?>
                            </span>
                        </div>
                        <div class="flex justify-between">
                            <span class="text-slate-600">Delivery Method</span>
                            <span class="font-bold text-slate-900">Standard Delivery (KSh 500 Nationwide)</span>
                        </div>
                    </div>
                    <p class="mt-4 text-[11px] text-slate-500 leading-relaxed">
                        A confirmation SMS or call will be made from our official number <strong>0799 177 061</strong>.
                        We will never ask you for your M-PESA PIN.
                    </p>
                </div>

                <a href="shop.php" class="w-full inline-flex items-center justify-center bg-slate-900 text-white font-bold py-3.5 rounded-xl hover:bg-slate-800 transition-colors shadow-lg shadow-slate-900/20 text-sm">
                    Continue Shopping
                </a>
            </div>
        </div>
    </div>

<?php else: ?>
    <!-- CHECKOUT FORM + ORDER SUMMARY (AI Studio style, but PHP) -->
    <div class="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8 py-6 md:py-10 lg:py-14 relative">

        <!-- Header -->
        <div class="flex flex-col md:flex-row md:items-center justify-between mb-6 md:mb-8 lg:mb-10 gap-3">
            <div>
                <a href="cart.php" class="inline-flex items-center text-[11px] md:text-xs font-bold text-slate-500 mb-2 md:mb-4 hover:text-slate-900 transition-colors uppercase tracking-wider">
                    <svg class="w-3.5 h-3.5 mr-1" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
                        <path d="M15 19l-7-7 7-7" stroke-linecap="round" stroke-linejoin="round" />
                    </svg>
                    Return to Cart
                </a>
                <h1 class="text-2xl md:text-3xl lg:text-4xl font-black text-slate-900 tracking-tight">
                    Checkout
                </h1>
                <p class="mt-1 text-xs md:text-sm text-slate-500">
                    Secure checkout with transparent delivery and payment options.
                </p>
            </div>
            <div class="flex items-center gap-2 text-slate-700 bg-white border border-slate-200 px-3 py-1.5 md:px-4 md:py-2 rounded-full text-[10px] md:text-xs font-bold uppercase tracking-wider shadow-sm self-start md:self-auto">
                <svg class="w-3.5 h-3.5 text-emerald-600" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
                    <path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z" stroke-linecap="round" stroke-linejoin="round" />
                    <path d="M9 12l2 2 4-4" stroke-linecap="round" stroke-linejoin="round" />
                </svg>
                <span class="text-slate-900">Secure SSL Encrypted</span>
            </div>
        </div>

        <div class="grid grid-cols-1 lg:grid-cols-12 gap-6 lg:gap-16 items-start">
            <!-- LEFT: Billing & Shipping -->
            <div class="lg:col-span-7 order-1 flex flex-col gap-6">
                <section class="bg-white rounded-2xl shadow-sm border border-slate-200/60 p-5 md:p-8 relative overflow-hidden">
                    <div class="absolute top-0 left-0 w-1 h-full bg-slate-900"></div>

                    <div class="flex items-center gap-4 mb-6 pb-4 border-b border-slate-100">
                        <h2 class="text-lg md:text-xl font-bold text-slate-900">
                            Billing &amp; Delivery Details
                        </h2>
                    </div>

                    <form method="post" class="space-y-4">
                        <!-- Name -->
                        <div class="grid grid-cols-1 sm:grid-cols-2 gap-4">
                            <div>
                                <label class="block text-xs font-bold text-slate-800 uppercase tracking-wider mb-2">
                                    First name <span class="text-rose-500">*</span>
                                </label>
                                <input
                                    type="text"
                                    name="first_name"
                                    value="<?= htmlspecialchars($firstName, ENT_QUOTES); ?>"
                                    placeholder="e.g. John"
                                    class="w-full bg-slate-50 border border-slate-200 px-4 py-3 rounded-lg text-sm text-slate-900 focus:ring-1 focus:ring-slate-900 focus:border-slate-900 outline-none shadow-sm"
                                />
                                <?php if (isset($errors['first_name'])): ?>
                                    <p class="mt-1 text-[11px] text-rose-600"><?= htmlspecialchars($errors['first_name'], ENT_QUOTES); ?></p>
                                <?php endif; ?>
                            </div>
                            <div>
                                <label class="block text-xs font-bold text-slate-800 uppercase tracking-wider mb-2">
                                    Last name <span class="text-rose-500">*</span>
                                </label>
                                <input
                                    type="text"
                                    name="last_name"
                                    value="<?= htmlspecialchars($lastName, ENT_QUOTES); ?>"
                                    placeholder="e.g. Doe"
                                    class="w-full bg-slate-50 border border-slate-200 px-4 py-3 rounded-lg text-sm text-slate-900 focus:ring-1 focus:ring-slate-900 focus:border-slate-900 outline-none shadow-sm"
                                />
                                <?php if (isset($errors['last_name'])): ?>
                                    <p class="mt-1 text-[11px] text-rose-600"><?= htmlspecialchars($errors['last_name'], ENT_QUOTES); ?></p>
                                <?php endif; ?>
                            </div>
                        </div>

                        <!-- Phone / Email -->
                        <div class="grid grid-cols-1 sm:grid-cols-2 gap-4">
                            <div>
                                <label class="block text-xs font-bold text-slate-800 uppercase tracking-wider mb-2">
                                    Phone number <span class="text-rose-500">*</span>
                                </label>
                                <input
                                    type="tel"
                                    name="phone"
                                    value="<?= htmlspecialchars($phone, ENT_QUOTES); ?>"
                                    placeholder="07XX XXX XXX"
                                    class="w-full bg-slate-50 border border-slate-200 px-4 py-3 rounded-lg text-sm text-slate-900 focus:ring-1 focus:ring-slate-900 focus:border-slate-900 outline-none shadow-sm"
                                />
                                <?php if (isset($errors['phone'])): ?>
                                    <p class="mt-1 text-[11px] text-rose-600"><?= htmlspecialchars($errors['phone'], ENT_QUOTES); ?></p>
                                <?php endif; ?>
                            </div>
                            <div>
                                <label class="block text-xs font-bold text-slate-800 uppercase tracking-wider mb-2">
                                    Email address <span class="text-rose-500">*</span>
                                </label>
                                <input
                                    type="email"
                                    name="email"
                                    value="<?= htmlspecialchars($email, ENT_QUOTES); ?>"
                                    placeholder="john@example.com"
                                    class="w-full bg-slate-50 border border-slate-200 px-4 py-3 rounded-lg text-sm text-slate-900 focus:ring-1 focus:ring-slate-900 focus:border-slate-900 outline-none shadow-sm"
                                />
                                <?php if (isset($errors['email'])): ?>
                                    <p class="mt-1 text-[11px] text-rose-600"><?= htmlspecialchars($errors['email'], ENT_QUOTES); ?></p>
                                <?php endif; ?>
                            </div>
                        </div>

                        <!-- County -->
                        <div class="pt-2">
                            <label class="block text-xs font-bold text-slate-800 uppercase tracking-wider mb-2">
                                County / Location <span class="text-rose-500">*</span>
                            </label>
                            <div class="relative">
                                <select
                                    name="county"
                                    class="w-full appearance-none bg-slate-50 border border-slate-200 px-4 py-3.5 rounded-lg text-slate-900 focus:ring-1 focus:ring-slate-900 focus:border-slate-900 outline-none pr-10 font-medium shadow-sm cursor-pointer hover:border-slate-300 transition-colors text-sm md:text-base"
                                >
                                    <?php foreach ($KENYA_COUNTIES as $c): ?>
                                        <option value="<?= htmlspecialchars($c, ENT_QUOTES); ?>" <?= $county === $c ? 'selected' : ''; ?>>
                                            <?= htmlspecialchars($c); ?>
                                        </option>
                                    <?php endforeach; ?>
                                </select>
                                <svg class="absolute right-4 top-1/2 -translate-y-1/2 text-slate-500 pointer-events-none w-4 h-4" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
                                    <path d="M19 9l-7 7-7-7" stroke-linecap="round" stroke-linejoin="round" />
                                </svg>
                            </div>
                            <p class="text-[11px] text-slate-600 mt-2 font-medium">
                                * Flat rate shipping of KSh 500 applies to all counties.
                            </p>
                        </div>

                        <!-- Address -->
                        <div>
                            <label class="block text-xs font-bold text-slate-800 uppercase tracking-wider mb-2">
                                Street address / Landmark <span class="text-rose-500">*</span>
                            </label>
                            <input
                                type="text"
                                name="street_address"
                                value="<?= htmlspecialchars($streetAddress, ENT_QUOTES); ?>"
                                placeholder="e.g. Near Naivas, 3rd Floor, Room 12"
                                class="w-full bg-slate-50 border border-slate-200 px-4 py-3 rounded-lg text-sm text-slate-900 focus:ring-1 focus:ring-slate-900 focus:border-slate-900 outline-none shadow-sm"
                            />
                            <?php if (isset($errors['street_address'])): ?>
                                <p class="mt-1 text-[11px] text-rose-600"><?= htmlspecialchars($errors['street_address'], ENT_QUOTES); ?></p>
                            <?php endif; ?>
                        </div>

                        <!-- Notes -->
                        <div>
                            <label class="block text-xs font-bold text-slate-800 uppercase tracking-wider mb-2">
                                Order notes (optional)
                            </label>
                            <textarea
                                name="order_notes"
                                rows="3"
                                placeholder="Notes about your order, e.g. special instructions for delivery."
                                class="w-full bg-slate-50 border border-slate-200 px-4 py-3 rounded-lg text-sm text-slate-900 focus:ring-1 focus:ring-slate-900 focus:border-slate-900 outline-none shadow-sm resize-none"
                            ><?= htmlspecialchars($orderNotes, ENT_QUOTES); ?></textarea>
                        </div>

                        <!-- Hidden submit so Enter works -->
                        <button type="submit" class="hidden"></button>
                    </form>
                </section>

                <!-- Policy cards (desktop only) -->
                <div class="hidden lg:grid grid-cols-1 md:grid-cols-2 gap-4 lg:gap-6 mt-2">
                    <!-- Shipping Policy -->
                    <div class="bg-white rounded-xl p-5 border border-slate-200 hover:border-slate-300 transition-colors group h-full shadow-sm">
                        <div class="flex items-center gap-3 mb-3">
                            <div class="bg-slate-50 p-2 rounded-full border border-slate-200 text-indigo-700 shadow-sm group-hover:scale-110 transition-transform">
                                <svg class="w-4 h-4" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
                                    <path d="M3 7h13v10H3z" />
                                    <path d="M16 10h4l1 3v4h-5z" />
                                    <circle cx="7.5" cy="18.5" r="1.5" />
                                    <circle cx="17.5" cy="18.5" r="1.5" />
                                </svg>
                            </div>
                            <h3 class="font-bold text-slate-900 text-sm uppercase tracking-wide">Shipping Policy</h3>
                        </div>
                        <div class="space-y-3">
                            <div class="flex gap-3 items-start">
                                <div class="w-1.5 h-1.5 bg-indigo-600 rounded-full mt-1.5 shrink-0"></div>
                                <p class="text-xs text-slate-700 leading-relaxed font-medium">
                                    <strong class="text-slate-900">Nationwide Delivery:</strong> Standard shipping fee of KSh 500 applies to all orders across Kenya.
                                </p>
                            </div>
                            <div class="flex gap-3 items-start">
                                <div class="w-1.5 h-1.5 bg-indigo-600 rounded-full mt-1.5 shrink-0"></div>
                                <p class="text-xs text-slate-700 leading-relaxed font-medium">
                                    <strong class="text-slate-900">Delivery Times:</strong> Nairobi (24–48 hrs). Upcountry (2–3 business days) via trusted courier partners.
                                </p>
                            </div>
                        </div>
                    </div>

                    <!-- Secure Payment -->
                    <div class="bg-white rounded-xl p-5 border border-slate-200 hover:border-slate-300 transition-colors group h-full shadow-sm">
                        <div class="flex items-center gap-3 mb-3">
                            <div class="bg-slate-50 p-2 rounded-full border border-slate-200 text-emerald-700 shadow-sm group-hover:scale-110 transition-transform">
                                <svg class="w-4 h-4" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
                                    <path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z" stroke-linecap="round" stroke-linejoin="round" />
                                    <path d="M9 12l2 2 4-4" stroke-linecap="round" stroke-linejoin="round" />
                                </svg>
                            </div>
                            <h3 class="font-bold text-slate-900 text-sm uppercase tracking-wide">Secure Payment</h3>
                        </div>
                        <div class="space-y-3">
                            <div class="flex gap-3 items-start">
                                <div class="w-1.5 h-1.5 bg-emerald-600 rounded-full mt-1.5 shrink-0"></div>
                                <p class="text-xs text-slate-700 leading-relaxed font-medium">
                                    <strong class="text-slate-900">M-PESA:</strong> You will complete payment securely from your own phone. We never ask for your M-PESA PIN.
                                </p>
                            </div>
                            <div class="flex gap-3 items-start">
                                <div class="w-1.5 h-1.5 bg-emerald-600 rounded-full mt-1.5 shrink-0"></div>
                                <p class="text-xs text-slate-700 leading-relaxed font-medium">
                                    <strong class="text-slate-900">Pay on Delivery:</strong> Inspect your items upon arrival before paying via Cash or M-PESA where available.
                                </p>
                            </div>
                        </div>
                    </div>
                </div>
            </div>

            <!-- RIGHT: Order Summary & Payment -->
            <div class="lg:col-span-5 order-2 relative z-10">
                <form method="post" class="space-y-4">
                    <!-- carry over billing fields so one submit handles everything -->
                    <input type="hidden" name="first_name" value="<?= htmlspecialchars($firstName, ENT_QUOTES); ?>">
                    <input type="hidden" name="last_name" value="<?= htmlspecialchars($lastName, ENT_QUOTES); ?>">
                    <input type="hidden" name="phone" value="<?= htmlspecialchars($phone, ENT_QUOTES); ?>">
                    <input type="hidden" name="email" value="<?= htmlspecialchars($email, ENT_QUOTES); ?>">
                    <input type="hidden" name="county" value="<?= htmlspecialchars($county, ENT_QUOTES); ?>">
                    <input type="hidden" name="street_address" value="<?= htmlspecialchars($streetAddress, ENT_QUOTES); ?>">
                    <input type="hidden" name="order_notes" value="<?= htmlspecialchars($orderNotes, ENT_QUOTES); ?>">

                    <section class="bg-white rounded-2xl shadow-sm border border-slate-200/70 p-5 md:p-6">
                        <h2 class="text-base md:text-lg font-bold text-slate-900 mb-4 flex items-center justify-between">
                            Order Summary
                            <span class="text-xs font-medium text-slate-500">
                                <?= (int)$cartCount; ?> item<?= $cartCount !== 1 ? 's' : ''; ?>
                            </span>
                        </h2>

                        <!-- Items -->
                        <div class="divide-y divide-slate-100 mb-4 max-h-64 overflow-y-auto">
                            <?php foreach ($cart as $item): ?>
                                <div class="py-3 flex items-center gap-3">
                                    <div class="w-14 h-14 rounded-lg bg-slate-50 border border-slate-200 flex items-center justify-center overflow-hidden">
                                        <?php if (!empty($item['image'])): ?>
                                            <img
                                                src="<?= htmlspecialchars($item['image'], ENT_QUOTES); ?>"
                                                alt="<?= htmlspecialchars($item['name'], ENT_QUOTES); ?>"
                                                class="w-full h-full object-contain"
                                            />
                                        <?php else: ?>
                                            <span class="text-[10px] text-slate-400 px-1 text-center">No image</span>
                                        <?php endif; ?>
                                    </div>
                                    <div class="flex-1 min-w-0">
                                        <p class="text-xs font-semibold text-slate-900 leading-snug line-clamp-2">
                                            <?= htmlspecialchars($item['name'], ENT_QUOTES); ?>
                                        </p>
                                        <p class="text-[11px] text-slate-500 mt-0.5">
                                            Qty: <?= (int)$item['quantity']; ?>
                                        </p>
                                    </div>
                                    <div class="text-right">
                                        <p class="text-xs font-bold text-slate-900">
                                            KSh <?= number_format($item['subtotal']); ?>
                                        </p>
                                    </div>
                                </div>
                            <?php endforeach; ?>
                        </div>

                        <!-- Totals -->
                        <div class="space-y-2 text-sm border-t border-slate-100 pt-3 mt-2">
                            <div class="flex justify-between">
                                <span class="text-slate-600">Subtotal</span>
                                <span class="font-medium text-slate-900">KSh <?= number_format($cartTotal); ?></span>
                            </div>
                            <div class="flex justify-between">
                                <span class="text-slate-600">Shipping (flat)</span>
                                <span class="font-medium text-slate-900">KSh <?= number_format($shippingFlat); ?></span>
                            </div>
                            <?php if ($discountAmount > 0): ?>
                                <div class="flex justify-between">
                                    <span class="text-slate-600">Discount</span>
                                    <span class="font-medium text-emerald-700">- KSh <?= number_format($discountAmount); ?></span>
                                </div>
                            <?php endif; ?>
                            <div class="flex justify-between items-center pt-2 border-t border-dashed border-slate-200 mt-2">
                                <span class="font-bold text-slate-900 text-sm">Total</span>
                                <span class="font-black text-slate-900 text-lg">
                                    KSh <?= number_format($total); ?>
                                </span>
                            </div>
                        </div>
                    </section>

                    <!-- Payment Methods -->
                    <section class="bg-white rounded-2xl shadow-sm border border-slate-200/70 p-5 md:p-6 space-y-4">
                        <h2 class="text-base md:text-lg font-bold text-slate-900 mb-2">Payment Method</h2>

                        <!-- M-PESA -->
                        <label class="flex items-start gap-3 p-3 rounded-xl border <?= $paymentMethod === 'mpesa' ? 'border-emerald-500 bg-emerald-50/40' : 'border-slate-200 hover:border-slate-300'; ?> cursor-pointer transition-colors">
                            <input
                                type="radio"
                                name="payment_method"
                                value="mpesa"
                                class="mt-1 h-4 w-4 text-emerald-600 border-slate-300 focus:ring-emerald-500"
                                <?= $paymentMethod === 'mpesa' ? 'checked' : ''; ?>
                            />
                            <div class="flex-1">
                                <div class="flex items-center justify-between mb-1">
                                    <span class="font-semibold text-sm text-slate-900">M-PESA (Pay via phone)</span>
                                    <span class="text-[10px] font-bold uppercase tracking-wide text-emerald-700 bg-emerald-50 px-2 py-0.5 rounded-full border border-emerald-100">Recommended</span>
                                </div>
                                <p class="text-[11px] text-slate-600 mb-2">
                                    Complete payment securely from your own phone. We’ll never call or text asking for your M-PESA PIN.
                                </p>
                                <div class="mt-1">
                                    <label class="block text-[11px] font-semibold text-slate-700 mb-1">
                                        M-PESA phone number <span class="text-rose-500">*</span>
                                    </label>
                                    <input
                                        type="tel"
                                        name="mpesa_phone"
                                        value="<?= htmlspecialchars($mpesaPhone ?: $phone, ENT_QUOTES); ?>"
                                        placeholder="07XX XXX XXX"
                                        class="w-full bg-slate-50 border border-slate-200 px-3 py-2.5 rounded-lg text-sm text-slate-900 focus:ring-1 focus:ring-emerald-600 focus:border-emerald-600 outline-none shadow-sm"
                                    />
                                    <?php if (isset($errors['mpesa_phone'])): ?>
                                        <p class="mt-1 text-[11px] text-rose-600"><?= htmlspecialchars($errors['mpesa_phone'], ENT_QUOTES); ?></p>
                                    <?php endif; ?>
                                </div>
                            </div>
                        </label>

                        <!-- Pay on Delivery -->
                        <label class="flex items-start gap-3 p-3 rounded-xl border <?= $paymentMethod === 'cod' ? 'border-slate-900 bg-slate-900/3' : 'border-slate-200 hover:border-slate-300'; ?> cursor-pointer transition-colors">
                            <input
                                type="radio"
                                name="payment_method"
                                value="cod"
                                class="mt-1 h-4 w-4 text-slate-900 border-slate-300 focus:ring-slate-900"
                                <?= $paymentMethod === 'cod' ? 'checked' : ''; ?>
                            />
                            <div class="flex-1">
                                <div class="flex items-center justify-between mb-1">
                                    <span class="font-semibold text-sm text-slate-900">Pay on Delivery</span>
                                </div>
                                <p class="text-[11px] text-slate-600">
                                    Pay via Cash or M-PESA where available after you inspect your items. Valid ID may be required on delivery.
                                </p>
                            </div>
                        </label>

                        <p class="text-[11px] text-slate-500 leading-relaxed mt-1">
                            By placing your order, you agree to our
                            <a href="payment-policy.php" class="text-slate-900 underline font-semibold">Payment Policy</a> and
                            <a href="return-policy.php" class="text-slate-900 underline font-semibold">Returns &amp; Refund Policy</a>.
                        </p>
                    </section>

                    <!-- Place Order Button -->
                    <section class="bg-white rounded-2xl shadow-sm border border-slate-200/70 p-5 md:p-6 space-y-3">
                        <button
                            type="submit"
                            class="w-full bg-slate-900 text-white font-bold py-4 rounded-xl hover:bg-slate-800 transition-colors shadow-lg shadow-slate-900/20 flex items-center justify-center text-sm uppercase tracking-wide"
                        >
                            Place Order Securely
                        </button>
                        <p class="text-[11px] text-slate-500 text-center leading-relaxed">
                            We will review your order and contact you to confirm delivery details and payment.
                            Prices, availability and delivery terms will always match what is shown on this site.
                        </p>
                    </section>
                </form>

                <!-- Policy cards on mobile (below summary) -->
                <div class="mt-4 grid grid-cols-1 gap-4 lg:hidden">
                    <!-- Shipping Policy -->
                    <div class="bg-white rounded-xl p-5 border border-slate-200 hover:border-slate-300 transition-colors group h-full shadow-sm">
                        <div class="flex items-center gap-3 mb-3">
                            <div class="bg-slate-50 p-2 rounded-full border border-slate-200 text-indigo-700 shadow-sm group-hover:scale-110 transition-transform">
                                <svg class="w-4 h-4" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
                                    <path d="M3 7h13v10H3z" />
                                    <path d="M16 10h4l1 3v4h-5z" />
                                    <circle cx="7.5" cy="18.5" r="1.5" />
                                    <circle cx="17.5" cy="18.5" r="1.5" />
                                </svg>
                            </div>
                            <h3 class="font-bold text-slate-900 text-sm uppercase tracking-wide">Shipping Policy</h3>
                        </div>
                        <div class="space-y-3">
                            <div class="flex gap-3 items-start">
                                <div class="w-1.5 h-1.5 bg-indigo-600 rounded-full mt-1.5 shrink-0"></div>
                                <p class="text-xs text-slate-700 leading-relaxed font-medium">
                                    <strong class="text-slate-900">Nationwide Delivery:</strong> Standard shipping fee of KSh 500 applies to all orders across Kenya.
                                </p>
                            </div>
                            <div class="flex gap-3 items-start">
                                <div class="w-1.5 h-1.5 bg-indigo-600 rounded-full mt-1.5 shrink-0"></div>
                                <p class="text-xs text-slate-700 leading-relaxed font-medium">
                                    <strong class="text-slate-900">Delivery Times:</strong> Nairobi (24–48 hrs). Upcountry (2–3 business days) via trusted courier partners.
                                </p>
                            </div>
                        </div>
                    </div>

                    <!-- Secure Payment -->
                    <div class="bg-white rounded-xl p-5 border border-slate-200 hover:border-slate-300 transition-colors group h-full shadow-sm">
                        <div class="flex items-center gap-3 mb-3">
                            <div class="bg-slate-50 p-2 rounded-full border border-slate-200 text-emerald-700 shadow-sm group-hover:scale-110 transition-transform">
                                <svg class="w-4 h-4" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
                                    <path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z" stroke-linecap="round" stroke-linejoin="round" />
                                    <path d="M9 12l2 2 4-4" stroke-linecap="round" stroke-linejoin="round" />
                                </svg>
                            </div>
                            <h3 class="font-bold text-slate-900 text-sm uppercase tracking-wide">Secure Payment</h3>
                        </div>
                        <div class="space-y-3">
                            <div class="flex gap-3 items-start">
                                <div class="w-1.5 h-1.5 bg-emerald-600 rounded-full mt-1.5 shrink-0"></div>
                                <p class="text-xs text-slate-700 leading-relaxed font-medium">
                                    <strong class="text-slate-900">M-PESA:</strong> You will complete payment securely from your own phone. We never ask for your M-PESA PIN.
                                </p>
                            </div>
                            <div class="flex gap-3 items-start">
                                <div class="w-1.5 h-1.5 bg-emerald-600 rounded-full mt-1.5 shrink-0"></div>
                                <p class="text-xs text-slate-700 leading-relaxed font-medium">
                                    <strong class="text-slate-900">Pay on Delivery:</strong> Inspect your items upon arrival before making payment.
                                </p>
                            </div>
                        </div>
                    </div>
                </div>

            </div> <!-- /right column -->
        </div>

        <!-- Floating Help button -->
        <button
            type="button"
            class="fixed bottom-6 right-6 bg-slate-900 text-white p-4 rounded-full shadow-2xl hover:bg-indigo-600 transition-colors z-40 group"
        >
            <svg class="w-5 h-5" fill="none" stroke="currentColor" stroke-width="2" viewBox="0 0 24 24">
                <path d="M8 10h.01M12 10h.01M16 10h.01" stroke-linecap="round" stroke-linejoin="round" />
                <path d="M21 11.5a8.38 8.38 0 01-.9 3.8 8.5 8.5 0 01-7.6 4.7 8.38 8.38 0 01-3.8-.9L3 21l1.9-5.7a8.38 8.38 0 01-.9-3.8 8.5 8.5 0 014.7-7.6 8.38 8.38 0 013.8-.9h.5a8.48 8.48 0 018 8v.5z" stroke-linecap="round" stroke-linejoin="round" />
            </svg>
            <span class="absolute right-full mr-3 top-1/2 -translate-y-1/2 bg-slate-900 text-white text-xs font-bold py-1.5 px-3 rounded-lg opacity-0 group-hover:opacity-100 transition-opacity whitespace-nowrap shadow-lg">
                Need Help?
            </span>
        </button>
    </div>
<?php endif; ?>

<?php include __DIR__ . '/includes/footer.php'; ?>
</body>
</html>