dbxShopService.class.php

Go to the documentation of this file.

<?php
namespace dbx\dbxShop;
 
require_once dirname(__DIR__, 2) . '/dbxContent/include/dbxContent_bootstrap_sync.php';
 
class dbxShopService {
 
   private function tpl() {
      return dbx()->get_system_obj('dbxTPL');
   }
 
   private function repo(): dbxShopRepository {
      return dbx()->get_include_obj('dbxShopRepository', 'dbxShop');
   }
 
   private function paypal(): dbxShopPayPal {
      return dbx()->get_include_obj('dbxShopPayPal', 'dbxShop');
   }
 
   private function amazonPay(): dbxShopAmazonPay {
      return dbx()->get_include_obj('dbxShopAmazonPay', 'dbxShop');
   }
 
   private function h($value): string {
      return htmlspecialchars((string) $value, ENT_QUOTES, 'UTF-8');
   }
 
   private function money($value): string {
      return number_format((float) $value, 2, ',', '.') . ' EUR';
   }
 
   private function shopConfig(): array {
      $cfg = dbx()->get_config('dbxShop');
      return is_array($cfg) ? $cfg : array();
   }
 
   private function settingsBool(array $cfg, string $key, bool $default = false): bool {
      if (!array_key_exists($key, $cfg)) {
         return $default;
      }
      $value = $cfg[$key];
      if (is_bool($value)) return $value;
      return in_array(strtolower(trim((string)$value)), array('1', 'true', 'yes', 'on'), true);
   }
 
   private function shopStyle(): string {
      $file = dirname(__DIR__) . '/design/css/shop.css';
      if (!is_file($file)) {
         return '';
      }
      return '<style>' . file_get_contents($file) . '</style>';
   }
 
   private function demoShopNoticeHtml(string $id = '', string $extraClass = ''): string {
      $idAttribute = $id !== '' ? ' id="' . $this->h($id) . '"' : '';
      $classAttribute = $extraClass !== '' ? ' ' . $this->h($extraClass) : '';
      return '<div' . $idAttribute . ' class="alert alert-danger dbx-shop-demo-alert' . $classAttribute . '" role="alert">'
         . '<strong><i class="bi bi-exclamation-octagon-fill"></i> Demo-Shop &ndash; kein tats&auml;chlicher Kauf</strong><br>'
         . 'Dieser Shop dient ausschlie&szlig;lich Demonstrations- und Testzwecken. Der vollst&auml;ndige Bestellablauf kann mit Testdaten durchlaufen werden; dabei wird lediglich ein technischer Testvorgang verarbeitet. Es erfolgen kein tats&auml;chlicher Kauf, keine Zahlung und keine Lieferung. Ein Kaufvertrag kommt nicht zustande.'
         . '</div>';
   }
 
   private function page(string $title, string $subtitle, string $body, string $active = 'catalog'): string {
      return $this->tpl()->get_tpl('dbxShop|start', array(
         'shop_style' => $this->shopStyle(),
         'title' => $this->h($title),
         'subtitle' => $this->h($subtitle),
         'body' => $body,
         'active_catalog' => $active === 'catalog' ? 'active' : '',
         'active_cart' => $active === 'cart' ? 'active' : '',
         'active_checkout' => $active === 'checkout' ? 'active' : '',
         'active_orders' => $active === 'orders' ? 'active' : '',
         'active_legal' => $active === 'legal' ? 'active' : '',
         'active_withdrawal' => $active === 'withdrawal' ? 'active' : '',
      ));
   }
 
   private function contentDb() {
      $db = dbx()->get_system_obj('dbxDB');
      if (!is_object($db) || !$db->connect_db_server('dbx|dbxContent.db3')) {
         return null;
      }
      return $db;
   }
 
   private function findContentFolder($db, string $name, int $parentId): int {
      $name = trim($name);
      $parentId = (int) $parentId;
      if ($name === '') {
         return 0;
      }
      $where = "name = '" . str_replace("'", "''", $name) . "' AND parent_id = " . $parentId;
      $rows = $db->select(\dbx\dbxContent\dbxContentLng::ddFolder(), $where, 'id', 'id', 'ASC', '', 1, 0, 0);
      if (!is_array($rows) || !isset($rows[0]['id'])) {
         return 0;
      }
      return (int) $rows[0]['id'];
   }
 
   private function nextFolderSorter($db, int $parentId): string {
      $parentId = (int) $parentId;
      $rows = $db->select(\dbx\dbxContent\dbxContentLng::ddFolder(), 'parent_id = ' . $parentId, 'sorter', 'sorter,id', 'DESC', '', 1, 0, 0);
      $max = 0;
      if (is_array($rows) && isset($rows[0]) && is_array($rows[0])) {
         $max = (int) ($rows[0]['sorter'] ?? 0);
      }
      return sprintf('%04d', $max + 10);
   }
 
   private function nextContentSorter($db, int $folderId): string {
      $folderId = (int) $folderId;
      $rows = $db->select(\dbx\dbxContent\dbxContentLng::ddContent(), 'folder = ' . $folderId, 'sorter', 'sorter,id', 'DESC', '', 1, 0, 0);
      $max = 0;
      if (is_array($rows) && isset($rows[0]) && is_array($rows[0])) {
         $max = (int) ($rows[0]['sorter'] ?? 0);
      }
      return sprintf('%04d', $max + 10);
   }
 
   private function ensureShopContentFolder($db): int {
      $folderId = $this->findContentFolder($db, 'shop', 0);
      if ($folderId > 0) {
         return $folderId;
      }
 
      $data = array(
         'name' => 'shop',
         'parent_id' => 0,
         'sorter' => $this->nextFolderSorter($db, 0),
         'group_read' => '*',
         'template' => 'c-body1-footer',
         'hero_template' => 'image-hero',
         'hero_image_id' => 'parent',
         'hero_margin_top' => 'parent',
         'hero_height' => 'parent',
         'hero_variant' => 'parent',
         'hero_sticky' => 'parent',
         'hero_scroll_layer' => 'parent',
      );
      $ok = (int) $db->insert(\dbx\dbxContent\dbxContentLng::ddFolder(), $data, 0, 1, 0, 0);
      if ($ok !== 1) {
         return 0;
      }
      $folderId = (int) $db->get_insert_id();
      if ($folderId <= 0) {
         return 0;
      }
 
      if ($folderId > 0) {
         \dbx\dbxContent\dbxContentLngSync::afterFolderSave($db, $folderId, true);
      }
      return $folderId;
   }
 
   private function shopLegalPageData($db, int $folderId, string $title, string $permalink, string $content): array {
      return array(
         'activ' => 1,
         'folder' => $folderId,
         'title' => substr($title, 0, 254),
         'permalink' => substr($permalink, 0, 254),
         'description' => '',
         'keywords' => '',
         'group_read' => '*',
         'sorter' => $this->nextContentSorter($db, $folderId),
         'template' => 'c-body1-footer',
         'hero_template' => 'parent',
         'hero_image_id' => 'parent',
         'hero_margin_top' => 'parent',
         'hero_height' => 'parent',
         'hero_variant' => 'parent',
         'hero_sticky' => 'parent',
         'hero_scroll_layer' => 'parent',
         'gallery_template' => 'image-gallery',
         'gallery_visible_count' => '3',
         'gallery_image_size' => 'original',
         'gallery_lightbox_width' => '100vw',
         'gallery_overflow' => 'grid',
         'gallery_click_behavior' => 'lightbox',
         'content' => $content,
      );
   }
 
   private function syncContentPermalink(int $cid, string $permalink): void {
      if ($cid <= 0 || trim($permalink) === '') {
         return;
      }
      \dbx\dbxContent\dbxContentPermalinkIndex::upsertPage($cid, $permalink, '*', 1);
   }
 
   private function ensureShopLegalPage($db, int $folderId, string $title, string $permalink, string $content): int {
      $dd = \dbx\dbxContent\dbxContentLng::ddContent();
      $existing = $db->select1($dd, array('permalink' => $permalink), 'id,content', 0);
      if (is_array($existing) && (int) ($existing['id'] ?? 0) > 0) {
         $id = (int) $existing['id'];
         $storedContent = trim((string) ($existing['content'] ?? ''));
         if ($storedContent === '') {
            $data = $this->shopLegalPageData($db, $folderId, $title, $permalink, $content);
            unset($data['sorter']);
            $db->update($dd, $data, $id, 0, 1, 1, 0);
            \dbx\dbxContent\dbxContentLngSync::afterPageSave($db, $id, false);
         } else {
            $db->update($dd, array('template' => 'c-body1-footer', 'group_read' => '*', 'activ' => 1), $id, 0, 1, 1, 0);
         }
         $this->syncContentPermalink($id, $permalink);
         return $id;
      }
 
      $data = $this->shopLegalPageData($db, $folderId, $title, $permalink, $content);
      $ok = (int) $db->insert($dd, $data, 0, 1, 0, 0);
      if ($ok !== 1) {
         return 0;
      }
      $id = (int) $db->get_insert_id();
      if ($id <= 0) {
         return 0;
      }
      if ($id > 0) {
         \dbx\dbxContent\dbxContentLngSync::afterPageSave($db, $id, true);
         $this->syncContentPermalink($id, $permalink);
      }
      return $id;
   }
 
   public function ensureShopLegalPages(): array {
      $db = $this->contentDb();
      if (!is_object($db)) {
         return array();
      }
      $folderId = $this->ensureShopContentFolder($db);
      if ($folderId <= 0) {
         return array();
      }
 
      return array(
         'legal' => $this->ensureShopLegalPage($db, $folderId, 'Rechtstexte', 'shop/rechtstexte', $this->defaultLegalContent()),
         'withdrawal' => $this->ensureShopLegalPage($db, $folderId, 'Widerruf', 'shop/widerruf', $this->defaultWithdrawalContent()),
      );
   }
 
   private function renderCmsShopPage(string $key, string $title, string $subtitle, string $active): string {
      $pages = $this->ensureShopLegalPages();
      $cid = (int) ($pages[$key] ?? 0);
      if ($cid <= 0) {
         return $this->page($title, $subtitle, $this->placeholder($title, 'Die CMS-Seite konnte nicht angelegt oder geladen werden.'), $active);
      }
 
      $renderer = dbx()->get_include_obj('dbxContentRenderer', 'dbxContent');
      $body = is_object($renderer) ? (string) $renderer->renderStatic($cid, array('template' => 'c-body1-footer')) : '';
      if (trim($body) === '') {
         $body = $this->placeholder($title, 'Die CMS-Seite ist leer.');
      }
      return $this->page($title, $subtitle, '<div class="dbx-shop-cms-page">' . $body . '</div>', $active);
   }
 
   private function withdrawalFormHtml(): string {
      $form = dbx()->get_system_obj('dbxForm');
      $form->init('shop-withdrawal-form', 'shop-withdrawal-form');
      $form->_fd = 'dbxShop|withdrawal';
      $form->_action = '?dbx_modul=dbxShop&dbx_run1=withdrawal';
      $form->_data = array(
         'order_no' => (string)($_POST['order_no'] ?? ''),
         'customer_name' => (string)($_POST['customer_name'] ?? ''),
         'customer_email' => (string)($_POST['customer_email'] ?? ''),
         'customer_address' => (string)($_POST['customer_address'] ?? ''),
         'reason' => (string)($_POST['reason'] ?? ''),
      );
      $form->_msg_info = 'Bitte Bestellnummer und Kontaktdaten eintragen, damit der Widerruf zugeordnet werden kann.';
      $form->_msg_success = 'Widerruf wurde gespeichert.';
      $form->_msg_error = 'Bitte Eingaben pruefen.';
      $form->add_flds();
      $form->add_rep('withdrawal_error', '');
 
      $submitted = ($_SERVER['REQUEST_METHOD'] ?? '') === 'POST' && isset($_POST['shop_withdrawal_submit']);
      if ($submitted) {
         $form->submit();
         $name = trim((string)($_POST['customer_name'] ?? ''));
         $email = trim((string)($_POST['customer_email'] ?? ''));
         $address = trim((string)($_POST['customer_address'] ?? ''));
         if ($name === '' || !filter_var($email, FILTER_VALIDATE_EMAIL) || strlen($address) < 8) {
            $form->add_rep('withdrawal_error', '<div class="alert alert-warning mb-0">Bitte Name, gueltige E-Mail und Adresse eintragen.</div>');
         } else {
            $row = $this->repo()->saveWithdrawal($_POST);
            if (is_array($row)) {
               $this->sendWithdrawalMails($row);
               $form->_data = array('order_no' => '', 'customer_name' => '', 'customer_email' => '', 'customer_address' => '', 'reason' => '');
               $form->add_rep('withdrawal_error', '<div class="alert alert-success mb-0">Ihr Widerruf wurde gespeichert. Wir pruefen die Zuordnung zur Bestellung.</div>');
            } else {
               $form->add_rep('withdrawal_error', '<div class="alert alert-danger mb-0">Der Widerruf konnte nicht gespeichert werden.</div>');
            }
         }
      }
 
      return $form->run();
   }
 
   private function defaultLegalContent(): string {
      return <<<'HTML'
<div class="dbx-shop-legal-text">
   <h1>Rechtstexte</h1>
   <p class="dbx-shop-legal-note"><strong>Hinweis:</strong> Dies ist ein Mustertext fuer einen deutschen Online-Shop. Alle Platzhalter in eckigen Klammern muessen vor der Veroeffentlichung durch echte Betreiber-, Register-, Steuer-, Zahlungs- und Versanddaten ersetzt und rechtlich geprueft werden.</p>
 
   <h2>Anbieterkennzeichnung</h2>
   <p><strong>[Name/Firma des Shop-Betreibers]</strong><br>
   [Strasse und Hausnummer]<br>
   [PLZ Ort]<br>
   Deutschland</p>
   <p>Vertreten durch: [vertretungsberechtigte Person]<br>
   E-Mail: <a href="mailto:[E-Mail-Adresse]">[E-Mail-Adresse]</a><br>
   Telefon: [Telefonnummer]</p>
   <p>Registereintrag: [Registergericht und Registernummer, falls vorhanden]<br>
   Umsatzsteuer-ID: [USt-IdNr., falls vorhanden]<br>
   Wirtschafts-ID: [W-IdNr., falls vorhanden]</p>
   <p>Zustaendige Aufsichtsbehoerde: [nur eintragen, wenn fuer die Taetigkeit erforderlich]</p>
 
   <h2>Geltungsbereich</h2>
   <p>Diese Rechtstexte gelten fuer Bestellungen ueber diesen Shop. Abweichende Bedingungen von Kunden gelten nur, wenn der Shop-Betreiber ihnen ausdruecklich zustimmt.</p>
 
   <h2>Vertragspartner und Vertragsschluss</h2>
   <p>Der Kaufvertrag kommt zustande mit <strong>[Name/Firma des Shop-Betreibers]</strong>. Die Darstellung der Produkte im Shop ist kein rechtlich bindendes Angebot, sondern eine Aufforderung zur Bestellung. Der Kunde gibt ein verbindliches Angebot ab, wenn er den Bestellprozess abschliesst. Die Annahme erfolgt durch Bestellbestaetigung, Zahlungsaufforderung, Versandbestaetigung oder Lieferung der Ware.</p>
 
   <h2>Preise, Zahlung und Rechnung</h2>
   <p>Alle Preise verstehen sich in Euro und enthalten die gesetzliche Umsatzsteuer, sofern diese im Shop ausgewiesen wird. Zusaetzliche Versandkosten werden vor Abgabe der Bestellung angezeigt. Verfuegbare Zahlungsarten sind: [Zahlungsarten eintragen, z. B. PayPal, Ueberweisung, Rechnung]. Die Rechnung wird elektronisch oder in Textform bereitgestellt.</p>
 
   <h2>Lieferung und Versand</h2>
   <p>Die Lieferung erfolgt an die vom Kunden angegebene Lieferadresse. Liefergebiete, Versandarten, Versandkosten und Lieferzeiten ergeben sich aus den Angaben im Bestellprozess. Bei digitalen Produkten erfolgt die Bereitstellung per Download, E-Mail, Kundenkonto oder Freischaltung.</p>
 
   <h2>Eigentumsvorbehalt</h2>
   <p>Gelieferte Waren bleiben bis zur vollstaendigen Bezahlung Eigentum des Shop-Betreibers.</p>
 
   <h2>Maengelhaftung</h2>
   <p>Es gilt das gesetzliche Maengelhaftungsrecht. Kunden werden gebeten, offensichtliche Transportschaeden moeglichst schnell beim Zusteller und beim Shop-Betreiber zu melden. Die gesetzlichen Rechte des Kunden bleiben davon unberuehrt.</p>
 
   <h2>Digitale Inhalte und Dienstleistungen</h2>
   <p>Bei digitalen Inhalten, Downloads, Software, Online-Zugaengen oder Dienstleistungen koennen besondere Hinweise zur Vertragsausfuehrung, Kompatibilitaet, Laufzeit, Kuendigung und zum Widerrufsrecht erforderlich sein. Diese Angaben muessen beim jeweiligen Produkt und im Bestellprozess klar dargestellt werden.</p>
 
   <h2>Streitbeilegung</h2>
   <p>Die Europaeische Kommission stellt eine Plattform zur Online-Streitbeilegung bereit: <a href="https://ec.europa.eu/consumers/odr/" target="_blank" rel="noopener">https://ec.europa.eu/consumers/odr/</a>. Der Shop-Betreiber ist [bereit/nicht bereit] und [verpflichtet/nicht verpflichtet], an Streitbeilegungsverfahren vor einer Verbraucherschlichtungsstelle teilzunehmen.</p>
 
   <h2>Datenschutz</h2>
   <p>Informationen zur Verarbeitung personenbezogener Daten, zu Kontaktformularen, Zahlungsdiensten, Versanddienstleistern, Cookies, Logfiles und Rechten betroffener Personen stehen in der Datenschutzerklaerung: <a href="?dbx_modul=dbxContent&amp;dbx_permalink=datenschutz">Datenschutzerklaerung</a>.</p>
</div>
HTML;
   }
 
   private function defaultWithdrawalContent(): string {
      return <<<'HTML'
<div class="dbx-shop-legal-text">
   <h1>Widerruf</h1>
   <p class="dbx-shop-legal-note"><strong>Hinweis:</strong> Dies ist ein Muster fuer Verbraucherbestellungen nach deutschem Recht. Platzhalter muessen ersetzt und die Ausnahmen fuer konkrete Produkte, digitale Inhalte und Dienstleistungen geprueft werden.</p>
 
   <h2>Widerrufsrecht</h2>
   <p>Verbraucher haben grundsaetzlich das Recht, einen Vertrag binnen vierzehn Tagen ohne Angabe von Gruenden zu widerrufen. Die Widerrufsfrist betraegt vierzehn Tage ab dem Tag, an dem der Kunde oder ein benannter Dritter die Ware erhalten hat. Bei digitalen Inhalten oder Dienstleistungen kann der Fristbeginn und das Erloeschen des Widerrufsrechts abweichen.</p>
 
   <h2>Ausuebung des Widerrufs</h2>
   <p>Um das Widerrufsrecht auszuueben, muss der Kunde den Shop-Betreiber mit einer eindeutigen Erklaerung ueber den Entschluss informieren, den Vertrag zu widerrufen. Die Erklaerung kann per Brief, E-Mail oder ueber ein im Shop bereitgestelltes Formular erfolgen.</p>
   <p><strong>Widerruf an:</strong><br>
   [Name/Firma des Shop-Betreibers]<br>
   [Strasse und Hausnummer]<br>
   [PLZ Ort]<br>
   E-Mail: <a href="mailto:[E-Mail-Adresse]">[E-Mail-Adresse]</a></p>
 
   <h2>Folgen des Widerrufs</h2>
   <p>Wenn der Kunde den Vertrag widerruft, werden alle Zahlungen einschliesslich der Standard-Lieferkosten unverzueglich und spaetestens binnen vierzehn Tagen ab Eingang der Widerrufserklaerung zurueckgezahlt. Fuer die Rueckzahlung wird dasselbe Zahlungsmittel verwendet, das bei der urspruenglichen Transaktion eingesetzt wurde, sofern nichts anderes vereinbart wurde.</p>
   <p>Bei Waren kann die Rueckzahlung verweigert werden, bis die Ware wieder eingegangen ist oder der Kunde den Nachweis erbracht hat, dass die Ware zurueckgesendet wurde. Der Kunde hat die Ware unverzueglich und spaetestens binnen vierzehn Tagen ab Widerruf zurueckzusenden.</p>
 
   <h2>Ruecksendekosten und Wertersatz</h2>
   <p>Die unmittelbaren Kosten der Ruecksendung traegt [Kunde/Shop-Betreiber - bitte passend eintragen]. Fuer einen Wertverlust der Ware muss der Kunde nur aufkommen, wenn dieser Wertverlust auf einen nicht notwendigen Umgang mit der Ware zurueckzufuehren ist.</p>
 
   <h2>Ausschluss oder Erloeschen des Widerrufsrechts</h2>
   <p>Das Widerrufsrecht kann insbesondere ausgeschlossen oder vorzeitig erloschen sein bei individuell angefertigten Waren, versiegelten Waren aus Hygiene- oder Gesundheitsschutzgruenden nach Entfernung der Versiegelung, schnell verderblichen Waren, bestimmten Dienstleistungen sowie digitalen Inhalten, wenn der Kunde ausdruecklich zugestimmt hat, dass die Ausfuehrung vor Ablauf der Widerrufsfrist beginnt, und die gesetzlich erforderlichen Bestaetigungen erteilt wurden.</p>
 
   <h2>Muster-Widerrufsformular</h2>
   <p>Wenn Sie den Vertrag widerrufen wollen, koennen Sie diesen Text verwenden und an den Shop-Betreiber senden:</p>
   <div class="dbx-shop-withdrawal-form">
      <p>An [Name/Firma, Anschrift und E-Mail-Adresse des Shop-Betreibers]</p>
      <p>Hiermit widerrufe ich den von mir abgeschlossenen Vertrag ueber den Kauf der folgenden Waren oder die Erbringung der folgenden Dienstleistung:</p>
      <p>[Artikel/Dienstleistung eintragen]</p>
      <p>Bestellt am: [Datum]<br>Erhalten am: [Datum]</p>
      <p>Name des Kunden: [Name]<br>Anschrift des Kunden: [Anschrift]</p>
      <p>Datum: [Datum]</p>
      <p>Unterschrift des Kunden: [nur bei Mitteilung auf Papier]</p>
   </div>
</div>
HTML;
   }
 
   private function mediaUrl(string $path): string {
      $path = trim(str_replace('\\', '/', $path));
      if ($path === '') {
         return '';
      }
      if (preg_match('~^https?://~i', $path) || substr($path, 0, 1) === '/') {
         return $path;
      }
      return dbx()->get_base_url() . ltrim($path, '/');
   }
 
   private function mediaItemUrl(array $image, bool $thumb = false): string {
      $mediaId = (int)($image['media_id'] ?? 0);
      if ($mediaId > 0) {
         $url = 'index.php?dbx_modul=dbxContent&dbx_run1=media&dbx_mid=' . $mediaId;
         if ($thumb) {
            $url .= '&dbx_thumb=1';
         }
         return $url;
      }
      return $this->mediaUrl((string)($image['image_path'] ?? ''));
   }
 
   private function productImage(array $product): array {
      $images = $product['images'] ?? array();
      if (is_array($images) && isset($images[0]) && is_array($images[0])) {
         return $images[0];
      }
      return array(
         'image_path' => 'files/shop/img/software-dashboard.svg',
         'title' => $product['title'] ?? 'Artikel',
         'alt' => $product['title'] ?? 'Artikel',
      );
   }
 
   private function primaryGroup(array $product): array {
      return is_array($product['groups'] ?? null) ? (($product['groups'] ?? array())[0] ?? array()) : array();
   }
 
   private function templateName(string $value, string $fallback, string $prefix = ''): string {
      $value = preg_replace('~[^a-z0-9_-]+~i', '', trim($value));
      if ($value === '') {
         return $fallback;
      }
      if ($prefix !== '' && strpos($value, $prefix) !== 0) {
         return $fallback;
      }
      return $value;
   }
 
   private function shopTemplateExists(string $template): bool {
      $template = preg_replace('~[^a-z0-9_-]+~i', '', $template);
      if ($template === '') return false;
      return is_file(dirname(__DIR__) . '/tpl/htm/' . $template . '.htm');
   }
 
   private function mediaTemplateExists(string $template): bool {
      $template = preg_replace('~[^a-z0-9_-]+~i', '', strtolower($template));
      if ($template === '') return false;
      return is_file(dirname(dirname(__DIR__)) . '/dbxContent/tpl/htm/media-' . $template . '.htm');
   }
 
   private function groupSetting(array $product, string $key, $fallback) {
      $group = $this->primaryGroup($product);
      $value = $group[$key] ?? $fallback;
      return $value === '' || $value === null ? $fallback : $value;
   }
 
   private function productVisual(array $product, string $class = ''): string {
      $image = $this->productImage($product);
      $src = $this->mediaItemUrl($image, true);
      $alt = (string)($image['alt'] ?? $image['title'] ?? $product['title'] ?? '');
      $count = count($product['images'] ?? array());
      $html = '<div class="dbx-shop-product-visual ' . $this->h($class) . '">';
      $html .= '<img class="dbx-shop-product-img" src="' . $this->h($src) . '" alt="' . $this->h($alt) . '" loading="lazy">';
      $html .= '<span class="dbx-shop-badge">' . $this->h($product['badge'] ?? 'Artikel') . '</span>';
      if ($count > 1) {
         $html .= '<span class="dbx-shop-image-count"><i class="bi bi-images"></i> ' . (int)$count . '</span>';
      }
      $html .= '</div>';
      return $html;
   }
 
   private function productGallery(array $product): string {
      $images = $product['images'] ?? array();
      if (!is_array($images) || $images === array()) {
         return $this->productVisual($product, 'dbx-shop-product-visual-large');
      }
      $overflow = preg_replace('~[^a-z0-9_-]~i', '', (string)$this->groupSetting($product, 'gallery_overflow', 'grid')) ?: 'grid';
      $click = preg_replace('~[^a-z0-9_-]~i', '', (string)$this->groupSetting($product, 'gallery_click', 'lightbox')) ?: 'lightbox';
      $visible = max(1, (int)$this->groupSetting($product, 'gallery_visible_count', 3));
      $imgSize = preg_replace('~[^a-z0-9_-]~i', '', (string)$this->groupSetting($product, 'gallery_image_size', 'original')) ?: 'original';
      $lightboxWidth = preg_replace('~[^a-z0-9%._-]+~i', '', (string)$this->groupSetting($product, 'gallery_lightbox_width', '100vw')) ?: '100vw';
      $template = preg_replace('~[^a-z0-9_-]+~i', '', strtolower((string)$this->groupSetting($product, 'gallery_template', 'image-gallery'))) ?: 'image-gallery';
      if (!$this->mediaTemplateExists($template)) {
         $template = 'image-gallery';
      }
      $html = '<div class="dbx-shop-product-gallery dbx-content-media-gallery gallery-list gallery-template-' . $this->h($template) . '" data-dbx="lib=gallery|overflow=' . $this->h($overflow) . '|click=' . $this->h($click) . '|img-count=' . $visible . '|img-size=' . $this->h($imgSize) . '|lightbox-width=' . $this->h($lightboxWidth) . '">';
      foreach ($images as $image) {
         $url = $this->mediaItemUrl($image, false);
         $thumbUrl = $this->mediaItemUrl($image, true);
         if ($url === '') {
            continue;
         }
         $title = (string)($image['title'] ?? $product['title'] ?? '');
         $alt = (string)($image['alt'] ?? $title);
         $caption = $title;
         $html .= $this->tpl()->get_tpl('dbxContent|media-' . $template, array(
            'id' => (string)($image['media_id'] ?? ''),
            'url' => $this->h($url),
            'thumb_url' => $this->h($thumbUrl),
            'poster_url' => $this->h($thumbUrl),
            'media_type' => 'image',
            'title' => $this->h($title),
            'alt' => $this->h($alt),
            'caption' => $this->h($caption),
            'slot' => 'gallery',
            'mime' => '',
         ));
      }
      $html .= '</div>';
      return $html;
   }
 
   private function placeholder(string $headline, string $text, array $items = array()): string {
      $list = '';
      foreach ($items as $item) {
         $list .= '<li>' . $this->h($item) . '</li>';
      }
 
      return $this->tpl()->get_tpl('dbxShop|placeholder', array(
         'headline' => $this->h($headline),
         'text' => $this->h($text),
         'items' => $list !== '' ? '<ul>' . $list . '</ul>' : '',
      ));
   }
 
   private function ensureSeed(): void {
      $repo = $this->repo();
      $repo->install();
      if (count($repo->products(false)) === 0 || count($repo->shippingGroups()) === 0 || count($repo->channelGroups()) === 0 || count($repo->allImages()) === 0) {
         $repo->seedDemoProducts();
      }
   }
 
   private function activeChannel(): string {
      return 'shop';
   }
 
   private function channelNav(string $active): string {
      $channels = $this->repo()->channels();
      $html = '<div class="dbx-shop-channel-nav">';
      foreach ($channels as $channel) {
         $key = (string)($channel['channel_key'] ?? '');
         if ($key === '') {
            continue;
         }
         $cls = $key === $active ? ' active' : '';
         $html .= '<a class="btn btn-outline-secondary btn-sm' . $cls . '" href="?dbx_modul=dbxShop&amp;dbx_run1=catalog&amp;channel=' . rawurlencode($key) . '">';
         $html .= $this->h($channel['title'] ?? $key);
         $html .= '</a>';
      }
      $html .= '</div>';
      return $html;
   }
 
   private function productHasChannel(array $product, string $channel): bool {
      foreach (($product['channels'] ?? array()) as $ch) {
         if ((string)($ch['channel_key'] ?? '') === $channel && (int)($ch['active'] ?? 0) === 1) {
            return true;
         }
      }
      return false;
   }
 
   private function groupsHtml(array $product): string {
      $html = '';
      foreach (($product['groups'] ?? array()) as $group) {
         $groupId = (int)($group['id'] ?? 0);
         $href = $groupId > 0 ? '?dbx_modul=dbxShop&amp;dbx_run1=catalog&amp;group=' . $groupId : '';
         $label = $this->h($group['title'] ?? '');
         $html .= $href !== ''
            ? '<a class="dbx-shop-chip" href="' . $href . '">' . $label . '</a>'
            : '<span class="dbx-shop-chip">' . $label . '</span>';
      }
      return $html;
   }
 
   private function catalogGroupId(): int {
      return max(0, (int)dbx()->get_modul_var('group', 0, 'int'));
   }
 
   private function groupImageUrl(array $group): string {
      $image = $this->repo()->primaryImageForGroup((int)($group['id'] ?? 0));
      if (is_array($image)) {
         $url = $this->mediaItemUrl($image, true);
         if ($url !== '') {
            return $url;
         }
      }
      return $this->mediaUrl('files/shop/img/software-dashboard.svg');
   }
 
   private function catalogGroupBreadcrumb(int $groupId): string {
      if ($groupId <= 0) {
         return '';
      }
      $path = $this->repo()->groupPath($groupId);
      if ($path === array()) {
         return '';
      }
      $html = '<nav class="dbx-shop-group-breadcrumb" aria-label="Artikelgruppen">';
      $html .= '<a href="?dbx_modul=dbxShop&amp;dbx_run1=catalog">Alle Artikel</a>';
      foreach ($path as $group) {
         $id = (int)($group['id'] ?? 0);
         $title = $this->h($group['title'] ?? '');
         if ($id === $groupId) {
            $html .= '<span>' . $title . '</span>';
         } else {
            $html .= '<a href="?dbx_modul=dbxShop&amp;dbx_run1=catalog&amp;group=' . $id . '">' . $title . '</a>';
         }
      }
      $html .= '</nav>';
      return $html;
   }
 
   private function catalogGroupNavigation(int $parentId): string {
      $groups = $this->repo()->groupsByParent($parentId, true);
      if ($groups === array()) {
         return '';
      }
      $html = '<section class="dbx-shop-group-grid" aria-label="Artikelgruppen">';
      foreach ($groups as $group) {
         $id = (int)($group['id'] ?? 0);
         if ($id <= 0) continue;
         $title = trim((string)($group['title'] ?? 'Artikelgruppe'));
         $description = trim((string)($group['description'] ?? ''));
         $html .= '<a class="dbx-shop-group-card" href="?dbx_modul=dbxShop&amp;dbx_run1=catalog&amp;group=' . $id . '">';
         $html .= '<span class="dbx-shop-group-card-image"><img src="' . $this->h($this->groupImageUrl($group)) . '" alt="' . $this->h($title) . '" loading="lazy"></span>';
         $html .= '<span class="dbx-shop-group-card-body"><strong>' . $this->h($title) . '</strong>';
         if ($description !== '') {
            $html .= '<small>' . $this->h($description) . '</small>';
         }
         $html .= '</span></a>';
      }
      $html .= '</section>';
      return $html;
   }
 
   private function productInCatalogGroup(array $product, int $groupId): bool {
      if ($groupId <= 0) {
         return true;
      }
      if ((int)($product['product_group_id'] ?? 0) === $groupId) {
         return true;
      }
      foreach (($product['groups'] ?? array()) as $group) {
         if ((int)($group['id'] ?? 0) === $groupId) {
            return true;
         }
      }
      return false;
   }
 
   private function channelsHtml(array $product): string {
      $html = '';
      foreach (($product['channels'] ?? array()) as $channel) {
         if ((int)($channel['active'] ?? 0) !== 1) {
            continue;
         }
         $html .= '<span class="dbx-shop-chip dbx-shop-chip-channel">' . $this->h($channel['title'] ?? $channel['channel_key'] ?? '') . '</span>';
      }
      return $html;
   }
 
   private function normalizedText(string $value): string {
      $value = strtolower($value);
      $value = strtr($value, array('ä' => 'ae', 'ö' => 'oe', 'ü' => 'ue', 'ß' => 'ss'));
      $value = preg_replace('~[^a-z0-9]+~', ' ', $value) ?: '';
      return preg_replace('~\\s+~', ' ', trim($value)) ?: '';
   }
 
   private function attributeText(array $product): string {
      $parts = array();
      foreach (($product['attributes'] ?? array()) as $attribute) {
         $value = trim((string)($attribute['display_value'] ?? $attribute['value_text'] ?? ''));
         $parts[] = (string)($attribute['title'] ?? '');
         $parts[] = (string)($attribute['attr_key'] ?? '');
         if ($value !== '') {
            $parts[] = $value;
         }
      }
      return implode(' ', $parts);
   }
 
   private function groupText(array $product): string {
      $parts = array();
      foreach (($product['groups'] ?? array()) as $group) {
         $parts[] = (string)($group['title'] ?? '');
         $parts[] = (string)($group['group_key'] ?? '');
         $parts[] = (string)($group['description'] ?? '');
         $parts[] = (string)($group['attribute_notes'] ?? '');
      }
      return implode(' ', $parts);
   }
 
   private function searchTerms(string $query): array {
      $terms = preg_split('~\\s+~', $this->normalizedText($query)) ?: array();
      $stopWords = array_flip(array('der','die','das','den','dem','des','ein','eine','einer','einem','und','oder','mit','ohne','fuer','fur','von','im','in','am','an','auf','zu'));
      $out = array();
      foreach ($terms as $term) {
         $term = trim($term);
         if ($term === '' || isset($stopWords[$term])) {
            continue;
         }
         if (strlen($term) < 2 && !ctype_digit($term)) {
            continue;
         }
         $out[$term] = true;
      }
      return array_keys($out);
   }
 
   private function textMatchesSearchTerm(string $text, string $term): bool {
      return $this->searchFieldScore($text, $term, 1) > 0;
   }
 
   private function searchFieldScore(string $text, string $term, int $weight): int {
      if ($text === '' || $term === '') {
         return 0;
      }
      if ($text === $term) {
         return $weight * 8;
      }
      $termLength = strlen($term);
      $compactText = str_replace(' ', '', $text);
      $compactTerm = str_replace(' ', '', $term);
      if (strpos($text, $term) !== false || strpos($compactText, $compactTerm) !== false) {
         return $weight * 5;
      }
      $best = 0;
      foreach (preg_split('~\\s+~', $text) ?: array() as $token) {
         $token = trim($token);
         if ($token === '') {
            continue;
         }
         if ($token === $term) {
            $best = max($best, $weight * 6);
            continue;
         }
         if ($termLength < 3) {
            continue;
         }
         if (strlen($token) >= $termLength && strpos($token, $term) === 0) {
            $best = max($best, $weight * 4);
            continue;
         }
         if (
            $termLength >= 4
            && strlen($token) >= 4
            && substr($token, 0, 3) === substr($term, 0, 3)
            && abs(strlen($token) - $termLength) <= ($termLength >= 7 ? 2 : 1)
            && levenshtein($token, $term) <= ($termLength >= 7 ? 2 : 1)
         ) {
            $best = max($best, $weight * 2);
         }
      }
      return $best;
   }
 
   private function productSearchScore(array $product, string $query): int {
      $terms = $this->searchTerms($query);
      if ($terms === array()) {
         return 1;
      }
 
      $primary = $this->normalizedText(implode(' ', array(
         (string)($product['sku'] ?? ''),
         (string)($product['title'] ?? ''),
         (string)($product['category'] ?? ''),
         (string)($product['badge'] ?? ''),
         (string)($product['product_type'] ?? ''),
      )));
      $secondary = $this->normalizedText(implode(' ', array(
         (string)($product['summary'] ?? ''),
         (string)($product['description'] ?? ''),
      )));
      $attributes = $this->normalizedText($this->attributeText($product));
      $groups = $this->normalizedText($this->groupText($product));
 
      $score = 0;
      $matched = 0;
      $firstTermPrimaryScore = 0;
      $termCount = count($terms);
 
      foreach ($terms as $idx => $term) {
         $primaryScore = $this->searchFieldScore($primary, $term, 10);
         $termScore = max(
            $primaryScore,
            $this->searchFieldScore($attributes, $term, 7),
            $this->searchFieldScore($secondary, $term, 4),
            $this->searchFieldScore($groups, $term, 3)
         );
 
         if ($idx === 0) {
            $firstTermPrimaryScore = $primaryScore;
         }
         if ($termScore > 0) {
            $matched++;
            $score += $termScore;
         }
      }
 
      if ($matched === 0) {
         return 0;
      }
      if ($termCount === 1) {
         return $score;
      }
 
      if ($matched === $termCount || $firstTermPrimaryScore > 0 || $score >= 20) {
         return $score + ($matched * 3);
      }
 
      return 0;
   }
 
   private function attributesInlineHtml(array $product, int $max = 4): string {
      $html = '';
      $count = 0;
      foreach (($product['attributes'] ?? array()) as $attribute) {
         $value = trim((string)($attribute['display_value'] ?? $attribute['value_text'] ?? ''));
         if ($value === '') continue;
         $html .= '<span class="dbx-shop-attribute-chip"><span>' . $this->h($attribute['title'] ?? '') . '</span><strong>' . $this->h($value) . '</strong></span>';
         $count++;
         if ($count >= $max) break;
      }
      return $html !== '' ? '<div class="dbx-shop-attribute-row">' . $html . '</div>' : '';
   }
 
   private function attributesTableHtml(array $product): string {
      $rows = '';
      foreach (($product['attributes'] ?? array()) as $attribute) {
         $value = trim((string)($attribute['display_value'] ?? $attribute['value_text'] ?? ''));
         if ($value === '') continue;
         $rows .= '<tr><th>' . $this->h($attribute['title'] ?? '') . '</th><td>' . $this->h($value) . '</td></tr>';
      }
      if ($rows === '') {
         return '';
      }
      return '<div class="dbx-shop-attributes"><h4>Eigenschaften</h4><table><tbody>' . $rows . '</tbody></table></div>';
   }
 
   private function selectedAttributeFilters(): array {
      $raw = $_GET['attr'] ?? array();
      if (!is_array($raw)) {
         return array();
      }
      $out = array();
      foreach ($raw as $id => $value) {
         $id = (int)$id;
         $value = trim((string)$value);
         if ($id > 0 && $value !== '') {
            $out[$id] = $value;
         }
      }
      return $out;
   }
 
   private function productMatchesQuery(array $product, string $query): bool {
      return $this->productSearchScore($product, $query) > 0;
   }
 
   private function productMatchesAttributeFilters(array $product, array $filters): bool {
      if ($filters === array()) {
         return true;
      }
      $values = array();
      foreach (($product['attributes'] ?? array()) as $attribute) {
         $id = (int)($attribute['id'] ?? 0);
         if ($id <= 0) continue;
         $values[$id] = $this->normalizedText((string)($attribute['value_text'] ?? ''));
      }
      foreach ($filters as $id => $value) {
         if (!isset($values[$id]) || $values[$id] !== $this->normalizedText((string)$value)) {
            return false;
         }
      }
      return true;
   }
 
   private function catalogFiltersHtml(string $channel, string $query, array $selected, int $groupId = 0): string {
      $searchField = dbx()->search_html(dbx()->search_defaults(array(
         'name' => 'q',
         'value' => $query,
         'placeholder' => 'Suchbegriff eingeben',
         'title' => 'Suche',
         'input_class' => 'form-control-sm dbx-shop-search-input',
         'wrap_class' => 'dbx-shop-search-wrap',
         'data_role' => 'shop-search',
      )));
 
      $filterFields = '';
      foreach ($this->repo()->attributeFilterDefinitions() as $definition) {
         $id = (int)($definition['id'] ?? 0);
         $values = $definition['values'] ?? array();
         if ($id <= 0 || !is_array($values) || $values === array()) continue;
         $label = trim((string)($definition['title'] ?? ''));
         $group = trim((string)($definition['group_title'] ?? ''));
         $filterFields .= '<label><span>' . $this->h($group !== '' ? $group . ': ' . $label : $label) . '</span><select class="form-select form-select-sm" name="attr[' . $id . ']">';
         $filterFields .= '<option value="">Alle</option>';
         foreach ($values as $value) {
            $sel = isset($selected[$id]) && $this->normalizedText((string)$selected[$id]) === $this->normalizedText((string)$value) ? ' selected' : '';
            $filterFields .= '<option value="' . $this->h($value) . '"' . $sel . '>' . $this->h($value) . '</option>';
         }
         $filterFields .= '</select></label>';
      }
      $advancedFilters = '';
      if ($filterFields !== '') {
         $open = $selected !== array() ? ' open' : '';
         $advancedFilters .= '<details class="dbx-shop-filter-advanced"' . $open . '>';
         $advancedFilters .= '<summary><i class="bi bi-sliders"></i> Filter verfeinern</summary>';
         $advancedFilters .= '<div class="dbx-shop-filter-row">' . $filterFields . '</div>';
         $advancedFilters .= '</details>';
      }
 
      $form = dbx()->get_system_obj('dbxForm');
      $form->init('shop-catalog-filter-form', 'shop-catalog-filter-form');
      $form->set_editor_class_file(__FILE__);
      $form->_action = '?dbx_modul=dbxShop&dbx_run1=catalog';
      $form->_data = array('q' => $query);
      $form->_msg_info = '';
      $form->_msg_success = '';
      $form->_msg_error = '';
      $form->_msg_warning = '';
      $form->add_rep('frame_skip_form_wrap', '1');
      $form->add_rep('frame_form_open', '<form action="?dbx_modul=dbxShop&amp;dbx_run1=catalog" method="get" class="dbx-shop-filter">');
      $form->add_rep('frame_form_close', '</form>');
      $form->add_rep('search_field', $searchField);
      $form->add_rep('advanced_filters', $advancedFilters);
      $form->add_rep('group_hidden', $groupId > 0 ? '<input type="hidden" name="group" value="' . $groupId . '">' : '');
      return $form->run();
   }
 
   private function productTemplateData(array $product, string $channel): array {
      $sku = (string)($product['sku'] ?? '');
      return array(
         'sku' => $this->h($sku),
         'title' => $this->h($product['title'] ?? ''),
         'summary' => $this->h($product['summary'] ?? ''),
         'description' => $this->h($product['description'] ?? $product['summary'] ?? ''),
         'groups' => $this->groupsHtml($product),
         'channels' => '',
         'attributes' => $this->attributesInlineHtml($product, 4),
         'attributes_table' => $this->attributesTableHtml($product),
         'gallery' => $this->productGallery($product),
         'visual' => $this->productVisual($product),
         'price' => $this->money($product['price_gross'] ?? 0),
         'tax_shipping' => $this->taxShippingHtml($product),
         'shipping_info' => $this->shippingInfoHtml($product),
         'stock_info' => $this->stockInfoHtml($product),
         'buy_form' => $this->buyFormHtml($product),
         'detail_url' => '?dbx_modul=dbxShop&amp;dbx_run1=product&amp;sku=' . rawurlencode($sku),
         'catalog_url' => '?dbx_modul=dbxShop&amp;dbx_run1=catalog',
         'cart_url' => '?dbx_modul=dbxShop&amp;dbx_run1=cart&amp;sku=' . rawurlencode($sku),
         'card_class' => $this->h($this->cssTemplateClass((string)$this->groupSetting($product, 'card_template', 'product-card-default'))),
         'detail_class' => $this->h($this->cssTemplateClass((string)$this->groupSetting($product, 'detail_template', 'product-detail-default'))),
      );
   }
 
   private function cssTemplateClass(string $template): string {
      $template = preg_replace('~[^a-z0-9_-]+~i', '-', trim($template));
      return $template !== '' ? 'is-template-' . strtolower($template) : '';
   }
 
   private function renderProductCard(array $product, string $channel): string {
      $template = $this->templateName((string)$this->groupSetting($product, 'card_template', 'product-card-default'), 'product-card-default', 'product-card-');
      if (!$this->shopTemplateExists($template)) {
         $template = 'product-card-default';
      }
      return $this->tpl()->get_tpl('dbxShop|' . $template, $this->productTemplateData($product, $channel));
   }
 
   private function catalogReportHtml(array $products, string $channel, string $query, array $attributeFilters, int $groupId): string {
      $report = dbx()->get_system_obj('dbxReport');
      $report->init('shop-catalog-report', 'dbxShop|shop-catalog-report');
      $report->set_editor_class_file(__FILE__);
      $report->_mode = 'tpl';
      $report->_pages = true;
      $report->_create_row_select = false;
      $report->_create_row_edit = false;
      $report->_create_row_delete = false;
      $report->_but_pagination = 7;
      $rowsPerPage = max(6, min(48, (int)$report->get_fld_val('dbx_rrows', 12, 'int')));
      $position = max(0, (int)$report->get_fld_val('dbx_rpos', 0, 'int'));
      $filteredCount = count($products);
      if ($position >= $filteredCount && $filteredCount > 0) {
         $position = max(0, (int)(floor(($filteredCount - 1) / $rowsPerPage) * $rowsPerPage));
      }
      $visible = array_slice($products, $position, $rowsPerPage);
      $rows = array();
      foreach ($visible as $product) {
         $rows[] = array(
            'id' => (int)($product['id'] ?? 0),
            'card' => $this->renderProductCard($product, $channel),
         );
      }
 
      $queryParts = array(
         'dbx_modul' => 'dbxShop',
         'dbx_run1' => 'catalog',
      );
      if ($query !== '') {
         $queryParts['q'] = $query;
      }
      if ($groupId > 0) {
         $queryParts['group'] = $groupId;
      }
      foreach ($attributeFilters as $id => $value) {
         $queryParts['attr[' . (int)$id . ']'] = (string)$value;
      }
      $report->_action = '?' . http_build_query($queryParts, '', '&');
      $report->_rflds = array('card' => 'Artikel');
      $report->_rpt_format = array('card' => 'html');
      $report->_rrows = $rowsPerPage;
      $report->_rpos = $position;
      $report->_count_all = $filteredCount;
      $report->_rcount = $filteredCount;
      $report->_rdata = $rows;
      return $report->run();
   }
 
   private function renderProductDetail(array $product, string $channel): string {
      $template = $this->templateName((string)$this->groupSetting($product, 'detail_template', 'product-detail-default'), 'product-detail-default', 'product-detail-');
      if (!$this->shopTemplateExists($template)) {
         $template = 'product-detail-default';
      }
      $data = $this->productTemplateData($product, $channel);
      $data['attributes'] = $data['attributes_table'];
      return $this->tpl()->get_tpl('dbxShop|' . $template, $data);
   }
 
   private function taxShippingHtml(array $product): string {
      $tax = $this->h(number_format((float)($product['effective_tax_rate'] ?? 0), 2, ',', '.'));
      $shipping = (float)($product['effective_shipping_gross'] ?? 0);
      $shippingText = $shipping > 0 ? $this->money($shipping) . ' Versand' : 'versandfrei';
      $showTax = $this->settingsBool($this->shopConfig(), 'tax_display_enabled', true);
      $parts = array();
      if ($showTax) {
         $parts[] = $tax . '% MwSt.';
      }
      $parts[] = $this->h($shippingText);
      return '<small>' . implode(', ', $parts) . '</small>';
   }
 
   private function shippingInfoHtml(array $product): string {
      $deliveryTime = trim((string)($product['effective_delivery_time'] ?? ''));
      $shippingWay = trim((string)($product['effective_shipping_way'] ?? ''));
      $shipping = (float)($product['effective_shipping_gross'] ?? 0);
      $shippingText = $shipping > 0 ? $this->money($shipping) : 'versandfrei';
      $rows = '';
 
      if ($deliveryTime !== '') {
         $rows .= '<div class="dbx-shop-shipping-info-row"><i class="bi bi-clock"></i><span>Lieferzeit: ' . $this->h($deliveryTime) . '</span></div>';
      }
      if ($shippingWay !== '') {
         $rows .= '<div class="dbx-shop-shipping-info-row"><i class="bi bi-truck"></i><span>Versandweg: ' . $this->h($shippingWay) . '</span></div>';
      }
      $rows .= '<div class="dbx-shop-shipping-info-row"><i class="bi bi-box-seam"></i><span>Versandkosten: ' . $this->h($shippingText) . '</span></div>';
 
      return '<div class="dbx-shop-shipping-info">' . $rows . '</div>';
   }
 
   private function stockInfoHtml(array $product): string {
      $cfg = $this->shopConfig();
      if (!$this->settingsBool($cfg, 'stock_enabled', false) || (string)($product['product_type'] ?? '') !== 'physical') {
         return '';
      }
      $stock = (int)($product['stock'] ?? 0);
      if ($stock <= 0) {
         return '<div class="alert alert-warning py-2 mb-2"><i class="bi bi-exclamation-triangle"></i> Aktuell nicht auf Lager.</div>';
      }
      if ($stock <= 3) {
         return '<div class="alert alert-info py-2 mb-2"><i class="bi bi-box-seam"></i> Nur noch ' . $stock . ' verfuegbar.</div>';
      }
      return '<div class="dbx-shop-shipping-info-row"><i class="bi bi-box-seam"></i><span>Lagerbestand: verfuegbar</span></div>';
   }
 
   private function buyFormHtml(array $product): string {
      $sku = (string)($product['sku'] ?? '');
      if ($sku === '') {
         return '';
      }
      $cfg = $this->shopConfig();
      if ($this->settingsBool($cfg, 'stock_enabled', false) && (string)($product['product_type'] ?? '') === 'physical' && (int)($product['stock'] ?? 0) <= 0) {
         return '<a class="btn btn-outline-secondary" href="?dbx_modul=dbxShop&amp;dbx_run1=catalog"><i class="bi bi-arrow-left"></i> Zurueck zum Katalog</a>';
      }
      $form = dbx()->get_system_obj('dbxForm');
      $form->init('shop-buy-' . preg_replace('~[^a-z0-9_-]+~i', '-', strtolower($sku)), 'shop-buy-form');
      $form->set_editor_class_file(__FILE__);
      $form->_action = '?dbx_modul=dbxShop&dbx_run1=cart&sku=' . rawurlencode($sku);
      $form->_data = array('qty' => 1);
      $form->_msg_info = '';
      $form->_msg_success = '';
      $form->_msg_error = '';
      $form->_msg_warning = '';
      $form->add_rep('frame_skip_form_wrap', '1');
      $form->add_rep('frame_form_open', '<form action="' . $this->h($form->_action) . '" method="post" id="dbx_shop_buy_' . $this->h($sku) . '" class="dbx-shop-buy-form">');
      $form->add_rep('frame_form_close', '</form>');
      $form->add_rep('catalog_url', '?dbx_modul=dbxShop&amp;dbx_run1=catalog');
      $form->add_fld('qty', 'dbxShop|shop-field-qty', label: 'Anzahl', rules: 'int|min=1');
      return $form->run();
   }
 
   private function startSession(): void {
      if (session_status() === PHP_SESSION_NONE && !headers_sent()) {
         session_start();
      }
      if (!isset($_SESSION['dbxShop_cart']) || !is_array($_SESSION['dbxShop_cart'])) {
         $_SESSION['dbxShop_cart'] = array();
      }
   }
 
   private function cartItems(): array {
      $this->startSession();
      return $_SESSION['dbxShop_cart'];
   }
 
   private function requestedQuantity($value, int $fallback = 1): int {
      $qty = (int)$value;
      return max(1, min(999, $qty > 0 ? $qty : $fallback));
   }
 
   private function addToCart(string $sku, int $qty = 1): void {
      if ($sku === '') {
         return;
      }
      $product = $this->repo()->productBySku($sku);
      if (!$product) {
         return;
      }
      $this->startSession();
      $_SESSION['dbxShop_cart'][$sku] = max(0, (int)($_SESSION['dbxShop_cart'][$sku] ?? 0)) + $this->requestedQuantity($qty);
   }
 
   private function updateCartQuantities(array $quantities): void {
      $this->startSession();
      foreach ($quantities as $sku => $qty) {
         $sku = (string)$sku;
         if (!isset($_SESSION['dbxShop_cart'][$sku])) {
            continue;
         }
         $_SESSION['dbxShop_cart'][$sku] = $this->requestedQuantity($qty);
      }
   }
 
   private function removeFromCart(string $sku): void {
      $sku = trim($sku);
      if ($sku === '') {
         return;
      }
      $this->startSession();
      unset($_SESSION['dbxShop_cart'][$sku]);
   }
 
   private function addedToCartDialog(array $product): string {
      $title = trim((string)($product['title'] ?? 'Artikel'));
      $qty = $this->requestedQuantity(dbx()->get_modul_var('qty', '1', 'parameter'));
      $body = '<div class="dbx-shop-added-dialog" role="dialog" aria-modal="true" aria-labelledby="dbx-shop-added-title">';
      $body .= '<div class="dbx-shop-added-dialog-backdrop"></div>';
      $body .= '<div class="dbx-shop-added-dialog-box">';
      $body .= '<div class="dbx-shop-added-dialog-icon"><i class="bi bi-check2"></i></div>';
      $body .= '<h3 id="dbx-shop-added-title">Artikel wurde in den Warenkorb gelegt</h3>';
      $body .= '<p>' . $this->h($title) . ' <span class="dbx-shop-added-qty">x ' . (int)$qty . '</span></p>';
      $body .= '<div class="dbx-shop-added-dialog-actions">';
      $body .= '<a class="btn btn-outline-primary" href="?dbx_modul=dbxShop&amp;dbx_run1=cart"><i class="bi bi-cart"></i> Warenkorb</a>';
      $body .= '<a class="btn btn-primary" href="?dbx_modul=dbxShop&amp;dbx_run1=checkout"><i class="bi bi-credit-card"></i> Kasse</a>';
      $body .= '<a class="btn btn-outline-secondary" href="?dbx_modul=dbxShop&amp;dbx_run1=catalog"><i class="bi bi-grid"></i> Weiter einkaufen</a>';
      $body .= '</div>';
      $body .= '</div>';
      $body .= '</div>';
      return $body;
   }
 
   private function cartRowsAndSum(bool $editable = false): array {
      $rows = '';
      $sum = 0.0;
      foreach ($this->cartItems() as $sku => $qty) {
         $product = $this->repo()->productBySku((string)$sku);
         if (!$product) {
            continue;
         }
         $qty = max(1, (int)$qty);
         $price = (float)($product['price_gross'] ?? 0);
         $shipping = (float)($product['effective_shipping_gross'] ?? 0);
         $line = ($price + $shipping) * $qty;
         $sum += $line;
         $qtyHtml = $editable
            ? '<input class="form-control form-control-sm dbx-shop-cart-qty" type="number" min="1" max="999" step="1" name="qty[' . $this->h($sku) . ']" value="' . (int)$qty . '">'
            : (string)(int)$qty;
         $rows .= '<tr>';
         $rows .= '<td><strong>' . $this->h($product['title'] ?? '') . '</strong><br><small>' . $this->h($sku) . '</small></td>';
         $rows .= '<td class="text-end">' . $qtyHtml . '</td>';
         $rows .= '<td class="text-end">' . $this->money($price) . '</td>';
         $rows .= '<td class="text-end">' . $this->money($shipping) . '</td>';
         $rows .= '<td class="text-end">' . $this->money($line) . '</td>';
         $rows .= '</tr>';
      }
      return array($rows, $sum);
   }
 
   private function cartReportDataAndSum(): array {
      $rows = array();
      $sum = 0.0;
      foreach ($this->cartItems() as $sku => $qty) {
         $product = $this->repo()->productBySku((string)$sku);
         if (!$product) {
            continue;
         }
         $qty = max(1, (int)$qty);
         $price = (float)($product['price_gross'] ?? 0);
         $shipping = (float)($product['effective_shipping_gross'] ?? 0);
         $line = ($price + $shipping) * $qty;
         $sum += $line;
         $skuText = (string)$sku;
         $rows[] = array(
            'id' => $skuText,
            'remove' => '<a class="btn btn-sm btn-outline-danger dbxAjax dbxConfirm dbx-shop-cart-remove" href="?dbx_modul=dbxShop&amp;dbx_run1=cart&amp;remove=' . rawurlencode($skuText) . '" data-confirm-title="<i class=\'bi bi-trash\'></i> Artikel entfernen" data-confirm="Diesen Artikel aus dem Warenkorb entfernen?" data-confirm-hint="<small>Die Position wird aus dem Warenkorb geloescht.</small>" data-confirm-buttons="yesno" title="Artikel entfernen"><i class="bi bi-trash"></i></a>',
            'article' => '<strong>' . $this->h($product['title'] ?? '') . '</strong><br><small>' . $this->h($skuText) . '</small>',
            'qty' => '<input class="form-control form-control-sm dbx-shop-cart-qty" type="number" min="1" max="999" step="1" name="qty[' . $this->h($skuText) . ']" value="' . (int)$qty . '">',
            'price' => '<span class="dbx-shop-money">' . $this->money($price) . '</span>',
            'shipping' => '<span class="dbx-shop-money">' . $this->money($shipping) . '</span>',
            'line' => '<span class="dbx-shop-money"><strong>' . $this->money($line) . '</strong></span>',
         );
      }
      return array($rows, $sum);
   }
 
   private function cartReportHtml(array $rows, float $sum): string {
      $report = dbx()->get_system_obj('dbxReport');
      $report->init('shop-cart-report', 'dbxShop|shop-cart-report');
      $report->set_editor_class_file(__FILE__);
      $report->_action = '?dbx_modul=dbxShop&dbx_run1=cart';
      $report->_mode = 'table';
      $report->_pages = false;
      $report->_rdata = $rows;
      $report->_rcount = count($rows);
      $report->_count_all = count($rows);
      $report->_rrows = max(1, count($rows));
      $report->_rpos = 0;
      $report->_create_row_select = false;
      $report->_create_row_edit = false;
      $report->_create_row_delete = false;
      $report->_rflds = array(
         'remove' => 'Aktion',
         'article' => 'Artikel',
         'qty' => 'Menge',
         'price' => 'Preis',
         'shipping' => 'Versand',
         'line' => 'Summe',
      );
      $report->_rpt_format = array(
         'remove' => 'html',
         'article' => 'html',
         'qty' => 'html',
         'price' => 'html',
         'shipping' => 'html',
         'line' => 'html',
      );
      $report->add_rep('cart_sum', $this->money($sum));
      return $report->run();
   }
 
   private function cartBodyHtml(): string {
      [$reportRows, $sum] = $this->cartReportDataAndSum();
 
      if ($reportRows === array()) {
         return $this->placeholder('Der Warenkorb ist leer', 'Waehlen Sie im Katalog einen Artikel und legen Sie ihn in den Warenkorb.');
      }
 
      return $this->cartReportHtml($reportRows, $sum);
   }
 
   private function absoluteShopUrl(string $run, array $params = array()): string {
      $query = array_merge(array(
         'dbx_modul' => 'dbxShop',
         'dbx_run1' => $run,
      ), $params);
      return dbx()->get_base_url() . '?' . http_build_query($query, '', '&');
   }
 
   private function checkoutPaymentOptions(): array {
      $cfg = $this->shopConfig();
      $options = array();
      if ($this->settingsBool($cfg, 'payment_bank_transfer_enabled', true)) {
         $options['bank_transfer'] = 'Vorkasse / Ueberweisung';
      }
      if ($this->settingsBool($cfg, 'payment_invoice_enabled', false)) {
         $options['invoice'] = 'Rechnung';
      }
      if ($this->settingsBool($cfg, 'payment_paypal_enabled', false) && $this->paypal()->isConfigured()) {
         $options['paypal'] = 'PayPal';
      }
      if ($this->settingsBool($cfg, 'payment_amazon_pay_enabled', false) && $this->amazonPay()->isConfigured()) {
         $options['amazon_pay'] = 'Amazon Pay';
      }
      return $options;
   }
 
   private function paymentMethodLabels(): array {
      return array(
         'bank_transfer' => 'Vorkasse / Ueberweisung',
         'invoice' => 'Rechnung',
         'paypal' => 'PayPal',
         'amazon_pay' => 'Amazon Pay',
      );
   }
 
   private function paymentProviderLabel(string $provider): string {
      $labels = $this->paymentMethodLabels();
      $channelLabels = array(
         'shop' => 'Shop',
         'amazon' => 'Amazon Channel',
         'ebay' => 'eBay Channel',
         'kleinanzeigen' => 'Kleinanzeigen Channel',
         'mobile' => 'mobile.de Channel',
      );
      return $labels[$provider] ?? $channelLabels[$provider] ?? $provider;
   }
 
   private function paymentInstructions(string $method, array $order = array()): string {
      $cfg = $this->shopConfig();
      if ($method === 'bank_transfer') {
         $lines = array();
         $intro = trim((string)($cfg['payment_bank_transfer_instructions'] ?? ''));
         if ($intro === '') {
            $intro = 'Bitte ueberweisen Sie den Rechnungsbetrag unter Angabe der Bestellnummer.';
         }
         $lines[] = $intro;
         foreach (array(
            'Kontoinhaber' => 'payment_bank_transfer_account_owner',
            'IBAN' => 'payment_bank_transfer_iban',
            'BIC' => 'payment_bank_transfer_bic',
            'Bank' => 'payment_bank_transfer_bank_name',
         ) as $label => $key) {
            $value = trim((string)($cfg[$key] ?? ''));
            if ($value !== '') {
               $lines[] = $label . ': ' . $value;
            }
         }
         if (trim((string)($order['order_no'] ?? '')) !== '') {
            $lines[] = 'Verwendungszweck: ' . (string)$order['order_no'];
         }
         return implode("\n", $lines);
      }
      if ($method === 'invoice') {
         $text = trim((string)($cfg['payment_invoice_instructions'] ?? ''));
         return $text !== '' ? $text : 'Sie erhalten eine Rechnung. Bitte zahlen Sie innerhalb der angegebenen Frist.';
      }
      if ($method === 'amazon_pay') {
         return 'Die Zahlung wird ueber Amazon Pay autorisiert und nach erfolgreicher Rueckmeldung automatisch aktualisiert.';
      }
      if ($method === 'paypal') {
         return 'Die Zahlung wird ueber PayPal autorisiert und nach erfolgreicher Rueckmeldung automatisch aktualisiert.';
      }
      return '';
   }
 
   private function checkoutPaymentHelp(array $options): string {
      if ($options === array()) {
         return '<div class="alert alert-warning mb-0">Aktuell ist keine Zahlungsart aktiv oder vollstaendig konfiguriert.</div>';
      }
      $parts = array();
      if (isset($options['bank_transfer'])) {
         $parts[] = '<div><strong>Vorkasse / Ueberweisung</strong><span>Die Bestellung wird gespeichert. Der Kunde ueberweist danach mit Bestellnummer als Verwendungszweck.</span></div>';
      }
      if (isset($options['invoice'])) {
         $parts[] = '<div><strong>Rechnung</strong><span>Die Bestellung wird gespeichert und spaeter per Rechnung bezahlt.</span></div>';
      }
      if (isset($options['paypal'])) {
         $parts[] = '<div><strong>PayPal</strong><span>Sie werden zu PayPal weitergeleitet. Nach der Freigabe wird die Zahlung automatisch bestaetigt.</span></div>';
      }
      if (isset($options['amazon_pay'])) {
         $parts[] = '<div><strong>Amazon Pay</strong><span>Sie werden zu Amazon Pay weitergeleitet. Sandbox und Live laufen ueber die in den Shop-Einstellungen gespeicherten Zugangsdaten.</span></div>';
      }
      return '<div class="dbx-shop-payment-method-help">' . implode('', $parts) . '</div>';
   }
 
   private function checkoutTableHtml(string $rows, float $sum): string {
      return '<div class="dbx-shop-cart table-responsive">'
         . '<table class="table table-sm align-middle">'
         . '<thead><tr><th>Artikel</th><th class="text-end">Menge</th><th class="text-end">Preis</th><th class="text-end">Versand</th><th class="text-end">Summe</th></tr></thead>'
         . '<tbody>' . $rows . '</tbody>'
         . '<tfoot><tr><th colspan="4" class="text-end">Zahlbetrag</th><th class="text-end">' . $this->money($sum) . '</th></tr></tfoot>'
         . '</table></div>';
   }
 
   private function legalSnapshotsForOrder(): array {
      $cfg = $this->shopConfig();
      if (!$this->settingsBool($cfg, 'legal_snapshot_enabled', true)) {
         return array('', '');
      }
      $db = $this->contentDb();
      if (!is_object($db)) {
         return array('', '');
      }
      $pages = $this->ensureShopLegalPages();
      $dd = \dbx\dbxContent\dbxContentLng::ddContent();
      $snapshot = function(string $key) use ($db, $pages, $dd): string {
         $cid = (int)($pages[$key] ?? 0);
         if ($cid <= 0) {
            return '';
         }
         $row = $db->select1($dd, $cid, 'title,permalink,content,update_date', 0);
         if (!is_array($row)) {
            return '';
         }
         return json_encode(array(
            'captured_at' => date('Y-m-d H:i:s'),
            'title' => (string)($row['title'] ?? ''),
            'permalink' => (string)($row['permalink'] ?? ''),
            'update_date' => (string)($row['update_date'] ?? ''),
            'content' => (string)($row['content'] ?? ''),
         ), JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) ?: '';
      };
      return array($snapshot('legal'), $snapshot('withdrawal'));
   }
 
   private function orderSuccessPage(array $order, string $paymentMethod): string {
      $this->startSession();
      $_SESSION['dbxShop_last_order_no'] = (string)($order['order_no'] ?? '');
      $methodLabels = $this->paymentMethodLabels();
      $instructions = trim($this->paymentInstructions($paymentMethod, $order));
      $body = '<section class="dbx-shop-order-success">'
         . '<div class="dbx-shop-order-success-icon"><i class="bi bi-check2-circle"></i></div>'
         . '<h2>Bestellung gespeichert</h2>'
         . '<p>Ihre Bestellnummer lautet <strong>' . $this->h($order['order_no'] ?? '') . '</strong>.</p>'
         . '<dl>'
         . '<dt>Zahlungsart</dt><dd>' . $this->h($methodLabels[$paymentMethod] ?? $paymentMethod) . '</dd>'
         . '<dt>Status</dt><dd>Die Bestellung ist im Shop-Admin sichtbar und wartet auf Bearbeitung.</dd>'
         . '<dt>Summe</dt><dd>' . $this->money($order['total_gross'] ?? 0) . '</dd>'
         . '</dl>'
         . ($instructions !== '' ? '<div class="alert alert-info text-start"><strong>Zahlungshinweis</strong><br>' . nl2br($this->h($instructions)) . '</div>' : '')
         . '<div class="dbx-shop-order-success-actions">'
         . '<a class="btn btn-primary" href="?dbx_modul=dbxShop&amp;dbx_run1=orders"><i class="bi bi-receipt"></i> Bestellungen ansehen</a>'
         . '<a class="btn btn-outline-secondary" href="?dbx_modul=dbxShop&amp;dbx_run1=catalog"><i class="bi bi-grid"></i> Weiter einkaufen</a>'
         . '</div>'
         . '</section>';
      return $this->page('Danke', 'Die Bestellung wurde als Snapshot gespeichert.', $body, 'orders');
   }
 
   private function shopMailFrom(array $cfg) {
      $from = trim((string)($cfg['mail_from'] ?? ''));
      if ($from === '') {
         $from = 'shop@dbxapp.de';
      }
      return array('email' => $from, 'name' => 'dbxShop');
   }
 
   private function orderMailHtml(array $order, string $title): string {
      $items = '';
      foreach ((array)($order['items'] ?? array()) as $item) {
         $items .= '<li>' . (int)($item['qty'] ?? 0) . 'x ' . $this->h($item['title'] ?? '') . ' - ' . $this->money($item['total_gross'] ?? 0) . '</li>';
      }
      $provider = (string)($order['payment_provider'] ?? '');
      $instructions = trim($this->paymentInstructions($provider, $order));
      return '<h1>' . $this->h($title) . '</h1>'
         . '<p>Bestellnummer: <strong>' . $this->h($order['order_no'] ?? '') . '</strong></p>'
         . '<ul>' . $items . '</ul>'
         . '<p>Summe: <strong>' . $this->money($order['total_gross'] ?? 0) . '</strong></p>'
         . '<p>Status: ' . $this->h($order['status'] ?? '') . ', Zahlung: ' . $this->h($this->paymentProviderLabel($provider)) . ' / ' . $this->h($order['payment_status'] ?? '') . '</p>'
         . ($instructions !== '' ? '<p><strong>Zahlungshinweis</strong><br>' . nl2br($this->h($instructions)) . '</p>' : '');
   }
 
   private function sendOrderMails(array $order): void {
      $cfg = $this->shopConfig();
      $from = $this->shopMailFrom($cfg);
      $subject = 'Bestellung ' . (string)($order['order_no'] ?? '');
      try {
         if ($this->settingsBool($cfg, 'mail_customer_enabled', false)) {
            $to = trim((string)($order['customer_email'] ?? ''));
            if ($to !== '') {
               dbx()->send_mail($from, $to, $subject, $this->orderMailHtml($order, 'Ihre Bestellung'), 'html');
            }
         }
         if ($this->settingsBool($cfg, 'mail_admin_enabled', false)) {
            $to = trim((string)($cfg['mail_admin_to'] ?? ''));
            if ($to !== '') {
               dbx()->send_mail($from, $to, '[Shop] ' . $subject, $this->orderMailHtml($order, 'Neue Shop-Bestellung'), 'html');
            }
         }
      } catch (\Throwable $e) {
         dbx()->sys_msg('error', 'dbxShop', (string)($order['id'] ?? ''), 'order mail failed', $e->getMessage());
      }
   }
 
   private function sendWithdrawalMails(array $withdrawal): void {
      $cfg = $this->shopConfig();
      $from = $this->shopMailFrom($cfg);
      $subject = 'Widerruf ' . (string)($withdrawal['order_no'] ?? '');
      $html = '<h1>Widerruf</h1>'
         . '<p>Bestellnummer: <strong>' . $this->h($withdrawal['order_no'] ?? '') . '</strong></p>'
         . '<p>Name: ' . $this->h($withdrawal['customer_name'] ?? '') . '<br>E-Mail: ' . $this->h($withdrawal['customer_email'] ?? '') . '</p>'
         . '<p>' . nl2br($this->h($withdrawal['reason'] ?? '')) . '</p>';
      try {
         if ($this->settingsBool($cfg, 'mail_customer_enabled', false)) {
            $to = trim((string)($withdrawal['customer_email'] ?? ''));
            if ($to !== '') {
               dbx()->send_mail($from, $to, $subject, $html, 'html');
            }
         }
         if ($this->settingsBool($cfg, 'mail_admin_enabled', false)) {
            $to = trim((string)($cfg['mail_admin_to'] ?? ''));
            if ($to !== '') {
               dbx()->send_mail($from, $to, '[Shop] ' . $subject, $html, 'html');
            }
         }
      } catch (\Throwable $e) {
         dbx()->sys_msg('error', 'dbxShop', (string)($withdrawal['id'] ?? ''), 'withdrawal mail failed', $e->getMessage());
      }
   }
 
   private function publicOrderCard(array $order): string {
      $items = '';
      foreach ((array)($order['items'] ?? array()) as $item) {
         $items .= '<li><span>' . (int)($item['qty'] ?? 0) . 'x ' . $this->h($item['title'] ?? '') . '</span><strong>' . $this->money($item['total_gross'] ?? 0) . '</strong></li>';
      }
      if ($items === '') {
         $items = '<li><span>Keine Positionen gespeichert</span><strong></strong></li>';
      }
      $statusLabels = array(
         'new' => 'Neu',
         'payment_pending' => 'Zahlung offen',
         'paid' => 'Bezahlt',
         'processing' => 'In Bearbeitung',
         'shipped' => 'Versendet',
         'done' => 'Abgeschlossen',
         'cancelled' => 'Storniert',
      );
      $shippingLabels = array(
         'open' => 'Offen',
         'ready' => 'Bereit',
         'shipped' => 'Versendet',
         'delivered' => 'Zugestellt',
         'returned' => 'Retoure',
      );
      $withdrawalLabels = array(
         'new' => 'Neu',
         'processing' => 'In Bearbeitung',
         'accepted' => 'Angenommen',
         'rejected' => 'Abgelehnt',
         'refunded' => 'Erstattet',
         'closed' => 'Abgeschlossen',
      );
      $historyLabels = array(
         'created' => 'Bestellung',
         'status' => 'Bestellstatus',
         'payment_status' => 'Zahlung',
         'shipping_status' => 'Versand',
         'invoice_no' => 'Rechnung',
         'tracking_no' => 'Tracking',
         'payment' => 'Zahlung',
         'customer_mail' => 'Kundenmail',
         'withdrawal' => 'Widerruf',
         'withdrawal_status' => 'Widerrufsstatus',
         'stock_release' => 'Bestand',
         'invoice_pdf' => 'Rechnung',
      );
      $invoice = trim((string)($order['invoice_no'] ?? ''));
      $trackingNo = trim((string)($order['tracking_no'] ?? ''));
      $trackingUrl = trim((string)($order['tracking_url'] ?? ''));
      $channel = (string)($order['channel_key'] ?? 'shop');
      $extra = '';
      $extra .= '<span>Herkunft: ' . $this->h($this->paymentProviderLabel($channel)) . '</span>';
      if ($invoice !== '') {
         $extra .= '<span>Rechnung: ' . $this->h($invoice) . '</span>';
      }
      $extra .= '<span>Versand: ' . $this->h($shippingLabels[(string)($order['shipping_status'] ?? 'open')] ?? (string)($order['shipping_status'] ?? 'open')) . '</span>';
      if ($trackingNo !== '') {
         $trackingText = 'Tracking: ' . $this->h($trackingNo);
         $extra .= $trackingUrl !== ''
            ? '<span><a href="' . $this->h($trackingUrl) . '" target="_blank" rel="noopener">' . $trackingText . '</a></span>'
            : '<span>' . $trackingText . '</span>';
      }
      $withdrawalsHtml = '';
      foreach ((array)($order['withdrawals'] ?? array()) as $withdrawal) {
         $status = (string)($withdrawal['status'] ?? 'new');
         $created = trim((string)($withdrawal['create_date'] ?? ''));
         $withdrawalsHtml .= '<li><span><strong>' . $this->h($withdrawalLabels[$status] ?? $status) . '</strong>' . ($created !== '' ? '<small>' . $this->h($created) . '</small>' : '') . '</span></li>';
      }
      if ($withdrawalsHtml !== '') {
         $withdrawalsHtml = '<section class="dbx-shop-public-order-withdrawals"><h4><i class="bi bi-arrow-counterclockwise"></i> Widerrufe</h4><ul>' . $withdrawalsHtml . '</ul></section>';
      }
      $historyHtml = '';
      $historyCount = 0;
      foreach ((array)($order['history'] ?? array()) as $history) {
         if ($historyCount >= 6) {
            break;
         }
         $type = (string)($history['event_type'] ?? '');
         $created = trim((string)($history['create_date'] ?? ''));
         $message = trim((string)($history['message'] ?? ''));
         $old = trim((string)($history['old_value'] ?? ''));
         $new = trim((string)($history['new_value'] ?? ''));
         $detail = $message !== '' ? $message : trim($old . ($old !== '' && $new !== '' ? ' -> ' : '') . $new);
         $historyHtml .= '<li><span><strong>' . $this->h($historyLabels[$type] ?? $type) . '</strong>' . ($detail !== '' ? '<small>' . $this->h($detail) . '</small>' : '') . '</span>' . ($created !== '' ? '<time>' . $this->h($created) . '</time>' : '') . '</li>';
         $historyCount++;
      }
      if ($historyHtml !== '') {
         $historyHtml = '<section class="dbx-shop-public-order-history"><h4><i class="bi bi-clock-history"></i> Verlauf</h4><ol>' . $historyHtml . '</ol></section>';
      }
      $instructions = trim($this->paymentInstructions((string)($order['payment_provider'] ?? ''), $order));
      $invoiceLink = '';
      $canInvoice = $invoice !== '' || in_array((string)($order['status'] ?? ''), array('paid', 'processing', 'shipped', 'done'), true);
      if ($canInvoice) {
         $invoiceLink = '<a class="btn btn-outline-primary btn-sm" href="?dbx_modul=dbxShop&amp;dbx_run1=invoice_pdf&amp;order_no=' . rawurlencode((string)($order['order_no'] ?? '')) . '" target="_blank" rel="noopener"><i class="bi bi-file-earmark-pdf"></i> Rechnung</a>';
      }
      return '<article class="dbx-shop-public-order">'
         . '<header><div><strong>' . $this->h($order['order_no'] ?? '') . '</strong><small>' . $this->h($order['create_date'] ?? '') . '</small></div><span class="badge text-bg-primary">' . $this->h($statusLabels[(string)($order['status'] ?? '')] ?? ($order['status'] ?? '')) . '</span></header>'
         . '<ul>' . $items . '</ul>'
         . '<footer><span>Zahlung: ' . $this->h($this->paymentProviderLabel((string)($order['payment_provider'] ?? ''))) . ' / ' . $this->h($order['payment_status'] ?? '') . '</span><strong>' . $this->money($order['total_gross'] ?? 0) . '</strong></footer>'
         . ($extra !== '' ? '<div class="dbx-shop-public-order-extra">' . $extra . '</div>' : '')
         . ($instructions !== '' && in_array((string)($order['payment_status'] ?? ''), array('open', 'created', 'pending'), true) ? '<div class="alert alert-info py-2 my-2"><strong>Zahlungshinweis</strong><br>' . nl2br($this->h($instructions)) . '</div>' : '')
         . $withdrawalsHtml
         . $historyHtml
         . '<div class="dbx-shop-public-order-actions">' . $invoiceLink . '<a class="btn btn-outline-secondary btn-sm" href="?dbx_modul=dbxShop&amp;dbx_run1=withdrawal"><i class="bi bi-arrow-counterclockwise"></i> Widerruf</a></div>'
         . '</article>';
   }
 
   private function startPayPalForOrder(array $order): string {
      $returnUrl = $this->absoluteShopUrl('paypal_return', array('order_no' => (string)$order['order_no']));
      $cancelUrl = $this->absoluteShopUrl('paypal_cancel', array('order_no' => (string)$order['order_no']));
      $paypalOrder = $this->paypal()->createOrder($order, $returnUrl, $cancelUrl);
      $paypalId = (string)($paypalOrder['id'] ?? '');
      $this->repo()->updateOrderPayment((int)$order['id'], 'paypal', 'created', $paypalId, $paypalOrder);
      $approvalUrl = $this->paypal()->approvalUrl($paypalOrder);
      if ($approvalUrl === '') {
         throw new \RuntimeException('PayPal hat keinen Freigabe-Link geliefert.');
      }
      if (!headers_sent()) {
         header('Location: ' . $approvalUrl, true, 302);
         exit;
      }
      return '<a class="btn btn-primary" href="' . $this->h($approvalUrl) . '">Weiter zu PayPal</a>';
   }
 
   private function startAmazonPayForOrder(array $order): string {
      $returnUrl = $this->absoluteShopUrl('amazon_pay_return', array('order_no' => (string)$order['order_no']));
      $cancelUrl = $this->absoluteShopUrl('amazon_pay_cancel', array('order_no' => (string)$order['order_no']));
      $checkoutSession = $this->amazonPay()->createCheckoutSession($order, $returnUrl, $cancelUrl);
      $checkoutSessionId = (string)($checkoutSession['checkoutSessionId'] ?? $checkoutSession['id'] ?? '');
      $this->repo()->updateOrderPayment((int)$order['id'], 'amazon_pay', 'created', $checkoutSessionId, $checkoutSession);
      $redirectUrl = $this->amazonPay()->redirectUrl($checkoutSession);
      if ($redirectUrl === '') {
         throw new \RuntimeException('Amazon Pay hat keinen Redirect-Link geliefert.');
      }
      if (!headers_sent()) {
         header('Location: ' . $redirectUrl, true, 302);
         exit;
      }
      return '<a class="btn btn-primary" href="' . $this->h($redirectUrl) . '">Weiter zu Amazon Pay</a>';
   }
 
   public function catalog(): string {
      $this->ensureSeed();
      $channel = $this->activeChannel();
      $query = trim((string)($_GET['q'] ?? ''));
      $groupId = $this->catalogGroupId();
      $attributeFilters = $this->selectedAttributeFilters();
      $matches = array();
      $hasQuery = $this->searchTerms($query) !== array();
      $currentGroup = $groupId > 0 ? $this->repo()->groupById($groupId) : null;
      if ($groupId > 0 && !is_array($currentGroup)) {
         $groupId = 0;
      }
 
      foreach ($this->repo()->products(true) as $product) {
         if (!$this->productHasChannel($product, $channel)) {
            continue;
         }
         if (!$this->productInCatalogGroup($product, $groupId)) {
            continue;
         }
         $score = $this->productSearchScore($product, $query);
         if ($score <= 0 || !$this->productMatchesAttributeFilters($product, $attributeFilters)) {
            continue;
         }
 
         $sku = (string)($product['sku'] ?? '');
         if ($sku === '') {
            continue;
         }
         $matches[] = array(
            'product' => $product,
            'score' => $score,
            'sorter' => (int)($product['sorter'] ?? 100),
            'title' => (string)($product['title'] ?? ''),
         );
      }
 
      if ($hasQuery && count($matches) > 1) {
         usort($matches, static function(array $a, array $b): int {
            if ($a['score'] !== $b['score']) {
               return $b['score'] <=> $a['score'];
            }
            if ($a['sorter'] !== $b['sorter']) {
               return $a['sorter'] <=> $b['sorter'];
            }
            return strcasecmp($a['title'], $b['title']);
         });
      }
 
      $products = array_map(static fn($match) => $match['product'], $matches);
      $reportHtml = $products === array()
         ? $this->placeholder('Keine Artikel gefunden', 'Fuer Ihre Suche wurden aktuell keine aktiven Shop-Artikel gefunden.')
         : $this->catalogReportHtml($products, $channel, $query, $attributeFilters, $groupId);
 
      $isPaginationAjax = (int)dbx()->get_system_var('dbx_ajax', 0, 'int') === 1
         && (array_key_exists('dbx_rpos', $_GET) || array_key_exists('dbx_rrows', $_GET));
      if ($isPaginationAjax) {
         return $reportHtml;
      }
 
      $navigation = $this->catalogGroupBreadcrumb($groupId) . $this->catalogGroupNavigation($groupId);
      if ($navigation === '') {
         $navigation = $this->catalogGroupNavigation(0);
      }
      $title = is_array($currentGroup) ? (string)($currentGroup['title'] ?? 'Shop') : 'Shop';
      $subtitle = is_array($currentGroup) ? 'Artikelgruppe und passende Artikel.' : 'Artikel, Merchandise, Dienstleistungen und digitale Pakete.';
 
      return $this->page(
         $title,
         $subtitle,
         $this->demoShopNoticeHtml('dbx-shop-demo-catalog-notice', 'dbx-shop-demo-alert-catalog')
            . $navigation
            . $this->catalogFiltersHtml($channel, $query, $attributeFilters, $groupId)
            . $reportHtml,
         'catalog'
      );
   }
 
   public function product(): string {
      $this->ensureSeed();
      $channel = $this->activeChannel();
      $sku = dbx()->get_modul_var('sku', '', 'parameter');
      $product = $this->repo()->productBySku((string) $sku);
 
      if (!$product || !$this->productHasChannel($product, $channel)) {
         return $this->page(
            'Produkt',
            'Produkt wurde nicht gefunden oder ist fuer diesen Channel nicht aktiv.',
            $this->placeholder('Produkt nicht gefunden', 'Der angeforderte Artikel existiert nicht oder ist fuer den gewaehlten Channel nicht freigegeben.'),
            'catalog'
         );
      }
 
      $body = $this->renderProductDetail($product, $channel);
 
      return $this->page(
         $product['title'] ?? 'Produkt',
         $product['summary'] ?? 'Artikel',
         $body,
         'catalog'
      );
   }
 
   public function cart(): string {
      $this->ensureSeed();
      $channel = $this->activeChannel();
      $ajax = (int)dbx()->get_system_var('dbx_ajax', 0, 'int') === 1;
      $addSku = (string)dbx()->get_modul_var('sku', '', 'parameter');
      $removeSku = (string)dbx()->get_modul_var('remove', '', 'parameter');
      if ((string)dbx()->get_modul_var('clear', '', 'parameter') === '1') {
         $this->startSession();
         $_SESSION['dbxShop_cart'] = array();
      } elseif ($removeSku !== '') {
         $this->removeFromCart($removeSku);
      } elseif (isset($_POST['shop_cart_update']) && is_array($_POST['qty'] ?? null)) {
         $this->updateCartQuantities($_POST['qty']);
      } elseif ($addSku !== '') {
         $qty = $this->requestedQuantity(dbx()->get_modul_var('qty', '1', 'parameter'));
         $this->addToCart($addSku, $qty);
         $product = $this->repo()->productBySku($addSku);
         if ($product) {
            return $this->page(
               'Warenkorb',
               'Der Artikel wurde hinzugefuegt.',
               $this->addedToCartDialog($product),
               'cart'
            );
         }
      }
 
      $body = $this->cartBodyHtml();
      if ($ajax) {
         return $body;
      }
 
      return $this->page(
         'Warenkorb',
         'Artikel, Mengen, MwSt.-Grundlage und Versandkosten.',
         $body,
         'cart'
      );
   }
 
   public function checkout(): string {
      $this->ensureSeed();
      [$rows, $sum] = $this->cartRowsAndSum();
      if ($rows === '') {
         return $this->page(
            'Kasse',
            'Erst Artikel auswaehlen, dann bezahlen.',
            $this->placeholder('Der Warenkorb ist leer', 'Waehlen Sie im Katalog einen Artikel und legen Sie ihn in den Warenkorb.'),
            'checkout'
         );
      }
      $cfg = $this->shopConfig();
      if (!$this->settingsBool($cfg, 'checkout_guest_allowed', true) && (int)dbx()->user() <= 0) {
         return $this->page(
            'Kasse',
            'Anmeldung erforderlich.',
            '<div class="alert alert-warning m-3"><strong>Anmeldung erforderlich.</strong><br>Gastbestellungen sind aktuell deaktiviert. Bitte melden Sie sich an, bevor Sie die Bestellung abschliessen.</div>',
            'checkout'
         );
      }
 
      $paymentOptions = $this->checkoutPaymentOptions();
      $form = dbx()->get_system_obj('dbxForm');
      $form->init('shop-checkout-form', 'shop-checkout-form');
      $form->_fd = 'dbxShop|checkout';
      $form->_action = '?dbx_modul=dbxShop&dbx_run1=checkout';
      $form->_data = array(
         'customer_name' => (string)($_POST['customer_name'] ?? ''),
         'customer_email' => (string)($_POST['customer_email'] ?? ''),
         'customer_phone' => (string)($_POST['customer_phone'] ?? ''),
         'shipping_address' => (string)($_POST['shipping_address'] ?? ''),
         'note' => (string)($_POST['note'] ?? ''),
         'payment_method' => (string)($_POST['payment_method'] ?? array_key_first($paymentOptions)),
         'accept_legal' => !empty($_POST['accept_legal']) ? 1 : 0,
         'accept_withdrawal' => !empty($_POST['accept_withdrawal']) ? 1 : 0,
      );
      $form->_msg_info = 'Bitte Kundendaten, Zahlungsart und Rechtstext-Bestaetigung pruefen.';
      $form->add_flds();
      $form->add_obj('checkout_cart', 'obj-value', $this->checkoutTableHtml($rows, $sum));
      $form->add_rep('payment_help', $this->checkoutPaymentHelp($paymentOptions));
      $form->add_rep('demo_shop_notice', $this->demoShopNoticeHtml('dbx-shop-demo-notice'));
      $form->add_rep('checkout_error', '');
 
      $submitted = ($_SERVER['REQUEST_METHOD'] ?? '') === 'POST' && isset($_POST['shop_checkout_submit']);
      if ($submitted) {
         $form->submit();
         $validLegal = !empty($_POST['accept_legal']) && !empty($_POST['accept_withdrawal']);
         $paymentMethod = (string)($_POST['payment_method'] ?? '');
         $customerName = trim((string)($_POST['customer_name'] ?? ''));
         $customerEmail = trim((string)($_POST['customer_email'] ?? ''));
         $shippingAddress = trim((string)($_POST['shipping_address'] ?? ''));
         $checkoutError = '';
         if ($paymentOptions === array()) {
            $checkoutError = 'Es ist keine Zahlungsart verfuegbar.';
         } elseif ($customerName === '' || strlen($customerName) < 2) {
            $checkoutError = 'Bitte den Namen eintragen.';
         } elseif (!filter_var($customerEmail, FILTER_VALIDATE_EMAIL)) {
            $checkoutError = 'Bitte eine gueltige E-Mail-Adresse eintragen.';
         } elseif ($shippingAddress === '' || strlen($shippingAddress) < 8) {
            $checkoutError = 'Bitte die Lieferadresse eintragen.';
         } elseif (!isset($paymentOptions[$paymentMethod])) {
            $checkoutError = 'Bitte eine verfuegbare Zahlungsart waehlen.';
         } elseif (!$validLegal) {
            $checkoutError = 'Bitte Rechtstexte und Widerrufsbelehrung bestaetigen.';
         }
 
         if ($checkoutError !== '') {
            $form->add_rep('checkout_error', '<div class="alert alert-warning mb-0">' . $this->h($checkoutError) . '</div>');
         } else {
            try {
               [$legalSnapshot, $withdrawalSnapshot] = $this->legalSnapshotsForOrder();
               $order = $this->repo()->createOrderFromItems(
                  $this->cartItems(),
                  $this->activeChannel(),
                  $customerName,
                  $customerEmail,
                  trim((string)($_POST['note'] ?? '')),
                  $paymentMethod,
                  in_array($paymentMethod, array('paypal', 'amazon_pay'), true) ? 'created' : 'open',
                  'payment_pending',
                  trim((string)($_POST['customer_phone'] ?? '')),
                  $shippingAddress,
                  $legalSnapshot,
                  $withdrawalSnapshot
               );
               if (!$order) {
                  $form->add_rep('checkout_error', '<div class="alert alert-danger mb-0">Die Bestellung konnte nicht erstellt werden.</div>');
               } elseif ($paymentMethod === 'paypal') {
                  return $this->startPayPalForOrder($order);
               } elseif ($paymentMethod === 'amazon_pay') {
                  return $this->startAmazonPayForOrder($order);
               } else {
                  $this->sendOrderMails($order);
                  $this->startSession();
                  $_SESSION['dbxShop_cart'] = array();
                  return $this->orderSuccessPage($order, $paymentMethod);
               }
            } catch (\Throwable $e) {
               $form->add_rep('checkout_error', '<div class="alert alert-danger mb-0">' . $this->h($e->getMessage()) . '</div>');
            }
         }
      }
 
      return $this->page(
         'Kasse',
         'Kundendaten pruefen und den Demo-Bestellablauf testen.',
         $form->run(),
         'checkout'
      );
   }
 
   public function paypalStart(): string {
      $this->ensureSeed();
      return $this->checkout();
   }
 
   public function paypalReturn(): string {
      $this->ensureSeed();
      $paypalOrderId = (string)dbx()->get_modul_var('token', '', 'parameter');
      $orderNo = (string)dbx()->get_modul_var('order_no', '', 'parameter');
      $order = $orderNo !== '' ? $this->repo()->orderByNo($orderNo) : null;
      if (!$order && $paypalOrderId !== '') {
         $order = $this->repo()->orderByPaymentReference('paypal', $paypalOrderId);
      }
      if (!$order || $paypalOrderId === '') {
         return $this->page('PayPal', 'Rueckkehr konnte nicht zugeordnet werden.', '<div class="alert alert-danger m-3">Die PayPal-Rueckkehr konnte keiner Bestellung zugeordnet werden.</div>', 'checkout');
      }
 
      try {
         $capture = $this->paypal()->capture($paypalOrderId);
         $this->repo()->updateOrderPayment((int)$order['id'], 'paypal', 'completed', $paypalOrderId, $capture);
         $freshOrder = $this->repo()->orderById((int)$order['id']) ?: $order;
         $this->sendOrderMails($freshOrder);
         $this->startSession();
         $_SESSION['dbxShop_cart'] = array();
         $_SESSION['dbxShop_last_order_no'] = (string)($order['order_no'] ?? '');
         $body = '<div class="alert alert-success m-3"><strong>Zahlung abgeschlossen.</strong><br>Bestellung ' . $this->h($order['order_no'] ?? '') . ' wurde bezahlt.</div>';
         return $this->page('Danke', 'PayPal-Zahlung wurde bestaetigt.', $body, 'orders');
      } catch (\Throwable $e) {
         $this->repo()->updateOrderPayment((int)$order['id'], 'paypal', 'failed', $paypalOrderId, array('error' => $e->getMessage()));
         return $this->page('PayPal', 'Zahlung konnte nicht bestaetigt werden.', '<div class="alert alert-danger m-3">' . $this->h($e->getMessage()) . '</div>', 'checkout');
      }
   }
 
   public function paypalCancel(): string {
      $orderNo = (string)dbx()->get_modul_var('order_no', '', 'parameter');
      $order = $orderNo !== '' ? $this->repo()->orderByNo($orderNo) : null;
      if ($order) {
         $this->repo()->updateOrderPayment((int)$order['id'], 'paypal', 'cancelled', (string)($order['payment_reference'] ?? ''), array('cancelled' => true));
      }
      return $this->page(
         'PayPal abgebrochen',
         'Die Zahlung wurde nicht ausgefuehrt.',
         '<div class="alert alert-info m-3">Die PayPal-Zahlung wurde abgebrochen. Der Warenkorb bleibt erhalten.</div>',
         'checkout'
      );
   }
 
   public function amazonPayReturn(): string {
      $this->ensureSeed();
      $checkoutSessionId = (string)dbx()->get_modul_var('checkoutSessionId', '', 'parameter');
      if ($checkoutSessionId === '') {
         $checkoutSessionId = (string)dbx()->get_modul_var('amazonCheckoutSessionId', '', 'parameter');
      }
      $orderNo = (string)dbx()->get_modul_var('order_no', '', 'parameter');
      $order = $orderNo !== '' ? $this->repo()->orderByNo($orderNo) : null;
      if (!$order && $checkoutSessionId !== '') {
         $order = $this->repo()->orderByPaymentReference('amazon_pay', $checkoutSessionId);
      }
      if (!$order || $checkoutSessionId === '') {
         return $this->page('Amazon Pay', 'Rueckkehr konnte nicht zugeordnet werden.', '<div class="alert alert-danger m-3">Die Amazon-Pay-Rueckkehr konnte keiner Bestellung zugeordnet werden.</div>', 'checkout');
      }
 
      try {
         $result = $this->amazonPay()->completeCheckoutSession($checkoutSessionId, $order);
         $httpStatus = (int)($result['_http_status'] ?? 0);
         $state = strtolower((string)($result['statusDetails']['state'] ?? ''));
         $paymentStatus = ($httpStatus === 202 || $state === 'authorizationinitiated') ? 'pending' : 'completed';
         $this->repo()->updateOrderPayment((int)$order['id'], 'amazon_pay', $paymentStatus, $checkoutSessionId, $result);
         $freshOrder = $this->repo()->orderById((int)$order['id']) ?: $order;
         $this->sendOrderMails($freshOrder);
         $this->startSession();
         $_SESSION['dbxShop_cart'] = array();
         $_SESSION['dbxShop_last_order_no'] = (string)($order['order_no'] ?? '');
         $body = '<div class="alert alert-success m-3"><strong>Amazon-Pay-Zahlung verarbeitet.</strong><br>Bestellung ' . $this->h($order['order_no'] ?? '') . ' wurde aktualisiert.</div>';
         return $this->page('Danke', 'Amazon-Pay-Zahlung wurde bestaetigt.', $body, 'orders');
      } catch (\Throwable $e) {
         $this->repo()->updateOrderPayment((int)$order['id'], 'amazon_pay', 'failed', $checkoutSessionId, array('error' => $e->getMessage()));
         return $this->page('Amazon Pay', 'Zahlung konnte nicht bestaetigt werden.', '<div class="alert alert-danger m-3">' . $this->h($e->getMessage()) . '</div>', 'checkout');
      }
   }
 
   public function amazonPayCancel(): string {
      $orderNo = (string)dbx()->get_modul_var('order_no', '', 'parameter');
      $order = $orderNo !== '' ? $this->repo()->orderByNo($orderNo) : null;
      if ($order) {
         $this->repo()->updateOrderPayment((int)$order['id'], 'amazon_pay', 'cancelled', (string)($order['payment_reference'] ?? ''), array('cancelled' => true));
      }
      return $this->page(
         'Amazon Pay abgebrochen',
         'Die Zahlung wurde nicht ausgefuehrt.',
         '<div class="alert alert-info m-3">Die Amazon-Pay-Zahlung wurde abgebrochen. Der Warenkorb bleibt erhalten.</div>',
         'checkout'
      );
   }
 
   public function orders(): string {
      $this->ensureSeed();
      $this->startSession();
      $cards = '';
      $seen = array();
      $lastOrderNo = (string)($_SESSION['dbxShop_last_order_no'] ?? '');
      if ($lastOrderNo !== '') {
         $order = $this->repo()->orderByNo($lastOrderNo);
         if (is_array($order)) {
            $cards .= $this->publicOrderCard($order);
            $seen[(string)($order['order_no'] ?? '')] = true;
         }
      }
 
      $uid = function_exists('dbx') ? (int)dbx()->user() : 0;
      foreach ($this->repo()->ordersByUid($uid, 25) as $order) {
         $orderNo = (string)($order['order_no'] ?? '');
         if ($orderNo !== '' && isset($seen[$orderNo])) {
            continue;
         }
         $cards .= $this->publicOrderCard($order);
      }
 
      if ($cards === '') {
         $cards = $this->placeholder(
            'Noch keine Bestellungen',
            'Nach einer Bestellung wird hier die letzte Bestellung angezeigt. Angemeldete Benutzer sehen hier ihre gespeicherten Bestellungen.'
         );
      } else {
         $cards = '<section class="dbx-shop-public-orders">' . $cards . '</section>';
      }
 
      return $this->page(
         'Bestellungen',
         'Ihre gespeicherten Shop-Bestellungen.',
         $cards,
         'orders'
      );
   }
 
   private function orderIsPublicAccessible(array $order): bool {
      $this->startSession();
      $orderNo = (string)($order['order_no'] ?? '');
      if ($orderNo !== '' && $orderNo === (string)($_SESSION['dbxShop_last_order_no'] ?? '')) {
         return true;
      }
      $uid = function_exists('dbx') ? (int)dbx()->user() : 0;
      return $uid > 0 && (int)($order['uid'] ?? 0) === $uid;
   }
 
   public function invoicePdf(): string {
      $this->ensureSeed();
      $this->startSession();
      $orderNo = (string)dbx()->get_modul_var('order_no', '', 'parameter');
      $order = $orderNo !== '' ? $this->repo()->orderByNo($orderNo) : null;
      if (!is_array($order) || !$this->orderIsPublicAccessible($order)) {
         return $this->page('Rechnung', 'Zugriff nicht moeglich.', '<div class="alert alert-warning m-3">Die Rechnung wurde nicht gefunden oder ist fuer diesen Benutzer nicht freigegeben.</div>', 'orders');
      }
      $order = $this->repo()->ensureOrderInvoicePdf((int)$order['id']);
      if (!is_array($order)) {
         return $this->page('Rechnung', 'PDF konnte nicht erzeugt werden.', '<div class="alert alert-danger m-3">Die Rechnungsdatei konnte nicht erzeugt werden.</div>', 'orders');
      }
      $file = $this->repo()->invoicePdfAbsolutePath($order);
      if ($file === '') {
         return $this->page('Rechnung', 'PDF konnte nicht geladen werden.', '<div class="alert alert-danger m-3">Die Rechnungsdatei ist nicht verfuegbar.</div>', 'orders');
      }
      if (!headers_sent()) {
         header('Content-Type: application/pdf');
         header('Content-Disposition: inline; filename="' . basename($file) . '"');
         header('Content-Length: ' . filesize($file));
      }
      readfile($file);
      exit;
   }
 
   private function jsonResponse(array $data, int $status = 200): string {
      if (!headers_sent()) {
         http_response_code($status);
         header('Content-Type: application/json; charset=utf-8');
      }
      return json_encode($data, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE) ?: '{}';
   }
 
   public function channelWebhook(): string {
      $channelKey = (string)dbx()->get_modul_var('channel', '', 'parameter');
      $raw = (string)file_get_contents('php://input');
      $payload = json_decode($raw, true);
      if (!is_array($payload)) {
         $payload = $_POST;
      }
 
      try {
         $channel = $this->repo()->channelByKey($channelKey);
         if (!$channel) {
            return $this->jsonResponse(array('ok' => false, 'message' => 'Channel nicht gefunden.'), 404);
         }
         if ((int)($channel['active'] ?? 0) !== 1 || (int)($channel['order_import_enabled'] ?? 0) !== 1) {
            return $this->jsonResponse(array('ok' => false, 'message' => 'Order-Import fuer diesen Channel ist nicht aktiv.'), 403);
         }
 
         $secret = (string)($channel['webhook_secret'] ?? '');
         if ($secret !== '') {
            $given = (string)($_SERVER['HTTP_X_DBX_SHOP_SECRET'] ?? $_SERVER['HTTP_X_CHANNEL_SECRET'] ?? $_GET['secret'] ?? $_POST['secret'] ?? $payload['secret'] ?? '');
            if ($given === '' || !hash_equals($secret, $given)) {
               return $this->jsonResponse(array('ok' => false, 'message' => 'Webhook-Secret ungueltig.'), 403);
            }
         }
 
         $connector = dbx()->get_include_obj('dbxShopChannelConnector', 'dbxShop');
         if (is_object($connector) && method_exists($connector, 'normalizeWebhookPayload')) {
            $payload = (array)$connector->normalizeWebhookPayload($channel, $payload);
         }
 
         $order = $this->repo()->importChannelOrder($channelKey, $payload);
         return $this->jsonResponse(array(
            'ok' => true,
            'order_no' => (string)($order['order_no'] ?? ''),
            'channel' => $channelKey,
         ));
      } catch (\Throwable $e) {
         return $this->jsonResponse(array('ok' => false, 'message' => $e->getMessage()), 400);
      }
   }
 
   public function legal(): string {
      return $this->renderCmsShopPage(
         'legal',
         'Rechtstexte',
         'AGB, Anbieterkennzeichnung, Zahlung, Versand und Datenschutz-Hinweise.',
         'legal'
      );
   }
 
   public function withdrawal(): string {
      $pages = $this->ensureShopLegalPages();
      $cid = (int)($pages['withdrawal'] ?? 0);
      $body = '';
      if ($cid > 0) {
         $renderer = dbx()->get_include_obj('dbxContentRenderer', 'dbxContent');
         $body = is_object($renderer) ? (string)$renderer->renderStatic($cid, array('template' => 'c-body1-footer')) : '';
      }
      if (trim($body) === '') {
         $body = $this->placeholder('Widerruf', 'Die CMS-Seite ist leer.');
      }
      return $this->page(
         'Widerruf',
         'Widerrufsbelehrung und Widerruf direkt senden.',
         '<div class="dbx-shop-cms-page">' . $body . '</div>' . $this->withdrawalFormHtml(),
         'withdrawal'
      );
   }
}
?>