} catch (Throwable $e) {
        error_log('BSB WEB chat cliente: ' . $e->getMessage());
        http_response_code(500);
        echo json_encode(['ok' => false, 'error' => 'Falha temporária no chat.']);
    }
    exit;
}

// Compatibilidade com envio tradicional, caso JavaScript esteja desativado.
$msg = '';
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    csrf();
    $body = trim((string)($_POST['body'] ?? ''));
    if ($body === '' || mb_strlen($body) > 2000) {
        $msg = 'Escreva uma mensagem de até 2.000 caracteres.';
    } else {
        $st = $db->prepare('INSERT INTO messages(client_id,sender_id,body) VALUES(?,?,?)');
        $st->execute([uid(), uid(), $body]);
        redirect('loginclientes.php');
    }
}
$st = $db->prepare('SELECT * FROM orders WHERE client_id=? ORDER BY id DESC');
$st->execute([uid()]);
$orders = $st->fetchAll();
$st = $db->prepare('SELECT m.id, m.body, m.created_at, u.name AS sender_name, m.sender_id FROM messages m JOIN users u ON u.id=m.sender_id WHERE m.client_id=? ORDER BY m.id DESC LIMIT 100');
$st->execute([uid()]);
$messages = array_reverse($st->fetchAll());
$lastId = $messages ? (int)end($messages)['id'] : 0;

layout('Minha área do cliente');
if ($msg) echo '<p class="notice">'.e($msg).'</p>';
echo '<section class="panel"><h2>Meus serviços e pedidos</h2>';
foreach ($orders as $o) {
    echo '<article class="order"><strong>Pedido #'.(int)$o['id'].' — '.e($o['status']).'</strong><p>'.e(items_text($o['items_json'])).'</p><small>'.e($o['created_at']).'</small></article>';
}
if (!$orders) echo '<p>Seu gestor ainda não vinculou nenhum pedido à sua conta.</p>';
echo '</section>';
echo '<section class="panel"><h2>Chat com o gestor</h2><p>As mensagens são atualizadas automaticamente.</p>';
echo '<div id="chat-messages" class="messages" role="log" aria-live="polite" style="max-height:440px;overflow-y:auto">';
foreach ($messages as $m) {
    echo '<p data-message-id="'.(int)$m['id'].'"><strong>'.e($m['sender_name']).'</strong> <small>'.e($m['created_at']).'</small><br>'.nl2br(e($m['body'])).'</p>';
}
echo '</div>';
echo '<form id="chat-form" method="post" action="loginclientes.php"><input type="hidden" name="csrf" value="'.e(token()).'"><label>Sua mensagem<textarea name="body" maxlength="2000" required></textarea></label><button type="submit">Enviar</button></form>';
echo '<p id="chat-status" role="status" style="font-size:.9rem"></p></section>';
?>
<script>
(() => {
  const box = document.getElementById('chat-messages');
  const form = document.getElementById('chat-form');
  const status = document.getElementById('chat-status');
  const button = form.querySelector('button');
  const textarea = form.querySelector('textarea[name="body"]');
  let lastId = 0;
  let busy = false;
  let sending = false;
  box.scrollTop = box.scrollHeight;

  function appendMessage(m) {
    if (box.querySelector('[data-message-id="' + Number(m.id) + '"]')) return;
    const nearBottom = box.scrollHeight - box.scrollTop - box.clientHeight < 100;
    const p = document.createElement('p');
    p.dataset.messageId = String(m.id);
    const strong = document.createElement('strong');
    strong.textContent = m.sender_name;
    const small = document.createElement('small');
    small.textContent = ' ' + m.created_at;
    p.append(strong, ' ', small, document.createElement('br'));
    const lines = String(m.body).split('\n');
    lines.forEach((line, i) => { if (i) p.append(document.createElement('br')); p.append(document.createTextNode(line)); });
    box.appendChild(p);
    lastId = Math.max(lastId, Number(m.id));
    if (nearBottom) box.scrollTop = box.scrollHeight;
  }

  async function refresh() {
    if (busy || document.hidden) return;
    busy = true;
    try {
      const res = await fetch('loginclientes.php?chat_ajax=1&after=' + lastId, {credentials: 'same-origin', cache: 'no-store'});
      if (!res.ok) throw new Error('Falha ao atualizar');
      const data = await res.json();
      if (!data.ok) throw new Error(data.error || 'Falha ao atualizar');
      data.messages.forEach(appendMessage);
      status.textContent = '';
    } catch (_) { status.textContent = 'Sem conexão com o chat. Tentando novamente...'; }
    finally { busy = false; }
  }

  form.addEventListener('submit', async (ev) => {
    ev.preventDefault();
    if (sending || !textarea.value.trim()) return;
    sending = true;
    button.disabled = true;
    status.textContent = 'Enviando...';
    try {
      const payload = new FormData(form);
      payload.append('chat_ajax', '1');
      const res = await fetch('loginclientes.php', {method: 'POST', body: payload, credentials: 'same-origin'});
      const data = await res.json();
      if (!res.ok || !data.ok) throw new Error(data.error || 'Não foi possível enviar.');
      textarea.value = '';
      status.textContent = '';
      await refresh();
    } catch (err) { status.textContent = err.message || 'Falha no envio.'; }
    finally { sending = false; button.disabled = false; textarea.focus(); }
  });
  setInterval(refresh, 2000);
  document.addEventListener('visibilitychange', () => { if (!document.hidden) refresh(); });
})();
</script>